Edit tour

Windows Analysis Report
http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58

Overview

General Information

Sample URL:	http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58
Analysis ID:	1448172
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

AI detected suspicious javascript

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5316 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5720 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5928 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58	Avira URL Cloud: detection malicious, Label: phishing
Source: http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected suspicious javascript

Source: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58

LLM: Score: 8 Reasons: The JavaScript code collects extensive device information, including battery status, hardware details, and network information, and sends it to a server. This level of data collection is typically unnecessary for most legitimate purposes and can be indicative of malicious intent, such as fingerprinting users for tracking or other nefarious activities. DOM: 0.0.pages.csv

Phishing site detected (based on image similarity)

Source: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58

Matcher: Found strong image similarity, brand: GOOGLE

Phishing site detected (based on logo match)

Source: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58

Matcher: Template: google matched

Source: https://support.google.com/accounts/answer/2917834?visit_id=638524465523040119-1819753442&p=securesignin&hl=en&rd=1	HTTP Parser: Iframe src: https://scone-pa.clients6.google.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.SCWmpDDGjPk.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA%2Fm%3D__features__#parent=https%3A%2F%2Fsupport.google.com&rpctoken=719422001
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1813423213&timestamp=1716849766785
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1813423213&timestamp=1716849766785
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: Iframe src: /_/bscframe

Source: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58

HTTP Parser: Number of links: 0

Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58	HTTP Parser: Title: Gmail does not match URL
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: Title: Gmail does not match URL

Source: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58	HTTP Parser: <input type="password" .../> found
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: <input type="password" .../> found

Source: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58	HTTP Parser: No favicon
Source: https://support.google.com/accounts/answer/2917834?visit_id=638524465523040119-1819753442&p=securesignin&hl=en&rd=1	HTTP Parser: No favicon
Source: https://support.google.com/accounts/answer/2917834?visit_id=638524465523040119-1819753442&p=securesignin&hl=en&rd=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/lifecycle/steps/signup/name?continue=https://mail.google.com/mail/&ddm=0&dsh=S771926609:1716849771969634&flowEntry=SignUp&flowName=GlifWebSignIn&hl=en&service=mail&TL=ALv_Gf8XyB1HC9hyQup9f_QNCuHUn0wxOZUHxk4swmVGPQaygByB17PF4GeebcCN	HTTP Parser: No favicon
Source: https://accounts.google.com/lifecycle/steps/signup/name?continue=https://mail.google.com/mail/&ddm=0&dsh=S771926609:1716849771969634&flowEntry=SignUp&flowName=GlifWebSignIn&hl=en&service=mail&TL=ALv_Gf8XyB1HC9hyQup9f_QNCuHUn0wxOZUHxk4swmVGPQaygByB17PF4GeebcCN	HTTP Parser: No favicon
Source: https://accounts.google.com/lifecycle/steps/signup/name?continue=https://mail.google.com/mail/&ddm=0&dsh=S771926609:1716849771969634&flowEntry=SignUp&flowName=GlifWebSignIn&hl=en&service=mail&TL=ALv_Gf8XyB1HC9hyQup9f_QNCuHUn0wxOZUHxk4swmVGPQaygByB17PF4GeebcCN	HTTP Parser: No favicon
Source: https://support.google.com/accounts/?hl=en#topic=3382296	HTTP Parser: No favicon
Source: https://support.google.com/accounts/answer/7519408?hl=en&ref_topic=7189123&sjid=11285782560994687842-EU	HTTP Parser: No favicon
Source: https://support.google.com/accounts/answer/7519408?hl=en&ref_topic=7189123&sjid=11285782560994687842-EU	HTTP Parser: No favicon
Source: https://support.google.com/accounts/answer/7519408?hl=en&ref_topic=7189123&sjid=11285782560994687842-EU	HTTP Parser: No favicon
Source: https://support.google.com/accounts#topic=3382296	HTTP Parser: No favicon
Source: https://support.google.com/accounts/answer/114129?hl=en&ref_topic=3382296&sjid=11285782560994687842-EU	HTTP Parser: No favicon
Source: https://support.google.com/accounts/answer/114129?hl=en&ref_topic=3382296&sjid=11285782560994687842-EU	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/5amGvnxGO54?rel=0&vq=hd720&start=0&cc_load_policy=1&playsinline=1&origin=https%3A%2F%2Fabout.google&enablejsapi=1&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/5amGvnxGO54?rel=0&vq=hd720&start=0&cc_load_policy=1&playsinline=1&origin=https%3A%2F%2Fabout.google&enablejsapi=1&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/KKfAuQrwzTY?rel=0&vq=hd720&start=0&cc_load_policy=1&playsinline=1&origin=https%3A%2F%2Fabout.google&enablejsapi=1&widgetid=3	HTTP Parser: No favicon

Source: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58	HTTP Parser: No <meta name="author".. found
Source: https://support.google.com/accounts/answer/2917834?visit_id=638524465523040119-1819753442&p=securesignin&hl=en&rd=1	HTTP Parser: No <meta name="author".. found
Source: https://support.google.com/accounts/answer/2917834?visit_id=638524465523040119-1819753442&p=securesignin&hl=en&rd=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: No <meta name="author".. found

Source: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58	HTTP Parser: No <meta name="copyright".. found
Source: https://support.google.com/accounts/answer/2917834?visit_id=638524465523040119-1819753442&p=securesignin&hl=en&rd=1	HTTP Parser: No <meta name="copyright".. found
Source: https://support.google.com/accounts/answer/2917834?visit_id=638524465523040119-1819753442&p=securesignin&hl=en&rd=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/recoveryidentifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&flowName=GlifWebSignIn&dsh=S-1291710182%3A1716849761840850&ddm=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2

Source:	Binary string: _.PDb=function(a,b){var c,d,e,f,g,m,p;return _.Kf(function(q){switch(q.aa){case 1:return _.Ef(q,2),_.Cf(q,IDb(a),4);case 4:return c=q.da,_.Cf(q,DDb.encrypt(b.aa()),5);case 5:return d=q.da,e=KDb(NDb(d)).rd(),f="write-verifier-"+crypto.randomUUID(),g=ODb(f),window.localStorage.setItem(c,e),window.localStorage.setItem(f,"sentinel"),_.Cf(q,g.then(function(){return!0}),6);case 6:return q.return(q.da);case 2:return m=_.Gf(q),(p=_.Ke.aa)&&_.Nk(p,m),q.return(!1)}})}; source: chromecache_387.2.dr
Source:	Binary string: QDb=function(a,b){var c,d,e;return _.Kf(function(f){if(1==f.aa)return _.Ef(f,2),_.Cf(f,_.MDb(a),4);if(2!=f.aa){var g=c=f.da\|\|new _.yZ,m=b.getPublicKey();_.Ei(g,1,m);return f.return(_.PDb(a,c))}d=_.Gf(f);(e=_.Ke.aa)&&_.Nk(e,d);return f.return(!1)})};xZ=function(a,b){var c;null==(c=zZ)\|\|c.zb(305,a,b)}; source: chromecache_387.2.dr
Source:	Binary string: hFb=function(a,b){var c,d,e;return _.Kf(function(f){if(1==f.aa)return _.Ef(f,2),_.Cf(f,_.MDb(a),4);if(2!=f.aa)return c=f.da\|\|new _.yZ,_.bi(c,XZ,2,b),f.return(_.PDb(a,c));d=_.Gf(f);(e=_.Ke.aa)&&_.Nk(e,d);return f.return(!1)})};iFb=function(a,b){b=_.zb(b);void 0!==b&&(a.action=b)};jFb=function(a){a=new _.tn(a);a.aa("&"+window.name,!0);var b=a.da.jh("parent");a.da.remove("parent");1===b.length&&(b=gadgets.rpc.getOrigin(String(b[0])),a.aa("parent",b));a.da.remove("&"+window.name);return a.toString()}; source: chromecache_387.2.dr

Source: global traffic

TCP traffic: 192.168.2.4:50218 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /vip/36c63962-0335-4720-9855-3e324d0acc58 HTTP/1.1Host: login-vip.replit.appConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vip/Gmail_files/css HTTP/1.1Host: login-vip.replit.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vip/google.png HTTP/1.1Host: login-vip.replit.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vip/avatar.png HTTP/1.1Host: login-vip.replit.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vip/Gmail_files/logo_strip_2x.png HTTP/1.1Host: login-vip.replit.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vip/images.png HTTP/1.1Host: login-vip.replit.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vip/google.png HTTP/1.1Host: login-vip.replit.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vip/avatar.png HTTP/1.1Host: login-vip.replit.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /battery_info HTTP/1.1Host: login-vip.replit.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: login-vip.replit.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /yl0EzS1GixeU9QVLJtHu7hom-4PIHwYylP17hRk9_UasgFCCc6lo6E0-ReGn8R1ny3A=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yl0EzS1GixeU9QVLJtHu7hom-4PIHwYylP17hRk9_UasgFCCc6lo6E0-ReGn8R1ny3A=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=QphGcVh1mOmlHDtuYg1zXG1ElRoQX41zjPzQBgxdoqcNeNEfx2jUSTy4EZ3q4IOFJs9Wt4Zy1pG0t4s1LaC3GZE8yHwF4nRQmG2OCPHQT6ZSISb0ZkhS8IDMTN6jQ43fWPDpYs2s2tnrpECwrRUeG_p72dvqFnCkeoUYTgVM_z5SpM64utaV
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=QphGcVh1mOmlHDtuYg1zXG1ElRoQX41zjPzQBgxdoqcNeNEfx2jUSTy4EZ3q4IOFJs9Wt4Zy1pG0t4s1LaC3GZE8yHwF4nRQmG2OCPHQT6ZSISb0ZkhS8IDMTN6jQ43fWPDpYs2s2tnrpECwrRUeG_p72dvqFnCkeoUYTgVM_z5SpM64utaV
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /support/accounts?hl=en HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w200 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72 HTTP/1.1Host: lh4.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w200 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72 HTTP/1.1Host: lh4.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /9Y5oRPNXHvhG3TpmG0PTQ8lEEAJyuDiyMLujhC4R042jzmk6NUUE-IoF7XF2F5qLhDA=w895 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /9Y5oRPNXHvhG3TpmG0PTQ8lEEAJyuDiyMLujhC4R042jzmk6NUUE-IoF7XF2F5qLhDA=w895 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://scone-pa.clients6.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://scone-pa.clients6.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /intl/en/about/products?tab=uh HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /intl/en/products?tab=uh HTTP/1.1Host: about.googleConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /products?tab=uh HTTP/1.1Host: about.googleConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /products/?tab=uh HTTP/1.1Host: about.googleConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets-products/css/index.min.css?cache=4b0a69e HTTP/1.1Host: about.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://about.google/products/?tab=uhAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /assets-products/img/glue-google-color-logo.svg HTTP/1.1Host: about.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/products/?tab=uhAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets-products/img/glue-icon-expand-more.svg HTTP/1.1Host: about.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/products/?tab=uhAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /assets-products/js/index.min.js?cache=d6b48bc HTTP/1.1Host: about.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://about.google/products/?tab=uhAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets-products/img/glue-icons.svg HTTP/1.1Host: about.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: imageReferer: https://about.google/products/?tab=uhAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets-products/img/glue-google-color-logo.svg HTTP/1.1Host: about.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets-products/img/glue-icon-expand-more.svg HTTP/1.1Host: about.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xeVlvzZX32eg9zc9V7MLUWaEeOnwoa5OQfrgI10U4ub8QA6iwdq1TgcOpLTBiKQTosiNxtMBtpOvh_z7fq7eoISf53UZqZMd0dZR0gSLAAMFkK9vVfQ?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UrtOTOQn0umKcsyJwL9X7mffZz1_SCQcB8iv25zV81lMoHfaPD03Omb14RNyN33Uxr32rsqwRgHpGkhXIVJwD2jB1NBmRUiexA_bC1ICZBYvs3Ggh2A?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3vbmf-fE3hNTz_sGEcwIXWDO025BKBEfKgf8kLwMUqsTGFJNuEsBevc5aoUDXs0LeGQuxV3I55z3JelOJRYTxKzdoTWPoueELAx2WWZ-b-XO5vK1VQ?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets-products/img/glue-icons.svg HTTP/1.1Host: about.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube HTTP/1.1Host: www.blog.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://about.googleSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xeVlvzZX32eg9zc9V7MLUWaEeOnwoa5OQfrgI10U4ub8QA6iwdq1TgcOpLTBiKQTosiNxtMBtpOvh_z7fq7eoISf53UZqZMd0dZR0gSLAAMFkK9vVfQ?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3vbmf-fE3hNTz_sGEcwIXWDO025BKBEfKgf8kLwMUqsTGFJNuEsBevc5aoUDXs0LeGQuxV3I55z3JelOJRYTxKzdoTWPoueELAx2WWZ-b-XO5vK1VQ?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /1If7OvDczdPnWNfp6LhWWjmSpreHL-7WlUojUGgr4HhdU7Cqfh2NWNlX-evRfwDNgf3ojMiKYP5DSmJ9gLKhLdXyR5Zg9JRFjke_vtbnRqAftdbh4oY=w1440-l90-sg-rj-c0xffffff HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UrtOTOQn0umKcsyJwL9X7mffZz1_SCQcB8iv25zV81lMoHfaPD03Omb14RNyN33Uxr32rsqwRgHpGkhXIVJwD2jB1NBmRUiexA_bC1ICZBYvs3Ggh2A?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FW12KWakQzfFfGUf5yZghWb6h6-6dNMOHBolWF3nYWgOQdsiTeL_BS_PSvWy_1Y4d1OoZuzXpT6ihCY2z0iT2xjEQMMIoMsh7bbmd001ICguMO4kLhA?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube HTTP/1.1Host: blog.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4Ae0zBYFQOJlGcRaDFUatVMPtUP7L-EcbwRa2p1o2tD5xISasgZmgKCgfIyMVYcsUPs5YHOUsDfy8T07EPP7mvL8h9NhmnVbRpOKq4v7jXLZ6yzVHN0q?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5aJF9xA7xUeccUjstpG7egKV6rX7m_iedrX2dzOptBB0ckf7XEK-fwp2bPtzPMlY9MmrvAKEFErirf4SHKLuUOSk8E3loYryDYOobe13o0fpPcbYL1An?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eO6nD1O47tirNw4TM76SfwotF_tP25t_TASE2l8_Gyw4xLr7ckkcg4PuEb8cxngaWwks2XZqVMT-et2ZGUU9W648mg7_hSfl6kv93uyvXvvjwCVzRXw=w1440-l90-sg-rj-c0xffffff HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /1If7OvDczdPnWNfp6LhWWjmSpreHL-7WlUojUGgr4HhdU7Cqfh2NWNlX-evRfwDNgf3ojMiKYP5DSmJ9gLKhLdXyR5Zg9JRFjke_vtbnRqAftdbh4oY=w1440-l90-sg-rj-c0xffffff HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /T0I5MC5l-PS07tq1rHrLBvedNWkFGBMKK8FuV5qsmDDAu8HqlYyZsEgDoSXrhHfsPOEWyznrzAaU5HZ_4gdeEDGT9w1wUhilKwrRTUEZk6s36xBM1uPM=w1440-l80-sg-rp HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets-products/img/glue-google-solid-logo.svg HTTP/1.1Host: about.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/products/?tab=uhAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets-products/img/glue-help.svg HTTP/1.1Host: about.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/products/?tab=uhAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube HTTP/1.1Host: blog.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /MXe6LXpT_1IP98ElixZruA0GQf1A9i-4bfeCtry1-Gej5yWbCpSfNS0HX9JEJiPamMsW5bmJ6BlU_H4SzxLeAI0EWlkwFSA-DU5MCdW4k70Twm49Qzw?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FW12KWakQzfFfGUf5yZghWb6h6-6dNMOHBolWF3nYWgOQdsiTeL_BS_PSvWy_1Y4d1OoZuzXpT6ihCY2z0iT2xjEQMMIoMsh7bbmd001ICguMO4kLhA?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /M24xvmPiIlXRQb7ReNXBDMRot0s_5GMSLkP08p5mb9s7bJYkuMcz6kFjeEhCIp6yikIZVfDrOjvgHzHxhSusOQkyC4VajtQxOHRMiazmvDLP_P3JjA?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JAHpZ2_EHeCUpdmIs4cbbahzG_fAB3drICQ6fzdVDU0bFa_Wx7Cae5JuN98SAvgfSOA4n8D2ODHsnRqwEoGqZw3KVilRloyOz8ydbrKXxSK6qdMmMUQ?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets-products/img/glue-google-solid-logo.svg HTTP/1.1Host: about.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets-products/img/glue-help.svg HTTP/1.1Host: about.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /RIuSgyC1CZvycdCvOhK6kyGWtKZwR6gN88CimyIAdew4WMYXisZeD2x5A3fOi3GETtFbnKgxw7hb_2_ERw1-ygGSCExAsemrYx79J0hRsa4SZzzxz3A?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eO6nD1O47tirNw4TM76SfwotF_tP25t_TASE2l8_Gyw4xLr7ckkcg4PuEb8cxngaWwks2XZqVMT-et2ZGUU9W648mg7_hSfl6kv93uyvXvvjwCVzRXw=w1440-l90-sg-rj-c0xffffff HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sq57GaRCOEk-TcLHr8ZeehZOkRrOLLv0ZIL34gOO2TNqeQjAcLqZM_YvwoZCLFQbW1DS0K28QakL4JTKArVVV4pp-PtTltns7K25Pu5d7v-6dRSh-g=w1440-l90-sg-rj-c0xffffff HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/client.js HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /5aJF9xA7xUeccUjstpG7egKV6rX7m_iedrX2dzOptBB0ckf7XEK-fwp2bPtzPMlY9MmrvAKEFErirf4SHKLuUOSk8E3loYryDYOobe13o0fpPcbYL1An?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4Ae0zBYFQOJlGcRaDFUatVMPtUP7L-EcbwRa2p1o2tD5xISasgZmgKCgfIyMVYcsUPs5YHOUsDfy8T07EPP7mvL8h9NhmnVbRpOKq4v7jXLZ6yzVHN0q?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QheKQlOajd_iZUvo2vtGYkrWjvhTjOuxC4YqFn9pznHDkFeHsEF3Ey4PmQtIe8eTDKyddsBy_miNYSstxPaM5q6RUp0LGWciI58mQZrWlbM1r3AtbRI?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /T0I5MC5l-PS07tq1rHrLBvedNWkFGBMKK8FuV5qsmDDAu8HqlYyZsEgDoSXrhHfsPOEWyznrzAaU5HZ_4gdeEDGT9w1wUhilKwrRTUEZk6s36xBM1uPM=w1440-l80-sg-rp HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /pWVbkjhtPTNZbVieBwoW5yp4_edEFybVMNXXAQdphReN5SvSsx3AS-0ssRnBRGbi9mFm9uTIxgrOEY0GdZLldlzaVSlJI8yprmEWEh2gnp1WCQdeMMoF?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bl7lc5NGrZQEr-cUfR-Gur5eANjLuMdaTUZP9yYxNneDJjHdzbRfd2Mfdx9L1ecDSXLbSj3kmNlkeg5pu83uUov2jx4xzHi2Akotz5lIKABiRlmJYFg?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jUoaTIlBn5ibfQcND2n5OMD6Z7xoqNj-ShHlFR6QuLffLXD5pS8V2eNg1rGlrsRrnDkoQ28O8UHzqzBQKAGY4l1CS2NQSq2SkRScK6FOjl82jppyohK- HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p4M1mK1Lbtc2tt54b6JUQUJ5U8RcwHnEAPH7_87X2NH9Rc8N9ek0Xm2BUq_wmLuOWXlylcDlZFOg4xF3aQtwsyF9frOHoqiQdWVpG-v4VO-Jb_4lIQ HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NksFVpnLFiAE4YKEh9n84ebvfznogwh0AyAUDpmpLqpBP7h791LS9RcIzWpE8XfsiR0NJiHomxV8FyVO2ccMF2VzB_L3omeUWuHu9d3LGJ4Ww6JKviev HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /MXe6LXpT_1IP98ElixZruA0GQf1A9i-4bfeCtry1-Gej5yWbCpSfNS0HX9JEJiPamMsW5bmJ6BlU_H4SzxLeAI0EWlkwFSA-DU5MCdW4k70Twm49Qzw?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /M24xvmPiIlXRQb7ReNXBDMRot0s_5GMSLkP08p5mb9s7bJYkuMcz6kFjeEhCIp6yikIZVfDrOjvgHzHxhSusOQkyC4VajtQxOHRMiazmvDLP_P3JjA?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JAHpZ2_EHeCUpdmIs4cbbahzG_fAB3drICQ6fzdVDU0bFa_Wx7Cae5JuN98SAvgfSOA4n8D2ODHsnRqwEoGqZw3KVilRloyOz8ydbrKXxSK6qdMmMUQ?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sq57GaRCOEk-TcLHr8ZeehZOkRrOLLv0ZIL34gOO2TNqeQjAcLqZM_YvwoZCLFQbW1DS0K28QakL4JTKArVVV4pp-PtTltns7K25Pu5d7v-6dRSh-g=w1440-l90-sg-rj-c0xffffff HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RIuSgyC1CZvycdCvOhK6kyGWtKZwR6gN88CimyIAdew4WMYXisZeD2x5A3fOi3GETtFbnKgxw7hb_2_ERw1-ygGSCExAsemrYx79J0hRsa4SZzzxz3A?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kQDv-46ToDkqXJ2DIlr7hKXKalQvL0NJy4oGIhNlUkxX95btXayCKNoZuaY_KT-6U8-Iz35FlDZXRd1U3bNFo99a3k0-vwIIbtEIStTKYwD_UxNkjA HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QheKQlOajd_iZUvo2vtGYkrWjvhTjOuxC4YqFn9pznHDkFeHsEF3Ey4PmQtIe8eTDKyddsBy_miNYSstxPaM5q6RUp0LGWciI58mQZrWlbM1r3AtbRI?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /PtL9QBP58JZC0A0k1u4fSn-rXbpaG52216P0l4ydM3c21L78uPPad73jY6ngd2tS-qu8Ec7jV_oxz8wK70fhBxYrffuWUGmuh-HfMyUsfUJSPQzGuCOW HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uY0DBQik6UA-8r3u940KST-4No0y-XK9SdLkA8cirg9XMg5hw43uvY04aMt_suipYETIU-g7GYZ12T1nUvefZBSpugr9xlvkvVb9L6p5EibJwYIX2A HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi5QWrjpBGqtY9zgr06lOsx3KVezooiNyD8bzJwIHK2UC1bE-RE=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3Vr1H8EL1F2w2g35zmQkqnbbqfM8e28GxuaTXxkovnYV7ldiiKJVqlnFRlIOfurcfZ7XDVJIJ5ET51yXw8_fJkXIzakq30XzVzI6Og=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WVR82wo80fHsNaPFIXDrmwaUcE6lFSxs_zHXc6Bedrglc3MA9mPkDqKFWBMvdVU3RbUEFGd3bYZjLgM21FuTEBGx9MycBQ5Sejajl3w9jgq3o7APtl8=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /pWVbkjhtPTNZbVieBwoW5yp4_edEFybVMNXXAQdphReN5SvSsx3AS-0ssRnBRGbi9mFm9uTIxgrOEY0GdZLldlzaVSlJI8yprmEWEh2gnp1WCQdeMMoF?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DaaQa-Y-b3_IAhu6SBFb2vRl8PFR5iuCLwLszc16_OTlLrEFvFF9P4CS0ui-414nG9016ul3dQD1R3mHtmMx4P1bIA-zRXuPpFN4yw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bl7lc5NGrZQEr-cUfR-Gur5eANjLuMdaTUZP9yYxNneDJjHdzbRfd2Mfdx9L1ecDSXLbSj3kmNlkeg5pu83uUov2jx4xzHi2Akotz5lIKABiRlmJYFg?=w1440 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jUoaTIlBn5ibfQcND2n5OMD6Z7xoqNj-ShHlFR6QuLffLXD5pS8V2eNg1rGlrsRrnDkoQ28O8UHzqzBQKAGY4l1CS2NQSq2SkRScK6FOjl82jppyohK- HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /X7G-hd59XdxQgAu0Pg3jUf5LoAQQqSWjyKZSk0lvDBnRdboJB3f6rLhL9PSJLNy-ONa8vUba3hHAB3dmf35jpCuWWnabyN0BBDYYoXLZf1sMNPthFg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p4M1mK1Lbtc2tt54b6JUQUJ5U8RcwHnEAPH7_87X2NH9Rc8N9ek0Xm2BUq_wmLuOWXlylcDlZFOg4xF3aQtwsyF9frOHoqiQdWVpG-v4VO-Jb_4lIQ HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NksFVpnLFiAE4YKEh9n84ebvfznogwh0AyAUDpmpLqpBP7h791LS9RcIzWpE8XfsiR0NJiHomxV8FyVO2ccMF2VzB_L3omeUWuHu9d3LGJ4Ww6JKviev HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7hNVq4eXYDqKikz_x6QUIN1x3ArrF3IzcaNWS6TQpna79BIWfNfnRviifT6hBugE7mYpKpiM7Ps7YN5XkGFmXaTyTKjiYsUoNquxGvQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PtL9QBP58JZC0A0k1u4fSn-rXbpaG52216P0l4ydM3c21L78uPPad73jY6ngd2tS-qu8Ec7jV_oxz8wK70fhBxYrffuWUGmuh-HfMyUsfUJSPQzGuCOW HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /osfLtqeBdEJUR4Rc-zmj4r5eqSd0GCJaB8wihnbgYfx_UBKhS1PMKwZlWXw6FqtjLktNqWJTcpDBMp5boZlSD2nkjeOloEA6VhJKlg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ucxl6g9AKLX3XmK7an_99LzivIJsXn5cvQdIMM_g4nNFZdULnGa4TH45WVlFu3vKd_c41R28NdjDzCEWgAwb5wjONbIPR4agLFUO1w=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /IW5qFdrQ464i6bDzhjV2xJvvGDsrvssd3hqgNC-Y0VDwnriCuvrzsftsfCEBzXg37G0QJAfGy9te8w8v2jebrajiiviDGB6_y1G2=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kQDv-46ToDkqXJ2DIlr7hKXKalQvL0NJy4oGIhNlUkxX95btXayCKNoZuaY_KT-6U8-Iz35FlDZXRd1U3bNFo99a3k0-vwIIbtEIStTKYwD_UxNkjA HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uPpZapQO32gCKWztePKdTRzpg7rCr4_40vlgIAslU9JyF135ZdGvC33DbzA2mdmOTNK6qgbu7xWfKkR9rfJUwaK20saGLsFW9yw014GdOKBVEN9zow=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ac9zapU8rN332VMysmJIaTk1Nk-3IGzqCwFS-6PwDFUFpEzEBKPTGWfIFN4BXL3eHP5s1DJP2tyh8NTS8_LjvXHzpkyZC2fu58Ov=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flHLQ2o9o8gGi2lHhT5QeZT3fC04iz-gTgOhgTDMgP9l2iiXAWFrvEiPKPGcQ1hgVNBJ2j8dpa-XpJ3rGkIUxBXh63rtfdImVnTjMA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uY0DBQik6UA-8r3u940KST-4No0y-XK9SdLkA8cirg9XMg5hw43uvY04aMt_suipYETIU-g7GYZ12T1nUvefZBSpugr9xlvkvVb9L6p5EibJwYIX2A HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi5QWrjpBGqtY9zgr06lOsx3KVezooiNyD8bzJwIHK2UC1bE-RE=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AGsg9hOAylBkWuFrfSgOt8psYWcr3b-vZcmIVk0ocwx7KAVSu--tg1ZIAUSL7nAbORTHI5eZaweHYVPMJu5ac8Xw7GP_WiCs1w60=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3Vr1H8EL1F2w2g35zmQkqnbbqfM8e28GxuaTXxkovnYV7ldiiKJVqlnFRlIOfurcfZ7XDVJIJ5ET51yXw8_fJkXIzakq30XzVzI6Og=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HWgUyUNqdsifoczBOT-DYy-hV_ldW-cwWkz3tvlY0eQysaY1ra4D1bkfE-0BVFUlk5wComQdca8g-fwiPcOhdMHoMjqiiNh2TD2b=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WVR82wo80fHsNaPFIXDrmwaUcE6lFSxs_zHXc6Bedrglc3MA9mPkDqKFWBMvdVU3RbUEFGd3bYZjLgM21FuTEBGx9MycBQ5Sejajl3w9jgq3o7APtl8=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /DaaQa-Y-b3_IAhu6SBFb2vRl8PFR5iuCLwLszc16_OTlLrEFvFF9P4CS0ui-414nG9016ul3dQD1R3mHtmMx4P1bIA-zRXuPpFN4yw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /TVNK8r0QEiNhXwfjVlziAqFcBQPkuPHKyilz6atnzslwMho1no8n4EJV30tOT0T6y3RXrmCzyiNd74HSYkJPsAk4545WWBxBZgoPxg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QuPkNiIrKnxQiue2xno3-rcRB6yg-hk6W5XISyjaY1EJ4hNq-_ZHCcYPdVDnI9E3xrQWrWX-VZI5kHRdO4C6RgvXPBvJN3s_ee9_gXR6gZrmjmXel2Su=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uzkOxzfGFGjzRx0FK6B541qcv469wNDTQf_TUu4oqH_oPUGJoajTkqHLJ9DD188Kmocg_DJg2OBf1FxyRc6MLK_gMFFRmm7n7XTreZU=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v58NX5Yjsfo7e9kmvZYz-UpgxiBwecURTpNGU7dQ9CDZLnQaxf5dKsWQDUPxO91gZX-_BGEGd-HvLLXIjrzfOQw-NrQfqlxKLEFF1g=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /X7G-hd59XdxQgAu0Pg3jUf5LoAQQqSWjyKZSk0lvDBnRdboJB3f6rLhL9PSJLNy-ONa8vUba3hHAB3dmf35jpCuWWnabyN0BBDYYoXLZf1sMNPthFg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /33fCN1bFbB2G1iGDGzlBd_BAWes-Nlv-Qt8ByRpEBU43Lu_mF6twx5kmmN4OE6Z_Gz6x7qXTStQItO4yGA0eEejKPSmSqPb-xpF-=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7hNVq4eXYDqKikz_x6QUIN1x3ArrF3IzcaNWS6TQpna79BIWfNfnRviifT6hBugE7mYpKpiM7Ps7YN5XkGFmXaTyTKjiYsUoNquxGvQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p5lVJAicHuI6Ra6jtpYimNt53JZQNCcN06a-Q4fUaNVFo3cjVisZMY_UwBTg5fv2MUkrbwbfTw70N9-bbTfejp9S8rUNadIhWiqh=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /osfLtqeBdEJUR4Rc-zmj4r5eqSd0GCJaB8wihnbgYfx_UBKhS1PMKwZlWXw6FqtjLktNqWJTcpDBMp5boZlSD2nkjeOloEA6VhJKlg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ucxl6g9AKLX3XmK7an_99LzivIJsXn5cvQdIMM_g4nNFZdULnGa4TH45WVlFu3vKd_c41R28NdjDzCEWgAwb5wjONbIPR4agLFUO1w=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IW5qFdrQ464i6bDzhjV2xJvvGDsrvssd3hqgNC-Y0VDwnriCuvrzsftsfCEBzXg37G0QJAfGy9te8w8v2jebrajiiviDGB6_y1G2=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uPpZapQO32gCKWztePKdTRzpg7rCr4_40vlgIAslU9JyF135ZdGvC33DbzA2mdmOTNK6qgbu7xWfKkR9rfJUwaK20saGLsFW9yw014GdOKBVEN9zow=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /9ks6e2i7ubrVUEkBwpoJeXTceixbWT3ppLdca04jQg6VPMqXiz6B8KEeczJhnRWmjR453_UREmwtS2jP8-yNq-pU5cEDTbEU6Nqb=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gglWI8y0x_H0LIUgCjTQp7RLHEkMVvcd5A4iH6V7BO-fqALnIaJAbVcBsfWa_3iCiK6ZdJhAyJf-dUPJfLXvIXTXXGdZxLDFY5Zbw4O0xyQRoQK_1ZU=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mK6uPlO8TKCVSU8TsniV0pOUB0SSETbAPB_QUaaJ96qbBdZwaygmzf_bWRTIHmCNKgJ2hhn86KSfEAHvHN-P2EjFWAxPd77ob_2k8ew=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /XfxlbB7Imi28_w277XeVC0u8Yngn8e1bQxhd6YK2snOdqt_uiwripgSEl5VNxgS2cJP2kf0dHv6LfSq8AG6YeJf9cpu1BE1kP36R=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ac9zapU8rN332VMysmJIaTk1Nk-3IGzqCwFS-6PwDFUFpEzEBKPTGWfIFN4BXL3eHP5s1DJP2tyh8NTS8_LjvXHzpkyZC2fu58Ov=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flHLQ2o9o8gGi2lHhT5QeZT3fC04iz-gTgOhgTDMgP9l2iiXAWFrvEiPKPGcQ1hgVNBJ2j8dpa-XpJ3rGkIUxBXh63rtfdImVnTjMA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UCUgyJDzxd1yRkMkEOgWSSoDkQAowQJ38mgljJHX9y6xODGoglnCV-6LRLsoTIY4Og4Bi3cmX5-hduZsp2vtNQyPpRGVuP-dSc_7StvSfN7FT5N8mkI=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Iyn9yCCDxgHqvjX5jMZ_looun-kL0Sk60FraoMU5-JQG2WstyK6QNzj3JguQRbvQmWqVBSoO88Oh1kGQAoXMPkIIEF0pQrvXL52XXw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AGsg9hOAylBkWuFrfSgOt8psYWcr3b-vZcmIVk0ocwx7KAVSu--tg1ZIAUSL7nAbORTHI5eZaweHYVPMJu5ac8Xw7GP_WiCs1w60=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HWgUyUNqdsifoczBOT-DYy-hV_ldW-cwWkz3tvlY0eQysaY1ra4D1bkfE-0BVFUlk5wComQdca8g-fwiPcOhdMHoMjqiiNh2TD2b=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /TVNK8r0QEiNhXwfjVlziAqFcBQPkuPHKyilz6atnzslwMho1no8n4EJV30tOT0T6y3RXrmCzyiNd74HSYkJPsAk4545WWBxBZgoPxg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QuPkNiIrKnxQiue2xno3-rcRB6yg-hk6W5XISyjaY1EJ4hNq-_ZHCcYPdVDnI9E3xrQWrWX-VZI5kHRdO4C6RgvXPBvJN3s_ee9_gXR6gZrmjmXel2Su=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://scone-pa.clients6.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /7j1-9AjGTjyFcEDU5lJw2BpZNYWNKgkxegHVv012Pm5OPBratN5ZsNVtpILRwXqE5Givogcj2VMswYdKR1dKvLvo2EQFSM0p7yTxYw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R-_6O0_uuaRmQfOGA1NNI4aj7lQBWjg-t3tpiWJqWC8xx84LL9kuIMoHj9FovIG7SCho36_AXGKT6NQi3xYZwaRcS2je7mrtyI761To=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ndBjgsc_sRzVPfSLYwGYEWLMHYbkfEMjy0u4Foa-TxNDNDi9wn_5rPcPq7ZSEJh-iO3NmYjpfowhqFxrWKyBsJZrHMwtHhqVJBsKG1ryO8N6dKmTosA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v58NX5Yjsfo7e9kmvZYz-UpgxiBwecURTpNGU7dQ9CDZLnQaxf5dKsWQDUPxO91gZX-_BGEGd-HvLLXIjrzfOQw-NrQfqlxKLEFF1g=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Qvc6rWiGG_a6LNQ7Yx5vMmve_5ku8TG7z4vmWG7VBkbcOQfOSE2BS7eBcD1NUOWTsbs9A_Vh-mJpKtsGtG_0f7sIGFy5LwhdOLRg4w=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uzkOxzfGFGjzRx0FK6B541qcv469wNDTQf_TUu4oqH_oPUGJoajTkqHLJ9DD188Kmocg_DJg2OBf1FxyRc6MLK_gMFFRmm7n7XTreZU=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1zrYQvVLwo2Mubiugujr-Gn82yOoooWQ1dyIO_ougkdqVKDU_UaL7b-i6i4JNL_7V-gRitDbpIulH5hWGdHlAxp6zoCq4fvNg2PqIvpmh0QE56eXAHA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Y1i12gHz-cP0Ir3LztFSUMijuVGSe9qetVu98aQNchjhxw9byxecnFAFfhxGFyd79tgcGpJrHjJ8S_AQmFnBqtxxDAjh81bxUMe1=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /33fCN1bFbB2G1iGDGzlBd_BAWes-Nlv-Qt8ByRpEBU43Lu_mF6twx5kmmN4OE6Z_Gz6x7qXTStQItO4yGA0eEejKPSmSqPb-xpF-=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p5lVJAicHuI6Ra6jtpYimNt53JZQNCcN06a-Q4fUaNVFo3cjVisZMY_UwBTg5fv2MUkrbwbfTw70N9-bbTfejp9S8rUNadIhWiqh=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9ks6e2i7ubrVUEkBwpoJeXTceixbWT3ppLdca04jQg6VPMqXiz6B8KEeczJhnRWmjR453_UREmwtS2jP8-yNq-pU5cEDTbEU6Nqb=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mK6uPlO8TKCVSU8TsniV0pOUB0SSETbAPB_QUaaJ96qbBdZwaygmzf_bWRTIHmCNKgJ2hhn86KSfEAHvHN-P2EjFWAxPd77ob_2k8ew=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://scone-pa.clients6.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /6nGdwtbmSCuuGF5fSCqvv0f-GOsp927ZXRFxC1NNEqlH-EwAGEqlHXN2rcarUTB7C8Tj8shbcg-9z-CO4XJGTVSaLbT5FPsq0rKET0ZIfWNsj9_f424=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6heYcmK08nJrjH3yvIin-c8kYQbqTfUs9t-8QUdkxIBcGvGMZ2HVhe2jIYrIRmWOn8qXvivlwGvVDfv9gr8r0ahcQBOqYqITNZB9T0tz_SS2bnOScJY=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zGSQ3CkZCuntNXuuiLsvHnljLEmpJD6MKKWjzuL20jMovKj8akWzk6gb0zmXZTMH6ORoD_I5UMOVT4JRUKYwA2S4ki7MQbyZ0rUIZw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gglWI8y0x_H0LIUgCjTQp7RLHEkMVvcd5A4iH6V7BO-fqALnIaJAbVcBsfWa_3iCiK6ZdJhAyJf-dUPJfLXvIXTXXGdZxLDFY5Zbw4O0xyQRoQK_1ZU=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /l7AGEV3K2ayj5g1Vb4nsrQs5WyHTr7Bl65GhPxO68pDZDsVurAbsSOTwmXnjK8qMt2gahvRxN9y3nnd1G118dLTtN5k8-j7MLD0qMl4=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /XfxlbB7Imi28_w277XeVC0u8Yngn8e1bQxhd6YK2snOdqt_uiwripgSEl5VNxgS2cJP2kf0dHv6LfSq8AG6YeJf9cpu1BE1kP36R=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9NuRdiRepVI3n1txfg7Ky2wWzB3DvXkWABXeFMSn2tzDYYkv8T_RMA9R17fWi0ziUDIDTVJx0JruCzOev37c4dkK9Wrgkeyam3pM8lI=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UCUgyJDzxd1yRkMkEOgWSSoDkQAowQJ38mgljJHX9y6xODGoglnCV-6LRLsoTIY4Og4Bi3cmX5-hduZsp2vtNQyPpRGVuP-dSc_7StvSfN7FT5N8mkI=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Iyn9yCCDxgHqvjX5jMZ_looun-kL0Sk60FraoMU5-JQG2WstyK6QNzj3JguQRbvQmWqVBSoO88Oh1kGQAoXMPkIIEF0pQrvXL52XXw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7j1-9AjGTjyFcEDU5lJw2BpZNYWNKgkxegHVv012Pm5OPBratN5ZsNVtpILRwXqE5Givogcj2VMswYdKR1dKvLvo2EQFSM0p7yTxYw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /R-_6O0_uuaRmQfOGA1NNI4aj7lQBWjg-t3tpiWJqWC8xx84LL9kuIMoHj9FovIG7SCho36_AXGKT6NQi3xYZwaRcS2je7mrtyI761To=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /ndBjgsc_sRzVPfSLYwGYEWLMHYbkfEMjy0u4Foa-TxNDNDi9wn_5rPcPq7ZSEJh-iO3NmYjpfowhqFxrWKyBsJZrHMwtHhqVJBsKG1ryO8N6dKmTosA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5CsRqfMEP1Rv-PPv9G4962lyEuvb4roSLJHJQWPbmCa51AmvynfoGfoKsKiS87QhX07xQMZAeLp8qoSy7CjVZkXJ1WapQiJkroCeJw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Qvc6rWiGG_a6LNQ7Yx5vMmve_5ku8TG7z4vmWG7VBkbcOQfOSE2BS7eBcD1NUOWTsbs9A_Vh-mJpKtsGtG_0f7sIGFy5LwhdOLRg4w=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wbRbWxRbQyojtDDUj_ITsoMZNbSAnroic0AYABmbab8qE-sgODk26wLCYUcJrqW11-I50N3GE6iTCY_Sfa7ud4vMa9fig4YdinEa9w=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /yemTWtzfavZZqaWs0_ijOcSrLtp93cAfiJA4HqGSpJNYBxe13WWQxeqV7xt7Bdf34Nug2nw2z-a4T85pXURHj8tcOPFh1-l7BvYANqrAXd7zHVQ93x0=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RwVe2Cm1EjeDmYhdTzr179G0ovq_PCxgPzQ92PO-YxTBEFTHWh0L6Ev8FFDWRgRGrE81vwn95tyg9Ey189OO4kllhhpLAMIsGFZ-UKA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /1zrYQvVLwo2Mubiugujr-Gn82yOoooWQ1dyIO_ougkdqVKDU_UaL7b-i6i4JNL_7V-gRitDbpIulH5hWGdHlAxp6zoCq4fvNg2PqIvpmh0QE56eXAHA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Y1i12gHz-cP0Ir3LztFSUMijuVGSe9qetVu98aQNchjhxw9byxecnFAFfhxGFyd79tgcGpJrHjJ8S_AQmFnBqtxxDAjh81bxUMe1=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aTWbsnyhhmgnwKeD6_8X0cdmN12iq1vC2D6dMfw2B36N5Nh73BN1e1IplijPNtzp4IUgiJRRA-4M5e2SLfTIFOfVW09DeezqPYGnXoEfNBliIP4l=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6nGdwtbmSCuuGF5fSCqvv0f-GOsp927ZXRFxC1NNEqlH-EwAGEqlHXN2rcarUTB7C8Tj8shbcg-9z-CO4XJGTVSaLbT5FPsq0rKET0ZIfWNsj9_f424=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /zGSQ3CkZCuntNXuuiLsvHnljLEmpJD6MKKWjzuL20jMovKj8akWzk6gb0zmXZTMH6ORoD_I5UMOVT4JRUKYwA2S4ki7MQbyZ0rUIZw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /vi_webp/5amGvnxGO54/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6heYcmK08nJrjH3yvIin-c8kYQbqTfUs9t-8QUdkxIBcGvGMZ2HVhe2jIYrIRmWOn8qXvivlwGvVDfv9gr8r0ahcQBOqYqITNZB9T0tz_SS2bnOScJY=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kLMr5zuHxfe-IxhnKdLp_1JkP5sl2ova0svHjQkFnV1q8X7yE6uA9p8AToT_L7xL5s5EIayVVVljNtp7BgoL69PtZ-Mf00qUbpTLfrrqXWv99tatmXI=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1bBfkvken8Lqz8NftP9_n8PmC2j6iMPUovX_c-tahFJYXo1tImjmPBU1nv1ATO_XIIh2dHUH6DMp0blUuhL7PZ7JvhZwNQ4QaiYnBsE7sGZcTDP3fLI=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9NuRdiRepVI3n1txfg7Ky2wWzB3DvXkWABXeFMSn2tzDYYkv8T_RMA9R17fWi0ziUDIDTVJx0JruCzOev37c4dkK9Wrgkeyam3pM8lI=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UqZcYFgfFclRU46MshhuCQD79idBZ8hyIe5WkQ1VLzG47w-Mgu6yGriGkL_YiYF2qau5jrufzTNwFp84tw7Lm-f9t2vQLkrECfur=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2rDk7D8NJQPiKYEA6Vzy6GvuREL2IgHNQxXW-8eiSp60CAO4V1as9hWXbLfvDP7X3p3OqS1W3kr6JithHTmpNKXryf7NYJssZUXi=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Q4UDu0hKQgAyUzO0RpJTpTKc2DyaZbU-K96JCJjqKd9_ABetMMpS6LxO6Y7Ypm2CVhCro4n4n9PTF97SlwrSjmJFaHdV-_yDr8MpX1M=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iP-z8txDr3nlls3-oUo38PkHRmEyAJ0biVE52VyF_jPV8IYzANODEi8arqixXSn27AspqpmvG-7jbouNAUB1HicnS1dh3LZ4C_WsPKVZ1ik_2CmO=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /l7AGEV3K2ayj5g1Vb4nsrQs5WyHTr7Bl65GhPxO68pDZDsVurAbsSOTwmXnjK8qMt2gahvRxN9y3nnd1G118dLTtN5k8-j7MLD0qMl4=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /vi/KKfAuQrwzTY/sddefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /viNp17XpEF-AwWwOZSj_TvgobO1CGmUUgcTtQoAG40YaYctYMoUqaRup0rTxxxfQvWw3MvhXesw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-69658807-1&cid=1670225768.1716849819&jid=124093720&gjid=1729122249&_gid=36880739.1716849821&_u=YADAAAAAAAAAACgBY~&z=1138529095 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5CsRqfMEP1Rv-PPv9G4962lyEuvb4roSLJHJQWPbmCa51AmvynfoGfoKsKiS87QhX07xQMZAeLp8qoSy7CjVZkXJ1WapQiJkroCeJw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wbRbWxRbQyojtDDUj_ITsoMZNbSAnroic0AYABmbab8qE-sgODk26wLCYUcJrqW11-I50N3GE6iTCY_Sfa7ud4vMa9fig4YdinEa9w=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RwVe2Cm1EjeDmYhdTzr179G0ovq_PCxgPzQ92PO-YxTBEFTHWh0L6Ev8FFDWRgRGrE81vwn95tyg9Ey189OO4kllhhpLAMIsGFZ-UKA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aTWbsnyhhmgnwKeD6_8X0cdmN12iq1vC2D6dMfw2B36N5Nh73BN1e1IplijPNtzp4IUgiJRRA-4M5e2SLfTIFOfVW09DeezqPYGnXoEfNBliIP4l=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/5amGvnxGO54/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3-xiN81vze40pCNon5Fg7bDiK8tDcEZdzIj5f3vyZ32265N-D-xGDg2tqu6MOfLsnf_Sej0vdNHhaTCL0b3MVtOm0hKy2jaAm_C6dbrCivif65LxVuc9=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j-XIfKqwPWybhyqkxFlF2ArD-XgPk2y41V-bjbf1l7yIm2kh1diwMAFgSFUJCwUob3LkfV_PSlpt0qsLLeVCpBCaiDZ2j5yStmaa-w=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yemTWtzfavZZqaWs0_ijOcSrLtp93cAfiJA4HqGSpJNYBxe13WWQxeqV7xt7Bdf34Nug2nw2z-a4T85pXURHj8tcOPFh1-l7BvYANqrAXd7zHVQ93x0=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/-IE9NVOjDHeKbguIKoMv97ZGvbdnRzECCJkBZGu5IKs.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /9TzWtxtT-9Vrlwa8SXTSKhfl91Ndy4hU-1uLE9-hFsVSHARAOlFEdFExVR4QCegJ-KUBTSlJm3DZY6g31sbVrUT_HfxQvX_7WgLp=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /T4GMYGBcpiDg5gCEZGSvQWbkwLHRELiaWN-BAAPD8Skd-YAEBhCxSR7_a5HjrHhqhgYDLvk7Ck_Y_R3-uM_UTA4prjTHB2ecsUG9EfjDcMyX7GxSju8=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hHWA5otDm9mYUJdAqTjo7wBWj8euY-SdEhCffO7oQzG3zpzxm-YExt1VDB8X6_5gchW_Ye3bfhOJXyOWgcUr94GtgqltKP4IxiH02O-Xzw5A1IHsxiw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kLMr5zuHxfe-IxhnKdLp_1JkP5sl2ova0svHjQkFnV1q8X7yE6uA9p8AToT_L7xL5s5EIayVVVljNtp7BgoL69PtZ-Mf00qUbpTLfrrqXWv99tatmXI=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WdC-o7ZcZL5WALPSmfUC8H4oYhlhqm1DV45CtHqV06DTRR0rE_P9JXi-J2KXLd9CTyHt_t3ehUm1o_AMltgfAGbvQDku8jsZt0kBSA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /vi/KKfAuQrwzTY/sddefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /viNp17XpEF-AwWwOZSj_TvgobO1CGmUUgcTtQoAG40YaYctYMoUqaRup0rTxxxfQvWw3MvhXesw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1bBfkvken8Lqz8NftP9_n8PmC2j6iMPUovX_c-tahFJYXo1tImjmPBU1nv1ATO_XIIh2dHUH6DMp0blUuhL7PZ7JvhZwNQ4QaiYnBsE7sGZcTDP3fLI=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2rDk7D8NJQPiKYEA6Vzy6GvuREL2IgHNQxXW-8eiSp60CAO4V1as9hWXbLfvDP7X3p3OqS1W3kr6JithHTmpNKXryf7NYJssZUXi=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UqZcYFgfFclRU46MshhuCQD79idBZ8hyIe5WkQ1VLzG47w-Mgu6yGriGkL_YiYF2qau5jrufzTNwFp84tw7Lm-f9t2vQLkrECfur=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Q4UDu0hKQgAyUzO0RpJTpTKc2DyaZbU-K96JCJjqKd9_ABetMMpS6LxO6Y7Ypm2CVhCro4n4n9PTF97SlwrSjmJFaHdV-_yDr8MpX1M=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kFIMPehGo-EHmdvvpe3j1Vnmg5tLhoqhH-PsMSw83JbPH2BmdEhF1k1tUWYYilK1gHbOEmFPJPRP93QQJ4oztVsYoOhIok78floEPg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u2XGSr0jis3w5sLeuh8UMqGHgtdqPVPi77xYhPJdMO9C41wYUue3EKPJvwp-ovAlTzt3Ux3R4Mww2HlJ31UKre8vz1Cnno-3MxvWtA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iP-z8txDr3nlls3-oUo38PkHRmEyAJ0biVE52VyF_jPV8IYzANODEi8arqixXSn27AspqpmvG-7jbouNAUB1HicnS1dh3LZ4C_WsPKVZ1ik_2CmO=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3-xiN81vze40pCNon5Fg7bDiK8tDcEZdzIj5f3vyZ32265N-D-xGDg2tqu6MOfLsnf_Sej0vdNHhaTCL0b3MVtOm0hKy2jaAm_C6dbrCivif65LxVuc9=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kroer1kpwSe3j-lIfPnE7Q3MVaCoJVF8atjdh0VtGDWCz2ulLejVsDh2k6a6VUgpUFQ8qRMHMEX7bsr2jTrLXhZR_ETbqILDf-qfkk0=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /23ispX_lvsTfMdqVu6ra84IGV85IwhGPQyogx4AOuECIOQYVFewlJ0p4XkFbUoAJXDlc4LwopHv1SNEslf1B4XCDZg0P-85zw3DQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SP5F8XlkxjIfM3uEu47BolKEBwkqWrOfyvwywHut48p0AZgedzyhcoevSaJCEBUJNXvy7dplTwI3s6dizxE1lNXFa-RkpU9nkIAmnSU=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /PVDn9Oj6dMbqqydywzGuLAPkbLwDX3Uuv1t6K8MORXFuQAVBLPNAy_yaQBc7bE-qmLHCmWThtcuwCFEwJPR_w6SDj_Um1q0FK7vC0w=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /j-XIfKqwPWybhyqkxFlF2ArD-XgPk2y41V-bjbf1l7yIm2kh1diwMAFgSFUJCwUob3LkfV_PSlpt0qsLLeVCpBCaiDZ2j5yStmaa-w=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /T4GMYGBcpiDg5gCEZGSvQWbkwLHRELiaWN-BAAPD8Skd-YAEBhCxSR7_a5HjrHhqhgYDLvk7Ck_Y_R3-uM_UTA4prjTHB2ecsUG9EfjDcMyX7GxSju8=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9TzWtxtT-9Vrlwa8SXTSKhfl91Ndy4hU-1uLE9-hFsVSHARAOlFEdFExVR4QCegJ-KUBTSlJm3DZY6g31sbVrUT_HfxQvX_7WgLp=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i7W2EWxINNLwgzMNOveR5SNQHKisftbymepppsfQEA1whmCJV0H0cauacdN-I0RfEc7Kz6PJsLAlw6zR97E1rpdxVRSGP_Y2UtFOGlQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hHWA5otDm9mYUJdAqTjo7wBWj8euY-SdEhCffO7oQzG3zpzxm-YExt1VDB8X6_5gchW_Ye3bfhOJXyOWgcUr94GtgqltKP4IxiH02O-Xzw5A1IHsxiw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cYinAwcg0UYHuljAGk0_ZbSq_FJb2iMU2TTPM0Y7ORjDNMDPH1ltJbX6573rHuHu6poQ796iQ8t3s-6PmfexI4qRBNs7ruEpWAmVeBLzeJWkFgd0ar0=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WdC-o7ZcZL5WALPSmfUC8H4oYhlhqm1DV45CtHqV06DTRR0rE_P9JXi-J2KXLd9CTyHt_t3ehUm1o_AMltgfAGbvQDku8jsZt0kBSA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kFIMPehGo-EHmdvvpe3j1Vnmg5tLhoqhH-PsMSw83JbPH2BmdEhF1k1tUWYYilK1gHbOEmFPJPRP93QQJ4oztVsYoOhIok78floEPg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tvQvvubDZ2r6Ou8zxkVzkIvddC1snCCq4xD4dhafjAJhHLDsEvHDEUms9RyVH_g-nI_8yTyeahZshZqwMV0NdHxD-K9v-Zbm4DF2vds=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /mjVS_Izc6fGAvuaT0v--gb2so5mZvAbI5EUMUB41cWB7tpy81trBCR8rIlj8NoKgPzDWGN-Hs97NlW0T9W57YJ5z9A8QQWwXUYa_Zg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aD5GNhlaU2d70gmSy5ioL1dMSUZN9cHDWPLkIBLhCsJ-BgcGUm-PD6o8XExZcx1i2iZV6PH0P8v3ceg0x7Tzd_OZ5FV0nXs5mX15sgA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vNgpLTvnDUr6-QM8s4OuuESGDXs_brbGoPR-7vfwdxQI7M4MVFV0CC_Hil4qRDSp4P66ik85fdv09jKn89kDAJVknIbd6wkl0zGQJQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u2XGSr0jis3w5sLeuh8UMqGHgtdqPVPi77xYhPJdMO9C41wYUue3EKPJvwp-ovAlTzt3Ux3R4Mww2HlJ31UKre8vz1Cnno-3MxvWtA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kroer1kpwSe3j-lIfPnE7Q3MVaCoJVF8atjdh0VtGDWCz2ulLejVsDh2k6a6VUgpUFQ8qRMHMEX7bsr2jTrLXhZR_ETbqILDf-qfkk0=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QsFLnA2p7QlFCy4Rk-TH0XoaWFilCOzzt8FPO58nI_FXh5wQkjWEMpBKMkJxQJMZio9t6kDMpniv3WrWH7Slxe8BrbMvklg-Ht53iw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /23ispX_lvsTfMdqVu6ra84IGV85IwhGPQyogx4AOuECIOQYVFewlJ0p4XkFbUoAJXDlc4LwopHv1SNEslf1B4XCDZg0P-85zw3DQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SP5F8XlkxjIfM3uEu47BolKEBwkqWrOfyvwywHut48p0AZgedzyhcoevSaJCEBUJNXvy7dplTwI3s6dizxE1lNXFa-RkpU9nkIAmnSU=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sfQ-WzgiZ1asQ0K88_k8UG53n8u4ERdLJsZI-lTyHmL_p2f4ViSo6g10vYrjn34HR6sfjZGvs6xpRncjw4PT9u9iD8tC4CTDBIT4sD4=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /PVDn9Oj6dMbqqydywzGuLAPkbLwDX3Uuv1t6K8MORXFuQAVBLPNAy_yaQBc7bE-qmLHCmWThtcuwCFEwJPR_w6SDj_Um1q0FK7vC0w=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /i7W2EWxINNLwgzMNOveR5SNQHKisftbymepppsfQEA1whmCJV0H0cauacdN-I0RfEc7Kz6PJsLAlw6zR97E1rpdxVRSGP_Y2UtFOGlQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ra4Ks1fsGsLSlzWoAU-9Ls2V5vEFCsA9thbtIkCHNFYeLC-ver57N4-GCGFZ-GBGw6uQkYPkvobF7dzM7udYmcTs4wfDTljzskEZAQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /BAwQk6jAMu2s_7Jh-8-_CsvSwEAaeLsVhL8z82VOoEkoaujxll1kYL3Pz4jkYpLbRpUA2fOZTtIppG2gXpsDoijSo1a1M5uPvke3=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /I95wjYii8vhFSSx-aSYdh2hPAMjgZkA9yjarSQoOd98COwOxkAVn_dulBcTcfbsa7Limy6IKX6G95ep6OB6y2yMLMiX0YEqFx3KQHQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /UqqZocZvjGksiGtlRkKb5NsuhpQkMLt3A85lMQ81Pms9tSZ3lLpymbAeinPIe5qUJRdmOKqL9InBBVsh6_gK-1QcNGppeUa7owoKgqo=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8bC8ZC9RQ_cJj5lSa8LjCfRClGeSyp4SkN72C0tMSUIqGPVjEpHeUDfAScLNKy82MiXWLBlkpMl4FhJGrGRDhzHxOoXq5v-QSt-rvg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cYinAwcg0UYHuljAGk0_ZbSq_FJb2iMU2TTPM0Y7ORjDNMDPH1ltJbX6573rHuHu6poQ796iQ8t3s-6PmfexI4qRBNs7ruEpWAmVeBLzeJWkFgd0ar0=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tvQvvubDZ2r6Ou8zxkVzkIvddC1snCCq4xD4dhafjAJhHLDsEvHDEUms9RyVH_g-nI_8yTyeahZshZqwMV0NdHxD-K9v-Zbm4DF2vds=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mjVS_Izc6fGAvuaT0v--gb2so5mZvAbI5EUMUB41cWB7tpy81trBCR8rIlj8NoKgPzDWGN-Hs97NlW0T9W57YJ5z9A8QQWwXUYa_Zg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /aD5GNhlaU2d70gmSy5ioL1dMSUZN9cHDWPLkIBLhCsJ-BgcGUm-PD6o8XExZcx1i2iZV6PH0P8v3ceg0x7Tzd_OZ5FV0nXs5mX15sgA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /KTDOhPuoj2uFXQzWV1UoktTwtuucLM49NAFS07-vtX8dCGhSjpxJwumzTuzI6qZyyqLdmZASs3ARnaI3gIae1MYIjaG57KsmUhit2g=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /vNgpLTvnDUr6-QM8s4OuuESGDXs_brbGoPR-7vfwdxQI7M4MVFV0CC_Hil4qRDSp4P66ik85fdv09jKn89kDAJVknIbd6wkl0zGQJQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QsFLnA2p7QlFCy4Rk-TH0XoaWFilCOzzt8FPO58nI_FXh5wQkjWEMpBKMkJxQJMZio9t6kDMpniv3WrWH7Slxe8BrbMvklg-Ht53iw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /6cr6PdE9s0J1ovFNm38uf-dwcOP--68QMWey603BCUah-QcO0gL0TvyqmTBYIgNnJfk8AEgISH_xpw_zd8FNao0jA14Q5MQ7p-eeIto=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /kSVhJx6xNAhqot_OjnzSAp8kyKtL9nW65nqObijdjYcNfqDn4bLx-1g_1h4rz0maXRwJp6K4AEDCQi8dOg_tn_Y80R3NjNXbUN6Hag=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oLcLMz42MUjK9Iv4M4YSOfBIHcxUh9dck3PN8kT8FR_z9_mUlWzyf4JHqPavPsKHJ7FR2rlGZf51vgEv1k5i0QQai4_J0ffYkIFbaJA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LteTgkerljFQFADjcuSo5-hiLDlUMnxk-QP08xyTBWi-SxZUSDbqeBS-hjK5Gbetam9PLtnpbdMbHBTpR7zBzKxrB6-c-ynRMH6yrcTKaZOVlnLvBc4=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JtYUq9HfkkOryxudgp34oqI8qFu9a6mmL64OXjcDX7mfEwcX_pxmTdurvxssofY4swTY2c_M1Kk5o1a863CGTiBZkxxuYXfjiNgz=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sfQ-WzgiZ1asQ0K88_k8UG53n8u4ERdLJsZI-lTyHmL_p2f4ViSo6g10vYrjn34HR6sfjZGvs6xpRncjw4PT9u9iD8tC4CTDBIT4sD4=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ra4Ks1fsGsLSlzWoAU-9Ls2V5vEFCsA9thbtIkCHNFYeLC-ver57N4-GCGFZ-GBGw6uQkYPkvobF7dzM7udYmcTs4wfDTljzskEZAQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BAwQk6jAMu2s_7Jh-8-_CsvSwEAaeLsVhL8z82VOoEkoaujxll1kYL3Pz4jkYpLbRpUA2fOZTtIppG2gXpsDoijSo1a1M5uPvke3=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dMQ1Q4xlLrl3-KsZvX_9v56emij4OkRxzapLM7RSuZVd7PgqfjPxKR4KY8hVHYXqP2ZkS-_ZueXb9ywW66H2oCyTglApr1ELCy3woOAviTgFP6uyAd0=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UqqZocZvjGksiGtlRkKb5NsuhpQkMLt3A85lMQ81Pms9tSZ3lLpymbAeinPIe5qUJRdmOKqL9InBBVsh6_gK-1QcNGppeUa7owoKgqo=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /I95wjYii8vhFSSx-aSYdh2hPAMjgZkA9yjarSQoOd98COwOxkAVn_dulBcTcfbsa7Limy6IKX6G95ep6OB6y2yMLMiX0YEqFx3KQHQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8bC8ZC9RQ_cJj5lSa8LjCfRClGeSyp4SkN72C0tMSUIqGPVjEpHeUDfAScLNKy82MiXWLBlkpMl4FhJGrGRDhzHxOoXq5v-QSt-rvg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /moWtYpo1G3n-1QfF5rNSy7n2IIQs785-H9DStefngR0kWMsmnPkzMu-SKH3eUxHVddekMttIA5olrn_wo3p50z04NyRZYPHYBc2cxvE=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mvJvvcvtrNc0MESF98dAx6ivasEsZNxoaUZU-Q=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HZ7MIzEUISdwHRUdOnlf9tGLcnTh0s147KiRQCELgTqsg5OdqUGbkZVlk_mCAEdDOboGRQDWQxZNdm_vBM7Oo8lgAaDzjM3wb-KB=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hDmpjNjn66Z7hyYvAee18jZfIss2NCbUss41HLkWh3s08AxT6prRWd6iv9CnofK6cXXS42OzQ_0J6UcM44xV1ouv2Tq53nCjI28DDorFDHS4RQrICw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /KTDOhPuoj2uFXQzWV1UoktTwtuucLM49NAFS07-vtX8dCGhSjpxJwumzTuzI6qZyyqLdmZASs3ARnaI3gIae1MYIjaG57KsmUhit2g=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mXJcrB99dv3D2R3626qv23yNzcp64hKW1n7cx78DQmybiBB-radVYvRguIs-lfQz1oYh72Oq_5Tk51U6fAqzzJb95vww5cyi79Wk0g=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UnRPa94dWPxyhH3faaGqaEQF5uWqRZ2zSARkm18zlnqntO3-bar_Cffb-W5CZdnE7mPWDo7RTqKFJeuMhjYz3eInIpzwiqF9Yxt3JQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6cr6PdE9s0J1ovFNm38uf-dwcOP--68QMWey603BCUah-QcO0gL0TvyqmTBYIgNnJfk8AEgISH_xpw_zd8FNao0jA14Q5MQ7p-eeIto=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI063JTgu9NvrsvRutrqHOfR5AAWduD51R8zuswV8=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2qz9gwasYkOhPEumfqd3_x8HiiRu6fIQR1d-1DRAV8qfkqmQx7Rygzohal7DXbB-urTun2B0thBnpY3BRfqXnJOm4b9QQFk3L4VK=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QFmSDvHe7MgYcFlQF_wNttnmAm4s-y-UN24oPZRoPDiOCjX60ol7yhSa_WiN-NwCmXiafElg33YH4J5wFVy_bAqzseZz1oSNtADw_A=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2EiNuo4FQe3s8dhYgEiejBxjryT3B46OTWNItLqiwF58V0T62GKHa7VrbOhI7BbnQOBvdkPFu-4YGG0Dg3b0moXWWSc_aB1hw67Kts=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oLcLMz42MUjK9Iv4M4YSOfBIHcxUh9dck3PN8kT8FR_z9_mUlWzyf4JHqPavPsKHJ7FR2rlGZf51vgEv1k5i0QQai4_J0ffYkIFbaJA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YT2zmWq_pcZPZpRn6l0i6CuvT07S0DAiBMXWbmW0HQRO47aTDzvAA_pOvYAXPxuJkm8wKcskSkY7Mcw0x0lT1ZBpKLadvSt3ClEq1Q=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kSVhJx6xNAhqot_OjnzSAp8kyKtL9nW65nqObijdjYcNfqDn4bLx-1g_1h4rz0maXRwJp6K4AEDCQi8dOg_tn_Y80R3NjNXbUN6Hag=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LteTgkerljFQFADjcuSo5-hiLDlUMnxk-QP08xyTBWi-SxZUSDbqeBS-hjK5Gbetam9PLtnpbdMbHBTpR7zBzKxrB6-c-ynRMH6yrcTKaZOVlnLvBc4=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dMQ1Q4xlLrl3-KsZvX_9v56emij4OkRxzapLM7RSuZVd7PgqfjPxKR4KY8hVHYXqP2ZkS-_ZueXb9ywW66H2oCyTglApr1ELCy3woOAviTgFP6uyAd0=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JtYUq9HfkkOryxudgp34oqI8qFu9a6mmL64OXjcDX7mfEwcX_pxmTdurvxssofY4swTY2c_M1Kk5o1a863CGTiBZkxxuYXfjiNgz=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DQ8lLDfcUJCtsTiDw6PlvD8GaNTYzhlS8sZL4_TMTOvkH3bgh0CvoxaKCEU-uvqoCUiE0Yp6nQWTeiNqYuW0v18_XRejSBRyqn2LA-c=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mvJvvcvtrNc0MESF98dAx6ivasEsZNxoaUZU-Q=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /PP8KjNgc-EqOm5a6yZ1w6mqbFzoyzLfCZcjhmRvWn6imgVjCiPj9j_MKz6jJuggsroU3293OtM1dIFgqushuz-Wrq-0-_z4AnqLkgw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d6Gf-uIYDXxTIV8n0ljiTCt1v1mU3CRmHsAyA4QUtQTYv5RvPAzPbYoa5VyfpZS4vvNOh_vYAXNnoLpHU31c8NTJZIHdUnxQyNI5F_U=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /TlJWqgqxCA0it6tZ-n8OCkn-Om5nIEy19gQd-5UXCSpECGKSBNksOSSRa-fU6-DTcvHwnqzlnKc4A5k882qcSW15NTY2PHyNJz7b=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xDakliA_6hjirY-kSiTQFdrVRcRxYDMDdVWFOQtp97xidbk-At7EwGfV7YQqzSgbpfmpBw6etaT20SIzenYlyyretLrgN1PbR7_OTos=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /moWtYpo1G3n-1QfF5rNSy7n2IIQs785-H9DStefngR0kWMsmnPkzMu-SKH3eUxHVddekMttIA5olrn_wo3p50z04NyRZYPHYBc2cxvE=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aMTzdOYbB8kBrLq-k5PesENOhnr-7qtytONnM1GOl-drEs9jvyhYJDNaN9-n_Am7rZLxE-uQnNKC0tW6w7Ea9QX5ZsgMy5mn1Il33QY=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hDmpjNjn66Z7hyYvAee18jZfIss2NCbUss41HLkWh3s08AxT6prRWd6iv9CnofK6cXXS42OzQ_0J6UcM44xV1ouv2Tq53nCjI28DDorFDHS4RQrICw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uXQAnb9kkOOscMDg_kwY2RSfnmvhEwiXPcoSYS2EV9KP7nCfwvACXo8fEuUK5AJh7Qyyr-M3CpB-51s01C0ALvx647CfjDH9xrQs=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HZ7MIzEUISdwHRUdOnlf9tGLcnTh0s147KiRQCELgTqsg5OdqUGbkZVlk_mCAEdDOboGRQDWQxZNdm_vBM7Oo8lgAaDzjM3wb-KB=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /mXJcrB99dv3D2R3626qv23yNzcp64hKW1n7cx78DQmybiBB-radVYvRguIs-lfQz1oYh72Oq_5Tk51U6fAqzzJb95vww5cyi79Wk0g=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UnRPa94dWPxyhH3faaGqaEQF5uWqRZ2zSARkm18zlnqntO3-bar_Cffb-W5CZdnE7mPWDo7RTqKFJeuMhjYz3eInIpzwiqF9Yxt3JQ=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI063JTgu9NvrsvRutrqHOfR5AAWduD51R8zuswV8=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hzvgfKA6vD6zG7BEkFYBynAz6J_l5mz8BdTD6I8KGhgpZ9UTrM26PZ569Ml1GhEpNtZ9hmiMEgdEM7UaEL-FPTrSHJ_RvqyHiiB7VA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLlieQVJNLw2RKmgpg3mMQKeaM5lTZWbOoF_dV_syPle9U7KBs-1PB--OdorbPJYFVRy5178CRGUeITtRpSRyoMyPFGjxlerox1nm5k=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RQdvv8_ORarepoEntWwvuh3M0wpyhNwlGEXbXAYv4iejDJpzh-Soq_sWCW6gS-DtGhoKCtxN3_sURCDjyOR4Cpz1dD9a1KPQLD1bBLjmoZolhyeJcr9s=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HUcJ2yilLdMblMI04h5DE1tf_0iCxgOmiu-7mpulXRJTol_vVsnrlQcs4esQq1ygtHQ4jxShVi02_aGhjOLSflnb1fMgpefkyfQbFMI=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2qz9gwasYkOhPEumfqd3_x8HiiRu6fIQR1d-1DRAV8qfkqmQx7Rygzohal7DXbB-urTun2B0thBnpY3BRfqXnJOm4b9QQFk3L4VK=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QFmSDvHe7MgYcFlQF_wNttnmAm4s-y-UN24oPZRoPDiOCjX60ol7yhSa_WiN-NwCmXiafElg33YH4J5wFVy_bAqzseZz1oSNtADw_A=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R7Wr9OkT5zk4gY2F3-tLiMwhFaMfO_hCU5LpTxztUaTOi8kU7_0QUIvOTlhHLyMol8kvHhVvdWUtjmAZ6cqiwGhwZzdg0fvc-UXtojU=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2EiNuo4FQe3s8dhYgEiejBxjryT3B46OTWNItLqiwF58V0T62GKHa7VrbOhI7BbnQOBvdkPFu-4YGG0Dg3b0moXWWSc_aB1hw67Kts=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /5WLz7CvnjBuQDDrFDsJW0EMrL-r6a-b0YUhF48zk7l4lK3yLzhBzeG3I01KIycLfE-UzXuB3MrXRCjPEE-CeWZ281MGTq-FA2BGoba8=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YT2zmWq_pcZPZpRn6l0i6CuvT07S0DAiBMXWbmW0HQRO47aTDzvAA_pOvYAXPxuJkm8wKcskSkY7Mcw0x0lT1ZBpKLadvSt3ClEq1Q=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RBo2txwfXqma-s-_9f0bqyfM5pd4RpZDMCnB8xbtENo5F2tEJGnCwhaKmg3YAGrbGCnuC4BG-zHrzuU0az-lP9kNOYfdXGeblLv34A=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DQ8lLDfcUJCtsTiDw6PlvD8GaNTYzhlS8sZL4_TMTOvkH3bgh0CvoxaKCEU-uvqoCUiE0Yp6nQWTeiNqYuW0v18_XRejSBRyqn2LA-c=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PP8KjNgc-EqOm5a6yZ1w6mqbFzoyzLfCZcjhmRvWn6imgVjCiPj9j_MKz6jJuggsroU3293OtM1dIFgqushuz-Wrq-0-_z4AnqLkgw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7_L1xfZLxnsy0kmXFl439RwH0gIAVlj_oCQYZj4NUD0PpxU23s8TDNtLGZxMAaBT1sryYuRpw-e9mo5q5nsCjeIpm_w0ep-6gbdiGw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /XuX--BV0zkkLgxF4L5fJ0A1zg1yqjZ5TRyjEyaKMg873pOoy04PFwpUeUNw9kDpeocu5Dq7LRpOU3tkXF-yg9bgjyBvHjRJ2Dl91=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j0mZxqPUZ28oopliF6vSV0okYdXUPZH__5C5_4zuI1eNoLd-JFgAFWu4oPFvxTguMH_lihh76znHXocGuTuDGVtlaryO0cLZSNPVMA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d6Gf-uIYDXxTIV8n0ljiTCt1v1mU3CRmHsAyA4QUtQTYv5RvPAzPbYoa5VyfpZS4vvNOh_vYAXNnoLpHU31c8NTJZIHdUnxQyNI5F_U=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /TlJWqgqxCA0it6tZ-n8OCkn-Om5nIEy19gQd-5UXCSpECGKSBNksOSSRa-fU6-DTcvHwnqzlnKc4A5k882qcSW15NTY2PHyNJz7b=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Pk8YenR3VOTvN9iNHAGWp3pWYZiaYMXXWUkfAjt_LMrf222t9zn815V-GfMRJ1Hjgq7l2k1KiQmxCw5d687WTfIPgwjVfGvoHaSwRDI=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xDakliA_6hjirY-kSiTQFdrVRcRxYDMDdVWFOQtp97xidbk-At7EwGfV7YQqzSgbpfmpBw6etaT20SIzenYlyyretLrgN1PbR7_OTos=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /74XPOHU13QOcbSmQ1FLoo3-PVADcFd7VvpkxBIMoJLqL0BZcjIx4bq8dULTExjuoh6vhLDgxmBiZU9UCSIGt08XMkl8HAE23jNa4jg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kM_wE3H68SPU_s7ClGAbOFWwY6UN82x0QF1LFEDlKvWVK82KEzX9b-UQfPorWw9iML0LkzZy3KEJRyj-BPL9MhMfq9kU4qHtPbADuS0=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aMTzdOYbB8kBrLq-k5PesENOhnr-7qtytONnM1GOl-drEs9jvyhYJDNaN9-n_Am7rZLxE-uQnNKC0tW6w7Ea9QX5ZsgMy5mn1Il33QY=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uXQAnb9kkOOscMDg_kwY2RSfnmvhEwiXPcoSYS2EV9KP7nCfwvACXo8fEuUK5AJh7Qyyr-M3CpB-51s01C0ALvx647CfjDH9xrQs=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hzvgfKA6vD6zG7BEkFYBynAz6J_l5mz8BdTD6I8KGhgpZ9UTrM26PZ569Ml1GhEpNtZ9hmiMEgdEM7UaEL-FPTrSHJ_RvqyHiiB7VA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Amr8tRBfd1Uk8zYm779hnSCwMzArp3LGD1LUhcgPdCOIk0UJczmdKLa42Apx-wzQdrUnsATBiFsyHT5pVit9Al6PwfVewM09FnlwAA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yVza5ypuHARE9HM428UC5saP-tI464PBXi6dLU_i81n57apWG6zIj2GHBnAGalxjdNDDD1Pd9EkoVyu-Uh1zdsfd5LcOYIb4ZKB-Ag=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /viBN3SXlX2ACEJsf7pd1Ud4Y2-YcsXer3nwbHVaJ9u8L7-R3x0BJWyQuDN22YPj9Bcv18a7qf_qU6-ciR-DE2eYv6_UHGzTi7OgWlLBs-wYATVRAar6p=w1440-l80-sg-rj-c0xffffff HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /SLlieQVJNLw2RKmgpg3mMQKeaM5lTZWbOoF_dV_syPle9U7KBs-1PB--OdorbPJYFVRy5178CRGUeITtRpSRyoMyPFGjxlerox1nm5k=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RQdvv8_ORarepoEntWwvuh3M0wpyhNwlGEXbXAYv4iejDJpzh-Soq_sWCW6gS-DtGhoKCtxN3_sURCDjyOR4Cpz1dD9a1KPQLD1bBLjmoZolhyeJcr9s=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HUcJ2yilLdMblMI04h5DE1tf_0iCxgOmiu-7mpulXRJTol_vVsnrlQcs4esQq1ygtHQ4jxShVi02_aGhjOLSflnb1fMgpefkyfQbFMI=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R7Wr9OkT5zk4gY2F3-tLiMwhFaMfO_hCU5LpTxztUaTOi8kU7_0QUIvOTlhHLyMol8kvHhVvdWUtjmAZ6cqiwGhwZzdg0fvc-UXtojU=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5WLz7CvnjBuQDDrFDsJW0EMrL-r6a-b0YUhF48zk7l4lK3yLzhBzeG3I01KIycLfE-UzXuB3MrXRCjPEE-CeWZ281MGTq-FA2BGoba8=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RBo2txwfXqma-s-_9f0bqyfM5pd4RpZDMCnB8xbtENo5F2tEJGnCwhaKmg3YAGrbGCnuC4BG-zHrzuU0az-lP9kNOYfdXGeblLv34A=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: about.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.google/products/?tab=uhAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1670225768.1716849819; _gid=GA1.2.36880739.1716849821; _gat_UA-69658807-1=1; _gat_UA-69658807-2=1; _ga_YGRLMNPG7B=GS1.1.1716849819.1.1.1716849824.0.0.0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /7_L1xfZLxnsy0kmXFl439RwH0gIAVlj_oCQYZj4NUD0PpxU23s8TDNtLGZxMAaBT1sryYuRpw-e9mo5q5nsCjeIpm_w0ep-6gbdiGw=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /XuX--BV0zkkLgxF4L5fJ0A1zg1yqjZ5TRyjEyaKMg873pOoy04PFwpUeUNw9kDpeocu5Dq7LRpOU3tkXF-yg9bgjyBvHjRJ2Dl91=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j0mZxqPUZ28oopliF6vSV0okYdXUPZH__5C5_4zuI1eNoLd-JFgAFWu4oPFvxTguMH_lihh76znHXocGuTuDGVtlaryO0cLZSNPVMA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Pk8YenR3VOTvN9iNHAGWp3pWYZiaYMXXWUkfAjt_LMrf222t9zn815V-GfMRJ1Hjgq7l2k1KiQmxCw5d687WTfIPgwjVfGvoHaSwRDI=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /74XPOHU13QOcbSmQ1FLoo3-PVADcFd7VvpkxBIMoJLqL0BZcjIx4bq8dULTExjuoh6vhLDgxmBiZU9UCSIGt08XMkl8HAE23jNa4jg=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kM_wE3H68SPU_s7ClGAbOFWwY6UN82x0QF1LFEDlKvWVK82KEzX9b-UQfPorWw9iML0LkzZy3KEJRyj-BPL9MhMfq9kU4qHtPbADuS0=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: about.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1670225768.1716849819; _gid=GA1.2.36880739.1716849821; _gat_UA-69658807-1=1; _gat_UA-69658807-2=1; _ga_YGRLMNPG7B=GS1.1.1716849819.1.1.1716849824.0.0.0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /Amr8tRBfd1Uk8zYm779hnSCwMzArp3LGD1LUhcgPdCOIk0UJczmdKLa42Apx-wzQdrUnsATBiFsyHT5pVit9Al6PwfVewM09FnlwAA=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yVza5ypuHARE9HM428UC5saP-tI464PBXi6dLU_i81n57apWG6zIj2GHBnAGalxjdNDDD1Pd9EkoVyu-Uh1zdsfd5LcOYIb4ZKB-Ag=h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /viBN3SXlX2ACEJsf7pd1Ud4Y2-YcsXer3nwbHVaJ9u8L7-R3x0BJWyQuDN22YPj9Bcv18a7qf_qU6-ciR-DE2eYv6_UHGzTi7OgWlLBs-wYATVRAar6p=w1440-l80-sg-rj-c0xffffff HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
Source: global traffic	HTTP traffic detected: GET /vip/36c63962-0335-4720-9855-3e324d0acc58 HTTP/1.1Host: login-vip.replit.appConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_330.2.dr	String found in binary or memory: href="https://www.youtube.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link" equals www.youtube.com (Youtube)
Source: chromecache_330.2.dr	String found in binary or memory: href="https://www.facebook.com/Google" equals www.facebook.com (Facebook)
Source: chromecache_330.2.dr	String found in binary or memory: href="https://www.linkedin.com/company/google" equals www.linkedin.com (Linkedin)
Source: chromecache_330.2.dr	String found in binary or memory: href="https://www.youtube.com/user/Google" equals www.youtube.com (Youtube)
Source: chromecache_330.2.dr	String found in binary or memory: data-g-cta_url="https://www.youtube.com/musicpremium"> equals www.youtube.com (Youtube)
Source: chromecache_330.2.dr	String found in binary or memory: data-g-cta_url="https://www.youtube.com/yt/about/"> equals www.youtube.com (Youtube)
Source: chromecache_330.2.dr	String found in binary or memory: href="https://www.youtube.com/musicpremium" equals www.youtube.com (Youtube)
Source: chromecache_330.2.dr	String found in binary or memory: href="https://www.youtube.com/yt/about/" equals www.youtube.com (Youtube)
Source: chromecache_330.2.dr	String found in binary or memory: data-g-cta_url="https://www.youtube.com/playlist?list=PLioTR_jPKuQ5etOIcRO9334FnOF4JsMZC" equals www.youtube.com (Youtube)
Source: chromecache_330.2.dr	String found in binary or memory: href="https://www.youtube.com/playlist?list=PLioTR_jPKuQ5etOIcRO9334FnOF4JsMZC" equals www.youtube.com (Youtube)
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: ;function Ds(){this.part="snippet,id,contentDetails,localizations,statistics";this.Ak=new qs({serverUrl:"https://www.googleapis.com/youtube/v3",serviceName:"youtubeDataApi"})} equals www.youtube.com (Youtube)
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: ;var Vpa=wa(["//www.youtube.com/player_api"]),tB=4/3,Wpa=16/9,uB={autoplay:1,cc_load_policy:1,controls:2,hl:"en",rel:0,playsinline:0};function vB(a){var b=a.Db,c=void 0===a.Dl?!1:a.Dl;a=void 0===a.playerVars?uB:a.playerVars;A.call(this,"sc.tailwind.shared.video.VideoPlayer");this.o=!1;this.ma=0;this.Db=b;this.Dl=c;this.id=this.Db.getId();this.playerVars=a;b=this.Db.mediumThumbnail.width;c=this.Db.mediumThumbnail.height;this.aspectRatio=b&&c?b/c===tB?tB:Wpa:tB;this.watch(this.Db)} equals www.youtube.com (Youtube)
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: ;var lea=wa(["//www.youtube.com/player_api"]),mea=Bo(lea),Es=[],nea=!1;function Fs(){if(!nea){window.onYouTubeIframeAPIReady=oea;var a=aq("SCRIPT");bo(a,mea);document.head.appendChild(a);nea=!0}} equals www.youtube.com (Youtube)
Source: chromecache_336.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=R.length,ka=0;ka<oa;ka++)if(!v&&c(R[ka],E.xe)){vI("https://www.youtube.com/iframe_api");v=!0;break}})}}else I(u.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,v=!1;Z.__ytl=n;Z.__ytl.D="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_336.2.dr	String found in binary or memory: Math.round(p);u["gtm.videoCurrentTime"]=Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=Db()},pd:function(){d()}}};var ic=ma(["data-gtm-yt-inspected-"]),GC=["www.youtube.com","www.youtube-nocookie.com"],HC,IC=!1; equals www.youtube.com (Youtube)
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: b.open("GET","https://www.googleapis.com/youtube/v3/videos?part=snippet%2C+id&key=AIzaSyD-4tE5aKFZYIS_IrfpCDRsgQZbv5VCJZM&id="+a.ma);b.send()} equals www.youtube.com (Youtube)
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: bb=bb.split("-")[0].toLowerCase();if(Ua===bb\|\|e.localizations&&e.localizations[a.ua])a.ma=!0;e="https://www.youtube.com/embed/"+encodeURIComponent(a.id);a.embedUrl=e}a.state=2;a.Ea(0);yp("youtube_video_model/load/success");return Pa(c,0)}Qa(c);a.state=3;a.Ea(0);yp("youtube_video_model/load/failure");Na(c)})} equals www.youtube.com (Youtube)
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)
Source: chromecache_485.2.dr	String found in binary or memory: function Y(a,b,c){this.l=this.g=this.h=null;this.i=0;this.s=!1;this.o=[];this.j=null;this.C={};if(!a)throw Error("YouTube player element ID required.");this.id=Aa(this);this.A=c;c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"===a.tagName.toLowerCase(),b.host\|\|(b.host=c?rc(a.src):"https://www.youtube.com"),this.h=new Sc(b),c\|\|(b=Wc(this,a),this.l=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.g=a,this.g.id\|\|(this.g.id="widget"+Aa(this.g)),V[this.g.id]=this,window.postMessage){this.j= equals www.youtube.com (Youtube)
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: function zB(a){if(ep())2==z().rs?window.YT&&window.YT.Player?BB(a,a.o):(Es.push(function(f){BB(this,f)}.bind(a,a.o)),Fs()):lp("//www.youtube.com/embed/"+a.ma+"/?rel=0&cc_load_policy=1&autoplay=1&hl="+window.sc_pageModel.lang); equals www.youtube.com (Youtube)
Source: chromecache_465.2.dr, chromecache_294.2.dr, chromecache_540.2.dr	String found in binary or memory: return b}EC.K="internal.enableAutoEventOnTimer";var ic=ma(["data-gtm-yt-inspected-"]),GC=["www.youtube.com","www.youtube-nocookie.com"],HC,IC=!1; equals www.youtube.com (Youtube)
Source: chromecache_502.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/bc657243\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: login-vip.replit.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: support.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: lh4.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: scone-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: about.google
Source: global traffic	DNS traffic detected: DNS query: www.blog.google
Source: global traffic	DNS traffic detected: DNS query: blog.google
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com

Source: unknown

HTTP traffic detected: POST /battery_info HTTP/1.1Host: login-vip.replit.appConnection: keep-aliveContent-Length: 707sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://login-vip.replit.appSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Origin: *Content-Length: 172Content-Security-Policy: default-src 'none'Content-Type: text/html; charset=utf-8Date: Mon, 27 May 2024 22:42:20 GMTStrict-Transport-Security: max-age=63072000; includeSubDomainsX-Content-Type-Options: nosniffX-Powered-By: ExpressVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Origin: *Content-Length: 158Content-Security-Policy: default-src 'none'Content-Type: text/html; charset=utf-8Date: Mon, 27 May 2024 22:42:20 GMTStrict-Transport-Security: max-age=63072000; includeSubDomainsX-Content-Type-Options: nosniffX-Powered-By: ExpressVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Origin: *Content-Length: 151Content-Security-Policy: default-src 'none'Content-Type: text/html; charset=utf-8Date: Mon, 27 May 2024 22:42:23 GMTStrict-Transport-Security: max-age=63072000; includeSubDomainsX-Content-Type-Options: nosniffX-Powered-By: ExpressVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Origin: *Content-Length: 150Content-Security-Policy: default-src 'none'Content-Type: text/html; charset=utf-8Date: Mon, 27 May 2024 22:42:23 GMTStrict-Transport-Security: max-age=63072000; includeSubDomainsX-Content-Type-Options: nosniffX-Powered-By: ExpressVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_259.2.dr, chromecache_340.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_598.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_492.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_357.2.dr, chromecache_414.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_510.2.dr	String found in binary or memory: http://www.google.com/support/accounts?hl=en
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: chromecache_258.2.dr	String found in binary or memory: http://www.google.com/url?sa=D&q=
Source: chromecache_330.2.dr	String found in binary or memory: https://abc.xyz/investor/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://about.google/intl/ALL_us/products/
Source: chromecache_554.2.dr	String found in binary or memory: https://account.google.com/advanced-protection/enroll/details
Source: chromecache_387.2.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_510.2.dr	String found in binary or memory: https://accounts.google.com/RecoverAccount?service=mail&continue=https%3A%2F%2Fmail.google.com%2Fmai
Source: chromecache_510.2.dr	String found in binary or memory: https://accounts.google.com/SignUp?service=mail&continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&hl=
Source: chromecache_342.2.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_510.2.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=PH&hl=en
Source: chromecache_340.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_340.2.dr, chromecache_406.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_340.2.dr, chromecache_406.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_249.2.dr, chromecache_259.2.dr, chromecache_278.2.dr, chromecache_397.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_330.2.dr	String found in binary or memory: https://admanager.google.com/home/
Source: chromecache_330.2.dr	String found in binary or memory: https://ads.google.com/home/?subid=ww-ww-et-g-aw-a-about_products_1-redlmo2
Source: chromecache_330.2.dr	String found in binary or memory: https://ads.google.com/home/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_465.2.dr, chromecache_540.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_465.2.dr, chromecache_540.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_330.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/hammerjs/2.0.8/hammer.min.js
Source: chromecache_570.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_505.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_406.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_345.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_406.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_407.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js
Source: chromecache_625.2.dr, chromecache_491.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js?onload=startup
Source: chromecache_387.2.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_330.2.dr	String found in binary or memory: https://artsandculture.google.com/?utm_medium=referral&utm_source=about.google
Source: chromecache_330.2.dr	String found in binary or memory: https://assistant.google.com/
Source: chromecache_330.2.dr	String found in binary or memory: https://assistant.google.com/business/
Source: chromecache_330.2.dr	String found in binary or memory: https://biz.waze.com/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/inside-google/doodles/
Source: chromecache_244.2.dr	String found in binary or memory: https://blog.google/outreach-initiatives/accessibility/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/outreach-initiatives/accessibility/ai-accessibility-update-gaad-2024/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/outreach-initiatives/accessibility/gaad-2024-community-partnerships/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/outreach-initiatives/education/global-accessibility-awareness-day-2024/
Source: chromecache_330.2.dr	String found in binary or memory: https://blog.google/outreach-initiatives/grow-with-google/interview-warmup/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/outreach-initiatives/public-policy/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/outreach-initiatives/public-policy/epics-proposed-remedies-are-bad-for-everyone-
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/ads-commerce/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/ads-commerce/ai-creativity-google-marketing-live/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/android-enterprise/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/android-enterprise/google-ai-on-android-at-work/
Source: chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/android/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/android/android-15-google-io-2024/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/android/android-theft-protection/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/google-pay/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/google-pay/google-pay-online-checkout-features/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/google-play/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/google-play/google-play-points-is-leveling-up-the-rewards-game/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/search/doodle-for-google-2024-state-territory-winners/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/shopping/
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://blog.google/products/shopping/google-generative-ai-marketing-features-may-2024/
Source: chromecache_330.2.dr	String found in binary or memory: https://built-in.google/cars/
Source: chromecache_330.2.dr	String found in binary or memory: https://businessmessages.google
Source: chromecache_330.2.dr	String found in binary or memory: https://careers.google.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_465.2.dr, chromecache_294.2.dr, chromecache_540.2.dr, chromecache_336.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_330.2.dr	String found in binary or memory: https://chrome.google.com/webstore/detail/google-drawings/mkaakpdehdafacodkgkpghoibnmamcme?hl=en-US
Source: chromecache_330.2.dr	String found in binary or memory: https://chromeenterprise.google
Source: chromecache_330.2.dr	String found in binary or memory: https://chromeenterprise.google/
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_259.2.dr, chromecache_278.2.dr, chromecache_397.2.dr, chromecache_407.2.dr, chromecache_340.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_406.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_330.2.dr	String found in binary or memory: https://cloud.google.com/
Source: chromecache_330.2.dr	String found in binary or memory: https://cloud.google.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_259.2.dr, chromecache_340.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: https://content-googleapis-staging.sandbox.google.com
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: https://content-googleapis-test.sandbox.google.com
Source: chromecache_259.2.dr, chromecache_278.2.dr, chromecache_397.2.dr, chromecache_407.2.dr, chromecache_340.2.dr, chromecache_406.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_330.2.dr	String found in binary or memory: https://crisisresponse.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://crisisresponse.google/?utm_source=about.google&utm_medium=referral&utm_campaign=site
Source: chromecache_259.2.dr, chromecache_340.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_259.2.dr, chromecache_278.2.dr, chromecache_397.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_259.2.dr, chromecache_340.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_259.2.dr, chromecache_340.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_330.2.dr	String found in binary or memory: https://developers.google.com/business-communications/business-messages/guides
Source: chromecache_340.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_330.2.dr	String found in binary or memory: https://developers.google.com/products/?hl=en
Source: chromecache_485.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_340.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_330.2.dr	String found in binary or memory: https://diversity.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_259.2.dr, chromecache_278.2.dr, chromecache_397.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_330.2.dr	String found in binary or memory: https://edu.google.com/workspace-for-education/classroom/
Source: chromecache_330.2.dr	String found in binary or memory: https://edu.google.com?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://enterprise.google.com/android/
Source: chromecache_330.2.dr	String found in binary or memory: https://enterprise.google.com/maps/products/mapsapi.html
Source: chromecache_330.2.dr	String found in binary or memory: https://enterprise.google.com/search/
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_330.2.dr	String found in binary or memory: https://families.google/familylink/
Source: chromecache_258.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_330.2.dr	String found in binary or memory: https://fi.google.com/about/
Source: chromecache_330.2.dr	String found in binary or memory: https://files.google.com/
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_330.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_330.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_330.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv79oQ.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvD9oS_a.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUo9-KzpRiLCAt4Unrc-xIKmCU5qE9Gh09GixI.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUo9-KzpRiLCAt4Unrc-xIKmCU5qE9Ghk9GixI.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUo9-KzpRiLCAt4Unrc-xIKmCU5qE9GiU9G.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUo9-KzpRiLCAt4Unrc-xIKmCU5qE9Gik9GixI.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUo9-KzpRiLCAt4Unrc-xIKmCU5qE9GjU9GixI.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmZjtiu7.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmdjtiu7.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmtjtiu7.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmxjtiu7.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUr9-KzpRiLCAt4Unrc-xIKmCU5qE9OMmpTsDO_PZ0.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUr9-KzpRiLCAt4Unrc-xIKmCU5qE9OMmpTtDO_.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUr9-KzpRiLCAt4Unrc-xIKmCU5qE9OMmpTtzO_PZ0.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUr9-KzpRiLCAt4Unrc-xIKmCU5qE9OMmpTujO_PZ0.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUr9-KzpRiLCAt4Unrc-xIKmCU5qE9OMmpTuzO_PZ0.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUr9-KzpRiLCAt4Unrc-xIKmCU5qE9OemxTsDO_PZ0.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUr9-KzpRiLCAt4Unrc-xIKmCU5qE9OemxTtDO_.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUr9-KzpRiLCAt4Unrc-xIKmCU5qE9OemxTtzO_PZ0.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUr9-KzpRiLCAt4Unrc-xIKmCU5qE9OemxTujO_PZ0.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUr9-KzpRiLCAt4Unrc-xIKmCU5qE9OemxTuzO_PZ0.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qER2i1dC.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2)
Source: chromecache_357.2.dr, chromecache_414.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_357.2.dr, chromecache_414.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_357.2.dr, chromecache_414.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_357.2.dr, chromecache_414.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_387.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_387.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_387.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_600.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff
Source: chromecache_212.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.wo
Source: chromecache_212.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.1.wo
Source: chromecache_212.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.10.w
Source: chromecache_212.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.2.wo
Source: chromecache_212.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.3.wo
Source: chromecache_212.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.4.wo
Source: chromecache_212.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.5.wo
Source: chromecache_212.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.6.wo
Source: chromecache_212.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.7.wo
Source: chromecache_212.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.8.wo
Source: chromecache_212.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.9.wo
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVE9eOcEg.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVFNeOcEg.woff2)
Source: chromecache_500.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVGdeOcEg.woff2)
Source: chromecache_330.2.dr	String found in binary or memory: https://gemini.google.com/
Source: chromecache_258.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_492.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_388.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/blob/3.0.2/Authors.txt
Source: chromecache_330.2.dr	String found in binary or memory: https://groups.google.com
Source: chromecache_330.2.dr	String found in binary or memory: https://grow.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://grow.google/?utm_source=gDigital&utm_medium=empro-aboutsite&utm_campaign=aboutpage&a
Source: chromecache_330.2.dr	String found in binary or memory: https://grow.google/applied-digital-skills/?utm_source=gDigital&utm_medium=empro-aboutsite&u
Source: chromecache_330.2.dr	String found in binary or memory: https://grow.google/certificates/?utm_source=gDigital&utm_medium=empro-aboutsite&utm_campaig
Source: chromecache_258.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_330.2.dr	String found in binary or memory: https://gsuite.google.com/products/chat/
Source: chromecache_330.2.dr	String found in binary or memory: https://gsuite.google.com/products/meet/
Source: chromecache_554.2.dr	String found in binary or memory: https://guidebooks.google.com
Source: chromecache_330.2.dr	String found in binary or memory: https://health.google/?utm_source=about_google&utm_medium=web&utm_content=footer
Source: chromecache_330.2.dr	String found in binary or memory: https://health.google/for-everyone/health-studies?utm_source=about_google&utm_medium=web&utm
Source: chromecache_330.2.dr	String found in binary or memory: https://home.google.com/welcome
Source: chromecache_330.2.dr	String found in binary or memory: https://instagram.com/google/
Source: chromecache_330.2.dr	String found in binary or memory: https://learndigital.withgoogle.com/digitalgarage?utm_source=Engagement&utm_medium=ep&utm_te
Source: chromecache_330.2.dr	String found in binary or memory: https://learning.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://learning.google/?utm_source=about.google&utm_medium=referral&utm_campaign=site-switc
Source: chromecache_330.2.dr	String found in binary or memory: https://lens.google.com/#
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/1If7OvDczdPnWNfp6LhWWjmSpreHL-7WlUojUGgr4HhdU7Cqfh2NWNlX-evRfwDNgf
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/1bBfkvken8Lqz8NftP9_n8PmC2j6iMPUovX_c-tahFJYXo1tImjmPBU1nv1ATO_XII
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/1zrYQvVLwo2Mubiugujr-Gn82yOoooWQ1dyIO_ougkdqVKDU_UaL7b-i6i4JNL_7V-
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/23ispX_lvsTfMdqVu6ra84IGV85IwhGPQyogx4AOuECIOQYVFewlJ0p4XkFbUoAJXD
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/2qz9gwasYkOhPEumfqd3_x8HiiRu6fIQR1d-1DRAV8qfkqmQx7Rygzohal7DXbB-ur
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/2rDk7D8NJQPiKYEA6Vzy6GvuREL2IgHNQxXW-8eiSp60CAO4V1as9hWXbLfvDP7X3p
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/3-xiN81vze40pCNon5Fg7bDiK8tDcEZdzIj5f3vyZ32265N-D-xGDg2tqu6MOfLsnf
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/33fCN1bFbB2G1iGDGzlBd_BAWes-Nlv-Qt8ByRpEBU43Lu_mF6twx5kmmN4OE6Z_Gz
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/3Vr1H8EL1F2w2g35zmQkqnbbqfM8e28GxuaTXxkovnYV7ldiiKJVqlnFRlIOfurcfZ
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/3vbmf-fE3hNTz_sGEcwIXWDO025BKBEfKgf8kLwMUqsTGFJNuEsBevc5aoUDXs0LeG
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/4Ae0zBYFQOJlGcRaDFUatVMPtUP7L-EcbwRa2p1o2tD5xISasgZmgKCgfIyMVYcsUP
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/5CsRqfMEP1Rv-PPv9G4962lyEuvb4roSLJHJQWPbmCa51AmvynfoGfoKsKiS87QhX0
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/5WLz7CvnjBuQDDrFDsJW0EMrL-r6a-b0YUhF48zk7l4lK3yLzhBzeG3I01KIycLfE-
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/5aJF9xA7xUeccUjstpG7egKV6rX7m_iedrX2dzOptBB0ckf7XEK-fwp2bPtzPMlY9M
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/6cr6PdE9s0J1ovFNm38uf-dwcOP--68QMWey603BCUah-QcO0gL0TvyqmTBYIgNnJf
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/6heYcmK08nJrjH3yvIin-c8kYQbqTfUs9t-8QUdkxIBcGvGMZ2HVhe2jIYrIRmWOn8
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/6nGdwtbmSCuuGF5fSCqvv0f-GOsp927ZXRFxC1NNEqlH-EwAGEqlHXN2rcarUTB7C8
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mv
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/74XPOHU13QOcbSmQ1FLoo3-PVADcFd7VvpkxBIMoJLqL0BZcjIx4bq8dULTExjuoh6
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/7_L1xfZLxnsy0kmXFl439RwH0gIAVlj_oCQYZj4NUD0PpxU23s8TDNtLGZxMAaBT1s
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/7hNVq4eXYDqKikz_x6QUIN1x3ArrF3IzcaNWS6TQpna79BIWfNfnRviifT6hBugE7m
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/7j1-9AjGTjyFcEDU5lJw2BpZNYWNKgkxegHVv012Pm5OPBratN5ZsNVtpILRwXqE5G
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/8bC8ZC9RQ_cJj5lSa8LjCfRClGeSyp4SkN72C0tMSUIqGPVjEpHeUDfAScLNKy82Mi
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/9NuRdiRepVI3n1txfg7Ky2wWzB3DvXkWABXeFMSn2tzDYYkv8T_RMA9R17fWi0ziUD
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/9TzWtxtT-9Vrlwa8SXTSKhfl91Ndy4hU-1uLE9-hFsVSHARAOlFEdFExVR4QCegJ-K
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/9ks6e2i7ubrVUEkBwpoJeXTceixbWT3ppLdca04jQg6VPMqXiz6B8KEeczJhnRWmjR
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/AGsg9hOAylBkWuFrfSgOt8psYWcr3b-vZcmIVk0ocwx7KAVSu--tg1ZIAUSL7nAbOR
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/Ac9zapU8rN332VMysmJIaTk1Nk-3IGzqCwFS-6PwDFUFpEzEBKPTGWfIFN4BXL3eHP
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/Amr8tRBfd1Uk8zYm779hnSCwMzArp3LGD1LUhcgPdCOIk0UJczmdKLa42Apx-wzQdr
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/BAwQk6jAMu2s_7Jh-8-_CsvSwEAaeLsVhL8z82VOoEkoaujxll1kYL3Pz4jkYpLbRp
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/DQ8lLDfcUJCtsTiDw6PlvD8GaNTYzhlS8sZL4_TMTOvkH3bgh0CvoxaKCEU-uvqoCU
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/DaaQa-Y-b3_IAhu6SBFb2vRl8PFR5iuCLwLszc16_OTlLrEFvFF9P4CS0ui-414nG9
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/FW12KWakQzfFfGUf5yZghWb6h6-6dNMOHBolWF3nYWgOQdsiTeL_BS_PSvWy_1Y4d1
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/HUcJ2yilLdMblMI04h5DE1tf_0iCxgOmiu-7mpulXRJTol_vVsnrlQcs4esQq1ygtH
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/HWgUyUNqdsifoczBOT-DYy-hV_ldW-cwWkz3tvlY0eQysaY1ra4D1bkfE-0BVFUlk5
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/HZ7MIzEUISdwHRUdOnlf9tGLcnTh0s147KiRQCELgTqsg5OdqUGbkZVlk_mCAEdDOb
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/I95wjYii8vhFSSx-aSYdh2hPAMjgZkA9yjarSQoOd98COwOxkAVn_dulBcTcfbsa7L
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/IW5qFdrQ464i6bDzhjV2xJvvGDsrvssd3hqgNC-Y0VDwnriCuvrzsftsfCEBzXg37G
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/Iyn9yCCDxgHqvjX5jMZ_looun-kL0Sk60FraoMU5-JQG2WstyK6QNzj3JguQRbvQmW
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/J7XdFMUykCDgwog4DomOtioi0cW8IrGhqlHdrxY62t0WfHDmviEO4pSF1Rm96rDJ1k
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/JAHpZ2_EHeCUpdmIs4cbbahzG_fAB3drICQ6fzdVDU0bFa_Wx7Cae5JuN98SAvgfSO
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/JtYUq9HfkkOryxudgp34oqI8qFu9a6mmL64OXjcDX7mfEwcX_pxmTdurvxssofY4sw
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/KTDOhPuoj2uFXQzWV1UoktTwtuucLM49NAFS07-vtX8dCGhSjpxJwumzTuzI6qZyyq
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/LteTgkerljFQFADjcuSo5-hiLDlUMnxk-QP08xyTBWi-SxZUSDbqeBS-hjK5Gbetam
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/M24xvmPiIlXRQb7ReNXBDMRot0s_5GMSLkP08p5mb9s7bJYkuMcz6kFjeEhCIp6yik
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/MXe6LXpT_1IP98ElixZruA0GQf1A9i-4bfeCtry1-Gej5yWbCpSfNS0HX9JEJiPamM
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/NksFVpnLFiAE4YKEh9n84ebvfznogwh0AyAUDpmpLqpBP7h791LS9RcIzWpE8XfsiR
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/PP8KjNgc-EqOm5a6yZ1w6mqbFzoyzLfCZcjhmRvWn6imgVjCiPj9j_MKz6jJuggsro
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/PVDn9Oj6dMbqqydywzGuLAPkbLwDX3Uuv1t6K8MORXFuQAVBLPNAy_yaQBc7bE-qmL
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/Pk8YenR3VOTvN9iNHAGWp3pWYZiaYMXXWUkfAjt_LMrf222t9zn815V-GfMRJ1Hjgq
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/PtL9QBP58JZC0A0k1u4fSn-rXbpaG52216P0l4ydM3c21L78uPPad73jY6ngd2tS-q
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/Q4UDu0hKQgAyUzO0RpJTpTKc2DyaZbU-K96JCJjqKd9_ABetMMpS6LxO6Y7Ypm2CVh
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/QFmSDvHe7MgYcFlQF_wNttnmAm4s-y-UN24oPZRoPDiOCjX60ol7yhSa_WiN-NwCmX
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/QheKQlOajd_iZUvo2vtGYkrWjvhTjOuxC4YqFn9pznHDkFeHsEF3Ey4PmQtIe8eTDK
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/QsFLnA2p7QlFCy4Rk-TH0XoaWFilCOzzt8FPO58nI_FXh5wQkjWEMpBKMkJxQJMZio
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/QuPkNiIrKnxQiue2xno3-rcRB6yg-hk6W5XISyjaY1EJ4hNq-_ZHCcYPdVDnI9E3xr
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/Qvc6rWiGG_a6LNQ7Yx5vMmve_5ku8TG7z4vmWG7VBkbcOQfOSE2BS7eBcD1NUOWTsb
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/R-_6O0_uuaRmQfOGA1NNI4aj7lQBWjg-t3tpiWJqWC8xx84LL9kuIMoHj9FovIG7SC
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/R7Wr9OkT5zk4gY2F3-tLiMwhFaMfO_hCU5LpTxztUaTOi8kU7_0QUIvOTlhHLyMol8
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/RBo2txwfXqma-s-_9f0bqyfM5pd4RpZDMCnB8xbtENo5F2tEJGnCwhaKmg3YAGrbGC
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/RIuSgyC1CZvycdCvOhK6kyGWtKZwR6gN88CimyIAdew4WMYXisZeD2x5A3fOi3GETt
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/RQdvv8_ORarepoEntWwvuh3M0wpyhNwlGEXbXAYv4iejDJpzh-Soq_sWCW6gS-DtGh
Source: chromecache_514.2.dr, chromecache_317.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/RwVe2Cm1EjeDmYhdTzr179G0ovq_PCxgPzQ92PO-YxTBEFTHWh0L6Ev8FFDWRgRGrE
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/SLlieQVJNLw2RKmgpg3mMQKeaM5lTZWbOoF_dV_syPle9U7KBs-1PB--OdorbPJYFV
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/SP5F8XlkxjIfM3uEu47BolKEBwkqWrOfyvwywHut48p0AZgedzyhcoevSaJCEBUJNX
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/T0I5MC5l-PS07tq1rHrLBvedNWkFGBMKK8FuV5qsmDDAu8HqlYyZsEgDoSXrhHfsPO
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/T4GMYGBcpiDg5gCEZGSvQWbkwLHRELiaWN-BAAPD8Skd-YAEBhCxSR7_a5HjrHhqhg
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/TVNK8r0QEiNhXwfjVlziAqFcBQPkuPHKyilz6atnzslwMho1no8n4EJV30tOT0T6y3
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/TlJWqgqxCA0it6tZ-n8OCkn-Om5nIEy19gQd-5UXCSpECGKSBNksOSSRa-fU6-DTcv
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/UCUgyJDzxd1yRkMkEOgWSSoDkQAowQJ38mgljJHX9y6xODGoglnCV-6LRLsoTIY4Og
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/Ucxl6g9AKLX3XmK7an_99LzivIJsXn5cvQdIMM_g4nNFZdULnGa4TH45WVlFu3vKd_
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/UnRPa94dWPxyhH3faaGqaEQF5uWqRZ2zSARkm18zlnqntO3-bar_Cffb-W5CZdnE7m
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/UqZcYFgfFclRU46MshhuCQD79idBZ8hyIe5WkQ1VLzG47w-Mgu6yGriGkL_YiYF2qa
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/UqqZocZvjGksiGtlRkKb5NsuhpQkMLt3A85lMQ81Pms9tSZ3lLpymbAeinPIe5qUJR
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/UrtOTOQn0umKcsyJwL9X7mffZz1_SCQcB8iv25zV81lMoHfaPD03Omb14RNyN33Uxr
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/WVR82wo80fHsNaPFIXDrmwaUcE6lFSxs_zHXc6Bedrglc3MA9mPkDqKFWBMvdVU3Rb
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/WdC-o7ZcZL5WALPSmfUC8H4oYhlhqm1DV45CtHqV06DTRR0rE_P9JXi-J2KXLd9CTy
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/X7G-hd59XdxQgAu0Pg3jUf5LoAQQqSWjyKZSk0lvDBnRdboJB3f6rLhL9PSJLNy-ON
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/XfxlbB7Imi28_w277XeVC0u8Yngn8e1bQxhd6YK2snOdqt_uiwripgSEl5VNxgS2cJ
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/XuX--BV0zkkLgxF4L5fJ0A1zg1yqjZ5TRyjEyaKMg873pOoy04PFwpUeUNw9kDpeoc
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/Y1i12gHz-cP0Ir3LztFSUMijuVGSe9qetVu98aQNchjhxw9byxecnFAFfhxGFyd79t
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/YT2zmWq_pcZPZpRn6l0i6CuvT07S0DAiBMXWbmW0HQRO47aTDzvAA_pOvYAXPxuJkm
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/aD5GNhlaU2d70gmSy5ioL1dMSUZN9cHDWPLkIBLhCsJ-BgcGUm-PD6o8XExZcx1i2i
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/aMTzdOYbB8kBrLq-k5PesENOhnr-7qtytONnM1GOl-drEs9jvyhYJDNaN9-n_Am7rZ
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/aTWbsnyhhmgnwKeD6_8X0cdmN12iq1vC2D6dMfw2B36N5Nh73BN1e1IplijPNtzp4I
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/bl7lc5NGrZQEr-cUfR-Gur5eANjLuMdaTUZP9yYxNneDJjHdzbRfd2Mfdx9L1ecDSX
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/cYinAwcg0UYHuljAGk0_ZbSq_FJb2iMU2TTPM0Y7ORjDNMDPH1ltJbX6573rHuHu6p
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/d6Gf-uIYDXxTIV8n0ljiTCt1v1mU3CRmHsAyA4QUtQTYv5RvPAzPbYoa5VyfpZS4vv
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/dMQ1Q4xlLrl3-KsZvX_9v56emij4OkRxzapLM7RSuZVd7PgqfjPxKR4KY8hVHYXqP2
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/eO6nD1O47tirNw4TM76SfwotF_tP25t_TASE2l8_Gyw4xLr7ckkcg4PuEb8cxngaWw
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/flHLQ2o9o8gGi2lHhT5QeZT3fC04iz-gTgOhgTDMgP9l2iiXAWFrvEiPKPGcQ1hgVN
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/gglWI8y0x_H0LIUgCjTQp7RLHEkMVvcd5A4iH6V7BO-fqALnIaJAbVcBsfWa_3iCiK
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/hDmpjNjn66Z7hyYvAee18jZfIss2NCbUss41HLkWh3s08AxT6prRWd6iv9CnofK6cX
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/hHWA5otDm9mYUJdAqTjo7wBWj8euY-SdEhCffO7oQzG3zpzxm-YExt1VDB8X6_5gch
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/hzvgfKA6vD6zG7BEkFYBynAz6J_l5mz8BdTD6I8KGhgpZ9UTrM26PZ569Ml1GhEpNt
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/i7W2EWxINNLwgzMNOveR5SNQHKisftbymepppsfQEA1whmCJV0H0cauacdN-I0RfEc
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/iP-z8txDr3nlls3-oUo38PkHRmEyAJ0biVE52VyF_jPV8IYzANODEi8arqixXSn27A
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/j-XIfKqwPWybhyqkxFlF2ArD-XgPk2y41V-bjbf1l7yIm2kh1diwMAFgSFUJCwUob3
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/j0mZxqPUZ28oopliF6vSV0okYdXUPZH__5C5_4zuI1eNoLd-JFgAFWu4oPFvxTguMH
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/jUoaTIlBn5ibfQcND2n5OMD6Z7xoqNj-ShHlFR6QuLffLXD5pS8V2eNg1rGlrsRrnD
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/kFIMPehGo-EHmdvvpe3j1Vnmg5tLhoqhH-PsMSw83JbPH2BmdEhF1k1tUWYYilK1gH
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/kLMr5zuHxfe-IxhnKdLp_1JkP5sl2ova0svHjQkFnV1q8X7yE6uA9p8AToT_L7xL5s
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/kM_wE3H68SPU_s7ClGAbOFWwY6UN82x0QF1LFEDlKvWVK82KEzX9b-UQfPorWw9iML
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/kQDv-46ToDkqXJ2DIlr7hKXKalQvL0NJy4oGIhNlUkxX95btXayCKNoZuaY_KT-6U8
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/kSVhJx6xNAhqot_OjnzSAp8kyKtL9nW65nqObijdjYcNfqDn4bLx-1g_1h4rz0maXR
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/kroer1kpwSe3j-lIfPnE7Q3MVaCoJVF8atjdh0VtGDWCz2ulLejVsDh2k6a6VUgpUF
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/l7AGEV3K2ayj5g1Vb4nsrQs5WyHTr7Bl65GhPxO68pDZDsVurAbsSOTwmXnjK8qMt2
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/mK6uPlO8TKCVSU8TsniV0pOUB0SSETbAPB_QUaaJ96qbBdZwaygmzf_bWRTIHmCNKg
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/mXJcrB99dv3D2R3626qv23yNzcp64hKW1n7cx78DQmybiBB-radVYvRguIs-lfQz1o
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/mjVS_Izc6fGAvuaT0v--gb2so5mZvAbI5EUMUB41cWB7tpy81trBCR8rIlj8NoKgPz
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/moWtYpo1G3n-1QfF5rNSy7n2IIQs785-H9DStefngR0kWMsmnPkzMu-SKH3eUxHVdd
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/ndBjgsc_sRzVPfSLYwGYEWLMHYbkfEMjy0u4Foa-TxNDNDi9wn_5rPcPq7ZSEJh-iO
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/oLcLMz42MUjK9Iv4M4YSOfBIHcxUh9dck3PN8kT8FR_z9_mUlWzyf4JHqPavPsKHJ7
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/osfLtqeBdEJUR4Rc-zmj4r5eqSd0GCJaB8wihnbgYfx_UBKhS1PMKwZlWXw6FqtjLk
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/p2EiNuo4FQe3s8dhYgEiejBxjryT3B46OTWNItLqiwF58V0T62GKHa7VrbOhI7BbnQ
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/p4M1mK1Lbtc2tt54b6JUQUJ5U8RcwHnEAPH7_87X2NH9Rc8N9ek0Xm2BUq_wmLuOWX
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/p5lVJAicHuI6Ra6jtpYimNt53JZQNCcN06a-Q4fUaNVFo3cjVisZMY_UwBTg5fv2MU
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/pWVbkjhtPTNZbVieBwoW5yp4_edEFybVMNXXAQdphReN5SvSsx3AS-0ssRnBRGbi9m
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/ra4Ks1fsGsLSlzWoAU-9Ls2V5vEFCsA9thbtIkCHNFYeLC-ver57N4-GCGFZ-GBGw6
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/sfQ-WzgiZ1asQ0K88_k8UG53n8u4ERdLJsZI-lTyHmL_p2f4ViSo6g10vYrjn34HR6
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/sq57GaRCOEk-TcLHr8ZeehZOkRrOLLv0ZIL34gOO2TNqeQjAcLqZM_YvwoZCLFQbW1
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI06
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/tvQvvubDZ2r6Ou8zxkVzkIvddC1snCCq4xD4dhafjAJhHLDsEvHDEUms9RyVH_g-nI
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/u2XGSr0jis3w5sLeuh8UMqGHgtdqPVPi77xYhPJdMO9C41wYUue3EKPJvwp-ovAlTz
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/uPpZapQO32gCKWztePKdTRzpg7rCr4_40vlgIAslU9JyF135ZdGvC33DbzA2mdmOTN
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/uXQAnb9kkOOscMDg_kwY2RSfnmvhEwiXPcoSYS2EV9KP7nCfwvACXo8fEuUK5AJh7Q
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/uY0DBQik6UA-8r3u940KST-4No0y-XK9SdLkA8cirg9XMg5hw43uvY04aMt_suipYE
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/uzkOxzfGFGjzRx0FK6B541qcv469wNDTQf_TUu4oqH_oPUGJoajTkqHLJ9DD188Kmo
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/v58NX5Yjsfo7e9kmvZYz-UpgxiBwecURTpNGU7dQ9CDZLnQaxf5dKsWQDUPxO91gZX
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/vNgpLTvnDUr6-QM8s4OuuESGDXs_brbGoPR-7vfwdxQI7M4MVFV0CC_Hil4qRDSp4P
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/viBN3SXlX2ACEJsf7pd1Ud4Y2-YcsXer3nwbHVaJ9u8L7-R3x0BJWyQuDN22YPj9Bc
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/wbRbWxRbQyojtDDUj_ITsoMZNbSAnroic0AYABmbab8qE-sgODk26wLCYUcJrqW11-
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/xDakliA_6hjirY-kSiTQFdrVRcRxYDMDdVWFOQtp97xidbk-At7EwGfV7YQqzSgbpf
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/xeVlvzZX32eg9zc9V7MLUWaEeOnwoa5OQfrgI10U4ub8QA6iwdq1TgcOpLTBiKQTos
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/yVza5ypuHARE9HM428UC5saP-tI464PBXi6dLU_i81n57apWG6zIj2GHBnAGalxjdN
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/yemTWtzfavZZqaWs0_ijOcSrLtp93cAfiJA4HqGSpJNYBxe13WWQxeqV7xt7Bdf34N
Source: chromecache_330.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/zGSQ3CkZCuntNXuuiLsvHnljLEmpJD6MKKWjzuL20jMovKj8akWzk6gb0zmXZTMH6O
Source: chromecache_514.2.dr, chromecache_317.2.dr	String found in binary or memory: https://lh4.ggpht.com/WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72
Source: chromecache_330.2.dr	String found in binary or memory: https://marketingplatform.google.com/
Source: chromecache_330.2.dr	String found in binary or memory: https://messages.google.com/
Source: chromecache_514.2.dr, chromecache_317.2.dr	String found in binary or memory: https://moltron-pa.clients6.google.com
Source: chromecache_489.2.dr	String found in binary or memory: https://myaccount.google.com/activitycontrols
Source: chromecache_258.2.dr, chromecache_554.2.dr	String found in binary or memory: https://myaccount.google.com/privacypolicy?hl=
Source: chromecache_330.2.dr	String found in binary or memory: https://news.google.com/
Source: chromecache_330.2.dr	String found in binary or memory: https://one.google.com/about?utm_source=google_about&utm_medium=web&utm_campaign=products
Source: chromecache_540.2.dr, chromecache_336.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_465.2.dr, chromecache_294.2.dr, chromecache_540.2.dr, chromecache_336.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_330.2.dr	String found in binary or memory: https://pay.google.com/about/
Source: chromecache_406.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_330.2.dr	String found in binary or memory: https://pixel.google/business/
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_330.2.dr	String found in binary or memory: https://play.google.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_317.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_330.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2
Source: chromecache_330.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.google.android.apps.books&e=-EnableAppDetailsP
Source: chromecache_330.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.google.android.apps.fitness&hl=en
Source: chromecache_330.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.google.android.contacts#_ga=2.64729958.83130407.15
Source: chromecache_330.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.google.android.inputmethod.latin
Source: chromecache_330.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.google.android.play.games&hl=en
Source: chromecache_330.2.dr	String found in binary or memory: https://play.google.com/store?hl=en
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_397.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_249.2.dr, chromecache_259.2.dr, chromecache_278.2.dr, chromecache_397.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_330.2.dr	String found in binary or memory: https://policies.google.com/privacy?utm_source=about&utm_medium=referral&utm_campaign=footer
Source: chromecache_489.2.dr	String found in binary or memory: https://policies.google.com/terms/generative-ai
Source: chromecache_258.2.dr, chromecache_554.2.dr	String found in binary or memory: https://policies.google.com/terms?hl=
Source: chromecache_330.2.dr	String found in binary or memory: https://policies.google.com/terms?utm_source=about&utm_medium=referral&utm_campaign=footer-l
Source: chromecache_330.2.dr	String found in binary or memory: https://publicpolicy.google/
Source: chromecache_330.2.dr	String found in binary or memory: https://safety.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://safety.google/?utm_source=about.google&utm_medium=referral&utm_campaign=site-switche
Source: chromecache_514.2.dr, chromecache_317.2.dr	String found in binary or memory: https://safety.google/security-privacy/
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_330.2.dr	String found in binary or memory: https://scholar.google.com/intl/en-US/scholar/about.html
Source: chromecache_258.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_388.2.dr	String found in binary or memory: https://scottjehl.github.io/picturefill/
Source: chromecache_330.2.dr	String found in binary or memory: https://shopping.google.com/?nord=1?utm_source=about&utm_medium=referral&utm_campaign=footer
Source: chromecache_330.2.dr	String found in binary or memory: https://shopping.google.com/u/0/
Source: chromecache_330.2.dr	String found in binary or memory: https://sites.google.com/new
Source: chromecache_330.2.dr	String found in binary or memory: https://smallbusiness.withgoogle.com/?utm_source=about&utm_medium=referral&utm_campaign=foot
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_darkmode_v1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_v1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_259.2.dr, chromecache_340.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_v1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/phone_ready_chapter.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/phone_ready_chapter_dark.svg
Source: chromecache_203.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_203.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_203.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_203.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_203.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_203.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_203.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_203.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_203.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_203.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_203.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_203.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/get_family_link_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/get_family_link_dark_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_fork_who_will_use_dark_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_fork_who_will_use_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_0.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_0.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_0.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_0.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/alreadyinstalledfamilylink.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/alreadyinstalledfamilylink_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/installfamilylink.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/installfamilylink_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_258.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_465.2.dr, chromecache_540.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_570.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/0._Blog_header_Oe8lecY.png
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/Android_Talks_AI_Blog_Hero_
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/EDU____CM_-_Global_Accessib
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/GAAD_keybanner_C_v05.png
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/GML2024_0520_104414-7851_AL
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/GRID_Banner_Gradient.PNG
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/GettyImages-1408041303.jpg
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/GooglePlayPoints_BlogCover_
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/Theft_blog_hero_image_thumb
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/google_pay_checkout.png
Source: chromecache_497.2.dr, chromecache_244.2.dr	String found in binary or memory: https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/mascots-g-16x9-v02_aJfUAiF.
Source: chromecache_330.2.dr	String found in binary or memory: https://store.google.com/
Source: chromecache_330.2.dr	String found in binary or memory: https://store.google.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://store.google.com/category/connected_home
Source: chromecache_330.2.dr	String found in binary or memory: https://store.google.com/category/phones
Source: chromecache_330.2.dr	String found in binary or memory: https://store.google.com/product/chromecast
Source: chromecache_330.2.dr	String found in binary or memory: https://store.google.com/product/nest_wifi
Source: chromecache_330.2.dr	String found in binary or memory: https://store.google.com/product/pixel_buds
Source: chromecache_330.2.dr	String found in binary or memory: https://store.google.com/product/pixelbook_go
Source: chromecache_330.2.dr	String found in binary or memory: https://store.google.com/regionpicker/
Source: chromecache_330.2.dr	String found in binary or memory: https://store.google.com/us/category/phones?hl=en-US
Source: chromecache_489.2.dr	String found in binary or memory: https://support.apple.com/kb/ph21413
Source: chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_330.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_330.2.dr	String found in binary or memory: https://support.google.com/?hl=en/?utm_source=about&utm_medium=referral&utm_campaign=footer-
Source: chromecache_330.2.dr	String found in binary or memory: https://support.google.com/accessibility/answer/7641084?hl=en&ref_topic=9071908
Source: chromecache_514.2.dr, chromecache_317.2.dr	String found in binary or memory: https://support.google.com/accounts/
Source: chromecache_510.2.dr	String found in binary or memory: https://support.google.com/accounts/?p=securesignin&hl=en
Source: chromecache_554.2.dr	String found in binary or memory: https://support.google.com/accounts/answer/2917834?visit_id
Source: chromecache_489.2.dr	String found in binary or memory: https://support.google.com/accounts/answer/2917834?visit_id=638524465523040119-1819753442&p=secu
Source: chromecache_554.2.dr	String found in binary or memory: https://support.google.com/accounts/answer/7519408?hl=en&ref_topic=7189123&sjid=112857825609
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_514.2.dr, chromecache_317.2.dr	String found in binary or memory: https://support.google.com/accounts?p=learningcenter_7
Source: chromecache_387.2.dr, chromecache_481.2.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: https://support.google.com/communities/answer/7424249
Source: chromecache_489.2.dr	String found in binary or memory: https://support.google.com/communities/answer/7425194
Source: chromecache_489.2.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history
Source: chromecache_330.2.dr	String found in binary or memory: https://sustainability.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://sustainability.google/?utm_source=about.google&utm_medium=referral&utm_campaign=site
Source: chromecache_330.2.dr	String found in binary or memory: https://sustainability.google/progress/?utm_source=about&utm_medium=referral&utm_campaign=fo
Source: chromecache_570.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_465.2.dr, chromecache_294.2.dr, chromecache_540.2.dr, chromecache_336.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_258.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_330.2.dr	String found in binary or memory: https://translate.google.com/about
Source: chromecache_330.2.dr	String found in binary or memory: https://transparency.google
Source: chromecache_330.2.dr	String found in binary or memory: https://transparencyreport.google.com/?utm_source=about&utm_medium=referral&utm_campaign=foo
Source: chromecache_330.2.dr	String found in binary or memory: https://tv.google/
Source: chromecache_330.2.dr	String found in binary or memory: https://tv.youtube.com?utm_source=gaboutpage&utm_medium=youtubetv&utm_campaign=gabout
Source: chromecache_330.2.dr	String found in binary or memory: https://twitter.com/google
Source: chromecache_345.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_330.2.dr	String found in binary or memory: https://voice.google.com/
Source: chromecache_330.2.dr	String found in binary or memory: https://wallet.google/
Source: chromecache_330.2.dr	String found in binary or memory: https://wearos.google.com/
Source: chromecache_330.2.dr	String found in binary or memory: https://wearos.google.com/?utm_source=aboutgoogle&utm_medium=owned&utm_campaign=betoces
Source: chromecache_330.2.dr	String found in binary or memory: https://wellbeing.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://workspace.google.com/
Source: chromecache_249.2.dr, chromecache_259.2.dr, chromecache_278.2.dr, chromecache_397.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_330.2.dr	String found in binary or memory: https://workspace.google.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://www.android.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://www.android.com/android-15-games
Source: chromecache_330.2.dr	String found in binary or memory: https://www.android.com/auto/?utm_source=aboutgoogle&utm_medium=owned&utm_campaign=betoces
Source: chromecache_330.2.dr	String found in binary or memory: https://www.android.com/intl/en_us/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.android.com/intl/en_us/auto/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.android.com/phones/?utm_source=aboutgoogle&utm_medium=owned&utm_campaign=betoces
Source: chromecache_330.2.dr	String found in binary or memory: https://www.android.com/play-protect/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.android.com/tablets/?utm_source=aboutgoogle&utm_medium=owned&utm_campaign=betoce
Source: chromecache_330.2.dr	String found in binary or memory: https://www.android.com/tv/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.blog.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://www.blog.google/?utm_source=about.google&utm_medium=referral&utm_campaign=nav-the-ke
Source: chromecache_330.2.dr	String found in binary or memory: https://www.blog.google/press/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://www.blog.google/products/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.blogger.com/features
Source: chromecache_330.2.dr	String found in binary or memory: https://www.gmail.com/intl/en_us/mail/help/about.html
Source: chromecache_514.2.dr, chromecache_294.2.dr, chromecache_336.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_570.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_570.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_570.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.co.in/edu/expeditions/
Source: chromecache_540.2.dr, chromecache_336.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/accessibility/?utm_source=about&utm_medium=referral&utm_campaign=foot
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: https://www.google.com/accounts/TOS
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/admob/?utm_source=internal&utm_medium=et&utm_term=goo.gl%2FPZaclC&amp
Source: chromecache_570.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/adsense/start/?utm_source=internal&utm_medium=et&utm_campaign=app_swi
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/alerts
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/analytics/?utm_medium=referral-internal&utm_source=google-products&ut
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/business/?gmbsrc=ww-ww-et-gs-z-gmb-s-z-h~pro-z-u&ppsrc=GMBB0&utm_camp
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/calendar/about/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/cast/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/chrome/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/chrome/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/chromebook/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/docs/about/?utm_source=gaboutpage&utm_medium=docslink&utm_campaign=ga
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/drive/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/earth/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/finance
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/flights
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/fonts
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/forms/about/?utm_source=gaboutpage&utm_medium=formslink&utm_campaign=
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/gmail/about/?utm_source=about&utm_medium=referral&utm_campaign=footer
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/inputtools/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/keep/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/maps/about/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/maps/about/?utm_source=about&utm_medium=referral&utm_campaign=footer-
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/photos/about
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/photos/about/?utm_source=about&utm_medium=referral&utm_campaign=foote
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&render=explicit&onload=
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/retail/local-inventory-ads/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/retail/merchant-center/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/retail/shopping-campaigns/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/retail/solutions/manufacturer-center/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/search/about/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/sheets/about/?utm_source=gaboutpage&utm_medium=sheetslink&utm_campaig
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/slides/about/?utm_source=gaboutpage&utm_medium=slideslink&utm_campaig
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/tagmanager/
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/travel/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/trends/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/webdesigner/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.com/webmasters/tools/home?hl=en
Source: chromecache_330.2.dr	String found in binary or memory: https://www.google.org/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_465.2.dr, chromecache_294.2.dr, chromecache_540.2.dr, chromecache_336.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_340.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_397.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_397.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3/videos?part=snippet%2C
Source: chromecache_465.2.dr, chromecache_294.2.dr, chromecache_540.2.dr, chromecache_336.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_570.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN
Source: chromecache_330.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_330.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-WQZB4J
Source: chromecache_222.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_203.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_381.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_357.2.dr, chromecache_414.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_330.2.dr	String found in binary or memory: https://www.gstatic.com/glue/cookienotificationbar/cookienotificationbar.min.css
Source: chromecache_330.2.dr	String found in binary or memory: https://www.gstatic.com/glue/cookienotificationbar/cookienotificationbar.min.js
Source: chromecache_330.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googleg/2x/googleg_standard_color_120dp.png
Source: chromecache_387.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_258.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_24dp.png
Source: chromecache_387.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_387.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_387.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_387.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_387.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_357.2.dr, chromecache_414.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_357.2.dr, chromecache_414.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_489.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_258.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/google_white_24dp.png
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_317.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_330.2.dr	String found in binary or memory: https://www.linkedin.com/company/google
Source: chromecache_465.2.dr, chromecache_540.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_330.2.dr	String found in binary or memory: https://www.waze.com/
Source: chromecache_485.2.dr, chromecache_502.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_330.2.dr	String found in binary or memory: https://www.youtube.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link
Source: chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_336.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_330.2.dr	String found in binary or memory: https://www.youtube.com/musicpremium
Source: chromecache_330.2.dr	String found in binary or memory: https://www.youtube.com/playlist?list=PLioTR_jPKuQ5etOIcRO9334FnOF4JsMZC
Source: chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1
Source: chromecache_330.2.dr	String found in binary or memory: https://www.youtube.com/user/Google
Source: chromecache_330.2.dr	String found in binary or memory: https://www.youtube.com/yt/about/
Source: chromecache_330.2.dr	String found in binary or memory: https://youtube-global.blogspot.com/2015/02/youtube-kids.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50518
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50527
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50529
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50521
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50530
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50532
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 50527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50495
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 50375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 50491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@31/716@90/31

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5720 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5928 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5720 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5928 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5928 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: _.PDb=function(a,b){var c,d,e,f,g,m,p;return _.Kf(function(q){switch(q.aa){case 1:return _.Ef(q,2),_.Cf(q,IDb(a),4);case 4:return c=q.da,_.Cf(q,DDb.encrypt(b.aa()),5);case 5:return d=q.da,e=KDb(NDb(d)).rd(),f="write-verifier-"+crypto.randomUUID(),g=ODb(f),window.localStorage.setItem(c,e),window.localStorage.setItem(f,"sentinel"),_.Cf(q,g.then(function(){return!0}),6);case 6:return q.return(q.da);case 2:return m=_.Gf(q),(p=_.Ke.aa)&&_.Nk(p,m),q.return(!1)}})}; source: chromecache_387.2.dr
Source:	Binary string: QDb=function(a,b){var c,d,e;return _.Kf(function(f){if(1==f.aa)return _.Ef(f,2),_.Cf(f,_.MDb(a),4);if(2!=f.aa){var g=c=f.da\|\|new _.yZ,m=b.getPublicKey();_.Ei(g,1,m);return f.return(_.PDb(a,c))}d=_.Gf(f);(e=_.Ke.aa)&&_.Nk(e,d);return f.return(!1)})};xZ=function(a,b){var c;null==(c=zZ)\|\|c.zb(305,a,b)}; source: chromecache_387.2.dr
Source:	Binary string: hFb=function(a,b){var c,d,e;return _.Kf(function(f){if(1==f.aa)return _.Ef(f,2),_.Cf(f,_.MDb(a),4);if(2!=f.aa)return c=f.da\|\|new _.yZ,_.bi(c,XZ,2,b),f.return(_.PDb(a,c));d=_.Gf(f);(e=_.Ke.aa)&&_.Nk(e,d);return f.return(!1)})};iFb=function(a,b){b=_.zb(b);void 0!==b&&(a.action=b)};jFb=function(a){a=new _.tn(a);a.aa("&"+window.name,!0);var b=a.da.jh("parent");a.da.remove("parent");1===b.length&&(b=gadgets.rpc.getOrigin(String(b[0])),a.aa("parent",b));a.da.remove("&"+window.name);return a.toString()}; source: chromecache_387.2.dr

Source: chromecache_392.2.dr

Binary or memory string: pr9qemuvHnRE/Y1GLVnqmJfrOMHGOI4dubnvMR2WtaY/WSen5Xa2m0ZaVvH52/z2Vr+Dc0ebMW+x

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58	100%	Avira URL Cloud	phishing
http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://apis.google.com/js/googleapis.proxy.js?onload=startup	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://lh3.googleusercontent.com/dMQ1Q4xlLrl3-KsZvX_9v56emij4OkRxzapLM7RSuZVd7PgqfjPxKR4KY8hVHYXqP2ZkS-_ZueXb9ywW66H2oCyTglApr1ELCy3woOAviTgFP6uyAd0=h120	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://policies.google.com/privacy?utm_source=about&utm_medium=referral&utm_campaign=footer	0%	URL Reputation	safe
https://lh3.googleusercontent.com/RIuSgyC1CZvycdCvOhK6kyGWtKZwR6gN88CimyIAdew4WMYXisZeD2x5A3fOi3GETtFbnKgxw7hb_2_ERw1-ygGSCExAsemrYx79J0hRsa4SZzzxz3A?=w1440	0%	URL Reputation	safe
https://lh3.googleusercontent.com/NksFVpnLFiAE4YKEh9n84ebvfznogwh0AyAUDpmpLqpBP7h791LS9RcIzWpE8XfsiR0NJiHomxV8FyVO2ccMF2VzB_L3omeUWuHu9d3LGJ4Ww6JKviev	0%	URL Reputation	safe
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://lh3.googleusercontent.com/4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi5QWrjpBGqtY9zgr06lOsx3KVezooiNyD8bzJwIHK2UC1bE-RE=h120	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://safety.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link	0%	URL Reputation	safe
https://pay.google.com/gp/v/widget/save	0%	URL Reputation	safe
https://store.google.com/us/category/phones?hl=en-US	0%	URL Reputation	safe
https://lh3.googleusercontent.com/kQDv-46ToDkqXJ2DIlr7hKXKalQvL0NJy4oGIhNlUkxX95btXayCKNoZuaY_KT-6U8-Iz35FlDZXRd1U3bNFo99a3k0-vwIIbtEIStTKYwD_UxNkjA	0%	URL Reputation	safe
https://content-googleapis-test.sandbox.google.com	0%	URL Reputation	safe
https://pay.google.com/about/	0%	URL Reputation	safe
https://lh3.googleusercontent.com/RwVe2Cm1EjeDmYhdTzr179G0ovq_PCxgPzQ92PO-YxTBEFTHWh0L6Ev8FFDWRgRGrE81vwn95tyg9Ey189OO4kllhhpLAMIsGFZ-UKA=h120	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://about.google/assets-products/img/glue-icons.svg	0%	URL Reputation	safe
https://www.youtube.com/subscribe_embed?usegapi=1	0%	URL Reputation	safe
https://lh3.googleusercontent.com/XfxlbB7Imi28_w277XeVC0u8Yngn8e1bQxhd6YK2snOdqt_uiwripgSEl5VNxgS2cJP2kf0dHv6LfSq8AG6YeJf9cpu1BE1kP36R=h120	0%	URL Reputation	safe
https://lh3.googleusercontent.com/moWtYpo1G3n-1QfF5rNSy7n2IIQs785-H9DStefngR0kWMsmnPkzMu-SKH3eUxHVddekMttIA5olrn_wo3p50z04NyRZYPHYBc2cxvE=h120	0%	URL Reputation	safe
https://shopping.google.com/?nord=1?utm_source=about&utm_medium=referral&utm_campaign=footer	0%	URL Reputation	safe
https://lh3.googleusercontent.com/xeVlvzZX32eg9zc9V7MLUWaEeOnwoa5OQfrgI10U4ub8QA6iwdq1TgcOpLTBiKQTosiNxtMBtpOvh_z7fq7eoISf53UZqZMd0dZR0gSLAAMFkK9vVfQ?=w1440	0%	URL Reputation	safe
https://lh3.googleusercontent.com/Amr8tRBfd1Uk8zYm779hnSCwMzArp3LGD1LUhcgPdCOIk0UJczmdKLa42Apx-wzQdrUnsATBiFsyHT5pVit9Al6PwfVewM09FnlwAA=h120	0%	URL Reputation	safe
https://content-googleapis-staging.sandbox.google.com	0%	URL Reputation	safe
https://lh3.googleusercontent.com/6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mvJvvcvtrNc0MESF98dAx6ivasEsZNxoaUZU-Q=h120	0%	URL Reputation	safe
https://lh3.googleusercontent.com/sq57GaRCOEk-TcLHr8ZeehZOkRrOLLv0ZIL34gOO2TNqeQjAcLqZM_YvwoZCLFQbW1DS0K28QakL4JTKArVVV4pp-PtTltns7K25Pu5d7v-6dRSh-g=w1440-l90-sg-rj-c0xffffff	0%	URL Reputation	safe
https://lh3.googleusercontent.com/p2EiNuo4FQe3s8dhYgEiejBxjryT3B46OTWNItLqiwF58V0T62GKHa7VrbOhI7BbnQOBvdkPFu-4YGG0Dg3b0moXWWSc_aB1hw67Kts=h120	0%	URL Reputation	safe
https://lh3.googleusercontent.com/R7Wr9OkT5zk4gY2F3-tLiMwhFaMfO_hCU5LpTxztUaTOi8kU7_0QUIvOTlhHLyMol8kvHhVvdWUtjmAZ6cqiwGhwZzdg0fvc-UXtojU=h120	0%	URL Reputation	safe
https://careers.google.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link	0%	URL Reputation	safe
https://lh3.googleusercontent.com/Qvc6rWiGG_a6LNQ7Yx5vMmve_5ku8TG7z4vmWG7VBkbcOQfOSE2BS7eBcD1NUOWTsb	0%	Avira URL Cloud	safe
https://blog.google/products/shopping/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/5CsRqfMEP1Rv-PPv9G4962lyEuvb4roSLJHJQWPbmCa51AmvynfoGfoKsKiS87QhX07xQMZAeLp8qoSy7CjVZkXJ1WapQiJkroCeJw=h120	0%	URL Reputation	safe
https://lh3.googleusercontent.com/T4GMYGBcpiDg5gCEZGSvQWbkwLHRELiaWN-BAAPD8Skd-YAEBhCxSR7_a5HjrHhqhg	0%	Avira URL Cloud	safe
https://about.google/assets-products/img/glue-google-color-logo.svg	0%	URL Reputation	safe
https://lh3.googleusercontent.com/LteTgkerljFQFADjcuSo5-hiLDlUMnxk-QP08xyTBWi-SxZUSDbqeBS-hjK5Gbetam	0%	Avira URL Cloud	safe
https://blog.google/api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube	0%	URL Reputation	safe
https://lh3.googleusercontent.com/9NuRdiRepVI3n1txfg7Ky2wWzB3DvXkWABXeFMSn2tzDYYkv8T_RMA9R17fWi0ziUD	0%	Avira URL Cloud	safe
https://grow.google/applied-digital-skills/?utm_source=gDigital&utm_medium=empro-aboutsite&u	0%	Avira URL Cloud	safe
https://developers.google.com/youtube/iframe_api_reference#Events	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://www.google.com/retail/shopping-campaigns/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/I95wjYii8vhFSSx-aSYdh2hPAMjgZkA9yjarSQoOd98COwOxkAVn_dulBcTcfbsa7L	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/WVR82wo80fHsNaPFIXDrmwaUcE6lFSxs_zHXc6Bedrglc3MA9mPkDqKFWBMvdVU3Rb	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/QuPkNiIrKnxQiue2xno3-rcRB6yg-hk6W5XISyjaY1EJ4hNq-_ZHCcYPdVDnI9E3xr	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/5WLz7CvnjBuQDDrFDsJW0EMrL-r6a-b0YUhF48zk7l4lK3yLzhBzeG3I01KIycLfE-	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/33fCN1bFbB2G1iGDGzlBd_BAWes-Nlv-Qt8ByRpEBU43Lu_mF6twx5kmmN4OE6Z_Gz	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/8bC8ZC9RQ_cJj5lSa8LjCfRClGeSyp4SkN72C0tMSUIqGPVjEpHeUDfAScLNKy82Mi	0%	Avira URL Cloud	safe
https://scholar.google.com/intl/en-US/scholar/about.html	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/u2XGSr0jis3w5sLeuh8UMqGHgtdqPVPi77xYhPJdMO9C41wYUue3EKPJvwp-ovAlTz	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/Y1i12gHz-cP0Ir3LztFSUMijuVGSe9qetVu98aQNchjhxw9byxecnFAFfhxGFyd79t	0%	Avira URL Cloud	safe
https://login-vip.replit.app/battery_info	0%	Avira URL Cloud	safe
https://grow.google/certificates/?utm_source=gDigital&utm_medium=empro-aboutsite&utm_campaig	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/pWVbkjhtPTNZbVieBwoW5yp4_edEFybVMNXXAQdphReN5SvSsx3AS-0ssRnBRGbi9m	0%	Avira URL Cloud	safe
https://about.google/assets-products/css/index.min.css?cache=4b0a69e	0%	Avira URL Cloud	safe
https://login-vip.replit.app/vip/images.png	0%	Avira URL Cloud	safe
https://wallet.google/	0%	Avira URL Cloud	safe
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs	0%	Avira URL Cloud	safe
https://www.google.com/intl/en/about/products?tab=uh	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI06	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/UqZcYFgfFclRU46MshhuCQD79idBZ8hyIe5WkQ1VLzG47w-Mgu6yGriGkL_YiYF2qa	0%	Avira URL Cloud	safe
https://www.google.com/sheets/about/?utm_source=gaboutpage&utm_medium=sheetslink&utm_campaig	0%	Avira URL Cloud	safe
https://lens.google.com/#	0%	Avira URL Cloud	safe
https://artsandculture.google.com/?utm_medium=referral&utm_source=about.google	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/TVNK8r0QEiNhXwfjVlziAqFcBQPkuPHKyilz6atnzslwMho1no8n4EJV30tOT0T6y3	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/PtL9QBP58JZC0A0k1u4fSn-rXbpaG52216P0l4ydM3c21L78uPPad73jY6ngd2tS-q	0%	Avira URL Cloud	safe
https://myaccount.google.com/activitycontrols	0%	Avira URL Cloud	safe
https://safety.google/security-privacy/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/PVDn9Oj6dMbqqydywzGuLAPkbLwDX3Uuv1t6K8MORXFuQAVBLPNAy_yaQBc7bE-qmL	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/yl0EzS1GixeU9QVLJtHu7hom-4PIHwYylP17hRk9_UasgFCCc6lo6E0-ReGn8R1ny3A=w36-h36	0%	Avira URL Cloud	safe
https://tv.google/	0%	Avira URL Cloud	safe
https://www.google.com/favicon.ico	0%	Avira URL Cloud	safe
https://support.google.com/accounts/answer/7519408?hl=en&ref_topic=7189123&sjid=112857825609	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/eO6nD1O47tirNw4TM76SfwotF_tP25t_TASE2l8_Gyw4xLr7ckkcg4PuEb8cxngaWw	0%	Avira URL Cloud	safe
https://www.youtube.com/yt/about/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/zGSQ3CkZCuntNXuuiLsvHnljLEmpJD6MKKWjzuL20jMovKj8akWzk6gb0zmXZTMH6O	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/vNgpLTvnDUr6-QM8s4OuuESGDXs_brbGoPR-7vfwdxQI7M4MVFV0CC_Hil4qRDSp4P	0%	Avira URL Cloud	safe
https://blog.google/products/shopping/google-generative-ai-marketing-features-may-2024/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/jUoaTIlBn5ibfQcND2n5OMD6Z7xoqNj-ShHlFR6QuLffLXD5pS8V2eNg1rGlrsRrnD	0%	Avira URL Cloud	safe
https://www.google.com/tagmanager/	0%	Avira URL Cloud	safe
https://blog.google/inside-google/doodles/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/uzkOxzfGFGjzRx0FK6B541qcv469wNDTQf_TUu4oqH_oPUGJoajTkqHLJ9DD188Kmocg_DJg2OBf1FxyRc6MLK_gMFFRmm7n7XTreZU=h120	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mv	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/BAwQk6jAMu2s_7Jh-8-_CsvSwEAaeLsVhL8z82VOoEkoaujxll1kYL3Pz4jkYpLbRp	0%	Avira URL Cloud	safe
https://groups.google.com	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/HUcJ2yilLdMblMI04h5DE1tf_0iCxgOmiu-7mpulXRJTol_vVsnrlQcs4esQq1ygtH	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/wbRbWxRbQyojtDDUj_ITsoMZNbSAnroic0AYABmbab8qE-sgODk26wLCYUcJrqW11-	0%	Avira URL Cloud	safe
https://www.google.com/docs/about/?utm_source=gaboutpage&utm_medium=docslink&utm_campaign=ga	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/KKfAuQrwzTY/sddefault.jpg	0%	Avira URL Cloud	safe
https://play.google.com	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/kLMr5zuHxfe-IxhnKdLp_1JkP5sl2ova0svHjQkFnV1q8X7yE6uA9p8AToT_L7xL5s5EIayVVVljNtp7BgoL69PtZ-Mf00qUbpTLfrrqXWv99tatmXI=h120	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/X7G-hd59XdxQgAu0Pg3jUf5LoAQQqSWjyKZSk0lvDBnRdboJB3f6rLhL9PSJLNy-ON	0%	Avira URL Cloud	safe
https://www.google.com/keep/	0%	Avira URL Cloud	safe
https://github.com/google/safevalues/issues	0%	Avira URL Cloud	safe
https://www.google.com/maps/about/	0%	Avira URL Cloud	safe
https://blog.google/products/ads-commerce/ai-creativity-google-marketing-live/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
scone-pa.clients6.google.com	142.250.184.202	true	false	unknown
plus.l.google.com	142.250.185.110	true	false	unknown
i.ytimg.com	172.217.23.118	true	false	unknown
login-vip.replit.app	34.117.33.233	true	false	unknown
support.google.com	142.250.186.174	true	false	unknown
static.doubleclick.net	142.250.185.134	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
about.google	216.239.32.29	true	false	unknown
stats.g.doubleclick.net	64.233.184.157	true	false	unknown
youtube-ui.l.google.com	142.250.186.142	true	false	unknown
play.google.com	172.217.16.142	true	false	unknown
www3.l.google.com	142.250.184.238	true	false	unknown
googleads.g.doubleclick.net	172.217.18.2	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.186.65	true	false	unknown
ghs-svc-https-sni.ghs-ssl.googlehosted.com	142.250.184.211	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
blog.google	216.239.38.21	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.185.225	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
www.blog.google	unknown	unknown	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	unknown
accounts.youtube.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
lh4.ggpht.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false	URL Reputation: safe	unknown
https://apis.google.com/js/client.js	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/dMQ1Q4xlLrl3-KsZvX_9v56emij4OkRxzapLM7RSuZVd7PgqfjPxKR4KY8hVHYXqP2ZkS-_ZueXb9ywW66H2oCyTglApr1ELCy3woOAviTgFP6uyAd0=h120	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/RIuSgyC1CZvycdCvOhK6kyGWtKZwR6gN88CimyIAdew4WMYXisZeD2x5A3fOi3GETtFbnKgxw7hb_2_ERw1-ygGSCExAsemrYx79J0hRsa4SZzzxz3A?=w1440	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/NksFVpnLFiAE4YKEh9n84ebvfznogwh0AyAUDpmpLqpBP7h791LS9RcIzWpE8XfsiR0NJiHomxV8FyVO2ccMF2VzB_L3omeUWuHu9d3LGJ4Ww6JKviev	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi5QWrjpBGqtY9zgr06lOsx3KVezooiNyD8bzJwIHK2UC1bE-RE=h120	false	URL Reputation: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://login-vip.replit.app/battery_info	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/kQDv-46ToDkqXJ2DIlr7hKXKalQvL0NJy4oGIhNlUkxX95btXayCKNoZuaY_KT-6U8-Iz35FlDZXRd1U3bNFo99a3k0-vwIIbtEIStTKYwD_UxNkjA	false	URL Reputation: safe	unknown
https://about.google/assets-products/css/index.min.css?cache=4b0a69e	false	Avira URL Cloud: safe	unknown
https://login-vip.replit.app/vip/images.png	false	Avira URL Cloud: safe	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/en/about/products?tab=uh	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/RwVe2Cm1EjeDmYhdTzr179G0ovq_PCxgPzQ92PO-YxTBEFTHWh0L6Ev8FFDWRgRGrE81vwn95tyg9Ey189OO4kllhhpLAMIsGFZ-UKA=h120	false	URL Reputation: safe	unknown
https://about.google/assets-products/img/glue-icons.svg	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/yl0EzS1GixeU9QVLJtHu7hom-4PIHwYylP17hRk9_UasgFCCc6lo6E0-ReGn8R1ny3A=w36-h36	false	Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/XfxlbB7Imi28_w277XeVC0u8Yngn8e1bQxhd6YK2snOdqt_uiwripgSEl5VNxgS2cJP2kf0dHv6LfSq8AG6YeJf9cpu1BE1kP36R=h120	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/moWtYpo1G3n-1QfF5rNSy7n2IIQs785-H9DStefngR0kWMsmnPkzMu-SKH3eUxHVddekMttIA5olrn_wo3p50z04NyRZYPHYBc2cxvE=h120	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/xeVlvzZX32eg9zc9V7MLUWaEeOnwoa5OQfrgI10U4ub8QA6iwdq1TgcOpLTBiKQTosiNxtMBtpOvh_z7fq7eoISf53UZqZMd0dZR0gSLAAMFkK9vVfQ?=w1440	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/Amr8tRBfd1Uk8zYm779hnSCwMzArp3LGD1LUhcgPdCOIk0UJczmdKLa42Apx-wzQdrUnsATBiFsyHT5pVit9Al6PwfVewM09FnlwAA=h120	false	URL Reputation: safe	unknown
https://scone-pa.clients6.google.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#parent=https%3A%2F%2Fabout.google&rpctoken=443137333	false		unknown
https://lh3.googleusercontent.com/6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mvJvvcvtrNc0MESF98dAx6ivasEsZNxoaUZU-Q=h120	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/sq57GaRCOEk-TcLHr8ZeehZOkRrOLLv0ZIL34gOO2TNqeQjAcLqZM_YvwoZCLFQbW1DS0K28QakL4JTKArVVV4pp-PtTltns7K25Pu5d7v-6dRSh-g=w1440-l90-sg-rj-c0xffffff	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/uzkOxzfGFGjzRx0FK6B541qcv469wNDTQf_TUu4oqH_oPUGJoajTkqHLJ9DD188Kmocg_DJg2OBf1FxyRc6MLK_gMFFRmm7n7XTreZU=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/p2EiNuo4FQe3s8dhYgEiejBxjryT3B46OTWNItLqiwF58V0T62GKHa7VrbOhI7BbnQOBvdkPFu-4YGG0Dg3b0moXWWSc_aB1hw67Kts=h120	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/R7Wr9OkT5zk4gY2F3-tLiMwhFaMfO_hCU5LpTxztUaTOi8kU7_0QUIvOTlhHLyMol8kvHhVvdWUtjmAZ6cqiwGhwZzdg0fvc-UXtojU=h120	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/kLMr5zuHxfe-IxhnKdLp_1JkP5sl2ova0svHjQkFnV1q8X7yE6uA9p8AToT_L7xL5s5EIayVVVljNtp7BgoL69PtZ-Mf00qUbpTLfrrqXWv99tatmXI=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/5CsRqfMEP1Rv-PPv9G4962lyEuvb4roSLJHJQWPbmCa51AmvynfoGfoKsKiS87QhX07xQMZAeLp8qoSy7CjVZkXJ1WapQiJkroCeJw=h120	false	URL Reputation: safe	unknown
https://about.google/assets-products/img/glue-google-color-logo.svg	false	URL Reputation: safe	unknown
https://blog.google/api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube	false	URL Reputation: safe	unknown
https://scone-pa.clients6.google.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.SCWmpDDGjPk.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA%2Fm%3D__features__#parent=https%3A%2F%2Fsupport.google.com&rpctoken=719422001	false		unknown
https://i.ytimg.com/vi/KKfAuQrwzTY/sddefault.jpg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://blog.google/products/shopping/	chromecache_497.2.dr, chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/LteTgkerljFQFADjcuSo5-hiLDlUMnxk-QP08xyTBWi-SxZUSDbqeBS-hjK5Gbetam	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com	chromecache_317.2.dr, chromecache_489.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/Qvc6rWiGG_a6LNQ7Yx5vMmve_5ku8TG7z4vmWG7VBkbcOQfOSE2BS7eBcD1NUOWTsb	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/privacy?utm_source=about&utm_medium=referral&utm_campaign=footer	chromecache_330.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/9NuRdiRepVI3n1txfg7Ky2wWzB3DvXkWABXeFMSn2tzDYYkv8T_RMA9R17fWi0ziUD	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://grow.google/applied-digital-skills/?utm_source=gDigital&utm_medium=empro-aboutsite&u	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_258.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/WVR82wo80fHsNaPFIXDrmwaUcE6lFSxs_zHXc6Bedrglc3MA9mPkDqKFWBMvdVU3Rb	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_570.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/I95wjYii8vhFSSx-aSYdh2hPAMjgZkA9yjarSQoOd98COwOxkAVn_dulBcTcfbsa7L	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/retail/shopping-campaigns/	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://safety.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link	chromecache_330.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/T4GMYGBcpiDg5gCEZGSvQWbkwLHRELiaWN-BAAPD8Skd-YAEBhCxSR7_a5HjrHhqhg	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/QuPkNiIrKnxQiue2xno3-rcRB6yg-hk6W5XISyjaY1EJ4hNq-_ZHCcYPdVDnI9E3xr	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/33fCN1bFbB2G1iGDGzlBd_BAWes-Nlv-Qt8ByRpEBU43Lu_mF6twx5kmmN4OE6Z_Gz	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/5WLz7CvnjBuQDDrFDsJW0EMrL-r6a-b0YUhF48zk7l4lK3yLzhBzeG3I01KIycLfE-	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/8bC8ZC9RQ_cJj5lSa8LjCfRClGeSyp4SkN72C0tMSUIqGPVjEpHeUDfAScLNKy82Mi	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/v/widget/save	chromecache_406.2.dr	false	URL Reputation: safe	unknown
https://scholar.google.com/intl/en-US/scholar/about.html	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/u2XGSr0jis3w5sLeuh8UMqGHgtdqPVPi77xYhPJdMO9C41wYUue3EKPJvwp-ovAlTz	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://store.google.com/us/category/phones?hl=en-US	chromecache_330.2.dr	false	URL Reputation: safe	unknown
https://grow.google/certificates/?utm_source=gDigital&utm_medium=empro-aboutsite&utm_campaig	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/Y1i12gHz-cP0Ir3LztFSUMijuVGSe9qetVu98aQNchjhxw9byxecnFAFfhxGFyd79t	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://content-googleapis-test.sandbox.google.com	chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/pWVbkjhtPTNZbVieBwoW5yp4_edEFybVMNXXAQdphReN5SvSsx3AS-0ssRnBRGbi9m	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://wallet.google/	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI06	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://pay.google.com/about/	chromecache_330.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/sheets/about/?utm_source=gaboutpage&utm_medium=sheetslink&utm_campaig	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/UqZcYFgfFclRU46MshhuCQD79idBZ8hyIe5WkQ1VLzG47w-Mgu6yGriGkL_YiYF2qa	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lens.google.com/#	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_345.2.dr	false	URL Reputation: safe	unknown
https://artsandculture.google.com/?utm_medium=referral&utm_source=about.google	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/PtL9QBP58JZC0A0k1u4fSn-rXbpaG52216P0l4ydM3c21L78uPPad73jY6ngd2tS-q	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/TVNK8r0QEiNhXwfjVlziAqFcBQPkuPHKyilz6atnzslwMho1no8n4EJV30tOT0T6y3	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://myaccount.google.com/activitycontrols	chromecache_489.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_249.2.dr, chromecache_407.2.dr, chromecache_406.2.dr	false	URL Reputation: safe	unknown
https://safety.google/security-privacy/	chromecache_514.2.dr, chromecache_317.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/PVDn9Oj6dMbqqydywzGuLAPkbLwDX3Uuv1t6K8MORXFuQAVBLPNAy_yaQBc7bE-qmL	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/accounts/answer/7519408?hl=en&ref_topic=7189123&sjid=112857825609	chromecache_554.2.dr	false	Avira URL Cloud: safe	unknown
https://shopping.google.com/?nord=1?utm_source=about&utm_medium=referral&utm_campaign=footer	chromecache_330.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/eO6nD1O47tirNw4TM76SfwotF_tP25t_TASE2l8_Gyw4xLr7ckkcg4PuEb8cxngaWw	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/zGSQ3CkZCuntNXuuiLsvHnljLEmpJD6MKKWjzuL20jMovKj8akWzk6gb0zmXZTMH6O	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://tv.google/	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://content-googleapis-staging.sandbox.google.com	chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/vNgpLTvnDUr6-QM8s4OuuESGDXs_brbGoPR-7vfwdxQI7M4MVFV0CC_Hil4qRDSp4P	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/yt/about/	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://blog.google/products/shopping/google-generative-ai-marketing-features-may-2024/	chromecache_497.2.dr, chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/jUoaTIlBn5ibfQcND2n5OMD6Z7xoqNj-ShHlFR6QuLffLXD5pS8V2eNg1rGlrsRrnD	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/tagmanager/	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://blog.google/inside-google/doodles/	chromecache_497.2.dr, chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/BAwQk6jAMu2s_7Jh-8-_CsvSwEAaeLsVhL8z82VOoEkoaujxll1kYL3Pz4jkYpLbRp	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mv	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/wbRbWxRbQyojtDDUj_ITsoMZNbSAnroic0AYABmbab8qE-sgODk26wLCYUcJrqW11-	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/HUcJ2yilLdMblMI04h5DE1tf_0iCxgOmiu-7mpulXRJTol_vVsnrlQcs4esQq1ygtH	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://careers.google.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link	chromecache_330.2.dr	false	URL Reputation: safe	unknown
https://groups.google.com	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/docs/about/?utm_source=gaboutpage&utm_medium=docslink&utm_campaign=ga	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com	chromecache_514.2.dr, chromecache_554.2.dr, chromecache_317.2.dr, chromecache_489.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_485.2.dr	false	URL Reputation: safe	unknown
https://github.com/google/safevalues/issues	chromecache_258.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/X7G-hd59XdxQgAu0Pg3jUf5LoAQQqSWjyKZSk0lvDBnRdboJB3f6rLhL9PSJLNy-ON	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://blog.google/products/ads-commerce/ai-creativity-google-marketing-live/	chromecache_497.2.dr, chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/keep/	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/maps/about/	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.225	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.185.142	unknown	United States	15169	GOOGLEUS	false
142.250.184.225	unknown	United States	15169	GOOGLEUS	false
172.217.16.142	play.google.com	United States	15169	GOOGLEUS	false
142.250.185.65	unknown	United States	15169	GOOGLEUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
142.250.185.110	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.238	unknown	United States	15169	GOOGLEUS	false
172.217.18.2	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
64.233.167.157	unknown	United States	15169	GOOGLEUS	false
172.217.18.14	unknown	United States	15169	GOOGLEUS	false
64.233.184.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.239.34.21	unknown	United States	15169	GOOGLEUS	false
142.250.185.161	unknown	United States	15169	GOOGLEUS	false
216.239.38.21	blog.google	United States	15169	GOOGLEUS	false
142.250.185.162	unknown	United States	15169	GOOGLEUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
216.58.212.174	unknown	United States	15169	GOOGLEUS	false
216.239.32.29	about.google	United States	15169	GOOGLEUS	false
142.250.186.161	unknown	United States	15169	GOOGLEUS	false
172.217.23.118	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.185.134	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
34.117.33.233	login-vip.replit.app	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
172.217.18.22	unknown	United States	15169	GOOGLEUS	false
142.250.184.211	ghs-svc-https-sni.ghs-ssl.googlehosted.com	United States	15169	GOOGLEUS	false
142.250.186.65	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1448172
Start date and time:	2024-05-28 00:41:27 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@31/716@90/31
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://support.google.com/accounts/?p=securesignin&hl=en Browse: https://accounts.google.com/RecoverAccount?service=mail&continue=https%3A%2F%2Fmail.google.com%2Fmail%2F Browse: https://accounts.google.com/SignUp?service=mail&continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&hl=en Browse: http://www.google.com/support/accounts?hl=en Browse: https://support.google.com/accounts/answer/2917834?visit_id=638524465523040119-1819753442&p=securesignin&hl=en&rd=1#hcfe-content Browse: https://support.google.com/accounts Browse: https://www.google.com/intl/en/about/products?tab=uh

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 142.250.186.78, 142.251.168.84, 34.104.35.123, 216.58.206.35, 142.250.185.234, 216.58.206.74, 142.250.186.170, 172.217.18.10, 142.250.184.234, 142.250.181.234, 172.217.16.138, 142.250.185.170, 142.250.186.106, 172.217.16.202, 216.58.212.170, 142.250.186.42, 142.250.186.74, 216.58.206.42, 142.250.184.202, 142.250.185.202, 172.217.18.3, 20.114.59.183, 142.250.186.142, 216.58.206.40, 142.250.186.131, 142.250.185.219, 142.250.184.251, 142.250.186.91, 142.250.185.187, 142.250.185.123, 142.250.185.251, 216.58.212.155, 142.250.185.91, 142.250.185.155, 142.250.184.219, 172.217.23.123, 142.250.181.251, 216.58.206.59, 216.58.206.91, 142.250.186.59, 172.217.18.27, 142.250.185.67, 93.184.221.240, 192.229.221.95, 142.250.185.106, 142.250.185.74, 172.217.23.106, 142.250.185.138, 142.250.186.138, 142.250.186.123, 172.217.18.123, 142.250.186.155, 20.166.126.56, 142.250.186.174, 13.85.23.206, 74.125.206.84, 142.250.185.227, 142.250.185.168, 172.217.16.155, 216.58.212.
Excluded domains from analysis (whitelisted): ssl.gstatic.com, storage.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, ajax.googleapis.com, wu.ec.azureedge.net, www-alv.google-analytics.com, ctldl.windowsupdate.com, jnn-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, gstatic.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58

Input	Output
URL: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58 Model: gpt-4o	```json { "riskscore": 3, "reasons": "The code dynamically sets the action attribute of a form based on the URL structure. While this behavior can be legitimate, it can also be used in phishing attacks to redirect form submissions to malicious endpoints. Further context is needed to determine the intent." }
// var currentURL = window.location.href; var parts = currentURL.split('/'); // var tets = parts[parts.length - 2]; // "/" var uniqueLink = parts.pop(); // // document.getElementById("loginForm").action = `/${tets}/${uniqueLink}`;
URL: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58 Model: gpt-4o	```json { "riskscore": 8, "reasons": "The JavaScript code collects extensive device information, including battery status, hardware details, and network information, and sends it to a server. This level of data collection is typically unnecessary for most legitimate purposes and can be indicative of malicious intent, such as fingerprinting users for tracking or other nefarious activities." }
var currentURL = window.location.href; var uniqueLink = currentURL.split('/').pop(); function gatherDeviceInfo() { return { productSub: navigator.productSub, vendor: navigator.vendor, maxTouchPoints: navigator.maxTouchPoints, doNotTrack: navigator.doNotTrack, hardwareConcurrency: navigator.hardwareConcurrency, cookieEnabled: navigator.cookieEnabled, appCodeName: navigator.appCodeName, appName: navigator.appName, appVersion: navigator.appVersion, platform: navigator.platform, product: navigator.product, userAgent: navigator.userAgent, language: navigator.language, languages: navigator.languages.join(','), webdriver: navigator.webdriver, pdfViewerEnabled: 'pdfViewerEnabled' in navigator, deviceMemory: navigator.deviceMemory, // Network information type: navigator.connection.type, rtt: navigator.connection.rtt, saveData: navigator.connection.saveData, effectiveType: navigator.connection.effectiveType, downlink: navigator.connection.downlink, downlinkMax: navigator.connection.downlinkMax, }; } navigator.getBattery().then(function(battery) { const batteryInfo = { level: battery.level * 100 + '%', isCharging: battery.charging, }; const deviceInfo = gatherDeviceInfo(); const dataToSend = { ...deviceInfo, ...batteryInfo, uniqueLink: uniqueLink, }; // fetch('/battery_info', { method: 'POST', headers: { 'Content-Type': 'application/json', }, body: JSON.stringify(dataToSend) }); });

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1651
Entropy (8bit):	7.667621565226602
Encrypted:	false
SSDEEP:	48:3p6uEdAl1D4ZoyRIIYDwFi2mfaJ4nhjK0V6X+N:3kuDWZoyRMr1f+whjZQQ
MD5:	0B6D9F3D556E046FA43AD9C31F966968
SHA1:	67325397FC4C0434C3EC60CA1A4601271E5BE389
SHA-256:	33FBAB52B8F48572CB07BA5A739EB72BC11D8DE1234C5AE8C43584B3F948A0CA
SHA-512:	B07FDC7FA7FD06BFD2FA0014891C2CF55C07A292328CB7984ED1396B2F3B874B2080EE9F87F879273BD29E1DD10095AA40944F6EC03FC3CD1902AC88D3D4AD6C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......F.....[PLTE...{..kx.ds.....mz...hu...x....]l....Te................}..CT.?Q.CU.>P.JU.AM.@Q.:N....AO.<J.GQ.>O.@P.;L.:K.>J.cq.bq.bp.ap.`o.`n._n.^m.^l.Wf.Rb.Qa.Pa.P`.O_.N_.M^.M].L].L]....Sc.L\.Te.K\.Sc.JZ....K[....K\......J[....lz.IZ.IY......IZ.Q`....JZ.IY.HW.fq......J[.HY.@O.?L.=L.=L.=K.<J.<J.;I.;J.;J.;J.<K.GW.BQ.?N.?N.>M.=L.=M.=L.=M.GV.AP.@N.AN.@N.@M.?L.?M.>M.HY.GX.BQ.@P.@O.?N.>N.IY.GX.BS.AR.AS.@Q.@P.?O.CS.BS.BR.BQ.AP.AQ.@P.GY.CS.BR.AP.DS.BS.AQ.FX.DT.CR.BQ.FX.BR.FW.ET.DS.GX.DU.CT.BS.AS.DT.CS.BS.FV.CT.BT.FW.EU.DT.CU.EV.DU.EV.CT.DU....DV.DV.DU....CT.BT.AS.AR.@R.@R.BS.?Q.>P.BS.>P.@P.?P.>O.>N.=N.<M./aG....(tRNS.6..h..S.J3K.M.OPOONOWl..-+...../...-P.......IDATx...$E.E...S......z^.........-pw..wmo...U...NOK.9..M)....@..W.P.......q...D\|...$y$.3.Md..6...9...1.>.....l.......a7..-s..w..C.....M..#..FE7..w.......@MQoXh(......."...X.D%.M...M: .W...w,6/.K..X..._%...R......9......R......4 ......I;.h..>8P.......c...............e.P.`.....

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3395
Entropy (8bit):	7.91868749885244
Encrypted:	false
SSDEEP:	96:qwxHdaoY5B48gGFveJUar+IgT7onYfRNE4I:qW9hSO4faaT8YMV
MD5:	1071E01BD76D0A6477B7A4D0AC55B1AB
SHA1:	A2266251AE9886F7BA6F0DFD89A41E19A3F36B94
SHA-256:	CA4840F284D825673814097A7C35255E3734D9F4FBFC441918ADB90EA78DD469
SHA-512:	8B064D036781753E911769D6D182A9408BAF02166F055A2FFBF60D9620C71D8DAD4DCF1D1916675C632BA7924C11501521E9E8968ED3A5F5A36A9EC5B2294DCB
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/1bBfkvken8Lqz8NftP9_n8PmC2j6iMPUovX_c-tahFJYXo1tImjmPBU1nv1ATO_XIIh2dHUH6DMp0blUuhL7PZ7JvhZwNQ4QaiYnBsE7sGZcTDP3fLI=h120
Preview:	.PNG........IHDR...x...x.....9d6.....IDATx..yt.....K.H..a.J......E.z..w.T@.z<.^...(\|..G<.K.j.U....XYDQ..kD `.KH.C...-&7K....$df.........w......\|.;...FbD/.d....1.....QN...\|>..8E.].>@"P...B;h.~1..L..g..u2...f.S...!@..Bv...Wu...t..-....PO.f...&S-.f.B.hI@.c..`E..a.J..D...........C...P...@.Em'R...Y]hu!..0.j.".....mC[[........Q...B.&=.......)B.H.j..;$.Z."T.X.c..'..t.U.\|.....<..uV.....W.:U.jlR...[p...O...r..6.@@..Wa..gq...'.....V(B]......G$v.>.q.....U(BM.....18.q......0z."Ts....;..:-".z..1..Ce.."..3..X...o.Psd....b0....cX5.i....M.7........J...D.....S...E..{..f....lP..gE.....`0@..;.....P-oU.T:........P/.-&.t4..9.X.....)QKG5.....E..BM.-..:..`,...~..m.Q..H....J...d.q...-..\|...ME..d.....ms..".9.P...c...''.x..#v.l1v..l....E._B.$[..b.[c$.^....P.e.1C.`...[0.Uwy}Y2f.}..?....^.[L[X.tON..j....464PSs.............8v.E.../z......8.%=...k.<.....)..m..e.^...xP.Z..7s....l}..fO......p-kV-ew.vY2..s..t..u..i....m`...8.....4.r7.wx..h._\|......j........n........s.\7a..;w.%.*..

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8054
Entropy (8bit):	7.965391593269203
Encrypted:	false
SSDEEP:	192:N9WMmAIkLY9f7vkLr4KE3Qd/HsWXWaFQddKIlRXWf:N9WHA3U9f4HHd/M4xIlXWf
MD5:	C01A681EFEF4BBF2910C945B60E6A70B
SHA1:	4B755CAF0F3DAC878BE3B83CA4315278CD397F43
SHA-256:	9E737809179FB34D682511871C99F745C2B028FB86E1591D484E96B50663E822
SHA-512:	1D0B31993FDCD539D741A8DF38709E665862D0CDCD62F50DC5BB6B1BEBB8E0ED4A8992BB75D83AA7EF750FC4999B8AEFA07247C39A584315CF5DF3EB56B71DC7
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/moWtYpo1G3n-1QfF5rNSy7n2IIQs785-H9DStefngR0kWMsmnPkzMu-SKH3eUxHVddekMttIA5olrn_wo3p50z04NyRZYPHYBc2cxvE=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....-IDATx..k.-Wu..k..3s.t....t%..........#.......'..P...).b'...<......R.q%..8..b..1......@.$.+!].......+......33.....9.{.....Z{...+Z.V....hE+Z.V....hE+Z.V....,.....G...E.7...Y.......?......?q....P8...._......6..p.^<{....A...3.(.@.....k>...{bgO.......^~....G....W.6K..2......-........).....q..;..N.i..\.q."..L..o...'...i-..7....t......o....x.^dt.PW~.......c..d.{.z.5..0 ...XK...T.G.-B6ndN.&$..,.....l.b$...pD +.xd;.Q...............9Cm>}.];..6.`...0g...U..!.S..Dd...F,.emA.H...y&.J'.....7T...........R...s.o...).BX..Q....S/m-.4.9sd..M.O.;....u..sgZ.+...6/.y..\|.O...5.o.m=...a.......&.....Yb.5.....,..........r........O....u...Z..u...X:y..rV\o.0A......c$uq.O...9....k........Q5...$A..w..O..b..x.....L...2.g+...q.\......[.C...../...#C..t.....8.......h.l.{...d:....m......M..=\.,.c..y....on(JJ......_.:~.j..........I}....2..Z.d..]\.).H{.9o.:.zw...].P....xl.....0.:.z.U......`..r.. W...*x...9.AV.\|M..@.

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3565
Entropy (8bit):	7.916224311239201
Encrypted:	false
SSDEEP:	96:T2vAQ4+OzE86nkQB4xqLsoarxW81q2vWItaK380z/w:T+Altz36nk/sarxWYq2vpp8so
MD5:	C5724850A35FD802AE76877B3E3D7791
SHA1:	CABFC90D1FCBF534CCB08BCF8373123E8CFB61C2
SHA-256:	98067498B14EF6BF751C0D184FCE4320A0B49584C0DC90569FDF419BB84013F7
SHA-512:	455BDE34B7FDF450EC7A3F9CA2AB9F258923C202E7703035B02AF4898194568012DA75E3130A3F3EB39A3BEBFE19C73C2F468C566395BA1AA28B290670C70E65
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..il..a...fv......$.IV..!....U.H\.E....(.$n..J..h.Tk..l.3P.v[.a..@.F...lD...LPUG)J.F.D.$.......9^..W.....;. @.y..\|..7o `="...\8r.H.+W..B..g...v...^..%B.....b.?.N\.v.M.\|..,.....>z../\|..#....X......h..l._.N.=z./...Y..dC,...~.......f....4.=..XY...6....p...H........&.Q...vKKKG{{../........Wprod.w...N..8@KK....i_...E+8..../...X.}..........r...=.Kb\..:.+.....K.u.a\|G.r?.b.F...._U.1....iqK1.~.e.......cZ..bK..'.....7.s+.t.\P.i-f.....^....9E..RJ.B.a..$...:.... D......"....+....?....\M...PJa.....EVJ.........m;.h..xy..=S....y......^...<..~...&........<......k....A.W...S...\.._.h,..<........p.k.;\|.SC8.....u^...Y.?...}.@.p........b.G..0g..~.@..0.....'.g.T...]+..^......Y.lW.u.X.z..4.:.....F....I.x\...\|......+.>..a..5...2...L.....[rN.Z...\|.`L;..J....#....H.b...1...QL.Y.. ...;wl-..&....#..xU<.9/.;w...,...Y..$..{R...)........+.J.{..J`.r...i..~...mnn...x\.......&..k...u~.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	329
Entropy (8bit):	6.508833160744971
Encrypted:	false
SSDEEP:	6:6v/lhP2kZh5RaidCtgkIkhdzsSLYnaxvAQOW375/uNpux+lGxu/Fv9vbNtsQldp:6v/7bxRaYkIiVsEx39acxaGxsvxwQlz
MD5:	1E5B27A6D798BCBC3B4B302E70950777
SHA1:	F7692EF62022FF1EAEF21765010FF6A14A653C44
SHA-256:	2E0DF10FE080A0463143AE70C64B974C10A0F6C11A25FC924D18E923481467D9
SHA-512:	F46A6206175E20CD2B19B465C3F64F8BBE76CD71B0922E3239A3216FDCAEFE4E721808B2023D3D9A379B471671D69D301134FDFA7312346B49D2BDF6F9E12FB0
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/kM_wE3H68SPU_s7ClGAbOFWwY6UN82x0QF1LFEDlKvWVK82KEzX9b-UQfPorWw9iML0LkzZy3KEJRyj-BPL9MhMfq9kU4qHtPbADuS0=h120
Preview:	.PNG........IHDR...`...`.....H.......IDATx...OJ.@.....]......&x...\.......... ...}v.@~.B...c.1..c...4i..M.&..nw.q.g%e..f...^........M.j..J...!.<*.w..o.k.x...1`-^..W.B......M....`...A.>....4._....9`..h......) 5.....@................k.%.L.1...g....i...kO.......{.;.>.._....t.j..y.Cp~...?..............dn?..L.....IEND.B`.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	239
Entropy (8bit):	6.605867468802436
Encrypted:	false
SSDEEP:	6:6v/lhPbEosBQDVqRVInhJ5rttH7BBg/7E3DgCV3p:6v/7jE1QeVIhJ5nBBiE3DgC7
MD5:	8B596881D19D5906D926839A9C23E80C
SHA1:	2C93910CE48DF4881580926EF57163F0E0E35768
SHA-256:	2210E36B5B21E54CD4DC2CCDCC06138DB8598D704EBF19052E5CAA84EDB4A675
SHA-512:	58BF8213BC4233704010162DD6ED0BA14F4ABB49E1B4976DA9B7E9D0BF93701DD520410223F4E9C5AF0BDC25AA7C1A5DD723FFD8139AD289C9B96F3CDAF36213
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/ui/v1/menu/checkmark.png
Preview:	.PNG........IHDR.....................IDAT8.c...?..1......2..H.1;.\...@<....v)....%@.........@\..L......P.s.-#.Pn ...X...$C.`....1.T...7C...bN.A....5...-.......l.)..@*. ...b!..".P........4z. .P......-..k(.....:.K..g(...n.......IEND.B`.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4217
Entropy (8bit):	7.938524730043499
Encrypted:	false
SSDEEP:	96:nJcxQGmS9OitIp09ec05EOkhS6gGiMSojliNX2:Jcx4+tIGYc0YhS7GiMSoRWG
MD5:	44B83718959F1E11C1291D2962C1DAB3
SHA1:	5597E8F846BE88066607927E8C3FAB5E95A0C652
SHA-256:	DC3789CC4765D5CF2BA76888A40340E4CCAF6916022F3A6DFB27DF045C6FCB5B
SHA-512:	8CD7161755EE42104A1518F2177EB1CBAEFE3EFD607AC554AF928E7A902A5F5BB8273C75F274F63003A69CFEBE153A32886C8C73FD6EA9C3D149BD0DC268C6F8
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/2qz9gwasYkOhPEumfqd3_x8HiiRu6fIQR1d-1DRAV8qfkqmQx7Rygzohal7DXbB-urTun2B0thBnpY3BRfqXnJOm4b9QQFk3L4VK=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..{t..}.?wvV+.V...../.&<....8<".H.#..fx..J........i.Lz.3!.8!Ii^..!8)'. ........../#d.[.V.......G..>..T}..9:3s....w..w~..L1..SL1..~ .....-...x.N...q?..I%p....h...:`..!..@/....l...x...A.BV..8..Y...........u$.L...=.......z..8....&p:P.}I..,...kZ/....Xd..T3....t.....W.....T..5...]....#....8..y&....T.$.....BA.(uG..pM{,..x......t....Gy...y..3.!.........X.-....w.c.m..x...MI...`>.B:.7....0..(...m.<.x.X.O...h.M........\{,.n...%%p...X.e<.kX.#fD.p...X..M.C...-...[..G.xZ..!.....}..s.S..G[:..~..#....L..5gbC...k.5Y....m.t..Sl)Y..QY.....=...nTb9.\|}..n.}....k.))...R[U....._n.E~...X.V....s......7.H....z#..}......Q&\|...5.....\|n....p-5N..:(9".]....D...k.c..^;..4......e...U..S.......2....;...]......=..=........B.D.H..../...K...!teNSCc.z..q!}...v.i..jj8.xv.vM...nn=......u.}.....H9......T..X.^9..?

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5188
Entropy (8bit):	7.952928145135762
Encrypted:	false
SSDEEP:	96:9JKglioE6pMcO5oiXZuh+u/U7pLnZ0jnn7dwp5KRf0271XM8zAJPzSjCWdJ28/p2:9J66pTOlI+u/U7pLnZ0jn7dwuRfU8zAd
MD5:	714ACF1F5A07C6204BBD7E59194A2870
SHA1:	3F8170F84AA88CC81D56C4383CF3758E7945D71F
SHA-256:	1C58D90328C77231DAAA4F46073F3BADE862DB0E24A896F1B17912BB52C0FDDA
SHA-512:	FE1D52B327E09B1936B156546DF09F10802ED8D51C474217F4E02FFB8C312F519540136833C5E51A07CC7E25A748F2DECAC7D393885BF4AF05A53CB9C52465B9
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/WdC-o7ZcZL5WALPSmfUC8H4oYhlhqm1DV45CtHqV06DTRR0rE_P9JXi-J2KXLd9CTyHt_t3ehUm1o_AMltgfAGbvQDku8jsZt0kBSA=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..y.T..?..^Uuu7.44;..K..n.Mp.4..Fe.......dr.1.....%.q"q..h......3!.9..M7.`\..l..&.MwUW...?Z<4T5U.....>.p..{..~.}........(P O.\;.)v\.....KP..)....Z.b........b-b<..W$f ..A$b.r....~.L.e...2.;b{[..#eFt0.A...P...2T.#...U-..E...h=p@.N............/.}.+.....v..%.GS..2......A.lE.B....Q.Aw!...g..5...[CM...k6x.6..y/...'.....a.@......m..ETv"l.j.....}W.~.]O.#/..u.XW\g..~.1.LPaX~9....V.Z./...U..\{u4y...~..X<../.0.t.H(.~..V.7....U...6......WH]... .-P..$O\|K......{z.s..z.......&L..7..$..\..!v......^.J....._<..9...3....\.....DY.h2..\[..b;'..]8.r.s?.A@ .>d....S...U...6.U.w.3,....Q.3.(..<.....+k.).F.&...3...0"[6...5.fz....d.\V...s.c^.d..@8W..z....c.G.\|~\YK...9o......c&r.....~....:...{..%y...O.O....}..~.p3.`dLo9.g..U.F... 8.^.gj._.a"...}e..ll:....h...m.....q.g.2.d..I.K.5.p. ...m...e!...\|E..~..X+.@.....>[..8(.>.wy.A?MeD.=S...N....A...k.-_^].N.....eq.PsIA..X.....\|yuC6Lv....X.HA...\|..._...P..vJ....

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	676
Entropy (8bit):	7.413070752869748
Encrypted:	false
SSDEEP:	12:6v/7iij+RYF4YrCYgORlj52JCJPq+BzQxBcShBrTFmAYgY1zVFr:TijCYFMYfTPqDAJgiVFr
MD5:	CAF16D51FEF616EB20F8F43564CBE1C2
SHA1:	304967DBFD3EBC92D2A810476FD1F71D17190A3A
SHA-256:	A54922EA507766252BD902EB049129D1F4AE5645B66BA9BE10DB75D4E6E7F458
SHA-512:	CD150B71D3E06BDE1565ED2ADF42C12C939C8D81ECB78A5467128CBB46C6A97F340B9BE6F10F8F2A59EF36B96D07D0B23B039CDB3326E2682570C745571A5F43
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.....H......kIDATx...;..Q...i5... .".%i.l.....Bk......$~....u}.......A....V...0.f.e$9.....g.g....<&.......p.}.a {+{#{....E.=.s.lOeOd...-.....Y\|A.q.q:&.:..[.J,.E.F...p.s3......R.5...).........R.9...p....h.g.H.s.........k.h....t..:.(..:...E..._.cT...`.'P.e......%?...s....../[h..\|.h.Q.).......9.`..'(...D.9_M....\|>..oO ......1:.......r.=A./..6...'(.C.9{...G.......s_}.......e=.H...@A.%...I.!....\|.l.p[./.5............,..p../........_...DA`....p../.C.?_.TB....\|......I..@.E...X.. .:A.z.\|.P.w..u......mt.rP../...Q3.....8...p..........8...p..4......0........M.....>...D......$....V9.o...d.{...D..h.6.......A...c.o..`..R.6..\.o....IEND.B`.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1502
Entropy (8bit):	7.73412357563312
Encrypted:	false
SSDEEP:	24:lPIHicYgNF3utrBMaYdnYuB3EuYksRjf4YooyQGx7sKRMi+R29I/WWWWWWWWWWWj:cdP3ut2aYdN3vsRjGoynxVxuhtG
MD5:	8A74358CB7D5C631CB3746D774C99A3E
SHA1:	5F33C0ABED63BCFC3630366276FC783AFF20CE67
SHA-256:	7281509E4DAC8B2FC498C248C0A61142447362083E2D93657F74C8E5B8942E6F
SHA-512:	E1167BC3ACA76887A6549621FBAE88C60FEA554E9D69F6538C2494B32FD246CF19BF02D15FB1C8FFB9E9978B8CA1657CEC792FF1271731CF7C981662EC0722A2
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/9TzWtxtT-9Vrlwa8SXTSKhfl91Ndy4hU-1uLE9-hFsVSHARAOlFEdFExVR4QCegJ-KUBTSlJm3DZY6g31sbVrUT_HfxQvX_7WgLp=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..Ml.U...y}-?.#...*..5R}&...$..B\..p...1.'.\. 1......(.....F.. . .P.(..F.k....w]..".m.;.p.d.Ms.y...{.y`..a..ax'.....(.<0/t..$.....f&/s(v9c!.`..k(.)0;T..$.a. .i..iy...vk........s#....@....H...U..0.J\|.,v<...VQ.].h........w.0....[\....%.Y.\..Eb.u..U\....!...b...).%H.6O.I..]E..M..(\|.e..O../...6^&...l.L._..x.`....2.a(L.e..Q.....%z.e.....2.....2.....2...{.e..'.....!.....#.....%x.e.....2.....A..#lw..K.......t.?.....`..&.\|8`..-......_.....as.rL.rL.rL.rL.rL.r._&...IN...S..R..i..P..Sj.r5...{`p+...N....P)[.`....B.30.......Od.N.....?..5..Q$..Gq=..~.dK..o..N..................MV..X.].Z.b....s...f...T.l.....u0k.....C..,..EG$.j....?v..,v...<.+x....Zk.r.....\B.)8..A.......f9."O..&../.......<.)..&....Y.....<.....3..?o.B.{KX..`.r.,5..}...Z....j~..m....e.n.*7.._.Q......\.............M....R..%^...Z......r.^=U......P......I.....%.uJ.#..n..#........?=.C...?...N.!`.h.....8v......./.......rK......[!m..+7..7....>.....5

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3655
Entropy (8bit):	7.92275086212785
Encrypted:	false
SSDEEP:	96:iIyDaghuXnkxmEBQfYC2Bj4v2JEBpcAN4zbaAmEgApZatG9rbFW:G5HxBuYf14v2eG/sjAj/FW
MD5:	46D5A81B878A7F4ADEB2D489837B6609
SHA1:	0192F2F6B4E6A66E774C987B8B190242CB131BF7
SHA-256:	B9E7DAFEF568894BDCCF21A427A0617B7D6DC20DC9BD36854501EEC80A6C5A23
SHA-512:	22E25606A25B763F689B74F9A45F7AF61C63942391665118F0BF4F120A5992D3FC16D551B36D086980F2719A79884F82551992E0F40653D867B13A55A838D40E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..yl......fv.98..@p..-GE...Qh......h..VjQU.E-.W.h%*.s..H...R%.^-..b;..W....-.i.PH .............c..[k?.yv.....~...Q.F..5j.Q.F..YP........@....f,"@.p..x.s.H...f.1.b.....L.?`....e.).GD....m..7...~f......O.UI.....X..a.ASh.3....;.+.]_I.$.o.:.~..&3J...AfU.GYB..v.W.QV.......=.<..\.P.jp.y...bF....1...].+..a.i.......l]...Q...$W.R.5...3zJ.OU......K.o.r>XyK....u.....<.? ..]p.....R.....Rp.@.......D...\U9...7....U.b`.\B..mL...]W....A.Z.....u....H......B..d.Fp..f.f.l+.x8=O6......-7....8.].-.x..r'M.....#....d...v....x.Co...l.dc.O...(.8v.A&..I..u.F..s...8t..O.Y....../..B...p.9..HK.2h.e..B9w".x.4.W...h...n9.A...2.y..].,.S....\l.<.Q.xz..W.....,k.B..]p%r.t.&......$X.P..C.\j.. ..d2Orz.1.....rrn!...'.<.........)...p.....e...$.s}.........:.f0]r.....E..s....Z.....o....bzK&!....Z...3.!7C.H...w.Au..0....U.t[~AqR..y..w.Q.`..".p<.<...,..;.\tm5j..f.-.%e.O.....Ed...NJ.u..w.a..\|..q.cga......+.d.d_

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1554
Entropy (8bit):	4.133417333200851
Encrypted:	false
SSDEEP:	24:tV0U/S903tFQRhYj45kRHDu9+u1lUetmCmifvqbbLaHu9HGn1u1lIdUWA/jTq9Kr:Z/S90PU5I1YdtmMqPLmum1YUUZ/jTq98
MD5:	C5B92D70540100ACBE7A089EDD4AD521
SHA1:	289EDD48A26448C16B24D8CEE077891AC256B63C
SHA-256:	C2193804A202EB72C93FC3B18733063DA2FC140C1991AD624980C836AFD61D27
SHA-512:	84244179B2669C0113F00FAADF2C4539F68DADD880A2E36149A31849AB3C654FE98F3FF3FDB1483438CC970FD25E29B35A85E7BE0F1B5CC490C3DCD249FD35A7
Malicious:	false
Reputation:	low
Preview:	<svg id="google-solid-logo" width="74" height="24" viewBox="0 0 74 24" xmlns="http://www.w3.org/2000/svg"><path fill="#5f6368" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24zm15.76-2c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52zm28.58-8.03h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3.52 1.74 0 3.1 1.5 3.1 3.54.01

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1393
Entropy (8bit):	7.741695342683955
Encrypted:	false
SSDEEP:	24:D/6Bm17qS9DbPDQ45Gkds4VbbBYdVATpFxb+hs3xl0Sau164l2kFSWZR2vtUx2lH:D/6BmIG7hdbYdVules3xla+64l9wxVUo
MD5:	0EAA75E84E3B5D76E26B5BDEF873465E
SHA1:	79DAEA62FA0952E79644B23305210D61B6CBB631
SHA-256:	D375701BEED766135440CC65BD4CEDE9CC455C0116A362E124C3C2158EDCEFF4
SHA-512:	EE117EEF8002ABEF55C7521FDF265C597226994BDD4EDDF9965E22E1FBA4D8526544A6427F847C2BEA3B586B3E4C06BEB6584D1CCEF5A06AD4739CAF837DB7EB
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..[;l.A..;1!@.@......@" ....44\|KD.......E..(A"....ih ...@.H..B..)............>{w{...H..n.;;og.vfw..T.YM....^.m`...b.0.....V..^\....`Jo..B.-..}....F...)..wq..<6........5.L.a.a.q.}.."...J...g....FZ.....4m.4..n..i.g.8............3...w./:..Be....r.T%.0......g5..v.:..X.r.V..?...c_3.J...u ........da....).c.3p(...T.l.E..3....Q.9.R7{...'...MTQ. ..@...R.....j:up....j...w#?...\|.n.}E.........Q:.Q.._..n....W.Q...x.:.X...aU.....o;../4MS..P...Z....%...a.V...S...x...B..FfL{g....%'^......kd.C.U..7.;.....@{.\|.+K.o.0+;.........\%..,qA...(...@......."Gdd..^..C..c.w..S[.P....`......B^....~.c.'t...4 ...P..I$.....,.-.....Z.^..\M.....d.`...TV.LC.....`..H.....KYYB..,......o.../.\|v...d.Y......H.....q..Bq/. 09...7.@....."."n.".d..:'..r...x..F.O......m.i....}.....SS.'g7...\|1..d.dA........:T._..>.t....M...A..$....vN[.#..\|..7...,.J.."w...D.v4..F2..?}..@.mclf>w+...h.m..

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2483
Entropy (8bit):	7.877739104591164
Encrypted:	false
SSDEEP:	48:pHoFyE/rKkHcDwC4Uki10tpjOn9Msghi/ULvnfWqLf2Lgc:KFyIrKZ1Ri89MJOiHWqS1
MD5:	453EDE8D9231D0EF959F7265B376245A
SHA1:	0239C728157B01E59C98004FAAF94428DFCE574A
SHA-256:	A06272B8A6B5647231815C9AD4194243EC6F5816183D8AAAB1DC68BFEE0B45F5
SHA-512:	B9AB6DE7965C9608CDBD538FFC5006AED1232CC3ACC3521A18677BCB4FD64C098AC963C3D52554CB9D8F44F17DA814A8FACC42CC40DB12039E667F862FB9E8B0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx...k.\e.....9...^zY...Pn%..H...D....P.(6$....H.Z%H...1j..1F.\|#.2H......D..(-...M........}.[..33;;]wf....d..'.7.9..s..c.1..c.1..c.1..c.1..cL.H.R.z....@Rg.~`..h.K.....T!P. .(..VT;..V.,...q...2....j/.A.1......~..}.N......).z..Q/.H..^.G...........P...:...U.x...]N....RJ.:r.&...W.D.y.!..rt.....G...8';Q..Q..G.[...y.?.,.#..^.B.XO%Z?............I...hc.t..d.4.....mNyd.FyfZ.L..-z......;...Bh0...-F.D....X......&..H..]...#.ix.F.....q.7..Jz~s.T.a..Ia.VT.p[6.....)?\|...h#..:.}J.y./oml:\.. (."?....p.O...(.[k...4R.../x...o.c.K.n.(H..O"I?.v.3..W8........z.o.....g4.....$,].J...#.._..Gz{.....}yh.......BP].K.l......@.5...J...cz.uc.._5.c....AT..v[.:q..k....S+...`.D....S.[.n.U\.s.+...b.......?._.....*.Ln.B..%eYV.._....r#..2......+.(...O2^.b.==.2..@$i.x...25......<u.g.]3...%C+sz....vo..Y...._d.&

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2970
Entropy (8bit):	7.895994126557624
Encrypted:	false
SSDEEP:	48:LUxtKz7MmZV/8K1nIpFwPYYL5v2RLHjEleVn+i7gwOs8rm47mSVo8c:LU7KzJVv1naFcYYtv2dBF+i7gBmAmES
MD5:	F61EE926FEE6EAC3A039BFC195647036
SHA1:	1E695657BAF394E83B8EB8E452FF7B764D97520D
SHA-256:	FF74857019BBF14A1E67353D312AEB78A450D403D7BCB6001C253E1769FAC8F6
SHA-512:	C89A8FF456872058D4D6ACA881F25E4D994626801F9D15D8036B7A6BD14414CD395558736C83C1798D5B78CE004FE37EFC2347AD4F430295E9A7A327D62732F0
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/aTWbsnyhhmgnwKeD6_8X0cdmN12iq1vC2D6dMfw2B36N5Nh73BN1e1IplijPNtzp4IUgiJRRA-4M5e2SLfTIFOfVW09DeezqPYGnXoEfNBliIP4l=h120
Preview:	.PNG........IHDR...x...x.....9d6....aIDATx..{p\U..?..&.J....0....- h.G. ....i.Q..GK.V...N.6E)..Q.J.......:..##....S....).L..4.M.d_.?N...n....{n..g.....w>{.BJI..b.....4..8...N#......g?.\|..m.b`).Y ^vm.....<.....72...C..h{...a....{.....g}...8...x.9..Y...9..h.......GYy1..-..,...<...`-.&p..Q.^n..../..........<.x.8.......n`....uRo.a..1..Rb.p?.2p...=.7...,Bu.v..\zF.'.....,.:.-...</P..X...@....zj...j....C....>.U.:........3T.."..j2..n.....)6..q.._..A...y.`.....x..hN..+dP....w.lO>0.............!.....y....L..h!.5......d...........?R.8X .a\|br.....>......T...G&.X...nG..J.Zl...1.6T...Y...\........A...k..S..S..~.9\|.2......Oi...\.Ua..%.C..........h.\.....dr..{....:2......6...5.....0...[M4..bx.o&...l........qy...FA....".Z.G.K\...~..).....Hk....K...;P.,..h....p,...>_......d.q&......{..Zl.....L...u.....k9"4.M2....>...D5.2-4.>3.dP..C..Bo)S..t..&.:..(...Ps-5.\|\|.h.K\.............`.M.@.w..bd].Gu. `0.d.dLZdeh...............'...&.`\.H...x......pf..q..3u..

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 425 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14159
Entropy (8bit):	7.885944499704041
Encrypted:	false
SSDEEP:	384:adfYevTT2mdN2/oZajc3jwqNeyKcTvREyCXQprE:adz2/hjhyKcKyCAp4
MD5:	9AAFCE1349E90CDC093ABCA5222FAC0D
SHA1:	F5392D43F1D8DDDD0A3C47626A650AEF4E4EB777
SHA-256:	15628E790164F24EFCAFA38022947EEA3E6ED4B244B029DB2E67EC16811169AB
SHA-512:	5587D4645121D2CDCB3B2C12B12BC6D531FDDB0C90315CDC0571EDF425B17793EC65C00AACCC366343134A34EF4578CBF1597B657648DB76E717A840EAF7F383
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............8......sBIT....\|.d... .IDATx...w.\e.>....gf.-I(I.RD..........x...{).......C.^.E.........@.=...(.JIBK.s....cf.!.dw3..9g... ..}Bv.....DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD.7.:.Q..YX\|.............e......]..j.v..D......W}....-..5..Q.X2v.t.sB....^u._...^...QJ...T.B.<..........p........7_...Q.aI...k.w...l......^.....2...&......7..E....}.C[?..UU.tDA...jh..1/...X....3(...N....U}..-..o.j.s..<.Q....jd.A..X,D.R.>....F..@.$u.x<........$.Q....j.?..on..._..P..YZV..W...5q..[xQ.lD]aI.....F]]...K.`..7..........mo.>.......XRD5.x.G.1.\JK.........x....+..\|\|I.hD0.....N.=.).D...1fp...k...x..1O...]......GRD5.d.!.YV.j}l.........{...3Q.aI.....c...Y..NV.o....\|i..C.}.........j O%.sd...M;JW....).3Q....j .%... ....

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7289
Entropy (8bit):	7.944761342190442
Encrypted:	false
SSDEEP:	192:G3zvPBdqkiUpquAWefoaS2PwrDpKFcycOY:G3NHiL9vf07HMhY
MD5:	E42A09AD7ACE95799671B58F3580B3DC
SHA1:	C3A876EB222C3844BA014351975173043125ED29
SHA-256:	4F0F364FE3689CC2B1188BD0C752E16BA9F98F6EB6A71A8263E22A47B81282AE
SHA-512:	2B0969F82FEED22286C7AC4754E0EFE696DB9DF36749C949D4CA45C373B89C9D1B1934F8F7212D0992DCE5DAF151B38AE53E65185725756EA07D9DCDC39ED166
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..]{l.....}..6v..CLZ..'iE\|...Q......*R...KP..+.m..t........p.<Hi+.Q...6!!..qH.)..v.._.........2;{.....V.;s....\|.\|.;/`..X.2...e\...-." . ..........K....!.R.....h9..\|...t...T...\D.$...hT..brEE.Tii..5k..pj\|\|.....E.."..I0......n.w. T...i...F>.A..~.A.!....=..C.....&!...g)6.0.SJ[.<....... d...XC.9...k.....O.l..'.m..S.3ZD,i.).........(.rEQ....x^..#."....$.x..... .\..."`I.L)........-.r.\'$..`.....q..w...."....q.........._..._.(...;%..N_....I<...B...>..o\|..B....).........n....VUU..V.)....@4...H....)..^....@ .....-[.<..4...L)]u...}.\|....T.M<Wa......s.P..CCC..v.'......Xkk.........F0........[.!.m.M.PQQ...r...H$.4./..d.[.?....q...Xt.)....<x`ff.>.N.. RU.+W.D0...W.....Yc.i.ne.E.eeeC..s.....3(..}..@)..}............".....4&''.w...M).."..`.4.tww..'.\|.uEQ.n.Ck.....c... .Ys....?..>..E'.RZ...o....Xe......1.....

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7764, version 1.0
Category:	downloaded
Size (bytes):	7764
Entropy (8bit):	7.969910156375325
Encrypted:	false
SSDEEP:	192:Rogh0XwQxY5egCC3qiDcvgs8b4/gO59lcva3f:RokWAEgoiSs5OHlcO
MD5:	840275CCD07904AE4081556FD92B784F
SHA1:	3599B52C76D614FF957CEE2606AC67D61E8F50A8
SHA-256:	4053825BF798F2D0CAF91D40483D4447ECEADEE819DB6AC1C7DC498B9AD41F49
SHA-512:	35F1C373B70483860B7B6137C645974B5AC3FAB9C9A824CCF0B98687873BA80C8ADDF45FA35E06D8D1AB9BCFBBE7CF0E9EB26BC0C1ED4B22AB7A1BA2AD03288B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2
Preview:	wOF2.......T......J...............................0..x..n.`.......8....P..6.$.... .....)...b@e........3#.V..E.eg.......c;.Y....<..m..0k.L.....%aE...S8.T.....Swrt.".h....e.X.....2...]......>.....tF<..MN.............bV......W..@B..i..m.;1n!.....J.d.."`.Fb31..\..,.[...d.....".x...3..1..@"...'8.'.9.v..r9.WB....Z..[.S.7 R.h....B.......j.\|YM..-..."..._.p...=.,>.i.9.l...\_>?t..I.d.9Q..3k/.\|X;1...S......J,...R......@....6.vFc.Y..N!..TQQ1..5.h.vF.........HG...>..D.p'..p..U..U..\..RT).".=....^...q....@.....l...j....t!..O..k.{y....5..3....l....56.YH..`...%q...#....BC..S.BW."".QQ.hiA...3........Q.....4..4.......A-.DD@.,.l....n.C..@0..6.....C.....}(.b..F..$.`.9....a .L.u.q.K.q...(T\|.....4."....0hrq..v.8J.R.v..lW.[P<.>..e...C......Mqyr...N..]..p.Q=.p!xe........V.-.Q^..<W,.....f-r...%j..J..lX^.^PQ.w.A.H5<.fV.&.$OL)1A6. .....Ss...\|2.FU.O.CUq.*(.......^...B..&5..2..T.F7".BN..pBSQ.8~p.q..x{a.Q.M......;8$..d..%..).".3.s...`........TKgrd.]..._..g...^dB.......Z.6..?..Q>

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1852
Entropy (8bit):	7.8172847193983115
Encrypted:	false
SSDEEP:	48:ThPq7aSyeIaxKBD0vBBg2AmOJIuQ+TuK3R/PP0:tPAaS+axe0vemSIuJTV1PP0
MD5:	8286DD8AD1827439BB3E83CDAA8E6818
SHA1:	CAEEC5254D6E2FCDB698B999E05302A134E316DA
SHA-256:	8ABCAFCD512BD44D17852703BF465C67CF4B5EBB798B88E0B037AD79918A28A6
SHA-512:	7D49CC9CA81703FC4E912A9D9652C174682D652918DC5EEA09E8431C71E7859D24488791098FDB97BE0FBE928E512381B91838D838EF9F749672D0463C79B843
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..._lTe....{...P..K..Z..&...q5....^...S.&.c$f..D/..x.F/L.0.....H..h....Xu.7."...+..Z.h...9.^..4Hg.9.g..'iH[.}....=.9..RJ)..RJ)..RJ)..RJ)..J.c...d/7 L.#..f.Gl.q.&..L..~.g_...J.=..v...o..I....F.y.y.OG55...=..l.].. ..uk..k.lW.1.....2..\....5..u.b.....<.n..4v..M8..f.V..].f.Xkcn.6....&O<...~lJ...W.<..h.f..5..+....j..X.3....9.#_..C1...0.....j..H.3...DB=...g......b..C....k..S.?..:.w..:L...+W..+.[...........Ux....9.....2.-z.7T...[0.Q"..b.X.......^.c.H.hm......$..pC\SD..6TU....#bnt#....R1....$p.E..hCU.b.y....)`..2\....i;..pm.S............6v....+XWn@..?...?}........hC...o}....}P.weTU+...{..:.....9..}.......t.....wO.s...Mb...4......l,.L.....My.%.{..d.X.4.x..-...c"...(.6c.N.q....5.b`\|.........<X...D.v...\.^.9)..].............f..p..s)..h...%.x.dW9\..o.D..E..:.......T.....00.......[..t..Rswa.0p...?....-..4.j8..Y,...J.T..I.E.....-d..e.9..+..p.....?...T6S..+1.i.'>Y.?.l...W......,.....V..c..

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	2583437
Entropy (8bit):	5.660758914949604
Encrypted:	false
SSDEEP:	24576:wRe6evenamxdavUjuKZwZZSg3hqJFok66:ue6emnamraMjuKZwZZ/sJFoY
MD5:	1A07B3637D035852C1BF496244E02E5D
SHA1:	5499D5010793C37998D7109F7ADA060BB53F9516
SHA-256:	489C5DB1FE048E9E5D4DEB643C382C2BAEE253283EC1C55F5E62B12C746E0E64
SHA-512:	954C45573703C72322A3821D7D910BAD40B20A18F5530BDC5D7389A7C5D5FF33F7A0A6815D9C59300B5441ED6B127FC238897E3A586B73C4D583257E2AC265E4
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONIN

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2420)
Category:	downloaded
Size (bytes):	279087
Entropy (8bit):	5.81124380848838
Encrypted:	false
SSDEEP:	3072:FWdRImttCtt1ttbFM6IARsMgZFGpHTEik/hzHowlHyktQt3vURBBat3toEbO80rg:FD83/tqIzatdon84lNg
MD5:	9F3F76FA3A91B355BC6A152E65ABB74A
SHA1:	C1923404C38D523E08BA8BD7543E85026483763E
SHA-256:	9A14497A9558D422D78A202588E22699E88AE1AC66002B93FDC5922B7CD67B4B
SHA-512:	1BB4D8483442D9A165D58209473628BFDA8BEE41E6369D278C9DCB277AF6CB5354F8908EFD806E13C059DD98F3FE3F478D537B367FC7DB38E2905C52F77A5BF6
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-account-creation-evolution/_/js/k=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.en.gHw4OasNpuE.es5.O/ck=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.bWe33vrUwGU.L.B1.O/am=AQACAzoHQTwX58AHiBCGAQAAAAAgAACYMQBgBg/d=1/exm=AvtSve,EFQ78c,GmCzyb,I6YDgd,IZT63,IwHAB,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,bSspM,byfTOb,hc6Ubd,inNHtf,joVoKf,kibjWe,lsjVmc,lwddkf,m9oV,n73qwf,oLggrd,qjNilb,qmdT9,siKnQd,tUnxGc,uzifod,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,nameview/ed=1/wt=2/ujg=1/rs=ADR-Iupodx3aNP3Fz-JEYFGw_WCeBOKC5w/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,VBiA0d,pxq3x,f8Gu1e,soHxf,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountLifecyclePlatformSignupUi=this.default_AccountLifecyclePlatformSignupUi\|\|{};(function(_){var window=this;.try{._.k("ltDFwf");.var dqb=_.x("ltDFwf");var pX=function(a){_.I.call(this,a.Ea);var b=this.xa();this.Eb=this.Ra("P1ekSe");this.wb=this.Ra("cQwEuf");this.da=b.getData("progressvalue").number(0);this.ka=b.getData("buffervalue").number(1);this.Ia=b.yb("B6Vhqe");this.hb=b.yb("juhVM");this.Aa=b.yb("D6TUi");this.aa=b.yb("qdulke");this.Va=0!==this.da;this.Na=1!==this.ka;this.La=[];this.fa=_.Fv(this).pb(function(){this.La.length&&(this.La.forEach(this.F7,this),this.La=[]);this.Va&&(this.Va=!1,this.Eb.setStyle("transform","scaleX("+this.da+")"));.this.Na&&(this.Na=!1,this.wb.setStyle("transform","scaleX("+this.ka+")"));_.wu(b,"B6Vhqe",this.Ia);_.wu(b,"D6TUi",this.Aa);_.wu(b,"juhVM",this.hb);_.wu(b,"qdulke",this.aa)}).build();this.fa();_.di&&_.Fv(this).pb(function(){b.nb("ieri7c")}).he().build()();_.QC(this.xa().el(),this.rb.bind(this))};_.z(pX,_.I);pX.Ba=_.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (405)
Category:	downloaded
Size (bytes):	1645
Entropy (8bit):	5.230873467765621
Encrypted:	false
SSDEEP:	24:kMSxSI7402kx+gT2+vRjt4I2kxD4wqTRZuYy+b6wmCY12kxgYIK1ZCD6A3DWt7Lh:w74RXKi9JRZny+j9YYV9DlDWhUrI
MD5:	6E96AF10D54428C80CB5D223E6F64A46
SHA1:	18A8FD0979E08A70833EB36EDF6C3A17F8549876
SHA-256:	E324886CBDCF053BE2B387F073A15621A7532CEE18A01D88E7FB5E2A201A8961
SHA-512:	03D0F100986BDFBBB9F7DB62F603908083AC02A5BF1298413B90B14079A36AB397C39A506F5F2348B5AC68D691428FFA29B9C712A9D311734B5C748EBC256B9A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-account-creation-evolution/_/js/k=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.en.gHw4OasNpuE.es5.O/ck=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.bWe33vrUwGU.L.B1.O/am=AQACAzoHQTwX58AHiBCGAQAAAAAgAACYMQBgBg/d=1/exm=AvtSve,E87wgc,EFQ78c,GmCzyb,I6YDgd,IZT63,IwHAB,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VBiA0d,WpP9Yc,YHI3We,YTxL4,ZwDk9d,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,bm51tf,byfTOb,f8Gu1e,hc6Ubd,inNHtf,joVoKf,kibjWe,lsjVmc,ltDFwf,lwddkf,m9oV,n73qwf,oLggrd,pxq3x,qPYxq,qjNilb,qmdT9,rmumx,siKnQd,soHxf,tUnxGc,uzifod,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,nameview/ed=1/wt=2/ujg=1/rs=ADR-Iupodx3aNP3Fz-JEYFGw_WCeBOKC5w/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,VwDzFe,A7fCU"
Preview:	"use strict";this.default_AccountLifecyclePlatformSignupUi=this.default_AccountLifecyclePlatformSignupUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.wg(_.Om);_.Zy=function(a){_.H.call(this,a.Ea);this.aa=a.Za.cache};_.z(_.Zy,_.H);_.Zy.Ma=_.H.Ma;_.Zy.Ba=function(){return{Za:{cache:_.xs}}};_.Zy.prototype.execute=function(a){_.ob(a,function(b){var c;_.Ve(b)&&(c=b.yc.tb(b.Xc));c&&this.aa.IB(c)},this);return{}};_.hu(_.pn,_.Zy);._.m();._.k("VwDzFe");.var YU=function(a){_.H.call(this,a.Ea);this.aa=a.Ca.Xb;this.fa=a.Ca.metadata;this.da=a.Ca.lq};_.z(YU,_.H);YU.Ma=_.H.Ma;YU.Ba=function(){return{Ca:{Xb:_.xU,metadata:_.vib,lq:_.uU}}};YU.prototype.execute=function(a){var b=this;a=this.da.create(a);return _.ob(a,function(c){var d=2===b.fa.getType(c.Bd())?b.aa.pb(c):b.aa.aa(c);return _.cm(c,_.yU)?d.then(function(e){return _.Id(e)}):d},this)};_.hu(_.iha,YU);._.m();._.k("sP4Vbe");._.uib=new _.lf(_.qn);._.m();._.k("A7fCU");.var DU=function(a){_.H.call(this,a.Ea);this.aa=a.Ca.UJ};_.z(DU,_.H);DU

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7717
Entropy (8bit):	7.964739325563882
Encrypted:	false
SSDEEP:	192:OSlMgKu4t7io7N/LkDKaPW3wMJ7jO8k0O0EV/64rx:xldKusGA/LkDKwjMJ7jOZ0i44rx
MD5:	F303B5D83D1CA82787B6FBFF3E5CFFE7
SHA1:	ECCFF3C0008ED7381DE1ACF4B26A633E3F0838B1
SHA-256:	167B2BD49F989938F884C74A1C9A9D2D3B8BC8F88F23BDA67ECA219D91496199
SHA-512:	DB12766D73D2E28747F9C67D06D527E6DA0B601CDDA046C6CD884FDE662F9E2053F8A61F3BB300F910D4D39142948CA73BDCE90A90B7183C27DDD7E113A68288
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs.................IDATx..y..U}.?...>../........\.....G.Fc.<F.$.K.F.[..b.B..Q......4.W.E@p.3.0....O.U]U.9...[{..]]U=....<...S.N.....DUY..9..X..b..%.e..8..^.X&x.c..%.e..8..^.X&x.c..%.e..8..^.........Hl.%......EQ!._.U.Eq(V./7@n.vf6.5..!.ZT.O.........y..G....\|......?.8'..3..O...l.F.....0.8.}.....n`J../ ............,^L..Q...z8....;.(.....XL.[...<....yYk0..{B..L.x<.....c.O.L&c...y.2..(Be.h..~...E... .G..y...2UN...h....C.9.9..._..{.....K.`.D....j..Y"..h.+U...bu.._..8.{._'..K..;....W9.Y]..G.7.....1..-......a.r..r3.s.E.....z..-.v...}:..#X.....zQ.\|...(..".)...6.......K.`.P}.s..2z.g...60_.1_3..?.h,n.....9..L....T.....%.....7..#.!b"......?...@.....vN^[.=.X...@..\|....BP)....b.....x.. .s.....1.EK....0q,..A...J...7.1...,^r...g..vk.N.U'Rm/Z.....L.>.?a...rI..H.R..x.<.PF1....u.!TOH.i..,&.....&..8.B@.P`..#.......<.....}........m..-...B2..+....yV....sx..u...g.".).z7...H....Z].h..`.l..o..4.$..{;.....=.............'q.......&.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	676
Entropy (8bit):	7.413070752869748
Encrypted:	false
SSDEEP:	12:6v/7iij+RYF4YrCYgORlj52JCJPq+BzQxBcShBrTFmAYgY1zVFr:TijCYFMYfTPqDAJgiVFr
MD5:	CAF16D51FEF616EB20F8F43564CBE1C2
SHA1:	304967DBFD3EBC92D2A810476FD1F71D17190A3A
SHA-256:	A54922EA507766252BD902EB049129D1F4AE5645B66BA9BE10DB75D4E6E7F458
SHA-512:	CD150B71D3E06BDE1565ED2ADF42C12C939C8D81ECB78A5467128CBB46C6A97F340B9BE6F10F8F2A59EF36B96D07D0B23B039CDB3326E2682570C745571A5F43
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/SLlieQVJNLw2RKmgpg3mMQKeaM5lTZWbOoF_dV_syPle9U7KBs-1PB--OdorbPJYFVRy5178CRGUeITtRpSRyoMyPFGjxlerox1nm5k=h120
Preview:	.PNG........IHDR...`...`.....H......kIDATx...;..Q...i5... .".%i.l.....Bk......$~....u}.......A....V...0.f.e$9.....g.g....<&.......p.}.a {+{#{....E.=.s.lOeOd...-.....Y\|A.q.q:&.:..[.J,.E.F...p.s3......R.5...).........R.9...p....h.g.H.s.........k.h....t..:.(..:...E..._.cT...`.'P.e......%?...s....../[h..\|.h.Q.).......9.`..'(...D.9_M....\|>..oO ......1:.......r.=A./..6...'(.C.9{...G.......s_}.......e=.H...@A.%...I.!....\|.l.p[./.5............,..p../........_...DA`....p../.C.?_.TB....\|......I..@.E...X.. .:A.z.\|.P.w..u......mt.rP../...Q3.....8...p..........8...p..4......0........M.....>...D......$....V9.o...d.{...D..h.6.......A...c.o..`..R.6..\.o....IEND.B`.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4217
Entropy (8bit):	7.938524730043499
Encrypted:	false
SSDEEP:	96:nJcxQGmS9OitIp09ec05EOkhS6gGiMSojliNX2:Jcx4+tIGYc0YhS7GiMSoRWG
MD5:	44B83718959F1E11C1291D2962C1DAB3
SHA1:	5597E8F846BE88066607927E8C3FAB5E95A0C652
SHA-256:	DC3789CC4765D5CF2BA76888A40340E4CCAF6916022F3A6DFB27DF045C6FCB5B
SHA-512:	8CD7161755EE42104A1518F2177EB1CBAEFE3EFD607AC554AF928E7A902A5F5BB8273C75F274F63003A69CFEBE153A32886C8C73FD6EA9C3D149BD0DC268C6F8
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/9NuRdiRepVI3n1txfg7Ky2wWzB3DvXkWABXeFMSn2tzDYYkv8T_RMA9R17fWi0ziUDIDTVJx0JruCzOev37c4dkK9Wrgkeyam3pM8lI=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..{t..}.?wvV+.V...../.&<....8<".H.#..fx..J........i.Lz.3!.8!Ii^..!8)'. ........../#d.[.V.......G..>..T}..9:3s....w..w~..L1..SL1..~ .....-...x.N...q?..I%p....h...:`..!..@/....l...x...A.BV..8..Y...........u$.L...=.......z..8....&p:P.}I..,...kZ/....Xd..T3....t.....W.....T..5...]....#....8..y&....T.$.....BA.(uG..pM{,..x......t....Gy...y..3.!.........X.-....w.c.m..x...MI...`>.B:.7....0..(...m.<.x.X.O...h.M........\{,.n...%%p...X.e<.kX.#fD.p...X..M.C...-...[..G.xZ..!.....}..s.S..G[:..~..#....L..5gbC...k.5Y....m.t..Sl)Y..QY.....=...nTb9.\|}..n.}....k.))...R[U....._n.E~...X.V....s......7.H....z#..}......Q&\|...5.....\|n....p-5N..:(9".]....D...k.c..^;..4......e...U..S.......2....;...]......=..=........B.D.H..../...K...!teNSCc.z..q!}...v.i..jj8.xv.vM...nn=......u.}.....H9......T..X.^9..?

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x565, components 3
Category:	downloaded
Size (bytes):	104459
Entropy (8bit):	7.983105365304557
Encrypted:	false
SSDEEP:	1536:6RZlWT+O0JWlX2TvY2TILWRNXD9t/nUJUCW+VWKaJg80497Al3Yp2tQdXN7xmwOh:6RRJH02oWRNXDSF3aJSNc9N7A0yuZCP
MD5:	A136BBF831A04A0215799B18B000981A
SHA1:	22D4814299614B91CA5A0972E381CC77C370C9F8
SHA-256:	B55EA20AC2CB168EBCD3D92CB0B2530947392EE11952E585DDE815B471546786
SHA-512:	0D27EF8D9BC7A48F091E5CC45E4B689A756391235993473EE27413D9C2E1D6FB2F7B61706D0AB39B3F0B8D96A0CACF034DBCF19142A898185E52F549808BD5CD
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/sq57GaRCOEk-TcLHr8ZeehZOkRrOLLv0ZIL34gOO2TNqeQjAcLqZM_YvwoZCLFQbW1DS0K28QakL4JTKArVVV4pp-PtTltns7K25Pu5d7v-6dRSh-g=w1440-l90-sg-rj-c0xffffff
Preview:	......JFIF......................................................................................................................................................5....".........................................].........................!..1AQ."aq.2.....#BR..br....$3S......Ccs..4d.....%Dt.....T5E.......................................H.........................!1AQ.."aq..2......#BR..3b..$Cr.....4S...Dc.T%............?..N.W..A.`..uH.p.J.hg.Qx.../8.....}.R...D..,.{9K.......d.5..6DD-.o..Jv2L....Sm..5L-..h.e.Q.?%..pyX.....[1....,D..B(..p.%{.`..1..I.........+.."....+...b..E.8~..I. ..]n..S.........e5.Q.s.'E./j.l...]..9.cnsnO..x.&[1p.....SPenN".jwT..F.G6P.n...!.w.i.ev.=....q.fi.e.[k..w...d.H.8....96...gy.pA...'.=...E.s.z..5...N..4E$...%.......A-MT.B..o}....f....b...i.L[G.Y.L1-...g......r(n........Z...#PlT.h..EVTM..C6.o~.S.l..w.(v.U\.x.../X..N. ...s.....h3......M...N.UEC.!a.. [..../x...j...i.Y..4.d.....6.f#k...Bl...s.d]..p/..h..g#3o.+\|3......s..1..[..<..$Z....i..+wl..H^

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5188
Entropy (8bit):	7.952928145135762
Encrypted:	false
SSDEEP:	96:9JKglioE6pMcO5oiXZuh+u/U7pLnZ0jnn7dwp5KRf0271XM8zAJPzSjCWdJ28/p2:9J66pTOlI+u/U7pLnZ0jn7dwuRfU8zAd
MD5:	714ACF1F5A07C6204BBD7E59194A2870
SHA1:	3F8170F84AA88CC81D56C4383CF3758E7945D71F
SHA-256:	1C58D90328C77231DAAA4F46073F3BADE862DB0E24A896F1B17912BB52C0FDDA
SHA-512:	FE1D52B327E09B1936B156546DF09F10802ED8D51C474217F4E02FFB8C312F519540136833C5E51A07CC7E25A748F2DECAC7D393885BF4AF05A53CB9C52465B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..y.T..?..^Uuu7.44;..K..n.Mp.4..Fe.......dr.1.....%.q"q..h......3!.9..M7.`\..l..&.MwUW...?Z<4T5U.....>.p..{..~.}........(P O.\;.)v\.....KP..)....Z.b........b-b<..W$f ..A$b.r....~.L.e...2.;b{[..#eFt0.A...P...2T.#...U-..E...h=p@.N............/.}.+.....v..%.GS..2......A.lE.B....Q.Aw!...g..5...[CM...k6x.6..y/...'.....a.@......m..ETv"l.j.....}W.~.]O.#/..u.XW\g..~.1.LPaX~9....V.Z./...U..\{u4y...~..X<../.0.t.H(.~..V.7....U...6......WH]... .-P..$O\|K......{z.s..z.......&L..7..$..\..!v......^.J....._<..9...3....\.....DY.h2..\[..b;'..]8.r.s?.A@ .>d....S...U...6.U.w.3,....Q.3.(..<.....+k.).F.&...3...0"[6...5.fz....d.\V...s.c^.d..@8W..z....c.G.\|~\YK...9o......c&r.....~....:...{..%y...O.O....}..~.p3.`dLo9.g..U.F... 8.^.gj._.a"...}e..ll:....h...m.....q.g.2.d..I.K.5.p. ...m...e!...\|E..~..X+.@.....>[..8(.>.wy.A?MeD.=S...N....A...k.-_^].N.....eq.PsIA..X.....\|yuC6Lv....X.HA...\|..._...P..vJ....

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2018
Entropy (8bit):	7.567869290702255
Encrypted:	false
SSDEEP:	48:gK9jv5RQ6SWRW631PSDHcpS6VnTMxSx/kjfooEH2bd:gK9rc6Sk5X2xShsT62bd
MD5:	9B282D6F7D4EF76BD33E3BD8AD6F944C
SHA1:	A05D234D5265BBE63CBEEFBCC584D288D036FDFE
SHA-256:	3DCE4B1E1B0FD56F0552E03CEA8404EBDBF0A42534834255A2E85D0FC16E62F4
SHA-512:	3409ECDB91502306A7A5E49CA3D66B632A7407A06A18C1F1D88236FF220C28C258F09CF4725426673A27E643D008C2EA51B10ED6BBCC318287BEAC649848F873
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....IDATx....NU..?/.;$?e~..%......L~.Wo...VKkd...[S......h.....$d.....B....sw.s..>.}^...g.;.9..s..\|..{.cSPRR...........+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+.R..M...;U.tr.O.;..2....`".B..Q..'.._.t.6......4....)..\|....Kx...;....Qp...........2..+U..._?.._........$........-.....c.k....`.++.N.....!.w.......T.,...MC[.r......."..`.pE.k~s.H...(R6..........0.....w..f.P.9x.K.....=eh.."/.F..?..c.o....'h.....R.....]~.0........ ......=...o0...1K..]:7S.\..v.i.;`...ro.6..j.p.Z.SI.y..P...P....X....\|M.o...].H.:.../....x.KWxeA.N2..#./..g.....&0......p3.v...k..6w.k.y...^..{...G.h.....s.......\|..^yr...{f...S2..r..n...Z..,....Z...bR#o...1..9.)..h.U.F...W...../ Xj....9W......[]yKB....].mJw.H....Q.{..:Q.y..l..2.G..(...X..t.....rW!#.?.....r.....}..b.!#.dtC(..P.O....W.*w.;W.L/.=.:.{u..t........,v.z.,u.4..#K..4.t...nq.i..W.....##....

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x384, components 3
Category:	downloaded
Size (bytes):	39975
Entropy (8bit):	7.956038562229301
Encrypted:	false
SSDEEP:	768:Yp6ZaktUB9oQ9N62ex6rTFt6CWh6sW/mWy+x0TGWGuwJHENfJJak:YcPdQyeFAh6sWObW0T4ZHol
MD5:	AD9E05AA6369227CA1148D86159B5418
SHA1:	0992E7FC72D8651714D3E3226FCDA5F140AC091E
SHA-256:	4E1FFDC86847DE0C72A4E3BCF0B559E65B439CAD79FBDBDAA8F30B6DDCE2D48D
SHA-512:	09960A794B29AF6A5F61AAE794D417565388B8EEA844F5359EDE77FA4580C7274CFEE2BB09DC561B384FB5A34AAB7A0EB377C8A67BA376E37A462707F30374E5
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/xeVlvzZX32eg9zc9V7MLUWaEeOnwoa5OQfrgI10U4ub8QA6iwdq1TgcOpLTBiKQTosiNxtMBtpOvh_z7fq7eoISf53UZqZMd0dZR0gSLAAMFkK9vVfQ?=w1440
Preview:	......JFIF.....................................................................................................................................................................................................X........................!..1AQ.."a2q.....#BRr..3b...$CS...........Tcs.....5DEU...%4t..................................;........................!1AQa.q....."2....B.R.b#$3Sr.................?..%dy.P.j...&.C@%.....@%..4 CB...-@!....,h.&.C@.....@........&..@6.@6h.j....@.....o.e.\|I...s.e....X..w......8.Ov.....%.np~..1..sD$..W1....9rJPeQ{e6.....o...f..4....8..X..5&......wk.'..I`.8...K..8"..oq..]..R.9+&m.....H.~.....M_*".....QbL.....\..........l..X}...M..=...C.."oa..r...s.B}.z.Hj9\U2.;..d.#_.S<r....x..^.....WP....B..'....}....^....r.f..^...T.l....yi~c.9..2.D.....q..........Y...+.....h.Kxl.......mx....Q...8m..Ojl.r.lAgnzt'K...xi^..fW...".X H._.......].2x..MI.a.....E.HA..)f9...g.U....t...%.E..W.hoZ..JdD[......U/.8$.?u.-.[...Q......6..V.\>b....RH..".bT6RG..

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1203)
Category:	downloaded
Size (bytes):	8529
Entropy (8bit):	5.104088396586703
Encrypted:	false
SSDEEP:	192:5HCHaHEr9uIHjOschHCqPHsHbuHU/HL+8H8bKuHm3:MrP+if
MD5:	073DACAAD1F71A1B60CB6C73BE21A940
SHA1:	5D58B96FBF447E3EDAA6BE0E06AD7386EC66C2E6
SHA-256:	D83F983E6D22A2A2D37E3EE9D2E119BFFF7EF1C8E7B8671DF73BEA8BC93F9FC2
SHA-512:	F24B5E616DDDFA39F1CCFB430C8B9C206FBF5DCDE4CC5234D4996E716D055A67A1DB04ADAA50A047DA0581718E200F58ABCC4078A5ED2D5D33CEEED42293BDCA
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap
Preview:	/* [0] /.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.woff2) format('woff2');. unicode-range: U+1f1e6-1f1ff;.}./ [1] /.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.1.woff2) format('woff2');. unicode-range: U+200d, U+2620, U+26a7, U+fe0f, U+1f308, U+1f38c, U+1f3c1, U+1f3f3-1f3f4, U+1f6a9, U+e0062-e0063, U+e0065, U+e0067, U+e006c, U+e006e, U+e0073-e0074, U+e0077, U+e007f;.}./ [2] */.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.2.woff2) format('woff2');. unicode-range

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10906
Entropy (8bit):	7.976159811086094
Encrypted:	false
SSDEEP:	192:TOgtGkBrrBF40535s0+0IuklO7ifO00Mj5hjnR1aY1ozr0YI/rOgL99UHKh9TBO2:TOmHBt5JdGw7ify8hjPB1of5I/66fJhV
MD5:	21C3437676BD897D92D912BC18FAB8E0
SHA1:	E99E5CEF97011C5A4211A80AC9658740B9E887F4
SHA-256:	92D6567B2D8FD8559F9280C426D4710E3F6E660689E7830D698ECF8DDDB8E2B9
SHA-512:	CA578C3BAA1FA96F31A80732664E2E438D40200B0944788DC92F5FD27B3F3E4C2C55967E8D624F2E765A1576FAB076C6A3379B87AF8D9F7C437B033F1F2CF2B5
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/33fCN1bFbB2G1iGDGzlBd_BAWes-Nlv-Qt8ByRpEBU43Lu_mF6twx5kmmN4OE6Z_Gz6x7qXTStQItO4yGA0eEejKPSmSqPb-xpF-=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d... .IDATx..w.%G}.?....{..$Ih....PF..l.w..c0...@.6`.....:p..{If.66.H....6..,..DVB.e.4...y......?:...0..9..s...........jx.....9z..... y.....7..cyg.jl..[p].wT]..............@L..3w(...3...g7.......l.x....1......Z.cT......%E\......4...U;#...<.7f.kt..v....L...........tW.J.:..].....UG6.,'-.z......W.T....P..U....!.Gp.8....x4BU?P...X.;r...v..}p...=...\|i...x.gv..1....9qN..axVAd..4B.a.@[..@...A.....T.c.@..!....P..9...Wom....}..<xxz.rt.....W^0f^^.qQ=..f`.ta...B%.V.n.U.!..r.2..8@..<....r.sO.p..w.....:.....gvO.....:.j-.s..P#N.q.......(.w..u,@... .l/zr...M.k................]........k..~/.b..}...xX...I.y"xF1F.V<..U.{<(].;6..m.........qy.K.B=...j...`X.x.~_........'.92Sv.Cu.\|f..}.GuG..Q.W_...c...f(..7.....=.?.bz..{.;....({f..q...yo..-w....3..I....E...}-.....".xIu,...........\|.K..Y.j.;.y.?.......}.P.[..]8.u+...{.+...Gl.W.t..=.;ld...^..gU.......}H..Q[.wT...T...p.:.....>r$.}D../?^....p.o{.XX.E;....

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	520
Entropy (8bit):	7.329809256156843
Encrypted:	false
SSDEEP:	12:6v/7buJOCksnNy8coa5lq/8F65NDWHCtAQFRTIGA:guJ+snNDCXq/8F6TDWiyQFRct
MD5:	9BB7C80D0739F63F2ED78D8C98275A21
SHA1:	309DB67BCFDC47324CF3A07BDD5652747EB6317B
SHA-256:	1D36882BEFDB2D8DFB92880693A1E66D81558A8CF0E511E6D943557FD1D1E6E8
SHA-512:	DB9A6F398C2D9CFA3FA8818E49E745D0A7B157F0E76E7B1636532CCCCCC4BDF219CA4641E2309C62BAB93FF9927FA25FA706012F7D5CAB17D512CEE258C4D9EE
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/j0mZxqPUZ28oopliF6vSV0okYdXUPZH__5C5_4zuI1eNoLd-JFgAFWu4oPFvxTguMH_lihh76znHXocGuTuDGVtlaryO0cLZSNPVMA=h120
Preview:	.PNG........IHDR...`...`.....H.......IDATx...%.Tq..p</.w...... .V.i..Mh.X...........v./..y..6MQ.EQ..1....D.]'.}4=.......O0?...y.w........7..d"`2.@=.P..`...M.8...O_...A'.....cQ..W.z..d.u..k\|..'OZ.("....J..h....oC....a...g`..3>...e....C3.@.k.<6..Z..X.]X...z..X...r.l........v.....0D......F.7..4.97..4.....C.t...6.............[\|. .0..<.....%...P...\|.q+.... .... .... ..a.p...).\|>.?.O.........\|>.?.I.n>...[.. ..E!..X.6.....x.>.jW....y.S..........m<....?.w..p..........4..x....U..(..(o..#@.F..I....IEND.B`.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4175
Entropy (8bit):	7.792037496841981
Encrypted:	false
SSDEEP:	96:CNjUwmdPbBhCwrndwU/FVNk3twv+EEXFx9y8TFk:884wT1bi39EuVymk
MD5:	528CFAAE326A3BB9E2AC8FA84F86B629
SHA1:	2896806E67CA814B3A1CDCB3269570AE59CD63F5
SHA-256:	208D04BF349F845F35F37B1F14EA345663C3A538408CF593CCC57D0AA8746565
SHA-512:	81DC39DF65F3455A96356621DCED76F92253F13AF90A4048D154FA24BE322D6B8DD4B98A75A2840EF802577418F09A029A1D770EF4D2F61AF3DE902C9EFDB9F4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:fad22fce-9b5e-40af-8da4-79ebc9d7b747" xmpMM:DocumentID="xmp.did:77C7253ABDC411E7AA94B0991AE57A61" xmpMM:InstanceID="xmp.iid:647C83D0BDBA11E7AA94B0991AE57A61" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2b506a1b-0412-4705-a778-18e227438701" stRef:documentID="adobe:docid:photoshop:db2f6a03-054e-117b-b783-bbf95c42df91"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`H....._IDATx..[{pT.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	317
Entropy (8bit):	6.467101344584937
Encrypted:	false
SSDEEP:	6:6v/lhP2kzIJUAtn2AT40zsOqsO0I+Ovc+7/7XOxDezzBCwmj9NzJ5tjp:6v/7bIz5gvsO0I+uc+7/TOxSztBMNdJ
MD5:	37F302AA20D8E2FB90DD63E02A09B412
SHA1:	8ED2529CDC84025E92F73B80C534FE5700C316CB
SHA-256:	0B1E433CECCB9E1D81EC4844F52C22B25870BC47EA4E7188F2D4B0E040CC542C
SHA-512:	F71D69B38DFCBF0C307A49943DE082EFECE67A8000ECB957B6A3117505781019649425578042B8B17ABD983BBC6C1F27007FFF3E0F273C21A7E90EAA0E93B655
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/7_L1xfZLxnsy0kmXFl439RwH0gIAVlj_oCQYZj4NUD0PpxU23s8TDNtLGZxMAaBT1sryYuRpw-e9mo5q5nsCjeIpm_w0ep-6gbdiGw=h120
Preview:	.PNG........IHDR...`...`.....H.......IDATx...1..@..a:.0.x.w. Px.C<.DN..X.h4..!.c....o...l..B.!....Y.z..7.QwU.5..e..?kR....-r..j......6.g75..jG.Ye8.w.....+....z...........Q............X...:...........k.........................?.zw.h...+@...49:~..,#?....>..q..U..V...<.&..._k.T.a..S.r..'..B..M..H+.q59.....IEND.B`.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15208, version 1.0
Category:	downloaded
Size (bytes):	15208
Entropy (8bit):	7.982663162282351
Encrypted:	false
SSDEEP:	384:W83RLtRZmZ5GJ5Ugs0fRdyXIgRTXy/W8sJn1vS+umw/C5s9PZ9/:W83RLtRcGMgfCXhzWWFJnd3xwZ9Pr
MD5:	CD05F978145C3B6F58B800C1FB5EF436
SHA1:	916E50A357512D525C2850C8429E1E091574C9C9
SHA-256:	F36242B1AB1AC1316640455B84D157E26487BFBB2B847C6DD4107D6CA071617F
SHA-512:	6B7A8ABDE8611B63B3C26312B9C8ED688E7BBD2A29131F5DC0FDAD53770DEA2ECADF9CD14D432AC56EDB340CC86BB075F6EB176E10285F29CE57A4C8F47F3A48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2
Preview:	wOF2......;h.......L..;..........................."..`..(.`........\..w.....6.$.... ..x..%...........n..d......4.HM:V....:dX@S......V...n.h4.f...d.3ki.zpo..._\|......_.6...!H!....Y.=T<....h.S}...Nk.F.%gN].N.WLz....IN.......%{..1.6.0j#....H........3.[.......L....~.o....".4..].I..wm..F.D%5:!.....-,...UP.z..`.A`...V..Q...b......y..u.Uo\$=..6.{.....Q.....p.)p......SO.=.y..V..%D....n24...<.G)-...r{.m.1E4..\P...%....tF.....A....&. HW..$Vw..Soeu...<..M.U.....7.}.kE.]}..F4...7.....6i..0."A....._..}.w...[ .....;..E.r\|..].....P..OM.wB.f&...F.E..+..2j..N...9-.mJ).....1.....e}.....%......C.Z......4.}..Nd...T...*...Tw.....YqDv.9d..N...H.f...Y...T...!.I.\.w..t%R.v.\|..4Nk....)..f.^.7.........3.V\|.....,dK._..[.&....:{u/... "..."....c{...\....$.W1...i..:..5..v!T.ks>"......X.X.# ^._..I.`..F.Mm...].......S".6A.P. \...%...`....'.@.n..;.R.@..e....3.L..rt<{/...^.{.'..l....I0.}.d.=.Y.....^.z.-.......zg......<K.....m..9.;}..5.'...'...^pVAo..K....\|.V^n.O..S.C5...n..x.\|.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.845350936622435
Encrypted:	false
SSDEEP:	3:a3s5E3C:a3KE3C
MD5:	169FD8A4A66188491593969BAD0F4EAB
SHA1:	5DCF616EAED4D8DD3537549BFAF997E6726F6450
SHA-256:	A0A1F98FCA203B8561519A06BACFDC50E4B3C4A5A71E740DA5B0875BD4FC00D6
SHA-512:	9D4A767C5DF1CCBD92F4D19DF6A32079BC498727A4D9DB255A5C424925A589BCD3B858137B48DC07D4097A1AA329194CC2C60AA7CF3F322B7B81D9F24DCA05F2
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/glue/cookienotificationbar/config/2b.json?hl=en
Preview:	{ "required": false }.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 341, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	193609
Entropy (8bit):	7.997486741473688
Encrypted:	true
SSDEEP:	3072:xyMl+ztzGdKsmFKKSpO2fmwXQ3bUdsfSsnSXFkIpX+jJonuA46tpMbBkVHh/skQq:xDlQ6dyF5UmwXaNfSsnS1CjJonXHkQhr
MD5:	36EB24FB52166D0C85330E04220B1691
SHA1:	C745F010F08546479803F8B68FE5F4CC7F46A2C2
SHA-256:	3C10ADF9692F3105840F95B2528E8A674D69146192B38620422433A983EAD87C
SHA-512:	9E09F41BD5630F28F7372AF6A6F77F1DE7236279B20D0245C7B666C60F242542AFBCB379846DE357ED4884273EDB936892F1547BD4D805C33200E8E41DFC705A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......U........t....sBIT.....O... .IDATx.d}...#..n..k..6....t...z..9.RUf._H..8......\|...H..........1.....(..1.H..p..$$...O~....0........9...b.......@R.p..?.?....H...H. ..o.@H.v..8;.`.C...O..~.$...9.Ie.D.D..k.4.........>..U......`(x_.a6......7.@....?...P...C...2_o..`,..YcA.J..D.<l...q.....F....#)\| ....>.,bg...ND...~........v..2z. u..<"x....H.........P#.p..I..a...H.#...$.`...]..y'#....D<.G..@.! ....CV.b.B..0..."..#....}.YY.FY.#......DVk..<..`r.oA (....q.....mDE.j.0...D.1 .S9...g...]....i...H...t....?\|..c,mC..FJ...k../...w;..3#.. ?G.....(7._....a.g...t.Y"A.?.;+B@C++..a.}F4TO.s.O.......<U.Y.cvq.Ud.8..?..OL.H..W.@...0 .g".'{N...<..P....~. .0....0....X...w..LY:.Cn.M...O..V.\|..M....#.=fc.......[Y.:.A.z...t.....].F..p. X..v.....,..!F...p.y-...Q...O..vx$...m...x...`y..(.x.'{H.@..zh(..E.RX...<....D.....Q.i:.A....y....C........#. .a....4..G.;6.^...D........c".m......N.EuP...O;...)j.'.j..u%.p.W..e.).T..$z.....!!<0}..a.`..GP.../;S....\|.a9...

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2571
Entropy (8bit):	7.841383828832313
Encrypted:	false
SSDEEP:	48:pHdsnaGXZg+M4e4oJKVPfjx+uAzp5+i7+AjAJVs71z/YKg0dNGRa3nzzQpkuCE/1:TGXa+M4e4oJKVPff+pTb8s7tYKg0HGRT
MD5:	17DD15778517BE6FA704D181739E7836
SHA1:	CABC2D123EB963C33863E3F9CA0270E7D7074212
SHA-256:	99E78EE6CD2E303D2E2576C5FBDA8BF117328D62196C4E977CB846D88B72B561
SHA-512:	D6A6A7CEB236DF923D9E1A39D9ECDD312554E3600180C9F88C78762C08D53EA327BB44D3A440C0711C28D0BF28B8CA4CFF4ED0F7E2D15E14902A1B416C9D7E6F
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/IW5qFdrQ464i6bDzhjV2xJvvGDsrvssd3hqgNC-Y0VDwnriCuvrzsftsfCEBzXg37G0QJAfGy9te8w8v2jebrajiiviDGB6_y1G2=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2...WIDATx....UU..?.....!.Z>P.J..~K")c.. ..2L.a.5S..aZJ....W..AIA45..M.5...Y....1P..K......>....9..sy..>3g......_..{....`..a..a..a..a..a..a..a..a..a..Z...3......p.V.MN..>.]......b....9.9@..J......Y`#p.8Y.k,J`..!.v........,N..4.,.z................Dt.Q.u..x....0F.I..[...=.Q..Cb:2j.oL.....td.LwL...{b:2j&.s...Ux.X.<..........o...<..'p.8...B.^..g...1..j....`......a8...........8&p.1....\pL..c........\m......5..\-.2...a...X....`.........F/ F.o.f~..ZK.z).@f...w.a..c.........'."K..H..%d.w.{..K..I_.N...\|.]@.z..v.;.......<.x......&...c.u....C....Q.......k.......@'.8.^...6.O..n,1...H....\..f......#..q.;.o##.JL?-.&.N'.S..........)i.......e.u).3q...ci.....j."...J.:E...:.#p....g...,N.l.N..<........V.s.k...ib...m!$...,S..... f.5....$,.F......i\-.4`.zm...Ph.1../..'...?.f...D`<..\....V.7...w.N......N(.v2P.w.R..q.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (836)
Category:	downloaded
Size (bytes):	18822
Entropy (8bit):	5.3056831436034
Encrypted:	false
SSDEEP:	384:DNXu+nlrIBiGszoARY/sMUidMEgDxXP9I9YgCXYWPre:Dh7leih0AEslity16YTYWPre
MD5:	D2FF5610DBC045DCFA375E6B286DEAFF
SHA1:	0FB08D1902DE9CD1CDF8E206475519609E423468
SHA-256:	3345A8906A740C66B01AA1A12880D7D84B5566EF8DFE7C553B1552B8348D58D7
SHA-512:	782DCF6FB5865AA639A7479E1C4FAFF3CB2F74166114241038E2BE05988A0CAFC5A41092289DD20FE3A6AF7E1198DC0C2933D1A3B3B8FB821940B5CD62155A9B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/glue/cookienotificationbar/cookienotificationbar.min.js
Preview:	(function(){'use strict';function p(a){var c=0;return function(){return c<a.length?{done:!1,value:a[c++]}:{done:!0}}}var q="function"==typeof Object.defineProperties?Object.defineProperty:function(a,c,b){if(a==Array.prototype\|\|a==Object.prototype)return a;a[c]=b.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var c=0;c<a.length;++c){var b=a[c];if(b&&b.Math==Math)return b}throw Error("Cannot find global object");}var r=aa(this);function t(a,c){if(c)a:{var b=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in b))break a;b=b[f]}a=a[a.length-1];d=b[a];c=c(d);c!=d&&null!=c&&q(b,a,{configurable:!0,writable:!0,value:c})}}.t("Symbol",function(a){function c(h){if(this instanceof c)throw new TypeError("Symbol is not a constructor");return new b(d+(h\|\|"")+"_"+f++,h)}function b(h,e){this.g=h;q(this,"description",{configurable:!0,writable:!0,value:e})}if(a)re

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 58 x 58, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18405
Entropy (8bit):	3.30307468404555
Encrypted:	false
SSDEEP:	96:oFZ/I09Da01l+gmkyTt6Hk8nT7skEWRwxNXuBQ5uPqcVAG0PuwfTl:oFS0tKg9E05T4kt+puGuwfTl
MD5:	6E79FA388ECA6523260E1B19714CB06D
SHA1:	67F1D1C01DC339EA0C07D2299B5BD5BC1D62F4FE
SHA-256:	F9991B7C4894AF087C50FDEF3F3BDDB0856197877DDA93840D0967C6895BD4B5
SHA-512:	C227F81EB418CEB66D94E14CA6B44E1210A62DFF2FE5741E48922864C526805C9DE60ED68C81E3278007D4AD95F3EA349EBA969050A5511C991AEC75AFDFF689
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/I95wjYii8vhFSSx-aSYdh2hPAMjgZkA9yjarSQoOd98COwOxkAVn_dulBcTcfbsa7Limy6IKX6G95ep6OB6y2yMLMiX0YEqFx3KQHQ=h120
Preview:	.PNG........IHDR...:...:......J(....pHYs...#...#.x.?v...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8164
Entropy (8bit):	7.958796570138763
Encrypted:	false
SSDEEP:	192:P7WZ6e6Dd1Q0GbQkM1ArCUxAf9EMVtM/GU57C2:P7W8h1Q0Gb9r/AlE+cG0
MD5:	509AB59C88711D0071CB4AA0BE726BDF
SHA1:	30B8F22D9C0EC7F1D119AF2198CBE22994C29EF9
SHA-256:	947AB25349EDE3D639E5C45571441E0D970074286795B63B16B141937104AD1D
SHA-512:	5EC50CDEB48F37F83D66F82A88094E8FB3514B7A91A67452182951285C4059D9E98723B9A7069C79F81AAC9E6CEDB3D1D14F2DABA5D255E794B4D6401CE2B1B5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..}w.\...v.....4.#f.#AH .P@ P ..$...,......-~.]{...v..g.......l.. ,d.L....BBY.:...?n.....==..O_3v..U....9...>.q.Vm...w.ck.c.>nD-&...m-\U[...qO...5,&..._j+9..~....v..cx....%.D.e.$.[..8@...w.H...........F..P..!.=6l......v...U[.J.$..p...M..E..0..E.'.jh.JRY..F....u.._...V].+.^m..{_.O.....r...A...1.....`..N....~.}{~....;...T...[7~d..Kj6h. ...t..........s.p.........K./d...`(h.....]...8.8..>.....K.[4.W.u.g.AAS>0.e[>v.WN..qC..D.c.y.a.j.\|.....Z..@..?..&:~........%$6'....s.1 .1..y.[...Y......F..9.\.6....Y..p$A+..Z.O$.e..8...r.s.B.h..8.l......Q.n..?8...h.0...._..c....BLap.L.eB.....>.......]..b....<.{...vt8_.....e#..5.\|.~.U...A1.<RV.C..K^..Y.#.V....z.....<....i..U.%.."\|...?.[.5..]Bo..!.7..yG..*]..c....?D..C.$\.....L.D<c...N..%oYc.$..c..l....R-..f....2......8MOX....>..v........@..t0"..F.......#4.X4......\-....S.wcB..5.RAE....W........V}.9..{)~...Z.....R.W....w...c............R

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5805
Entropy (8bit):	7.9542006310437126
Encrypted:	false
SSDEEP:	96:t9UzyN3uV9rFvd89BSK+b+n3P/WB64548U3zuH1pgD/ln5KCKH:/U2N+V9rj8DSK+bB5DKuH1oln5lq
MD5:	D0656A971972F0807AB746BE522ADD05
SHA1:	5DEB386A5C5481D9A4AE91E37E175A4E656AE245
SHA-256:	C7B0BC63C6F5631DADD177E4EA287231713A0FF78A36213806ACC9BF760A4D4E
SHA-512:	6DC7991439E91FF4901ACF4AB19FBFC83A9B9E5CB26ABB9987FA72937C84609407A894806B2E7802419C7A550C7F3075DCE0DA33063705ECC51F8F957A6D3D79
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....dIDATx..y....?.{o/4K./..(.`.d......8..I.8.3.e.%...8nAt.h.'.8O6......q.lFE.D.PD.f...Uu......t..[....y.~.....U.:...s.D..%J.)Rh.r.....2M5$..16.5.. .D...E."&....'..=/u.WnK..@P....=Y.=kf..Vc..F..F9i..~80..:T..P...A.BU2j.RF....m.........1...<.W.]...S.."=M..:..H...&.z...?......H.[RE...!i...k..".;.'b.6o".5..$..>...0...9=A.:o.D\..:ew&..Q..w>v].............D....H..<.f..^..sF.....3OD......iIk..D..........`w.t.. .pyQ.[..H...)6.c:....F..#.....DE.......V.{...,.'V>.4.......g.8....fnK.c.FD)>a[#.~....=.%..!Y....-.{..._&.0..._V...R......=..2 .nu..7....]..K...PT..nE..mO..y..lk..X......<.j1...%..z..k\|.....a[#.U..1..Y.......C>.....w.ra.$...k..'....}yr.?..~....?.....c8.m......y.yj....\|..=c.u.}{S...Pm.b...j}J..G>.....E.^...... ..B.c>u..=..omj..["O...HGe+2.u...H8wn......m..H.6......x.,_.;.;..)z........%q..*$.qj...8....8=.y.. \|sW..4.s;-.A....>Y..7Q..e.-:o........s...I..s.,_u.P.....`=c.4..+.%q;...

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14796, version 1.0
Category:	downloaded
Size (bytes):	14796
Entropy (8bit):	7.982540816037374
Encrypted:	false
SSDEEP:	192:500PiJaGs6M7Ury7W2TYPIJ0BXMx0XKH6k8cfVHULW3Xcc4c9iSUqIcW/40k+H5g:2aeMQxxBX00L2VC+X4chU3cUjHkeW
MD5:	675DF44DB2BAFC60DF7052DA41F6C94B
SHA1:	8B766EB9F1DC9F4F6B6C81028570FD03A5F59509
SHA-256:	8300BA70904617A47A80E9098FE00B3F7AEFD328519318C420289B0BBDFB5E2C
SHA-512:	201864ED71D01588CDADC0BB0E074BD67BF37F8ECF5E570EE87EBC7510CCE70D70DD8979EB170D7560B223B625A0A2BBFA8985E637AE0389EDA25C3134CA8F93
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2
Preview:	wOF2......9........$..9p..........................".....(.`........P........6.$.... .....%..........}.i6.....T..F!.'....sr2..{`..:.K..".....BZ.[p.B..l..<...iX...t..bo.+X..s.K...k/6..!/...A.K.....uT.;q. ZE.J.z.:.p.3.m.Or....~..3.\|..x..3.H.Yt.Lhf...w...{...S.eP............'L.F.....,...aT..A./V~D......~.Y.....}.}.f....K.........m.s.l..`.O@#..0..#>w.H.5pW..9....u.cZ.p.................X...$t..=7...J:UQ...j.\|}..=.,]..\|...`0H...g...miX.g.v.7...!.....8..",...El..*.Al..N.F......H.....s.L...R..z..G..>Ij..i..s.k[.....KK..x....2./z....._2H..d.O..`.e/..:.=.Ry.l...L..a.t@...Pv......1q.^.a~<..R..1..4.p.3..h.....M.s..`X.0........@-.KH6=..E...6...<.( ...VV.^.`.'.<.......?.=L#4"%^\|-"....IR.uM,..n....Z1.l..\|r..n.%r..Z.........!.........&7....L..z....m~/C7L"..L...B...n"((.....z..FM..\..Q.W.p}G.[8..+X..x.a..""X"..^........z.5"......o.....l...Mi[....:....F@..}h.?!.....y[<j5..p./...#..d......M..^....S7.0i..C..[.z.>..=Q....V.N9]...4.9....g]Q.'.'..,.X.....W

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x120, components 3
Category:	downloaded
Size (bytes):	3266
Entropy (8bit):	7.852627538876169
Encrypted:	false
SSDEEP:	96:qt1HKAKySfASN3pxt6fImZlHjlBIsAyZkGpcjT:W4AKFo60gsAIk+cjT
MD5:	F68A96B7A1C51CF5159DB73E22597AF4
SHA1:	9C7B49A43FEE2EDA51CB554B3D7F6999386C2B76
SHA-256:	3E64CB5E301757480594DBF1D52CD5A5129600C0216B526E190A25C1D4263136
SHA-512:	FCDF61A2C62B35C5E511ADF2CD7E77B84C76B38F8242CCB19BBC788839C5AE624CF062F2D9279DC46788C4A76A988FDDA1936B53E8743BA4B9E1823D2E2E408E
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/PVDn9Oj6dMbqqydywzGuLAPkbLwDX3Uuv1t6K8MORXFuQAVBLPNAy_yaQBc7bE-qmLHCmWThtcuwCFEwJPR_w6SDj_Um1q0FK7vC0w=h120
Preview:	......JFIF......................................................................................................................................................x.x..".........................................B..........................!1..."AQ2aq.....#3Br..$CRbt5S...%c.....................................7........................!1..AQa"Bq......2br....#34R..............?..:R.!)Q.f.)....]<..]..-.......1.(&..K6.......;8.Iwr=.H/ku........i.H....b.kF:E....Z....i..ox..M....d.H.......k...d.4.jM...l..x7.YYe..7.@.8..mmn..M.[....}..:#..6..76m......-.\|...P......\>l.&....s....W.._ZZv.3e{ms.%c.L.?."D.....sO.u.G#$n..#.7..M3S_S.JR.%A..4!a.6..t.h..{..6...../h....'8#.joX{ej......'.....T.2?.....o..V.';....$nb..H.W......8,...J......$....3...E...y\.+..7.y].v...O._T...q.T..R.>...s.W.R...(Jf..JR.!~..(...NU.u#...0#...o..l]kO.I&.\|..wd..x.\...i.8.+...[.R..v./-=..q..:...M.;~.....yH..DR.....`r..ES.WZ..,.A.aym!?.&M..qB..j........k.........#1....9.tSJR...*.....A.P.O3\.gs....]...

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11772, version 1.0
Category:	downloaded
Size (bytes):	11772
Entropy (8bit):	7.980951134807218
Encrypted:	false
SSDEEP:	192:ChWJPw3k6T0R3d4jwADqVhrh2x6eE/dSQp4/PQ0JJIOHU5/QyfjY:1JER0aZAda6kQIF44ec
MD5:	6F4D4A8899EE0298DB1717070AE4761E
SHA1:	44F0F6B77E5AB005E6F74C4EC65DC7600503B4E2
SHA-256:	CC3DCEB979B73443783E4E0837A1609009CBB7F6C31683B5171BC9A930F7D7AD
SHA-512:	9A53E083804C3D53A95337F07832E9C59B14F2A4974FA11074CF04EC427BD19BE7EAC368D27AD30EF1BC7AAA4E2DD5A19E3F27E45FA4DBB10A368356A60D0AC5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
Preview:	wOF2......-.......q<..-..........................@..f..0.`....H..<........ ..t.....6.$..d. ..~. ..)..e.l\eF...!...E.ZM...q...K....4.1.:.......g.V....j.VuD.T....@uO.iD'.:i..:\.....@\|f....i...........S.....~..>.%...Su...$cv....@. ..V...........9L.S.T.g.'...K7'.D].D].9...&.............Y\|....F....r.2..BV./l-\...9........V..y..w.yo....K...".('..A.rv..24P..7.....R..do.dw..7b..c.;"...?..e.xl.$......T...B....\|....I.K..kYw.p.....Mr..N.....=.c.e....P...m..m`........A.fBW..8......l....#.....Z .!...O.{.........e...[....C...\|X..d.=A....9.\...(.T..=.vS.eZ.C/-...@...Y;Il[. ......}-.\..U%..O...0....36..-.z.....#....!(....(.c..b...3..(....?A..4.."..Yr8..u.o.P.(bf...&#.(7...2....>.O3...\..Z.%K.h.f...:...VI.&.....$.~.....-..X8,.\.}.}.:......Z....3.....{...._..Uo.x_...*@..s..x.6....../...Wy..+^....h.a..........J..p..;.V. t..rD.. .^.Z...,..-.....(.J...\|.......Y.A<..~..d.l.kZ'.....br%.X....Y...5...T(B./.C.....)K....bba.S.P.m..a.]v+V..>.j.kt.!G.s.W.6.:t...).

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 450 x 172, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13774
Entropy (8bit):	7.944711003640627
Encrypted:	false
SSDEEP:	384:01qL4zTHu7/uCmxv174d0+ZavjF1G9oTMKM:0lv7BxePavj7G9oTY
MD5:	12CE2116411D544583503AD29BAAAB87
SHA1:	732C478CB69E681E371A9E968E3E391A9E39D0CB
SHA-256:	D035BCE456DBB0842F418ACDF3F517547D1668D6951CCFA49265ADFC31969679
SHA-512:	F768E96FAE5CA17C50E8E1956115C4B3EBF2FC3FE58BBCB995C01AE307A6F65C1F03BBED5697C8A87310D6E608CCA0CA351E2E5234E3F698E4117C239C98ED51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................bKGD............ .IDATx...{\|T.7..z.L23..$..bUZo.../....XH&.m....7.....X[.I.s.z#..G..S{QS.2...$A..h..H.TI.ff...Y...J.}.3.'a}?..!3{=O...f..\.!..B.!..B.!..B.!....@:..p.......WY.Ci.;.....#..r.^.....B..~C..^T.6..i.>..'.8..x.......#....`...bR......J..F...J.o ...+...2S.m..Q..a..s....V...<...h..@....6..B...(.3.s.r........p..]......,.......B......e..g..7.p.3..?=`..............B....<....B,o.....s$.y..M^..q...c...&1...a,.F1..1...W....Y..i...;&...o.S.+.8+6"z.b.[.8...$)..n..wc.:...O...>...N.!....`.pu......>.."x...nP6o)....\......B..=O.a....e.c.1..9.a...a........K8.u...B.;O.a.B...D.B.Y0....i6..?.X...e^wF.!.G.^...F...+....}.........}....!.Hg!b...M.....ik7........u_...H..B8...)[.{..w1.OG...0f.]YM.6.;"..G..O..u_.c...8=.m.F.<..>.!.,.......l...Me;..;Y~..^wB.!.d).5Z.0V.d..".#fVW..~x....B.#YJ..g...x.3rR..( `a...S^.C.!.t..ayu.P...O. ..*..J..j.fl..]J......o{?.z..7W.Y9>.r.\|...q&.@L..05.\|o...~7...B...B......8...&...uf...Y..kG..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	401
Entropy (8bit):	4.740133908247468
Encrypted:	false
SSDEEP:	12:tvcmdU/i3tLIsKd2aCJNfOQxNVtd7Svq6JwCA7V:tk2U/i3tv46vxNdSvqCw9V
MD5:	E2DBF6370751567D561BB64649CB3342
SHA1:	42792B6B81D2386B95F295CA7473C929CFE4FB0C
SHA-256:	C1BD37E48A2AFA7523AED613951F5411A03DC1597344A9639DDAA4EFF32F0D7E
SHA-512:	792FABC52F0D9DC8BDAC569C0AED7C6B61C29293B8EE43C62A50533F23EFE440C9EB4B34393D3BA82CBB32A99F43EA16ABBE2B187F9A88E013579194C43B4178
Malicious:	false
Reputation:	low
URL:	https://about.google/assets-products/img/glue-help.svg
Preview:	<svg id="help" width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path fill="#5f6368" d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 17h-2v-2h2v2zm2.07-7.75l-.9.92C13.45 12.9 13 13.5 13 15h-2v-.5c0-1.1.45-2.1 1.17-2.83l1.24-1.26c.37-.36.59-.86.59-1.41 0-1.1-.9-2-2-2s-2 .9-2 2H8c0-2.21 1.79-4 4-4s4 1.79 4 4c0 .88-.36 1.68-.93 2.25z"></path></svg>.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6066
Entropy (8bit):	7.948540478279252
Encrypted:	false
SSDEEP:	96:+qIAQCTbvD1bCGw4LyVT3WGdJ19dmCxwpnVtVx0A+wb6waFUB1EjdZSjJhy+aP:NIIP1rg1rGVtVx32JUA+IJ
MD5:	0A14F02B3129AC89EF58B4DB619C9CB1
SHA1:	BE77E19DB300FCA67ABE1B86AAC242A7C99D9072
SHA-256:	4C1FE18727A6B2D1102B1623B2CA2EB7626F740ADF4AC3DFC169C7067550F0CD
SHA-512:	02FC1AE4341637990DFF7F94C30CC403C41C67B269C34921AB8E33921893D7C1DE490C4D17314EE25C29B81961798F52E776434D9FEB336BF86DAB548E9C2532
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....iIDATx..{t..}...v$$Y<.m.$..`K....rz..ZrhJB.....`..@l.`......?h..JB!....(%'..#4...@.....P.........Y.V3...].\|9b.3.....}.~wf......t.....B..!).........i...XA.x)E..j4..{SO:\+.n...g....1.4.\....u..K.z8`Z.@....D.Qf.4._......p...........1....Zp...8^....-..U.hR./6.;...7..]#...:v......\.%.fRdMe.8.o.p.....z.lytt..c..&# ..;.-..[. .p.........m....r..3.J.YCq$..P.....`6\|..t.\|....M......R9..BZY.D..8...r...^{..unR]D..z*%.7..r@..D.y;..R..TkQ..~.\|.&...PL(.s\...{..Z.f.......~.Y<..[.7\v..}.nO-Em....Um..[..9k../.w.kQ.5..i.....0...`p...^q.C.w{j......Tqa..&.4c.......W.a.&.B.P..dVXo.LN....?..`........\...}....0....p.5"+..I. .S.5.O.../..Ag\B.i#.,..=m/o[..E..K.....3.>Y...=L..,7..`.:.......z.h\'..wgc]g!8Xn...............sk_.aC.Ik...c..m.........J....w.C..).u.)6........sM......g....&.........H.)..j.\|........h.$Xc.`.....0.N....r........EA.7.Y~..w=.V.FUO....O......0y....ih...N.".%I...J..j..??p.s>...p..K..=

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2820
Entropy (8bit):	7.900738588343292
Encrypted:	false
SSDEEP:	48:rGgIbZi/ysPd4BGgPv2g+wQejjwCGfdWT/C5fMtg3t0OTU9slqfnAQGHP3Ugx/NW:6NQyyo5giwV2eiOTUWlwnA5TFW
MD5:	1C285791519D01D10A9DDC339C00E9E0
SHA1:	E87A6DB2D169E01CFF98F4DB7AB1D2F3E6CEFDD1
SHA-256:	83E10BAB9E405D64A960602405BC94E6C66225BA11F406640C2EF8AE6C1B9459
SHA-512:	A0421698D9BE40294C510B320875317772D9388FE2E77F07C6157C9C570F680B1B4AF4E0B6A6D084667DFD14314A1F2EA61D79CE6C73611F1C4FEFA1ACD20D99
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/wbRbWxRbQyojtDDUj_ITsoMZNbSAnroic0AYABmbab8qE-sgODk26wLCYUcJrqW11-I50N3GE6iTCY_Sfa7ud4vMa9fig4YdinEa9w=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{......y.....S...PlE#.RR..F......i.ZK.5U.im.6..4j."h...j..u .PCd..G.\....wAW.Xvg..1wu.....y..6.lr.....o.3gf$"..d.+.E.\|..].......[.t9..!y....Z[..%.-@....w....o..Tn."..s.-...x...g3...mu..K.[...N.m.~....F.y./....9..\k.Z... T....zx....K.d.p....WrB#......+.....W7.Ks.-.......F......k.E8.[..r.-5N4>..-..U...."Y...h>...@.N.....S.....6t....I,.>...:..1C.. ..2..(c$...]..<....j.k2...A...i.G...=../..........,.4....g...G....l..\|..1p...... ........@......8.LV..w.'.U.W...]M..[.. ,.....CY.6t5....l..$../.......l...:.{......8.;.cc.q...X.]]...Dr]F.&..3.Zs...AY.6t5a...@.>;.H.......~..T..l...Z.....:.c..E?...X..:.#(......-v....b..]u9....Q}.k.>;.....2...r}y9N.y..$/7^...4.x..F...6t........E`...kXWs...G...t....]m.n...gs..HX.q.wN...7/bg...e.n..;.............I....._.c.t....L.8...`CW..~...1o...Y......a]...O.R.O.0..l.j...p&>.X.. ...33..L.\|..J."...._.6t...n...\..f..D5.g...Us...q.....`CW........x....U..7g=..

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2820
Entropy (8bit):	7.900738588343292
Encrypted:	false
SSDEEP:	48:rGgIbZi/ysPd4BGgPv2g+wQejjwCGfdWT/C5fMtg3t0OTU9slqfnAQGHP3Ugx/NW:6NQyyo5giwV2eiOTUWlwnA5TFW
MD5:	1C285791519D01D10A9DDC339C00E9E0
SHA1:	E87A6DB2D169E01CFF98F4DB7AB1D2F3E6CEFDD1
SHA-256:	83E10BAB9E405D64A960602405BC94E6C66225BA11F406640C2EF8AE6C1B9459
SHA-512:	A0421698D9BE40294C510B320875317772D9388FE2E77F07C6157C9C570F680B1B4AF4E0B6A6D084667DFD14314A1F2EA61D79CE6C73611F1C4FEFA1ACD20D99
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{......y.....S...PlE#.RR..F......i.ZK.5U.im.6..4j."h...j..u .PCd..G.\....wAW.Xvg..1wu.....y..6.lr.....o.3gf$"..d.+.E.\|..].......[.t9..!y....Z[..%.-@....w....o..Tn."..s.-...x...g3...mu..K.[...N.m.~....F.y./....9..\k.Z... T....zx....K.d.p....WrB#......+.....W7.Ks.-.......F......k.E8.[..r.-5N4>..-..U...."Y...h>...@.N.....S.....6t....I,.>...:..1C.. ..2..(c$...]..<....j.k2...A...i.G...=../..........,.4....g...G....l..\|..1p...... ........@......8.LV..w.'.U.W...]M..[.. ,.....CY.6t5....l..$../.......l...:.{......8.;.cc.q...X.]]...Dr]F.&..3.Zs...AY.6t5a...@.>;.H.......~..T..l...Z.....:.c..E?...X..:.#(......-v....b..]u9....Q}.k.>;.....2...r}y9N.y..$/7^...4.x..F...6t........E`...kXWs...G...t....]m.n...gs..HX.q.wN...7/bg...e.n..;.............I....._.c.t....L.8...`CW..~...1o...Y......a]...O.R.O.0..l.j...p&>.X.. ...33..L.\|..J."...._.6t...n...\..f..D5.g...Us...q.....`CW........x....U..7g=..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4368
Entropy (8bit):	7.935127043893243
Encrypted:	false
SSDEEP:	96:GgmxsMIfnPecPf7bV2aRyzTku4Z/vnZoXDdtwVzNtUr7q9:1mXIvG6t2yydk3optwVz0re9
MD5:	A76B1B113BFEA58A3CB5216AF2D413B9
SHA1:	E1004D0BFC84ACE411ECBF9662B827E8B37DCD2D
SHA-256:	4BFC4D734A0BD70BC97EE5F17DE6720CEAB8ED7922BEB7B40DCE4F707C1968F2
SHA-512:	3D54A45E49D462814FA65D3D99B6FC96B6EA26DE78A49815A5AE447A14395A6A5661C15EE67F07C7947799A5226118980B4B4A8770953C596D0911D06A193667
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/UqZcYFgfFclRU46MshhuCQD79idBZ8hyIe5WkQ1VLzG47w-Mgu6yGriGkL_YiYF2qau5jrufzTNwFp84tw7Lm-f9t2vQLkrECfur=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{tT...}..cH...........h..p.....\|..u.V..j.h[....^Q.uy[...e+.."...m...........#...y...d .d2.33g.\|kee.Y..g....;..}..I.&M.4i.I.&M.4i.I.&M..".....-.O..."...........5...!..P........-X.=.....\|...\|..#`.%h..'....:.Hd..;.t.9M..J...xTq8k.q.......6...rR.a.xNu.\..Do.2.......,...3N......0.Mv;B#q{....T....U.G..tF...'/<l.:{\..}.b5.Jf0.."-#g....hj;c...K.5..c.nGodx..z.j........QJ..].M}g.`9}..FC_........e.J.;)..i......#...........-W......_f...(7.....!..i.}Z......0..-....+^..\lt.PL.....>+XN.X.h..;=r..m......\.y."....H..'...I..uk......7^aA.....=..e{....#.O.j...R".7..Zd..%.... .G.P...U%..\|..>....\..d.Y....]..JI.....H..O ....x/.......J............\|=.R....y..:.W.l.~.....F.D.;%..o.H..N..5..q..R...J.Dx..vD....#d<....^.....8..])-.)......Z.v..+4>..?.SV.S"........xA..n.=]..`G$T...(Q..SN.......QW.v...5..."..;.[.(:..5..]~.v.....')#.......'?......=.dQ.Yg.;..J..r......'.d\.+..';B...-f....L........&..........

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	7.691383605236124
Encrypted:	false
SSDEEP:	24:AXfRSOvVfz9i4aYnlzzM/gC5L17rEdMC44W+KrFPazxG:YF79tlzz7GdEMC4XvxOG
MD5:	96749937F159FC2ED45E2E2733F439FE
SHA1:	C6F5FA809B17F9FC2EF50ECEC28BB257209BE6BE
SHA-256:	71BD8D7C6185CBF1E744B627B3BAAC348F610AE8DD7DDC73410FD23400D72E8D
SHA-512:	C9D5681E1D40587B111F1D82491CF15BDE88A863400772A7A4EFE0F0FEF759DF5D0EA12AAC7A915AE421C83C2448EC01608727D9C6ADFA93298231D0385D5E16
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/p5lVJAicHuI6Ra6jtpYimNt53JZQNCcN06a-Q4fUaNVFo3cjVisZMY_UwBTg5fv2MUkrbwbfTw70N9-bbTfejp9S8rUNadIhWiqh=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx....k\U.....if251/..E...b(..I].......QI....6.E.. .....J[+..1.-...i..:1.d...E..f........].=.2..C.N."""".g\|_`p....^........Tf....x...G.'}?..-...\d........c...$...0iL...3...r......=.2...q.1...`l...m..L..6.\|.....q5rO.7.....J.=.6K..D....,....$}.2].&v.8...........`.."..9......xm..^..v../...v.b`9./...n.b`y../..C............/../..........Id.b.x.>x1p.b...8...^...X./.N.......u.b..q..Y8....... .9-}`H..Z2.t.....o.....]..)H....r..h..........K..V....c..1p..8p..8...........c......5......w..P.....ug1~.....Z.K.&.Su...o.:.6.L^..Ee...C6..+G.....s.:>z.{\|...Z.S..Nu....l...\..(ep........"....P.:.......m....~.!...q...-..DV.......1...q.I.Y\)]/7.....Ov...z..n.?..E....[[........8ly..%...Y....B6.u.S9....K>>S.!...?......B..........u......Y..E...O.VI.e"`~..7^;..^.\|1..c_...{.~.........M^}.[...a....UD-.^vE._w{.."....E...G.Ql..).}.7Z7..\|.T&j.]If..m..k_.'K#...D..{..'..P.....%8.......?...4....6.......L..1...

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	4883
Entropy (8bit):	7.957249280703148
Encrypted:	false
SSDEEP:	96:oHDOMqOW9A42Gj3lY6uVlltmXoIzcfOVKR13/YYYcWPJUV3+O+EtWwxC:oHDzqOWSGj+TXmXoIzVVKH/ePaTvte
MD5:	DD9CE681146E98F99DA3F328FFB195B4
SHA1:	0195DA0CEA828BB1E00B4A60A36CCF4DD87A64F7
SHA-256:	005A040CA94B0B4D5303B3110D62DC7A664D7A41E7C08B31E68A7C3B5EC99643
SHA-512:	FC70ED46CD2378AADA92826060699E63C8C3D0276C62F96926DE4C124D59DE2D450E7DE65390AFFF982166F1596751E7650F3F055FB3275A5378DAB1AD23D9A3
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/iP-z8txDr3nlls3-oUo38PkHRmEyAJ0biVE52VyF_jPV8IYzANODEi8arqixXSn27AspqpmvG-7jbouNAUB1HicnS1dh3LZ4C_WsPKVZ1ik_2CmO=h120
Preview:	.PNG........IHDR...x...x.............sBIT.....O...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2...`IDATx..]{p\.y.}..K..k%[.dI.._...Q.^.C].i1.....yL..i..J.f(3...4.MH.).f.$.)..........c....%.....}.{...{..wW........{.......s..Q.....X((.] ....JD..%......B....Dt.P".@(.] ....JD..%.......o..G.........R..K..!0C..2\.^..X1.S.$....v....go...5D......i0X......i.-m._Y.r.Vh...o.......3y..W..!?)....$kC2..z~s..'.?xc..fT}.D.O.~...d..s.......kG.}....O.G..Y+.`...;./m:1unc.q!.. @..@..S.t./N..g.......7....e./..9...P&......;>\|#.....}[......"Dg....}o.... .......l}...s...M.>y.hK.b.f`..Q...E9'..)........i.........9. ....^.R...R...u./...Ld>!..............:u.,K,......S...x...?].T].V.'.(U?.~..t$......U9.9.L...b}..........3v,..G\..]P>.9..{.....).XlV.w..Q..A.....C..35._..d.q..y.T....e.f..w..&. B...>b..x*8z[....@.:....b.'.kw....WUB. 7.E..D....'.N...u.x1.wG..0%.!........?.#.uU.....1.i.T...Uv/..D..{0d..#.,nW..uo.~

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1592)
Category:	downloaded
Size (bytes):	294828
Entropy (8bit):	5.468328270983057
Encrypted:	false
SSDEEP:	3072:AqNNdeBUhcYJKM3KUWE4xcG2x5Y8kkY7g9UcmBqRA3jDxMz1Lr9dh:AqNNdeBaf5YdkY7XEATDxCr9dh
MD5:	0F4525FC3209EDC045572EE5936E6368
SHA1:	D6B48BCB2940F48D5B6A37F269F368EEEC1624BA
SHA-256:	4B99623C1EB2D73E920790A23BEDC35997BC0BE6B86292C2CCA9059560BFDFF4
SHA-512:	845E3062AB85FC2BAF1877D2197CFC1C5025CC6EBEB11371095C7D9A834A3E2141438F389A1399ACFE7A552E9F6ABF560AD5A3402AB6BFF3D49CB3A523FDFF2D
Malicious:	false
Reputation:	low
URL:	https://about.google/assets-products/js/index.min.js?cache=d6b48bc
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var b=b\|\|{};b.scope={};b.createTemplateTagFirstArg=function(a){return a.raw=a};b.createTemplateTagFirstArgWithRaw=function(a,c){a.raw=c;return a};b.arrayIteratorImpl=function(a){var c=0;return function(){return c<a.length?{done:!1,value:a[c++]}:{done:!0}}};b.arrayIterator=function(a){return{next:b.arrayIteratorImpl(a)}};b.makeIterator=function(a){var c="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return c?c.call(a):b.arrayIterator(a)};.b.arrayFromIterator=function(a){for(var c,d=[];!(c=a.next()).done;)d.push(c.value);return d};b.arrayFromIterable=function(a){return a instanceof Array?a:b.arrayFromIterator(b.makeIterator(a))};b.ASSUME_ES5=!1;b.ASSUME_NO_NATIVE_MAP=!1;b.ASSUME_NO_NATIVE_SET=!1;b.SIMPLE_FROUND_POLYFILL=!1;b.ISOLATE_POLYFILLS=!1;b.FORCE_POLYFILL_PROMISE=!1;b.FORCE_POLYFILL_PROMISE_WHEN_NO_UNHANDLED_REJECTION=!1;.b.objectCreate=b.ASSUME_ES5\|\|"function"==typeof

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5502
Entropy (8bit):	7.9583133971815805
Encrypted:	false
SSDEEP:	96:XVa38zohDe4txXz0r96fvtSpobDM4m0IoqOWOGcJFFqdWRjQrLD/y5FhJvoIx:lKQ+txXQ56fVSanbuo/WZYFqQ9GLD/CB
MD5:	25786416CACAC49DBCFCC539BF164FCE
SHA1:	A5383EDA671E2DD0CB020EBF038C1FA4B085BEA1
SHA-256:	C0353BABF6CFE50790BF9F86E0A5933F89EB6E95F5602D676CA4288644F48D77
SHA-512:	AF8DC13415D19330C0837A2632B8168B27641287EA6C8E805CD5258EF5CC763287F178EBBB9D039C8CBEEE425B3413A61810E22E27093626684DCDC96FAF62E2
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/Qvc6rWiGG_a6LNQ7Yx5vMmve_5ku8TG7z4vmWG7VBkbcOQfOSE2BS7eBcD1NUOWTsbs9A_Vh-mJpKtsGtG_0f7sIGFy5LwhdOLRg4w=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....5IDATx..i.eGu..u.o.m.{z.{....`....A.B..........%..-...)A.X.,\|..@.B...Ddq..1..`.1..[OO...-..:.p..........G....S....Su...c.1..c.1..c.1..c.1..c.1..c..A.S.so..Ugea.\|..:b......\W.wQ....9.W.....u.h-=..?.a(..v.q.V....5L.].....j.>......O..q.. .S.._.$...n..p.).+F!~....,.S....{-..e...<F.u.+#..z/F..C.e..9K..\.;......S!B.<Q7.......?...e.........[....O...IVy..\..R...>..;......E@b.30..'/.......N9X.a!....).WD(........7.}4,] ..G...r..b.$&.b..B..Ly.v.#.?o./(Mp..y...~.v.MLn...F..Z+.k...W..t?...p..g...B.QI.8.T..&z....;.Rw.+s.=.v..#.%c1.@.........Y<%..AZ.7..m..L\|.'..h.1.....!.V...M..nbi&L.V....`.F,i........4.h.M2.........s.)VP@$..;.;#..B!..:.....l..&........S.T.a{+...r..?..e..3X..y..C...@U.~u._...&0r.....&{\|...V.-I..B.......}.j..).S. ..n...QAX.4.......xm..3...3...hy........d.......7... .NIp..."....3....3.#..j..."Lt.i.`%.N.q[.Qc.&:M+...V...p..%8.R.9....(#...Y....&..oGD'.UP..N.}...1......O.E2...

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 287, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	374689
Entropy (8bit):	7.989828341431557
Encrypted:	false
SSDEEP:	6144:fYzAbkaJw7rCCTmYjs+KUXQhEiV3TaESRcKFKn1WMCHJNUfS1EGU/S0fD9uDGYBB:AzAbjQrCQjJmJaEKZUnILUK1P079uD9
MD5:	9DFC177F59BCC8567988BDC302F05B7E
SHA1:	F72128465036FDD6D119F1CFE6F37C9010F908E6
SHA-256:	61F1CF23F1ADEE8CB6510AA0CFBFDE9E956985788F1BE71556C20CC806FEF2B3
SHA-512:	E10FB7B41B1055C8C510BC2CB0C3A5C5678081DF1465D363A49154DD6689C2FA0DE9CF5C4F4FEED366FD8742F1556741EE92C78B4F0231CC15D7FEF5B99FB638
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............7.~)....sBIT....\|.d... .IDATx...w.d.q...W....j..x.`0..;. ....R...RGI.F...gW..V+...R..)-)Z...g0..t.....e..7...e.......P.z..eFFd./"22!..gF.._.7.....4zfg...1,M....g8....k...X...0.........I.....<....FK .A.+..Q...p3....\<.....:.r ..Z.` .V.....Xx......._[b. Y(........%..f....].s..UrBA....yD..>.Q........!.J.c^....f......Y.M.........AN.X..3B..F{.M.......!R.."..YRg.+._..f...Z..qx.0A.c,..Y....k....'Q.1...g.3.....?..d4vb...q#.%(......a.L..}.>..<p..Z......P)9....z.G\|....(.}w..4......".......M..:.c..\|...8~....+(..:..S.0.r.Z...m.b........Kt.......0.MZ.W...9L:...I>...Ka/.c..2kK+...+...../~......#....G.?..."W.~....".YEm.a...D..;:.........4z..G..q..uT..&3...}>..0.n.9p...c...$..Y.*....F.._......_eU.F.QP.P....KAA..$IBT. d.j.....Y.{...p..16Fwk....... .JB^.c../0s....Vd%.......I..).r.M6..............r....hU...[..y[.;]..mhK....j......F}].. .p...,#.A>..O?w.n....V.!....b4g.%..$.zS.@....2n......8..)\|.(z.:&.L...........+.....}.....d...&>o+7.V8..o3\|.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (948)
Category:	downloaded
Size (bytes):	35703
Entropy (8bit):	5.589649545615838
Encrypted:	false
SSDEEP:	768:ndOiRvyLqygICMHJbqKwuc2Ku8fxDpvZrRvxQqookBBGXhSA4YSF273XAgow4ow1:dOSHGENgR
MD5:	0A3DB760B7B5E72A7F880AB6560BA972
SHA1:	24F14A10933ED8AC1D6D53382F121EDC34F8650B
SHA-256:	638E17840C0FD287F2AD6BEAA93D4B87C50E1D00825DA8A321B76605C4A6E0AF
SHA-512:	F25BE455FB60D0432F539E1A6735904DBE4615AF324397D86603355459C6AC627720807C504605842F4362F10ACF19C2E146440CDB21AA6EDC9F1348DB1824DE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-account-creation-evolution/_/js/k=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.en.gHw4OasNpuE.es5.O/ck=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.bWe33vrUwGU.L.B1.O/am=AQACAzoHQTwX58AHiBCGAQAAAAAgAACYMQBgBg/d=1/exm=A7fCU,AvtSve,E87wgc,EFQ78c,GmCzyb,I6YDgd,IZT63,IwHAB,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VBiA0d,VwDzFe,WpP9Yc,YHI3We,YTxL4,ZwDk9d,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,bm51tf,byfTOb,f8Gu1e,hc6Ubd,inNHtf,joVoKf,kibjWe,lsjVmc,ltDFwf,lwddkf,m9oV,n73qwf,oLggrd,pxq3x,qPYxq,qjNilb,qmdT9,rmumx,siKnQd,soHxf,tUnxGc,uzifod,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,nameview/ed=1/wt=2/ujg=1/rs=ADR-Iupodx3aNP3Fz-JEYFGw_WCeBOKC5w/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=NTMZac,sOXFj,q0xTif,m1N5E"
Preview:	"use strict";_F_installCss(".wZjtve{overflow-x:auto}sentinel{}");.this.default_AccountLifecyclePlatformSignupUi=this.default_AccountLifecyclePlatformSignupUi\|\|{};(function(_){var window=this;.try{._.wg(_.Rka);._.k("sOXFj");.var ou=function(a){_.H.call(this,a.Ea)};_.z(ou,_.H);ou.Ma=_.H.Ma;ou.Ba=_.H.Ba;ou.prototype.aa=function(a){return a()};_.hu(_.Qka,ou);._.m();._.k("oGtAuc");._.tra=new _.lf(_.Rka);._.m();._.k("q0xTif");.var ssa=function(a){var b=function(d){_.Yo(d)&&(_.Yo(d).Tb=null,_.Au(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},Nu=function(a){_.Gs.call(this,a.Ea);this.Oa=this.dom=null;if(this.hi()){var b=_.Nm(this.Af(),[_.An,_.zn]);b=_.Cj([b[_.An],b[_.zn]]).then(function(c){this.Oa=c[0];this.dom=c[1]},null,this);_.au(this,b)}this.La=a.jh.I6};_.z(Nu,_.Gs);Nu.Ba=function(){return{jh:{I6:function(){return _.hg(this)}}}};Nu.prototype.getContext=function(a){return this.La.getContext(a)};.Nu.prototype.getData=function(a){retu

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	22
Entropy (8bit):	3.845350936622435
Encrypted:	false
SSDEEP:	3:a3s5E3C:a3KE3C
MD5:	169FD8A4A66188491593969BAD0F4EAB
SHA1:	5DCF616EAED4D8DD3537549BFAF997E6726F6450
SHA-256:	A0A1F98FCA203B8561519A06BACFDC50E4B3C4A5A71E740DA5B0875BD4FC00D6
SHA-512:	9D4A767C5DF1CCBD92F4D19DF6A32079BC498727A4D9DB255A5C424925A589BCD3B858137B48DC07D4097A1AA329194CC2C60AA7CF3F322B7B81D9F24DCA05F2
Malicious:	false
Reputation:	low
Preview:	{ "required": false }.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5268
Entropy (8bit):	7.934303412189919
Encrypted:	false
SSDEEP:	96:OoDKfJfSWvT1aeJ7xum8IjHpOffBdJxHEU72GSmeh5XrHfhsvADZ8Ym71:O6KfTvTAeE8Jg/UkefJsCQ1
MD5:	ECDB64DF3C43153CC2EF90DD9EBFDC9C
SHA1:	3CE421421E02252E69F0CF5C8CE45D17CF46CD3F
SHA-256:	7714E183A0DC5240E3DF84F877EEFA7CEE1AE6370AE865F124E982952FC9D01F
SHA-512:	7C51A4C7CA03147022512450E526E5969EB8473AB0BFA2CA108B907115630996B130F60F90DAE30DBD23E89727B142C201A4418F5526AC35DAB65F2FCBE57C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....KIDATx..]i...u...mf.M+..Y...J..&....`c;..d3!.`7U@l.\Hb...Wab.Z0...")..'..0 (. c.,6.`..!..7o.{....7.....L..}U.4..[...s.m`.S....0.)t..J..gMJ..O..R,@ .$...)k....9HS...+7(..4.0....G'x.d"V.....,...39o.`....A...X.c..5d..s]...'..lfn\Hue,%......}.\\|../......=..w.r....{..............hT..m.....C....x&............t...Q.B,......C....X!...!3(.-...%D:...q.3v....u.Bu.{.u.....<z.#.:2.+.....h. Z{.G._..F....;...)..9.....1z.............(PJ..;o.`....d.x$v.........Y......I7.....oP...........C.{.#.&.HVJ0.9...h.P...+.O-D4.6.5{..pc....j.`)....L....}D4.6..e$+W.."..........w.?t].....!8.....a..a ..........R.".%........E.%!.9..h...........i..J......0..&h...W.\|x....z...Ew..Bn...n....51=cj.W......h...u......q...kbf..V....M...U...'...V...&f[.X3C....iC"F.b%..b.F.....x@.b.....5....7u}NV..dY.(.d...j.s..t..&.,K..K....jT,.....$y.7.&hfJ......]]Bu......U5z#j.U..\k..g.....pS...A..Aea@$rU .}4.....z,...._.^..A)..e....H.....>..(.M

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2868
Entropy (8bit):	7.870419486890277
Encrypted:	false
SSDEEP:	48:vd51HhEgDjHoHrsEklQKXZLXihPiWeCNeya8UHFQCojuyCpnVqnIXC61ztY:lbHhEmjIHrs9QKXZ7iZxefHzJ+05NtY
MD5:	FD9E72172066D4A461DAEAC02AD11ABB
SHA1:	B5A8F16D4163F81D6BB94C113C7FDBF63E0765AE
SHA-256:	BCE867BF6CA75C930FA3504FC579600E93149E059BBA181BCFB6848B799F6B39
SHA-512:	767A8018A89FB3D9176066EE2BA3C4EA9BD2E115364EA47F29DE880C1EBB33E31DB482275CC969F44EBFE222E09FBA9EE155C7E755C3F90D21FD66691980C0BC
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/QFmSDvHe7MgYcFlQF_wNttnmAm4s-y-UN24oPZRoPDiOCjX60ol7yhSa_WiN-NwCmXiafElg33YH4J5wFVy_bAqzseZz1oSNtADw_A=h120
Preview:	.PNG........IHDR...`...`......w8....pHYs.........mh......IDATx..mlS...../i....8..b.%.D.x.....%..I..jh..I..>aV..^...m..M.p>u.6)h...1s`P%......N.!d@.b....}...8..};.:..R..}.s...y..<.\.J.P.8LF7`.S..`..o.\|.at..@......X7.<........C...7H.....X........@....~..N.....C..i.......@f..d........... .....E.Z._)........vB.......H..P...#.I.].]......."..... .O..@.$..).........Z.Q..BW.^.....!@..y..............1.@.... .. M'..H....a.c~...........Cq?....=.. .....>.H..Z.= ...>Za.J.xu.......}.i...z(.a\s......8../...v.'Z...Z..,...u.A.. ..g!$.b.l...@.V'hMz.+..8..1?BN!Z..[..5..R-..>...&..;4.S.3...{.ZC...\|pg!:...$.5..-...X.....4_U.Pq.j..X[..p...ta.;?..u..K6...W$....`a.p%...i..Y..U..k....`....+.Z........f....x..a7../F.....@`...-..............}..SN..k~2.G)....~.2..,y.U...;.....f-X..CS.D....z.E.g..bx../..W.rp.g....g.B..N.5..q..[&.O..d.........N.i6..%@. ...U.I...\|0....C...'.D...........H.rRz...Mj..`N..........1..J.p.n.9.B..\|e......r..[ .:.....}.C...c~.0..k..~t..ZF>..q

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17340
Entropy (8bit):	5.067364655703976
Encrypted:	false
SSDEEP:	192:uuNqIZ4Z106EgmQDL5aroqOwqDTCFzvRk6OUhypB+pLx4RHFn/xQT/rp9otXAjpk:9CZ1/yGMzHJ9Cx8/F9oJkk
MD5:	834F6EA34164404280588344845E1ED1
SHA1:	00A7EF46A463F946EFDF592404A8ABD64C7F41AF
SHA-256:	E266F524EC965D09C15A044FAD2A225063F7834F35DFD322222E4EA1C488ECC8
SHA-512:	0ABC054313F6EF0123BB435FE0918EBD4AFCD0617FE1501897DE3F49642C4B6E1AE0C0575AC45872F48B286E596254F05EC86E3DADC95EB05F301EB6FBF8DA3A
Malicious:	false
Reputation:	low
Preview:	{"meta":{"total_count":3846},"next_page":"/api/v2/latest?paginate=12&tags=android%2Candroid-tv%2Ccalendar%2Cchrome%2Cchromebooks%2Cchromecast%2Cclassroom%2Cdocs%2Cdrive%2Cforms%2Cgmail%2Cgoogle-ads%2Cgoogle-assistant%2Cgoogle-cloud%2Cgoogle-duo%2Cgoogle-earth%2Cgoogle-fi%2Cgoogle-fit%2Cgoogle-one%2Cgoogle-pay%2Cgoogle-play%2Cgoogle-shopping%2Cgoogle-voice%2Cgoogle-wifi%2Cmeet%2Ckeep%2Cmaps%2Cmessages%2Cnews%2Cphotos%2Cpixel%2Cpixelbook%2Csearch%2Csheets%2Csites%2Cslides%2Cstadia%2Ctranslate%2Cwear-os-by-google%2Cyoutube&fields=&is_main_hero=False&show_hero=True&cursor=2","results":[{"category":"article","tag_name":"Android enterprise","days_since_published":4,"eyebrow":"<time class=\"uni-timesince\" datetime=\"2024-05-23 16:00:00+00:00\" aria-label=\"May 23\">May 23</time> / Android enterprise","slug":"google-ai-on-android-at-work","sitespace_render":"","full_url":"https://blog.google/products/android-enterprise/google-ai-on-android-at-work/","published":"2024-05-23T16:00:00Z","publish

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20784, version 1.0
Category:	downloaded
Size (bytes):	20784
Entropy (8bit):	7.989041194123322
Encrypted:	false
SSDEEP:	384:ldrXYIW4bkISLBTb0r2/y5Eod0/ihRUCuZwCGQf1Hvw/WCZmMyz6:l9YIWzIAfe6yTd0/k0ZZGQ1Y+c9yO
MD5:	E11C810C086DF83C0876DD59ED32EBCB
SHA1:	B89FE2ED6D016F81AF13B35797AD2B0E2E5C6822
SHA-256:	ACC5497E76F832D950D14FCFA047DC3C864F7A0AAE4C7A20521C0C655A53033B
SHA-512:	DB93E7E4818B40C7B16C241441A5BBFCD335121A89A737611ACA4E5BD1F22A7D8FD9A1E79E0D0A7701A497CF6BBC238A7417D5DAC3480D20D4742B9B9717A15C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv79oQ.woff2
Preview:	wOF2......Q0.......l..P..............................b..@.`..~..L..u.....D..'.....6.$.... .....X..#.....6..w;.v....n....yeUtv0v;.+...e..g$'24P.i.6n.!f;C.s&q...S...d..".............T;:....$...9I.....F.....?...px...q.:..qN.+G.X.i.....7N... p.cN...t...wb..."...E>....'Q..._=g... ..1......;..A........i.Z...X.".....1T'..1.N.....s...-[.-.c.c;.I..@w.>...==...L...C.8.....m..)n,.........8....%.Z..~.W..o....^._-_.D...{.~.i.......U.J."..P..%E.nB=.f...5...J...:.$dQ.T).l_..t1...1.o.aI....C.........a[...d......a.:w...-x.;.2.. ...CjA..u...&iS..[.%.G...../n...#.....:../.+.1..........O../.....9g..Cf.J.....&....pS.h.......M%.......=.>&.E..Rj+..#.e]....G..bE,...`.........s.V.].\9.....S....e$.....).".PU.......\..n.Kl[u..+..U.....M&...,......R.U.....;ck......Y..j.....i5.f#.x............t..[ ..Q.0A.W.......xV....:M.\..r#M`2.R.l..p..p......O...P...k6...F4O..%...x...5}g...OY?.8.0..f..+....`Tb3S@a..Q.A...%. ......(..;..P;.Q...k.AJH.s...l.^...^.!.......cc,=.......o

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4934
Entropy (8bit):	7.946299544636253
Encrypted:	false
SSDEEP:	96:QzkrUWX61rGd0LJU7+7iAYdzJWGrn0cce58eXQDvs/PQazmJaPMe7CMT276z5:AWoy28+mAYxJ5n0ceTs/PTN7g7W
MD5:	77AAC48BC9AD8A8D6148A30A1C067200
SHA1:	C3FBE900DA644B044F1A58E07E416560879CD2DF
SHA-256:	27B521E8554E44311BE4A7F331EB05AF5755F26C8FECC2A7E753E888379D4B0B
SHA-512:	9971A39A9D1BAC328AD57C60C789EB7EC0E775C7EE9082AED6B0811C70FAEF0FAD5A67333AC15A9C9BD0875AC3789B60E5CFFA1552C32E444FD35B9FC1EACBAC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..][.%.U].......cl..?b;.X..(8..p...H@$..dKH.....H...... .y.\|.#..#R...!.D.88H1..3.X......Wm>...~TwW....kO/..Lw..U].w...{..-Z.h.E..-Z.h.E..-Z.h.b....>.......J..y..(.....99.NV.+....c..\."U.r.f...O.<...<x.Zc..C.....L.....v....9..~!..n@..J2.'+........1l_.a.>g.....N....].......[..........c..C....V&e....[.`..1.zA.<(...m.....\y.p....{...k_.............?.HH.v.:.4N.F.z.3..Z.......{.Y.#..K...c........}s.&....;.0m.!....r.!?Z%_J.CO:g.&\|W.?..u......]....L.\)..^P..;...."r[.....!.Fs.o...Ye.....X.b.x.-..".p.?T&Sj...l2........M5....%x....4@......y.C.C4.,.V........`.L8...8.X=.R.W....d.....u...X..:i..t.A.[^....AXCn.h...[.z[...sp.F\4..y/q..{..U%l..h.!......5.d5S.L....p.`0..gR....O.J.(..{..T2_.L.^........ZC..h.z....;\|.}..?Hw>.0u...3..>...d...~...}...\|.,...y...]..[.I6N.n.U.6Kp..V9n^.8..........l..

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2577
Entropy (8bit):	7.781446647389294
Encrypted:	false
SSDEEP:	48:hIClmS5juJIIPoy8mJgii5Je64GRWEcaGuFAHvUu3olwHCMtToF3PNxXPqoE:hIQj5jLIwXmJIasRXGhPywHo19P5E
MD5:	DBB859BB594B6AB827C4A148D9343720
SHA1:	BD7E94CCCAEB4B244E0D6A333450013F35FCC817
SHA-256:	679EC39C5CCB27D18357D6E23DE0DFA22D07ED435B09E85F7003FFC3870150D4
SHA-512:	9EA39C37EA3A6395B7E9CD63DA3BAAD1F2585B9BAB598D73B5FEBC7399B8532AC8FE57ED2E77537F9D7E689CE8CC289E20D29060023CD2AAD7ADFF4E03944C71
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P.............PLTE................F........?.......@..-..2..:..'.............4..............1..5..A................k..i..[.....I.........(..................T..3..9....!.....}......................%........t.......8..v..'..+.........................k.....x........S........S.........E...................................>..5............A..........G..Y.......&...............".....................@..%....................................................>.....(..`..:............C..O..1..9..........s..M........m...........?..V..2..a..e..j..&..$..:.......R..&....................4........(..... ..............B..9.....-.."..-../.....E..\..2....7.....0........<..I..<..!........$..*...........D..5........B...................................;.f.....tRNS.@..f....IDATx..eTTi......a...k.....6....( ..H.2 .5...42.H.!.....H.....;.;qa..........y.J<..=..+....)cL@..a-..N..u.w....2..H}..q......WD...<i.W.W_.}&5=...p..Q.....1.....\|..T....4.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	15118
Entropy (8bit):	5.4657756428542035
Encrypted:	false
SSDEEP:	384:IQojHdEA+ggCiU7nnaClpFC+5SYOelHO91eIuW:IQumA+QDnRNOG6
MD5:	EAB0DC82067FB5758A121009C7040231
SHA1:	8D869354F7A947ECC087B23868999BC53F77BDF7
SHA-256:	9C77D6DB3131248F92AE41075F189B4ECC2E51BCFDCCA143719A83145F8AC070
SHA-512:	280694C2A85A67CFFB24DEED946E46D7BF8F2C52194EEE037F981CA25A58730974B5F0CDC74CE86E81C5D252362E6792EB0B38C8816B3BF6C096A58C6C84F1C4
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/googleapis.proxy.js?onload=startup
Preview:	(function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	317
Entropy (8bit):	6.467101344584937
Encrypted:	false
SSDEEP:	6:6v/lhP2kzIJUAtn2AT40zsOqsO0I+Ovc+7/7XOxDezzBCwmj9NzJ5tjp:6v/7bIz5gvsO0I+uc+7/TOxSztBMNdJ
MD5:	37F302AA20D8E2FB90DD63E02A09B412
SHA1:	8ED2529CDC84025E92F73B80C534FE5700C316CB
SHA-256:	0B1E433CECCB9E1D81EC4844F52C22B25870BC47EA4E7188F2D4B0E040CC542C
SHA-512:	F71D69B38DFCBF0C307A49943DE082EFECE67A8000ECB957B6A3117505781019649425578042B8B17ABD983BBC6C1F27007FFF3E0F273C21A7E90EAA0E93B655
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.....H.......IDATx...1..@..a:.0.x.w. Px.C<.DN..X.h4..!.c....o...l..B.!....Y.z..7.QwU.5..e..?kR....-r..j......6.g75..jG.Ye8.w.....+....z...........Q............X...:...........k.........................?.zw.h...+@...49:~..,#?....>..q..U..V...<.&..._k.T.a..S.r..'..B..M..H+.q59.....IEND.B`.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4657
Entropy (8bit):	7.917223420242452
Encrypted:	false
SSDEEP:	96:f+tcvjYJuBvnUAXd1XpD62cq2fDlFyANmVlL9MdpU9wo7:ac0WvXpG2BcflgGDKwo7
MD5:	167A8D64D846EDC2B009636D17582BDD
SHA1:	7ECCA71578241BE5F51C3AF478F5D60F95E6E191
SHA-256:	576A0A869E77E5A405BA34854CA7D3F290D5FBD9973E58B11B9B548DE850E172
SHA-512:	2C7A0C317ACCC779DA4F284E648746A2C2F41FF722DF0B7887D805404DAEB122A1446DA94BB1AE324EA37827FC3F16FDB2739281EEAC4BDB0CAE772BCA768D3F
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/vNgpLTvnDUr6-QM8s4OuuESGDXs_brbGoPR-7vfwdxQI7M4MVFV0CC_Hil4qRDSp4P66ik85fdv09jKn89kDAJVknIbd6wkl0zGQJQ=h120
Preview:	.PNG........IHDR...`...`......w8....IDATx..{PTW..[k...<v3.......[....d..DFE$F.FD......1..b#...J4`DEEC"....AA.A..#.."..v..8[....7{i.}.^NG...o54M..\|....M..M..6.&.D.h.J..Z.z}{zz....r.c...@..b.4......G...=..M.R.u.K.$I...9..l.h.......5.......!1...[[[.............^....8...AY_X.........-...O.'-~..I%.\|~. ...8...%..0ASS..wO......Gp.8.r..IdB~.DB..I.y}.Y.a=.,.kX...G...{.....PVV&Khoo.{.+G..t.01....o...>6..8d....)...Df.Aaa!...Css3tvvr{...m.q+.......O.^.8d..bW.d.s..................h,.&..zC....O..j..L.W.+'.^..,C...^.......e,C..D.P....z..r.vZ..;0.G.OQ../C...............K..!WIx.zC.....u.W....L..E{.p....5.X......klVT.uuu...."...e.J.......>...?}...S.%..Cy.@e....n...o.......7.b.w\...1{/M..7......kC...r..q..........0.'.K...l.NA.\|.z..C8..2t..-y}...."W....k.q3.n.b..#.........).,.K.;w...8.rtn\..[.J1.........].r........,E..@.H.'..'..5...^.z.....2.....Z..............s...@.2C.LY.P..W.(...0V.5.;../.......Q..Y.f.K8......&...@.h.w...90.!..n..2d2......H...7.b..3..

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2718
Entropy (8bit):	7.880291072349662
Encrypted:	false
SSDEEP:	48:mbgJeNEkhZEXQmJ46VJrAJ8cjig5oTK3FvXNnLj9TM7aFXGxVbI7sti:mbyCOQmJ4mE8cH5o21vhd/M+
MD5:	35D265D275688C64B4EADC82DCF95AC9
SHA1:	1C678D990EE7B755F1C6EEF1F9409CB76450C620
SHA-256:	0E41E36790294DE89ABCEE52F8682F393C704D474F4960A5255536BF8823F1C8
SHA-512:	C1F98E199EEDCB06A9AF7B7C5025CAABFBC2449B2F0FA814A8A8FC7C203E935D02D9481C6DD72341B2B1E459245AF3C66E98942F124CF8AC133719A6E5B79D38
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/uPpZapQO32gCKWztePKdTRzpg7rCr4_40vlgIAslU9JyF135ZdGvC33DbzA2mdmOTNK6qgbu7xWfKkR9rfJUwaK20saGLsFW9yw014GdOKBVEN9zow=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....UIDATx...}p.........KxIHHC.D."/A.`+.....H[...P(..:..3..`u.Vf.....u....$Bx.2L...wF.H.)p.TH$... ...>O.......gow...3.=........=.(..(..(..(..(.......4<.f....{`.d$.. b..!8.P..Y.b.`.....\N.U..B.......!.!Y.....".U...d9.0..N.....# r...-..l.zVJ.......2...#..H..:.,.....(u.<cn....rD[.......!..%.....#..<..._~...!.._...;..G........g.=f<.....=.......Y..}..Le....>.9i..7.......0](... .}X!..6n...n.........>..g...8.v..@.x.6.].v.L.g..#....K^......'>/Bws../..#...,..Gt...?....-.=S....w.....?......^..O......7/f....?qq..^.S.Of.8...k....iy9[....,.......l......n'H...._.....v.z.y....._p;BZ^...........iy9[......v0....1=..._0...q;B/^........p;B/^.../...m.q....TO..s....Z...#\|.KY....W.<..X2.Ox......N0c..1..5X_....)...`... .HW.M..[.y.+..?38%Tv.-.m..W...m.<jF^.....f`...mT......F.CA....L.((..u#.9.1.......J..S..........q.01,y..w.)..w...H.Zh76W.:......u.......Hk.y,..`.~` .....\|.E.S...<.0.....X`.@k.y.....W...6U........*...\.@..

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	287
Entropy (8bit):	6.568197697490108
Encrypted:	false
SSDEEP:	6:6v/lhP2S6Kqq+VO1B5+kM5qAuaeTnp8zspzNs1mR3th2yL+p:6v/7aKqqZ1v+d5qAujxsQzh4
MD5:	31D9B6F4EF6346D55DD56B747274D0E9
SHA1:	E34F6642832D1FDBD5A35D4CFC32BAD5209E4811
SHA-256:	C8F5FC6467CA98F32A4472A3BB001902C36A98CF1E2DEAA07CA8BD5EE88BE217
SHA-512:	F92B6EE54681097268B63ED94924FD2AFEC0496B6748EB210692A48AD19FE6416DD9A1844A96AC92418244EA912B5118D859C3DD502A5C21C9115946861E485B
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/R7Wr9OkT5zk4gY2F3-tLiMwhFaMfO_hCU5LpTxztUaTOi8kU7_0QUIvOTlhHLyMol8kvHhVvdWUtjmAZ6cqiwGhwZzdg0fvc-UXtojU=h120
Preview:	.PNG........IHDR...`...`.....H.......IDATx.....A...q...0..r. ...pa...``....q....+{4z~..s.9..=...$.....V.\|U...Dg..........Kw..;..E'@......6.y./v.......fW.z..Ht..<R.....z...H.'@..... @....... @.......>. ... .?@..;.h....D.z..x.O...o..x...k.u.... @...........K.3sI]....IEND.B`.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5859
Entropy (8bit):	7.956973859283456
Encrypted:	false
SSDEEP:	96:myY/feN2gwX9ljkPTn7++Hbbt68mlR1XuW/0/8V0owqcpR1Qzr/JqGDEooGuRG:mlXnVX9pkfrHvI5S8V0xCxqGVo5G
MD5:	4A3EE557D15E7A77FDA9A83FC3B38516
SHA1:	CA3D33DE2D154098A76F40F1F07D2457013356DF
SHA-256:	5A44A1B67F4782F003A466E0FDFBC13B324AEAECE0C4510B10EF8C0CDF0AEFA9
SHA-512:	9D677A1429D84E5B4603CAFFC3B0CDAEF41B6D34EB92C2A08B3C04BE5723562A80BAFCCBDDF83996BFBFA3080DE89135FD71EA45DC1ABE7C5F3BDD3A723BE391
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/JtYUq9HfkkOryxudgp34oqI8qFu9a6mmL64OXjcDX7mfEwcX_pxmTdurvxssofY4swTY2c_M1Kk5o1a863CGTiBZkxxuYXfjiNgz=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..k.$Gu....g.>..{...k.......`lc.8.<.x&. ....(.DJ..,..).......[.... ..c....{c........z...w....:.P..y?.....K}gnwUuu...:u.T..0..3.0..3.0..3..A.L.....&.S.S.m. ..+'..m.._..L(.6.Q...W..W.....W.sK..GQ'U/o.....m.~.....V..}..?x..8...D+o]....J)0.....6..[.!..9..U....cr....M.i...%...\._SZx.m..w..?..../..;7....N..@...+.!!...\.am.E..o.......M...D.<A..cq...O.....I....-.\|.K6.^g...1.O.v.>.!c/...0..G....}.Gt..v.X..3.'..u....3.....$......8..-GW...ox3..M.......]..H..v.~..7uK.]..SW.".x.U..Z...e-..P}..n....V...;.._....].Z..-Y.....z..F....(.v..,.o...0.$.....E.L9...E..1.:._.TE7c.U.z..3_EO.?..4....Y/.YHp/... =L...83.zb..b.2.O?.%....3.....<n.<.m.3[.{..j\.r&{........UiS[...)Y/..k.q`D#...SW...._.....f...w....3...\.&.E.T.=.b...c...U^.........Y..@..w."........V.$. 6B.....`.}...w........BP...x.....O ....`.......X..f......d....+6..7d..$...\.n~3..."..6ly.j-jS1.-....l.-...".}.S;.<.......c..lC.`Ts.3m..e..9.........**!...

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2370)
Category:	downloaded
Size (bytes):	223519
Entropy (8bit):	5.471779704226942
Encrypted:	false
SSDEEP:	3072:Zhkth/W7DCuxywuHoZ9sJIs6orvym8O4WKRPJvv7aly:ZSW7DeIQJI5O4WiBvvus
MD5:	311694B0BFBC564BB1B130742FAE8112
SHA1:	66E8F615753F6BE39CADDCDBA75BE129C60DF57A
SHA-256:	E783B3D09019936C8D1A8C8E0C962371A5020F563E8ECA2714BD0D0F2FBFE498
SHA-512:	E0D055DDF2F5769191B5800C254B290CEA1C36578288EFF2578F0BDE30B27FBFBF885E09460A3F042B14DD20DF8C9778C2A231BCE959AA55705AC42A9050C2C5
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-account-creation-evolution/_/js/k=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.en.gHw4OasNpuE.es5.O/am=AQACAzoHQTwX58AHiBCGAQAAAAAgAACYMQBgBg/d=1/excm=_b,_tp,nameview/ed=1/dg=0/wt=2/ujg=1/rs=ADR-Iup4EjUGiX8t8bep_d-wvQCyZyvCXA/m=_b,_tp"
Preview:	"use strict";this.default_AccountLifecyclePlatformSignupUi=this.default_AccountLifecyclePlatformSignupUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x3020001, 0x31041ce8, 0x3c0e7173, 0x21842201, 0x1, 0x8000, 0x31980, 0x198, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,caa,Pa,gaa,Xa,Za,ab,haa,iaa,bb,fb,jaa,kaa,hb,naa,paa,wb,xb,Bb,vaa,Zb,waa,yaa,Aaa,Daa,ac,bc,cc,dc,ec,fc,Gaa,mc,Jaa,sc,xc,Maa,Naa,Cc,Oaa,ad,Taa,Uaa,Waa,Xaa,Yaa,Zaa,sd,bba,aba,cba,zd,yd,dba,Ad,fba,Cd,Gd,hba,iba,jba,kba,Pd,Od,Qd,nba,Bd,sba,uba,ge,zba,Dba,Eba,xba,Fba,ie,Iba,Jba,Kba,Mba,Nba,be,Lba,Oba,Yba,Ie,Ke,Le,Ne,aca,cca,eca,fca,gca,hca,lca,nca,sca,tca,uca,xca,Fca,Bca,Ica,Of,Pf,Jca,Kca,Mca,Oca,Pca,Qca,fg,Rca,S

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 341, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	333997
Entropy (8bit):	7.985322126173097
Encrypted:	false
SSDEEP:	6144:zQk0MmjTJHXlG2JmcrQe0srLrgkzj/5A9Jt1FmRbeCDxXrBHH2dw7:zb0B/p1jJmQQe0srfF01FmRhDrn2O7
MD5:	DBC4EBC7DAE0FD63CEF2040D23A18C9D
SHA1:	5CEC02F6E30598137B362B9D3873C175FD84FBBB
SHA-256:	339A797B65BDB969A9DFF792A9F42861387F747CDE2C8828E22664650CE8EB24
SHA-512:	DBC4E96A172639AF99A66E4F415E46D9CC532D44FF6358F52B793ACA4ED50199B5278018621A37D1498F3FCCF5934FF8A8D75A2F7AEDED2E66F09832DED362D9
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/MXe6LXpT_1IP98ElixZruA0GQf1A9i-4bfeCtry1-Gej5yWbCpSfNS0HX9JEJiPamMsW5bmJ6BlU_H4SzxLeAI0EWlkwFSA-DU5MCdW4k70Twm49Qzw?=w1440
Preview:	.PNG........IHDR.......U........t...tIDATx.L.I.,I.&.}.,".jf..-.......mf... ..q..........A..@.Pch.3.3.*#2"2"..m."........#..fj.0...........J.(P....p....Y..$.!..DP2. .`..$6..q../..g...LT..t.u9?.....w....eYx.........a.$.SV$...FSmX:.)B.P..3..\|4.+.Y5#Q..mS.<.dM).Y.S.T.....`D...........w.t../.;.4.%<.Y..qX^.T.k.x...X..c:.2...6o.%Br.?.I..^..CRi..7.yIV..\Y.0.D,...{oA....>.".k...Et.I..4..h.h.....E...FB......j&.....H.&&.....2..+&p.'.b.F8{Cmv^.3q...\k...#D."F....`).).7...O..&.,..""..t.H..\|..G....{k..O...zk.q.J2_..2...)..Z.5O.i.I..m...?.u.B;......! ..O.K.@D].],I....\|8.`..\-%5Cw+.=L.b..l.$..0^...\|.....7...>..V{..e....s.ei...iwqyu..rN.1.$..]\..1n.......".j..P.0....Q......e+6..D.8Kx@ET..[H.m.........CTS..t...........PU.A.I4i..FHt.!."........:...V...../.......}i.y..on...M...Z..)=.9#D.0...wS.m.4N.<,..{?....X....a.wZ..,l.....q...T.v.rJ.ly.......d.]n._]o_^...I.M..eS.!@.B...XF.....J2..\|.......?......?..J29..b.+r.v.....V_.....~...x+.C.E...l_..w...5.n.2..M.........

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1764)
Category:	downloaded
Size (bytes):	261193
Entropy (8bit):	5.742084966623113
Encrypted:	false
SSDEEP:	3072:rCiWCzSNSV29NW0OYmPs7gk8/JLDsmvO4qLhIewV4o0iB3vKb3jJ:rtWIvtec4bipK79
MD5:	C9DCCD5C3BBE74CBDBD965E8FB8DC33C
SHA1:	C589341E390E857397808B18DC651E64BDE538B8
SHA-256:	9299D6EE932440F313075A0EE80705914A5246B93FF84C4E09EC1F586E6DF8F1
SHA-512:	AFE102BA4B594F6AB02F576205ADB1D864F37572B3F7C3A407DEE6FF9A791F4B05E305C07E04DB4B6E4C17DCD65F2C984607D3D69520AFF87124B3A4DCB28047
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/survey_binary__en.js
Preview:	var HaTS_a,HaTS_aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},HaTS_ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},HaTS_ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},HaTS_da=HaTS_ca(this),HaTS_b=function(a,b){if(b)a:{var c=HaTS_da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&HaTS_ba(c,a,{configurable:!0,writable:!0,value:b})}};.HaTS_b("Symbol",function(a){if(a)return a;var b=function(f,g){this.Wf=f;HaTS_ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Wf};var c="jscomp_symbol_"

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	325611
Entropy (8bit):	5.5233999895423835
Encrypted:	false
SSDEEP:	6144:l9y0krrBj/k2V72JetI/sZnGq7p9+Of1kIpAzwCuPQBmgC:3yzrhn+etI/GB7TVFX
MD5:	5E1F51F81D8CCC6A9416F2343BB51285
SHA1:	263266F4B4808A8CF944854AFDE4A8B928336AC9
SHA-256:	D7C8CAD0D955B575B2210F6ACBE90B948313F78B49B1A6B3804615DE4E198AC3
SHA-512:	F152D02B1B2D1BB27476538094BAFE9AF0CB885FCD347B01CD1392ECB9576FABBB87459A2B16E81DDAA386C5A56046B7FD195718F5DD4B448C1708B90573EEB3
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	85454
Entropy (8bit):	7.997696947262879
Encrypted:	true
SSDEEP:	1536:MfOsRZJtElnFJQBO5BvNj2oCp0mxawNULF+5+NTg0+rrOgAR9ldT2Kr:MpjJSlnFKEvNjb+lxa+ULF+ENTyOvR9p
MD5:	B2BA32608F5D55B079B2058C4152D6B6
SHA1:	F7D0166BED0460FE8C63585037A522BCA691DFDF
SHA-256:	AB66748C5BE087E3607AE8467FD084D42BEB04B151A71319F01627415788369C
SHA-512:	9C13630272672E7911F6E148BA3729A71EE20CB1BA8B3AC694E3B23C067D5B078312B943677ED0832553A1863F9162966C69E7AFB780A1A67F858FD6691CE445
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/5amGvnxGO54/maxresdefault.webp
Preview:	RIFF.M..WEBPVP8 .M...y.......>m2.G.#+..2.....en)9..@?~U.;..15...K.~q.....@.K.7...G..._4.lz......'._..g.....w.W..(.....x.....=../7..}..\.+.....w./..u}W?.~.\|....U....^?.?V...Y.[....t......../..#.k..(...._.....:.........~...........,.O.?.>._.._.........s...............;:...rpg.."...._.....R...u.S.z...y.4..JP.]......^.M..~.R.......c.B.m.'....{;. F....g.B..:,.e[....Yb...x]....>E..H.?91k.0..!@b.w.}..%..]...D3rm4LN...=..Q....>......b..J..I..Gq..~.......pL..2'..at[..C..n%......I'L.=.V..{..?S.y.JZG....P..:K..%5".. ..}oA.)E>.Y.G.Q{d../..s..\#..........M.H....,\|..Gp.q..u.y.N..sc.......<e... ..QM_y.....?W..X<.Q..W.;3!.K._...A...v... .....z.....o...c....q..?....\...$... ].,.z.7&........He..#...M%..'R.A.....x.w...x..:...g.Z...$....zgX...'...+...!....:.Y]......I.....M..K.."..i.....=O...M.P.r.Vo.Y.....}..'...S.o"E..?.@..5h...o+"i>....L..-.b t.4..Xc....M.ko...9....Y..r....=.:.s1A...80.......E.;(0..D.I.K]........../i$.#.U._..4k.T...[D. 7._.l..]....[...).KM..

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 341, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	333997
Entropy (8bit):	7.985322126173097
Encrypted:	false
SSDEEP:	6144:zQk0MmjTJHXlG2JmcrQe0srLrgkzj/5A9Jt1FmRbeCDxXrBHH2dw7:zb0B/p1jJmQQe0srfF01FmRhDrn2O7
MD5:	DBC4EBC7DAE0FD63CEF2040D23A18C9D
SHA1:	5CEC02F6E30598137B362B9D3873C175FD84FBBB
SHA-256:	339A797B65BDB969A9DFF792A9F42861387F747CDE2C8828E22664650CE8EB24
SHA-512:	DBC4E96A172639AF99A66E4F415E46D9CC532D44FF6358F52B793ACA4ED50199B5278018621A37D1498F3FCCF5934FF8A8D75A2F7AEDED2E66F09832DED362D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......U........t...tIDATx.L.I.,I.&.}.,".jf..-.......mf... ..q..........A..@.Pch.3.3.*#2"2"..m."........#..fj.0...........J.(P....p....Y..$.!..DP2. .`..$6..q../..g...LT..t.u9?.....w....eYx.........a.$.SV$...FSmX:.)B.P..3..\|4.+.Y5#Q..mS.<.dM).Y.S.T.....`D...........w.t../.;.4.%<.Y..qX^.T.k.x...X..c:.2...6o.%Br.?.I..^..CRi..7.yIV..\Y.0.D,...{oA....>.".k...Et.I..4..h.h.....E...FB......j&.....H.&&.....2..+&p.'.b.F8{Cmv^.3q...\k...#D."F....`).).7...O..&.,..""..t.H..\|..G....{k..O...zk.q.J2_..2...)..Z.5O.i.I..m...?.u.B;......! ..O.K.@D].],I....\|8.`..\-%5Cw+.=L.b..l.$..0^...\|.....7...>..V{..e....s.ei...iwqyu..rN.1.$..]\..1n.......".j..P.0....Q......e+6..D.8Kx@ET..[H.m.........CTS..t...........PU.A.I4i..FHt.!."........:...V...../.......}i.y..on...M...Z..)=.9#D.0...wS.m.4N.<,..{?....X....a.wZ..,l.....q...T.v.rJ.ly.......d.]n._]o_^...I.M..eS.!@.B...XF.....J2..\|.......?......?..J29..b.+r.v.....V_.....~...x+.C.E...l_..w...5.n.2..M.........

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4621
Entropy (8bit):	7.935558464764354
Encrypted:	false
SSDEEP:	96:Ll+GIPXVtxc7mP5k98Bij2A8brUZFRQtbWQoiKlBGZWEIiO+L7h:LIPXVqU5k98Bij8MFFQaBGZ9JO+LV
MD5:	57C988CBCC8299B8E99D5FCBA7242AA7
SHA1:	69867D807F54484FD04B1E161FF58ED00F2EAA10
SHA-256:	758858CA060007C297CA68F3D187CA027F16C3064CB74FF848D2B12D984577D2
SHA-512:	2BAB7006D9A364EF1D58D9F939F8966D146CAF07466D4B80AA1B3216F7EAA204CA2CC312429752B0B4A82FA448B07F6769C87791384E9F7F7347E29747645A5F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..y...}.?...C.j/I..H...`....l.p........?...?\..UI... .J.H!.....#..17.....X.M..:v.=$.:vW;.3=..~.c.....9.@..Ilw..{.y......"E..)R.H."E..)R.H."E..)R..J5...g....0.uJ......_.R..!.c5...2{b..cZkD...lK;.R...R....px```...mk.......y4...o.2....DR.-..DD[.%....+..{u.\|X....;wn3p<.L&..DE//....l3....\|.....a..q333k........Hk.h.-<4.?].~o.O..........<.L&.>.H>%"8....m.<....}..4/..;.....;7X.s#5QE...Z&..\|..8...1......?.x...v......+..2.........R...5v.{Gv..-..yk.a$N......A.....&-.>.N...B....os...fr..(.-..1.17..#p.6.#A..a-.+.....wxpt...\|..[Z..A...#5.....w&...<4....Yz<.@.............6...33.pK.C...n...u.ny...2s.&..\t..[\.]4..1q.....af.5-..F.[,/..\..&...}..x...R...r.....e...!~8....\|K.B..er'...O.yr.......\.U.p.?....@n..I......N...-V(.-..(..d...Z....'w.w.^$f[t.p.~.".MT9\.A.....\|...3..Rl.].\t.T.E....#....T..\9.v...$....V.%y..X&O...{'v.....T.....T...od7.9.n.5=:..*..#T/M...#{..[...1...IVHy..5S.2...F.3i..].n;..Q.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	260
Entropy (8bit):	6.365245755118766
Encrypted:	false
SSDEEP:	6:6v/lhPqSh2YQFB5l8MyXH2gVl/BsbJEUG+Osl7tLKZmdnhkR54jujp:6v/7O9Fd8DNl/KGU9OypuZmdhe5uuN
MD5:	B8D1825C5DF3C07F0F840496A37019E7
SHA1:	474F8A50789788B6616E4BEA4E2ABFB64BD985FA
SHA-256:	1B20CFE775D8EE8077AAE7E7C8027866FEA0310AFED03C8B371B9C5DC0243547
SHA-512:	4394E3181C461F3BA149EEDCF00E02812FBC0156146EA342148554C3514A36E14ED7869C8A125BDC507F9C408A1E58F5BA07AC164DE7F102B9A7E30D24275F79
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.............PLTE...uuuuuuuuu.......tRNS.....G.....IDATx^....0..a.L...4...x....(D.,.:...'......~..3................^."$.D...g.H../t"$............."$.DH..P.DH.:P.DH....^*......%y....C............u...8...[;a..'....x.YF.~....IEND.B`.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5805
Entropy (8bit):	7.9542006310437126
Encrypted:	false
SSDEEP:	96:t9UzyN3uV9rFvd89BSK+b+n3P/WB64548U3zuH1pgD/ln5KCKH:/U2N+V9rj8DSK+bB5DKuH1oln5lq
MD5:	D0656A971972F0807AB746BE522ADD05
SHA1:	5DEB386A5C5481D9A4AE91E37E175A4E656AE245
SHA-256:	C7B0BC63C6F5631DADD177E4EA287231713A0FF78A36213806ACC9BF760A4D4E
SHA-512:	6DC7991439E91FF4901ACF4AB19FBFC83A9B9E5CB26ABB9987FA72937C84609407A894806B2E7802419C7A550C7F3075DCE0DA33063705ECC51F8F957A6D3D79
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....dIDATx..y....?.{o/4K./..(.`.d......8..I.8.3.e.%...8nAt.h.'.8O6......q.lFE.D.PD.f...Uu......t..[....y.~.....U.:...s.D..%J.)Rh.r.....2M5$..16.5.. .D...E."&....'..=/u.WnK..@P....=Y.=kf..Vc..F..F9i..~80..:T..P...A.BU2j.RF....m.........1...<.W.]...S.."=M..:..H...&.z...?......H.[RE...!i...k..".;.'b.6o".5..$..>...0...9=A.:o.D\..:ew&..Q..w>v].............D....H..<.f..^..sF.....3OD......iIk..D..........`w.t.. .pyQ.[..H...)6.c:....F..#.....DE.......V.{...,.'V>.4.......g.8....fnK.c.FD)>a[#.~....=.%..!Y....-.{..._&.0..._V...R......=..2 .nu..7....]..K...PT..nE..mO..y..lk..X......<.j1...%..z..k\|.....a[#.U..1..Y.......C>.....w.ra.$...k..'....}yr.?..~....?.....c8.m......y.yj....\|..=c.u.}{S...Pm.b...j}J..G>.....E.^...... ..B.c>u..=..omj..["O...HGe+2.u...H8wn......m..H.6......x.,_.;.;..)z........%q..*$.qj...8....8=.y.. \|sW..4.s;-.A....>Y..7Q..e.-:o........s...I..s.,_u.P.....`=c.4..+.%q;...

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 293, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	252091
Entropy (8bit):	7.993281906966295
Encrypted:	true
SSDEEP:	6144:SXNExScG8yibu+NaFxm8MDil00er56BtjApuBACDSfMEBKqpzMZQ:SXEiiS+488MDK5Mwj0puSfMEBVxKQ
MD5:	95AA3850A2FBF70660D4DCBF1DA4CF0B
SHA1:	FD24A75208F0355F3FAD456A0A30EBF996102AFC
SHA-256:	19BC9C362CECD1A745C7200485168BA3345D5589AC8241E481D2C69C1E52278F
SHA-512:	F73BDC4D7AF3D7FB6BFD89EB45AFD126F6295E059D4DB22128A58B0D40F9C99FCC780C96ACE55603DA4F1DFEDFB50582527B827B2BE20E10858B8F5701FB7402
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......%.......Z.....sBIT....\|.d... .IDATx....uI.&....s.u...32r......[.........G`.....".",Y .....h@Z@.(."..."....s.TY.`v...........AM.............7M.B...o...&..=?..\........].L........x.....;M.<}..U.......+.?Z...,/.\._... b0.....".kD.M.........@.D`.1.1...d.A.M......"f...gj3^../D.y....M. .%..4{.P.M.......t.J...A.......A>..6..F...Z.....G........rG'..}....GW!..;H..TcN.&...u.............n.y...i.T(._}......`Y..h..F'.o..g.1&..]co.@ 6Z..e...#`N.`B.e. ..X..........>..T$.GRd\|.sE.}...)...c....2...1..z.I7..+.."...P(z..........Q./g...K.......v.Q.>.`.....@.e.t.u..k9..5...>.i.9.....H...oY.m.......%p)`I...x.v..7..s...y..D..Fi..j- ...J%.1....P....5..,`"l.."....E.6J).....u].9f..}.(...........U.......a..je.....m.h..xXQ..m...Ke.kE.;..CTqs{.........w....]pX.....,..........(ps..rA.........'.3..f4(3-+...........h.g..g..............._~............?......3......._.q._...5...U..].....u.0y.,S.{.)&?.nrb.).1.F.a....If......tz..NsS.3o...W:m

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3024
Entropy (8bit):	7.916185462769354
Encrypted:	false
SSDEEP:	48:O/6pWg9H0NjXkHtvihsVU5IwRoCyVM41LpwKXYVMYPvHxeVxJ8rMlESE6L4qzupH:OSR8jXkjVU5Iw/ya41LpRYV5HHRYlK6+
MD5:	FBD7BF34502DD9215CC7DB54699DB71F
SHA1:	958A5C26E9AF819EB5A3D2F8E68B44B3A2C5F4DF
SHA-256:	05BA7CE6F3678221C356348D48A80795BE17E71F526C4234B68E657900ECD4BB
SHA-512:	04441C3173B10E3F57984776D3D4B55349093DDB90797C6A1A8A7715779E91FA252F7ACCA7FA168FB550E0096C3E8D1A55649031DAE8AB61FBF0035D5CE05124
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs.................sRGB.........gAMA......a....eIDATx...L....{/ .(hC..,T.d.m1j2k.l.%....b.LG..Z.....N.K...e).I..d.$.[.T..L.v)...B. ?..=.....p.{.....OB.pc.....z......,^......8..c.....Pk.5.......w~.u9).SvJ&.%......\..'.{6...X.....S.s....$....%y.0s...d..q......v.N....I.%y.T....V\)....t..z!......W.......+.&....."z........../.E.[.I7X...,..br...F.>w.\[.cW.3"..!.1Zp..6;Y..\.-...>.S..V...k;I....L.C..u....F....3..-@.....d.1,.!rC...2.N0...c!..............Q.!..r4`.Wk.V..c..t.Q.v~w.m.>.F....7&...Ry.52.#..."........y.J7.+"...y.J'rG....2!I.}.....T....n..H..WY.#..)..Y).....".h....7.x.Jz....>t..v..M."....X...7.K..k...(![.........*.c....p...9.......DBp..V.-.....?.x...]"S.j.Y.o.O:.&..+..."..R..g......N..nl?G2.'...c1\.TG..S..S.Z#X...7>R.,.I..........K.g.:.....?.F.."X6z..)!'..I....]...a.t ..FFp.....W>.Nb.,.t...j.]..@e..\w..w.t.DB0...#.h.,s.([Sq[....,Z..}....C$...M...J..>.}...1.g..\|z..-...t....D.`

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7450
Entropy (8bit):	7.9466762875405195
Encrypted:	false
SSDEEP:	192:v0ydeyEkZzc5EEttyNPp0BorRpMlx8tfRKJRVM1oc:vtEtNGC2rM6KJM1oc
MD5:	68B6198D96D08CD134A08B067984494A
SHA1:	8A7702B58E6DD86B86318160C128A5236EFB2BBD
SHA-256:	6CA243D51F626351B5ADC276A4030B9AE05127C54EE8FDD850AC4D86BFC559E9
SHA-512:	41017D4918BA9CC878C9750F9280350D6A88BB12969EFCBA71343D4A3B2176D7B03C5943DC4C4D5451F2F7C8438C3B456ED451BD15A38DB530EB5CDA81EA870E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..yp..y...s......A..@....d..H..I.l."...:U{..d..7Y'..v.[N......,9.....DY.,R.%R..&q..H. .. 8..........`...Ii~US.jt.{._..........'O.<y...'O.<y...s% \....I..@+..,......x.....&~.....4.../..W~.\|a.,I..`.....j.......?' &~.:..q.A.0..&.a...!.O...<...B.X..v.n`;.!.B..j'Q.aO...=..dY~..r.../`I...........e.8FK.....[Y.O...\..N..?....f....'..~E...E..w.z.;...,I.../....o.R.4RE:..R?.A...&......GY.....;.".,I.......:.......N.........P]]..JKK)........... ..D#.&''........FF...arr.h4J$.!... .".(....>....e9......k.'....}.....:.."..>...2.,YB}}=MMM457.d..DQD....4]..B.A0Z,088..'.........p..y.^....8..LZ.....>Y...x.....$I..}.......4.UU)**.........i.......iF..E.I.E.A@.E4M..........'?...Nq..EDQ....0....,.C....\v..$..l.h...;OUUTU.......Z[[........i...\.......r..Q.........P&.~......j...%I..~.c.j.:G.4".0..........v.~?..f]..0.}..y...8.(.:x...q....G1t...<nw....K..........4t]'..P..m.6V.XA[[.E>...f<..6. .p8.........n...

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 407 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	433358
Entropy (8bit):	7.9752646890716035
Encrypted:	false
SSDEEP:	12288:hzjJKSYbNxFA+HOwofDfkAOPKTNVTo3KW592b:hhKSYbvFA+u/zNTNVTAfH2b
MD5:	80D1789A0B164DC8CFA6E8EBD8594BA1
SHA1:	07B60660052784719D562C124E557CB0ED02FD03
SHA-256:	1EBCC1CB966A499369CEB7E392FD1E2CBF5747629CB73EAE0B332CEF47FC0E61
SHA-512:	C908AE3B78EC545215FC483F26135F3717643CC849A674612FD74460DE252C50F5CDE7339BBEF33A5C7E39092322E23A2219DDDBB7BBCEDF45F06D5D6981B2B4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............N.!k....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2.. .IDATx..Y.oY~..Y....oM]U..c.;q..K!...H....x.AH(A.#.H. .0...B...C..)@....q<.S..U......{\..k..9H.D2Uv.]R......7\|....]?...._.....:../..}..N...m....:....u.j$.Z..],....1IDR.U3q..i..x...f...c...[../..a......(....*SJ......J...;Jja.<.J......{.H3...>.FtVgI..}W%.A.#..z...."x'CM:.s..7M......R.z..F.......g.....w.b%.\|..\..m....#t.]..j!_I!o...(%.....^.a.i...m'@..K.C%.3O..x-\|.....]).8xw-.1....T&T8)...u..!..${.u~...,..w..V.J..\|8...l&...?....._..{..c.y.5>Ro.......}.o.?x...y0-&........!tR..@.\.].T.....J..\|..Q./D.\|..(q.a......R.. .p7@.].....ri... .g...x.....+........X...".....Q.. ..a...y...s..D....!.D!.J..'...B......)...4m.F.@8.R.G......v..H.&.... . .@...6h...Zk.RR7.Y....x.1..y..6x.s %.s.D.=..w.".A.....a.\|.......C.l'.Z.Q.!......)...v..)....j..B..u.m.,..)..!.!xI..A .7.;M.....JJ-:kO].RI../..e..h%7...3..O.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	909
Entropy (8bit):	7.651319498790687
Encrypted:	false
SSDEEP:	24:vGM0cb7aIIbGPHK5OM0Q06bSvveaMbqgqnQHAQk1:vt0EGII6pMr04SOhOgqfH
MD5:	7E6F0B676A78D442ED84C9C58889712C
SHA1:	7FA3EE919ADB09C312DE5B914530BBEFB6F9F1D4
SHA-256:	EF196BF50E065E0431247BEC81E27DAA06AC5B7EFAC6F38287882B9496AFB224
SHA-512:	DD2374C5306BBFCC1DF8F65171C4A05AA6B779BA8EE1CA6E564B2C7799C3A649CF367A2576674C183AF4C2ECF4DE32AAD12A09BA0457DE3E5B137A3ADBAB824C
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/Iyn9yCCDxgHqvjX5jMZ_looun-kL0Sk60FraoMU5-JQG2WstyK6QNzj3JguQRbvQmWqVBSoO88Oh1kGQAoXMPkIIEF0pQrvXL52XXw=h120
Preview:	.PNG........IHDR...x...x.............sBIT.....O....ZPLTEGpL...B...C5B...C5<.....B..B..4.S.C5.........4.S...B........4.SB......C5B........B...C54.SP.hb....tRNS.evN.....M..}?.....W.$..L..Y....IDATh.... ..5.9F3..I..57....l.P...7e}..4.f.H$...U...e...E.T.XIV...{..tmS.R..W[...OM..}..)..^..X.i.h..d..P..Vv.:lW[{gs@-q...py....."...D.u.q..C.`.... .v.4#D...I...-8...fxg..y..;..3K.9.....?.-.eyU.......nV.[.RU?=...k.aS...Z>....%.<.'.fb.4T+.[.......=...._,.........#..9.'&y.3]./m...`..AW>..>.T\.m.....;W.v*...Y.W..@$..8.Bl.R.b.......q.ub.c..T.vH.....6..w.!.Z.....< .....9.j"m...@....k......V.wi...]S}.^.s/.....r.6?.......&...l..i....."..p]....z,..T.A...6..@_..F.....g.h....xk..}.Q...T..^D~.qv.>.I/m.._.u{<..q{]Q........jZ..:......e^J...0....Ry)...J.F.u^J..)M.Q.}...{.ML.a.,.L....."=....v&/.8{.1.XI64.....?q..G..h}.m.WG;.......#...\..xsu..D..S...&.....@".H...............IEND.B`.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	428944
Entropy (8bit):	5.929994782180374
Encrypted:	false
SSDEEP:	6144:cmUFpMvCvYFBt+1FNaRPERnXPT1doQIZEudE8ZehNsehnWodvCWlXW:cmAUV+PNaYnfTLFIZLChhNBhnJFC
MD5:	435545679C874C6D11C3F6FDB767CFB3
SHA1:	5EF19C777FAB4EE9BF3BA4BFB52297A666B41635
SHA-256:	0E501A7CBB085C95DEBAC6708141F1E0F87FAACB6EC5DC85641F8F713E33F1FE
SHA-512:	A4FDF63F45D210AA1A500BBD65D5E8C35B4C7C4594A2E4F0180A925696319E660190B0F39BF7410B34A7B9CDDDC0A5A836B2018BE29F0575711F9AACC57604B9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1900 940" style="enable-background:new 0 0 1900 940;" xml:space="preserve">.<style type="text/css">...st0{fill:#B67B44;}...st1{fill:none;stroke:#9A6732;stroke-width:5;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}...st2{clip-path:url(#XMLID_00000075870817054466701820000006701549800039284358_);fill:#0065D6;}...st3{clip-path:url(#XMLID_00000075870817054466701820000006701549800039284358_);}...st4{fill:#0065D6;}...st5{fill:#669DF6;}...st6{fill:#4285F4;}...st7{clip-path:url(#XMLID_00000107556654709708920520000015232723630616043146_);}...st8{fill:none;stroke:#0065D6;stroke-width:3.7342;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}...st9{clip-path:url(#XMLID_000000758708170544667018200000067015498

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5164, version 1.0
Category:	downloaded
Size (bytes):	5164
Entropy (8bit):	7.955022654419014
Encrypted:	false
SSDEEP:	96:0d/IkMLdBZmPHsHmJQE/h2ygZ5mPy6ldKPCH/S+fuG/mlVSOmxXvR:kQPLgUGhoygzqRlgPCHzfuOmNK/R
MD5:	E1D4C2969A3DD92F91FEA51F652831EF
SHA1:	FF3BE3617B93FCA22D758F43920ABFA313337BC2
SHA-256:	570D2DC2CE988D8AE09147EE2ECA5EC53F8D5F036E84E3212BF03503374054E5
SHA-512:	4F426BCCF3B2838DAF1356D90476E1D761B61431606E673718A4E6BB86946C759C3D9E68D1A4218EA24E9550DEF9C0B3D953066C2B0B2176C5003EDAA6F93AD0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
Preview:	wOF2.......,......2(.............................(..L.6.`..(.H..<....D.3........6.$.... ..~. ..)..,..xp..D.{..>..l..Q$..(.#.....'.....Mc...z.P.N.Nx.Ey..\|..8...6..z..r........\|{#.Hk....B..1..q.-QGE.T]VC.6....Q...m.......,0.m..a/...U.n...r..fS7... ?....g....H......57.B...b..v#@c.K(I.P0l-...'.,.yh....P.E..yV..f..%.V.....#.....V.w:B............]i....~.......5.....2.U...Z......MRJ-(.AvO+......g..H(..0.....i...c.G=.."..u........l$......@Ud...23...f]j. ..\....k%@>.DS....^$W:...J`.J...Vd8~.1 A>.2....J.Y...}.MQ....s^.29-}...\=....$M...$...4.9.:l.y.w).5n9ef...xr..}}.D9,.v.Uv$5.F..h..X...D..2y.P..7.C......D,.w....:qq@8...S.b.2..o..E w..)..;../..........W....@K........o.H..`Z..P.N...h.<..]d...,.....r.a.X..d8T.V.G.g.Ot.^.2...~.~Q.._CO...<...[.UMo..,..$.o5..G.d...>.&Z./.SpyGk....r..x.j...X...In.....QX.E......Z.@2.u..F.b..`.~.......3{#.r.....^c..=...(...W. "...3......V<....0..`kp.q.h</).8.w..$...($..@!.=.\q.2..x.0.....S/...o.J...wjn.....d.`...W..Rh4...d.....

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5859
Entropy (8bit):	7.956973859283456
Encrypted:	false
SSDEEP:	96:myY/feN2gwX9ljkPTn7++Hbbt68mlR1XuW/0/8V0owqcpR1Qzr/JqGDEooGuRG:mlXnVX9pkfrHvI5S8V0xCxqGVo5G
MD5:	4A3EE557D15E7A77FDA9A83FC3B38516
SHA1:	CA3D33DE2D154098A76F40F1F07D2457013356DF
SHA-256:	5A44A1B67F4782F003A466E0FDFBC13B324AEAECE0C4510B10EF8C0CDF0AEFA9
SHA-512:	9D677A1429D84E5B4603CAFFC3B0CDAEF41B6D34EB92C2A08B3C04BE5723562A80BAFCCBDDF83996BFBFA3080DE89135FD71EA45DC1ABE7C5F3BDD3A723BE391
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..k.$Gu....g.>..{...k.......`lc.8.<.x&. ....(.DJ..,..).......[.... ..c....{c........z...w....:.P..y?.....K}gnwUuu...:u.T..0..3.0..3.0..3..A.L.....&.S.S.m. ..+'..m.._..L(.6.Q...W..W.....W.sK..GQ'U/o.....m.~.....V..}..?x..8...D+o]....J)0.....6..[.!..9..U....cr....M.i...%...\._SZx.m..w..?..../..;7....N..@...+.!!...\.am.E..o.......M...D.<A..cq...O.....I....-.\|.K6.^g...1.O.v.>.!c/...0..G....}.Gt..v.X..3.'..u....3.....$......8..-GW...ox3..M.......]..H..v.~..7uK.]..SW.".x.U..Z...e-..P}..n....V...;.._....].Z..-Y.....z..F....(.v..,.o...0.$.....E.L9...E..1.:._.TE7c.U.z..3_EO.?..4....Y/.YHp/... =L...83.zb..b.2.O?.%....3.....<n.<.m.3[.{..j\.r&{........UiS[...)Y/..k.q`D#...SW...._.....f...w....3...\.&.E.T.=.b...c...U^.........Y..@..w."........V.$. 6B.....`.}...w........BP...x.....O ....`.......X..f......d....+6..7d..$...\.n~3..."..6ly.j-jS1.-....l.-...".}.S;.<.......c..lC.`Ts.3m..e..9.........**!...

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	60408
Entropy (8bit):	4.746090328799968
Encrypted:	false
SSDEEP:	768:fctDxhgZqb0HZb0HEuZ5V2KKCICtvlc54WA+Vw4G4Fw0RToTQTQDbx4r/MT4gohL:fesZvo2KKVmp29bFhTOG2T4go+9nK8Hm
MD5:	A371D1ADD8D95D9A5AC0222DBFC707DA
SHA1:	B273236FC088B58AEC5BE2E7CD642E290C31CBF3
SHA-256:	0A11003900B5593A71CFAB463C2A5E7D2588B251F697EAE8B64946F4D178FE54
SHA-512:	1C4FC0A64E927A073713435830F9D3044894FFDAF30E6966B28D1F3757D564D6E9124F632EB0B61EA41947973FCB28C82F98696E021A8A827FB96E2FF0D27ACD
Malicious:	false
Reputation:	low
Preview:	<svg width="1280" height="307" viewBox="0 0 1280 307" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="1121.01" cy="217.239" r="27.6618" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 204.281V292.049" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 223.588L1130.88 213.286" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 233.491L1113.06 226.163" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 217.429L1113.06 210.102" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1132.29" cy="223.588" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1104.71" cy="210.101" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1101.26 297.3C1104.15 291.738 1110.46 288.868 1116.55 290.35C1122.63 291.832 1126.92 297.283 1126.93 303.549" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1087.8 303.549C1087.7 300.666 1089.18 297.957 1091.66 296.486C1094.14 295.014 1097.23 295.014 1099.71 296.486C1102.19 297.957 1103

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8700, version 1.0
Category:	downloaded
Size (bytes):	8700
Entropy (8bit):	7.969818213587576
Encrypted:	false
SSDEEP:	192:yCw8YHa1G/nGeTkiYHassSJb5+ArIk4gc7a/uM3Jz:dR1G/fTkkshJYHknMajz
MD5:	2FE42D3535DA679F04F3D17C6365A3B3
SHA1:	64DA6FE900FDBB59AB97F956ECDE4E57F9848403
SHA-256:	1B36C0B0A947C1A484C4384FDE4735E3FBE8F0EAAA04B058B74C83425B08D4B0
SHA-512:	4F85931EE163001B089685C1CCA7B35976194EA836AF1C9EB9154FD7DB1717FC2000BBB4A112C02683B19F41A159941A797C31814E085B3D2AD51B66705B9E80
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2
Preview:	wOF2......!.......U...!..........................."..T....`..&....(.......6.$..l. .....)...HJ%.....P ~>.J.uR."d...1..f.cG.8..+-.c....nuG...(....X.v...mO ;..Dg,t..l..u....+..+{>d...'w..ovR..._q....Z.....^.......a).........)uQD.S......'.......o.....!...C.....C.V.....f..Ba.%..(..L=.te....ab..D..)...mx..Kf1......T..F.1.....H..._f..6..z5.....B..BY..P.......o._...%)I6>e.z.....GR5p.c.qb{.X..........>.6.ogt...&E.uV...n.Tx..iF..Ko.....LZ..(...f......k^....Q.D-..m.TE...\|..W;78?.*<.Tt<...bq.$/...a.[..%[v.2....Z..[.a.wQ.....K.........1..#"A.1..... 0... ....R......%. .A.rBpQ............./.!T.B.X...B#M..i..F"B....uC./B......0....t.LY.9..F..0.D..f .2.a....,EXn%.j...Z...V..v!.q....'.E8.. .8..E.....Q4..{R'h?......r...@.\k.WV..%xXE...PfM/....3........ZWh.0...l.pxH..j...5%g.......&.8...&...U...A.%T..#....r...K.]0.`..b..b...Y.#..(..(..VG.\.A..U1."...&XP.;.g.m..m..\....]....F.&.t2.".\...B3.....2.2]f.Y.f9E.`%...Mlf.[........5...4..$..r.#.....e.."b.+Y-$.k.kg.f..?....L.C..

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 396 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	46194
Entropy (8bit):	7.974616819355414
Encrypted:	false
SSDEEP:	768:Nl9+gvA8owLA6d6C1z+07HvVyjGI+RNl1ynnoz1Rx9sTcdh8y3ETvtL2oDs1i6:NbfTA6A4+gHIyI2YQx9sTcbCL2ks1V
MD5:	C749B23D634961F33E16EBC183C36D3A
SHA1:	0F291F12A3185153164BF3760BB33E49A4C1544E
SHA-256:	6E987B94E1D96926168CEBBCDDD5ECDCA93B8E6B804DEBBA7A606D7670292356
SHA-512:	EB144F36CE7494B38848E596DAAE5CFD20EF0E29BE7B3CFD562C0ED5D89EEEA1A30DA55E3F7EC7202301AA3F6DDD758169DD0EA7FFC475B4E0641235DBBD1120
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/jUoaTIlBn5ibfQcND2n5OMD6Z7xoqNj-ShHlFR6QuLffLXD5pS8V2eNg1rGlrsRrnDkoQ28O8UHzqzBQKAGY4l1CS2NQSq2SkRScK6FOjl82jppyohK-
Preview:	.PNG........IHDR...............[t....sBIT....\|.d... .IDATx..y.$ey...[...{/{....x..o..QT@. ...".J~..DM.F..&.<.QP..(.(.CD..9....cvvw....}....VuuOwO.......~...z...>....0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0+..t..f.<...=.u..Z..T.;...J.A:.D...2...9.pL.y.....@ !.@..nP..()....p.GR....L..eC.KP.2d.$.T....~^.7m..L.p...[.S.0.....5....O.}....}}E9..!e...)3Mj......B;....*...D.......K..GA9.HJT...R...@........l.r..<,....3.......

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3572), with no line terminators
Category:	downloaded
Size (bytes):	3572
Entropy (8bit):	5.140651484312947
Encrypted:	false
SSDEEP:	48:vZUJVKLICJEconBdpZUvGCUvGULHg7OTehn5hsbrc7g8IO8u0Y8D2n:yJYI/coXqCg7OSfg8IO8uB8D2n
MD5:	122C0858F7D38991F14E5ADC6BDB3C3B
SHA1:	FFC64755EB42990A73C4878426A641CFB94B57EE
SHA-256:	06D1296A6F6611AC795B27882FE88823EE857D0F49F7018CF00C6A199976DC0D
SHA-512:	149A1FB533C8C7D5EA363B80982DC1EC4C39E5EF9BB37E45BC80E105B18C3FA4DC610449BBD70DE9B9AC7339FEBBBD4FF76C2A9D1FD104D1943A386539AC4D44
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm._yk4Kx1DLwg.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTs74be_nloI4pEoaS7eJYnNYpJ4fQ"
Preview:	.gb_2e{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_Fc{text-align:left}.gb_Fc>*{color:#bdc1c6;line-height:16px}.gb_Fc div:first-child{color:white}.gb_pa{background:none;border:1px solid transparent;-webkit-border-radius:50%;border-radius:50%;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;height:40px;margin:8px;outline:none;padding:1px;position:absolute;right:0;top:0;width:40px}.gb_pa:hover{background-color:rgba(68,71,70,.08)}.gb_pa:focus,.gb_pa:active{background-color:rgba(68,71,70,.12)}.gb_pa:focus-visible{border-color:#0b57d0;outline:1px solid transparent;outline-offset:-1px}.gb_i .gb_pa:hover,.gb_i .gb_pa:focus,.gb_i .gb_pa:active{background-color:rgba(227,227,227,.08)}.gb_i .gb_pa:focus-visible{border-color:#a8c7fa}.gb_qa{-webkit-box

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	79644
Entropy (8bit):	5.598027612956531
Encrypted:	false
SSDEEP:	1536:TVp1T5UI9yvkVs5yC9waydVo/29oN7VC6parVqvAq:QI9yvwsl5NYlrV/q
MD5:	5845C4B4039A782892BA98EEFE3537FE
SHA1:	53094E84BE77E96AFE3B3F3CF337044A8AC3C4DB
SHA-256:	F730FB8496D16C5F117388BB3F5F2B117DB2D49AA9C35E7BFD5318C7253DBFD2
SHA-512:	57C823B9BD9F56F2081766D9F083FDC70BA6277B3B1A897BF75891329E83F95C967A647676C3573E33471D3A8F61F599D4A1949303D2033DC25CAD37CE76A602
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21552, version 1.0
Category:	downloaded
Size (bytes):	21552
Entropy (8bit):	7.991124519925249
Encrypted:	true
SSDEEP:	384:sPsBjS050+6ZPTO5MZcvt18lQYjxHe+YeXIY3r9mgNRb4PBvCrdYq+sMM:sPMjX0Gj8lQYFFEY3JmgTbcqYo
MD5:	EA2C3CF1BE388BD3FBE9D0CD8AFEE11C
SHA1:	6647CBAF7BFEDD842F806549F5C3433A19EAB1AB
SHA-256:	1CF04407E728EA1EBF82DC1C6B45D12632CB3202FF8F4556F380B16E57484F27
SHA-512:	2B260F63CD6BD0C75A3E6EE9EB5FA5B477F1AB2E107F682165C8A4BDCB9A6CFBFD21AB172CE165A3C2EBF451AB91D27070EF5E4D985EF3105EBCAE964C6D8870
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
Preview:	wOF2......T0.......d..S..............................,..@.`..~..<..u.....X........6.$.... ..r..X....\|.5......0...av .....p.........R...srCd..._o.,...A.4...w...{0.. ..A[.z...L."..j..&s..a.-O]........m......~l..yy..m.&.X.U0........G.\|..t....l\.HVN......o....4M.{.j..I.Kb.D.....7.....<0Ln._k.........d[&y.C...8..7w.,.L.....u.n.!..q..H..i.{.P.fq......D8....G).....m.;e.K,0...Z...<.......=#.}...]o._..t....<..Em.}..,P..........I...3..Q.G..g"..~nZ..P..Jb./..?q..}.=..v......N...f...,.!.3.V......s.?..g..X..5W...B.:.....H.Rq.Iw*A...rq,..;v.\"(.n.~K.Z.Q0>..P.....a%).y.LE.{.8..&...V..h.jJc....u.\.9K.MI...g\..M..~.....n.a(......j..J{ .E....Vv..^....8.2U.....{.%..A....48.oiIG...r9....hg@...QU.z[..8'd(.s...BB....a9a.t...fh...=.y...P....l._...?;......b.d.X..bf.p..m..$.... E.{...W..:.....8V.R."./."]3.M...G.....RB.!......>..Y.'..M.n.+.rC.2../u...U..#.........D..8...4..G.!Ad..".#.w..P.:-`.."DC..BBI)....]..$.}..q.<p..As...^.y.c...(:.......Q.D#1./..W......R...=.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8960), with no line terminators
Category:	downloaded
Size (bytes):	8960
Entropy (8bit):	4.947935235797482
Encrypted:	false
SSDEEP:	96:GFmlLkHo/a1rOQEo/eKO1O/XozXo/5VoK9ScNOR7czbmxuWK6:GcNn/a1rB//eKO1OQM/0K97OeCxu4
MD5:	990AA4F43E49EA0C73EAAD5F084069F2
SHA1:	6A3DFC87A7B02D80FB383DD4738B578248872766
SHA-256:	591EC898579FC34D46D85F9B22FA8FCFA88465454CAA0D86D03E9E6DC0675F9B
SHA-512:	25AEB13E9B0969E11C8DFCA8828E68C617748C48AB7206FE6BC6DE1993A401576C82AE7006E11DF7DABC8E0B929AB5C68656DC39FA0CCA369790847B9ECC057D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/glue/cookienotificationbar/cookienotificationbar.min.css
Preview:	.glue-cookie-notification-bar__accept,.glue-cookie-notification-bar__reject{font-size:1rem;line-height:1.5;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;text-rendering:optimizeLegibility;-webkit-align-content:center;-ms-flex-line-pack:center;align-content:center;-webkit-box-align:center;-webkit-align-items:center;-moz-box-align:center;-ms-flex-align:center;align-items:center;-webkit-align-self:flex-start;-ms-flex-item-align:start;align-self:flex-start;border:1px solid transparent;border-radius:48px;display:-webkit-inline-box;display:-webkit-inline-flex;display:-moz-inline-box;display:-ms-inline-flexbox;display:inline-flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-webkit-flex-flow:row nowrap;-moz-box-orient:horizontal;-moz-box-direction:normal;-ms-flex-flow:row nowrap;flex-flow:row nowrap;font-family:Google Sans,Arial,Helvetica,sans-serif;font-weight:500;-webkit-justify-content:space-around;-ms-flex-pack:distribute;justify-content:space-around;le

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4437
Entropy (8bit):	7.923976804215128
Encrypted:	false
SSDEEP:	96:hjvpGFrQ8YLH+gBJ1DYRtPIhwEhIcN4cp8329Rd8IoI6IlAlJ:hjvp2YCgBPDYRtwhciVp832CIVAlJ
MD5:	E26885170F89158FEB6AF797E52A979F
SHA1:	A2C5820CE8368C804BEE88F738E53598F5C26406
SHA-256:	F170EAAF0080C70EAFA8D4DC444985C89AD349DD03A3E934702606212D35EFC0
SHA-512:	D14ACF200E86D7CD61FBFF0156EAD10463EFF08C650FE11C2FB50F50740D7281FDFBE3EE67CD90F612181C2479E91BB2CA6E3EB0FB4927B42F18DB0296B1633A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..{...}.?=3.{..I...q'.....SHF.........8.8Q..2).(.X.)bo.......p...:.O........&.e...../I'....<:....................\|.7..._wC..5j.Q.F..5.C.m@.I..z`"`.......+.2sa..._I..i+.........&...O........x.x'.2.....\|..N.......`.J.).Q.....lF..$......._...iK....%.g(.....g.{...)........'..$.Z.l`..EJ...~.'...2Cc\..L[S..@.H.\\|.....M..}.;0..yq..,.rU......R.d...+.Q.U..8&.2e@......cd...K..u.....N.d.....^..._.+.o..+g....L.1......0...9x.?.q........aU>......e..Zr.@"...sa2m.....0.....3.]s...).....6.c......R.........x.....5...mD)D^`.".........n..zUO......q.gC..o..H...h.\|.....H..fX......z..Q.....ikQ..Dd..=.0..B<..... Z.....zU.a.R..............(/..2....)F$..3....@.!A.N..E.U....I....R.....J./....,E..9"'..1.3&J)@...f..At%....L[..6d8........X.\|...\...1.e..GK...U,./."%0.....?...af....FZ`P./../......\..z\|....%..g.<

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8080
Entropy (8bit):	7.942342290178111
Encrypted:	false
SSDEEP:	192:fiIaNVQ6cexMJVnNHBbaMzZ/W9XIpx1XXdy:fiI6ZgRBbac/KA1XXdy
MD5:	612991520A7591E4DD07738D8D86B26E
SHA1:	3D6724D41F9A9C5ECD45420217968930CACEF4B6
SHA-256:	143C350B6D97E04A796B5C0356592AF804F549A10C67632A4A35406F78DB7F44
SHA-512:	4FDB776F8374429E43EF3436065D7E8C5D3D8F1BFD05B8584329290DE7886D0D6A0D014182BE57B289A11E8CF1EA45FBDA94D0F900BDB4B792DB1AD73213D9C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....GIDATx..}yp....n......./P.e.m.l....d.=I6..N.dwk..Tfj...S...dj..I65.d._.m...(.,.o.c..a.<$..x..%....}...a....AJ6~U(....}........k ...H ...H ...H ...H ..n....`9...Pf.Z7.Q......`.`c.%....`...c........UU;^~..S+z............s.....@&.$.....p"...cL....1.....)........8....?t...K+rs....={..)..U.X..r.V.I.........:?..u....$I....=.n.T\|.v.\....!.Z...`5../...c.h_....@D/....y....u..........."zL7....f.?\s..4...n...%5.D.r.777......j...i.B.<...h.<......Z.98....'9..mmm=..8. ...9.s~....Y.. ....Q..Y.!.2,..,V+...._P......HIM..j.,I..UU...091...q...bxh.....MMA.4(..UU."0.c....$IPU..../.V..^xa..'4;nj..n..p8."...c_..J.A:..6........AYy9V.^..U.........y.y.f.10L.c........^..g......LLL`J'.. .s...B.......=.....xN.p...r...B41.!IR.l..!@D..l...AQq1...P.f....!I.4!@B.i..A ..D............/]....&'&.....bP...!.'.s..={...Eid..)...cR4-.:a...(//GeU.n..6...@.e.g\|^.qV..+W...3.....^....J..}kDt..~..xZ.%.MEpSSS.$I_..e...h....EAAA..N'.k.`M]..

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	909
Entropy (8bit):	7.651319498790687
Encrypted:	false
SSDEEP:	24:vGM0cb7aIIbGPHK5OM0Q06bSvveaMbqgqnQHAQk1:vt0EGII6pMr04SOhOgqfH
MD5:	7E6F0B676A78D442ED84C9C58889712C
SHA1:	7FA3EE919ADB09C312DE5B914530BBEFB6F9F1D4
SHA-256:	EF196BF50E065E0431247BEC81E27DAA06AC5B7EFAC6F38287882B9496AFB224
SHA-512:	DD2374C5306BBFCC1DF8F65171C4A05AA6B779BA8EE1CA6E564B2C7799C3A649CF367A2576674C183AF4C2ECF4DE32AAD12A09BA0457DE3E5B137A3ADBAB824C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............sBIT.....O....ZPLTEGpL...B...C5B...C5<.....B..B..4.S.C5.........4.S...B........4.SB......C5B........B...C54.SP.hb....tRNS.evN.....M..}?.....W.$..L..Y....IDATh.... ..5.9F3..I..57....l.P...7e}..4.f.H$...U...e...E.T.XIV...{..tmS.R..W[...OM..}..)..^..X.i.h..d..P..Vv.:lW[{gs@-q...py....."...D.u.q..C.`.... .v.4#D...I...-8...fxg..y..;..3K.9.....?.-.eyU.......nV.[.RU?=...k.aS...Z>....%.<.'.fb.4T+.[.......=...._,.........#..9.'&y.3]./m...`..AW>..>.T\.m.....;W.v*...Y.W..@$..8.Bl.R.b.......q.ub.c..T.vH.....6..w.!.Z.....< .....9.j"m...@....k......V.wi...]S}.^.s/.....r.6?.......&...l..i....."..p]....z,..T.A...6..@_..F.....g.h....xk..}.Q...T..^D~.qv.>.I/m.._.u{<..q{]Q........jZ..:......e^J...0....Ry)...J.F.u^J..)M.Q.}...{.ML.a.,.L....."=....v&/.8{.1.XI64.....?q..G..h}.m.WG;.......#...\..xsu..D..S...&.....@".H...............IEND.B`.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 341, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	314962
Entropy (8bit):	7.9859735903528755
Encrypted:	false
SSDEEP:	6144:BIFzP9uWvYtYOZl0q58b83xyuB0MbawZxr1SAIqTgXtD9z95fVR4rHo7:mzlNlOZB8qyQlbaar1PEdDRTfVYW
MD5:	FE48F024C754220B710A16F58BEF7968
SHA1:	CD19A340822BFB160653306DE9C5A650AD173962
SHA-256:	A3BB294D6D53266AA00A1D5820CA8D09B55AF55A5A61C473CD7115C95085BDBE
SHA-512:	C0E53286C007EA5EF6AB3E653FF0C03110B663FFE8009EF39433A8C3EFB2368BD7F08003F4C4AE3B8124F78B88220A5CC52C301D4E9F7DA023D091FEA76F59F2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......U........t....IDATx.d.Y.,Y.....cf>...7.{.b.s......1.Ud..&..@v.RS. ....W......[h.lu....".j..HV....)r........}6.s..[.f~_............{...>......^.f...f.....;.(.L...IE.s.D.c".dH..sJ>.".hDNU.g&..\. ..CL.f..@. ..I.T.I........ZJ...A....l...L..........!.C`...X.g.>)..\.m...!..]..<....wO..x...W.o.9..E..../.....Q.5K.fROmyn..6s....~<q..1.+.;44..^IN.D.!.".....HnADS..hlL.....b((.XV~....%.oS9.....3..C"2TP..0TU$....@....j.h.H.....b....`f.H...f......*v.................z'..L.}B.IsTQ..L.L. .T.....\]...0....\RVD.i....\|6]...."........O?.)<...>..w.u...=...+7.~iwg....7_..w.G..?.........k..m..?z..o..b..^.../../.......w........_.r..j..k.?...w.._.....v....o.[.}4[.>.N..i.V..._...^......{..o.v...hY.....[........a.......'............./../...K....P..........U/V...............[..ff...j....X.3.+.2.....RJhH.`.AM.... `VP#.c$D.SB....cQ300%"QE0$.QD...PTG....0."23....:B .......$%a..............Q......;9C..g.LMJ..h..@.....h.......(...g.Ur.. @.0..`.n.....L.6.J.@

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	619
Entropy (8bit):	7.462254278507281
Encrypted:	false
SSDEEP:	12:6v/7rKbmS9WBtzNUgSqMp39/vfhlwkS+GollVhlQ7AwqdTR7LYD7ZOLsc:OScBhNUSo5f3dG6VfQswqdTK79c
MD5:	97C0BA6112D3E6078B886D61D47E1BBB
SHA1:	7041664B2455047AD0E9713B3ED746582A8E1235
SHA-256:	7F75A3A955EB16CFD60DD5787737F49C053B52A81377961BE153E75CAF6076F6
SHA-512:	ED24D8FF1067F18875393A8BE412F95DAFE2A4CBCADF5D24A56AD6A6B4EE91475636D1EE924E058B8EE4CA29C8347CD1CB037C3D403E5C5FC5FBB33A7A0341BF
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/Amr8tRBfd1Uk8zYm779hnSCwMzArp3LGD1LUhcgPdCOIk0UJczmdKLa42Apx-wzQdrUnsATBiFsyHT5pVit9Al6PwfVewM09FnlwAA=h120
Preview:	.PNG........IHDR...`...`.....H......2IDATx..%..A...Q?..9..b/>....\|.#/C.+.]h.]...p.1...Y.........U=T.m.....K\V.hi.....l..7X.CE.c......c...u.....5..R.7W.2..<..:ne..b.....zK...oQ9..........%.o..<4m.rh...>..w...W.Z.lv....e.....e7.v....M36....i#....L.:.@X7t:..h.f..f.......<..[..gp1.^..n..@i..)../.F../Q..3e..._T...n.\|.t.T=..f...Y._..`Co..-.Q=...d.w... .. ..`7..8......g...r....#T.:..=....2..%!..eH....#c.G%....A9..V......7.._.@.............@-.<&8OwK.......thU:.f...{..V.c.....f......k$.~...j......v.~...j.. -T.".mT...W.....27..../.iy...............G.......q...O..9{_..........]JHHHHH...;.h.M.(....IEND.B`.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2222
Entropy (8bit):	7.8730726200985295
Encrypted:	false
SSDEEP:	48:IUXAy0GN04/mwrWupfQzgLziuICrZrxUsIB8laSW7l3agXXoK:Oy0PwmYppfAgLziggsIGWP
MD5:	A3419949626E50545681DB7C301C5D47
SHA1:	1F4DE8632610E84482651EA0A8CB2ADCF70EBA86
SHA-256:	2DF779D9557603350D38FC3357075048A1761A17CA2E9AA3586D07971D9BC2B6
SHA-512:	8D9858BDAB6EAA8A6190BC8645267B44B81E07D6C0C5DBE3A628419BAE08051FEBE6FA47BFBD56062BA1273FE0D24E301952A89A2DD78B5306F48B9B122DA613
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/T4GMYGBcpiDg5gCEZGSvQWbkwLHRELiaWN-BAAPD8Skd-YAEBhCxSR7_a5HjrHhqhgYDLvk7Ck_Y_R3-uM_UTA4prjTHB2ecsUG9EfjDcMyX7GxSju8=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....eIDATx.._.\U..?ww....J,..jb .Py.......35ML,e..m..@./.....`.M.Z...B".vZ\hM...s.hP.,.!..5.K..X..vCwv...UZv.{.s...e{......g......`0.....`0.....`0....a.b...../...J...w.C.c&.....`u....m...k.."vR....(!<.c...`....k.J.....m.v.`.0.....h....skB..IjZX............4e.......V. .jV[+.2x./...BU..X.>...`H................4DK.9.,......X....I.. ..dk...6..7.y...oi..'r.[..Kt.D...!.=.G...k39FV?......L.g...\..X_...........R..x...X..^Z../....r.....].R.7y..\|.#u..._g,^(~.+....v....pr.......e.;^.Y......T........,../..\..s..]D.g.......K.6.L..SO../......nIi].t../......Wy..4w......e..%.jtz\|..Yy]D.+...[C83....xq......%Ou.._..\.%..'.`..V.o...Sa.....a.....\..w.y.\|E?#1.v,...nj%..:A.x.JkK)O......tQ.Y..`..C.gN....p. .....k.a..\|....0...GEs.e..1...(......(L.......1..'Wn.[T[...V46\|.. ..#...'.b.;D.5e....(..b5. Wnm.^.Q%N......`9p]..!\/.....u....t}oC........q.>/...r..y`$jy.Xm.6D_...}.~@P+3..8m....B.....=,..E..I.6..Q..F,...N...&Q.x

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 162924, version 1.0
Category:	downloaded
Size (bytes):	162924
Entropy (8bit):	7.998614826254304
Encrypted:	true
SSDEEP:	3072:XdhkQyBlHVVYwHUFDrzXtPz/qJwZmUyhjpimMS6DW4hb59a06EziVFKth8Biq:wQyBBvYw0FD/tPWJZjI3PXhbrduVFc8f
MD5:	7F2E1B48B71EC58FDA4539018A2F56CC
SHA1:	507BF81F52FA8C99BF2C5C8BD59A981899CA9995
SHA-256:	7F80C4C91054B3D6C80721939242C2D4F68F15E41F251E12641F695D78EB2F35
SHA-512:	DD7B52119D1179332147984F6C7D8CDCB3388AEB1E8AF708EF9036ACDDE6E7B3900ACC965221F4E4864DAD89797072E19E5B308CF065A65DDA7656BE884CDD77
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff2
Preview:	wOF2......\|l..........\|..................................`..P..........N.....6.$.... .... [.m.A.B.$...c....5s/E...%.u..v..J6...:......;............$........@..M..... 8.HA.6%R...tB ..D..M".f.$G.....<....~.y;..R..23.S.T...p...'V{\|u.,S....Z...lZ)..Dc..D..;=n...V...<.X6...h.......:sw.....T.6.eF..!=.f..H\..dDd.q"s.E.Q......JT..v..#Mf"sH}A.>.....q.h.mLC...Q..Cv...+\|.u......6..B...I......K..I...R.[..m(...P<B."R.Ap.f.j:.o...\o..L..G3Yn.C..........\rI..$$!DH.!....v0r.E...p..WK.v...muW...X.[. ......j...1\U..8V.&.X..i.T^TO..^\......&.g2Iv....>.J(.T...y...v....4.f..a....$.K...M-5...1D.ya...'.'...A ....!.@..c...$.D.3q..:...:&O.rV..V..v.m...[-.Z..m.......:o......$}.h..i.N.FH.$(..Zq....v...k. ._.A...J&.J..D.......>...~!...H.".$........_...;v...*gU....W Y3lI...;.....RG.....\|.rw.. ..=@.....N.....=.W..=O.(...`..M......Y..&.O. R..'0.~6@$.4f.`I@.dV{..YJ[j`v).1(.L.."(oO...R...cI(.l.K..P,1.C.b....A=,u.B....;wm..H{.>......8e.8d.2.~.4.CDDDDDDDD..\|.Z..s.G!.._.....

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x384, components 3
Category:	downloaded
Size (bytes):	75403
Entropy (8bit):	7.983412784961348
Encrypted:	false
SSDEEP:	1536:u0atjKbuQTXTs5KppiRsh9eZyBH81LopJAy2aL+GlhlrWl/ZIojNOYTmIgVZ+ZCi:u0Ungg56wJOLx2ai0hlrWFZIsNzPQY
MD5:	FB6BD2446FA4DC80CD5E8EEED326793B
SHA1:	0D385B63CC3CAA56F11D689898DE7B8672146CD2
SHA-256:	3657E5EB03A4AAB54F1617134E5974ADFB32E9422D064EBB6347287BCC4B59E6
SHA-512:	62A739FC861F9A30817E50E5FC0074F0D796441B5039133D6AE26C909C2648D6D455C04287F8A7CCF06E76743F16B0E753F6FB0188B68CA10F024C1F2DDD8FA3
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/3vbmf-fE3hNTz_sGEcwIXWDO025BKBEfKgf8kLwMUqsTGFJNuEsBevc5aoUDXs0LeGQuxV3I55z3JelOJRYTxKzdoTWPoueELAx2WWZ-b-XO5vK1VQ?=w1440
Preview:	......JFIF.....................................................................................................................................................................................................H........................!.1A..."Qa2q...#...B...Rb..$3Cr....Scs...4..T.................................@......................!..1A.Qa."q...2.....B..#R.3br..$.4...c..............?...".....x..:..I&.I#&.j..c.R.q.t$..#.pI!.............mO..l....{...-.8~s%E.....1....dI.....VE...24...KD..H..$...........\....e....a.p..G:....\x.O...B.p..Z....=.}..n&./..[.Yo.e....O-.>53er.I!..8..c..........f.(..d....C.>.f......R.@...4y..~.v......n...F.>id.Xe....n4...-..i.............f.4...v.......i.x.E.<P.F].7h...5..U.$X...?0.......Aq..2..BL.k.)......!`..)..I$.(.....(.A...W..,\|;Q.A.~...(.....~...f.v!.........^.....W:0..).9.?...:..\|H0.G.P:.F..#.<C..H..../.o_ax..%.9u...R.s.:...;g..C.-...}W...X..#...L..Z%.~G..O ..y2.v.u..^..*O.Vf.>W.'ez....Z#.I'....F........($.,.v...H.N..

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	817
Entropy (8bit):	7.381646783346233
Encrypted:	false
SSDEEP:	12:6v/79B/6Ts/G43jjRB4iS/4bSHOOO4u7zzzzzzzbgkokpAfdhXJ2/oi/3ypm353o:O/6+3xHNt7zzzzzzzbo5lj726m35gz3
MD5:	8241731FF6D4C4B54D50DDB229ABD5AD
SHA1:	732D211AA1407DF9DD3E68728D62A1F92286A716
SHA-256:	D89908B7F4188864173BBDB3021BAF269468E9117BB0717CAA9823E4578961D0
SHA-512:	AC847205DCE1EB6E0F9B21E935B10C2F4C939B0F1AD38D62C2DD9DAFE87AF4D4D6A0F9D79F30F1948D7D627136D2DFD90322955023818A1C42250202CF328AF0
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/dMQ1Q4xlLrl3-KsZvX_9v56emij4OkRxzapLM7RSuZVd7PgqfjPxKR4KY8hVHYXqP2ZkS-_ZueXb9ywW66H2oCyTglApr1ELCy3woOAviTgFP6uyAd0=h120
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs.................sRGB.........gAMA......a.....IDATx...=N[A...cH"P.R......l.%x!I.A.....(BKI..D..@F...5.g.3..#.s..wl...L^...V...,....,....,....,...>Y.....{\|gg.'...6...\|...M...7.........}..6...W.$z.>.?'.....+.'.O...U.....^.]>.'\|...f...W..#.8..#...ef.[.j....+X....X....X....X....X\..,.K...:.E.N....~N..b..L....;.2.E....}..C)s_..G`q..G`q..G`q..G`q..G`q..G`q..G`q..G`q..G`q...}...9P..,....,....,.....\|6O...t.....(...`.n..ism.v.W.q7.....I..N.'....K4q.....U.L.6..&n;.........^.....H`...=0q}......:.].\.>e.L\.F.&.o........A.......KR`..':0q...8w..u.:kh..~g...f.S...p....b"..t....?......N..A.....pbY.V.......W.J.j..#.....L..jG&p.5#...Z...P...n.td.;P22..(......L`grG&.C9#..\...X...vnld.w`Ld.wbhd.wdHdfW;.:..L.8.hq..G`q..G`q..G`q....w..7y^.....7.....IEND.B`.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2096 x 1182, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1101439
Entropy (8bit):	7.990541996909269
Encrypted:	true
SSDEEP:	24576:hhZjDkY85GxQkQp7raF1qHW33DjSkZcKBrFoZcdGUcoA:hhdIoxQkQ4FAO3PzZcKRGUcoA
MD5:	38E4DA30DFE624C050BCB5B338323C66
SHA1:	8031914B5D61C4AFA651429C486207744DF36B9C
SHA-256:	AEF0C66D8DCE2D24D5131B2D21DF713077E4E7F59C06C6B48579A71787C8A29A
SHA-512:	29C5091BBD2910D248290EF31904640C696A77BE5AF6AA7454CCC1287941F54C13E420239ECD5D91A8AE1BEA4B5573FFAD6DBBE16374110F979928EAC562A397
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0.........:.LO....pHYs.................sRGB.........gAMA......a.....IDATx...i.u...=c.{nsnS.MU.....+...r.J..ALl9qHD..@..(.7..%...".N.(......D.c.c%...N.]..Qn..V..V..t..{._k.1.3.Z...{.........Zs.1.....g.1......u.....s.q[.}.W)..{.q..../.....!..B.!....~.?.7.....s.....x.G7N.Q..........MZ^.w.3...[....q...h..y...r....3..0S.[..k.#.HcQ..v..q.wi..\.H.Nf.>.y......}...nY..o..V.>8M.1.z.Y..Kz.2..l...<..b.x.......x.h..p......;\|".~.1p..:.9..F64f.....f[...-.}...~.q.S;.Q.=.vn...\.v.k..hu..nQ...m.:.;1.'....V..n..1....oC.....q.{\|i.Qf..{..?.....q.!..B..\|.B.......'-}..S.............u>.3..B.!..B......+.{....!..r.....m..g...A......4..4'..u[...8.h.X.cMD...Zq....w.M...\g_......p..f...i~.F8....zc...X..}]n.N f.:..r.Y+?..H5...b.....V...W.V......x*2.K.;#...J...5..].......B..[...,.&.[.pz.R.......O.M.....3...x1.OG...7...y./..e.W....B.!......!.S.>L.v....F..il\.].o.G'......_..B.!..B............<`...25......+C_.),..Jk.L4.d6..qJ.g.W.a..........b.Y..'.3

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	848
Entropy (8bit):	7.71422030900664
Encrypted:	false
SSDEEP:	12:6v/7OO5uB+xq96OOQnRcjB0LvDBVRbRVjr96hWqJIaCdKseyOah0Y1pWXpPAdBF+:LB+YEQnRc90xTR5AWq0OaySFMN
MD5:	E60493446D2E9194009973E543455415
SHA1:	B879839F169670DAFA244089F08B180046E02709
SHA-256:	51050B0E3A2C758769C5873F92B10642E7E17FE1D6D44744366F4DE53694B4F3
SHA-512:	F414983B6E0C15C09EC4B56D68B42945DE932F5AA99BF7CC024DFC78B42E9867B6C576B95DC0FE428675B13F59A1C07FBF51033EC03A257AE6743FC5EAA9815B
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/yl0EzS1GixeU9QVLJtHu7hom-4PIHwYylP17hRk9_UasgFCCc6lo6E0-ReGn8R1ny3A=w36-h36
Preview:	.PNG........IHDR...$...$.....K.P.....sBIT..U.F.....IDATH...Oo.W......KC[.Xu[.XJ.?.zk. 5g..\.~.~.~."8.......=T9.Rn.H......N....n............fvf...z.+\.].[Z..z......3...8.Y]cew..z... @L4X...Lt<....J..b_....-.........Q4.YX....A.../..,b.#.0(.f....'`.}_n...@u.....9&.....vGV..f ......`D..\|.i.fn]......G.....I.Ha....N...<..X..T....B..%......]...1.+.\,..CG.)O..k0..H...$.^.K.\|V....]r.{....p..xI....YW`...7......x....W.ci..O.[.....m'.I...}B.F.w_...m.V..X>&....T.E-..jP..^.k.H.U.FH.I.3.<....ge.....C..7.B..S.G......K&@.......q..&..gx.I..gZ[.N.....c.!.O..rv...TG.0.p.a.1h.a......J.....x..#..6.J.).M....g...o....<.gh..5....`.....M_....3...w.~....VP.sH.uY.o.)>.;...._.x.K...Xfx.x$ b..\|.S.Q.....G...7d.Q....r.4.....'.~..L.3.P.....'...uY.c.c...........kR...W...Fy...7.w.A+._.q..E-.....n...G...YN"..9.....IEND.B`.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8005
Entropy (8bit):	7.932879807851235
Encrypted:	false
SSDEEP:	192:NqJV3s0+3afbOkpJYFOFrxRA9nvpvAk/RH+h80d4D:ET3KSbpoOFNRw6k/Rehxs
MD5:	82F73E47F29A0B0B6EA0AC8A67419E3F
SHA1:	CAD2C14184D3EB8CBF94E98EE178362F9D494169
SHA-256:	A51842A1727B816A7D5B2C8666EAF8EC5F6C00A60972812E3DB65ED315FDEE77
SHA-512:	2D25A171AC3A8496035E38E4E823DF6CBD8CE1C1FC89B36F13EF3E46F5831E1AFAF1D796488BCD70C3DD1D0A489FE6752C01C62225CDD2A321BB53BBC33C83B6
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi5QWrjpBGqtY9zgr06lOsx3KVezooiNyD8bzJwIHK2UC1bE-RE=h120
Preview:	.PNG........IHDR...x...x.....9d6....NeXIfMM..................>...........F.(.............................H.......H....o.#.....IDATx..y.l.U..k.sj.u.7.....=.q.1.p....ID...`....bA.%...# .(....DBB$..&)Q.K$ .;.!.......M......T.9g.....T.....k.R}OG...3}{.....'.......>....V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9..~.]..=..#.^.5"._..})"...^.a..Vp..;.....t.4..B0n.........@6.d..L.Q..!..hiL{..s.........`.`A...c.+..........#...-T<..1...!..$...:.6.a....qv..3m.......jK_,..M............kC.I.q.E....8.f.....5.....'....>.......Z...},"...M......7..c.^.....710....:D.k4.5......J.d.M..Y`I.d....%W.?r....O....9w.=f.z.{.}....k.j.8..%_zj.........8f.!..3X.~.....O..\...f......x.a....._J....H.@.".....B..@6-........p.........r...w....7i..]Y...=....ds.V.\...#....t..V.gr;.....O.......h.T.V.0...$..W..........W&b.I..y......AZ.Y... Y`o.........!S.S4.$.p#.E<..=....L...'....r....L..a:I..&..;....z......Z

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	195463
Entropy (8bit):	5.526772494681395
Encrypted:	false
SSDEEP:	3072:LJc0Iard8OdO8bS8xyCIqjysCBgJ7dQWqzGmRFd4xKkZAzPFA:lb8OdOwFZ1LRdQWqzGajW
MD5:	8681C37A0F863A2E89DBAD0B33D25439
SHA1:	262CB56FE009555679F249353483CE83EA11B082
SHA-256:	63576A1B14E155F2321838E1636C9ECB7FD690540DE3D0D6B4D955024ADFCE11
SHA-512:	E02619497196B697911B6FD9159BE7B26575ABDFDB8136B70FADC7320D5437203F40F6A3489D65CE3E52A58C791EF840361C346D53CC9307055572CDFE9E92BF
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-175894890-5&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 343, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	330224
Entropy (8bit):	7.983137654901116
Encrypted:	false
SSDEEP:	6144:gIgphYIkSBvqWlri4i7XMidorq5gvcCE9oIygj4AvgS/h6F2SIeCy:gIghYyBblrxiLMidorcSc5V4Av/h6cXy
MD5:	02D7F917F2C729DEFDF85E85576F3612
SHA1:	84B4B710A4F35D3517C048EFA2308F6CA6545335
SHA-256:	E48B9AD41BD15F25A6E867B5AD51C48376CE5E2CBCD785674B788F5D7E2E23A3
SHA-512:	A8C4B4AA75C06C025600932F33EBBBBD96C3B35F7C21C677F3EC685889F03F9D3B907B70FC7C969B4973D2E010DD9D5047F7115E18B6F75715A3DE971F93A5EF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......W.....[ya....eiCCPicc..H..W.XS...[......... ...Z..R..!.$........k.Q....+ ......bAEY.uQ..7!.]....;...O..3....e.\T..<i.<>2.565.Ez.P...9.....;...@.....n.D._uQq.s....P......8C...A....A ...@T...T..b.9.......T8C...m..9._.@.......zV. ...?A.&.J.....8H ..!V.>,/o...C...e..x.o.7.Y.........:.~...(d....gi.....\|..F...U......Sa...XU.!...u.....QIj{.T.....&.nB~..bS.#..1..}F.$..1\-.4I>7.b#........-...._hm.........~U..(s....7b.W....).S .).$.@L..U.....,.sb.l..xU.6.....j~. S..../.S..m.K.1.\| _.....vR....].I.I.<"...\...pu..s.4)A..#...W..)..8.=n%.T. .T.$h....pq...LY~\.:N.0.?N....D....,..-.L..@..Y....G"...A.....f`FJ...>.@!..".P..........<.U?]@f.hA......<......t.[2x.5..x..&..........W..j.5..G..%1..F."F..q.<.....3.6w......=.)....p..F.=I2O.]..A...."..Z.v......!;d...p.=..6..={A-G...*.....7....FF.C.!d..g..^.,.Z.[.u.......\|..M....}o.-..bg...9....,..V.].....z........y$.....TUR.V....I=./....x...rI.8.._...+...c........__o.....y..n.%.........x.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1166
Entropy (8bit):	7.691960667496785
Encrypted:	false
SSDEEP:	24:zeB8UKUcXK2ikTRek1c4ZiE6VV6B0KbGeT2:zeNWXK/GRx24ZiEkV6BrRT2
MD5:	08B76701BB5EF4B5FB05E05FA3EF33AC
SHA1:	10DBA471BC3E4AA376256FE00BA6C8A4AFBDAB1B
SHA-256:	FFF7FFB81126FC736AF24F8797F397C29F65C088DA60E87CD1241834E19D6274
SHA-512:	C4B3B7A6965F15BDD4A05B4DB24C25FC91877C174A29A70FF7B9BAD9556A8B7F730F33F90926FC89E6F951F171C6BA2B86D1FC090E60F4297415ECF8D16E18E2
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/tvQvvubDZ2r6Ou8zxkVzkIvddC1snCCq4xD4dhafjAJhHLDsEvHDEUms9RyVH_g-nI_8yTyeahZshZqwMV0NdHxD-K9v-Zbm4DF2vds=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....EIDATx....k\U.....L.@lC.D.)..-...._.A..R..n.nU.U.........J.Q..]l...6..B4H..f.... ...{.9.....&.3.\|I.......T.........'.?W..V...q.a.-..>N?.......;......e.,.........%.9.2...I\v...n.....<'...>MY~..\|.mv8...<....>H..G.=z.x..q.%s?.....,{...Q.%/.s.......>....036...r...]'...............v.R..D.x)p..[...zQ-^..G4........~._........#......x)p.j_...~..^..Fm....S...ay_..8<...........7..e^.T..Q.@[....3....qc.....UNU.;q.`..[u=........k.q.l......).q.l......).q.l.....k...'.FcO..l.'pw........'..@.g...M.x.o.......rq.........).q.l\<K..,.....F.9 .3......K.7p..kn..d..]%.Y.$..........t.=.X..g)^>.....\|.*.~..H...E..?...-.......1.. /..C.e.9..'..,.. +.i(..:S.t.6N..S`...8.6..-...:t..../.u.z.[~x.......-.o.).I.>.../.O.g..8........_.....A..{..p..>P.g.@....C...}~r.....l......).qI,Y.].$..va.......5.8.6N..S`...$.h..._..u...I.......l......).q.,Y...Z[a....[i7...zy.O..Av}~ .)..:.......Q}b..5.8.6N..S`...8.6N..S`...8.6N..S`...8

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	269444
Entropy (8bit):	5.578162026533905
Encrypted:	false
SSDEEP:	3072:bq++1c0Iard8OdwDM9ba8eyCKqjysCBIQi9a+dQWqzGmRF44xKk+9H54Bj5gA:DCb8OdwDMkFz1zQi9TdQWqzGaa9+Bz
MD5:	FE28700C73E029B4E543B58730AF0FBE
SHA1:	6F70DB48349896675146E9B8AD15856803E9185C
SHA-256:	863BFB550C8C30B89321D3C9AF528D413472739D367C04E27AFD737BBBB3A03A
SHA-512:	0FF699933CC01C34799753210594497C15D306459108EDF1562D7A7DC5D01E5CF65278B1063960E144AB9498F98B35993285E7EA075BECA60A2106619F0EB9B0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-YGRLMNPG7B&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":21,"vtp_rules":["list","about\\.google"],"tag_id":107},{"function":"__ogt_referral_exclusion","priority":11,"vtp_includeConditions":["list","about\\.google","myaccount\\.google\\.com","account\\.google\\.com"],"tag_id":105},{"function":"__ogt_dma","priority":11,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":108},{"function":"__ogt_1p_data_v2","priority":11,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regi

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	817
Entropy (8bit):	7.381646783346233
Encrypted:	false
SSDEEP:	12:6v/79B/6Ts/G43jjRB4iS/4bSHOOO4u7zzzzzzzbgkokpAfdhXJ2/oi/3ypm353o:O/6+3xHNt7zzzzzzzbo5lj726m35gz3
MD5:	8241731FF6D4C4B54D50DDB229ABD5AD
SHA1:	732D211AA1407DF9DD3E68728D62A1F92286A716
SHA-256:	D89908B7F4188864173BBDB3021BAF269468E9117BB0717CAA9823E4578961D0
SHA-512:	AC847205DCE1EB6E0F9B21E935B10C2F4C939B0F1AD38D62C2DD9DAFE87AF4D4D6A0F9D79F30F1948D7D627136D2DFD90322955023818A1C42250202CF328AF0
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/RQdvv8_ORarepoEntWwvuh3M0wpyhNwlGEXbXAYv4iejDJpzh-Soq_sWCW6gS-DtGhoKCtxN3_sURCDjyOR4Cpz1dD9a1KPQLD1bBLjmoZolhyeJcr9s=h120
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs.................sRGB.........gAMA......a.....IDATx...=N[A...cH"P.R......l.%x!I.A.....(BKI..D..@F...5.g.3..#.s..wl...L^...V...,....,....,....,...>Y.....{\|gg.'...6...\|...M...7.........}..6...W.$z.>.?'.....+.'.O...U.....^.]>.'\|...f...W..#.8..#...ef.[.j....+X....X....X....X....X\..,.K...:.E.N....~N..b..L....;.2.E....}..C)s_..G`q..G`q..G`q..G`q..G`q..G`q..G`q..G`q..G`q...}...9P..,....,....,.....\|6O...t.....(...`.n..ism.v.W.q7.....I..N.'....K4q.....U.L.6..&n;.........^.....H`...=0q}......:.].\.>e.L\.F.&.o........A.......KR`..':0q...8w..u.:kh..~g...f.S...p....b"..t....?......N..A.....pbY.V.......W.J.j..#.....L..jG&p.5#...Z...P...n.td.;P22..(......L`grG&.C9#..\...X...vnld.w`Ld.wbhd.wdHdfW;.:..L.8.hq..G`q..G`q..G`q....w..7y^.....7.....IEND.B`.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2018
Entropy (8bit):	7.567869290702255
Encrypted:	false
SSDEEP:	48:gK9jv5RQ6SWRW631PSDHcpS6VnTMxSx/kjfooEH2bd:gK9rc6Sk5X2xShsT62bd
MD5:	9B282D6F7D4EF76BD33E3BD8AD6F944C
SHA1:	A05D234D5265BBE63CBEEFBCC584D288D036FDFE
SHA-256:	3DCE4B1E1B0FD56F0552E03CEA8404EBDBF0A42534834255A2E85D0FC16E62F4
SHA-512:	3409ECDB91502306A7A5E49CA3D66B632A7407A06A18C1F1D88236FF220C28C258F09CF4725426673A27E643D008C2EA51B10ED6BBCC318287BEAC649848F873
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/WVR82wo80fHsNaPFIXDrmwaUcE6lFSxs_zHXc6Bedrglc3MA9mPkDqKFWBMvdVU3RbUEFGd3bYZjLgM21FuTEBGx9MycBQ5Sejajl3w9jgq3o7APtl8=h120
Preview:	.PNG........IHDR...x...x.....9d6.....IDATx....NU..?/.;$?e~..%......L~.Wo...VKkd...[S......h.....$d.....B....sw.s..>.}^...g.;.9..s..\|..{.cSPRR...........+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+..+.R..M...;U.tr.O.;..2....`".B..Q..'.._.t.6......4....)..\|....Kx...;....Qp...........2..+U..._?.._........$........-.....c.k....`.++.N.....!.w.......T.,...MC[.r......."..`.pE.k~s.H...(R6..........0.....w..f.P.9x.K.....=eh.."/.F..?..c.o....'h.....R.....]~.0........ ......=...o0...1K..]:7S.\..v.i.;`...ro.6..j.p.Z.SI.y..P...P....X....\|M.o...].H.:.../....x.KWxeA.N2..#./..g.....&0......p3.v...k..6w.k.y...^..{...G.h.....s.......\|..^yr...{f...S2..r..n...Z..,....Z...bR#o...1..9.)..h.U.F...W...../ Xj....9W......[]yKB....].mJw.H....Q.{..:Q.y..l..2.G..(...X..t.....rW!#.?.....r.....}..b.!#.dtC(..P.O....W.*w.;W.L/.=.:.{u..t........,v.z.,u.4..#K..4.t...nq.i..W.....##....

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1165
Entropy (8bit):	7.606632293644021
Encrypted:	false
SSDEEP:	24:ykeW4hdqN3wwCnS0ybI16Bhhjl5Hkqlja3CXTojQG+444Okm5meSnN:ykD4hdrP+hhjl5La0T/G+mrN
MD5:	3C0E0AE9A7D54986A60EACA915C90C9A
SHA1:	237811D7A178C2E8C387B973351D631EFC09254B
SHA-256:	40B91E5A0D35C5CC4783A28E4D80BFD783D63A06FE1A6EB69744B85CDD503175
SHA-512:	4AB68C3966530526FF475BCC5E71D6CBDA4FAE9179E9F190C4FF9720428F2F63001B1A81B7EE6C11871B4540D6DC40F7D3F7DCB3AE84D45039244CD24DBA28CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....DIDATx...o.U......k....T bX..J.T.B.... ..t......UDCM.Q....../.$N.l......5..C...(.79w.....r.j~..c.......9.}.......4.\|..].}:S"..?nmo..>..f...../..O.5>........S1D.[.o..[.?...G.......:...MG...(-..w...5.....Ie.,....U...(.]...k8..m.f...+z..y&N.1U..<.S._..;.<...d....O..6.<..r..<p...........k?\|.."...{.(z.:.U`.S...e./h......./..W../...x.b`+N./...p.b`k../........8...8'.............................6.....0.....2.....4......P .Q...).)-...,.........zC...]..v!....u...X]\|........a.77..>`}@.....~>..c...88.....c...88.....c...88.?.^....UL...O9...6..?&8.$hR.9....]W......l9.;................w.f.......2pU...........M`...._..=..../w..p..7BuGk..]``\|..^..9\|Q!K........1pp..hn..q.$n..r..n.Zs.......5..Lv.88...n....kv6.......v.-w..n.Zr..B..88.....c..\N.....{............)Ddw..l.~. @`..`.[o%r...0pp..{.z+..!..v...3....^...M.sB{....]h..3..0pp........1pp........1pp........1pp........1pp........1pp......j.....7...z.>g.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	946
Entropy (8bit):	7.529486934378591
Encrypted:	false
SSDEEP:	24:JY8iFVgVv882fuxBkvGt00NGNfkAclNGNGN45vd:JniFUE822jknh
MD5:	BEAD483AEFEFECC7F57C8B07C9810B62
SHA1:	6DA79643CFA4053E4359F1087684EF283CB0FD2E
SHA-256:	4CAD8F94AF9C3253C5B4C92F1D36ECDB0D01DACC655250773A1428B0A80D0031
SHA-512:	C97C6E8F5159523897E846B0D0D684FF0EBEA00AECF96A16DF5EE5EBB3BD78FE1146A763746F0A482D1DE827B3C46ABF5C742A5B474C0F256AF8630216B16067
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/aD5GNhlaU2d70gmSy5ioL1dMSUZN9cHDWPLkIBLhCsJ-BgcGUm-PD6o8XExZcx1i2iZV6PH0P8v3ceg0x7Tzd_OZ5FV0nXs5mX15sgA=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....iIDATx...=..Q....3k%..V..DB...M.%..hP........A.L)A'....D.]..3s.6..5.~...K.....3...y.....k.. u9....E?Wv....<bss.w.../....l..5`W.s.k...[^3.....E...n...O.N...4......3+.n...%&@..a....t....Y...R.9`{.....t.u...T.....3k2I.W.2.K.d)"......}.G!..u.MS.yV.........W....yT.x9p>U.^..Wu....W....1.Y..8N.....*.x9p............).x9p.Z_...}..^.\Fk.........e./^.\^.....I..A.c.....#..=P.j`.._.IL.....c..o..j..5..:.bR.....`q.,..9.8......X...s`q.,......~..d2V...........O2...0..........K.".{T...`q.,..9..z.....na......._.....G....Yx{.....0y...+}.E.F.0N]..~.5L-.2.....X...s`q.,..9.8......X...s`q.,..9.8.....F.#;..P.g..},}.%...{/..K.b$.-Z...s`q.,...E..w...G...3..g.D..,Sw.;,.2...!....M.y../...+.....X...s`q.,..9.8......X...s`q.,..9.8......X...s`q.,..9.8.....v......#._......{`.mMR.......7...=4..\|.....a@....C.7..$..x.1_.C.lm..<bx...R.9..0...[..f....bffff........C....IEND.B`.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13482
Entropy (8bit):	7.978621445906871
Encrypted:	false
SSDEEP:	192:ZOUiGIhZnyzZBYIHj8QZCF10h/9wxGJTR67/QoqLyGza5h2JvnvlfV/jrkG4gMRj:It+DKv5kS7/QosyUAItnv5NSgIs6R
MD5:	96A60B50E2C4ACEAA27E70FB2B79ABE5
SHA1:	F8ED3D958ABAC1716C8B9315DDB7A0F21EF7E5C5
SHA-256:	FF1F6CE7A89C380F7924074ABFCC5AA989989BB9D2E747F146D0B3F2EF6813F9
SHA-512:	962E87C760F0F7446F62CFC37DF8DC7E9A08193F8B88A603038E57D4E9F00DB52D04279BDD410B90D7AA4E99A28078052E6F51E44A5BE21D5FBF49A3BF3F676D
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI063JTgu9NvrsvRutrqHOfR5AAWduD51R8zuswV8=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2.. .IDATx..{.o.U..Yk...u...yJ3#..{F..H<...rL......I.q...8..I...........SB$J..[@y.. ..P.8e.@.cIH..}.}w..w..+....9.s.....J..nu..w.{......^./.!w..........uw......R.....X..._.W..;}im.,..s\|._...+..;.^urK.}.>qbK.].qc.?.......}.N_+.,..9.{o..~W..E...5C.'T..$.i]....}..'...K7;...I......C.......;y./...usU....W....x..c.xU5.J.B..0...^.r........1.}....>...N..............A.....7.z.\.>.<(....P!..T1TA....O..X,."0.#+$._.f.w{!......S_.{...........-..z.x\.7.._=T.K`....Y...Q..@....K....].`..3.N..I.g.b?.........hn.+F..._^Y.r..>b..R...^E^.%..["P...S.`..00.E.u.ZA.._..I.'..lo%....9.I....._...j.....~.~....m.d.....S9..x."...T..,.......N...P......Wc.j$.J\|W..'..#.......$..p.0@..E.....9....?.}..9./)....{..a.&....S...J. .%...e..@...%....(f!.!.......W..<&......lf..V]..N.....I.....{w...?.../.\|Y..O...\|.Fy.V...O...Ey8'

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	808
Entropy (8bit):	7.577372563287115
Encrypted:	false
SSDEEP:	12:6v/7GtWjYhqz1qQY1ZS/CuQcG12Rw6LrOkliwxjEPWlXr4ENm59ZQAcHKdoikfkI:ntcY2DuA/CuDT/8wleWhr4EpAcHAI
MD5:	5B90B8A3714E3BFDC28A3C649585993A
SHA1:	9DF71FED81180EF41EB6815A4550C16AB5675254
SHA-256:	1E31AA0FCFF4C20BA63B755B8860A242D99C8F426C63524E6B003E2BA563CBE4
SHA-512:	FC82B76736114021715195A37E840D12F98CD2E6E82CC1A4F9D32AE29555C4273801A6E8166E853412D8AC1E543E2BA86AFC3867D9D5A2E29994055E33680073
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/5WLz7CvnjBuQDDrFDsJW0EMrL-r6a-b0YUhF48zk7l4lK3yLzhBzeG3I01KIycLfE-UzXuB3MrXRCjPEE-CeWZ281MGTq-FA2BGoba8=h120
Preview:	.PNG........IHDR...`...`.....H.......IDATx...5t.U.....].......wi.\|....k..2...T..y.k.1..o.9...Y{...F............)...Ya...........).1...'.....a....#q.3..s.}JZ....9..$^....q.\...O+..k".....c..x..m.5.r.y.....[60!....~...\!N\./.........../..G...g...B...w..Y.........iie..Z('%.............s-...ts...6..f....(_.....[B`o...;..v.(......[.v.....8G..^o..4.[.s./..l9G..7B...[....?.N.Q.q......k..V..."........{...H....7F..N.E...5.3.>1.q....O..%[..}'..%...c.>.8D..c...$.q.}G.ts..'...H.z..xE......@.....%.....@.H..l..^$O-.n...W........,.U....).....)"P......Z..,%.....(#..`...j.v.\..`. _7.P.....)..yj.\..c..7^.v.>e..D.72.....\|M........gr.?6M\|....).m..e..0:...../:.5.x..(...E..f....Dt....M(..M.WD7......#..0 6.....Dt..Dt....M.AD3....%..M+.u..Q...q5...o...W......X.e.78O.....~.)Q.....IEND.B`.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2860
Entropy (8bit):	7.879156635175711
Encrypted:	false
SSDEEP:	48:fjQksA6iEpeC9On0wvRNbqvGI4NY6+ifbUr9VIiDj47Bj82rLtvGDzt3gZ9ptxll:fjQO6VPCFqeI4NY6+Jn47Bje2RPN
MD5:	FB458CB44A816F8CB363B60DB753F71E
SHA1:	F3AABDB35D06026CF13E72D2118B3FA81FC06FE2
SHA-256:	FCEC976891ABCE6C4E0C4636FE4FC4F19137C73B4434C24D1AA7FF3CF3B20468
SHA-512:	6851B77E81DC158E201E3DAD2DAB781ECAA17AB179DA47F31E7CC3733CFA730CDC4D04A4898CB6C95BF5C5B72A4DBE1691493565CD4C3E7841ECDEB296EC7B38
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..yl.....7{..C..$\../..CB..R.$..PZT...CCiAEEH@....@."..ZP)..%.I...m.....D.AU...^...{..a;..Y.....\|$_.~...\|.y.fv...........u.a.v.0....J.f.............8F..~.+..)l.`o..Rf...@.C.]Z4..t.../.+.X..........-bg>....y...h...A.'S._'._.6.`0R..s...."Y..U).h....@.E.#.3.@..5... .@.Q'......?.;.bzD.T.1.`..6......!......:.YF....y..3....=r..S....+.]...4.]......\.Xb...:.j.}.\.>.TN...V.!...K,"..L...U.L..R.\|..8..O..+([..(x..j-qr....oR...8..-...-..i..=.R....J.O..\...8.<2..l0..H....n..mj ?.&..c....>...J..V...i........3.u.(.X.`.....%.o0..5.j.j.6.....N.;.\|.....<!....;Y:..5....h.{.....Zr. .)..G.....Y3....V..b~R$..i......u....u.)....u.d.]x..V.....x2....4...+.\|.5.....M.{?.t].......l.e6...KY.B.........<.h..N.AXM.&!:.....^.-/..i......\|O;<...J_.7...3B5........`k.oY..ijzB/\\|.e..j.I.L..._.0OzC..o..~v%.].2+.<....X..u..q..............\<.v...Z......\..R=..H...[-9J.<#R..5..{..iV....P......f.....C.$H.fBfw..}...qI.YM....^^.Y

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21716, version 1.0
Category:	downloaded
Size (bytes):	21716
Entropy (8bit):	7.988919175869214
Encrypted:	false
SSDEEP:	384:DfspV407P6+jGlbMAA2cdv92Dg3AuGZ0KGKBb2ZXdWgb98JmSKMrN:D64Ei+n2c19NuqKuZXdWv79N
MD5:	D4FF90DB5DA894C833F356F47A16E408
SHA1:	30606044507D81B996C992895AB16B8A8D68BE97
SHA-256:	F2C761EE3CE27469F940A05B64E38A829A400427727CD0BDBB4E36F1D572AFD7
SHA-512:	85C6305EE6973EBF449EFCFC95BB10A66E5CBA92D026A2EC4F1072DC8CCBC5B4A4A384FE425E53E2DADE2180F37CCA56243ED354033CFCA5821CBB77FB8B0FA1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
Preview:	wOF2......T........P..Tp..........................4..,..@.`..~..d..u.....<..4.....6.$.... ..V..X..^...'..:...m......?..ts..6(#k.y........ON....Mn..X..~X%A...T...q.r.L..9..B}#e....}......{..l.I>.n.....u.>v(..}lo.2.f..D.TG...:mc.3.M..A...../aJl..ZT.b.S.E}..wq.B...&...Y..s.o....Qs....>.]u^O....d..Y....oEfh.........u..X.....E.3c....r...Eb.....N2+%\...J.6]N:.g[~..,..>@.`IXs........LP...c.!K.X[......A7Z....O..g....5..1...=..X....e!._.A..u.raef..y.....>li,/+..-.P-)...w.I..3\..s^.....T.\.1.;.x.:.r.7g...dK.$;....L2.t.i..hz.....>............5...,~}...W#..X.2...E,.Y.3..f.#........[..X......fDW.d...Y..8..T....^.{BC...+.W..9...`...\ ...c`.nc........_...}6A5eM.0r.IG...Km...l.'.o..py.~7.........P....9...hI.A'...D9.....4Q...9sc..9..........9lw.P...dI..z...S.>U.5.@Z...{.....=`R(...l.T.5...4{K.....L..A.]...Rg.3......l..a......I.>...p.q.H.E=.$...Ps..LU..=.$......YU....#Fn..Q..c...B...4...B..3....?....ywJ.$.I..L....yK...m.!..b_g.eH.3,.5 .@.D.........)N.?.<yR......Ro

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7450
Entropy (8bit):	7.9466762875405195
Encrypted:	false
SSDEEP:	192:v0ydeyEkZzc5EEttyNPp0BorRpMlx8tfRKJRVM1oc:vtEtNGC2rM6KJM1oc
MD5:	68B6198D96D08CD134A08B067984494A
SHA1:	8A7702B58E6DD86B86318160C128A5236EFB2BBD
SHA-256:	6CA243D51F626351B5ADC276A4030B9AE05127C54EE8FDD850AC4D86BFC559E9
SHA-512:	41017D4918BA9CC878C9750F9280350D6A88BB12969EFCBA71343D4A3B2176D7B03C5943DC4C4D5451F2F7C8438C3B456ED451BD15A38DB530EB5CDA81EA870E
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/ra4Ks1fsGsLSlzWoAU-9Ls2V5vEFCsA9thbtIkCHNFYeLC-ver57N4-GCGFZ-GBGw6uQkYPkvobF7dzM7udYmcTs4wfDTljzskEZAQ=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..yp..y...s......A..@....d..H..I.l."...:U{..d..7Y'..v.[N......,9.....DY.,R.%R..&q..H. .. 8..........`...Ii~US.jt.{._..........'O.<y...'O.<y...s% \....I..@+..,......x.....&~.....4.../..W~.\|a.,I..`.....j.......?' &~.:..q.A.0..&.a...!.O...<...B.X..v.n`;.!.B..j'Q.aO...=..dY~..r.../`I...........e.8FK.....[Y.O...\..N..?....f....'..~E...E..w.z.;...,I.../....o.R.4RE:..R?.A...&......GY.....;.".,I.......:.......N.........P]]..JKK)........... ..D#.&''........FF...arr.h4J$.!... .".(....>....e9......k.'....}.....:.."..>...2.,YB}}=MMM457.d..DQD....4]..B.A0Z,088..'.........p..y.^....8..LZ.....>Y...x.....$I..}.......4.UU)**.........i.......iF..E.I.E.A@.E4M..........'?...Nq..EDQ....0....,.C....\v..$..l.h...;OUUTU.......Z[[........i...\.......r..Q.........P&.~......j...%I..~.c.j.:G.4".0..........v.~?..f]..0.}..y...8.(.:x...q....G1t...<nw....K..........4t]'..P..m.6V.XA[[.E>...f<..6. .p8.........n...

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5188
Entropy (8bit):	7.952928145135762
Encrypted:	false
SSDEEP:	96:9JKglioE6pMcO5oiXZuh+u/U7pLnZ0jnn7dwp5KRf0271XM8zAJPzSjCWdJ28/p2:9J66pTOlI+u/U7pLnZ0jn7dwuRfU8zAd
MD5:	714ACF1F5A07C6204BBD7E59194A2870
SHA1:	3F8170F84AA88CC81D56C4383CF3758E7945D71F
SHA-256:	1C58D90328C77231DAAA4F46073F3BADE862DB0E24A896F1B17912BB52C0FDDA
SHA-512:	FE1D52B327E09B1936B156546DF09F10802ED8D51C474217F4E02FFB8C312F519540136833C5E51A07CC7E25A748F2DECAC7D393885BF4AF05A53CB9C52465B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..y.T..?..^Uuu7.44;..K..n.Mp.4..Fe.......dr.1.....%.q"q..h......3!.9..M7.`\..l..&.MwUW...?Z<4T5U.....>.p..{..~.}........(P O.\;.)v\.....KP..)....Z.b........b-b<..W$f ..A$b.r....~.L.e...2.;b{[..#eFt0.A...P...2T.#...U-..E...h=p@.N............/.}.+.....v..%.GS..2......A.lE.B....Q.Aw!...g..5...[CM...k6x.6..y/...'.....a.@......m..ETv"l.j.....}W.~.]O.#/..u.XW\g..~.1.LPaX~9....V.Z./...U..\{u4y...~..X<../.0.t.H(.~..V.7....U...6......WH]... .-P..$O\|K......{z.s..z.......&L..7..$..\..!v......^.J....._<..9...3....\.....DY.h2..\[..b;'..]8.r.s?.A@ .>d....S...U...6.U.w.3,....Q.3.(..<.....+k.).F.&...3...0"[6...5.fz....d.\V...s.c^.d..@8W..z....c.G.\|~\YK...9o......c&r.....~....:...{..%y...O.O....}..~.p3.`dLo9.g..U.F... 8.^.gj._.a"...}e..ll:....h...m.....q.g.2.d..I.K.5.p. ...m...e!...\|E..~..X+.@.....>[..8(.>.wy.A?MeD.=S...N....A...k.-_^].N.....eq.PsIA..X.....\|yuC6Lv....X.HA...\|..._...P..vJ....

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 340, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	193769
Entropy (8bit):	7.980179307292795
Encrypted:	false
SSDEEP:	3072:1OHwYdknFAPZLp9BVAYpAAwg7cXCqkpQzFgf8DQ6y4c/pFpYkQQ:lYdyiZLHPAxJiWC3pQCfbp/pFukQQ
MD5:	965B3B8F90228A96AE600BDBFFC37F06
SHA1:	1C266F425F33E76A171985BF060AB91AE849EE0F
SHA-256:	75E487EC564F864B0403590BB58EA71222322FB4B4889A338D712E81F7D0C946
SHA-512:	7178DB878633C074ECEDAADFA331BF02D5C8F52C55ABAD67DAFB505DDC75D352CABD403313529D71C6B77479B486770D86B41EAB39B3F8775FB40CF1AE265E73
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......T............eiCCPicc..H..W.XS...[......... ...Z..R..!.$........k.Q....+ ......bAEY.uQ..7!.]....;...O..3....e.\T..<i.<>2.565.Ez.P...9.....;...@.....n.D._uQq.s....P......8C...A....A ...@T...T..b.9.......T8C...m..9._.@.......zV. ...?A.&.J.....8H ..!V.>,/o...C...e..x.o.7.Y.........:.~...(d....gi.....\|..F...U......Sa...XU.!...u.....QIj{.T.....&.nB~..bS.#..1..}F.$..1\-.4I>7.b#........-...._hm.........~U..(s....7b.W....).S .).$.@L..U.....,.sb.l..xU.6.....j~. S..../.S..m.K.1.\| _.....vR....].I.I.<"...\...pu..s.4)A..#...W..)..8.=n%.T. .T.$h....pq...LY~\.:N.0.?N....D....,..-.L..@..Y....G"...A.....f`FJ...>.@!..".P..........<.U?]@f.hA......<......t.[2x.5..x..&..........W..j.5..G..%1..F."F..q.<.....3.6w......=.)....p..F.=I2O.]..A...."..Z.v......!;d...p.=..6..={A-G...*.....7....FF.C.!d..g..^.,.Z.[.u.......\|..M....}o.-..bg...9....,..V.].....z........y$.....TUR.V....I=./....x...rI.8.._...+...c........__o.....y..n.%.........x.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2180
Entropy (8bit):	7.888352761944028
Encrypted:	false
SSDEEP:	48:bpAYbjn2GuKQgX2pNsrAVZy8SVpDHHxEdqd/ofQ79tE7XhPK+7N:bpAIjUKOpWQY8SVIdQuhPD
MD5:	91AC56A852471FA5F940734D493057D0
SHA1:	86651F1CB566601941D35029B20CFDC01CCF599F
SHA-256:	3009B1EC2FBAFD7D78D9D663EAE16F9DBE390AEA9C4EDFF3A4B19ACCEB178ED9
SHA-512:	1E625C973D05C9FF0CDF0F401FBF20B32DA84A07855C919F9948F7C019672EFE7FA124C0717254758EC5E12B05558B9EAA8500B6C24153732D0D59E18C550235
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/QsFLnA2p7QlFCy4Rk-TH0XoaWFilCOzzt8FPO58nI_FXh5wQkjWEMpBKMkJxQJMZio9t6kDMpniv3WrWH7Slxe8BrbMvklg-Ht53iw=h120
Preview:	.PNG........IHDR...H...H.....U.G....sRGB........>IDATx..yl.U...of...h...r.n@...!F9.EnQ..Q....(.Z.C.@P.?.?.Q.DA..H x.X+..(...R..n;.......7S4......}.}.....-..l.6...M.&._%.V....@Q60......F...g.(....%............f..PQ]o...:?s.3.(.`..Z7s.0h...4..S.9Rm .>Y.% ~...[.cw&.cZq........_.g]......Y...4.l@......(........% ..X..E......LGd.(.N;>9y.m...H.c'...@7.I.2.h .a...?.........6nV. .....[.81..&.".g..nQ.t.L:..6..}..m..._.........m+.....y.Au...[z_........i.......wc........K......x.a'~q...\3...\|.....T....f8\.....6.......k&......0.a...#t S.q.3.Z.=....6.....v..p;L..;..5.k.A....%.dF...L.V.1...S........Y-.$.E...FzM.%.F..1.[v...p]...XH.Z...Up......f.''1.Q.......x.7..8..U..[...z...+Z}...@.x.j...MRp..U.).....X...g...?..[.ZDiRA..........]9.j].4.9.....4...f....v..N..f.....!...R@4]....R....n.S.k...........E...c...^.....].A.1..2@..lpL..F#F.....?....^\|k.'...i..*......(..p....A.i......[....9...(.@p..9.....VA.......@.........:zip.....,.=.Q..-.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 390x390, components 3
Category:	dropped
Size (bytes):	24425
Entropy (8bit):	7.978531074331414
Encrypted:	false
SSDEEP:	384:/ob7Fx2CDs+rcRRpyEwI8iSWhkjk4zBVMn8q4VJmCqDqvZiYBgulTqofd:Ab7F0+4RnL8iAPtanvolqDqvZ/Zf
MD5:	282529ADDBF04EEBCA8598DCC5FDB2CF
SHA1:	6E1CE2E4C2B42FD1D6FDBEF5E066463EB293044C
SHA-256:	FF50E9AFDCB06BFF0AC242BAB337A2E261DC225EFEE343C9A7332D5A24705CB6
SHA-512:	9C25AEAFC017E5A54F39AF6E5FC93D7ADF95BFD974A95B35935057715653F079DAA10D7C542C6B366C70588304457E9915AB3AA8A0DF6634EE9DB69C17E9BB95
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................................................................................................................................".........................................M.........................!.1AQ.."aq...2....BR...#b...3r...$CSs.c.....%..4dt................................3........................!1"AQ..2Baq........#3Cb.............?...D..Ma..l..jJ......c.{.....Ug..#N.U...1..M=....3...Qt....h......>...Q.NE.B.:.M.........E4.p.:..e!.(.%4.D..Q....(.]...U...+......2....=y.xz.F...........4..U........M.....k2.;..Z....9Y6.7.A.....I(..r.....{^...]..t .....6;...X.HV.$.M.veG4.\Wi.Z.j^.+[.2.`Jo..d....{...q..!k...U".W.Q.jQ.T...V.....w..D...l.]J..un.....[vi.sn.5.C.F..^.+....@.G..<.......I...VQd.....E..3....h.,uA...n.....r.Jo&X&.;..I9g.I!.x.R.r.eH..t..G..z.j...j..&..5E.&1I....=)+..i.T...<.6.kUJ...'.........>..K7..s.S.gk..O.}ma..sk.Fc.....S.....-4...z.C,.k.Z....R.S..9..mU......v2`m.I.;73..t.UaNQ........c...B.l..y0.rRxd

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1165
Entropy (8bit):	7.606632293644021
Encrypted:	false
SSDEEP:	24:ykeW4hdqN3wwCnS0ybI16Bhhjl5Hkqlja3CXTojQG+444Okm5meSnN:ykD4hdrP+hhjl5La0T/G+mrN
MD5:	3C0E0AE9A7D54986A60EACA915C90C9A
SHA1:	237811D7A178C2E8C387B973351D631EFC09254B
SHA-256:	40B91E5A0D35C5CC4783A28E4D80BFD783D63A06FE1A6EB69744B85CDD503175
SHA-512:	4AB68C3966530526FF475BCC5E71D6CBDA4FAE9179E9F190C4FF9720428F2F63001B1A81B7EE6C11871B4540D6DC40F7D3F7DCB3AE84D45039244CD24DBA28CD
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/Ac9zapU8rN332VMysmJIaTk1Nk-3IGzqCwFS-6PwDFUFpEzEBKPTGWfIFN4BXL3eHP5s1DJP2tyh8NTS8_LjvXHzpkyZC2fu58Ov=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....DIDATx...o.U......k....T bX..J.T.B.... ..t......UDCM.Q....../.$N.l......5..C...(.79w.....r.j~..c.......9.}.......4.\|..].}:S"..?nmo..>..f...../..O.5>........S1D.[.o..[.?...G.......:...MG...(-..w...5.....Ie.,....U...(.]...k8..m.f...+z..y&N.1U..<.S._..;.<...d....O..6.<..r..<p...........k?\|.."...{.(z.:.U`.S...e./h......./..W../...x.b`+N./...p.b`k../........8...8'.............................6.....0.....2.....4......P .Q...).)-...,.........zC...]..v!....u...X]\|........a.77..>`}@.....~>..c...88.....c...88.....c...88.?.^....UL...O9...6..?&8.$hR.9....]W......l9.;................w.f.......2pU...........M`...._..=..../w..p..7BuGk..]``\|..^..9\|Q!K........1pp..hn..q.$n..r..n.Zs.......5..Lv.88...n....kv6.......v.-w..n.Zr..B..88.....c..\N.....{............)Ddw..l.~. @`..`.[o%r...0pp..{.z+..!..v...3....^...M.sB{....]h..3..0pp........1pp........1pp........1pp........1pp........1pp......j.....7...z.>g.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3474
Entropy (8bit):	7.906705354957975
Encrypted:	false
SSDEEP:	96:fH/89MTAtNzvtDChFivV6c4w8yQ+eQOQUNXoE:fHUGOhlD3LBQ5RQrE
MD5:	C7A62EBB42C7293340F757585E5F9FE4
SHA1:	4F3E5748467A67F101BDEF55F0C7D031A99B1A68
SHA-256:	C09D791CF8ACC8E56F10D9D271CAA38467E4DEAB5C16F9251B83F0385A81F221
SHA-512:	FF0AD969E7311B029A90B01B600CB4445CBC745F0216070C2F2676F18D1F8C0E974E8B16EE89BE1969F6C40567C12B22E236ED03674964037C4D42E90594B7AE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8...YIDATx..yT....?.h......z..^............bE.hQ.UT.#...A@@V5&$$..v[..Z...VPQ.Z......b.;.....N.$.:.9.sD.?..w>g.................7.e.F..C.c.........[.~...}.oVm...k...n..S[.e.6.[..Y..r...s.~K...r.V..~T..[R...'....h..dQ...=?m.W..g...L..]..AV\|;..m.v.p{..a......YO._3...g[xi..<...Y.....Z...Y... >wJ.()...~Y..n.. S).w.zE..P.(..r...^!J9...mt..\|.,:.....3..!.bNF..v.=w ....q..WH.@.P..%&(...eGkX.....u=+.5.<Ol.....d..f...kE!....{..x..BQ-.w......'....m.e......I.....-.i....CA.P..P)@.S...'..._f.e......../..8B.-.=.....0.^......z.......-,..\|&=...@%V.>..#..&..b.x...!/.E...k...".{....-...oq>..u.?..b.}2.B..v...BR..5D.....P..?{..-.u....G..E...u..NL."....p..GJ]..Z.B#e..V.,...o...ql...%9s.... )Aw.P.....B\|..FWf../xV.5.D...S.B>.E.kH7.....R....;.....8.^..$....N...X.B<...@....C.D..S........}/...;..&.v=........PtR..\|xt.ckz....M..k..^!.e..@D...<..........l.3....5.M..H<.v...T..OK...qgOj./.nMz.R>...tT.}L.\.q...8.e.y..Sy.$..o.S.b..3.c....N6.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5381
Entropy (8bit):	7.947566699517126
Encrypted:	false
SSDEEP:	96:6tCCClxoc1YyowdCsQRhTsIxOAqQeXHTTBrFLCBiWQXxwWmjYzWgfexnpZWtcGui:91YsQXTs+OcWTRFLRxwWmkzEZ8c/WyLm
MD5:	14EEE1C04263C31FAB68E9B554268F30
SHA1:	FC600E04A75B304956FAAD824B876688E1A23088
SHA-256:	887D5DCA78102F5292BBC2BE248B65BDDA390CA6ABDBE7764D09CC2B0F40CCD5
SHA-512:	79EE248B106D9D5E7ECFC7A734CCAA0793FE7625FA36A48078EF5E3EE9649D27A3A5E379FC27F7CAB4B1FFD82604A3B71BAAE24DBD49860CC0BE984143286107
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..]k...u.N......@".I.L.#aCx.....C.;.].2...S.J%....T%..e.)...........x......!.y.x..H....{.1.'?......K.~.Ewg.{N....9.{..#.0..#.0..#.0..#.0..#.0..#.._P..\|...g,......`. ..P..H..H...y5..`..[!qO....U.m...Q..5........y....y...T...o.6....s...+...Kn.6....j/......Y:.n.lm.)C....]..o.JDlY.cE.VX91S.X.....M?..#.R...o......pz......$.G..xbD..l....{f..^#..n....}ft... .a.1...~.......E"...\|.......AHJL..P.#.%.(.ha.....-I{.m).X.z....[...M/%......`...3S5......:)W.\.m?..HI..Y....]i...\|.u.O....".......XB.......W....q...^SZ.?,T..G'.....lZ.2.P:Z.....V&+g..7;y`.......[.......K._.H..S0.W..;G..~....6...[].....g.B.%.W....?...X_:q.Kbn...0..b~.v.i...+.e.w.[.,`....ja..qE.:..S...3......m.:..k.....nG.WiB+f.V.JA...:....cK9..?.....n........k..fp2....H._.r{..5\.f...T....s....".+)......q.3.vq..ACK.>^A....2j.0..WI.g[@F.{!Or.@]...a...f..n8q.l.v.v......o..Kk..S....K....c.....V.n..6..5..\|..i..Gv.<....W<..+...k.e..!O..

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54883)
Category:	downloaded
Size (bytes):	1077676
Entropy (8bit):	5.728515471716574
Encrypted:	false
SSDEEP:	24576:rJJ2Qd2GqNTBnSvm051r/FKXuHQw77y0ocL3aic8XKqtuo+:rJJ2Q4XFBSvm051r/FYaXFtuo+
MD5:	D68299AEADE222769FBC45FF2AA21B8E
SHA1:	F5CCEB6F4A6C656D212DFBC224F83D03653C5F60
SHA-256:	1D4F24599DF40BA3A6D2B988973EE602088905B96AE6FE0533A751DF8858EEBD
SHA-512:	7598B3454F5F34E6494037D2F2773FC0DCEDA4A947B1FFA6BC05B4086020C7E5D5820E877094C23074FFBA2FE525AFC46478BB6740012B9A9EDDF573E4DC6045
Malicious:	false
Reputation:	low
URL:	https://support.google.com/accounts/?hl=en
Preview:	<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/accounts/?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)format('woff2');unicode-rang

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15436, version 1.0
Category:	downloaded
Size (bytes):	15436
Entropy (8bit):	7.986311903040136
Encrypted:	false
SSDEEP:	384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y
MD5:	037D830416495DEF72B7881024C14B7B
SHA1:	619389190B3CAFAFB5DB94113990350ACC8A0278
SHA-256:	1D5B7C64458F4AF91DCFEE0354BE47ADDE1F739B5ADED03A7AB6068A1BB6CA97
SHA-512:	C8D2808945A9BF2E6AD36C7749313467FF390F195448C326C4D4D7A4A635A11E2DDF4D0779BE2DB274F1D1D9D022B1F837294F1E12C9F87E3EAC8A95CFD8872F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......<L.......\|..;..........................d..z..J.`..L.H..<........e..^...x.6.$..6. ..~. ..).7{...K.. .k~....".v(...[...RE.$..K..C,.'..{BK.C&.....'L!...DZ........+6.r...K..._...<..0..].V..........e.r(RN.43k;g`...?<?.......b..c.`.. .6..p...5.$zd.R%.........h....";.^WU.....H........S.j..M:..=K..\B.6"f......z.........$...%w.?$-....9.:u....u.I..Tt..s........lY...J.6oN..y...1,I.Yx..lu..}.e...Og..d...Xv.. ...iF.]..x.N..#%,y.&..,$.^.n...\.K.P.J.x...H$..-.....p.....t.v...gD^....?..6o......e....,f.)..h...P...<.:.E...X..p....U.?.[m....l.Y.S..p..%..K.,U..3U.qFZo....U...3..3.]\.C.#..9T.8P`8......P...R;..r..J.*...u.j..^vnf.v.... .pw...Z.(.6%$U.[.\|....!mU\}./..i,..7D........:t'.a;.W(.."G....q.-.Z......;J..0.&/.5. .T......w..;...t...H.t.<y ..@xx .JA.U.t..;g....@..... .t......<.5(^.\|s..Ko.O.x.....!...........lHF............So{.%..V...7..aA$....C;,"(.J..EE..@.....vOB.,V..../....B#.r+./-t.(.N.S...R.Z$4...4i.c.}t...#3`.......s..;.O,.\|..W.A.f.w.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3665
Entropy (8bit):	7.908096599643296
Encrypted:	false
SSDEEP:	96:OS6Vh6C7mb2FUt1ZDr/gTPNGIkNj9/lsKH3yXv7LyC7j9YRE:OS8S6FmZ/8aHtD3wTLyQj+RE
MD5:	9C1533227615CCEB423094AC7DA39F8E
SHA1:	978DB48B75CD3CDB75007D4A8726F01CD45E9848
SHA-256:	5B52B75FB36BAFDA3D8C642D65CCCD5E38913DBF5CA10C70AA4B57FCF95A2764
SHA-512:	933B48E44167626C2AA50195B85B1EAA20AC7618A88F18F6B05FCFBF1C6009632F6318AAB6B10AFD5FE67000D68C4114B9107F668F84B85ABB92A0A965F2756C
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/6heYcmK08nJrjH3yvIin-c8kYQbqTfUs9t-8QUdkxIBcGvGMZ2HVhe2jIYrIRmWOn8qXvivlwGvVDfv9gr8r0ahcQBOqYqITNZB9T0tz_SS2bnOScJY=h120
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs.................IDATx..kp\e.....n.K.........5! ..d........Xo#8..A...../..w.FT..q.....Z...n.B.R..k...4....s..m.6{=.{vs.o........{.y..>.....Bp1[]..zY18...pV..8+...p._...g.Z.........Z@~jx...d.t7dT..27.5.:.f`...&.o..N.O.~.....}......R.[..........l....t.......:.\15<.]...,.v..I.7..<p....\U.P.......7...i.\.............o......t. .\|...M.Z-%....Mk...%...S..s..Z..5.WX.....l.A1...D.w.b....@tB.............w"{.9..'....].)...i.].@...-A.o.j.. .\|.j..+..V ....z.f..d.P...AC......x.x..<.\>5<.G....(....'&.~.....g.2..).......Q.v...!`.v..x...pq..2.Xl.E...SP..1.G.@fjxb.....;:6.p..h....:........n.....EU..5.Z .\.....n.,.~\|<2d.Zk....S....H....;.[..v...+`kx..U...n...!.Z.../.KtFBw.......j.h.......F.......pud.zTW]e........F.j.c.A.L.....0..A3..l.mr[.....7..Fv.M..(~/.n.h.......7..Q.ILB.dr.z.....8!l...\..P.C....=....g...G.y.s..zR.v!."p.......-..Ks.8.ld..E..]..9..!...u"...=....Z.....np$d..K^".w..q...;..j..a.X-,y...a...Z...j..]

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5805
Entropy (8bit):	7.9542006310437126
Encrypted:	false
SSDEEP:	96:t9UzyN3uV9rFvd89BSK+b+n3P/WB64548U3zuH1pgD/ln5KCKH:/U2N+V9rj8DSK+bB5DKuH1oln5lq
MD5:	D0656A971972F0807AB746BE522ADD05
SHA1:	5DEB386A5C5481D9A4AE91E37E175A4E656AE245
SHA-256:	C7B0BC63C6F5631DADD177E4EA287231713A0FF78A36213806ACC9BF760A4D4E
SHA-512:	6DC7991439E91FF4901ACF4AB19FBFC83A9B9E5CB26ABB9987FA72937C84609407A894806B2E7802419C7A550C7F3075DCE0DA33063705ECC51F8F957A6D3D79
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....dIDATx..y....?.{o/4K./..(.`.d......8..I.8.3.e.%...8nAt.h.'.8O6......q.lFE.D.PD.f...Uu......t..[....y.~.....U.:...s.D..%J.)Rh.r.....2M5$..16.5.. .D...E."&....'..=/u.WnK..@P....=Y.=kf..Vc..F..F9i..~80..:T..P...A.BU2j.RF....m.........1...<.W.]...S.."=M..:..H...&.z...?......H.[RE...!i...k..".;.'b.6o".5..$..>...0...9=A.:o.D\..:ew&..Q..w>v].............D....H..<.f..^..sF.....3OD......iIk..D..........`w.t.. .pyQ.[..H...)6.c:....F..#.....DE.......V.{...,.'V>.4.......g.8....fnK.c.FD)>a[#.~....=.%..!Y....-.{..._&.0..._V...R......=..2 .nu..7....]..K...PT..nE..mO..y..lk..X......<.j1...%..z..k\|.....a[#.U..1..Y.......C>.....w.ra.$...k..'....}yr.?..~....?.....c8.m......y.yj....\|..=c.u.}{S...Pm.b...j}J..G>.....E.^...... ..B.c>u..=..omj..["O...HGe+2.u...H8wn......m..H.6......x.,_.;.;..)z........%q..*$.qj...8....8=.y.. \|sW..4.s;-.A....>Y..7Q..e.-:o........s...I..s.,_u.P.....`=c.4..+.%q;...

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 58 x 58, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18405
Entropy (8bit):	3.30307468404555
Encrypted:	false
SSDEEP:	96:oFZ/I09Da01l+gmkyTt6Hk8nT7skEWRwxNXuBQ5uPqcVAG0PuwfTl:oFS0tKg9E05T4kt+puGuwfTl
MD5:	6E79FA388ECA6523260E1B19714CB06D
SHA1:	67F1D1C01DC339EA0C07D2299B5BD5BC1D62F4FE
SHA-256:	F9991B7C4894AF087C50FDEF3F3BDDB0856197877DDA93840D0967C6895BD4B5
SHA-512:	C227F81EB418CEB66D94E14CA6B44E1210A62DFF2FE5741E48922864C526805C9DE60ED68C81E3278007D4AD95F3EA349EBA969050A5511C991AEC75AFDFF689
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:...:......J(....pHYs...#...#.x.?v...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	2663
Entropy (8bit):	7.812108580172692
Encrypted:	false
SSDEEP:	48:ZvynCN9+AMJhX34hevvEK4gzbwc1daAGfeffDrHW07z63aboP:Z2CiAuuevcK4Gw3V2Bz63xP
MD5:	A50EE08F083233FFC61FA5C3778FBCB2
SHA1:	FED6725C0DED8D5E4EB40BFE65BDAAEB23824AF3
SHA-256:	74ECD335416FD3041D81A4E288257F2BEF563600988F23D320E1DD686521002C
SHA-512:	EF7EE774AB405B752CEFAE611BBA7CECCB2EFA083A6893CD79B210B0D6B3F4CB5BD2D777181C4ADFF2B3FD2F2F7F048901F27A6A21FD5D05FE81585421023AB8
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................D.D.........................................>............................!1."Qa#2A..3BRbdr....CSTqs......................................<.........................!1A.Qa.bq......."2R...BSr..#4................?...(.DJ"Q...D.%.(.DT&....F.......".......zL`..T......g.fK.....A.}V....3i..1.%..iW?.[...@q.hi.;G....f/{$jzCj..)..G.g....T.ZsQ.K...._..J...K....K.....Gmu.v.+{z...2.s.=..&.P...b...]..~...]m.{j.\..6..,.....S..[.yN..$zD..NZ...'.;.o.j.Z..f......Z.SI$t..>R...u.....Z.d.c..J.....r...2.D.VR.+.n..0..~....+....3d.}.i.4. .9.'...7.. .B..R.J"Q.!....F...%..[...d[.2...c......)V....,..........N...".B....;z`V.1x........TV...>s.~..$....J.~....1.B.>k.Y..p..:.h..h...&....eI4..j.....L...:G..8......-..../G4...j.-.h..8....:......4?&...{.X......q.A..I..Z.u.,G.Pw.'.T .E....c..YJ....H6.......Xz.x..'.Xf!...`p.~E\..

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5262
Entropy (8bit):	7.94255648573169
Encrypted:	false
SSDEEP:	96:LuiZYmyHNLMHtGobXF1O5fGEyHu5VeYYz1nFdoTcKpXIG+P7szf1mzihW:SiZ6LUtGoW5fGVeSPOcKp4lPozdXW
MD5:	C797DF4DDA33B085FB4478BB30A48F5C
SHA1:	9931859021DD5F73CC6F2EFE9517EE8386A4AD48
SHA-256:	AF2FAD82996558B2D815F058699A7040D6148D3F31740679FB232C3B243003AD
SHA-512:	D165685BBF8958F09900070A8706B4CAAA8FAFD8AD41B9C219F395745B3D74E24B03C981E5BB6A56E55BA632342B46CCDBBDE6A24250C3DC2202A4A7E514176E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..]k.$.u.N.t..}.{w......o..,...X`c...6&.....#9..(?.'.......9&...B.$+Y.F..0R.......:k.<.......N~.c.9....X....Lw.....:u...(Q.D..%J.(Q.D..%J.(Q.D..%..".G......wKT.....4r..Y.l~Q....G......e..E0.........y....=..Us...i.-}K3.)$.../.LfNQ..n..A.O.....$u,.UJ...H...I.[?..1u\.....S;......V8.r.......\|s...^;..V..'.G.Y9F.#i.rK...._R9.d9.T.S..\:...&..{...O...r....>.....?]...P.=:T...%.c.S....Z6........3;p`z.O....,.......g.w.<.1.$........b.(..`L(8.z.?..].<2....n..zkF$0......}......'.6.?..l.......f..K/._.A.......c.~0.l%..y].eX-....r.V<m9.@.i.,U[....>.M.)c..?..o..~i......b...kg.t'.L.uf.^k.;..`.......f0.q.l-.....&..5../?.....e.FWw.`@....Y.2.lm........d...XON..sI23..."......i6..MS...`.. Fo......2.gy..K.M.[.8.O_>..T......AG...h..CK.\|.`........g... +...5.3l......Y.....'..H.)\|.[...N....B.G!....VU.1...T.R.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10051
Entropy (8bit):	7.969290114185508
Encrypted:	false
SSDEEP:	192:7DgOY9e1FUAHDFm52CY3Dm5zQEGibOXj4Jx4jX5H8cdoX5:7Dg7OCAHRQ2CFoi+wx+qcOX5
MD5:	C48F5B981826BB17E35E118421610C36
SHA1:	7A7CE4A5962E64D847286937C30650093C93566F
SHA-256:	291921EC65CB3762CCF73C61F039CF97BCABC3EA83A7B1EEFA7398A509DBF67F
SHA-512:	FCA9826B85F7818036DE52CBC53EFA746B42F705E1BB03886942505E624E1937A97248A7A80ECDD023F1E03E9A42D516E9434E6929225B135D650FA3E73CEC57
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6...'.IDATx..}w..Gu...}..M].$w...0..0<.C.. 8.B.......$$..&..`.m .flcl..>;.f.-..l.U.o{..s.?..^].2.J.MB...g..wwvw~3g.9g.T.Gp......`vq....G.>.q....v......#.$..y.(F@.......mG.u..-@\|.p.m.n...`#.9...X...`..Ch..a.yK.\|...z .w...mXzI..........6... ......p...F.\|&.~1......4K.}.!h.2..V>..\|1.k.'z..zQ]....}A..S...Z.....B....Ft...<.M.'.7...@....`....X...m.....8...y..o.~...]. ...M....UX...n.w../...!..0P.`u.........6.w9.%@}...sK...E........v......M.UK..>}..>...X..9..>...d...}..-.FL".......p.@.[+.X.)....z.. ..-...`.^..U....6..k}w.\|.)..D.`bUE.&".1aP.{.....tUyW.u[...z.\|X.....K ?xz^..t......U.+1.f#..."bb.>...3P.p..R..5..A.0..9.....7,._y7/...d].y.m....@...=..&..i#...]..y{.._:...e............l....l.....K4.L..J..TE.8...?mw..Bcqn....),<...3@P.H......&W...N.D.. w.DD..<.$`s..m_.\|..-ixm.\|H.\|..."....$.=...Hd.h..f[;}r'.$..,.......&...Z....."..&.@..C..)...j....K.z...`.R.Pe..8<....R..q.LR.....&.....:(.uM".$...J(.w...$w2..<u.f ....DR%.0.?..~

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (405)
Category:	downloaded
Size (bytes):	1600
Entropy (8bit):	5.2418985377822995
Encrypted:	false
SSDEEP:	48:o7nS/1kOEsp5uR4zoMy74DEMjvk7DGTBpnJrw:oDl45e4zoxEl5xw
MD5:	4B7C3D66F3172DCB1336A0831638CBD6
SHA1:	01D0E9649617C530B1739FD3EC48BECFA75ED5D7
SHA-256:	F1AE548C5924D94AD674BC14EC100311BA9B941CECD614473E9A241C7A0E84E5
SHA-512:	B496EA5477724D6B0C6BC7EAACF6AF540F1287A790366F82A3C27D74F636193A8AACA4549E514F92C80C473DAB74625966D6EA297F6DEFA9C8C00AB58DB41F4E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.qmuJi5Dd2kw.es5.O/ck=boq-identity.AccountsSignInUi.Mw2jIe5agLU.L.B1.O/am=HwQm0YljARCPOAc-QCkQMgAAAAAAgAAAYBlhZg/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VzN4J,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,recoveryidentifierview/ed=1/wt=2/ujg=1/rs=AOaEmlGH92EHnnq7nYOtfcg3m8nwJzPybw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,VwDzFe,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.pf(_.Dia);_.Hv=function(a){_.I.call(this,a.Ga);this.aa=a.Ya.cache};_.B(_.Hv,_.I);_.Hv.Na=_.I.Na;_.Hv.Ba=function(){return{Ya:{cache:_.Xo}}};_.Hv.prototype.execute=function(a){_.jb(a,function(b){var c;_.ie(b)&&(c=b.hb.Vb(b.jb));c&&this.aa.OD(c)},this);return{}};_.zq(_.Yia,_.Hv);._.l();._.k("VwDzFe");.var jE=function(a){_.I.call(this,a.Ga);this.aa=a.Da.xr;this.ea=a.Da.metadata;this.da=a.Da.Vq};_.B(jE,_.I);jE.Na=_.I.Na;jE.Ba=function(){return{Da:{xr:_.KD,metadata:_.FVa,Vq:_.HD}}};jE.prototype.execute=function(a){var b=this;a=this.da.create(a);return _.jb(a,function(c){var d=2===b.ea.getType(c.Fd())?b.aa.fc(c):b.aa.aa(c);return _.Bj(c,_.LD)?d.then(function(e){return _.gd(e)}):d},this)};_.zq(_.cja,jE);._.l();._.k("sP4Vbe");._.EVa=new _.we(_.Zia);._.l();._.k("A7fCU");.var PD=function(a){_.I.call(this,a.Ga);this.aa=a.Da.aM};_.B(PD,_.I);PD.Na=_.I.Na;PD.Ba=function(){r

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 667 x 377, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	99977
Entropy (8bit):	7.977545093902534
Encrypted:	false
SSDEEP:	1536:u7lfi+egGvULqGN+cFNkTcHkbCOcG50TaSsaATbogpR8osNICTG3IzrBtvN45II9:uRfiVFo+cFNkTxeOd7e3NhTA+l45c9i
MD5:	C6B410BEBFDF9ECD34619596B46EAB3E
SHA1:	BFCDAF287F60168636B0C04C6F81F1B3417AB7B6
SHA-256:	8CAAED67F2CF22F5B632F75701D1238E8E1787F78A945E721650D1A9B9C29004
SHA-512:	8494C7F5FF440CF93BC6D042C7DCE6C9960601149C61443E823276C4277EDA21F52CCF2525504DC2530F377E6B4BAC6B96F2F56CCA2D00C0A2A91349EE01CD6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......y....._.v'...PIDATx...y...y.=..z.<+.>..{...\.@..I..HQ"%..$;(.-{.am(....:.k9.^.....nQ.....x.$.k0....}.ue.....dUuVw.I....~?....oU....X...........!...())))))...T.........R.KJJJJJ..JE/)))))..(........~.T.........R.KJJJJJ..JE/)))))..(........~.T.........R.KJJJJJ..JE/)))))..(........~.T.........R.KJJJJJ..JE/)))))..(........~.T.........R.KJJJJJ..JE/)))))..(........~.T.................?.......Z..\|.o.....R.KJJ~...."%.).....`.EDJ)R.......wZR.C..%%%? Le..P.)9.Lfq.gy..<..4..<.6.J..k%KQ/)..EQ\|........GB.%Sq62...t2J....n..!e.Z.d.N.......J..zI.@..%%%.G..P....j...4.e..Y*.".u..C..e.....Z..d.G....3H.,-...R.KJJ........In...Xk.t.NF2..6..._.G.".$...ZYc... .e.P6..R..+...%%.2......Ic.Tw..".D$H..X....Q2..Y4.J.c,aLx....0........c.X...x.%...0..j...JMI.}..%%?8..q%%%.rX...RD....mJ..$..."K..K.e........q..R..1..O.;d.n....#.%.p..>.w.....fz..N..%%%.\|....ed....8...x$.Dk..2..k..w.;.q9e.H-e.'....[k)..1..AN<h-...YT.)s<.^..<..^....?.H.%...uw&.V.,.k....._ip'.DB.".PJYk

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4934
Entropy (8bit):	7.946299544636253
Encrypted:	false
SSDEEP:	96:QzkrUWX61rGd0LJU7+7iAYdzJWGrn0cce58eXQDvs/PQazmJaPMe7CMT276z5:AWoy28+mAYxJ5n0ceTs/PTN7g7W
MD5:	77AAC48BC9AD8A8D6148A30A1C067200
SHA1:	C3FBE900DA644B044F1A58E07E416560879CD2DF
SHA-256:	27B521E8554E44311BE4A7F331EB05AF5755F26C8FECC2A7E753E888379D4B0B
SHA-512:	9971A39A9D1BAC328AD57C60C789EB7EC0E775C7EE9082AED6B0811C70FAEF0FAD5A67333AC15A9C9BD0875AC3789B60E5CFFA1552C32E444FD35B9FC1EACBAC
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/YT2zmWq_pcZPZpRn6l0i6CuvT07S0DAiBMXWbmW0HQRO47aTDzvAA_pOvYAXPxuJkm8wKcskSkY7Mcw0x0lT1ZBpKLadvSt3ClEq1Q=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..][.%.U].......cl..?b;.X..(8..p...H@$..dKH.....H...... .y.\|.#..#R...!.D.88H1..3.X......Wm>...~TwW....kO/..Lw..U].w...{..-Z.h.E..-Z.h.E..-Z.h.b....>.......J..y..(.....99.NV.+....c..\."U.r.f...O.<...<x.Zc..C.....L.....v....9..~!..n@..J2.'+........1l_.a.>g.....N....].......[..........c..C....V&e....[.`..1.zA.<(...m.....\y.p....{...k_.............?.HH.v.:.4N.F.z.3..Z.......{.Y.#..K...c........}s.&....;.0m.!....r.!?Z%_J.CO:g.&\|W.?..u......]....L.\)..^P..;...."r[.....!.Fs.o...Ye.....X.b.x.-..".p.?T&Sj...l2........M5....%x....4@......y.C.C4.,.V........`.L8...8.X=.R.W....d.....u...X..:i..t.A.[^....AXCn.h...[.z[...sp.F\4..y/q..{..U%l..h.!......5.d5S.L....p.`0..gR....O.J.(..{..T2_.L.^........ZC..h.z....;\|.}..?Hw>.0u...3..>...d...~...}...\|.,...y...]..[.I6N.n.U.6Kp..V9n^.8..........l..

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	856695
Entropy (8bit):	5.207872819358832
Encrypted:	false
SSDEEP:	12288:WIGQ/GQbGQNPk77Ft+OvKdR/km76tmOoKeRC:jk77Ft+OvKdR/km76tmOoKeRC
MD5:	DABF940E6F754E7B673E7A291C1B7CEC
SHA1:	4B0A69E165BAB3B65C9C08929B4EE128951EF66C
SHA-256:	6A2B663496DF4C97DB2FEB91C5DC173CDE62DC3D4AFBF0EB1CD8EB25DCD8E194
SHA-512:	8894ACFC52B8E723C3E5B3440196058A3EF7DC04A6F9A77BB56169B0EA075668339DF3F6DDE674B7CE7B4FF7CE51574FC94A82F2616E496DF823FC1E26DF73D3
Malicious:	false
Reputation:	low
URL:	https://about.google/assets-products/css/index.min.css?cache=4b0a69e
Preview:	@charset "UTF-8";/! normalize.css v3.0.1 \| MIT License \| git.io/normalize /html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:0 0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{co

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (422)
Category:	downloaded
Size (bytes):	258681
Entropy (8bit):	5.241665251278735
Encrypted:	false
SSDEEP:	1536:DWzoJT6zjwXohEkFr/Vjwq4ZK72B0GfjSqDAx1wE4nWi+iDoEXcrvAVdRoXJb/vp:NXohEa/Vjt7rGnA/rvAVdRoXJbpT
MD5:	E2780E5C8093CE8B531BA5067ED41966
SHA1:	23AD6A98E2163C68541A8DE97B4CC1AA84BB2EEA
SHA-256:	D5AE3490ED16DFB50E496E424950F53174BA0D76AE5D631DDDB7B6DA24E64371
SHA-512:	B791E639CA8C2CC93C1991EBAD6E6C0FCE71C75B1B6BC89E62BE8A6AF2E146370018A73A7120D1265ABE3D2DF044392E42A48778F30FBF552A76F36245352609
Malicious:	false
Reputation:	low
URL:	https://about.google/products/?tab=uh
Preview:	..<!DOCTYPE html>...<html lang="en" dir="ltr" class="google glue-flexbox " locale="ALL_us" user-region="" path="/products/">. <head>. <meta charset="utf-8">. <meta content="initial-scale=1, minimum-scale=1, width=device-width" name="viewport">. <title>Browse All of Google's Products & Services - Google</title>. <meta name="description" content="Browse a list of Google products designed to help you work and play, stay organized, get answers, keep in touch, grow your business, and more.">.. <script type="text/javascript" nonce="ulPd7k4-oZQi-2c9z6IA8w">. window.dataLayer = window.dataLayer \|\| [];. window.dataLayer.push({. 'gtm.blacklist':['customScripts','nonGoogleScripts','nonGooglePixels','customPixels']. },{. 'locale_fallback': (document.childNodes[1].attributes.locale \|\| {}).value. });. </script>. Google Tag Manager -->. <script nonce="ulPd7k4-oZQi-2c9z6IA8w">. function glueCookieNotificationBarLoaded() {. (functi

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10906
Entropy (8bit):	7.976159811086094
Encrypted:	false
SSDEEP:	192:TOgtGkBrrBF40535s0+0IuklO7ifO00Mj5hjnR1aY1ozr0YI/rOgL99UHKh9TBO2:TOmHBt5JdGw7ify8hjPB1of5I/66fJhV
MD5:	21C3437676BD897D92D912BC18FAB8E0
SHA1:	E99E5CEF97011C5A4211A80AC9658740B9E887F4
SHA-256:	92D6567B2D8FD8559F9280C426D4710E3F6E660689E7830D698ECF8DDDB8E2B9
SHA-512:	CA578C3BAA1FA96F31A80732664E2E438D40200B0944788DC92F5FD27B3F3E4C2C55967E8D624F2E765A1576FAB076C6A3379B87AF8D9F7C437B033F1F2CF2B5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d... .IDATx..w.%G}.?....{..$Ih....PF..l.w..c0...@.6`.....:p..{If.66.H....6..,..DVB.e.4...y......?:...0..9..s...........jx.....9z..... y.....7..cyg.jl..[p].wT]..............@L..3w(...3...g7.......l.x....1......Z.cT......%E\......4...U;#...<.7f.kt..v....L...........tW.J.:..].....UG6.,'-.z......W.T....P..U....!.Gp.8....x4BU?P...X.;r...v..}p...=...\|i...x.gv..1....9qN..axVAd..4B.a.@[..@...A.....T.c.@..!....P..9...Wom....}..<xxz.rt.....W^0f^^.qQ=..f`.ta...B%.V.n.U.!..r.2..8@..<....r.sO.p..w.....:.....gvO.....:.j-.s..P#N.q.......(.w..u,@... .l/zr...M.k................]........k..~/.b..}...xX...I.y"xF1F.V<..U.{<(].;6..m.........qy.K.B=...j...`X.x.~_........'.92Sv.Cu.\|f..}.GuG..Q.W_...c...f(..7.....=.?.bz..{.;....({f..q...yo..-w....3..I....E...}-.....".xIu,...........\|.K..Y.j.;.y.?.......}.P.[..]8.u+...{.+...Gl.W.t..=.;ld...^..gU.......}H..Q[.wT...T...p.:.....>r$.}D../?^....p.o{.XX.E;....

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3665
Entropy (8bit):	7.908096599643296
Encrypted:	false
SSDEEP:	96:OS6Vh6C7mb2FUt1ZDr/gTPNGIkNj9/lsKH3yXv7LyC7j9YRE:OS8S6FmZ/8aHtD3wTLyQj+RE
MD5:	9C1533227615CCEB423094AC7DA39F8E
SHA1:	978DB48B75CD3CDB75007D4A8726F01CD45E9848
SHA-256:	5B52B75FB36BAFDA3D8C642D65CCCD5E38913DBF5CA10C70AA4B57FCF95A2764
SHA-512:	933B48E44167626C2AA50195B85B1EAA20AC7618A88F18F6B05FCFBF1C6009632F6318AAB6B10AFD5FE67000D68C4114B9107F668F84B85ABB92A0A965F2756C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs.................IDATx..kp\e.....n.K.........5! ..d........Xo#8..A...../..w.FT..q.....Z...n.B.R..k...4....s..m.6{=.{vs.o........{.y..>.....Bp1[]..zY18...pV..8+...p._...g.Z.........Z@~jx...d.t7dT..27.5.:.f`...&.o..N.O.~.....}......R.[..........l....t.......:.\15<.]...,.v..I.7..<p....\U.P.......7...i.\.............o......t. .\|...M.Z-%....Mk...%...S..s..Z..5.WX.....l.A1...D.w.b....@tB.............w"{.9..'....].)...i.].@...-A.o.j.. .\|.j..+..V ....z.f..d.P...AC......x.x..<.\>5<.G....(....'&.~.....g.2..).......Q.v...!`.v..x...pq..2.Xl.E...SP..1.G.@fjxb.....;:6.p..h....:........n.....EU..5.Z .\.....n.,.~\|<2d.Zk....S....H....;.[..v...+`kx..U...n...!.Z.../.KtFBw.......j.h.......F.......pud.zTW]e........F.j.c.A.L.....0..A3..l.mr[.....7..Fv.M..(~/.n.h.......7..Q.ILB.dr.z.....8!l...\..P.C....=....g...G.y.s..zR.v!."p.......-..Ks.8.ld..E..]..9..!...u"...=....Z.....np$d..K^".w..q...;..j..a.X-,y...a...Z...j..]

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	329
Entropy (8bit):	6.508833160744971
Encrypted:	false
SSDEEP:	6:6v/lhP2kZh5RaidCtgkIkhdzsSLYnaxvAQOW375/uNpux+lGxu/Fv9vbNtsQldp:6v/7bxRaYkIiVsEx39acxaGxsvxwQlz
MD5:	1E5B27A6D798BCBC3B4B302E70950777
SHA1:	F7692EF62022FF1EAEF21765010FF6A14A653C44
SHA-256:	2E0DF10FE080A0463143AE70C64B974C10A0F6C11A25FC924D18E923481467D9
SHA-512:	F46A6206175E20CD2B19B465C3F64F8BBE76CD71B0922E3239A3216FDCAEFE4E721808B2023D3D9A379B471671D69D301134FDFA7312346B49D2BDF6F9E12FB0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.....H.......IDATx...OJ.@.....]......&x...\.......... ...}v.@~.B...c.1..c...4i..M.&..nw.q.g%e..f...^........M.j..J...!.<*.w..o.k.x...1`-^..W.B......M....`...A.>....4._....9`..h......) 5.....@................k.%.L.1...g....i...kO.......{.;.>.._....t.j..y.Cp~...?..............dn?..L.....IEND.B`.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4437
Entropy (8bit):	7.923976804215128
Encrypted:	false
SSDEEP:	96:hjvpGFrQ8YLH+gBJ1DYRtPIhwEhIcN4cp8329Rd8IoI6IlAlJ:hjvp2YCgBPDYRtwhciVp832CIVAlJ
MD5:	E26885170F89158FEB6AF797E52A979F
SHA1:	A2C5820CE8368C804BEE88F738E53598F5C26406
SHA-256:	F170EAAF0080C70EAFA8D4DC444985C89AD349DD03A3E934702606212D35EFC0
SHA-512:	D14ACF200E86D7CD61FBFF0156EAD10463EFF08C650FE11C2FB50F50740D7281FDFBE3EE67CD90F612181C2479E91BB2CA6E3EB0FB4927B42F18DB0296B1633A
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/mXJcrB99dv3D2R3626qv23yNzcp64hKW1n7cx78DQmybiBB-radVYvRguIs-lfQz1oYh72Oq_5Tk51U6fAqzzJb95vww5cyi79Wk0g=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..{...}.?=3.{..I...q'.....SHF.........8.8Q..2).(.X.)bo.......p...:.O........&.e...../I'....<:....................\|.7..._wC..5j.Q.F..5.C.m@.I..z`"`.......+.2sa..._I..i+.........&...O........x.x'.2.....\|..N.......`.J.).Q.....lF..$......._...iK....%.g(.....g.{...)........'..$.Z.l`..EJ...~.'...2Cc\..L[S..@.H.\\|.....M..}.;0..yq..,.rU......R.d...+.Q.U..8&.2e@......cd...K..u.....N.d.....^..._.+.o..+g....L.1......0...9x.?.q........aU>......e..Zr.@"...sa2m.....0.....3.]s...).....6.c......R.........x.....5...mD)D^`.".........n..zUO......q.gC..o..H...h.\|.....H..fX......z..Q.....ikQ..Dd..=.0..B<..... Z.....zU.a.R..............(/..2....)F$..3....@.!A.N..E.U....I....R.....J./....,E..9"'..1.3&J)@...f..At%....L[..6d8........X.\|...\...1.e..GK...U,./."%0.....?...af....FZ`P./../......\..z\|....%..g.<

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 341, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	193609
Entropy (8bit):	7.997486741473688
Encrypted:	true
SSDEEP:	3072:xyMl+ztzGdKsmFKKSpO2fmwXQ3bUdsfSsnSXFkIpX+jJonuA46tpMbBkVHh/skQq:xDlQ6dyF5UmwXaNfSsnS1CjJonXHkQhr
MD5:	36EB24FB52166D0C85330E04220B1691
SHA1:	C745F010F08546479803F8B68FE5F4CC7F46A2C2
SHA-256:	3C10ADF9692F3105840F95B2528E8A674D69146192B38620422433A983EAD87C
SHA-512:	9E09F41BD5630F28F7372AF6A6F77F1DE7236279B20D0245C7B666C60F242542AFBCB379846DE357ED4884273EDB936892F1547BD4D805C33200E8E41DFC705A
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/RIuSgyC1CZvycdCvOhK6kyGWtKZwR6gN88CimyIAdew4WMYXisZeD2x5A3fOi3GETtFbnKgxw7hb_2_ERw1-ygGSCExAsemrYx79J0hRsa4SZzzxz3A?=w1440
Preview:	.PNG........IHDR.......U........t....sBIT.....O... .IDATx.d}...#..n..k..6....t...z..9.RUf._H..8......\|...H..........1.....(..1.H..p..$$...O~....0........9...b.......@R.p..?.?....H...H. ..o.@H.v..8;.`.C...O..~.$...9.Ie.D.D..k.4.........>..U......`(x_.a6......7.@....?...P...C...2_o..`,..YcA.J..D.<l...q.....F....#)\| ....>.,bg...ND...~........v..2z. u..<"x....H.........P#.p..I..a...H.#...$.`...]..y'#....D<.G..@.! ....CV.b.B..0..."..#....}.YY.FY.#......DVk..<..`r.oA (....q.....mDE.j.0...D.1 .S9...g...]....i...H...t....?\|..c,mC..FJ...k../...w;..3#.. ?G.....(7._....a.g...t.Y"A.?.;+B@C++..a.}F4TO.s.O.......<U.Y.cvq.Ud.8..?..OL.H..W.@...0 .g".'{N...<..P....~. .0....0....X...w..LY:.Cn.M...O..V.\|..M....#.=fc.......[Y.:.A.z...t.....].F..p. X..v.....,..!F...p.y-...Q...O..vx$...m...x...`y..(.x.'{H.@..zh(..E.RX...<....D.....Q.i:.A....y....C........#. .a....4..G.;6.^...D........c".m......N.EuP...O;...)j.'.j..u%.p.W..e.).T..$z.....!!<0}..a.`..GP.../;S....\|.a9...

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49040)
Category:	downloaded
Size (bytes):	353455
Entropy (8bit):	5.521390492871973
Encrypted:	false
SSDEEP:	6144:+iO0tAmuKmZSQ9gqYejMsC9X6+pbu+XIvMGGhBKSiI3lto6e8b8Odsr9Z1bndQWN:0Zjrztquv
MD5:	EE0195AD17EFA0BAB301544B93BE1948
SHA1:	E03ABE2A23E999AB7CB1660A7C541552624B24C3
SHA-256:	5F706214F16506D75853962C2FF4D60ADAFEA7A625F5EC13959548D62DEA0B69
SHA-512:	4E7CC79E63A5050C7BCA6D692D0F7FDD8A1211C1E033AD66E037AA2DD90A6C952E52AA731771EE3E46FAC7435DBF90A7790E8C33D27D6E09A1C3A95EE7258F6F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WQZB4J
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"309",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",2],"vtp_fullMatch":false,"vtp_replaceAfterMatch":true,"vtp_ignoreCase":true,"vtp_defaultValue":"\/","vtp_map":["list",["map","key","\\\/(intl)\\\/(.?)\\\/(.)","value","\/intl\/$2\/"]]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":["macro",0],"vtp_name":"originalLocation"},{"function":"__u","vtp_component":"PROTOCOL","vtp_customUrlSource":["macro",4],"vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_stripWww":false,"vtp_component":"HOST","vtp_customUrlSource

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3474
Entropy (8bit):	7.906705354957975
Encrypted:	false
SSDEEP:	96:fH/89MTAtNzvtDChFivV6c4w8yQ+eQOQUNXoE:fHUGOhlD3LBQ5RQrE
MD5:	C7A62EBB42C7293340F757585E5F9FE4
SHA1:	4F3E5748467A67F101BDEF55F0C7D031A99B1A68
SHA-256:	C09D791CF8ACC8E56F10D9D271CAA38467E4DEAB5C16F9251B83F0385A81F221
SHA-512:	FF0AD969E7311B029A90B01B600CB4445CBC745F0216070C2F2676F18D1F8C0E974E8B16EE89BE1969F6C40567C12B22E236ED03674964037C4D42E90594B7AE
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/kFIMPehGo-EHmdvvpe3j1Vnmg5tLhoqhH-PsMSw83JbPH2BmdEhF1k1tUWYYilK1gHbOEmFPJPRP93QQJ4oztVsYoOhIok78floEPg=h120
Preview:	.PNG........IHDR...`...`......w8...YIDATx..yT....?.h......z..^............bE.hQ.UT.#...A@@V5&$$..v[..Z...VPQ.Z......b.;.....N.$.:.9.sD.?..w>g.................7.e.F..C.c.........[.~...}.oVm...k...n..S[.e.6.[..Y..r...s.~K...r.V..~T..[R...'....h..dQ...=?m.W..g...L..]..AV\|;..m.v.p{..a......YO._3...g[xi..<...Y.....Z...Y... >wJ.()...~Y..n.. S).w.zE..P.(..r...^!J9...mt..\|.,:.....3..!.bNF..v.=w ....q..WH.@.P..%&(...eGkX.....u=+.5.<Ol.....d..f...kE!....{..x..BQ-.w......'....m.e......I.....-.i....CA.P..P)@.S...'..._f.e......../..8B.-.=.....0.^......z.......-,..\|&=...@%V.>..#..&..b.x...!/.E...k...".{....-...oq>..u.?..b.}2.B..v...BR..5D.....P..?{..-.u....G..E...u..NL."....p..GJ]..Z.B#e..V.,...o...ql...%9s.... )Aw.P.....B\|..FWf../xV.5.D...S.B>.E.kH7.....R....;.....8.^..$....N...X.B<...@....C.D..S........}/...;..&.v=........PtR..\|xt.ckz....M..k..^!.e..@D...<..........l.3....5.M..H<.v...T..OK...qgOj./.nMz.R>...tT.}L.\.q...8.e.y..Sy.$..o.S.b..3.c....N6.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4199)
Category:	downloaded
Size (bytes):	19246
Entropy (8bit):	5.3913191632382835
Encrypted:	false
SSDEEP:	384:9+7POlJv6FfHUC5SMysCibupk5H5d6pESvYc:97v6FfHRJb6pk5H5g+SvYc
MD5:	007EDD8309BA818BB799DA6970325B2B
SHA1:	110FDC2B75E791B0397CFAE14F75EBC32F9FBA0F
SHA-256:	EDB7ACD712BA26BCF7772CC3DB78D80E3FEAD15A5A8ECCD04623E9D372C282B2
SHA-512:	666A7A7C21D948E78018100DA7B9D3A38147DFE4410F45F5435DD8274D1F47EBC28C8808720CB64A749340155F20D33D5A8C319F4E3B43B140C733FAED3988B6
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-account-creation-evolution/_/js/k=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.en.gHw4OasNpuE.es5.O/ck=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.bWe33vrUwGU.L.B1.O/am=AQACAzoHQTwX58AHiBCGAQAAAAAgAACYMQBgBg/d=1/exm=AvtSve,E87wgc,EFQ78c,GmCzyb,I6YDgd,IZT63,IwHAB,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VBiA0d,WpP9Yc,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,byfTOb,f8Gu1e,hc6Ubd,inNHtf,joVoKf,kibjWe,lsjVmc,ltDFwf,lwddkf,m9oV,n73qwf,oLggrd,pxq3x,qPYxq,qjNilb,qmdT9,rmumx,siKnQd,soHxf,tUnxGc,uzifod,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,nameview/ed=1/wt=2/ujg=1/rs=ADR-Iupodx3aNP3Fz-JEYFGw_WCeBOKC5w/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountLifecyclePlatformSignupUi=this.default_AccountLifecyclePlatformSignupUi\|\|{};(function(_){var window=this;.try{.var sxa=_.fa.URL,txa,uxa,wxa,vxa;try{new sxa("http://example.com"),txa=!0}catch(a){txa=!1}uxa=txa;.wxa=function(a){var b=_.dj("A");try{_.Pb(b,new _.yb(a));var c=b.protocol}catch(e){throw Error("ic`"+a);}if(""===c\|\|":"===c\|\|":"!=c[c.length-1])throw Error("ic`"+a);if(!vxa.has(c))throw Error("ic`"+a);if(!b.hostname)throw Error("ic`"+a);var d=b.href;a={href:d,protocol:b.protocol,username:"",password:"",hostname:b.hostname,pathname:"/"+b.pathname,search:b.search,hash:b.hash,toString:function(){return d}};vxa.get(b.protocol)===b.port?(a.host=a.hostname,a.port="",a.origin=a.protocol+"//"+a.hostname):.(a.host=b.host,a.port=b.port,a.origin=a.protocol+"//"+a.hostname+":"+a.port);return a};._.xxa=function(a){if(uxa){try{var b=new sxa(a)}catch(d){throw Error("ic`"+a);}var c=vxa.get(b.protocol);if(!c)throw Error("ic`"+a);if(!b.hostname)throw Error("ic`"+a);

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1293)
Category:	downloaded
Size (bytes):	208027
Entropy (8bit):	5.521227524487725
Encrypted:	false
SSDEEP:	3072:DZPnV7GetUe8q2fFZO3v2hLbs4unPb1Qq7p9+OyqnMrVsxpo0ahXSuPQBmgC:JV7setI/sZnGq7p9+OypAzwCuPQBmgC
MD5:	E2965C7B2C07132BA0770965EFE81CA4
SHA1:	B1AA82452465DD74BC80BDA33C62CE7ECB172064
SHA-256:	82B3F379A1BBB41DE5081E80DD9583AD5E77C011B501CDE5F9317463001F3CA2
SHA-512:	B88E3C8D16B64DB36D5A87808C04CA91A30525765ED7ECF117684C2A99F3BC6F12CA7B93C3BFCA99F7A3225A638A7ED0F1D25F47555EF3044A49575777F00DC3
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_1"
Preview:	gapi.loaded_1(function(_){var window=this;._.yh=(window.gapi\|\|{}).load;._.Ko=_.lf(_.yf,"rw",_.mf());.var Lo=function(a,b){(a=_.Ko[a])&&a.state<b&&(a.state=b)};var Mo=function(a){a=(a=_.Ko[a])?a.oid:void 0;if(a){var b=_.hf.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Ko[a];Mo(a)}};_.No=function(a){a=a.container;"string"===typeof a&&(a=document.getElementById(a));return a};_.Oo=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Po=function(a,b){var c={},d=a.Gc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Lo(e,2);a:{e=a.getSiteEl();c=c\|\|{};if(_.yf.oa){var k=d.id;if(k){f=(f=_.Ko[k])?f.state:void 0;if(1===f\|\|4===f)break a;Mo(k)}}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5735
Entropy (8bit):	7.955505548921549
Encrypted:	false
SSDEEP:	96:V7eB4KzeJzODxJg6mrNPyw6KIBcSoV3OES1pdp36WGo3n6jyWfuuwnyWFerwp:BDtDlNaEIq2ES1fVbXYyW6nvFtp
MD5:	B1C26FE54C881726FDF004CE63A82CBC
SHA1:	07582EF29872723F7EB6E41586D63F0493E7CE14
SHA-256:	FE87FFBC5906C5E3DA65AC206D3E55B9F96463FAEBA81F1A690D79517F7747D0
SHA-512:	373653283A62C3C522EDA51F53B06B77095944A9438C3FD64D08F1C5B4DFF0C7C83C0C5D4FEAE3E89A12CE607D52B5FEE1DCD487AE70185C0D2D1D527440F65A
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/osfLtqeBdEJUR4Rc-zmj4r5eqSd0GCJaB8wihnbgYfx_UBKhS1PMKwZlWXw6FqtjLktNqWJTcpDBMp5boZlSD2nkjeOloEA6VhJKlg=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{.\W}.?.s.3....~..8....yP...B).T..R%...P.....(j)"..%BTH@..D...`'.1...........v..;s..{...wf_..w..F.{..{...;..;.s..h..&.h..&.h..&.h..&.h..&.hba!s.8s.L.1.7.1.k..1.X.._.F.c.t..C...@).P.Fe..".P.r..`...{7o.<9..].^....R...ee..~.a..k..[k}..H...C......C...Y...H.EV%./.l.K.\.x.K....C..Y..K}./GTMp..E..... ...RF..e...^.d......F).hG....&..y...d...e-.gR.../...d2X..B.EO.ax".u.N...0..m_.\...2.H,)+W,.h......6......G.G....]ccc.(.9..~.u]Y$/..s&..]]]_...=/.....=.<1::....p".....8..uc..:.Rg\....M.Ltvv.;.s...\.>..D...._..8.8.3....b..lYV...\|.K.R....7Dd.R..WD........K...f...........Ga.^...Q-..FT.......B...s..s..Q-..:L.T..L&.....{..7.R)G)U....e...T`Gk......Pe2....'..\|.u..a.Q.A...X......Z.PD.a......(.j...M.(.Dk.Zk}..z."%.$....GN.V.A...!.Z...C..P.%Gp.K../.,.'k!.T.....o..^FX.Y..A{a....eI.r.^X../',;.....2$x.aY.............L.^&.6~.....7=..D{...K...x...$7.../...Cl..s.V..i.~...c..~.`i.,.J!.FG.....(:..x.&..a.Z.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1793)
Category:	downloaded
Size (bytes):	180669
Entropy (8bit):	5.628225144291986
Encrypted:	false
SSDEEP:	3072:ERyd15F9QVuyZs4btLhSeTplIJyXoxpwqd6+9b1isLWtIb3vU6F2o8qF5p9+E9:cBXaxpvU6F2oz5n+E9
MD5:	31097A3A4FE9434EC10D8FD8883DBE76
SHA1:	5E5496C83AC56FB9EF5C80206C48F09B4F9A93D6
SHA-256:	9D98CDC4BCB9ED78962C9F8BE480537F5A9BA5233BF94407207FAA344F174DA7
SHA-512:	466A14DFB07AB376DADBF3BAA1E1BF0F811801EDABF442C4FEE9F3C9D362F9424EE25FD4B9959FB2CA508263603A2901AE1ADAE93383CA97DD8C7E24EDD7A8FF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.qmuJi5Dd2kw.es5.O/ck=boq-identity.AccountsSignInUi.Mw2jIe5agLU.L.B1.O/am=HwQm0YljARCPOAc-QCkQMgAAAAAAgAAAYBlhZg/d=1/exm=AvtSve,CMcBD,EFQ78c,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,VzN4J,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,bSspM,byfTOb,eVCnO,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,recoveryidentifierview/ed=1/wt=2/ujg=1/rs=AOaEmlGH92EHnnq7nYOtfcg3m8nwJzPybw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,qPfo0c,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ltDFwf");.var Lvb=_.y("ltDFwf");var lU=function(a){_.J.call(this,a.Ga);var b=this.oa();this.ub=this.Ra("P1ekSe");this.mb=this.Ra("cQwEuf");this.da=b.getData("progressvalue").number(0);this.ja=b.getData("buffervalue").number(1);this.Ca=b.Bb("B6Vhqe");this.Oa=b.Bb("juhVM");this.ta=b.Bb("D6TUi");this.aa=b.Bb("qdulke");this.La=0!==this.da;this.Ka=1!==this.ja;this.Ha=[];this.ea=_.Rr(this).fc(function(){this.Ha.length&&(this.Ha.forEach(this.W9,this),this.Ha=[]);this.La&&(this.La=!1,this.ub.rb("transform","scaleX("+this.da+")"));this.Ka&&.(this.Ka=!1,this.mb.rb("transform","scaleX("+this.ja+")"));_.Oq(b,"B6Vhqe",this.Ca);_.Oq(b,"D6TUi",this.ta);_.Oq(b,"juhVM",this.Oa);_.Oq(b,"qdulke",this.aa)}).build();this.ea();_.wg&&_.Rr(this).fc(function(){b.tb("ieri7c")}).De().build()();_.Bz(this.oa().el(),this.Ua.bind(this))};_.B(lU,_.J);lU.Ba=_.J.Ba;.lU.prototype.Ua=function(a,b){Mvb(this

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (777)
Category:	downloaded
Size (bytes):	1481
Entropy (8bit):	5.326568724013762
Encrypted:	false
SSDEEP:	24:kMYD7xmRu0A6qroNRaYduTbA/HTyV3SNm9XuxtCV48Ln22ELJ+/GbyFNGbPGpLOr:o7xmk0A6kouy2MJuzDoLs/GbMNGbQ3ZM
MD5:	20F6A26F8239685DFC8A9DF913D9AD9A
SHA1:	D04199925F57B2D53F42ADB5C9A7C3555273D02E
SHA-256:	E340BF24861BE332B9DE410DCB6A7DFDEC00DDAA905433B9C25B95C58C9C835E
SHA-512:	13447812E1D849D6603EC87124497190D62D67C965C7E5B6F54561EABD773FE64AC4CBD44B6E902908C41D4C2F1864854BE290EAD0566964790FC2175EA98F86
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.qmuJi5Dd2kw.es5.O/ck=boq-identity.AccountsSignInUi.Mw2jIe5agLU.L.B1.O/am=HwQm0YljARCPOAc-QCkQMgAAAAAAgAAAYBlhZg/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VzN4J,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,recoveryidentifierview/ed=1/wt=2/ujg=1/rs=AOaEmlGH92EHnnq7nYOtfcg3m8nwJzPybw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=bm51tf"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("kMFpHd");._.FVa=new _.we(_.Ak);._.l();._.k("bm51tf");.var IVa=!!(_.Pf[0]>>23&1);var KVa=function(a,b,c,d,e){this.ea=a;this.ta=b;this.ja=c;this.Ca=d;this.Ha=e;this.aa=0;this.da=JVa(this)},LVa=function(a){var b={};_.Ka(a.lO(),function(e){b[e]=!0});var c=a.YN(),d=a.eO();return new KVa(a.OK(),1E3c.aa(),a.vN(),1E3d.aa(),b)},JVa=function(a){return Math.random()Math.min(a.taMath.pow(a.ja,a.aa),a.Ca)},QD=function(a,b){return a.aa>=a.ea?!1:null!=b?!!a.Ha[b]:!0};var RD=function(a){_.I.call(this,a.Ga);this.Ic=null;this.ea=a.Da.eR;this.ja=a.Da.metadata;a=a.Da.vaa;this.da=a.ea.bind(a)};_.B(RD,_.I);RD.Na=_.I.Na;RD.Ba=function(){return{Da:{eR:_.GVa,metadata:_.FVa,vaa:_.zVa}}};RD.prototype.aa=function(a,b){if(1!=this.ja.getType(a.Fd()))return _.Lk(a);var c=this.ea.aa;return(c=c?LVa(c):null)&&QD(c)?_.Cta(a,MVa(this,a,b,c)):_.Lk(a)};.var MVa=function(a,b,c,d){return c.then(function(e)

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3860
Entropy (8bit):	7.907926693637455
Encrypted:	false
SSDEEP:	48:ER8ZuHSy0wmpVbIhnDsv6fNEQ8LhNOpi5UwD65c/1TeCjWQf8T60jSZFSCIG89Ec:ER8BwMV76+GEqBQf8T6VF/JKavtNW3sY
MD5:	5D17A82904E7EE5EAB206EDE0B2755B2
SHA1:	51A4FF7F00E33A961719A1031B3EC00908CCDB31
SHA-256:	79618F4879887E9721284558DB86BB2FDE19008EA046E7B10B8ECAB4F8902DD2
SHA-512:	A959F4B269AB2E02B9C8C772E5D13E4CED5F4AF890460975F9C04CBBF1945F7719E60CD9AF9950C3DAADE5D1519C03DF928DD5E89A2CC05FC45D7E8E05FEA809
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{...}.?=3{..C..@.K.... ccoAQ$...G&)o....).C.....<..U.!....q....`.+>.'Y.nM....p.DF.7.P......t..}L...q...y.e?U..T7...vO....k..K..].$.H.$)............\|`....x..i.J..(..+.M.F`]p..l.....i......H.X.,k....f`.8;....7.Z.\...z..........7....P..C...MK.e#p.X>.x.p.J.-.Z......b.b.J....8%Y.....P,.......Z.{...e..\(.-...Y......P,..........;.U.Q..'K..Q(.{.[.....E".o.>p..?\|...Ge..a...`fE.s..{w.....Q....\(./.n...>_.N......j....Po.....i......v......vJ....P,..p....+.$R.o...X...R....?...s....;.G...m.\|.R.B.......`$a.8...x.X&.9..c{p....(..........H...B.\|..E..(..I.0.......!......]P..b.}f...0 ...-...m......>*...x.......].5$....m.0..I.r2.!..F.....po5.{_5.[...H...by.."i[NF....9........Qm....by..W....H.E.i........s.\|...\(....D..S...O`......V..:....[...&l.H.......Ag.^I...s.t.>........."...K.aFU.....D^.U%..\(..._B......YF...5....G.]'...NK..E!..!...Of5.%....i.,v....w.]o.H.}.......8p..c..P,g....V.."..<...M.\|......?.

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2362)
Category:	downloaded
Size (bytes):	215877
Entropy (8bit):	5.444066495897575
Encrypted:	false
SSDEEP:	3072:DRg/Sy0CKIk6Mw/eZEcZgDbo6gKzy/sFny3pzvlf9K+WXcd:DOSy0Ck6NuZgX+pDlfI+Wy
MD5:	356B9C421E99488B15BAF7BAF7462D04
SHA1:	A0383656ED878410EAEC8D0A8D4851E766363E59
SHA-256:	68FC5A1CE6DB03DC57320A2328F781CDCE366F87B37E467149BE0E0B2919760A
SHA-512:	D8F2E39971A079CCF60285D68D33535377E1B4470CA0006B99D57682A4E2F6813DD18BB4FBC0B6F4EA9EBCFD31E14E06E602AC50C6C5C5156A1FFD5A1314FB0A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.qmuJi5Dd2kw.es5.O/am=HwQm0YljARCPOAc-QCkQMgAAAAAAgAAAYBlhZg/d=1/excm=_b,_tp,recoveryidentifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlElXU5z_oHgH0Lm7fzhvQQxvkPgBQ/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1126041f, 0x58e27, 0x207388f1, 0x40a500f, 0x32, 0x2000000, 0x11960000, 0x1998, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,eaa,haa,laa,Ua,Wa,Xa,maa,naa,Ya,oaa,paa,qaa,cb,vaa,xaa,sb,ub,xb,Qb,Rb,Jaa,Laa,Qaa,Xb,Saa,Taa,Yaa,fba,gba,dba,hba,lba,mba,nba,qba,rba,sba,tba,Vc,wba,vba,yba,Zc,Yc,Aba,zba,Dba,Cba,fd,Gba,Hba,Jba,Kba,qd,md,rd,ad,Xba,Uba,Yba,Zba,bca,dca,eca,Sba,qca,be,sca,ce,tca,vca,xca,Bca,Cca,Dca,Eca,Hca,Jca,Qca,Rca,Sca,Wca,eda,ada,ida,Se,kda,lda,mda,pda,rda,uda,vda,wda,xda,yda,Bda,Cda,Eda,Ida,Jda,aaa,Kda,vf,Lda,xf,Mda,Nda,zf,Pda,Bf,Wda,$da,Zda,Jf,bea;.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7323
Entropy (8bit):	7.958638329717196
Encrypted:	false
SSDEEP:	192:JVK2xmb2EVQeqJTDASVn2uXYrB19n+1zuynMUQ1fG:JEOm/VQeqJP952sYrB19YzuyMUQ1fG
MD5:	C8DBE0DD84A45F5E2A6BC9C9928C8492
SHA1:	E388FF567548224DAF566CF37A6C7AB8FF08069C
SHA-256:	07379D53AFD4C8E0BAA7AA200059E30F9DE4F659552C1F8C50570F8F16B583C2
SHA-512:	6C1AE903673C9D9EC3A703238355AD8FB195071A067F0939ECF4DD4CD1530540AA7A84F36598661643A5251F5FE8B488CDAEB1581BBCFB20B3A790F87A09C5C9
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/l7AGEV3K2ayj5g1Vb4nsrQs5WyHTr7Bl65GhPxO68pDZDsVurAbsSOTwmXnjK8qMt2gahvRxN9y3nnd1G118dLTtN5k8-j7MLD0qMl4=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....RIDATx..{...}.?.....=...R$..... .."E34I..T%:Q.T.UL\!..r$U.........a,...K..(.K........\|..(....x.......93..co...3..w{{...............Wq.Wq.Wq.W....].[..s.M.m\..v.Rh..(4..Z...5hEW.t...+./mOi..<Uw....s.g.}...........d.....g.;..V..N.L.^..n.F..ZG..Sf.G.......v...J.. .:r....sR.?`......4..m_o ..M9U.4N......E.......P.qDF.%"....,)(...i..O.}t.?.{.Wb^Y1....>%o....X....J.].....dF!m...[....\........m.f.}.JL.+.......o...o-..UQ....K.&].X..>.J...q!0...q.w..iL.+.9..>...1...W...iW.H..."..H..5.m~m.@j._.C.....A..~..P.....g?..0..*.M!oUZ'..V.^..@:...Y.P.V.Y..Rt..0>..."...,......\.......2....\..$-\|;.}g...}....x.`..,P...(.. .J..R.>zf..x..........\..Z....?>>.Zc.........{2.[...5.cY..r&Zk.%..-.5.5=r15...{......K!7.....5......k...iM..X..0R.'.w....0..Y.)."..T4...g...J$`.........KJ.o'rLfLD.K...M.<.e..Y<.35..B......... ...g...dq.a.6..........._.....~.yF.g....,lq.]).T...o.i #....<...[.......&...\|.5...aC.$.8.B....?..b

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6744
Entropy (8bit):	7.9494181708599685
Encrypted:	false
SSDEEP:	96:otaZ2gKVZh1LU9eAKi+gZKKampGIw2rVw59elyxwjF88Z1OST8cDj4OQrhB:m6eZh1pAKAZZGR2rVGqyxwjF88Z1ljC
MD5:	63F8F0D150A3C8F4FBE2D867451F3F54
SHA1:	3E63D160790BCD99D84482F7C61A882BCB7749C1
SHA-256:	697882381A6183F72975241C72080022C44FA396FB1315B3DF9BE6B49361C527
SHA-512:	477E130ED8562A350FFD089582E3594320B9DFF68AE5AA0321F1AF6A11D9C2FFBBF3241A52A115F8D7B3471047AC4C588F699E71844A444E77C3EB6BC4319D60
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/uzkOxzfGFGjzRx0FK6B541qcv469wNDTQf_TUu4oqH_oPUGJoajTkqHLJ9DD188Kmocg_DJg2OBf1FxyRc6MLK_gMFFRmm7n7XTreZU=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..][.]Wy....9s...........FX.....Q(U..@J_P..#.V.C..P.....R.../}jEPEI!...T..v...x\|..3..v.\.^......Z{.s......m........./.....j....j....j....j....j....j..&...f.....?G..!D.E!..4.6.y..2...`M..C...~..\|....%...}t=\|+.....SW.?..?:.gO..K4.....@ ..lE..\_....6/.T.G.\.@..[....._..'..#.t......'..Wz...}q......g......:.VLp.`z..h...G..@....6<+........4}....0M.}.S......=....^}.Ioe.-...m...O.^..F...G~.?..H.eB0..jL....`[.q....@...Z.6./..?.GS{&7.=g.~...G~.V....B....?9...c.....@..E..#l..A...N.. ..6.G.@.k7.}..\|.U......\........?.6N....~......C`.@".X.B.....v%.w..2`. ...-.{.....3.....#.W....h......s.5tn<.(. .xQ..........~".....M.?...............+...^.....O?3.._..*@>....h.."...9..d.U&B...<....;m~.?..i.....J..p...+..).w....{.....Oh..B..3.8.X.. .lE. ".....(4....b8........X..........].%.."..."z;.01.....o.O% g.Z..m".

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2096x1182, components 3
Category:	downloaded
Size (bytes):	177497
Entropy (8bit):	7.147399729222433
Encrypted:	false
SSDEEP:	3072:qOvPYjOwr6VM7rJxs5sm0N7cvMkjNN6o86EDnA7Fv1oC:9nbuI5s378M6m7ps7x1oC
MD5:	B54F1F775F278251D37737ED8CFC00DF
SHA1:	585608E5592716B126D7E4E3A6DE76F14546F86F
SHA-256:	D633D3709D269E9281C32A5A99DEEFC32CEBD0CC7C08B0E23A46363516C450AC
SHA-512:	6D5DD8EB3A2D2FDB485241807F76A9E79832510BFD6168FD079C1E983C1F414F3FBAB8C0B354EEBAE2BD48B1E0C78757FE585554927DD46094C705F24DC29D92
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/GooglePlayPoints_BlogCover_SHxIsQG.jpg
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1112
Entropy (8bit):	7.654338797164083
Encrypted:	false
SSDEEP:	24:5Di8aDqOI8qiyIeDmNq8GoNCA15LFE1HdHveHQvc:5Di8XxiLeKNq8GxmtGdHvewvc
MD5:	F7534A54079C3D58A102D6692939D1F4
SHA1:	AF127136E5AEC701FBCE3AF340C7F56F6A0B3493
SHA-256:	12ADFB4B80A87613250FD777410ED000EBB3D5B6429C4A09641F6A89F18C5AC2
SHA-512:	7F2F81C0F9043A216FF214FE2A851C81E3696EC330584F88FAAF449F43577B30426D5B7207A8EE7AF76772139E8CCBBA5966A146102938671F761F78BF184443
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx...?h.w.....6...."...8$ \...A7..D.......v.[..G.."]...F...V.t..).....S.IZ.... ..I.....<....1.\|.{.<..DDDDDDDDDDDDDDDD.\...9.../...H....../....c....n...^l...g.rq..~-.Eb.6..y....`...2I.6...Y.X.p..6I..w..Y..<........f...$=.q...,....../....%.....=.?.<F...l..QRm...;...).s...;...).s...;W...Y/(......f.N..^RJ..<;.==p.$<y....J..........=h..+pK..~s....s>.......g.Z/1.;0...G....p.......e.:.....``.zM..'p.. LM..k.K:.~.[v..y8..zIT..........p...(...e.Z8s..>.....J....&'..M.%.Q.,[..wp...O..y..`.~x.....\|4.^I_..:.^...z.)p........%.....).j=~...Y.h....*..m..z.....G.`..J........8..6.z.z.G.!.C..p."...).......E.Gt..........~...........5Q...=7.......K.._.+W`.....S.C....~}..B..?}.....M......{.n6..98~.z.)..CH....g...\|..u....W.J...{{af.v.V..y?m...=...7.......`Y..;...).s...;...).s...;...).sy.....'.Y^.?#..82....)...#.Y...n`>..)..Iz..=....;.>I..'+.,s.../..EW..b.L....\|.....Um..qg....[B.ho._..QV../.......H..O.b.0..@z"W....

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4888
Entropy (8bit):	7.94980586497001
Encrypted:	false
SSDEEP:	96:oqFy4xh2SgEK1iK4oz92JJwABaJjJ/Rv0u6I9fyFdDW8Q1FY:3PxMSgh4hJwABsj3Mu6WfyFdDb
MD5:	D44681DAABE3872301FC81E27B9D9BD1
SHA1:	C3F29D5B93972053934EC91CA9DB8BC0EEE5F58C
SHA-256:	A85AF554CDFB5C0945684088998CFD108CA9B60A30B938BB720A8EAAACC9D2BD
SHA-512:	965866A6F6EB4E904491E4C2DEA3FE06336D79ECEF2BCD685F022C4210D051A755F8656C823D920C0A03AE2FE371B5D73B80376A4328C9D3487FEB116DE41107
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2...dIDATx..}\|\e....y.[...RZ.....v...LZZ(.(..E].>..,.Q.QW..UVE.(..o...... -....@S@V@.....M3.$m.:.......I2..s....6w.s........<0..SL^$.....=+.....3U.I.].:...........j..u.S...5zQ....!s......w.I+p:.x....@E..e.....L ....LE..P(.sv..3..:.0.........{.y.a#....pp.6.&..z.E.T[z.._...3.pn......#..-..C./.....1....^."/cZ?.]`5y.]....N7.:.........wA{..:T}h..S..Nh.&.(r....L..r...4&.)I...2..:...5.,.f..#`...MQ..W.....^D.6...6..W.....X....kT.:..\|u..i....R~..q{.pD.W....".x."...8.x....7.V.....Ru.>"....<...L...."...N...nK...u@m....d.f\|.i0Co..&.%...VV...}.&p.!.a.o...a4.G(k.......T.@..Do..]=.D7A.~;L..?.W...k...3.H...;1.....k..%.x_(..e...Y*...:.s%-...nG.kW5b...S......]7..xI.....t..............zS/..}..=..E1"..V.........w..>...0..-.{......jf..1r..VG......[]...(... .}.tT..~...R...;;...n.ST..r?H.9/L....zM1....j.6...7.>

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2454
Entropy (8bit):	7.865198854081698
Encrypted:	false
SSDEEP:	48:evapvovJJVnBTT8FLBJfiMAMY6rXn1rjiezbCt9d8FHVYWPk:eKONMfzHr1rjpC/d8Fts
MD5:	55F9F1247D96300783B5295195557D7C
SHA1:	622675DAE7B7E5694E1CF4F88D30AC6C64AE31BA
SHA-256:	966D743553AEEA310502D58909BF40F6B8C795FBE5E5F3A528EF5C7E4E58AEB4
SHA-512:	3FFBA77234E866DFDA62FC7EF4B3DB96D3DDFF2384CC7801ADBF2584CF9C36205FF8A4E851FC21E1215C02B3B466609B766BDB505C6C6007394DF23D6118C869
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6....]IDATx..}.Ue...s...w.&k.Y.5....6.E5N`....5}XS9.9Y.iS6c)}....5JI.N............n...!..(.,......^..ew....{.....f9.....}...q.c..&.....x...r....sr......K............}G.{.,..u.........a..XlY.Nk.V2u)%q....7L.....A=0...\.4..n..v`.....r......_rF.h.O.??......].A3.7..H.\|...&.\........9..........i.@..c..j.O.....B.....,3\...H5....u+."..m._..\.w$.T.'.....h..........z.\|..Q..$..w...P^(.D..L....i.y5p.........FM.8.x......E.......".........5..Tp..QM=. ..\.8.@.Tp.....B..........H...D.....`..;.vk..i=......\|Gq,.!L.K4.../P..yh....W".\+.....0....dX...1..(..H.?@.oT...DEp.....v.>n......q...O..~../KFU0v.N.}.K....E....Y. .g..?A../*..."-x...K........Z.X>.l..#IYM....W..$w .5..<1yd...yZ....c..D.n...1.x.X..M.<Z.s....>.v...W.....{d..'..2.Zp.L.Z.mC.P....`........?k..s;.X.7...Y....`..q_.2.-.[....<..Y.;Z.?\|.9...H...Z......m._.P-..... ..{.........`)r..'h...<.......`...!..W....,..<.4.W.qC-8...^D.pW.,......a......`...T.(<..l..<G...kK...e..Y....

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (693)
Category:	downloaded
Size (bytes):	3143
Entropy (8bit):	5.404433401865755
Encrypted:	false
SSDEEP:	48:o7ekE6YzyB6/jGGUZaJYAYdNQ8jsKF2z/+0WpwqYmWWQMawyn8U0sGUA8rw:o46Y5DJ2dOiuHmLYzW0a7ow
MD5:	12E1A9C9C68469D5ED5F6437E30650A2
SHA1:	D85353EFAA2911FB85A7CF1DB9FB3A6142A88F65
SHA-256:	A7681880B50FFDB107016AEFE830B7956823B7BBA79397B4616638765ADEB274
SHA-512:	6BA4FA3C4D1D2414EA398FFFD814A10244DF46EA1DA96C1FA03B56C7F5E8F067FA622B7BFD9F4D879BAECAD6300345A0F33E1EF232079F645152C16609DBFD9F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.qmuJi5Dd2kw.es5.O/ck=boq-identity.AccountsSignInUi.Mw2jIe5agLU.L.B1.O/am=HwQm0YljARCPOAc-QCkQMgAAAAAAgAAAYBlhZg/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VzN4J,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,recoveryidentifierview/ed=1/wt=2/ujg=1/rs=AOaEmlGH92EHnnq7nYOtfcg3m8nwJzPybw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var Jv=function(a){_.I.call(this,a.Ga)};_.B(Jv,_.I);Jv.Na=_.I.Na;Jv.Ba=_.I.Ba;Jv.prototype.FN=function(a){return _.ke(this,{Ya:{WO:_.oj}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.kh(function(e){window._wjdc=function(f){d(f);e(IEa(f,b,a))}}):IEa(c,b,a)})};var IEa=function(a,b,c){return(a=a&&a[c])?a:b.Ya.WO.FN(c)};.Jv.prototype.aa=function(a,b){var c=_.Xsa(b).Di;if(c.startsWith("$")){var d=_.Pl.get(a);_.Kp[b]&&(d\|\|(d={},_.Pl.set(a,d)),d[c]=_.Kp[b],delete _.Kp[b],_.Lp--);if(d)if(a=d[c])b=_.je(a);else throw Error("Pb`"+b);else b=null}else b=null;return b};_.zq(_.Gda,Jv);._.l();._.k("SNUn3");._.HEa=new _.we(_.qf);._.l();._.k("RMhBfe");.var JEa=function(a,b){a=_.ora(a,b);return 0==a.length?null:a[0].ctor},KEa=function(){return Object.values(_.Io).reduce(function(a,b){return a+Object.keys(b).length},0)},LEa=function(){return Object.entries

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7652
Entropy (8bit):	7.968231041212564
Encrypted:	false
SSDEEP:	192:osJl8LY580lDG5wG1/ZKwIhM2v12QVLDvnXHVYeIW6+/RWB:osJSUqcDG55ZKW6Zn3VxtRW
MD5:	B435739D9F6EAB710709DD994EA96990
SHA1:	B8EA8C3F332357B7D11DDBC2DB0F19141EE9BC05
SHA-256:	A0BA73DF3FAD7E28B8CB2B22D7D91F63ADC1AFC4EFEB2D52613392AD5B5C2191
SHA-512:	364B4DDA22192A92E417D42114382F2BD61328A38AB986E31533337F1AB53EFA5BC3D4DDB0C359276679B0DBE1B92705E6939073999E7E6183D01A6AFD55BB3F
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/HWgUyUNqdsifoczBOT-DYy-hV_ldW-cwWkz3tvlY0eQysaY1ra4D1bkfE-0BVFUlk5wComQdca8g-fwiPcOhdMHoMjqiiNh2TD2b=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..y.dG}.?.......y3#......+2#a.....cb.g;.....I...B.......Av.....>.`s ...I..`.@HH.E#.h4.Y..v..q.......{.o..9.=.g........~............2.\i.2.a.4~...AnD..Q.......p.Rj$..c.6Zk...A...mW-.OMM....N...K"r.......~.....Se&...(...~.\.Q.M...\|.DPbP...%..A0..H.w?...h.....y.2.C.^.."....z.,.D..7....o....R.9E......m.>;!..e(X..e(.rNS.4 ...... ...P.T...........`......?2c..r.......w.A.G..MBM.[.....WM..s...!y.d.L..BDPJ..!"...........\..y......X0.6..J..C.C.udi...}0D...\.T>d_1@D6{......Z)............S...9E...&1\|H...:"..#.........91\[..W..U....B.d....w....W..xp<'.>9o^m......v...7....IO.....F\|..!....eY8............@.Lp..~.y.. .......v..$9..V.=..\W.(.:..V...>........y.W.W.`....1.z....x..H.G........J(.....u.~.9F.}.0.....O-.O....5.a.".P.ff......e.5..5GF]..Id...."B.P.OD........7.u\..+_......B..p<h.....asn#...y.J.(. gA.fsj....{..L.p.c.....6>....A.j..^.\>9o>.../..<6.Q...x>....X+6;..R`.....L.#.%f........kF\|.-..D..A.0

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	412
Entropy (8bit):	7.002417616571812
Encrypted:	false
SSDEEP:	12:6v/7b7xjUWEUDR4Z0FHUBRb44P07S4kFzDeiiO7:gt1EUDaZU4PP4kFXoM
MD5:	FB59C29C373A66D0272062BDFED70A34
SHA1:	0CED329EA9E363799E2D4AD51EAE76C094291CDB
SHA-256:	A11E9685A7CBEA851706A7B0187F421A39557BBD05434BDD8DBB28D4D413016C
SHA-512:	0237C5AFEB29881562AA48FEE8F6821EC6F08665541D6FA109AA5E277A010D51918CFDD30DDC5A1BCCC15223AA531D0DE9068C2945EA275975F77CADDF9EE0F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.....H......cIDATx...ON.P.....FLC...;.1.m\........M......u.B.oD..\|.g.....i..i..i....=*........Jd..p..O.aD.....r...."..<.H.b.w.i.=J...#n..^..{..A.h}@.<... .... ...4......L......`...eb..,m.9u....8..............(..NG.i...........'\|..:u@.#?.#..$.p.`4.~..s.@.....]..L....t.....S...9....p... @.........5`..J....P....[.a..?...............a..s~.... ...'.... .....!..../....IEND.B`.

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (574)
Category:	downloaded
Size (bytes):	3519
Entropy (8bit):	5.503648683238515
Encrypted:	false
SSDEEP:	96:wpbep8XbOuOoREtZT0hutKO2/WVZbggOI:+ep8Q3OCr
MD5:	4F1352141ED97226809372965CA19E64
SHA1:	DCB2A53ED4A58AEB336B77334B66E47B5AD1A901
SHA-256:	0173929BDC33DCF16587BF46A35E5DEB72ABF0CC0931557A896B935CEB254E08
SHA-512:	2EFC66005EE6077027DA8AA2A678BAF6A9FFB35D35393AFF936ECE6417FEF0E35F5B970F709C1953CC447F57943AC4C3DE07B8E3D3F0276CE2A90DBD11DEA568
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-account-creation-evolution/_/js/k=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.en.gHw4OasNpuE.es5.O/ck=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.bWe33vrUwGU.L.B1.O/am=AQACAzoHQTwX58AHiBCGAQAAAAAgAACYMQBgBg/d=1/exm=A7fCU,AvtSve,E87wgc,EFQ78c,GmCzyb,I6YDgd,IZT63,IwHAB,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VBiA0d,VwDzFe,WpP9Yc,YHI3We,YTxL4,ZwDk9d,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,bm51tf,byfTOb,f8Gu1e,hc6Ubd,inNHtf,joVoKf,kibjWe,lsjVmc,ltDFwf,lwddkf,m1N5E,m9oV,n73qwf,oLggrd,pxq3x,q0xTif,qPYxq,qjNilb,qmdT9,rmumx,sOXFj,siKnQd,soHxf,tUnxGc,uzifod,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,nameview/ed=1/wt=2/ujg=1/rs=ADR-Iupodx3aNP3Fz-JEYFGw_WCeBOKC5w/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountLifecyclePlatformSignupUi=this.default_AccountLifecyclePlatformSignupUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Yqa=function(){var a=_.He();return _.Mk(a,1)};var Pt=function(a){this.Ga=_.t(a,0,Pt.messageId)};_.z(Pt,_.v);Pt.prototype.Fa=function(){return _.Ek(this,1)};Pt.prototype.Xa=function(a){return _.Vk(this,1,a)};Pt.messageId="f.bo";var Qt=function(){_.jn.call(this)};_.z(Qt,_.jn);Qt.prototype.Lc=function(){this.mN=!1;Zqa(this);_.jn.prototype.Lc.call(this)};Qt.prototype.aa=function(){$qa(this);if(this.Ty)return ara(this),!1;if(!this.pP)return Rt(this),!0;this.dispatchEvent("p");if(!this.YI)return Rt(this),!0;this.tG?(this.dispatchEvent("r"),Rt(this)):ara(this);return!1};.var bra=function(a){var b=new _.Vq(a.uY);null!=a.PJ&&b.aa("authuser",a.PJ);return b},ara=function(a){a.Ty=!0;var b=bra(a),c="rt=r&f_uid="+_.Bi(a.YI);_.Tn(b,(0,_.ug)(a.da,a),"POST",c)};.Qt.prototype.da=function(a){a=a.target;$qa(this);if(_.Wn(a)){this.wE=0;if(this.tG

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2294)
Category:	downloaded
Size (bytes):	167866
Entropy (8bit):	5.5472359265595585
Encrypted:	false
SSDEEP:	3072:FYg07mNnCP+Ie4rMRkrhp+lBCwiZUHGUjHD2OQPItCQyDt4fWW4Y4Fp8RgheNF/H:FYgBNnjIeyMRkr7+lBCwiZUHGUjHD2T8
MD5:	2FB7C20900EC440930FA0931A070CA08
SHA1:	54EE8B689A41813F5F5E20663F7359EA71C2953E
SHA-256:	1A6946A04F5B273E27E20B9E386FD9D5DCEAD5755BF34825127E42E85461802A
SHA-512:	D5AA6CF96C1D7A87171CCEAB664A0FD37A34DA94690FCE9E6BBE69544EB4795968C65AE8FD11BF8928FB78730A5EDFC125303B977B434B2BC4B332C510ECC13D
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.s-_8OiN4zAs.2019.O/rt=j/m=q_dnp,q_sf,q_pc,qmd,qcwid,qapid,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTstZieUcIRJsHgW4g1D6WRCneCt9Q"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.cj=function(a){if(null!=a&&"number"!==typeof a)throw Error("q`"+typeof a+"`"+a);return a};.}catch(e){_._DumpException(e)}.try{._.dj=function(a,b,c){return c?a\|b:a&~b};_.ej=function(a,b,c,d){a=_.ib(a,b,c,d);return Array.isArray(a)?a:_.jc};_.fj=function(a,b){a=_.dj(a,2,!!(2&b));a=_.dj(a,32,!0);return a=_.dj(a,2048,!1)};_.gj=function(a,b){0===a&&(a=_.fj(a,b));return a=_.dj(a,1,!0)};_.hj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.ij=function(a,b,c){32&b&&c\|\|(a=_.dj(a,32,!1));return a};._.jj=function(a,b,c,d,e,f){var g=!!(2&b);const h=g?1:2;e=!!e;f&&(f=!g);g=_.ej(a,b,d);var k=g[_.v]\|0;const l=!!(4&k);if(!l){k=_.gj(k,b);var n=g,p=b;const t=!!(2&k);t&&(p=_.dj(p,2,!0));let q=!t,B=!0,ba=0,H=0;for(;ba<n.length;ba++){const D=_.Sa(n[ba],c,p);if(D instanceof c){if(!t){const Y=!!((D.ka[_.v]\|0)&2);q&&(q=!Y);B&&(B=Y)}n[H++]=D}}H<ba&&(n.length=H);k=_.dj(k,4,!0);k=_.dj(k,16,B);k=_.dj(k,8,q);_.xa(n,k);t&&Object.freeze(n)}if(f&&!(8&k\|\|!

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 343, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	330224
Entropy (8bit):	7.983137654901116
Encrypted:	false
SSDEEP:	6144:gIgphYIkSBvqWlri4i7XMidorq5gvcCE9oIygj4AvgS/h6F2SIeCy:gIghYyBblrxiLMidorcSc5V4Av/h6cXy
MD5:	02D7F917F2C729DEFDF85E85576F3612
SHA1:	84B4B710A4F35D3517C048EFA2308F6CA6545335
SHA-256:	E48B9AD41BD15F25A6E867B5AD51C48376CE5E2CBCD785674B788F5D7E2E23A3
SHA-512:	A8C4B4AA75C06C025600932F33EBBBBD96C3B35F7C21C677F3EC685889F03F9D3B907B70FC7C969B4973D2E010DD9D5047F7115E18B6F75715A3DE971F93A5EF
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/FW12KWakQzfFfGUf5yZghWb6h6-6dNMOHBolWF3nYWgOQdsiTeL_BS_PSvWy_1Y4d1OoZuzXpT6ihCY2z0iT2xjEQMMIoMsh7bbmd001ICguMO4kLhA?=w1440
Preview:	.PNG........IHDR.......W.....[ya....eiCCPicc..H..W.XS...[......... ...Z..R..!.$........k.Q....+ ......bAEY.uQ..7!.]....;...O..3....e.\T..<i.<>2.565.Ez.P...9.....;...@.....n.D._uQq.s....P......8C...A....A ...@T...T..b.9.......T8C...m..9._.@.......zV. ...?A.&.J.....8H ..!V.>,/o...C...e..x.o.7.Y.........:.~...(d....gi.....\|..F...U......Sa...XU.!...u.....QIj{.T.....&.nB~..bS.#..1..}F.$..1\-.4I>7.b#........-...._hm.........~U..(s....7b.W....).S .).$.@L..U.....,.sb.l..xU.6.....j~. S..../.S..m.K.1.\| _.....vR....].I.I.<"...\...pu..s.4)A..#...W..)..8.=n%.T. .T.$h....pq...LY~\.:N.0.?N....D....,..-.L..@..Y....G"...A.....f`FJ...>.@!..".P..........<.U?]@f.hA......<......t.[2x.5..x..&..........W..j.5..G..%1..F."F..q.<.....3.6w......=.)....p..F.=I2O.]..A...."..Z.v......!;d...p.=..6..={A-G...*.....7....FF.C.!d..g..^.,.Z.[.u.......\|..M....}o.-..bg...9....,..V.].....z........y$.....TUR.V....I=./....x...rI.8.._...+...c........__o.....y..n.%.........x.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3860
Entropy (8bit):	7.907926693637455
Encrypted:	false
SSDEEP:	48:ER8ZuHSy0wmpVbIhnDsv6fNEQ8LhNOpi5UwD65c/1TeCjWQf8T60jSZFSCIG89Ec:ER8BwMV76+GEqBQf8T6VF/JKavtNW3sY
MD5:	5D17A82904E7EE5EAB206EDE0B2755B2
SHA1:	51A4FF7F00E33A961719A1031B3EC00908CCDB31
SHA-256:	79618F4879887E9721284558DB86BB2FDE19008EA046E7B10B8ECAB4F8902DD2
SHA-512:	A959F4B269AB2E02B9C8C772E5D13E4CED5F4AF890460975F9C04CBBF1945F7719E60CD9AF9950C3DAADE5D1519C03DF928DD5E89A2CC05FC45D7E8E05FEA809
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/DQ8lLDfcUJCtsTiDw6PlvD8GaNTYzhlS8sZL4_TMTOvkH3bgh0CvoxaKCEU-uvqoCUiE0Yp6nQWTeiNqYuW0v18_XRejSBRyqn2LA-c=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{...}.?=3{..C..@.K.... ccoAQ$...G&)o....).C.....<..U.!....q....`.+>.'Y.nM....p.DF.7.P......t..}L...q...y.e?U..T7...vO....k..K..].$.H.$)............\|`....x..i.J..(..+.M.F`]p..l.....i......H.X.,k....f`.8;....7.Z.\...z..........7....P..C...MK.e#p.X>.x.p.J.-.Z......b.b.J....8%Y.....P,.......Z.{...e..\(.-...Y......P,..........;.U.Q..'K..Q(.{.[.....E".o.>p..?\|...Ge..a...`fE.s..{w.....Q....\(./.n...>_.N......j....Po.....i......v......vJ....P,..p....+.$R.o...X...R....?...s....;.G...m.\|.R.B.......`$a.8...x.X&.9..c{p....(..........H...B.\|..E..(..I.0.......!......]P..b.}f...0 ...-...m......>*...x.......].5$....m.0..I.r2.!..F.....po5.{_5.[...H...by.."i[NF....9........Qm....by..W....H.E.i........s.\|...\(....D..S...O`......V..:....[...&l.H.......Ag.^I...s.t.>........."...K.aFU.....D^.U%..\(..._B......YF...5....G.]'...NK..E!..!...Of5.%....i.,v....w.]o.H.}.......8p..c..P,g....V.."..<...M.\|......?.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Category:	downloaded
Size (bytes):	25064
Entropy (8bit):	7.89335153779761
Encrypted:	false
SSDEEP:	768:c1kHHBAqjQg2UhM+wRF3ez48/Jq5xwRMqE:cYf2UhM/FniwxwRVE
MD5:	035CEE3B64033FC67A73E691D092053E
SHA1:	EDF1F6A65F06FB1730C5EBF0BD65824B02860C13
SHA-256:	01247CAD05C2A06D891C9150CCFEF3632A512588F9A9CF3A4BFA241640BDE924
SHA-512:	A212A8D9F6550A42D9A4A0E1C45FEAE6E042BC59E416E84C32C9EE77157B968779AF364B16D5734B045333C36F277A5A8AA27D50258E1A2FBDE557885F0CE07C
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/KKfAuQrwzTY/sddefault.jpg
Preview:	......JFIF..........................................................................................................................................................."........................................V.......................!..1AQ.aq......"R...Bb.....#2cdr......Ss...$%3CD....45...Tt.E..............................0........................!1Q.A."2aq.....R...b#............?..........................................................................................................................................................................................................................................................................................................................S...u}...^....y&.........T.[y7.eT........v.w.7A.P63..].y...Ub..Z.W......Dg....^O..?._...>.^..].%.../'.../.....H./...l.....'...../........H....e....o..g.../&..}....&..}..F.8...=.>L.H...~K.I....q...zD\|....?....~..?.............)%.....(....d....E.....L..D....F.8...==y%.'...g.%.'...M.8...=C.%.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3318
Entropy (8bit):	7.932361211468018
Encrypted:	false
SSDEEP:	96:QyZOsXVImuQys8VrNSGOfMJDcyehwJd2hignqfhN:QaOIvu3sK6fMLehwJd24VhN
MD5:	68436F831D7722BD1FC228B0CD609150
SHA1:	E5403621D2C6198F5F0DDAAFF7BC180576E56EE4
SHA-256:	E277EDB171C2DE03C8EB8E0E0D4B2FFB05250C6F897477CAC8ACEB07EA01DC85
SHA-512:	5402684E20EE4AA21ADF129777F66144FC24DF7D6A25F24E103E24321E890249C6C5895C7678BFB79125D424008CDE59A2DE233667B862C835B737B7791E8976
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/hHWA5otDm9mYUJdAqTjo7wBWj8euY-SdEhCffO7oQzG3zpzxm-YExt1VDB8X6_5gchW_Ye3bfhOJXyOWgcUr94GtgqltKP4IxiH02O-Xzw5A1IHsxiw=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx...l].y.?.9.....$N....~C.R(u...@m)46..WMm.UE[U.X...&u.t..u...i.7P....B..Z.U.iBK....;$..$..9....:v....{.....#Y.o..<.......5.....`0.....`0.....PX....Gb`H/....)4.U.v....L.0&.......!.JU...L.g.i.........]..v.T3...LKUA..g~.\|.G.:#./..+<..../U..Qt....+(..^[^.H............:.)V............aY@T..y.....p...E...H.V=...PZt2B?../.^..`.........B#6...a..}...R. .....(_-..e..(.u......#%10....[.Q{1\|...m...b..L....-....xT6+........b...0...u.....wi,....A....#...u..Z..%.".g;v....o.[..a#nX.......m.........*.QUf%aY6.......'.....[....JC..!.WP..<4.O.P__/v.Y$.q.e..e_U.6'. ...u.(.....zXas.Y..X.X.F.....4.'S..rI.x.x~.....H.,.q......UTW;86.~Zl._..>..U..?.../...C.Kas.6.fE.-816..[..8<..~..w....[2...G.+i%=`F...M5\|....M..o....=..i7.,.l..tD]...30.S.$"......)....G.+#.vt....$-j9...%...0.C......o.....],......(.......n.(..YaO..xa.[<..(....t.\.(0..............._ ..\g.....p......;6LM{<..o..#......N.\...kwla.F\wvr.c;V..

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10341
Entropy (8bit):	7.971936202585003
Encrypted:	false
SSDEEP:	192:XfkacKn221yb09Ga5N9bcsOOqlG4fSmMpVFCIN2zhKyQS6+JGZeBaZH:Xhd2xoV5/bzqlNfS56/Xv8eM5
MD5:	E639FEDFEB77DCBC4A25E6AA7116353A
SHA1:	96FC2BD806BF9B04D652EA329762967CC405076C
SHA-256:	DF79FDAEADC0FA5E3FF483649B9FB45B607EE4E54EE79405B90A39BB0F80E020
SHA-512:	908BA29C49F68E8DB7090B03107E08A4C1002A9586F1BEDAF41EC8C72E0A9E01622DF4E495BA673E6B388D49A12EE7F480183C699C9B8E7FF2274C0BDA93D2DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d... .IDATx..y.\Gu.n..jf$.$k.$..ly76x.....`.....y@ +<..^.I.K...cI.O.bC.C.Yb..&.xC...$[.e.....}.:.{o/3...3=.........nU..:uj.p.Gq.Gq.Gq.G.r.3....7..d.3.....#.FD.....9E.P..?.m.......#..N.g...^rA6.rp.............RQ...G.......I....,.....&..x.Cb........X..../.=e;..-...3G...\......YG.o.T:A.8.Y#F..)jC..u..V....@.." ..A..x......GDw....tf....^q.....G..m.g....b..,9..9Y...j...(.h.a..j%..Z.w#....1.I..L.....z..6.]...>(.'..x.{:[...yK...Wd.._x....K.t...S.c..E.RL..T....-...oU z.d2...O./........O...O.`~%]\<..~.....KV\."..R.t..x.Ki.......`....o.$.n</./.C...T...S{...KwM5..s....;/. .:n..F.Z....Wb-j.........Br....<...}...1j....y..._j........t.kL:..v.x2.?..F}j+...3.D.....&...$.M........Z{......uW......[(.X..}:.P.......B.8....L>?........Y....o.....#..7......'.Q./.G...6.NM..T..Z2..~`..n....<.s.w]y.1..n..._..:.T...B.#Bp.s%....=X:../..}..g.sxN.~...n*..k;~.1y-.<..9..'.9.w.....7....3..<'....A...../...4".r.Y..<.\...\.s

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8166
Entropy (8bit):	7.958002733271823
Encrypted:	false
SSDEEP:	192:N51UecXdlWqFN8DCo3JHnkxLJa5kTKoLQsdPjN+GssopnH:r1uXdlWYN8+6HnULJa+TK4dPjsZsotH
MD5:	49D3C8ADBA7ABEBAB8CDDB827EF0D6BE
SHA1:	17223539D6A3D813F4DD018924B30F79A8DCCA50
SHA-256:	D54ADA881901A560A369021F3D2F3D395AC36FCA18FB3E61C16E64555156F0E5
SHA-512:	28335306B7F6738D3F87DB973E2D77DCCBB4DA4C3661394B6C880035513908C405ADD42E2780C286CB29C88BBA822DB5DF1B23CE2DDDA3FAEB08E7BE49CB8B91
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..itdWu....[.........l...L.1.!$LIX+Y/...9y..\|x.b9.X...+`.y\|.....p...`..#x.=..nlw.ZRKU.Ku.9.}.R.T....+..._....=.=....g....8..8..(..w..B>.O.a.n...c....1&..sN8.j.Qk.z.#..H.(x..c.l..n..#.Y.s.\......5...z.....Ed..v.-".VU.......T..L..@?...y.x>...D"....e...~.8p..\|..A...vU.j..d..BU.....V.#.2.{#P.y......U.q..}........;..3}.d..........P.3. .ZU..:...&.Q.j.U....(....vW{{..5).2qT.<55.<33s..^h..RD.T..c..Z..d...>.E.... .?..N.k.."8..{.7.ND..N...hUQ&[.gU.>U..1.l6;..e..QQs.....{...Fk......ZPUT...>.\|7.N.#.N..].u..\|>...~c..@.Fl%........;;;.Z..[m.r........r..;.....A...M.......R....79..,..M...V@.0< "........\|Mk.9.=>>~.1.r...2.....a..,.L....ud..]3.s..;....L&{....b....===..E~kBp>...1......([..........oUk\|bb..(........0..-.}.s..]]].V+?........;...Z{..(.v.`....C.W...B...ah...5.\|..,....q.1.\......U.&&&.s.-....1g..*..F5I.....1. ......_l.x.M..O.'.1.c0.....:...&''c..X.......^..7.c..+."`.X;..@P...0....

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 396 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	46194
Entropy (8bit):	7.974616819355414
Encrypted:	false
SSDEEP:	768:Nl9+gvA8owLA6d6C1z+07HvVyjGI+RNl1ynnoz1Rx9sTcdh8y3ETvtL2oDs1i6:NbfTA6A4+gHIyI2YQx9sTcbCL2ks1V
MD5:	C749B23D634961F33E16EBC183C36D3A
SHA1:	0F291F12A3185153164BF3760BB33E49A4C1544E
SHA-256:	6E987B94E1D96926168CEBBCDDD5ECDCA93B8E6B804DEBBA7A606D7670292356
SHA-512:	EB144F36CE7494B38848E596DAAE5CFD20EF0E29BE7B3CFD562C0ED5D89EEEA1A30DA55E3F7EC7202301AA3F6DDD758169DD0EA7FFC475B4E0641235DBBD1120
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............[t....sBIT....\|.d... .IDATx..y.$ey...[...{/{....x..o..QT@. ...".J~..DM.F..&.<.QP..(.(.CD..9....cvvw....}....VuuOwO.......~...z...>....0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0+..t..f.<...=.u..Z..T.;...J.A:.D...2...9.pL.y.....@ !.@..nP..()....p.GR....L..eC.KP.2d.$.T....~^.7m..L.p...[.S.0.....5....O.}....}}E9..!e...)3Mj......B;....*...D.......K..GA9.HJT...R...@........l.r..<,....3.......

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8028
Entropy (8bit):	7.961392322199147
Encrypted:	false
SSDEEP:	192:MbmhxRf+lLLWlUHEzmF34N/17aVYbD0e3XkNn:xjRf+lLtHkA4N/3bpXkNn
MD5:	14F084CA15736D15FA5EC5C9837DBC85
SHA1:	FF0E6CDA5F176980392DBB129BAF01B83BB7A93B
SHA-256:	9F7B4CDAC666C7B90AF3F5C86D4FA07E1B5B0DC98E283750983709CF6B3B3BD9
SHA-512:	D11C0784B136980017D2A3E511C01FECA6CE7C882436E81DAA10043C60300BC1CCE28D69CF2C13D0723CC97D7A3C7DA4E11C02A35475F19523E4B78695871BE6
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/8bC8ZC9RQ_cJj5lSa8LjCfRClGeSyp4SkN72C0tMSUIqGPVjEpHeUDfAScLNKy82MiXWLBlkpMl4FhJGrGRDhzHxOoXq5v-QSt-rvg=h120
Preview:	.PNG........IHDR...x...x.....9d6.....gAMA......a.....iCCPicc..H..Vy<.k.~...}....F.0...N.13..`..&.p"I..9.:tZ.."-.........".......}...]....{...~..~.x/..c......H......f......E.....4....so........wa-.n_.......?B.....<P.6.=..](......>...7....(A...1..iL..1...>..H...;..%(.MJ....T...^..?.x...i..).b.z.I:..Y"i.Yz.:'M(.y(..$....Y./....Z....z..X...0-....d6'...a'K...~.9.w..Y......0sN.H7, .Y@.@...#.....8.....@ ..Q`5...... ..- ......T.Z...A.8...Yp.\.7...............!..CT...@Z.>d.YB,...B.P....C.H..@[.B.....F.W..t....A..!h.z.}.....a...^..`W....W..p:...w..p=\|.n./.7....~.O".!#J.6.DX.;..D#q.... .H=.t"=.=D..F>cp....ab.0>.0.....).Ta.b.0.1.0C...w,...5..c}...xl.6.[.=.=...}...~..pJ8C.-....K......Zq].>.0n....M..@<./...+.....w.#.O.2A.`I."D...\B9..p.p.0J.&......@"...XLl v.o.G..$y.!..JJ$m!U.ZHWH...d2Y.lG^N.7.+.....C........."....tQ.S.S.T...5...6R/Q.Q?..d.d\|e.2.d.e.d...%.....]'[.{R...k9......[n.\....~.Iy...\|.\|.\|.\|..u.1.......W!O..%.a.B...8.........G7......_...E......

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3882
Entropy (8bit):	7.909458703791142
Encrypted:	false
SSDEEP:	96:USw+dhTnlu19HrkVf9laL4erOfg+quZb2QTu6ldIwz18SM:USw+dhTW9Hrajler5juZb/DIwKv
MD5:	58A9DFD042D83689659265FB47D30F3A
SHA1:	EBBF256294DB53FFBD9B4A1637868AFF5281C8D3
SHA-256:	398B3C2E80C9961BD30147D33B04EA5B2A315D9616F5B582D216567753DA240E
SHA-512:	9EB72BF4CCD32997F72863392C90EC9AA8F02C4150C6588338EFCBF5038CD8CBA50F4FF849AC9A2CA8EE0A2A3DCC599F652C1213468AD90FE1E8E48D670CD513
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{p......,.K.....`.....w.)0......w...d..W....w....w%.2..Uy....IH.I...pA..P$...k.l.z[...;..c%Y..jw.{F..R.J;.....t.t.666666666666666666666666. ....l.+T...4.......@..~.....K..jx/.5.\|.N0.. "0.`.T..%......k..V../W..k.n...6..."..?' <..2......k~.#o..n.......`u}UTq.A.6.!c..'.....P...i.........C.@..2.9..yk...@....u^f.3AP.t....(..:....P....'../..#..\|.......{...(A.../..!..K..x..?.U...y..U.R.v.s...7..5......E.Q'{..T.F.%".X...N..@U..\.q..JB.#.Z...u.....#.j....bOEKu.......y.{...C..i.gd.\...c.'.-.......`...8.{...?[..D..#r.L.@.....[..~.@....A..w..Ku..}...T..q...........V......].0.....I.. X..S.....O.Hm.'.D..@e.;......A.;....5F.....d......Z....d..S...*.s"....Mj...I.T......Q.a...y...D83F.....Q<f...=R..gdWeX.v..'....=...f....;...j...d.-..G2E9s.../....+./3.6$0.k_...tHL.f.D..!...w .9...J.WD9..I....<.9..}{..d..-p...Q.T..DEt.E ""..X...].+....h......1 8..@/..w.BO../^Dh$.f..(.....@....B'(t.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2096 x 1182, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1101439
Entropy (8bit):	7.990541996909269
Encrypted:	true
SSDEEP:	24576:hhZjDkY85GxQkQp7raF1qHW33DjSkZcKBrFoZcdGUcoA:hhdIoxQkQ4FAO3PzZcKRGUcoA
MD5:	38E4DA30DFE624C050BCB5B338323C66
SHA1:	8031914B5D61C4AFA651429C486207744DF36B9C
SHA-256:	AEF0C66D8DCE2D24D5131B2D21DF713077E4E7F59C06C6B48579A71787C8A29A
SHA-512:	29C5091BBD2910D248290EF31904640C696A77BE5AF6AA7454CCC1287941F54C13E420239ECD5D91A8AE1BEA4B5573FFAD6DBBE16374110F979928EAC562A397
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/Android_Talks_AI_Blog_Hero_image_2096x1182.png
Preview:	.PNG........IHDR...0.........:.LO....pHYs.................sRGB.........gAMA......a.....IDATx...i.u...=c.{nsnS.MU.....+...r.J..ALl9qHD..@..(.7..%...".N.(......D.c.c%...N.]..Qn..V..V..t..{._k.1.3.Z...{.........Zs.1.....g.1......u.....s.q[.}.W)..{.q..../.....!..B.!....~.?.7.....s.....x.G7N.Q..........MZ^.w.3...[....q...h..y...r....3..0S.[..k.#.HcQ..v..q.wi..\.H.Nf.>.y......}...nY..o..V.>8M.1.z.Y..Kz.2..l...<..b.x.......x.h..p......;\|".~.1p..:.9..F64f.....f[...-.}...~.q.S;.Q.=.vn...\.v.k..hu..nQ...m.:.;1.'....V..n..1....oC.....q.{\|i.Qf..{..?.....q.!..B..\|.B.......'-}..S.............u>.3..B.!..B......+.{....!..r.....m..g...A......4..4'..u[...8.h.X.cMD...Zq....w.M...\g_......p..f...i~.F8....zc...X..}]n.N f.:..r.Y+?..H5...b.....V...W.V......x*2.K.;#...J...5..].......B..[...,.&.[.pz.R.......O.M.....3...x1.OG...7...y./..e.W....B.!......!.S.>L.v....F..il\.].o.G'......_..B.!..B............<`...25......+C_.),..Jk.L4.d6..qJ.g.W.a..........b.Y..'.3

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5268
Entropy (8bit):	7.934303412189919
Encrypted:	false
SSDEEP:	96:OoDKfJfSWvT1aeJ7xum8IjHpOffBdJxHEU72GSmeh5XrHfhsvADZ8Ym71:O6KfTvTAeE8Jg/UkefJsCQ1
MD5:	ECDB64DF3C43153CC2EF90DD9EBFDC9C
SHA1:	3CE421421E02252E69F0CF5C8CE45D17CF46CD3F
SHA-256:	7714E183A0DC5240E3DF84F877EEFA7CEE1AE6370AE865F124E982952FC9D01F
SHA-512:	7C51A4C7CA03147022512450E526E5969EB8473AB0BFA2CA108B907115630996B130F60F90DAE30DBD23E89727B142C201A4418F5526AC35DAB65F2FCBE57C6B
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/flHLQ2o9o8gGi2lHhT5QeZT3fC04iz-gTgOhgTDMgP9l2iiXAWFrvEiPKPGcQ1hgVNBJ2j8dpa-XpJ3rGkIUxBXh63rtfdImVnTjMA=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....KIDATx..]i...u...mf.M+..Y...J..&....`c;..d3!.`7U@l.\Hb...Wab.Z0...")..'..0 (. c.,6.`..!..7o.{....7.....L..}U.4..[...s.m`.S....0.)t..J..gMJ..O..R,@ .$...)k....9HS...+7(..4.0....G'x.d"V.....,...39o.`....A...X.c..5d..s]...'..lfn\Hue,%......}.\\|../......=..w.r....{..............hT..m.....C....x&............t...Q.B,......C....X!...!3(.-...%D:...q.3v....u.Bu.{.u.....<z.#.:2.+.....h. Z{.G._..F....;...)..9.....1z.............(PJ..;o.`....d.x$v.........Y......I7.....oP...........C.{.#.&.HVJ0.9...h.P...+.O-D4.6.5{..pc....j.`)....L....}D4.6..e$+W.."..........w.?t].....!8.....a..a ..........R.".%........E.%!.9..h...........i..J......0..&h...W.\|x....z...Ew..Bn...n....51=cj.W......h...u......q...kbf..V....M...U...'...V...&f[.X3C....iC"F.b%..b.F.....x@.b.....5....7u}NV..dY.(.d...j.s..t..&.,K..K....jT,.....$y.7.&hfJ......]]Bu......U5z#j.U..\k..g.....pS...A..Aea@$rU .}4.....z,...._.^..A)..e....H.....>..(.M

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x120, components 3
Category:	dropped
Size (bytes):	3266
Entropy (8bit):	7.852627538876169
Encrypted:	false
SSDEEP:	96:qt1HKAKySfASN3pxt6fImZlHjlBIsAyZkGpcjT:W4AKFo60gsAIk+cjT
MD5:	F68A96B7A1C51CF5159DB73E22597AF4
SHA1:	9C7B49A43FEE2EDA51CB554B3D7F6999386C2B76
SHA-256:	3E64CB5E301757480594DBF1D52CD5A5129600C0216B526E190A25C1D4263136
SHA-512:	FCDF61A2C62B35C5E511ADF2CD7E77B84C76B38F8242CCB19BBC788839C5AE624CF062F2D9279DC46788C4A76A988FDDA1936B53E8743BA4B9E1823D2E2E408E
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................x.x..".........................................B..........................!1..."AQ2aq.....#3Br..$CRbt5S...%c.....................................7........................!1..AQa"Bq......2br....#34R..............?..:R.!)Q.f.)....]<..]..-.......1.(&..K6.......;8.Iwr=.H/ku........i.H....b.kF:E....Z....i..ox..M....d.H.......k...d.4.jM...l..x7.YYe..7.@.8..mmn..M.[....}..:#..6..76m......-.\|...P......\>l.&....s....W.._ZZv.3e{ms.%c.L.?."D.....sO.u.G#$n..#.7..M3S_S.JR.%A..4!a.6..t.h..{..6...../h....'8#.joX{ej......'.....T.2?.....o..V.';....$nb..H.W......8,...J......$....3...E...y\.+..7.y].v...O._T...q.T..R.>...s.W.R...(Jf..JR.!~..(...NU.u#...0#...o..l]kO.I&.\|..wd..x.\...i.8.+...[.R..v./-=..q..:...M.;~.....yH..DR.....`r..ES.WZ..,.A.aym!?.&M..qB..j........k.........#1....9.tSJR...*.....A.P.O3\.gs....]...

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9634
Entropy (8bit):	7.970882451285495
Encrypted:	false
SSDEEP:	192:s5l+dmg48Smk2ajd2OjX4vFCaIB7xVXJPSShfEoXnEGS1:fdmnL2ajd2GXwZC7/BSSFEoXnEJ1
MD5:	15975876928EB5BE40E85FC7739D6C8A
SHA1:	9E985B9132FDACBCB8ADC5209BA66EC6E607E35C
SHA-256:	71185299A1C6F47CF809BC15684AE61ABFC9768CD49D2ABBAA2E09FF14928E29
SHA-512:	5EDEE2D2E56638BB5C32FFDA948893085DFC272CBD11AD9827EFF08788876C41CE6FA305795B935619F7992E7E3687C7AF7480ED143775E29FA42A7ED47DE205
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2.. .IDATx..y.\U..?..[U.d.w..A.C..$......C....qx.q.U..e{...dT..Qq.....}......A.L..E......K.kuwuW.....q../]..'?."....w....s.-8L..0...t.... q...i......M."..a....I/..V. .v@.....~.-B.7c...V..V....-..Z1&.`!..2..S...v`....r../....4.........[.R...;.x...s.L..3S.T0..C4.0`..B..D.2.@$..Xl..zT..F,./.....y.....N@...HO....).....V.....Tn*G.B.1.....AoiE..B......C.y_._...........r.r\.j.:.7..s..(f"E..PB...".\.J.)....hD.l..s.m.2...;../}......:$...S.R_...$fr..."...`j..D..mGu.1.5..h..5..9k..B.....gk....!.p.M.m.S.;.D.(54.....RM...W.8Z&.j...`!...EK.g....T....!.p.-.^o2....c......+..LS.t.:J.eau,....H....K.A....7t.....3..}.E).HQ.5KM7.p.2.Z.`-^.5{......._...:#3C......;.......8...F.8.S)D<..h..9.w}.[.Vg..t....S'.L.....R=1.Hl..M.......z.Z#g.!.xI.hi...+..mu..GU.]s....F./e..Z.''@Z."n@.j.G!....)2.v,..._....i.oUX8..

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	792
Entropy (8bit):	7.642704506233666
Encrypted:	false
SSDEEP:	24:VYCc25934kGef0S/yvIaL/8Q4HBy9vdek:VHcOePQ0dL/EyYk
MD5:	089AD8854F62CA8726D4129B81310E8F
SHA1:	ABF76DF8618639A4AB1EE2B3D12BAA01BDF507B0
SHA-256:	CC23E907B15D21B0C59B7F18D5444C2A777F58871306896533D7FC6283FC96AA
SHA-512:	E1F40A3908CF56379B0276D7F56CD3430548ED643A61FF9C8B27A866C5436CAD4AA6FE4F5012B591C61F3C8893D34905FDEDAB40A1A45AA58E697061E1EAD2F2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.....K.P.....sBIT..U.F.....IDATH....N.Q......A.4..G......<.DHdM.1>....@`-..E..'`!"...h$...tjg...t...0..z....;g.=...5.^P.z.$p!..G2.y......t....,2G.!.D.-gs.~+.`R6.!aV.@./...~..0.Wx......ra.....xqG.@V..-u..z.O<....g..J-....\|g......mT%.F..._..1..Q........z%..`R..0W...@....J?....g.l.6.q.`@.9.f.C....j....k.P:B..9...+Py.Es..m.h<."...F.3.[m...9..a..B.M".I..8l %.J/Dmc.B.~).P...f#vA.q...R...0k..U....`..00d..[...X.A....../Pd..P.8...wB....K..A!.C...M..[...$T.........P..=....w.}E..-....K.b...%...2e....".e..U.Q.Q...[T.)..s...cra__.....VG.;Q..[.F.q......p.p.8..6.>=.._1....?....h...u4.......;.6Zmp .W./F..+..-b......:..b.#...O..+P.b..c..../...-.%....61..o.$i..Y..X..Mc.:.b....[...mw...2@...9p....c...g.`....d.W..<.......".......IEND.B`.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2577
Entropy (8bit):	7.781446647389294
Encrypted:	false
SSDEEP:	48:hIClmS5juJIIPoy8mJgii5Je64GRWEcaGuFAHvUu3olwHCMtToF3PNxXPqoE:hIQj5jLIwXmJIasRXGhPywHo19P5E
MD5:	DBB859BB594B6AB827C4A148D9343720
SHA1:	BD7E94CCCAEB4B244E0D6A333450013F35FCC817
SHA-256:	679EC39C5CCB27D18357D6E23DE0DFA22D07ED435B09E85F7003FFC3870150D4
SHA-512:	9EA39C37EA3A6395B7E9CD63DA3BAAD1F2585B9BAB598D73B5FEBC7399B8532AC8FE57ED2E77537F9D7E689CE8CC289E20D29060023CD2AAD7ADFF4E03944C71
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/support/content/images/static/related_item_external_avatar.png
Preview:	.PNG........IHDR...P...P.............PLTE................F........?.......@..-..2..:..'.............4..............1..5..A................k..i..[.....I.........(..................T..3..9....!.....}......................%........t.......8..v..'..+.........................k.....x........S........S.........E...................................>..5............A..........G..Y.......&...............".....................@..%....................................................>.....(..`..:............C..O..1..9..........s..M........m...........?..V..2..a..e..j..&..$..:.......R..&....................4........(..... ..............B..9.....-.."..-../.....E..\..2....7.....0........<..I..<..!........$..*...........D..5........B...................................;.f.....tRNS.@..f....IDATx..eTTi......a...k.....6....( ..H.2 .5...42.H.!.....H.....;.;qa..........y.J<..=..+....)cL@..a-..N..u.w....2..H}..q......WD...<i.W.W_.}&5=...p..Q.....1.....\|..T....4.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	150
Entropy (8bit):	4.817012895739808
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KDETqLLMu9MK6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiqiLMcMKj
MD5:	84241342D84AC29592A5D9516F8EDF7F
SHA1:	03C53980E18E17625F439C20E7D438F066202428
SHA-256:	6E21162BC64073FE9E3D3D6375CA24D04FED1912A5B7716AAC0CB0F2D16FAE7C
SHA-512:	7509483335C7A30365F7F403098491AC0B44FFFCC68A5CDACB86EC191F02DBDA5B16A20A09E924B6A29AC938578D43BACB9A50115DB5C5668EA27FE1811BD530
Malicious:	false
Reputation:	low
URL:	https://login-vip.replit.app/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /favicon.ico</pre>.</body>.</html>.

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5381
Entropy (8bit):	7.947566699517126
Encrypted:	false
SSDEEP:	96:6tCCClxoc1YyowdCsQRhTsIxOAqQeXHTTBrFLCBiWQXxwWmjYzWgfexnpZWtcGui:91YsQXTs+OcWTRFLRxwWmkzEZ8c/WyLm
MD5:	14EEE1C04263C31FAB68E9B554268F30
SHA1:	FC600E04A75B304956FAAD824B876688E1A23088
SHA-256:	887D5DCA78102F5292BBC2BE248B65BDDA390CA6ABDBE7764D09CC2B0F40CCD5
SHA-512:	79EE248B106D9D5E7ECFC7A734CCAA0793FE7625FA36A48078EF5E3EE9649D27A3A5E379FC27F7CAB4B1FFD82604A3B71BAAE24DBD49860CC0BE984143286107
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/d6Gf-uIYDXxTIV8n0ljiTCt1v1mU3CRmHsAyA4QUtQTYv5RvPAzPbYoa5VyfpZS4vvNOh_vYAXNnoLpHU31c8NTJZIHdUnxQyNI5F_U=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..]k...u.N......@".I.L.#aCx.....C.;.].2...S.J%....T%..e.)...........x......!.y.x..H....{.1.'?......K.~.Ewg.{N....9.{..#.0..#.0..#.0..#.0..#.0..#.._P..\|...g,......`. ..P..H..H...y5..`..[!qO....U.m...Q..5........y....y...T...o.6....s...+...Kn.6....j/......Y:.n.lm.)C....]..o.JDlY.cE.VX91S.X.....M?..#.R...o......pz......$.G..xbD..l....{f..^#..n....}ft... .a.1...~.......E"...\|.......AHJL..P.#.%.(.ha.....-I{.m).X.z....[...M/%......`...3S5......:)W.\.m?..HI..Y....]i...\|.u.O....".......XB.......W....q...^SZ.?,T..G'.....lZ.2.P:Z.....V&+g..7;y`.......[.......K._.H..S0.W..;G..~....6...[].....g.B.%.W....?...X_:q.Kbn...0..b~.v.i...+.e.w.[.,`....ja..qE.:..S...3......m.:..k.....nG.WiB+f.V.JA...:....cK9..?.....n........k..fp2....H._.r{..5\.f...T....s....".+)......q.3.vq..ACK.>^A....2j.0..WI.g[@F.{!Or.@]...a...f..n8q.l.v.v......o..Kk..S....K....c.....V.n..6..5..\|..i..Gv.<....W<..+...k.e..!O..

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x807, components 3
Category:	downloaded
Size (bytes):	44240
Entropy (8bit):	7.862606515338374
Encrypted:	false
SSDEEP:	768:bL//3tSIjGcgEmd1VrVoZnQ7T57TGmLd0ZtvFkdg2L+wk570cI:PhGcgEmHVruZQ7d7TLuBk2A+O5
MD5:	D8A768D7A63A9EB948335737AEE52397
SHA1:	D4C298BB0BFADF4C8F80C5421E55CE15E8C94387
SHA-256:	3BD8F2BA615426E23FC87CE9CA563087881F6473B290360D37AA664B336A252C
SHA-512:	93ADA1BD6D533B5DEC84C9B304DEA3A0A0C1AEDE082DA8B305DF511AEC8FD4C1F0D668295799E8E434E083BB1EE3F397273D7C50F1B1CABD884E1AA4E6C11B86
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/viBN3SXlX2ACEJsf7pd1Ud4Y2-YcsXer3nwbHVaJ9u8L7-R3x0BJWyQuDN22YPj9Bcv18a7qf_qU6-ciR-DE2eYv6_UHGzTi7OgWlLBs-wYATVRAar6p=w1440-l80-sg-rj-c0xffffff
Preview:	......JFIF............................................................ .........!%!.%...................................................(...((((..(..(.(.(......'...."........................................>.......................!..1..AQaq"2...Rr....#B...b.3C..c.$S................................&.......................!1...AQ.a"2qB............?..x..)~i}H.......A..@....`4]..b.`.W..........M.....y.W..%.c.8..}.Wp....~%W.j...Y.9...D.!......`!..........@....... . ....................................P........t...$P........S.$i.h..J.0F.{.._k.r\|...n.....N..p..........ly.....l..M..>R.H..t[CQ.&.h.q!..yD.Bh.h.#V.h..D.H.h.Q ..M(....4.".%2...i.g.X.TRA.ZD..5.&.3h(..\.G).&..*.F.....J.@d.-.4K@b..4.m..kD.63b..A!....m4A(.....:%.V.h..Z%. EPP...M....QD...X.B...-...4..T&.......P.@].. .h(..) .......PR..EE.....PQ@.$....&.AE$.E.$TK.E ...H.."..F.[.u.%#Lku..;.............F........h+2F...A.z.Y!.h.`u8?Te_Y?...&..A.....#....g.sH...9&Ed.S$2........Lb` .(.............@0..0 ........C....P..

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (467)
Category:	downloaded
Size (bytes):	1884
Entropy (8bit):	5.269191867797049
Encrypted:	false
SSDEEP:	48:o7g3FdOxGL3AxFCQK4sEbC7GO7Lfd+3wrHTyeKSwyrw:okFoxGLqFCQnRsX7LdTSSwOw
MD5:	F17EFC63FA01D73CF8D7CBB982CEE142
SHA1:	00E609F1E8A8B0C0A824CD90B523CA9C85982AF8
SHA-256:	E5F3D6E943C5DF1A67BFF36E9D8B3B27AC16980B02E150ECD7BB19EF60909977
SHA-512:	807506AF28B9B2C12F96A7B2C4D1E613AA39E8FA1BC88C38F10DFCAC2F3C3783C2E3079D4C17A3B9213979DEDB9C51392DF6720E7AA79AE6C34B6CC46083BE20
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.qmuJi5Dd2kw.es5.O/ck=boq-identity.AccountsSignInUi.Mw2jIe5agLU.L.B1.O/am=HwQm0YljARCPOAc-QCkQMgAAAAAAgAAAYBlhZg/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,VzN4J,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,recoveryidentifierview/ed=1/wt=2/ujg=1/rs=AOaEmlGH92EHnnq7nYOtfcg3m8nwJzPybw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.mY=function(a){_.I.call(this,a.Ga);this.window=a.Da.window.get();this.Cc=a.Da.Cc};_.B(_.mY,_.I);_.mY.Na=_.I.Na;_.mY.Ba=function(){return{Da:{window:_.Cq,Cc:_.MB}}};_.mY.prototype.qo=function(){};_.mY.prototype.addEncryptionRecoveryMethod=function(){};_.nY=function(a){return(null==a?void 0:a.zq)\|\|function(){}};_.oY=function(a){return(null==a?void 0:a.jda)\|\|function(){}};_.pY=function(a){return(null==a?void 0:a.eo)\|\|function(){}};._.iCb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.jCb=function(a){setTimeout(function(){throw a;},0)};_.mY.prototype.ZJ=function(){return!0};_.zq(_.wl,_.mY);._.l();._.k("ziXSP");.var OY=function(a){_.mY.call(this,a.Ga)};_.B(OY,_.mY);OY.Na=_.mY.Na;OY.Ba=_.mY.Ba;OY.prototype.qo=function(a,b,c){var d;

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54646)
Category:	downloaded
Size (bytes):	1186843
Entropy (8bit):	5.7111536250290404
Encrypted:	false
SSDEEP:	24576:kf+JKQd2G1iTBnSvm051r/FZaVHvF2Hy0ocL3aic8XzudatJz2Qkq:kf+JKQ4yqBSvm051r/FWaXzudatJz2QF
MD5:	BA5CB256A015AF6F0C7F1ABEA6B0F3D3
SHA1:	370B0EFFEF2F22FAA0254710159AC0BBB2156830
SHA-256:	C1929D4BD788A54F44551460FE9301E319485F2F5C8E820F131672FDE0D5D508
SHA-512:	3E52EC4FB2A80203E4CF261204A8556503A04D198D07BE348C0604CDF858FEC0E3873571BE6A21493E5E27DC8C2ADF752E849E9E5723609A357A60528B44432E
Malicious:	false
Reputation:	low
URL:	https://support.google.com/accounts/answer/114129?hl=en&ref_topic=3382296&sjid=11285782560994687842-EU
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Verify your account - Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="To help protect you from abuse, we sometimes ask you to prove you.re not a robot before you can create or sign in to your account. This extra confirmation by phone helps keep spammers from abusing o" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/accounts/answer/114129?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3024
Entropy (8bit):	7.916185462769354
Encrypted:	false
SSDEEP:	48:O/6pWg9H0NjXkHtvihsVU5IwRoCyVM41LpwKXYVMYPvHxeVxJ8rMlESE6L4qzupH:OSR8jXkjVU5Iw/ya41LpRYV5HHRYlK6+
MD5:	FBD7BF34502DD9215CC7DB54699DB71F
SHA1:	958A5C26E9AF819EB5A3D2F8E68B44B3A2C5F4DF
SHA-256:	05BA7CE6F3678221C356348D48A80795BE17E71F526C4234B68E657900ECD4BB
SHA-512:	04441C3173B10E3F57984776D3D4B55349093DDB90797C6A1A8A7715779E91FA252F7ACCA7FA168FB550E0096C3E8D1A55649031DAE8AB61FBF0035D5CE05124
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/UCUgyJDzxd1yRkMkEOgWSSoDkQAowQJ38mgljJHX9y6xODGoglnCV-6LRLsoTIY4Og4Bi3cmX5-hduZsp2vtNQyPpRGVuP-dSc_7StvSfN7FT5N8mkI=h120
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs.................sRGB.........gAMA......a....eIDATx...L....{/ .(hC..,T.d.m1j2k.l.%....b.LG..Z.....N.K...e).I..d.$.[.T..L.v)...B. ?..=.....p.{.....OB.pc.....z......,^......8..c.....Pk.5.......w~.u9).SvJ&.%......\..'.{6...X.....S.s....$....%y.0s...d..q......v.N....I.%y.T....V\)....t..z!......W.......+.&....."z........../.E.[.I7X...,..br...F.>w.\[.cW.3"..!.1Zp..6;Y..\.-...>.S..V...k;I....L.C..u....F....3..-@.....d.1,.!rC...2.N0...c!..............Q.!..r4`.Wk.V..c..t.Q.v~w.m.>.F....7&...Ry.52.#..."........y.J7.+"...y.J'rG....2!I.}.....T....n..H..WY.#..)..Y).....".h....7.x.Jz....>t..v..M."....X...7.K..k...(![.........*.c....p...9.......DBp..V.-.....?.x...]"S.j.Y.o.O:.&..+..."..R..g......N..nl?G2.'...c1\.TG..S..S.Z#X...7>R.,.I..........K.g.:.....?.F.."X6z..)!'..I....]...a.t ..FFp.....W>.Nb.,.t...j.]..@e..\w..w.t.DB0...#.h.,s.([Sq[....,Z..}....C$...M...J..>.}...1.g..\|z..-...t....D.`

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2593
Entropy (8bit):	7.880007294496685
Encrypted:	false
SSDEEP:	48:8ZmJbxqh2k9oc7HYHPMOJYMu+kaiYt0PbVmQ2/nwJBycCY7:86b1k9740/APt6bMvwdC6
MD5:	5B891A64E5A8D960354AA6C6DE6300A6
SHA1:	FA2732C630F3CCD983F8408D372C5C621114CB9A
SHA-256:	FA5A0B9D5B0470DB3183422B75A784CCBD999A19DF016A77A62AD955D3858A13
SHA-512:	E2966D41003781CD4CEA5D689FA982B5476378639D714ACC563ADB69E0B318993BB8A8156133AEB1F47DA39773A0CCE9DF4A674D63FE29F04CA20FF84AD5DC6D
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/mK6uPlO8TKCVSU8TsniV0pOUB0SSETbAPB_QUaaJ96qbBdZwaygmzf_bWRTIHmCNKgJ2hhn86KSfEAHvHN-P2EjFWAxPd77ob_2k8ew=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx...kl..........L.....G..B..xB...<......p.N...)T..~h.D.......R..mb.A ...H....<.n>T%.vHb....`@1.9......z=.3......;'9.gg....i..i..i..i..i..i..i..i.G..C.+.........@..C..M..N...<cG..(.X.j)..=.t-h..g;^...\|...l...n.v.]_V.....=.`.D$t5...-..v\!..`.Z.d7nV..[mM.....g7,.{7...9...Dg.)........%.=.3&..........S..4o<.w,......Q....9...Uj%.3...t?..6...T..n...E).)iUb..kr..g&:C.O.K..\|...R...K}..o8.w.....Dg.Y.......\.L...3X.......U[}...:..-..H..Dg...&.@):2.,m..VU].Xn.qN..z.j..<.;.&:K....j<...._Bi.l..`... ....8.>r.../.b.t.^Hd7.../..%v;9.;dEqo..J....#8"m..3..P...t.j...5{.i..t..M.6f:......N.:...my:^..[.6.u.....;..6fJ...o.{.n...\|L..[.>..... .w.)Z...+"....&..[.V.bD..s...:.:.......,;n5..b....B....B..-s..qd.l....8..R..jG.2...+.;.O..L:C.5T..:"...X2...NQ....e..;...-s.2.`....O.=q..L..[...{..#.A..S..-.ZGIsEg./..x..:....A...I....e.....V....A.....0fm_.2.0l....^.QH..iKtR.aA...P...h[.2..u}8r...~...Qt.7. .....i.>..../.H..

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	120743
Entropy (8bit):	5.480867766784346
Encrypted:	false
SSDEEP:	3072:cUw0Uxzi/dKJCjFfI+3J/enlkWVUnmiBmuGe/Y0SSv5:cH0B/dKgxfXJ/enlkWVUnmiBmuGe/Y0b
MD5:	726C06BFF935911BF2F43E457D035828
SHA1:	F9A821E5CA156280BA5A91509F11DBC1E9FF8943
SHA-256:	171672855BF7BD4519D5A3AB040611A698D62815B4048BD57B9DE8FEEDBB3843
SHA-512:	1DB6EDF8AAEF0F20FC8FA61574472A483D55FBD7C20F181EF63410F76CC33505D267C3B811146D2F214D66A0B40B0C72AB407FDFE89006CFE3496897DF9B6860
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var b8=function(a){g.jq(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.kb()).toString(36));return a},c8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.tga(a.C,b,c)},aCb=function(a){if(a instanceof g.Jt)return a;.if("function"==typeof a.Ul)return a.Ul(!1);if(g.cb(a)){var b=0,c=new g.Jt;c.next=function(){for(;;){if(b>=a.length)return g.q2;if(b in a)return g.Kt(a[b++]);b++}};.return c}throw Error("Not implemented");},bCb=function(a,b,c){if(g.cb(a))g.bc(a,b,c);.else for(a=aCb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},cCb=function(a,b){var c=[];.bCb(b,function(d){try{var e=g.bw.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push(d):g.jla(e)&&c.push(d)},a);.return c},dCb=function(a,b){cCb(a,b).forEach(function(c){g.bw.prototype.remove.call(this,c)},a)},eCb=function(a){if(a.qa){if(a.qa.locationOverri

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8028
Entropy (8bit):	7.961392322199147
Encrypted:	false
SSDEEP:	192:MbmhxRf+lLLWlUHEzmF34N/17aVYbD0e3XkNn:xjRf+lLtHkA4N/3bpXkNn
MD5:	14F084CA15736D15FA5EC5C9837DBC85
SHA1:	FF0E6CDA5F176980392DBB129BAF01B83BB7A93B
SHA-256:	9F7B4CDAC666C7B90AF3F5C86D4FA07E1B5B0DC98E283750983709CF6B3B3BD9
SHA-512:	D11C0784B136980017D2A3E511C01FECA6CE7C882436E81DAA10043C60300BC1CCE28D69CF2C13D0723CC97D7A3C7DA4E11C02A35475F19523E4B78695871BE6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....gAMA......a.....iCCPicc..H..Vy<.k.~...}....F.0...N.13..`..&.p"I..9.:tZ.."-.........".......}...]....{...~..~.x/..c......H......f......E.....4....so........wa-.n_.......?B.....<P.6.=..](......>...7....(A...1..iL..1...>..H...;..%(.MJ....T...^..?.x...i..).b.z.I:..Y"i.Yz.:'M(.y(..$....Y./....Z....z..X...0-....d6'...a'K...~.9.w..Y......0sN.H7, .Y@.@...#.....8.....@ ..Q`5...... ..- ......T.Z...A.8...Yp.\.7...............!..CT...@Z.>d.YB,...B.P....C.H..@[.B.....F.W..t....A..!h.z.}.....a...^..`W....W..p:...w..p=\|.n./.7....~.O".!#J.6.DX.;..D#q.... .H=.t"=.=D..F>cp....ab.0>.0.....).Ta.b.0.1.0C...w,...5..c}...xl.6.[.=.=...}...~..pJ8C.-....K......Zq].>.0n....M..@<./...+.....w.#.O.2A.`I."D...\B9..p.p.0J.&......@"...XLl v.o.G..$y.!..JJ$m!U.ZHWH...d2Y.lG^N.7.+.....C........."....tQ.S.S.T...5...6R/Q.Q?..d.d\|e.2.d.e.d...%.....]'[.{R...k9......[n.\....~.Iy...\|.\|.\|.\|..u.1.......W!O..%.a.B...8.........G7......_...E......

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 390x390, components 3
Category:	downloaded
Size (bytes):	24425
Entropy (8bit):	7.978531074331414
Encrypted:	false
SSDEEP:	384:/ob7Fx2CDs+rcRRpyEwI8iSWhkjk4zBVMn8q4VJmCqDqvZiYBgulTqofd:Ab7F0+4RnL8iAPtanvolqDqvZ/Zf
MD5:	282529ADDBF04EEBCA8598DCC5FDB2CF
SHA1:	6E1CE2E4C2B42FD1D6FDBEF5E066463EB293044C
SHA-256:	FF50E9AFDCB06BFF0AC242BAB337A2E261DC225EFEE343C9A7332D5A24705CB6
SHA-512:	9C25AEAFC017E5A54F39AF6E5FC93D7ADF95BFD974A95B35935057715653F079DAA10D7C542C6B366C70588304457E9915AB3AA8A0DF6634EE9DB69C17E9BB95
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/eO6nD1O47tirNw4TM76SfwotF_tP25t_TASE2l8_Gyw4xLr7ckkcg4PuEb8cxngaWwks2XZqVMT-et2ZGUU9W648mg7_hSfl6kv93uyvXvvjwCVzRXw=w1440-l90-sg-rj-c0xffffff
Preview:	......JFIF...........................................................................................................................................................".........................................M.........................!.1AQ.."aq...2....BR...#b...3r...$CSs.c.....%..4dt................................3........................!1"AQ..2Baq........#3Cb.............?...D..Ma..l..jJ......c.{.....Ug..#N.U...1..M=....3...Qt....h......>...Q.NE.B.:.M.........E4.p.:..e!.(.%4.D..Q....(.]...U...+......2....=y.xz.F...........4..U........M.....k2.;..Z....9Y6.7.A.....I(..r.....{^...]..t .....6;...X.HV.$.M.veG4.\Wi.Z.j^.+[.2.`Jo..d....{...q..!k...U".W.Q.jQ.T...V.....w..D...l.]J..un.....[vi.sn.5.C.F..^.+....@.G..<.......I...VQd.....E..3....h.,uA...n.....r.Jo&X&.;..I9g.I!.x.R.r.eH..t..G..z.j...j..&..5E.&1I....=)+..i.T...<.6.kUJ...'.........>..K7..s.S.gk..O.}ma..sk.Fc.....S.....-4...z.C,.k.Z....R.S..9..mU......v2`m.I.;73..t.UaNQ........c...B.l..y0.rRxd

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 293, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	252091
Entropy (8bit):	7.993281906966295
Encrypted:	true
SSDEEP:	6144:SXNExScG8yibu+NaFxm8MDil00er56BtjApuBACDSfMEBKqpzMZQ:SXEiiS+488MDK5Mwj0puSfMEBVxKQ
MD5:	95AA3850A2FBF70660D4DCBF1DA4CF0B
SHA1:	FD24A75208F0355F3FAD456A0A30EBF996102AFC
SHA-256:	19BC9C362CECD1A745C7200485168BA3345D5589AC8241E481D2C69C1E52278F
SHA-512:	F73BDC4D7AF3D7FB6BFD89EB45AFD126F6295E059D4DB22128A58B0D40F9C99FCC780C96ACE55603DA4F1DFEDFB50582527B827B2BE20E10858B8F5701FB7402
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/QheKQlOajd_iZUvo2vtGYkrWjvhTjOuxC4YqFn9pznHDkFeHsEF3Ey4PmQtIe8eTDKyddsBy_miNYSstxPaM5q6RUp0LGWciI58mQZrWlbM1r3AtbRI?=w1440
Preview:	.PNG........IHDR.......%.......Z.....sBIT....\|.d... .IDATx....uI.&....s.u...32r......[.........G`.....".",Y .....h@Z@.(."..."....s.TY.`v...........AM.............7M.B...o...&..=?..\........].L........x.....;M.<}..U.......+.?Z...,/.\._... b0.....".kD.M.........@.D`.1.1...d.A.M......"f...gj3^../D.y....M. .%..4{.P.M.......t.J...A.......A>..6..F...Z.....G........rG'..}....GW!..;H..TcN.&...u.............n.y...i.T(._}......`Y..h..F'.o..g.1&..]co.@ 6Z..e...#`N.`B.e. ..X..........>..T$.GRd\|.sE.}...)...c....2...1..z.I7..+.."...P(z..........Q./g...K.......v.Q.>.`.....@.e.t.u..k9..5...>.i.9.....H...oY.m.......%p)`I...x.v..7..s...y..D..Fi..j- ...J%.1....P....5..,`"l.."....E.6J).....u].9f..}.(...........U.......a..je.....m.h..xXQ..m...Ke.kE.;..CTqs{.........w....]pX.....,..........(ps..rA.........'.3..f4(3-+...........h.g..g..............._~............?......3......._.q._...5...U..].....u.0y.,S.{.)&?.nrb.).1.F.a....If......tz..NsS.3o...W:m

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3727
Entropy (8bit):	7.926195838805319
Encrypted:	false
SSDEEP:	48:yCOy3BuJexK6mMkPGleW2APedZyg4AgZi1jckYm7zMkYQrYlpbgAaAlCP0dmw1qy:9ODJegftIWHyOFMkYQElGY00owsdOwS
MD5:	505B44CE71DF19C29E8EC9DD5DC4625B
SHA1:	F582F2352C4AA480F0AFA8C957D54C49687D9F9F
SHA-256:	D06F07FCBD95934239ED9A2391850F91CCB04BA60AF99672532E77D9B83462F3
SHA-512:	DF758AC62C6C59039E2EA4A45A8F7A5B55A6116304A2E1D33D73329B10A4B7B3E79731B696AAA3FA6AEA2266A794B6180DA1B70164A2DA84478D2E220F425134
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....FIDATx..i.\.u....uO..O.vE.Hb.e#...b0t#..v.Hv.e.M....).J)r.b..6..H.....F..]B=.A.!..'...ZL.....@.%43....h. ...7.}....=.t.>..=..{!"""""""""""""""""b"..6.2...)./...f..u/...c...&.t...q.+.....J....a..E..o^.s..Q%F..TEof5fl.-......ZqO.7S..z...68C.'.....,.@k.5.A.X.....w.2...[U.......w.o...s...t...............[,}..1........3...v.........-....O\.2<.5..o...+q.&........9.PZ.j...F8..!.G@...4$!U7.o....8...o.{..+9......O...+.....%.Q.p.v....#h.....j.u.c..`.[.....>...r../....<.6...M:JWmE.....;c........~U.."..&/.,.....Ub...VY^s. {.-.............2. 1.....<&<..Y.\f.....C2.n.K..N.qY..r=.R\&9.w..g.....k.!Lmu7.Q...z....L.{.8#.....f.j+@m....b......R..D.J...........4.:..8..?..v....^...x.i.[.S.>.I..9".....S..$b...G]P.`.a......0..c)......\|P;\..s.='.$L.o..J.M{.y..7EZ!..V..)...S..p..[.. ..7.x.e.......K.-.q..H.B..a.(.i...v.E..D.X..*........Vk.P.n..?.3.G..2.8.7.W@.'..M-.........n<.e.H...e....NVo... `z.G....Mg.#.8q.+.z.M..i..

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3178)
Category:	downloaded
Size (bytes):	596397
Entropy (8bit):	5.71679877782869
Encrypted:	false
SSDEEP:	6144:JA6YI9q4dhyD+Wjk5DAPxP8QcbDWRxI/NI:JpYmqLrjJ8QcbDVI
MD5:	1720CA3C533908ABC65A0D2D2AA61E77
SHA1:	2EE3B8E97CC3DECAE9BCF94B73E0945BEAFF5222
SHA-256:	43F89C220B82289CA58E0D7F8B85AC2814D9D812C3A55F6C657709CB6C2597FE
SHA-512:	387BCAB4B9BAA4CA2D0EC48646A2DB92D3C2C479385CE5F855BF4D9E420B026FB5437ED2554683C8538EE3BF102D56ABD04459D14F4C5FB98E25B1674A48F9F7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.qmuJi5Dd2kw.es5.O/ck=boq-identity.AccountsSignInUi.Mw2jIe5agLU.L.B1.O/am=HwQm0YljARCPOAc-QCkQMgAAAAAAgAAAYBlhZg/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,recoveryidentifierview/ed=1/wt=2/ujg=1/rs=AOaEmlGH92EHnnq7nYOtfcg3m8nwJzPybw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,STuCOe,njlZCf,m9oV,K1ZKnb,ziZ8Mc,VzN4J,mvkUhe,CMcBD,Fndnac,t2srLd,zu7j8,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,eVCnO,LDQI"
Preview:	"use strict";_F_installCss(".Mh0NNb{background-color:#323232;bottom:0;box-sizing:border-box;box-shadow:0px 6px 10px 0px rgba(0,0,0,.14),0px 1px 18px 0px rgba(0,0,0,.12),0px 3px 5px -1px rgba(0,0,0,.2);color:#fff;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;flex-direction:column;font-size:14px;left:0;min-height:48px;position:fixed;right:0;transform:translate(0,100%);visibility:hidden;z-index:99999}.M6tHv{-webkit-box-align:center;box-align:center;align-items:center;align-content:center;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;flex-direction:row;min-height:inherit;padding:0}.aGJE1b{box-flex:1;flex-grow:1;flex-shrink:1;line-height:normal;overflow:hidden;padding:14px 24px;text-overflow:ellipsis;word-break:break-word}.x95qze{align-self:center;color:#eeff41;box-flex:0;flex-grow:0;flex-shrink:0;float:right;text-transform:uppercase;font-weight:500;display:inline-block;cursor:pointer;outline:none;padding:14px 24px}.KYZn9b{background-color:#

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11620)
Category:	downloaded
Size (bytes):	12983
Entropy (8bit):	5.589153322316143
Encrypted:	false
SSDEEP:	384:RMGEPjf8xHkv8yhMAUzkLegm0BVoQFgQtJrL:KvPjfBvNMAUYLegm0Bng+1
MD5:	D45307D10CFF4297DAAD697FE31106A6
SHA1:	E25D78E4773C5ED2E99487DB0964EDAD2206901B
SHA-256:	5562A799C0B0457BD06E40F2921756ADC75F568D567CA2429984303126147C21
SHA-512:	DA927BE862631FF2F294F78734B942C2A73A96957D3C9CC6DD2F5128DF3FCD7930A675FE92DAA09A053B8E9C96B8B482C6194AD9E5241FA61B5E94DD3A276D85
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/external_hosted/picturefill/picturefill.min.js
Preview:	/*. @license. * Copyright 2016 Picturefill.. * picturefill - v3.0.2 - 2016-02-12. * https://scottjehl.github.io/picturefill/. * Copyright (c) 2016 https://github.com/scottjehl/picturefill/blob/3.0.2/Authors.txt. . The MIT License (MIT). . Copyright (c) 2014 Filament Group. . Permission is hereby granted, free of charge, to any person obtaining a copy. * of this software and associated documentation files (the "Software"), to deal. * in the Software without restriction, including without limitation the rights. * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. * copies of the Software, and to permit persons to whom the Software is. * furnished to do so, subject to the following conditions:. . The above copyright notice and this permission notice shall be included in all. * copies or substantial portions of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WA

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5768
Entropy (8bit):	7.946214875202777
Encrypted:	false
SSDEEP:	96:OQGuo59+jUsyVrme0/fiv8l7aZdXjh6KYa4W8qoM3aFTOSoCXBiSxxWQkoqvz+Si:/G/59VdmBfiv8uZj0KSz2KBICXB13W7y
MD5:	637B33E9B1AF14772A7AC084143EF1AE
SHA1:	2E534207967F8605F191FE52A1036862D51AF53D
SHA-256:	31D53D5568A39F058193D8CDAE97A42643E7360F8168201BD0A7D641729B31CB
SHA-512:	DF68F22022D2A9C03647034E243363BEA15CA9EF442864F8AF1F4C7BE6427E176E82F30634A3071C1CE48DD80E95967A086C8D00AF4CDD8DBB6227201D7CD97F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....?IDATx..yxU.....;.....aG,. ...D..u..Z...Z....;S.g.....V.3].:R..U...hEqi.,...e......{..}.`.{..97!...$O..;.....o_..#G..9.)...............#}.......T9"D...P.C<R4.l.......n..G.?..z..r.?..G.Dy.1p"..uz..\|(J...TKA(.....D.:DP..D.#F#.u....@w..F\|mP.o...6......K....z...Q.3....D....P&..1..%..~....-..ND....E@...YA...U.WO1.%....-[.2.G..n/..:.'....I.8}@...Q.I.FI..O. .....@!...d.Y........Y%K>]......W.7.\.\L.=...+.0...D...0....j.....nRk..x..9].T;t;..N..=D.idx8.C..@.H......mE.n...../..s..:..t...N.{5.s%.s........ !$."..VX..\|.....UW..t..?;q...b&;\|..2Cl..a..D.....VV...^...W.2...x...#2..Q1..a5....AT}R...}_[~UW..%..s...:...&.hO..-...AUcP....S..{aMW.U..4n.q.......O{....Bc.vn.W....'...v.F0..z...Bhyf.....M..S=u..p...8........q.u..-Z.h..B.....u....\|&3../.U.D#.A\|..~.-.g.8....m.......y....".=ZZ....;.._.4.?a...<.b)......M.....i.Sr..a..<.WN..-...1f..)....A.Z..\|....L. .UO..M..7...s.mJ..wYh....\9y.....m..q.....X.Z

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 341, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	323693
Entropy (8bit):	7.986068807868667
Encrypted:	false
SSDEEP:	6144:jCZe/GmUFwAl6L240d3d0EHEmlMH+acoh0uBScbxJ6BOypcdjavgtbZbP:uZSGwAQi400MSH+JFwbxW/cxavgdZj
MD5:	C19A35B9FBABC519C356B7A8FF127C55
SHA1:	DAC23554B6E97E8F7FE0FD354406587D66170A9D
SHA-256:	C5E75F3FA399C432FD34B737C23D79504819E25FC4464D19A94A16DBB2AC4CD9
SHA-512:	54EC86ACA719C35C1B691A07CB8FE9D238EE11615C41B81D9D0AD2E78994B87E8A02FBB041300D8E3706E941FD2445D5C254EEA0EB05B0DC5BEE96A1DAAF1D99
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......U........t...4IDATx.L.Y.t[....f5.....}v73..!Yd..D.&A.....~....?...~.a...7.%X. .@.E.%..feS73o67o....nwk.9.....N. v..;f3..c...?.'....`lF.f.........."...( ....". ..(.. ...!2...h..`.`.....@.\|.<..!.2..K..!..C$.F."T3@`".@4....M.F.....<...O.?.v...J..M..P.((fP.c@.#.P.....7....."1....\|..o....V.".BDDl...`.h.`.p. .h..D...&.@.Q........NW..........0#.#...).).) :0BD2D3#......0..)."..!......b.?....M0..........'.<Z[...\.w?......{.?....?x...8.Y.X.....o?....72.../.....?.......x..'..'.....?.2..p...D>.C.x......)..fK.....Y...tx.......\|.[..........s/q?...\|...9..~w..Y....]...~..B..p.z..J.s...s.A..s>$...H%..L.@2.c].7.O.../.....( ..).....0.N.......?...2^}........}....,7R-.l.851....=..F&9{t.<..3J1.......gI..c.5.j..oF..d..2......p..C..!...r.4...[TuU..(8.n..1..4......\;B-2...x.S.....X...)jRun]..G.......O....uk..j..on.uy...X.l.6........q....Y......#5hmW.v&......n.G..<..H...7....{i....q.y..zs.<...e.h-8T..R.b.\.:>..t-F..@`.S..StI.....~....~~.

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5188
Entropy (8bit):	7.952928145135762
Encrypted:	false
SSDEEP:	96:9JKglioE6pMcO5oiXZuh+u/U7pLnZ0jnn7dwp5KRf0271XM8zAJPzSjCWdJ28/p2:9J66pTOlI+u/U7pLnZ0jn7dwuRfU8zAd
MD5:	714ACF1F5A07C6204BBD7E59194A2870
SHA1:	3F8170F84AA88CC81D56C4383CF3758E7945D71F
SHA-256:	1C58D90328C77231DAAA4F46073F3BADE862DB0E24A896F1B17912BB52C0FDDA
SHA-512:	FE1D52B327E09B1936B156546DF09F10802ED8D51C474217F4E02FFB8C312F519540136833C5E51A07CC7E25A748F2DECAC7D393885BF4AF05A53CB9C52465B9
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/kroer1kpwSe3j-lIfPnE7Q3MVaCoJVF8atjdh0VtGDWCz2ulLejVsDh2k6a6VUgpUFQ8qRMHMEX7bsr2jTrLXhZR_ETbqILDf-qfkk0=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..y.T..?..^Uuu7.44;..K..n.Mp.4..Fe.......dr.1.....%.q"q..h......3!.9..M7.`\..l..&.MwUW...?Z<4T5U.....>.p..{..~.}........(P O.\;.)v\.....KP..)....Z.b........b-b<..W$f ..A$b.r....~.L.e...2.;b{[..#eFt0.A...P...2T.#...U-..E...h=p@.N............/.}.+.....v..%.GS..2......A.lE.B....Q.Aw!...g..5...[CM...k6x.6..y/...'.....a.@......m..ETv"l.j.....}W.~.]O.#/..u.XW\g..~.1.LPaX~9....V.Z./...U..\{u4y...~..X<../.0.t.H(.~..V.7....U...6......WH]... .-P..$O\|K......{z.s..z.......&L..7..$..\..!v......^.J....._<..9...3....\.....DY.h2..\[..b;'..]8.r.s?.A@ .>d....S...U...6.U.w.3,....Q.3.(..<.....+k.).F.&...3...0"[6...5.fz....d.\V...s.c^.d..@8W..z....c.G.\|~\YK...9o......c&r.....~....:...{..%y...O.O....}..~.p3.`dLo9.g..U.F... 8.^.gj._.a"...}e..ll:....h...m.....q.g.2.d..I.K.5.p. ...m...e!...\|E..~..X+.@.....>[..8(.>.wy.A?MeD.=S...N....A...k.-_^].N.....eq.PsIA..X.....\|yuC6Lv....X.HA...\|..._...P..vJ....

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	428944
Entropy (8bit):	5.929994782180374
Encrypted:	false
SSDEEP:	6144:cmUFpMvCvYFBt+1FNaRPERnXPT1doQIZEudE8ZehNsehnWodvCWlXW:cmAUV+PNaYnfTLFIZLChhNBhnJFC
MD5:	435545679C874C6D11C3F6FDB767CFB3
SHA1:	5EF19C777FAB4EE9BF3BA4BFB52297A666B41635
SHA-256:	0E501A7CBB085C95DEBAC6708141F1E0F87FAACB6EC5DC85641F8F713E33F1FE
SHA-512:	A4FDF63F45D210AA1A500BBD65D5E8C35B4C7C4594A2E4F0180A925696319E660190B0F39BF7410B34A7B9CDDDC0A5A836B2018BE29F0575711F9AACC57604B9
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/Yyo7W6J4EWKAac3eS1bFOgRgBAhHBF4d2M7s
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1900 940" style="enable-background:new 0 0 1900 940;" xml:space="preserve">.<style type="text/css">...st0{fill:#B67B44;}...st1{fill:none;stroke:#9A6732;stroke-width:5;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}...st2{clip-path:url(#XMLID_00000075870817054466701820000006701549800039284358_);fill:#0065D6;}...st3{clip-path:url(#XMLID_00000075870817054466701820000006701549800039284358_);}...st4{fill:#0065D6;}...st5{fill:#669DF6;}...st6{fill:#4285F4;}...st7{clip-path:url(#XMLID_00000107556654709708920520000015232723630616043146_);}...st8{fill:none;stroke:#0065D6;stroke-width:3.7342;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}...st9{clip-path:url(#XMLID_000000758708170544667018200000067015498

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52206)
Category:	downloaded
Size (bytes):	53485
Entropy (8bit):	5.709879385524635
Encrypted:	false
SSDEEP:	1536:j/W4kYZa/RT27KTofIEUbV8scsslwP0DKUIFo0:C4kYZa/RTMm2tUbV8scyclIFo0
MD5:	4065CA3C719827EC22D783A699D53E4E
SHA1:	95B493DF038EBF94891063F3FE462F7AA73B74ED
SHA-256:	F8813D3553A30C778A6E0B882A832FF7B646BDB767473102089901646BB920AB
SHA-512:	4AC1FEFAA7F6E11631D9B42F466F4516A35E4C7E986866F61B5F00D758B031051EC24C74621F80E5872ECC0E789BB6115D1F6E4B4B42176EB41C8796A12E8F73
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/-IE9NVOjDHeKbguIKoMv97ZGvbdnRzECCJkBZGu5IKs.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function T(R){return R}var m=this\|\|self,K=function(R){return T.call(this,R)},U=function(R,e,h,v,c,p,S,M,L,a,F,B){for(F=(a=84,54);;)try{if(59==a)break;else if(84==a)M=S,L=m.trustedTypes,a=h;else{if(60==a)return F=54,M;if(82==a)F=54,a=43;else if(a==R)m.console[c](B.message),a=60;else if(43==a)a=m.console?R:60;else if(a==e)F=10,M=L.createPolicy(p,{createHTML:K,createScript:K,createScriptURL:K}),a=60;else{if(a==v)return M;a==h&&(a=L&&L.createPolicy?e:v)}}}catch(O){if(54==F)throw O;10==F&&(B=O,a=82)}};(0,eval)(function(R,e){return(e=U(20,78,6,96,"error","ad",null))&&1===R.eval(e.createScript("1"))?function(h){return e.createScript(h)}:function(h){return""+h}}(m)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:applicatio

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14116
Entropy (8bit):	4.65552037622446
Encrypted:	false
SSDEEP:	384:xkV/Jtv95PDg1g0Sx3Leu4UX644Y48TeJKCR3jIL3n4Z:xkV/JtvPca0Sxbeu4UX644Y46KKCR3Au
MD5:	AD4439B83B65F1CA4CD6C81178DBC6A5
SHA1:	F505AF59D6CD81DA9C153622F7F09ABE812073B6
SHA-256:	254A7C313076C3CBD2A21E78C9C9762DBEDFF5F3D21CAC6090A8C4F67334E942
SHA-512:	690AC84ED5CC5C3BB34CA3207401E601CD065CE8725AC5A50219962108F15BE64CAA09C8D2D07ECD159B2A32330F27A6061FA18027379D574200B9813AC68D2C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <svg id="chevron-left" viewBox="0 0 24 24"><path d="M16.41 5.41L15 4l-8 8 8 8 1.41-1.41L9.83 12"></path></svg>. <svg id="chevron-right" viewBox="0 0 24 24"><path d="M7.59 18.59L9 20l8-8-8-8-1.41 1.41L14.17 12"></path></svg>. <svg id="expand-less" viewBox="0 0 24 24"><path d="M18.59 16.41L20 15l-8-8-8 8 1.41 1.41L12 9.83"></path></svg>. <svg id="expand-more" viewBox="0 0 24 24"><path d="M5.41 7.59L4 9l8 8 8-8-1.41-1.41L12 14.17"></path></svg>. <svg id="arrow-back" viewBox="0 0 24 24"><path d="M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.41L7.83 13H20v-2z"></path></svg>. <svg id="arrow-forward" viewBox="0 0 24 24"><path d="M12 4l-1.41 1.41L16.17 11H4v2h12.17l-5.58 5.59L12 20l8-8-8-8z"></path></svg>. <svg id="arrow-upward" viewBox="0 0 24 24"><path d="M4 12l1.41 1.41L11 7.83V20h2V7.83l5.58 5.59L20 12l-8-8-8 8z"></path></svg>. <svg id="arrow-downward" viewBox="0 0 24 24"><path d="M20 12l-1.41-1.41L13 16.17V4h-2v12.17l

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	117
Entropy (8bit):	5.135483049676793
Encrypted:	false
SSDEEP:	3:yionv//thPlD9p1pmiQ16hl/GZ2l//NG/2g1p:6v/lhPd9p1IiQ16hA232Vp
MD5:	6BDB539974BBAF007A15BD517A3F69D4
SHA1:	E48E1240591318575AC90C00398138C6AF6D02C8
SHA-256:	187943FCE48B6C9FCDA71AB9C3893C186E2F00AB4A2892F998F080330F5F8437
SHA-512:	3E80DD8D16454693CB030B3CB8A8A34120F1A74B4DA14C89C1839A355206997B2FACCECD5126C43C07B01B499EE372548836B47C8E4B2D753489C55878E759EB
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/yVza5ypuHARE9HM428UC5saP-tI464PBXi6dLU_i81n57apWG6zIj2GHBnAGalxjdNDDD1Pd9EkoVyu-Uh1zdsfd5LcOYIb4ZKB-Ag=h120
Preview:	.PNG........IHDR...`...`......V.{....PLTE...uuu.z.t....tRNS.@..f....IDATx.c.#.........Zr `.?........A..'.....IEND.B`.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7094
Entropy (8bit):	7.964645757212399
Encrypted:	false
SSDEEP:	192:3vU3EL5KGd8MjY+tCuDwELqk6LF9t86pEaAm6:38A4Gd5M3KDLqlpfREat6
MD5:	10DF50D0F76BF788DC9DB560164B9E77
SHA1:	7CF6203371658A4F3344458C841C1CCE44AF8C4B
SHA-256:	C5373F1E7D948DEC3485F721443313E550881C82CCE88DEFC30C1D927E953318
SHA-512:	B9BBE09EFC3ADB5981E21096F9D0C3C2228CA58058BC685F0C15D93B91E99AFF84C0C5453EAE6FE7C34E3683524B7DA5F685F916CA7A747CC0EB869F019BF93E
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/u2XGSr0jis3w5sLeuh8UMqGHgtdqPVPi77xYhPJdMO9C41wYUue3EKPJvwp-ovAlTzt3Ux3R4Mww2HlJ31UKre8vz1Cnno-3MxvWtA=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....bKGD.............[IDATx..i.\Gv.......-..Iq.2"%..(....e4.1...9#'c 10.$....#H..../.$@. ..A.L.L......l..4..$..(...GR."...._o..:.p..{..}{y."....~..N...S......`....`....`....`....`....`...h........8\(.G......c...bm\|L....6L.B...$..Hm.jS....H.8Z/.-K.v3....].)..bE....?t..\.n>(.nI...J.V.[..J.T..\|....!]..z...].(Fb.rt...r.M......._.........Je......O..?W..j......O.$M.Lk.k}xcF.]jT.dV...+f....}.\.~..tY`.G.......r..r...%.Yk..K..L....E-....$9I..De.hx.5d..[w.0.......%x..{...&..[W]<.m......C..%.h.V...lp,)...F.n.W3.@....&..VTE+...@c.\......m3.......eF....<.C>...X?.p..xm!.[E...g.X.D}-.V..8...y.(...,..,......Y.=.%....Y.x..."s6.6w.SS.8....@...C..5.....X.r.....GB....5.c..<[R..1s`.`C.V..{3!..y._...9d.. .gX%..R`.....t...>{Fr.]dKz..f.....2...!*l0.<..fGn.Y...n`.B.&XC%..y_..../...?R..2...9.....a..~d.......F^(z.].W.;...w....P)......(.....h.G...Y`.;.,`.G.'.7Im..6o.=....4.Us..[Np....:.....JQ-{S......c.....c.,.i.."

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	79644
Entropy (8bit):	5.598025589083909
Encrypted:	false
SSDEEP:	1536:TVp1T5UI9yvkWs5yC9waydVo/29oN7VC6parVqvAq:QI9yvDsl5NYlrV/q
MD5:	7D8CBF3C10EDEB25732380AB3A9485C6
SHA1:	DC6332379FA46051AE4884ABAA785D2B71FB9DAF
SHA-256:	1B163608A38440E0853A40A67C2645F310D490A4BE2DD556A258C642DF2E57D7
SHA-512:	CA6CBCA85DEB932D7E1CADF40967EE8DE721FCA1BE990A879C5891C157A44E9DB36683D5FCD0ACB4CCCA782B819DEC74CEA07F317811CFBA9EA54091B88D58E4
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5149
Entropy (8bit):	7.938908247992652
Encrypted:	false
SSDEEP:	96:Q1McYoRBV6IMRNsIA6wqmr2N0P3f+zVUW3gn2sLODlUndH+zT/v3a4i57FIUnwFn:KfP6I+h/vmCm+zi5n262lgdezTq4ZUnq
MD5:	D3BFE9C5E7EF5F9212E57B1770A93DB8
SHA1:	D0BAF004503CFC8E723E97E5A9BBD6F425F66D51
SHA-256:	9C33BA90C27256BA2087C4F2048543ACC581937BA7A72F115E57B845B576A5D7
SHA-512:	BB39C7E255CA00FE5357FFC28DBCB76C5B1C2784F641ADE53237714DE7F43410CB396832D37A982B527E3A02E44340EFEB9ACFF685E4A16485194970CC0AF5B3
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/gglWI8y0x_H0LIUgCjTQp7RLHEkMVvcd5A4iH6V7BO-fqALnIaJAbVcBsfWa_3iCiK6ZdJhAyJf-dUPJfLXvIXTXXGdZxLDFY5Zbw4O0xyQRoQK_1ZU=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..]{..Uz.}}g..X..1....bA...P[....&lEA.d...n\.Z.U..#U...p..%...aK+.qcI.].....0.K.... 0........wN..,s......o........;.e\F.../r...S...I.,m.....T..v..d.%)xi..$...Jah.r$.."....ad.r$..2. ......I...fB...i.$J.`.&0.K[.$QR.+...t.-G.()....S2.A...V.<...^yEW.r$..I.^~..V.=.j.%S...;+0.D.yX..oH[..P2.3p...C.3S.'1...].........J[..P2..:.m:.....~43my.BI..x....7U.X.e.W...J.%A0....@..w.&O.(....}.......p.D...J.EOp.r.v.{.\|b..b.p....<.ui.o.=.`<..k.o....3..p...%..'..u.\|&...0&..8vh.?.*\.(j..^.?.y....\|.L..:..]....i.O.5.....;.g.L........yG.........e...Y..0f...:....).`.h..q.q].d.\|M&...@..?.....-o.@i...,Z.[.7.d...L.E.....X..9.[W<q..JW..GQj0......V.B...c=....KR.5.(:.^...o......h........f.-f`..?....t4.../.N..m_-..Z..S...2.&.#@aMJb..EEp.2n....k...6$rx..k.sb...m..\|.E..Z..".@.U>Ud.n0.lR$......W.....D.....E.yiN.TI.84.d.Wa4..x...}v../.c.4".(. .q)Ok9.U.E ..uyR...bR$..dR&.....Oz.n.r...E....4....&.....GR...z4.rMP..#t.h.0...;...EKyUO

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4888
Entropy (8bit):	7.94980586497001
Encrypted:	false
SSDEEP:	96:oqFy4xh2SgEK1iK4oz92JJwABaJjJ/Rv0u6I9fyFdDW8Q1FY:3PxMSgh4hJwABsj3Mu6WfyFdDb
MD5:	D44681DAABE3872301FC81E27B9D9BD1
SHA1:	C3F29D5B93972053934EC91CA9DB8BC0EEE5F58C
SHA-256:	A85AF554CDFB5C0945684088998CFD108CA9B60A30B938BB720A8EAAACC9D2BD
SHA-512:	965866A6F6EB4E904491E4C2DEA3FE06336D79ECEF2BCD685F022C4210D051A755F8656C823D920C0A03AE2FE371B5D73B80376A4328C9D3487FEB116DE41107
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/6cr6PdE9s0J1ovFNm38uf-dwcOP--68QMWey603BCUah-QcO0gL0TvyqmTBYIgNnJfk8AEgISH_xpw_zd8FNao0jA14Q5MQ7p-eeIto=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2...dIDATx..}\|\e....y.[...RZ.....v...LZZ(.(..E].>..,.Q.QW..UVE.(..o...... -....@S@V@.....M3.$m.:.......I2..s....6w.s........<0..SL^$.....=+.....3U.I.].:...........j..u.S...5zQ....!s......w.I+p:.x....@E..e.....L ....LE..P(.sv..3..:.0.........{.y.a#....pp.6.&..z.E.T[z.._...3.pn......#..-..C./.....1....^."/cZ?.]`5y.]....N7.:.........wA{..:T}h..S..Nh.&.(r....L..r...4&.)I...2..:...5.,.f..#`...MQ..W.....^D.6...6..W.....X....kT.:..\|u..i....R~..q{.pD.W....".x."...8.x....7.V.....Ru.>"....<...L...."...N...nK...u@m....d.f\|.i0Co..&.%...VV...}.&p.!.a.o...a4.G(k.......T.@..Do..]=.D7A.~;L..?.W...k...3.H...;1.....k..%.x_(..e...Y*...:.s%-...nG.kW5b...S......]7..xI.....t..............zS/..}..=..E1"..V.........w..>...0..-.{......jf..1r..VG......[]...(... .}.tT..~...R...;;...n.ST..r?H.9/L....zM1....j.6...7.>

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	946
Entropy (8bit):	7.529486934378591
Encrypted:	false
SSDEEP:	24:JY8iFVgVv882fuxBkvGt00NGNfkAclNGNGN45vd:JniFUE822jknh
MD5:	BEAD483AEFEFECC7F57C8B07C9810B62
SHA1:	6DA79643CFA4053E4359F1087684EF283CB0FD2E
SHA-256:	4CAD8F94AF9C3253C5B4C92F1D36ECDB0D01DACC655250773A1428B0A80D0031
SHA-512:	C97C6E8F5159523897E846B0D0D684FF0EBEA00AECF96A16DF5EE5EBB3BD78FE1146A763746F0A482D1DE827B3C46ABF5C742A5B474C0F256AF8630216B16067
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....iIDATx...=..Q....3k%..V..DB...M.%..hP........A.L)A'....D.]..3s.6..5.~...K.....3...y.....k.. u9....E?Wv....<bss.w.../....l..5`W.s.k...[^3.....E...n...O.N...4......3+.n...%&@..a....t....Y...R.9`{.....t.u...T.....3k2I.W.2.K.d)"......}.G!..u.MS.yV.........W....yT.x9p>U.^..Wu....W....1.Y..8N.....*.x9p............).x9p.Z_...}..^.\Fk.........e./^.\^.....I..A.c.....#..=P.j`.._.IL.....c..o..j..5..:.bR.....`q.,..9.8......X...s`q.,......~..d2V...........O2...0..........K.".{T...`q.,..9..z.....na......._.....G....Yx{.....0y...+}.E.F.0N]..~.5L-.2.....X...s`q.,..9.8......X...s`q.,..9.8.....F.#;..P.g..},}.%...{/..K.b$.-Z...s`q.,...E..w...G...3..g.D..,Sw.;,.2...!....M.y../...+.....X...s`q.,..9.8......X...s`q.,..9.8......X...s`q.,..9.8.....v......#._......{`.mMR.......7...=4..\|.....a@....C.7..$..x.1_.C.lm..<bx...R.9..0...[..f....bffff........C....IEND.B`.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5735
Entropy (8bit):	7.955505548921549
Encrypted:	false
SSDEEP:	96:V7eB4KzeJzODxJg6mrNPyw6KIBcSoV3OES1pdp36WGo3n6jyWfuuwnyWFerwp:BDtDlNaEIq2ES1fVbXYyW6nvFtp
MD5:	B1C26FE54C881726FDF004CE63A82CBC
SHA1:	07582EF29872723F7EB6E41586D63F0493E7CE14
SHA-256:	FE87FFBC5906C5E3DA65AC206D3E55B9F96463FAEBA81F1A690D79517F7747D0
SHA-512:	373653283A62C3C522EDA51F53B06B77095944A9438C3FD64D08F1C5B4DFF0C7C83C0C5D4FEAE3E89A12CE607D52B5FEE1DCD487AE70185C0D2D1D527440F65A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{.\W}.?.s.3....~..8....yP...B).T..R%...P.....(j)"..%BTH@..D...`'.1...........v..;s..{...wf_..w..F.{..{...;..;.s..h..&.h..&.h..&.h..&.h..&.hba!s.8s.L.1.7.1.k..1.X.._.F.c.t..C...@).P.Fe..".P.r..`...{7o.<9..].^....R...ee..~.a..k..[k}..H...C......C...Y...H.EV%./.l.K.\.x.K....C..Y..K}./GTMp..E..... ...RF..e...^.d......F).hG....&..y...d...e-.gR.../...d2X..B.EO.ax".u.N...0..m_.\...2.H,)+W,.h......6......G.G....]ccc.(.9..~.u]Y$/..s&..]]]_...=/.....=.<1::....p".....8..uc..:.Rg\....M.Ltvv.;.s...\.>..D...._..8.8.3....b..lYV...\|.K.R....7Dd.R..WD........K...f...........Ga.^...Q-..FT.......B...s..s..Q-..:L.T..L&.....{..7.R)G)U....e...T`Gk......Pe2....'..\|.u..a.Q.A...X......Z.PD.a......(.j...M.(.Dk.Zk}..z."%.$....GN.V.A...!.Z...C..P.%Gp.K../.,.'k!.T.....o..^FX.Y..A{a....eI.r.^X../',;.....2$x.aY.............L.^&.6~.....7=..D{...K...x...$7.../...Cl..s.V..i.~...c..~.`i.,.J!.FG.....(:..x.&..a.Z.

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4175
Entropy (8bit):	7.792037496841981
Encrypted:	false
SSDEEP:	96:CNjUwmdPbBhCwrndwU/FVNk3twv+EEXFx9y8TFk:884wT1bi39EuVymk
MD5:	528CFAAE326A3BB9E2AC8FA84F86B629
SHA1:	2896806E67CA814B3A1CDCB3269570AE59CD63F5
SHA-256:	208D04BF349F845F35F37B1F14EA345663C3A538408CF593CCC57D0AA8746565
SHA-512:	81DC39DF65F3455A96356621DCED76F92253F13AF90A4048D154FA24BE322D6B8DD4B98A75A2840EF802577418F09A029A1D770EF4D2F61AF3DE902C9EFDB9F4
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/UqqZocZvjGksiGtlRkKb5NsuhpQkMLt3A85lMQ81Pms9tSZ3lLpymbAeinPIe5qUJRdmOKqL9InBBVsh6_gK-1QcNGppeUa7owoKgqo=h120
Preview:	.PNG........IHDR...<...<.....:..r....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:fad22fce-9b5e-40af-8da4-79ebc9d7b747" xmpMM:DocumentID="xmp.did:77C7253ABDC411E7AA94B0991AE57A61" xmpMM:InstanceID="xmp.iid:647C83D0BDBA11E7AA94B0991AE57A61" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2b506a1b-0412-4705-a778-18e227438701" stRef:documentID="adobe:docid:photoshop:db2f6a03-054e-117b-b783-bbf95c42df91"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`H....._IDATx..[{pT.

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 21, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	239
Entropy (8bit):	6.605867468802436
Encrypted:	false
SSDEEP:	6:6v/lhPbEosBQDVqRVInhJ5rttH7BBg/7E3DgCV3p:6v/7jE1QeVIhJ5nBBiE3DgC7
MD5:	8B596881D19D5906D926839A9C23E80C
SHA1:	2C93910CE48DF4881580926EF57163F0E0E35768
SHA-256:	2210E36B5B21E54CD4DC2CCDCC06138DB8598D704EBF19052E5CAA84EDB4A675
SHA-512:	58BF8213BC4233704010162DD6ED0BA14F4ABB49E1B4976DA9B7E9D0BF93701DD520410223F4E9C5AF0BDC25AA7C1A5DD723FFD8139AD289C9B96F3CDAF36213
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDAT8.c...?..1......2..H.1;.\...@<....v)....%@.........@\..L......P.s.-#.Pn ...X...$C.`....1.T...7C...bN.A....5...-.......l.)..@*. ...b!..".P........4z. .P......-..k(.....:.K..g(...n.......IEND.B`.

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9615
Entropy (8bit):	7.972142301683551
Encrypted:	false
SSDEEP:	192:YL/9PM2qd6x980bBOeZjkxZBxZqPfe9hhUWWcgKJO69ucstA5HyyWU:YD9PM2d980oDZrA2a5KJDscs8Hd3
MD5:	CEE10F64B70B2F7DCDFD728D4FC54C89
SHA1:	3ED572063F27C9A8B3274F9B6815B4267A8F32CF
SHA-256:	B995946A022C670242313955BA02D1A4B7B2CA3DB1820DDD731B706CE9D5DB3D
SHA-512:	745CEA658651D60C099DA3C3086D0A63ED3160BC53902977069A1F79F27C6D7A5300716F7035567128AA151B926C780753DF74EF5D1A46BA8BA8644854D7641A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d... .IDATx..y..U....V....;..@B.B".....u..w.Aq..DG.F_.qCGPG@qF\|U.A.....A.a..}...@B....=kU...Q.,..t.;..&.....n-....s.}.(..(..(..(..(.b,0.>..M.r..1.......l.w3.\.x.TWe........o.m@..g.x...>...5.K.w."(.....>..........`..`....sV~j..5)x..l..DT..!y{C....}j.e.LLa.&.ox..mO~].Y^.!..c.>.....d..M.....,8...)v0.s..O.;...L....{.i0+..\(`...e.....M........3........x...xn.?..d3'=..5S].B.W.......%.>.l..UW.U..Q.i.&.7...<.r ..h..I.F.mR7.g....=.g...H.T?.x.uI.......]...~..l..@Z...[_.\.r)p.`...>H...F..-.N."q......{^.U.Z..7{.....W..N.3..^7..0F.......g....>.[w..zuK.L.d.@...>....1C.7&8G.....W./8>mj....n..[...y.g....@....?.....B.U+..R..e..........dB.E..H.K..M.Q%..H...g!Z..M..k7..].).".:......o.1..%.o.sQ...W.w.Nv~.:..Q.[AYE2.\.......`G..zL.....8q.#........Br}H...n./.....5.%.....4..X\|P%....u....l..q..I..Ip...X..;.Mo....s...D.B.P..$&V....a.....EWVb...x...........U6.d.H...D.t"..au.....t.U...%..<.......4Uu...7..?...&....#..

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5262
Entropy (8bit):	7.94255648573169
Encrypted:	false
SSDEEP:	96:LuiZYmyHNLMHtGobXF1O5fGEyHu5VeYYz1nFdoTcKpXIG+P7szf1mzihW:SiZ6LUtGoW5fGVeSPOcKp4lPozdXW
MD5:	C797DF4DDA33B085FB4478BB30A48F5C
SHA1:	9931859021DD5F73CC6F2EFE9517EE8386A4AD48
SHA-256:	AF2FAD82996558B2D815F058699A7040D6148D3F31740679FB232C3B243003AD
SHA-512:	D165685BBF8958F09900070A8706B4CAAA8FAFD8AD41B9C219F395745B3D74E24B03C981E5BB6A56E55BA632342B46CCDBBDE6A24250C3DC2202A4A7E514176E
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/PP8KjNgc-EqOm5a6yZ1w6mqbFzoyzLfCZcjhmRvWn6imgVjCiPj9j_MKz6jJuggsroU3293OtM1dIFgqushuz-Wrq-0-_z4AnqLkgw=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..]k.$.u.N.t..}.{w......o..,...X`c...6&.....#9..(?.'.......9&...B.$+Y.F..0R.......:k.<.......N~.c.9....X....Lw.....:u...(Q.D..%J.(Q.D..%J.(Q.D..%..".G......wKT.....4r..Y.l~Q....G......e..E0.........y....=..Us...i.-}K3.)$.../.LfNQ..n..A.O.....$u,.UJ...H...I.[?..1u\.....S;......V8.r.......\|s...^;..V..'.G.Y9F.#i.rK...._R9.d9.T.S..\:...&..{...O...r....>.....?]...P.=:T...%.c.S....Z6........3;p`z.O....,.......g.w.<.1.$........b.(..`L(8.z.?..].<2....n..zkF$0......}......'.6.?..l.......f..K/._.A.......c.~0.l%..y].eX-....r.V<m9.@.i.,U[....>.M.)c..?..o..~i......b...kg.t'.L.uf.^k.;..`.......f0.q.l-.....&..5../?.....e.FWw.`@....Y.2.lm........d...XON..sI23..."......i6..MS...`.. Fo......2.gy..K.M.[.8.O_>..T......AG...h..CK.\|.`........g... +...5.3l......Y.....'..H.)\|.[...N....B.G!....VU.1...T.R.

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	15102
Entropy (8bit):	5.465688508169934
Encrypted:	false
SSDEEP:	384:IQojHdEA+ggCiU7nnaClpFd+5SYOelHO91hIuW:IQumA+QDnRkOGJ
MD5:	D727CD28761CE9124C869F5453FF81DE
SHA1:	930C45F2F085DABD7F562A35879E219FFB0E7A15
SHA-256:	C60FE7C117CE40F5D355ADFC6DEB367A44166D57A3C19BC6D6C896AC5B38AEDC
SHA-512:	F9DBC49625D56B5AED1ED503D79C2F446D96D173F3047D78892EFB566F8649D18CA33218091D79145F4EE8A1A5FADF7C98337EA43D5521BF4FFC125110385C11
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/client.js
Preview:	(function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	15118
Entropy (8bit):	5.4657756428542035
Encrypted:	false
SSDEEP:	384:IQojHdEA+ggCiU7nnaClpFC+5SYOelHO91eIuW:IQumA+QDnRNOG6
MD5:	EAB0DC82067FB5758A121009C7040231
SHA1:	8D869354F7A947ECC087B23868999BC53F77BDF7
SHA-256:	9C77D6DB3131248F92AE41075F189B4ECC2E51BCFDCCA143719A83145F8AC070
SHA-512:	280694C2A85A67CFFB24DEED946E46D7BF8F2C52194EEE037F981CA25A58730974B5F0CDC74CE86E81C5D252362E6792EB0B38C8816B3BF6C096A58C6C84F1C4
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/googleapis.proxy.js?onload=startup
Preview:	(function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	412
Entropy (8bit):	7.002417616571812
Encrypted:	false
SSDEEP:	12:6v/7b7xjUWEUDR4Z0FHUBRb44P07S4kFzDeiiO7:gt1EUDaZU4PP4kFXoM
MD5:	FB59C29C373A66D0272062BDFED70A34
SHA1:	0CED329EA9E363799E2D4AD51EAE76C094291CDB
SHA-256:	A11E9685A7CBEA851706A7B0187F421A39557BBD05434BDD8DBB28D4D413016C
SHA-512:	0237C5AFEB29881562AA48FEE8F6821EC6F08665541D6FA109AA5E277A010D51918CFDD30DDC5A1BCCC15223AA531D0DE9068C2945EA275975F77CADDF9EE0F8
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/Pk8YenR3VOTvN9iNHAGWp3pWYZiaYMXXWUkfAjt_LMrf222t9zn815V-GfMRJ1Hjgq7l2k1KiQmxCw5d687WTfIPgwjVfGvoHaSwRDI=h120
Preview:	.PNG........IHDR...`...`.....H......cIDATx...ON.P.....FLC...;.1.m\........M......u.B.oD..\|.g.....i..i..i....=*........Jd..p..O.aD.....r...."..<.H.b.w.i.=J...#n..^..{..A.h}@.<... .... ...4......L......`...eb..,m.9u....8..............(..NG.i...........'\|..:u@.#?.#..$.p.`4.~..s.@.....]..L....t.....S...9....p... @.........5`..J....P....[.a..?...............a..s~.... ...'.... .....!..../....IEND.B`.

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3834
Entropy (8bit):	7.903379044234245
Encrypted:	false
SSDEEP:	96:0iEi7ComEvbKDTQRLGsog+771g4cnBDgMwK:5BGVEvQjg+771gX6MwK
MD5:	44B118653A98E27DCA384532CAFB19B1
SHA1:	894D27A9BF1B64721287FCC611CFFEA1FA5DF9A9
SHA-256:	76E15F7A3637B8A4DF283DFC12B5B11F5C1C1CC6093EEFC061122F1B7B1E57B0
SHA-512:	9032EB21220B0FB38F74E2352D582CB90151AD05D88BDE39E579060371A7B225A65ECFA64FFF04BDE27827FD40679AC89F596922724C1109427D4D0643693D96
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/UnRPa94dWPxyhH3faaGqaEQF5uWqRZ2zSARkm18zlnqntO3-bar_Cffb-W5CZdnE7mPWDo7RTqKFJeuMhjYz3eInIpzwiqF9Yxt3JQ=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{t....;#?....@H)m.....;.6!....-..Bi..4......m.P`........x4..m.}...hcI.........&..6!..d.3..C...e=....\|.I.4...~.......\.......................z.r'.....-.p.a..lAS`..$..~..m....1..[).W.>...]...e...ap....D.LX....3..7.c..O..q....<O.c....1mG.............DMc.X,...7..F....Wv...J.....@....;...2u4.@_.......9..h..=.8).p.H............g.K...;.\T.....0..v......=`w...'.x."O....@.g..!.D.s...@.wN.n.z.s.NE...4..0.M.\|......`.....;.~..t..W.0..Ws...i,..`...K?eo..._........J...25..g..(s...a.-..z.U...}e}[...C..@.Rk....]E3..qW.r(........r.v....v<z.5..\|...8.Ew....B\|...c.....d'.M>..S..h.{..Y8.;..-.O.~w.A...}.?.._'3q..C..[X..S......5..4........l..;....!~.D..[..C\|>..>.;#...Xx.LQU..\|..&.s..0..B....J{.-.........cnn...y..U:3.jpGp.....Q~...x<........4v...........}.8o.x?.........8.D..8.....n9..q{,..N.i.@....).L]...{3[........W...M.......Ati~...n.w......MC.N../..=V..(....4...n.........]....J....6....

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1631)
Category:	downloaded
Size (bytes):	38352
Entropy (8bit):	5.378465639426428
Encrypted:	false
SSDEEP:	768:yAH1mbKkUlTKS4cJvPbLUN4H8JZac6+257j1il8s0p3Vs9j1PsLVy:RLPUN4lc6+257j1RsQ3WPOU
MD5:	7F05BACC3399692FB4BA063BBD17D0B7
SHA1:	DFB90995DAD4053E9727324463E9EAB72802C0FC
SHA-256:	E72FFBDB1DF1CB2589FB7154381E77416DB17B5D54CECFC254C516CDC8BA234F
SHA-512:	0F01F32FD249DA7B48E0F94F1343157C95DCB89F75E189429E74359A34E60A71486D01F0C575BB6D9C6844A7799089AB96297B124CE1BD0D9C8BEA8C13D014A4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.qmuJi5Dd2kw.es5.O/ck=boq-identity.AccountsSignInUi.Mw2jIe5agLU.L.B1.O/am=HwQm0YljARCPOAc-QCkQMgAAAAAAgAAAYBlhZg/d=1/exm=_b,_tp/excm=_b,_tp,recoveryidentifierview/ed=1/wt=2/ujg=1/rs=AOaEmlGH92EHnnq7nYOtfcg3m8nwJzPybw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.lpa=function(a){var b=0,c;for(c in a)b++;return b};_.mpa=function(a){return a.uh&&"function"==typeof a.uh?a.uh():_.ja(a)\|\|"string"===typeof a?a.length:_.lpa(a)};_.ln=function(a){if(a.jh&&"function"==typeof a.jh)return a.jh();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ja(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.kb(a)};._.npa=function(a){if(a.hh&&"function"==typeof a.hh)return a.hh();if(!a.jh\|\|"function"!=typeof a.jh){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ja(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.nb(a)}}};.var opa,rpa,qpa,ppa,An,Cn,Cpa,tpa,vpa,upa,ypa,wpa;opa=function(a,b,c){if(b)re

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1112
Entropy (8bit):	7.654338797164083
Encrypted:	false
SSDEEP:	24:5Di8aDqOI8qiyIeDmNq8GoNCA15LFE1HdHveHQvc:5Di8XxiLeKNq8GxmtGdHvewvc
MD5:	F7534A54079C3D58A102D6692939D1F4
SHA1:	AF127136E5AEC701FBCE3AF340C7F56F6A0B3493
SHA-256:	12ADFB4B80A87613250FD777410ED000EBB3D5B6429C4A09641F6A89F18C5AC2
SHA-512:	7F2F81C0F9043A216FF214FE2A851C81E3696EC330584F88FAAF449F43577B30426D5B7207A8EE7AF76772139E8CCBBA5966A146102938671F761F78BF184443
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/KTDOhPuoj2uFXQzWV1UoktTwtuucLM49NAFS07-vtX8dCGhSjpxJwumzTuzI6qZyyqLdmZASs3ARnaI3gIae1MYIjaG57KsmUhit2g=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx...?h.w.....6...."...8$ \...A7..D.......v.[..G.."]...F...V.t..).....S.IZ.... ..I.....<....1.\|.{.<..DDDDDDDDDDDDDDDD.\...9.../...H....../....c....n...^l...g.rq..~-.Eb.6..y....`...2I.6...Y.X.p..6I..w..Y..<........f...$=.q...,....../....%.....=.?.<F...l..QRm...;...).s...;...).s...;W...Y/(......f.N..^RJ..<;.==p.$<y....J..........=h..+pK..~s....s>.......g.Z/1.;0...G....p.......e.:.....``.zM..'p.. LM..k.K:.~.[v..y8..zIT..........p...(...e.Z8s..>.....J....&'..M.%.Q.,[..wp...O..y..`.~x.....\|4.^I_..:.^...z.)p........%.....).j=~...Y.h....*..m..z.....G.`..J........8..6.z.z.G.!.C..p."...).......E.Gt..........~...........5Q...=7.......K.._.+W`.....S.C....~}..B..?}.....M......{.n6..98~.z.)..CH....g...\|..u....W.J...{{af.v.V..y?m...=...7.......`Y..;...).s...;...).s...;...).sy.....'.Y^.?#..82....)...#.Y...n`>..)..Iz..=....;.>I..'+.,s.../..EW..b.L....\|.....Um..qg....[B.ho._..QV../.......H..O.b.0..@z"W....

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1502
Entropy (8bit):	7.73412357563312
Encrypted:	false
SSDEEP:	24:lPIHicYgNF3utrBMaYdnYuB3EuYksRjf4YooyQGx7sKRMi+R29I/WWWWWWWWWWWj:cdP3ut2aYdN3vsRjGoynxVxuhtG
MD5:	8A74358CB7D5C631CB3746D774C99A3E
SHA1:	5F33C0ABED63BCFC3630366276FC783AFF20CE67
SHA-256:	7281509E4DAC8B2FC498C248C0A61142447362083E2D93657F74C8E5B8942E6F
SHA-512:	E1167BC3ACA76887A6549621FBAE88C60FEA554E9D69F6538C2494B32FD246CF19BF02D15FB1C8FFB9E9978B8CA1657CEC792FF1271731CF7C981662EC0722A2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..Ml.U...y}-?.#...*..5R}&...$..B\..p...1.'.\. 1......(.....F.. . .P.(..F.k....w]..".m.;.p.d.Ms.y...{.y`..a..ax'.....(.<0/t..$.....f&/s(v9c!.`..k(.)0;T..$.a. .i..iy...vk........s#....@....H...U..0.J\|.,v<...VQ.].h........w.0....[\....%.Y.\..Eb.u..U\....!...b...).%H.6O.I..]E..M..(\|.e..O../...6^&...l.L._..x.`....2.a(L.e..Q.....%z.e.....2.....2.....2...{.e..'.....!.....#.....%x.e.....2.....A..#lw..K.......t.?.....`..&.\|8`..-......_.....as.rL.rL.rL.rL.rL.r._&...IN...S..R..i..P..Sj.r5...{`p+...N....P)[.`....B.30.......Od.N.....?..5..Q$..Gq=..~.dK..o..N..................MV..X.].Z.b....s...f...T.l.....u0k.....C..,..EG$.j....?v..,v...<.+x....Zk.r.....\B.)8..A.......f9."O..&../.......<.)..&....Y.....<.....3..?o.B.{KX..`.r.,5..}...Z....j~..m....e.n.*7.._.Q......\.............M....R..%^...Z......r.^=U......P......I.....%.uJ.#..n..#........?=.C...?...N.!`.h.....8v......./.......rK......[!m..+7..7....>.....5

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (574)
Category:	downloaded
Size (bytes):	3449
Entropy (8bit):	5.489484701286295
Encrypted:	false
SSDEEP:	48:o7LqajZXNyLOVJHKovtT8wHO9aXvQ45sF778kaIKLP1pJcNqISQIaTbLIVa86SHp:oHqoFTVJHKEvHO9Wvt6RArepvLANV6lw
MD5:	75D0342E2A85698BD7D2B5BDA94D903F
SHA1:	A510A76355E2F216449AB041EBB50ED8E0D45C17
SHA-256:	337AD03680D6C560779856ECB3CDBD764350D3616AF647C6B2C8D9A534D43B9C
SHA-512:	00DE9EC68371439AE150A95CD44AB10C76C6D34EDB824B25CCF258C11CACF722ED46B52B1F8DDA60FF45B24C9F6D46AE1BCE76E472A3F5D8A4926EB059EB61BB
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.qmuJi5Dd2kw.es5.O/ck=boq-identity.AccountsSignInUi.Mw2jIe5agLU.L.B1.O/am=HwQm0YljARCPOAc-QCkQMgAAAAAAgAAAYBlhZg/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,VzN4J,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,recoveryidentifierview/ed=1/wt=2/ujg=1/rs=AOaEmlGH92EHnnq7nYOtfcg3m8nwJzPybw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var lta=function(){var a=_.ae();return _.si(a,1)};var gq=function(a){this.Ea=_.t(a,0,gq.messageId)};_.B(gq,_.v);gq.prototype.Ja=function(){return _.gi(this,1)};gq.prototype.Xa=function(a){return _.Bi(this,1,a)};gq.messageId="f.bo";var hq=function(){_.vk.call(this)};_.B(hq,_.vk);hq.prototype.Yc=function(){this.qP=!1;mta(this);_.vk.prototype.Yc.call(this)};hq.prototype.aa=function(){nta(this);if(this.mA)return ota(this),!1;if(!this.jR)return iq(this),!0;this.dispatchEvent("p");if(!this.VK)return iq(this),!0;this.UI?(this.dispatchEvent("r"),iq(this)):ota(this);return!1};.var pta=function(a){var b=new _.tn(a.v0);null!=a.XL&&b.aa("authuser",a.XL);return b},ota=function(a){a.mA=!0;var b=pta(a),c="rt=r&f_uid="+_.Jg(a.VK);_.al(b,(0,_.nf)(a.ea,a),"POST",c)};.hq.prototype.ea=function(a){a=a.target;nta(this);if(_.dl(a)){this.YG=0;if(this.UI)this.mA=!1,this.dispatchEvent("

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2294)
Category:	downloaded
Size (bytes):	163976
Entropy (8bit):	5.55027655155276
Encrypted:	false
SSDEEP:	3072:FYg07mNnCP+R4rMRkrhp+lBCwiZUHGUjHD2OQPItCQyDt4fWW4Y4Fp8RgheNF/H:FYgBNnjRyMRkr7+lBCwiZUHGUjHD2TP0
MD5:	1EFC0DC426750089CF2F3CC261C0077D
SHA1:	1A932537065C26A8408254BE0E87D724D0CD70C1
SHA-256:	48A794EB1045FD7E6F4301DA9721B1A7AE54A99FB22EE9B65C32BDF4F129FBCE
SHA-512:	CC030AD3DACE985E7F50AEC2E994AD865788D7634DAC5CC816162C346434AF0ABECD179F55C42B124979BDA17097C5556E6A310C728A29B6DE7C4FECCAA0C9CF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.s-_8OiN4zAs.2019.O/rt=j/m=q_dnp,q_pc,qmd,qcwid,qapid,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTstZieUcIRJsHgW4g1D6WRCneCt9Q"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.cj=function(a){if(null!=a&&"number"!==typeof a)throw Error("q`"+typeof a+"`"+a);return a};.}catch(e){_._DumpException(e)}.try{._.dj=function(a,b,c){return c?a\|b:a&~b};_.ej=function(a,b,c,d){a=_.ib(a,b,c,d);return Array.isArray(a)?a:_.jc};_.fj=function(a,b){a=_.dj(a,2,!!(2&b));a=_.dj(a,32,!0);return a=_.dj(a,2048,!1)};_.gj=function(a,b){0===a&&(a=_.fj(a,b));return a=_.dj(a,1,!0)};_.hj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.ij=function(a,b,c){32&b&&c\|\|(a=_.dj(a,32,!1));return a};._.jj=function(a,b,c,d,e,f){var g=!!(2&b);const h=g?1:2;e=!!e;f&&(f=!g);g=_.ej(a,b,d);var k=g[_.v]\|0;const l=!!(4&k);if(!l){k=_.gj(k,b);var n=g,p=b;const t=!!(2&k);t&&(p=_.dj(p,2,!0));let q=!t,B=!0,ba=0,H=0;for(;ba<n.length;ba++){const D=_.Sa(n[ba],c,p);if(D instanceof c){if(!t){const Y=!!((D.ka[_.v]\|0)&2);q&&(q=!Y);B&&(B=Y)}n[H++]=D}}H<ba&&(n.length=H);k=_.dj(k,4,!0);k=_.dj(k,16,B);k=_.dj(k,8,q);_.xa(n,k);t&&Object.freeze(n)}if(f&&!(8&k\|\|!

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8691
Entropy (8bit):	7.966392939246853
Encrypted:	false
SSDEEP:	192:VPQ2AUtx8hX0Y3ATP9I6b0W1zahIgqVfzEbhzX6zvZ724hTHV:gUtO92Oi0W1oI5VLElGzvZ7pHV
MD5:	B194F96127E442BCD553601D72DA4950
SHA1:	003FB7E16FF875F8735E324438AD792D4F5B5C7B
SHA-256:	3C03DE21A818828C0BC4CA0660C31A2B216BF5090CF4B177DDBF507392A693F1
SHA-512:	86FD62B99C25A7866E758BDF1545C9D0671E1AA0B45E027E05F64931E4C651A7DF5DD5594791D9243A1B5FF93F26AC5822DC36A5CC9752D74A015DE6FE096937
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d... .IDATx..y.dGu......:..F.iC.$.. ..H......>x...q..1&...61I..\|..q...,...=,.-h4..m.2ZfF..,o.....{o..qoo......7..>...s.nU...:u..p..p..p..p.'.r.+p.O{[........!.....nQcL.f........:T........4..HU....}....;.....\|.m...\...5......@2q.jC#7...?B9...WD..p......D.1.0..{...[........'..{...c...#..Z..7...C.. ..!U...{...uW\4...X...Z....'.i.....l.P(..\.n.....e..#...L. '\|._^.......u.....eo.c...Z#.,w.+.Q...Z5t.r..j.$.u.......ke.w>v.r.....D.W...+.B......^.N.f.+`.}. &......e%........[.6....e.H.1&.....U.HlSQp..y.ay.6....]w.....v...n....#O.~...6..>..u9..1......ax...,..,../..+......(...q.t3n..`x....T.L..r)lM.........7.. ..\.Z.u..\u5.z-...'1.'..-.A.=z....&..OA.0.....}.!..!{6...=....F.l...../..Y.:Ns..\|..,......s..NM..@z.aD.O....?.D...{..c.....>)..e....\.\|.....~...0..wr..XX..-..~.5._.2z.`,.'.N...{h.............l......./w....ap...O..)..p.....oEg..?.<e{.r.v.X...O..<.l-.]w.~..!.&./;Ey...8M...5r[........6d.i......qr....

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10341
Entropy (8bit):	7.971936202585003
Encrypted:	false
SSDEEP:	192:XfkacKn221yb09Ga5N9bcsOOqlG4fSmMpVFCIN2zhKyQS6+JGZeBaZH:Xhd2xoV5/bzqlNfS56/Xv8eM5
MD5:	E639FEDFEB77DCBC4A25E6AA7116353A
SHA1:	96FC2BD806BF9B04D652EA329762967CC405076C
SHA-256:	DF79FDAEADC0FA5E3FF483649B9FB45B607EE4E54EE79405B90A39BB0F80E020
SHA-512:	908BA29C49F68E8DB7090B03107E08A4C1002A9586F1BEDAF41EC8C72E0A9E01622DF4E495BA673E6B388D49A12EE7F480183C699C9B8E7FF2274C0BDA93D2DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d... .IDATx..y.\Gu.n..jf$.$k.$..ly76x.....`.....y@ +<..^.I.K...cI.O.bC.C.Yb..&.xC...$[.e.....}.:.{o/3...3=.........nU..:uj.p.Gq.Gq.Gq.G.r.3....7..d.3.....#.FD.....9E.P..?.m.......#..N.g...^rA6.rp.............RQ...G.......I....,.....&..x.Cb........X..../.=e;..-...3G...\......YG.o.T:A.8.Y#F..)jC..u..V....@.." ..A..x......GDw....tf....^q.....G..m.g....b..,9..9Y...j...(.h.a..j%..Z.w#....1.I..L.....z..6.]...>(.'..x.{:[...yK...Wd.._x....K.t...S.c..E.RL..T....-...oU z.d2...O./........O...O.`~%]\<..~.....KV\."..R.t..x.Ki.......`....o.$.n</./.C...T...S{...KwM5..s....;/. .:n..F.Z....Wb-j.........Br....<...}...1j....y..._j........t.kL:..v.x2.?..F}j+...3.D.....&...$.M........Z{......uW......[(.X..}:.P.......B.8....L>?........Y....o.....#..7......'.Q./.G...6.NM..T..Z2..~`..n....<.s.w]y.1..n..._..:.T...B.#Bp.s%....=X:../..}..g.sxN.~...n*..k;~.1y-.<..9..'.9.w.....7....3..<'....A...../...4".r.Y..<.\...\.s

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2096x1182, components 3
Category:	dropped
Size (bytes):	177497
Entropy (8bit):	7.147399729222433
Encrypted:	false
SSDEEP:	3072:qOvPYjOwr6VM7rJxs5sm0N7cvMkjNN6o86EDnA7Fv1oC:9nbuI5s378M6m7ps7x1oC
MD5:	B54F1F775F278251D37737ED8CFC00DF
SHA1:	585608E5592716B126D7E4E3A6DE76F14546F86F
SHA-256:	D633D3709D269E9281C32A5A99DEEFC32CEBD0CC7C08B0E23A46363516C450AC
SHA-512:	6D5DD8EB3A2D2FDB485241807F76A9E79832510BFD6168FD079C1E983C1F414F3FBAB8C0B354EEBAE2BD48B1E0C78757FE585554927DD46094C705F24DC29D92
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9634
Entropy (8bit):	7.970882451285495
Encrypted:	false
SSDEEP:	192:s5l+dmg48Smk2ajd2OjX4vFCaIB7xVXJPSShfEoXnEGS1:fdmnL2ajd2GXwZC7/BSSFEoXnEJ1
MD5:	15975876928EB5BE40E85FC7739D6C8A
SHA1:	9E985B9132FDACBCB8ADC5209BA66EC6E607E35C
SHA-256:	71185299A1C6F47CF809BC15684AE61ABFC9768CD49D2ABBAA2E09FF14928E29
SHA-512:	5EDEE2D2E56638BB5C32FFDA948893085DFC272CBD11AD9827EFF08788876C41CE6FA305795B935619F7992E7E3687C7AF7480ED143775E29FA42A7ED47DE205
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mvJvvcvtrNc0MESF98dAx6ivasEsZNxoaUZU-Q=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2.. .IDATx..y.\U..?..[U.d.w..A.C..$......C....qx.q.U..e{...dT..Qq.....}......A.L..E......K.kuwuW.....q../]..'?."....w....s.-8L..0...t.... q...i......M."..a....I/..V. .v@.....~.-B.7c...V..V....-..Z1&.`!..2..S...v`....r../....4.........[.R...;.x...s.L..3S.T0..C4.0`..B..D.2.@$..Xl..zT..F,./.....y.....N@...HO....).....V.....Tn*G.B.1.....AoiE..B......C.y_._...........r.r\.j.:.7..s..(f"E..PB...".\.J.)....hD.l..s.m.2...;../}......:$...S.R_...$fr..."...`j..D..mGu.1.5..h..5..9k..B.....gk....!.p.M.m.S.;.D.(54.....RM...W.8Z&.j...`!...EK.g....T....!.p.-.^o2....c......+..LS.t.:J.eau,....H....K.A....7t.....3..}.E).HQ.5KM7.p.2.Z.`-^.5{......._...:#3C......;.......8...F.8.S)D<..h..9.w}.[.Vg..t....S'.L.....R=1.Hl..M.......z.Z#g.!.xI.hi...+..mu..GU.]s....F./e..Z.''@Z."n@.j.G!....)2.v,..._....i.oUX8..

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10341
Entropy (8bit):	7.971936202585003
Encrypted:	false
SSDEEP:	192:XfkacKn221yb09Ga5N9bcsOOqlG4fSmMpVFCIN2zhKyQS6+JGZeBaZH:Xhd2xoV5/bzqlNfS56/Xv8eM5
MD5:	E639FEDFEB77DCBC4A25E6AA7116353A
SHA1:	96FC2BD806BF9B04D652EA329762967CC405076C
SHA-256:	DF79FDAEADC0FA5E3FF483649B9FB45B607EE4E54EE79405B90A39BB0F80E020
SHA-512:	908BA29C49F68E8DB7090B03107E08A4C1002A9586F1BEDAF41EC8C72E0A9E01622DF4E495BA673E6B388D49A12EE7F480183C699C9B8E7FF2274C0BDA93D2DD
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/7hNVq4eXYDqKikz_x6QUIN1x3ArrF3IzcaNWS6TQpna79BIWfNfnRviifT6hBugE7mYpKpiM7Ps7YN5XkGFmXaTyTKjiYsUoNquxGvQ=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d... .IDATx..y.\Gu.n..jf$.$k.$..ly76x.....`.....y@ +<..^.I.K...cI.O.bC.C.Yb..&.xC...$[.e.....}.:.{o/3...3=.........nU..:uj.p.Gq.Gq.Gq.G.r.3....7..d.3.....#.FD.....9E.P..?.m.......#..N.g...^rA6.rp.............RQ...G.......I....,.....&..x.Cb........X..../.=e;..-...3G...\......YG.o.T:A.8.Y#F..)jC..u..V....@.." ..A..x......GDw....tf....^q.....G..m.g....b..,9..9Y...j...(.h.a..j%..Z.w#....1.I..L.....z..6.]...>(.'..x.{:[...yK...Wd.._x....K.t...S.c..E.RL..T....-...oU z.d2...O./........O...O.`~%]\<..~.....KV\."..R.t..x.Ki.......`....o.$.n</./.C...T...S{...KwM5..s....;/. .:n..F.Z....Wb-j.........Br....<...}...1j....y..._j........t.kL:..v.x2.?..F}j+...3.D.....&...$.M........Z{......uW......[(.X..}:.P.......B.8....L>?........Y....o.....#..7......'.Q./.G...6.NM..T..Z2..~`..n....<.s.w]y.1..n..._..:.T...B.#Bp.s%....=X:../..}..g.sxN.~...n*..k;~.1y-.<..9..'.9.w.....7....3..<'....A...../...4".r.Y..<.\...\.s

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://about.google/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	376389
Entropy (8bit):	5.190488654636762
Encrypted:	false
SSDEEP:	1536:9oi8ZHMCbS/SgVcBqILJPptpJKztM6oyi+MOn4y2Ox5juDEnXrDJc7MsByDhKTzb:9oi8ZiSgKBjSoyJufRWckQoSN
MD5:	734B31725E29C82861A2C08184FC7055
SHA1:	5AE2D674DD076C2025EAD424F423B53BC5F46E6C
SHA-256:	2958E30EDA7143B853DB1D5E3A9E606F83D3BF40A162148FBCA5A1B61D184223
SHA-512:	952FC63062D9E622BF71A8D2D83A63550CEF69750E4D25A2659740883486C788AABBC4CB5A73A599F4F8031A8C514FF5F1109701803B35D777414F92D9210F95
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8054
Entropy (8bit):	7.965391593269203
Encrypted:	false
SSDEEP:	192:N9WMmAIkLY9f7vkLr4KE3Qd/HsWXWaFQddKIlRXWf:N9WHA3U9f4HHd/M4xIlXWf
MD5:	C01A681EFEF4BBF2910C945B60E6A70B
SHA1:	4B755CAF0F3DAC878BE3B83CA4315278CD397F43
SHA-256:	9E737809179FB34D682511871C99F745C2B028FB86E1591D484E96B50663E822
SHA-512:	1D0B31993FDCD539D741A8DF38709E665862D0CDCD62F50DC5BB6B1BEBB8E0ED4A8992BB75D83AA7EF750FC4999B8AEFA07247C39A584315CF5DF3EB56B71DC7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....-IDATx..k.-Wu..k..3s.t....t%..........#.......'..P...).b'...<......R.q%..8..b..1......@.$.+!].......+......33.....9.{.....Z{...+Z.V....hE+Z.V....hE+Z.V....,.....G...E.7...Y.......?......?q....P8...._......6..p.^<{....A...3.(.@.....k>...{bgO.......^~....G....W.6K..2......-........).....q..;..N.i..\.q."..L..o...'...i-..7....t......o....x.^dt.PW~.......c..d.{.z.5..0 ...XK...T.G.-B6ndN.&$..,.....l.b$...pD +.xd;.Q...............9Cm>}.];..6.`...0g...U..!.S..Dd...F,.emA.H...y&.J'.....7T...........R...s.o...).BX..Q....S/m-.4.9sd..M.O.;....u..sgZ.+...6/.y..\|.O...5.o.m=...a.......&.....Yb.5.....,..........r........O....u...Z..u...X:y..rV\o.0A......c$uq.O...9....k........Q5...$A..w..O..b..x.....L...2.g+...q.\......[.C...../...#C..t.....8.......h.l.{...d:....m......M..=\.,.c..y....on(JJ......_.:~.j..........I}....2..Z.d..]\.).H{.9o.:.zw...].P....xl.....0.:.z.U......`..r.. W...*x...9.AV.\|M..@.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	9452
Entropy (8bit):	7.972633586493504
Encrypted:	false
SSDEEP:	192:oluGUDoPyYMC1jr+wq+UTEbB8dZFfRg2TDN3qWpZ+8+t9:osGeo+C1uwCcARz3YW7A9
MD5:	9471CDBEDEDB47F304694708F03522DA
SHA1:	1A78FD5DC642031B2930B0FBBC8573A7A81AEB54
SHA-256:	EC45B781D17011F674273C7654C2BEAECA1C097A9A38A271D57763A2CD7E2778
SHA-512:	8E20EBEC2BC28E1BF670B21821BAA05FBD298DB86C6A8267D0BB3468A46986D11F445ED2C9BFBEEC806039EF22A557B695E2C6A2072FF35FF7FCE5B164D36C04
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/Y1i12gHz-cP0Ir3LztFSUMijuVGSe9qetVu98aQNchjhxw9byxecnFAFfhxGFyd79tgcGpJrHjJ8S_AQmFnBqtxxDAjh81bxUMe1=h120
Preview:	.PNG........IHDR...x...x............ iCCPicc..H....XS....$$$.@(RBo.K.....6B.H(1$..;...ZP.`EWElk.dQ.........(.b...$..~...{..9s.s.N........Q5.r.y..@....&..@.!...@...( &&.@...S...P...\|..._E..p.@b .q%...G...8"q...^.7..'.L.Q.M1.....3..!.4.G.m.c. ...De.......b.s2...e...\..r.d_........U. [.}.'..>.F\|...#..E.J...(.=..,....l.....Q...XY..eM..1...aZT4d....\.......C..8. X3....r.....!...."....P.dX{4^..W.E...C..<IH.0...d6%...!.[.<....~\|."N.-_...Y..}IV\....~P..X.+..>s...Cc.6.Y.d8/./`E.qd.?>\1...a.c...L.......Q....C.ce....!....!{....&.@n........M./.Dy1..p.L...E.....A .0...40.d.Akom/.....l .....4.#..=Bx..../H< ...(..\|..2.U\.@..7_>".<..."@6.-.......C...90.l.d}?..:b.1..N.%Z.z./.G.?l...9..7{..B;......pg..P.C.L0.t..C..K.>;..zu..q..............p?8.+.~..t$.o...Ev$.dm.?....TlT\G..*.}-.q..T+h...<......#~..`G.f.4v.k.j..;..a-........1<[.<.,.G..\|.9eU.8V;.8~...y..y..%h.h.X...c....d.9....Np........C..#.K.t...x.@e.7...A..@..Mg.......h.H...........7E.....+..3p......q ..

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1351
Entropy (8bit):	7.670382994909587
Encrypted:	false
SSDEEP:	24:TUGlkOOEfDt79bJ9LiQuqFk1LfmB9jd75rMhvhiR8d02DVvovTdv1OG9RVhDnFiW:IqkOOEL19l9LiQu/1mjUiR8d0cvm31Rn
MD5:	47AB6E6899E70DF2FB55BE6044B40DBB
SHA1:	A0E5BED47D683A65733E1718316E58D4AF753B08
SHA-256:	249877417315EC69CFE02B4FEAD9E1C6BC7596A83FD6F858F6693E0615F63036
SHA-512:	98CDA4A9FD7B6ED2097A8B3F5FBBDB9BC2BDEBBAC049E382C3B74802D96B7A84129E49B9888F30A6D4DCA6C2810E0E8FE15301392A7CCC94F44EC2FFB5BB6C45
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/6nGdwtbmSCuuGF5fSCqvv0f-GOsp927ZXRFxC1NNEqlH-EwAGEqlHXN2rcarUTB7C8Tj8shbcg-9z-CO4XJGTVSaLbT5FPsq0rKET0ZIfWNsj9_f424=h120
Preview:	.PNG........IHDR...@...@......iq.....IDATx.....H.EG3..=f....M....cfff.....13..sL.N..T.x.qq......{p..........Tq.....yO.v..4....}.C.....u..f..;g.X6.G..=..Z..-sa...-....-....L...p..J.&...)..R.{..B=c^..!.S..Guo....3W9.4...=.."x......M.z.A\..Q........QV..D.HS.?....!.x.... ....Yhm].<..Q..l..\|.1#...SE8..}O..~..M.e..Q.... ,/.j.....P.f.d........3u.......=&. /.....`._iv.^}....Z..........I.Z..MY.O.....+..OZ......Z.B.G.?........!...X'l...>7.i_....K..t..i...y...Bs.......v2...L..T8.l"......+........W.....#...~...,.Jn.pl9V~..4.5.........1R}.ip...x2..3.u._e0.Z.y..\|u.f!.I.x...X....@bV,.0...w.......M.......X..+._3....YB...n...*O_.k.@Z...I..o+.........U..`.@.lk.."....`..ZOE."..E_%{.`.....L`.#f.....T4...#.....,.....b?Q..4uN..:&\C.........G.>"U.l...k2.......2.8}"m7.X.(.KD6.J_2.............v.1}....lj.b.]v7..O#.h....h........i..!{.W..&.........?.A....=..A........K..>.!.......@..97!........~_...`!..."..?..~G.`.].\s.A8...7U~..9.>...@.3....\...?.`.\|.0.....j..m.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	842
Entropy (8bit):	7.480374218163191
Encrypted:	false
SSDEEP:	12:6v/7YDJnuJYcc6hN7UqwRCRziOgxkIsWZQPxjMlsURBcSL2cMvl1SKBzCrZg:v9nIt7pwRWuO057ZYxolsaB12c+TSc26
MD5:	759852B344E417DF4CD2E9816AAF0331
SHA1:	AC557849E9BB2B27B29E8B80D822AC88CB4001A3
SHA-256:	D8DAEE51C41FA1C693E3223A9EFC35E152389A5E9B768375FF8CEEC611A8BFBE
SHA-512:	160CCF542E4BB33D6F5EC516456924FCDAE1966AF36D590CB956AED39D165F9E7D73DB5D101C2B63C99A15F59E9334F120C83CB965B5B4DC15FFA9CEECB38F47
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.....H.......IDATx...JTQ..?w.9>.HuQ.X:4.......].......2.".+EI.....?..?.......f.u\k..+..S.... .d.....[.....2.y...i!-.....Mf...&..X@u..t.Z6V"7.. ........@.K...D0Q.hp?m..2..).....d.(.d......Q"~p.yMp7-.5.q^....t).1..H.@z..}.8.2Tb.w.........Y......G0.<y...$....@.Y...b.'..w..z.O6.a......g.,........;\|.;...2..@..&.....7.)..`....Lr......+t...S......Te..0.~....\..\%...(.&..........T......5-...L........T....7..2.O......"l./.k.?....Z:.Z..\|&...z..`M.E.r.......2....a..Pq..7-..`..IA..r)hJ.[......W.-F.h......'..../..ii$.. Tn ....F.".X&.....SP..\.Z...5Q=..C.....:.,..)xS..C.l.=T.....#.'...P9...m.h.l..`.@k..........D.e/&.1.G...i MA...CE:-.J...)..$.Ny%[......../v.T..X........+s..!?._..\|`/Q....#^^i..tZ.R.(\|....M.@.....l..a?m.......@...o..-y...t...}.. ...>.K......2@.H@....K.f.....IEND.B`.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10420
Entropy (8bit):	7.955302711238991
Encrypted:	false
SSDEEP:	192:hp3vrzxTFre6u74Q6Pq6yD4UDPC8+V4Ezm2Mi3QRCKSp7z1KdNMk63c7w90tpq:hJvHxpS6u6PrgZTC8+JbMi4SHK6mtA
MD5:	E1AC9AC0DEDA516881E21B9897EEDAE4
SHA1:	DE656ADDAE2C331062F713B8706EB59A2AB4F190
SHA-256:	E9B5953D6179F9ED49EE9B4F81970E56FAA8D65AFB4F19AD3D84C0110C2F32C1
SHA-512:	882EAA7C1DBBD24C2FF94526C892230940F32D021A2284C0274F84F104BBEEFCCFDD85F802C23D50F1F884199864776A65FAE4D41D35CDEFCD7840078EB89836
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w200
Preview:	.PNG........IHDR..............X......pHYs...........~... .IDATx..{XSW...$\..............Z:U...BA.Q.F.7+.3..j...V..N...._/V.mu...B......=..@ . ...?B,H8..9'A..y\|$.9{...=k...^.......:"W.@ .3D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D .....6.N... ....Je...@...M..XE...RY..(.J.........c[ZZ.5.M ....6...JE"..B.@DD..6N.>..V...h...F]].......F..zpp....J.........8....(....FDDd............NQ.wLL....!..T..K.......a.......v.Z.-......2...@)M.MNwH.....P...P(.i4..:..811.IIIP.....0....J.T.;v.t..Y.\.?g0.>hll...iZp..@.@X.(5,,lYSSSZpp.x...J..iii.6..Z..%%%8p....;f..DZ.T.aMM.."..!.....(.\.....ttt.fff........j...E,......jjjV.4...v.4..@....../vs..EQ.....WWWO.:u222..S...g.u.....7.......3`..\|hV.....".v(.J....i..1.....(..n.t3T*.v....bDDD....~.....,.Wa.H..k..M....-....@&.qk...0.._O.b..Y 4...F.......(...2d.......&................T.........CQTPJJ.G.N,X....2Q^^....(...[..G.........s}...v.]... .f..x......./.\|.%

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8005
Entropy (8bit):	7.932879807851235
Encrypted:	false
SSDEEP:	192:NqJV3s0+3afbOkpJYFOFrxRA9nvpvAk/RH+h80d4D:ET3KSbpoOFNRw6k/Rehxs
MD5:	82F73E47F29A0B0B6EA0AC8A67419E3F
SHA1:	CAD2C14184D3EB8CBF94E98EE178362F9D494169
SHA-256:	A51842A1727B816A7D5B2C8666EAF8EC5F6C00A60972812E3DB65ED315FDEE77
SHA-512:	2D25A171AC3A8496035E38E4E823DF6CBD8CE1C1FC89B36F13EF3E46F5831E1AFAF1D796488BCD70C3DD1D0A489FE6752C01C62225CDD2A321BB53BBC33C83B6
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/LteTgkerljFQFADjcuSo5-hiLDlUMnxk-QP08xyTBWi-SxZUSDbqeBS-hjK5Gbetam9PLtnpbdMbHBTpR7zBzKxrB6-c-ynRMH6yrcTKaZOVlnLvBc4=h120
Preview:	.PNG........IHDR...x...x.....9d6....NeXIfMM..................>...........F.(.............................H.......H....o.#.....IDATx..y.l.U..k.sj.u.7.....=.q.1.p....ID...`....bA.%...# .(....DBB$..&)Q.K$ .;.!.......M......T.9g.....T.....k.R}OG...3}{.....'.......>....V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9..~.]..=..#.^.5"._..})"...^.a..Vp..;.....t.4..B0n.........@6.d..L.Q..!..hiL{..s.........`.`A...c.+..........#...-T<..1...!..$...:.6.a....qv..3m.......jK_,..M............kC.I.q.E....8.f.....5.....'....>.......Z...},"...M......7..c.^.....710....:D.k4.5......J.d.M..Y`I.d....%W.?r....O....9w.=f.z.{.}....k.j.8..%_zj.........8f.!..3X.~.....O..\...f......x.a....._J....H.@.".....B..@6-........p.........r...w....7i..]Y...=....ds.V.\...#....t..V.gr;.....O.......h.T.V.0...$..W..........W&b.I..y......AZ.Y... Y`o.........!S.S4.$.p#.E<..=....L...'....r....L..a:I..&..;....z......Z

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1673)
Category:	downloaded
Size (bytes):	37504
Entropy (8bit):	5.390858346992638
Encrypted:	false
SSDEEP:	768:D82nK50a8Umyae5PUAySlpAgoy4lZhY014MgiJ6S5lT5X7/wP1Madk7d:N+2qlp0hY01pZR/X7Zay
MD5:	9A6A1B4CB888CFC0879FF88B924A08F3
SHA1:	DC4E830A72047A0A773B5026795DF2025AB58393
SHA-256:	5AD33DB59B976C11B46A40E0664388A5ECE4247F891A39F5BBE8966B64015F9F
SHA-512:	2385CD0D838F17D90C9AE0D6FD66CFBA01C27EF48618E58699CC4FBD0E743ED329426A788CF89DE46D698E8E4163059F5949E61F90342A89DA01F290791F4A37
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-account-creation-evolution/_/js/k=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.en.gHw4OasNpuE.es5.O/ck=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.bWe33vrUwGU.L.B1.O/am=AQACAzoHQTwX58AHiBCGAQAAAAAgAACYMQBgBg/d=1/exm=_b,_tp/excm=_b,_tp,nameview/ed=1/wt=2/ujg=1/rs=ADR-Iupodx3aNP3Fz-JEYFGw_WCeBOKC5w/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountLifecyclePlatformSignupUi=this.default_AccountLifecyclePlatformSignupUi\|\|{};(function(_){var window=this;.try{._.gma=function(a){var b=0,c;for(c in a)b++;return b};_.hma=function(a){return a.Wg&&"function"==typeof a.Wg?a.Wg():_.ja(a)\|\|"string"===typeof a?a.length:_.gma(a)};_.Rq=function(a){if(a.oh&&"function"==typeof a.oh)return a.oh();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ja(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.pb(a)};._.ima=function(a){if(a.Kh&&"function"==typeof a.Kh)return a.Kh();if(!a.oh\|\|"function"!=typeof a.oh){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ja(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.qb(a)}}};.var lma,mma,jma,kma,ar,cr,vma,pma,rma,qma,uma

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	151
Entropy (8bit):	4.759834251877127
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KHEjW0V8K6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiq9WtK34A
MD5:	32860D35B4FADDE08D41D77C1408989B
SHA1:	CFFFF005A15BFB0706A26F7113B030247DB09538
SHA-256:	5EB20EA00CD2180FC1422514E2CDCBB9BD5DEB445720E8ACCD81249B22A9E8B7
SHA-512:	6E805F1E73381C3ED5621D0653297544EF15538C757FA5A0B5E7CECF83B47EC85539883EED48C08AE1CF2A03BB979289180DB5D4B506696149F345E234279025
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /battery_info</pre>.</body>.</html>.

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (693)
Category:	downloaded
Size (bytes):	3191
Entropy (8bit):	5.335408822563256
Encrypted:	false
SSDEEP:	48:w7YYCHw8Q1gNCx4XQHFGU0dNQ8jsawuOu5kVEvbQfujq7+43tNsg6crI:wknQzgNAqBdOPvuq+Qfujqvt6II
MD5:	A992770FFBC9F07518336BBF97B2EA44
SHA1:	1AF45D7FBDF45E70E0191CE8F03401E3BA7A3D63
SHA-256:	312CBE866D825163B2F25B2AFD59EE339C966E890B97D536DABB42BDE2EE6E90
SHA-512:	5DD8A816E1180EF7ED163C761AE1B6092361E8E4BDB5A0057C235404348EA578592B2FCC7C755ACE5D163B57341CB83E95517CFCC55D6648719F022C7629844E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-account-creation-evolution/_/js/k=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.en.gHw4OasNpuE.es5.O/ck=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.bWe33vrUwGU.L.B1.O/am=AQACAzoHQTwX58AHiBCGAQAAAAAgAACYMQBgBg/d=1/exm=AvtSve,E87wgc,EFQ78c,GmCzyb,I6YDgd,IZT63,IwHAB,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VBiA0d,WpP9Yc,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,bm51tf,byfTOb,f8Gu1e,hc6Ubd,inNHtf,joVoKf,kibjWe,lsjVmc,ltDFwf,lwddkf,m9oV,n73qwf,oLggrd,pxq3x,qPYxq,qjNilb,qmdT9,rmumx,siKnQd,soHxf,tUnxGc,uzifod,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,nameview/ed=1/wt=2/ujg=1/rs=ADR-Iupodx3aNP3Fz-JEYFGw_WCeBOKC5w/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountLifecyclePlatformSignupUi=this.default_AccountLifecyclePlatformSignupUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var az=function(a){_.H.call(this,a.Ea)};_.z(az,_.H);az.Ma=_.H.Ma;az.Ba=_.H.Ba;az.prototype.EL=function(a){return _.Xe(this,{Za:{zM:_.Pl}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.yj(function(e){window._wjdc=function(f){d(f);e(zza(f,b,a))}}):zza(c,b,a)})};var zza=function(a,b,c){return(a=a&&a[c])?a:b.Za.zM.EL(c)};.az.prototype.aa=function(a,b){var c=_.Kqa(b).ji;if(c.startsWith("$")){var d=_.ap.get(a);_.mt[b]&&(d\|\|(d={},_.ap.set(a,d)),d[c]=_.mt[b],delete _.mt[b],_.nt--);if(d)if(a=d[c])b=_.We(a);else throw Error("Ob`"+b);else b=null}else b=null;return b};_.hu(_.ida,az);._.m();._.k("SNUn3");._.yza=new _.lf(_.xg);._.m();._.k("RMhBfe");.var Aza=function(a,b){a=_.cpa(a,b);return 0==a.length?null:a[0].ctor},Bza=function(){return Object.values(_.is).reduce(function(a,b){return a+Object.keys(b).length},0)},Cza=

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5805
Entropy (8bit):	7.9542006310437126
Encrypted:	false
SSDEEP:	96:t9UzyN3uV9rFvd89BSK+b+n3P/WB64548U3zuH1pgD/ln5KCKH:/U2N+V9rj8DSK+bB5DKuH1oln5lq
MD5:	D0656A971972F0807AB746BE522ADD05
SHA1:	5DEB386A5C5481D9A4AE91E37E175A4E656AE245
SHA-256:	C7B0BC63C6F5631DADD177E4EA287231713A0FF78A36213806ACC9BF760A4D4E
SHA-512:	6DC7991439E91FF4901ACF4AB19FBFC83A9B9E5CB26ABB9987FA72937C84609407A894806B2E7802419C7A550C7F3075DCE0DA33063705ECC51F8F957A6D3D79
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/X7G-hd59XdxQgAu0Pg3jUf5LoAQQqSWjyKZSk0lvDBnRdboJB3f6rLhL9PSJLNy-ONa8vUba3hHAB3dmf35jpCuWWnabyN0BBDYYoXLZf1sMNPthFg=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....dIDATx..y....?.{o/4K./..(.`.d......8..I.8.3.e.%...8nAt.h.'.8O6......q.lFE.D.PD.f...Uu......t..[....y.~.....U.:...s.D..%J.)Rh.r.....2M5$..16.5.. .D...E."&....'..=/u.WnK..@P....=Y.=kf..Vc..F..F9i..~80..:T..P...A.BU2j.RF....m.........1...<.W.]...S.."=M..:..H...&.z...?......H.[RE...!i...k..".;.'b.6o".5..$..>...0...9=A.:o.D\..:ew&..Q..w>v].............D....H..<.f..^..sF.....3OD......iIk..D..........`w.t.. .pyQ.[..H...)6.c:....F..#.....DE.......V.{...,.'V>.4.......g.8....fnK.c.FD)>a[#.~....=.%..!Y....-.{..._&.0..._V...R......=..2 .nu..7....]..K...PT..nE..mO..y..lk..X......<.j1...%..z..k\|.....a[#.U..1..Y.......C>.....w.ra.$...k..'....}yr.?..~....?.....c8.m......y.yj....\|..=c.u.}{S...Pm.b...j}J..G>.....E.^...... ..B.c>u..=..omj..["O...HGe+2.u...H8wn......m..H.6......x.,_.;.;..)z........%q..*$.qj...8....8=.y.. \|sW..4.s;-.A....>Y..7Q..e.-:o........s...I..s.,_u.P.....`=c.4..+.%q;...

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 293, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	214394
Entropy (8bit):	7.995317950907745
Encrypted:	true
SSDEEP:	6144:pL5p9dy3HvguZH/fGRdPYd7UChwbUbexbwdbS5sP5er:FH9dyXvguZ/fMfwwbwNGQi
MD5:	27CC1E3DFD83DF4EECCD96E3B8A21718
SHA1:	0922E85980536F44B107135FBC3450C4FFA17574
SHA-256:	1AA4E8B536EAA40010CC9FD5C12971EAF198AE431724247AE8B369A6A3C3EAC7
SHA-512:	8DB4C77E36A724AFC3EA7C008CD0F86A1D9DA0940B052ABCD13A6945E5A29F9D0E6DD006D1B28CAC0EB75D0FF08374BA37CA599EAD37ACA0D3AFC115E4E30D41
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/bl7lc5NGrZQEr-cUfR-Gur5eANjLuMdaTUZP9yYxNneDJjHdzbRfd2Mfdx9L1ecDSXLbSj3kmNlkeg5pu83uUov2jx4xzHi2Akotz5lIKABiRlmJYFg?=w1440
Preview:	.PNG........IHDR.......%.......Z.....sBIT....\|.d... .IDATx...i.f.u..;u.g{.~{...m...iq.H..M...I..(..... A.#1..1. ..8A..K..0.D."..,...E$..p...3..^fzzz}...}.{..nm.y...L?.u.N.:..O.:UW~......D@DPJ..%.."...>..3{.....2........hT......,- .1.b.4.......}..`.1&......_...)..]..k.4.4e<......8.Y.~.........1Q...I%shum6....Kt;f.I...qJ..4{....o...e[mF..}M.rE.v.=ns.....n....-..G*...$...(......_..{..qDxh............oo...a...u......R......Si..po...p...d.'..N...,..%pm..Z.............k~u..^.F......s..[...5.s.....^T.tOsq..^.W..\|.D...g..r....M.1lPr....S.;.%>.R........&.s.U...W.Dc..mL,...q.....g].m.......P..?\..H.`......SM.z..Ibq\|c.i@.....m.rD.z.}..)..L..;..k........0q.L..m..q.....L.....k.C.0&.M...VzSadF.=M.=...+...s....W..R...5.hLx....1...Q..I...^.$S.....w_.._b<.'..~.......,/cLM]..<cyy...v....Oy..).S.....\|..O0.W.#..,.Z..". LFS...c.Ap.@2....4..F.3....%q..Z2..0M.19../.@......7.&....4..H.9..6L$.3...f....:D."1X..@&.....sz.6<`..h..c....3&.sc../.c.~'u;.B..v....S.7.l

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	181
Entropy (8bit):	5.052245007941961
Encrypted:	false
SSDEEP:	3:qTCJLxoRucN+OjTcvXjXRH0DDmJS4RKb5KVEriqGQcFFuIOUoLRFQcRUlypqURL2:qTCJFou1i3mc4slTHmcIgtbNRLprTY
MD5:	10C8AED69BDAED5FA3120401608F0899
SHA1:	6E5A7025855BFB087B556203D18D24843EBBF804
SHA-256:	6F62D85EF6ED53BC368C77B6A47394A41F3B16D9E07D0B8761E726784EEBCEB4
SHA-512:	E2BAD6E1B1AF68AB4511264A4A8506FFFC4B07936BA3D1C5E809926E7E1741AA0DC1E7991848BD21380F12C962E6C6A7BA74FE82FE24EE762AC736A1DE29B045
Malicious:	false
Reputation:	low
Preview:	<svg id="expand-more" width="18" height="18" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path fill="#5f6368" d="M5.41 7.59L4 9l8 8 8-8-1.41-1.41L12 14.17"></path></svg>

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.476409765557392
Encrypted:	false
SSDEEP:	3:HKnthnlP:qtT
MD5:	819B69E39EB07A33260D1CB7C6602B65
SHA1:	1460D3775DB13956E5BBCA4E2AC1D6D3194B575C
SHA-256:	B08241EBF122168672648B99F3398E5EDBA7592567E9A7C3F502789E8DECB183
SHA-512:	D3166256CA22C517F5193BBE35A41594A458C6F6BD679A717A6C765F95B061B802C5C12A20BF43C222FBEDB2F77AFDC538247678BE936EEB136000FC4D2E8C12
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnal8bI1t_HMRIFDQbtu_8SEAkaIlEjlsLtKRIFDWlIR0c=?alt=proto
Preview:	CgkKBw0G7bv/GgAKCQoHDWlIR0caAA==

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 900x507, components 3
Category:	dropped
Size (bytes):	18172
Entropy (8bit):	7.553072132887418
Encrypted:	false
SSDEEP:	384:QEMOWlDqKffzH3/feSHHJ6CrwOHcEM/FG0D61Dzc2rL:QEl8frPAAwO8EM/M1f9
MD5:	0C014E003E033F8C10A0C3E19AB1A82C
SHA1:	01DA7351BB0A23C2A84A855536DB12CB3A409E7C
SHA-256:	9483976D1C39A25780BB7E5DB83091DA798E16C5FC8273CA48573AAD5AA6B4E2
SHA-512:	85D7D8F356C66E45DB92ECF8777A3209C5EE284A9D54750CC18186224D4E4BCC8F19B5212EDAB53B8DA007FCC280CC18BBABCA4AF81AB39F602DAA71D6E06886
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................................................................................................................................".........................................\........................!1....AQqs..234ar....."#$5B.....Rt...CSb......%Du......c...ETe....................................:........................13..!2AQqr......4Ra."B.....b................?..F..^.............................................................................................................................................................................................................x..>.@.w.E=.T..U..p.n......by..f'.5...t.7i...S.O...8.7.....F..?.r..e.....j..1..G...~.6wZ.-.}.T8..g.....p..E..."...E_.}.....];...}J~.....f.j........>.t6F...J..&....N...g.......\X...}.E........QV....'.*..g:.&.U[.uD_...=.Nq.5..Q.U3......u.T..=..r8.M%E{'..[D.N.......................................................................zN.4Mu....UW%4.,.6.Q.)...(..uC...bfx.5.2.t..

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3727
Entropy (8bit):	7.926195838805319
Encrypted:	false
SSDEEP:	48:yCOy3BuJexK6mMkPGleW2APedZyg4AgZi1jckYm7zMkYQrYlpbgAaAlCP0dmw1qy:9ODJegftIWHyOFMkYQElGY00owsdOwS
MD5:	505B44CE71DF19C29E8EC9DD5DC4625B
SHA1:	F582F2352C4AA480F0AFA8C957D54C49687D9F9F
SHA-256:	D06F07FCBD95934239ED9A2391850F91CCB04BA60AF99672532E77D9B83462F3
SHA-512:	DF758AC62C6C59039E2EA4A45A8F7A5B55A6116304A2E1D33D73329B10A4B7B3E79731B696AAA3FA6AEA2266A794B6180DA1B70164A2DA84478D2E220F425134
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/AGsg9hOAylBkWuFrfSgOt8psYWcr3b-vZcmIVk0ocwx7KAVSu--tg1ZIAUSL7nAbORTHI5eZaweHYVPMJu5ac8Xw7GP_WiCs1w60=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....FIDATx..i.\.u....uO..O.vE.Hb.e#...b0t#..v.Hv.e.M....).J)r.b..6..H.....F..]B=.A.!..'...ZL.....@.%43....h. ...7.}....=.t.>..=..{!"""""""""""""""""b"..6.2...)./...f..u/...c...&.t...q.+.....J....a..E..o^.s..Q%F..TEof5fl.-......ZqO.7S..z...68C.'.....,.@k.5.A.X.....w.2...[U.......w.o...s...t...............[,}..1........3...v.........-....O\.2<.5..o...+q.&........9.PZ.j...F8..!.G@...4$!U7.o....8...o.{..+9......O...+.....%.Q.p.v....#h.....j.u.c..`.[.....>...r../....<.6...M:JWmE.....;c........~U.."..&/.,.....Ub...VY^s. {.-.............2. 1.....<&<..Y.\f.....C2.n.K..N.qY..r=.R\&9.w..g.....k.!Lmu7.Q...z....L.{.8#.....f.j+@m....b......R..D.J...........4.:..8..?..v....^...x.i.[.S.>.I..9".....S..$b...G]P.`.a......0..c)......\|P;\..s.='.$L.o..J.M{.y..7EZ!..V..)...S..p..[.. ..7.x.e.......K.-.q..H.B..a.(.i...v.E..D.X..*........Vk.P.n..?.3.G..2.8.7.W@.'..M-.........n<.e.H...e....NVo... `z.G....Mg.#.8q.+.z.M..i..

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 173 x 173, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	6616
Entropy (8bit):	7.919664674565399
Encrypted:	false
SSDEEP:	192:Xw5g5m1c4pSQ+SNMomZRfbREvtJVd09TSfr1n:XQg5m1pMSN5mZRfb6FJVd+TSfrZ
MD5:	4D2A4FB4AE0A5F1D7A5DCBA60CE51BD8
SHA1:	4290B7B12BD06CF826F62BD8A9C40E301A68AA0E
SHA-256:	8B644ACBFA18779FC0C5D022EC54494C47BC7C5A6DC11A8ADC15CF5A86542E4B
SHA-512:	F1DF233125454E3074C513DDEEA1C063D5B163E6BA3DB4F0A7217CDB72CFD40AADE6D1B21C4C0E7CC0778D139E5493487F05A50B93ABBC978C98349041481BD8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:561D935198F211E58A51B899B9247D04" xmpMM:DocumentID="xmp.did:561D935298F211E58A51B899B9247D04"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:561D934F98F211E58A51B899B9247D04" stRef:documentID="xmp.did:561D935098F211E58A51B899B9247D04"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..@....LIDATx.T;..0..#..v..,.e..C.:.=I.............U....ZzH.........Q".....K&wC(.W..q_.oFD.+..Sm..m.}H.8/.IW..?pP..

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	817
Entropy (8bit):	7.381646783346233
Encrypted:	false
SSDEEP:	12:6v/79B/6Ts/G43jjRB4iS/4bSHOOO4u7zzzzzzzbgkokpAfdhXJ2/oi/3ypm353o:O/6+3xHNt7zzzzzzzbo5lj726m35gz3
MD5:	8241731FF6D4C4B54D50DDB229ABD5AD
SHA1:	732D211AA1407DF9DD3E68728D62A1F92286A716
SHA-256:	D89908B7F4188864173BBDB3021BAF269468E9117BB0717CAA9823E4578961D0
SHA-512:	AC847205DCE1EB6E0F9B21E935B10C2F4C939B0F1AD38D62C2DD9DAFE87AF4D4D6A0F9D79F30F1948D7D627136D2DFD90322955023818A1C42250202CF328AF0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs.................sRGB.........gAMA......a.....IDATx...=N[A...cH"P.R......l.%x!I.A.....(BKI..D..@F...5.g.3..#.s..wl...L^...V...,....,....,....,...>Y.....{\|gg.'...6...\|...M...7.........}..6...W.$z.>.?'.....+.'.O...U.....^.]>.'\|...f...W..#.8..#...ef.[.j....+X....X....X....X....X\..,.K...:.E.N....~N..b..L....;.2.E....}..C)s_..G`q..G`q..G`q..G`q..G`q..G`q..G`q..G`q..G`q...}...9P..,....,....,.....\|6O...t.....(...`.n..ism.v.W.q7.....I..N.'....K4q.....U.L.6..&n;.........^.....H`...=0q}......:.].\.>e.L\.F.&.o........A.......KR`..':0q...8w..u.:kh..~g...f.S...p....b"..t....?......N..A.....pbY.V.......W.J.j..#.....L..jG&p.5#...Z...P...n.td.;P22..(......L`grG&.C9#..\...X...vnld.w`Ld.wbhd.wdHdfW;.:..L.8.hq..G`q..G`q..G`q....w..7y^.....7.....IEND.B`.

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3695
Entropy (8bit):	7.88804280702612
Encrypted:	false
SSDEEP:	48:t9Gxmk27ifs6xJtIQoB3oUOOVjUh2Hi4ak5+ZcY1o/jSqJvNReAn4af0h2Trfolo:Kds6x0QkVjZnakMcmqj4afY2TrQLX85P
MD5:	C87773A3095A6870E4842E5E07869466
SHA1:	C51BF4EEE9A05F5EB0D41C53223E7B6F5A1CD39E
SHA-256:	BBD8CA8AC70BCEED0F225E8F302C685A9297AC68C3518BCE9240312572081EC4
SHA-512:	2C927189211F93C5C4E3FD7799FC56A8AC80B165EB38F2E57EEDAAF8E23D37518B8E82FD579E51503214DD189AF25A96BB3E0F3CE46948DB06BBAF3BDC44D91B
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/kSVhJx6xNAhqot_OjnzSAp8kyKtL9nW65nqObijdjYcNfqDn4bLx-1g_1h4rz0maXRwJp6K4AEDCQi8dOg_tn_Y80R3NjNXbUN6Hag=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....&IDATx..y.\E..?o.2.......Q!....$......c.r(Z.h...Pb.......((q5....q..B,`...Q.>...H.%{.7...'E........Tmm..t.o......5$$$$$$$D....Ab...`2..y......Y't...C'.]............!.N..s.....sF.y%dSC.C#.]...y........P..4...@..../.].........q.U..5.2...:o..0ZF..vA..,...>.....{...NQ..1b...z.p#p.0Jq.e.1`..u.U\w..H........gX..7.{rj.$.-.I.........\...'.].......Y..bD2..h..7....D...F.Y.A...i=.GD#.@WD..b..l....Fh.x....a.R....+.#b....}......\|2j;...o.Fx!..W.(..........^.....P.....Fm..b-.].D.3...]88j...[.+^....Fm....../.V`...S@:jC.0=j...K.+......qcC..x!..........Q.....l....OQ.&V..R..x!V........^k>...^.....kg.F...Q.....l.....8.3.7.....Bl...A.....6.+.........q..#....D..].5.jA....Q. C..#."...:.<R.g#....\|!.w.v..]..Q.!..Swas$..m....i.e.y+.....d......;...\f@E[.EU......x?{....Y..f.2.'.?R.=.....4...&.m.Y.].'...-.n.....>...`..Y`..3.f.:...<.!n#..2.$....p1.qk..H....{...E...k.R#./[.... f._...r=....Q.e..R0.I...[....\|....9p9.....\.\o.

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 173 x 173, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	6616
Entropy (8bit):	7.919664674565399
Encrypted:	false
SSDEEP:	192:Xw5g5m1c4pSQ+SNMomZRfbREvtJVd09TSfr1n:XQg5m1pMSN5mZRfb6FJVd+TSfrZ
MD5:	4D2A4FB4AE0A5F1D7A5DCBA60CE51BD8
SHA1:	4290B7B12BD06CF826F62BD8A9C40E301A68AA0E
SHA-256:	8B644ACBFA18779FC0C5D022EC54494C47BC7C5A6DC11A8ADC15CF5A86542E4B
SHA-512:	F1DF233125454E3074C513DDEEA1C063D5B163E6BA3DB4F0A7217CDB72CFD40AADE6D1B21C4C0E7CC0778D139E5493487F05A50B93ABBC978C98349041481BD8
Malicious:	false
Reputation:	low
URL:	https://login-vip.replit.app/vip/avatar.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:561D935198F211E58A51B899B9247D04" xmpMM:DocumentID="xmp.did:561D935298F211E58A51B899B9247D04"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:561D934F98F211E58A51B899B9247D04" stRef:documentID="xmp.did:561D935098F211E58A51B899B9247D04"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..@....LIDATx.T;..0..#..v..,.e..C.:.=I.............U....ZzH.........Q".....K&wC(.W..q_.oFD.+..Sm..m.}H.8/.IW..?pP..

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5149
Entropy (8bit):	7.938908247992652
Encrypted:	false
SSDEEP:	96:Q1McYoRBV6IMRNsIA6wqmr2N0P3f+zVUW3gn2sLODlUndH+zT/v3a4i57FIUnwFn:KfP6I+h/vmCm+zi5n262lgdezTq4ZUnq
MD5:	D3BFE9C5E7EF5F9212E57B1770A93DB8
SHA1:	D0BAF004503CFC8E723E97E5A9BBD6F425F66D51
SHA-256:	9C33BA90C27256BA2087C4F2048543ACC581937BA7A72F115E57B845B576A5D7
SHA-512:	BB39C7E255CA00FE5357FFC28DBCB76C5B1C2784F641ADE53237714DE7F43410CB396832D37A982B527E3A02E44340EFEB9ACFF685E4A16485194970CC0AF5B3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..]{..Uz.}}g..X..1....bA...P[....&lEA.d...n\.Z.U..#U...p..%...aK+.qcI.].....0.K.... 0........wN..,s......o........;.e\F.../r...S...I.,m.....T..v..d.%)xi..$...Jah.r$.."....ad.r$..2. ......I...fB...i.$J.`.&0.K[.$QR.+...t.-G.()....S2.A...V.<...^yEW.r$..I.^~..V.=.j.%S...;+0.D.yX..oH[..P2.3p...C.3S.'1...].........J[..P2..:.m:.....~43my.BI..x....7U.X.e.W...J.%A0....@..w.&O.(....}.......p.D...J.EOp.r.v.{.\|b..b.p....<.ui.o.=.`<..k.o....3..p...%..'..u.\|&...0&..8vh.?.*\.(j..^.?.y....\|.L..:..]....i.O.5.....;.g.L........yG.........e...Y..0f...:....).`.h..q.q].d.\|M&...@..?.....-o.@i...,Z.[.7.d...L.E.....X..9.[W<q..JW..GQj0......V.B...c=....KR.5.(:.^...o......h........f.-f`..?....t4.../.N..m_-..Z..S...2.&.#@aMJb..EEp.2n....k...6$rx..k.sb...m..\|.E..Z..".@.U>Ud.n0.lR$......W.....D.....E.yiN.TI.84.d.Wa4..x...}v../.c.4".(. .q)Ok9.U.E ..uyR...bR$..dR&.....Oz.n.r...E....4....&.....GR...z4.rMP..#t.h.0...;...EKyUO

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Category:	dropped
Size (bytes):	25064
Entropy (8bit):	7.89335153779761
Encrypted:	false
SSDEEP:	768:c1kHHBAqjQg2UhM+wRF3ez48/Jq5xwRMqE:cYf2UhM/FniwxwRVE
MD5:	035CEE3B64033FC67A73E691D092053E
SHA1:	EDF1F6A65F06FB1730C5EBF0BD65824B02860C13
SHA-256:	01247CAD05C2A06D891C9150CCFEF3632A512588F9A9CF3A4BFA241640BDE924
SHA-512:	A212A8D9F6550A42D9A4A0E1C45FEAE6E042BC59E416E84C32C9EE77157B968779AF364B16D5734B045333C36F277A5A8AA27D50258E1A2FBDE557885F0CE07C
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................................................................................................................."........................................V.......................!..1AQ.aq......"R...Bb.....#2cdr......Ss...$%3CD....45...Tt.E..............................0........................!1Q.A."2aq.....R...b#............?..........................................................................................................................................................................................................................................................................................................................S...u}...^....y&.........T.[y7.eT........v.w.7A.P63..].y...Ub..Z.W......Dg....^O..?._...>.^..].%.../'.../.....H./...l.....'...../........H....e....o..g.../&..}....&..}..F.8...=.>L.H...~K.I....q...zD\|....?....~..?.............)%.....(....d....E.....L..D....F.8...==y%.'...g.%.'...M.8...=C.%.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1366
Entropy (8bit):	7.691383605236124
Encrypted:	false
SSDEEP:	24:AXfRSOvVfz9i4aYnlzzM/gC5L17rEdMC44W+KrFPazxG:YF79tlzz7GdEMC4XvxOG
MD5:	96749937F159FC2ED45E2E2733F439FE
SHA1:	C6F5FA809B17F9FC2EF50ECEC28BB257209BE6BE
SHA-256:	71BD8D7C6185CBF1E744B627B3BAAC348F610AE8DD7DDC73410FD23400D72E8D
SHA-512:	C9D5681E1D40587B111F1D82491CF15BDE88A863400772A7A4EFE0F0FEF759DF5D0EA12AAC7A915AE421C83C2448EC01608727D9C6ADFA93298231D0385D5E16
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx....k\U.....if251/..E...b(..I].......QI....6.E.. .....J[+..1.-...i..:1.d...E..f........].=.2..C.N."""".g\|_`p....^........Tf....x...G.'}?..-...\d........c...$...0iL...3...r......=.2...q.1...`l...m..L..6.\|.....q5rO.7.....J.=.6K..D....,....$}.2].&v.8...........`.."..9......xm..^..v../...v.b`9./...n.b`y../..C............/../..........Id.b.x.>x1p.b...8...^...X./.N.......u.b..q..Y8....... .9-}`H..Z2.t.....o.....]..)H....r..h..........K..V....c..1p..8p..8...........c......5......w..P.....ug1~.....Z.K.&.Su...o.:.6.L^..Ee...C6..+G.....s.:>z.{\|...Z.S..Nu....l...\..(ep........"....P.:.......m....~.!...q...-..DV.......1...q.I.Y\)]/7.....Ov...z..n.?..E....[[........8ly..%...Y....B6.u.S9....K>>S.!...?......B..........u......Y..E...O.VI.e"`~..7^;..^.\|1..c_...{.~.........M^}.[...a....UD-.^vE._w{.."....E...G.Ql..).}.7Z7..\|.T&j.]If..m..k_.'K#...D..{..'..P.....%8.......?...4....6.......L..1...

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 407 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	433358
Entropy (8bit):	7.9752646890716035
Encrypted:	false
SSDEEP:	12288:hzjJKSYbNxFA+HOwofDfkAOPKTNVTo3KW592b:hhKSYbvFA+u/zNTNVTAfH2b
MD5:	80D1789A0B164DC8CFA6E8EBD8594BA1
SHA1:	07B60660052784719D562C124E557CB0ED02FD03
SHA-256:	1EBCC1CB966A499369CEB7E392FD1E2CBF5747629CB73EAE0B332CEF47FC0E61
SHA-512:	C908AE3B78EC545215FC483F26135F3717643CC849A674612FD74460DE252C50F5CDE7339BBEF33A5C7E39092322E23A2219DDDBB7BBCEDF45F06D5D6981B2B4
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/kQDv-46ToDkqXJ2DIlr7hKXKalQvL0NJy4oGIhNlUkxX95btXayCKNoZuaY_KT-6U8-Iz35FlDZXRd1U3bNFo99a3k0-vwIIbtEIStTKYwD_UxNkjA
Preview:	.PNG........IHDR.............N.!k....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2.. .IDATx..Y.oY~..Y....oM]U..c.;q..K!...H....x.AH(A.#.H. .0...B...C..)@....q<.S..U......{\..k..9H.D2Uv.]R......7\|....]?...._.....:../..}..N...m....:....u.j$.Z..],....1IDR.U3q..i..x...f...c...[../..a......(....*SJ......J...;Jja.<.J......{.H3...>.FtVgI..}W%.A.#..z...."x'CM:.s..7M......R.z..F.......g.....w.b%.\|..\..m....#t.]..j!_I!o...(%.....^.a.i...m'@..K.C%.3O..x-\|.....]).8xw-.1....T&T8)...u..!..${.u~...,..w..V.J..\|8...l&...?....._..{..c.y.5>Ro.......}.o.?x...y0-&........!tR..@.\.].T.....J..\|..Q./D.\|..(q.a......R.. .p7@.].....ri... .g...x.....+........X...".....Q.. ..a...y...s..D....!.D!.J..'...B......)...4m.F.@8.R.G......v..H.&.... . .@...6h...Zk.RR7.Y....x.1..y..6x.s %.s.D.=..w.".A.....a.\|.......C.l'.Z.Q.!......)...v..)....j..B..u.m.,..)..!.!xI..A .7.;M.....JJ-:kO].RI../..e..h%7...3..O.

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4924, version 1.0
Category:	downloaded
Size (bytes):	4924
Entropy (8bit):	7.951833409122959
Encrypted:	false
SSDEEP:	96:ObTGgewjz5RrXFpuoDKNUEKCM3RiM826IP7K:ObpxUAhj3Ug7K
MD5:	3A941FC72BF9E9786320389B5E7FED6F
SHA1:	A27BCE58BA261EAA37D538FBD7A0984414E8E4AE
SHA-256:	F3A5EA76A1AF88E638AEBB15539E7DB15484C87D405309492D5A92A2FEC85849
SHA-512:	C118B841435A69C0D5594FACDC441E98A392D63EA0D746AFEBFE3AD7C424C8166D021AFE7D86C6DAAA10B8829B9F5DCC22E01276735402C541488D8D165FD2A7
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2
Preview:	wOF2.......<......+..................................d..`.`..:......B..^..6.$..8. .....:....%EFm7iU<..O...q.q-M..Q.6%.E...DeC7jl..S.....0'..L?4.....wYt...K...}.?q.$.<\|?...0.......K&I=...t....>\?r..U.HUs.J.....IxL\|..K......o..#...YAX..B@..v3.l.b.......H~E l..`..O.....$.......vp^...2....r.O7..?6S.$%.!. Q..C..El7...M.&v.,.....o:@..~T,.Y...%..1i..........@6{a.1..uO......p...f7......]E...d.~"T..#..v.!.a...g...G..q..b.1..._.B.........(.b.x... .A...(.b...i..3.A,V....b%..j...$... 6.Cl.....h0.4..G..4..K..........:.E .o...?....t.<Wa.P1...1.....!.!4-..ISc1X,..&.K..)..>...e3PA,.G...Y!.T.\.v..s.Y#U" e}...G..s;5..Z....C=Osp..48`.....]......P)~G.....@.....f...H.C. .~.#..]j..P.....Xq..qA....N.g\...t2...%..@...6cf.... .d..s....}P..f..C.S1.dA.S.3W...b..{...j.q=...E.`.4........4...;.O...b.<Q.4vZ...6k_.b.(..B..l+Q....l2.Ue..<....B*.3..sE.b...d..H_:....L..D.+..%^u.....f..W%.A$Y.ti../_....l......1..?.wh......de!.KEH..ZpN.........+QP\|o..[.<.!...o.s..."\|4..7.....m

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 120x120, components 3
Category:	dropped
Size (bytes):	7124
Entropy (8bit):	7.565676034080946
Encrypted:	false
SSDEEP:	96:t6MT0D5MdtbZPAVwzVwmSA2UJWhzEd+GVG5n8oCWciGeqqVpFeQiN9/6/SX:XYNMtKwZwUJWx9nJCW/t2B8aX
MD5:	347536242E2AEB5CB09672220066D45F
SHA1:	002AE7E5866BE9904702A7DFC9BBAD74DA8C25D5
SHA-256:	C9DD166FEB248045ACF61FCEFECA21CC42ECB37CF0753F16B1DEB2731AE5E677
SHA-512:	1A6FEA037A534F5759D6B6C2A99FFD939EA04B3213474C74461E6BE7A13A53CE2E54614B8DA2DBA0621A86B143E315CF179D24B6F234DA32C34A9A46B2653A46
Malicious:	false
Reputation:	low
Preview:	......JFIF.............Exif..II.......1...............Picasa......ICC_PROFILE...............mntrRGB XYZ .........$..acsp.......................................-....).=..U.xB...9.................................desc...D...ybXYZ........bTRC........dmdd........gXYZ...h....gTRC........lumi...\|....meas.......$bkpt........rXYZ........rTRC........tech........vued........wtpt...p....cprt.......7chad.......,desc........sRGB IEC61966-2-1 black scaled..................................................................................XYZ ......$.........curv.......................#.(.-.2.7.;.@.E.J.O.T.Y.^.c.h.m.r.w.\|...............................................................%.+.2.8.>.E.L.R.Y.`.g.n.u.\|.........................................&./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~......................... .-.;.H.U.c.q.~.......................+.:.I.X.g.w.....................'.7.H.Y.j.{...................+.=.O.a.t...................2.F.Z.n.................%.:.O.d.y..

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7289
Entropy (8bit):	7.944761342190442
Encrypted:	false
SSDEEP:	192:G3zvPBdqkiUpquAWefoaS2PwrDpKFcycOY:G3NHiL9vf07HMhY
MD5:	E42A09AD7ACE95799671B58F3580B3DC
SHA1:	C3A876EB222C3844BA014351975173043125ED29
SHA-256:	4F0F364FE3689CC2B1188BD0C752E16BA9F98F6EB6A71A8263E22A47B81282AE
SHA-512:	2B0969F82FEED22286C7AC4754E0EFE696DB9DF36749C949D4CA45C373B89C9D1B1934F8F7212D0992DCE5DAF151B38AE53E65185725756EA07D9DCDC39ED166
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/7j1-9AjGTjyFcEDU5lJw2BpZNYWNKgkxegHVv012Pm5OPBratN5ZsNVtpILRwXqE5Givogcj2VMswYdKR1dKvLvo2EQFSM0p7yTxYw=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..]{l.....}..6v..CLZ..'iE\|...Q......*R...KP..+.m..t........p.<Hi+.Q...6!!..qH.)..v.._.........2;{.....V.;s....\|.\|.;/`..X.2...e\...-." . ..........K....!.R.....h9..\|...t...T...\D.$...hT..brEE.Tii..5k..pj\|\|.....E.."..I0......n.w. T...i...F>.A..~.A.!....=..C.....&!...g)6.0.SJ[.<....... d...XC.9...k.....O.l..'.m..S.3ZD,i.).........(.rEQ....x^..#."....$.x..... .\..."`I.L)........-.r.\'$..`.....q..w...."....q.........._..._.(...;%..N_....I<...B...>..o\|..B....).........n....VUU..V.)....@4...H....)..^....@ .....-[.<..4...L)]u...}.\|....T.M<Wa......s.P..CCC..v.'......Xkk.........F0........[.!.m.M.PQQ...r...H$.4./..d.[.?....q...Xt.)....<x`ff.>.N.. RU.+W.D0...W.....Yc.i.ne.E.eeeC..s.....3(..}..@)..}............".....4&''.w...M).."..`.4.tww..'.\|.uEQ.n.Ck.....c... .Ys....?..>..E'.RZ...o....Xe......1.....

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	970
Entropy (8bit):	7.688245741027086
Encrypted:	false
SSDEEP:	24:kRN4Ht8XoSPbwdZNvhugG4QEYei8jKNYzZ8k/v:vt+8dnvhugGZEJRmOv
MD5:	47637A86C6AB72AC2E3AA300D1EA16F3
SHA1:	1468BD947E2D5A6DF1F9A0529075C57FE5EBF320
SHA-256:	84B1336071FBF26C0279AC9B1DF47BD95AE79995A0508CFBA499D75DCFE6F224
SHA-512:	39E298A2293ED3B367C4B13EB25293501847A553B535DFB2D26786F7B373B067376BB2063A0760876D42DEF6F9FBEAB4C1E714A48D960A88F0BB7745D1771F7A
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/XuX--BV0zkkLgxF4L5fJ0A1zg1yqjZ5TRyjEyaKMg873pOoy04PFwpUeUNw9kDpeocu5Dq7LRpOU3tkXF-yg9bgjyBvHjRJ2Dl91=h120
Preview:	.PNG........IHDR...`...`.....H.......IDATx....k.e....t........!...<.....x,R.....^TJ..{..@)..Tri.R..YD..x.R..".MBT.1Hl"....ei3o....a....\|.....b.)..b..9..yF.b.E....e...Qg....O...,.M,q.c.....a.Q.?..S..x....G..0]y..`.m..G....1...d...m..-jY..c.E2........w.......l.....F.nQI'.2r.A.......O0......p.9.........O...#....Pf..c.N..............XE....L.@.amz.G..=.J....x.{.S.P....PGA......y6~....c....`....G...&...]..0..]....D_...E..X..(...!K........4Q...ZA......j@3~.\|.#.'h.E..:.C\|.%.1~..(.5,..J4.?.E.%..j..D.>..N{~.3(.>.....tp..hm.p....Lg...S.h........3.#.U.l.Q..Oe..N0...v.'.iZ(..>.....W...._..V..&....Q......<r..o..-r......rt.?..,r2O.?.x.99...P.W..7........XZ....".C9...%...i_..F.}.ci..D........:.E@7K(.ez..<....e.P..j......:-..-.....;h........3]....YG[....~.m..X^..\|......O...&"\..X............$.4IG.....(..5,.....Q.u.`y.0.....<....6q.R...n..K7..............`0..Y>.....U...Pm..2M.+.K.?_P....a.9..B....bx........5. ...W...E@.P......?.u......IEND.B`.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1852
Entropy (8bit):	7.8172847193983115
Encrypted:	false
SSDEEP:	48:ThPq7aSyeIaxKBD0vBBg2AmOJIuQ+TuK3R/PP0:tPAaS+axe0vemSIuJTV1PP0
MD5:	8286DD8AD1827439BB3E83CDAA8E6818
SHA1:	CAEEC5254D6E2FCDB698B999E05302A134E316DA
SHA-256:	8ABCAFCD512BD44D17852703BF465C67CF4B5EBB798B88E0B037AD79918A28A6
SHA-512:	7D49CC9CA81703FC4E912A9D9652C174682D652918DC5EEA09E8431C71E7859D24488791098FDB97BE0FBE928E512381B91838D838EF9F749672D0463C79B843
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/5CsRqfMEP1Rv-PPv9G4962lyEuvb4roSLJHJQWPbmCa51AmvynfoGfoKsKiS87QhX07xQMZAeLp8qoSy7CjVZkXJ1WapQiJkroCeJw=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..._lTe....{...P..K..Z..&...q5....^...S.&.c$f..D/..x.F/L.0.....H..h....Xu.7."...+..Z.h...9.^..4Hg.9.g..'iH[.}....=.9..RJ)..RJ)..RJ)..RJ)..J.c...d/7 L.#..f.Gl.q.&..L..~.g_...J.=..v...o..I....F.y.y.OG55...=..l.].. ..uk..k.lW.1.....2..\....5..u.b.....<.n..4v..M8..f.V..].f.Xkcn.6....&O<...~lJ...W.<..h.f..5..+....j..X.3....9.#_..C1...0.....j..H.3...DB=...g......b..C....k..S.?..:.w..:L...+W..+.[...........Ux....9.....2.-z.7T...[0.Q"..b.X.......^.c.H.hm......$..pC\SD..6TU....#bnt#....R1....$p.E..hCU.b.y....)`..2\....i;..pm.S............6v....+XWn@..?...?}........hC...o}....}P.weTU+...{..:.....9..}.......t.....wO.s...Mb...4......l,.L.....My.%.{..d.X.4.x..-...c"...(.6c.N.q....5.b`\|.........<X...D.v...\.^.9)..].............f..p..s)..h...%.x.dW9\..o.D..E..:.......T.....00.......[..t..Rswa.0p...?....-..4.j8..Y,...J.T..I.E.....-d..e.9..+..p.....?...T6S..+1.i.'>Y.?.l...W......,.....V..c..

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2860
Entropy (8bit):	7.879156635175711
Encrypted:	false
SSDEEP:	48:fjQksA6iEpeC9On0wvRNbqvGI4NY6+ifbUr9VIiDj47Bj82rLtvGDzt3gZ9ptxll:fjQO6VPCFqeI4NY6+Jn47Bje2RPN
MD5:	FB458CB44A816F8CB363B60DB753F71E
SHA1:	F3AABDB35D06026CF13E72D2118B3FA81FC06FE2
SHA-256:	FCEC976891ABCE6C4E0C4636FE4FC4F19137C73B4434C24D1AA7FF3CF3B20468
SHA-512:	6851B77E81DC158E201E3DAD2DAB781ECAA17AB179DA47F31E7CC3733CFA730CDC4D04A4898CB6C95BF5C5B72A4DBE1691493565CD4C3E7841ECDEB296EC7B38
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/XfxlbB7Imi28_w277XeVC0u8Yngn8e1bQxhd6YK2snOdqt_uiwripgSEl5VNxgS2cJP2kf0dHv6LfSq8AG6YeJf9cpu1BE1kP36R=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..yl.....7{..C..$\../..CB..R.$..PZT...CCiAEEH@....@."..ZP)..%.I...m.....D.AU...^...{..a;..Y.....\|$_.~...\|.y.fv...........u.a.v.0....J.f.............8F..~.+..)l.`o..Rf...@.C.]Z4..t.../.+.X..........-bg>....y...h...A.'S._'._.6.`0R..s...."Y..U).h....@.E.#.3.@..5... .@.Q'......?.;.bzD.T.1.`..6......!......:.YF....y..3....=r..S....+.]...4.]......\.Xb...:.j.}.\.>.TN...V.!...K,"..L...U.L..R.\|..8..O..+([..(x..j-qr....oR...8..-...-..i..=.R....J.O..\...8.<2..l0..H....n..mj ?.&..c....>...J..V...i........3.u.(.X.`.....%.o0..5.j.j.6.....N.;.\|.....<!....;Y:..5....h.{.....Zr. .)..G.....Y3....V..b~R$..i......u....u.)....u.d.]x..V.....x2....4...+.\|.5.....M.{?.t].......l.e6...KY.B.........<.h..N.AXM.&!:.....^.-/..i......\|O;<...J_.7...3B5........`k.oY..ijzB/\\|.e..j.I.L..._.0OzC..o..~v%.].2+.<....X..u..q..............\<.v...Z......\..R=..H...[-9J.<#R..5..{..iV....P......f.....C.$H.fBfw..}...qI.YM....^^.Y

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	21
Entropy (8bit):	3.236857303422074
Encrypted:	false
SSDEEP:	3:qrLnDWL:qHDWL
MD5:	DC941514BC281BAC9EA561AA9433C0FC
SHA1:	FFA5578AF85CD8C29D2DF2242DC504E3B2BA687D
SHA-256:	E41656EB2BA6C6293BF6DD928E5A88CDBC50535CAB661C1969E0F598E497ED62
SHA-512:	7130F5083B1C31CBC09BFCFA2F368A2FB5B9B86D90BD6E2E1C28397FE933797BED3E8B545757ABCB7425BA8EB65B9B67B35C648B3E16BFD27D1EF08F495F6BBA
Malicious:	false
Reputation:	low
URL:	https://login-vip.replit.app/vip/images.png
Preview:	Internal Server Error

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15208, version 1.0
Category:	downloaded
Size (bytes):	15208
Entropy (8bit):	7.982663162282351
Encrypted:	false
SSDEEP:	384:W83RLtRZmZ5GJ5Ugs0fRdyXIgRTXy/W8sJn1vS+umw/C5s9PZ9/:W83RLtRcGMgfCXhzWWFJnd3xwZ9Pr
MD5:	CD05F978145C3B6F58B800C1FB5EF436
SHA1:	916E50A357512D525C2850C8429E1E091574C9C9
SHA-256:	F36242B1AB1AC1316640455B84D157E26487BFBB2B847C6DD4107D6CA071617F
SHA-512:	6B7A8ABDE8611B63B3C26312B9C8ED688E7BBD2A29131F5DC0FDAD53770DEA2ECADF9CD14D432AC56EDB340CC86BB075F6EB176E10285F29CE57A4C8F47F3A48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2
Preview:	wOF2......;h.......L..;..........................."..`..(.`........\..w.....6.$.... ..x..%...........n..d......4.HM:V....:dX@S......V...n.h4.f...d.3ki.zpo..._\|......_.6...!H!....Y.=T<....h.S}...Nk.F.%gN].N.WLz....IN.......%{..1.6.0j#....H........3.[.......L....~.o....".4..].I..wm..F.D%5:!.....-,...UP.z..`.A`...V..Q...b......y..u.Uo\$=..6.{.....Q.....p.)p......SO.=.y..V..%D....n24...<.G)-...r{.m.1E4..\P...%....tF.....A....&. HW..$Vw..Soeu...<..M.U.....7.}.kE.]}..F4...7.....6i..0."A....._..}.w...[ .....;..E.r\|..].....P..OM.wB.f&...F.E..+..2j..N...9-.mJ).....1.....e}.....%......C.Z......4.}..Nd...T...*...Tw.....YqDv.9d..N...H.f...Y...T...!.I.\.w..t%R.v.\|..4Nk....)..f.^.7.........3.V\|.....,dK._..[.&....:{u/... "..."....c{...\....$.W1...i..:..5..v!T.ks>"......X.X.# ^._..I.`..F.Mm...].......S".6A.P. \...%...`....'.@.n..;.R.@..e....3.L..rt<{/...^.{.'..l....I0.}.d.=.Y.....^.z.-.......zg......<K.....m..9.;}..5.'...'...^pVAo..K....\|.V^n.O..S.C5...n..x.\|.

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14796, version 1.0
Category:	downloaded
Size (bytes):	14796
Entropy (8bit):	7.984459440886347
Encrypted:	false
SSDEEP:	384:xTigBuOeGaqjToV9edkOIjd2y4oeYAac15+lBa21ob6bdP:xWgBdCVWXymYy+Rowp
MD5:	BB9D1306FBA272771A89683EA3B0A4FC
SHA1:	7CAD32EAF7748F5AC06CDA557739FC9D5AEC6D9C
SHA-256:	483F202789ED694C70F16E9CA008533BE41FC8F9DDC44D832F5818CEF0AC85F2
SHA-512:	258CF5310ECE555A8B49A19F4B0AAB2D2B35CA8569CCA715BD8538C49E584B3325ED1C9956A76C600DE2482D947138D74CB0F6C2E446BE70E362D050D245EB17
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2
Preview:	wOF2......9...........9n.........................."..`..(.`........... .....6.$.... .....%............\|^m6.v; .T[9.a.....-....@....)0.}.,..%..%.....X........zci...z".r...O....nmNdaX........0..d..".....&.guTY{...]....6.'IN.#...K..h......D.Ipm..@.uj..)53bT...x..x.s.....WaG....J..#P<....N.Wwz...[._j#:1A"..U..D...:....v..]tz.vAO...ofs.['.<Na<.#..$..@....mF..{3.).. k.b.Au.V+.A...J...a.n/.Y..s...m5{..^pA...b..M.%......5....RqZ\|!}(..<(....~.A.f..X.L.5..bz.g...u.:.._#z..b.."...b.. ......g.....G...9...2.[..9........0....DYP..Z\B. ...I....I9%...D^.t..EVN9.)t)....e.b.l3...9.S(.B.pX.kv9...&.=.j..)d..p..T.......K.....dY.I..m.......l.DB...s..B...._;';Y.....i.G..X......k.....4..u........>k..?...$..+{<...FDD.iB..I..9.W.-..5..>..s.....p..bW.>......0.F@.!..!...H.4..0..D.89......T.P.@H(a.>...%..ao ...}...s=./.......4.>..*....t. E.......V....EH<...<.@".......e..8........]..$....Vl.NP..9.>.....>.......v...g.iU....s.QM=..1.0....GC...,....,F=...-..@..o.8......cy..Z.

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2718
Entropy (8bit):	7.880291072349662
Encrypted:	false
SSDEEP:	48:mbgJeNEkhZEXQmJ46VJrAJ8cjig5oTK3FvXNnLj9TM7aFXGxVbI7sti:mbyCOQmJ4mE8cH5o21vhd/M+
MD5:	35D265D275688C64B4EADC82DCF95AC9
SHA1:	1C678D990EE7B755F1C6EEF1F9409CB76450C620
SHA-256:	0E41E36790294DE89ABCEE52F8682F393C704D474F4960A5255536BF8823F1C8
SHA-512:	C1F98E199EEDCB06A9AF7B7C5025CAABFBC2449B2F0FA814A8A8FC7C203E935D02D9481C6DD72341B2B1E459245AF3C66E98942F124CF8AC133719A6E5B79D38
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....UIDATx...}p.........KxIHHC.D."/A.`+.....H[...P(..:..3..`u.Vf.....u....$Bx.2L...wF.H.)p.TH$... ...>O.......gow...3.=........=.(..(..(..(..(.......4<.f....{`.d$.. b..!8.P..Y.b.`.....\N.U..B.......!.!Y.....".U...d9.0..N.....# r...-..l.zVJ.......2...#..H..:.,.....(u.<cn....rD[.......!..%.....#..<..._~...!.._...;..G........g.=f<.....=.......Y..}..Le....>.9i..7.......0](... .}X!..6n...n.........>..g...8.v..@.x.6.].v.L.g..#....K^......'>/Bws../..#...,..Gt...?....-.=S....w.....?......^..O......7/f....?qq..^.S.Of.8...k....iy9[....,.......l......n'H...._.....v.z.y....._p;BZ^...........iy9[......v0....1=..._0...q;B/^........p;B/^.../...m.q....TO..s....Z...#\|.KY....W.<..X2.Ox......N0c..1..5X_....)...`... .HW.M..[.y.+..?38%Tv.-.m..W...m.<jF^.....f`...mT......F.CA....L.((..u#.9.1.......J..S..........q.01,y..w.)..w...H.Zh76W.:......u.......Hk.y,..`.~` .....\|.E.S...<.0.....X`.@k.y.....W...6U........*...\.@..

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 120x120, components 3
Category:	downloaded
Size (bytes):	7124
Entropy (8bit):	7.565676034080946
Encrypted:	false
SSDEEP:	96:t6MT0D5MdtbZPAVwzVwmSA2UJWhzEd+GVG5n8oCWciGeqqVpFeQiN9/6/SX:XYNMtKwZwUJWx9nJCW/t2B8aX
MD5:	347536242E2AEB5CB09672220066D45F
SHA1:	002AE7E5866BE9904702A7DFC9BBAD74DA8C25D5
SHA-256:	C9DD166FEB248045ACF61FCEFECA21CC42ECB37CF0753F16B1DEB2731AE5E677
SHA-512:	1A6FEA037A534F5759D6B6C2A99FFD939EA04B3213474C74461E6BE7A13A53CE2E54614B8DA2DBA0621A86B143E315CF179D24B6F234DA32C34A9A46B2653A46
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/hDmpjNjn66Z7hyYvAee18jZfIss2NCbUss41HLkWh3s08AxT6prRWd6iv9CnofK6cXXS42OzQ_0J6UcM44xV1ouv2Tq53nCjI28DDorFDHS4RQrICw=h120
Preview:	......JFIF.............Exif..II.......1...............Picasa......ICC_PROFILE...............mntrRGB XYZ .........$..acsp.......................................-....).=..U.xB...9.................................desc...D...ybXYZ........bTRC........dmdd........gXYZ...h....gTRC........lumi...\|....meas.......$bkpt........rXYZ........rTRC........tech........vued........wtpt...p....cprt.......7chad.......,desc........sRGB IEC61966-2-1 black scaled..................................................................................XYZ ......$.........curv.......................#.(.-.2.7.;.@.E.J.O.T.Y.^.c.h.m.r.w.\|...............................................................%.+.2.8.>.E.L.R.Y.`.g.n.u.\|.........................................&./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~......................... .-.;.H.U.c.q.~.......................+.:.I.X.g.w.....................'.7.H.Y.j.{...................+.=.O.a.t...................2.F.Z.n.................%.:.O.d.y..

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 450 x 172, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13774
Entropy (8bit):	7.944711003640627
Encrypted:	false
SSDEEP:	384:01qL4zTHu7/uCmxv174d0+ZavjF1G9oTMKM:0lv7BxePavj7G9oTY
MD5:	12CE2116411D544583503AD29BAAAB87
SHA1:	732C478CB69E681E371A9E968E3E391A9E39D0CB
SHA-256:	D035BCE456DBB0842F418ACDF3F517547D1668D6951CCFA49265ADFC31969679
SHA-512:	F768E96FAE5CA17C50E8E1956115C4B3EBF2FC3FE58BBCB995C01AE307A6F65C1F03BBED5697C8A87310D6E608CCA0CA351E2E5234E3F698E4117C239C98ED51
Malicious:	false
Reputation:	low
URL:	https://login-vip.replit.app/vip/google.png
Preview:	.PNG........IHDR...................bKGD............ .IDATx...{\|T.7..z.L23..$..bUZo.../....XH&.m....7.....X[.I.s.z#..G..S{QS.2...$A..h..H.TI.ff...Y...J.}.3.'a}?..!3{=O...f..\.!..B.!..B.!..B.!....@:..p.......WY.Ci.;.....#..r.^.....B..~C..^T.6..i.>..'.8..x.......#....`...bR......J..F...J.o ...+...2S.m..Q..a..s....V...<...h..@....6..B...(.3.s.r........p..]......,.......B......e..g..7.p.3..?=`..............B....<....B,o.....s$.y..M^..q...c...&1...a,.F1..1...W....Y..i...;&...o.S.+.8+6"z.b.[.8...$)..n..wc.:...O...>...N.!....`.pu......>.."x...nP6o)....\......B..=O.a....e.c.1..9.a...a........K8.u...B.;O.a.B...D.B.Y0....i6..?.X...e^wF.!.G.^...F...+....}.........}....!.Hg!b...M.....ik7........u_...H..B8...)[.{..w1.OG...0f.]YM.6.;"..G..O..u_.c...8=.m.F.<..>.!.,.......l...Me;..;Y~..^wB.!.d).5Z.0V.d..".#fVW..~x....B.#YJ..g...x.3rR..( `a...S^.C.!.t..ayu.P...O. ..*..J..j.fl..]J......o{?.z..7W.Y9>.r.\|...q&.@L..05.\|o...~7...B...B......8...&...uf...Y..kG..

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 384, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	312061
Entropy (8bit):	7.981383487988184
Encrypted:	false
SSDEEP:	6144:N1k8JCW7sSJuh4N2cX/iDkBOncmLOkAeWnVv/6buLcrs8IuUl:Nu8JCYTJuh4NFPiDzcMH4nl/LLDpuA
MD5:	D90E1FA816B988782E1E652A3C34913A
SHA1:	8C49BBB1DC243C2347998A4966CC43B4A208BDB8
SHA-256:	CFCCF134704E895D13AE760062B37C3A435D951A8007BBEBAB88ED01B7AA53C4
SHA-512:	809B9F325723FECE912B5180003D16CCBD88495859C47A82EC8325F64BDACFF26A5E5A57241C5ACE5C099F080C2B7CB30E67698DED4995B4A848B7497DDE4649
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............TBM.....pHYs................IDATx...Y.$K.&.}".j./....zzz....\.q.r_H...........H.\|.3..lU.U....pw[TE........T5g.zUeE......~"..F.............N.... '.........2s8. LBN...'".... ".!..ww.C...Kp\9."`....ALp.3.@\|..63.3.D....u.L.afv.......(D0s.....0......."P..\|.%....7..D..@f.......x.FL..F.0...#..."8........3...'.8...sj.CUW..D0.........6...wGb..q......n.r.f.>.........Y..h.u..W.{.....{.W.W........\|...m....yY............N...>..x...9..l........bf.......B..8)...E1...x..N................n....y._....y..0.`Y.....7..}.$.K.Z...e......w.`....p......q.........n.*.31.$..G..T..s.....j..&.R.9...L0#...H..]O...OOOD8..k......H"...("e.A0.RJ.jf......$.sz......\|..t..7...I(...'/.W..8H..YI...A..0s7....@.Cl..V.5h%.W.-.XBf....n...g..D.....7.qr.`.... ..8.;yCM..[.....d.. .W...9^.5(.sAhPJm..M..".)....l.3.S..@qr..i..8..C..z/..m..9n..-..md.d..oH.._.............=..b.!-..bj...!.....v.....n.&\.C........,s.#..D..7GD.g....BV.=.=....-N........u...$.] ......

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3383)
Category:	downloaded
Size (bytes):	108457
Entropy (8bit):	5.48559468980492
Encrypted:	false
SSDEEP:	1536:dQed4sDzUVRhLgvIDTxF9/a4+ECrOd/FeSWiSyz2NUAMSceu4GseEP2q:pV8JpTxv9erMmi72NUAMIGs3
MD5:	936C777790659F304D0D75DD37C349C5
SHA1:	C02A937CC205D9D9332B92E05C69836CEAFEE53A
SHA-256:	1252984607640507F1E1AED2558E401937EE530BB81FB2237619B15F953052B1
SHA-512:	7B93634962EA45C2AC645A9CC8BC959846DD453CDA1CC8113CFECD5B29E88F78AC8C16DCD0C29B21F2ECC2F17F17363CDE7D82D04844D5BE50F8E0131B123F01
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(g,f){this.uc=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.uc};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6066
Entropy (8bit):	7.948540478279252
Encrypted:	false
SSDEEP:	96:+qIAQCTbvD1bCGw4LyVT3WGdJ19dmCxwpnVtVx0A+wb6waFUB1EjdZSjJhy+aP:NIIP1rg1rGVtVx32JUA+IJ
MD5:	0A14F02B3129AC89EF58B4DB619C9CB1
SHA1:	BE77E19DB300FCA67ABE1B86AAC242A7C99D9072
SHA-256:	4C1FE18727A6B2D1102B1623B2CA2EB7626F740ADF4AC3DFC169C7067550F0CD
SHA-512:	02FC1AE4341637990DFF7F94C30CC403C41C67B269C34921AB8E33921893D7C1DE490C4D17314EE25C29B81961798F52E776434D9FEB336BF86DAB548E9C2532
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/p2EiNuo4FQe3s8dhYgEiejBxjryT3B46OTWNItLqiwF58V0T62GKHa7VrbOhI7BbnQOBvdkPFu-4YGG0Dg3b0moXWWSc_aB1hw67Kts=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....iIDATx..{t..}...v$$Y<.m.$..`K....rz..ZrhJB.....`..@l.`......?h..JB!....(%'..#4...@.....P.........Y.V3...].\|9b.3.....}.~wf......t.....B..!).........i...XA.x)E..j4..{SO:\+.n...g....1.4.\....u..K.z8`Z.@....D.Qf.4._......p...........1....Zp...8^....-..U.hR./6.;...7..]#...:v......\.%.fRdMe.8.o.p.....z.lytt..c..&# ..;.-..[. .p.........m....r..3.J.YCq$..P.....`6\|..t.\|....M......R9..BZY.D..8...r...^{..unR]D..z*%.7..r@..D.y;..R..TkQ..~.\|.&...PL(.s\...{..Z.f.......~.Y<..[.7\v..}.nO-Em....Um..[..9k../.w.kQ.5..i.....0...`p...^q.C.w{j......Tqa..&.4c.......W.a.&.B.P..dVXo.LN....?..`........\...}....0....p.5"+..I. .S.5.O.../..Ag\B.i#.,..=m/o[..E..K.....3.>Y...=L..,7..`.:.......z.h\'..wgc]g!8Xn...............sk_.aC.Ik...c..m.........J....w.C..).u.)6........sM......g....&.........H.)..j.\|........h.$Xc.`.....0.N....r........EA.7.Y~..w=.V.FUO....O......0y....ih...N.".%I...J..j..??p.s>...p..K..=

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 3744, version 1.0
Category:	downloaded
Size (bytes):	3744
Entropy (8bit):	7.927907634157325
Encrypted:	false
SSDEEP:	96:vG9TwdO2m7hNR+whoZ49A+RSL3iIlIRg4n:vK5V2ZMA+cL3ilg4
MD5:	76401C24E5DADD117E47C8A3AED24721
SHA1:	2D08A624B4CAA7EEAAEC148D879554DE049C1623
SHA-256:	7DDA16A4834B7CD8B77EBEE5723D5AB9090E0F7AE0C6A8280588A92468618933
SHA-512:	6801146305214C6E588A08622D6FA5F49D92E94B1EE6FC01414EF9A0E8BED10C06D6BA0EA5D4FDEF3BFDA6E95B7E7ABBCEE15F7A9C06F87EC0CDB9CC0D5CF1BA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2
Preview:	wOF2..............)l...F.........................n..D....`..8....D.p..,..6.$... .....m....#3......~ ..o.1.....B...DA.]=...2..T..n.D.dsm........^..~2.e.............Iv.s..9..3UU8"U..............].L.>....Ji.........[..\|.."x..cu....9..U.VAU.@....E....<?Iqw.qo.c.a.f>].4.....F.._.D..1x3n.%.Xb;.u..p^..E.0q.0.vPa..9w.....I6..Z..o.J[.Uw.a./..E..w..09..r....R]..=..?.=Dj...X. pa..K.bQ.X..#...R...U.0Y.1.......a\....8.....D."~)H.<.@1R..i...@..!.6.-....m..\|x.C!.."UC.......AO.......nrv.....q..%y.. .x..........~.e~..Fc....#..9..C.>.K.=.Z1..m..F..,.O.L.J.v.. [..%&%.6.G....P.......t.8..."[.z.j~..(S9......(..M....I.!O..)2E.....6...c.`..h..x-..//..)..n5...7..n;.H...X...~v...ZN..HZ..i..y.\.N.u...WJX.,.B....^/.8.U...zcy6.?..m..k....:a..J..!...\r.S..V.......V...].h./K{z#....\ab.....'4.*r.~....?......+..>{.@..`..... ..8.@.......1v..R.f.%i.VC...F..h?.0..........R.&^..lH0)....n.....r..T..PFU...TEQ.L.p]"t.."X...Bu..._.>q...7$...b...K4%....s.LK. .L...&.,+.m+...b........h...

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	9452
Entropy (8bit):	7.972633586493504
Encrypted:	false
SSDEEP:	192:oluGUDoPyYMC1jr+wq+UTEbB8dZFfRg2TDN3qWpZ+8+t9:osGeo+C1uwCcARz3YW7A9
MD5:	9471CDBEDEDB47F304694708F03522DA
SHA1:	1A78FD5DC642031B2930B0FBBC8573A7A81AEB54
SHA-256:	EC45B781D17011F674273C7654C2BEAECA1C097A9A38A271D57763A2CD7E2778
SHA-512:	8E20EBEC2BC28E1BF670B21821BAA05FBD298DB86C6A8267D0BB3468A46986D11F445ED2C9BFBEEC806039EF22A557B695E2C6A2072FF35FF7FCE5B164D36C04
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x............ iCCPicc..H....XS....$$$.@(RBo.K.....6B.H(1$..;...ZP.`EWElk.dQ.........(.b...$..~...{..9s.s.N........Q5.r.y..@....&..@.!...@...( &&.@...S...P...\|..._E..p.@b .q%...G...8"q...^.7..'.L.Q.M1.....3..!.4.G.m.c. ...De.......b.s2...e...\..r.d_........U. [.}.'..>.F\|...#..E.J...(.=..,....l.....Q...XY..eM..1...aZT4d....\.......C..8. X3....r.....!...."....P.dX{4^..W.E...C..<IH.0...d6%...!.[.<....~\|."N.-_...Y..}IV\....~P..X.+..>s...Cc.6.Y.d8/./`E.qd.?>\1...a.c...L.......Q....C.ce....!....!{....&.@n........M./.Dy1..p.L...E.....A .0...40.d.Akom/.....l .....4.#..=Bx..../H< ...(..\|..2.U\.@..7_>".<..."@6.-.......C...90.l.d}?..:b.1..N.%Z.z./.G.?l...9..7{..B;......pg..P.C.L0.t..C..K.>;..zu..q..............p?8.+.~..t$.o...Ev$.dm.?....TlT\G..*.}-.q..T+h...<......#~..`G.f.4v.k.j..;..a-........1<[.<.,.G..\|.9eU.8V;.8~...y..y..%h.h.X...c....d.9....Np........C..#.K.t...x.@e.7...A..@..Mg.......h.H...........7E.....+..3p......q ..

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x120, components 3
Category:	dropped
Size (bytes):	2245
Entropy (8bit):	7.719187207240514
Encrypted:	false
SSDEEP:	48:5qGGMhnidfnfWrnhBsK1rMcZw3sE1iyxVwJ1B9TUmgGxKebh0:xG4nYnfanvsK1rMcZgsEP2LlUPGBh0
MD5:	B2D02EFCC5146C9CBAF7AA24C28CC2BD
SHA1:	7A75DF3D8393AEE2E1B2B0CA17D5DE7ABD9A70F2
SHA-256:	2B4BC8BBD66F5D0985C03E48D9ED63530BD6C2D75F97F29563E28D80F592E6D9
SHA-512:	78EFA1EF6BCCFAD2EBB4CD8F3E8A04948F48E09FC5A3AC4BA439826D38784B1960282B380328068702444CCB62E2BFC47460BDA571B171A860D7A3F3494101B4
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................x.x..".........................................<.........................!...1..ABQTq...."#2Ra....r...4...................................-........................!1.."AQq..2a...3r.#............?..S..." ...""...." ...""...." ..m.Af!T.Ic...I'..s$...?.]t.6...}...)........lw.....)I.....1j.....qxC.5w....1EQ.V..\|68.S.Iq...{..mM...8...?.,....<:.....A....u.G{..O......>H.8.............+..>...`......esP.3..h`.!..AS.A..#..yD.t......Or.G........y....D.~.8....y.n..}4.e.....{....c...\..R." ...""....B..0.. .... ..9'.d.....g.....)....5..>....e+Z).A.....U...<..N\..D.........#........#...$.6.8..W...#<'.&.[..!~.R.lF#.....B...c.v.O..(....;=..G.K.t...B`......3O..{D.$."%K..."".....4.6......D2....s..p....k7...Bm,.cr.]AR..3k. .\dn..~....E....\|x^n.......X...4...9.^~H........j..a..P.j\d..Ma.`$.i.....6..p.H.......h..o..#..moH...

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	325
Entropy (8bit):	6.551829350697385
Encrypted:	false
SSDEEP:	6:6v/lhP2kR97X7f6pYZGFX9Ys6b09yXlMBTZ4cBz/dltCGJEjHBZfg8DAX1p:6v/7bR9PfaYZlb0QVMn1ntCGujfY8D8
MD5:	D2ED1A1C13122130683A1DD2F5469B4A
SHA1:	A734A0791DE8E2C406F3258C1639A4BEEA97803D
SHA-256:	31BBB7A1055A0D32FF28AAC23F79BDD65CC4E0532A7BDA1EDB2B680B9401F043
SHA-512:	9F0014A0A7DB008192E9112C518F7B38B6FCDAAB140C77863B158DD5A28B06A5E89DEC1D1B59768A597BE387031A12FD79F13DD2BB96DA0837FA2A73AB7964AA
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/HUcJ2yilLdMblMI04h5DE1tf_0iCxgOmiu-7mpulXRJTol_vVsnrlQcs4esQq1ygtHQ4jxShVi02_aGhjOLSflnb1fMgpefkyfQbFMI=h120
Preview:	.PNG........IHDR...`...`.....H.......IDATx...A..@.....8..$.t.."...=.n...R;..C\|.,E....hJDDDD4;...........7..(...<..5.Vk....>]EY...G..o..Dp.....9..U....@...=......C(...E.......................X.....7................9.............P@g.hC..=`..x....x.M.<R.C..{-R."d....q..~-lu....S.j.s?f........."""......C........IEND.B`.

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	269448
Entropy (8bit):	5.578143438659183
Encrypted:	false
SSDEEP:	3072:bq++1c0Iard8OdwDM5ba8SyCKqjysCBIQi9a+dQWqzGmRF44xKk+9H54Bj5gA:DCb8OdwDMIFz1zQi9TdQWqzGaa9+Bz
MD5:	5E85128E976296571F10181F58E2FE90
SHA1:	122465AE6EDF14A085CBA9B7CEBF6D1C924651FD
SHA-256:	CA5434D0044570B1244052639436BCC0E603AD8E7C79D1F254C50AC54EA1BC17
SHA-512:	D919BD9050F4D07222C3044000A644B83A87D435DC793B9FA832E7484734A96CCDB91BDE7B3555654708814761889363511B688FA8A6A39E2202C2310BCDEA47
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=G-YGRLMNPG7B&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":21,"vtp_rules":["list","about\\.google"],"tag_id":107},{"function":"__ogt_referral_exclusion","priority":11,"vtp_includeConditions":["list","about\\.google","myaccount\\.google\\.com","account\\.google\\.com"],"tag_id":105},{"function":"__ogt_dma","priority":11,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":108},{"function":"__ogt_1p_data_v2","priority":11,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regi

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8080
Entropy (8bit):	7.942342290178111
Encrypted:	false
SSDEEP:	192:fiIaNVQ6cexMJVnNHBbaMzZ/W9XIpx1XXdy:fiI6ZgRBbac/KA1XXdy
MD5:	612991520A7591E4DD07738D8D86B26E
SHA1:	3D6724D41F9A9C5ECD45420217968930CACEF4B6
SHA-256:	143C350B6D97E04A796B5C0356592AF804F549A10C67632A4A35406F78DB7F44
SHA-512:	4FDB776F8374429E43EF3436065D7E8C5D3D8F1BFD05B8584329290DE7886D0D6A0D014182BE57B289A11E8CF1EA45FBDA94D0F900BDB4B792DB1AD73213D9C7
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/hzvgfKA6vD6zG7BEkFYBynAz6J_l5mz8BdTD6I8KGhgpZ9UTrM26PZ569Ml1GhEpNtZ9hmiMEgdEM7UaEL-FPTrSHJ_RvqyHiiB7VA=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....GIDATx..}yp....n......./P.e.m.l....d.=I6..N.dwk..Tfj...S...dj..I65.d._.m...(.,.o.c..a.<$..x..%....}...a....AJ6~U(....}........k ...H ...H ...H ...H ..n....`9...Pf.Z7.Q......`.`c.%....`...c........UU;^~..S+z............s.....@&.$.....p"...cL....1.....)........8....?t...K+rs....={..)..U.X..r.V.I.........:?..u....$I....=.n.T\|.v.\....!.Z...`5../...c.h_....@D/....y....u..........."zL7....f.?\s..4...n...%5.D.r.777......j...i.B.<...h.<......Z.98....'9..mmm=..8. ...9.s~....Y.. ....Q..Y.!.2,..,V+...._P......HIM..j.,I..UU...091...q...bxh.....MMA.4(..UU."0.c....$IPU..../.V..^xa..'4;nj..n..p8."...c_..J.A:..6........AYy9V.^..U.........y.y.f.10L.c........^..g......LLL`J'.. .s...B.......=.....xN.p...r...B41.!IR.l..!@D..l...AQq1...P.f....!I.4!@B.i..A ..D............/]....&'&.....bP...!.'.s..={...Eid..)...cR4-.:a...(//GeU.n..6...@.e.g\|^.qV..+W...3.....^....J..}kDt..~..xZ.%.MEpSSS.$I_..e...h....EAAA..N'.k.`M]..

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5805
Entropy (8bit):	7.9542006310437126
Encrypted:	false
SSDEEP:	96:t9UzyN3uV9rFvd89BSK+b+n3P/WB64548U3zuH1pgD/ln5KCKH:/U2N+V9rj8DSK+bB5DKuH1oln5lq
MD5:	D0656A971972F0807AB746BE522ADD05
SHA1:	5DEB386A5C5481D9A4AE91E37E175A4E656AE245
SHA-256:	C7B0BC63C6F5631DADD177E4EA287231713A0FF78A36213806ACC9BF760A4D4E
SHA-512:	6DC7991439E91FF4901ACF4AB19FBFC83A9B9E5CB26ABB9987FA72937C84609407A894806B2E7802419C7A550C7F3075DCE0DA33063705ECC51F8F957A6D3D79
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....dIDATx..y....?.{o/4K./..(.`.d......8..I.8.3.e.%...8nAt.h.'.8O6......q.lFE.D.PD.f...Uu......t..[....y.~.....U.:...s.D..%J.)Rh.r.....2M5$..16.5.. .D...E."&....'..=/u.WnK..@P....=Y.=kf..Vc..F..F9i..~80..:T..P...A.BU2j.RF....m.........1...<.W.]...S.."=M..:..H...&.z...?......H.[RE...!i...k..".;.'b.6o".5..$..>...0...9=A.:o.D\..:ew&..Q..w>v].............D....H..<.f..^..sF.....3OD......iIk..D..........`w.t.. .pyQ.[..H...)6.c:....F..#.....DE.......V.{...,.'V>.4.......g.8....fnK.c.FD)>a[#.~....=.%..!Y....-.{..._&.0..._V...R......=..2 .nu..7....]..K...PT..nE..mO..y..lk..X......<.j1...%..z..k\|.....a[#.U..1..Y.......C>.....w.ra.$...k..'....}yr.?..~....?.....c8.m......y.yj....\|..=c.u.}{S...Pm.b...j}J..G>.....E.^...... ..B.c>u..=..omj..["O...HGe+2.u...H8wn......m..H.6......x.,_.;.;..)z........%q..*$.qj...8....8=.y.. \|sW..4.s;-.A....>Y..7Q..e.-:o........s...I..s.,_u.P.....`=c.4..+.%q;...

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6717
Entropy (8bit):	7.9593647465549235
Encrypted:	false
SSDEEP:	96:PCvZH8WyHwrZECNCpO0lsOZyK1DDsMpnBTQWDkT349Or7UbdpldpHtKU+ijsT:6x5+CP0lyKF3nFQGkEYrIdpBHhu
MD5:	C6501FF5D90563175E58D9FF273BE03A
SHA1:	668981A528FF280E6F74652856C54F1281921BBB
SHA-256:	201CA90FF6ED9673057F8717DC152BF3463DD0AA7693243AF4F79B5F0F447B8F
SHA-512:	4BC4EEF5DFB8359426115A1EA8B4D13EDFD462AF554D56FBCFCC9EFC5EE4F79901B1EFD96DB0C81ECA7ED59315910064D586C164A372EBBCECDA86619A17156D
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/R-_6O0_uuaRmQfOGA1NNI4aj7lQBWjg-t3tpiWJqWC8xx84LL9kuIMoHj9FovIG7SCho36_AXGKT6NQi3xYZwaRcS2je7mrtyI761To=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{.dW}.?.s.....y...hw.Z=V+.]-..B/.W.B..2$.N.r..).+E.e........Q.......;N0rl.B..=..z!.....kW3..W...?n.LO..~.......;.....=..;..;.a....`....`....`....`....`....`....`....`....DH;......3..k..j.....Q...w=....J....mV..]}t....q..q...o.J..k+....n....?..wmk....kp.........E.bQ.....o).J..D.]7k.e..P..XU... ].V.+..YV.?.k.5.t...;g^\'{<.}....rS!4.[.Z......>.j..u.7k....y%JS..Y...I..1......i.....].\|....c`H`..&].Z.s>s.0...[..........rS..?..vo.." .5R...m.k.7.5l+o\+wRo..:.kb...W...+d-&..c6.~H..7....;.'..o.}..lu...8.k...~.T...-.......<{A\.......L>....}..i.A.!..g...()dK..O...5K...}.8S.....iE....\|...+.(.R(.......@p..D.pa....N.....7....]..{.F.2$.d..sO'A?k/Gu.^.1.I.k .F...Z_-.QOm{..P....p..H.S....k..c7.N...(...?k]..:.....gR..iz7z"...h.g.C.g.........c.7.......M...#kQ!..5Z.p.D%.........W#.id.i....M....+...-.,,.....8....Q....A'..Ykn...'.M..M.5....L..'..K.=..[..@!P.>..J..y.N...%.p..HQY.#.].-.N..N..

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	970
Entropy (8bit):	7.688245741027086
Encrypted:	false
SSDEEP:	24:kRN4Ht8XoSPbwdZNvhugG4QEYei8jKNYzZ8k/v:vt+8dnvhugGZEJRmOv
MD5:	47637A86C6AB72AC2E3AA300D1EA16F3
SHA1:	1468BD947E2D5A6DF1F9A0529075C57FE5EBF320
SHA-256:	84B1336071FBF26C0279AC9B1DF47BD95AE79995A0508CFBA499D75DCFE6F224
SHA-512:	39E298A2293ED3B367C4B13EB25293501847A553B535DFB2D26786F7B373B067376BB2063A0760876D42DEF6F9FBEAB4C1E714A48D960A88F0BB7745D1771F7A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.....H.......IDATx....k.e....t........!...<.....x,R.....^TJ..{..@)..Tri.R..YD..x.R..".MBT.1Hl"....ei3o....a....\|.....b.)..b..9..yF.b.E....e...Qg....O...,.M,q.c.....a.Q.?..S..x....G..0]y..`.m..G....1...d...m..-jY..c.E2........w.......l.....F.nQI'.2r.A.......O0......p.9.........O...#....Pf..c.N..............XE....L.@.amz.G..=.J....x.{.S.P....PGA......y6~....c....`....G...&...]..0..]....D_...E..X..(...!K........4Q...ZA......j@3~.\|.#.'h.E..:.C\|.%.1~..(.5,..J4.?.E.%..j..D.>..N{~.3(.>.....tp..hm.p....Lg...S.h........3.#.U.l.Q..Oe..N0...v.'.iZ(..>.....W...._..V..&....Q......<r..o..-r......rt.?..,r2O.?.x.99...P.W..7........XZ....".C9...%...i_..F.}.ci..D........:.E@7K(.ez..<....e.P..j......:-..-.....;h........3]....YG[....~.m..X^..\|......O...&"\..X............$.4IG.....(..5,.....Q.u.`y.0.....<....6q.R...n..K7..............`0..Y>.....U...Pm..2M.+.K.?_P....a.9..B....bx........5. ...W...E@.P......?.u......IEND.B`.

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3565
Entropy (8bit):	7.916224311239201
Encrypted:	false
SSDEEP:	96:T2vAQ4+OzE86nkQB4xqLsoarxW81q2vWItaK380z/w:T+Altz36nk/sarxWYq2vpp8so
MD5:	C5724850A35FD802AE76877B3E3D7791
SHA1:	CABFC90D1FCBF534CCB08BCF8373123E8CFB61C2
SHA-256:	98067498B14EF6BF751C0D184FCE4320A0B49584C0DC90569FDF419BB84013F7
SHA-512:	455BDE34B7FDF450EC7A3F9CA2AB9F258923C202E7703035B02AF4898194568012DA75E3130A3F3EB39A3BEBFE19C73C2F468C566395BA1AA28B290670C70E65
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/xDakliA_6hjirY-kSiTQFdrVRcRxYDMDdVWFOQtp97xidbk-At7EwGfV7YQqzSgbpfmpBw6etaT20SIzenYlyyretLrgN1PbR7_OTos=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..il..a...fv......$.IV..!....U.H\.E....(.$n..J..h.Tk..l.3P.v[.a..@.F...lD...LPUG)J.F.D.$.......9^..W.....;. @.y..\|..7o `="...\8r.H.+W..B..g...v...^..%B.....b.?.N\.v.M.\|..,.....>z../\|..#....X......h..l._.N.=z./...Y..dC,...~.......f....4.=..XY...6....p...H........&.Q...vKKKG{{../........Wprod.w...N..8@KK....i_...E+8..../...X.}..........r...=.Kb\..:.+.....K.u.a\|G.r?.b.F...._U.1....iqK1.~.e.......cZ..bK..'.....7.s+.t.\P.i-f.....^....9E..RJ.B.a..$...:.... D......"....+....?....\M...PJa.....EVJ.........m;.h..xy..=S....y......^...<..~...&........<......k....A.W...S...\.._.h,..<........p.k.;\|.SC8.....u^...Y.?...}.@.p........b.G..0g..~.@..0.....'.g.T...]+..^......Y.lW.u.X.z..4.:.....F....I.x\...\|......+.>..a..5...2...L.....[rN.Z...\|.`L;..J....#....H.b...1...QL.Y.. ...;wl-..&....#..xU<.9/.;w...,...Y..$..{R...)........+.J.{..J`.r...i..~...mnn...x\.......&..k...u~.

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3139
Entropy (8bit):	7.907844644588579
Encrypted:	false
SSDEEP:	96:8CpSIcChBhZsygjP6wiEGcARMiJTMen+q4:RL3hZzQPnipx+1
MD5:	F62B4957F65F29E46564BD51E5AC0278
SHA1:	28EEE6F2BE6E1A22D9ED37427AE9AD6721BF03DD
SHA-256:	AF72C980D9EFE0EEEFF612F729B78FEB2DDBFA0948C4E21FF3E52166A692C058
SHA-512:	E3CE13B5A22EDD6E8FEA71138C46DCD0A9924F34197AB033E02634B771C0F98713D192048EA098ADEE39FA5552E40EF0F7BF4D591B68F2E02157317543C98590
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/ndBjgsc_sRzVPfSLYwGYEWLMHYbkfEMjy0u4Foa-TxNDNDi9wn_5rPcPq7ZSEJh-iO3NmYjpfowhqFxrWKyBsJZrHMwtHhqVJBsKG1ryO8N6dKmTosA=h120
Preview:	.PNG........IHDR...x...x.....9d6.....IDATx..m.\Wy....{.....;...:-..!A..-U.F.^'.P..@...qc...U..(.U.UP?.8q.UT.&B. ....RH...;..'q(i..?.;s?.=.13.....;...}..V3.9..3.y....k-%...:..t)..8.....<.8Iw._Bm.";.....-....>..N`.0@....-.{..{....S.(..........h.....Sm...~..U.%.F.U..p.y..?....X..Oo.Q\|,s .....tr..Cl.N........!.+,Z.o...l:Qp.O.8..'..~.....V......L.<..wVc.(.zq.3.....D.a.;..F..M...F.a..\...k....XX."/.rM.l~.3.FK...nM.O.......,..9D...o&...C...\..k...R....W.pM....<0J..c.......s...#.....U..)..X...fM...y+..v^........Y......s...\.l.[...b...Rp...Vc)..le...\\nh...\l...xl...tOc.1..../..A....$L.\...3X{?....D.3;'}....u..2.#.....ZI.<x...9......~O......E..?....@..{.4..].....gO}..c8..:..3p....o..g~.......)[O..;>..C.3.(.i...`.../?.?X.{.g9$.n.%[:I.!....<....m.B.D..Wt.%..M..Nd.MoYf<8\|.q.r.SH..H.-xg..d.w[.Y<..E.r...L.P.ToI$.7i.DV1.-..y..h.X..O..d...{...`..z.^.L..UL.......x....6..n..'8x.....V..`....+Y.!...,.9....D.......].x..c.....[...{X....3.G>..

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1719
Entropy (8bit):	4.4003431597789415
Encrypted:	false
SSDEEP:	48:9/S90MU5IahYdmMqPLmumqrYX3DyZ/jTq98:920MUSahYdmM5qrYHw/jmi
MD5:	7E4968170175907C71DC14EC4841ACAB
SHA1:	C9010640A0CC81506E9721E69E0A508ECFBEAA0A
SHA-256:	D7CE0FF7DA59E9040AC54917098C68952C6B4B849ABFF732908008E20E8DF18B
SHA-512:	A709A66A26B7BAB6511131B89396AE88AF1BD0B8E16B72447B8FEEF3A8D4663670752D3207650456580130111B5D797B3B59E0C739F9CE6BD4D1D5F34C926E9D
Malicious:	false
Reputation:	low
Preview:	<svg id="google-color-logo" width="74" height="24" viewBox="0 0 74 24" xmlns="http://www.w3.org/2000/svg"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"></path><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"></path><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x384, components 3
Category:	dropped
Size (bytes):	39975
Entropy (8bit):	7.956038562229301
Encrypted:	false
SSDEEP:	768:Yp6ZaktUB9oQ9N62ex6rTFt6CWh6sW/mWy+x0TGWGuwJHENfJJak:YcPdQyeFAh6sWObW0T4ZHol
MD5:	AD9E05AA6369227CA1148D86159B5418
SHA1:	0992E7FC72D8651714D3E3226FCDA5F140AC091E
SHA-256:	4E1FFDC86847DE0C72A4E3BCF0B559E65B439CAD79FBDBDAA8F30B6DDCE2D48D
SHA-512:	09960A794B29AF6A5F61AAE794D417565388B8EEA844F5359EDE77FA4580C7274CFEE2BB09DC561B384FB5A34AAB7A0EB377C8A67BA376E37A462707F30374E5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................................................................................................................................................X........................!..1AQ.."a2q.....#BRr..3b...$CS...........Tcs.....5DEU...%4t..................................;........................!1AQa.q....."2....B.R.b#$3Sr.................?..%dy.P.j...&.C@%.....@%..4 CB...-@!....,h.&.C@.....@........&..@6.@6h.j....@.....o.e.\|I...s.e....X..w......8.Ov.....%.np~..1..sD$..W1....9rJPeQ{e6.....o...f..4....8..X..5&......wk.'..I`.8...K..8"..oq..]..R.9+&m.....H.~.....M_*".....QbL.....\..........l..X}...M..=...C.."oa..r...s.B}.z.Hj9\U2.;..d.#_.S<r....x..^.....WP....B..'....}....^....r.f..^...T.l....yi~c.9..2.D.....q..........Y...+.....h.Kxl.......mx....Q...8m..Ojl.r.lAgnzt'K...xi^..fW...".X H._.......].2x..MI.a.....E.HA..)f9...g.U....t...%.E..W.hoZ..JdD[......U/.8$.?u.-.[...Q......6..V.\>b....RH..".bT6RG..

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 341, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	323693
Entropy (8bit):	7.986068807868667
Encrypted:	false
SSDEEP:	6144:jCZe/GmUFwAl6L240d3d0EHEmlMH+acoh0uBScbxJ6BOypcdjavgtbZbP:uZSGwAQi400MSH+JFwbxW/cxavgdZj
MD5:	C19A35B9FBABC519C356B7A8FF127C55
SHA1:	DAC23554B6E97E8F7FE0FD354406587D66170A9D
SHA-256:	C5E75F3FA399C432FD34B737C23D79504819E25FC4464D19A94A16DBB2AC4CD9
SHA-512:	54EC86ACA719C35C1B691A07CB8FE9D238EE11615C41B81D9D0AD2E78994B87E8A02FBB041300D8E3706E941FD2445D5C254EEA0EB05B0DC5BEE96A1DAAF1D99
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/M24xvmPiIlXRQb7ReNXBDMRot0s_5GMSLkP08p5mb9s7bJYkuMcz6kFjeEhCIp6yikIZVfDrOjvgHzHxhSusOQkyC4VajtQxOHRMiazmvDLP_P3JjA?=w1440
Preview:	.PNG........IHDR.......U........t...4IDATx.L.Y.t[....f5.....}v73..!Yd..D.&A.....~....?...~.a...7.%X. .@.E.%..feS73o67o....nwk.9.....N. v..;f3..c...?.'....`lF.f.........."...( ....". ..(.. ...!2...h..`.`.....@.\|.<..!.2..K..!..C$.F."T3@`".@4....M.F.....<...O.?.v...J..M..P.((fP.c@.#.P.....7....."1....\|..o....V.".BDDl...`.h.`.p. .h..D...&.@.Q........NW..........0#.#...).).) :0BD2D3#......0..)."..!......b.?....M0..........'.<Z[...\.w?......{.?....?x...8.Y.X.....o?....72.../.....?.......x..'..'.....?.2..p...D>.C.x......)..fK.....Y...tx.......\|.[..........s/q?...\|...9..~w..Y....]...~..B..p.z..J.s...s.A..s>$...H%..L.@2.c].7.O.../.....( ..).....0.N.......?...2^}........}....,7R-.l.851....=..F&9{t.<..3J1.......gI..c.5.j..oF..d..2......p..C..!...r.4...[TuU..(8.n..1..4......\;B-2...x.S.....X...)jRun]..G.......O....uk..j..on.uy...X.l.6........q....Y......#5hmW.v&......n.G..<..H...7....{i....q.y..zs.<...e.h-8T..R.b.\.:>..t-F..@`.S..StI.....~....~~.

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5188
Entropy (8bit):	7.952928145135762
Encrypted:	false
SSDEEP:	96:9JKglioE6pMcO5oiXZuh+u/U7pLnZ0jnn7dwp5KRf0271XM8zAJPzSjCWdJ28/p2:9J66pTOlI+u/U7pLnZ0jn7dwuRfU8zAd
MD5:	714ACF1F5A07C6204BBD7E59194A2870
SHA1:	3F8170F84AA88CC81D56C4383CF3758E7945D71F
SHA-256:	1C58D90328C77231DAAA4F46073F3BADE862DB0E24A896F1B17912BB52C0FDDA
SHA-512:	FE1D52B327E09B1936B156546DF09F10802ED8D51C474217F4E02FFB8C312F519540136833C5E51A07CC7E25A748F2DECAC7D393885BF4AF05A53CB9C52465B9
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/23ispX_lvsTfMdqVu6ra84IGV85IwhGPQyogx4AOuECIOQYVFewlJ0p4XkFbUoAJXDlc4LwopHv1SNEslf1B4XCDZg0P-85zw3DQ=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..y.T..?..^Uuu7.44;..K..n.Mp.4..Fe.......dr.1.....%.q"q..h......3!.9..M7.`\..l..&.MwUW...?Z<4T5U.....>.p..{..~.}........(P O.\;.)v\.....KP..)....Z.b........b-b<..W$f ..A$b.r....~.L.e...2.;b{[..#eFt0.A...P...2T.#...U-..E...h=p@.N............/.}.+.....v..%.GS..2......A.lE.B....Q.Aw!...g..5...[CM...k6x.6..y/...'.....a.@......m..ETv"l.j.....}W.~.]O.#/..u.XW\g..~.1.LPaX~9....V.Z./...U..\{u4y...~..X<../.0.t.H(.~..V.7....U...6......WH]... .-P..$O\|K......{z.s..z.......&L..7..$..\..!v......^.J....._<..9...3....\.....DY.h2..\[..b;'..]8.r.s?.A@ .>d....S...U...6.U.w.3,....Q.3.(..<.....+k.).F.&...3...0"[6...5.fz....d.\V...s.c^.d..@8W..z....c.G.\|~\YK...9o......c&r.....~....:...{..%y...O.O....}..~.p3.`dLo9.g..U.F... 8.^.gj._.a"...}e..ll:....h...m.....q.g.2.d..I.K.5.p. ...m...e!...\|E..~..X+.@.....>[..8(.>.wy.A?MeD.=S...N....A...k.-_^].N.....eq.PsIA..X.....\|yuC6Lv....X.HA...\|..._...P..vJ....

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7717
Entropy (8bit):	7.964739325563882
Encrypted:	false
SSDEEP:	192:OSlMgKu4t7io7N/LkDKaPW3wMJ7jO8k0O0EV/64rx:xldKusGA/LkDKwjMJ7jOZ0i44rx
MD5:	F303B5D83D1CA82787B6FBFF3E5CFFE7
SHA1:	ECCFF3C0008ED7381DE1ACF4B26A633E3F0838B1
SHA-256:	167B2BD49F989938F884C74A1C9A9D2D3B8BC8F88F23BDA67ECA219D91496199
SHA-512:	DB12766D73D2E28747F9C67D06D527E6DA0B601CDDA046C6CD884FDE662F9E2053F8A61F3BB300F910D4D39142948CA73BDCE90A90B7183C27DDD7E113A68288
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/yemTWtzfavZZqaWs0_ijOcSrLtp93cAfiJA4HqGSpJNYBxe13WWQxeqV7xt7Bdf34Nug2nw2z-a4T85pXURHj8tcOPFh1-l7BvYANqrAXd7zHVQ93x0=h120
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs.................IDATx..y..U}.?...>../........\.....G.Fc.<F.$.K.F.[..b.B..Q......4.W.E@p.3.0....O.U]U.9...[{..]]U=....<...S.N.....DUY..9..X..b..%.e..8..^.X&x.c..%.e..8..^.X&x.c..%.e..8..^.........Hl.%......EQ!._.U.Eq(V./7@n.vf6.5..!.ZT.O.........y..G....\|......?.8'..3..O...l.F.....0.8.}.....n`J../ ............,^L..Q...z8....;.(.....XL.[...<....yYk0..{B..L.x<.....c.O.L&c...y.2..(Be.h..~...E... .G..y...2UN...h....C.9.9..._..{.....K.`.D....j..Y"..h.+U...bu.._..8.{._'..K..;....W9.Y]..G.7.....1..-......a.r..r3.s.E.....z..-.v...}:..#X.....zQ.\|...(..".)...6.......K.`.P}.s..2z.g...60_.1_3..?.h,n.....9..L....T.....%.....7..#.!b"......?...@.....vN^[.=.X...@..\|....BP)....b.....x.. .s.....1.EK....0q,..A...J...7.1...,^r...g..vk.N.U'Rm/Z.....L.>.?a...rI..H.R..x.<.PF1....u.!TOH.i..,&.....&..8.B@.P`..#.......<.....}........m..-...B2..+....yV....sx..u...g.".).z7...H....Z].h..`.l..o..4.$..{;.....=.............'q.......&.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10341
Entropy (8bit):	7.971936202585003
Encrypted:	false
SSDEEP:	192:XfkacKn221yb09Ga5N9bcsOOqlG4fSmMpVFCIN2zhKyQS6+JGZeBaZH:Xhd2xoV5/bzqlNfS56/Xv8eM5
MD5:	E639FEDFEB77DCBC4A25E6AA7116353A
SHA1:	96FC2BD806BF9B04D652EA329762967CC405076C
SHA-256:	DF79FDAEADC0FA5E3FF483649B9FB45B607EE4E54EE79405B90A39BB0F80E020
SHA-512:	908BA29C49F68E8DB7090B03107E08A4C1002A9586F1BEDAF41EC8C72E0A9E01622DF4E495BA673E6B388D49A12EE7F480183C699C9B8E7FF2274C0BDA93D2DD
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/Ucxl6g9AKLX3XmK7an_99LzivIJsXn5cvQdIMM_g4nNFZdULnGa4TH45WVlFu3vKd_c41R28NdjDzCEWgAwb5wjONbIPR4agLFUO1w=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d... .IDATx..y.\Gu.n..jf$.$k.$..ly76x.....`.....y@ +<..^.I.K...cI.O.bC.C.Yb..&.xC...$[.e.....}.:.{o/3...3=.........nU..:uj.p.Gq.Gq.Gq.G.r.3....7..d.3.....#.FD.....9E.P..?.m.......#..N.g...^rA6.rp.............RQ...G.......I....,.....&..x.Cb........X..../.=e;..-...3G...\......YG.o.T:A.8.Y#F..)jC..u..V....@.." ..A..x......GDw....tf....^q.....G..m.g....b..,9..9Y...j...(.h.a..j%..Z.w#....1.I..L.....z..6.]...>(.'..x.{:[...yK...Wd.._x....K.t...S.c..E.RL..T....-...oU z.d2...O./........O...O.`~%]\<..~.....KV\."..R.t..x.Ki.......`....o.$.n</./.C...T...S{...KwM5..s....;/. .:n..F.Z....Wb-j.........Br....<...}...1j....y..._j........t.kL:..v.x2.?..F}j+...3.D.....&...$.M........Z{......uW......[(.X..}:.P.......B.8....L>?........Y....o.....#..7......'.Q./.G...6.NM..T..Z2..~`..n....<.s.w]y.1..n..._..:.T...B.#Bp.s%....=X:../..}..g.sxN.~...n*..k;~.1y-.<..9..'.9.w.....7....3..<'....A...../...4".r.Y..<.\...\.s

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2589
Entropy (8bit):	7.897517005551768
Encrypted:	false
SSDEEP:	48:gc6B/DWd+LWNZa5pAKunbUNeFklgrspiDKyl8KyZqkTsVFtpEkhy:uB7bLQNKunIAF4mKyZRyEFdy
MD5:	60CBC0D927388FDCCFFCBEDE444BBE31
SHA1:	9711037A70336CBDE2695D46EDE582E211D81CBF
SHA-256:	42A62B13D9ED82073E22A8752216EDDDE216436C72F2B1E1DEF9A50C0910C8B0
SHA-512:	47A37FDBEC16161AD3CF7DBC4780E71AE71B7E08A86BC39833DB1B532A3F5C2E4CB302568ACDCB8337D0E84276A8F912F04904AC6539593BC50BC211E0B610A1
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/RwVe2Cm1EjeDmYhdTzr179G0ovq_PCxgPzQ92PO-YxTBEFTHWh0L6Ev8FFDWRgRGrE81vwn95tyg9Ey189OO4kllhhpLAMIsGFZ-UKA=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..Ml............9@.G...?B..`C._...#...P)I.CS......RsI#zj...`..J..V..5....8......P..T....{....?vwf.w............;.3...........#.......Z!..~..=\|U.....\|.-g..).^...\|...<H.,.v....p..t~......chp.V. .<...sA>..\...{.r..y&.gb....N..nt....2W.#.rF]...9:.+gi.N.lo.`Z.LD.WGBE....?6-d:"..'.......RD.{C.8t..m.i!....!:p}S.j.:.&2.[.D...0....fG.oM..Od..(.r..m...@.......mZ.D......m).""..Dt.i...>".ysc.r..".}..N..#.}F`.W..!2....ho[ejxd..4....... P]gjtdp......... .2S..~.(.M.;.P].....a...F.....t.aE?......]Xbj.o......v!w..4.4..y.h.O.........U.....s5....bh...<UYt.).. .^...............ig.H....b6.Z.&....\...;5....g.k\|.QSxbp1.x.x.X..z........$B.@7EU.....l\|......E.>....e...>.<...\..E'.....4y).\.i.8St..L...l.."......P....8.N\|.i!..(..]...N\|....CL..T....aZH..M.....*....&.r..$l...R....>g..x..`9.1.20.$l....+....Y.q....:T.M.."gr....:.^.g..H...s......Y.....Ay=.1>..X6a2..1}...`.W.................zA^.J.O...&....2.3.

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2868
Entropy (8bit):	7.870419486890277
Encrypted:	false
SSDEEP:	48:vd51HhEgDjHoHrsEklQKXZLXihPiWeCNeya8UHFQCojuyCpnVqnIXC61ztY:lbHhEmjIHrs9QKXZ7iZxefHzJ+05NtY
MD5:	FD9E72172066D4A461DAEAC02AD11ABB
SHA1:	B5A8F16D4163F81D6BB94C113C7FDBF63E0765AE
SHA-256:	BCE867BF6CA75C930FA3504FC579600E93149E059BBA181BCFB6848B799F6B39
SHA-512:	767A8018A89FB3D9176066EE2BA3C4EA9BD2E115364EA47F29DE880C1EBB33E31DB482275CC969F44EBFE222E09FBA9EE155C7E755C3F90D21FD66691980C0BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....pHYs.........mh......IDATx..mlS...../i....8..b.%.D.x.....%..I..jh..I..>aV..^...m..M.p>u.6)h...1s`P%......N.!d@.b....}...8..};.:..R..}.s...y..<.\.J.P.8LF7`.S..`..o.\|.at..@......X7.<........C...7H.....X........@....~..N.....C..i.......@f..d........... .....E.Z._)........vB.......H..P...#.I.].]......."..... .O..@.$..).........Z.Q..BW.^.....!@..y..............1.@.... .. M'..H....a.c~...........Cq?....=.. .....>.H..Z.= ...>Za.J.xu.......}.i...z(.a\s......8../...v.'Z...Z..,...u.A.. ..g!$.b.l...@.V'hMz.+..8..1?BN!Z..[..5..R-..>...&..;4.S.3...{.ZC...\|pg!:...$.5..-...X.....4_U.Pq.j..X[..p...ta.;?..u..K6...W$....`a.p%...i..Y..U..k....`....+.Z........f....x..a7../F.....@`...-..............}..SN..k~2.G)....~.2..,y.U...;.....f-X..CS.D....z.E.g..bx../..W.rp.g....g.B..N.5..q..[&.O..d.........N.i6..%@. ...U.I...\|0....C...'.D...........H.rRz...Mj..`N..........1..J.p.n.9.B..\|e......r..[ .:.....}.C...c~.0..k..~t..ZF>..q

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1651
Entropy (8bit):	7.667621565226602
Encrypted:	false
SSDEEP:	48:3p6uEdAl1D4ZoyRIIYDwFi2mfaJ4nhjK0V6X+N:3kuDWZoyRMr1f+whjZQQ
MD5:	0B6D9F3D556E046FA43AD9C31F966968
SHA1:	67325397FC4C0434C3EC60CA1A4601271E5BE389
SHA-256:	33FBAB52B8F48572CB07BA5A739EB72BC11D8DE1234C5AE8C43584B3F948A0CA
SHA-512:	B07FDC7FA7FD06BFD2FA0014891C2CF55C07A292328CB7984ED1396B2F3B874B2080EE9F87F879273BD29E1DD10095AA40944F6EC03FC3CD1902AC88D3D4AD6C
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/mjVS_Izc6fGAvuaT0v--gb2so5mZvAbI5EUMUB41cWB7tpy81trBCR8rIlj8NoKgPzDWGN-Hs97NlW0T9W57YJ5z9A8QQWwXUYa_Zg=h120
Preview:	.PNG........IHDR...`...`......F.....[PLTE...{..kx.ds.....mz...hu...x....]l....Te................}..CT.?Q.CU.>P.JU.AM.@Q.:N....AO.<J.GQ.>O.@P.;L.:K.>J.cq.bq.bp.ap.`o.`n._n.^m.^l.Wf.Rb.Qa.Pa.P`.O_.N_.M^.M].L].L]....Sc.L\.Te.K\.Sc.JZ....K[....K\......J[....lz.IZ.IY......IZ.Q`....JZ.IY.HW.fq......J[.HY.@O.?L.=L.=L.=K.<J.<J.;I.;J.;J.;J.<K.GW.BQ.?N.?N.>M.=L.=M.=L.=M.GV.AP.@N.AN.@N.@M.?L.?M.>M.HY.GX.BQ.@P.@O.?N.>N.IY.GX.BS.AR.AS.@Q.@P.?O.CS.BS.BR.BQ.AP.AQ.@P.GY.CS.BR.AP.DS.BS.AQ.FX.DT.CR.BQ.FX.BR.FW.ET.DS.GX.DU.CT.BS.AS.DT.CS.BS.FV.CT.BT.FW.EU.DT.CU.EV.DU.EV.CT.DU....DV.DV.DU....CT.BT.AS.AR.@R.@R.BS.?Q.>P.BS.>P.@P.?P.>O.>N.=N.<M./aG....(tRNS.6..h..S.J3K.M.OPOONOWl..-+...../...-P.......IDATx...$E.E...S......z^.........-pw..wmo...U...NOK.9..M)....@..W.P.......q...D\|...$y$.3.Md..6...9...1.>.....l.......a7..-s..w..C.....M..#..FE7..w.......@MQoXh(......."...X.D%.M...M: .W...w,6/.K..X..._%...R......9......R......4 ......I;.h..>8P.......c...............e.P.`.....

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3178)
Category:	downloaded
Size (bytes):	340120
Entropy (8bit):	5.552457502268353
Encrypted:	false
SSDEEP:	3072:IhfhGmVIA+j791X1kal7AdrHZG2O7agNAHzBrw8UAHhkwuX8TBu6RT4BG4nr+ZnS:CNe9YFeaPBdQkfGR
MD5:	30466032CD741339C908D62ABDBA5D06
SHA1:	A0FD04853953F6EAEDD10B8443545155F97B6B46
SHA-256:	2CC4E915D560D3BB2C0F759E7045828C1E6458B7BE43031CC16672DFDB45B398
SHA-512:	4C99FDE854BCA3564FD105C994FD58315E8453C962D346E1E292026A4EC4BB613F0A392A603344AB2E34FADB19F6ED7FB450153EBAEFCCCC37BAC9001B20BAC8
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-account-creation-evolution/_/js/k=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.en.gHw4OasNpuE.es5.O/ck=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.bWe33vrUwGU.L.B1.O/am=AQACAzoHQTwX58AHiBCGAQAAAAAgAACYMQBgBg/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,nameview/ed=1/wt=2/ujg=1/rs=ADR-Iupodx3aNP3Fz-JEYFGw_WCeBOKC5w/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,qjNilb,STuCOe,kibjWe,m9oV,vjKJJ,y5vRwf,K1ZKnb,ziZ8Mc,joVoKf,uzifod,GmCzyb,zu7j8,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,YHI3We,YTxL4,vHEMJe,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,IwHAB,LDQI"
Preview:	"use strict";_F_installCss(".Mh0NNb{background-color:#323232;bottom:0;box-sizing:border-box;box-shadow:0px 6px 10px 0px rgba(0,0,0,.14),0px 1px 18px 0px rgba(0,0,0,.12),0px 3px 5px -1px rgba(0,0,0,.2);color:#fff;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;flex-direction:column;font-size:14px;left:0;min-height:48px;position:fixed;right:0;transform:translate(0,100%);visibility:hidden;z-index:99999}.M6tHv{-webkit-box-align:center;box-align:center;align-items:center;align-content:center;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;flex-direction:row;min-height:inherit;padding:0}.aGJE1b{box-flex:1;flex-grow:1;flex-shrink:1;line-height:normal;overflow:hidden;padding:14px 24px;text-overflow:ellipsis;word-break:break-word}.x95qze{align-self:center;color:#eeff41;box-flex:0;flex-grow:0;flex-shrink:0;float:right;text-transform:uppercase;font-weight:500;display:inline-block;cursor:pointer;outline:none;padding:14px 24px}.KYZn9b{background-color:#

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4217
Entropy (8bit):	7.938524730043499
Encrypted:	false
SSDEEP:	96:nJcxQGmS9OitIp09ec05EOkhS6gGiMSojliNX2:Jcx4+tIGYc0YhS7GiMSoRWG
MD5:	44B83718959F1E11C1291D2962C1DAB3
SHA1:	5597E8F846BE88066607927E8C3FAB5E95A0C652
SHA-256:	DC3789CC4765D5CF2BA76888A40340E4CCAF6916022F3A6DFB27DF045C6FCB5B
SHA-512:	8CD7161755EE42104A1518F2177EB1CBAEFE3EFD607AC554AF928E7A902A5F5BB8273C75F274F63003A69CFEBE153A32886C8C73FD6EA9C3D149BD0DC268C6F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..{t..}.?wvV+.V...../.&<....8<".H.#..fx..J........i.Lz.3!.8!Ii^..!8)'. ........../#d.[.V.......G..>..T}..9:3s....w..w~..L1..SL1..~ .....-...x.N...q?..I%p....h...:`..!..@/....l...x...A.BV..8..Y...........u$.L...=.......z..8....&p:P.}I..,...kZ/....Xd..T3....t.....W.....T..5...]....#....8..y&....T.$.....BA.(uG..pM{,..x......t....Gy...y..3.!.........X.-....w.c.m..x...MI...`>.B:.7....0..(...m.<.x.X.O...h.M........\{,.n...%%p...X.e<.kX.#fD.p...X..M.C...-...[..G.xZ..!.....}..s.S..G[:..~..#....L..5gbC...k.5Y....m.t..Sl)Y..QY.....=...nTb9.\|}..n.}....k.))...R[U....._n.E~...X.V....s......7.H....z#..}......Q&\|...5.....\|n....p-5N..:(9".]....D...k.c..^;..4......e...U..S.......2....;...]......=..=........B.D.H..../...K...!teNSCc.z..q!}...v.i..jj8.xv.vM...nn=......u.}.....H9......T..X.^9..?

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 358 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24042
Entropy (8bit):	7.98083443633452
Encrypted:	false
SSDEEP:	384:M+abCjZiwuUQAaCaQPJt/c/6kaL+UjFkif1J4VxHGVdU+rTmwhwY8HTvhEQjWwjf:fIC1ziHBKJqSCMf1J401TmwhL8HbhY7g
MD5:	DB2EAD3893798B7E8E6ABE56E569E5EF
SHA1:	4A0E4D008BD88F366A3C844C42367647B1AD1EE3
SHA-256:	4315EDD72C57C641BE25F6759BACBDE3AD2FEB6EE13134A108C3BBD713B33326
SHA-512:	EB87FA4D6BEF99081A31F02DBEF541F4574743D8DDF508530211C97BE8A9E3D2FCEEF5F7DE869BEF387865ECE7C801E08446DDC03DB24ACB45CD2E767A807182
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/p4M1mK1Lbtc2tt54b6JUQUJ5U8RcwHnEAPH7_87X2NH9Rc8N9ek0Xm2BUq_wmLuOWXlylcDlZFOg4xF3aQtwsyF9frOHoqiQdWVpG-v4VO-Jb_4lIQ
Preview:	.PNG........IHDR...f..........c......sBIT....\|.d... .IDATx...w.]U.....>}f..d..@..H.]jh......{..\..K. H3...XPDAQQ...H(A... H.$.Lz...s.^..3..S&9e..>......9..g......<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<.k..w.....1=[...D.aS.iD...J..BZq...@..I..I.$...T.A..(......HV`..(.^..$..K..E..K.n.j..n.[.O.^M..t....r.....5.A...M.......U..+h..d.q........8.B......S.PE..].s+T....O..-.s..?....n...j...{......w..}..p..lDF....cAG.).$..A.r..%Y.l.F.]_........_"...h..E.."y...q"+#.^r..s..?..4.V..<..'f.l....]...S...b.I.....1.1C.N...UJ.. C.. ..ZJ....PfE............r.g..`.N.P.9..x...H..@.P.v..~.Yi.]....{.E.e8^...."~......;R......]..?%a.Q.w. ...zs....O...m.Z]..{..h..e.O.!...........=m.g.....Et{..D...{..X.X.tn@q..C}"..W........O....;..K..{Dd..N..#.j..Q..9#...Hx<_...WL.~..y..E}..M.v...R.>.%....kmh.C.....;r+P.kT..3.......-.B.+.\p~..a S......_...(.2..,....h.:U.DE......im..o..._.&.@...?....a......d\...D..&...M..24..,.w.......a.

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x565, components 3
Category:	dropped
Size (bytes):	104459
Entropy (8bit):	7.983105365304557
Encrypted:	false
SSDEEP:	1536:6RZlWT+O0JWlX2TvY2TILWRNXD9t/nUJUCW+VWKaJg80497Al3Yp2tQdXN7xmwOh:6RRJH02oWRNXDSF3aJSNc9N7A0yuZCP
MD5:	A136BBF831A04A0215799B18B000981A
SHA1:	22D4814299614B91CA5A0972E381CC77C370C9F8
SHA-256:	B55EA20AC2CB168EBCD3D92CB0B2530947392EE11952E585DDE815B471546786
SHA-512:	0D27EF8D9BC7A48F091E5CC45E4B689A756391235993473EE27413D9C2E1D6FB2F7B61706D0AB39B3F0B8D96A0CACF034DBCF19142A898185E52F549808BD5CD
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................5....".........................................].........................!..1AQ."aq.2.....#BR..br....$3S......Ccs..4d.....%Dt.....T5E.......................................H.........................!1AQ.."aq..2......#BR..3b..$Cr.....4S...Dc.T%............?..N.W..A.`..uH.p.J.hg.Qx.../8.....}.R...D..,.{9K.......d.5..6DD-.o..Jv2L....Sm..5L-..h.e.Q.?%..pyX.....[1....,D..B(..p.%{.`..1..I.........+.."....+...b..E.8~..I. ..]n..S.........e5.Q.s.'E./j.l...]..9.cnsnO..x.&[1p.....SPenN".jwT..F.G6P.n...!.w.i.ev.=....q.fi.e.[k..w...d.H.8....96...gy.pA...'.=...E.s.z..5...N..4E$...%.......A-MT.B..o}....f....b...i.L[G.Y.L1-...g......r(n........Z...#PlT.h..EVTM..C6.o~.S.l..w.(v.U\.x.../X..N. ...s.....h3......M...N.UEC.!a.. [..../x...j...i.Y..4.d.....6.f#k...Bl...s.d]..p/..h..g#3o.+\|3......s..1..[..<..$Z....i..+wl..H^

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (676)
Category:	downloaded
Size (bytes):	42729
Entropy (8bit):	5.422219456024566
Encrypted:	false
SSDEEP:	768:50N5JFMKfmNlXeA80uKPdKl2vMO3Zn7f6hi3N:5aTOKfmvZfuKFASf6hi3N
MD5:	934C67D016086D0A692A59FD75E64E13
SHA1:	5D975FB4CF1514E1172DEC68FA6C834237A9F3B9
SHA-256:	FB0D349EE03CD9050679F9A9BA37A1062086645C1ADB782DFD0D78152222EA6F
SHA-512:	64C5F82A46315C8A6CDC41CEE04AD57CB985440C187CF4BE77BC584B665AD2D67C4219E8DE0B36E31166E8CB546F4E7FEE4C5A2E21A5C6D8D60EB742773C34DA
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var u=ba(this);function v(a,b){if(b)a:{var c=u;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&r(c,a,{configurable:!0,writable:!0,value:b})}}.v("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+e++,k)}.function c(k,f){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:f

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7094
Entropy (8bit):	7.964645757212399
Encrypted:	false
SSDEEP:	192:3vU3EL5KGd8MjY+tCuDwELqk6LF9t86pEaAm6:38A4Gd5M3KDLqlpfREat6
MD5:	10DF50D0F76BF788DC9DB560164B9E77
SHA1:	7CF6203371658A4F3344458C841C1CCE44AF8C4B
SHA-256:	C5373F1E7D948DEC3485F721443313E550881C82CCE88DEFC30C1D927E953318
SHA-512:	B9BBE09EFC3ADB5981E21096F9D0C3C2228CA58058BC685F0C15D93B91E99AFF84C0C5453EAE6FE7C34E3683524B7DA5F685F916CA7A747CC0EB869F019BF93E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....bKGD.............[IDATx..i.\Gv.......-..Iq.2"%..(....e4.1...9#'c 10.$....#H..../.$@. ..A.L.L......l..4..$..(...GR."...._o..:.p..{..}{y."....~..N...S......`....`....`....`....`....`...h........8\(.G......c...bm\|L....6L.B...$..Hm.jS....H.8Z/.-K.v3....].)..bE....?t..\.n>(.nI...J.V.[..J.T..\|....!]..z...].(Fb.rt...r.M......._.........Je......O..?W..j......O.$M.Lk.k}xcF.]jT.dV...+f....}.\.~..tY`.G.......r..r...%.Yk..K..L....E-....$9I..De.hx.5d..[w.0.......%x..{...&..[W]<.m......C..%.h.V...lp,)...F.n.W3.@....&..VTE+...@c.\......m3.......eF....<.C>...X?.p..xm!.[E...g.X.D}-.V..8...y.(...,..,......Y.=.%....Y.x..."s6.6w.SS.8....@...C..5.....X.r.....GB....5.c..<[R..1s`.`C.V..{3!..y._...9d.. .gX%..R`.....t...>{Fr.]dKz..f.....2...!*l0.<..fGn.Y...n`.B.&XC%..y_..../...?R..2...9.....a..~d.......F^(z.].W.;...w....P)......(.....h.G...Y`.;.,`.G.'.7Im..6o.=....4.Us..[Np....:.....JQ-{S......c.....c.,.i.."

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2893
Entropy (8bit):	7.911036665675939
Encrypted:	false
SSDEEP:	48:lFDyBab3qykaN+RCwvIeFX+Voxf+mCcAA3XItMEqDHopYlqzUz6Q0cMA+Kb/AMKl:7DyByqykaNs7IoxWmCK4tME045Uz6hdV
MD5:	58590E213FF6F7DE010CAFF4EAE751B1
SHA1:	D6BA733AD072092849FF0E21AAE9BB7C42E31B8A
SHA-256:	14359177B5AB021C05D501588C14F8D6E4D5F61BBFA4BA76DC2E1A0EA474585D
SHA-512:	F56BD2DCAF72854040347DB9E78ABCCC89F55439B4680D43364D302FCDA76CBF3DBC5C48EC57C81E6E2B55CD6DD642E917FF2B226F14B9636645D35049BB1298
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/1zrYQvVLwo2Mubiugujr-Gn82yOoooWQ1dyIO_ougkdqVKDU_UaL7b-i6i4JNL_7V-gRitDbpIulH5hWGdHlAxp6zoCq4fvNg2PqIvpmh0QE56eXAHA=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..k.......ygv........U.Z.x...b@..4Vk.%.^5-......r.DPkb.A{......@......Q....A\..u`g..}.a..zYv.agv.....y.?..s.sy.y...x<.....x<.....x..)`...V..(.U.'..h..+:T...@:...C.:.&..&H$;.b....xk..-......R..<.g:.G.Q..)o.1DQ..-;....#.....5.z...o]!...p.l..I..J$`..z4..t..c..[0..c..L..0k..+d.+-...`.>.e......3w..]....D2..J..y..\....q.d.....;..[.. .m.....h..M....R'..w.us..8d..[,..A...l~.&k......L.M...~.x......%.q.......e.f......=...8........R..,(.T.4....n.4G.m.>.>...4.2...A8.nG.?.....l..V.D.gS~. ..t.qk..dB.l...Z....Fa...F.m...O...9Re....+...&.m.....A!.L.......o.........T. .c...,...?mBX..."Y.a.&..@.T...T...Zq.._x.6...>..[Z..c....4v"a.9.Y.p.m.k..^$?7A...>.RU.k..VK..].P}..w..T...r23WcN.8d..+.N..1.EW-..Oyy..Y.B....Y$.T..a4..k.....g.L......i/.w.Y..9[[{.&y.jXMC..\|)...i...H$.4.L..7..C.>...........u.. ..[...~.=t.".H.,..../c...wq`.n.........2......<1n$.......P.f6w.N..o..B.U.H.....2..t...:T.e..=..=.....x<....l.4So....

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2589
Entropy (8bit):	7.897517005551768
Encrypted:	false
SSDEEP:	48:gc6B/DWd+LWNZa5pAKunbUNeFklgrspiDKyl8KyZqkTsVFtpEkhy:uB7bLQNKunIAF4mKyZRyEFdy
MD5:	60CBC0D927388FDCCFFCBEDE444BBE31
SHA1:	9711037A70336CBDE2695D46EDE582E211D81CBF
SHA-256:	42A62B13D9ED82073E22A8752216EDDDE216436C72F2B1E1DEF9A50C0910C8B0
SHA-512:	47A37FDBEC16161AD3CF7DBC4780E71AE71B7E08A86BC39833DB1B532A3F5C2E4CB302568ACDCB8337D0E84276A8F912F04904AC6539593BC50BC211E0B610A1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..Ml............9@.G...?B..`C._...#...P)I.CS......RsI#zj...`..J..V..5....8......P..T....{....?vwf.w............;.3...........#.......Z!..~..=\|U.....\|.-g..).^...\|...<H.,.v....p..t~......chp.V. .<...sA>..\...{.r..y&.gb....N..nt....2W.#.rF]...9:.+gi.N.lo.`Z.LD.WGBE....?6-d:"..'.......RD.{C.8t..m.i!....!:p}S.j.:.&2.[.D...0....fG.oM..Od..(.r..m...@.......mZ.D......m).""..Dt.i...>".ysc.r..".}..N..#.}F`.W..!2....ho[ejxd..4....... P]gjtdp......... .2S..~.(.M.;.P].....a...F.....t.aE?......]Xbj.o......v!w..4.4..y.h.O.........U.....s5....bh...<UYt.).. .^...............ig.H....b6.Z.&....\...;5....g.k\|.QSxbp1.x.x.X..z........$B.@7EU.....l\|......E.>....e...>.<...\..E'.....4y).\.i.8St..L...l.."......P....8.N\|.i!..(..]...N\|....CL..T....aZH..M.....*....&.r..$l...R....>g..x..`9.1.20.$l....+....Y.q....:T.M.."gr....:.^.g..H...s......Y.....Ay=.1>..X6a2..1}...`.W.................zA^.J.O...&....2.3.

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54591)
Category:	downloaded
Size (bytes):	1198218
Entropy (8bit):	5.710388331791507
Encrypted:	false
SSDEEP:	24576:fnfZlJyQd2GATWTBnSvm051r/FFW8HOO1Wy0ocL3aic8XlHu52tJz2jk6:fnzJyQ4HT+BSvm051r/FnaXNu52tJz2x
MD5:	FADF6B6486CCE708F5D7D4CC94AFBC88
SHA1:	4F7A8B90BCDE06C22569E92AF0041E366FFD3F75
SHA-256:	AF40B6DB09AFC091815E7E4B7D5EE05B0B04DE568810525293BCEE6C3FBAA69A
SHA-512:	9C8F4B049D506FDC139F3B3867A46D2DC4E56784B2134FD51911F9B8820B730E41B667E75E624D1D77D47090476010452B8BBB02BB7D54FBDAB71D2F4A05172C
Malicious:	false
Reputation:	low
URL:	https://support.google.com/accounts/answer/2917834?visit_id=638524465523040119-1819753442&p=securesignin&hl=en&rd=1
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Sign in on a device that's not yours - Computer - Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="If you sign in temporarily on a computer, phone, or tablet that doesn't belong to you, use a private browsing window. For example: A public computer that's available to lots of people, like at a" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/accounts/answer/2917834?hl=en&co=GENIE.Platform%3DDesktop" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	401
Entropy (8bit):	4.740133908247468
Encrypted:	false
SSDEEP:	12:tvcmdU/i3tLIsKd2aCJNfOQxNVtd7Svq6JwCA7V:tk2U/i3tv46vxNdSvqCw9V
MD5:	E2DBF6370751567D561BB64649CB3342
SHA1:	42792B6B81D2386B95F295CA7473C929CFE4FB0C
SHA-256:	C1BD37E48A2AFA7523AED613951F5411A03DC1597344A9639DDAA4EFF32F0D7E
SHA-512:	792FABC52F0D9DC8BDAC569C0AED7C6B61C29293B8EE43C62A50533F23EFE440C9EB4B34393D3BA82CBB32A99F43EA16ABBE2B187F9A88E013579194C43B4178
Malicious:	false
Reputation:	low
Preview:	<svg id="help" width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path fill="#5f6368" d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 17h-2v-2h2v2zm2.07-7.75l-.9.92C13.45 12.9 13 13.5 13 15h-2v-.5c0-1.1.45-2.1 1.17-2.83l1.24-1.26c.37-.36.59-.86.59-1.41 0-1.1-.9-2-2-2s-2 .9-2 2H8c0-2.21 1.79-4 4-4s4 1.79 4 4c0 .88-.36 1.68-.93 2.25z"></path></svg>.

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	432
Entropy (8bit):	5.272563717074735
Encrypted:	false
SSDEEP:	12:hYA0HqJmqGVS79hLFBkAAqJmPm/esHbJJ4Nbx4IQL:hYPcBNBvPz7j4NW
MD5:	86CB0ABDC4BE1EAB53060BF9262F040E
SHA1:	6BF0820B0FD4F2E2CDB9AA03FD799E1D43513E2B
SHA-256:	6C28984ACBEEC1DBEE4AC384402D29FCCE6EB4D9ACD14A9092AFBC0BB0B601E8
SHA-512:	673EFB69CFD654DF57CD92952E06BFCF7B5EB61DF9BCABFD5AD9D16E59ACD32504DB252FAB7D1DFB2708B4FDAE0FED1ECF0D08805066BC1290022664077AFF49
Malicious:	false
Reputation:	low
URL:	https://scone-pa.clients6.google.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.SCWmpDDGjPk.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA%2Fm%3D__features__
Preview:	<!DOCTYPE html>.<html>.<head>.<title></title>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.<script type="text/javascript" nonce="qDeWbnpEYilF29LMVDqoOg">. window['startup'] = function() {. googleapis.server.init();. };.</script>.<script type="text/javascript". src="https://apis.google.com/js/googleapis.proxy.js?onload=startup" async. defer nonce="qDeWbnpEYilF29LMVDqoOg"></script>.</head>.<body>.</body>.</html>.

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (829)
Category:	downloaded
Size (bytes):	330937
Entropy (8bit):	5.603602210107194
Encrypted:	false
SSDEEP:	3072:yiF5VZu8lOwY+NuWBryjHspCZG/szT81YoaCxyxRa1vYC7CJl:vZY+QWBry7xZG/QTIwCxyvaxO
MD5:	01FFE52CEDFAC91DB631AFB50EC0406D
SHA1:	6C46D6F85C315D1B5A0F7207FFC9C11F51E91509
SHA-256:	5E7AA90ED8DAF375A49334177305EAA26FD800A2A580EFE1DA3388AD51B094D7
SHA-512:	0F3B013D65A6BF7ACBC350C0A664FBC4549D388599A9442A6A7E0EFC5BBD33DA5DADD8F4D0C63B0CA10C0EF891265A2921E370563CE92ACC1D0B977423B67AF4
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var fa=ca(this);function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hnhn:Bn
MD5:	BEEDCB4EB0A559E6CE2D1E20D38CB330
SHA1:	A04EE9801770C0E81B170D7992EC3735E878AA58
SHA-256:	6E9D99B87595B07B10676B68EBE9AA8B63DF7D9A74F59CC91EED60EA1FBDC6EF
SHA-512:	BD101CDF7FDF1210127D83CE76E3F6F6F1378259F0A55C112E39C49A9131B8636FB020E07E985B8427A35B62A544F2F7C5F75B11AD69EF2C4AE67A41BD5898B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkaIlEjlsLtKRIFDWlIR0c=?alt=proto
Preview:	CgkKBw1pSEdHGgA=

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1554
Entropy (8bit):	4.133417333200851
Encrypted:	false
SSDEEP:	24:tV0U/S903tFQRhYj45kRHDu9+u1lUetmCmifvqbbLaHu9HGn1u1lIdUWA/jTq9Kr:Z/S90PU5I1YdtmMqPLmum1YUUZ/jTq98
MD5:	C5B92D70540100ACBE7A089EDD4AD521
SHA1:	289EDD48A26448C16B24D8CEE077891AC256B63C
SHA-256:	C2193804A202EB72C93FC3B18733063DA2FC140C1991AD624980C836AFD61D27
SHA-512:	84244179B2669C0113F00FAADF2C4539F68DADD880A2E36149A31849AB3C654FE98F3FF3FDB1483438CC970FD25E29B35A85E7BE0F1B5CC490C3DCD249FD35A7
Malicious:	false
Reputation:	low
URL:	https://about.google/assets-products/img/glue-google-solid-logo.svg
Preview:	<svg id="google-solid-logo" width="74" height="24" viewBox="0 0 74 24" xmlns="http://www.w3.org/2000/svg"><path fill="#5f6368" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24zm15.76-2c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52zm28.58-8.03h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3.52 1.74 0 3.1 1.5 3.1 3.54.01

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10051
Entropy (8bit):	7.969290114185508
Encrypted:	false
SSDEEP:	192:7DgOY9e1FUAHDFm52CY3Dm5zQEGibOXj4Jx4jX5H8cdoX5:7Dg7OCAHRQ2CFoi+wx+qcOX5
MD5:	C48F5B981826BB17E35E118421610C36
SHA1:	7A7CE4A5962E64D847286937C30650093C93566F
SHA-256:	291921EC65CB3762CCF73C61F039CF97BCABC3EA83A7B1EEFA7398A509DBF67F
SHA-512:	FCA9826B85F7818036DE52CBC53EFA746B42F705E1BB03886942505E624E1937A97248A7A80ECDD023F1E03E9A42D516E9434E6929225B135D650FA3E73CEC57
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/QuPkNiIrKnxQiue2xno3-rcRB6yg-hk6W5XISyjaY1EJ4hNq-_ZHCcYPdVDnI9E3xrQWrWX-VZI5kHRdO4C6RgvXPBvJN3s_ee9_gXR6gZrmjmXel2Su=h120
Preview:	.PNG........IHDR...x...x.....9d6...'.IDATx..}w..Gu...}..M].$w...0..0<.C.. 8.B.......$$..&..`.m .flcl..>;.f.-..l.U.o{..s.?..^].2.J.MB...g..wwvw~3g.9g.T.Gp......`vq....G.>.q....v......#.$..y.(F@.......mG.u..-@\|.p.m.n...`#.9...X...`..Ch..a.yK.\|...z .w...mXzI..........6... ......p...F.\|&.~1......4K.}.!h.2..V>..\|1.k.'z..zQ]....}A..S...Z.....B....Ft...<.M.'.7...@....`....X...m.....8...y..o.~...]. ...M....UX...n.w../...!..0P.`u.........6.w9.%@}...sK...E........v......M.UK..>}..>...X..9..>...d...}..-.FL".......p.@.[+.X.)....z.. ..-...`.^..U....6..k}w.\|.)..D.`bUE.&".1aP.{.....tUyW.u[...z.\|X.....K ?xz^..t......U.+1.f#..."bb.>...3P.p..R..5..A.0..9.....7,._y7/...d].y.m....@...=..&..i#...]..y{.._:...e............l....l.....K4.L..J..TE.8...?mw..Bcqn....),<...3@P.H......&W...N.D.. w.DD..<.$`s..m_.\|..-ixm.\|H.\|..."....$.=...Hd.h..f[;}r'.$..,.......&...Z....."..&.@..C..)...j....K.z...`.R.Pe..8<....R..q.LR.....&.....:(.uM".$...J(.w...$w2..<u.f ....DR%.0.?..~

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	817
Entropy (8bit):	7.381646783346233
Encrypted:	false
SSDEEP:	12:6v/79B/6Ts/G43jjRB4iS/4bSHOOO4u7zzzzzzzbgkokpAfdhXJ2/oi/3ypm353o:O/6+3xHNt7zzzzzzzbo5lj726m35gz3
MD5:	8241731FF6D4C4B54D50DDB229ABD5AD
SHA1:	732D211AA1407DF9DD3E68728D62A1F92286A716
SHA-256:	D89908B7F4188864173BBDB3021BAF269468E9117BB0717CAA9823E4578961D0
SHA-512:	AC847205DCE1EB6E0F9B21E935B10C2F4C939B0F1AD38D62C2DD9DAFE87AF4D4D6A0F9D79F30F1948D7D627136D2DFD90322955023818A1C42250202CF328AF0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs.................sRGB.........gAMA......a.....IDATx...=N[A...cH"P.R......l.%x!I.A.....(BKI..D..@F...5.g.3..#.s..wl...L^...V...,....,....,....,...>Y.....{\|gg.'...6...\|...M...7.........}..6...W.$z.>.?'.....+.'.O...U.....^.]>.'\|...f...W..#.8..#...ef.[.j....+X....X....X....X....X\..,.K...:.E.N....~N..b..L....;.2.E....}..C)s_..G`q..G`q..G`q..G`q..G`q..G`q..G`q..G`q..G`q...}...9P..,....,....,.....\|6O...t.....(...`.n..ism.v.W.q7.....I..N.'....K4q.....U.L.6..&n;.........^.....H`...=0q}......:.].\.>e.L\.F.&.o........A.......KR`..':0q...8w..u.:kh..~g...f.S...p....b"..t....?......N..A.....pbY.V.......W.J.j..#.....L..jG&p.5#...Z...P...n.td.;P22..(......L`grG&.C9#..\...X...vnld.w`Ld.wbhd.wdHdfW;.:..L.8.hq..G`q..G`q..G`q....w..7y^.....7.....IEND.B`.

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17340
Entropy (8bit):	5.067364655703976
Encrypted:	false
SSDEEP:	192:uuNqIZ4Z106EgmQDL5aroqOwqDTCFzvRk6OUhypB+pLx4RHFn/xQT/rp9otXAjpk:9CZ1/yGMzHJ9Cx8/F9oJkk
MD5:	834F6EA34164404280588344845E1ED1
SHA1:	00A7EF46A463F946EFDF592404A8ABD64C7F41AF
SHA-256:	E266F524EC965D09C15A044FAD2A225063F7834F35DFD322222E4EA1C488ECC8
SHA-512:	0ABC054313F6EF0123BB435FE0918EBD4AFCD0617FE1501897DE3F49642C4B6E1AE0C0575AC45872F48B286E596254F05EC86E3DADC95EB05F301EB6FBF8DA3A
Malicious:	false
Reputation:	low
URL:	"https://blog.google/api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube"
Preview:	{"meta":{"total_count":3846},"next_page":"/api/v2/latest?paginate=12&tags=android%2Candroid-tv%2Ccalendar%2Cchrome%2Cchromebooks%2Cchromecast%2Cclassroom%2Cdocs%2Cdrive%2Cforms%2Cgmail%2Cgoogle-ads%2Cgoogle-assistant%2Cgoogle-cloud%2Cgoogle-duo%2Cgoogle-earth%2Cgoogle-fi%2Cgoogle-fit%2Cgoogle-one%2Cgoogle-pay%2Cgoogle-play%2Cgoogle-shopping%2Cgoogle-voice%2Cgoogle-wifi%2Cmeet%2Ckeep%2Cmaps%2Cmessages%2Cnews%2Cphotos%2Cpixel%2Cpixelbook%2Csearch%2Csheets%2Csites%2Cslides%2Cstadia%2Ctranslate%2Cwear-os-by-google%2Cyoutube&fields=&is_main_hero=False&show_hero=True&cursor=2","results":[{"category":"article","tag_name":"Android enterprise","days_since_published":4,"eyebrow":"<time class=\"uni-timesince\" datetime=\"2024-05-23 16:00:00+00:00\" aria-label=\"May 23\">May 23</time> / Android enterprise","slug":"google-ai-on-android-at-work","sitespace_render":"","full_url":"https://blog.google/products/android-enterprise/google-ai-on-android-at-work/","published":"2024-05-23T16:00:00Z","publish

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2457
Entropy (8bit):	7.887151510458016
Encrypted:	false
SSDEEP:	48:Sy+oGjsKDEg8Kn4sKbMYht8rhHNIsmj2EmpOSPIvDcSUxhnCm4M9Vd91WKSCl+F:b+oLF/WutOhesmj2Emp2QSUfnZJtr+F
MD5:	E7951DB538299C0758D7EAC93E9E68E1
SHA1:	AEE95EF08CB635E22594BC0DD9719B16A5516EF4
SHA-256:	026E10CF13A19B3D9D71042DB070BA55AF8A77EADC8E22D9B16E3E94F33C2229
SHA-512:	3887F6AF641C3CF1EDA84724D1660491251FE6076EE27E99D33D1D93BE7E831F18B798EBA43240CC6A292DA649B5D6ED7E92794DB3CD22FA9F14EEBB0D4A169A
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/DaaQa-Y-b3_IAhu6SBFb2vRl8PFR5iuCLwLszc16_OTlLrEFvFF9P4CS0ui-414nG9016ul3dQD1R3mHtmMx4P1bIA-zRXuPpFN4yw=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....PIDATx...m.........{Y...\X....(....EM..h.i..h.RE.j.&ML.V.4M./....j.I.ZS#E.j...+O.X....wW.......03./...egv...=.Wp...3..g.?....i..i..i..i..i......B.y<]e....B..d.eW.k.a...!...wy9..%.km./I3B#.x...)......EI.A,n..X.....o...{......h..@..o.........=5B.......-..`...R~.....x.....I...~.z>..X..JH...U....g...m./.Txy...5Wzm..C`...]..".m..4zm......F.......6.8.}...A..r:.......8.t.!...9.p..CN..r:.............y.CB:.AO..\|M.L....%.W.....(........5.0...m..h.jmO..........8.t.!...9.p..CN..rJ.t.w.\|...V.......4.4hl0.]k.r.{.V".....V ...%...l.....5.R&......=...r<p..k#,...3_...;r..?s..z.o_.....\|..e...f[....G&L.......\.\..K-..%..s....?fx.#........:..P,.c...o.0.VI.`..v..N..).,n.j.o..Z...4....w..w.R..'..U-\P..]X.B.."..:...%.*.}WX.....)..^I..l;?)x....?>.@...Y....u&."..1cH.....,'.$...ndKp...&.h.......^..e...,n.UI.............3..,(..@..\;Y05!8.....%...?#.S.....M.'.-V.Q...p..=k./.5....O2#>8..g..+.2..,.?..{.4N.<.<..2.

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	325
Entropy (8bit):	6.551829350697385
Encrypted:	false
SSDEEP:	6:6v/lhP2kR97X7f6pYZGFX9Ys6b09yXlMBTZ4cBz/dltCGJEjHBZfg8DAX1p:6v/7bR9PfaYZlb0QVMn1ntCGujfY8D8
MD5:	D2ED1A1C13122130683A1DD2F5469B4A
SHA1:	A734A0791DE8E2C406F3258C1639A4BEEA97803D
SHA-256:	31BBB7A1055A0D32FF28AAC23F79BDD65CC4E0532A7BDA1EDB2B680B9401F043
SHA-512:	9F0014A0A7DB008192E9112C518F7B38B6FCDAAB140C77863B158DD5A28B06A5E89DEC1D1B59768A597BE387031A12FD79F13DD2BB96DA0837FA2A73AB7964AA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.....H.......IDATx...A..@.....8..$.t.."...=.n...R;..C\|.,E....hJDDDD4;...........7..(...<..5.Vk....>]EY...G..o..Dp.....9..U....@...=......C(...E.......................X.....7................9.............P@g.hC..=`..x....x.M.<R.C..{-R."d....q..~-lu....S.j.s?f........."""......C........IEND.B`.

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	32361
Entropy (8bit):	5.566513905149771
Encrypted:	false
SSDEEP:	384:a3eVqS2LWuqlk9JGg3fWXhGsDfKAuMGuZfECEM5EWpizI:8egWyL8
MD5:	190630BE68B26F29321F2F612A0CDFF0
SHA1:	F52D5262A46C8CA9500A5E9570C8EBBD730AC234
SHA-256:	1AD4A82FA8EEC63834904A45807C688676AA0EC3FA9D3343A7D47C7DB93F72EA
SHA-512:	18E35322F745ABC2D49D6E5529740353EE30B580F1C690C9A74FB3136E01447F00BD33CCED20663F61E68EA8194FB7E5D16A1029590709507B635701368943CF
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans+Text:400,500,700,400i,500i,700i\|Google+Sans:400,500\|Google+Sans+Display:400\|Product+Sans:400&lang=en"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1393
Entropy (8bit):	7.741695342683955
Encrypted:	false
SSDEEP:	24:D/6Bm17qS9DbPDQ45Gkds4VbbBYdVATpFxb+hs3xl0Sau164l2kFSWZR2vtUx2lH:D/6BmIG7hdbYdVules3xla+64l9wxVUo
MD5:	0EAA75E84E3B5D76E26B5BDEF873465E
SHA1:	79DAEA62FA0952E79644B23305210D61B6CBB631
SHA-256:	D375701BEED766135440CC65BD4CEDE9CC455C0116A362E124C3C2158EDCEFF4
SHA-512:	EE117EEF8002ABEF55C7521FDF265C597226994BDD4EDDF9965E22E1FBA4D8526544A6427F847C2BEA3B586B3E4C06BEB6584D1CCEF5A06AD4739CAF837DB7EB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..[;l.A..;1!@.@......@" ....44\|KD.......E..(A"....ih ...@.H..B..)............>{w{...H..n.;;og.vfw..T.YM....^.m`...b.0.....V..^\....`Jo..B.-..}....F...)..wq..<6........5.L.a.a.q.}.."...J...g....FZ.....4m.4..n..i.g.8............3...w./:..Be....r.T%.0......g5..v.:..X.r.V..?...c_3.J...u ........da....).c.3p(...T.l.E..3....Q.9.R7{...'...MTQ. ..@...R.....j:up....j...w#?...\|.n.}E.........Q:.Q.._..n....W.Q...x.:.X...aU.....o;../4MS..P...Z....%...a.V...S...x...B..FfL{g....%'^......kd.C.U..7.;.....@{.\|.+K.o.0+;.........\%..,qA...(...@......."Gdd..^..C..c.w..S[.P....`......B^....~.c.'t...4 ...P..I$.....,.-.....Z.^..\M.....d.`...TV.LC.....`..H.....KYYB..,......o.../.\|v...d.Y......H.....q..Bq/. 09...7.@....."."n.".d..:'..r...x..F.O......m.i....}.....SS.'g7...\|1..d.dA........:T._..>.t....M...A..$....vN[.#..\|..7...,.J.."w...D.v4..F2..?}..@.mclf>w+...h.m..

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	5.307661970610565
Encrypted:	false
SSDEEP:	24:E1pXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1pXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	8F2BE0DEF3279BEE50C0CFA805ED08BF
SHA1:	DE8D807D18C2CCB370A4F7862F03A16F4820890E
SHA-256:	658C3743E102ACB9742575AE382021F1480D52325368C632F3EA7C7137B1BA01
SHA-512:	AE9EAF9E400191FCDB4ECD04877A2BFC745F871F3849839E57D587A313777BFB54A573BBEEC17EE3A08D640CD1BDD5043709C726F5BBD5797E5EEAA4C8A47493
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/bc657243\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4657
Entropy (8bit):	7.917223420242452
Encrypted:	false
SSDEEP:	96:f+tcvjYJuBvnUAXd1XpD62cq2fDlFyANmVlL9MdpU9wo7:ac0WvXpG2BcflgGDKwo7
MD5:	167A8D64D846EDC2B009636D17582BDD
SHA1:	7ECCA71578241BE5F51C3AF478F5D60F95E6E191
SHA-256:	576A0A869E77E5A405BA34854CA7D3F290D5FBD9973E58B11B9B548DE850E172
SHA-512:	2C7A0C317ACCC779DA4F284E648746A2C2F41FF722DF0B7887D805404DAEB122A1446DA94BB1AE324EA37827FC3F16FDB2739281EEAC4BDB0CAE772BCA768D3F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....IDATx..{PTW..[k...<v3.......[....d..DFE$F.FD......1..b#...J4`DEEC"....AA.A..#.."..v..8[....7{i.}.^NG...o54M..\|....M..M..6.&.D.h.J..Z.z}{zz....r.c...@..b.4......G...=..M.R.u.K.$I...9..l.h.......5.......!1...[[[.............^....8...AY_X.........-...O.'-~..I%.\|~. ...8...%..0ASS..wO......Gp.8.r..IdB~.DB..I.y}.Y.a=.,.kX...G...{.....PVV&Khoo.{.+G..t.01....o...>6..8d....)...Df.Aaa!...Css3tvvr{...m.q+.......O.^.8d..bW.d.s..................h,.&..zC....O..j..L.W.+'.^..,C...^.......e,C..D.P....z..r.vZ..;0.G.OQ../C...............K..!WIx.zC.....u.W....L..E{.p....5.X......klVT.uuu...."...e.J.......>...?}...S.%..Cy.@e....n...o.......7.b.w\...1{/M..7......kC...r..q..........0.'.K...l.NA.\|.z..C8..2t..-y}...."W....k.q3.n.b..#.........).,.K.;w...8.rtn\..[.J1.........].r........,E..@.H.'..'..5...^.z.....2.....Z..............s...@.2C.LY.P..W.(...0V.5.;../.......Q..Y.f.K8......&...@.h.w...90.!..n..2d2......H...7.b..3..

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6717
Entropy (8bit):	7.9593647465549235
Encrypted:	false
SSDEEP:	96:PCvZH8WyHwrZECNCpO0lsOZyK1DDsMpnBTQWDkT349Or7UbdpldpHtKU+ijsT:6x5+CP0lyKF3nFQGkEYrIdpBHhu
MD5:	C6501FF5D90563175E58D9FF273BE03A
SHA1:	668981A528FF280E6F74652856C54F1281921BBB
SHA-256:	201CA90FF6ED9673057F8717DC152BF3463DD0AA7693243AF4F79B5F0F447B8F
SHA-512:	4BC4EEF5DFB8359426115A1EA8B4D13EDFD462AF554D56FBCFCC9EFC5EE4F79901B1EFD96DB0C81ECA7ED59315910064D586C164A372EBBCECDA86619A17156D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{.dW}.?.s.....y...hw.Z=V+.]-..B/.W.B..2$.N.r..).+E.e........Q.......;N0rl.B..=..z!.....kW3..W...?n.LO..~.......;.....=..;..;.a....`....`....`....`....`....`....`....`....DH;......3..k..j.....Q...w=....J....mV..]}t....q..q...o.J..k+....n....?..wmk....kp.........E.bQ.....o).J..D.]7k.e..P..XU... ].V.+..YV.?.k.5.t...;g^\'{<.}....rS!4.[.Z......>.j..u.7k....y%JS..Y...I..1......i.....].\|....c`H`..&].Z.s>s.0...[..........rS..?..vo.." .5R...m.k.7.5l+o\+wRo..:.kb...W...+d-&..c6.~H..7....;.'..o.}..lu...8.k...~.T...-.......<{A\.......L>....}..i.A.!..g...()dK..O...5K...}.8S.....iE....\|...+.(.R(.......@p..D.pa....N.....7....]..{.F.2$.d..sO'A?k/Gu.^.1.I.k .F...Z_-.QOm{..P....p..H.S....k..c7.N...(...?k]..:.....gR..iz7z"...h.g.C.g.........c.7.......M...#kQ!..5Z.p.D%.........W#.id.i....M....+...-.,,.....8....Q....A'..Ykn...'.M..M.5....L..'..K.=..[..@!P.>..J..y.N...%.p..HQY.#.].-.N..N..

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	64047
Entropy (8bit):	5.600690408192519
Encrypted:	false
SSDEEP:	768:8+1NK2AEUwWyKlTCKmkSRYOAF27OAd5GW/K5SU0e0qDoVVchC2/jW3rgqv:DWFzSRYwroW/KK2fe
MD5:	0691A0284541E31B0D8584E2E7F4A29C
SHA1:	895B5DF3472FD5DA3110852F954D8146232032A2
SHA-256:	7053DEF58737C584B633C9EFAE1848CA99FA6130C1843B16FB72DE9A656C8C04
SHA-512:	1173CB0E0DA40BC1C0929618E565F277C7F3D97D11D33398CF309EC4F9B6BE94DD474B816CE136E380BF55E10BEE6EDF9FD2711EDBCBE36A9BE8169C1193025D
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var dsb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.IS(a)},esb=function(){return{I:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},V:[{I:"path",Hc:!0,S:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (775)
Category:	downloaded
Size (bytes):	1526
Entropy (8bit):	5.316634537572382
Encrypted:	false
SSDEEP:	24:kMSxSI7xW50t/rx1ENjjYpW/3kU+2k9plpdIeoQbZG93ENGbNaWbGbcb2FON8ZjU:w7xW50V+5fuJNoWw0NGbkWbGbrdZjrI
MD5:	E83B9FC36568E5DC50653C64218E6901
SHA1:	5734C1B78B7130DFFE0186044EFAEFDFDA29F2F0
SHA-256:	96DD9C6C4E8992E0E2435FE8B577039E335AFB74F5A45C408C66E8CAB1F165C4
SHA-512:	68F0F4FAA4B65C458A4D9808B1D8FFF25F3C1C859DA63D593063890744D149434C96F90AA69847498F2F8A91B9C70BA7DF12D618BFBA301585FDEAB726979910
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-account-creation-evolution/_/js/k=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.en.gHw4OasNpuE.es5.O/ck=boq-account-creation-evolution.AccountLifecyclePlatformSignupUi.bWe33vrUwGU.L.B1.O/am=AQACAzoHQTwX58AHiBCGAQAAAAAgAACYMQBgBg/d=1/exm=AvtSve,E87wgc,EFQ78c,GmCzyb,I6YDgd,IZT63,IwHAB,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VBiA0d,WpP9Yc,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,byfTOb,f8Gu1e,hc6Ubd,inNHtf,joVoKf,kibjWe,lsjVmc,ltDFwf,lwddkf,m9oV,n73qwf,oLggrd,pxq3x,qPYxq,qjNilb,qmdT9,rmumx,siKnQd,soHxf,tUnxGc,uzifod,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,nameview/ed=1/wt=2/ujg=1/rs=ADR-Iupodx3aNP3Fz-JEYFGw_WCeBOKC5w/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=bm51tf"
Preview:	"use strict";this.default_AccountLifecyclePlatformSignupUi=this.default_AccountLifecyclePlatformSignupUi\|\|{};(function(_){var window=this;.try{._.k("kMFpHd");._.vib=new _.lf(_.rn);._.m();._.k("bm51tf");.var yib=!!(_.jh[0]>>29&1);var Aib=function(a,b,c,d,e){this.fa=a;this.Da=b;this.ka=c;this.Aa=d;this.Ka=e;this.aa=0;this.da=zib(this)},Bib=function(a){var b={};_.Ma(a.gM(),function(e){b[e]=!0});var c=a.OL(),d=a.aM();return new Aib(a.TI(),1E3c.aa(),a.rL(),1E3d.aa(),b)},zib=function(a){return Math.random()Math.min(a.DaMath.pow(a.ka,a.aa),a.Aa)},EU=function(a,b){return a.aa>=a.fa?!1:null!=b?!!a.Ka[b]:!0};var FU=function(a){_.H.call(this,a.Ea);this.Ic=null;this.fa=a.Ca.lP;this.ka=a.Ca.metadata;a=a.Ca.l9;this.da=a.fa.bind(a)};_.z(FU,_.H);FU.Ma=_.H.Ma;FU.Ba=function(){return{Ca:{lP:_.wib,metadata:_.vib,l9:_.pib}}};FU.prototype.aa=function(a,b){if(1!=this.ka.getType(a.Bd()))return _.In(a);var c=this.fa.aa;return(c=c?Bib(c):null)&&EU(c)?_.qra(a,Cib(this,a,b,c)):_.In(a)};.var Cib=function(a,b,

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 293, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	214394
Entropy (8bit):	7.995317950907745
Encrypted:	true
SSDEEP:	6144:pL5p9dy3HvguZH/fGRdPYd7UChwbUbexbwdbS5sP5er:FH9dyXvguZ/fMfwwbwNGQi
MD5:	27CC1E3DFD83DF4EECCD96E3B8A21718
SHA1:	0922E85980536F44B107135FBC3450C4FFA17574
SHA-256:	1AA4E8B536EAA40010CC9FD5C12971EAF198AE431724247AE8B369A6A3C3EAC7
SHA-512:	8DB4C77E36A724AFC3EA7C008CD0F86A1D9DA0940B052ABCD13A6945E5A29F9D0E6DD006D1B28CAC0EB75D0FF08374BA37CA599EAD37ACA0D3AFC115E4E30D41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......%.......Z.....sBIT....\|.d... .IDATx...i.f.u..;u.g{.~{...m...iq.H..M...I..(..... A.#1..1. ..8A..K..0.D."..,...E$..p...3..^fzzz}...}.{..nm.y...L?.u.N.:..O.:UW~......D@DPJ..%.."...>..3{.....2........hT......,- .1.b.4.......}..`.1&......_...)..]..k.4.4e<......8.Y.~.........1Q...I%shum6....Kt;f.I...qJ..4{....o...e[mF..}M.rE.v.=ns.....n....-..G*...$...(......_..{..qDxh............oo...a...u......R......Si..po...p...d.'..N...,..%pm..Z.............k~u..^.F......s..[...5.s.....^T.tOsq..^.W..\|.D...g..r....M.1lPr....S.;.%>.R........&.s.U...W.Dc..mL,...q.....g].m.......P..?\..H.`......SM.z..Ibq\|c.i@.....m.rD.z.}..)..L..;..k........0q.L..m..q.....L.....k.C.0&.M...VzSadF.=M.=...+...s....W..R...5.hLx....1...Q..I...^.$S.....w_.._b<.'..~.......,/cLM]..<cyy...v....Oy..).S.....\|..O0.W.#..,.Z..". LFS...c.Ap.@2....4..F.3....%q..Z2..0M.19../.@......7.&....4..H.9..6L$.3...f....:D."1X..@&.....sz.6<`..h..c....3&.sc../.c.~'u;.B..v....S.7.l

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5805
Entropy (8bit):	7.9542006310437126
Encrypted:	false
SSDEEP:	96:t9UzyN3uV9rFvd89BSK+b+n3P/WB64548U3zuH1pgD/ln5KCKH:/U2N+V9rj8DSK+bB5DKuH1oln5lq
MD5:	D0656A971972F0807AB746BE522ADD05
SHA1:	5DEB386A5C5481D9A4AE91E37E175A4E656AE245
SHA-256:	C7B0BC63C6F5631DADD177E4EA287231713A0FF78A36213806ACC9BF760A4D4E
SHA-512:	6DC7991439E91FF4901ACF4AB19FBFC83A9B9E5CB26ABB9987FA72937C84609407A894806B2E7802419C7A550C7F3075DCE0DA33063705ECC51F8F957A6D3D79
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/3-xiN81vze40pCNon5Fg7bDiK8tDcEZdzIj5f3vyZ32265N-D-xGDg2tqu6MOfLsnf_Sej0vdNHhaTCL0b3MVtOm0hKy2jaAm_C6dbrCivif65LxVuc9=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....dIDATx..y....?.{o/4K./..(.`.d......8..I.8.3.e.%...8nAt.h.'.8O6......q.lFE.D.PD.f...Uu......t..[....y.~.....U.:...s.D..%J.)Rh.r.....2M5$..16.5.. .D...E."&....'..=/u.WnK..@P....=Y.=kf..Vc..F..F9i..~80..:T..P...A.BU2j.RF....m.........1...<.W.]...S.."=M..:..H...&.z...?......H.[RE...!i...k..".;.'b.6o".5..$..>...0...9=A.:o.D\..:ew&..Q..w>v].............D....H..<.f..^..sF.....3OD......iIk..D..........`w.t.. .pyQ.[..H...)6.c:....F..#.....DE.......V.{...,.'V>.4.......g.8....fnK.c.FD)>a[#.~....=.%..!Y....-.{..._&.0..._V...R......=..2 .nu..7....]..K...PT..nE..mO..y..lk..X......<.j1...%..z..k\|.....a[#.U..1..Y.......C>.....w.ra.$...k..'....}yr.?..~....?.....c8.m......y.yj....\|..=c.u.}{S...Pm.b...j}J..G>.....E.^...... ..B.c>u..=..omj..["O...HGe+2.u...H8wn......m..H.6......x.,_.;.;..)z........%q..*$.qj...8....8=.y.. \|sW..4.s;-.A....>Y..7Q..e.-:o........s...I..s.,_u.P.....`=c.4..+.%q;...

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2571
Entropy (8bit):	7.841383828832313
Encrypted:	false
SSDEEP:	48:pHdsnaGXZg+M4e4oJKVPfjx+uAzp5+i7+AjAJVs71z/YKg0dNGRa3nzzQpkuCE/1:TGXa+M4e4oJKVPff+pTb8s7tYKg0HGRT
MD5:	17DD15778517BE6FA704D181739E7836
SHA1:	CABC2D123EB963C33863E3F9CA0270E7D7074212
SHA-256:	99E78EE6CD2E303D2E2576C5FBDA8BF117328D62196C4E977CB846D88B72B561
SHA-512:	D6A6A7CEB236DF923D9E1A39D9ECDD312554E3600180C9F88C78762C08D53EA327BB44D3A440C0711C28D0BF28B8CA4CFF4ED0F7E2D15E14902A1B416C9D7E6F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2...WIDATx....UU..?.....!.Z>P.J..~K")c.. ..2L.a.5S..aZJ....W..AIA45..M.5...Y....1P..K......>....9..sy..>3g......_..{....`..a..a..a..a..a..a..a..a..a..Z...3......p.V.MN..>.]......b....9.9@..J......Y`#p.8Y.k,J`..!.v........,N..4.,.z................Dt.Q.u..x....0F.I..[...=.Q..Cb:2j.oL.....td.LwL...{b:2j&.s...Ux.X.<..........o...<..'p.8...B.^..g...1..j....`......a8...........8&p.1....\pL..c........\m......5..\-.2...a...X....`.........F/ F.o.f~..ZK.z).@f...w.a..c.........'."K..H..%d.w.{..K..I_.N...\|.]@.z..v.;.......<.x......&...c.u....C....Q.......k.......@'.8.^...6.O..n,1...H....\..f......#..q.;.o##.JL?-.&.N'.S..........)i.......e.u).3q...ci.....j."...J.:E...:.#p....g...,N.l.N..<........V.s.k...ib...m!$...,S..... f.5....$,.F......i\-.4`.zm...Ph.1../..'...?.f...D`<..\....V.7...w.N......N(.v2P.w.R..q.

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26089
Entropy (8bit):	5.244351183569659
Encrypted:	false
SSDEEP:	192:vekx3Xijwgk8jSXFc7xJy9EmDkoN8Yk8r7kPeyPKFSKwLfSVwSVlaXUd:5x3X8w7kPeyiSr7D0akd
MD5:	9979778639A88DEFC3B4AD8A7439E1B7
SHA1:	CE7B8FEC68168727B5FB5B76E56A772924D1B716
SHA-256:	44658AF786EFD3539F1AB43990F6C0AC311BEF84413408CF95BC7CFF2DC62292
SHA-512:	7A6123DD8C077D59311570D02D2B3D5F02D90F93231750B96E58446C354135D2F4D6F4D448445CFA4FDB649B3A76426D4ADC9F5BE239F52C8AFECDD4321E0959
Malicious:	false
Reputation:	low
URL:	https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58
Preview:	<!DOCTYPE html>..<html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <meta charset="utf-8">.. <meta content="width=300, initial-scale=1" name="viewport">.. <meta name="jingle" value="notranslate">.. <meta name="description" content=".">.. <title>Gmail</title>..<style>.. html, body {.. font-family: Arial, sans-serif;.. background: #fff;.. margin: 0;.. padding: 0;.. border: 0;.. position: absolute;.. height: 100%;.. min-width: 100%;.. font-size: 13px;.. color: #404040;.. direction: ltr;.. -webkit-text-size-adjust: none;.. }.. button,.. input[type=button],.. input[type=submit] {.. font-family: Arial, sans-serif;.. }.. a,.. a:hover,.. a:visited {.. color: #427fed;.. cursor: pointer;.. text-decoration: none;.. }.. a:hover {.. text-decoration: underline;.. }.. h1 {.. font-size: 20px;.. color: #262626;.. margin: 0 0 15px;.. font-weight: normal;.. }.. h2 {.. font-size: 14px;.. color: #262626;.. margin: 0 0 15px

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 900x507, components 3
Category:	downloaded
Size (bytes):	18172
Entropy (8bit):	7.553072132887418
Encrypted:	false
SSDEEP:	384:QEMOWlDqKffzH3/feSHHJ6CrwOHcEM/FG0D61Dzc2rL:QEl8frPAAwO8EM/M1f9
MD5:	0C014E003E033F8C10A0C3E19AB1A82C
SHA1:	01DA7351BB0A23C2A84A855536DB12CB3A409E7C
SHA-256:	9483976D1C39A25780BB7E5DB83091DA798E16C5FC8273CA48573AAD5AA6B4E2
SHA-512:	85D7D8F356C66E45DB92ECF8777A3209C5EE284A9D54750CC18186224D4E4BCC8F19B5212EDAB53B8DA007FCC280CC18BBABCA4AF81AB39F602DAA71D6E06886
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/1If7OvDczdPnWNfp6LhWWjmSpreHL-7WlUojUGgr4HhdU7Cqfh2NWNlX-evRfwDNgf3ojMiKYP5DSmJ9gLKhLdXyR5Zg9JRFjke_vtbnRqAftdbh4oY=w1440-l90-sg-rj-c0xffffff
Preview:	......JFIF...........................................................................................................................................................".........................................\........................!1....AQqs..234ar....."#$5B.....Rt...CSb......%Du......c...ETe....................................:........................13..!2AQqr......4Ra."B.....b................?..F..^.............................................................................................................................................................................................................x..>.@.w.E=.T..U..p.n......by..f'.5...t.7i...S.O...8.7.....F..?.r..e.....j..1..G...~.6wZ.-.}.T8..g.....p..E..."...E_.}.....];...}J~.....f.j........>.t6F...J..&....N...g.......\X...}.E........QV....'.*..g:.&.U[.uD_...=.Nq.5..Q.U3......u.T..=..r8.M%E{'..[D.N.......................................................................zN.4Mu....UW%4.,.6.Q.)...(..uC...bfx.5.2.t..

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 287, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	374689
Entropy (8bit):	7.989828341431557
Encrypted:	false
SSDEEP:	6144:fYzAbkaJw7rCCTmYjs+KUXQhEiV3TaESRcKFKn1WMCHJNUfS1EGU/S0fD9uDGYBB:AzAbjQrCQjJmJaEKZUnILUK1P079uD9
MD5:	9DFC177F59BCC8567988BDC302F05B7E
SHA1:	F72128465036FDD6D119F1CFE6F37C9010F908E6
SHA-256:	61F1CF23F1ADEE8CB6510AA0CFBFDE9E956985788F1BE71556C20CC806FEF2B3
SHA-512:	E10FB7B41B1055C8C510BC2CB0C3A5C5678081DF1465D363A49154DD6689C2FA0DE9CF5C4F4FEED366FD8742F1556741EE92C78B4F0231CC15D7FEF5B99FB638
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/4Ae0zBYFQOJlGcRaDFUatVMPtUP7L-EcbwRa2p1o2tD5xISasgZmgKCgfIyMVYcsUPs5YHOUsDfy8T07EPP7mvL8h9NhmnVbRpOKq4v7jXLZ6yzVHN0q?=w1440
Preview:	.PNG........IHDR.............7.~)....sBIT....\|.d... .IDATx...w.d.q...W....j..x.`0..;. ....R...RGI.F...gW..V+...R..)-)Z...g0..t.....e..7...e.......P.z..eFFd./"22!..gF.._.7.....4zfg...1,M....g8....k...X...0.........I.....<....FK .A.+..Q...p3....\<.....:.r ..Z.` .V.....Xx......._[b. Y(........%..f....].s..UrBA....yD..>.Q........!.J.c^....f......Y.M.........AN.X..3B..F{.M.......!R.."..YRg.+._..f...Z..qx.0A.c,..Y....k....'Q.1...g.3.....?..d4vb...q#.%(......a.L..}.>..<p..Z......P)9....z.G\|....(.}w..4......".......M..:.c..\|...8~....+(..:..S.0.r.Z...m.b........Kt.......0.MZ.W...9L:...I>...Ka/.c..2kK+...+...../~......#....G.?..."W.~....".YEm.a...D..;:.........4z..G..q..uT..&3...}>..0.n.9p...c...$..Y.*....F.._......_eU.F.QP.P....KAA..$IBT. d.j.....Y.{...p..16Fwk....... .JB^.c../0s....Vd%.......I..).r.M6..............r....hU...[..y[.;]..mhK....j......F}].. .p...,#.A>..O?w.n....V.!....b4g.%..$.zS.@....2n......8..)\|.(z.:&.L...........+.....}.....d...&>o+7.V8..o3\|.

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54883)
Category:	downloaded
Size (bytes):	1077636
Entropy (8bit):	5.727731124518255
Encrypted:	false
SSDEEP:	24576:8yJpQd2GdxTBnSvm051r/FjXuHpowqly0ocL3aic8XTrEuwe:8yJpQ4MJBSvm051r/F6aXXEuwe
MD5:	932845D3571980523E501B00C5B9676F
SHA1:	4042EA0FA9D7EB21ADE490CEFAF45C39C21A542D
SHA-256:	3C92C0CA8AEAF414112FE9A4349D401D295AFC121C81037E085FB2BEF1E237D7
SHA-512:	7B4D5081D8D432D1E9B901D811270FB9D8674A9133D25BD5ABFB412C9930CF9ABE63B109098E62FC90E1ECDB3438394923569B014DEE4DAB0FD0670D8F9CF348
Malicious:	false
Reputation:	low
URL:	https://support.google.com/accounts
Preview:	<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/accounts/?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)format('woff2');unicode-rang

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://support.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	808
Entropy (8bit):	7.577372563287115
Encrypted:	false
SSDEEP:	12:6v/7GtWjYhqz1qQY1ZS/CuQcG12Rw6LrOkliwxjEPWlXr4ENm59ZQAcHKdoikfkI:ntcY2DuA/CuDT/8wleWhr4EpAcHAI
MD5:	5B90B8A3714E3BFDC28A3C649585993A
SHA1:	9DF71FED81180EF41EB6815A4550C16AB5675254
SHA-256:	1E31AA0FCFF4C20BA63B755B8860A242D99C8F426C63524E6B003E2BA563CBE4
SHA-512:	FC82B76736114021715195A37E840D12F98CD2E6E82CC1A4F9D32AE29555C4273801A6E8166E853412D8AC1E543E2BA86AFC3867D9D5A2E29994055E33680073
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.....H.......IDATx...5t.U.....].......wi.\|....k..2...T..y.k.1..o.9...Y{...F............)...Ya...........).1...'.....a....#q.3..s.}JZ....9..$^....q.\...O+..k".....c..x..m.5.r.y.....[60!....~...\!N\./.........../..G...g...B...w..Y.........iie..Z('%.............s-...ts...6..f....(_.....[B`o...;..v.(......[.v.....8G..^o..4.[.s./..l9G..7B...[....?.N.Q.q......k..V..."........{...H....7F..N.E...5.3.>1.q....O..%[..}'..%...c.>.8D..c...$.q.}G.ts..'...H.z..xE......@.....%.....@.H..l..^$O-.n...W........,.U....).....)"P......Z..,%.....(#..`...j.v.\..`. _7.P.....)..yj.\..c..7^.v.>e..D.72.....\|M........gr.?6M\|....).m..e..0:...../:.5.x..(...E..f....Dt....M(..M.WD7......#..0 6.....Dt..Dt....M.AD3....%..M+.u..Q...q5...o...W......X.e.78O.....~.)Q.....IEND.B`.

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5768
Entropy (8bit):	7.946214875202777
Encrypted:	false
SSDEEP:	96:OQGuo59+jUsyVrme0/fiv8l7aZdXjh6KYa4W8qoM3aFTOSoCXBiSxxWQkoqvz+Si:/G/59VdmBfiv8uZj0KSz2KBICXB13W7y
MD5:	637B33E9B1AF14772A7AC084143EF1AE
SHA1:	2E534207967F8605F191FE52A1036862D51AF53D
SHA-256:	31D53D5568A39F058193D8CDAE97A42643E7360F8168201BD0A7D641729B31CB
SHA-512:	DF68F22022D2A9C03647034E243363BEA15CA9EF442864F8AF1F4C7BE6427E176E82F30634A3071C1CE48DD80E95967A086C8D00AF4CDD8DBB6227201D7CD97F
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/TlJWqgqxCA0it6tZ-n8OCkn-Om5nIEy19gQd-5UXCSpECGKSBNksOSSRa-fU6-DTcvHwnqzlnKc4A5k882qcSW15NTY2PHyNJz7b=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....?IDATx..yxU.....;.....aG,. ...D..u..Z...Z....;S.g.....V.3].:R..U...hEqi.,...e......{..}.`.{..97!...$O..;.....o_..#G..9.)...............#}.......T9"D...P.C<R4.l.......n..G.?..z..r.?..G.Dy.1p"..uz..\|(J...TKA(.....D.:DP..D.#F#.u....@w..F\|mP.o...6......K....z...Q.3....D....P&..1..%..~....-..ND....E@...YA...U.WO1.%....-[.2.G..n/..:.'....I.8}@...Q.I.FI..O. .....@!...d.Y........Y%K>]......W.7.\.\L.=...+.0...D...0....j.....nRk..x..9].T;t;..N..=D.idx8.C..@.H......mE.n...../..s..:..t...N.{5.s%.s........ !$."..VX..\|.....UW..t..?;q...b&;\|..2Cl..a..D.....VV...^...W.2...x...#2..Q1..a5....AT}R...}_[~UW..%..s...:...&.hO..-...AUcP....S..{aMW.U..4n.q.......O{....Bc.vn.W....'...v.F0..z...Bhyf.....M..S=u..p...8........q.u..-Z.h..B.....u....\|&3../.U.D#.A\|..~.-.g.8....m.......y....".=ZZ....;.._.4.?a...<.b)......M.....i.Sr..a..<.WN..-...1f..)....A.Z..\|....L. .UO..M..7...s.mJ..wYh....\9y.....m..q.....X.Z

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14796, version 1.0
Category:	downloaded
Size (bytes):	14796
Entropy (8bit):	7.982540816037374
Encrypted:	false
SSDEEP:	192:500PiJaGs6M7Ury7W2TYPIJ0BXMx0XKH6k8cfVHULW3Xcc4c9iSUqIcW/40k+H5g:2aeMQxxBX00L2VC+X4chU3cUjHkeW
MD5:	675DF44DB2BAFC60DF7052DA41F6C94B
SHA1:	8B766EB9F1DC9F4F6B6C81028570FD03A5F59509
SHA-256:	8300BA70904617A47A80E9098FE00B3F7AEFD328519318C420289B0BBDFB5E2C
SHA-512:	201864ED71D01588CDADC0BB0E074BD67BF37F8ECF5E570EE87EBC7510CCE70D70DD8979EB170D7560B223B625A0A2BBFA8985E637AE0389EDA25C3134CA8F93
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2
Preview:	wOF2......9........$..9p..........................".....(.`........P........6.$.... .....%..........}.i6.....T..F!.'....sr2..{`..:.K..".....BZ.[p.B..l..<...iX...t..bo.+X..s.K...k/6..!/...A.K.....uT.;q. ZE.J.z.:.p.3.m.Or....~..3.\|..x..3.H.Yt.Lhf...w...{...S.eP............'L.F.....,...aT..A./V~D......~.Y.....}.}.f....K.........m.s.l..`.O@#..0..#>w.H.5pW..9....u.cZ.p.................X...$t..=7...J:UQ...j.\|}..=.,]..\|...`0H...g...miX.g.v.7...!.....8..",...El..*.Al..N.F......H.....s.L...R..z..G..>Ij..i..s.k[.....KK..x....2./z....._2H..d.O..`.e/..:.=.Ry.l...L..a.t@...Pv......1q.^.a~<..R..1..4.p.3..h.....M.s..`X.0........@-.KH6=..E...6...<.( ...VV.^.`.'.<.......?.=L#4"%^\|-"....IR.uM,..n....Z1.l..\|r..n.%r..Z.........!.........&7....L..z....m~/C7L"..L...B...n"((.....z..FM..\..Q.W.p}G.[8..+X..x.a..""X"..^........z.5"......o.....l...Mi[....:....F@..}h.?!.....y[<j5..p./...#..d......M..^....S7.0i..C..[.z.>..=Q....V.N9]...4.9....g]Q.'.'..,.X.....W

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7060, version 1.0
Category:	downloaded
Size (bytes):	7060
Entropy (8bit):	7.965390774927561
Encrypted:	false
SSDEEP:	96:JVhAH9n3i/HLXAfmYBaNZVqjXzsJmHUguBA9ikWnkwz6sTr9+QGDkJUEluFanxxk:zKH9n3fmYBaNqjUuUzS9fc6WcWRx6z
MD5:	7A6C0568007C5692727D88A3F35D427C
SHA1:	41B70C6167AF04E3EDD81E3932C7283F391FBFC7
SHA-256:	403679CC3CA882653C21AEF04BC7566E5155D1B93A9FDB196D1F07D9AAAB20F9
SHA-512:	EEAE2F5631AC4D9D0D895B23EB1B3C5700BEB8E82C5E05B0707366B69173090A6BD55C9C0AA8D83C758C67E0141E3AEAD7C65D5A06987A533BE3345CEDC6E5EB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2
Preview:	wOF2..............9....2.........................d..v.6.`....H..<....(.r..H..p.6.$.... ..~. ..).B3..%.q.fH...(W..(J......'2,....'..^I..9.2%.I\R.W..f...a3....t+I.!._#...`xj?...;..`.......j.....X<....Or...?..dA-e...]P.......N...B..?I\|8z7...Sa.......N.Qh<m..<..7...q@.QZ.Gk..p.m.\|......-xy....m...-.._....z.=]^.........Vq4>.t.g.=/..S........c...K.D.H.w.....[.L2.L..o-..t.B.C.+.,.....J...V.G.T..,........_.)Yv...;.J.v\...H./.i9..;...#N.KG..V...f.]}....kj.w{....V..[..i.'+}..8..XN..).NkV.f9ukC..Pk...Q.Z......._...N.......'.)Tj...`...d...V....b[.;..C..RA....i;.gD8E.6.a\f?.<.J...F.4 M.......4..CZ. }V.56!........&..P\|7.G........Q.k.}.$..#.K..}P@...R.-...%l...xY...^......Y.VO.....h...Z.<.&e...eR...."..j.........,.)%.]......0i..sV.......1.-.c. ..".>....EP...S..'@..\./=.`......7..}O.dH?.S3.4'E...........1...gJ4....)/..dd]s....Ixa.,JgZ&....../....._...[.c..W...'.xb=[Ln.lHdO..8.^...dU..K.\...w#....U.... _IR4v.qMtO...3.X3.Oq..W.a....L4...[...,..&.T.c..$...\|c

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5805
Entropy (8bit):	7.9542006310437126
Encrypted:	false
SSDEEP:	96:t9UzyN3uV9rFvd89BSK+b+n3P/WB64548U3zuH1pgD/ln5KCKH:/U2N+V9rj8DSK+bB5DKuH1oln5lq
MD5:	D0656A971972F0807AB746BE522ADD05
SHA1:	5DEB386A5C5481D9A4AE91E37E175A4E656AE245
SHA-256:	C7B0BC63C6F5631DADD177E4EA287231713A0FF78A36213806ACC9BF760A4D4E
SHA-512:	6DC7991439E91FF4901ACF4AB19FBFC83A9B9E5CB26ABB9987FA72937C84609407A894806B2E7802419C7A550C7F3075DCE0DA33063705ECC51F8F957A6D3D79
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/SP5F8XlkxjIfM3uEu47BolKEBwkqWrOfyvwywHut48p0AZgedzyhcoevSaJCEBUJNXvy7dplTwI3s6dizxE1lNXFa-RkpU9nkIAmnSU=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....dIDATx..y....?.{o/4K./..(.`.d......8..I.8.3.e.%...8nAt.h.'.8O6......q.lFE.D.PD.f...Uu......t..[....y.~.....U.:...s.D..%J.)Rh.r.....2M5$..16.5.. .D...E."&....'..=/u.WnK..@P....=Y.=kf..Vc..F..F9i..~80..:T..P...A.BU2j.RF....m.........1...<.W.]...S.."=M..:..H...&.z...?......H.[RE...!i...k..".;.'b.6o".5..$..>...0...9=A.:o.D\..:ew&..Q..w>v].............D....H..<.f..^..sF.....3OD......iIk..D..........`w.t.. .pyQ.[..H...)6.c:....F..#.....DE.......V.{...,.'V>.4.......g.8....fnK.c.FD)>a[#.~....=.%..!Y....-.{..._&.0..._V...R......=..2 .nu..7....]..K...PT..nE..mO..y..lk..X......<.j1...%..z..k\|.....a[#.U..1..Y.......C>.....w.ra.$...k..'....}yr.?..~....?.....c8.m......y.yj....\|..=c.u.}{S...Pm.b...j}J..G>.....E.^...... ..B.c>u..=..omj..["O...HGe+2.u...H8wn......m..H.6......x.,_.;.;..)z........%q..*$.qj...8....8=.y.. \|sW..4.s;-.A....>Y..7Q..e.-:o........s...I..s.,_u.P.....`=c.4..+.%q;...

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2002
Entropy (8bit):	7.785694192036961
Encrypted:	false
SSDEEP:	24:OrVGY7zdSfpppppgfCtYFgewzB0iRcnpppppy1ssvn/62a+DRgHdBxfxnBt3q3UR:GGY7ztCtYFgegBhcNsHf92pxDp0wAG8o
MD5:	277569215A9A6E7C6B7553892F210CCB
SHA1:	7A483FE9E0A54E1ADD9BA3684F1DE7CB92BB031A
SHA-256:	4F65200DF0A0F28A9427FA0CCC75D604422BA6DC2487437032D068576058955F
SHA-512:	5A6436A4EEBAC0D5CE458843EEAB33F24A5A5F194F4477A6BABA28FC15803DF79A43A07134D37D2276827137E99D3C0628B2474F874F0457A864E54C6B4D8167
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/oLcLMz42MUjK9Iv4M4YSOfBIHcxUh9dck3PN8kT8FR_z9_mUlWzyf4JHqPavPsKHJ7FR2rlGZf51vgEv1k5i0QQai4_J0ffYkIFbaJA=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx...k..U.....EJki..0......bD#D%..4......X$.Z...T...c.....c"..`@CPATP.p..j ...B..^..EJ.p.x.....L......syv.{...sH$..D".#.....j...`.,.yO..ql..mh..$.#...q"^..p4.c..n(q/n.........H.;`8p..w..n.qM.o.}'.-3.. >..L....^...TN.[d8p...S6u....]R.b....3Q`QCMn.Gz}W..[C.'.1.x#>.9..Y....u%..3.X.=....yu$...^....O...Z.p.. ...v,m......Ip....:.....U.&..r"..............9.\...L..c..OhTe/.R.`....0....Y.P.<.T.0%....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....G..;:.6)s{....?.6z\|.7....].f...8.$J.#.G.t...S.U.....\Z.~....S.....M.en. ..!a..../...aT.*s/o/.n.f..9../...6....+....SVx...w.1....5......vR!uJ....2..;.l....[..:3/x..z'>.B....e>.....>..8..'.n..G}.$3-...x.........o...,...h....A..0..U1!.,-.Vg..Y.....vY9........8....Z..,..S.4dS....c.....s...m.....e...$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.e........{..w..Y.\3K4&x.s.UB.....a..1G.$W..7..

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.2359263506290326
Encrypted:	false
SSDEEP:	3:qinP90NY:qyP1
MD5:	61E2EA93EFAF10B2992B4C2EF674D289
SHA1:	EC875A631721E88C2FCA67A102979FE644690FB3
SHA-256:	66BBDB685149CE76736D8C388554648D3625B4708DAC2F8000C0350CB6DB69F0
SHA-512:	A575F34C9DE42D74998C959E4D74DEADF545A7950094DB67AD4BEA63BE566D06B9E03D650DC559564B1F9EEBF600AD278DCD8F604815E375F145FE22C2B1ADFB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlmCSgb5HbdNxIFDYOoWz0SBQ3Fk8Qk?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw3Fk8QkGgA=

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.542000661265563
Encrypted:	false
SSDEEP:	3:yVkxzNDrMKcwVbF7KnZ:yVkxtkwVbF7KZ
MD5:	B3B89B9C275343BC6798E3A83564FDDB
SHA1:	32367475C527C3F5E5DB0BF42C348816FF4D157B
SHA-256:	900FB968F7FD9EA55F600AC9002A89E56AB56597DA7BDE04DEAAE6CC77AEB276
SHA-512:	ADB6938104E802B0936630B216CDE732F21ECA6E60E7A31D1B9C8FF52B5A66A712A7ECDE3F8ED4915D15C0A71C33A9788060E1E22999094C39020A1F8C636874
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	CiUKDQ0ZARP6GgQIVhgCIAEKCw3oIX6GGgQISxgCCgcN05ioBxoA

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	85454
Entropy (8bit):	7.997696947262879
Encrypted:	true
SSDEEP:	1536:MfOsRZJtElnFJQBO5BvNj2oCp0mxawNULF+5+NTg0+rrOgAR9ldT2Kr:MpjJSlnFKEvNjb+lxa+ULF+ENTyOvR9p
MD5:	B2BA32608F5D55B079B2058C4152D6B6
SHA1:	F7D0166BED0460FE8C63585037A522BCA691DFDF
SHA-256:	AB66748C5BE087E3607AE8467FD084D42BEB04B151A71319F01627415788369C
SHA-512:	9C13630272672E7911F6E148BA3729A71EE20CB1BA8B3AC694E3B23C067D5B078312B943677ED0832553A1863F9162966C69E7AFB780A1A67F858FD6691CE445
Malicious:	false
Reputation:	low
Preview:	RIFF.M..WEBPVP8 .M...y.......>m2.G.#+..2.....en)9..@?~U.;..15...K.~q.....@.K.7...G..._4.lz......'._..g.....w.W..(.....x.....=../7..}..\.+.....w./..u}W?.~.\|....U....^?.?V...Y.[....t......../..#.k..(...._.....:.........~...........,.O.?.>._.._.........s...............;:...rpg.."...._.....R...u.S.z...y.4..JP.]......^.M..~.R.......c.B.m.'....{;. F....g.B..:,.e[....Yb...x]....>E..H.?91k.0..!@b.w.}..%..]...D3rm4LN...=..Q....>......b..J..I..Gq..~.......pL..2'..at[..C..n%......I'L.=.V..{..?S.y.JZG....P..:K..%5".. ..}oA.)E>.Y.G.Q{d../..s..\#..........M.H....,\|..Gp.q..u.y.N..sc.......<e... ..QM_y.....?W..X<.Q..W.;3!.K._...A...v... .....z.....o...c....q..?....\...$... ].,.z.7&........He..#...M%..'R.A.....x.w...x..:...g.Z...$....zgX...'...+...!....:.Y]......I.....M..K.."..i.....=O...M.P.r.Vo.Y.....}..'...S.o"E..?.@..5h...o+"i>....L..-.b t.4..Xc....M.ko...9....Y..r....=.:.s1A...80.......E.;(0..D.I.K]........../i$.#.U._..4k.T...[D. 7._.l..]....[...).KM..

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3655
Entropy (8bit):	7.92275086212785
Encrypted:	false
SSDEEP:	96:iIyDaghuXnkxmEBQfYC2Bj4v2JEBpcAN4zbaAmEgApZatG9rbFW:G5HxBuYf14v2eG/sjAj/FW
MD5:	46D5A81B878A7F4ADEB2D489837B6609
SHA1:	0192F2F6B4E6A66E774C987B8B190242CB131BF7
SHA-256:	B9E7DAFEF568894BDCCF21A427A0617B7D6DC20DC9BD36854501EEC80A6C5A23
SHA-512:	22E25606A25B763F689B74F9A45F7AF61C63942391665118F0BF4F120A5992D3FC16D551B36D086980F2719A79884F82551992E0F40653D867B13A55A838D40E
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/uXQAnb9kkOOscMDg_kwY2RSfnmvhEwiXPcoSYS2EV9KP7nCfwvACXo8fEuUK5AJh7Qyyr-M3CpB-51s01C0ALvx647CfjDH9xrQs=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..yl......fv.98..@p..-GE...Qh......h..VjQU.E-.W.h%*.s..H...R%.^-..b;..W....-.i.PH .............c..[k?.yv.....~...Q.F..5j.Q.F..YP........@....f,"@.p..x.s.H...f.1.b.....L.?`....e.).GD....m..7...~f......O.UI.....X..a.ASh.3....;.+.]_I.$.o.:.~..&3J...AfU.GYB..v.W.QV.......=.<..\.P.jp.y...bF....1...].+..a.i.......l]...Q...$W.R.5...3zJ.OU......K.o.r>XyK....u.....<.? ..]p.....R.....Rp.@.......D...\U9...7....U.b`.\B..mL...]W....A.Z.....u....H......B..d.Fp..f.f.l+.x8=O6......-7....8.].-.x..r'M.....#....d...v....x.Co...l.dc.O...(.8v.A&..I..u.F..s...8t..O.Y....../..B...p.9..HK.2h.e..B9w".x.4.W...h...n9.A...2.y..].,.S....\l.<.Q.xz..W.....,k.B..]p%r.t.&......$X.P..C.\j.. ..d2Orz.1.....rrn!...'.<.........)...p.....e...$.s}.........:.f0]r.....E..s....Z.....o....bzK&!....Z...3.!7C.H...w.Au..0....U.t[~AqR..y..w.Q.`..".p<.<...,..;.\tm5j..f.-.%e.O.....Ed...NJ.u..w.a..\|..q.cga......+.d.d_

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3371
Entropy (8bit):	7.886614052822181
Encrypted:	false
SSDEEP:	96:a2kvgA2m5ed9WT7AZWuiOh9wZu+BbP+/0b+EWoAQc0Ke7/:cimhAYuiEngznnJ/
MD5:	FCC6A5A590F8A56FE298D45CFC875ED5
SHA1:	B1CE3FE1F22648F519C54127FA472A1F1FE6D08C
SHA-256:	477BA241EC4BD3F78A83B8045AC219E9B304075D26A739C41B62F5E429136503
SHA-512:	C697AEE0299352FAC08926EE83BFCB4DED2AF5FA976919454996A8E985D5C30DB369EAE67EB8542AA77F2D25DC3DAC88C0361387A197FCF49AF2FFDBFBF580F2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{..U..?.....3.d&..!..[K..(......u....,-w4..V.(f.....H.H.&.nF..H.P....e.`+..IH...y...g....}.1L.s....C..jR......._..............................=..n>z.n....-.^X.s...C.<.Hv..W..S/...[.....4.V../._...n....n.ab..l..B.1L........T.S...}\|....e...`.v>..............k^.`...I....d.............1SG.Mm7......sG.7l&U.[.3....&.{\|.U)N+..^.._.].77D.ugRd.e;...`%p..>7v....0...Mm.v.u..^)n(..H.g.e;)...=...SB.....#......4..B.N..`.v.._.......-..U)..37......W..k.e;.....`..n.0.-..%...7/Y{..`...4..K...W.!]F...n9............SN.4....\|......W..\.../o...W...i.^.e;..f....Zb...}B.b...dS.[/?....R.EC.i...!..K..%yb..1.(J".....\..u..!.._.-.Y....VH.m.Rn.-./.z.....K....i.-.Y.l......R\......v\|Q.....K.e;&p.p-.fm...1b........+7.M......l..[.........U.T..M.s....:...\|.D..m......`n.T....._x..."..G"..).O.....3..P.#.\|.Le...6.....M.....lg..,..B4.....s.........,.~.l...l..;.;.5:u....2......;/Z.\|`. ...`.v........aS..^Q..mY..?Ml.s..

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2903
Entropy (8bit):	7.888216524084566
Encrypted:	false
SSDEEP:	48:pHINfPgK98OsYmn+X/+FIRY6txiB0/BdHqlVHlYzfLqr0VarAxmXSgjNiHL+hXXT:2NfPguC+XqIFEyBN1fL60VIAxmC8xV
MD5:	F860040B596E56056BAE7CAE0C7595F6
SHA1:	3730BED10B82E295631F1787FE4046AFD35023EA
SHA-256:	A4E761C41E5A6D0B4318419D68DEBE2C57011BEB5DC5C0B8912CF24DEB7BAC7C
SHA-512:	31F15BE7533EB1587325A07C9948EFFF26D2607490E5DBE12B80DE6F4ECFE7F299C9BDADAFE574EDF279C14FC8B864AFBAA77C1EF2FACD7886E1F34F1B95A53B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx.._l.G..3...c.Mph0U.JH$...O......D.<T..T......T..'*....P..}..T...........Z..KPL..qR'../vr7?....^......H.+.....gfvg.......`0.......c...@.../}....7............v..O.nq....C.;.7G..,H...c..<.M..Re..S.b..+.'t.....Q1{.............y.N..O........+3.T.o..bc..`...m..;W}1.J&@O.Lg....x.k.sP......^5.......s33.T.......=lrO..5.V.7.I...3..4......!....lz.wL......J...@...29...........Q......sm0.9.....sP.7L..t.Pun.O...[X&o..`._..48........8.o.sa...).&..`:y.:w..q.kn....(5.a......?.....~...N.....kn.....K..K.k....8..1l%..".[K.G../.s.....N..........,o,5.az.wq.cxL......>..../..r.'........W..nvs....;.....y.W.....}..e..A@...s`r..^e..-\...u..P.O....3k....~{...~$e."..'...4..\ .{..F.L.........Tj^....P.U.2yx.2.j.L.......{y.W...V.\|$c&g.....a..5.cz.~.......l}rVL.........[7py...../..7..Y49u.}...5...B.....0..cx...

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2454
Entropy (8bit):	7.865198854081698
Encrypted:	false
SSDEEP:	48:evapvovJJVnBTT8FLBJfiMAMY6rXn1rjiezbCt9d8FHVYWPk:eKONMfzHr1rjpC/d8Fts
MD5:	55F9F1247D96300783B5295195557D7C
SHA1:	622675DAE7B7E5694E1CF4F88D30AC6C64AE31BA
SHA-256:	966D743553AEEA310502D58909BF40F6B8C795FBE5E5F3A528EF5C7E4E58AEB4
SHA-512:	3FFBA77234E866DFDA62FC7EF4B3DB96D3DDFF2384CC7801ADBF2584CF9C36205FF8A4E851FC21E1215C02B3B466609B766BDB505C6C6007394DF23D6118C869
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/kLMr5zuHxfe-IxhnKdLp_1JkP5sl2ova0svHjQkFnV1q8X7yE6uA9p8AToT_L7xL5s5EIayVVVljNtp7BgoL69PtZ-Mf00qUbpTLfrrqXWv99tatmXI=h120
Preview:	.PNG........IHDR...x...x.....9d6....]IDATx..}.Ue...s...w.&k.Y.5....6.E5N`....5}XS9.9Y.iS6c)}....5JI.N............n...!..(.,......^..ew....{.....f9.....}...q.c..&.....x...r....sr......K............}G.{.,..u.........a..XlY.Nk.V2u)%q....7L.....A=0...\.4..n..v`.....r......_rF.h.O.??......].A3.7..H.\|...&.\........9..........i.@..c..j.O.....B.....,3\...H5....u+."..m._..\.w$.T.'.....h..........z.\|..Q..$..w...P^(.D..L....i.y5p.........FM.8.x......E.......".........5..Tp..QM=. ..\.8.@.Tp.....B..........H...D.....`..;.vk..i=......\|Gq,.!L.K4.../P..yh....W".\+.....0....dX...1..(..H.?@.oT...DEp.....v.>n......q...O..~../KFU0v.N.}.K....E....Y. .g..?A../*..."-x...K........Z.X>.l..#IYM....W..$w .5..<1yd...yZ....c..D.n...1.x.X..M.<Z.s....>.v...W.....{d..'..2.Zp.L.Z.mC.P....`........?k..s;.X.7...Y....`..q_.2.-.[....<..Y.;Z.?\|.9...H...Z......m._.P-..... ..{.........`)r..'h...<.......`...!..W....,..<.4.W.qC-8...^D.pW.,......a......`...T.(<..l..<G...kK...e..Y....

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10420
Entropy (8bit):	7.955302711238991
Encrypted:	false
SSDEEP:	192:hp3vrzxTFre6u74Q6Pq6yD4UDPC8+V4Ezm2Mi3QRCKSp7z1KdNMk63c7w90tpq:hJvHxpS6u6PrgZTC8+JbMi4SHK6mtA
MD5:	E1AC9AC0DEDA516881E21B9897EEDAE4
SHA1:	DE656ADDAE2C331062F713B8706EB59A2AB4F190
SHA-256:	E9B5953D6179F9ED49EE9B4F81970E56FAA8D65AFB4F19AD3D84C0110C2F32C1
SHA-512:	882EAA7C1DBBD24C2FF94526C892230940F32D021A2284C0274F84F104BBEEFCCFDD85F802C23D50F1F884199864776A65FAE4D41D35CDEFCD7840078EB89836
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......pHYs...........~... .IDATx..{XSW...$\..............Z:U...BA.Q.F.7+.3..j...V..N...._/V.mu...B......=..@ . ...?B,H8..9'A..y\|$.9{...=k...^.......:"W.@ .3D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D .....6.N... ....Je...@...M..XE...RY..(.J.........c[ZZ.5.M ....6...JE"..B.@DD..6N.>..V...h...F]].......F..zpp....J.........8....(....FDDd............NQ.wLL....!..T..K.......a.......v.Z.-......2...@)M.MNwH.....P...P(.i4..:..811.IIIP.....0....J.T.;v.t..Y.\.?g0.>hll...iZp..@.@X.(5,,lYSSSZpp.x...J..iii.6..Z..%%%8p....;f..DZ.T.aMM.."..!.....(.\.....ttt.fff........j...E,......jjjV.4...v.4..@....../vs..EQ.....WWWO.:u222..S...g.u.....7.......3`..\|hV.....".v(.J....i..1.....(..n.t3T*.v....bDDD....~.....,.Wa.H..k..M....-....@&.qk...0.._O.b..Y 4...F.......(...2d.......&................T.........CQTPJJ.G.N,X....2Q^^....(...[..G.........s}...v.]... .f..x......./.\|.%

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2483
Entropy (8bit):	7.877739104591164
Encrypted:	false
SSDEEP:	48:pHoFyE/rKkHcDwC4Uki10tpjOn9Msghi/ULvnfWqLf2Lgc:KFyIrKZ1Ri89MJOiHWqS1
MD5:	453EDE8D9231D0EF959F7265B376245A
SHA1:	0239C728157B01E59C98004FAAF94428DFCE574A
SHA-256:	A06272B8A6B5647231815C9AD4194243EC6F5816183D8AAAB1DC68BFEE0B45F5
SHA-512:	B9AB6DE7965C9608CDBD538FFC5006AED1232CC3ACC3521A18677BCB4FD64C098AC963C3D52554CB9D8F44F17DA814A8FACC42CC40DB12039E667F862FB9E8B0
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/Q4UDu0hKQgAyUzO0RpJTpTKc2DyaZbU-K96JCJjqKd9_ABetMMpS6LxO6Y7Ypm2CVhCro4n4n9PTF97SlwrSjmJFaHdV-_yDr8MpX1M=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx...k.\e.....9...^zY...Pn%..H...D....P.(6$....H.Z%H...1j..1F.\|#.2H......D..(-...M........}.[..33;;]wf....d..'.7.9..s..c.1..c.1..c.1..c.1..cL.H.R.z....@Rg.~`..h.K.....T!P. .(..VT;..V.,...q...2....j/.A.1......~..}.N......).z..Q/.H..^.G...........P...:...U.x...]N....RJ.:r.&...W.D.y.!..rt.....G...8';Q..Q..G.[...y.?.,.#..^.B.XO%Z?............I...hc.t..d.4.....mNyd.FyfZ.L..-z......;...Bh0...-F.D....X......&..H..]...#.ix.F.....q.7..Jz~s.T.a..Ia.VT.p[6.....)?\|...h#..:.}J.y./oml:\.. (."?....p.O...(.[k...4R.../x...o.c.K.n.(H..O"I?.v.3..W8........z.o.....g4.....$,].J...#.._..Gz{.....}yh.......BP].K.l......@.5...J...cz.uc.._5.c....AT..v[.:q..k....S+...`.D....S.[.n.U\.s.+...b.......?._.....*.Ln.B..%eYV.._....r#..2......+.(...O2^.b.==.2..@$i.x...25......<u.g.]3...%C+sz....vo..Y...._d.&

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 358 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24042
Entropy (8bit):	7.98083443633452
Encrypted:	false
SSDEEP:	384:M+abCjZiwuUQAaCaQPJt/c/6kaL+UjFkif1J4VxHGVdU+rTmwhwY8HTvhEQjWwjf:fIC1ziHBKJqSCMf1J401TmwhL8HbhY7g
MD5:	DB2EAD3893798B7E8E6ABE56E569E5EF
SHA1:	4A0E4D008BD88F366A3C844C42367647B1AD1EE3
SHA-256:	4315EDD72C57C641BE25F6759BACBDE3AD2FEB6EE13134A108C3BBD713B33326
SHA-512:	EB87FA4D6BEF99081A31F02DBEF541F4574743D8DDF508530211C97BE8A9E3D2FCEEF5F7DE869BEF387865ECE7C801E08446DDC03DB24ACB45CD2E767A807182
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...f..........c......sBIT....\|.d... .IDATx...w.]U.....>}f..d..@..H.]jh......{..\..K. H3...XPDAQQ...H(A... H.$.Lz...s.^..3..S&9e..>......9..g......<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<.k..w.....1=[...D.aS.iD...J..BZq...@..I..I.$...T.A..(......HV`..(.^..$..K..E..K.n.j..n.[.O.^M..t....r.....5.A...M.......U..+h..d.q........8.B......S.PE..].s+T....O..-.s..?....n...j...{......w..}..p..lDF....cAG.).$..A.r..%Y.l.F.]_........_"...h..E.."y...q"+#.^r..s..?..4.V..<..'f.l....]...S...b.I.....1.1C.N...UJ.. C.. ..ZJ....PfE............r.g..`.N.P.9..x...H..@.P.v..~.Yi.]....{.E.e8^...."~......;R......]..?%a.Q.w. ...zs....O...m.Z]..{..h..e.O.!...........=m.g.....Et{..D...{..X.X.tn@q..C}"..W........O....;..K..{Dd..N..#.j..Q..9#...Hx<_...WL.~..y..E}..M.v...R.>.%....kmh.C.....;r+P.kT..3.......-.B.+.\p~..a S......_...(.2..,....h.:U.DE......im..o..._.&.@...?....a......d\...D..&...M..24..,.w.......a.

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4883
Entropy (8bit):	7.957249280703148
Encrypted:	false
SSDEEP:	96:oHDOMqOW9A42Gj3lY6uVlltmXoIzcfOVKR13/YYYcWPJUV3+O+EtWwxC:oHDzqOWSGj+TXmXoIzVVKH/ePaTvte
MD5:	DD9CE681146E98F99DA3F328FFB195B4
SHA1:	0195DA0CEA828BB1E00B4A60A36CCF4DD87A64F7
SHA-256:	005A040CA94B0B4D5303B3110D62DC7A664D7A41E7C08B31E68A7C3B5EC99643
SHA-512:	FC70ED46CD2378AADA92826060699E63C8C3D0276C62F96926DE4C124D59DE2D450E7DE65390AFFF982166F1596751E7650F3F055FB3275A5378DAB1AD23D9A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............sBIT.....O...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2...`IDATx..]{p\.y.}..K..k%[.dI.._...Q.^.C].i1.....yL..i..J.f(3...4.MH.).f.$.)..........c....%.....}.{...{..wW........{.......s..Q.....X((.] ....JD..%......B....Dt.P".@(.] ....JD..%.......o..G.........R..K..!0C..2\.^..X1.S.$....v....go...5D......i0X......i.-m._Y.r.Vh...o.......3y..W..!?)....$kC2..z~s..'.?xc..fT}.D.O.~...d..s.......kG.}....O.G..Y+.`...;./m:1unc.q!.. @..@..S.t./N..g.......7....e./..9...P&......;>\|#.....}[......"Dg....}o.... .......l}...s...M.>y.hK.b.f`..Q...E9'..)........i.........9. ....^.R...R...u./...Ld>!..............:u.,K,......S...x...?].T].V.'.(U?.~..t$......U9.9.L...b}..........3v,..G\..]P>.9..{.....).XlV.w..Q..A.....C..35._..d.q..y.T....e.f..w..&. B...>b..x*8z[....@.:....b.'.kw....WUB. 7.E..D....'.N...u.x1.wG..0%.!........?.#.uU.....1.i.T...Uv/..D..{0d..#.,nW..uo.~

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 272, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22980
Entropy (8bit):	7.954784047075826
Encrypted:	false
SSDEEP:	384:ls4Z5vw6QRyOrjqlWt/Y6cqbo8Qiy9fSSuYyrmREgxNiOz+gw/6GJzPoEkPPiL:lfw6Qdrj2Wa6cqb/zygwy6R/xtGJjoEb
MD5:	64312E585F1DC6567A319CEB9D26A971
SHA1:	B9C520D93E0158F95B8E90DDF79473AC5C61C1B3
SHA-256:	A23F0EF794B4BBE499A58D7728FFB4C28383D9FE04AB8F49A67821581C2A8317
SHA-512:	17CFB6D48F2A59F0E68F00040B3B6FFDD971437C67A39A8DD3286C3209B4CF38880ABC17988615C0C642AB8C9E178CB2E8F0CFA083C588C51C263995D2201F41
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/9Y5oRPNXHvhG3TpmG0PTQ8lEEAJyuDiyMLujhC4R042jzmk6NUUE-IoF7XF2F5qLhDA=w895
Preview:	.PNG........IHDR............. C......pHYs...........~... .IDATx...y\...?...l...,24..........QJ...v....Y......i.D.LE.N'57TLPK......P.Yd...134.63.<.,.......W.....z...hnn.!..B.1.... ..B.!..H.!..bf(..B.!.......B.!f.. !..B....H.!..bf(..B.!.......B.!f.. !..B....H.!..bf(..B.!.......B.!f.u.....q..@..h.W..<.3...b.,...Y.@.1b..q}..}...vvaaa`mm...>X...j7d......?...EEE5.......mm.}3..... ...R...B...@B.V8.........F..?..G.Fpp0...Y.fR.......3g........g....<..6B...H....q.".h...S...._.QQQpvvf].Y...Cbb"~........7o.. H....@B.Z8..z..T[[..j...(.%..o.....krtt<s.......M.`BH.F.........3g.P.3.s...3g,.x..[[..!!!....b<h....Q.F.XQQ..._.m......_~.....jc.^.v...P.$.t.. !.].....{.....7[..b.%.Ndee..^k,)).9--m2.z.!... !.]...W..>.].vY."..PVV...S.$.t...$..1j..)...ggg...W.^...5.G...B.....BZ...X.....C.,).....2..=............bx(..BZp.....p811.6t6nYYYx....`.....!...j..B...}...3..._..g........>}...u-...C.........8p.h...K!:.......kY.B.1,..&...8.;;.[{...?.........w..KY.C.1.4.H..

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52903), with no line terminators
Category:	downloaded
Size (bytes):	52903
Entropy (8bit):	5.0395520024032034
Encrypted:	false
SSDEEP:	768:oxtpkxt4xtN6oLNlSaR7GeVrQG8eOx+pv2mkFG:oxtpkxt4xtTjrQdeOx+pv28
MD5:	C2F653A65848EB9D9D80315EA4CE6C13
SHA1:	A78E3E057B66DB39B4CFA9ECD3403BFA2862B73C
SHA-256:	112B8A243519B86F5CCF2602E891AC1F074A251E81C3B7169D7394A0AAA4BBBE
SHA-512:	96E3052D31CA821CBBF6F1B97AFE4A60DD2D3C2E72551C9D18BE8015C4A97F33E9AE3BF8D452D342D5C70B3D20B69CFA668640D71559624E8CE3CC7BDACB5F98
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/survey_light_ltr.css
Preview:	.scSharedMaterialbordercontainer{letter-spacing:.00625em;font-family:"Google Sans Text",Roboto,Arial,sans-serif;font-size:1rem;font-weight:400;line-height:1.5rem;-webkit-box-sizing:border-box;box-sizing:border-box;display:-webkit-box;display:-webkit-flex;display:-webkit-box;display:-webkit-flex;display:flex;height:100%;left:0;min-height:3.5rem;pointer-events:none;position:absolute;right:0;top:0;width:100%}.scSharedMaterialbordercontainer-dense{min-height:3rem}.scSharedMaterialborderfilled{background:#e3e3e3;border-bottom:1px solid #444746;-webkit-border-radius:4px 4px 0 0;border-radius:4px 4px 0 0}.scSharedMaterialborderfilled-focused{border-bottom:0}.scSharedMaterialborderfilled-error{border-bottom-color:#8c1d18}.scSharedMaterialborderfilled-bottom{background-color:#0b57d0;bottom:0;height:.125rem;left:0;opacity:0;position:absolute;-webkit-transform:matrix(0,0,0,1,0,0);-webkit-transform:matrix(0,0,0,1,0,0);transform:matrix(0,0,0,1,0,0);-webkit-transform-origin:130px 1px;-webkit-transfo

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 425 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	14159
Entropy (8bit):	7.885944499704041
Encrypted:	false
SSDEEP:	384:adfYevTT2mdN2/oZajc3jwqNeyKcTvREyCXQprE:adz2/hjhyKcKyCAp4
MD5:	9AAFCE1349E90CDC093ABCA5222FAC0D
SHA1:	F5392D43F1D8DDDD0A3C47626A650AEF4E4EB777
SHA-256:	15628E790164F24EFCAFA38022947EEA3E6ED4B244B029DB2E67EC16811169AB
SHA-512:	5587D4645121D2CDCB3B2C12B12BC6D531FDDB0C90315CDC0571EDF425B17793EC65C00AACCC366343134A34EF4578CBF1597B657648DB76E717A840EAF7F383
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/PtL9QBP58JZC0A0k1u4fSn-rXbpaG52216P0l4ydM3c21L78uPPad73jY6ngd2tS-qu8Ec7jV_oxz8wK70fhBxYrffuWUGmuh-HfMyUsfUJSPQzGuCOW
Preview:	.PNG........IHDR.............8......sBIT....\|.d... .IDATx...w.\e.>....gf.-I(I.RD..........x...{).......C.^.E.........@.=...(.JIBK.s....cf.!.dw3..9g... ..}Bv.....DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD.7.:.Q..YX\|.............e......]..j.v..D......W}....-..5..Q.X2v.t.sB....^u._...^...QJ...T.B.<..........p........7_...Q.aI...k.w...l......^.....2...&......7..E....}.C[?..UU.tDA...jh..1/...X....3(...N....U}..-..o.j.s..<.Q....jd.A..X,D.R.>....F..@.$u.x<........$.Q....j.?..on..._..P..YZV..W...5q..[xQ.lD]aI.....F]]...K.`..7..........mo.>.......XRD5.x.G.1.\JK.........x....+..\|\|I.hD0.....N.=.).D...1fp...k...x..1O...]......GRD5.d.!.YV.j}l.........{...3Q.aI.....c...Y..NV.o....\|i..C.}.........j O%.sd...M;JW....).3Q....j .%... ....

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4199)
Category:	downloaded
Size (bytes):	19165
Entropy (8bit):	5.353860759692208
Encrypted:	false
SSDEEP:	384:eACAbnha8Z+QM4tQSEWHGe0PSMYMovAnsm1rYHTBnz4QZY:eQa8Z+Q/tRkoMoIsmOT5z4QZY
MD5:	37F346878F9A1407E9A6DD5204031799
SHA1:	F7EA80F2BA20EA63A3C05E439CF959C2CE6A6A32
SHA-256:	143CBC461B9202AE0A832C9284A1E7004129C87DE6EFA3B133A515D67A572909
SHA-512:	5E19492BEFAFF87E921C1CD12837588206F0B86FC3CF268B6DF693AAA7C47C464AE1598FFC7EC846EBB611AF2CDB44FC3911EEF8B192FCB441E9CB6227DCFC4B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.qmuJi5Dd2kw.es5.O/ck=boq-identity.AccountsSignInUi.Mw2jIe5agLU.L.B1.O/am=HwQm0YljARCPOAc-QCkQMgAAAAAAgAAAYBlhZg/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VzN4J,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,recoveryidentifierview/ed=1/wt=2/ujg=1/rs=AOaEmlGH92EHnnq7nYOtfcg3m8nwJzPybw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var LCa=_.ca.URL,MCa,NCa,PCa,OCa;try{new LCa("http://example.com"),MCa=!0}catch(a){MCa=!1}NCa=MCa;.PCa=function(a){var b=_.$g("A");try{_.Hb(b,new _.vb(a));var c=b.protocol}catch(e){throw Error("ic`"+a);}if(""===c\|\|":"===c\|\|":"!=c[c.length-1])throw Error("ic`"+a);if(!OCa.has(c))throw Error("ic`"+a);if(!b.hostname)throw Error("ic`"+a);var d=b.href;a={href:d,protocol:b.protocol,username:"",password:"",hostname:b.hostname,pathname:"/"+b.pathname,search:b.search,hash:b.hash,toString:function(){return d}};OCa.get(b.protocol)===b.port?(a.host=a.hostname,a.port="",a.origin=a.protocol+"//"+a.hostname):.(a.host=b.host,a.port=b.port,a.origin=a.protocol+"//"+a.hostname+":"+a.port);return a};._.QCa=function(a){if(NCa){try{var b=new LCa(a)}catch(d){throw Error("ic`"+a);}var c=OCa.get(b.protocol);if(!c)throw Error("ic`"+a);if(!b.hostname)throw Error("ic`"+a);"null"==b.origin&&(a={href:b.hre

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3383)
Category:	downloaded
Size (bytes):	108457
Entropy (8bit):	5.48559468980492
Encrypted:	false
SSDEEP:	1536:dQed4sDzUVRhLgvIDTxF9/a4+ECrOd/FeSWiSyz2NUAMSceu4GseEP2q:pV8JpTxv9erMmi72NUAMIGs3
MD5:	936C777790659F304D0D75DD37C349C5
SHA1:	C02A937CC205D9D9332B92E05C69836CEAFEE53A
SHA-256:	1252984607640507F1E1AED2558E401937EE530BB81FB2237619B15F953052B1
SHA-512:	7B93634962EA45C2AC645A9CC8BC959846DD453CDA1CC8113CFECD5B29E88F78AC8C16DCD0C29B21F2ECC2F17F17363CDE7D82D04844D5BE50F8E0131B123F01
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(g,f){this.uc=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.uc};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8164
Entropy (8bit):	7.958796570138763
Encrypted:	false
SSDEEP:	192:P7WZ6e6Dd1Q0GbQkM1ArCUxAf9EMVtM/GU57C2:P7W8h1Q0Gb9r/AlE+cG0
MD5:	509AB59C88711D0071CB4AA0BE726BDF
SHA1:	30B8F22D9C0EC7F1D119AF2198CBE22994C29EF9
SHA-256:	947AB25349EDE3D639E5C45571441E0D970074286795B63B16B141937104AD1D
SHA-512:	5EC50CDEB48F37F83D66F82A88094E8FB3514B7A91A67452182951285C4059D9E98723B9A7069C79F81AAC9E6CEDB3D1D14F2DABA5D255E794B4D6401CE2B1B5
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/3Vr1H8EL1F2w2g35zmQkqnbbqfM8e28GxuaTXxkovnYV7ldiiKJVqlnFRlIOfurcfZ7XDVJIJ5ET51yXw8_fJkXIzakq30XzVzI6Og=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..}w.\...v.....4.#f.#AH .P@ P ..$...,......-~.]{...v..g.......l.. ,d.L....BBY.:...?n.....==..O_3v..U....9...>.q.Vm...w.ck.c.>nD-&...m-\U[...qO...5,&..._j+9..~....v..cx....%.D.e.$.[..8@...w.H...........F..P..!.=6l......v...U[.J.$..p...M..E..0..E.'.jh.JRY..F....u.._...V].+.^m..{_.O.....r...A...1.....`..N....~.}{~....;...T...[7~d..Kj6h. ...t..........s.p.........K./d...`(h.....]...8.8..>.....K.[4.W.u.g.AAS>0.e[>v.WN..qC..D.c.y.a.j.\|.....Z..@..?..&:~........%$6'....s.1 .1..y.[...Y......F..9.\.6....Y..p$A+..Z.O$.e..8...r.s.B.h..8.l......Q.n..?8...h.0...._..c....BLap.L.eB.....>.......]..b....<.{...vt8_.....e#..5.\|.~.U...A1.<RV.C..K^..Y.#.V....z.....<....i..U.%.."\|...?.[.5..]Bo..!.7..yG..*]..c....?D..C.$\.....L.D<c...N..%oYc.$..c..l....R-..f....2......8MOX....>..v........@..t0"..F.......#4.X4......\-....S.wcB..5.RAE....W........V}.9..{)~...Z.....R.W....w...c............R

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	260
Entropy (8bit):	6.365245755118766
Encrypted:	false
SSDEEP:	6:6v/lhPqSh2YQFB5l8MyXH2gVl/BsbJEUG+Osl7tLKZmdnhkR54jujp:6v/7O9Fd8DNl/KGU9OypuZmdhe5uuN
MD5:	B8D1825C5DF3C07F0F840496A37019E7
SHA1:	474F8A50789788B6616E4BEA4E2ABFB64BD985FA
SHA-256:	1B20CFE775D8EE8077AAE7E7C8027866FEA0310AFED03C8B371B9C5DC0243547
SHA-512:	4394E3181C461F3BA149EEDCF00E02812FBC0156146EA342148554C3514A36E14ED7869C8A125BDC507F9C408A1E58F5BA07AC164DE7F102B9A7E30D24275F79
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/RBo2txwfXqma-s-_9f0bqyfM5pd4RpZDMCnB8xbtENo5F2tEJGnCwhaKmg3YAGrbGCnuC4BG-zHrzuU0az-lP9kNOYfdXGeblLv34A=h120
Preview:	.PNG........IHDR...`...`.............PLTE...uuuuuuuuu.......tRNS.....G.....IDATx^....0..a.L...4...x....(D.,.:...'......~..3................^."$.D...g.H../t"$............."$.DH..P.DH.:P.DH....^*......%y....C............u...8...[;a..'....x.YF.~....IEND.B`.

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	255997
Entropy (8bit):	5.5703915514296005
Encrypted:	false
SSDEEP:	3072:YmSLc0Iard8OdwDMXba86qCKqjysCBIQi9a+dQWqzGmRme4xKl+1H5wOv5TN:4Lb8OdwDMi9z1zQi9TdQWqzGaK1mOP
MD5:	12DD7DAE18D3B96675FB0D97B7CE1535
SHA1:	7CA68197B21A70253B9045C158643884CB8BC03F
SHA-256:	7E7F1CF63503C3B0883D7D0732C6F9DF7A9484A8E37BD65A73B16D82F91F969E
SHA-512:	064410004E3BD5113C8F039D8F77F0CDA225E440DF57167E9442BC26E83790400F10214D68727E357D298A538BA6AAA90FF1CE409395E6FBE5CC0452FA04EB39
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":"undefined"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":117},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneTyp

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9832, version 1.0
Category:	downloaded
Size (bytes):	9832
Entropy (8bit):	7.975495830331784
Encrypted:	false
SSDEEP:	192:79QDvz0lcHvOOR57orEbKO0hYcDwFMwo8ch8+BZFuRIII4iT6GZ:79uvzScHvOO04GdhYcEMwoThnE1al
MD5:	4904E4512C44FF90A67249421A174F8D
SHA1:	6FF8BFAB9C2AD320BF52A628F35861790C75A23E
SHA-256:	8589F8DE6CFF2670DEBC131476EFDD070303664BCE3A0B7E231EF16A0BFB6BB9
SHA-512:	852FE99E3571340018FDE517AA6A3C301DC308EDE430EAD54ABBDC85112FFA5D60E50FE21D0C317C05904EC1A15E3CECAF557C86BFDCC540065BD5FE51778851
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
Preview:	wOF2......&h......[...&..........................j..z.6.`....H..<......1........6.$.... ..~. ..)..Q%l...;@...U:......6....V....4..$v...(F..Q.u..oe@.RO~...u.3.hP.b9...;[.6SN...P#.K.4..N.......W........r%<5o=...mh.z..r...A.6..gY@G.a................ .D6`...6...Q#.aq.u`......S.e0..0.:.....4...\....E....wP!.+..;....a.7.....K'M.:.U...].NEx...KU.....{3...'.W"T....TV19v..r....IV.4.....o.:..ip....S...).u...~............... %..Q.V.....}.%Y...[.R@BV.c.:N2&...gdm].,.O..U._.....Jm...a...WcE.7.{..}k.6...3...n..$.}<.j]7..x..iJ..x}..\&.+]J..Y..........f{.H[..{.{G).......Fs..tXp.@..(.....f...........X:.@. ....W.9.....ta.R,....:w.........N....e....g....[.JjC.......b........0B.....c...G.............o.T8H.H.(".11H.d.Ty .......(. .....#c...K....2....W..:.......h...sC....r...4.....+.........y~J.......6.1;DQ......A>1.jb...jb.(."-;..R).~..........5.V.X5Ue..\|5....Y.f..{..9A.8s..;..8.x.."...)t.f.CGN..r......x...7../ $,.!....f0.7.x......3...=..a\|y..b.rT..

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x120, components 3
Category:	downloaded
Size (bytes):	2245
Entropy (8bit):	7.719187207240514
Encrypted:	false
SSDEEP:	48:5qGGMhnidfnfWrnhBsK1rMcZw3sE1iyxVwJ1B9TUmgGxKebh0:xG4nYnfanvsK1rMcZgsEP2LlUPGBh0
MD5:	B2D02EFCC5146C9CBAF7AA24C28CC2BD
SHA1:	7A75DF3D8393AEE2E1B2B0CA17D5DE7ABD9A70F2
SHA-256:	2B4BC8BBD66F5D0985C03E48D9ED63530BD6C2D75F97F29563E28D80F592E6D9
SHA-512:	78EFA1EF6BCCFAD2EBB4CD8F3E8A04948F48E09FC5A3AC4BA439826D38784B1960282B380328068702444CCB62E2BFC47460BDA571B171A860D7A3F3494101B4
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/2rDk7D8NJQPiKYEA6Vzy6GvuREL2IgHNQxXW-8eiSp60CAO4V1as9hWXbLfvDP7X3p3OqS1W3kr6JithHTmpNKXryf7NYJssZUXi=h120
Preview:	......JFIF......................................................................................................................................................x.x..".........................................<.........................!...1..ABQTq...."#2Ra....r...4...................................-........................!1.."AQq..2a...3r.#............?..S..." ...""...." ...""...." ..m.Af!T.Ic...I'..s$...?.]t.6...}...)........lw.....)I.....1j.....qxC.5w....1EQ.V..\|68.S.Iq...{..mM...8...?.,....<:.....A....u.G{..O......>H.8.............+..>...`......esP.3..h`.!..AS.A..#..yD.t......Or.G........y....D.~.8....y.n..}4.e.....{....c...\..R." ...""....B..0.. .... ..9'.d.....g.....)....5..>....e+Z).A.....U...<..N\..D.........#........#...$.6.8..W...#<'.&.[..!~.R.lF#.....B...c.v.O..(....;=..G.K.t...B`......3O..{D.$."%K..."".....4.6......D2....s..p....k7...Bm,.cr.]AR..3k. .\dn..~....E....\|x^n.......X...4...9.^~H........j..a..P.j\d..Ma.`$.i.....6..p.H.......h..o..#..moH...

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3395
Entropy (8bit):	7.91868749885244
Encrypted:	false
SSDEEP:	96:qwxHdaoY5B48gGFveJUar+IgT7onYfRNE4I:qW9hSO4faaT8YMV
MD5:	1071E01BD76D0A6477B7A4D0AC55B1AB
SHA1:	A2266251AE9886F7BA6F0DFD89A41E19A3F36B94
SHA-256:	CA4840F284D825673814097A7C35255E3734D9F4FBFC441918ADB90EA78DD469
SHA-512:	8B064D036781753E911769D6D182A9408BAF02166F055A2FFBF60D9620C71D8DAD4DCF1D1916675C632BA7924C11501521E9E8968ED3A5F5A36A9EC5B2294DCB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....IDATx..yt.....K.H..a.J......E.z..w.T@.z<.^...(\|..G<.K.j.U....XYDQ..kD `.KH.C...-&7K....$df.........w......\|.;...FbD/.d....1.....QN...\|>..8E.].>@"P...B;h.~1..L..g..u2...f.S...!@..Bv...Wu...t..-....PO.f...&S-.f.B.hI@.c..`E..a.J..D...........C...P...@.Em'R...Y]hu!..0.j.".....mC[[........Q...B.&=.......)B.H.j..;$.Z."T.X.c..'..t.U.\|.....<..uV.....W.:U.jlR...[p...O...r..6.@@..Wa..gq...'.....V(B]......G$v.>.q.....U(BM.....18.q......0z."Ts....;..:-".z..1..Ce.."..3..X...o.Psd....b0....cX5.i....M.7........J...D.....S...E..{..f....lP..gE.....`0@..;.....P-oU.T:........P/.-&.t4..9.X.....)QKG5.....E..BM.-..:..`,...~..m.Q..H....J...d.q...-..\|...ME..d.....ms..".9.P...c...''.x..#v.l1v..l....E._B.$[..b.[c$.^....P.e.1C.`...[0.Uwy}Y2f.}..?....^.[L[X.tON..j....464PSs.............8v.E.../z......8.%=...k.<.....)..m..e.^...xP.Z..7s....l}..fO......p-kV-ew.vY2..s..t..u..i....m`...8.....4.r7.wx..h._\|......j........n........s.\7a..;w.%.*..

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6744
Entropy (8bit):	7.9494181708599685
Encrypted:	false
SSDEEP:	96:otaZ2gKVZh1LU9eAKi+gZKKampGIw2rVw59elyxwjF88Z1OST8cDj4OQrhB:m6eZh1pAKAZZGR2rVGqyxwjF88Z1ljC
MD5:	63F8F0D150A3C8F4FBE2D867451F3F54
SHA1:	3E63D160790BCD99D84482F7C61A882BCB7749C1
SHA-256:	697882381A6183F72975241C72080022C44FA396FB1315B3DF9BE6B49361C527
SHA-512:	477E130ED8562A350FFD089582E3594320B9DFF68AE5AA0321F1AF6A11D9C2FFBBF3241A52A115F8D7B3471047AC4C588F699E71844A444E77C3EB6BC4319D60
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..][.]Wy....9s...........FX.....Q(U..@J_P..#.V.C..P.....R.../}jEPEI!...T..v...x\|..3..v.\.^......Z{.s......m........./.....j....j....j....j....j....j..&...f.....?G..!D.E!..4.6.y..2...`M..C...~..\|....%...}t=\|+.....SW.?..?:.gO..K4.....@ ..lE..\_....6/.T.G.\.@..[....._..'..#.t......'..Wz...}q......g......:.VLp.`z..h...G..@....6<+........4}....0M.}.S......=....^}.Ioe.-...m...O.^..F...G~.?..H.eB0..jL....`[.q....@...Z.6./..?.GS{&7.=g.~...G~.V....B....?9...c.....@..E..#l..A...N.. ..6.G.@.k7.}..\|.U......\........?.6N....~......C`.@".X.B.....v%.w..2`. ...-.{.....3.....#.W....h......s.5tn<.(. .xQ..........~".....M.?...............+...^.....O?3.._..*@>....h.."...9..d.U&B...<....;m~.?..i.....J..p...+..).w....{.....Oh..B..3.8.X.. .lE. ".....(4....b8........X..........].%.."..."z;.01.....o.O% g.Z..m".

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 293, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	197432
Entropy (8bit):	7.9857281551829375
Encrypted:	false
SSDEEP:	3072:ANSaPN7tAwi8BO9AGlMY12BiY/XV4uwSETVPIzQCEIhi3mvOHDpHFgdfOH9vL5ev:ANSE+tD9zUV4ZSmeQCO1HDd+wHqqvfbU
MD5:	D479535F40F9F7AECB4E39AC39049108
SHA1:	B97FC1E7115D213BE3889AC617C90DFB1FBB08A5
SHA-256:	812AAB68108C223257DA83C7FE54B7FBEEA9C7FD78E60158FD1A2167E9BAC1E7
SHA-512:	D810C13FC2D455F86F0D490754D6A26EDDC9B0A3E037DBFEA93C2734668ED2A34A471A83AF5C0BFA6D8363F7D163B7CB74EAE43233DE8B0E748026FD344EF3DA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......%............pHYs.................IDATx...Y...&..b.....KF..VuWw.4.!_f82.?3?y.....nw-.y3c;...03U..5....U]M..y..8`0.}..j............. . "..B@DB$C$B .D..f$"h/3..,EsQ50PF.....C...~......!.!...iV...S>...i........on...v.r...@C..xh.].. ."....I..............-# "Z=...m6......._...3.".m>Yn........-._o...<..2lE.h.^.m.`......w.].].1.1......Y....J.?K.5*h...hh.af_L>..."......'.\|..x;......o...v.[i."D..G...O~oB....]...... ....l..z....v..o..6.......f...!m.C3S.e...........GD..w?\...;U...\|<..?.......}..w.7....v.{d.G...g.... E.)=..~..4..{..:0.2M......w?.....t....d.Yf.....~.B.\..Ni:.Oc. ........p.?\..$.4=...\|.t.._}.}{...........D....W..\|..j7...#.b...O...!..&!`....H.`h..............@.H.....`.b.e..@...E.(....h.).A..@......................X/HU.......D@]..l..z...fu. .?.U.l%..^..zQ..M.X.-..CX.^V.. m.pq........]...P..... .b]..F...o_.....:.r..\\....?0..Of..$.3.......2....W.CB...@..]..."......6....K.A+.....H..v..Epq.F..a..u8.<.i.....U.yBZ

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4217
Entropy (8bit):	7.938524730043499
Encrypted:	false
SSDEEP:	96:nJcxQGmS9OitIp09ec05EOkhS6gGiMSojliNX2:Jcx4+tIGYc0YhS7GiMSoRWG
MD5:	44B83718959F1E11C1291D2962C1DAB3
SHA1:	5597E8F846BE88066607927E8C3FAB5E95A0C652
SHA-256:	DC3789CC4765D5CF2BA76888A40340E4CCAF6916022F3A6DFB27DF045C6FCB5B
SHA-512:	8CD7161755EE42104A1518F2177EB1CBAEFE3EFD607AC554AF928E7A902A5F5BB8273C75F274F63003A69CFEBE153A32886C8C73FD6EA9C3D149BD0DC268C6F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..{t..}.?wvV+.V...../.&<....8<".H.#..fx..J........i.Lz.3!.8!Ii^..!8)'. ........../#d.[.V.......G..>..T}..9:3s....w..w~..L1..SL1..~ .....-...x.N...q?..I%p....h...:`..!..@/....l...x...A.BV..8..Y...........u$.L...=.......z..8....&p:P.}I..,...kZ/....Xd..T3....t.....W.....T..5...]....#....8..y&....T.$.....BA.(uG..pM{,..x......t....Gy...y..3.!.........X.-....w.c.m..x...MI...`>.B:.7....0..(...m.<.x.X.O...h.M........\{,.n...%%p...X.e<.kX.#fD.p...X..M.C...-...[..G.xZ..!.....}..s.S..G[:..~..#....L..5gbC...k.5Y....m.t..Sl)Y..QY.....=...nTb9.\|}..n.}....k.))...R[U....._n.E~...X.V....s......7.H....z#..}......Q&\|...5.....\|n....p-5N..:(9".]....D...k.c..^;..4......e...U..S.......2....;...]......=..=........B.D.H..../...K...!teNSCc.z..q!}...v.i..jj8.xv.vM...nn=......u.}.....H9......T..X.^9..?

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 391 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	94168
Entropy (8bit):	7.990430094990128
Encrypted:	true
SSDEEP:	1536:Jj0BfmMD+HChd/PfDS4t7D+wutCYAFH1Ndas87t1415+9DKnagiX6zz1io3de8oF:0jYyXfDvtYCYAd1j670X+Unn9XB3w8o
MD5:	B60555632ABAFCFEE17726F9937E3A65
SHA1:	FC4F3BCF9742530B33183C5F6C1C152E9972DD4A
SHA-256:	56AC594DD1C8FF75B249A4ED7F82B87CA4C6EF6CFFBF7D7710A8D22AA37709BB
SHA-512:	57028D3C54A4AFFB1F2D8F662E41E6DD0ED9EE0B55554B97967843E61BD229CC243D684F19D42AA4567B43F3BF0B676C8BE09EDFD3489AE132EDDA938D0B0734
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............iC......sBIT....\|.d... .IDATx..y.%Yz......{..].[UWuW.L.L.t.tK3...0.....6.e.Fl..O a...`.d.d...e@...a B`.HB.....k..Z_U....<..8..<K.{_.../.{..Y..7....}g.....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ ...O.........mx.b......-..p'.p....q.P/Mv.Q.Y.3A..Bb.....`.....`.R. A.(@..@ %B@.A.@J...$.H)!.N..! ....0.P... X..,J.E).R......pq#.........?......}}......P...^K..O'I..a..R>...^.

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 314 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	67119
Entropy (8bit):	7.980414935902374
Encrypted:	false
SSDEEP:	1536:6qlLM1QUaq+A+vwfvHpf0/ccYXNEfzRijJGQas1PChj:XlLMOU9+A+vwKnHRQdR1PChj
MD5:	C4D2236D4D9FD5652314C24B22EF37AE
SHA1:	06794845E2BDED4F550CEFFD229EA9DE27FD990A
SHA-256:	628CC4F4963845D41CB3913C581F3A8E0841E64A86222A94CD3B157E1DBA95D2
SHA-512:	E5136E98219CE71DA580D06025EED5B339AA260EADC9ED58C3AD9CBD73446B72FDA78707BDEE1804892D49761CC62D47D35EBE0501E63F9272AEFC7D00A96507
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:..........K......sBIT....\|.d... .IDATx..y.]Gq/.[{....h.k.,K...!..........Bl .../..$.\|..{.KHx!......1...C..`F.`.... .-...eIg......R..U.kK..a...o......_Uu...$.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%..IR..f ._.j4.k..?....Lt:.J...0...rA....>. H.a...L&..v..T*.....r.~._.f.G'''w.A"....J$..0.}.^..v...z+.,M.R.A.. .aX.....a)....B....Y.. ...R.y.A.D.....0.... ....... ....A........A.4.4.4.0l.a...`6..c.^.P>.....8.3.<m...........~....7.r...Ngs... X.J.J...&.0.H.R.l6.`.l..l....s.=.C.Pr.%>...y..G.......`..L...0....J.v.Ap_..zp.M;N...w.....v..ya..g.r..a.n.... ...(.A0...D>..8 Y...8(=.]F.~t.."..}..C...Ap<..j...R..A.....{....3.<.....c.m..:.zbK./0...e.....3.l..pM..E..L..N......./..$......S..

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3139
Entropy (8bit):	7.907844644588579
Encrypted:	false
SSDEEP:	96:8CpSIcChBhZsygjP6wiEGcARMiJTMen+q4:RL3hZzQPnipx+1
MD5:	F62B4957F65F29E46564BD51E5AC0278
SHA1:	28EEE6F2BE6E1A22D9ED37427AE9AD6721BF03DD
SHA-256:	AF72C980D9EFE0EEEFF612F729B78FEB2DDBFA0948C4E21FF3E52166A692C058
SHA-512:	E3CE13B5A22EDD6E8FEA71138C46DCD0A9924F34197AB033E02634B771C0F98713D192048EA098ADEE39FA5552E40EF0F7BF4D591B68F2E02157317543C98590
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....IDATx..m.\Wy....{.....;...:-..!A..-U.F.^'.P..@...qc...U..(.U.UP?.8q.UT.&B. ....RH...;..'q(i..?.;s?.=.13.....;...}..V3.9..3.y....k-%...:..t)..8.....<.8Iw._Bm.";.....-....>..N`.0@....-.{..{....S.(..........h.....Sm...~..U.%.F.U..p.y..?....X..Oo.Q\|,s .....tr..Cl.N........!.+,Z.o...l:Qp.O.8..'..~.....V......L.<..wVc.(.zq.3.....D.a.;..F..M...F.a..\...k....XX."/.rM.l~.3.FK...nM.O.......,..9D...o&...C...\..k...R....W.pM....<0J..c.......s...#.....U..)..X...fM...y+..v^........Y......s...\.l.[...b...Rp...Vc)..le...\\nh...\l...xl...tOc.1..../..A....$L.\...3X{?....D.3;'}....u..2.#.....ZI.<x...9......~O......E..?....@..{.4..].....gO}..c8..:..3p....o..g~.......)[O..;>..C.3.(.i...`.../?.?X.{.g9$.n.%[:I.!....<....m.B.D..Wt.%..M..Nd.MoYf<8\|.q.r.SH..H.-xg..d.w[.Y<..E.r...L.P.ToI$.7i.DV1.-..y..h.X..O..d...{...`..z.^.L..UL.......x....6..n..'8x.....V..`....+Y.!...,.9....D.......].x..c.....[...{X....3.G>..

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	2663
Entropy (8bit):	7.812108580172692
Encrypted:	false
SSDEEP:	48:ZvynCN9+AMJhX34hevvEK4gzbwc1daAGfeffDrHW07z63aboP:Z2CiAuuevcK4Gw3V2Bz63xP
MD5:	A50EE08F083233FFC61FA5C3778FBCB2
SHA1:	FED6725C0DED8D5E4EB40BFE65BDAAEB23824AF3
SHA-256:	74ECD335416FD3041D81A4E288257F2BEF563600988F23D320E1DD686521002C
SHA-512:	EF7EE774AB405B752CEFAE611BBA7CECCB2EFA083A6893CD79B210B0D6B3F4CB5BD2D777181C4ADFF2B3FD2F2F7F048901F27A6A21FD5D05FE81585421023AB8
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/viNp17XpEF-AwWwOZSj_TvgobO1CGmUUgcTtQoAG40YaYctYMoUqaRup0rTxxxfQvWw3MvhXesw=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................D.D.........................................>............................!1."Qa#2A..3BRbdr....CSTqs......................................<.........................!1A.Qa.bq......."2R...BSr..#4................?...(.DJ"Q...D.%.(.DT&....F.......".......zL`..T......g.fK.....A.}V....3i..1.%..iW?.[...@q.hi.;G....f/{$jzCj..)..G.g....T.ZsQ.K...._..J...K....K.....Gmu.v.+{z...2.s.=..&.P...b...]..~...]m.{j.\..6..,.....S..[.yN..$zD..NZ...'.;.o.j.Z..f......Z.SI$t..>R...u.....Z.d.c..J.....r...2.D.VR.+.n..0..~....+....3d.}.i.4. .9.'...7.. .B..R.J"Q.!....F...%..[...d[.2...c......)V....,..........N...".B....;z`V.1x........TV...>s.~..$....J.~....1.B.>k.Y..p..:.h..h...&....eI4..j.....L...:G..8......-..../G4...j.-.h..8....:......4?&...{.X......q.A..I..Z.u.,G.Pw.'.T .E....c..YJ....H6.......Xz.x..'.Xf!...`p.~E\..

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3963
Entropy (8bit):	7.901695622692701
Encrypted:	false
SSDEEP:	96:kLbNW8MVJuBtHoNx4tiC1ERpt3atUpIuAcvx/3dmYbVSJiP4GH07:QbmKfoNykjOUSYkYJDgGHM
MD5:	FF66E573D1DA88D7B87DCEF5AF12D206
SHA1:	596A10D1C60792345918B1835D369143AE96E805
SHA-256:	C7BAA51E6B2CA6115A64E281B10BCA782B4CC9540D6EDE5F95583356E24C9D27
SHA-512:	390410ABA8C23AA452180C036E1043657EAAE7043E08F18EF1CB0423DEBAE526DD5DBECEF828C7D97E2C62FBBF15A30A641949165F18B502E1F48BD3A44F6969
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....2IDATx..{l\...\.b...&..6&!7hRHJH...B.mb.....J.Ui.UI.@USZ....@.E.-.vEH..c.$....zS.I.....1..[f...9......c.;gf2?i....;...\..}....)R.H."^@^' ..@)P......L...P... ..8..L..{,` .`...2i......r.L.y:./..20....#..tY.. ....`.U..i.._UN.......(..(M.`....Hy..>3.l...t.........'..:....&....`.(......]..!`......[.7.H>.\|17.....>.g..9CQJ....d..#%...A.;..N(.I.m..pr..=!....M74.\|....A4}<....i\|$>...J.;..N.m...K...`p.7.n.p....R.T..3.\........w.x....8.r.EN..M7..N..k%....o...2..B..}f......o.8.s....sC......A.Q.<7.l......Si..PK.a.....lr.`..[.a.....[......L..H]......W/..u>g.S....d.).Jl.0.....4..^...u>...8r..5.b..>E5s.p<Q..%....j.x..\|.....j.......l...b....c.y...t.s.un.....MZ.^HM..`3cN...Z... .e..is...%.....q.@..s...).......3.y....%...J..;...9......-^..:...\|.....Buw...S....../Ps...-.........Q....`..0.C..O..r[.m....7..*./.w.p......~.\>j.j07-_..O.~.X.W.@w<y;7-_.....y].L?.....4..P.k.sC...=...o/!..){.7..

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6058
Entropy (8bit):	7.95212689372517
Encrypted:	false
SSDEEP:	96:eQta/WbhiMf+kZQlafWnAYP1q7oTrf9bUtbDlweYKnLEGzv/f7igvO/Yekg1/1R:em0Wbtf+kuSWnAYP1trfSbWe717fRI2Q
MD5:	B45417EA380D8579FC290833F6E483B9
SHA1:	F1CDE7EADD600E19E6AFCEF42E5944B20737CD96
SHA-256:	7B3E057BFC8F289DE501AA00617370324A4ACDF5FE110AA950CE83D499F82766
SHA-512:	DC6A523D252DC1612FD301D68FECCC633E4B01AB348B1C4FAB58C7A0F2F2B32C65E9B17DD50FDAAB8F713A0E6C73495B4C7384F84FF8374C2648B7FB067A4871
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....aIDATx..y.$Wu...Vu..gy....3....~...l.$..P...!@..H!B! ..A...@.$...8.)..Y.D@..@..1.C.....Y.7.y..........].f...~K.]N....s.m.`..&.`..&.`..&.`..&.@ .f\^^.)..>...a..V.Ez.OUQU.F........o;....v......'....wGQ.'..,....C6L'..Yfrt.x.w...,".DQ..+...D..{&..#o..7..> ?...0.F..c........g...d....{...w......`.....T....w....5...>\|.w.1o......l..ro~..n.#.A..r...Dd...`...g...s.......'./"7..!.M.r~X...l...p..[.....H0..\.)..FR....:.sxY....?w..W....%XU..H.].?.sx9.Hk...e.>.......-kj../...o..\|{.Mz.....s.Net$.......5...#X....9.}.e...s..>....N..hi..[.62Al......._`....$.c0....w.r.g..=...O...&..U..6.k.....N.........,l...k....E..n...x@s=M....-\..nym.PZ?G.Z\.J.6......XYYa~~.B.P%75..u........t......{...p..a...:a..s.=....V.e.e..#A.Nc..5so..\...a\|..3......p...\|T..Pu.o.9G..DQ......o.-M.7.$.....MB...y...d....6w'.k.>..q.6.d..uD.;X........Qk...9.......Qh.@........S.~.q.@.. ...:.a.8..7._.b&.....d.k.Ze.*.

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6058
Entropy (8bit):	7.95212689372517
Encrypted:	false
SSDEEP:	96:eQta/WbhiMf+kZQlafWnAYP1q7oTrf9bUtbDlweYKnLEGzv/f7igvO/Yekg1/1R:em0Wbtf+kuSWnAYP1trfSbWe717fRI2Q
MD5:	B45417EA380D8579FC290833F6E483B9
SHA1:	F1CDE7EADD600E19E6AFCEF42E5944B20737CD96
SHA-256:	7B3E057BFC8F289DE501AA00617370324A4ACDF5FE110AA950CE83D499F82766
SHA-512:	DC6A523D252DC1612FD301D68FECCC633E4B01AB348B1C4FAB58C7A0F2F2B32C65E9B17DD50FDAAB8F713A0E6C73495B4C7384F84FF8374C2648B7FB067A4871
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/j-XIfKqwPWybhyqkxFlF2ArD-XgPk2y41V-bjbf1l7yIm2kh1diwMAFgSFUJCwUob3LkfV_PSlpt0qsLLeVCpBCaiDZ2j5yStmaa-w=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....aIDATx..y.$Wu...Vu..gy....3....~...l.$..P...!@..H!B! ..A...@.$...8.)..Y.D@..@..1.C.....Y.7.y..........].f...~K.]N....s.m.`..&.`..&.`..&.`..&.@ .f\^^.)..>...a..V.Ez.OUQU.F........o;....v......'....wGQ.'..,....C6L'..Yfrt.x.w...,".DQ..+...D..{&..#o..7..> ?...0.F..c........g...d....{...w......`.....T....w....5...>\|.w.1o......l..ro~..n.#.A..r...Dd...`...g...s.......'./"7..!.M.r~X...l...p..[.....H0..\.)..FR....:.sxY....?w..W....%XU..H.].?.sx9.Hk...e.>.......-kj../...o..\|{.Mz.....s.Net$.......5...#X....9.}.e...s..>....N..hi..[.62Al......._`....$.c0....w.r.g..=...O...&..U..6.k.....N.........,l...k....E..n...x@s=M....-\..nym.PZ?G.Z\.J.6......XYYa~~.B.P%75..u........t......{...p..a...:a..s.=....V.e.e..#A.Nc..5so..\...a\|..3......p...\|T..Pu.o.9G..DQ......o.-M.7.$.....MB...y...d....6w'.k.>..q.6.d..uD.;X........Qk...9.......Qh.@........S.~.q.@.. ...:.a.8..7._.b&.....d.k.Ze.*.

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54545)
Category:	downloaded
Size (bytes):	1198658
Entropy (8bit):	5.709853808238577
Encrypted:	false
SSDEEP:	24576:lndJ1Qd2G7uTBnSvm051r/Fa85Hrp2wy0ocL3aic8XWuj+tJz2wk6:lndJ1Q4oWBSvm051r/FeaXWuj+tJz2wt
MD5:	C8994D65476998A1DC7F15A14D7E688F
SHA1:	745B917A427278C8F33EE74F32356341F1AE498B
SHA-256:	6023A493358D6024DCC02243FB2BDBFFE9CE03453A8B43A6DD0D352D86F72B15
SHA-512:	FEEC33F77882F5755BA50E25F3CD80E36AFD345EB14590FE07A18300A0DDBDA8BFA3A897FC91A490AFADD139BF1CFEB4DF7F5328578C02B249A9C99D47824C86
Malicious:	false
Reputation:	low
URL:	https://support.google.com/accounts/answer/7519408?hl=en&ref_topic=7189123&sjid=11285782560994687842-EU
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Get Google's strongest account security with the Advanced Protection Program - Android - Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="You can enroll in the Advanced Protection Program to get Google.s strongest account security. Advanced Protection is recommended for anyone who is at an elevated risk of targeted online attacks. This" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/accounts/answer/7519408?hl=en&co=GENIE.Platform%3DAndroid" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(http

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 384, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	312061
Entropy (8bit):	7.981383487988184
Encrypted:	false
SSDEEP:	6144:N1k8JCW7sSJuh4N2cX/iDkBOncmLOkAeWnVv/6buLcrs8IuUl:Nu8JCYTJuh4NFPiDzcMH4nl/LLDpuA
MD5:	D90E1FA816B988782E1E652A3C34913A
SHA1:	8C49BBB1DC243C2347998A4966CC43B4A208BDB8
SHA-256:	CFCCF134704E895D13AE760062B37C3A435D951A8007BBEBAB88ED01B7AA53C4
SHA-512:	809B9F325723FECE912B5180003D16CCBD88495859C47A82EC8325F64BDACFF26A5E5A57241C5ACE5C099F080C2B7CB30E67698DED4995B4A848B7497DDE4649
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/UrtOTOQn0umKcsyJwL9X7mffZz1_SCQcB8iv25zV81lMoHfaPD03Omb14RNyN33Uxr32rsqwRgHpGkhXIVJwD2jB1NBmRUiexA_bC1ICZBYvs3Ggh2A?=w1440
Preview:	.PNG........IHDR.............TBM.....pHYs................IDATx...Y.$K.&.}".j./....zzz....\.q.r_H...........H.\|.3..lU.U....pw[TE........T5g.zUeE......~"..F.............N.... '.........2s8. LBN...'".... ".!..ww.C...Kp\9."`....ALp.3.@\|..63.3.D....u.L.afv.......(D0s.....0......."P..\|.%....7..D..@f.......x.FL..F.0...#..."8........3...'.8...sj.CUW..D0.........6...wGb..q......n.r.f.>.........Y..h.u..W.{.....{.W.W........\|...m....yY............N...>..x...9..l........bf.......B..8)...E1...x..N................n....y._....y..0.`Y.....7..}.$.K.Z...e......w.`....p......q.........n.*.31.$..G..T..s.....j..&.R.9...L0#...H..]O...OOOD8..k......H"...("e.A0.RJ.jf......$.sz......\|..t..7...I(...'/.W..8H..YI...A..0s7....@.Cl..V.5h%.W.-.XBf....n...g..D.....7.qr.`.... ..8.;yCM..[.....d.. .W...9^.5(.sAhPJm..M..".)....l.3.S..@qr..i..8..C..z/..m..9n..-..md.d..oH.._.............=..b.!-..bj...!.....v.....n.&\.C........,s.#..D..7GD.g....BV.=.=....-N........u...$.] ......

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3042
Entropy (8bit):	7.893880373562449
Encrypted:	false
SSDEEP:	48:pH94yCKJQiPB5mCp++S5P0ejDduD0o8W9Ab4jcJKkQ3Ud7uxjUn82ugEZ3br4yh/:j/RrPB5zwlOvwo8Wz+Pog82+rD
MD5:	A00F17187FA42F57B592304788AC6A30
SHA1:	AD516D3B240E1A107572EABEB5F572F550086A28
SHA-256:	12734F09D5293119E4C4373D3AD6B06BA282FC0199CFCC043CA6B029FA1C15B2
SHA-512:	01AFA9F80A034C7AB612445E75F5CBE4C0F8AE4D10A94E38ACBC13442AFAA3F1D4B599BFD42332F3AC8410C20671CF059B940A720C86C6777EA3AF62D2F139AB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..{..U...[...] .0(.iS.d..0....)....".yW.h@@.A)...1.DE..e!6Y.a."o...../......z.cv....gvM....;....3s.......p8.....p8.....p8.....p8......\|e.O........@.a..9..$.A..).../..j)`60.X......)o.0>..<....L...........W..".....x....<.\...\|.#u.......n.f.L`.....8G.....W..a\|"p^.{=..;.D.\t........\|~hK.4C.^F.D4q/p....2u4.8.g.7..).x]..v#..p.[..GW.t.....&.S.e.a..=H....:..81.J.w]UV.s..J...q........Z7.....k.i..o..q...wV.PG.D=...#N.)C.=.:.z.....jm..m.0>........e....e....#fX.e.=...8...f5.y..,)...........E.gZ.e.o[....j.OkH7p..`Q...@.._...x...e.u..ey_O.0....\|D.....u{..,...j. va...8.g...n.`.al........K.@@..=.Z......I"(R\|.@.w...\G,..].M.d.B.. .......0.......#(.(......\|+.Qx..#....<" .......i.^.T.:.`?.xkC..............w.}....o.......G.TP..:..\..-."..i....q8a.....xIP.X..8...?.&.!....r.....\|..~..(.1SP~..?.

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Macintosh), datetime=2024:05:21 22:03:56], baseline, precision 8, 3840x2160, components 3
Category:	dropped
Size (bytes):	2094018
Entropy (8bit):	7.7813805871123645
Encrypted:	false
SSDEEP:	49152:QPudfUtb6hDao6p9qyiiyYKFC5v3mZ8lRtP60jeqBz8R:c8ctoDB6p0yiIpkc6Obzs
MD5:	2EA380066A5DE0CD2A0530B41C98CD2C
SHA1:	47A55BEE485AE21729B72BAAC001DB350B635F37
SHA-256:	1300910BC918492B6B7DEFD9070EEF3103C66EB22E580C14833B7C6D81CA0216
SHA-512:	FA52A89367D01851869CFD82AF55E4249C075EBF39713C832E45177226AB197C8218D6E1ACE213CABFE6DB65DDDEA0ED6683B4F3CB68A73DE885E15569A3F721
Malicious:	false
Reputation:	low
Preview:	.....$Exif..MM..............................b...........j.(...........1.....!...r.2...........i....................'.......'.Adobe Photoshop 24.0 (Macintosh).2024:05:21 22:03:56.......................................p..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................Z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..<..4).KM.quo62u.....T~%.C......c..y?..LP2...].-w......D.F.*.Y...i.ud:..Hp;.G..r...SF..>'.N..7...y;ww...W5>k.Q..$..\.9..8?....1. o.....r....d9.F)..q}..

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14116
Entropy (8bit):	4.65552037622446
Encrypted:	false
SSDEEP:	384:xkV/Jtv95PDg1g0Sx3Leu4UX644Y48TeJKCR3jIL3n4Z:xkV/JtvPca0Sxbeu4UX644Y46KKCR3Au
MD5:	AD4439B83B65F1CA4CD6C81178DBC6A5
SHA1:	F505AF59D6CD81DA9C153622F7F09ABE812073B6
SHA-256:	254A7C313076C3CBD2A21E78C9C9762DBEDFF5F3D21CAC6090A8C4F67334E942
SHA-512:	690AC84ED5CC5C3BB34CA3207401E601CD065CE8725AC5A50219962108F15BE64CAA09C8D2D07ECD159B2A32330F27A6061FA18027379D574200B9813AC68D2C
Malicious:	false
Reputation:	low
URL:	https://about.google/assets-products/img/glue-icons.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <svg id="chevron-left" viewBox="0 0 24 24"><path d="M16.41 5.41L15 4l-8 8 8 8 1.41-1.41L9.83 12"></path></svg>. <svg id="chevron-right" viewBox="0 0 24 24"><path d="M7.59 18.59L9 20l8-8-8-8-1.41 1.41L14.17 12"></path></svg>. <svg id="expand-less" viewBox="0 0 24 24"><path d="M18.59 16.41L20 15l-8-8-8 8 1.41 1.41L12 9.83"></path></svg>. <svg id="expand-more" viewBox="0 0 24 24"><path d="M5.41 7.59L4 9l8 8 8-8-1.41-1.41L12 14.17"></path></svg>. <svg id="arrow-back" viewBox="0 0 24 24"><path d="M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.41L7.83 13H20v-2z"></path></svg>. <svg id="arrow-forward" viewBox="0 0 24 24"><path d="M12 4l-1.41 1.41L16.17 11H4v2h12.17l-5.58 5.59L12 20l8-8-8-8z"></path></svg>. <svg id="arrow-upward" viewBox="0 0 24 24"><path d="M4 12l1.41 1.41L11 7.83V20h2V7.83l5.58 5.59L20 12l-8-8-8 8z"></path></svg>. <svg id="arrow-downward" viewBox="0 0 24 24"><path d="M20 12l-1.41-1.41L13 16.17V4h-2v12.17l

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5188
Entropy (8bit):	7.952928145135762
Encrypted:	false
SSDEEP:	96:9JKglioE6pMcO5oiXZuh+u/U7pLnZ0jnn7dwp5KRf0271XM8zAJPzSjCWdJ28/p2:9J66pTOlI+u/U7pLnZ0jn7dwuRfU8zAd
MD5:	714ACF1F5A07C6204BBD7E59194A2870
SHA1:	3F8170F84AA88CC81D56C4383CF3758E7945D71F
SHA-256:	1C58D90328C77231DAAA4F46073F3BADE862DB0E24A896F1B17912BB52C0FDDA
SHA-512:	FE1D52B327E09B1936B156546DF09F10802ED8D51C474217F4E02FFB8C312F519540136833C5E51A07CC7E25A748F2DECAC7D393885BF4AF05A53CB9C52465B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..y.T..?..^Uuu7.44;..K..n.Mp.4..Fe.......dr.1.....%.q"q..h......3!.9..M7.`\..l..&.MwUW...?Z<4T5U.....>.p..{..~.}........(P O.\;.)v\.....KP..)....Z.b........b-b<..W$f ..A$b.r....~.L.e...2.;b{[..#eFt0.A...P...2T.#...U-..E...h=p@.N............/.}.+.....v..%.GS..2......A.lE.B....Q.Aw!...g..5...[CM...k6x.6..y/...'.....a.@......m..ETv"l.j.....}W.~.]O.#/..u.XW\g..~.1.LPaX~9....V.Z./...U..\{u4y...~..X<../.0.t.H(.~..V.7....U...6......WH]... .-P..$O\|K......{z.s..z.......&L..7..$..\..!v......^.J....._<..9...3....\.....DY.h2..\[..b;'..]8.r.s?.A@ .>d....S...U...6.U.w.3,....Q.3.(..<.....+k.).F.&...3...0"[6...5.fz....d.\V...s.c^.d..@8W..z....c.G.\|~\YK...9o......c&r.....~....:...{..%y...O.O....}..~.p3.`dLo9.g..U.F... 8.^.gj._.a"...}e..ll:....h...m.....q.g.2.d..I.K.5.p. ...m...e!...\|E..~..X+.@.....>[..8(.>.wy.A?MeD.=S...N....A...k.-_^].N.....eq.PsIA..X.....\|yuC6Lv....X.HA...\|..._...P..vJ....

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 272, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22980
Entropy (8bit):	7.954784047075826
Encrypted:	false
SSDEEP:	384:ls4Z5vw6QRyOrjqlWt/Y6cqbo8Qiy9fSSuYyrmREgxNiOz+gw/6GJzPoEkPPiL:lfw6Qdrj2Wa6cqb/zygwy6R/xtGJjoEb
MD5:	64312E585F1DC6567A319CEB9D26A971
SHA1:	B9C520D93E0158F95B8E90DDF79473AC5C61C1B3
SHA-256:	A23F0EF794B4BBE499A58D7728FFB4C28383D9FE04AB8F49A67821581C2A8317
SHA-512:	17CFB6D48F2A59F0E68F00040B3B6FFDD971437C67A39A8DD3286C3209B4CF38880ABC17988615C0C642AB8C9E178CB2E8F0CFA083C588C51C263995D2201F41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............. C......pHYs...........~... .IDATx...y\...?...l...,24..........QJ...v....Y......i.D.LE.N'57TLPK......P.Yd...134.63.<.,.......W.....z...hnn.!..B.1.... ..B.!..H.!..bf(..B.!.......B.!f.. !..B....H.!..bf(..B.!.......B.!f.. !..B....H.!..bf(..B.!.......B.!f.u.....q..@..h.W..<.3...b.,...Y.@.1b..q}..}...vvaaa`mm...>X...j7d......?...EEE5.......mm.}3..... ...R...B...@B.V8.........F..?..G.Fpp0...Y.fR.......3g........g....<..6B...H....q.".h...S...._.QQQpvvf].Y...Cbb"~........7o.. H....@B.Z8..z..T[[..j...(.%..o.....krtt<s.......M.`BH.F.........3g.P.3.s...3g,.x..[[..!!!....b<h....Q.F.XQQ..._.m......_~.....jc.^.v...P.$.t.. !.].....{.....7[..b.%.Ndee..^k,)).9--m2.z.!... !.]...W..>.].vY."..PVV...S.$.t...$..1j..)...ggg...W.^...5.G...B.....BZ...X.....C.,).....2..=............bx(..BZp.....p811.6t6nYYYx....`.....!...j..B...}...3..._..g........>}...u-...C.........8p.h...K!:.......kY.B.1,..&...8.;;.[{...?.........w..KY.C.1.4.H..

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9615
Entropy (8bit):	7.972142301683551
Encrypted:	false
SSDEEP:	192:YL/9PM2qd6x980bBOeZjkxZBxZqPfe9hhUWWcgKJO69ucstA5HyyWU:YD9PM2d980oDZrA2a5KJDscs8Hd3
MD5:	CEE10F64B70B2F7DCDFD728D4FC54C89
SHA1:	3ED572063F27C9A8B3274F9B6815B4267A8F32CF
SHA-256:	B995946A022C670242313955BA02D1A4B7B2CA3DB1820DDD731B706CE9D5DB3D
SHA-512:	745CEA658651D60C099DA3C3086D0A63ED3160BC53902977069A1F79F27C6D7A5300716F7035567128AA151B926C780753DF74EF5D1A46BA8BA8644854D7641A
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/TVNK8r0QEiNhXwfjVlziAqFcBQPkuPHKyilz6atnzslwMho1no8n4EJV30tOT0T6y3RXrmCzyiNd74HSYkJPsAk4545WWBxBZgoPxg=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d... .IDATx..y..U....V....;..@B.B".....u..w.Aq..DG.F_.qCGPG@qF\|U.A.....A.a..}...@B....=kU...Q.,..t.;..&.....n-....s.}.(..(..(..(..(.b,0.>..M.r..1.......l.w3.\.x.TWe........o.m@..g.x...>...5.K.w."(.....>..........`..`....sV~j..5)x..l..DT..!y{C....}j.e.LLa.&.ox..mO~].Y^.!..c.>.....d..M.....,8...)v0.s..O.;...L....{.i0+..\(`...e.....M........3........x...xn.?..d3'=..5S].B.W.......%.>.l..UW.U..Q.i.&.7...<.r ..h..I.F.mR7.g....=.g...H.T?.x.uI.......]...~..l..@Z...[_.\.r)p.`...>H...F..-.N."q......{^.U.Z..7{.....W..N.3..^7..0F.......g....>.[w..zuK.L.d.@...>....1C.7&8G.....W./8>mj....n..[...y.g....@....?.....B.U+..R..e..........dB.E..H.K..M.Q%..H...g!Z..M..k7..].).".:......o.1..%.o.sQ...W.w.Nv~.:..Q.[AYE2.\.......`G..zL.....8q.#........Br}H...n./.....5.%.....4..X\|P%....u....l..q..I..Ip...X..;.Mo....s...D.B.P..$&V....a.....EWVb...x...........U6.d.H...D.t"..au.....t.U...%..<.......4Uu...7..?...&....#..

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1166
Entropy (8bit):	7.691960667496785
Encrypted:	false
SSDEEP:	24:zeB8UKUcXK2ikTRek1c4ZiE6VV6B0KbGeT2:zeNWXK/GRx24ZiEkV6BrRT2
MD5:	08B76701BB5EF4B5FB05E05FA3EF33AC
SHA1:	10DBA471BC3E4AA376256FE00BA6C8A4AFBDAB1B
SHA-256:	FFF7FFB81126FC736AF24F8797F397C29F65C088DA60E87CD1241834E19D6274
SHA-512:	C4B3B7A6965F15BDD4A05B4DB24C25FC91877C174A29A70FF7B9BAD9556A8B7F730F33F90926FC89E6F951F171C6BA2B86D1FC090E60F4297415ECF8D16E18E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....EIDATx....k\U.....L.@lC.D.)..-...._.A..R..n.nU.U.........J.Q..]l...6..B4H..f.... ...{.9.....&.3.\|I.......T.........'.?W..V...q.a.-..>N?.......;......e.,.........%.9.2...I\v...n.....<'...>MY~..\|.mv8...<....>H..G.=z.x..q.%s?.....,{...Q.%/.s.......>....036...r...]'...............v.R..D.x)p..[...zQ-^..G4........~._........#......x)p.j_...~..^..Fm....S...ay_..8<...........7..e^.T..Q.@[....3....qc.....UNU.;q.`..[u=........k.q.l......).q.l......).q.l.....k...'.FcO..l.'pw........'..@.g...M.x.o.......rq.........).q.l\<K..,.....F.9 .3......K.7p..kn..d..]%.Y.$..........t.=.X..g)^>.....\|.*.~..H...E..?...-.......1.. /..C.e.9..'..,.. +.i(..:S.t.6N..S`...8.6..-...:t..../.u.z.[~x.......-.o.).I.>.../.O.g..8........_.....A..{..p..>P.g.@....C...}~r.....l......).qI,Y.].$..va.......5.8.6N..S`...$.h..._..u...I.......l......).q.,Y...Z[a....[i7...zy.O..Av}~ .)..:.......Q}b..5.8.6N..S`...8.6N..S`...8.6N..S`...8

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35060, version 1.0
Category:	downloaded
Size (bytes):	35060
Entropy (8bit):	7.9934247518702914
Encrypted:	true
SSDEEP:	768:VWgzOJq8VMlI+d620JaSUhkJN1tLmkLqnEsKeeBClx7styedpa12:dSJBVMlfd6VJaSUCv1RmkavKetUXnZ
MD5:	0360DBC6E8C09DCE9183A1FD78F3BE2E
SHA1:	6CD4B65A94707AE941D78B12F082C968CB05EC92
SHA-256:	2DB6BC36808D43FA89029C652636E206FA3E889B35ECF71814AB85F8BA944AF3
SHA-512:	93C9F1856142DA0709F807CA3E5836065E61BC8160F9281FEC9244F31ED8AE8DF500CD5C64048AC59B4DBC36EBD18BA8E7FBCEEF58134DD76441079FAE147AB9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2
Preview:	wOF2..............u$..............................T....`..P.l..a.....D..;.."......6.$..@. ..,..6...[.]q..}:P..(....W.(........(;h 8..r.o...........k..........>..eZT\K.....4l..Z]...1B.1.G.....\|..p..._..S/...^I.e..l.=.I1...0..L./..D..Y{.w....(.....Q..J....v.........z......Q/.K..f._...-..T.f...[..U.).>.K35v...n.?-thr......w.?[D.u.Q.}..i_.cp..0E.R5m.>I.......x......H."C,....2...q...E..r.?...R../.J..m..X97...E.fJ...=.Q.>..`.QXuw..e."........\^.....~....>M.....h.Q.-.......SM,;W......#..#.B.....K.o...`...z...t....".$..s....o.v...w.I.mg.$n....../...N.....8H........^.~....X.Q.,YB.U...uX.e.o.l..o.2f..^_].~.3w........J$2)_.c8...&^.>...r.29.D&.I....T".H....O.2.$..r.\...1.}.ES~5...t.X`.x.gQk..e.L.N......{.6...4..G.....2.z...V...Vy.'..../.....'...z..i.G.......`...$@.k......1.....{PH.....qf......_...A.e..7.....C.?.^.....,......NDa<b..F...:.....+..\|.._I+.2.^......l...3..^.)qJ...0.....X.....yj....J"...lo..._j...Z...0...m..2.$.EBa.....w...\|..2&!.$..!S/^'.....r.U-.

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2457
Entropy (8bit):	7.887151510458016
Encrypted:	false
SSDEEP:	48:Sy+oGjsKDEg8Kn4sKbMYht8rhHNIsmj2EmpOSPIvDcSUxhnCm4M9Vd91WKSCl+F:b+oLF/WutOhesmj2Emp2QSUfnZJtr+F
MD5:	E7951DB538299C0758D7EAC93E9E68E1
SHA1:	AEE95EF08CB635E22594BC0DD9719B16A5516EF4
SHA-256:	026E10CF13A19B3D9D71042DB070BA55AF8A77EADC8E22D9B16E3E94F33C2229
SHA-512:	3887F6AF641C3CF1EDA84724D1660491251FE6076EE27E99D33D1D93BE7E831F18B798EBA43240CC6A292DA649B5D6ED7E92794DB3CD22FA9F14EEBB0D4A169A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....PIDATx...m.........{Y...\X....(....EM..h.i..h.RE.j.&ML.V.4M./....j.I.ZS#E.j...+O.X....wW.......03./...egv...=.Wp...3..g.?....i..i..i..i..i......B.y<]e....B..d.eW.k.a...!...wy9..%.km./I3B#.x...)......EI.A,n..X.....o...{......h..@..o.........=5B.......-..`...R~.....x.....I...~.z>..X..JH...U....g...m./.Txy...5Wzm..C`...]..".m..4zm......F.......6.8.}...A..r:.......8.t.!...9.p..CN..r:.............y.CB:.AO..\|M.L....%.W.....(........5.0...m..h.jmO..........8.t.!...9.p..CN..rJ.t.w.\|...V.......4.4hl0.]k.r.{.V".....V ...%...l.....5.R&......=...r<p..k#,...3_...;r..?s..z.o_.....\|..e...f[....G&L.......\.\..K-..%..s....?fx.#........:..P,.c...o.0.VI.`..v..N..).,n.j.o..Z...4....w..w.R..'..U-\P..]X.B.."..:...%.*.}WX.....)..^I..l;?)x....?>.@...Y....u&."..1cH.....,'.$...ndKp...&.h.......^..e...,n.UI.............3..,(..@..\;Y05!8.....%...?#.S.....M.'.-V.Q...p..=k./.5....O2#>8..g..+.2..,.?..{.4N.<.<..2.

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2593
Entropy (8bit):	7.880007294496685
Encrypted:	false
SSDEEP:	48:8ZmJbxqh2k9oc7HYHPMOJYMu+kaiYt0PbVmQ2/nwJBycCY7:86b1k9740/APt6bMvwdC6
MD5:	5B891A64E5A8D960354AA6C6DE6300A6
SHA1:	FA2732C630F3CCD983F8408D372C5C621114CB9A
SHA-256:	FA5A0B9D5B0470DB3183422B75A784CCBD999A19DF016A77A62AD955D3858A13
SHA-512:	E2966D41003781CD4CEA5D689FA982B5476378639D714ACC563ADB69E0B318993BB8A8156133AEB1F47DA39773A0CCE9DF4A674D63FE29F04CA20FF84AD5DC6D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx...kl..........L.....G..B..xB...<......p.N...)T..~h.D.......R..mb.A ...H....<.n>T%.vHb....`@1.9......z=.3......;'9.gg....i..i..i..i..i..i..i..i.G..C.+.........@..C..M..N...<cG..(.X.j)..=.t-h..g;^...\|...l...n.v.]_V.....=.`.D$t5...-..v\!..`.Z.d7nV..[mM.....g7,.{7...9...Dg.)........%.=.3&..........S..4o<.w,......Q....9...Uj%.3...t?..6...T..n...E).)iUb..kr..g&:C.O.K..\|...R...K}..o8.w.....Dg.Y.......\.L...3X.......U[}...:..-..H..Dg...&.@):2.,m..VU].Xn.qN..z.j..<.;.&:K....j<...._Bi.l..`... ....8.>r.../.b.t.^Hd7.../..%v;9.;dEqo..J....#8"m..3..P...t.j...5{.i..t..M.6f:......N.:...my:^..[.6.u.....;..6fJ...o.{.n...\|L..[.>..... .w.)Z...+"....&..[.V.bD..s...:.:.......,;n5..b....B....B..-s..qd.l....8..R..jG.2...+.;.O..L:C.5T..:"...X2...NQ....e..;...-s.2.`....O.=q..L..[...{..#.A..S..-.ZGIsEg./..x..:....A...I....e.....V....A.....0fm_.2.0l....^.QH..iKtR.aA...P...h[.2..u}8r...~...Qt.7. .....i.>..../.H..

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4621
Entropy (8bit):	7.935558464764354
Encrypted:	false
SSDEEP:	96:Ll+GIPXVtxc7mP5k98Bij2A8brUZFRQtbWQoiKlBGZWEIiO+L7h:LIPXVqU5k98Bij8MFFQaBGZ9JO+LV
MD5:	57C988CBCC8299B8E99D5FCBA7242AA7
SHA1:	69867D807F54484FD04B1E161FF58ED00F2EAA10
SHA-256:	758858CA060007C297CA68F3D187CA027F16C3064CB74FF848D2B12D984577D2
SHA-512:	2BAB7006D9A364EF1D58D9F939F8966D146CAF07466D4B80AA1B3216F7EAA204CA2CC312429752B0B4A82FA448B07F6769C87791384E9F7F7347E29747645A5F
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/v58NX5Yjsfo7e9kmvZYz-UpgxiBwecURTpNGU7dQ9CDZLnQaxf5dKsWQDUPxO91gZX-_BGEGd-HvLLXIjrzfOQw-NrQfqlxKLEFF1g=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..y...}.?...C.j/I..H...`....l.p........?...?\..UI... .J.H!.....#..17.....X.M..:v.=$.:vW;.3=..~.c.....9.@..Ilw..{.y......"E..)R.H."E..)R.H."E..)R..J5...g....0.uJ......_.R..!.c5...2{b..cZkD...lK;.R...R....px```...mk.......y4...o.2....DR.-..DD[.%....+..{u.\|X....;wn3p<.L&..DE//....l3....\|.....a..q333k........Hk.h.-<4.?].~o.O..........<.L&.>.H>%"8....m.<....}..4/..;.....;7X.s#5QE...Z&..\|..8...1......?.x...v......+..2.........R...5v.{Gv..-..yk.a$N......A.....&-.>.N...B....os...fr..(.-..1.17..#p.6.#A..a-.+.....wxpt...\|..[Z..A...#5.....w&...<4....Yz<.@.............6...33.pK.C...n...u.ny...2s.&..\t..[\.]4..1q.....af.5-..F.[,/..\..&...}..x...R...r.....e...!~8....\|K.B..er'...O.yr.......\.U.p.?....@n..I......N...-V(.-..(..d...Z....'w.w.^$f[t.p.~.".MT9\.A.....\|...3..Rl.].\t.T.E....#....T..\9.v...$....V.%y..X&O...{'v.....T.....T...od7.9.n.5=:..*..#T/M...#{..[...1...IVHy..5S.2...F.3i..].n;..Q.

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057604
Encrypted:	false
SSDEEP:	3:WuoSsOrkYn:6SkYn
MD5:	E3229D632CD939E7F4F47B9659D81D90
SHA1:	DD49A21DC7EC028974C081CAF8147BB2E5E65BB2
SHA-256:	282CA07C4B909968A1EA630720DC485F4638102FD466D988BEB9369F856FD496
SHA-512:	165256E26D0F9235DABA4113D4186CBDFDE5B793C833B79FEC2370A27F3E7F4E7EC874DE878B89B4D547E8D00F32B4A689E81D09CE4893528CBDBA763F916E32
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwltZo8kTMsn7BIFDWtomm4SBQ1Pnif4?alt=proto
Preview:	ChIKBw1raJpuGgAKBw1Pnif4GgA=

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2180
Entropy (8bit):	7.888352761944028
Encrypted:	false
SSDEEP:	48:bpAYbjn2GuKQgX2pNsrAVZy8SVpDHHxEdqd/ofQ79tE7XhPK+7N:bpAIjUKOpWQY8SVIdQuhPD
MD5:	91AC56A852471FA5F940734D493057D0
SHA1:	86651F1CB566601941D35029B20CFDC01CCF599F
SHA-256:	3009B1EC2FBAFD7D78D9D663EAE16F9DBE390AEA9C4EDFF3A4B19ACCEB178ED9
SHA-512:	1E625C973D05C9FF0CDF0F401FBF20B32DA84A07855C919F9948F7C019672EFE7FA124C0717254758EC5E12B05558B9EAA8500B6C24153732D0D59E18C550235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....U.G....sRGB........>IDATx..yl.U...of...h...r.n@...!F9.EnQ..Q....(.Z.C.@P.?.?.Q.DA..H x.X+..(...R..n;.......7S4......}.}.....-..l.6...M.&._%.V....@Q60......F...g.(....%............f..PQ]o...:?s.3.(.`..Z7s.0h...4..S.9Rm .>Y.% ~...[.cw&.cZq........_.g]......Y...4.l@......(........% ..X..E......LGd.(.N;>9y.m...H.c'...@7.I.2.h .a...?.........6nV. .....[.81..&.".g..nQ.t.L:..6..}..m..._.........m+.....y.Au...[z_........i.......wc........K......x.a'~q...\3...\|.....T....f8\.....6.......k&......0.a...#t S.q.3.Z.=....6.....v..p;L..;..5.k.A....%.dF...L.V.1...S........Y-.$.E...FzM.%.F..1.[v...p]...XH.Z...Up......f.''1.Q.......x.7..8..U..[...z...+Z}...@.x.j...MRp..U.).....X...g...?..[.ZDiRA..........]9.j].4.9.....4...f....v..N..f.....!...R@4]....R....n.S.k...........E...c...^.....].A.1..2@..lpL..F#F.....?....^\|k.'...i..*......(..p....A.i......[....9...(.@p..9.....VA.......@.........:zip.....,.=.Q..-.

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	60408
Entropy (8bit):	4.746090328799968
Encrypted:	false
SSDEEP:	768:fctDxhgZqb0HZb0HEuZ5V2KKCICtvlc54WA+Vw4G4Fw0RToTQTQDbx4r/MT4gohL:fesZvo2KKVmp29bFhTOG2T4go+9nK8Hm
MD5:	A371D1ADD8D95D9A5AC0222DBFC707DA
SHA1:	B273236FC088B58AEC5BE2E7CD642E290C31CBF3
SHA-256:	0A11003900B5593A71CFAB463C2A5E7D2588B251F697EAE8B64946F4D178FE54
SHA-512:	1C4FC0A64E927A073713435830F9D3044894FFDAF30E6966B28D1F3757D564D6E9124F632EB0B61EA41947973FCB28C82F98696E021A8A827FB96E2FF0D27ACD
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/support/content/images/static/homepage_header_background_v2.svg
Preview:	<svg width="1280" height="307" viewBox="0 0 1280 307" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="1121.01" cy="217.239" r="27.6618" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 204.281V292.049" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 223.588L1130.88 213.286" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 233.491L1113.06 226.163" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 217.429L1113.06 210.102" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1132.29" cy="223.588" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1104.71" cy="210.101" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1101.26 297.3C1104.15 291.738 1110.46 288.868 1116.55 290.35C1122.63 291.832 1126.92 297.283 1126.93 303.549" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1087.8 303.549C1087.7 300.666 1089.18 297.957 1091.66 296.486C1094.14 295.014 1097.23 295.014 1099.71 296.486C1102.19 297.957 1103

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3834
Entropy (8bit):	7.903379044234245
Encrypted:	false
SSDEEP:	96:0iEi7ComEvbKDTQRLGsog+771g4cnBDgMwK:5BGVEvQjg+771gX6MwK
MD5:	44B118653A98E27DCA384532CAFB19B1
SHA1:	894D27A9BF1B64721287FCC611CFFEA1FA5DF9A9
SHA-256:	76E15F7A3637B8A4DF283DFC12B5B11F5C1C1CC6093EEFC061122F1B7B1E57B0
SHA-512:	9032EB21220B0FB38F74E2352D582CB90151AD05D88BDE39E579060371A7B225A65ECFA64FFF04BDE27827FD40679AC89F596922724C1109427D4D0643693D96
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{t....;#?....@H)m.....;.6!....-..Bi..4......m.P`........x4..m.}...hcI.........&..6!..d.3..C...e=....\|.I.4...~.......\.......................z.r'.....-.p.a..lAS`..$..~..m....1..[).W.>...]...e...ap....D.LX....3..7.c..O..q....<O.c....1mG.............DMc.X,...7..F....Wv...J.....@....;...2u4.@_.......9..h..=.8).p.H............g.K...;.\T.....0..v......=`w...'.x."O....@.g..!.D.s...@.wN.n.z.s.NE...4..0.M.\|......`.....;.~..t..W.0..Ws...i,..`...K?eo..._........J...25..g..(s...a.-..z.U...}e}[...C..@.Rk....]E3..qW.r(........r.v....v<z.5..\|...8.Ew....B\|...c.....d'.M>..S..h.{..Y8.;..-.O.~w.A...}.?.._'3q..C..[X..S......5..4........l..;....!~.D..[..C\|>..>.;#...Xx.LQU..\|..&.s..0..B....J{.-.........cnn...y..U:3.jpGp.....Q~...x<........4v...........}.8o.x?.........8.D..8.....n9..q{,..N.i.@....).L]...{3[........W...M.......Ati~...n.w......MC.N../..=V..(....4...n.........]....J....6....

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2903
Entropy (8bit):	7.888216524084566
Encrypted:	false
SSDEEP:	48:pHINfPgK98OsYmn+X/+FIRY6txiB0/BdHqlVHlYzfLqr0VarAxmXSgjNiHL+hXXT:2NfPguC+XqIFEyBN1fL60VIAxmC8xV
MD5:	F860040B596E56056BAE7CAE0C7595F6
SHA1:	3730BED10B82E295631F1787FE4046AFD35023EA
SHA-256:	A4E761C41E5A6D0B4318419D68DEBE2C57011BEB5DC5C0B8912CF24DEB7BAC7C
SHA-512:	31F15BE7533EB1587325A07C9948EFFF26D2607490E5DBE12B80DE6F4ECFE7F299C9BDADAFE574EDF279C14FC8B864AFBAA77C1EF2FACD7886E1F34F1B95A53B
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/zGSQ3CkZCuntNXuuiLsvHnljLEmpJD6MKKWjzuL20jMovKj8akWzk6gb0zmXZTMH6ORoD_I5UMOVT4JRUKYwA2S4ki7MQbyZ0rUIZw=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx.._l.G..3...c.Mph0U.JH$...O......D.<T..T......T..'*....P..}..T...........Z..KPL..qR'../vr7?....^......H.+.....gfvg.......`0.......c...@.../}....7............v..O.nq....C.;.7G..,H...c..<.M..Re..S.b..+.'t.....Q1{.............y.N..O........+3.T.o..bc..`...m..;W}1.J&@O.Lg....x.k.sP......^5.......s33.T.......=lrO..5.V.7.I...3..4......!....lz.wL......J...@...29...........Q......sm0.9.....sP.7L..t.Pun.O...[X&o..`._..48........8.o.sa...).&..`:y.:w..q.kn....(5.a......?.....~...N.....kn.....K..K.k....8..1l%..".[K.G../.s.....N..........,o,5.az.wq.cxL......>..../..r.'........W..nvs....;.....y.W.....}..e..A@...s`r..^e..-\...u..P.O....3k....~{...~$e."..'...4..\ .{..F.L.........Tj^....P.U.2yx.2.j.L.......{y.W...V.\|$c&g.....a..5.cz.~.......l}rVL.........[7py...../..7..Y49u.}...5...B.....0..cx...

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13482
Entropy (8bit):	7.978621445906871
Encrypted:	false
SSDEEP:	192:ZOUiGIhZnyzZBYIHj8QZCF10h/9wxGJTR67/QoqLyGza5h2JvnvlfV/jrkG4gMRj:It+DKv5kS7/QosyUAItnv5NSgIs6R
MD5:	96A60B50E2C4ACEAA27E70FB2B79ABE5
SHA1:	F8ED3D958ABAC1716C8B9315DDB7A0F21EF7E5C5
SHA-256:	FF1F6CE7A89C380F7924074ABFCC5AA989989BB9D2E747F146D0B3F2EF6813F9
SHA-512:	962E87C760F0F7446F62CFC37DF8DC7E9A08193F8B88A603038E57D4E9F00DB52D04279BDD410B90D7AA4E99A28078052E6F51E44A5BE21D5FBF49A3BF3F676D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2.. .IDATx..{.o.U..Yk...u...yJ3#..{F..H<...rL......I.q...8..I...........SB$J..[@y.. ..P.8e.@.cIH..}.}w..w..+....9.s.....J..nu..w.{......^./.!w..........uw......R.....X..._.W..;}im.,..s\|._...+..;.^urK.}.>qbK.].qc.?.......}.N_+.,..9.{o..~W..E...5C.'T..$.i]....}..'...K7;...I......C.......;y./...usU....W....x..c.xU5.J.B..0...^.r........1.}....>...N..............A.....7.z.\.>.<(....P!..T1TA....O..X,."0.#+$._.f.w{!......S_.{...........-..z.x\.7.._=T.K`....Y...Q..@....K....].`..3.N..I.g.b?.........hn.+F..._^Y.r..>b..R...^E^.%..["P...S.`..00.E.u.ZA.._..I.'..lo%....9.I....._...j.....~.~....m.d.....S9..x."...T..,.......N...P......Wc.j$.J\|W..'..#.......$..p.0@..E.....9....?.}..9./)....{..a.&....S...J. .%...e..@...%....(f!.!.......W..<&......lf..V]..N.....I.....{w...?.../.\|Y..O...\|.Fy.V...O...Ey8'

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 667 x 377, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	99977
Entropy (8bit):	7.977545093902534
Encrypted:	false
SSDEEP:	1536:u7lfi+egGvULqGN+cFNkTcHkbCOcG50TaSsaATbogpR8osNICTG3IzrBtvN45II9:uRfiVFo+cFNkTxeOd7e3NhTA+l45c9i
MD5:	C6B410BEBFDF9ECD34619596B46EAB3E
SHA1:	BFCDAF287F60168636B0C04C6F81F1B3417AB7B6
SHA-256:	8CAAED67F2CF22F5B632F75701D1238E8E1787F78A945E721650D1A9B9C29004
SHA-512:	8494C7F5FF440CF93BC6D042C7DCE6C9960601149C61443E823276C4277EDA21F52CCF2525504DC2530F377E6B4BAC6B96F2F56CCA2D00C0A2A91349EE01CD6B
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/T0I5MC5l-PS07tq1rHrLBvedNWkFGBMKK8FuV5qsmDDAu8HqlYyZsEgDoSXrhHfsPOEWyznrzAaU5HZ_4gdeEDGT9w1wUhilKwrRTUEZk6s36xBM1uPM=w1440-l80-sg-rp
Preview:	.PNG........IHDR.......y....._.v'...PIDATx...y...y.=..z.<+.>..{...\.@..I..HQ"%..$;(.-{.am(....:.k9.^.....nQ.....x.$.k0....}.ue.....dUuVw.I....~?....oU....X...........!...())))))...T.........R.KJJJJJ..JE/)))))..(........~.T.........R.KJJJJJ..JE/)))))..(........~.T.........R.KJJJJJ..JE/)))))..(........~.T.........R.KJJJJJ..JE/)))))..(........~.T.........R.KJJJJJ..JE/)))))..(........~.T.................?.......Z..\|.o.....R.KJJ~...."%.).....`.EDJ)R.......wZR.C..%%%? Le..P.)9.Lfq.gy..<..4..<.6.J..k%KQ/)..EQ\|........GB.%Sq62...t2J....n..!e.Z.d.N.......J..zI.@..%%%.G..P....j...4.e..Y*.".u..C..e.....Z..d.G....3H.,-...R.KJJ........In...Xk.t.NF2..6..._.G.".$...ZYc... .e.P6..R..+...%%.2......Ic.Tw..".D$H..X....Q2..Y4.J.c,aLx....0........c.X...x.%...0..j...JMI.}..%%?8..q%%%.rX...RD....mJ..$..."K..K.e........q..R..1..O.;d.n....#.%.p..>.w.....fz..N..%%%.\|....ed....8...x$.Dk..2..k..w.;.q9e.H-e.'....[k)..1..AN<h-...YT.)s<.^..<..^....?.H.%...uw&.V.,.k....._ip'.DB.".PJYk

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3279
Entropy (8bit):	7.715641786855708
Encrypted:	false
SSDEEP:	48:yqQvnLtkzdjmJJ3hAk+dJa9XrVmdGeNXCZ4o6w+Zv4lUWVV4c/952ql7mHiGJ4JU:7Q89mek+dJjnXno/++WSx1Vc/KWoxO/
MD5:	039E5B669C976EAA7569F9FA8ED813BE
SHA1:	1B5E33D16FC2A26B9318DFEAD0FEC938C5A0C98F
SHA-256:	265FE691B1687E0D18A34D33B5958C1A72E4CCB7D90BF3C70311B6DD4BAE13B6
SHA-512:	D9E8934419FC9E0A34CCDE0EEE3D8BC5435A95C4A72D50F9F8F1B3063C54AC6DB97E30B68ED8CD8CB37B5B73AD7400DC6585864E349B0893210B6152F08485D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....U.G....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0180117407206811822ABF5C578297F4" xmpMM:DocumentID="xmp.did:FAD30A79931D11E290ACA48D7B31C326" xmpMM:InstanceID="xmp.iid:FAD30A78931D11E290ACA48D7B31C326" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0180117407206811822ABF5C578297F4" stRef:documentID="xmp.did:0180117407206811822ABF5C578297F4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*.P=....IDATx..[l....?J.....4.l'..Rb..f]..-.(Z

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3695
Entropy (8bit):	7.88804280702612
Encrypted:	false
SSDEEP:	48:t9Gxmk27ifs6xJtIQoB3oUOOVjUh2Hi4ak5+ZcY1o/jSqJvNReAn4af0h2Trfolo:Kds6x0QkVjZnakMcmqj4afY2TrQLX85P
MD5:	C87773A3095A6870E4842E5E07869466
SHA1:	C51BF4EEE9A05F5EB0D41C53223E7B6F5A1CD39E
SHA-256:	BBD8CA8AC70BCEED0F225E8F302C685A9297AC68C3518BCE9240312572081EC4
SHA-512:	2C927189211F93C5C4E3FD7799FC56A8AC80B165EB38F2E57EEDAAF8E23D37518B8E82FD579E51503214DD189AF25A96BB3E0F3CE46948DB06BBAF3BDC44D91B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....&IDATx..y.\E..?o.2.......Q!....$......c.r(Z.h...Pb.......((q5....q..B,`...Q.>...H.%{.7...'E........Tmm..t.o......5$$$$$$$D....Ab...`2..y......Y't...C'.]............!.N..s.....sF.y%dSC.C#.]...y........P..4...@..../.].........q.U..5.2...:o..0ZF..vA..,...>.....{...NQ..1b...z.p#p.0Jq.e.1`..u.U\w..H........gX..7.{rj.$.-.I.........\...'.].......Y..bD2..h..7....D...F.Y.A...i=.GD#.@WD..b..l....Fh.x....a.R....+.#b....}......\|2j;...o.Fx!..W.(..........^.....P.....Fm..b-.].D.3...]88j...[.+^....Fm....../.V`...S@:jC.0=j...K.+......qcC..x!..........Q.....l....OQ.&V..R..x!V........^k>...^.....kg.F...Q.....l.....8.3.7.....Bl...A.....6.+.........q..#....D..].5.jA....Q. C..#."...:.<R.g#....\|!.w.v..]..Q.!..Swas$..m....i.e.y+.....d......;...\f@E[.EU......x?{....Y..f.2.'.?R.=.....4...&.m.Y.].'...-.n.....>...`..Y`..3.f.:...<.!n#..2.$....p1.qk..H....{...E...k.R#./[.... f._...r=....Q.e..R0.I...[....\|....9p9.....\.\o.

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 340, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	193769
Entropy (8bit):	7.980179307292795
Encrypted:	false
SSDEEP:	3072:1OHwYdknFAPZLp9BVAYpAAwg7cXCqkpQzFgf8DQ6y4c/pFpYkQQ:lYdyiZLHPAxJiWC3pQCfbp/pFukQQ
MD5:	965B3B8F90228A96AE600BDBFFC37F06
SHA1:	1C266F425F33E76A171985BF060AB91AE849EE0F
SHA-256:	75E487EC564F864B0403590BB58EA71222322FB4B4889A338D712E81F7D0C946
SHA-512:	7178DB878633C074ECEDAADFA331BF02D5C8F52C55ABAD67DAFB505DDC75D352CABD403313529D71C6B77479B486770D86B41EAB39B3F8775FB40CF1AE265E73
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/5aJF9xA7xUeccUjstpG7egKV6rX7m_iedrX2dzOptBB0ckf7XEK-fwp2bPtzPMlY9MmrvAKEFErirf4SHKLuUOSk8E3loYryDYOobe13o0fpPcbYL1An?=w1440
Preview:	.PNG........IHDR.......T............eiCCPicc..H..W.XS...[......... ...Z..R..!.$........k.Q....+ ......bAEY.uQ..7!.]....;...O..3....e.\T..<i.<>2.565.Ez.P...9.....;...@.....n.D._uQq.s....P......8C...A....A ...@T...T..b.9.......T8C...m..9._.@.......zV. ...?A.&.J.....8H ..!V.>,/o...C...e..x.o.7.Y.........:.~...(d....gi.....\|..F...U......Sa...XU.!...u.....QIj{.T.....&.nB~..bS.#..1..}F.$..1\-.4I>7.b#........-...._hm.........~U..(s....7b.W....).S .).$.@L..U.....,.sb.l..xU.6.....j~. S..../.S..m.K.1.\| _.....vR....].I.I.<"...\...pu..s.4)A..#...W..)..8.=n%.T. .T.$h....pq...LY~\.:N.0.?N....D....,..-.L..@..Y....G"...A.....f`FJ...>.@!..".P..........<.U?]@f.hA......<......t.[2x.5..x..&..........W..j.5..G..%1..F."F..q.<.....3.6w......=.)....p..F.=I2O.]..A...."..Z.v......!;d...p.=..6..={A-G...*.....7....FF.C.!d..g..^.,.Z.[.u.......\|..M....}o.-..bg...9....,..V.].....z........y$.....TUR.V....I=./....x...rI.8.._...+...c........__o.....y..n.%.........x.

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	181
Entropy (8bit):	5.052245007941961
Encrypted:	false
SSDEEP:	3:qTCJLxoRucN+OjTcvXjXRH0DDmJS4RKb5KVEriqGQcFFuIOUoLRFQcRUlypqURL2:qTCJFou1i3mc4slTHmcIgtbNRLprTY
MD5:	10C8AED69BDAED5FA3120401608F0899
SHA1:	6E5A7025855BFB087B556203D18D24843EBBF804
SHA-256:	6F62D85EF6ED53BC368C77B6A47394A41F3B16D9E07D0B8761E726784EEBCEB4
SHA-512:	E2BAD6E1B1AF68AB4511264A4A8506FFFC4B07936BA3D1C5E809926E7E1741AA0DC1E7991848BD21380F12C962E6C6A7BA74FE82FE24EE762AC736A1DE29B045
Malicious:	false
Reputation:	low
URL:	https://about.google/assets-products/img/glue-icon-expand-more.svg
Preview:	<svg id="expand-more" width="18" height="18" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path fill="#5f6368" d="M5.41 7.59L4 9l8 8 8-8-1.41-1.41L12 14.17"></path></svg>

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	158
Entropy (8bit):	4.838330491146978
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KTMgQHxNgZPK6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiqGKxWPKj
MD5:	F16937125F9CC7F74394587B770207DB
SHA1:	F84EF8DA0A7EE66B6A411041A65902677718C81B
SHA-256:	E654E57335B63D4FE3525E9F0657AE85A9925662D8A4369E8AEDAE0394CF35B8
SHA-512:	C4DC4603269250394F32EF6570BE5E764EAE71BAA59595E373AF84A9F4F7EDF10EF03FDFC3EF685B3D9294C8FD886F2B325B7049B60EF2E7828D53BBF796ED28
Malicious:	false
Reputation:	low
URL:	https://login-vip.replit.app/vip/Gmail_files/css
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /vip/Gmail_files/css</pre>.</body>.</html>.

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2893
Entropy (8bit):	7.911036665675939
Encrypted:	false
SSDEEP:	48:lFDyBab3qykaN+RCwvIeFX+Voxf+mCcAA3XItMEqDHopYlqzUz6Q0cMA+Kb/AMKl:7DyByqykaNs7IoxWmCK4tME045Uz6hdV
MD5:	58590E213FF6F7DE010CAFF4EAE751B1
SHA1:	D6BA733AD072092849FF0E21AAE9BB7C42E31B8A
SHA-256:	14359177B5AB021C05D501588C14F8D6E4D5F61BBFA4BA76DC2E1A0EA474585D
SHA-512:	F56BD2DCAF72854040347DB9E78ABCCC89F55439B4680D43364D302FCDA76CBF3DBC5C48EC57C81E6E2B55CD6DD642E917FF2B226F14B9636645D35049BB1298
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..k.......ygv........U.Z.x...b@..4Vk.%.^5-......r.DPkb.A{......@......Q....A\..u`g..}.a..zYv.agv.....y.?..s.sy.y...x<.....x<.....x..)`...V..(.U.'..h..+:T...@:...C.:.&..&H$;.b....xk..-......R..<.g:.G.Q..)o.1DQ..-;....#.....5.z...o]!...p.l..I..J$`..z4..t..c..[0..c..L..0k..+d.+-...`.>.e......3w..]....D2..J..y..\....q.d.....;..[.. .m.....h..M....R'..w.us..8d..[,..A...l~.&k......L.M...~.x......%.q.......e.f......=...8........R..,(.T.4....n.4G.m.>.>...4.2...A8.nG.?.....l..V.D.gS~. ..t.qk..dB.l...Z....Fa...F.m...O...9Re....+...&.m.....A!.L.......o.........T. .c...,...?mBX..."Y.a.&..@.T...T...Zq.._x.6...>..[Z..c....4v"a.9.Y.p.m.k..^$?7A...>.RU.k..VK..].P}..w..T...r23WcN.8d..+.N..1.EW-..Oyy..Y.B....Y$.T..a4..k.....g.L......i/.w.Y..9[[{.&y.jXMC..\|)...i...H$.4.L..7..C.>...........u.. ..[...~.=t.".H.,..../c...wq`.n.........2......<1n$.......P.f6w.N..o..B.U.H.....2..t...:T.e..=..=.....x<....l.4So....

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	172
Entropy (8bit):	4.930236017696992
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KTMgQHxNrKzcVMdCs82:hxuJzhqIzyYk+qRU4zEdxXZiqGKxYzcu
MD5:	08C1E6D551ECEC6B5DEDBEEF144CB1A4
SHA1:	F1E5D85F81F18E521092C86982745E73C470FB4B
SHA-256:	376E659511C6114BDA0543BED7D7B7F2E57A6A3BD6615C9D76B25E5F141A7BFA
SHA-512:	FF2E4D6308C675974A211AA33E9B35FD74EE0C77B07A8D90BAC42040981ECBEA0F207DBADD7F831273332546BB517552EC65C660EFD3B971840B51BBCBA93647
Malicious:	false
Reputation:	low
URL:	https://login-vip.replit.app/vip/Gmail_files/logo_strip_2x.png
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /vip/Gmail_files/logo_strip_2x.png</pre>.</body>.</html>.

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3279
Entropy (8bit):	7.715641786855708
Encrypted:	false
SSDEEP:	48:yqQvnLtkzdjmJJ3hAk+dJa9XrVmdGeNXCZ4o6w+Zv4lUWVV4c/952ql7mHiGJ4JU:7Q89mek+dJjnXno/++WSx1Vc/KWoxO/
MD5:	039E5B669C976EAA7569F9FA8ED813BE
SHA1:	1B5E33D16FC2A26B9318DFEAD0FEC938C5A0C98F
SHA-256:	265FE691B1687E0D18A34D33B5958C1A72E4CCB7D90BF3C70311B6DD4BAE13B6
SHA-512:	D9E8934419FC9E0A34CCDE0EEE3D8BC5435A95C4A72D50F9F8F1B3063C54AC6DB97E30B68ED8CD8CB37B5B73AD7400DC6585864E349B0893210B6152F08485D3
Malicious:	false
Reputation:	low
URL:	https://lh4.ggpht.com/WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72
Preview:	.PNG........IHDR...H...H.....U.G....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0180117407206811822ABF5C578297F4" xmpMM:DocumentID="xmp.did:FAD30A79931D11E290ACA48D7B31C326" xmpMM:InstanceID="xmp.iid:FAD30A78931D11E290ACA48D7B31C326" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0180117407206811822ABF5C578297F4" stRef:documentID="xmp.did:0180117407206811822ABF5C578297F4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*.P=....IDATx..[l....?J.....4.l'..Rb..f]..-.(Z

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5805
Entropy (8bit):	7.9542006310437126
Encrypted:	false
SSDEEP:	96:t9UzyN3uV9rFvd89BSK+b+n3P/WB64548U3zuH1pgD/ln5KCKH:/U2N+V9rj8DSK+bB5DKuH1oln5lq
MD5:	D0656A971972F0807AB746BE522ADD05
SHA1:	5DEB386A5C5481D9A4AE91E37E175A4E656AE245
SHA-256:	C7B0BC63C6F5631DADD177E4EA287231713A0FF78A36213806ACC9BF760A4D4E
SHA-512:	6DC7991439E91FF4901ACF4AB19FBFC83A9B9E5CB26ABB9987FA72937C84609407A894806B2E7802419C7A550C7F3075DCE0DA33063705ECC51F8F957A6D3D79
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/cYinAwcg0UYHuljAGk0_ZbSq_FJb2iMU2TTPM0Y7ORjDNMDPH1ltJbX6573rHuHu6poQ796iQ8t3s-6PmfexI4qRBNs7ruEpWAmVeBLzeJWkFgd0ar0=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....dIDATx..y....?.{o/4K./..(.`.d......8..I.8.3.e.%...8nAt.h.'.8O6......q.lFE.D.PD.f...Uu......t..[....y.~.....U.:...s.D..%J.)Rh.r.....2M5$..16.5.. .D...E."&....'..=/u.WnK..@P....=Y.=kf..Vc..F..F9i..~80..:T..P...A.BU2j.RF....m.........1...<.W.]...S.."=M..:..H...&.z...?......H.[RE...!i...k..".;.'b.6o".5..$..>...0...9=A.:o.D\..:ew&..Q..w>v].............D....H..<.f..^..sF.....3OD......iIk..D..........`w.t.. .pyQ.[..H...)6.c:....F..#.....DE.......V.{...,.'V>.4.......g.8....fnK.c.FD)>a[#.~....=.%..!Y....-.{..._&.0..._V...R......=..2 .nu..7....]..K...PT..nE..mO..y..lk..X......<.j1...%..z..k\|.....a[#.U..1..Y.......C>.....w.ra.$...k..'....}yr.?..~....?.....c8.m......y.yj....\|..=c.u.}{S...Pm.b...j}J..G>.....E.^...... ..B.c>u..=..omj..["O...HGe+2.u...H8wn......m..H.6......x.,_.;.;..)z........%q..*$.qj...8....8=.y.. \|sW..4.s;-.A....>Y..7Q..e.-:o........s...I..s.,_u.P.....`=c.4..+.%q;...

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8691
Entropy (8bit):	7.966392939246853
Encrypted:	false
SSDEEP:	192:VPQ2AUtx8hX0Y3ATP9I6b0W1zahIgqVfzEbhzX6zvZ724hTHV:gUtO92Oi0W1oI5VLElGzvZ7pHV
MD5:	B194F96127E442BCD553601D72DA4950
SHA1:	003FB7E16FF875F8735E324438AD792D4F5B5C7B
SHA-256:	3C03DE21A818828C0BC4CA0660C31A2B216BF5090CF4B177DDBF507392A693F1
SHA-512:	86FD62B99C25A7866E758BDF1545C9D0671E1AA0B45E027E05F64931E4C651A7DF5DD5594791D9243A1B5FF93F26AC5822DC36A5CC9752D74A015DE6FE096937
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/9ks6e2i7ubrVUEkBwpoJeXTceixbWT3ppLdca04jQg6VPMqXiz6B8KEeczJhnRWmjR453_UREmwtS2jP8-yNq-pU5cEDTbEU6Nqb=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d... .IDATx..y.dGu......:..F.iC.$.. ..H......>x...q..1&...61I..\|..q...,...=,.-h4..m.2ZfF..,o.....{o..qoo......7..>...s.nU...:u..p..p..p..p.'.r.+p.O{[........!.....nQcL.f........:T........4..HU....}....;.....\|.m...\...5......@2q.jC#7...?B9...WD..p......D.1.0..{...[........'..{...c...#..Z..7...C.. ..!U...{...uW\4...X...Z....'.i.....l.P(..\.n.....e..#...L. '\|._^.......u.....eo.c...Z#.,w.+.Q...Z5t.r..j.$.u.......ke.w>v.r.....D.W...+.B......^.N.f.+`.}. &......e%........[.6....e.H.1&.....U.HlSQp..y.ay.6....]w.....v...n....#O.~...6..>..u9..1......ax...,..,../..+......(...q.t3n..`x....T.L..r)lM.........7.. ..\.Z.u..\u5.z-...'1.'..-.A.=z....&..OA.0.....}.!..!{6...=....F.l...../..Y.:Ns..\|..,......s..NM..@z.aD.O....?.D...{..c.....>)..e....\.\|.....~...0..wr..XX..-..~.5._.2z.`,.'.N...{h.............l......./w....ap...O..)..p.....oEg..?.<e{.r.v.X...O..<.l-.]w.~..!.&./;Ey...8M...5r[........6d.i......qr....

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x384, components 3
Category:	dropped
Size (bytes):	75403
Entropy (8bit):	7.983412784961348
Encrypted:	false
SSDEEP:	1536:u0atjKbuQTXTs5KppiRsh9eZyBH81LopJAy2aL+GlhlrWl/ZIojNOYTmIgVZ+ZCi:u0Ungg56wJOLx2ai0hlrWFZIsNzPQY
MD5:	FB6BD2446FA4DC80CD5E8EEED326793B
SHA1:	0D385B63CC3CAA56F11D689898DE7B8672146CD2
SHA-256:	3657E5EB03A4AAB54F1617134E5974ADFB32E9422D064EBB6347287BCC4B59E6
SHA-512:	62A739FC861F9A30817E50E5FC0074F0D796441B5039133D6AE26C909C2648D6D455C04287F8A7CCF06E76743F16B0E753F6FB0188B68CA10F024C1F2DDD8FA3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................................................................................................................................................H........................!.1A..."Qa2q...#...B...Rb..$3Cr....Scs...4..T.................................@......................!..1A.Qa."q...2.....B..#R.3br..$.4...c..............?...".....x..:..I&.I#&.j..c.R.q.t$..#.pI!.............mO..l....{...-.8~s%E.....1....dI.....VE...24...KD..H..$...........\....e....a.p..G:....\x.O...B.p..Z....=.}..n&./..[.Yo.e....O-.>53er.I!..8..c..........f.(..d....C.>.f......R.@...4y..~.v......n...F.>id.Xe....n4...-..i.............f.4...v.......i.x.E.<P.F].7h...5..U.$X...?0.......Aq..2..BL.k.)......!`..)..I$.(.....(.A...W..,\|;Q.A.~...(.....~...f.v!.........^.....W:0..).9.?...:..\|H0.G.P:.F..#.<C..H..../.o_ax..%.9u...R.s.:...;g..C.-...}W...X..#...L..Z%.~G..O ..y2.v.u..^..*O.Vf.>W.'ez....Z#.I'....F........($.,.v...H.N..

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3371
Entropy (8bit):	7.886614052822181
Encrypted:	false
SSDEEP:	96:a2kvgA2m5ed9WT7AZWuiOh9wZu+BbP+/0b+EWoAQc0Ke7/:cimhAYuiEngznnJ/
MD5:	FCC6A5A590F8A56FE298D45CFC875ED5
SHA1:	B1CE3FE1F22648F519C54127FA472A1F1FE6D08C
SHA-256:	477BA241EC4BD3F78A83B8045AC219E9B304075D26A739C41B62F5E429136503
SHA-512:	C697AEE0299352FAC08926EE83BFCB4DED2AF5FA976919454996A8E985D5C30DB369EAE67EB8542AA77F2D25DC3DAC88C0361387A197FCF49AF2FFDBFBF580F2
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/i7W2EWxINNLwgzMNOveR5SNQHKisftbymepppsfQEA1whmCJV0H0cauacdN-I0RfEc7Kz6PJsLAlw6zR97E1rpdxVRSGP_Y2UtFOGlQ=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{..U..?.....3.d&..!..[K..(......u....,-w4..V.(f.....H.H.&.nF..H.P....e.`+..IH...y...g....}.1L.s....C..jR......._..............................=..n>z.n....-.^X.s...C.<.Hv..W..S/...[.....4.V../._...n....n.ab..l..B.1L........T.S...}\|....e...`.v>..............k^.`...I....d.............1SG.Mm7......sG.7l&U.[.3....&.{\|.U)N+..^.._.].77D.ugRd.e;...`%p..>7v....0...Mm.v.u..^)n(..H.g.e;)...=...SB.....#......4..B.N..`.v.._.......-..U)..37......W..k.e;.....`..n.0.-..%...7/Y{..`...4..K...W.!]F...n9............SN.4....\|......W..\.../o...W...i.^.e;..f....Zb...}B.b...dS.[/?....R.EC.i...!..K..%yb..1.(J".....\..u..!.._.-.Y....VH.m.Rn.-./.z.....K....i.-.Y.l......R\......v\|Q.....K.e;&p.p-.fm...1b........+7.M......l..[.........U.T..M.s....:...\|.D..m......`n.T....._x..."..G"..).O.....3..P.#.\|.Le...6.....M.....lg..,..B4.....s.........,.~.l...l..;.;.5:u....2......;/Z.\|`. ...`.v........aS..^Q..mY..?Ml.s..

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7323
Entropy (8bit):	7.958638329717196
Encrypted:	false
SSDEEP:	192:JVK2xmb2EVQeqJTDASVn2uXYrB19n+1zuynMUQ1fG:JEOm/VQeqJP952sYrB19YzuyMUQ1fG
MD5:	C8DBE0DD84A45F5E2A6BC9C9928C8492
SHA1:	E388FF567548224DAF566CF37A6C7AB8FF08069C
SHA-256:	07379D53AFD4C8E0BAA7AA200059E30F9DE4F659552C1F8C50570F8F16B583C2
SHA-512:	6C1AE903673C9D9EC3A703238355AD8FB195071A067F0939ECF4DD4CD1530540AA7A84F36598661643A5251F5FE8B488CDAEB1581BBCFB20B3A790F87A09C5C9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....RIDATx..{...}.?.....=...R$..... .."E34I..T%:Q.T.UL\!..r$U.........a,...K..(.K........\|..(....x.......93..co...3..w{{...............Wq.Wq.Wq.W....].[..s.M.m\..v.Rh..(4..Z...5hEW.t...+./mOi..<Uw....s.g.}...........d.....g.;..V..N.L.^..n.F..ZG..Sf.G.......v...J.. .:r....sR.?`......4..m_o ..M9U.4N......E.......P.qDF.%"....,)(...i..O.}t.?.{.Wb^Y1....>%o....X....J.].....dF!m...[....\........m.f.}.JL.+.......o...o-..UQ....K.&].X..>.J...q!0...q.w..iL.+.9..>...1...W...iW.H..."..H..5.m~m.@j._.C.....A..~..P.....g?..0..*.M!oUZ'..V.^..@:...Y.P.V.Y..Rt..0>..."...,......\.......2....\..$-\|;.}g...}....x.`..,P...(.. .J..R.>zf..x..........\..Z....?>>.Zc.........{2.[...5.cY..r&Zk.%..-.5.5=r15...{......K!7.....5......k...iM..X..0R.'.w....0..Y.)."..T4...g...J$`.........KJ.o'rLfLD.K...M.<.e..Y<.35..B......... ...g...dq.a.6..........._.....~.yF.g....,lq.]).T...o.i #....<...[.......&...\|.5...aC.$.8.B....?..b

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3882
Entropy (8bit):	7.909458703791142
Encrypted:	false
SSDEEP:	96:USw+dhTnlu19HrkVf9laL4erOfg+quZb2QTu6ldIwz18SM:USw+dhTW9Hrajler5juZb/DIwKv
MD5:	58A9DFD042D83689659265FB47D30F3A
SHA1:	EBBF256294DB53FFBD9B4A1637868AFF5281C8D3
SHA-256:	398B3C2E80C9961BD30147D33B04EA5B2A315D9616F5B582D216567753DA240E
SHA-512:	9EB72BF4CCD32997F72863392C90EC9AA8F02C4150C6588338EFCBF5038CD8CBA50F4FF849AC9A2CA8EE0A2A3DCC599F652C1213468AD90FE1E8E48D670CD513
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/sfQ-WzgiZ1asQ0K88_k8UG53n8u4ERdLJsZI-lTyHmL_p2f4ViSo6g10vYrjn34HR6sfjZGvs6xpRncjw4PT9u9iD8tC4CTDBIT4sD4=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{p......,.K.....`.....w.)0......w...d..W....w....w%.2..Uy....IH.I...pA..P$...k.l.z[...;..c%Y..jw.{F..R.J;.....t.t.666666666666666666666666. ....l.+T...4.......@..~.....K..jx/.5.\|.N0.. "0.`.T..%......k..V../W..k.n...6..."..?' <..2......k~.#o..n.......`u}UTq.A.6.!c..'.....P...i.........C.@..2.9..yk...@....u^f.3AP.t....(..:....P....'../..#..\|.......{...(A.../..!..K..x..?.U...y..U.R.v.s...7..5......E.Q'{..T.F.%".X...N..@U..\.q..JB.#.Z...u.....#.j....bOEKu.......y.{...C..i.gd.\...c.'.-.......`...8.{...?[..D..#r.L.@.....[..~.@....A..w..Ku..}...T..q...........V......].0.....I.. X..S.....O.Hm.'.D..@e.;......A.;....5F.....d......Z....d..S...*.s"....Mj...I.T......Q.a...y...D83F.....Q<f...=R..gdWeX.v..'....=...f....;...j...d.-..G2E9s.../....+./3.6$0.k_...tHL.f.D..!...w .9...J.WD9..I....<.9..}{..d..-p...Q.T..DEt.E ""..X...].+....h......1 8..@/..w.BO../^Dh$.f..(.....@....B'(t.

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	287
Entropy (8bit):	6.568197697490108
Encrypted:	false
SSDEEP:	6:6v/lhP2S6Kqq+VO1B5+kM5qAuaeTnp8zspzNs1mR3th2yL+p:6v/7aKqqZ1v+d5qAujxsQzh4
MD5:	31D9B6F4EF6346D55DD56B747274D0E9
SHA1:	E34F6642832D1FDBD5A35D4CFC32BAD5209E4811
SHA-256:	C8F5FC6467CA98F32A4472A3BB001902C36A98CF1E2DEAA07CA8BD5EE88BE217
SHA-512:	F92B6EE54681097268B63ED94924FD2AFEC0496B6748EB210692A48AD19FE6416DD9A1844A96AC92418244EA912B5118D859C3DD502A5C21C9115946861E485B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.....H.......IDATx.....A...q...0..r. ...pa...``....q....+{4z~..s.9..=...$.....V.\|U...Dg..........Kw..;..E'@......6.y./v.......fW.z..Ht..<R.....z...H.'@..... @....... @.......>. ... .?@..;.h....D.z..x.O...o..x...k.u.... @...........K.3sI]....IEND.B`.

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 293, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	197432
Entropy (8bit):	7.9857281551829375
Encrypted:	false
SSDEEP:	3072:ANSaPN7tAwi8BO9AGlMY12BiY/XV4uwSETVPIzQCEIhi3mvOHDpHFgdfOH9vL5ev:ANSE+tD9zUV4ZSmeQCO1HDd+wHqqvfbU
MD5:	D479535F40F9F7AECB4E39AC39049108
SHA1:	B97FC1E7115D213BE3889AC617C90DFB1FBB08A5
SHA-256:	812AAB68108C223257DA83C7FE54B7FBEEA9C7FD78E60158FD1A2167E9BAC1E7
SHA-512:	D810C13FC2D455F86F0D490754D6A26EDDC9B0A3E037DBFEA93C2734668ED2A34A471A83AF5C0BFA6D8363F7D163B7CB74EAE43233DE8B0E748026FD344EF3DA
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/pWVbkjhtPTNZbVieBwoW5yp4_edEFybVMNXXAQdphReN5SvSsx3AS-0ssRnBRGbi9mFm9uTIxgrOEY0GdZLldlzaVSlJI8yprmEWEh2gnp1WCQdeMMoF?=w1440
Preview:	.PNG........IHDR.......%............pHYs.................IDATx...Y...&..b.....KF..VuWw.4.!_f82.?3?y.....nw-.y3c;...03U..5....U]M..y..8`0.}..j............. . "..B@DB$C$B .D..f$"h/3..,EsQ50PF.....C...~......!.!...iV...S>...i........on...v.r...@C..xh.].. ."....I..............-# "Z=...m6......._...3.".m>Yn........-._o...<..2lE.h.^.m.`......w.].].1.1......Y....J.?K.5*h...hh.af_L>..."......'.\|..x;......o...v.[i."D..G...O~oB....]...... ....l..z....v..o..6.......f...!m.C3S.e...........GD..w?\...;U...\|<..?.......}..w.7....v.{d.G...g.... E.)=..~..4..{..:0.2M......w?.....t....d.Yf.....~.B.\..Ni:.Oc. ........p.?\..$.4=...\|.t.._}.}{...........D....W..\|..j7...#.b...O...!..&!`....H.`h..............@.H.....`.b.e..@...E.(....h.).A..@......................X/HU.......D@]..l..z...fu. .?.U.l%..^..zQ..M.X.-..CX.^V.. m.pq........]...P..... .b]..F...o_.....:.r..\\....?0..Of..$.3.......2....W.CB...@..]..."......6....K.A+.....H..v..Epq.F..a..u8.<.i.....U.yBZ

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (948)
Category:	downloaded
Size (bytes):	34878
Entropy (8bit):	5.576205975807048
Encrypted:	false
SSDEEP:	768:0035/+wjcRat11UsJGDHkOsSsmsdTbdfN7d3dyq0VAFtN91wwMEQaO1n5zm2OAm8:025W1o++0W8Rk8RuyW8
MD5:	A410530B03FF7847799B88EC482DBBD3
SHA1:	D41A5CCD4BD7A00B266650D8ABE8656C74C845A5
SHA-256:	D9B134A83B179C870E3E6FAFB183FC501E7179F90FCAE6252E68919CC815C329
SHA-512:	6A4F8EE9FD851DBFB5F72D834597C062CAFFC9C641B4A5EEA78DA9971EFF14FD0A7C1749DE3D502B46219A993D80D4DC5BA8E2F9E7F2F10385A02BBDE10FA067
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.qmuJi5Dd2kw.es5.O/ck=boq-identity.AccountsSignInUi.Mw2jIe5agLU.L.B1.O/am=HwQm0YljARCPOAc-QCkQMgAAAAAAgAAAYBlhZg/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,VzN4J,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,recoveryidentifierview/ed=1/wt=2/ujg=1/rs=AOaEmlGH92EHnnq7nYOtfcg3m8nwJzPybw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=NTMZac,sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.pf(_.Vna);._.k("sOXFj");.var Fq=function(a){_.I.call(this,a.Ga)};_.B(Fq,_.I);Fq.Na=_.I.Na;Fq.Ba=_.I.Ba;Fq.prototype.aa=function(a){return a()};_.zq(_.Una,Fq);._.l();._.k("oGtAuc");._.Gta=new _.we(_.Vna);._.l();._.k("q0xTif");.var Eua=function(a){var b=function(d){_.Ml(d)&&(_.Ml(d).Bc=null,_.Sq(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},dr=function(a){_.ep.call(this,a.Ga);this.Pa=this.dom=null;if(this.Ci()){var b=_.gk(this.Nf(),[_.Ek,_.Dk]);b=_.mh([b[_.Ek],b[_.Dk]]).then(function(c){this.Pa=c[0];this.dom=c[1]},null,this);_.sq(this,b)}this.Oa=a.Gh.N8};_.B(dr,_.ep);dr.Ba=function(){return{Gh:{N8:function(){return _.ff(this)}}}};dr.prototype.getContext=function(a){return this.Oa.getContext(a)};.dr.prototype.getData=function(a){return this.Oa.getData(a)};dr.protot

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1719
Entropy (8bit):	4.4003431597789415
Encrypted:	false
SSDEEP:	48:9/S90MU5IahYdmMqPLmumqrYX3DyZ/jTq98:920MUSahYdmM5qrYHw/jmi
MD5:	7E4968170175907C71DC14EC4841ACAB
SHA1:	C9010640A0CC81506E9721E69E0A508ECFBEAA0A
SHA-256:	D7CE0FF7DA59E9040AC54917098C68952C6B4B849ABFF732908008E20E8DF18B
SHA-512:	A709A66A26B7BAB6511131B89396AE88AF1BD0B8E16B72447B8FEEF3A8D4663670752D3207650456580130111B5D797B3B59E0C739F9CE6BD4D1D5F34C926E9D
Malicious:	false
Reputation:	low
URL:	https://about.google/assets-products/img/glue-google-color-logo.svg
Preview:	<svg id="google-color-logo" width="74" height="24" viewBox="0 0 74 24" xmlns="http://www.w3.org/2000/svg"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"></path><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"></path><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20581)
Category:	downloaded
Size (bytes):	20765
Entropy (8bit):	5.294839791503179
Encrypted:	false
SSDEEP:	384:mb5vj+l3jfaksTAAvNWUwLATFqACns+CSHDJDLrx:i5vj+5jfSTtrTFqACs+CSHtD5
MD5:	15065981497259D972918A646AB771E0
SHA1:	F2DE8453FCCB34BAF26D784AFA965DBE8C0D1550
SHA-256:	8A1B58D624EEB47E9E3073531A5D364E41A2E7853C052873A79917F97DD0BB44
SHA-512:	38CA7D35BEC8C1E2F3E17EEE4048E724F84B7C44EF001AF83E3CA68281A7E3E77E132283FF3597BFB0069B2B3B5C73BA9C9AFEFB12793EEC2F501D5F13E6D7ED
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/hammerjs/2.0.8/hammer.min.js
Preview:	/! Hammer.JS - v2.0.8 - 2016-04-23. http://hammerjs.github.io/. . Copyright (c) 2016 Jorik Tangelder;. * Licensed under the MIT license /.!function(a,b,c,d){"use strict";function e(a,b,c){return setTimeout(j(a,c),b)}function f(a,b,c){return Array.isArray(a)?(g(a,c[b],c),!0):!1}function g(a,b,c){var e;if(a)if(a.forEach)a.forEach(b,c);else if(a.length!==d)for(e=0;e<a.length;)b.call(c,a[e],e,a),e++;else for(e in a)a.hasOwnProperty(e)&&b.call(c,a[e],e,a)}function h(b,c,d){var e="DEPRECATED METHOD: "+c+"\n"+d+" AT \n";return function(){var c=new Error("get-stack-trace"),d=c&&c.stack?c.stack.replace(/^[^\(]+?[\n$]/gm,"").replace(/^\s+at\s+/gm,"").replace(/^Object.<anonymous>\s\(/gm,"{anonymous}()@"):"Unknown Stack Trace",f=a.console&&(a.console.warn\|\|a.console.log);return f&&f.call(a.console,e,d),b.apply(this,arguments)}}function i(a,b,c){var d,e=b.prototype;d=a.prototype=Object.create(e),d.constructor=a,d._super=e,c&&la(d,c)}function j(a,b){return function(){return a.apply(b,argumen

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	121628
Entropy (8bit):	5.506662476672723
Encrypted:	false
SSDEEP:	3072:QI9yvwslCsrCF9f/U2Dj3Fkk7rEehA5L1kx:l9ygsrieDkVaL1kx
MD5:	F46ACD807A10216E6EEE8EA51E0F14D6
SHA1:	4702F47070F7046689432DCF605F11364BC0FBED
SHA-256:	D6B84873D27E7E83CF5184AAEF778F1CCB896467576CD8AF2CAD09B31B3C6086
SHA-512:	811263DC85C8DAA3A6E5D8A002CCCB953CD01E6A77797109835FE8B07CABE0DEE7EB126274E84266229880A90782B3B016BA034E31F0E3B259BF9E66CA797028
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	616
Entropy (8bit):	5.009629159026319
Encrypted:	false
SSDEEP:	12:Uc11FPrZO6ZRoT6pHAcF3a8xRjzrZ6ZmOHc9n+5cMK00k14enEPCedG:3FtOYsKB3xxzYmOOk4TfenEPCD
MD5:	1868068BDC2622CF2C4C607102970B6A
SHA1:	B254679B639C5D7F26BA8662A70E5D7587333ECD
SHA-256:	354AA87B02FCDDFAFEE3DB7BA65775E92D271256B7CE8DF3C0BB43467EBA7B3F
SHA-512:	A6C2CB698F7CA900EB1132C876CA70A5933EA4F201F4C6621C8F357A3DD916C8F9A834631C38436BAF83137903704D349917D9EA25B179AEE90262769F44A85F
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons+Extended
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons Extended';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff2) format('woff2');.}...material-icons-extended {. font-family: 'Material Icons Extended';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Macintosh), datetime=2024:05:21 22:03:56], baseline, precision 8, 3840x2160, components 3
Category:	downloaded
Size (bytes):	2094018
Entropy (8bit):	7.7813805871123645
Encrypted:	false
SSDEEP:	49152:QPudfUtb6hDao6p9qyiiyYKFC5v3mZ8lRtP60jeqBz8R:c8ctoDB6p0yiIpkc6Obzs
MD5:	2EA380066A5DE0CD2A0530B41C98CD2C
SHA1:	47A55BEE485AE21729B72BAAC001DB350B635F37
SHA-256:	1300910BC918492B6B7DEFD9070EEF3103C66EB22E580C14833B7C6D81CA0216
SHA-512:	FA52A89367D01851869CFD82AF55E4249C075EBF39713C832E45177226AB197C8218D6E1ACE213CABFE6DB65DDDEA0ED6683B4F3CB68A73DE885E15569A3F721
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/gweb-uniblog-publish-prod/original_images/mascots-g-16x9-v02_aJfUAiF.jpg
Preview:	.....$Exif..MM..............................b...........j.(...........1.....!...r.2...........i....................'.......'.Adobe Photoshop 24.0 (Macintosh).2024:05:21 22:03:56.......................................p..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................Z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..<..4).KM.quo62u.....T~%.C......c..y?..LP2...].-w......D.F.*.Y...i.ud:..Hp;.G..r...SF..>'.N..7...y;ww...W5>k.Q..$..\.9..8?....1. o.....r....d9.F)..q}..

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 391 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	94168
Entropy (8bit):	7.990430094990128
Encrypted:	true
SSDEEP:	1536:Jj0BfmMD+HChd/PfDS4t7D+wutCYAFH1Ndas87t1415+9DKnagiX6zz1io3de8oF:0jYyXfDvtYCYAd1j670X+Unn9XB3w8o
MD5:	B60555632ABAFCFEE17726F9937E3A65
SHA1:	FC4F3BCF9742530B33183C5F6C1C152E9972DD4A
SHA-256:	56AC594DD1C8FF75B249A4ED7F82B87CA4C6EF6CFFBF7D7710A8D22AA37709BB
SHA-512:	57028D3C54A4AFFB1F2D8F662E41E6DD0ED9EE0B55554B97967843E61BD229CC243D684F19D42AA4567B43F3BF0B676C8BE09EDFD3489AE132EDDA938D0B0734
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/NksFVpnLFiAE4YKEh9n84ebvfznogwh0AyAUDpmpLqpBP7h791LS9RcIzWpE8XfsiR0NJiHomxV8FyVO2ccMF2VzB_L3omeUWuHu9d3LGJ4Ww6JKviev
Preview:	.PNG........IHDR.............iC......sBIT....\|.d... .IDATx..y.%Yz......{..].[UWuW.L.L.t.tK3...0.....6.e.Fl..O a...`.d.d...e@...a B`.HB.....k..Z_U....<..8..<K.{_.../.{..Y..7....}g.....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ ...O.........mx.b......-..p'.p....q.P/Mv.Q.Y.3A..Bb.....`.....`.R. A.(@..@ %B@.A.@J...$.H)!.N..! ....0.P... X..,J.E).R......pq#.........?......}}......P...^K..O'I..a..R>...^.

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 341, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	314962
Entropy (8bit):	7.9859735903528755
Encrypted:	false
SSDEEP:	6144:BIFzP9uWvYtYOZl0q58b83xyuB0MbawZxr1SAIqTgXtD9z95fVR4rHo7:mzlNlOZB8qyQlbaar1PEdDRTfVYW
MD5:	FE48F024C754220B710A16F58BEF7968
SHA1:	CD19A340822BFB160653306DE9C5A650AD173962
SHA-256:	A3BB294D6D53266AA00A1D5820CA8D09B55AF55A5A61C473CD7115C95085BDBE
SHA-512:	C0E53286C007EA5EF6AB3E653FF0C03110B663FFE8009EF39433A8C3EFB2368BD7F08003F4C4AE3B8124F78B88220A5CC52C301D4E9F7DA023D091FEA76F59F2
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/JAHpZ2_EHeCUpdmIs4cbbahzG_fAB3drICQ6fzdVDU0bFa_Wx7Cae5JuN98SAvgfSOA4n8D2ODHsnRqwEoGqZw3KVilRloyOz8ydbrKXxSK6qdMmMUQ?=w1440
Preview:	.PNG........IHDR.......U........t....IDATx.d.Y.,Y.....cf>...7.{.b.s......1.Ud..&..@v.RS. ....W......[h.lu....".j..HV....)r........}6.s..[.f~_............{...>......^.f...f.....;.(.L...IE.s.D.c".dH..sJ>.".hDNU.g&..\. ..CL.f..@. ..I.T.I........ZJ...A....l...L..........!.C`...X.g.>)..\.m...!..]..<....wO..x...W.o.9..E..../.....Q.5K.fROmyn..6s....~<q..1.+.;44..^IN.D.!.".....HnADS..hlL.....b((.XV~....%.oS9.....3..C"2TP..0TU$....@....j.h.H.....b....`f.H...f......*v.................z'..L.}B.IsTQ..L.L. .T.....\]...0....\RVD.i....\|6]...."........O?.)<...>..w.u...=...+7.~iwg....7_..w.G..?.........k..m..?z..o..b..^.../../.......w........_.r..j..k.?...w.._.....v....o.[.}4[.>.N..i.V..._...^......{..o.v...hY.....[........a.......'............./../...K....P..........U/V...............[..ff...j....X.3.+.2.....RJhH.`.AM.... `VP#.c$D.SB....cQ300%"QE0$.QD...PTG....0."23....:B .......$%a..............Q......;9C..g.LMJ..h..@.....h.......(...g.Ur.. @.0..`.n.....L.6.J.@

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	842
Entropy (8bit):	7.480374218163191
Encrypted:	false
SSDEEP:	12:6v/7YDJnuJYcc6hN7UqwRCRziOgxkIsWZQPxjMlsURBcSL2cMvl1SKBzCrZg:v9nIt7pwRWuO057ZYxolsaB12c+TSc26
MD5:	759852B344E417DF4CD2E9816AAF0331
SHA1:	AC557849E9BB2B27B29E8B80D822AC88CB4001A3
SHA-256:	D8DAEE51C41FA1C693E3223A9EFC35E152389A5E9B768375FF8CEEC611A8BFBE
SHA-512:	160CCF542E4BB33D6F5EC516456924FCDAE1966AF36D590CB956AED39D165F9E7D73DB5D101C2B63C99A15F59E9334F120C83CB965B5B4DC15FFA9CEECB38F47
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/74XPOHU13QOcbSmQ1FLoo3-PVADcFd7VvpkxBIMoJLqL0BZcjIx4bq8dULTExjuoh6vhLDgxmBiZU9UCSIGt08XMkl8HAE23jNa4jg=h120
Preview:	.PNG........IHDR...`...`.....H.......IDATx...JTQ..?w.9>.HuQ.X:4.......].......2.".+EI.....?..?.......f.u\k..+..S.... .d.....[.....2.y...i!-.....Mf...&..X@u..t.Z6V"7.. ........@.K...D0Q.hp?m..2..).....d.(.d......Q"~p.yMp7-.5.q^....t).1..H.@z..}.8.2Tb.w.........Y......G0.<y...$....@.Y...b.'..w..z.O6.a......g.,........;\|.;...2..@..&.....7.)..`....Lr......+t...S......Te..0.~....\..\%...(.&..........T......5-...L........T....7..2.O......"l./.k.?....Z:.Z..\|&...z..`M.E.r.......2....a..Pq..7-..`..IA..r)hJ.[......W.-F.h......'..../..ii$.. Tn ....F.".X&.....SP..\.Z...5Q=..C.....:.,..)xS..C.l.=T.....#.'...P9...m.h.l..`.@k..........D.e/&.1.G...i MA...CE:-.J...)..$.Ny%[......../v.T..X........+s..!?._..\|`/Q....#^^i..tZ.R.(\|....M.@.....l..a?m.......@...o..-y...t...}.. ...>.K......2@.H@....K.f.....IEND.B`.

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4456), with no line terminators
Category:	downloaded
Size (bytes):	4456
Entropy (8bit):	5.192759829565754
Encrypted:	false
SSDEEP:	96:yJYI/coXqCg7OSfg8IO8uB8D2zYQNlYP3:VaqCg7rfg8IO8uB8DGYQNlYP3
MD5:	0BE72138ADD27B05A23B046F0C68C90A
SHA1:	8FF4AC660FBD67C21C7852DB4BAC9C16352D3FAF
SHA-256:	1F31FBCBA7CAAF8664565D1A8C51ED4FDDEBC3C0224D18EAFE01084BFF30FD6A
SHA-512:	CB0D067B27A9ADE9FAD346CF00E6AF9E5D6FF07D437514C2A7232A1BAF74DDA0F5C238DD485F414BAC3C93FB0E831DB4CE2916F88D39BD52CDAA63BEF31B886F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm._yk4Kx1DLwg.L.W.O/m=q_sf,qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTs74be_nloI4pEoaS7eJYnNYpJ4fQ"
Preview:	.gb_2e{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_Fc{text-align:left}.gb_Fc>*{color:#bdc1c6;line-height:16px}.gb_Fc div:first-child{color:white}.gb_pa{background:none;border:1px solid transparent;-webkit-border-radius:50%;border-radius:50%;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;height:40px;margin:8px;outline:none;padding:1px;position:absolute;right:0;top:0;width:40px}.gb_pa:hover{background-color:rgba(68,71,70,.08)}.gb_pa:focus,.gb_pa:active{background-color:rgba(68,71,70,.12)}.gb_pa:focus-visible{border-color:#0b57d0;outline:1px solid transparent;outline-offset:-1px}.gb_i .gb_pa:hover,.gb_i .gb_pa:focus,.gb_i .gb_pa:active{background-color:rgba(227,227,227,.08)}.gb_i .gb_pa:focus-visible{border-color:#a8c7fa}.gb_qa{-webkit-box

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5502
Entropy (8bit):	7.9583133971815805
Encrypted:	false
SSDEEP:	96:XVa38zohDe4txXz0r96fvtSpobDM4m0IoqOWOGcJFFqdWRjQrLD/y5FhJvoIx:lKQ+txXQ56fVSanbuo/WZYFqQ9GLD/CB
MD5:	25786416CACAC49DBCFCC539BF164FCE
SHA1:	A5383EDA671E2DD0CB020EBF038C1FA4B085BEA1
SHA-256:	C0353BABF6CFE50790BF9F86E0A5933F89EB6E95F5602D676CA4288644F48D77
SHA-512:	AF8DC13415D19330C0837A2632B8168B27641287EA6C8E805CD5258EF5CC763287F178EBBB9D039C8CBEEE425B3413A61810E22E27093626684DCDC96FAF62E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....5IDATx..i.eGu..u.o.m.{z.{....`....A.B..........%..-...)A.X.,\|..@.B...Ddq..1..`.1..[OO...-..:.p..........G....S....Su...c.1..c.1..c.1..c.1..c.1..c..A.S.so..Ugea.\|..:b......\W.wQ....9.W.....u.h-=..?.a(..v.q.V....5L.].....j.>......O..q.. .S.._.$...n..p.).+F!~....,.S....{-..e...<F.u.+#..z/F..C.e..9K..\.;......S!B.<Q7.......?...e.........[....O...IVy..\..R...>..;......E@b.30..'/.......N9X.a!....).WD(........7.}4,] ..G...r..b.$&.b..B..Ly.v.#.?o./(Mp..y...~.v.MLn...F..Z+.k...W..t?...p..g...B.QI.8.T..&z....;.Rw.+s.=.v..#.%c1.@.........Y<%..AZ.7..m..L\|.'..h.1.....!.V...M..nbi&L.V....`.F,i........4.h.M2.........s.)VP@$..;.;#..B!..:.....l..&........S.T.a{+...r..?..e..3X..y..C...@U.~u._...&0r.....&{\|...V.-I..B.......}.j..).S. ..n...QAX.4.......xm..3...3...hy........d.......7... .NIp..."....3....3.#..j..."Lt.i.`%.N.q[.Qc.&:M+...V...p..%8.R.9....(#...Y....&..oGD'.UP..N.}...1......O.E2...

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8005
Entropy (8bit):	7.932879807851235
Encrypted:	false
SSDEEP:	192:NqJV3s0+3afbOkpJYFOFrxRA9nvpvAk/RH+h80d4D:ET3KSbpoOFNRw6k/Rehxs
MD5:	82F73E47F29A0B0B6EA0AC8A67419E3F
SHA1:	CAD2C14184D3EB8CBF94E98EE178362F9D494169
SHA-256:	A51842A1727B816A7D5B2C8666EAF8EC5F6C00A60972812E3DB65ED315FDEE77
SHA-512:	2D25A171AC3A8496035E38E4E823DF6CBD8CE1C1FC89B36F13EF3E46F5831E1AFAF1D796488BCD70C3DD1D0A489FE6752C01C62225CDD2A321BB53BBC33C83B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6....NeXIfMM..................>...........F.(.............................H.......H....o.#.....IDATx..y.l.U..k.sj.u.7.....=.q.1.p....ID...`....bA.%...# .(....DBB$..&)Q.K$ .;.!.......M......T.9g.....T.....k.R}OG...3}{.....'.......>....V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9..~.]..=..#.^.5"._..})"...^.a..Vp..;.....t.4..B0n.........@6.d..L.Q..!..hiL{..s.........`.`A...c.+..........#...-T<..1...!..$...:.6.a....qv..3m.......jK_,..M............kC.I.q.E....8.f.....5.....'....>.......Z...},"...M......7..c.^.....710....:D.k4.5......J.d.M..Y`I.d....%W.?r....O....9w.=f.z.{.}....k.j.8..%_zj.........8f.!..3X.~.....O..\...f......x.a....._J....H.@.".....B..@6-........p.........r...w....7i..]Y...=....ds.V.\...#....t..V.gr;.....O.......h.T.V.0...$..W..........W&b.I..y......AZ.Y... Y`o.........!S.S4.$.p#.E<..=....L...'....r....L..a:I..&..;....z......Z

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2002
Entropy (8bit):	7.785694192036961
Encrypted:	false
SSDEEP:	24:OrVGY7zdSfpppppgfCtYFgewzB0iRcnpppppy1ssvn/62a+DRgHdBxfxnBt3q3UR:GGY7ztCtYFgegBhcNsHf92pxDp0wAG8o
MD5:	277569215A9A6E7C6B7553892F210CCB
SHA1:	7A483FE9E0A54E1ADD9BA3684F1DE7CB92BB031A
SHA-256:	4F65200DF0A0F28A9427FA0CCC75D604422BA6DC2487437032D068576058955F
SHA-512:	5A6436A4EEBAC0D5CE458843EEAB33F24A5A5F194F4477A6BABA28FC15803DF79A43A07134D37D2276827137E99D3C0628B2474F874F0457A864E54C6B4D8167
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx...k..U.....EJki..0......bD#D%..4......X$.Z...T...c.....c"..`@CPATP.p..j ...B..^..EJ.p.x.....L......syv.{...sH$..D".#.....j...`.,.yO..ql..mh..$.#...q"^..p4.c..n(q/n.........H.;`8p..w..n.qM.o.}'.-3.. >..L....^...TN.[d8p...S6u....]R.b....3Q`QCMn.Gz}W..[C.'.1.x#>.9..Y....u%..3.X.=....yu$...^....O...Z.p.. ...v,m......Ip....:.....U.&..r"..............9.\...L..c..OhTe/.R.`....0....Y.P.<.T.0%....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....G..;:.6)s{....?.6z\|.7....].f...8.$J.#.G.t...S.U.....\Z.~....S.....M.en. ..!a..../...aT.*s/o/.n.f..9../...6....+....SVx...w.1....5......vR!uJ....2..;.l....[..:3/x..z'>.B....e>.....>..8..'.n..G}.$3-...x.........o...,...h....A..0..U1!.,-.Vg..Y.....vY9........8....Z..,..S.4dS....c.....s...m.....e...$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.$....GN..9Ip.e........{..w..Y.\3K4&x.s.UB.....a..1G.$W..7..

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2222
Entropy (8bit):	7.8730726200985295
Encrypted:	false
SSDEEP:	48:IUXAy0GN04/mwrWupfQzgLziuICrZrxUsIB8laSW7l3agXXoK:Oy0PwmYppfAgLziggsIGWP
MD5:	A3419949626E50545681DB7C301C5D47
SHA1:	1F4DE8632610E84482651EA0A8CB2ADCF70EBA86
SHA-256:	2DF779D9557603350D38FC3357075048A1761A17CA2E9AA3586D07971D9BC2B6
SHA-512:	8D9858BDAB6EAA8A6190BC8645267B44B81E07D6C0C5DBE3A628419BAE08051FEBE6FA47BFBD56062BA1273FE0D24E301952A89A2DD78B5306F48B9B122DA613
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....eIDATx.._.\U..?ww....J,..jb .Py.......35ML,e..m..@./.....`.M.Z...B".vZ\hM...s.hP.,.!..5.K..X..vCwv...UZv.{.s...e{......g......`0.....`0.....`0....a.b...../...J...w.C.c&.....`u....m...k.."vR....(!<.c...`....k.J.....m.v.`.0.....h....skB..IjZX............4e.......V. .jV[+.2x./...BU..X.>...`H................4DK.9.,......X....I.. ..dk...6..7.y...oi..'r.[..Kt.D...!.=.G...k39FV?......L.g...\..X_...........R..x...X..^Z../....r.....].R.7y..\|.#u..._g,^(~.+....v....pr.......e.;^.Y......T........,../..\..s..]D.g.......K.6.L..SO../......nIi].t../......Wy..4w......e..%.jtz\|..Yy]D.+...[C83....xq......%Ou.._..\.%..'.`..V.o...Sa.....a.....\..w.y.\|E?#1.v,...nj%..:A.x.JkK)O......tQ.Y..`..C.gN....p. .....k.a..\|....0...GEs.e..1...(......(L.......1..'Wn.[T[...V46\|.. ..#...'.b.;D.5e....(..b5. Wnm.^.Q%N......`9p]..!\/.....u....t}oC........q.>/...r..y`$jy.Xm.6D_...}.~@P+3..8m....B.....=,..E..I.6..Q..F,...N...&Q.x

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4368
Entropy (8bit):	7.935127043893243
Encrypted:	false
SSDEEP:	96:GgmxsMIfnPecPf7bV2aRyzTku4Z/vnZoXDdtwVzNtUr7q9:1mXIvG6t2yydk3optwVz0re9
MD5:	A76B1B113BFEA58A3CB5216AF2D413B9
SHA1:	E1004D0BFC84ACE411ECBF9662B827E8B37DCD2D
SHA-256:	4BFC4D734A0BD70BC97EE5F17DE6720CEAB8ED7922BEB7B40DCE4F707C1968F2
SHA-512:	3D54A45E49D462814FA65D3D99B6FC96B6EA26DE78A49815A5AE447A14395A6A5661C15EE67F07C7947799A5226118980B4B4A8770953C596D0911D06A193667
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..{tT...}..cH...........h..p.....\|..u.V..j.h[....^Q.uy[...e+.."...m...........#...y...d .d2.33g.\|kee.Y..g....;..}..I.&M.4i.I.&M.4i.I.&M..".....-.O..."...........5...!..P........-X.=.....\|...\|..#`.%h..'....:.Hd..;.t.9M..J...xTq8k.q.......6...rR.a.xNu.\..Do.2.......,...3N......0.Mv;B#q{....T....U.G..tF...'/<l.:{\..}.b5.Jf0.."-#g....hj;c...K.5..c.nGodx..z.j........QJ..].M}g.`9}..FC_........e.J.;)..i......#...........-W......_f...(7.....!..i.}Z......0..-....+^..\lt.PL.....>+XN.X.h..;=r..m......\.y."....H..'...I..uk......7^aA.....=..e{....#.O.j...R".7..Zd..%.... .G.P...U%..\|..>....\..d.Y....]..JI.....H..O ....x/.......J............\|=.R....y..:.W.l.~.....F.D.;%..o.H..N..5..q..R...J.Dx..vD....#d<....^.....8..])-.)......Z.v..+4>..?.SV.S"........xA..n.=]..`G$T...(Q..SN.......QW.v...5..."..;.[.(:..5..]~.v.....')#.......'?......=.dQ.Yg.;..J..r......'.d\.+..';B...-f....L........&..........

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3042
Entropy (8bit):	7.893880373562449
Encrypted:	false
SSDEEP:	48:pH94yCKJQiPB5mCp++S5P0ejDduD0o8W9Ab4jcJKkQ3Ud7uxjUn82ugEZ3br4yh/:j/RrPB5zwlOvwo8Wz+Pog82+rD
MD5:	A00F17187FA42F57B592304788AC6A30
SHA1:	AD516D3B240E1A107572EABEB5F572F550086A28
SHA-256:	12734F09D5293119E4C4373D3AD6B06BA282FC0199CFCC043CA6B029FA1C15B2
SHA-512:	01AFA9F80A034C7AB612445E75F5CBE4C0F8AE4D10A94E38ACBC13442AFAA3F1D4B599BFD42332F3AC8410C20671CF059B940A720C86C6777EA3AF62D2F139AB
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/BAwQk6jAMu2s_7Jh-8-_CsvSwEAaeLsVhL8z82VOoEkoaujxll1kYL3Pz4jkYpLbRpUA2fOZTtIppG2gXpsDoijSo1a1M5uPvke3=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDATx..{..U...[...] .0(.iS.d..0....)....".yW.h@@.A)...1.DE..e!6Y.a."o...../......z.cv....gvM....;....3s.......p8.....p8.....p8.....p8......\|e.O........@.a..9..$.A..).../..j)`60.X......)o.0>..<....L...........W..".....x....<.\...\|.#u.......n.f.L`.....8G.....W..a\|"p^.{=..;.D.\t........\|~hK.4C.^F.D4q/p....2u4.8.g.7..).x]..v#..p.[..GW.t.....&.S.e.a..=H....:..81.J.w]UV.s..J...q........Z7.....k.i..o..q...wV.PG.D=...#N.)C.=.:.z.....jm..m.0>........e....e....#fX.e.=...8...f5.y..,)...........E.gZ.e.o[....j.OkH7p..`Q...@.._...x...e.u..ey_O.0....\|D.....u{..,...j. va...8.g...n.`.al........K.@@..=.Z......I"(R\|.@.w...\G,..].M.d.B.. .......0.......#(.(......\|+.Qx..#....<" .......i.^.T.:.`?.xkC..............w.}....o.......G.TP..:..\..-."..i....q8a.....xIP.X..8...?.&.!....r.....\|..~..(.1SP~..?.

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3963
Entropy (8bit):	7.901695622692701
Encrypted:	false
SSDEEP:	96:kLbNW8MVJuBtHoNx4tiC1ERpt3atUpIuAcvx/3dmYbVSJiP4GH07:QbmKfoNykjOUSYkYJDgGHM
MD5:	FF66E573D1DA88D7B87DCEF5AF12D206
SHA1:	596A10D1C60792345918B1835D369143AE96E805
SHA-256:	C7BAA51E6B2CA6115A64E281B10BCA782B4CC9540D6EDE5F95583356E24C9D27
SHA-512:	390410ABA8C23AA452180C036E1043657EAAE7043E08F18EF1CB0423DEBAE526DD5DBECEF828C7D97E2C62FBBF15A30A641949165F18B502E1F48BD3A44F6969
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/aMTzdOYbB8kBrLq-k5PesENOhnr-7qtytONnM1GOl-drEs9jvyhYJDNaN9-n_Am7rZLxE-uQnNKC0tW6w7Ea9QX5ZsgMy5mn1Il33QY=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d....2IDATx..{l\...\.b...&..6&!7hRHJH...B.mb.....J.Ui.UI.@USZ....@.E.-.vEH..c.$....zS.I.....1..[f...9......c.;gf2?i....;...\..}....)R.H."^@^' ..@)P......L...P... ..8..L..{,` .`...2i......r.L.y:./..20....#..tY.. ....`.U..i.._UN.......(..(M.`....Hy..>3.l...t.........'..:....&....`.(......]..!`......[.7.H>.\|17.....>.g..9CQJ....d..#%...A.;..N(.I.m..pr..=!....M74.\|....A4}<....i\|$>...J.;..N.m...K...`p.7.n.p....R.T..3.\........w.x....8.r.EN..M7..N..k%....o...2..B..}f......o.8.s....sC......A.Q.<7.l......Si..PK.a.....lr.`..[.a.....[......L..H]......W/..u>g.S....d.).Jl.0.....4..^...u>...8r..5.b..>E5s.p<Q..%....j.x..\|.....j.......l...b....c.y...t.s.un.....MZ.^HM..`3cN...Z... .e..is...%.....q.@..s...).......3.y....%...J..;...9......-^..:...\|.....Buw...S....../Ps...-.........Q....`..0.C..O..r[.m....7..*./.w.p......~.\>j.j07-_..O.~.X.W.@w<y;7-_.....y].L?.....4..P.k.sC...=...o/!..){.7..

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	520
Entropy (8bit):	7.329809256156843
Encrypted:	false
SSDEEP:	12:6v/7buJOCksnNy8coa5lq/8F65NDWHCtAQFRTIGA:guJ+snNDCXq/8F6TDWiyQFRct
MD5:	9BB7C80D0739F63F2ED78D8C98275A21
SHA1:	309DB67BCFDC47324CF3A07BDD5652747EB6317B
SHA-256:	1D36882BEFDB2D8DFB92880693A1E66D81558A8CF0E511E6D943557FD1D1E6E8
SHA-512:	DB9A6F398C2D9CFA3FA8818E49E745D0A7B157F0E76E7B1636532CCCCCC4BDF219CA4641E2309C62BAB93FF9927FA25FA706012F7D5CAB17D512CEE258C4D9EE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.....H.......IDATx...%.Tq..p</.w...... .V.i..Mh.X...........v./..y..6MQ.EQ..1....D.]'.}4=.......O0?...y.w........7..d"`2.@=.P..`...M.8...O_...A'.....cQ..W.z..d.u..k\|..'OZ.("....J..h....oC....a...g`..3>...e....C3.@.k.<6..Z..X.]X...z..X...r.l........v.....0D......F.7..4.97..4.....C.t...6.............[\|. .0..<.....%...P...\|.q+.... .... .... ..a.p...).\|>.?.O.........\|>.?.I.n>...[.. ..E!..X.6.....x.>.jW....y.S..........m<....?.w..p..........4..x....U..(..(o..#@.F..I....IEND.B`.

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3318
Entropy (8bit):	7.932361211468018
Encrypted:	false
SSDEEP:	96:QyZOsXVImuQys8VrNSGOfMJDcyehwJd2hignqfhN:QaOIvu3sK6fMLehwJd24VhN
MD5:	68436F831D7722BD1FC228B0CD609150
SHA1:	E5403621D2C6198F5F0DDAAFF7BC180576E56EE4
SHA-256:	E277EDB171C2DE03C8EB8E0E0D4B2FFB05250C6F897477CAC8ACEB07EA01DC85
SHA-512:	5402684E20EE4AA21ADF129777F66144FC24DF7D6A25F24E103E24321E890249C6C5895C7678BFB79125D424008CDE59A2DE233667B862C835B737B7791E8976
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx...l].y.?.9.....$N....~C.R(u...@m)46..WMm.UE[U.X...&u.t..u...i.7P....B..Z.U.iBK....;$..$..9....:v....{.....#Y.o..<.......5.....`0.....`0.....PX....Gb`H/....)4.U.v....L.0&.......!.JU...L.g.i.........]..v.T3...LKUA..g~.\|.G.:#./..+<..../U..Qt....+(..^[^.H............:.)V............aY@T..y.....p...E...H.V=...PZt2B?../.^..`.........B#6...a..}...R. .....(_-..e..(.u......#%10....[.Q{1\|...m...b..L....-....xT6+........b...0...u.....wi,....A....#...u..Z..%.".g;v....o.[..a#nX.......m.........*.QUf%aY6.......'.....[....JC..!.WP..<4.O.P__/v.Y$.q.e..e_U.6'. ...u.(.....zXas.Y..X.X.F.....4.'S..rI.x.x~.....H.,.q......UTW;86.~Zl._..>..U..?.../...C.Kas.6.fE.-816..[..8<..~..w....[2...G.+i%=`F...M5\|....M..o....=..i7.,.l..tD]...30.S.$"......)....G.+#.vt....$-j9...%...0.C......o.....],......(.......n.(..YaO..xa.[<..(....t.\.(0..............._ ..\g.....p......;6LM{<..o..#......N.\...kwla.F\wvr.c;V..

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1351
Entropy (8bit):	7.670382994909587
Encrypted:	false
SSDEEP:	24:TUGlkOOEfDt79bJ9LiQuqFk1LfmB9jd75rMhvhiR8d02DVvovTdv1OG9RVhDnFiW:IqkOOEL19l9LiQu/1mjUiR8d0cvm31Rn
MD5:	47AB6E6899E70DF2FB55BE6044B40DBB
SHA1:	A0E5BED47D683A65733E1718316E58D4AF753B08
SHA-256:	249877417315EC69CFE02B4FEAD9E1C6BC7596A83FD6F858F6693E0615F63036
SHA-512:	98CDA4A9FD7B6ED2097A8B3F5FBBDB9BC2BDEBBAC049E382C3B74802D96B7A84129E49B9888F30A6D4DCA6C2810E0E8FE15301392A7CCC94F44EC2FFB5BB6C45
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....IDATx.....H.EG3..=f....M....cfff.....13..sL.N..T.x.qq......{p..........Tq.....yO.v..4....}.C.....u..f..;g.X6.G..=..Z..-sa...-....-....L...p..J.&...)..R.{..B=c^..!.S..Guo....3W9.4...=.."x......M.z.A\..Q........QV..D.HS.?....!.x.... ....Yhm].<..Q..l..\|.1#...SE8..}O..~..M.e..Q.... ,/.j.....P.f.d........3u.......=&. /.....`._iv.^}....Z..........I.Z..MY.O.....+..OZ......Z.B.G.?........!...X'l...>7.i_....K..t..i...y...Bs.......v2...L..T8.l"......+........W.....#...~...,.Jn.pl9V~..4.5.........1R}.ip...x2..3.u._e0.Z.y..\|u.f!.I.x...X....@bV,.0...w.......M.......X..+._3....YB...n...*O_.k.@Z...I..o+.........U..`.@.lk.."....`..ZOE."..E_%{.`.....L`.#f.....T4...#.....,.....b?Q..4uN..:&\C.........G.>"U.l...k2.......2.8}"m7.X.(.KD6.J_2.............v.1}....lj.b.]v7..O#.h....h........i..!{.W..&.........?.A....=..A........K..>.!.......@..97!........~_...`!..."..?..~G.`.].\s.A8...7U~..9.>...@.3....\...?.`.\|.0.....j..m.

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8166
Entropy (8bit):	7.958002733271823
Encrypted:	false
SSDEEP:	192:N51UecXdlWqFN8DCo3JHnkxLJa5kTKoLQsdPjN+GssopnH:r1uXdlWYN8+6HnULJa+TK4dPjsZsotH
MD5:	49D3C8ADBA7ABEBAB8CDDB827EF0D6BE
SHA1:	17223539D6A3D813F4DD018924B30F79A8DCCA50
SHA-256:	D54ADA881901A560A369021F3D2F3D395AC36FCA18FB3E61C16E64555156F0E5
SHA-512:	28335306B7F6738D3F87DB973E2D77DCCBB4DA4C3661394B6C880035513908C405ADD42E2780C286CB29C88BBA822DB5DF1B23CE2DDDA3FAEB08E7BE49CB8B91
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/HZ7MIzEUISdwHRUdOnlf9tGLcnTh0s147KiRQCELgTqsg5OdqUGbkZVlk_mCAEdDOboGRQDWQxZNdm_vBM7Oo8lgAaDzjM3wb-KB=h120
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..itdWu....[.........l...L.1.!$LIX+Y/...9y..\|x.b9.X...+`.y\|.....p...`..#x.=..nlw.ZRKU.Ku.9.}.R.T....+..._....=.=....g....8..8..(..w..B>.O.a.n...c....1&..sN8.j.Qk.z.#..H.(x..c.l..n..#.Y.s.\......5...z.....Ed..v.-".VU.......T..L..@?...y.x>...D"....e...~.8p..\|..A...vU.j..d..BU.....V.#.2.{#P.y......U.q..}........;..3}.d..........P.3. .ZU..:...&.Q.j.U....(....vW{{..5).2qT.<55.<33s..^h..RD.T..c..Z..d...>.E.... .?..N.k.."8..{.7.ND..N...hUQ&[.gU.>U..1.l6;..e..QQs.....{...Fk......ZPUT...>.\|7.N.#.N..].u..\|>...~c..@.Fl%........;;;.Z..[m.r........r..;.....A...M.......R....79..,..M...V@.0< "........\|Mk.9.=>>~.1.r...2.....a..,.L....ud..]3.s..;....L&{....b....===..E~kBp>...1......([..........oUk\|bb..(........0..-.}.s..]]].V+?........;...Z{..(.v.`....C.W...B...ah...5.\|..,....q.1.\......U.&&&.s.-....1g..*..F5I.....1. ......_l.x.M..O.'.1.c0.....:...&''c..X.......^..7.c..+."`.X;..@P...0....

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5844
Entropy (8bit):	5.416357923588714
Encrypted:	false
SSDEEP:	96:GhOEaoFZMOEa73qOEaAOEaoVc+u+OEaYNJhOXasFZMOXac3qOXajOXa3Vc+u+OXU:Gu+73NPSkYtZc3O7PL0Lrw3Ehrtg
MD5:	C8FFC386DE3B2056FB79BE94F3D30F1F
SHA1:	E401F137EEADD957077148B0520EB7161E63BEE2
SHA-256:	7F750D218718DBC45D41A9908008A1BA5B0D32CBA9FA57E0691E30E9ABC7DF29
SHA-512:	55B8ADC63FB9355F8D9C61F53CE19B550D31A3F15AC3BDBD4EAF38976CD6CB5C9CBCA20E369C4D152916EF621BAE9D376AA51DDCEEAA6C368F07F5BF041EB990
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Google+Sans+Text:wght@400;500;700&display=swap
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2) format('woff2');. unicode-range: U+0102-0103, U+

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 314 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	67119
Entropy (8bit):	7.980414935902374
Encrypted:	false
SSDEEP:	1536:6qlLM1QUaq+A+vwfvHpf0/ccYXNEfzRijJGQas1PChj:XlLMOU9+A+vwKnHRQdR1PChj
MD5:	C4D2236D4D9FD5652314C24B22EF37AE
SHA1:	06794845E2BDED4F550CEFFD229EA9DE27FD990A
SHA-256:	628CC4F4963845D41CB3913C581F3A8E0841E64A86222A94CD3B157E1DBA95D2
SHA-512:	E5136E98219CE71DA580D06025EED5B339AA260EADC9ED58C3AD9CBD73446B72FDA78707BDEE1804892D49761CC62D47D35EBE0501E63F9272AEFC7D00A96507
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/uY0DBQik6UA-8r3u940KST-4No0y-XK9SdLkA8cirg9XMg5hw43uvY04aMt_suipYETIU-g7GYZ12T1nUvefZBSpugr9xlvkvVb9L6p5EibJwYIX2A
Preview:	.PNG........IHDR...:..........K......sBIT....\|.d... .IDATx..y.]Gq/.[{....h.k.,K...!..........Bl .../..$.\|..{.KHx!......1...C..`F.`.... .-...eIg......R..U.kK..a...o......_Uu...$.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%.PB.%..IR..f ._.j4.k..?....Lt:.J...0...rA....>. H.a...L&..v..T*.....r.~._.f.G'''w.A"....J$..0.}.^..v...z+.,M.R.A.. .aX.....a)....B....Y.. ...R.y.A.D.....0.... ....... ....A........A.4.4.4.0l.a...`6..c.^.P>.....8.3.<m...........~....7.r...Ngs... X.J.J...&.0.H.R.l6.`.l..l....s.=.C.Pr.%>...y..G.......`..L...0....J.v.Ap_..zp.M;N...w.....v..ya..g.r..a.n.... ...(.A0...D>..8 Y...8(=.]F.~t.."..}..C...Ap<..j...R..A.....{....3.<.....c.m..:.zbK./0...e.....3.l..pM..E..L..N......./..$......S..

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.570353994119939
Encrypted:	false
SSDEEP:	3:HKI2Zhk2LP:qdZhxT
MD5:	979F008C38CFB9AE4E33006DCAC02538
SHA1:	10B62EB5227C6014E1923B369E8F77E00455AD8D
SHA-256:	18E903F49416EDDF1B0A7ED1170F830D7215E6B56720D8427E3BA419FEF08C9C
SHA-512:	487081287788E7840BB9CA36A12AE2FC92514C390611FB98D6CA8A39953092C67B294208CCCA0A4FE80234F0E5E27A59780E648AB560A0555A8A081E93A7C4B8
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnal8bI1t_HMRIFDQbtu_8SFwnKf47UcyJWzhIFDZSQkvoSBQ1pSEdH?alt=proto
Preview:	CgkKBw0G7bv/GgAKEgoHDZSQkvoaAAoHDWlIR0caAA==

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2970
Entropy (8bit):	7.895994126557624
Encrypted:	false
SSDEEP:	48:LUxtKz7MmZV/8K1nIpFwPYYL5v2RLHjEleVn+i7gwOs8rm47mSVo8c:LU7KzJVv1naFcYYtv2dBF+i7gBmAmES
MD5:	F61EE926FEE6EAC3A039BFC195647036
SHA1:	1E695657BAF394E83B8EB8E452FF7B764D97520D
SHA-256:	FF74857019BBF14A1E67353D312AEB78A450D403D7BCB6001C253E1769FAC8F6
SHA-512:	C89A8FF456872058D4D6ACA881F25E4D994626801F9D15D8036B7A6BD14414CD395558736C83C1798D5B78CE004FE37EFC2347AD4F430295E9A7A327D62732F0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6....aIDATx..{p\U..?..&.J....0....- h.G. ....i.Q..GK.V...N.6E)..Q.J.......:..##....S....).L..4.M.d_.?N...n....{n..g.....w>{.BJI..b.....4..8...N#......g?.\|..m.b`).Y ^vm.....<.....72...C..h{...a....{.....g}...8...x.9..Y...9..h.......GYy1..-..,...<...`-.&p..Q.^n..../..........<.x.8.......n`....uRo.a..1..Rb.p?.2p...=.7...,Bu.v..\zF.'.....,.:.-...</P..X...@....zj...j....C....>.U.:........3T.."..j2..n.....)6..q.._..A...y.`.....x..hN..+dP....w.lO>0.............!.....y....L..h!.5......d...........?R.8X .a\|br.....>......T...G&.X...nG..J.Zl...1.6T...Y...\........A...k..S..S..~.9\|.2......Oi...\.Ua..%.C..........h.\.....dr..{....:2......6...5.....0...[M4..bx.o&...l........qy...FA....".Z.G.K\...~..).....Hk....K...;P.,..h....p,...>_......d.q&......{..Zl.....L...u.....k9"4.M2....>...D5.2-4.>3.dP..C..Bo)S..t..&.:..(...Ps-5.\|\|.h.K\.............`.M.@.w..bd].Gu. `0.d.dLZdeh...............'...&.`\.H...x......pf..q..3u..

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8005
Entropy (8bit):	7.932879807851235
Encrypted:	false
SSDEEP:	192:NqJV3s0+3afbOkpJYFOFrxRA9nvpvAk/RH+h80d4D:ET3KSbpoOFNRw6k/Rehxs
MD5:	82F73E47F29A0B0B6EA0AC8A67419E3F
SHA1:	CAD2C14184D3EB8CBF94E98EE178362F9D494169
SHA-256:	A51842A1727B816A7D5B2C8666EAF8EC5F6C00A60972812E3DB65ED315FDEE77
SHA-512:	2D25A171AC3A8496035E38E4E823DF6CBD8CE1C1FC89B36F13EF3E46F5831E1AFAF1D796488BCD70C3DD1D0A489FE6752C01C62225CDD2A321BB53BBC33C83B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6....NeXIfMM..................>...........F.(.............................H.......H....o.#.....IDATx..y.l.U..k.sj.u.7.....=.q.1.p....ID...`....bA.%...# .(....DBB$..&)Q.K$ .;.!.......M......T.9g.....T.....k.R}OG...3}{.....'.......>....V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9V./9..~.]..=..#.^.5"._..})"...^.a..Vp..;.....t.4..B0n.........@6.d..L.Q..!..hiL{..s.........`.`A...c.+..........#...-T<..1...!..$...:.6.a....qv..3m.......jK_,..M............kC.I.q.E....8.f.....5.....'....>.......Z...},"...M......7..c.^.....710....:D.k4.5......J.d.M..Y`I.d....%W.?r....O....9w.=f.z.{.}....k.j.8..%_zj.........8f.!..3X.~.....O..\...f......x.a....._J....H.@.".....B..@6-........p.........r...w....7i..]Y...=....ds.V.\...#....t..V.gr;.....O.......h.T.V.0...$..W..........W&b.I..y......AZ.Y... Y`o.........!S.S4.$.p#.E<..=....L...'....r....L..a:I..&..;....z......Z

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7652
Entropy (8bit):	7.968231041212564
Encrypted:	false
SSDEEP:	192:osJl8LY580lDG5wG1/ZKwIhM2v12QVLDvnXHVYeIW6+/RWB:osJSUqcDG55ZKW6Zn3VxtRW
MD5:	B435739D9F6EAB710709DD994EA96990
SHA1:	B8EA8C3F332357B7D11DDBC2DB0F19141EE9BC05
SHA-256:	A0BA73DF3FAD7E28B8CB2B22D7D91F63ADC1AFC4EFEB2D52613392AD5B5C2191
SHA-512:	364B4DDA22192A92E417D42114382F2BD61328A38AB986E31533337F1AB53EFA5BC3D4DDB0C359276679B0DBE1B92705E6939073999E7E6183D01A6AFD55BB3F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....sBIT....\|.d.....IDATx..y.dG}.?.......y3#......+2#a.....cb.g;.....I...B.......Av.....>.`s ...I..`.@HH.E#.h4.Y..v..q.......{.o..9.=.g........~............2.\i.2.a.4~...AnD..Q.......p.Rj$..c.6Zk...A...mW-.OMM....N...K"r.......~.....Se&...(...~.\.Q.M...\|.DPbP...%..A0..H.w?...h.....y.2.C.^.."....z.,.D..7....o....R.9E......m.>;!..e(X..e(.rNS.4 ...... ...P.T...........`......?2c..r.......w.A.G..MBM.[.....WM..s...!y.d.L..BDPJ..!"...........\..y......X0.6..J..C.C.udi...}0D...\.T>d_1@D6{......Z)............S...9E...&1\|H...:"..#.........91\[..W..U....B.d....w....W..xp<'.>9o^m......v...7....IO.....F\|..!....eY8............@.Lp..~.y.. .......v..$9..V.=..\W.(.:..V...>........y.W.W.`....1.z....x..H.G........J(.....u.~.9F.}.0.....O-.O....5.a.".P.ff......e.5..5GF]..Id...."B.P.OD........7.u\..+_......B..p<h.....asn#...y.J.(. gA.fsj....{..L.p.c.....6>....A.j..^.\>9o>.../..<6.Q...x>....X+6;..R`.....L.#.%f........kF\|.-..D..A.0

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	432
Entropy (8bit):	5.3296569270274805
Encrypted:	false
SSDEEP:	12:hYA0HqJmqGqGowI79hLFBkAAqJmPm/esHbeGowv4Nbx4IQL:hYPcBfwWBvPz7Ewv4NW
MD5:	18DECAAE816510623F161EA3C739AA72
SHA1:	76D5961D4623199A1B33D014F6D8F4E83B4CA5B2
SHA-256:	68F4FFD85E3CBBEDE57080C22F7FBEA5C92F0AB407881BAD9091074D84FF1609
SHA-512:	E08FE221F4B8962D886A65EDB6B6BBDB519C469CBCFA19CFA36A7C95110C1C3D4749DFC02141AE78308180189578AFDD3BFC92D13DD28C6FBA522C8AB183C7C9
Malicious:	false
Reputation:	low
URL:	https://scone-pa.clients6.google.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__
Preview:	<!DOCTYPE html>.<html>.<head>.<title></title>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.<script type="text/javascript" nonce="RyHesD_JLNKPu5hyJ0R8Qg">. window['startup'] = function() {. googleapis.server.init();. };.</script>.<script type="text/javascript". src="https://apis.google.com/js/googleapis.proxy.js?onload=startup" async. defer nonce="RyHesD_JLNKPu5hyJ0R8Qg"></script>.</head>.<body>.</body>.</html>.

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 28, 2024 00:42:18.414844036 CEST	192.168.2.4	1.1.1.1	0x98d6	Standard query (0)	login-vip.replit.app	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:18.415076017 CEST	192.168.2.4	1.1.1.1	0x31b9	Standard query (0)	login-vip.replit.app	65	IN (0x0001)	false
May 28, 2024 00:42:18.901547909 CEST	192.168.2.4	1.1.1.1	0xc0f2	Standard query (0)	login-vip.replit.app	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:18.906836033 CEST	192.168.2.4	1.1.1.1	0xf641	Standard query (0)	login-vip.replit.app	65	IN (0x0001)	false
May 28, 2024 00:42:21.079124928 CEST	192.168.2.4	1.1.1.1	0xc70	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:21.079673052 CEST	192.168.2.4	1.1.1.1	0x1665	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 28, 2024 00:42:21.531336069 CEST	192.168.2.4	1.1.1.1	0xb19a	Standard query (0)	login-vip.replit.app	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:21.532010078 CEST	192.168.2.4	1.1.1.1	0x544	Standard query (0)	login-vip.replit.app	65	IN (0x0001)	false
May 28, 2024 00:42:31.387980938 CEST	192.168.2.4	1.1.1.1	0x75ea	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:31.388247967 CEST	192.168.2.4	1.1.1.1	0xead0	Standard query (0)	support.google.com	65	IN (0x0001)	false
May 28, 2024 00:42:33.471458912 CEST	192.168.2.4	1.1.1.1	0x2d21	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:33.471687078 CEST	192.168.2.4	1.1.1.1	0xa9d7	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
May 28, 2024 00:42:35.101003885 CEST	192.168.2.4	1.1.1.1	0xc9d1	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:35.101478100 CEST	192.168.2.4	1.1.1.1	0xd708	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
May 28, 2024 00:42:35.913639069 CEST	192.168.2.4	1.1.1.1	0x4dc7	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:35.913992882 CEST	192.168.2.4	1.1.1.1	0xcf4d	Standard query (0)	play.google.com	65	IN (0x0001)	false
May 28, 2024 00:42:36.090992928 CEST	192.168.2.4	1.1.1.1	0x793a	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:36.091164112 CEST	192.168.2.4	1.1.1.1	0x30dc	Standard query (0)	apis.google.com	65	IN (0x0001)	false
May 28, 2024 00:42:36.873300076 CEST	192.168.2.4	1.1.1.1	0x3096	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:36.873584986 CEST	192.168.2.4	1.1.1.1	0xe9f7	Standard query (0)	support.google.com	65	IN (0x0001)	false
May 28, 2024 00:42:37.731388092 CEST	192.168.2.4	1.1.1.1	0x9939	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:37.731565952 CEST	192.168.2.4	1.1.1.1	0x68d	Standard query (0)	play.google.com	65	IN (0x0001)	false
May 28, 2024 00:42:47.852385044 CEST	192.168.2.4	1.1.1.1	0x7f81	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:47.852778912 CEST	192.168.2.4	1.1.1.1	0x46ff	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
May 28, 2024 00:42:50.869921923 CEST	192.168.2.4	1.1.1.1	0xe585	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:50.870050907 CEST	192.168.2.4	1.1.1.1	0xb700	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 28, 2024 00:43:01.089078903 CEST	192.168.2.4	1.1.1.1	0x731e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:01.089473963 CEST	192.168.2.4	1.1.1.1	0x225c	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 28, 2024 00:43:03.591134071 CEST	192.168.2.4	1.1.1.1	0xcf82	Standard query (0)	lh4.ggpht.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:03.591295958 CEST	192.168.2.4	1.1.1.1	0x4c73	Standard query (0)	lh4.ggpht.com	65	IN (0x0001)	false
May 28, 2024 00:43:04.643548012 CEST	192.168.2.4	1.1.1.1	0x81d8	Standard query (0)	lh4.ggpht.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:04.643698931 CEST	192.168.2.4	1.1.1.1	0x5a54	Standard query (0)	lh4.ggpht.com	65	IN (0x0001)	false
May 28, 2024 00:43:20.378314018 CEST	192.168.2.4	1.1.1.1	0xe229	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:20.378535986 CEST	192.168.2.4	1.1.1.1	0x6a17	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
May 28, 2024 00:43:24.752454042 CEST	192.168.2.4	1.1.1.1	0x39fd	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:24.752652884 CEST	192.168.2.4	1.1.1.1	0xa8dd	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
May 28, 2024 00:43:25.925725937 CEST	192.168.2.4	1.1.1.1	0x4441	Standard query (0)	about.google	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:25.926038980 CEST	192.168.2.4	1.1.1.1	0x867c	Standard query (0)	about.google	65	IN (0x0001)	false
May 28, 2024 00:43:29.141491890 CEST	192.168.2.4	1.1.1.1	0xf3df	Standard query (0)	about.google	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:29.141733885 CEST	192.168.2.4	1.1.1.1	0x1260	Standard query (0)	about.google	65	IN (0x0001)	false
May 28, 2024 00:43:29.171925068 CEST	192.168.2.4	1.1.1.1	0x1224	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:29.172079086 CEST	192.168.2.4	1.1.1.1	0xb543	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
May 28, 2024 00:43:30.367162943 CEST	192.168.2.4	1.1.1.1	0x9fb8	Standard query (0)	www.blog.google	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:30.411636114 CEST	192.168.2.4	1.1.1.1	0x79ce	Standard query (0)	www.blog.google	65	IN (0x0001)	false
May 28, 2024 00:43:31.531683922 CEST	192.168.2.4	1.1.1.1	0xd72c	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:31.531827927 CEST	192.168.2.4	1.1.1.1	0x71a7	Standard query (0)	blog.google	65	IN (0x0001)	false
May 28, 2024 00:43:32.278121948 CEST	192.168.2.4	1.1.1.1	0xa0e7	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.279000998 CEST	192.168.2.4	1.1.1.1	0xd8da	Standard query (0)	blog.google	65	IN (0x0001)	false
May 28, 2024 00:43:32.870121002 CEST	192.168.2.4	1.1.1.1	0x68f4	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.870261908 CEST	192.168.2.4	1.1.1.1	0x8747	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
May 28, 2024 00:43:32.875026941 CEST	192.168.2.4	1.1.1.1	0x480a	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.875178099 CEST	192.168.2.4	1.1.1.1	0x6905	Standard query (0)	apis.google.com	65	IN (0x0001)	false
May 28, 2024 00:43:35.728763103 CEST	192.168.2.4	1.1.1.1	0x8e38	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:35.729105949 CEST	192.168.2.4	1.1.1.1	0x16b0	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
May 28, 2024 00:43:38.085475922 CEST	192.168.2.4	1.1.1.1	0x7943	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:38.085613012 CEST	192.168.2.4	1.1.1.1	0x522b	Standard query (0)	play.google.com	65	IN (0x0001)	false
May 28, 2024 00:43:39.140974998 CEST	192.168.2.4	1.1.1.1	0x394c	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.141113043 CEST	192.168.2.4	1.1.1.1	0x5671	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
May 28, 2024 00:43:39.379116058 CEST	192.168.2.4	1.1.1.1	0xd5a5	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.379226923 CEST	192.168.2.4	1.1.1.1	0xfc63	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
May 28, 2024 00:43:40.177525997 CEST	192.168.2.4	1.1.1.1	0x41bd	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.177695036 CEST	192.168.2.4	1.1.1.1	0x6c2d	Standard query (0)	apis.google.com	65	IN (0x0001)	false
May 28, 2024 00:43:40.583434105 CEST	192.168.2.4	1.1.1.1	0xb9a3	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.583890915 CEST	192.168.2.4	1.1.1.1	0x1169	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
May 28, 2024 00:43:42.527013063 CEST	192.168.2.4	1.1.1.1	0x21bf	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:42.527255058 CEST	192.168.2.4	1.1.1.1	0xbc39	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 28, 2024 00:43:42.662653923 CEST	192.168.2.4	1.1.1.1	0x4c31	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:42.662945032 CEST	192.168.2.4	1.1.1.1	0x40b1	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 28, 2024 00:43:43.924484015 CEST	192.168.2.4	1.1.1.1	0xe3ff	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:43.924926043 CEST	192.168.2.4	1.1.1.1	0x1021	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 28, 2024 00:43:43.925753117 CEST	192.168.2.4	1.1.1.1	0x5359	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:43.925890923 CEST	192.168.2.4	1.1.1.1	0x5503	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
May 28, 2024 00:43:44.077318907 CEST	192.168.2.4	1.1.1.1	0xc6e8	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.077454090 CEST	192.168.2.4	1.1.1.1	0x2f9c	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
May 28, 2024 00:43:44.366647959 CEST	192.168.2.4	1.1.1.1	0x8292	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.366805077 CEST	192.168.2.4	1.1.1.1	0xa0a4	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 28, 2024 00:43:44.488806009 CEST	192.168.2.4	1.1.1.1	0x550c	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.488894939 CEST	192.168.2.4	1.1.1.1	0xdc5d	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
May 28, 2024 00:43:44.897886992 CEST	192.168.2.4	1.1.1.1	0xc835	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.898051977 CEST	192.168.2.4	1.1.1.1	0x6d8e	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 28, 2024 00:43:45.105123997 CEST	192.168.2.4	1.1.1.1	0x6698	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:45.105283022 CEST	192.168.2.4	1.1.1.1	0x26e0	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
May 28, 2024 00:43:45.874510050 CEST	192.168.2.4	1.1.1.1	0xcf04	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:45.874510050 CEST	192.168.2.4	1.1.1.1	0xa4de	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 28, 2024 00:43:46.099951982 CEST	192.168.2.4	1.1.1.1	0x30ec	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.099951982 CEST	192.168.2.4	1.1.1.1	0x7471	Standard query (0)	play.google.com	65	IN (0x0001)	false
May 28, 2024 00:43:46.992554903 CEST	192.168.2.4	1.1.1.1	0x2527	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.993051052 CEST	192.168.2.4	1.1.1.1	0xc594	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
May 28, 2024 00:43:49.843599081 CEST	192.168.2.4	1.1.1.1	0xa899	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:49.843935013 CEST	192.168.2.4	1.1.1.1	0xba5a	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 28, 2024 00:42:18.434609890 CEST	1.1.1.1	192.168.2.4	0x98d6	No error (0)	login-vip.replit.app		34.117.33.233	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:18.909360886 CEST	1.1.1.1	192.168.2.4	0xc0f2	No error (0)	login-vip.replit.app		34.117.33.233	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:21.088988066 CEST	1.1.1.1	192.168.2.4	0xc70	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:21.089999914 CEST	1.1.1.1	192.168.2.4	0x1665	No error (0)	www.google.com			65	IN (0x0001)	false
May 28, 2024 00:42:21.553678989 CEST	1.1.1.1	192.168.2.4	0xb19a	No error (0)	login-vip.replit.app		34.117.33.233	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:31.394900084 CEST	1.1.1.1	192.168.2.4	0x75ea	No error (0)	support.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:33.478813887 CEST	1.1.1.1	192.168.2.4	0xa9d7	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:42:33.478957891 CEST	1.1.1.1	192.168.2.4	0x2d21	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:42:33.478957891 CEST	1.1.1.1	192.168.2.4	0x2d21	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.225	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:34.552119970 CEST	1.1.1.1	192.168.2.4	0xe69d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:42:34.552119970 CEST	1.1.1.1	192.168.2.4	0xe69d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:35.108397007 CEST	1.1.1.1	192.168.2.4	0xc9d1	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:42:35.108397007 CEST	1.1.1.1	192.168.2.4	0xc9d1	No error (0)	googlehosted.l.googleusercontent.com		142.250.184.225	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:35.108437061 CEST	1.1.1.1	192.168.2.4	0xd708	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:42:35.920602083 CEST	1.1.1.1	192.168.2.4	0x4dc7	No error (0)	play.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:36.097991943 CEST	1.1.1.1	192.168.2.4	0x793a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:42:36.097991943 CEST	1.1.1.1	192.168.2.4	0x793a	No error (0)	plus.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:36.098942041 CEST	1.1.1.1	192.168.2.4	0x30dc	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:42:36.880307913 CEST	1.1.1.1	192.168.2.4	0x3096	No error (0)	support.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:37.738178968 CEST	1.1.1.1	192.168.2.4	0x9939	No error (0)	play.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:47.859441996 CEST	1.1.1.1	192.168.2.4	0x7f81	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:42:47.859441996 CEST	1.1.1.1	192.168.2.4	0x7f81	No error (0)	www3.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:47.860071898 CEST	1.1.1.1	192.168.2.4	0x46ff	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:42:48.616014957 CEST	1.1.1.1	192.168.2.4	0x9967	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:42:48.616014957 CEST	1.1.1.1	192.168.2.4	0x9967	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 28, 2024 00:42:50.880023003 CEST	1.1.1.1	192.168.2.4	0xb700	No error (0)	www.google.com			65	IN (0x0001)	false
May 28, 2024 00:42:50.880203962 CEST	1.1.1.1	192.168.2.4	0xe585	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:01.095905066 CEST	1.1.1.1	192.168.2.4	0x731e	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:01.096401930 CEST	1.1.1.1	192.168.2.4	0x225c	No error (0)	www.google.com			65	IN (0x0001)	false
May 28, 2024 00:43:03.598339081 CEST	1.1.1.1	192.168.2.4	0xcf82	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:03.598339081 CEST	1.1.1.1	192.168.2.4	0xcf82	No error (0)	photos-ugc.l.googleusercontent.com		142.250.186.65	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:03.629276037 CEST	1.1.1.1	192.168.2.4	0x4c73	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:04.651007891 CEST	1.1.1.1	192.168.2.4	0x81d8	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:04.651007891 CEST	1.1.1.1	192.168.2.4	0x81d8	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.161	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:04.685170889 CEST	1.1.1.1	192.168.2.4	0x5a54	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:09.763859987 CEST	1.1.1.1	192.168.2.4	0xf442	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:09.763859987 CEST	1.1.1.1	192.168.2.4	0xf442	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:20.385857105 CEST	1.1.1.1	192.168.2.4	0xe229	No error (0)	scone-pa.clients6.google.com		142.250.184.202	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:24.763531923 CEST	1.1.1.1	192.168.2.4	0x39fd	No error (0)	scone-pa.clients6.google.com		142.250.185.106	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:25.932543039 CEST	1.1.1.1	192.168.2.4	0x4441	No error (0)	about.google		216.239.32.29	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:29.149014950 CEST	1.1.1.1	192.168.2.4	0xf3df	No error (0)	about.google		216.239.32.29	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:29.178595066 CEST	1.1.1.1	192.168.2.4	0x1224	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:29.178595066 CEST	1.1.1.1	192.168.2.4	0x1224	No error (0)	googlehosted.l.googleusercontent.com		142.250.184.225	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:29.179594040 CEST	1.1.1.1	192.168.2.4	0xb543	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:29.890580893 CEST	1.1.1.1	192.168.2.4	0x7a16	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:29.890580893 CEST	1.1.1.1	192.168.2.4	0x7a16	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:30.395565033 CEST	1.1.1.1	192.168.2.4	0x9fb8	No error (0)	www.blog.google	ghs-svc-https-sni.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:30.395565033 CEST	1.1.1.1	192.168.2.4	0x9fb8	No error (0)	ghs-svc-https-sni.ghs-ssl.googlehosted.com		142.250.184.211	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:30.436640978 CEST	1.1.1.1	192.168.2.4	0x79ce	No error (0)	www.blog.google	ghs-svc-https-sni.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:31.539273024 CEST	1.1.1.1	192.168.2.4	0xd72c	No error (0)	blog.google		216.239.38.21	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:31.539273024 CEST	1.1.1.1	192.168.2.4	0xd72c	No error (0)	blog.google		216.239.34.21	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:31.539273024 CEST	1.1.1.1	192.168.2.4	0xd72c	No error (0)	blog.google		216.239.32.21	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:31.539273024 CEST	1.1.1.1	192.168.2.4	0xd72c	No error (0)	blog.google		216.239.36.21	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.286623001 CEST	1.1.1.1	192.168.2.4	0xa0e7	No error (0)	blog.google		216.239.34.21	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.286623001 CEST	1.1.1.1	192.168.2.4	0xa0e7	No error (0)	blog.google		216.239.38.21	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.286623001 CEST	1.1.1.1	192.168.2.4	0xa0e7	No error (0)	blog.google		216.239.32.21	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.286623001 CEST	1.1.1.1	192.168.2.4	0xa0e7	No error (0)	blog.google		216.239.36.21	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877213955 CEST	1.1.1.1	192.168.2.4	0x8747	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:32.877213955 CEST	1.1.1.1	192.168.2.4	0x8747	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.877352953 CEST	1.1.1.1	192.168.2.4	0x68f4	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.881840944 CEST	1.1.1.1	192.168.2.4	0x480a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:32.881840944 CEST	1.1.1.1	192.168.2.4	0x480a	No error (0)	plus.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:32.882569075 CEST	1.1.1.1	192.168.2.4	0x6905	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:35.735678911 CEST	1.1.1.1	192.168.2.4	0x8e38	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:35.735678911 CEST	1.1.1.1	192.168.2.4	0x8e38	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.161	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:35.736763954 CEST	1.1.1.1	192.168.2.4	0x16b0	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:38.097475052 CEST	1.1.1.1	192.168.2.4	0x7943	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.148621082 CEST	1.1.1.1	192.168.2.4	0x394c	No error (0)	scone-pa.clients6.google.com		216.58.206.74	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386434078 CEST	1.1.1.1	192.168.2.4	0xfc63	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:39.386434078 CEST	1.1.1.1	192.168.2.4	0xfc63	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:39.386502028 CEST	1.1.1.1	192.168.2.4	0xd5a5	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.184154034 CEST	1.1.1.1	192.168.2.4	0x41bd	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:40.184154034 CEST	1.1.1.1	192.168.2.4	0x41bd	No error (0)	plus.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.184703112 CEST	1.1.1.1	192.168.2.4	0x6c2d	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:40.591020107 CEST	1.1.1.1	192.168.2.4	0xb9a3	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:42.789969921 CEST	1.1.1.1	192.168.2.4	0x21bf	No error (0)	stats.g.doubleclick.net		64.233.184.157	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:42.789969921 CEST	1.1.1.1	192.168.2.4	0x21bf	No error (0)	stats.g.doubleclick.net		64.233.184.156	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:42.789969921 CEST	1.1.1.1	192.168.2.4	0x21bf	No error (0)	stats.g.doubleclick.net		64.233.184.155	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:42.789969921 CEST	1.1.1.1	192.168.2.4	0x21bf	No error (0)	stats.g.doubleclick.net		64.233.184.154	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:42.789973021 CEST	1.1.1.1	192.168.2.4	0x4c31	No error (0)	stats.g.doubleclick.net		142.251.5.157	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:42.789973021 CEST	1.1.1.1	192.168.2.4	0x4c31	No error (0)	stats.g.doubleclick.net		142.251.5.155	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:42.789973021 CEST	1.1.1.1	192.168.2.4	0x4c31	No error (0)	stats.g.doubleclick.net		142.251.5.154	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:42.789973021 CEST	1.1.1.1	192.168.2.4	0x4c31	No error (0)	stats.g.doubleclick.net		142.251.5.156	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:43.931265116 CEST	1.1.1.1	192.168.2.4	0xe3ff	No error (0)	googleads.g.doubleclick.net		172.217.18.2	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:43.931608915 CEST	1.1.1.1	192.168.2.4	0x1021	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 28, 2024 00:43:43.932712078 CEST	1.1.1.1	192.168.2.4	0x5359	No error (0)	static.doubleclick.net		142.250.185.134	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.084943056 CEST	1.1.1.1	192.168.2.4	0xc6e8	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:44.084943056 CEST	1.1.1.1	192.168.2.4	0xc6e8	No error (0)	photos-ugc.l.googleusercontent.com		142.250.186.65	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.086249113 CEST	1.1.1.1	192.168.2.4	0x2f9c	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:44.373262882 CEST	1.1.1.1	192.168.2.4	0x8292	No error (0)	stats.g.doubleclick.net		64.233.167.157	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.373262882 CEST	1.1.1.1	192.168.2.4	0x8292	No error (0)	stats.g.doubleclick.net		64.233.167.155	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.373262882 CEST	1.1.1.1	192.168.2.4	0x8292	No error (0)	stats.g.doubleclick.net		64.233.167.156	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.373262882 CEST	1.1.1.1	192.168.2.4	0x8292	No error (0)	stats.g.doubleclick.net		64.233.167.154	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.496361971 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:44.904871941 CEST	1.1.1.1	192.168.2.4	0x6d8e	No error (0)	www.google.com			65	IN (0x0001)	false
May 28, 2024 00:43:44.904951096 CEST	1.1.1.1	192.168.2.4	0xc835	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:45.111829042 CEST	1.1.1.1	192.168.2.4	0x6698	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:45.111829042 CEST	1.1.1.1	192.168.2.4	0x6698	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.65	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:45.112040043 CEST	1.1.1.1	192.168.2.4	0x26e0	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:45.881354094 CEST	1.1.1.1	192.168.2.4	0xcf04	No error (0)	googleads.g.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:45.881359100 CEST	1.1.1.1	192.168.2.4	0xa4de	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 28, 2024 00:43:46.109612942 CEST	1.1.1.1	192.168.2.4	0x30ec	No error (0)	play.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:46.999325991 CEST	1.1.1.1	192.168.2.4	0x2527	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:47.002135992 CEST	1.1.1.1	192.168.2.4	0xc594	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:47.002135992 CEST	1.1.1.1	192.168.2.4	0xc594	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
May 28, 2024 00:43:49.850533009 CEST	1.1.1.1	192.168.2.4	0xa899	No error (0)	play.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
May 28, 2024 00:43:57.469402075 CEST	1.1.1.1	192.168.2.4	0xea83	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:43:57.469402075 CEST	1.1.1.1	192.168.2.4	0xea83	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	34.117.33.233	80	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 00:42:18.441236019 CEST	475	OUT	GET /vip/36c63962-0335-4720-9855-3e324d0acc58 HTTP/1.1 Host: login-vip.replit.app Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 00:42:18.897623062 CEST	239	IN	HTTP/1.1 301 Moved Permanently Cache-Control: private Location: https://login-vip.replit.app:443/vip/36c63962-0335-4720-9855-3e324d0acc58 Content-Length: 0 Date: Mon, 27 May 2024 22:42:18 GMT Content-Type: text/html; charset=UTF-8
May 28, 2024 00:43:03.912019968 CEST	6	OUT	Data Raw: 00 Data Ascii:
May 28, 2024 00:43:48.928035975 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	34.117.33.233	80	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 00:43:03.445517063 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	34.117.33.233	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:19 UTC	703	OUT	GET /vip/36c63962-0335-4720-9855-3e324d0acc58 HTTP/1.1 Host: login-vip.replit.app Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:19 UTC	429	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: public, max-age=0 Content-Length: 26089 Content-Type: text/html; charset=utf-8 Date: Mon, 27 May 2024 22:42:19 GMT Etag: W/"65e9-18f91f39d88" Last-Modified: Sun, 19 May 2024 17:43:33 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Powered-By: Express Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:19 UTC	961	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 33 30 30 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6a 69 6e 67 6c 65 22 20 76 61 6c 75 65 3d 22 6e 6f 74 72 61 6e 73 6c 61 74 65 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="utf-8"> <meta content="width=300, initial-scale=1" name="viewport"> <meta name="jingle" value="notranslate"> <meta name="
2024-05-27 22:42:19 UTC	1390	IN	Data Raw: 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 35 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 20 20 7d 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 20 7b 0d 0a 20 20 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0d Data Ascii: color: #262626; margin: 0 0 15px; font-weight: bold; } input[type=email], input[type=number], input[type=password], input[type=tel], input[type=text], input[type=url] { -moz-appearance: none; -webkit-appearance: none;
2024-05-27 22:42:19 UTC	1390	IN	Data Raw: 72 2d 62 6f 78 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 7d 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 61 63 74 69 76 65 2c 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 3a 61 63 74 69 76 65 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 62 65 62 65 62 3b 0d 0a 20 20 7d 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 63 36 63 36 63 36 3b 0d 0a 20 20 2d 6d 6f 7a 2d 62 Data Ascii: r-box; -webkit-box-sizing: border-box; box-sizing: border-box; position: relative; } input[type=checkbox]:active, input[type=radio]:active { background: #ebebeb; } input[type=checkbox]:hover { border-color: #c6c6c6; -moz-b
2024-05-27 22:42:19 UTC	19	IN	Data Raw: 74 3a 20 30 70 78 3b 0d 0a 20 20 77 69 64 74 68 3a 20 30 Data Ascii: t: 0px; width: 0
2024-05-27 22:42:19 UTC	1390	IN	Data Raw: 70 78 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 7d 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2e 66 6f 72 6d 2d 65 72 72 6f 72 2c 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2e 66 6f 72 6d 2d 65 72 72 6f 72 2c 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2e 66 6f 72 6d 2d 65 72 72 6f 72 2c 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2e 66 6f 72 6d 2d 65 72 72 6f 72 2c 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2e 66 6f 72 6d 2d 65 72 72 6f 72 2c 0d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2e 66 6f 72 6d 2d 65 72 72 6f 72 2c 0d Data Ascii: px; overflow: hidden; visibility: hidden; } input[type=checkbox].form-error, input[type=email].form-error, input[type=number].form-error, input[type=password].form-error, input[type=text].form-error, input[type=tel].form-error,
2024-05-27 22:42:19 UTC	1390	IN	Data Raw: 0a 20 20 6d 61 72 67 69 6e 3a 20 31 37 70 78 20 30 20 30 3b 0d 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 34 35 70 78 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 31 36 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 65 72 20 2e 73 65 63 6f 6e 64 61 72 79 2d 6c 69 6e 6b 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 38 70 78 20 30 20 30 3b 0d 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 65 72 20 2e 73 65 63 6f 6e 64 61 72 79 2d 6c 69 6e 6b 20 61 20 7b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 67 6f 6f 67 6c 65 2d 68 65 61 64 65 72 2d 62 61 72 2e 63 65 6e 74 65 72 65 64 20 7b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0d Data Ascii: margin: 17px 0 0; float: left; height: 45px; width: 116px; } .header .secondary-link { margin: 28px 0 0; float: right; } .header .secondary-link a { font-weight: normal; } .google-header-bar.centered { border: 0;
2024-05-27 22:42:19 UTC	1390	IN	Data Raw: 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 32 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 33 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 32 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 33 29 3b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 32 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 33 29 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 61 72 64 20 2a 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 72 63 2d 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 34 Data Ascii: ox-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3); -webkit-box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3); box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3); } .card *:first-child { margin-top: 0; } .rc-button { display: inline-block; min-width: 4
2024-05-27 22:42:19 UTC	1390	IN	Data Raw: 6f 6c 6f 72 3a 20 23 66 38 66 38 66 38 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 38 66 38 66 38 2c 23 66 31 66 31 66 31 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 38 66 38 66 38 2c 23 66 31 66 31 66 31 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 38 66 38 66 38 2c 23 66 31 66 31 66 31 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 Data Ascii: olor: #f8f8f8; background-image: -webkit-linear-gradient(top,#f8f8f8,#f1f1f1); background-image: -moz-linear-gradient(top,#f8f8f8,#f1f1f1); background-image: -ms-linear-gradient(top,#f8f8f8,#f1f1f1); background-image: -o-linear-gradient(top,#f
2024-05-27 22:42:19 UTC	1390	IN	Data Raw: 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 34 64 39 30 66 65 2c 23 34 37 38 37 65 64 29 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 72 63 2d 62 75 74 74 6f 6e 2d 73 75 62 6d 69 74 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 32 66 35 62 62 37 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 33 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 35 37 61 65 38 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 34 64 39 30 66 65 2c Data Ascii: und-image: linear-gradient(top,#4d90fe,#4787ed); } .rc-button-submit:hover { border: 1px solid #2f5bb7; color: #fff; text-shadow: 0 1px rgba(0,0,0,0.3); background-color: #357ae8; background-image: -webkit-linear-gradient(top,#4d90fe,
2024-05-27 22:42:19 UTC	1390	IN	Data Raw: 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 64 64 34 62 33 39 2c 23 64 31 34 38 33 36 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 64 64 34 62 33 39 2c 23 64 31 34 38 33 36 29 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 72 63 2d 62 75 74 74 6f 6e 2d 72 65 64 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 62 30 32 38 31 61 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 33 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: background-image: -o-linear-gradient(top,#dd4b39,#d14836); background-image: linear-gradient(top,#dd4b39,#d14836); } .rc-button-red:hover { border: 1px solid #b0281a; color: #fff; text-shadow: 0 1px rgba(0,0,0,0.3); background-color:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	34.117.33.233	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:20 UTC	598	OUT	GET /vip/Gmail_files/css HTTP/1.1 Host: login-vip.replit.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:20 UTC	414	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Content-Length: 158 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Mon, 27 May 2024 22:42:20 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Powered-By: Express Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:20 UTC	158	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 69 70 2f 47 6d 61 69 6c 5f 66 69 6c 65 73 2f 63 73 73 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /vip/Gmail_files/css</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	34.117.33.233	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:20 UTC	639	OUT	GET /vip/google.png HTTP/1.1 Host: login-vip.replit.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:20 UTC	414	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: public, max-age=0 Content-Length: 13774 Content-Type: image/png Date: Mon, 27 May 2024 22:42:20 GMT Etag: W/"35ce-18f91f39d88" Last-Modified: Sun, 19 May 2024 17:43:33 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Powered-By: Express Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:20 UTC	976	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c2 00 00 00 ac 08 06 00 00 00 e8 91 ac db 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 20 00 49 44 41 54 78 9c ed dd 7b 7c 54 e5 b5 37 f0 df 7a f6 4c 32 33 09 97 24 a0 80 62 55 5a 6f b4 8a 05 2f 90 04 a3 b5 58 48 26 88 6d f4 b5 b5 b5 37 ab f5 02 01 f5 58 5b ed 49 db 73 da 7a 23 01 b5 47 b4 b7 53 7b 51 53 05 32 09 08 d5 82 24 41 ad a0 68 f1 a8 b4 80 48 bd 54 49 b8 66 66 92 d9 fb 59 ef 1f c1 4a c9 7d f6 33 b3 27 61 7d 3f 9f fc 21 33 7b 3d 4f 96 93 bd 66 ef fd 5c 00 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 c4 91 84 bc ee 40 3a 84 97 70 c8 b1 db 86 fb e3 ca df e1 57 59 16 43 69 8b 3b 9c 84 ee 08 a2 23 b6 ac 72 e4 5e 10 b1 d7 fd 14 42 08 91 7e 43 a2 10 5e 54 dd 36 d6 af d4 69 0c 3e Data Ascii: PNGIHDRbKGD IDATx{\|T7zL23$bUZo/XH&m7X[Isz#GS{QS2$AhHTIffYJ}3'a}?!3{=Of\!B!B!B!@:pWYCi;#r^B~C^T6i>
2024-05-27 22:42:20 UTC	1390	IN	Data Raw: 14 ed 38 11 00 b9 26 e3 f6 e1 75 66 d4 83 b8 11 59 89 c6 86 6b 47 ee ee e7 71 bb 0f fe 00 c0 eb 00 56 7f f8 42 55 15 ab 0d f9 6d 9f 82 43 45 00 ca 41 74 01 cc e5 2a 46 96 75 79 6d 15 75 18 8a 27 84 10 c2 05 63 85 70 ce 5d fb 8f 4a 38 ce 0a 74 ee 08 9f 6a 6f 13 f0 08 98 7f 1f 99 9f f3 a2 e9 e0 55 55 a4 01 bc 7c f0 e7 fe 8b 16 ee cd cf 52 59 73 18 7c 39 80 0b e0 66 fb 2a e2 05 91 1b b2 5f 37 d3 53 21 84 10 6e 19 29 84 15 0b 39 18 b3 62 11 30 4e 30 11 af 67 fc 1a 91 fa c9 fe dd 81 3f ac ad 22 3b b5 6d 7d 64 d5 82 11 ad 00 7e 01 e0 17 e1 7b 63 27 b0 d6 57 81 e9 eb 00 8e 1e 60 a8 ba fa 79 39 0f 98 ef a1 10 42 88 64 b9 2e 84 55 55 ac 36 a8 d8 ef 52 bb 66 28 bf 46 a0 db 23 f3 42 4f 80 c8 d3 dd 09 23 37 04 b7 03 f8 6e 45 15 57 45 47 c6 2f 25 70 25 80 c9 7d 1d 47 Data Ascii: 8&ufYkGqVBUmCEAtFuymu'cp]J8tjoUU\|RYs\|9f_7S!n)9b0N0g?";m}d~{c'W`y9Bd.UU6Rf(F#BO#7nEWEG/%p%}G
2024-05-27 22:42:20 UTC	1390	IN	Data Raw: e8 75 62 7a 0a c4 8f e6 45 9a 9a 87 c2 d5 23 3f 87 e1 4e c2 ba 98 09 97 d8 cd 28 56 0a f9 9d bf 55 2f a7 f7 8f 5e 38 98 2b 8c 25 60 2a c0 60 06 6c bf 85 44 13 bd 4e e0 a7 18 f4 a8 af d0 6e 1e ac 57 8f e5 8b db ce d4 0e cd 8f 51 6c 0e 80 5c 83 bf 84 45 40 21 88 0b 35 f8 c7 e1 9a e8 f3 4c fc eb 8e 8e d0 c3 ab 6f a6 b6 c3 df cc c0 7c 30 4f 4c b6 b1 6c bd e7 01 00 47 4c 21 74 71 0e 00 80 e0 c1 9f a3 41 38 9b d1 f9 97 ae 40 68 09 17 ed 00 e3 69 28 d4 e6 8f 89 3d 4d 0f 6e 4c d9 78 93 ee 6f 8d 82 4e 74 7b de 21 40 0a e1 10 b6 3b 5c 7c 9e 06 cf 05 30 8b 80 00 1b d9 a5 eb df 9c c2 c4 a7 00 b8 be 35 5c b4 73 17 f0 3b f6 d3 e2 d1 4f 34 be 6b ba a1 54 4b ac f3 9d 07 c5 73 6d 1b b3 40 08 98 6f 81 4f 61 e0 14 80 af 4f 34 5b 3b 13 4d f4 3b 9f b6 17 d3 74 0c 8a 5c 95 57 Data Ascii: ubzE#?N(VU/^8+%`*`lDNnWQl\E@!5Lo\|0OLlGL!tqA8@hi(=MnLxoNt{!@;\\|05\s;O4kTKsm@oOaO4[;M;t\W
2024-05-27 22:42:20 UTC	19	IN	Data Raw: 50 ae d7 73 33 72 7b 55 24 2d f4 fe 88 7e 0f 56 6a 99 5d Data Ascii: Ps3r{U$-~Vj]
2024-05-27 22:42:20 UTC	1390	IN	Data Raw: 7c 1a 03 0f 61 70 3e 0f e8 03 1d df e1 e7 87 d9 d0 ef d6 be 0e 43 36 57 0c 1c 6f 93 f5 30 1b 58 27 ab b4 3a 7e 21 03 0b 4c f4 4b a4 de d0 3e 07 60 98 62 fa e3 3b e1 c9 bd de e9 ec 7a 6b 54 b1 81 c5 62 c9 c0 ed 55 91 24 bb b6 8a fa 35 47 ec 9d f0 e4 10 34 d7 a2 73 31 e7 a1 89 71 51 4b b8 f8 56 d7 61 36 20 a4 94 6f 68 e7 8a 70 91 dd ac 5c e5 aa 62 21 07 89 f4 2f 90 ba 93 6a 3b 80 3f 13 f3 8f 88 70 19 81 cf 66 56 13 14 f4 18 47 61 bc 82 3a 85 89 2e 20 d0 37 19 b4 04 e0 d7 52 d4 8f 21 e1 88 38 07 00 9f cc 46 e8 67 bd bd a1 eb ca 32 e0 03 ee 3f c3 26 46 9e 8a e4 f4 ff f9 6c 16 82 77 01 29 1b 42 bf 1b c0 53 20 34 b3 a6 cd 3e a2 6d 8e dd de 92 9f 7b 5c db 9b 1f 7c e0 2f c8 8b e6 d8 4e f6 31 9a 71 a2 82 3e 8b 41 d3 01 4c 43 8f eb df 26 8f c0 3f fc a0 b4 68 d5 e8 Data Ascii: \|ap>C6Wo0X':~!LK>`b;zkTbU$5G4s1qQKVa6 ohp\b!/j;?pfVGa:. 7R!8Fg2?&Flw)BS 4>m{\\|/N1q>ALC&?h
2024-05-27 22:42:20 UTC	1390	IN	Data Raw: f0 5b af fb 71 b8 f2 3b 78 98 ce 8e ed 81 cb 7b f6 0a 78 b3 b7 d7 35 e8 5a 03 0f 6f 13 ac 30 67 d4 f2 a6 e7 dd 87 ea 9f fc 48 f3 8d 2d e1 c2 d1 04 1a d0 1a 82 5d d1 f1 2d c3 9c 52 1c 7c 38 df 1b 26 5c eb 7e 79 09 24 c0 34 27 ab 38 91 b6 5c f9 0a ed 1b 13 cd d6 68 02 5c e5 8a 81 e3 9d 2c ab 14 e8 7d 0f c3 b2 45 f1 4f 30 6b f7 3b 14 10 fd a8 7e 41 28 e2 3a ce 00 54 55 91 9e 71 17 5f 99 95 15 fb 14 18 27 a5 b3 6d af 30 e8 3a 03 61 f6 01 3c 73 e4 b2 f5 5b 0d c4 ea 97 82 48 63 75 4b b8 f8 0c 80 af 74 19 2a 3f 14 53 e5 38 e4 d6 78 4f 27 dd d7 5d 36 04 80 a6 ba 8f 71 e4 70 02 f1 29 30 f0 e0 5a 3b 3d 17 c2 7d 73 ce 2e 20 e0 22 b7 6d 10 d3 f7 46 2d 6f 7a ca 6d 9c 01 b5 09 f0 fe fd fe ab 00 fc d5 40 ac 3e 77 45 e7 e7 51 00 76 9f 2b 80 bf e7 2f b6 d3 9b 2b 02 fb 13 Data Ascii: [q;x{x5Zo0gH-]-R\|8&\~y$4'8\h\,}EO0k;~A(:TUq_'m0:a<s[HcuKt*?S8xO']6qp)0Z;=}s. "mF-ozm@>wEQv+/+
2024-05-27 22:42:20 UTC	1316	IN	Data Raw: 9f fa 4e fe de b2 ea b6 35 20 72 3d e7 84 98 16 00 f8 92 db 38 43 11 6b fd 35 23 71 48 3f d1 eb 1b 08 13 dc 7c 73 b7 59 99 19 40 65 10 83 36 00 5c 92 ec f1 d4 e3 97 03 9a e0 e6 e2 d7 d6 4e c6 e5 0a 2e 73 d5 d3 17 29 66 1e 9b 74 97 00 b4 c7 da ff ee e6 f8 54 20 70 da 26 89 a7 99 ab 42 c8 64 6f 3e f4 bf 33 e0 d6 a6 6b 44 ea 78 a0 97 67 84 9d 6f c2 13 6c 60 f2 25 01 15 33 17 c7 bf bf 72 6e 60 a8 7e c0 92 32 73 71 f4 58 68 5c 62 20 94 ce ea d0 cb 7a 7d 07 bb da 1a 4b 8f 0e b6 a4 75 a4 58 7f 10 78 bb 9b bf 35 d6 3d e5 84 5d e5 2a 7b 14 32 2e 57 cc 7a 3b 91 9b 6f e2 ea a8 1e 66 16 b8 18 7c c1 fb 9e fa 4e fe de e4 8f 4f 0d 22 ec 18 0c 27 f1 24 8c 76 73 b0 22 6b 7a 4b 59 d1 35 4c 98 44 c0 19 0e f4 48 8f 6f 6d ba a6 99 f3 80 3e 56 32 d1 59 89 c7 d0 b9 23 b4 2b 0c Data Ascii: N5 r=8Ck5#qH?\|sY@e6\N.s)ftT p&Bdo>3kDxgol`%3rn`~2sqXh\b z}KuXx5=]*{2.Wz;of\|NO"'$vs"kzKY5LDHom>V2Y#+
2024-05-27 22:42:20 UTC	1390	IN	Data Raw: 12 00 db ae 4e ee 8a 7b c8 09 d3 56 b8 99 20 cc c8 a8 5c f1 1a 04 6c c0 55 ae 1c 58 5b 81 ae 1f 37 d2 78 d3 cd 1a b6 00 15 01 58 e2 26 82 49 e5 77 f0 30 46 ec 53 43 f0 7a 10 0c 6c f3 70 71 b3 77 00 da 44 d0 9b 98 68 93 03 e7 a5 d1 75 cf 6e cd 94 f5 8b fb 5d 08 01 e0 ac dd 81 87 37 8c 8c dd 00 97 1b 71 1e 8a 19 77 96 55 b7 c5 ea e7 e7 dc 6f 2a 66 a6 c9 19 19 7d 00 4c 17 9a 8a c7 e0 3f d5 cf cf 19 d0 02 b8 04 bc e1 f2 13 57 ce 55 b8 96 aa 32 63 e3 d2 dc e1 89 19 60 72 33 0c ce 8e 06 f4 b6 ee 5e 60 e8 37 5c 3d 4f 03 ca 99 71 2d 51 66 e4 ca f1 5b 33 e0 6e 84 a6 9d a5 3a ba cf 15 61 8b 8b b8 60 60 56 49 15 fb 32 65 4a 95 ce 8e cd c2 d0 9d 6f f7 46 1a da 70 00 6c 01 b0 89 88 36 31 3b 9b b2 6c eb a5 61 2b 1b 3f 48 43 db 49 1b 50 21 ac aa 22 5d ba a8 ed 6a 62 7a Data Ascii: N{V \lUX[7xX&Iw0FSCzlpqwDhun]7qwUo*f}L?WU2c`r3^`7\=Oq-Qf[3n:a``VI2eJoFpl61;la+?HCIP!"]jbz
2024-05-27 22:42:20 UTC	1390	IN	Data Raw: 50 a8 73 42 71 6b f5 ee 8b 4b d2 b2 5a 4d e7 79 20 ef 01 00 67 1f fe 1a 01 d9 4c 7c bd 4a f0 b6 96 70 71 f5 3f cb cf 39 7a 20 b1 5d 17 c2 ba 5b 68 bf f6 a1 14 9d 4b 78 a5 8a 62 e0 0a 47 3b 9b cb 6a a2 4f 94 2d 8c 76 49 44 3a cd ba 2f f6 b1 b2 45 6d 3f 4e d8 d6 36 00 37 23 75 ab e8 3b 20 be ac 61 de 30 d7 df b6 3f 34 2a b2 ee cf 00 fe 62 20 54 00 d0 2b 5a ca 8b 2a 0c c4 ea d1 f6 92 92 40 eb c6 a2 47 00 43 53 50 98 ef ec ef 43 7e 7f a1 fd 67 b0 a1 5c 31 af b0 1b ad 94 e6 8a d7 20 60 af b7 1e 61 43 b9 62 f0 9d fd 9d 0b a9 ad e0 2f d1 b9 52 88 5b 21 66 5e 1d ae 6e 33 50 c8 7b 56 51 c5 59 65 8b 63 0f 13 70 6d 2a db c9 44 f9 81 71 8f b3 cb 05 36 0e 51 a4 1d fb 99 3d e1 e9 27 18 8a d7 ad f7 66 cc c8 69 dd 50 f4 3b f4 fd cc 3b 00 70 a5 8f fd db 5a c2 c5 77 ed 9f Data Ascii: PsBqkKZMy gL\|Jpq?9z ][hKxbG;jO-vID:/Em?N67#u; a0?4b T+Z@GCSPC~g\1 `aCb/R[!f^n3P{VQYecpm*Dq6Q='fiP;;pZw
2024-05-27 22:42:20 UTC	1390	IN	Data Raw: 2a 38 2e 78 49 ba 8a 20 00 d0 ca 95 ed ca d2 97 02 03 bb 2d 37 a8 10 96 ba 2d 82 00 40 b3 d0 ee 60 88 e7 0a 58 ea b6 08 02 40 64 6e 60 35 08 d5 26 3a 24 52 6b cc d2 f5 ef 33 d3 15 30 30 c9 3e 93 31 f8 b7 3d 15 41 20 c5 2b 29 d4 cf cd 7d d9 72 70 2e 80 17 53 d9 ce e0 c7 ff 55 5f 99 f3 f5 01 ee 2f 68 c4 c8 65 eb b7 72 e7 d2 52 43 f1 0f e1 0d a5 7c 5f 37 15 2c 50 88 ad a4 31 44 73 45 6f f8 12 8e b1 5c 05 77 07 6f 45 86 6d b8 2b ba 37 aa be f1 69 10 57 79 dd 8f 94 61 ac 2f b0 87 77 79 2e 78 a8 94 2f 29 b4 fc c6 d0 ce a0 0e 16 81 31 a0 61 eb 47 88 28 11 2e ab af cc b9 dd cb 4e 8c 8a 34 2e 23 66 b3 bb 64 78 8d f0 0f 02 66 0c f4 41 7d 5f 7c d3 9d 65 8c 21 96 2b c6 3f 7c b0 67 1c 5c 4d c7 88 da 2a ea 48 30 87 c1 d8 61 2a a6 48 9d 82 ba e6 1f 81 f0 90 d7 fd 30 8e Data Ascii: 8.xI -7-@`X@dn`5&:$Rk300>1=A +)}rp.SU_/herRC\|_7,P1DsEo\woEm+7iWya/wy.x/)1aG(.N4.#fdxfA}_\|e!+?\|g\MH0a*H0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	34.117.33.233	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:20 UTC	639	OUT	GET /vip/avatar.png HTTP/1.1 Host: login-vip.replit.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:20 UTC	413	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: public, max-age=0 Content-Length: 6616 Content-Type: image/png Date: Mon, 27 May 2024 22:42:20 GMT Etag: W/"19d8-18f91f39d88" Last-Modified: Sun, 19 May 2024 17:43:33 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Powered-By: Express Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:20 UTC	977	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ad 00 00 00 ad 08 06 00 00 01 b5 a8 cf d5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-05-27 22:42:20 UTC	1390	IN	Data Raw: 1e 53 6d 85 c8 6d 8a 7d 48 e7 38 2f f7 49 57 d2 ba ae 3f 70 50 bf b2 42 51 84 5b ef 59 96 51 e4 47 c4 20 8d 83 5a 45 df f7 01 ae 88 97 69 c5 d3 97 d8 66 8b 14 ff 09 c5 12 c7 71 4c e6 18 8f bf 8a 4b 2a 99 a6 69 b0 64 a9 af 29 ab cc 54 9e 24 89 55 ed dc 6e 85 be a6 62 4f e5 d2 65 a0 84 44 c4 25 6d 2d c5 58 d2 81 1e 9b ca 87 d0 e1 03 30 b7 1b 4c 8f 71 1c bd 49 29 21 66 1f 57 4d d3 04 7b 6a 90 c3 92 38 df e1 cc 80 ba d2 b0 07 29 35 2b a6 82 d3 2f a4 dc 10 1a 74 31 f7 07 1d 57 f3 16 40 8c 44 d6 d2 b9 40 dc 09 c4 e7 81 d8 9a d2 0c 82 ad 46 b1 42 13 f7 07 e2 4d c4 96 c7 d7 49 a8 50 37 e2 52 cb 42 85 1a 1a a6 8f 11 97 c1 ff 09 25 7e 26 26 26 06 25 25 25 a2 0c 67 42 aa 59 09 66 57 22 b2 fc 7f 74 83 bf 90 52 ba 11 30 dc 8f 56 95 e9 46 98 c1 ff 69 60 38 cd aa 7f fc Data Ascii: Smm}H8/IW?pPBQ[YQG ZEifqLK*id)T$UnbOeD%m-X0LqI)!fWM{j8)5+/t1W@D@FBMIP7RB%~&&&%%%gBYfW"tR0VFi`8
2024-05-27 22:42:20 UTC	1390	IN	Data Raw: 1c ed 96 95 9c d7 24 56 d8 4f e1 73 2b 6f e4 ee 48 ce b5 69 b1 d1 96 62 d9 f1 49 ee 25 3b d1 a3 62 a2 c7 f1 5d ba 24 f7 8e 8d 9e 50 39 70 c2 f1 de d9 24 57 28 7e f6 a8 9c d8 23 05 25 92 ce 3e d7 89 8c 6a de 54 ec 2c 98 14 cf a7 4c 7c 33 e5 92 2d db 8b 94 2e a1 32 64 a1 3f ea d6 8e da ce 78 e1 a2 f1 d5 d1 79 73 21 77 dc b0 e5 19 e4 3f 9a 7a 25 25 38 1c c6 79 95 8a 18 4a e4 0e 6d ee 51 5d 95 dd 1d fe 5c 60 94 6c 55 65 41 7b 2f 02 b1 e2 e7 02 bd 3d 47 c9 c8 fb 3c 72 91 7b 07 b6 3c 50 91 37 9a 46 d6 a6 69 0a 04 cc df 54 72 0f 6d e7 fe 10 ba 16 1c 4d e6 71 82 dc 1b aa 60 02 37 71 72 6f 5d 58 c5 e9 2d 25 c1 ad 4c 6e e8 c2 62 d2 b1 38 05 7b a0 a1 20 77 d3 a5 55 13 e2 40 e5 dc 7e 79 d9 cb 03 65 6c 82 dc 33 97 16 5d 69 08 eb f5 ba d3 07 39 05 67 48 22 30 29 b1 e6 Data Ascii: $VOs+oHibI%;b]$P9p$W(~#%>jT,L\|3-.2d?xys!w?z%%8yJmQ]\`lUeA{/=G<r{<P7FiTrmMq`7qro]X-%Lnb8{ wU@~yel3]i9gH"0)
2024-05-27 22:42:20 UTC	19	IN	Data Raw: 84 7e d2 61 a4 d6 a5 4d 24 65 28 ac 9b 11 80 e2 87 d1 d1 Data Ascii: ~aM$e(
2024-05-27 22:42:20 UTC	1390	IN	Data Raw: c0 93 d1 a9 31 f6 78 85 b0 fc c3 48 dd 68 4f c5 ee 0d db 54 5d 5e f9 58 80 6d 5c 92 c5 20 04 b5 be 73 ac a9 4a c1 a6 60 e3 07 76 37 c5 c0 5d bb 00 bb 95 72 e0 ae 2d 80 2d a6 1c b8 ab 08 b0 07 29 07 ee 3a 50 be 8e 85 2f 2b 36 02 d5 6a 35 72 90 75 a4 5e c1 c6 41 51 04 7a cf 0d c2 12 93 74 04 0e 80 d8 b6 f2 8c 54 8f dd 19 8a dd e9 0e a0 b1 8b 53 60 3f 58 aa db 0a f0 2f ac c2 25 51 35 55 2a 15 e1 79 13 3c 97 3e 2d 2d ac bd bd fd 7f 42 21 09 ca 5b a5 2c 2c 41 45 58 83 8a 2c c1 70 03 6b 9a c0 91 7c 21 39 c5 32 e3 e0 18 27 3a fd 75 b3 c2 14 54 2a d5 5e 4e 8c 62 ce f3 f2 f2 19 5d db 88 85 6f 67 d5 54 a0 5e e2 98 bc 0d bf d2 ef c6 11 8b 3f 94 59 48 cf 43 13 72 28 e0 22 08 87 cb 77 e5 3a 54 27 5b c1 d3 30 4f c2 65 35 53 f2 27 c0 cd 34 60 8e 04 37 9d 63 e7 74 e5 13 Data Ascii: 1xHhOT]^Xm\ sJ`v7]r--):P/+6j5ru^AQztTS`?X/%Q5Uy<>--B![,,AEX,pk\|!92':uT^Nb]ogT^?YHCr("w:T'[0Oe5S'4`7ct
2024-05-27 22:42:20 UTC	1390	IN	Data Raw: 87 4f f0 4d 18 56 30 df aa 22 2d 0a 7f 3b 7c 1d 81 5a e6 5c b3 9a 71 e1 a3 30 74 d0 c3 aa 38 b1 48 bb 91 3c 2e cc 46 4a ab 96 cd 09 b3 02 7c f4 b5 2b 5b 89 8c c2 c6 b8 a4 7d d3 d8 26 9f bd be 77 ef 1e 85 02 a1 be 6e 62 1e 96 45 da a7 8c 6d 95 30 03 85 02 c1 be 6e 65 3e 96 24 ed 87 14 86 84 90 c2 7d b4 31 1f 8b 92 f6 2d 8a c4 30 bc 7f b2 56 88 c1 4a e6 65 41 d2 3e 66 6c 9d 04 2f 03 28 f3 0b 0d eb 98 9f 23 48 8b aa 9b 59 52 bc 14 5e de 17 9a af b3 98 9f 23 48 bb 5a 92 97 63 c6 8c 09 86 b4 81 f8 ba 7a 38 69 d1 c5 55 54 f7 c5 40 4e 03 e4 7c 84 af 01 60 26 f3 f4 01 69 17 49 f4 72 c2 84 09 e2 23 19 82 8f 79 58 64 49 8b e6 11 af 49 bd 6d 8e 1f 2f f6 8c 25 35 36 36 06 b5 0c 62 9e 36 81 b4 e8 76 f2 b8 54 2f 71 eb 44 70 25 12 56 a2 5f 25 00 9e be 04 d2 ce 96 ee 29 Data Ascii: OMV0"-;\|Z\q0t8H<.FJ\|+[}&wnbEm0ne>$}1-0VJeA>fl/(#HYR^#HZcz8iUT@N\|`&iIr#yXdIIm/%566b6vT/qDp%V_%)
2024-05-27 22:42:20 UTC	60	IN	Data Raw: be 19 e5 ff 9f a5 68 ff 7c 9a b1 a9 14 e5 26 db 8d 65 71 e8 1f 3d 05 90 56 ba 66 ec 8a b1 cb bc d6 fc 45 57 39 43 f8 1f 39 36 07 49 86 2e 42 8c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: h\|&eq=VfEW9C96I.BIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	34.117.33.233	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:20 UTC	658	OUT	GET /vip/Gmail_files/logo_strip_2x.png HTTP/1.1 Host: login-vip.replit.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:20 UTC	414	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Content-Length: 172 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Mon, 27 May 2024 22:42:20 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Powered-By: Express Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:20 UTC	172	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 69 70 2f 47 6d 61 69 6c 5f 66 69 6c 65 73 2f 6c 6f 67 6f 5f 73 74 72 69 70 5f 32 78 2e 70 6e 67 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /vip/Gmail_files/logo_strip_2x.png</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	34.117.33.233	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:20 UTC	639	OUT	GET /vip/images.png HTTP/1.1 Host: login-vip.replit.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:20 UTC	357	IN	HTTP/1.1 500 Internal Server Error Content-Length: 21 Content-Type: text/html; charset=utf-8 Date: Mon, 27 May 2024 22:42:20 GMT Etag: W/"15-/6VXivhc2MKdLfIkLcUE47K6aH0" Strict-Transport-Security: max-age=63072000; includeSubDomains X-Powered-By: Express Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:20 UTC	21	IN	Data Raw: 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 Data Ascii: Internal Server Error

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	34.117.33.233	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:21 UTC	665	OUT	POST /battery_info HTTP/1.1 Host: login-vip.replit.app Connection: keep-alive Content-Length: 707 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://login-vip.replit.app Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:21 UTC	707	OUT	Data Raw: 7b 22 70 72 6f 64 75 63 74 53 75 62 22 3a 22 32 30 30 33 30 31 30 37 22 2c 22 76 65 6e 64 6f 72 22 3a 22 47 6f 6f 67 6c 65 20 49 6e 63 2e 22 2c 22 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 22 3a 30 2c 22 64 6f 4e 6f 74 54 72 61 63 6b 22 3a 6e 75 6c 6c 2c 22 68 61 72 64 77 61 72 65 43 6f 6e 63 75 72 72 65 6e 63 79 22 3a 34 2c 22 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 70 70 43 6f 64 65 4e 61 6d 65 22 3a 22 4d 6f 7a 69 6c 6c 61 22 2c 22 61 70 70 4e 61 6d 65 22 3a 22 4e 65 74 73 63 61 70 65 22 2c 22 61 70 70 56 65 72 73 69 6f 6e 22 3a 22 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 Data Ascii: {"productSub":"20030107","vendor":"Google Inc.","maxTouchPoints":0,"doNotTrack":null,"hardwareConcurrency":4,"cookieEnabled":true,"appCodeName":"Mozilla","appName":"Netscape","appVersion":"5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
2024-05-27 22:42:22 UTC	338	IN	HTTP/1.1 200 OK Content-Length: 34 Content-Type: text/html; charset=utf-8 Date: Mon, 27 May 2024 22:42:22 GMT Etag: W/"22-jeTpz/hiYOOCUDqaJQZY4NFA5FU" Strict-Transport-Security: max-age=63072000; includeSubDomains X-Powered-By: Express Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:22 UTC	34	IN	Data Raw: 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 63 65 69 76 65 64 20 61 6e 64 20 70 72 6f 63 65 73 73 65 64 Data Ascii: Information received and processed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49750	34.117.33.233	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:22 UTC	358	OUT	GET /vip/google.png HTTP/1.1 Host: login-vip.replit.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:22 UTC	414	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: public, max-age=0 Content-Length: 13774 Content-Type: image/png Date: Mon, 27 May 2024 22:42:22 GMT Etag: W/"35ce-18f91f39d88" Last-Modified: Sun, 19 May 2024 17:43:33 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Powered-By: Express Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:22 UTC	976	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c2 00 00 00 ac 08 06 00 00 00 e8 91 ac db 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 20 00 49 44 41 54 78 9c ed dd 7b 7c 54 e5 b5 37 f0 df 7a f6 4c 32 33 09 97 24 a0 80 62 55 5a 6f b4 8a 05 2f 90 04 a3 b5 58 48 26 88 6d f4 b5 b5 b5 37 ab f5 02 01 f5 58 5b ed 49 db 73 da 7a 23 01 b5 47 b4 b7 53 7b 51 53 05 32 09 08 d5 82 24 41 ad a0 68 f1 a8 b4 80 48 bd 54 49 b8 66 66 92 d9 fb 59 ef 1f c1 4a c9 7d f6 33 b3 27 61 7d 3f 9f fc 21 33 7b 3d 4f 96 93 bd 66 ef fd 5c 00 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 c4 91 84 bc ee 40 3a 84 97 70 c8 b1 db 86 fb e3 ca df e1 57 59 16 43 69 8b 3b 9c 84 ee 08 a2 23 b6 ac 72 e4 5e 10 b1 d7 fd 14 42 08 91 7e 43 a2 10 5e 54 dd 36 d6 af d4 69 0c 3e Data Ascii: PNGIHDRbKGD IDATx{\|T7zL23$bUZo/XH&m7X[Isz#GS{QS2$AhHTIffYJ}3'a}?!3{=Of\!B!B!B!@:pWYCi;#r^B~C^T6i>
2024-05-27 22:42:22 UTC	1390	IN	Data Raw: 14 ed 38 11 00 b9 26 e3 f6 e1 75 66 d4 83 b8 11 59 89 c6 86 6b 47 ee ee e7 71 bb 0f fe 00 c0 eb 00 56 7f f8 42 55 15 ab 0d f9 6d 9f 82 43 45 00 ca 41 74 01 cc e5 2a 46 96 75 79 6d 15 75 18 8a 27 84 10 c2 05 63 85 70 ce 5d fb 8f 4a 38 ce 0a 74 ee 08 9f 6a 6f 13 f0 08 98 7f 1f 99 9f f3 a2 e9 e0 55 55 a4 01 bc 7c f0 e7 fe 8b 16 ee cd cf 52 59 73 18 7c 39 80 0b e0 66 fb 2a e2 05 91 1b b2 5f 37 d3 53 21 84 10 6e 19 29 84 15 0b 39 18 b3 62 11 30 4e 30 11 af 67 fc 1a 91 fa c9 fe dd 81 3f ac ad 22 3b b5 6d 7d 64 d5 82 11 ad 00 7e 01 e0 17 e1 7b 63 27 b0 d6 57 81 e9 eb 00 8e 1e 60 a8 ba fa 79 39 0f 98 ef a1 10 42 88 64 b9 2e 84 55 55 ac 36 a8 d8 ef 52 bb 66 28 bf 46 a0 db 23 f3 42 4f 80 c8 d3 dd 09 23 37 04 b7 03 f8 6e 45 15 57 45 47 c6 2f 25 70 25 80 c9 7d 1d 47 Data Ascii: 8&ufYkGqVBUmCEAtFuymu'cp]J8tjoUU\|RYs\|9f_7S!n)9b0N0g?";m}d~{c'W`y9Bd.UU6Rf(F#BO#7nEWEG/%p%}G
2024-05-27 22:42:22 UTC	1390	IN	Data Raw: e8 75 62 7a 0a c4 8f e6 45 9a 9a 87 c2 d5 23 3f 87 e1 4e c2 ba 98 09 97 d8 cd 28 56 0a f9 9d bf 55 2f a7 f7 8f 5e 38 98 2b 8c 25 60 2a c0 60 06 6c bf 85 44 13 bd 4e e0 a7 18 f4 a8 af d0 6e 1e ac 57 8f e5 8b db ce d4 0e cd 8f 51 6c 0e 80 5c 83 bf 84 45 40 21 88 0b 35 f8 c7 e1 9a e8 f3 4c fc eb 8e 8e d0 c3 ab 6f a6 b6 c3 df cc c0 7c 30 4f 4c b6 b1 6c bd e7 01 00 47 4c 21 74 71 0e 00 80 e0 c1 9f a3 41 38 9b d1 f9 97 ae 40 68 09 17 ed 00 e3 69 28 d4 e6 8f 89 3d 4d 0f 6e 4c d9 78 93 ee 6f 8d 82 4e 74 7b de 21 40 0a e1 10 b6 3b 5c 7c 9e 06 cf 05 30 8b 80 00 1b d9 a5 eb df 9c c2 c4 a7 00 b8 be 35 5c b4 73 17 f0 3b f6 d3 e2 d1 4f 34 be 6b ba a1 54 4b ac f3 9d 07 c5 73 6d 1b b3 40 08 98 6f 81 4f 61 e0 14 80 af 4f 34 5b 3b 13 4d f4 3b 9f b6 17 d3 74 0c 8a 5c 95 57 Data Ascii: ubzE#?N(VU/^8+%`*`lDNnWQl\E@!5Lo\|0OLlGL!tqA8@hi(=MnLxoNt{!@;\\|05\s;O4kTKsm@oOaO4[;M;t\W
2024-05-27 22:42:22 UTC	19	IN	Data Raw: 50 ae d7 73 33 72 7b 55 24 2d f4 fe 88 7e 0f 56 6a 99 5d Data Ascii: Ps3r{U$-~Vj]
2024-05-27 22:42:22 UTC	1390	IN	Data Raw: 7c 1a 03 0f 61 70 3e 0f e8 03 1d df e1 e7 87 d9 d0 ef d6 be 0e 43 36 57 0c 1c 6f 93 f5 30 1b 58 27 ab b4 3a 7e 21 03 0b 4c f4 4b a4 de d0 3e 07 60 98 62 fa e3 3b e1 c9 bd de e9 ec 7a 6b 54 b1 81 c5 62 c9 c0 ed 55 91 24 bb b6 8a fa 35 47 ec 9d f0 e4 10 34 d7 a2 73 31 e7 a1 89 71 51 4b b8 f8 56 d7 61 36 20 a4 94 6f 68 e7 8a 70 91 dd ac 5c e5 aa 62 21 07 89 f4 2f 90 ba 93 6a 3b 80 3f 13 f3 8f 88 70 19 81 cf 66 56 13 14 f4 18 47 61 bc 82 3a 85 89 2e 20 d0 37 19 b4 04 e0 d7 52 d4 8f 21 e1 88 38 07 00 9f cc 46 e8 67 bd bd a1 eb ca 32 e0 03 ee 3f c3 26 46 9e 8a e4 f4 ff f9 6c 16 82 77 01 29 1b 42 bf 1b c0 53 20 34 b3 a6 cd 3e a2 6d 8e dd de 92 9f 7b 5c db 9b 1f 7c e0 2f c8 8b e6 d8 4e f6 31 9a 71 a2 82 3e 8b 41 d3 01 4c 43 8f eb df 26 8f c0 3f fc a0 b4 68 d5 e8 Data Ascii: \|ap>C6Wo0X':~!LK>`b;zkTbU$5G4s1qQKVa6 ohp\b!/j;?pfVGa:. 7R!8Fg2?&Flw)BS 4>m{\\|/N1q>ALC&?h
2024-05-27 22:42:22 UTC	1390	IN	Data Raw: f0 5b af fb 71 b8 f2 3b 78 98 ce 8e ed 81 cb 7b f6 0a 78 b3 b7 d7 35 e8 5a 03 0f 6f 13 ac 30 67 d4 f2 a6 e7 dd 87 ea 9f fc 48 f3 8d 2d e1 c2 d1 04 1a d0 1a 82 5d d1 f1 2d c3 9c 52 1c 7c 38 df 1b 26 5c eb 7e 79 09 24 c0 34 27 ab 38 91 b6 5c f9 0a ed 1b 13 cd d6 68 02 5c e5 8a 81 e3 9d 2c ab 14 e8 7d 0f c3 b2 45 f1 4f 30 6b f7 3b 14 10 fd a8 7e 41 28 e2 3a ce 00 54 55 91 9e 71 17 5f 99 95 15 fb 14 18 27 a5 b3 6d af 30 e8 3a 03 61 f6 01 3c 73 e4 b2 f5 5b 0d c4 ea 97 82 48 63 75 4b b8 f8 0c 80 af 74 19 2a 3f 14 53 e5 38 e4 d6 78 4f 27 dd d7 5d 36 04 80 a6 ba 8f 71 e4 70 02 f1 29 30 f0 e0 5a 3b 3d 17 c2 7d 73 ce 2e 20 e0 22 b7 6d 10 d3 f7 46 2d 6f 7a ca 6d 9c 01 b5 09 f0 fe fd fe ab 00 fc d5 40 ac 3e 77 45 e7 e7 51 00 76 9f 2b 80 bf e7 2f b6 d3 9b 2b 02 fb 13 Data Ascii: [q;x{x5Zo0gH-]-R\|8&\~y$4'8\h\,}EO0k;~A(:TUq_'m0:a<s[HcuKt*?S8xO']6qp)0Z;=}s. "mF-ozm@>wEQv+/+
2024-05-27 22:42:22 UTC	1390	IN	Data Raw: 9f fa 4e fe de b2 ea b6 35 20 72 3d e7 84 98 16 00 f8 92 db 38 43 11 6b fd 35 23 71 48 3f d1 eb 1b 08 13 dc 7c 73 b7 59 99 19 40 65 10 83 36 00 5c 92 ec f1 d4 e3 97 03 9a e0 e6 e2 d7 d6 4e c6 e5 0a 2e 73 d5 d3 17 29 66 1e 9b 74 97 00 b4 c7 da ff ee e6 f8 54 20 70 da 26 89 a7 99 ab 42 c8 64 6f 3e f4 bf 33 e0 d6 a6 6b 44 ea 78 a0 97 67 84 9d 6f c2 13 6c 60 f2 25 01 15 33 17 c7 bf bf 72 6e 60 a8 7e c0 92 32 73 71 f4 58 68 5c 62 20 94 ce ea d0 cb 7a 7d 07 bb da 1a 4b 8f 0e b6 a4 75 a4 58 7f 10 78 bb 9b bf 35 d6 3d e5 84 5d e5 2a 7b 14 32 2e 57 cc 7a 3b 91 9b 6f e2 ea a8 1e 66 16 b8 18 7c c1 fb 9e fa 4e fe de e4 8f 4f 0d 22 ec 18 0c 27 f1 24 8c 76 73 b0 22 6b 7a 4b 59 d1 35 4c 98 44 c0 19 0e f4 48 8f 6f 6d ba a6 99 f3 80 3e 56 32 d1 59 89 c7 d0 b9 23 b4 2b 0c Data Ascii: N5 r=8Ck5#qH?\|sY@e6\N.s)ftT p&Bdo>3kDxgol`%3rn`~2sqXh\b z}KuXx5=]*{2.Wz;of\|NO"'$vs"kzKY5LDHom>V2Y#+
2024-05-27 22:42:22 UTC	1390	IN	Data Raw: e7 a5 d1 75 cf 6e cd 94 f5 8b fb 5d 08 01 e0 ac dd 81 87 37 8c 8c dd 00 97 1b 71 1e 8a 19 77 96 55 b7 c5 ea e7 e7 dc 6f 2a 66 a6 c9 19 19 7d 00 4c 17 9a 8a c7 e0 3f d5 cf cf 19 d0 02 b8 04 bc e1 f2 13 57 ce 55 b8 96 aa 32 63 e3 d2 dc e1 89 19 60 72 33 0c ce 8e 06 f4 b6 ee 5e 60 e8 37 5c 3d 4f 03 ca 99 71 2d 51 66 e4 ca f1 5b 33 e0 6e 84 a6 9d a5 3a ba cf 15 61 8b 8b b8 60 60 56 49 15 fb 32 65 4a 95 ce 8e cd c2 d0 9d 6f f7 46 1a da 70 00 6c 01 b0 89 88 36 31 3b 9b b2 6c eb a5 61 2b 1b 3f 48 43 db 49 1b 50 21 ac aa 22 5d ba a8 ed 6a 62 7a 1e 86 46 3d 02 20 10 dd 57 56 13 0d d5 57 86 ee 32 14 33 33 30 53 d9 e2 d8 bd 60 7c c3 60 54 cd 9a 6f 1c e8 41 e4 e8 f5 6c b9 1a 12 3e b6 e5 a5 a2 0b 80 a6 a7 dc 04 31 45 31 b9 5c bb 96 5e 1a 5f fb 6c f7 13 ba 95 b5 1e ec Data Ascii: un]7qwUo*f}L?WU2c`r3^`7\=Oq-Qf[3n:a``VI2eJoFpl61;la+?HCIP!"]jbzF= WVW2330S`\|`ToAl>1E1\^_l
2024-05-27 22:42:22 UTC	1390	IN	Data Raw: 3a cd ba 2f f6 b1 b2 45 6d 3f 4e d8 d6 36 00 37 23 75 ab e8 3b 20 be ac 61 de 30 d7 df b6 3f 34 2a b2 ee cf 00 fe 62 20 54 00 d0 2b 5a ca 8b 2a 0c c4 ea d1 f6 92 92 40 eb c6 a2 47 00 43 53 50 98 ef ec ef 43 7e 7f a1 fd 67 b0 a1 5c 31 af b0 1b ad 94 e6 8a d7 20 60 af b7 1e 61 43 b9 62 f0 9d fd 9d 0b a9 ad e0 2f d1 b9 52 88 5b 21 66 5e 1d ae 6e 33 50 c8 7b 56 51 c5 59 65 8b 63 0f 13 70 6d 2a db c9 44 f9 81 71 8f b3 cb 05 36 0e 51 a4 1d fb 99 3d e1 e9 27 18 8a d7 ad f7 66 cc c8 69 dd 50 f4 3b f4 fd cc 3b 00 70 a5 8f fd db 5a c2 c5 77 ed 9f 59 3c ba 3f f1 8d dc 13 5f 71 7d 70 07 81 c3 40 8f 8b 18 9b 42 00 e6 40 e1 f9 b2 9a d8 e6 b2 ea d8 ad 17 57 c7 8e 4f 71 9b 00 3a 47 82 96 55 47 bf 50 56 13 5b a1 6c de 06 a6 5b 01 1a de f7 91 2e 30 cf ab 9f 97 63 e0 f6 dc Data Ascii: :/Em?N67#u; a0?4b T+Z@GCSPC~g\1 `aCb/R[!f^n3P{VQYecpm*Dq6Q='fiP;;pZwY<?_q}p@B@WOq:GUGPV[l[.0c
2024-05-27 22:42:22 UTC	1390	IN	Data Raw: 29 d4 cf cd 7d d9 72 70 2e 80 17 53 d9 ce e0 c7 ff 55 5f 99 f3 f5 01 ee 2f 68 c4 c8 65 eb b7 72 e7 d2 52 43 f1 0f e1 0d a5 7c 5f 37 15 2c 50 88 ad a4 31 44 73 45 6f f8 12 8e b1 5c 05 77 07 6f 45 86 6d b8 2b ba 37 aa be f1 69 10 57 79 dd 8f 94 61 ac 2f b0 87 77 79 2e 78 a8 94 2f 29 b4 fc c6 d0 ce a0 0e 16 81 31 a0 61 eb 47 88 28 11 2e ab af cc b9 dd cb 4e 8c 8a 34 2e 23 66 b3 bb 64 78 8d f0 0f 02 66 0c f4 41 7d 5f 7c d3 9d 65 8c 21 96 2b c6 3f 7c b0 67 1c 5c 4d c7 88 da 2a ea 48 30 87 c1 d8 61 2a a6 48 9d 82 ba e6 1f 81 f0 90 d7 fd 30 8e b0 c5 ef ef 28 ef 6b d7 fb b4 ac ad 57 bb 80 62 f5 f3 43 5f 01 f8 5b 30 b2 0d c8 90 f0 ba 82 9e 1a 99 17 7a cc eb 8e 00 40 7e 7d f3 03 20 f6 64 5d cc 14 68 05 d1 45 f9 91 a6 b7 52 11 3c ab 48 3f 00 0c 9d 5c 69 76 2e a2 22 Data Ascii: )}rp.SU_/herRC\|_7,P1DsEo\woEm+7iWya/wy.x/)1aG(.N4.#fdxfA}_\|e!+?\|g\MH0aH0(kWbC_[0z@~} d]hER<H?\iv."

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49751	34.117.33.233	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:22 UTC	358	OUT	GET /vip/avatar.png HTTP/1.1 Host: login-vip.replit.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:22 UTC	413	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: public, max-age=0 Content-Length: 6616 Content-Type: image/png Date: Mon, 27 May 2024 22:42:22 GMT Etag: W/"19d8-18f91f39d88" Last-Modified: Sun, 19 May 2024 17:43:33 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Powered-By: Express Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:22 UTC	977	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ad 00 00 00 ad 08 06 00 00 01 b5 a8 cf d5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-05-27 22:42:22 UTC	1390	IN	Data Raw: 1e 53 6d 85 c8 6d 8a 7d 48 e7 38 2f f7 49 57 d2 ba ae 3f 70 50 bf b2 42 51 84 5b ef 59 96 51 e4 47 c4 20 8d 83 5a 45 df f7 01 ae 88 97 69 c5 d3 97 d8 66 8b 14 ff 09 c5 12 c7 71 4c e6 18 8f bf 8a 4b 2a 99 a6 69 b0 64 a9 af 29 ab cc 54 9e 24 89 55 ed dc 6e 85 be a6 62 4f e5 d2 65 a0 84 44 c4 25 6d 2d c5 58 d2 81 1e 9b ca 87 d0 e1 03 30 b7 1b 4c 8f 71 1c bd 49 29 21 66 1f 57 4d d3 04 7b 6a 90 c3 92 38 df e1 cc 80 ba d2 b0 07 29 35 2b a6 82 d3 2f a4 dc 10 1a 74 31 f7 07 1d 57 f3 16 40 8c 44 d6 d2 b9 40 dc 09 c4 e7 81 d8 9a d2 0c 82 ad 46 b1 42 13 f7 07 e2 4d c4 96 c7 d7 49 a8 50 37 e2 52 cb 42 85 1a 1a a6 8f 11 97 c1 ff 09 25 7e 26 26 26 06 25 25 25 a2 0c 67 42 aa 59 09 66 57 22 b2 fc 7f 74 83 bf 90 52 ba 11 30 dc 8f 56 95 e9 46 98 c1 ff 69 60 38 cd aa 7f fc Data Ascii: Smm}H8/IW?pPBQ[YQG ZEifqLK*id)T$UnbOeD%m-X0LqI)!fWM{j8)5+/t1W@D@FBMIP7RB%~&&&%%%gBYfW"tR0VFi`8
2024-05-27 22:42:22 UTC	1390	IN	Data Raw: 1c ed 96 95 9c d7 24 56 d8 4f e1 73 2b 6f e4 ee 48 ce b5 69 b1 d1 96 62 d9 f1 49 ee 25 3b d1 a3 62 a2 c7 f1 5d ba 24 f7 8e 8d 9e 50 39 70 c2 f1 de d9 24 57 28 7e f6 a8 9c d8 23 05 25 92 ce 3e d7 89 8c 6a de 54 ec 2c 98 14 cf a7 4c 7c 33 e5 92 2d db 8b 94 2e a1 32 64 a1 3f ea d6 8e da ce 78 e1 a2 f1 d5 d1 79 73 21 77 dc b0 e5 19 e4 3f 9a 7a 25 25 38 1c c6 79 95 8a 18 4a e4 0e 6d ee 51 5d 95 dd 1d fe 5c 60 94 6c 55 65 41 7b 2f 02 b1 e2 e7 02 bd 3d 47 c9 c8 fb 3c 72 91 7b 07 b6 3c 50 91 37 9a 46 d6 a6 69 0a 04 cc df 54 72 0f 6d e7 fe 10 ba 16 1c 4d e6 71 82 dc 1b aa 60 02 37 71 72 6f 5d 58 c5 e9 2d 25 c1 ad 4c 6e e8 c2 62 d2 b1 38 05 7b a0 a1 20 77 d3 a5 55 13 e2 40 e5 dc 7e 79 d9 cb 03 65 6c 82 dc 33 97 16 5d 69 08 eb f5 ba d3 07 39 05 67 48 22 30 29 b1 e6 Data Ascii: $VOs+oHibI%;b]$P9p$W(~#%>jT,L\|3-.2d?xys!w?z%%8yJmQ]\`lUeA{/=G<r{<P7FiTrmMq`7qro]X-%Lnb8{ wU@~yel3]i9gH"0)
2024-05-27 22:42:22 UTC	19	IN	Data Raw: 84 7e d2 61 a4 d6 a5 4d 24 65 28 ac 9b 11 80 e2 87 d1 d1 Data Ascii: ~aM$e(
2024-05-27 22:42:22 UTC	1390	IN	Data Raw: c0 93 d1 a9 31 f6 78 85 b0 fc c3 48 dd 68 4f c5 ee 0d db 54 5d 5e f9 58 80 6d 5c 92 c5 20 04 b5 be 73 ac a9 4a c1 a6 60 e3 07 76 37 c5 c0 5d bb 00 bb 95 72 e0 ae 2d 80 2d a6 1c b8 ab 08 b0 07 29 07 ee 3a 50 be 8e 85 2f 2b 36 02 d5 6a 35 72 90 75 a4 5e c1 c6 41 51 04 7a cf 0d c2 12 93 74 04 0e 80 d8 b6 f2 8c 54 8f dd 19 8a dd e9 0e a0 b1 8b 53 60 3f 58 aa db 0a f0 2f ac c2 25 51 35 55 2a 15 e1 79 13 3c 97 3e 2d 2d ac bd bd fd 7f 42 21 09 ca 5b a5 2c 2c 41 45 58 83 8a 2c c1 70 03 6b 9a c0 91 7c 21 39 c5 32 e3 e0 18 27 3a fd 75 b3 c2 14 54 2a d5 5e 4e 8c 62 ce f3 f2 f2 19 5d db 88 85 6f 67 d5 54 a0 5e e2 98 bc 0d bf d2 ef c6 11 8b 3f 94 59 48 cf 43 13 72 28 e0 22 08 87 cb 77 e5 3a 54 27 5b c1 d3 30 4f c2 65 35 53 f2 27 c0 cd 34 60 8e 04 37 9d 63 e7 74 e5 13 Data Ascii: 1xHhOT]^Xm\ sJ`v7]r--):P/+6j5ru^AQztTS`?X/%Q5Uy<>--B![,,AEX,pk\|!92':uT^Nb]ogT^?YHCr("w:T'[0Oe5S'4`7ct
2024-05-27 22:42:22 UTC	1390	IN	Data Raw: 87 4f f0 4d 18 56 30 df aa 22 2d 0a 7f 3b 7c 1d 81 5a e6 5c b3 9a 71 e1 a3 30 74 d0 c3 aa 38 b1 48 bb 91 3c 2e cc 46 4a ab 96 cd 09 b3 02 7c f4 b5 2b 5b 89 8c c2 c6 b8 a4 7d d3 d8 26 9f bd be 77 ef 1e 85 02 a1 be 6e 62 1e 96 45 da a7 8c 6d 95 30 03 85 02 c1 be 6e 65 3e 96 24 ed 87 14 86 84 90 c2 7d b4 31 1f 8b 92 f6 2d 8a c4 30 bc 7f b2 56 88 c1 4a e6 65 41 d2 3e 66 6c 9d 04 2f 03 28 f3 0b 0d eb 98 9f 23 48 8b aa 9b 59 52 bc 14 5e de 17 9a af b3 98 9f 23 48 bb 5a 92 97 63 c6 8c 09 86 b4 81 f8 ba 7a 38 69 d1 c5 55 54 f7 c5 40 4e 03 e4 7c 84 af 01 60 26 f3 f4 01 69 17 49 f4 72 c2 84 09 e2 23 19 82 8f 79 58 64 49 8b e6 11 af 49 bd 6d 8e 1f 2f f6 8c 25 35 36 36 06 b5 0c 62 9e 36 81 b4 e8 76 f2 b8 54 2f 71 eb 44 70 25 12 56 a2 5f 25 00 9e be 04 d2 ce 96 ee 29 Data Ascii: OMV0"-;\|Z\q0t8H<.FJ\|+[}&wnbEm0ne>$}1-0VJeA>fl/(#HYR^#HZcz8iUT@N\|`&iIr#yXdIIm/%566b6vT/qDp%V_%)
2024-05-27 22:42:22 UTC	60	IN	Data Raw: be 19 e5 ff 9f a5 68 ff 7c 9a b1 a9 14 e5 26 db 8d 65 71 e8 1f 3d 05 90 56 ba 66 ec 8a b1 cb bc d6 fc 45 57 39 43 f8 1f 39 36 07 49 86 2e 42 8c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: h\|&eq=VfEW9C96I.BIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-27 22:42:22 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=149212 Date: Mon, 27 May 2024 22:42:22 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49754	34.117.33.233	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:23 UTC	356	OUT	GET /battery_info HTTP/1.1 Host: login-vip.replit.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:23 UTC	414	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Content-Length: 151 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Mon, 27 May 2024 22:42:23 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Powered-By: Express Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:23 UTC	151	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 62 61 74 74 65 72 79 5f 69 6e 66 6f 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /battery_info</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	34.117.33.233	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:23 UTC	636	OUT	GET /favicon.ico HTTP/1.1 Host: login-vip.replit.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:23 UTC	414	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Content-Length: 150 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Mon, 27 May 2024 22:42:23 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Powered-By: Express Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:23 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /favicon.ico</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:23 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-27 22:42:23 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=149294 Date: Mon, 27 May 2024 22:42:23 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-27 22:42:23 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49765	142.250.185.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:34 UTC	807	OUT	GET /yl0EzS1GixeU9QVLJtHu7hom-4PIHwYylP17hRk9_UasgFCCc6lo6E0-ReGn8R1ny3A=w36-h36 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:34 UTC	574	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 848 X-XSS-Protection: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 20:27:03 GMT Expires: Tue, 28 May 2024 20:27:03 GMT Cache-Control: public, max-age=86400, no-transform Age: 8131 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:34 UTC	816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 04 00 00 00 4b 09 50 13 00 00 00 02 73 42 49 54 08 08 55 ec 46 04 00 00 03 09 49 44 41 54 48 89 a5 96 4f 6f 13 57 10 c0 7f f3 f6 d5 4b 43 5b 8b 58 75 5b 0c 58 4a c2 8d 3f e9 81 9e 7a 6b d4 20 35 67 d2 f4 5c d1 7e 82 7e 88 7e 03 22 38 f7 cf 15 0e b1 14 8e 3d 54 39 04 52 6e 0d 48 86 b8 16 ad e2 ca 4e 81 ec b2 bb d3 c3 6e f0 ae f7 ad 13 89 f1 c1 f6 be 99 df 9b f7 66 76 66 04 b7 f8 7a 9e 2b 5c ef 5d 8b 5b 5a 07 19 7a bd d6 16 1b ec c8 33 02 97 81 38 9e 59 5d 63 65 77 c9 ce 7a 80 a2 80 20 40 4c 34 58 d8 e4 ae fc 4c 74 3c e8 92 de e9 2e 4a 0d b4 62 5f 0d db db f2 2d 8f a6 81 ea fa e3 ee cd 9a 13 51 34 0a 59 58 97 1f 18 ba 41 b3 fa d3 93 2f ed b1 98 d4 2c 62 ae 23 df 30 28 83 66 f5 d7 ee Data Ascii: PNGIHDR$$KPsBITUFIDATHOoWKC[Xu[XJ?zk 5g\~~~"8=T9RnHNnfvfz+\][Zz38Y]cewz @L4XLt<.Jb_-Q4YXA/,b#0(f
2024-05-27 22:42:34 UTC	32	IN	Data Raw: f6 ce 6e d1 e1 a1 ec b9 47 bf ff 01 59 4e 22 d7 bd 86 39 16 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: nGYN"9IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49781	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:35 UTC	521	OUT	GET /yl0EzS1GixeU9QVLJtHu7hom-4PIHwYylP17hRk9_UasgFCCc6lo6E0-ReGn8R1ny3A=w36-h36 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:36 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 792 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:36:45 GMT Expires: Tue, 28 May 2024 19:36:45 GMT Cache-Control: public, max-age=86400, no-transform Age: 11150 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:36 UTC	792	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 04 00 00 00 4b 09 50 13 00 00 00 02 73 42 49 54 08 08 55 ec 46 04 00 00 02 d1 49 44 41 54 48 89 a5 96 cd 4e 13 51 14 c7 7f e7 ce d8 41 94 34 d2 c8 47 f8 10 c2 16 01 17 3c 81 44 48 64 4d c5 b5 31 3e 81 0f c1 1b 40 60 2d ba 85 45 9b d4 27 60 21 22 db 06 f9 68 2a 24 d4 d0 0a 74 6a 67 ae 8b 8e 74 da de 19 30 9e ae 7a ee 99 df fd 9f 3b 67 ce 3d 82 d1 f2 8e 35 c2 94 5e 50 b3 7a 88 24 70 21 05 7f 47 32 ec 79 c7 13 ae e9 09 e9 74 9d da d7 cb 2c 32 47 af 21 be 44 8e 2d 67 73 b0 7e 2b e8 60 52 36 98 21 61 56 0a 40 8d 2f fa cd f8 7e 0c e8 30 a9 57 78 1b 83 08 db 9a bc 7f 72 61 04 1d f5 fa 1f 78 71 47 0c 40 56 bd 1e 2d 75 80 8e 7a fd 4f 3c ff 07 0c c0 67 96 c6 4a 2d a0 c3 a4 fe c8 7c 67 a4 e0 Data Ascii: PNGIHDR$$KPsBITUFIDATHNQA4G<DHdM1>@`-E'`!"h*$tjgt0z;g=5^Pz$p!G2yt,2G!D-gs~+`R6!aV@/~0WxraxqG@V-uzO<gJ-\|g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49784	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:36 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:36 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:36 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49785	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:36 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:36 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:36 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49788	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:36 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:36 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:36 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49789	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:36 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:36 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:36 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49790	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:36 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:42:37 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:36 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49791	142.250.185.132	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:36 UTC	930	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=QphGcVh1mOmlHDtuYg1zXG1ElRoQX41zjPzQBgxdoqcNeNEfx2jUSTy4EZ3q4IOFJs9Wt4Zy1pG0t4s1LaC3GZE8yHwF4nRQmG2OCPHQT6ZSISb0ZkhS8IDMTN6jQ43fWPDpYs2s2tnrpECwrRUeG_p72dvqFnCkeoUYTgVM_z5SpM64utaV
2024-05-27 22:42:37 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 22:42:36 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49795	142.250.185.110	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:36 UTC	1024	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=QphGcVh1mOmlHDtuYg1zXG1ElRoQX41zjPzQBgxdoqcNeNEfx2jUSTy4EZ3q4IOFJs9Wt4Zy1pG0t4s1LaC3GZE8yHwF4nRQmG2OCPHQT6ZSISb0ZkhS8IDMTN6jQ43fWPDpYs2s2tnrpECwrRUeG_p72dvqFnCkeoUYTgVM_z5SpM64utaV
2024-05-27 22:42:37 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 121628 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 21:26:05 GMT Expires: Sun, 25 May 2025 21:26:05 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 17:34:54 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 177391 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:37 UTC	474	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-05-27 22:42:37 UTC	1390	IN	Data Raw: 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 Data Ascii: n a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw E
2024-05-27 22:42:37 UTC	1390	IN	Data Raw: 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 77 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e Data Ascii: Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error("b`"+String(a));};va=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};wa="function"==typeof Object.assign?Object.
2024-05-27 22:42:37 UTC	1390	IN	Data Raw: 3b 74 68 69 73 2e 6c 73 3d 5b 5d 3b 74 68 69 73 2e 73 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 44 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 59 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 6a 4b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 59 64 61 3d 66 75 6e 63 74 69 Data Ascii: ;this.ls=[];this.sV=!1;var k=this.DF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.DF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Yda),reject:h(this.jK)}};e.prototype.Yda=functi
2024-05-27 22:42:37 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 6c 73 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 6c 73 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 73 50 28 74 68 69 73 2e 6c 73 5b 68 5d 29 3b 0a 74 68 69 73 2e 6c 73 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 41 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 44 46 28 29 3b 68 2e 42 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 44 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 Data Ascii: totype.G7=function(){if(null!=this.ls){for(var h=0;h<this.ls.length;++h)f.sP(this.ls[h]);this.ls=null}};var f=new b;e.prototype.Afa=function(h){var k=this.DF();h.By(k.resolve,k.reject)};e.prototype.Bfa=function(h,k){var l=this.DF();try{h.call(k,l.resolve
2024-05-27 22:42:37 UTC	1390	IN	Data Raw: 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 49 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d 7d 29 Data Ascii: gular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ia(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}})
2024-05-27 22:42:37 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 5f 2e 75 61 28 5b 5b 6b 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6c 2e 67 65 74 28 6b 29 7c 7c 31 21 3d 6c 2e 73 69 7a 65 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 32 21 3d 6c 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d Data Ascii: tion(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var k=Object.seal({x:4}),l=new a(_.ua([[k,"s"]]));if("s"!=l.get(k)\|\|1!=l.size\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|2!=l.size)return!1;var m
2024-05-27 22:42:37 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 0a 6e 3b 21 28 6e 3d 6d 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6e 3d 6e 2e 76 61 6c 75 65 2c 6b 2e 63 61 6c 6c 28 6c 2c 6e 5b 31 5d 2c 6e 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 Data Ascii: totype.values=function(){return e(this,function(k){return k.value})};c.prototype.forEach=function(k,l){for(var m=this.entries(),n;!(n=m.next()).done;)n=n.value,k.call(l,n[1],n[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(k,l)
2024-05-27 22:42:37 UTC	1390	IN	Data Raw: 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 75 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 32 21 3d 64 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 Data Ascii: ntries\|\|"function"!=typeof Object.seal)return!1;try{var c=Object.seal({x:4}),d=new a(_.ua([c]));if(!d.has(c)\|\|1!=d.size\|\|d.add(c)!=d\|\|1!=d.size\|\|d.add({x:4})!=d\|\|2!=d.size)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)retur
2024-05-27 22:42:37 UTC	1390	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 7d 29 3b 0a 6e 61 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 6e 75 6c 6c 21 3d 63 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 Data Ascii: :function(){return Ka(this,function(b,c){return c})}});na("Array.from",function(a){return a?a:function(b,c,d){c=null!=c?c:function(k){return k};var e=[],f="undefined"!=typeof Symbol&&Symbol.iterator&&b[Symbol.iterator];if("function"==typeof f){b=f.call(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49803	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:37 UTC	1004	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=QphGcVh1mOmlHDtuYg1zXG1ElRoQX41zjPzQBgxdoqcNeNEfx2jUSTy4EZ3q4IOFJs9Wt4Zy1pG0t4s1LaC3GZE8yHwF4nRQmG2OCPHQT6ZSISb0ZkhS8IDMTN6jQ43fWPDpYs2s2tnrpECwrRUeG_p72dvqFnCkeoUYTgVM_z5SpM64utaV
2024-05-27 22:42:37 UTC	910	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 34 38 31 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1716849754812",null,null,null,
2024-05-27 22:42:37 UTC	941	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd; expires=Tue, 26-Nov-2024 22:42:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:37 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 27 May 2024 22:42:37 GMT Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:37 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49805	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:37 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1722 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=K-J6GV-sPvZxvOIYHyoj9lodljHspTAGdWymkhcNrUNc09Ri5qQhyYo_IaXTqDeBdpqYTbTLVNZ7BqU1EJAdfkxtxewHvf0xeGMIKoAHL6Eq2X4iPS90atLO4D3hBjxF5pXJQ0kBI3jzUdezrW0PuTkRqyrmlisb4AkZCgT6vbKsrKRsrSB95g0BavkM
2024-05-27 22:42:37 UTC	1722	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 34 38 38 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849754883",null,null,null,
2024-05-27 22:42:37 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:37 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:37 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49806	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:37 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1228 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=K-J6GV-sPvZxvOIYHyoj9lodljHspTAGdWymkhcNrUNc09Ri5qQhyYo_IaXTqDeBdpqYTbTLVNZ7BqU1EJAdfkxtxewHvf0xeGMIKoAHL6Eq2X4iPS90atLO4D3hBjxF5pXJQ0kBI3jzUdezrW0PuTkRqyrmlisb4AkZCgT6vbKsrKRsrSB95g0BavkM
2024-05-27 22:42:37 UTC	1228	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 34 38 39 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849754899",null,null,null
2024-05-27 22:42:37 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:37 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:37 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49807	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:37 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1752 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=cv_oyEUYPE5c5YABhjO8qd-b28P-DJrikmevOJgNcSOFnyhr6_5SxdpYfb8TMAsJv7Sq8FRclsbpyQ7YRQm8CT3HA131rIZ5LlELbaclNEi7Vyx9f2VJ_cl6WgtPIMk4tBkGyl6pixTVRyrdmaUhd5Q3a4IPRdo3wde_32-Jos1Eg6AwZeHo2l6KpklW
2024-05-27 22:42:37 UTC	1752	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 35 30 30 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849755009",null,null,null,
2024-05-27 22:42:37 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:37 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:37 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49808	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:37 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1301 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=cv_oyEUYPE5c5YABhjO8qd-b28P-DJrikmevOJgNcSOFnyhr6_5SxdpYfb8TMAsJv7Sq8FRclsbpyQ7YRQm8CT3HA131rIZ5LlELbaclNEi7Vyx9f2VJ_cl6WgtPIMk4tBkGyl6pixTVRyrdmaUhd5Q3a4IPRdo3wde_32-Jos1Eg6AwZeHo2l6KpklW
2024-05-27 22:42:37 UTC	1301	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 35 30 31 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849755013",null,null,null
2024-05-27 22:42:37 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:37 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:37 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49810	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:37 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1724 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=cv_oyEUYPE5c5YABhjO8qd-b28P-DJrikmevOJgNcSOFnyhr6_5SxdpYfb8TMAsJv7Sq8FRclsbpyQ7YRQm8CT3HA131rIZ5LlELbaclNEi7Vyx9f2VJ_cl6WgtPIMk4tBkGyl6pixTVRyrdmaUhd5Q3a4IPRdo3wde_32-Jos1Eg6AwZeHo2l6KpklW
2024-05-27 22:42:37 UTC	1724	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 35 30 31 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849755017",null,null,null,
2024-05-27 22:42:37 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:37 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:37 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49815	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:38 UTC	670	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:38 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:38 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:38 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:38 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49814	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:38 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1753 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=cv_oyEUYPE5c5YABhjO8qd-b28P-DJrikmevOJgNcSOFnyhr6_5SxdpYfb8TMAsJv7Sq8FRclsbpyQ7YRQm8CT3HA131rIZ5LlELbaclNEi7Vyx9f2VJ_cl6WgtPIMk4tBkGyl6pixTVRyrdmaUhd5Q3a4IPRdo3wde_32-Jos1Eg6AwZeHo2l6KpklW
2024-05-27 22:42:38 UTC	1753	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 36 32 33 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849756236",null,null,null,
2024-05-27 22:42:38 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:38 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:38 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49817	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:38 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:38 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:38 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:38 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:38 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49816	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:38 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1263 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=cv_oyEUYPE5c5YABhjO8qd-b28P-DJrikmevOJgNcSOFnyhr6_5SxdpYfb8TMAsJv7Sq8FRclsbpyQ7YRQm8CT3HA131rIZ5LlELbaclNEi7Vyx9f2VJ_cl6WgtPIMk4tBkGyl6pixTVRyrdmaUhd5Q3a4IPRdo3wde_32-Jos1Eg6AwZeHo2l6KpklW
2024-05-27 22:42:38 UTC	1263	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 36 32 33 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849756239",null,null,null
2024-05-27 22:42:38 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:38 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:38 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49818	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:38 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1737 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:38 UTC	1737	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 37 30 37 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849757077",null,null,null,
2024-05-27 22:42:39 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:38 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:39 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49819	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:38 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1244 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:38 UTC	1244	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 37 30 37 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849757078",null,null,null
2024-05-27 22:42:38 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:38 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:38 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49820	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:38 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1244 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:38 UTC	1244	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 37 30 38 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849757080",null,null,null
2024-05-27 22:42:38 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:38 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:38 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49824	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:39 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:39 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:39 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:39 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:39 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49827	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:40 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:40 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:40 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:40 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:40 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49828	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:40 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1753 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:40 UTC	1753	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 39 32 35 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849759256",null,null,null,
2024-05-27 22:42:41 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:41 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:41 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49829	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:40 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1263 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:40 UTC	1263	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 35 39 32 35 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849759258",null,null,null
2024-05-27 22:42:41 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:41 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:41 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49830	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:41 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:41 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:41 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:41 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:41 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49833	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:42 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:42 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:42 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:42 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:42 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49834	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:43 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:43 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:43 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:43 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:43 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49837	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:44 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:44 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:44 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:44 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:44 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49842	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:46 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:46 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:46 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:46 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:46 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49849	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:47 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:47 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:47 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:47 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:47 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49850	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:48 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:48 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:48 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:48 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:48 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49853	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:49 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:49 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:49 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:49 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:49 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49857	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:50 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:50 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:42:50 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:50 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:42:50 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49858	142.250.185.132	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:50 UTC	1231	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:50 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:48:33 GMT Expires: Tue, 04 Jun 2024 19:48:33 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 10457 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:50 UTC	684	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-05-27 22:42:50 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<
2024-05-27 22:42:50 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-05-27 22:42:50 UTC	1390	IN	Data Raw: 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBF!4I
2024-05-27 22:42:50 UTC	576	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49860	142.250.185.68	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:51 UTC	652	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:51 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:48:33 GMT Expires: Tue, 04 Jun 2024 19:48:33 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 10458 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:42:51 UTC	684	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-05-27 22:42:51 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<
2024-05-27 22:42:51 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-05-27 22:42:51 UTC	1390	IN	Data Raw: 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBF!4I
2024-05-27 22:42:51 UTC	576	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49861	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:42:51 UTC	1298	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 947 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:42:51 UTC	947	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 31 36 38 34 39 37 36 35 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],558,[["1716849765000",null,null,null,
2024-05-27 22:42:52 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:42:52 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:42:52 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:42:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49878	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:00 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:00 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:00 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49880	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:01 UTC	1339	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1432 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:01 UTC	1432	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 36 38 34 39 37 37 38 35 33 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1716849778536",null,null,null
2024-05-27 22:43:01 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:01 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:01 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49882	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:01 UTC	1298	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 943 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:01 UTC	943	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 31 36 38 34 39 37 37 36 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],558,[["1716849776000",null,null,null,
2024-05-27 22:43:01 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:01 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:01 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49881	142.250.185.132	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:01 UTC	865	OUT	GET /support/accounts?hl=en HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:02 UTC	448	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/accounts/?hl=en Date: Mon, 27 May 2024 22:43:01 GMT Expires: Mon, 27 May 2024 22:43:01 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 239 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:02 UTC	239	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 2f 3f 68 6c 3d 65 6e 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/accounts/?hl=en">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49883	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:02 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:02 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:02 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:02 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:02 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49888	142.250.185.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:04 UTC	799	OUT	GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:04 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1393 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:13:19 GMT Expires: Tue, 28 May 2024 19:13:19 GMT Cache-Control: public, max-age=86400, no-transform Age: 12585 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:04 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 fe 49 44 41 54 78 da ec 5b 3b 6c 13 41 10 1d 3b 31 21 40 c0 40 04 11 bf 84 02 90 40 22 20 8a 14 80 f8 34 34 7c 4b 44 01 a6 80 12 02 12 0d 45 e2 82 86 06 28 41 22 9f 82 9a f0 69 68 20 11 a4 a0 40 c4 48 14 09 42 b2 f9 29 81 00 07 09 d8 c1 89 c3 be d3 06 2e e6 3e 7b 77 7b eb 0b f1 48 ab b3 6e c7 3b 3b 6f 67 f6 76 66 77 89 ca 54 a6 59 4d 11 d5 02 f7 5e 1a 6d 60 8f dd ac 1c 62 e5 30 7f dd c5 ca 1d 56 ba 1f 5e 5c 90 fe ef 00 60 4a 6f e1 ca 42 e9 2d 0e ec 7d 1c 8c 2e 06 46 df 8c 05 80 Data Ascii: PNGIHDR@@iqpHYstEXtSoftwareAdobe ImageReadyqe<IDATx[;lA;1!@@@" 44\|KDE(A"ih @HB).>{w{Hn;;ogvfwTYM^m`b0V^\`JoB-}.F
2024-05-27 22:43:04 UTC	535	IN	Data Raw: 78 cb c9 46 cf 8a 4f 11 fe 8f 02 10 93 6d a9 69 16 01 99 0e 7d 95 be 0e e8 b1 aa 98 53 53 f7 27 67 37 95 f4 f0 ab 7c 31 10 c6 64 09 64 41 a6 97 be fa 01 c0 f2 80 02 3a 54 15 5f a5 ff 3e 7f 74 a3 ab c8 cf 4d 84 88 b6 41 90 e5 90 24 ed 92 0e 00 df 76 4e 5b d5 23 85 8d 7c 9d cc 91 37 b3 04 c8 80 2c 1b 4a bb d9 22 77 bb 14 ee b4 ab 44 e6 76 34 17 dc 46 32 da 86 0c 3f 7d f4 0b 40 87 6d 63 6c 66 3e 77 2b 17 08 08 68 13 6d 0b ec 18 75 04 06 00 3f 8a 62 eb 5f af 87 0a 7a 47 07 bf c9 03 01 6d a1 4d b4 ed a4 bc db e3 32 5e a2 c1 6b 4e 0c e8 e8 e9 9b 59 ea 1d 98 f0 ad 3c da 40 5b 02 ca bb 36 7f 57 0b a1 a2 45 d1 23 12 3c 14 d5 58 5f 41 c7 77 c6 a8 71 4d 85 2b 19 a9 37 13 d4 f9 38 4f a9 8c 30 88 38 0e b3 c7 ad 2e 5e 77 86 92 a2 00 40 81 73 ac d4 2d 8a d0 be cd 0c 88 Data Ascii: xFOmi}SS'g7\|1ddA:T_>tMA$vN[#\|7,J"wDv4F2?}@mclf>w+hmu?b_zGmM2^kNY<@[6WE#<X_AwqM+78O08.^w@s-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49889	142.250.185.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:04 UTC	803	OUT	GET /RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w200 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:04 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 10420 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:38:11 GMT Expires: Tue, 28 May 2024 19:38:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 11093 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:04 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 9c ed 9d 7b 58 53 57 d6 ff bf 24 5c 02 84 00 16 84 d4 a0 c7 0b 2a b7 16 9d 97 12 0a 5a 3a 55 ac d6 b1 b6 42 41 9d 51 06 46 a7 37 2b a8 33 d3 e9 8d 6a db a9 be af 56 1d db 4e c7 0b b5 9d 5f 2f 56 18 6d 75 aa e2 8c a5 f5 42 a8 9d 8a b5 e2 15 3d ca b1 18 40 20 17 20 10 03 bf 3f 42 2c 48 38 09 c9 39 27 41 f6 e7 79 7c 24 c9 39 7b af 87 f0 3d 6b af bd d7 5e db a3 b3 b3 13 04 02 c1 3a 22 57 1b 40 20 b8 33 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 Data Ascii: PNGIHDRXpHYs~ IDATx{XSW$\*Z:UBAQF7+3jVN_/VmuB=@ ?B,H89'Ay\|$9{=k^:"W@ 3D D D D D D D D D D D D
2024-05-27 22:43:04 UTC	1390	IN	Data Raw: d6 af 5f 4f 84 62 07 03 59 20 34 80 11 00 46 fa ff f2 0b da de fb 28 8a 8a 1f 32 64 c8 f6 b6 b6 b6 b8 c1 26 8c db e9 2e 94 90 90 90 f7 eb eb eb 97 91 a9 e2 9e 0c c8 54 93 ae e1 d5 88 ae 97 d9 f6 dc 43 51 54 50 4a 4a ca 47 00 4e 2c 58 b0 e0 de b2 b2 32 51 5e 5e de a0 15 07 00 28 14 0a ac 5b b7 0e 47 8e 1c c1 e8 d1 a3 7f eb e3 e3 73 7d c2 84 09 7f 76 b5 5d ee c4 80 f4 20 cd 87 66 95 02 78 a0 eb a5 06 00 e5 ff cb 2f fa 7c f2 25 24 24 3c ad d5 6a df 8a 8f 8f f7 59 b7 6e dd 1d 1b 63 38 8b 4a a5 42 7e 7e 7e 47 5b 5b db b5 86 86 86 59 64 b5 7e 00 7a 90 e6 43 b3 66 e3 67 71 00 40 20 00 ab 81 3a 45 51 d4 c4 89 13 2b 5a 5a 5a 36 6d da b4 c9 67 c7 8e 1d 44 1c 2c 28 95 4a 94 95 95 89 16 2c 58 10 01 e0 44 52 52 d2 06 57 db e4 6a 06 94 07 69 3e 34 2b 08 00 0d b3 28 ba Data Ascii: _ObY 4F(2d&.TCQTPJJGN,X2Q^^([Gs}v] fx/\|%$$<jYnc8JB~~~G[[Yd~zCfgq@ :EQ+ZZZ6mgD,(J,XDRRWji>4+(
2024-05-27 22:43:04 UTC	1390	IN	Data Raw: 8e 70 27 8e ab cd 0c 0a 2f 7c 3c 20 c5 d1 de dc 86 a2 e7 fe 81 1f f7 9e 70 e8 7e ad 56 8b 79 f3 e6 e1 1f ff f8 07 c7 96 01 79 79 79 f0 f3 f3 1b 1e 17 17 b7 9a f3 c6 79 c6 ad 04 32 61 c2 84 3f 7b 7a 7a 46 59 82 f2 be 10 49 47 c1 43 32 f4 96 50 b8 e0 b0 ba 1c 1f 5d fa e7 80 88 35 ac b1 73 c9 87 b8 71 b9 0e 9d 1d 8e 8f 08 3a 3a 3a 50 50 50 c0 b9 48 64 32 19 d6 af 5f 2f d2 e9 74 7f ea 3a 3a 62 c0 e0 36 02 a1 28 8a 6a 69 69 29 58 bf 7e 7d af b8 c3 1a e2 e0 58 88 83 63 9d ee d7 60 6a 43 d1 95 bd 38 52 5b ee 74 5b ae e2 d0 da 2f d1 7c 43 cf 49 5b 16 91 a8 54 2a 4e da b3 a0 54 2a 91 93 93 83 d0 d0 d0 bd 9c 36 cc 33 6e 23 90 88 88 88 f7 26 4f 9e ec 63 ef 18 58 24 1d e5 74 2a 89 c1 d4 86 8f 2e 15 bb 7c 4d c3 19 7e 3a 55 8d 8b 87 cf 39 e5 39 6e a7 a3 a3 03 8b 17 2f Data Ascii: p'/\|< p~Vyyyyy2a?{zzFYIGC2P]5sq:::PPPHd2_/t::b6(jii)X~}Xc`jC8R[t[/\|CI[TNT63n#&OcX$t*.\|M~:U99n/
2024-05-27 22:43:04 UTC	1390	IN	Data Raw: 7a 7f cc 98 31 d8 b3 67 0f 86 0e ed 59 fc f1 e2 c5 8b f0 f6 f6 e6 cd 1e 3e 10 79 8a f0 ab 37 32 e0 ed ef 03 8d 51 c7 eb ef b3 3b 32 99 0c e3 c7 8f 37 c1 5c e1 df 6d 10 54 20 0c c3 dc cf e7 ac 88 a6 5d cb eb 8a b9 b7 bf 0f 32 de 59 88 f0 e8 bb e1 e9 6d 5e 42 4a 4b 4b c3 d6 ad d6 73 ee f4 7a 3d da db f9 4b 8c e4 12 0f b1 08 d2 d0 00 3c be 6e 7e 8f cc e2 e3 f5 dc ce 04 b2 f1 c4 13 4f 88 15 0a c5 53 82 75 68 07 82 2d 14 52 14 15 1f 16 16 e6 c1 e7 ec 95 10 4f bb 80 a1 32 3c ba 26 0b 3f ee 3d 81 90 c6 20 e4 3f bd b4 cf 6b 2b 2a 06 4e f1 87 d8 47 e2 f1 3f f3 92 e0 ed ef d3 e3 fd 5a 43 3d d4 86 3a 41 0a 69 2b 95 4a ac 59 b3 86 b7 43 94 1c 41 30 81 04 04 04 64 a5 a4 a4 f0 3a de 10 62 cc 6c 6c 69 47 f9 fb 47 30 25 2e 15 8f cd 65 1f 0d b8 da 7b 78 78 78 c0 43 2c 82 Data Ascii: z1gY>y72Q;27\mT ]2Ym^BJKKsz=K<n~OSuh-RO2<&?= ?k+*NG?ZC=:Ai+JYCA0d:blliGG0%.e{xxxC,
2024-05-27 22:43:04 UTC	1390	IN	Data Raw: 99 bf fa 15 e4 f2 bb 7b dc 6f 68 bb 33 3c aa 97 97 17 11 88 3b e1 17 ec 8f 73 9d 3f e2 d4 e9 53 fd 9a ea e5 03 a9 54 8a f8 f8 f8 5e a9 2a db b7 6f c7 cc 59 b3 71 fe fc 39 d4 d4 fc d4 4b 1c 00 70 f6 ec c0 aa 41 ec ee b8 7e f5 ca 8d 88 9d 35 01 1b 3f 7e 07 a5 47 9c cf 7e e5 83 2b 57 ae e2 e4 c9 0a 6c d9 fc 77 e4 2f 5b d1 eb f3 7d fb be 84 4e db f7 5a 85 b5 fd f4 04 76 88 40 ba e1 e5 e7 8d 87 9e 9f 81 03 f4 57 c8 5b b9 1c a7 4e 9f 72 b5 49 3d b8 79 f3 26 be 2e 2d c5 ff ad 7d cb ea 6c d5 bf 4b 4a d0 da da 77 d5 47 a3 c1 88 90 51 b6 37 7a 11 7e 66 c0 0b 44 22 f6 b1 7d 51 3f b9 e7 d1 89 f0 1d 1d 80 1b 8d ae dd 11 d8 9d f2 f2 6f f1 d0 d4 34 2c 5a fc 7b 6c d9 fc 77 ab d7 d4 d6 aa 59 db 10 7b 89 7b ed 39 ef 2f c3 fd f9 af b4 e8 4e 0c f8 18 24 cc 97 fb 8c 04 63 4b Data Ascii: {oh3<;s?ST^*oYq9KpA~5?~G~+Wlw/[}NZv@W[NrI=y&.-}lKJwGQ7z~fD"}Q?o4,Z{lwY{{9/N$cK
2024-05-27 22:43:04 UTC	1390	IN	Data Raw: 9d 40 00 eb 29 8a aa a0 28 4a b0 ca ef 82 09 84 a6 e9 8a a6 a6 a6 ce ca 4a fe 0f da 9c 14 96 c8 49 3b 51 8f df 8b e7 df 7c 81 93 b6 f8 e2 fe 84 fb 9d 2e 29 6a 8d 40 af 00 9b bf c7 ca ca 4a 64 66 66 a2 b0 50 d0 07 c9 bd 00 4a 29 8a ca 16 a2 33 41 37 4c 29 14 8a 63 7c c7 21 80 d9 8b 44 ca 46 39 dd 4e f0 f0 21 b8 2b 39 1c 9b b6 be cd 81 55 fc 10 c6 53 de 58 4a 18 fb 62 a8 45 1c 67 ce b8 a4 8a 4a 20 cc f1 49 36 df 1d 09 2a 90 aa aa aa 0f 3f fb ec 33 93 ed 2b 9d 67 aa 7c 32 27 fb 44 14 13 28 68 15 06 5e 3d 89 5e ef 5c 6d ef e6 2b 7d d7 e3 75 84 a1 92 10 d6 d8 c3 22 0e 9d 8e df 53 85 ed 80 77 91 08 bd e5 76 f7 d9 b3 67 c5 dd d3 36 f8 22 d0 5b 86 84 bb b8 d9 d7 31 2a 79 2c 86 cf 1a 8b 25 af e5 73 16 b8 1f 3e 7c 18 6f bc f1 06 9e 7f fe 79 a7 db f2 f4 e2 76 b6 7e Data Ascii: @)(JJI;Q\|.)j@JdffPJ)3A7L)c\|!DF9N!+9USXJbEgJ I6?3+g\|2'D(h^=^\m+}u"Swvg6"[1y,%s>\|oyv~
2024-05-27 22:43:04 UTC	1390	IN	Data Raw: 1e 1e 1e 55 02 a7 4c df 42 22 f6 41 fa 88 99 48 19 6a 7f 8a 7c fb 4f ad 08 0b eb 7b 66 c8 9d d8 b8 71 23 16 2f 5e dc 6b 4a bd b8 b8 d8 e6 bd a7 4f 9f b6 ab 8f be ea 83 95 97 97 a3 a4 a4 c4 ae 36 78 80 93 c3 5d dc e2 00 9d 9a 9a 9a 27 b7 6c d9 f2 ef f4 f4 74 b1 ab ca eb 4c 0a 4b c4 08 e9 30 ec ad 3e 68 73 1a 58 ea e3 2f 90 55 8e a3 d3 e9 b0 78 f1 e2 3e bd 80 5e af 47 69 69 29 52 53 53 fb 6c c3 1e af 1e 1d 1d 6d f5 38 38 00 d8 b6 6d 1b eb bd 8e 4e f1 ab 54 2a bb bc 1b 45 51 41 ce a6 9e b8 85 40 68 9a 2e 9d 34 69 d2 bf 57 ae 5c 39 6d cb 96 2d 2e b3 63 b8 bf 02 39 91 f3 70 a4 b6 9c b5 c6 56 47 47 87 80 56 f5 9f 83 07 0f 62 c5 8a 15 36 ff c0 2b 2a 2a 58 05 62 cf d0 48 c6 b2 a3 d1 d6 1f b1 a3 02 29 2c 2c b4 77 f8 17 0f a0 d4 a1 4e ba 70 f9 10 cb 42 75 75 f5 93 Data Ascii: ULB"AHj\|O{fq#/^kJO6x]'ltLK0>hsX/Ux>^Gii)RSSlm88mNTEQA@h.4iW\9m-.c9pVGGVb6+*XbH),,wNpBuu
2024-05-27 22:43:04 UTC	1223	IN	Data Raw: 9c a6 e9 fe cd 40 d8 c1 80 16 08 60 16 89 5e af 7f 64 e7 ce 9d 22 22 12 fe b1 37 fd c4 16 dd f7 91 70 90 a2 7f 12 40 2a d7 85 ab 81 01 18 83 dc 4e 79 79 f9 2c 6f 6f ef 97 32 32 32 4c ae a8 8e 32 18 f1 f0 f0 70 fa a9 da 3d cf cc 49 34 00 b2 f9 10 07 70 07 78 10 0b 14 45 cd 96 48 24 3b e6 cd 9b e7 ed 6e b9 5b 77 02 5a ad 16 99 99 99 50 ab d5 d5 0d 0d 0d 33 01 7c 08 f3 79 81 ae 44 03 b3 e7 e0 fc 5c 10 0b 03 de 83 58 a0 69 7a b7 c1 60 48 dc bd 7b 77 f5 f4 e9 d3 ef 98 1d 6d ee 80 4a a5 42 52 52 52 47 43 43 c3 9e 86 86 86 7b 68 9a fe 01 e6 ba 53 1f b8 d0 2c cb b0 8a 37 71 00 77 90 40 00 73 ee 56 43 43 c3 3d 0d 0d 0d 7b a6 4d 9b 66 72 61 c9 99 3b 86 0d 1b 36 20 2b 2b 0b de de de 2f 95 97 97 cf b2 0c 65 68 9a 6e ea aa 7f bb d2 05 66 7d 0e 01 c4 01 dc 41 43 ac db Data Ascii: @`^d""7p@*Nyy,oo222L2p=I4pxEH$;n[wZP3\|yD\Xiz`H{wmJBRRRGCC{hS,7qw@sVCC={Mfra;6 ++/ehnf}AC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49892	142.250.186.65	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:04 UTC	798	OUT	GET /WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72 HTTP/1.1 Host: lh4.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:04 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3279 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:25:04 GMT Expires: Tue, 28 May 2024 22:25:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 1080 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:04 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 06 00 00 00 55 ed b3 47 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRHHUGtEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-05-27 22:43:04 UTC	1390	IN	Data Raw: 34 30 37 32 30 36 38 31 31 38 32 32 41 42 46 35 43 35 37 38 32 39 37 46 34 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 2a 9b 50 3d 00 00 08 fd 49 44 41 54 78 da ec 9c 5b 6c db d6 19 c7 3f 4a d6 cd b2 e4 c4 8e a2 34 0a 6c 27 ce c5 52 62 e7 d6 66 5d 8b d6 2d da b4 28 5a e4 a5 2f 7d 28 8a ee a1 2f 43 31 74 ef c3 b0 3d 0d 03 86 3e b4 68 1f 9b 01 03 d6 a0 40 d0 a1 d8 5a 60 5b d1 f4 66 14 4d b7 3a 48 e2 4b d2 18 89 63 2b be 25 b6 ac 0b 75 e1 65 e7 90 3c d4 21 45 4a 14 45 cb f2 ac 0f 20 48 f1 72 68 fe f8 ff be f3 9d 8f a4 19 51 14 a1 6d e6 c6 b4 01 b5 01 b5 01 b5 01 b5 01 b5 01 b5 01 b5 01 51 b6 b4 70 43 14 05 Data Ascii: 407206811822ABF5C578297F4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*P=IDATx[l?J4l'Rbf]-(Z/}(/C1t=>h@Z`[fM:HKc+%ue<!EJE HrhQmQpC
2024-05-27 22:43:04 UTC	1030	IN	Data Raw: 6a c0 81 42 06 0e 4d 5d 54 e1 e0 4a e3 be d8 1e 48 1c 3d 2e 15 bd ea 1d 98 e2 ba f4 d0 50 dc d1 02 be 25 40 58 45 6f 27 78 f1 d5 2b ee ca cc b8 02 88 0e 0e 79 54 a4 87 83 6c 74 f6 63 55 3d c1 ae 2e a9 0a d8 68 89 82 2e e0 e3 a0 5f ab 36 fd d0 de 3e 67 ea 41 af 1c 70 33 af 85 97 24 28 d2 c4 51 89 1f 6f 90 04 d2 70 a4 65 0a 8e c0 49 ae 15 99 f9 4a 29 6c f5 c1 53 a3 a3 8e d4 6f 88 e1 f8 35 3a fa 94 f4 84 c4 cc 8e 8f 1c 83 9f ff ac 7a 99 b7 ae 77 14 6f 4e 7f 2f 9e 5f e9 87 3f 24 a3 95 6a d1 bb 93 5e 35 d2 76 79 fe 46 78 06 5e f2 4e a2 8b 08 4b 2f 31 b9 dd ee 96 18 98 1e 3f 39 ca d8 72 31 da 7e b1 eb 0e 0c fb 57 e1 ad d9 03 b0 c4 7b 4d 72 1b 91 82 54 86 b3 d7 9d 86 df 84 ff 0b 31 77 06 3a 3a bc e0 f3 77 b6 04 1c 86 61 4c df 5c a9 ef f5 17 a4 06 97 c2 f8 80 3b Data Ascii: jBM]TJH=.P%@XEo'x+yTltcU=.h._6>gAp3$(QopeIJ)lSo5:zwoN/_?$j^5vyFx^NK/1?9r1~W{MrT1w::waL\;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49895	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:04 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1586 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:04 UTC	1586	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 33 31 35 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5c 22 61 63 63 6f 75 6e 74 73 5c 22 2c 5c 22 65 6e 5c 22 2c 5b 5b 35 35 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 65 6e 5c 22 2c 5b 5b 5c 22 43 6f 72 65 5f 4d 6f 64 75 6c 61 72 5f Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],860,[["1716849783150",null,null,null,null,null,null,"[[\"accounts\",\"en\",[[55]],null,null,null,null,null,null,null,null,\"en\",[[\"Core_Modular_
2024-05-27 22:43:05 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:05 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:05 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49894	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:04 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1107 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:04 UTC	1107	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 33 31 35 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 32 2c 33 2c 36 33 34 38 30 35 33 33 37 5d 2c 5b 6e 75 6c 6c 2c 31 5d 2c 5b 5c 22 36 33 38 35 32 34 34 36 35 35 32 35 34 35 39 36 32 30 2d 32 32 35 31 38 32 31 39 30 38 5c 22 2c 5c 22 31 32 32 34 38 30 30 33 37 33 5c 22 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 5c 22 31 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],1323,[["1716849783154",null,null,null,null,null,null,"[[[2,3,634805337],[null,1],[\"638524465525459620-2251821908\",\"1224800373\",null,0,null,\"1
2024-05-27 22:43:05 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:04 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:05 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49896	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:04 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1688 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:04 UTC	1688	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 33 31 38 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849783186",null,null,null,
2024-05-27 22:43:05 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:04 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:05 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49897	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:04 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1212 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:04 UTC	1212	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 33 31 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849783187",null,null,null
2024-05-27 22:43:05 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:04 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:05 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49900	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:04 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1689 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:04 UTC	1689	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 33 31 39 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849783196",null,null,null,
2024-05-27 22:43:05 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:05 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:05 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49899	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:04 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1254 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:04 UTC	1254	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 33 31 39 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849783197",null,null,null
2024-05-27 22:43:05 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:05 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:05 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49904	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:05 UTC	513	OUT	GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:05 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1393 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:13:25 GMT Expires: Tue, 28 May 2024 20:13:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 8980 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:05 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 fe 49 44 41 54 78 da ec 5b 3b 6c 13 41 10 1d 3b 31 21 40 c0 40 04 11 bf 84 02 90 40 22 20 8a 14 80 f8 34 34 7c 4b 44 01 a6 80 12 02 12 0d 45 e2 82 86 06 28 41 22 9f 82 9a f0 69 68 20 11 a4 a0 40 c4 48 14 09 42 b2 f9 29 81 00 07 09 d8 c1 89 c3 be d3 06 2e e6 3e 7b 77 7b eb 0b f1 48 ab b3 6e c7 3b 3b 6f 67 f6 76 66 77 89 ca 54 a6 59 4d 11 d5 02 f7 5e 1a 6d 60 8f dd ac 1c 62 e5 30 7f dd c5 ca 1d 56 ba 1f 5e 5c 90 fe ef 00 60 4a 6f e1 ca 42 e9 2d 0e ec 7d 1c 8c 2e 06 46 df 8c 05 80 Data Ascii: PNGIHDR@@iqpHYstEXtSoftwareAdobe ImageReadyqe<IDATx[;lA;1!@@@" 44\|KDE(A"ih @HB).>{w{Hn;;ogvfwTYM^m`b0V^\`JoB-}.F
2024-05-27 22:43:05 UTC	534	IN	Data Raw: cb c9 46 cf 8a 4f 11 fe 8f 02 10 93 6d a9 69 16 01 99 0e 7d 95 be 0e e8 b1 aa 98 53 53 f7 27 67 37 95 f4 f0 ab 7c 31 10 c6 64 09 64 41 a6 97 be fa 01 c0 f2 80 02 3a 54 15 5f a5 ff 3e 7f 74 a3 ab c8 cf 4d 84 88 b6 41 90 e5 90 24 ed 92 0e 00 df 76 4e 5b d5 23 85 8d 7c 9d cc 91 37 b3 04 c8 80 2c 1b 4a bb d9 22 77 bb 14 ee b4 ab 44 e6 76 34 17 dc 46 32 da 86 0c 3f 7d f4 0b 40 87 6d 63 6c 66 3e 77 2b 17 08 08 68 13 6d 0b ec 18 75 04 06 00 3f 8a 62 eb 5f af 87 0a 7a 47 07 bf c9 03 01 6d a1 4d b4 ed a4 bc db e3 32 5e a2 c1 6b 4e 0c e8 e8 e9 9b 59 ea 1d 98 f0 ad 3c da 40 5b 02 ca bb 36 7f 57 0b a1 a2 45 d1 23 12 3c 14 d5 58 5f 41 c7 77 c6 a8 71 4d 85 2b 19 a9 37 13 d4 f9 38 4f a9 8c 30 88 38 0e b3 c7 ad 2e 5e 77 86 92 a2 00 40 81 73 ac d4 2d 8a d0 be cd 0c 88 fa Data Ascii: FOmi}SS'g7\|1ddA:T_>tMA$vN[#\|7,J"wDv4F2?}@mclf>w+hmu?b_zGmM2^kNY<@[6WE#<X_AwqM+78O08.^w@s-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49905	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:05 UTC	517	OUT	GET /RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w200 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:05 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 10420 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:41:19 GMT Expires: Tue, 28 May 2024 22:41:19 GMT Cache-Control: public, max-age=86400, no-transform Age: 106 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:05 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 9c ed 9d 7b 58 53 57 d6 ff bf 24 5c 02 84 00 16 84 d4 a0 c7 0b 2a b7 16 9d 97 12 0a 5a 3a 55 ac d6 b1 b6 42 41 9d 51 06 46 a7 37 2b a8 33 d3 e9 8d 6a db a9 be af 56 1d db 4e c7 0b b5 9d 5f 2f 56 18 6d 75 aa e2 8c a5 f5 42 a8 9d 8a b5 e2 15 3d ca b1 18 40 20 17 20 10 03 bf 3f 42 2c 48 38 09 c9 39 27 41 f6 e7 79 7c 24 c9 39 7b af 87 f0 3d 6b af bd d7 5e db a3 b3 b3 13 04 02 c1 3a 22 57 1b 40 20 b8 33 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 Data Ascii: PNGIHDRXpHYs~ IDATx{XSW$\*Z:UBAQF7+3jVN_/VmuB=@ ?B,H89'Ay\|$9{=k^:"W@ 3D D D D D D D D D D D D
2024-05-27 22:43:05 UTC	1390	IN	Data Raw: 5f 4f 84 62 07 03 59 20 34 80 11 00 46 fa ff f2 0b da de fb 28 8a 8a 1f 32 64 c8 f6 b6 b6 b6 b8 c1 26 8c db e9 2e 94 90 90 90 f7 eb eb eb 97 91 a9 e2 9e 0c c8 54 93 ae e1 d5 88 ae 97 d9 f6 dc 43 51 54 50 4a 4a ca 47 00 4e 2c 58 b0 e0 de b2 b2 32 51 5e 5e de a0 15 07 00 28 14 0a ac 5b b7 0e 47 8e 1c c1 e8 d1 a3 7f eb e3 e3 73 7d c2 84 09 7f 76 b5 5d ee c4 80 f4 20 cd 87 66 95 02 78 a0 eb a5 06 00 e5 ff cb 2f fa 7c f2 25 24 24 3c ad d5 6a df 8a 8f 8f f7 59 b7 6e dd 1d 1b 63 38 8b 4a a5 42 7e 7e 7e 47 5b 5b db b5 86 86 86 59 64 b5 7e 00 7a 90 e6 43 b3 66 e3 67 71 00 40 20 00 ab 81 3a 45 51 d4 c4 89 13 2b 5a 5a 5a 36 6d da b4 c9 67 c7 8e 1d 44 1c 2c 28 95 4a 94 95 95 89 16 2c 58 10 01 e0 44 52 52 d2 06 57 db e4 6a 06 94 07 69 3e 34 2b 08 00 0d b3 28 ba a3 01 Data Ascii: _ObY 4F(2d&.TCQTPJJGN,X2Q^^([Gs}v] fx/\|%$$<jYnc8JB~~~G[[Yd~zCfgq@ :EQ+ZZZ6mgD,(J,XDRRWji>4+(
2024-05-27 22:43:05 UTC	1390	IN	Data Raw: 27 8e ab cd 0c 0a 2f 7c 3c 20 c5 d1 de dc 86 a2 e7 fe 81 1f f7 9e 70 e8 7e ad 56 8b 79 f3 e6 e1 1f ff f8 07 c7 96 01 79 79 79 f0 f3 f3 1b 1e 17 17 b7 9a f3 c6 79 c6 ad 04 32 61 c2 84 3f 7b 7a 7a 46 59 82 f2 be 10 49 47 c1 43 32 f4 96 50 b8 e0 b0 ba 1c 1f 5d fa e7 80 88 35 ac b1 73 c9 87 b8 71 b9 0e 9d 1d 8e 8f 08 3a 3a 3a 50 50 50 c0 b9 48 64 32 19 d6 af 5f 2f d2 e9 74 7f ea 3a 3a 62 c0 e0 36 02 a1 28 8a 6a 69 69 29 58 bf 7e 7d af b8 c3 1a e2 e0 58 88 83 63 9d ee d7 60 6a 43 d1 95 bd 38 52 5b ee 74 5b ae e2 d0 da 2f d1 7c 43 cf 49 5b 16 91 a8 54 2a 4e da b3 a0 54 2a 91 93 93 83 d0 d0 d0 bd 9c 36 cc 33 6e 23 90 88 88 88 f7 26 4f 9e ec 63 ef 18 58 24 1d e5 74 2a 89 c1 d4 86 8f 2e 15 bb 7c 4d c3 19 7e 3a 55 8d 8b 87 cf 39 e5 39 6e a7 a3 a3 03 8b 17 2f e6 ac Data Ascii: '/\|< p~Vyyyyy2a?{zzFYIGC2P]5sq:::PPPHd2_/t::b6(jii)X~}Xc`jC8R[t[/\|CI[TNT63n#&OcX$t*.\|M~:U99n/
2024-05-27 22:43:05 UTC	1390	IN	Data Raw: cc 98 31 d8 b3 67 0f 86 0e ed 59 fc f1 e2 c5 8b f0 f6 f6 e6 cd 1e 3e 10 79 8a f0 ab 37 32 e0 ed ef 03 8d 51 c7 eb ef b3 3b 32 99 0c e3 c7 8f 37 c1 5c e1 df 6d 10 54 20 0c c3 dc cf e7 ac 88 a6 5d cb eb 8a b9 b7 bf 0f 32 de 59 88 f0 e8 bb e1 e9 6d 5e 42 4a 4b 4b c3 d6 ad d6 73 ee f4 7a 3d da db f9 4b 8c e4 12 0f b1 08 d2 d0 00 3c be 6e 7e 8f cc e2 e3 f5 dc ce 04 b2 f1 c4 13 4f 88 15 0a c5 53 82 75 68 07 82 2d 14 52 14 15 1f 16 16 e6 c1 e7 ec 95 10 4f bb 80 a1 32 3c ba 26 0b 3f ee 3d 81 90 c6 20 e4 3f bd b4 cf 6b 2b 2a 06 4e f1 87 d8 47 e2 f1 3f f3 92 e0 ed ef d3 e3 fd 5a 43 3d d4 86 3a 41 0a 69 2b 95 4a ac 59 b3 86 b7 43 94 1c 41 30 81 04 04 04 64 a5 a4 a4 f0 3a de 10 62 cc 6c 6c 69 47 f9 fb 47 30 25 2e 15 8f cd 65 1f 0d b8 da 7b 78 78 78 c0 43 2c 82 87 07 Data Ascii: 1gY>y72Q;27\mT ]2Ym^BJKKsz=K<n~OSuh-RO2<&?= ?k+*NG?ZC=:Ai+JYCA0d:blliGG0%.e{xxxC,
2024-05-27 22:43:05 UTC	1390	IN	Data Raw: fa 15 e4 f2 bb 7b dc 6f 68 bb 33 3c aa 97 97 17 11 88 3b e1 17 ec 8f 73 9d 3f e2 d4 e9 53 fd 9a ea e5 03 a9 54 8a f8 f8 f8 5e a9 2a db b7 6f c7 cc 59 b3 71 fe fc 39 d4 d4 fc d4 4b 1c 00 70 f6 ec c0 aa 41 ec ee b8 7e f5 ca 8d 88 9d 35 01 1b 3f 7e 07 a5 47 9c cf 7e e5 83 2b 57 ae e2 e4 c9 0a 6c d9 fc 77 e4 2f 5b d1 eb f3 7d fb be 84 4e db f7 5a 85 b5 fd f4 04 76 88 40 ba e1 e5 e7 8d 87 9e 9f 81 03 f4 57 c8 5b b9 1c a7 4e 9f 72 b5 49 3d b8 79 f3 26 be 2e 2d c5 ff ad 7d cb ea 6c d5 bf 4b 4a d0 da da 77 d5 47 a3 c1 88 90 51 b6 37 7a 11 7e 66 c0 0b 44 22 f6 b1 7d 51 3f b9 e7 d1 89 f0 1d 1d 80 1b 8d ae dd 11 d8 9d f2 f2 6f f1 d0 d4 34 2c 5a fc 7b 6c d9 fc 77 ab d7 d4 d6 aa 59 db 10 7b 89 7b ed 39 ef 2f c3 fd f9 af b4 e8 4e 0c f8 18 24 cc 97 fb 8c 04 63 4b 3b 5a Data Ascii: {oh3<;s?ST^*oYq9KpA~5?~G~+Wlw/[}NZv@W[NrI=y&.-}lKJwGQ7z~fD"}Q?o4,Z{lwY{{9/N$cK;Z
2024-05-27 22:43:05 UTC	1390	IN	Data Raw: 00 eb 29 8a aa a0 28 4a b0 ca ef 82 09 84 a6 e9 8a a6 a6 a6 ce ca 4a fe 0f da 9c 14 96 c8 49 3b 51 8f df 8b e7 df 7c 81 93 b6 f8 e2 fe 84 fb 9d 2e 29 6a 8d 40 af 00 9b bf c7 ca ca 4a 64 66 66 a2 b0 50 d0 07 c9 bd 00 4a 29 8a ca 16 a2 33 41 37 4c 29 14 8a 63 7c c7 21 80 d9 8b 44 ca 46 39 dd 4e f0 f0 21 b8 2b 39 1c 9b b6 be cd 81 55 fc 10 c6 53 de 58 4a 18 fb 62 a8 45 1c 67 ce b8 a4 8a 4a 20 cc f1 49 36 df 1d 09 2a 90 aa aa aa 0f 3f fb ec 33 93 ed 2b 9d 67 aa 7c 32 27 fb 44 14 13 28 68 15 06 5e 3d 89 5e ef 5c 6d ef e6 2b 7d d7 e3 75 84 a1 92 10 d6 d8 c3 22 0e 9d 8e df 53 85 ed 80 77 91 08 bd e5 76 f7 d9 b3 67 c5 dd d3 36 f8 22 d0 5b 86 84 bb b8 d9 d7 31 2a 79 2c 86 cf 1a 8b 25 af e5 73 16 b8 1f 3e 7c 18 6f bc f1 06 9e 7f fe 79 a7 db f2 f4 e2 76 b6 7e 66 c4 Data Ascii: )(JJI;Q\|.)j@JdffPJ)3A7L)c\|!DF9N!+9USXJbEgJ I6?3+g\|2'D(h^=^\m+}u"Swvg6"[1y,%s>\|oyv~f
2024-05-27 22:43:05 UTC	1390	IN	Data Raw: 1e 55 02 a7 4c df 42 22 f6 41 fa 88 99 48 19 6a 7f 8a 7c fb 4f ad 08 0b eb 7b 66 c8 9d d8 b8 71 23 16 2f 5e dc 6b 4a bd b8 b8 d8 e6 bd a7 4f 9f b6 ab 8f be ea 83 95 97 97 a3 a4 a4 c4 ae 36 78 80 93 c3 5d dc e2 00 9d 9a 9a 9a 27 b7 6c d9 f2 ef f4 f4 74 b1 ab ca eb 4c 0a 4b c4 08 e9 30 ec ad 3e 68 73 1a 58 ea e3 2f 90 55 8e a3 d3 e9 b0 78 f1 e2 3e bd 80 5e af 47 69 69 29 52 53 53 fb 6c c3 1e af 1e 1d 1d 6d f5 38 38 00 d8 b6 6d 1b eb bd 8e 4e f1 ab 54 2a bb bc 1b 45 51 41 ce a6 9e b8 85 40 68 9a 2e 9d 34 69 d2 bf 57 ae 5c 39 6d cb 96 2d 2e b3 63 b8 bf 02 39 91 f3 70 a4 b6 9c b5 c6 56 47 47 87 80 56 f5 9f 83 07 0f 62 c5 8a 15 36 ff c0 2b 2a 2a 58 05 62 cf d0 48 c6 b2 a3 d1 d6 1f b1 a3 02 29 2c 2c b4 77 f8 17 0f a0 d4 a1 4e ba 70 f9 10 cb 42 75 75 f5 93 df 7c Data Ascii: ULB"AHj\|O{fq#/^kJO6x]'ltLK0>hsX/Ux>^Gii)RSSlm88mNTEQA@h.4iW\9m-.c9pVGGVb6+*XbH),,wNpBuu\|
2024-05-27 22:43:05 UTC	1221	IN	Data Raw: e9 fe cd 40 d8 c1 80 16 08 60 16 89 5e af 7f 64 e7 ce 9d 22 22 12 fe b1 37 fd c4 16 dd f7 91 70 90 a2 7f 12 40 2a d7 85 ab 81 01 18 83 dc 4e 79 79 f9 2c 6f 6f ef 97 32 32 32 4c ae a8 8e 32 18 f1 f0 f0 70 fa a9 da 3d cf cc 49 34 00 b2 f9 10 07 70 07 78 10 0b 14 45 cd 96 48 24 3b e6 cd 9b e7 ed 6e b9 5b 77 02 5a ad 16 99 99 99 50 ab d5 d5 0d 0d 0d 33 01 7c 08 f3 79 81 ae 44 03 b3 e7 e0 fc 5c 10 0b 03 de 83 58 a0 69 7a b7 c1 60 48 dc bd 7b 77 f5 f4 e9 d3 ef 98 1d 6d ee 80 4a a5 42 52 52 52 47 43 43 c3 9e 86 86 86 7b 68 9a fe 01 e6 ba 53 1f b8 d0 2c cb b0 8a 37 71 00 77 90 40 00 73 ee 56 43 43 c3 3d 0d 0d 0d 7b a6 4d 9b 66 72 61 c9 99 3b 86 0d 1b 36 20 2b 2b 0b de de de 2f 95 97 97 cf b2 0c 65 68 9a 6e ea aa 7f bb d2 05 66 7d 0e 01 c4 01 dc 41 43 ac db 49 4e Data Ascii: @`^d""7p@*Nyy,oo222L2p=I4pxEH$;n[wZP3\|yD\Xiz`H{wmJBRRRGCC{hS,7qw@sVCC={Mfra;6 ++/ehnf}ACIN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49906	142.250.185.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:05 UTC	512	OUT	GET /WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72 HTTP/1.1 Host: lh4.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:05 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3279 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:14:59 GMT Expires: Tue, 28 May 2024 19:14:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 12486 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:05 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 06 00 00 00 55 ed b3 47 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRHHUGtEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-05-27 22:43:05 UTC	1390	IN	Data Raw: 37 34 30 37 32 30 36 38 31 31 38 32 32 41 42 46 35 43 35 37 38 32 39 37 46 34 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 2a 9b 50 3d 00 00 08 fd 49 44 41 54 78 da ec 9c 5b 6c db d6 19 c7 3f 4a d6 cd b2 e4 c4 8e a2 34 0a 6c 27 ce c5 52 62 e7 d6 66 5d 8b d6 2d da b4 28 5a e4 a5 2f 7d 28 8a ee a1 2f 43 31 74 ef c3 b0 3d 0d 03 86 3e b4 68 1f 9b 01 03 d6 a0 40 d0 a1 d8 5a 60 5b d1 f4 66 14 4d b7 3a 48 e2 4b d2 18 89 63 2b be 25 b6 ac 0b 75 e1 65 e7 90 3c d4 21 45 4a 14 45 cb f2 ac 0f 20 48 f1 72 68 fe f8 ff be f3 9d 8f a4 19 51 14 a1 6d e6 c6 b4 01 b5 01 b5 01 b5 01 b5 01 b5 01 b5 01 b5 01 51 b6 b4 70 43 14 Data Ascii: 7407206811822ABF5C578297F4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*P=IDATx[l?J4l'Rbf]-(Z/}(/C1t=>h@Z`[fM:HKc+%ue<!EJE HrhQmQpC
2024-05-27 22:43:05 UTC	1031	IN	Data Raw: 60 6a c0 81 42 06 0e 4d 5d 54 e1 e0 4a e3 be d8 1e 48 1c 3d 2e 15 bd ea 1d 98 e2 ba f4 d0 50 dc d1 02 be 25 40 58 45 6f 27 78 f1 d5 2b ee ca cc b8 02 88 0e 0e 79 54 a4 87 83 6c 74 f6 63 55 3d c1 ae 2e a9 0a d8 68 89 82 2e e0 e3 a0 5f ab 36 fd d0 de 3e 67 ea 41 af 1c 70 33 af 85 97 24 28 d2 c4 51 89 1f 6f 90 04 d2 70 a4 65 0a 8e c0 49 ae 15 99 f9 4a 29 6c f5 c1 53 a3 a3 8e d4 6f 88 e1 f8 35 3a fa 94 f4 84 c4 cc 8e 8f 1c 83 9f ff ac 7a 99 b7 ae 77 14 6f 4e 7f 2f 9e 5f e9 87 3f 24 a3 95 6a d1 bb 93 5e 35 d2 76 79 fe 46 78 06 5e f2 4e a2 8b 08 4b 2f 31 b9 dd ee 96 18 98 1e 3f 39 ca d8 72 31 da 7e b1 eb 0e 0c fb 57 e1 ad d9 03 b0 c4 7b 4d 72 1b 91 82 54 86 b3 d7 9d 86 df 84 ff 0b 31 77 06 3a 3a bc e0 f3 77 b6 04 1c 86 61 4c df 5c a9 ef f5 17 a4 06 97 c2 f8 80 Data Ascii: `jBM]TJH=.P%@XEo'x+yTltcU=.h._6>gAp3$(QopeIJ)lSo5:zwoN/_?$j^5vyFx^NK/1?9r1~W{MrT1w::waL\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49908	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:05 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1690 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:05 UTC	1690	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 33 32 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849783200",null,null,null,
2024-05-27 22:43:05 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:05 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:05 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49909	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:05 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:06 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:05 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:06 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:06 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49912	142.250.185.132	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:05 UTC	938	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:06 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 22:43:06 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49913	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:05 UTC	1004	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5306 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:05 UTC	5306	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 36 39 34 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 33 31 36 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],1694,[["1716849783169",null,null,null
2024-05-27 22:43:06 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:06 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:06 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49914	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:06 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:06 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:06 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:06 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:06 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49915	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:06 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1719 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:06 UTC	1719	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 35 31 37 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849785175",null,null,null,
2024-05-27 22:43:07 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:07 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:07 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49916	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:06 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1247 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:06 UTC	1247	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 35 31 37 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849785176",null,null,null
2024-05-27 22:43:07 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:06 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:07 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49918	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:07 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1703 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:07 UTC	1703	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 35 34 31 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849785418",null,null,null,
2024-05-27 22:43:07 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:07 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:07 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49919	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:07 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1228 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:07 UTC	1228	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 35 34 31 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849785419",null,null,null
2024-05-27 22:43:07 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:07 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:07 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49917	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:07 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1228 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:07 UTC	1228	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 35 34 32 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849785421",null,null,null
2024-05-27 22:43:07 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:07 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:07 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49921	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:07 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:07 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:07 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:07 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:07 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49923	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:08 UTC	1012	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:08 UTC	910	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 35 33 39 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1716849785390",null,null,null,
2024-05-27 22:43:08 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:08 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:08 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49924	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:08 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:08 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:08 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:08 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:08 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49925	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:08 UTC	670	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:09 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:09 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:09 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:09 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49927	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:09 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:09 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:09 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:09 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:09 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49929	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:09 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1719 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:09 UTC	1719	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 38 31 38 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849788180",null,null,null,
2024-05-27 22:43:10 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:10 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:10 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49928	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:09 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1247 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:09 UTC	1247	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 38 38 31 38 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849788181",null,null,null
2024-05-27 22:43:10 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:10 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:10 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49930	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:10 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:10 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:10 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:10 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:10 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49931	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:11 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:11 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:11 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:11 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:11 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49932	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:12 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:12 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:12 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:12 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:12 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49933	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:13 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:13 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:13 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:13 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:13 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49935	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:14 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:14 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:14 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:14 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:14 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49937	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:14 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1720 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:14 UTC	1720	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 33 31 38 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849793185",null,null,null,
2024-05-27 22:43:15 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:15 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:15 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49936	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:14 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1248 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:14 UTC	1248	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 33 31 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849793187",null,null,null
2024-05-27 22:43:15 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:15 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:15 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49938	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:15 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:15 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:15 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:15 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:15 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49945	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:16 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:16 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:16 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:16 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:16 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49944	142.250.185.132	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:17 UTC	938	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:17 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 22:43:17 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49948	142.250.185.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:17 UTC	804	OUT	GET /9Y5oRPNXHvhG3TpmG0PTQ8lEEAJyuDiyMLujhC4R042jzmk6NUUE-IoF7XF2F5qLhDA=w895 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 22980 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:37:34 GMT Expires: Tue, 28 May 2024 19:37:34 GMT Cache-Control: public, max-age=86400, no-transform Age: 11143 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:17 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 10 08 06 00 00 00 20 43 c5 fd 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 9c ec dd 79 5c 94 e5 fa 3f f0 0f 8b 6c 03 88 a2 2c 32 34 0f 82 a6 18 82 e5 82 81 82 95 a2 d5 51 4a d4 ac 93 e2 76 b2 d4 a2 ac 9f 59 99 98 16 f6 ed 98 a4 d9 69 b1 44 ad 4c 45 c5 4e 27 35 37 54 4c 50 4b 10 03 97 c1 9e 09 50 14 59 64 df f9 fd 31 33 34 c8 36 33 cc 3c f7 2c d7 fb f5 e2 95 ce f2 dc 57 9e ce f8 99 fb 7a ee fb b6 68 6e 6e 06 21 84 10 42 08 31 1f 96 ac 0b 20 84 10 42 08 21 c2 a2 00 48 08 21 84 10 62 66 28 00 12 42 08 21 84 98 19 0a 80 84 10 42 08 21 66 86 02 20 21 84 10 42 88 99 a1 00 48 08 21 84 10 62 66 28 00 12 42 08 21 84 98 19 0a 80 84 10 42 08 21 66 86 02 Data Ascii: PNGIHDR CpHYs~ IDATxy\?l,24QJvYiDLEN'57TLPKPYd13463<,Wzhnn!B1 B!H!bf(B!B!f !BH!bf(B!B!f
2024-05-27 22:43:17 UTC	1390	IN	Data Raw: 9a 36 74 36 6e 59 59 59 78 fc f1 c7 01 60 18 cf f3 e9 ac eb 21 84 18 16 6a 01 13 42 00 c8 17 7d f4 ec d9 33 e9 f5 d7 5f a7 f0 67 02 fc fd fd 11 13 13 83 3e 7d fa fc 8f 75 2d 84 10 c3 43 01 90 10 02 00 f0 f4 f4 8c 1d 38 70 a0 68 ee dc b9 ac 4b 21 3a a2 08 80 ee 01 01 01 6b 59 d7 42 08 31 2c d4 02 26 84 80 e3 38 17 3b 3b bb 5b 7b f7 ee b5 a1 d9 3f d3 92 9a 9a 8a e8 e8 e8 ba 9a 9a 1a 77 9e e7 4b 59 d7 43 08 31 0c 34 03 48 08 81 a7 a7 67 ec 13 4f 3c 41 e1 cf 04 05 07 07 23 30 30 d0 c6 d3 d3 33 96 75 2d 84 10 c3 41 01 90 10 33 c7 71 9c 4b 49 49 c9 8b f3 e6 cd 63 5d 0a d1 93 57 5f 7d 15 c5 c5 c5 0b 59 d7 41 08 31 1c 14 00 09 21 91 1c c7 59 d1 ec 9f e9 0a 0e 0e 46 ef de bd 7b 70 1c 17 c9 ba 16 42 88 61 a0 00 48 88 99 13 8b c5 2f ce 9f 3f df 8a 75 1d 44 bf 16 2c Data Ascii: 6t6nYYYx`!jB}3_g>}u-C8phK!:kYB1,&8;;[{?wKYC14HgO<A#003u-A3qKIIc]W_}YA1!YF{pBaH/?uD,
2024-05-27 22:43:17 UTC	1390	IN	Data Raw: 35 35 61 c5 8a 15 78 e8 a1 87 e0 ef ef af d6 7b ca ea 9a 91 5f de 8c b2 da e6 56 8f 3b db 5a c0 cb c9 02 ce 36 16 3a ab 8f 18 1e 45 78 8b 87 fc bc 5f 6d f4 84 7c fb 9c fd 00 62 78 9e e7 75 55 1b 21 2c 50 00 24 ed 92 5e 93 b6 09 7f aa 0e 1e 38 88 83 07 0e 52 10 24 9d 2a 2b 2b c3 ac 59 b3 74 1a fe 54 3d f3 cc 33 48 49 49 81 b3 b3 73 bb cf d7 36 02 d9 45 8d b8 70 ab 09 e5 75 cd ed be 46 a9 8f bd 05 86 b9 5b 61 b0 2b 35 46 4c 05 c7 71 41 90 9f ea 11 03 ed 83 df bd a6 00 98 c2 71 dc 09 c8 57 10 27 53 18 24 c6 88 02 20 69 d7 ee dd bb 3b 0c 7f aa 28 08 92 ce 2c 59 b2 04 75 75 75 7a bb 7e 59 59 19 56 af 5e 8d 8f 3e fa a8 cd 73 39 a5 4d 38 99 db d8 65 f0 53 ba 53 dd 8c c3 7c 03 52 6f 58 60 3c 67 05 b1 13 05 41 63 a3 b8 4f 2f 1c f2 8d df c3 a1 df ad 6e c2 14 3f e0 Data Ascii: 55ax{_V;Z6:Ex_m\|bxuU!,P$^8R$*++YtT=3HIIs6EpuF[a+5FLqAqW'S$ i;(,Yuuuz~YYV^>s9M8eSS\|RoX`<gAcO/n?
2024-05-27 22:43:17 UTC	1390	IN	Data Raw: d1 d4 fa 25 26 8f 02 a0 11 89 9a 1e 65 52 b3 65 a1 a1 a1 58 f2 f2 12 d6 65 10 1d 9b 30 61 02 f2 f2 f2 30 74 e8 50 f4 e8 d1 43 ef e3 59 58 5a 21 30 e2 d9 4e 5f 73 53 9a 81 dd ef ce 42 ca b7 ff d6 69 f0 53 72 15 fb 6a f5 be fc f2 66 41 4f 17 51 d9 9e 67 1f c7 71 b1 82 0d 6c 1c 92 3b f8 35 21 26 89 5a c0 46 64 cc 98 31 ac 4b d0 09 77 0f 77 cc 99 3b 07 93 26 4d 62 5d 0a d1 03 67 67 67 ac 5c b9 12 4b 97 2e c5 53 4f 3d 85 c4 c4 44 34 35 35 e9 65 2c 0b 4b 4b 8c 9e b1 b8 c3 f6 6f 45 d1 2d a4 ed fd 5c eb fb fb d4 d5 5b cb 00 08 c8 b7 87 09 72 13 ee 7e 49 15 31 a0 fb dc 54 25 43 d1 06 36 96 c5 1f b2 5c 19 07 20 48 f1 d3 9e 74 00 bc c4 5b d2 ed d3 4b 64 b9 b2 70 c5 38 2e 1d bc 24 19 40 ba c4 5b 42 ab a6 8d 04 05 40 22 18 0a 7e e6 63 c2 84 09 98 36 6d 1a ce 9c 39 03 Data Ascii: %&eReXe0a0tPCYXZ!0N_sSBiSrjfAOQgql;5!&ZFd1Kww;&Mb]ggg\K.SO=D455e,KKoE-\[r~I1T%C6\ Ht[Kdp8.$@[B@"~c6m9
2024-05-27 22:43:17 UTC	1390	IN	Data Raw: 4e 96 2e 5d 8a e1 c3 87 e3 bd f7 de 43 73 73 db 15 bd 95 45 b7 da 3c d6 11 f9 9f 15 85 40 2d 25 40 cb d6 af 01 49 82 e9 87 3f a5 d9 b2 5c 59 b2 c4 5b 92 c0 ba 10 73 45 9f 32 a4 43 7e 03 fc b0 6b f7 2e 9c 3a 75 0a d2 6b 52 00 80 a3 a3 23 26 3d 3e 89 82 1f e9 54 59 9d 7c 36 2b 5f 87 5b 9c 4c 79 f3 3f 38 b7 ff 4b 48 cf 1e d1 d9 35 b5 51 5e 5e 8e f4 f4 f4 56 47 dd 85 85 85 e1 dd 77 df ed 30 04 6a 22 bb a8 09 b5 8d f2 10 68 cb 64 7f 68 e3 a3 d2 fa 35 da 45 06 8a 85 18 9a 6e b9 62 ec b6 c8 72 65 e9 ba d8 a8 9a 68 8e 02 20 e9 d2 98 31 63 4c e6 14 12 a2 7f 69 37 1a 71 e1 76 23 ea 74 bd b0 d5 02 f8 4b 4f ab 7c 35 75 f9 f2 e5 36 8f 29 43 e0 ea d5 ab 5b b5 83 7b 89 fb 6b 7c fd eb a5 4d d8 92 59 87 61 6e 56 18 d5 8f 52 60 67 4c a4 f5 cb 41 7f 2b 70 0d 5d 3c 80 70 d6 Data Ascii: N.]CssE<@-%@I?\Y[sE2C~k.:ukR#&=>TY\|6+_[Ly?8KH5Q^^VGw0j"hdh5Enbreh 1cLi7qv#tKO\|5u6)C[{k\|MYanVR`gLA+p]<p
2024-05-27 22:43:17 UTC	1390	IN	Data Raw: b2 5c 59 3a e4 1b a1 12 c8 ef f7 db bd 7b 37 0e 1e 38 88 29 91 53 ae bc b6 f4 b5 60 0a 7f c6 e9 d6 f5 4b ed 3e 5e 53 53 83 af be fa aa d5 3d 78 21 21 21 f8 f0 c3 0f 71 ee dc 39 14 17 17 eb a5 9e c0 c0 40 ac 5e bd 1a 0b 16 2c 40 74 74 74 ab e7 3c 3c 3c b0 7a f5 6a 8d ae b7 6e d5 9b 88 7e e9 55 9c da fe 11 c6 3c ff 86 0e 2b 35 3d 1c c7 85 43 de f6 a5 96 29 21 3a 44 01 d0 88 49 bc 25 f1 b2 5c 59 12 14 07 a1 03 e8 29 e4 f8 07 0e 1c 40 c1 cd b6 7b 9f 09 a9 a0 a0 00 05 37 0b 70 ed da 35 38 3a 39 22 28 28 28 ff ed 77 de 7e 7d c1 fc 05 3f 30 2d cc c4 39 db 5a e8 f5 fa 15 c5 b7 db 3c e6 e8 e8 88 90 90 90 56 e1 4f 69 d1 a2 45 98 3c 79 b2 4e 6b 10 89 44 08 0d 0d c5 c4 89 13 11 18 18 88 ad 5b b7 c2 d1 d1 51 ad 59 3e 75 c4 7f b8 06 2f 2c 8e c1 b5 b4 c3 5a 6d 0f 23 76 Data Ascii: \Y:{78)S`K>^SS=x!!!q9@^,@ttt<<<zjn~U<+5=C)!:DI%\Y)@{7p58:9"(((w~}?0-9Z<VOiE<yNkD[QY>u/,Zm#v
2024-05-27 22:43:17 UTC	1390	IN	Data Raw: 4e 2a 95 1a 6d 00 bc cf c7 17 25 b9 39 5d b6 bc 55 15 56 e9 fe cf 9a b1 04 98 71 eb f7 1e 09 ba be e0 81 03 07 b0 f1 93 8d a8 ac ac 6c f5 78 7a 7a 3a 12 77 27 22 28 28 08 ef c7 bd af eb 61 35 11 28 cb 95 c5 48 bc 25 74 0f 20 03 b4 08 84 10 a2 b5 9c 52 dd ee 01 a8 24 19 fa 30 ec 9c 7a 75 f9 ba f4 74 f6 27 47 55 54 54 60 d3 a6 4d 1a 6f e8 ec e8 e8 88 ba ea 2a 8d de 53 d7 68 3a 21 50 d1 fa 0d 82 99 ad fa 6d 8f 2c 57 16 0d 1d df ff 77 e0 c0 01 ac fd 60 6d 9b f0 a7 2a 3d 3d 1d d3 a3 a6 a3 b8 b8 58 97 43 6b 2a 56 96 2b d3 cb ec 27 e9 1c 05 40 42 88 d6 ae eb 29 00 02 c0 e0 d0 27 f5 76 6d 5d 2b 28 28 c0 cc 99 33 b1 69 d3 26 64 64 64 b4 fc 9c 3e 7d 1a 9b 36 6d c2 cc 99 33 91 93 93 a3 93 b1 d2 6f 37 ea e4 3a 2c 71 1c c7 81 5a bf aa 62 75 79 b1 f4 0b e9 58 fb c1 5a Data Ascii: Nm%9]UVqlxzz:w'"((a5(H%t R$0zut'GUTT`MoSh:!Pm,Ww`m==XCkV+'@B)'vm]+((3i&ddd>}6m3o7:,qZbuyXZ
2024-05-27 22:43:17 UTC	1390	IN	Data Raw: 5c b8 70 a1 65 ab 17 bf 01 7e 18 36 6c 18 1c 1d bb 37 13 ad 07 32 89 b7 84 63 5d 84 b9 a0 00 48 ba a4 f8 20 8f 81 3c f4 ed 87 3c e4 a5 ab de d0 cd 71 5c 38 e4 df b0 63 20 ff c0 dd 0a 20 86 66 05 81 b9 4b d6 84 de 2d b9 b5 b4 e4 ce 8d e0 eb 97 7f f3 00 80 5e 7d fa c1 cf 7f 24 bc 24 83 d0 4f 32 08 5e dc 60 d8 3b 38 69 3d 86 34 eb 2c 4a ee e4 23 9f bf 0c 69 f6 59 dc 90 5d 01 00 88 7d fc 4b dd bd 7c 93 7b f6 72 5f f7 cd c6 77 52 ee 7d 5f 77 02 20 00 7c 9e 5e 87 3a 03 d8 8e 64 cb 92 08 1c 3b 76 4c 27 d7 3a 74 e8 10 1c 1d 1d 11 12 12 d2 ed 6b 1d 4f 4b 47 fc bf 3f 84 df c8 09 08 7a bc fb f7 fd 01 f2 f6 ef 9c 80 f6 f7 45 54 87 10 01 50 d1 fa bd 00 60 18 8b d9 bf ca 63 93 e3 01 bc a2 e6 cb ef 02 08 17 7a 36 50 b1 09 f4 05 21 c7 34 02 27 24 de 92 70 d6 45 98 0b 0a Data Ascii: \pe~6l72c]H <<q\8c fK-^}$$O2^`;8i=4,J#iY]}K\|{r_wR}_w \|^:d;vL':tkOKG?zETP`cz6P!4'$pE
2024-05-27 22:43:17 UTC	1390	IN	Data Raw: 8f 68 c5 82 af 04 d0 fe 9f da 62 32 63 6a 60 64 12 6f 89 90 f7 5e 12 50 00 24 7f 8b 01 10 4f 1f e0 ed 9b fd 52 ec 8c 0b bf fe 7c 39 27 fb 7c d0 9c d7 36 62 ee d2 4f d1 bb af 17 eb b2 74 ce de c1 09 91 b3 96 e3 a5 77 12 70 29 e3 2c c6 47 4c c2 d9 df 2e 69 75 ad b1 de 56 18 cf 19 ff 5d 26 8b 16 2d 6a f5 fb 3a 3d cf 02 8e e7 ac 31 aa 9f 51 85 e7 58 00 3c ab d6 af 0a 5e 07 d7 c8 d0 c1 35 34 22 f1 96 a4 83 66 01 63 59 17 60 8e 28 00 12 70 1c 17 09 f9 bd 33 09 7a 1a 22 08 ba f9 70 66 e2 d9 f9 cb e2 d2 8e 27 ee b0 b6 b1 b1 7f 3d 6e 2f f3 2d 5d 84 e0 e7 3f 12 2b 36 1c 41 bf fb 06 61 fa d4 27 f1 f9 37 3b b5 ba 8e fc fe 35 a3 0a 33 6d 78 78 78 60 f6 ec d9 00 00 f7 fb fa a3 e8 46 8e de c6 ea ee 1e 7f 42 33 90 d6 2f 00 40 71 9a 47 77 8f 43 4c ee 7e 25 5a 89 85 7c 2f Data Ascii: hb2cj`do^P$OR\|9'\|6bOtwp),GL.iuV]&-j:=1QX<^54"fcY`(p3z"pf'=n/-]?+6Aa'7;53mxxx`FB3/@qGwCL~%Z\|/
2024-05-27 22:43:17 UTC	1390	IN	Data Raw: f7 26 16 bf bd 16 b6 d6 16 78 65 f1 22 0c f3 f7 13 a0 4a c3 51 5a 5e 89 2f bf dd 8d 63 ff dd 83 d0 e7 5f 87 64 e8 c3 78 21 c8 46 d0 05 20 dd 08 80 46 d1 fa 35 55 b2 5c 59 34 e4 e1 ac bb 41 50 06 20 b6 a3 05 18 8a f6 73 0c 74 13 04 b7 2a c6 e2 bb 79 1d a2 07 14 00 09 38 8e 2b 85 fc 86 ee 04 2d df ef 02 79 f0 9b 0d e0 13 9e e7 63 74 58 9e 5e cd 8f 89 93 9c 3b 99 24 ed e3 7e 9f f5 a2 15 e6 be 19 bf 76 76 7c fe 16 2e 9d 3f 8a 1f 7f fa 19 03 fa 7b 77 f8 ba 94 94 14 7c f8 e1 87 78 e4 e9 59 88 9e 19 25 60 85 86 e7 42 96 14 6b 3f fc 10 12 1f 5f ac 7f 67 09 1c 1d 1d 05 1b 5b 9b 00 68 8c ad 5f 53 a5 98 11 8c 86 bc ad ad 6e 18 94 41 de e6 4d 50 9c 3c a2 ee 58 d1 90 ef 13 1b 0e f5 c3 e0 09 95 b1 e8 bf 15 03 46 01 90 28 bf d9 97 6a 73 bf 9e 62 d6 2f 16 8a 73 84 8d ad Data Ascii: &xe"JQZ^/c_dx!F F5U\Y4AP st*y8+-yctX^;$~vv\|.?{w\|xY%`Bk?_g[h_SnAMP<XF(jsb/s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49949	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:17 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:17 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:17 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:17 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:17 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49951	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:17 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1724 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:17 UTC	1724	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 36 30 35 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849796053",null,null,null,
2024-05-27 22:43:18 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:17 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:18 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49950	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:17 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1229 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:17 UTC	1229	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 36 30 35 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849796057",null,null,null
2024-05-27 22:43:17 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:17 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:17 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49953	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:17 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1752 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:17 UTC	1752	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 36 31 31 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849796118",null,null,null,
2024-05-27 22:43:18 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:18 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:18 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49955	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:17 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1300 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:17 UTC	1300	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 36 31 32 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849796120",null,null,null
2024-05-27 22:43:18 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:18 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:18 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49954	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:17 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1726 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:17 UTC	1726	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 36 31 32 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849796124",null,null,null,
2024-05-27 22:43:18 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:18 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:18 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49960	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:18 UTC	518	OUT	GET /9Y5oRPNXHvhG3TpmG0PTQ8lEEAJyuDiyMLujhC4R042jzmk6NUUE-IoF7XF2F5qLhDA=w895 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:18 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 22980 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:33:36 GMT Expires: Tue, 28 May 2024 22:33:36 GMT Cache-Control: public, max-age=86400, no-transform Age: 582 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:18 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 10 08 06 00 00 00 20 43 c5 fd 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 9c ec dd 79 5c 94 e5 fa 3f f0 0f 8b 6c 03 88 a2 2c 32 34 0f 82 a6 18 82 e5 82 81 82 95 a2 d5 51 4a d4 ac 93 e2 76 b2 d4 a2 ac 9f 59 99 98 16 f6 ed 98 a4 d9 69 b1 44 ad 4c 45 c5 4e 27 35 37 54 4c 50 4b 10 03 97 c1 9e 09 50 14 59 64 df f9 fd 31 33 34 c8 36 33 cc 3c f7 2c d7 fb f5 e2 95 ce f2 dc 57 9e ce f8 99 fb 7a ee fb b6 68 6e 6e 06 21 84 10 42 08 31 1f 96 ac 0b 20 84 10 42 08 21 c2 a2 00 48 08 21 84 10 62 66 28 00 12 42 08 21 84 98 19 0a 80 84 10 42 08 21 66 86 02 20 21 84 10 42 88 99 a1 00 48 08 21 84 10 62 66 28 00 12 42 08 21 84 98 19 0a 80 84 10 42 08 21 66 86 02 Data Ascii: PNGIHDR CpHYs~ IDATxy\?l,24QJvYiDLEN'57TLPKPYd13463<,Wzhnn!B1 B!H!bf(B!B!f !BH!bf(B!B!f
2024-05-27 22:43:18 UTC	1390	IN	Data Raw: 74 36 6e 59 59 59 78 fc f1 c7 01 60 18 cf f3 e9 ac eb 21 84 18 16 6a 01 13 42 00 c8 17 7d f4 ec d9 33 e9 f5 d7 5f a7 f0 67 02 fc fd fd 11 13 13 83 3e 7d fa fc 8f 75 2d 84 10 c3 43 01 90 10 02 00 f0 f4 f4 8c 1d 38 70 a0 68 ee dc b9 ac 4b 21 3a a2 08 80 ee 01 01 01 6b 59 d7 42 08 31 2c d4 02 26 84 80 e3 38 17 3b 3b bb 5b 7b f7 ee b5 a1 d9 3f d3 92 9a 9a 8a e8 e8 e8 ba 9a 9a 1a 77 9e e7 4b 59 d7 43 08 31 0c 34 03 48 08 81 a7 a7 67 ec 13 4f 3c 41 e1 cf 04 05 07 07 23 30 30 d0 c6 d3 d3 33 96 75 2d 84 10 c3 41 01 90 10 33 c7 71 9c 4b 49 49 c9 8b f3 e6 cd 63 5d 0a d1 93 57 5f 7d 15 c5 c5 c5 0b 59 d7 41 08 31 1c 14 00 09 21 91 1c c7 59 d1 ec 9f e9 0a 0e 0e 46 ef de bd 7b 70 1c 17 c9 ba 16 42 88 61 a0 00 48 88 99 13 8b c5 2f ce 9f 3f df 8a 75 1d 44 bf 16 2c 58 60 Data Ascii: t6nYYYx`!jB}3_g>}u-C8phK!:kYB1,&8;;[{?wKYC14HgO<A#003u-A3qKIIc]W_}YA1!YF{pBaH/?uD,X`
2024-05-27 22:43:18 UTC	1390	IN	Data Raw: 61 c5 8a 15 78 e8 a1 87 e0 ef ef af d6 7b ca ea 9a 91 5f de 8c b2 da e6 56 8f 3b db 5a c0 cb c9 02 ce 36 16 3a ab 8f 18 1e 45 78 8b 87 fc bc 5f 6d f4 84 7c fb 9c fd 00 62 78 9e e7 75 55 1b 21 2c 50 00 24 ed 92 5e 93 b6 09 7f aa 0e 1e 38 88 83 07 0e 52 10 24 9d 2a 2b 2b c3 ac 59 b3 74 1a fe 54 3d f3 cc 33 48 49 49 81 b3 b3 73 bb cf d7 36 02 d9 45 8d b8 70 ab 09 e5 75 cd ed be 46 a9 8f bd 05 86 b9 5b 61 b0 2b 35 46 4c 05 c7 71 41 90 9f ea 11 03 ed 83 df bd a6 00 98 c2 71 dc 09 c8 57 10 27 53 18 24 c6 88 02 20 69 d7 ee dd bb 3b 0c 7f aa 28 08 92 ce 2c 59 b2 04 75 75 75 7a bb 7e 59 59 19 56 af 5e 8d 8f 3e fa a8 cd 73 39 a5 4d 38 99 db d8 65 f0 53 ba 53 dd 8c c3 7c 03 52 6f 58 60 3c 67 05 b1 13 05 41 63 a3 b8 4f 2f 1c f2 8d df c3 a1 df ad 6e c2 14 3f e0 38 4e Data Ascii: ax{_V;Z6:Ex_m\|bxuU!,P$^8R$*++YtT=3HIIs6EpuF[a+5FLqAqW'S$ i;(,Yuuuz~YYV^>s9M8eSS\|RoX`<gAcO/n?8N
2024-05-27 22:43:18 UTC	1390	IN	Data Raw: fa 25 26 8f 02 a0 11 89 9a 1e 65 52 b3 65 a1 a1 a1 58 f2 f2 12 d6 65 10 1d 9b 30 61 02 f2 f2 f2 30 74 e8 50 f4 e8 d1 43 ef e3 59 58 5a 21 30 e2 d9 4e 5f 73 53 9a 81 dd ef ce 42 ca b7 ff d6 69 f0 53 72 15 fb 6a f5 be fc f2 66 41 4f 17 51 d9 9e 67 1f c7 71 b1 82 0d 6c 1c 92 3b f8 35 21 26 89 5a c0 46 64 cc 98 31 ac 4b d0 09 77 0f 77 cc 99 3b 07 93 26 4d 62 5d 0a d1 03 67 67 67 ac 5c b9 12 4b 97 2e c5 53 4f 3d 85 c4 c4 44 34 35 35 e9 65 2c 0b 4b 4b 8c 9e b1 b8 c3 f6 6f 45 d1 2d a4 ed fd 5c eb fb fb d4 d5 5b cb 00 08 c8 b7 87 09 72 13 ee 7e 49 15 31 a0 fb dc 54 25 43 d1 06 36 96 c5 1f b2 5c 19 07 20 48 f1 d3 9e 74 00 bc c4 5b d2 ed d3 4b 64 b9 b2 70 c5 38 2e 1d bc 24 19 40 ba c4 5b 42 ab a6 8d 04 05 40 22 18 0a 7e e6 63 c2 84 09 98 36 6d 1a ce 9c 39 03 37 37 Data Ascii: %&eReXe0a0tPCYXZ!0N_sSBiSrjfAOQgql;5!&ZFd1Kww;&Mb]ggg\K.SO=D455e,KKoE-\[r~I1T%C6\ Ht[Kdp8.$@[B@"~c6m977
2024-05-27 22:43:18 UTC	1390	IN	Data Raw: 2e 5d 8a e1 c3 87 e3 bd f7 de 43 73 73 db 15 bd 95 45 b7 da 3c d6 11 f9 9f 15 85 40 2d 25 40 cb d6 af 01 49 82 e9 87 3f a5 d9 b2 5c 59 b2 c4 5b 92 c0 ba 10 73 45 9f 32 a4 43 7e 03 fc b0 6b f7 2e 9c 3a 75 0a d2 6b 52 00 80 a3 a3 23 26 3d 3e 89 82 1f e9 54 59 9d 7c 36 2b 5f 87 5b 9c 4c 79 f3 3f 38 b7 ff 4b 48 cf 1e d1 d9 35 b5 51 5e 5e 8e f4 f4 f4 56 47 dd 85 85 85 e1 dd 77 df ed 30 04 6a 22 bb a8 09 b5 8d f2 10 68 cb 64 7f 68 e3 a3 d2 fa 35 da 45 06 8a 85 18 9a 6e b9 62 ec b6 c8 72 65 e9 ba d8 a8 9a 68 8e 02 20 e9 d2 98 31 63 4c e6 14 12 a2 7f 69 37 1a 71 e1 76 23 ea 74 bd b0 d5 02 f8 4b 4f ab 7c 35 75 f9 f2 e5 36 8f 29 43 e0 ea d5 ab 5b b5 83 7b 89 fb 6b 7c fd eb a5 4d d8 92 59 87 61 6e 56 18 d5 8f 52 60 67 4c a4 f5 cb 41 7f 2b 70 0d 5d 3c 80 70 d6 45 98 Data Ascii: .]CssE<@-%@I?\Y[sE2C~k.:ukR#&=>TY\|6+_[Ly?8KH5Q^^VGw0j"hdh5Enbreh 1cLi7qv#tKO\|5u6)C[{k\|MYanVR`gLA+p]<pE
2024-05-27 22:43:18 UTC	1390	IN	Data Raw: 59 3a e4 1b a1 12 c8 ef f7 db bd 7b 37 0e 1e 38 88 29 91 53 ae bc b6 f4 b5 60 0a 7f c6 e9 d6 f5 4b ed 3e 5e 53 53 83 af be fa aa d5 3d 78 21 21 21 f8 f0 c3 0f 71 ee dc 39 14 17 17 eb a5 9e c0 c0 40 ac 5e bd 1a 0b 16 2c 40 74 74 74 ab e7 3c 3c 3c b0 7a f5 6a 8d ae b7 6e d5 9b 88 7e e9 55 9c da fe 11 c6 3c ff 86 0e 2b 35 3d 1c c7 85 43 de f6 a5 96 29 21 3a 44 01 d0 88 49 bc 25 f1 b2 5c 59 12 14 07 a1 03 e8 29 e4 f8 07 0e 1c 40 c1 cd b6 7b 9f 09 a9 a0 a0 00 05 37 0b 70 ed da 35 38 3a 39 22 28 28 28 ff ed 77 de 7e 7d c1 fc 05 3f 30 2d cc c4 39 db 5a e8 f5 fa 15 c5 b7 db 3c e6 e8 e8 88 90 90 90 56 e1 4f 69 d1 a2 45 98 3c 79 b2 4e 6b 10 89 44 08 0d 0d c5 c4 89 13 11 18 18 88 ad 5b b7 c2 d1 d1 51 ad 59 3e 75 c4 7f b8 06 2f 2c 8e c1 b5 b4 c3 5a 6d 0f 23 76 32 fd Data Ascii: Y:{78)S`K>^SS=x!!!q9@^,@ttt<<<zjn~U<+5=C)!:DI%\Y)@{7p58:9"(((w~}?0-9Z<VOiE<yNkD[QY>u/,Zm#v2
2024-05-27 22:43:18 UTC	1390	IN	Data Raw: 95 1a 6d 00 bc cf c7 17 25 b9 39 5d b6 bc 55 15 56 e9 fe cf 9a b1 04 98 71 eb f7 1e 09 ba be e0 81 03 07 b0 f1 93 8d a8 ac ac 6c f5 78 7a 7a 3a 12 77 27 22 28 28 08 ef c7 bd af eb 61 35 11 28 cb 95 c5 48 bc 25 74 0f 20 03 b4 08 84 10 a2 b5 9c 52 dd ee 01 a8 24 19 fa 30 ec 9c 7a 75 f9 ba f4 74 f6 27 47 55 54 54 60 d3 a6 4d 1a 6f e8 ec e8 e8 88 ba ea 2a 8d de 53 d7 68 3a 21 50 d1 fa 0d 82 99 ad fa 6d 8f 2c 57 16 0d 1d df ff 77 e0 c0 01 ac fd 60 6d 9b f0 a7 2a 3d 3d 1d d3 a3 a6 a3 b8 b8 58 97 43 6b 2a 56 96 2b d3 cb ec 27 e9 1c 05 40 42 88 d6 ae eb 29 00 02 c0 e0 d0 27 f5 76 6d 5d 2b 28 28 c0 cc 99 33 b1 69 d3 26 64 64 64 b4 fc 9c 3e 7d 1a 9b 36 6d c2 cc 99 33 91 93 93 a3 93 b1 d2 6f 37 ea e4 3a 2c 71 1c c7 81 5a bf aa 62 75 79 b1 f4 0b e9 58 fb c1 5a b5 5e Data Ascii: m%9]UVqlxzz:w'"((a5(H%t R$0zut'GUTT`MoSh:!Pm,Ww`m==XCk*V+'@B)'vm]+((3i&ddd>}6m3o7:,qZbuyXZ^
2024-05-27 22:43:18 UTC	1390	IN	Data Raw: 70 a1 65 ab 17 bf 01 7e 18 36 6c 18 1c 1d bb 37 13 ad 07 32 89 b7 84 63 5d 84 b9 a0 00 48 ba a4 f8 20 8f 81 3c f4 ed 87 3c e4 a5 ab de d0 cd 71 5c 38 e4 df b0 63 20 ff c0 dd 0a 20 86 66 05 81 b9 4b d6 84 de 2d b9 b5 b4 e4 ce 8d e0 eb 97 7f f3 00 80 5e 7d fa c1 cf 7f 24 bc 24 83 d0 4f 32 08 5e dc 60 d8 3b 38 69 3d 86 34 eb 2c 4a ee e4 23 9f bf 0c 69 f6 59 dc 90 5d 01 00 88 7d fc 4b dd bd 7c 93 7b f6 72 5f f7 cd c6 77 52 ee 7d 5f 77 02 20 00 7c 9e 5e 87 3a 03 d8 8e 64 cb 92 08 1c 3b 76 4c 27 d7 3a 74 e8 10 1c 1d 1d 11 12 12 d2 ed 6b 1d 4f 4b 47 fc bf 3f 84 df c8 09 08 7a bc fb f7 fd 01 f2 f6 ef 9c 80 f6 f7 45 54 87 10 01 50 d1 fa bd 00 60 18 8b d9 bf ca 63 93 e3 01 bc a2 e6 cb ef 02 08 17 7a 36 50 b1 09 f4 05 21 c7 34 02 27 24 de 92 70 d6 45 98 0b 0a 80 a4 Data Ascii: pe~6l72c]H <<q\8c fK-^}$$O2^`;8i=4,J#iY]}K\|{r_wR}_w \|^:d;vL':tkOKG?zETP`cz6P!4'$pE
2024-05-27 22:43:18 UTC	1390	IN	Data Raw: c5 82 af 04 d0 fe 9f da 62 32 63 6a 60 64 12 6f 89 90 f7 5e 12 50 00 24 7f 8b 01 10 4f 1f e0 ed 9b fd 52 ec 8c 0b bf fe 7c 39 27 fb 7c d0 9c d7 36 62 ee d2 4f d1 bb af 17 eb b2 74 ce de c1 09 91 b3 96 e3 a5 77 12 70 29 e3 2c c6 47 4c c2 d9 df 2e 69 75 ad b1 de 56 18 cf 19 ff 5d 26 8b 16 2d 6a f5 fb 3a 3d cf 02 8e e7 ac 31 aa 9f 51 85 e7 58 00 3c ab d6 af 0a 5e 07 d7 c8 d0 c1 35 34 22 f1 96 a4 83 66 01 63 59 17 60 8e 28 00 12 70 1c 17 09 f9 bd 33 09 7a 1a 22 08 ba f9 70 66 e2 d9 f9 cb e2 d2 8e 27 ee b0 b6 b1 b1 7f 3d 6e 2f f3 2d 5d 84 e0 e7 3f 12 2b 36 1c 41 bf fb 06 61 fa d4 27 f1 f9 37 3b b5 ba 8e fc fe 35 a3 0a 33 6d 78 78 78 60 f6 ec d9 00 00 f7 fb fa a3 e8 46 8e de c6 ea ee 1e 7f 42 33 90 d6 2f 00 40 71 9a 47 77 8f 43 4c ee 7e 25 5a 89 85 7c 2f 42 73 Data Ascii: b2cj`do^P$OR\|9'\|6bOtwp),GL.iuV]&-j:=1QX<^54"fcY`(p3z"pf'=n/-]?+6Aa'7;53mxxx`FB3/@qGwCL~%Z\|/Bs
2024-05-27 22:43:18 UTC	1390	IN	Data Raw: 16 bf bd 16 b6 d6 16 78 65 f1 22 0c f3 f7 13 a0 4a c3 51 5a 5e 89 2f bf dd 8d 63 ff dd 83 d0 e7 5f 87 64 e8 c3 78 21 c8 46 d0 05 20 dd 08 80 46 d1 fa 35 55 b2 5c 59 34 e4 e1 ac bb 41 50 06 20 b6 a3 05 18 8a f6 73 0c 74 13 04 b7 2a c6 e2 bb 79 1d a2 07 14 00 09 38 8e 2b 85 fc 86 ee 04 2d df ef 02 79 f0 9b 0d e0 13 9e e7 63 74 58 9e 5e cd 8f 89 93 9c 3b 99 24 ed e3 7e 9f f5 a2 15 e6 be 19 bf 76 76 7c fe 16 2e 9d 3f 8a 1f 7f fa 19 03 fa 7b 77 f8 ba 94 94 14 7c f8 e1 87 78 e4 e9 59 88 9e 19 25 60 85 86 e7 42 96 14 6b 3f fc 10 12 1f 5f ac 7f 67 09 1c 1d 1d 05 1b 5b 9b 00 68 8c ad 5f 53 a5 98 11 8c 86 bc ad ad 6e 18 94 41 de e6 4d 50 9c 3c a2 ee 58 d1 90 ef 13 1b 0e f5 c3 e0 09 95 b1 e8 bf 15 03 46 01 90 28 bf d9 97 6a 73 bf 9e 62 d6 2f 16 8a 73 84 8d ad 35 f4 Data Ascii: xe"JQZ^/c_dx!F F5U\Y4AP st*y8+-yctX^;$~vv\|.?{w\|xY%`Bk?_g[h_SnAMP<XF(jsb/s5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49962	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:18 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:19 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:19 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:19 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49961	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:18 UTC	1012	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:18 UTC	910	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 35 36 35 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1716849795652",null,null,null,
2024-05-27 22:43:19 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:19 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:19 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49957	142.250.185.132	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:19 UTC	938	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:19 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 22:43:19 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49966	142.250.185.110	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:19 UTC	1043	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:19 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 208027 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 23 May 2024 03:22:14 GMT Expires: Fri, 23 May 2025 03:22:14 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 17:34:54 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 415265 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:19 UTC	474	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 79 68 3d 28 77 69 6e 64 6f 77 2e 67 61 70 69 7c 7c 7b 7d 29 2e 6c 6f 61 64 3b 0a 5f 2e 4b 6f 3d 5f 2e 6c 66 28 5f 2e 79 66 2c 22 72 77 22 2c 5f 2e 6d 66 28 29 29 3b 0a 76 61 72 20 4c 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 3d 5f 2e 4b 6f 5b 61 5d 29 26 26 61 2e 73 74 61 74 65 3c 62 26 26 28 61 2e 73 74 61 74 65 3d 62 29 7d 3b 76 61 72 20 4d 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 61 3d 5f 2e 4b 6f 5b 61 5d 29 3f 61 2e 6f 69 64 3a 76 6f 69 64 20 30 3b 69 66 28 61 29 7b 76 61 72 20 62 3d 5f 2e 68 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: gapi.loaded_1(function(_){var window=this;_.yh=(window.gapi\|\|{}).load;_.Ko=_.lf(_.yf,"rw",_.mf());var Lo=function(a,b){(a=_.Ko[a])&&a.state<b&&(a.state=b)};var Mo=function(a){a=(a=_.Ko[a])?a.oid:void 0;if(a){var b=_.hf.getElementById(a);b&&b.parentNode
2024-05-27 22:43:19 UTC	1390	IN	Data Raw: 2b 22 70 78 22 3a 61 2e 73 74 79 6c 65 2e 77 69 64 74 68 7c 7c 22 33 30 30 70 78 22 29 2b 22 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 7d 3b 0a 5f 2e 50 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 64 3d 61 2e 47 63 28 29 2c 65 3d 62 26 26 62 2e 77 69 64 74 68 2c 66 3d 62 26 26 62 2e 68 65 69 67 68 74 2c 68 3d 62 26 26 62 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3b 68 26 26 28 63 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 68 29 3b 65 7c 7c 28 65 3d 64 2e 77 69 64 74 68 7c 7c 61 2e 77 69 64 74 68 29 3b 66 7c 7c 28 66 3d 64 2e 68 65 69 67 68 74 7c 7c 61 2e 68 65 69 67 68 74 29 3b 64 2e 77 69 64 74 68 3d 63 2e 77 69 64 74 68 3d 65 3b 64 2e 68 65 69 67 68 74 3d 63 2e 68 65 69 Data Ascii: +"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};_.Po=function(a,b){var c={},d=a.Gc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.hei
2024-05-27 22:43:19 UTC	1390	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 67 65 74 49 66 72 61 6d 65 45 6c 28 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 5f 2e 4f 6f 28 65 29 7d 7d 3b 0a 5f 2e 42 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 61 3d 28 61 7c 7c 62 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 6d 61 74 63 68 28 52 65 67 45 78 70 28 22 2e 2a 28 5c 5c 3f 7c 23 7c 26 29 75 73 65 67 61 70 69 3d 28 5b 5e 26 23 5d 2b 29 22 29 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 22 31 22 3d 3d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 22 22 29 7d 3b 0a 5f 2e 53 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 54 2e 77 68 65 72 65 3d 62 3b 72 65 74 75 72 6e 20 61 7d 3b 5f Data Ascii: e=function(e){e=e.getIframeEl();e.style.cssText=_.Oo(e)}};_.Bj=function(a){var b=window;a=(a\|\|b.location.href).match(RegExp(".*(\\?\|#\|&)usegapi=([^&#]+)"))\|\|[];return"1"===decodeURIComponent(a[a.length-1]\|\|"")};_.So=function(a,b){a.T.where=b;return a};_
2024-05-27 22:43:19 UTC	1390	IN	Data Raw: 67 6f 6f 67 6c 65 2d 73 69 67 6e 69 6e 2d 22 29 29 7b 63 3d 63 2e 73 75 62 73 74 72 69 6e 67 28 31 34 29 3b 76 61 72 20 64 3d 61 5b 62 5d 2e 63 6f 6e 74 65 6e 74 3b 5f 2e 66 70 5b 63 5d 26 26 64 26 26 28 5f 2e 55 6f 5b 63 5d 3d 64 29 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 73 65 6c 66 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 5f 2e 66 70 29 30 3c 5f 2e 66 70 5b 65 5d 26 26 28 62 3d 5f 2e 71 66 28 61 2c 65 2c 22 22 29 29 26 26 28 5f 2e 55 6f 5b 65 5d 3d 62 29 7d 5f 2e 67 70 3d 21 30 7d 65 3d 5f 2e 6d 66 28 29 3b 5f 2e 6f 66 28 5f 2e 55 6f 2c 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 69 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 Data Ascii: google-signin-")){c=c.substring(14);var d=a[b].content;_.fp[c]&&d&&(_.Uo[c]=d)}}if(window.self!==window.top){a=document.location.toString();for(var e in _.fp)0<_.fp[e]&&(b=_.qf(a,e,""))&&(_.Uo[e]=b)}_.gp=!0}e=_.mf();_.of(_.Uo,e);return e};ip=function(a){v
2024-05-27 22:43:19 UTC	1390	IN	Data Raw: 3d 30 21 3d 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 2c 64 3d 61 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 2c 68 3d 66 2e 6e 61 6d 65 2c 6b 3d 66 2e 76 61 6c 75 65 3b 30 3c 3d 5f 2e 6b 6e 2e 63 61 6c 6c 28 75 70 2c 68 29 7c 7c 63 26 26 30 21 3d 68 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 7c 7c 22 6e 75 6c 6c 22 3d 3d 3d 6b 7c 7c 22 73 70 65 63 69 66 69 65 64 22 69 6e 20 66 26 26 21 66 2e 73 70 65 63 69 66 69 65 64 7c 7c 28 63 26 26 28 68 3d 68 2e 73 75 62 73 74 72 28 35 29 29 2c 62 5b 68 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 6b 29 7d 61 3d 61 2e 73 Data Ascii: =0!=a.nodeName.toLowerCase().indexOf("g:"),d=a.attributes.length,e=0;e<d;e++){var f=a.attributes[e],h=f.name,k=f.value;0<=_.kn.call(up,h)\|\|c&&0!=h.indexOf("data-")\|\|"null"===k\|\|"specified"in f&&!f.specified\|\|(c&&(h=h.substr(5)),b[h.toLowerCase()]=k)}a=a.s
2024-05-27 22:43:19 UTC	1390	IN	Data Raw: 29 7d 64 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 2e 6a 6f 69 6e 28 22 2c 22 29 29 7d 65 6c 73 65 20 64 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 3b 61 3d 5f 2e 6d 66 28 29 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 66 3d 64 5b 65 5d 3b 76 61 72 20 6b 3d 66 3b 68 3d 62 3b 76 61 72 20 6c 3d 6b 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6d 3d 76 6f 69 64 20 30 3b 69 66 28 6b 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 70 69 73 63 61 6e 22 29 29 68 3d 0a 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6c 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 3b 30 3d 3d 6e 3f 6d 3d 6c 2e 73 75 62 73 74 72 28 32 29 3a 28 6e 3d Data Ascii: )}d=a.querySelectorAll(e.join(","))}else d=a.getElementsByTagName("*");a=_.mf();for(e=0;e<d.length;e++){f=d[e];var k=f;h=b;var l=k.nodeName.toLowerCase(),m=void 0;if(k.hasAttribute("data-gapiscan"))h=null;else{var n=l.indexOf("g:");0==n?m=l.substr(2):(n=
2024-05-27 22:43:19 UTC	1390	IN	Data Raw: 6d 3d 6c 3d 61 3b 22 70 6c 75 73 22 3d 3d 61 26 26 63 2e 61 63 74 69 6f 6e 26 26 28 6c 3d 61 2b 22 5f 22 2b 63 2e 61 63 74 69 6f 6e 2c 6d 3d 61 2b 22 2f 22 2b 63 2e 61 63 74 69 6f 6e 29 3b 28 6c 3d 5f 2e 47 66 28 22 69 66 72 61 6d 65 73 2f 22 2b 6c 2b 22 2f 75 72 6c 22 29 29 7c 7c 28 6c 3d 22 3a 69 6d 5f 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 22 2b 6d 2b 22 3f 75 73 65 67 61 70 69 3d 31 22 29 3b 66 6f 72 28 6e 20 69 6e 20 70 70 29 66 5b 6e 5d 3d 6e 2b 22 2f 22 2b 28 63 5b 6e 5d 7c 7c 70 70 5b 6e 5d 29 2b 22 2f 22 3b 76 61 72 20 6e 3d 5f 2e 78 6d 28 5f 2e 68 66 2c 6c 2e 72 65 70 6c 61 63 65 28 5f 2e 51 6d 2c 65 70 28 66 29 29 29 3b Data Ascii: m=l=a;"plus"==a&&c.action&&(l=a+"_"+c.action,m=a+"/"+c.action);(l=_.Gf("iframes/"+l+"/url"))\|\|(l=":im_socialhost:/:session_prefix::im_prefix:_/widget/render/"+m+"?usegapi=1");for(n in pp)f[n]=n+"/"+(c[n]\|\|pp[n])+"/";var n=_.xm(_.hf,l.replace(_.Qm,ep(f)));
2024-05-27 22:43:19 UTC	1390	IN	Data Raw: 68 2e 75 73 65 72 50 61 72 61 6d 73 3d 63 3b 68 2e 75 72 6c 3d 75 3b 68 2e 74 79 70 65 3d 61 3b 5f 2e 79 70 28 61 2c 62 2c 63 2c 75 2c 76 2c 68 29 3b 62 3d 68 2e 69 64 3b 63 3d 5f 2e 6d 66 28 29 3b 63 2e 69 64 3d 62 3b 63 2e 75 73 65 72 50 61 72 61 6d 73 3d 68 2e 75 73 65 72 50 61 72 61 6d 73 3b 63 2e 75 72 6c 3d 68 2e 75 72 6c 3b 63 2e 74 79 70 65 3d 68 2e 74 79 70 65 3b 63 2e 73 74 61 74 65 3d 31 3b 5f 2e 4b 6f 5b 62 5d 3d 63 3b 62 3d 68 7d 65 6c 73 65 20 62 3d 6e 75 6c 6c 3b 62 26 26 28 28 63 3d 62 2e 69 64 29 26 26 64 2e 70 75 73 68 28 63 29 2c 4b 70 28 61 2c 62 29 29 7d 7d 2c 4c 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 62 29 7b 69 66 28 63 29 72 65 74 75 72 6e 20 31 3b 69 Data Ascii: h.userParams=c;h.url=u;h.type=a;_.yp(a,b,c,u,v,h);b=h.id;c=_.mf();c.id=b;c.userParams=h.userParams;c.url=h.url;c.type=h.type;c.state=1;_.Ko[b]=c;b=h}else b=null;b&&((c=b.id)&&d.push(c),Kp(a,b))}},Lp=function(a,b,c){if(a&&1===a.nodeType&&b){if(c)return 1;i
2024-05-27 22:43:19 UTC	1390	IN	Data Raw: 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 3d 7b 54 69 6d 65 72 3a 61 2c 6c 6f 61 64 3a 64 7d 3b 69 66 28 62 29 7b 76 61 72 20 65 3d 62 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3b 30 3c 65 26 26 63 3e 3d 65 26 26 28 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 73 72 74 3d 63 2d 65 29 7d 69 66 28 62 29 7b 76 61 72 20 66 3d 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 6c 6f 61 64 3b 0a 30 3c 65 26 26 63 3e 3d 65 26 26 28 66 2e 74 69 63 6b 28 22 5f 77 74 73 72 74 22 2c 76 6f 69 64 20 30 2c 65 29 2c 66 2e 74 69 63 6b 28 22 77 74 73 72 74 5f 22 2c 22 5f 77 74 73 72 74 22 2c 63 29 2c 66 2e 74 69 63 6b 28 22 74 62 73 64 5f 22 2c 22 77 74 73 72 74 5f 22 29 29 7d 74 72 79 7b 62 3d 6e 75 6c 6c 2c 77 69 6e Data Ascii: i_jstiming__={Timer:a,load:d};if(b){var e=b.navigationStart;0<e&&c>=e&&(window.__gapi_jstiming__.srt=c-e)}if(b){var f=window.__gapi_jstiming__.load;0<e&&c>=e&&(f.tick("_wtsrt",void 0,e),f.tick("wtsrt_","_wtsrt",c),f.tick("tbsd_","wtsrt_"))}try{b=null,win
2024-05-27 22:43:19 UTC	1390	IN	Data Raw: 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 65 28 29 29 29 7b 65 2e 77 61 73 46 65 74 63 68 65 64 56 69 61 53 70 64 79 26 26 28 64 2b 3d 22 26 70 3d 73 22 29 3b 69 66 28 65 2e 77 61 73 4e 70 6e 4e 65 67 6f 74 69 61 74 65 64 29 7b 64 2b 3d 22 26 6e 70 6e 3d 31 22 3b 76 61 72 20 66 3d 65 2e 6e 70 6e 4e 65 67 6f 74 69 61 74 65 64 50 72 6f 74 6f 63 6f 6c 3b 66 26 26 28 64 2b 3d 22 26 6e 70 6e 76 3d 22 2b 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 7c 7c 65 73 63 61 70 65 29 28 66 29 29 7d 65 2e 77 61 73 41 6c 74 65 72 6e 61 74 65 50 72 6f 74 6f 63 6f 6c 41 76 61 69 6c 61 62 6c 65 26 26 28 64 2b 3d 22 26 61 70 61 3d 31 22 29 7d 76 61 72 20 68 3d 61 2e 74 2c 6b 3d 68 2e 73 74 61 72 74 3b 65 3d 5b 5d 3b 66 3d Data Ascii: &&"function"===typeof e&&(e=e())){e.wasFetchedViaSpdy&&(d+="&p=s");if(e.wasNpnNegotiated){d+="&npn=1";var f=e.npnNegotiatedProtocol;f&&(d+="&npnv="+(encodeURIComponent\|\|escape)(f))}e.wasAlternateProtocolAvailable&&(d+="&apa=1")}var h=a.t,k=h.start;e=[];f=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49969	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:19 UTC	1338	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 521 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:19 UTC	521	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 37 39 39 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1716849797998",null,null,null
2024-05-27 22:43:19 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:19 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:19 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49970	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:19 UTC	1338	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 522 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:19 UTC	522	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 38 30 35 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1716849798054",null,null,null
2024-05-27 22:43:19 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:19 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:19 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49968	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:19 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:20 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:19 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:20 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:20 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49971	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:19 UTC	1316	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1124 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:19 UTC	1124	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 64 65 6e 74 69 74 79 66 72 6f 6e 74 65 6e 64 61 75 74 68 75 69 73 65 72 76 65 72 5f 32 30 32 34 30 35 31 39 2e 30 38 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"boq_identityfrontendauthuiserver_20240519.08_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0
2024-05-27 22:43:20 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:20 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49973	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:19 UTC	670	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:20 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:20 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:20 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:20 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49974	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:20 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1721 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:20 UTC	1721	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 38 34 30 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5c 22 61 63 63 6f 75 6e 74 73 5c 22 2c 5c 22 65 6e 5c 22 2c 5b 5b 35 35 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 65 6e 5c 22 2c 5b 5b 5c 22 43 6f 72 65 5f 4d 6f 64 75 6c 61 72 5f Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],860,[["1716849798402",null,null,null,null,null,null,"[[\"accounts\",\"en\",[[55]],null,null,null,null,null,null,null,null,\"en\",[[\"Core_Modular_
2024-05-27 22:43:20 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:20 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49976	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:20 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1342 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:20 UTC	1342	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 38 34 30 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 32 2c 33 2c 36 33 34 38 30 35 33 33 37 5d 2c 5b 6e 75 6c 6c 2c 31 5d 2c 5b 5c 22 36 33 38 35 32 34 34 36 35 35 32 35 34 35 39 36 32 30 2d 32 32 35 31 38 32 31 39 30 38 5c 22 2c 5c 22 31 35 31 35 38 33 37 36 32 35 5c 22 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 5c 22 31 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],1323,[["1716849798407",null,null,null,null,null,null,"[[[2,3,634805337],[null,1],[\"638524465525459620-2251821908\",\"1515837625\",null,0,null,\"1
2024-05-27 22:43:20 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:20 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49975	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:20 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1842 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:20 UTC	1842	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 38 34 37 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849798475",null,null,null,
2024-05-27 22:43:20 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:20 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49980	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:20 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1343 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:20 UTC	1343	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 38 34 37 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849798479",null,null,null
2024-05-27 22:43:20 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:20 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49981	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:20 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1872 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:20 UTC	1872	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 38 35 32 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849798521",null,null,null,
2024-05-27 22:43:20 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:20 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49982	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:20 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:21 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:20 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:21 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:21 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49983	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:20 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1416 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:20 UTC	1416	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 38 35 32 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849798525",null,null,null
2024-05-27 22:43:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49985	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:21 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1860 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:21 UTC	1860	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 38 35 32 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849798527",null,null,null,
2024-05-27 22:43:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:21 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49986	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:21 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1857 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:21 UTC	1857	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 38 36 36 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849798669",null,null,null,
2024-05-27 22:43:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:21 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49989	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:21 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1359 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:21 UTC	1359	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 38 36 37 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849798671",null,null,null
2024-05-27 22:43:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:21 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49990	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:21 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1359 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:21 UTC	1359	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 38 36 37 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849798673",null,null,null
2024-05-27 22:43:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:21 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49991	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:21 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1695 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:21 UTC	1695	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 30 31 36 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849800166",null,null,null,
2024-05-27 22:43:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:21 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49992	142.250.185.132	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:21 UTC	938	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:21 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 22:43:21 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49993	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:21 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:22 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:21 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:22 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:22 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49994	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:21 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1216 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:21 UTC	1216	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 30 31 37 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849800171",null,null,null
2024-05-27 22:43:22 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49997	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:21 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1688 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:21 UTC	1688	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 30 32 31 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849800211",null,null,null,
2024-05-27 22:43:22 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49999	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:22 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1212 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:22 UTC	1212	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 30 32 31 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849800218",null,null,null
2024-05-27 22:43:22 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49998	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:22 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1689 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:22 UTC	1689	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 30 32 33 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849800231",null,null,null,
2024-05-27 22:43:22 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50001	142.250.185.110	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:22 UTC	914	OUT	GET /js/googleapis.proxy.js?onload=startup HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://scone-pa.clients6.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:22 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 15118 Date: Mon, 27 May 2024 22:43:22 GMT Expires: Mon, 27 May 2024 22:43:22 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "9bc2326c55ad9a5d" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:22 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-05-27 22:43:22 UTC	1390	IN	Data Raw: 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 Data Ascii: break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegEx
2024-05-27 22:43:22 UTC	1390	IN	Data Raw: 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 76 61 72 20 78 3d 7b 7d 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 76 61 72 20 41 3d 7b 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 41 21 3d 3d 41 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 53 74 79 6c 65 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 74 68 69 73 2e 73 3d 22 22 7d 3b 42 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 2e 74 6f 53 Data Ascii: ring=function(){return this.v.toString()};var x={};new y("about:invalid#zClosurez");new y("about:blank");var A={},B=function(){if(A!==A)throw Error("SafeStyle is not meant to be built directly");this.s=""};B.prototype.toString=function(){return this.s.toS
2024-05-27 22:43:22 UTC	1390	IN	Data Raw: 7b 62 3d 4b 2e 68 3b 76 61 72 20 63 3d 52 65 67 45 78 70 28 22 28 5b 23 5d 2e 2a 26 7c 5b 23 5d 29 6a 73 68 3d 28 5b 5e 26 23 5d 2a 29 22 2c 22 67 22 29 2c 64 3d 52 65 67 45 78 70 28 22 28 5b 3f 23 5d 2e 2a 26 7c 5b 3f 23 5d 29 6a 73 68 3d 28 5b 5e 26 23 5d 2a 29 22 2c 22 67 22 29 3b 69 66 28 61 3d 61 26 26 28 63 2e 65 78 65 63 28 61 29 7c 7c 64 2e 65 78 65 63 28 61 29 29 29 74 72 79 7b 62 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 32 5d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 62 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 48 28 4b 2c 22 50 51 22 2c 5b 5d 29 3b 4b 2e 50 51 3d 5b 5d 3b 76 61 72 20 63 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 63 29 61 28 29 3b 65 6c 73 65 20 66 6f Data Ascii: {b=K.h;var c=RegExp("([#].&\|[#])jsh=([^&#])","g"),d=RegExp("([?#].&\|[?#])jsh=([^&#])","g");if(a=a&&(c.exec(a)\|\|d.exec(a)))try{b=decodeURIComponent(a[2])}catch(e){}}return b},pa=function(a){var b=H(K,"PQ",[]);K.PQ=[];var c=b.length;if(0===c)a();else fo
2024-05-27 22:43:22 UTC	1390	IN	Data Raw: 3d 62 2e 6d 61 74 63 68 28 41 61 29 3b 28 64 3d 62 2e 6d 61 74 63 68 28 42 61 29 29 26 26 31 3d 3d 3d 64 2e 6c 65 6e 67 74 68 26 26 43 61 2e 74 65 73 74 28 62 29 26 26 63 26 26 31 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 56 28 22 66 61 69 6c 65 64 20 73 61 6e 69 74 79 3a 20 22 2b 61 29 3b 74 72 79 7b 61 3d 22 3f 22 3b 69 66 28 65 26 26 30 3c 65 2e 6c 65 6e 67 74 68 29 7b 63 3d 62 3d 30 3b 66 6f 72 28 64 3d 7b 7d 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 70 3d 65 5b 63 2b 2b 5d 3b 66 3d 76 6f 69 64 20 30 3b 6b 3d 74 79 70 65 6f 66 20 70 3b 66 3d 22 6f 62 6a 65 63 74 22 3d 3d 6b 26 26 6e 75 6c 6c 21 3d 0a 70 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 6b 3f 22 6f 22 2b 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f Data Ascii: =b.match(Aa);(d=b.match(Ba))&&1===d.length&&Ca.test(b)&&c&&1===c.length\|\|V("failed sanity: "+a);try{a="?";if(e&&0<e.length){c=b=0;for(d={};c<e.length;){var p=e[c++];f=void 0;k=typeof p;f="object"==k&&null!=p\|\|"function"==k?"o"+(Object.prototype.hasOwnPro
2024-05-27 22:43:22 UTC	1390	IN	Data Raw: 29 3b 63 3d 57 28 61 2c 22 6b 22 2c 21 30 29 3b 64 3d 57 28 61 2c 22 61 6d 22 29 3b 65 3d 57 28 61 2c 22 72 73 22 29 3b 61 3d 57 28 61 2c 22 74 22 29 3b 72 65 74 75 72 6e 7b 70 61 74 68 50 72 65 66 69 78 3a 62 2c 76 65 72 73 69 6f 6e 3a 63 2c 67 3a 64 2c 69 3a 65 2c 6a 3a 61 7d 7d 2c 46 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 7b 76 61 72 20 65 3d 61 5b 63 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 5f 22 29 3b 7a 61 2e 74 65 73 74 28 65 29 26 26 62 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 2c 22 29 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b Data Ascii: );c=W(a,"k",!0);d=W(a,"am");e=W(a,"rs");a=W(a,"t");return{pathPrefix:b,version:c,g:d,i:e,j:a}},Fa=function(a){for(var b=[],c=0,d=a.length;c<d;++c){var e=a[c].replace(/\./g,"_").replace(/-/g,"_");za.test(e)&&b.push(e)}return b.join(",")},W=function(a,b,c){
2024-05-27 22:43:22 UTC	1390	IN	Data Raw: 29 3a 28 47 2e 68 65 61 64 7c 7c 47 2e 62 6f 64 79 7c 7c 47 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 7d 2c 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 4d 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 62 3d 3d 3d 6f 61 28 29 3f 48 28 4a 2c 22 5f 22 2c 49 28 29 29 3a 49 28 29 3b 64 3d 48 28 4e 28 62 29 2c 22 5f 22 2c 64 29 3b 61 28 64 29 7d 2c 63 29 7d 2c 50 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 0a 62 7c 7c 7b 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 28 63 3d 7b 7d 2c 63 2e 63 61 6c 6c 62 61 63 6b 3d 62 29 3b 76 61 72 20 64 3d 28 62 3d 63 29 26 26 62 2e 5f 63 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 55 Data Ascii: ):(G.head\|\|G.body\|\|G.documentElement).appendChild(b)},Na=function(a,b,c){Ma(function(){var d=b===oa()?H(J,"_",I()):I();d=H(N(b),"_",d);a(d)},c)},Pa=function(a,b){var c=b\|\|{};"function"==typeof b&&(c={},c.callback=b);var d=(b=c)&&b._c;if(d)for(var e=0;e<U
2024-05-27 22:43:22 UTC	1390	IN	Data Raw: 77 29 3b 4a 5b 54 5d 3d 6e 75 6c 6c 7d 3b 61 3d 44 61 28 63 2c 71 2c 22 67 61 70 69 2e 22 2b 54 2c 6c 2c 54 61 29 3b 6c 2e 70 75 73 68 2e 61 70 70 6c 79 28 6c 2c 71 29 3b 51 28 22 6d 6c 30 22 2c 71 2c 4c 29 3b 62 2e 73 79 6e 63 7c 7c 46 2e 5f 5f 5f 67 61 70 69 73 79 6e 63 3f 4c 61 28 61 29 3a 4b 61 28 61 29 7d 65 6c 73 65 20 75 5b 76 5d 28 6c 61 29 7d 65 6c 73 65 20 73 61 28 71 29 26 26 65 26 26 65 28 29 7d 2c 51 61 3b 76 61 72 20 52 61 3d 6e 75 6c 6c 2c 5a 3d 6d 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 5a 26 26 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 74 72 79 7b 52 61 3d 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 61 70 69 23 67 61 70 69 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 72 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 72 2c 63 Data Ascii: w);J[T]=null};a=Da(c,q,"gapi."+T,l,Ta);l.push.apply(l,q);Q("ml0",q,L);b.sync\|\|F.___gapisync?La(a):Ka(a)}else u[v](la)}else sa(q)&&e&&e()},Qa;var Ra=null,Z=m.trustedTypes;if(Z&&Z.createPolicy)try{Ra=Z.createPolicy("gapi#gapi",{createHTML:r,createScript:r,c
2024-05-27 22:43:22 UTC	1390	IN	Data Raw: 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 7d 2c 65 6e 61 62 6c 65 4d 75 6c 74 69 6c 6f 67 69 6e 3a 21 30 2c 22 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6e 66 69 67 22 3a 7b 61 75 74 68 3a 7b 75 73 65 46 69 72 73 74 50 61 72 74 79 41 75 74 68 56 32 3a 21 30 7d 2c 72 6f 6f 74 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 2c 22 72 6f 6f 74 2d 31 70 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6c 69 65 6e 74 73 36 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 7d 2c 69 6e 6c 69 6e 65 3a 7b 63 73 73 3a 31 7d 2c 0a 64 69 73 61 62 6c 65 52 65 61 6c 74 69 6d 65 43 61 6c 6c 62 61 63 6b 3a 21 31 2c 64 72 69 76 65 5f 73 68 61 72 65 3a 7b 73 6b 69 70 49 6e 69 74 43 6f 6d 6d 61 6e 64 3a 21 30 7d 2c 63 73 69 3a 7b 72 61 74 65 Data Ascii: //apis.google.com"},enableMultilogin:!0,"googleapis.config":{auth:{useFirstPartyAuthV2:!0},root:"https://content.googleapis.com","root-1p":"https://clients6.google.com"},inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate
2024-05-27 22:43:22 UTC	1390	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 64 61 74 61 63 6f 6e 6e 65 63 74 6f 72 2e 63 6f 72 70 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 75 69 2f 77 69 64 67 65 74 76 69 65 77 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 73 75 72 76 65 79 6f 70 74 69 6e 3a 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 2f 63 75 73 74 6f 6d 65 72 72 65 76 69 65 77 73 2f 6f 70 74 69 6e 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 73 68 6f 72 74 6c 69 73 74 73 3a 7b 75 72 6c 3a 22 22 7d 2c 68 61 6e 67 6f 75 74 3a 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 67 61 64 67 Data Ascii: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1"},surveyoptin:{url:"https://www.google.com/shopping/customerreviews/optin?usegapi=1"},":socialhost:":"https://apis.google.com",shortlists:{url:""},hangout:{url:"https://talkgadg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50003	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:22 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1254 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:22 UTC	1254	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 30 32 33 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849800234",null,null,null
2024-05-27 22:43:22 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50004	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:22 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1706 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:22 UTC	1706	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 30 32 33 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849800236",null,null,null,
2024-05-27 22:43:22 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50006	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:22 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:22 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:22 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:22 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:22 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50008	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:22 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1703 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:22 UTC	1703	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 30 39 36 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849800969",null,null,null,
2024-05-27 22:43:23 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50009	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:22 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1228 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:22 UTC	1228	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 30 39 37 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849800971",null,null,null
2024-05-27 22:43:23 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50010	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:22 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1228 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:22 UTC	1228	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 30 39 37 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849800973",null,null,null
2024-05-27 22:43:23 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50011	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:22 UTC	1003	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:22 UTC	910	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 37 39 34 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],373,[["1716849797949",null,null,null,
2024-05-27 22:43:23 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50012	142.250.185.110	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:23 UTC	1035	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://scone-pa.clients6.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:23 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 79644 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 23 May 2024 03:22:15 GMT Expires: Fri, 23 May 2025 03:22:15 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 17:34:54 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 415268 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:23 UTC	475	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-05-27 22:43:23 UTC	1390	IN	Data Raw: 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 Data Ascii: a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Er
2024-05-27 22:43:23 UTC	1390	IN	Data Raw: 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 77 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 Data Ascii: Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error("b`"+String(a));};va=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};wa="function"==typeof Object.assign?Object.a
2024-05-27 22:43:23 UTC	1390	IN	Data Raw: 74 68 69 73 2e 6c 73 3d 5b 5d 3b 74 68 69 73 2e 73 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 44 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 59 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 6a 4b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 59 64 61 3d 66 75 6e 63 74 69 6f Data Ascii: this.ls=[];this.sV=!1;var k=this.DF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.DF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Yda),reject:h(this.jK)}};e.prototype.Yda=functio
2024-05-27 22:43:23 UTC	1390	IN	Data Raw: 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 6c 73 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 6c 73 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 73 50 28 74 68 69 73 2e 6c 73 5b 68 5d 29 3b 0a 74 68 69 73 2e 6c 73 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 41 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 44 46 28 29 3b 68 2e 42 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 44 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 2c Data Ascii: otype.G7=function(){if(null!=this.ls){for(var h=0;h<this.ls.length;++h)f.sP(this.ls[h]);this.ls=null}};var f=new b;e.prototype.Afa=function(h){var k=this.DF();h.By(k.resolve,k.reject)};e.prototype.Bfa=function(h,k){var l=this.DF();try{h.call(k,l.resolve,
2024-05-27 22:43:23 UTC	1390	IN	Data Raw: 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 49 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d 7d 29 3b Data Ascii: ular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ia(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}});
2024-05-27 22:43:23 UTC	1390	IN	Data Raw: 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 5f 2e 75 61 28 5b 5b 6b 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6c 2e 67 65 74 28 6b 29 7c 7c 31 21 3d 6c 2e 73 69 7a 65 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 32 21 3d 6c 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d Data Ascii: ion(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var k=Object.seal({x:4}),l=new a(_.ua([[k,"s"]]));if("s"!=l.get(k)\|\|1!=l.size\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|2!=l.size)return!1;var m=
2024-05-27 22:43:23 UTC	1390	IN	Data Raw: 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 0a 6e 3b 21 28 6e 3d 6d 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6e 3d 6e 2e 76 61 6c 75 65 2c 6b 2e 63 61 6c 6c 28 6c 2c 6e 5b 31 5d 2c 6e 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b Data Ascii: otype.values=function(){return e(this,function(k){return k.value})};c.prototype.forEach=function(k,l){for(var m=this.entries(),n;!(n=m.next()).done;)n=n.value,k.call(l,n[1],n[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(k,l){
2024-05-27 22:43:23 UTC	1390	IN	Data Raw: 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 75 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 32 21 3d 64 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e Data Ascii: tries\|\|"function"!=typeof Object.seal)return!1;try{var c=Object.seal({x:4}),d=new a(_.ua([c]));if(!d.has(c)\|\|1!=d.size\|\|d.add(c)!=d\|\|1!=d.size\|\|d.add({x:4})!=d\|\|2!=d.size)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return
2024-05-27 22:43:23 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 7d 29 3b 0a 6e 61 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 6e 75 6c 6c 21 3d 63 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 Data Ascii: function(){return Ka(this,function(b,c){return c})}});na("Array.from",function(a){return a?a:function(b,c,d){c=null!=c?c:function(k){return k};var e=[],f="undefined"!=typeof Symbol&&Symbol.iterator&&b[Symbol.iterator];if("function"==typeof f){b=f.call(b)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50014	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:23 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:23 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:23 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:23 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:23 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50015	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:23 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1719 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:23 UTC	1719	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 32 31 36 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849802160",null,null,null,
2024-05-27 22:43:24 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50016	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:23 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1247 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:23 UTC	1247	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 32 31 36 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849802164",null,null,null
2024-05-27 22:43:24 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50017	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:23 UTC	1003	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:23 UTC	910	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 31 36 38 34 39 37 39 39 37 33 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],373,[["1716849799731",null,null,null,
2024-05-27 22:43:24 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50018	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:23 UTC	1004	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5306 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:23 UTC	5306	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 36 39 34 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 30 31 39 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],1694,[["1716849800190",null,null,null
2024-05-27 22:43:24 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50020	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:24 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:24 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:24 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:24 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:24 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50025	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:25 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1748 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:25 UTC	1748	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 33 37 33 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849803738",null,null,null,
2024-05-27 22:43:25 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:25 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:25 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50024	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:25 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1254 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:25 UTC	1254	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 33 37 34 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849803742",null,null,null
2024-05-27 22:43:25 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:25 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:25 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50027	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:25 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:25 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:25 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:25 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:25 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50030	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:25 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1873 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:25 UTC	1873	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 34 35 34 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849804542",null,null,null,
2024-05-27 22:43:25 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:25 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:25 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50029	142.250.185.132	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:25 UTC	1017	OUT	GET /intl/en/about/products?tab=uh HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:25 UTC	409	IN	HTTP/1.1 301 Moved Permanently Location: https://about.google/intl/en/products?tab=uh Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 22:43:25 GMT Expires: Mon, 27 May 2024 23:13:25 GMT Cache-Control: public, max-age=1800 Server: sffe Content-Length: 241 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:25 UTC	241	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 62 6f 75 74 2e 67 6f 6f 67 6c 65 2f 69 6e 74 6c 2f 65 6e 2f 70 72 6f 64 75 63 74 73 3f 74 61 62 3d 75 68 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://about.google/intl/en/products?tab=uh">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	50033	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:26 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1378 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:26 UTC	1378	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 34 35 34 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849804544",null,null,null
2024-05-27 22:43:26 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:26 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	50034	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:26 UTC	1004	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 2626 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:26 UTC	2626	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 36 39 34 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 33 37 31 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],1694,[["1716849803713",null,null,null
2024-05-27 22:43:26 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:26 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	50038	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:26 UTC	658	OUT	GET /intl/en/products?tab=uh HTTP/1.1 Host: about.google Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:26 UTC	457	IN	HTTP/1.1 301 Moved Permanently Location: https://about.google/products?tab=uh Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe Content-Length: 233 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:14:49 GMT Expires: Mon, 27 May 2024 22:44:49 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 1717 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:26 UTC	233	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 62 6f 75 74 2e 67 6f 6f 67 6c 65 2f 70 72 6f 64 75 63 74 73 3f 74 61 62 3d 75 68 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://about.google/products?tab=uh">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	50036	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:26 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:26 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:26 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:26 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:26 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	50028	142.250.185.132	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:26 UTC	938	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:26 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 22:43:26 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	50041	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:27 UTC	650	OUT	GET /products?tab=uh HTTP/1.1 Host: about.google Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:27 UTC	458	IN	HTTP/1.1 301 Moved Permanently Location: https://about.google/products/?tab=uh Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe Content-Length: 234 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:14:50 GMT Expires: Mon, 27 May 2024 22:44:50 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 1717 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:27 UTC	234	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 62 6f 75 74 2e 67 6f 6f 67 6c 65 2f 70 72 6f 64 75 63 74 73 2f 3f 74 61 62 3d 75 68 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://about.google/products/?tab=uh">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	50043	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:27 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1702 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:27 UTC	1702	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 35 37 30 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5c 22 61 63 63 6f 75 6e 74 73 5c 22 2c 5c 22 65 6e 5c 22 2c 5b 5b 35 35 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 65 6e 5c 22 2c 5b 5b 5c 22 43 6f 72 65 5f 4d 6f 64 75 6c 61 72 5f Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],860,[["1716849805705",null,null,null,null,null,null,"[[\"accounts\",\"en\",[[55]],null,null,null,null,null,null,null,null,\"en\",[[\"Core_Modular_
2024-05-27 22:43:27 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:27 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	50042	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:27 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1262 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:27 UTC	1262	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 35 37 30 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 32 2c 33 2c 36 33 34 38 30 35 33 33 37 5d 2c 5b 6e 75 6c 6c 2c 31 5d 2c 5b 5c 22 36 33 38 35 32 34 34 36 35 35 32 35 34 35 39 36 32 30 2d 32 32 35 31 38 32 31 39 30 38 5c 22 2c 5c 22 31 38 30 39 31 32 34 38 35 38 5c 22 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 5c 22 31 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],1323,[["1716849805708",null,null,null,null,null,null,"[[[2,3,634805337],[null,1],[\"638524465525459620-2251821908\",\"1809124858\",null,0,null,\"1
2024-05-27 22:43:27 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:27 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	50044	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:27 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1763 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:27 UTC	1763	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 35 37 35 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849805754",null,null,null,
2024-05-27 22:43:27 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:27 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	50045	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:27 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1263 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:27 UTC	1263	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 35 37 36 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849805763",null,null,null
2024-05-27 22:43:27 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:27 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	50047	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:27 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1793 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:27 UTC	1793	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 35 38 31 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849805813",null,null,null,
2024-05-27 22:43:27 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:27 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	50048	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:27 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1336 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:27 UTC	1336	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 35 38 31 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849805815",null,null,null
2024-05-27 22:43:27 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:27 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	50050	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:27 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:27 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:27 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:27 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:27 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	50052	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:27 UTC	651	OUT	GET /products/?tab=uh HTTP/1.1 Host: about.google Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:27 UTC	929	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Content-Security-Policy: script-src 'nonce-ulPd7k4-oZQi-2c9z6IA8w' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl; base-uri 'none' Cross-Origin-Opener-Policy: same-origin; report-to="uxe-owners-acl" Report-To: {"group":"uxe-owners-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl"}]} Content-Length: 258681 Date: Mon, 27 May 2024 22:43:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Last-Modified: Thu, 23 May 2024 18:28:00 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:27 UTC	461	IN	Data Raw: 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 0a 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 67 6f 6f 67 6c 65 20 67 6c 75 65 2d 66 6c 65 78 62 6f 78 20 22 20 20 6c 6f 63 61 6c 65 3d 22 41 4c 4c 5f 75 73 22 20 75 73 65 72 2d 72 65 67 69 6f 6e 3d 22 22 20 70 61 74 68 3d 22 2f 70 72 6f 64 75 63 74 73 2f 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" class="google glue-flexbox " locale="ALL_us" user-region="" path="/products/"> <head> <meta charset="utf-8"> <meta content="initial-scale=1, minimum-scale=1, width=device-width" name="viewport">
2024-05-27 22:43:27 UTC	1390	IN	Data Raw: 77 65 72 73 2c 20 6b 65 65 70 20 69 6e 20 74 6f 75 63 68 2c 20 67 72 6f 77 20 79 6f 75 72 20 62 75 73 69 6e 65 73 73 2c 20 61 6e 64 20 6d 6f 72 65 2e 22 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 75 6c 50 64 37 6b 34 2d 6f 5a 51 69 2d 32 63 39 7a 36 49 41 38 77 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 7b 0a 20 20 20 20 20 20 20 27 67 74 6d 2e 62 6c 61 63 6b 6c 69 73 74 27 3a 5b 27 63 75 73 74 6f 6d 53 63 72 69 70 74 73 27 2c 27 6e 6f 6e 47 6f 6f 67 6c 65 53 63 72 69 70 74 73 27 2c Data Ascii: wers, keep in touch, grow your business, and more."> <script type="text/javascript" nonce="ulPd7k4-oZQi-2c9z6IA8w"> window.dataLayer = window.dataLayer \|\| []; window.dataLayer.push({ 'gtm.blacklist':['customScripts','nonGoogleScripts',
2024-05-27 22:43:27 UTC	1390	IN	Data Raw: 30 30 7c 47 6f 6f 67 6c 65 2b 53 61 6e 73 2b 44 69 73 70 6c 61 79 3a 34 30 30 7c 50 72 6f 64 75 63 74 2b 53 61 6e 73 3a 34 30 30 26 61 6d 70 3b 6c 61 6e 67 3d 65 6e 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 20 6e 6f 6e 63 65 3d 22 75 6c 50 64 37 6b 34 2d 6f 5a 51 69 2d 32 63 39 7a 36 49 41 38 77 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 47 6f 6f 67 6c 65 2b 53 61 6e 73 2b 54 65 78 74 3a 34 30 30 2c 35 30 30 2c 37 30 30 2c 34 30 30 69 2c 35 30 30 69 2c 37 30 30 69 7c 47 6f 6f 67 6c 65 2b 53 61 6e 73 3a 34 30 30 2c 35 30 30 7c 47 6f 6f 67 6c 65 2b 53 61 6e 73 2b 44 69 73 70 6c 61 79 3a 34 Data Ascii: 00\|Google+Sans+Display:400\|Product+Sans:400&lang=en" rel="preload" as="style" nonce="ulPd7k4-oZQi-2c9z6IA8w"> <link href="https://fonts.googleapis.com/css?family=Google+Sans+Text:400,500,700,400i,500i,700i\|Google+Sans:400,500\|Google+Sans+Display:4
2024-05-27 22:43:27 UTC	1390	IN	Data Raw: 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 67 6f 6f 67 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 42 72 6f 77 73 65 20 41 6c 6c 20 6f 66 20 47 6f 6f 67 6c 65 26 23 33 39 3b 73 20 50 72 6f 64 75 63 74 73 20 26 61 6d 70 3b 20 53 65 72 76 69 63 65 73 20 2d 20 47 6f 6f 67 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 42 72 6f 77 73 65 20 61 20 6c 69 73 74 20 6f 66 20 47 6f 6f 67 6c 65 20 70 72 6f 64 75 63 74 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 68 65 6c 70 20 79 6f 75 20 77 6f 72 6b 20 61 6e 64 20 70 6c 61 79 2c 20 Data Ascii: ame="twitter:site" content="@google"> <meta name="twitter:title" content="Browse All of Google's Products & Services - Google"> <meta name="twitter:description" content="Browse a list of Google products designed to help you work and play,
2024-05-27 22:43:27 UTC	1390	IN	Data Raw: 65 61 64 65 72 5f 5f 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 70 61 67 65 2d 63 6f 6e 74 65 6e 74 22 20 63 6c 61 73 73 3d 22 67 6c 75 65 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 20 67 6c 75 65 2d 68 65 61 64 65 72 5f 5f 73 6b 69 70 2d 63 6f 6e 74 65 6e 74 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4a 75 6d 70 20 74 6f 20 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 67 6c 75 65 2d 68 65 61 64 65 72 5f 5f 73 6b 69 70 2d 63 6f 6e 74 65 6e 74 2d 74 65 78 74 22 3e 4a 75 6d 70 20 74 6f 20 63 6f 6e 74 65 6e 74 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 6c 75 65 2d 68 65 61 64 65 72 Data Ascii: eader__container"> <a href="#page-content" class="glue-header__link glue-header__skip-content" aria-label="Jump to content"> <p class="glue-header__skip-content-text">Jump to content</p> </a> <div class="glue-header
2024-05-27 22:43:27 UTC	1390	IN	Data Raw: 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 2e 2e 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 67 2d 6e 61 76 2d 6c 69 6e 6b 0a 20 20 64 61 74 61 2d 67 2d 63 61 74 65 67 6f 72 79 3d 22 73 69 74 65 20 6e 61 76 69 67 61 74 69 6f 6e 22 0a 20 20 64 61 74 61 2d 67 2d 61 63 74 69 6f 6e 3d 22 61 62 6f 75 74 22 0a 20 20 64 61 74 61 2d 67 2d 6c 61 62 65 6c 3d 22 68 65 61 64 65 72 22 0a 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 41 62 6f 75 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: header__link" href="../" target="_self" data-g-nav-link data-g-category="site navigation" data-g-action="about" data-g-label="header"> About </a>
2024-05-27 22:43:27 UTC	1390	IN	Data Raw: 61 73 73 3d 22 67 6c 75 65 2d 68 65 61 64 65 72 5f 5f 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 67 6c 75 65 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 61 62 6f 75 74 2e 67 6f 6f 67 6c 65 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 72 65 66 65 72 72 61 6c 26 61 6d 70 3b 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 6e 61 76 2d 74 68 65 2d 6b 65 79 77 6f 72 64 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ass="glue-header__item"> <a class="glue-header__link" href="https://www.blog.google/?utm_source=about.google&utm_medium=referral&utm_campaign=nav-the-keyword" target="_blank"
2024-05-27 22:43:27 UTC	1390	IN	Data Raw: 67 6c 75 65 2d 68 65 61 64 65 72 5f 5f 73 69 74 65 2d 73 77 69 74 63 68 65 72 2d 6d 65 6e 75 2d 69 74 65 6d 22 20 72 6f 6c 65 3d 22 6e 6f 6e 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2e 2e 2f 62 65 6c 6f 6e 67 69 6e 67 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 67 6c 75 65 2d 68 65 61 64 65 72 5f 5f 73 69 74 65 2d 73 77 69 74 63 68 65 72 2d 6d 65 6e 75 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: glue-header__site-switcher-menu-item" role="none"> <a href="../belonging/" class="glue-header__site-switcher-menu-link" role="menuitem" target="_self"
2024-05-27 22:43:27 UTC	1390	IN	Data Raw: 6e 3d 73 69 74 65 2d 73 77 69 74 63 68 65 72 2d 6e 61 76 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 67 6c 75 65 2d 68 65 61 64 65 72 5f 5f 73 69 74 65 2d 73 77 69 74 63 68 65 72 2d 6d 65 6e 75 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 67 2d 6e 61 76 2d 6c 69 6e 6b 0a 20 20 64 61 74 61 2d 67 2d 63 61 74 65 67 6f 72 79 3d 22 73 69 74 65 20 73 77 69 74 63 68 65 72 22 0a 20 20 64 61 74 61 2d 67 2d 61 63 74 69 6f Data Ascii: n=site-switcher-nav" class="glue-header__site-switcher-menu-link" role="menuitem" target="_blank" data-g-nav-link data-g-category="site switcher" data-g-actio
2024-05-27 22:43:27 UTC	1390	IN	Data Raw: 63 6c 61 73 73 3d 22 67 6c 75 65 2d 68 65 61 64 65 72 5f 5f 73 69 74 65 2d 73 77 69 74 63 68 65 72 2d 6d 65 6e 75 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 67 2d 6e 61 76 2d 6c 69 6e 6b 0a 20 20 64 61 74 61 2d 67 2d 63 61 74 65 67 6f 72 79 3d 22 73 69 74 65 20 73 77 69 74 63 68 65 72 22 0a 20 20 64 61 74 61 2d 67 2d 61 63 74 69 6f 6e 3d 22 73 75 73 74 61 69 6e 61 62 69 6c 69 74 79 22 0a 20 20 64 61 74 61 2d 67 2d 6c 61 62 65 6c 3d 22 68 65 61 64 65 72 22 0a Data Ascii: class="glue-header__site-switcher-menu-link" role="menuitem" target="_blank" data-g-nav-link data-g-category="site switcher" data-g-action="sustainability" data-g-label="header"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	50060	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:28 UTC	586	OUT	GET /assets-products/css/index.min.css?cache=4b0a69e HTTP/1.1 Host: about.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://about.google/products/?tab=uh Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:28 UTC	862	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/css Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 856695 Date: Mon, 27 May 2024 22:43:28 GMT Expires: Mon, 27 May 2024 22:43:28 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:28 UTC	528	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 Data Ascii: @charset "UTF-8";/! normalize.css v3.0.1 \| MIT License \| git.io/normalize /html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,su
2024-05-27 22:43:28 UTC	1390	IN	Data Raw: 7d 64 66 6e 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 Data Ascii: }dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:h
2024-05-27 22:43:28 UTC	1390	IN	Data Raw: 30 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 74 64 2c 74 68 7b 70 61 64 64 69 6e 67 3a 30 7d 61 2c 61 3a 61 66 74 65 72 2c 61 3a 62 65 66 6f 72 65 2c 61 62 62 72 2c 61 62 62 72 3a 61 66 74 65 72 2c 61 62 62 72 3a 62 65 66 6f 72 65 2c 61 63 72 6f 6e 79 6d 2c 61 63 72 6f 6e 79 6d 3a 61 66 74 65 72 2c 61 63 72 6f 6e 79 6d 3a 62 65 66 6f 72 65 2c 61 64 64 72 65 73 73 2c 61 64 64 72 65 73 73 3a 61 66 74 65 72 2c 61 64 64 72 65 73 73 3a 62 65 66 6f 72 65 2c 61 72 74 69 63 6c 65 2c 61 72 74 69 63 6c 65 3a 61 66 74 65 72 2c 61 72 74 69 63 6c 65 3a 62 65 66 6f 72 65 2c 61 73 69 64 65 2c 61 73 69 64 65 3a 61 66 74 65 72 2c 61 73 69 64 65 3a 62 65 66 6f 72 65 2c Data Ascii: 0}table{border-collapse:collapse;border-spacing:0}td,th{padding:0}a,a:after,a:before,abbr,abbr:after,abbr:before,acronym,acronym:after,acronym:before,address,address:after,address:before,article,article:after,article:before,aside,aside:after,aside:before,
2024-05-27 22:43:28 UTC	1390	IN	Data Raw: 66 74 65 72 2c 70 3a 62 65 66 6f 72 65 2c 70 69 63 74 75 72 65 2c 70 69 63 74 75 72 65 3a 61 66 74 65 72 2c 70 69 63 74 75 72 65 3a 62 65 66 6f 72 65 2c 70 72 65 2c 70 72 65 3a 61 66 74 65 72 2c 70 72 65 3a 62 65 66 6f 72 65 2c 71 2c 71 3a 61 66 74 65 72 2c 71 3a 62 65 66 6f 72 65 2c 73 61 6d 70 2c 73 61 6d 70 3a 61 66 74 65 72 2c 73 61 6d 70 3a 62 65 66 6f 72 65 2c 73 63 72 69 70 74 2c 73 63 72 69 70 74 3a 61 66 74 65 72 2c 73 63 72 69 70 74 3a 62 65 66 6f 72 65 2c 73 65 63 74 69 6f 6e 2c 73 65 63 74 69 6f 6e 3a 61 66 74 65 72 2c 73 65 63 74 69 6f 6e 3a 62 65 66 6f 72 65 2c 73 65 6c 65 63 74 2c 73 65 6c 65 63 74 3a 61 66 74 65 72 2c 73 65 6c 65 63 74 3a 62 65 66 6f 72 65 2c 73 6d 61 6c 6c 2c 73 6d 61 6c 6c 3a 61 66 74 65 72 2c 73 6d 61 6c 6c 3a 62 65 66 Data Ascii: fter,p:before,picture,picture:after,picture:before,pre,pre:after,pre:before,q,q:after,q:before,samp,samp:after,samp:before,script,script:after,script:before,section,section:after,section:before,select,select:after,select:before,small,small:after,small:bef
2024-05-27 22:43:28 UTC	1390	IN	Data Raw: 68 6f 76 65 72 2c 2e 67 6c 75 65 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 67 6c 75 65 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 67 6c 75 65 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 61 3a 61 63 74 69 76 65 2c 61 3a 66 6f 63 75 73 2c 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 37 34 65 61 36 7d 2e 67 6c 75 65 2d 69 6e 6c 69 6e 65 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 2e 67 6c 75 65 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 36 38 31 64 61 38 7d 2e 67 6c 75 65 2d 69 6e 6c 69 6e 65 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 67 6c 75 65 2d 69 6e 6c 69 6e 65 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 67 6c 75 65 2d 69 6e 6c 69 6e 65 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 67 6c 75 65 2d 6c 69 6e 6b 3a 61 63 74 69 76 Data Ascii: hover,.glue-link:active,.glue-link:focus,.glue-link:hover,a:active,a:focus,a:hover{color:#174ea6}.glue-inline-link:visited,.glue-link:visited,a:visited{color:#681da8}.glue-inline-link:active,.glue-inline-link:focus,.glue-inline-link:hover,.glue-link:activ
2024-05-27 22:43:28 UTC	1390	IN	Data Raw: 75 65 2d 6d 6f 64 2d 66 6f 6e 74 2d 72 65 76 65 72 73 65 64 20 2e 67 6c 75 65 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 67 6c 75 65 2d 6d 6f 64 2d 66 6f 6e 74 2d 72 65 76 65 72 73 65 64 20 2e 67 6c 75 65 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 67 6c 75 65 2d 6d 6f 64 2d 66 6f 6e 74 2d 72 65 76 65 72 73 65 64 20 61 3a 61 63 74 69 76 65 2c 2e 67 6c 75 65 2d 6d 6f 64 2d 66 6f 6e 74 2d 72 65 76 65 72 73 65 64 20 61 3a 66 6f 63 75 73 2c 2e 67 6c 75 65 2d 6d 6f 64 2d 66 6f 6e 74 2d 72 65 76 65 72 73 65 64 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 67 6c 75 65 2d 6d 6f 64 2d 66 6f 6e 74 2d 72 65 76 65 72 73 65 64 20 2e 67 6c 75 65 2d 69 6e 6c 69 6e 65 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 2e 67 6c 75 65 2d 6d 6f 64 2d 66 6f 6e 74 2d 72 65 76 Data Ascii: ue-mod-font-reversed .glue-link:focus,.glue-mod-font-reversed .glue-link:hover,.glue-mod-font-reversed a:active,.glue-mod-font-reversed a:focus,.glue-mod-font-reversed a:hover{color:#fff}.glue-mod-font-reversed .glue-inline-link:visited,.glue-mod-font-rev
2024-05-27 22:43:28 UTC	1390	IN	Data Raw: 3d 72 74 6c 5d 20 75 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 6f 6c 2e 67 6c 75 65 2d 69 6e 6c 69 6e 65 20 6c 69 2c 75 6c 2e 67 6c 75 65 2d 69 6e 6c 69 6e 65 20 6c 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 6f 6c 20 6c 69 20 6f 6c 2c 6f 6c 20 6c 69 20 75 6c 2c 75 6c 20 6c 69 20 6f 6c 2c 75 6c 20 6c 69 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 7d 6f 6c 20 6c 69 20 6f 6c 20 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 6f 6c 20 6c 69 20 6f 6c 20 68 74 6d 6c 2c 6f 6c 20 6c 69 20 6f 6c 20 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 6f 6c 20 6c 69 20 75 6c 20 68 74 6d 6c 2c 6f 6c 20 6c 69 20 6f 6c 20 68 74 6d 6c 5b Data Ascii: =rtl] ul{margin-left:0;margin-right:20px}ol.glue-inline li,ul.glue-inline li{display:inline-block}ol li ol,ol li ul,ul li ol,ul li ul{margin-bottom:0;margin-left:20px}ol li ol html[dir=rtl] ol li ol html,ol li ol html[dir=rtl] ol li ul html,ol li ol html[
2024-05-27 22:43:28 UTC	1390	IN	Data Raw: 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 34 34 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 30 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 62 6f 64 79 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 73 6d 22 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 62 6f 64 79 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 6d 64 22 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 62 6f 64 79 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 6c 67 22 7d 7d 40 6d 65 64 69 61 20 Data Ascii: :normal;font-weight:300;line-height:1.444;margin:0;overflow-wrap:break-word;padding:0;word-wrap:break-word}body::after{content:"sm";display:none}@media (min-width:600px){body::after{content:"md"}}@media (min-width:1024px){body::after{content:"lg"}}@media
2024-05-27 22:43:28 UTC	1390	IN	Data Raw: 2d 62 6f 74 74 6f 6d 2d 6d 61 72 67 69 6e 2c 68 33 2e 67 6c 75 65 2d 68 61 73 2d 74 6f 70 2d 62 6f 74 74 6f 6d 2d 6d 61 72 67 69 6e 2c 68 34 2e 67 6c 75 65 2d 68 61 73 2d 74 6f 70 2d 62 6f 74 74 6f 6d 2d 6d 61 72 67 69 6e 2c 68 35 2e 67 6c 75 65 2d 68 61 73 2d 74 6f 70 2d 62 6f 74 74 6f 6d 2d 6d 61 72 67 69 6e 2c 68 36 2e 67 6c 75 65 2d 68 61 73 2d 74 6f 70 2d 62 6f 74 74 6f 6d 2d 6d 61 72 67 69 6e 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 7d 70 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 32 35 70 78 7d 70 2e 67 6c 75 65 2d 63 6f 70 79 2d 2d 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 Data Ascii: -bottom-margin,h3.glue-has-top-bottom-margin,h4.glue-has-top-bottom-margin,h5.glue-has-top-bottom-margin,h6.glue-has-top-bottom-margin{margin-bottom:16px;margin-top:16px}p{line-height:1.5;font-size:16px;letter-spacing:.25px}p.glue-copy--lead{font-size:16p
2024-05-27 22:43:28 UTC	1390	IN	Data Raw: 73 6f 72 3a 68 65 6c 70 3b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 61 62 62 72 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 67 6c 75 65 2d 65 78 70 61 6e 73 69 6f 6e 2d 70 61 6e 65 6c 73 20 2e 67 6c 75 65 2d 65 78 70 61 6e 73 69 6f 6e 2d 70 61 6e 65 6c 5f 5f 62 75 74 74 6f 6e 2d 68 65 61 64 65 72 2c 2e 67 6c 75 65 2d 66 6f 6f 74 65 72 20 2e 67 6c 75 65 2d 73 6f 63 69 61 6c 20 2e 67 6c 75 65 2d 73 6f 63 69 61 6c 5f 5f 74 69 74 6c 65 2e 67 6c 75 65 2d 73 6f 63 69 61 6c 5f 5f 74 69 74 6c 65 2d 2d 69 6e 6c 69 6e 65 2c 2e 67 6c 75 65 2d 66 6f 6f 74 65 72 5f 5f 73 69 74 65 2d 6c 69 6e 6b 73 2d 68 65 61 64 65 72 20 2e 67 6c 75 65 2d 66 6f 6f 74 65 72 5f 5f 73 69 74 Data Ascii: sor:help;font-size:90%;text-transform:uppercase}abbr{text-transform:none}.glue-expansion-panels .glue-expansion-panel__button-header,.glue-footer .glue-social .glue-social__title.glue-social__title--inline,.glue-footer__site-links-header .glue-footer__sit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	50055	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:28 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1781 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:28 UTC	1781	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 35 38 31 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849805817",null,null,null,
2024-05-27 22:43:28 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:28 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:28 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	50056	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:28 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1778 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:28 UTC	1778	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 35 39 34 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1716849805943",null,null,null,
2024-05-27 22:43:28 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:28 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:28 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	50057	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:28 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1279 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:28 UTC	1279	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 35 39 34 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849805945",null,null,null
2024-05-27 22:43:28 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:28 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:28 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	50058	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:28 UTC	1021	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1279 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:28 UTC	1279	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 35 39 34 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1716849805947",null,null,null
2024-05-27 22:43:28 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:28 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:28 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	50059	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:28 UTC	1012	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 909 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:28 UTC	909	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 35 31 39 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1716849805193",null,null,null,
2024-05-27 22:43:28 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:28 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:28 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	50064	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:28 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:28 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:28 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:28 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:28 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	50069	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:29 UTC	631	OUT	GET /assets-products/img/glue-google-color-logo.svg HTTP/1.1 Host: about.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/products/?tab=uh Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:29 UTC	865	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 1719 Date: Mon, 27 May 2024 22:43:29 GMT Expires: Mon, 27 May 2024 22:43:29 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:29 UTC	525	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 67 6f 6f 67 6c 65 2d 63 6f 6c 6f 72 2d 6c 6f 67 6f 22 20 77 69 64 74 68 3d 22 37 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 34 20 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 32 38 35 46 34 22 20 64 3d 22 4d 39 2e 32 34 20 38 2e 31 39 76 32 2e 34 36 68 35 2e 38 38 63 2d 2e 31 38 20 31 2e 33 38 2d 2e 36 34 20 32 2e 33 39 2d 31 2e 33 34 20 33 2e 31 2d 2e 38 36 2e 38 36 2d 32 2e 32 20 31 2e 38 2d 34 2e 35 34 20 31 2e 38 2d 33 2e 36 32 20 30 2d 36 2e 34 35 2d 32 2e 39 32 2d 36 2e 34 35 2d 36 2e 35 34 73 32 2e 38 33 2d 36 2e 35 34 20 36 2e 34 35 2d 36 2e 35 34 63 31 2e 39 35 20 Data Ascii: <svg id="google-color-logo" width="74" height="24" viewBox="0 0 74 24" xmlns="http://www.w3.org/2000/svg"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95
2024-05-27 22:43:29 UTC	1194	IN	Data Raw: 35 2e 38 33 2d 32 2e 34 36 20 35 2e 38 33 2d 35 2e 38 31 63 30 2d 33 2e 33 37 2d 32 2e 36 32 2d 35 2e 38 31 2d 35 2e 38 33 2d 35 2e 38 31 7a 6d 30 20 39 2e 33 33 63 2d 31 2e 37 36 20 30 2d 33 2e 32 38 2d 31 2e 34 35 2d 33 2e 32 38 2d 33 2e 35 32 20 30 2d 32 2e 30 39 20 31 2e 35 32 2d 33 2e 35 32 20 33 2e 32 38 2d 33 2e 35 32 73 33 2e 32 38 20 31 2e 34 33 20 33 2e 32 38 20 33 2e 35 32 63 30 20 32 2e 30 37 2d 31 2e 35 32 20 33 2e 35 32 2d 33 2e 32 38 20 33 2e 35 32 7a 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 32 38 35 46 34 22 20 64 3d 22 4d 35 33 2e 35 38 20 37 2e 34 39 68 2d 2e 30 39 63 2d 2e 35 37 2d 2e 36 38 2d 31 2e 36 37 2d 31 2e 33 2d 33 2e 30 36 2d 31 2e 33 43 34 37 2e 35 33 20 36 2e 31 39 20 34 35 20 38 2e 37 32 20 34 35 Data Ascii: 5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"></path><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	50068	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:29 UTC	630	OUT	GET /assets-products/img/glue-icon-expand-more.svg HTTP/1.1 Host: about.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/products/?tab=uh Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:29 UTC	864	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 181 Date: Mon, 27 May 2024 22:43:29 GMT Expires: Mon, 27 May 2024 22:43:29 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:29 UTC	181	IN	Data Raw: 20 3c 73 76 67 20 69 64 3d 22 65 78 70 61 6e 64 2d 6d 6f 72 65 22 20 77 69 64 74 68 3d 22 31 38 22 20 68 65 69 67 68 74 3d 22 31 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 66 36 33 36 38 22 20 64 3d 22 4d 35 2e 34 31 20 37 2e 35 39 4c 34 20 39 6c 38 20 38 20 38 2d 38 2d 31 2e 34 31 2d 31 2e 34 31 4c 31 32 20 31 34 2e 31 37 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e Data Ascii: <svg id="expand-more" width="18" height="18" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path fill="#5f6368" d="M5.41 7.59L4 9l8 8 8-8-1.41-1.41L12 14.17"></path></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	50071	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:29 UTC	670	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:29 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:29 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:29 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:29 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	50072	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:29 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:29 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:29 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:29 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:29 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	50077	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:29 UTC	570	OUT	GET /assets-products/js/index.min.js?cache=d6b48bc HTTP/1.1 Host: about.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://about.google/products/?tab=uh Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:29 UTC	869	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 294828 Date: Mon, 27 May 2024 22:43:29 GMT Expires: Mon, 27 May 2024 22:43:29 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:29 UTC	521	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 3d 62 7c 7c 7b 7d 3b 62 2e 73 63 6f 70 65 3d 7b 7d 3b 62 2e 63 72 65 61 74 65 54 65 6d 70 6c 61 74 65 54 61 67 46 69 72 73 74 41 72 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 72 61 77 3d 61 7d 3b 62 2e 63 72 65 61 74 65 54 65 6d 70 6c 61 74 65 54 61 67 46 69 72 73 74 41 72 67 57 69 74 68 52 61 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 61 2e 72 61 77 3d 63 3b 72 65 74 75 72 6e 20 61 7d 3b 62 2e 61 72 72 61 79 49 74 65 72 61 74 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var b=b\|\|{};b.scope={};b.createTemplateTagFirstArg=function(a){return a.raw=a};b.createTemplateTagFirstArgWithRaw=function(a,c){a.raw=c;return a};b.arrayIterat
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 20 63 3f 63 2e 63 61 6c 6c 28 61 29 3a 62 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 28 61 29 7d 3b 0a 62 2e 61 72 72 61 79 46 72 6f 6d 49 74 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 63 2c 64 3d 5b 5d 3b 21 28 63 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 64 2e 70 75 73 68 28 63 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 64 7d 3b 62 2e 61 72 72 61 79 46 72 6f 6d 49 74 65 72 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 61 3a 62 2e 61 72 72 61 79 46 72 6f 6d 49 74 65 72 61 74 6f 72 28 62 2e 6d 61 6b 65 49 74 65 72 61 74 6f 72 28 61 29 29 7d 3b 62 2e 41 53 53 55 4d 45 5f 45 53 35 3d 21 31 3b 62 2e 41 53 53 55 4d 45 5f 4e 4f 5f Data Ascii: c?c.call(a):b.arrayIterator(a)};b.arrayFromIterator=function(a){for(var c,d=[];!(c=a.next()).done;)d.push(c.value);return d};b.arrayFromIterable=function(a){return a instanceof Array?a:b.arrayFromIterator(b.makeIterator(a))};b.ASSUME_ES5=!1;b.ASSUME_NO_
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 61 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 3d 62 2e 67 6c 6f 62 61 6c 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 64 29 29 72 65 74 75 72 6e 3b 64 3d 64 5b 66 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 65 3d 64 5b 61 5d 3b 63 3d 63 28 65 29 3b 63 21 3d 65 26 26 6e 75 6c 6c 21 3d 63 26 26 62 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 64 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 63 7d 29 7d 3b 0a 62 2e 70 6f 6c 79 66 69 6c 6c 49 73 6f 6c 61 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 Data Ascii: ated=function(a,c){var d=b.global;a=a.split(".");for(var e=0;e<a.length-1;e++){var f=a[e];if(!(f in d))return;d=d[f]}a=a[a.length-1];e=d[a];c=c(e);c!=e&&null!=c&&b.defineProperty(d,a,{configurable:!0,writable:!0,value:c})};b.polyfillIsolated=function(a,c
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 61 74 63 68 28 64 29 7b 7d 72 65 74 75 72 6e 21 31 7d 3b 62 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 62 2e 54 52 55 53 54 5f 45 53 36 5f 50 4f 4c 59 46 49 4c 4c 53 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 62 2e 75 6e 64 65 72 73 63 6f 72 65 50 72 6f 74 6f 43 61 6e 42 65 53 65 74 28 29 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 63 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c Data Ascii: atch(d){}return!1};b.setPrototypeOf=b.TRUST_ES6_POLYFILLS&&"function"==typeof Object.setPrototypeOf?Object.setPrototypeOf:b.underscoreProtoCanBeSet()?function(a,c){a.__proto__=c;if(a.__proto__!==c)throw new TypeError(a+" is not extensible");return a}:null
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 6f 6e 28 61 29 7b 74 68 69 73 2e 61 62 72 75 70 74 43 6f 6d 70 6c 65 74 69 6f 6e 5f 3d 7b 65 78 63 65 70 74 69 6f 6e 3a 61 2c 69 73 45 78 63 65 70 74 69 6f 6e 3a 21 30 7d 3b 74 68 69 73 2e 6a 75 6d 70 54 6f 45 72 72 6f 72 48 61 6e 64 6c 65 72 5f 28 29 7d 3b 62 2e 67 65 6e 65 72 61 74 6f 72 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 61 62 72 75 70 74 43 6f 6d 70 6c 65 74 69 6f 6e 5f 3d 7b 72 65 74 75 72 6e 3a 61 7d 3b 74 68 69 73 2e 6e 65 78 74 41 64 64 72 65 73 73 3d 74 68 69 73 2e 66 69 6e 61 6c 6c 79 41 64 64 72 65 73 73 5f 7d 3b 0a 62 2e 67 65 6e 65 72 61 74 6f 72 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 75 6d 70 54 68 72 6f 75 67 68 46 69 6e 61 6c Data Ascii: on(a){this.abruptCompletion_={exception:a,isException:!0};this.jumpToErrorHandler_()};b.generator.Context.prototype.return=function(a){this.abruptCompletion_={return:a};this.nextAddress=this.finallyAddress_};b.generator.Context.prototype.jumpThroughFinal
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 6f 6e 74 65 78 74 73 5f 5b 64 5d 3d 74 68 69 73 2e 61 62 72 75 70 74 43 6f 6d 70 6c 65 74 69 6f 6e 5f 3a 74 68 69 73 2e 66 69 6e 61 6c 6c 79 43 6f 6e 74 65 78 74 73 5f 3d 5b 74 68 69 73 2e 61 62 72 75 70 74 43 6f 6d 70 6c 65 74 69 6f 6e 5f 5d 3b 74 68 69 73 2e 63 61 74 63 68 41 64 64 72 65 73 73 5f 3d 61 7c 7c 30 3b 74 68 69 73 2e 66 69 6e 61 6c 6c 79 41 64 64 72 65 73 73 5f 3d 63 7c 7c 30 7d 3b 0a 62 2e 67 65 6e 65 72 61 74 6f 72 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 65 61 76 65 46 69 6e 61 6c 6c 79 42 6c 6f 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 63 3d 74 68 69 73 2e 66 69 6e 61 6c 6c 79 43 6f 6e 74 65 78 74 73 5f 2e 73 70 6c 69 63 65 28 63 7c 7c 30 29 5b 30 5d 3b 69 66 28 63 3d 74 68 69 73 2e 61 62 72 75 70 74 43 6f 6d Data Ascii: ontexts_[d]=this.abruptCompletion_:this.finallyContexts_=[this.abruptCompletion_];this.catchAddress_=a\|\|0;this.finallyAddress_=c\|\|0};b.generator.Context.prototype.leaveFinallyBlock=function(a,c){c=this.finallyContexts_.splice(c\|\|0)[0];if(c=this.abruptCom
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 69 65 6c 64 41 6c 6c 53 74 65 70 5f 28 22 72 65 74 75 72 6e 22 69 6e 20 63 3f 63 5b 22 72 65 74 75 72 6e 22 5d 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 64 2c 64 6f 6e 65 3a 21 30 7d 7d 2c 61 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 5f 2e 72 65 74 75 72 6e 29 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 5f 2e 72 65 74 75 72 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 78 74 53 74 65 70 5f 28 29 7d 3b 0a 62 2e 67 65 6e 65 72 61 74 6f 72 2e 45 6e 67 69 6e 65 5f 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 72 6f 77 5f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 63 6f 6e 74 65 78 74 5f 2e 73 74 61 72 74 5f 28 29 3b 69 66 28 74 68 69 73 2e 63 6f 6e 74 65 78 74 5f 2e 79 69 65 6c 64 41 6c 6c 49 74 65 72 61 74 6f 72 5f Data Ascii: ieldAllStep_("return"in c?c["return"]:function(d){return{value:d,done:!0}},a,this.context_.return);this.context_.return(a);return this.nextStep_()};b.generator.Engine_.prototype.throw_=function(a){this.context_.start_();if(this.context_.yieldAllIterator_
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 61 2e 72 65 74 75 72 6e 5f 28 63 29 7d 3b 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 3b 62 2e 67 65 6e 65 72 61 74 6f 72 2e 63 72 65 61 74 65 47 65 6e 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 63 3d 6e 65 77 20 62 2e 67 65 6e 65 72 61 74 6f 72 2e 47 65 6e 65 72 61 74 6f 72 5f 28 6e 65 77 20 62 2e 67 65 6e 65 72 61 74 6f 72 2e 45 6e 67 69 6e 65 5f 28 63 29 29 3b 62 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 26 26 61 2e 70 72 6f 74 6f 74 79 70 65 26 26 62 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 63 2c 61 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 63 7d 3b Data Ascii: rn=function(c){return a.return_(c)};this[Symbol.iterator]=function(){return this}};b.generator.createGenerator=function(a,c){c=new b.generator.Generator_(new b.generator.Engine_(c));b.setPrototypeOf&&a.prototype&&b.setPrototypeOf(c,a.prototype);return c};
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 6a 73 63 6f 6d 70 24 73 79 6d 62 6f 6c 24 69 64 5f 7d 3b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 63 7d 2c 22 65 73 36 22 2c 22 65 73 33 22 29 3b 0a 62 2e 70 6f 6c 79 66 69 6c 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 Data Ascii: type.toString=function(){return this.$jscomp$symbol$id_};var e=0;return c},"es6","es3");b.polyfill("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var c="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int3
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 73 65 74 54 69 6d 65 6f 75 74 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 61 73 79 6e 63 45 78 65 63 75 74 65 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 28 68 2c 30 29 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 65 78 65 63 75 74 65 42 61 74 63 68 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 62 61 74 63 68 5f 26 26 74 68 69 73 2e 62 61 74 63 68 5f 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 62 61 74 63 68 5f 3b 74 68 69 73 2e 62 61 74 63 68 5f 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6c 29 7b 76 61 72 20 6d 3d 68 5b 6c 5d 3b 68 5b 6c 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6d 28 29 7d 63 61 74 63 68 28 6e 29 7b 74 68 69 73 2e 61 73 79 6e 63 54 68 72 6f 77 5f Data Ascii: setTimeout;d.prototype.asyncExecuteFunction=function(h){f(h,0)};d.prototype.executeBatch_=function(){for(;this.batch_&&this.batch_.length;){var h=this.batch_;this.batch_=[];for(var l=0;l<h.length;++l){var m=h[l];h[l]=null;try{m()}catch(n){this.asyncThrow_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50075	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:29 UTC	623	OUT	GET /assets-products/img/glue-icons.svg HTTP/1.1 Host: about.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: image Referer: https://about.google/products/?tab=uh Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:29 UTC	866	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 14116 Date: Mon, 27 May 2024 22:43:29 GMT Expires: Mon, 27 May 2024 22:43:29 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:29 UTC	524	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 63 68 65 76 72 6f 6e 2d 6c 65 66 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 34 31 20 35 2e 34 31 4c 31 35 20 34 6c 2d 38 20 38 20 38 20 38 20 31 2e 34 31 2d 31 2e 34 31 4c 39 2e 38 33 20 31 32 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 37 2e 35 39 20 31 38 2e 35 39 4c 39 20 32 30 6c 38 2d 38 2d 38 2d 38 2d 31 2e 34 31 20 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"> <defs> <svg id="chevron-left" viewBox="0 0 24 24"><path d="M16.41 5.41L15 4l-8 8 8 8 1.41-1.41L9.83 12"></path></svg> <svg id="chevron-right" viewBox="0 0 24 24"><path d="M7.59 18.59L9 20l8-8-8-8-1.41 1.4
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 72 6f 77 2d 62 61 63 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 30 20 31 31 48 37 2e 38 33 6c 35 2e 35 39 2d 35 2e 35 39 4c 31 32 20 34 6c 2d 38 20 38 20 38 20 38 20 31 2e 34 31 2d 31 2e 34 31 4c 37 2e 38 33 20 31 33 48 32 30 76 2d 32 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 61 72 72 6f 77 2d 66 6f 72 77 61 72 64 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 34 6c 2d 31 2e 34 31 20 31 2e 34 31 4c 31 36 2e 31 37 20 31 31 48 34 76 32 68 31 32 2e 31 37 6c 2d 35 2e 35 38 20 35 2e 35 39 4c 31 32 20 32 30 6c 38 2d 38 2d 38 2d 38 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 Data Ascii: row-back" viewBox="0 0 24 24"><path d="M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.41L7.83 13H20v-2z"></path></svg> <svg id="arrow-forward" viewBox="0 0 24 24"><path d="M12 4l-1.41 1.41L16.17 11H4v2h12.17l-5.58 5.59L12 20l8-8-8-8z"></path></svg> <s
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 2d 32 2d 32 2d 32 2d 32 20 2e 39 2d 32 20 32 20 2e 39 20 32 20 32 20 32 7a 6d 30 20 32 63 2d 31 2e 31 20 30 2d 32 20 2e 39 2d 32 20 32 73 2e 39 20 32 20 32 20 32 20 32 2d 2e 39 20 32 2d 32 2d 2e 39 2d 32 2d 32 2d 32 7a 6d 30 20 36 63 2d 31 2e 31 20 30 2d 32 20 2e 39 2d 32 20 32 73 2e 39 20 32 20 32 20 32 20 32 2d 2e 39 20 32 2d 32 2d 2e 39 2d 32 2d 32 2d 32 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 64 72 69 76 65 2d 70 64 66 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 37 20 31 31 2e 35 68 31 76 2d 31 48 37 76 31 7a 4d 31 39 20 33 48 35 63 2d 31 2e 31 20 30 2d 32 20 2e 39 2d 32 20 32 76 31 34 63 30 20 31 2e 31 2e 39 20 32 20 32 20 32 68 31 34 63 31 2e 31 20 Data Ascii: -2-2-2-2 .9-2 2 .9 2 2 2zm0 2c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2zm0 6c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2z"></path></svg> <svg id="drive-pdf" viewBox="0 0 24 24"><path d="M7 11.5h1v-1H7v1zM19 3H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 37 6c 38 20 35 2e 33 33 20 38 2d 35 2e 33 33 56 31 38 48 34 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 69 6e 73 74 61 67 72 61 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 2c 30 20 43 31 35 2e 33 2c 30 20 31 35 2e 37 2c 30 20 31 37 2c 30 20 43 31 38 2e 33 2c 30 2e 31 20 31 39 2e 31 2c 30 2e 33 20 31 39 2e 39 2c 30 2e 36 20 43 32 30 2e 37 2c 30 2e 39 20 32 31 2e 33 2c 31 2e 33 20 32 32 2c 32 20 43 32 32 2e 37 2c 32 2e 37 20 32 33 2e 31 2c 33 2e 34 20 32 33 2e 33 2c 34 2e 32 20 43 32 33 2e 36 2c 35 20 32 33 2e 38 2c 35 2e 38 20 32 33 2e 39 2c 37 2e 31 20 43 32 34 2c 38 2e 33 20 32 34 2c 38 2e 37 20 32 34 2c 31 32 20 43 32 34 2c 31 35 2e 33 20 32 34 2c Data Ascii: 7l8 5.33 8-5.33V18H4z"></path></svg> <svg id="instagram" viewBox="0 0 24 24"><path d="M12,0 C15.3,0 15.7,0 17,0 C18.3,0.1 19.1,0.3 19.9,0.6 C20.7,0.9 21.3,1.3 22,2 C22.7,2.7 23.1,3.4 23.3,4.2 C23.6,5 23.8,5.8 23.9,7.1 C24,8.3 24,8.7 24,12 C24,15.3 24,
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 2c 31 38 2e 32 20 43 38 2e 36 2c 31 38 2e 32 20 35 2e 38 2c 31 35 2e 34 20 35 2e 38 2c 31 32 20 43 35 2e 38 2c 38 2e 36 20 38 2e 36 2c 35 2e 38 20 31 32 2c 35 2e 38 20 5a 20 4d 31 32 2c 31 36 20 43 31 34 2e 32 2c 31 36 20 31 36 2c 31 34 2e 32 20 31 36 2c 31 32 20 43 31 36 2c 39 2e 38 20 31 34 2e 32 2c 38 20 31 32 2c 38 20 43 39 2e 38 2c 38 20 38 2c 39 2e 38 20 38 2c 31 32 20 43 38 2c 31 34 2e 32 20 39 2e 38 2c 31 36 20 31 32 2c 31 36 20 5a 20 4d 31 38 2e 34 2c 37 20 43 31 37 2e 36 32 36 38 30 31 34 2c 37 20 31 37 2c 36 2e 33 37 33 31 39 38 36 35 20 31 37 2c 35 2e 36 20 43 31 37 2c 34 2e 38 32 36 38 30 31 33 35 20 31 37 2e 36 32 36 38 30 31 34 2c 34 2e 32 20 31 38 2e 34 2c 34 2e 32 20 43 31 39 2e 31 37 33 31 39 38 36 2c 34 2e 32 20 31 39 2e 38 2c 34 2e 38 Data Ascii: ,18.2 C8.6,18.2 5.8,15.4 5.8,12 C5.8,8.6 8.6,5.8 12,5.8 Z M12,16 C14.2,16 16,14.2 16,12 C16,9.8 14.2,8 12,8 C9.8,8 8,9.8 8,12 C8,14.2 9.8,16 12,16 Z M18.4,7 C17.6268014,7 17,6.37319865 17,5.6 C17,4.82680135 17.6268014,4.2 18.4,4.2 C19.1731986,4.2 19.8,4.8
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 38 2e 33 31 63 2d 31 20 30 2d 31 2e 38 31 2d 2e 38 31 2d 31 2e 38 31 2d 31 2e 38 31 53 35 2e 35 20 34 2e 36 39 20 36 2e 35 20 34 2e 36 39 73 31 2e 38 31 2e 38 31 20 31 2e 38 31 20 31 2e 38 31 53 37 2e 35 20 38 2e 33 31 20 36 2e 35 20 38 2e 33 31 7a 4d 31 39 20 31 39 68 2d 33 76 2d 35 2e 33 63 30 2d 2e 38 33 2d 2e 36 37 2d 31 2e 35 2d 31 2e 35 2d 31 2e 35 73 2d 31 2e 35 2e 36 37 2d 31 2e 35 20 31 2e 35 56 31 39 68 2d 33 76 2d 39 68 33 76 31 2e 32 63 2e 35 32 2d 2e 38 34 20 31 2e 35 39 2d 31 2e 34 20 32 2e 35 2d 31 2e 34 20 31 2e 39 33 20 30 20 33 2e 35 20 31 2e 35 37 20 33 2e 35 20 33 2e 35 56 31 39 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 73 68 61 72 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 Data Ascii: 8.31c-1 0-1.81-.81-1.81-1.81S5.5 4.69 6.5 4.69s1.81.81 1.81 1.81S7.5 8.31 6.5 8.31zM19 19h-3v-5.3c0-.83-.67-1.5-1.5-1.5s-1.5.67-1.5 1.5V19h-3v-9h3v1.2c.52-.84 1.59-1.4 2.5-1.4 1.93 0 3.5 1.57 3.5 3.5V19z"></path></svg> <svg id="share" viewBox="0 0 24
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 39 36 2d 31 2e 39 33 2d 2e 39 36 2d 32 2e 34 2d 31 2e 30 32 43 31 37 2e 30 34 20 33 2e 34 37 20 31 32 20 33 2e 35 20 31 32 20 33 2e 35 73 2d 35 2e 30 32 2d 2e 30 33 2d 38 2e 33 37 2e 32 31 63 2d 2e 34 36 2e 30 36 2d 31 2e 34 38 2e 30 36 2d 32 2e 33 39 20 31 2e 30 32 43 2e 35 32 20 35 2e 34 35 2e 32 38 20 37 2e 31 2e 32 38 20 37 2e 31 53 2e 30 34 20 39 2e 30 35 20 30 20 31 30 2e 39 38 56 31 33 63 2e 30 34 20 31 2e 39 34 2e 32 38 20 33 2e 38 37 2e 32 38 20 33 2e 38 37 73 2e 32 34 20 31 2e 36 35 2e 39 36 20 32 2e 33 38 63 2e 39 31 2e 39 35 20 32 2e 31 2e 39 32 20 32 2e 36 34 20 31 2e 30 32 20 31 2e 38 38 2e 31 38 20 37 2e 39 31 2e 32 32 20 38 2e 31 32 2e 32 32 20 30 20 30 20 35 2e 30 35 2e 30 31 20 38 2e 34 2d 2e 32 33 2e 34 36 2d 2e 30 36 20 31 2e 34 38 2d Data Ascii: 96-1.93-.96-2.4-1.02C17.04 3.47 12 3.5 12 3.5s-5.02-.03-8.37.21c-.46.06-1.48.06-2.39 1.02C.52 5.45.28 7.1.28 7.1S.04 9.05 0 10.98V13c.04 1.94.28 3.87.28 3.87s.24 1.65.96 2.38c.91.95 2.1.92 2.64 1.02 1.88.18 7.91.22 8.12.22 0 0 5.05.01 8.4-.23.46-.06 1.48-
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 3c 2f 70 61 74 68 3e 3c 70 6f 6c 79 67 6f 6e 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 70 6f 69 6e 74 73 3d 22 39 2e 36 2c 31 35 2e 35 20 39 2e 36 2c 38 2e 35 20 31 36 2c 31 32 2e 31 20 22 3e 3c 2f 70 6f 6c 79 67 6f 6e 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 76 69 64 65 6f 2d 79 6f 75 74 75 62 65 2d 72 65 64 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 30 30 22 20 64 3d 22 4d 32 33 2e 37 34 20 37 2e 31 73 2d 2e 32 33 2d 31 2e 36 35 2d 2e 39 35 2d 32 2e 33 37 63 2d 2e 39 31 2d 2e 39 36 2d 31 2e 39 33 2d 2e 39 36 2d 32 2e 34 2d 31 2e 30 32 43 31 37 2e 30 34 20 33 2e 34 37 20 31 32 20 33 2e 35 20 31 32 20 33 2e 35 73 2d 35 2e 30 32 2d 2e 30 33 2d 38 2e 33 37 2e 32 31 63 2d 2e Data Ascii: </path><polygon fill="#fff" points="9.6,15.5 9.6,8.5 16,12.1 "></polygon></svg> <svg id="video-youtube-red" viewBox="0 0 24 24"><path fill="#f00" d="M23.74 7.1s-.23-1.65-.95-2.37c-.91-.96-1.93-.96-2.4-1.02C17.04 3.47 12 3.5 12 3.5s-5.02-.03-8.37.21c-.
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 2e 34 31 4c 31 38 20 38 6c 2d 36 2d 36 2d 36 20 36 20 31 2e 34 31 20 31 2e 34 31 4c 31 32 20 34 2e 38 33 6c 34 2e 35 39 20 34 2e 35 38 7a 4d 31 32 20 31 39 2e 31 37 6c 2d 34 2e 35 39 2d 34 2e 35 38 4c 36 20 31 36 6c 36 20 36 20 36 2d 36 2d 31 2e 34 31 2d 31 2e 34 31 4c 31 32 20 31 39 2e 31 37 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 70 6c 61 79 2d 63 69 72 63 6c 65 2d 66 69 6c 6c 65 64 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 32 43 36 2e 34 38 20 32 20 32 20 36 2e 34 38 20 32 20 31 32 73 34 2e 34 38 20 31 30 20 31 30 20 31 30 20 31 30 2d 34 2e 34 38 20 31 30 2d 31 30 53 31 37 2e 35 32 20 32 20 31 32 20 32 7a 6d 2d 32 20 31 34 2e 35 76 2d 39 6c Data Ascii: .41L18 8l-6-6-6 6 1.41 1.41L12 4.83l4.59 4.58zM12 19.17l-4.59-4.58L6 16l6 6 6-6-1.41-1.41L12 19.17z"></path></svg> <svg id="play-circle-filled" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm-2 14.5v-9l
2024-05-27 22:43:29 UTC	1390	IN	Data Raw: 31 2e 35 34 20 32 2e 33 33 20 33 2e 34 33 20 35 2e 31 35 20 33 2e 34 33 20 32 2e 39 39 20 30 20 35 2e 35 32 2d 31 2e 37 36 20 35 2e 35 32 2d 36 2e 30 35 56 36 2e 34 39 68 2d 32 2e 34 32 76 31 7a 6d 2d 32 2e 39 33 20 38 2e 30 33 63 2d 31 2e 37 36 20 30 2d 33 2e 31 2d 31 2e 35 2d 33 2e 31 2d 33 2e 35 32 20 30 2d 32 2e 30 35 20 31 2e 33 34 2d 33 2e 35 32 20 33 2e 31 2d 33 2e 35 32 20 31 2e 37 34 20 30 20 33 2e 31 20 31 2e 35 20 33 2e 31 20 33 2e 35 34 2e 30 31 20 32 2e 30 33 2d 31 2e 33 36 20 33 2e 35 2d 33 2e 31 20 33 2e 35 7a 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 42 42 43 30 35 22 20 64 3d 22 4d 33 38 20 36 2e 31 39 63 2d 33 2e 32 31 20 30 2d 35 2e 38 33 20 32 2e 34 34 2d 35 2e 38 33 20 35 2e 38 31 20 30 20 33 2e 33 34 20 32 Data Ascii: 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3.52 1.74 0 3.1 1.5 3.1 3.54.01 2.03-1.36 3.5-3.1 3.5z"></path><path fill="#FBBC05" d="M38 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50078	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:29 UTC	382	OUT	GET /assets-products/img/glue-google-color-logo.svg HTTP/1.1 Host: about.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:29 UTC	865	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 1719 Date: Mon, 27 May 2024 22:43:29 GMT Expires: Mon, 27 May 2024 22:43:29 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:29 UTC	525	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 67 6f 6f 67 6c 65 2d 63 6f 6c 6f 72 2d 6c 6f 67 6f 22 20 77 69 64 74 68 3d 22 37 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 34 20 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 32 38 35 46 34 22 20 64 3d 22 4d 39 2e 32 34 20 38 2e 31 39 76 32 2e 34 36 68 35 2e 38 38 63 2d 2e 31 38 20 31 2e 33 38 2d 2e 36 34 20 32 2e 33 39 2d 31 2e 33 34 20 33 2e 31 2d 2e 38 36 2e 38 36 2d 32 2e 32 20 31 2e 38 2d 34 2e 35 34 20 31 2e 38 2d 33 2e 36 32 20 30 2d 36 2e 34 35 2d 32 2e 39 32 2d 36 2e 34 35 2d 36 2e 35 34 73 32 2e 38 33 2d 36 2e 35 34 20 36 2e 34 35 2d 36 2e 35 34 63 31 2e 39 35 20 Data Ascii: <svg id="google-color-logo" width="74" height="24" viewBox="0 0 74 24" xmlns="http://www.w3.org/2000/svg"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95
2024-05-27 22:43:29 UTC	1194	IN	Data Raw: 35 2e 38 33 2d 32 2e 34 36 20 35 2e 38 33 2d 35 2e 38 31 63 30 2d 33 2e 33 37 2d 32 2e 36 32 2d 35 2e 38 31 2d 35 2e 38 33 2d 35 2e 38 31 7a 6d 30 20 39 2e 33 33 63 2d 31 2e 37 36 20 30 2d 33 2e 32 38 2d 31 2e 34 35 2d 33 2e 32 38 2d 33 2e 35 32 20 30 2d 32 2e 30 39 20 31 2e 35 32 2d 33 2e 35 32 20 33 2e 32 38 2d 33 2e 35 32 73 33 2e 32 38 20 31 2e 34 33 20 33 2e 32 38 20 33 2e 35 32 63 30 20 32 2e 30 37 2d 31 2e 35 32 20 33 2e 35 32 2d 33 2e 32 38 20 33 2e 35 32 7a 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 32 38 35 46 34 22 20 64 3d 22 4d 35 33 2e 35 38 20 37 2e 34 39 68 2d 2e 30 39 63 2d 2e 35 37 2d 2e 36 38 2d 31 2e 36 37 2d 31 2e 33 2d 33 2e 30 36 2d 31 2e 33 43 34 37 2e 35 33 20 36 2e 31 39 20 34 35 20 38 2e 37 32 20 34 35 Data Ascii: 5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"></path><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50079	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:29 UTC	381	OUT	GET /assets-products/img/glue-icon-expand-more.svg HTTP/1.1 Host: about.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:29 UTC	864	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 181 Date: Mon, 27 May 2024 22:43:29 GMT Expires: Mon, 27 May 2024 22:43:29 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:29 UTC	181	IN	Data Raw: 20 3c 73 76 67 20 69 64 3d 22 65 78 70 61 6e 64 2d 6d 6f 72 65 22 20 77 69 64 74 68 3d 22 31 38 22 20 68 65 69 67 68 74 3d 22 31 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 66 36 33 36 38 22 20 64 3d 22 4d 35 2e 34 31 20 37 2e 35 39 4c 34 20 39 6c 38 20 38 20 38 2d 38 2d 31 2e 34 31 2d 31 2e 34 31 4c 31 32 20 31 34 2e 31 37 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e Data Ascii: <svg id="expand-more" width="18" height="18" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path fill="#5f6368" d="M5.41 7.59L4 9l8 8 8-8-1.41-1.41L12 14.17"></path></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50082	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:30 UTC	800	OUT	GET /xeVlvzZX32eg9zc9V7MLUWaEeOnwoa5OQfrgI10U4ub8QA6iwdq1TgcOpLTBiKQTosiNxtMBtpOvh_z7fq7eoISf53UZqZMd0dZR0gSLAAMFkK9vVfQ?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:30 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 39975 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:17:35 GMT Expires: Tue, 28 May 2024 19:17:35 GMT Cache-Control: public, max-age=86400, no-transform Age: 12355 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:30 UTC	856	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 0a 08 08 08 08 0a 0a 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 0a 0a 08 08 0d 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0d 0a 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 01 80 02 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 05 06 00 04 07 08 09 ff c4 00 58 10 00 02 01 02 03 05 04 05 08 05 08 06 07 06 07 00 01 02 03 00 11 04 12 21 05 06 31 41 51 07 13 22 61 32 71 81 91 a1 08 14 23 42 52 72 b1 f0 Data Ascii: JFIFX!1AQ"a2q#BRr
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 01 e6 78 69 5e 85 19 66 57 7f ac ba 22 f1 9b 58 20 48 e2 5f 1c 84 08 a2 e3 96 ff 00 5d cf 32 78 92 c3 4d 49 e1 61 d2 e6 db b2 ff 00 45 ae 48 41 b3 f2 29 66 39 dc 9f 13 1e 67 89 55 e8 8b cf 99 d2 fc 74 a5 d5 c8 b9 25 c1 45 c6 83 c2 57 ef 68 6f 5a e6 e0 4a 64 44 5b 04 14 c4 a4 96 ee f4 55 2f c0 38 24 e6 3f 75 00 2d eb 5b f1 ac ea d5 51 8a be f7 d0 d3 81 ca 36 96 cb 56 06 5c 3e 62 84 fd 92 06 52 48 06 f7 22 cf 62 54 36 52 47 01 ca bd 3c 92 4a ed 7f 46 ed 68 3f b1 f6 04 92 b2 a4 63 5b 8b f4 50 3e b3 1e 40 7c 74 1a d6 54 e9 4a ac ad 12 a3 8a 7e 8d ad e4 c3 d9 cf d7 c7 e1 5c 93 49 34 5d 69 a1 1b 87 86 e3 8d 96 f6 26 d7 2e 7a 01 c5 ad d0 68 39 f5 ad 5e 8f af a0 1f ee f9 20 b7 9f 16 f7 8d 17 d4 b7 3e 75 19 6e f9 95 1a 78 82 f1 d5 ba 7f 1f cd eb 46 ac 0f ad 55 f6 Data Ascii: xi^fW"X H_]2xMIaEHA)f9gUt%EWhoZJdD[U/8$?u-[Q6V\>bRH"bT6RG<JFh?c[P>@\|tTJ~\I4]i&.zh9^ >unxFU
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: b1 f3 ae 09 2b 6e 54 b1 6c 0c 46 47 56 fb 2d c3 af 51 ed 1a 57 3c b5 d1 94 e2 67 cd 84 53 cb 00 fd 1a bf 7e bf ac ac a0 c2 07 92 e6 6f 69 1d 2b 35 2b c5 7d 7c 0b cb 99 79 c1 63 f8 44 d7 2c 88 ae cd a5 81 7e 09 f7 82 15 bf de 1c f8 f2 4a 9b a6 f3 47 6d df 47 cf f2 72 4e 16 77 41 ec 4c 2e 4c 44 84 fa 32 95 6b db 98 16 6f 6f 97 af a5 31 12 f8 1a 42 e4 e6 db d8 16 6c e2 e5 5f 81 f5 d8 80 7c ee 2d 5e 76 1b 13 f0 ca 12 dd 3f a0 94 6d a8 c6 ca c2 85 8e 47 20 91 18 66 20 5e fe 15 26 c3 a9 36 d0 55 aa 4e f5 14 17 1b 58 ce 31 bb 38 df 62 9b 3c e2 71 f8 ad a1 27 10 4b 28 fb 2d 2d c2 af a9 10 65 1e 40 74 af d1 70 94 94 72 c1 6d 05 e6 ff 00 6e cf 49 69 13 b8 e2 5e bd 62 a4 6c f2 50 15 2d fa 8d 5b 0f 21 60 09 55 ba 92 01 2a 6e 38 1e 23 d9 5c 98 b8 a9 52 95 f9 12 8f 3f Data Ascii: +nTlFGV-QW<gS~oi+5+}\|ycD,~JGmGrNwAL.LD2koo1Bl_\|-^v?mG f ^&6UNX18b<q'K(--e@tprmnIi^blP-[!`U*n8#\R?
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 71 f0 b3 0f 67 c6 ac f2 cb e6 5a f3 0e cf 72 e1 82 c7 2b 29 61 99 3a 89 01 5f 76 60 09 1e cb fa ea 3b 37 c3 54 67 28 db 66 39 83 90 bb 88 a3 05 e4 20 95 44 d5 9a dc 72 29 b1 76 e3 e1 5b 9f 2a 95 4a 57 d0 a5 8e 89 ba fb eb 04 71 ac 2e 59 66 cc c0 c6 d1 4a 1f 3f d9 b6 4e 20 0f 47 8e 87 4a f6 b0 b5 61 4e 9a 8b 7a eb 7d 1e ff 00 e8 da 2d 58 de 8f b5 2c 29 39 44 86 f7 cb 6e ea 6f 48 fd 5f 43 89 e9 c4 d7 52 c4 53 7c 7e 8c b6 64 6d 43 bf 18 66 36 13 46 1a f6 ca ce 10 df a1 0f 94 df ca b4 55 69 bd 14 97 99 25 43 b6 8c 12 c9 85 59 7d 21 0c 89 29 2a 41 ba 2b 0e f0 02 2f e9 46 58 57 97 8f a6 b3 c2 6f 6f 95 f7 3f c6 a5 92 be 83 38 ed d4 f0 e5 8d 4b 38 d4 1d 00 74 e2 af 6e a4 71 b7 3b f2 af 2a be 19 c2 4e 3f ad 18 35 67 62 0d 30 3d f4 18 88 06 a5 e3 25 3c a5 8f c7 1f Data Ascii: qgZr+)a:_v`;7Tg(f9 Dr)v[JWq.YfJ?N GJaNz}-X,)9DnoH_CRS\|~dmCf6FUi%CY}!)A+/FXWoo?8K8tnq;*N?5gb0=%<
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 01 54 2a 8e 06 c1 7d d7 b6 83 a5 85 67 29 d8 c8 8b c7 6d 51 7b 00 3e fb 78 97 fc 2c 08 f7 57 2b ac b8 11 98 a8 6f 22 37 79 92 ca 09 c8 2c a2 d7 2e 6f ec 16 5f c6 b3 a1 53 b5 bd 4e f5 e5 fd 9d 50 77 57 20 67 65 05 b5 00 9f a2 bf 12 22 43 6d 07 23 2b dd db cb 28 37 ae a9 4b 4c ab f5 9a 5e c6 94 bb 4d 17 d1 07 c8 df 5f c3 f0 ac bb 29 4f 73 37 77 b9 a5 36 d9 0c 6c d7 1d 09 fe 35 b4 68 38 ab af a1 78 ab 1f 5f ab eb 4c c4 34 00 d0 08 68 04 34 00 de 80 4a 01 2f 40 21 34 20 1b d0 90 68 01 a1 0c 1a 15 10 d0 03 40 21 a0 04 d0 00 c6 80 02 68 04 61 40 01 14 00 9a 00 6f 40 0d 00 04 d0 b0 04 50 90 1a 80 0a 00 18 50 00 d4 00 5a 80 13 40 0b 50 0d 91 40 0b 50 00 68 0f 3b fc a3 36 41 18 a8 a6 3e 84 b1 85 1d 33 c5 7c c0 ff 00 55 94 8e ba f4 35 e1 63 62 d4 f3 73 5e 85 91 c9 Data Ascii: T*}g)mQ{>x,W+o"7y,.o_SNPwW ge"Cm#+(7KL^M_)Os7w6l5h8x_L4h4J/@!4 h@!ha@o@PPZ@P@Ph;6A>3\|U5cbs^
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: b2 2b 2d b6 14 ea 8c d7 e8 05 ff 00 80 f6 56 4e 49 0b 1a 18 bc 51 e4 4f b5 4a fe f3 55 cc 98 d0 38 55 de d9 b4 03 eb de f9 87 4b 73 f5 f0 f7 56 15 6b 46 2b 9b 2a da 37 5c 05 16 17 af 3e ee 6e ec c7 72 2b 69 2e 61 a1 ae ba 4f 2b d4 87 74 06 e8 6f 9b 41 22 a3 9f a3 66 5d 4d fc 16 70 df d9 63 e9 0e b6 3c 8d 7a 32 a5 9d 66 8e fa 79 16 5f 12 ea 5e b7 6f 67 07 da 45 38 c5 22 99 19 74 2a e1 55 c1 04 1b 83 ae 5d 75 ac 29 d1 8d 69 a8 cb 64 df 46 b4 be fd e6 8b 62 cb b7 77 05 7b d8 d5 98 b4 5d d9 c8 84 dc aa ab ea 01 3a e5 5b e8 b9 ac 34 1a 00 00 c2 52 74 6a ca 9c 9d f6 d5 ee f4 e3 d4 a3 96 51 a1 b9 31 14 78 48 7c b3 b2 49 28 ce 35 68 f3 e4 60 d9 73 06 f1 10 4a b0 bf 3b d8 54 ba d1 72 52 b6 aa ff 00 52 3b 54 f8 05 82 dd 1c 34 25 82 c2 b9 c6 43 ad dd ac d6 b9 cc f9 Data Ascii: +-VNIQOJU8UKsVkF+7\>nr+i.aO+toA"f]Mpc<z2fy_^ogE8"tU]u)idFbw{]:[4RtjQ1xH\|I(5h`sJ;TrRR;T4%C
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: e9 30 7e c8 a6 a2 a7 5d 5e 5b e5 7b 2e f5 c5 f7 e8 42 d3 60 de be 8c 1a d2 a5 48 34 a7 82 80 d2 97 0b 50 0d 29 70 94 2b 63 8d f6 c3 b9 f9 17 bf 89 00 56 7c d3 35 cf 84 9d 2f 62 48 01 89 bd 80 1e 2b f5 af 9a c7 61 d5 29 f6 ab 69 3b 3e 8f fb 2d b9 c7 a6 8c 9e 2d fd 9d 3f 1a e2 dd 14 18 7c 38 e3 ad ba b1 27 f1 ac 9f 41 98 95 83 70 31 4e 81 e2 c3 c8 c8 78 35 82 83 e6 03 95 24 79 da d5 d5 0c 25 59 2b a5 f6 25 5c 86 da 9b 97 8a 8d 95 25 85 91 9e d9 43 32 0b dc d8 6a 1c 8e 3a 6a 7f 75 5e 58 79 53 f9 89 d1 6e 47 b6 ee ca 1d 90 80 ac aa 18 82 47 02 42 e8 45 ef a9 eb c8 d5 5c 6d a3 2c e5 61 f8 f7 3e 6c f0 a6 4f 14 ec 16 23 98 65 24 9b 72 e1 6e 26 fc ae 78 55 57 c5 3e cd 6f a7 d7 8f 71 29 a6 48 ef ff 00 67 8f 84 80 4b 2b 24 8c 58 ae 55 56 b0 20 03 e9 b6 a6 e0 f2 51 Data Ascii: 0~]^[{.B`H4P)p+cV\|5/bH+a)i;>--?\|8'Ap1Nx5$y%Y+%\%C2j:ju^XySnGGBE\m,a>lO#e$rn&xUW>oq)HgK+$XUV Q
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: bf 02 45 ed e2 d3 f6 6c f0 f5 5c a9 eb 06 b5 e7 d3 4e 3e 04 bd ac 56 b6 6c c4 36 ba 6b 5d b5 62 a4 8e 46 5f f0 3b 38 b2 07 5e 06 e3 dd a5 69 81 c2 a9 2e d2 a6 bc 12 ee e6 68 de 96 43 b1 ec f2 0d 7b c6 67 d4 5b d5 cb 89 40 65 e8 00 b5 00 86 80 4a 01 28 40 84 d0 90 68 01 34 21 89 6a 15 04 d0 02 4d 00 36 a0 12 f4 00 d0 03 40 09 a0 01 a8 00 6a 00 4d 00 04 d0 02 c6 84 d8 13 42 c0 31 a1 08 13 42 40 61 40 36 68 01 34 00 31 a0 00 d0 02 45 00 36 a0 01 85 00 06 80 1a 03 16 5f 08 51 d3 53 cd b9 df d4 4e b6 af 9e f6 56 05 42 3e f3 57 5a 93 f8 af ca fa e9 d7 af 86 c6 93 7a d9 0c b5 7d 09 98 0c 68 06 d8 50 0d b5 00 d3 50 0d 35 00 c3 d0 0d 3a d0 0c c8 95 00 66 51 a1 27 40 01 24 9e 00 0e 67 ca dd 68 0e 6f bc 1d b1 43 19 2b 0a 34 c5 4d 8b 02 12 3b f0 39 58 82 5b 5e 61 6c Data Ascii: El\N>Vl6k]bF_;8^i.hC{g[@eJ(@h4!jM6@jMB1B@a@6h41E6_QSNVB>WZz}hPP5:fQ'@$ghoC+4M;9X[^al
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: cb f0 cd ac 6b ed 3d a4 59 99 89 be 77 36 ea 2e 6b 5a 54 94 52 49 6c 89 b6 87 4e ec 36 1c b8 c6 5e 27 b8 66 3e 57 2b 61 ec 1a 56 94 75 95 fa 14 9f ca 77 59 96 bb 0e 73 98 6c 0d 96 b2 e2 f1 0c e0 32 98 ee 41 ff 00 ae 76 61 ed 0a 05 ba 58 57 9d 08 aa b3 96 6d 8d 5b b2 28 db d1 ba e2 39 1a 30 6e aa 49 56 fd 5f 3f 35 3a 11 5c 49 a4 da 4f 6b af 20 99 15 86 c0 d8 dc 8b 5a f9 bd 9c c7 98 d0 f9 8a 97 ae e4 35 73 63 68 6c f2 cd 6e 4a 34 bf 01 7d 4d bd 7c 3d 83 a5 60 e7 d9 dd 19 49 ea 06 0f 73 a4 72 02 8f f3 f3 ab 2a fc 89 4d b3 eb d9 af a5 2c 25 e8 04 a0 10 9a 01 2f 40 0d 05 84 bd 00 26 80 13 42 19 84 d0 8b 82 68 40 04 50 02 4d 00 26 80 c3 40 61 a0 13 2d 00 2c 28 06 de 80 65 da 80 69 8d 41 20 de a4 9b 02 4d 09 04 9a 01 0d 00 86 84 0d 9a 12 03 50 02 4d 00 06 80 13 Data Ascii: k=Yw6.kZTRIlN6^'f>W+aVuwYsl2AvaXWm[(90nIV_?5:\IOk Z5schlnJ4}M\|=`Isr*M,%/@&Bh@PM&@a-,(eiA MPM
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 2e 0f a2 35 f5 da b9 ab cf 2c 74 df 64 4a 57 39 8e ee 76 3c d8 92 93 63 09 58 7d 24 84 12 1d c1 d4 16 3f 50 35 ef 7f 48 8e 19 6f 73 cb 4b 0c 9a bc b6 2c f4 d8 eb 9b 27 77 e1 80 65 82 24 8c 10 01 ee d0 29 20 70 cc 46 ad fd 62 6b d0 51 51 d9 14 2a 1b ff 00 b8 f2 b3 c7 8d c0 bf 77 8d 83 36 55 6f d1 4e 8d e9 c5 22 dc 0f 1d b8 e9 73 6f 44 85 75 e3 96 1d 46 6e ad 25 69 3d f9 4b bf af 50 48 ee 36 fd 26 2e 36 21 4c 73 c4 72 62 70 cf fa 58 24 e8 41 b1 28 d6 39 1e c2 fc 08 04 30 1d 34 ea 29 ab af 2e 28 13 f3 48 00 24 90 00 04 92 48 00 01 a9 24 9d 00 1c c9 ad 41 56 c4 f6 95 82 0a 5b e7 50 90 39 09 03 31 fb a8 b7 66 f6 03 59 e7 8f 32 6c ce 6f bd dd bc 2b 2b 47 86 88 b2 b0 65 67 98 15 0c a4 10 72 a0 20 ea 39 b1 1e aa e1 ab 8a 8b 4e 36 6d 77 13 93 99 40 9f 6e b4 9d d2 Data Ascii: .5,tdJW9v<cX}$?P5HosK,'we$) pFbkQQ*w6UoN"soDuFn%i=KPH6&.6!LsrbpX$A(904).(H$H$AV[P91fY2lo++Gegr 9N6mw@n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50081	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:30 UTC	800	OUT	GET /UrtOTOQn0umKcsyJwL9X7mffZz1_SCQcB8iv25zV81lMoHfaPD03Omb14RNyN33Uxr32rsqwRgHpGkhXIVJwD2jB1NBmRUiexA_bC1ICZBYvs3Ggh2A?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:30 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 312061 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:39:18 GMT Expires: Tue, 28 May 2024 20:39:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 7452 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:30 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 80 08 02 00 00 00 54 42 4d e8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 04 c2 af 49 44 41 54 78 9c c4 fd 59 8f 24 4b 92 26 8a 7d 22 a2 6a 8b 2f 11 91 cb d9 aa 7a 7a 7a 96 9e b9 03 5c 0c 71 f9 72 5f 48 e2 82 cf c4 fd 0f fc 99 04 7f 00 df 48 10 7c b9 33 18 f4 6c 55 dd 55 a7 ce c9 cc 88 70 77 5b 54 45 84 0f a2 e6 e1 19 99 e7 54 35 67 00 7a 55 65 45 84 9b a9 a9 99 a9 7e 22 f2 c9 46 ff d7 ff c3 bf 85 13 11 88 1d 80 bb 03 e4 4e 0e 07 08 ee 20 27 07 11 99 bb b9 03 ec ee 0a 32 73 38 88 20 4c 42 4e 00 01 0e 27 22 a2 18 c9 1d 20 22 18 21 fe 06 77 77 8a 43 e1 00 b6 4b 70 5c 39 8e 22 60 1b 04 0e c0 41 4c 70 b8 33 08 40 7c d3 ce 36 33 87 33 c0 44 8e 18 9e da 75 09 4c 10 61 66 Data Ascii: PNGIHDRTBMpHYsIDATxY$K&}"j/zzz\qr_HH\|3lUUpw[TET5gzUeE~"FN '2s8 LBN'" "!wwCKp\9"`ALp3@\|633DuLaf
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 38 af 9d 43 e4 ed 7a 2f a0 e0 6d 94 d8 39 6e e6 d7 2d 19 f0 6d 64 e4 64 e6 0e 6f 48 f8 02 5f de e6 d5 de 0b 0c e6 e0 b8 a6 1b 9a 08 05 ac 3d 86 f6 62 e1 21 2d 9c 01 62 6a c2 cf 9b d8 21 b8 13 87 b4 f4 76 fb 1c af c4 e1 6e 0e 26 5c ff 43 9b c0 8d 91 cd 9c 88 88 99 2c 73 dc 23 0c 2e 44 ce 14 37 47 44 88 67 12 8f cd dd 42 56 c5 3d b4 3d c6 db eb c0 2d 4e 7f 15 bb 7f 09 d0 af 7f 7f 75 c0 9f 15 24 ff 5d 20 f8 cf 8a 99 af 9e f2 97 1c 7f 3b f2 57 4f 79 35 ff af 8e 18 7f 34 c0 dd f9 17 6f d9 b7 95 df ce 68 bf 83 89 18 20 8e 55 e7 6e 9b 56 e3 20 c0 99 3c 56 23 b7 45 ce c5 94 1d 42 4c ee 6e c6 b1 1d dc 0c 1c 5a 8c 99 3b 19 44 66 f7 e7 e7 8b aa 96 52 aa 6a d1 75 18 3a ab ba 4e 73 4e c9 cc 04 b0 aa 7d 3f 5c a6 49 92 c4 a3 90 94 a7 69 9e ce 33 b9 ef f6 7b 06 72 ce b5 Data Ascii: 8Cz/m9n-mddoH_=b!-bj!vn&\C,s#.D7GDgBV==-Nu$] ;WOy54oh UnV <V#EBLnZ;DfRju:NsN}?\Ii3{r
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: d3 5c e6 b5 b8 7b ce 19 80 b9 af eb 0a a0 d6 1a 6b 52 44 84 45 18 6e 3a 5f e6 52 14 24 39 4b 4a 99 99 73 96 94 a4 14 3b 9f 4e aa c6 cc b9 1f e0 58 d7 a2 a6 eb ba e6 9c c7 be 27 78 ee 06 11 59 96 19 ce a9 4b 97 f3 e5 70 38 a0 2e e7 cb d9 5d 6b 2d b1 2f cd 94 45 cc 90 ba ee 78 3c 30 a5 b5 d4 71 b7 cb 5d a7 b5 76 03 58 78 9e 97 ae eb c9 9d c6 61 37 e6 9f fe f0 fb e9 d3 f3 5a f5 fd fe f0 ee ed c3 f9 f9 51 12 0b d1 65 5a 87 a1 4b 20 87 26 61 57 23 16 af f3 72 9a 88 79 b9 3c 3e 27 ea fb fe 70 ff cd 30 1c 89 38 a7 24 64 66 85 dc 09 ec ae 50 25 62 27 98 9a b9 33 13 31 5d 17 a2 bb b9 05 55 c0 a1 fc ba 99 9b ba d6 a0 68 6c c3 aa a0 f0 01 28 00 83 93 c3 af 06 bf 1b 79 da f8 f7 06 b2 84 4d c3 dd 96 a2 6f da b7 d3 55 53 dc 98 87 2b ec 85 82 4d c0 66 40 08 18 dc d8 84 Data Ascii: \{kRDEn:_R$9KJs;NX'xYKp8.]k-/Ex<0q]vXxa7ZQeZK &aW#ry<>'p08$dfP%b'31]Uhl(yMoUS+Mf@
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: fb 95 fc 6f 90 e4 86 6d a7 bb 06 9e b8 9b 87 57 93 37 14 66 00 7a dd 1d 1b 35 df 8c 8b 18 cd 83 6a 70 8f 60 1b 20 9c a8 de 88 a8 d0 51 e3 ab a6 53 c7 44 7c 63 4b a8 71 a4 4d d9 8a 61 37 6e a7 85 e9 60 13 2e 31 e3 66 64 50 bb a3 6d 02 4d 03 b6 2b 81 e4 ae 4d fd 26 55 6d 5c 4a 88 b8 2d c0 e7 4a 67 01 0e 70 dd 0c 17 87 0b c2 41 d7 48 5c d7 d8 bc bc 6d f2 eb 55 a0 30 62 de 68 36 fa 1c 43 5e bc 1d e1 1b 70 77 12 0e 53 bf 79 ca e3 87 eb cd 07 7b d3 82 88 42 8e 04 79 c7 06 b2 76 ef 11 4a e5 b6 51 5b 2f 96 d1 0b 5e 99 c1 14 1a 7e fd 66 1e 6c 00 f5 19 56 5e fd e0 57 08 fc 73 14 cd 5f c2 fc fc 0a 58 7f e9 b0 b9 3d fe 97 24 c4 97 c7 d3 67 6a c4 9f ff fc 92 a4 f9 ca 5f 36 c4 ff ec 5d 6e 5f bd fe f9 17 6f f5 6a c9 c5 6f cd 10 0c 63 b2 e9 7c 04 06 31 81 19 4d 73 db 44 Data Ascii: omW7fz5jp` QSD\|cKqMa7n`.1fdPmM+M&Um\J-JgpAH\mU0bh6C^pwSy{ByvJQ[/^~flV^Ws_X=$gj_6]n_ojoc\|1MsD
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 7e ff c2 e7 2f d1 ca 7f 15 37 5f 1f bb 9d f2 f5 13 7f e9 42 5f fe fd d7 2f 1a df 32 80 cd 03 6c 9f 9f e2 b7 6b ee 1f 71 0b 84 b6 68 d9 bd c6 7d a8 16 75 33 83 56 37 18 c3 48 dd cd 8c dd c1 6d 8f 55 57 37 27 36 47 2d 5a cd d7 5a 8b aa 13 0f ce b6 cc d5 a8 18 9b 5a b5 69 b7 df 91 d9 7c 9e b4 f8 c3 c3 83 88 a9 16 55 ed ba 2e 75 a2 66 96 d5 cd fa be ef bb 9c 84 01 01 48 6b 51 35 82 a7 c4 04 ca 49 86 ae 5b 96 e5 70 38 9a 6b 12 1e f6 7b 96 34 5f a6 e3 e1 ce 6a 3d 5f 2e e3 6e 67 a6 a7 e7 67 21 ea fa 21 49 aa cb 52 b5 ee c7 7e 9a ce a7 c7 4f c3 30 a6 24 16 71 ea 42 e6 94 45 4c 8b aa 26 21 72 90 e4 a5 d4 8f 8f cf 66 b6 ac eb b8 1b 86 61 98 e7 d9 cc 45 24 09 8f c3 e0 00 33 97 ba ee 76 e3 ae ef cb b2 54 b5 b9 ac eb 52 8e c7 e3 f1 78 7c 7e 7e ae 65 ed fb 9e 85 73 ca Data Ascii: ~/7_B_/2lkqh}u3V7HmUW7'6G-ZZZi\|U.ufHkQ5I[p8k{4_j=_.ngg!!IR~O0$qBEL&!rfaE$3vTRx\|~~es
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 72 9e 1e 2f e7 c7 ae 1b 76 87 b7 eb bc 30 41 52 5a 97 e5 7c 3e 95 52 f7 87 fd 7e b7 5b d6 b2 db 1f cc aa a4 4c ae d5 7d 5d 56 75 03 b8 ba ad b3 9a d9 ba d4 52 2b 31 1d 0f fb a1 ef 09 48 39 9b eb d8 0b 8b c0 bd d6 b2 d6 da 75 19 6e 97 cb 59 84 ff f4 d3 8f d3 b2 30 b1 40 fa 5d bf 3f 1c 1e 9f 9e e7 79 de ed 76 70 96 24 39 e7 d8 79 7d 3f 74 b9 ef 87 61 e8 07 11 49 5d 62 26 22 94 75 79 fa f0 61 dc 8f c4 32 9f 2f a5 b4 e0 a2 94 c4 01 c9 39 de a9 aa ba db bb 77 ef ef ee ee 3f 7d 3a d5 4a d3 34 57 d5 b9 cc 92 c8 c9 b4 28 80 8d c5 6a f5 15 cc 5d ad 92 90 08 3b 70 29 65 5a 7c 55 bb 3b 76 bb ae 67 e1 ea f5 b2 a2 db 59 b7 5e 78 f7 76 ff db 7f a3 eb 34 9f 7f 4e cb 9c 86 1d 8d 23 73 4f ce 44 06 53 73 d3 26 90 52 d0 3c 30 17 80 cd dc 16 b2 c2 ee ec c6 14 aa 66 d8 8f 55 Data Ascii: r/v0ARZ\|>R~[L}]VuR+1H9unY0@]?yvp$9y}?taI]b&"uya2/9w?}:J4W(j];p)eZ\|U;vgY^xv4N#sODSs&R<0fU
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: ab 19 e9 f9 f9 89 81 35 75 ee 30 d3 ae 63 87 a7 dc ef 86 43 b2 3b e4 3c 1e 0f 44 b4 4c 13 11 0f c3 50 6b 9d cf 97 a2 45 d5 d6 52 54 35 25 21 22 91 dc 75 3d dc 4c ad ef bb cb 87 d3 38 0c e7 cb a4 a5 98 d9 e5 74 be 7f 38 9a 9b 17 6b a1 d7 b1 3b 09 00 92 08 8b 98 29 cc cc d4 c1 b5 da cf 36 f5 79 7d 30 3b 1e 87 69 d5 d3 e5 d1 c9 13 ff 9e 4a e1 37 3f 74 0f ef b1 ae 65 7a 2a ee 36 9d 59 12 a5 4c 29 73 1e 41 24 44 11 90 62 a6 ee 4e 2c cc e2 1b 56 20 36 2d 0f 9e 80 ce 5c 8b 95 b3 e7 7d b2 cd 49 b8 31 30 9b 66 dd a0 91 68 73 08 30 d8 81 1a bc 89 b9 b9 79 53 ec 1b 43 8d a6 ec 1b c0 42 e0 8d 0b a0 16 47 2a 0e 8f 30 1a 10 98 38 32 1c dc 40 10 21 01 c1 95 cc b5 81 09 10 89 ab f0 08 09 43 ab 83 02 b0 79 8b 1b da 54 d1 d0 10 23 70 96 19 0e b7 46 d9 6f fb 97 60 aa f1 28 Data Ascii: 5u0cC;<DLPkERT5%!"u=L8t8k;)6y}0;iJ7?tez6YL)sA$DbN,V 6-\}I10fhs0ySCBG082@!CyT#pFo`(
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 65 5d 01 56 ad 44 a8 55 45 78 9a 27 b8 81 d8 4d 89 90 18 e6 10 62 66 31 b7 c5 aa 90 50 b8 ec 54 45 44 b2 24 20 25 39 cd 95 1f 9f 1f ee 8f 92 f1 f8 e9 43 01 de ff f0 cf b1 9e eb e5 03 ed bf 83 16 11 a2 dc 57 73 61 21 61 57 75 f3 10 da 10 d1 6b e2 91 23 2a 03 da 16 3f fa b2 68 89 48 fa 54 35 02 da 03 bb c8 e0 b0 20 82 9a 5a 44 9b ef 32 c4 0b 58 22 73 80 6e b4 22 6b 55 3f 35 ec d0 50 6e 89 00 da 7c 84 24 a1 d5 c7 b4 98 85 c9 e3 bf 71 7e 85 9b 39 71 4b 8d 8a b2 ca 91 d6 11 5a 4e 38 60 99 5a ad cb 70 c5 63 c3 6b 02 82 c4 0b 31 c4 b2 e5 1a 87 8c 70 72 30 a5 88 fc f1 ab 2f 22 c8 13 6b 53 6a 37 1b 52 c6 a3 04 21 13 82 0e 8f 04 61 69 65 47 dd 2c ea c4 b1 44 11 50 f7 2d d5 8d a3 1e 5d 7b 66 d8 70 9f ae 72 65 cb 4b 03 e0 46 b2 f9 58 e2 bf d7 9c 33 a8 35 f1 47 e6 20 Data Ascii: e]VDUEx'Mbf1PTED$ %9CWsa!aWuk#*?hHT5 ZD2X"sn"kU?5Pn\|$q~9qKZN8`Zpck1pr0/"kSj7R!aieG,DP-]{fpreKFX35G
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 69 44 80 b3 20 a2 77 c2 10 25 13 49 12 c7 b7 80 53 36 70 54 45 33 83 05 7c 50 e2 2c 51 ed cf 8d 5a 8f 94 04 88 ab 45 93 13 90 ab 93 13 73 b0 1f 2d 04 89 c2 00 a1 28 5d 14 2e 88 d8 b0 51 01 29 58 0a 30 93 45 0d 03 37 35 33 56 d3 a6 6e 6f c9 f4 0e 98 47 80 50 13 5f 86 56 7a 3f 5c 9d 9b 2d 60 c5 9d 6a f8 1e 08 1b 17 b1 51 4f 44 24 91 64 61 1e f1 17 1e ea 2f 6d 55 a8 b7 8d 1b 8a f7 e6 29 70 62 e6 a6 43 b7 74 af 48 af 20 c0 db b5 36 b8 d9 fe d7 2e c6 84 30 91 80 c8 1c 6e b8 ef 1b 74 c6 43 20 27 be fd 1d 8d a3 b9 82 05 83 8d c8 89 7c 13 29 1b 7e 39 28 ca 0b 35 be 08 e1 82 7e 49 be 86 85 03 67 53 51 49 9b 55 d1 20 af 65 25 c7 f3 0b 6a ec e5 c6 d0 18 8d 5f d4 e8 af 50 78 3d e0 96 1d ba 3e 93 40 c2 2f 85 c4 ed 59 9f fd fd e6 db 2b a0 fb e7 a7 5c af 45 9b 16 dd ee Data Ascii: iD w%IS6pTE3\|P,QZEs-(].Q)X0E753VnoGP_Vz?\-`jQOD$da/mU)pbCtH 6.0ntC '\|)~9(5~IgSQIU e%j_Px=>@/Y+\E
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 27 87 91 88 eb 5a ea 72 76 d3 c6 d3 81 36 8a bf 91 ec 4d 02 b7 f8 5b 57 73 8b a6 72 1e 96 01 a2 3a 2e dc a3 15 26 b1 80 89 9c dd ab c1 49 bc 19 30 ee a8 95 29 c3 43 ee 5d 09 eb b6 44 34 f2 c8 22 83 31 98 65 e2 56 9e db c3 c0 b4 6b 74 fc 46 2f 41 a9 bd 1e ba 41 c9 18 1b 2d 1d 7a 7b d8 db b7 74 e3 12 79 a5 14 df c2 bd df a0 a7 c6 f8 37 fc cc ab 53 70 f3 e8 6f 69 99 57 83 df ca 0f 42 8b c0 c5 cd f1 6d 79 44 01 84 2f 06 79 ed 58 be 7a 23 5e 8f 40 d7 7f bf 9c 2d 6e 9f d5 67 e4 d8 8d 57 22 56 5e 8b 11 88 28 ef 4d 53 22 a4 b6 f0 5a a4 99 b9 17 f3 3e f3 5c ca d3 e9 dc 28 e7 4a 92 92 80 b5 d6 61 3f 92 74 7d d7 1d 86 ae 13 36 b3 9e 7c 4c 22 39 af 65 c5 52 b5 94 a9 ea bb c3 fe 70 38 9c a6 cb bc 2c bb 61 c8 42 24 39 09 6b 29 02 3f f4 c3 be ef fb cc b9 e3 a5 e8 d3 e9 Data Ascii: 'Zrv6M[Wsr:.&I0)C]D4"1eVktF/AA-z{ty7SpoiWBmyD/yXz#^@-ngW"V^(MS"Z>\(Ja?t}6\|L"9eRp8,aB$9k)?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50080	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:30 UTC	799	OUT	GET /3vbmf-fE3hNTz_sGEcwIXWDO025BKBEfKgf8kLwMUqsTGFJNuEsBevc5aoUDXs0LeGQuxV3I55z3JelOJRYTxKzdoTWPoueELAx2WWZ-b-XO5vK1VQ?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:30 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 75403 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:26:49 GMT Expires: Tue, 28 May 2024 21:26:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 4601 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:30 UTC	857	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 0a 0a 0a 0a 08 0a 08 08 08 08 08 08 08 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 0a 0a 08 08 0b 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0f 0d 0b 0e 0f 0f 0f 0f 0f 0f 0f 0d 0f 0f 0f 0f 0f 0d 0d 0f 0f 0f 0f 0f 0d 0d 0d 0f 0d 0f 0f 0f 0d 0d 0d 0d 0f 0d 0d 0d 0d 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 01 80 02 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 00 09 ff c4 00 48 10 00 02 02 00 04 03 06 03 06 04 03 07 01 08 03 01 01 02 03 11 00 04 12 21 05 31 41 06 07 13 22 51 61 32 71 81 08 14 23 91 a1 f0 42 b1 c1 d1 Data Ascii: JFIFH!1A"Qa2q#B
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 8d 46 d9 cd 23 c8 a6 3c 43 b4 2a 87 48 05 db a8 04 00 2f a1 6f 5f 61 78 82 a6 25 ac 39 75 2a ee 1f 01 52 b3 73 e8 3a fe 13 09 3b 67 1d d3 86 43 cb a3 2d fb 95 dc 7d 57 11 ff 00 58 cf dd 23 e7 ef d1 4c ee 15 5a 25 90 7e 47 e7 f9 4f 20 e2 e8 79 32 fd 76 fe 75 89 db 5e 99 dc 2a 4f c2 56 66 ad 3e 57 fa 27 65 7a f4 c4 ea a6 86 0a 5a 23 86 49 27 9a ce 05 ad 46 83 1a 04 82 16 fd 0b 1f 28 24 ec 2c ee 76 e7 88 cb 80 d5 48 1a 4e 8b 8b fe dd df 69 69 f2 12 e5 b2 59 4f 2c 93 c4 73 bf 79 65 8d a1 09 17 8b 18 85 23 95 5d 5e 72 e5 a4 35 b8 11 c3 41 ac 8c 01 05 e7 5b 05 6a 98 0c da e7 df fa 5c 6b 92 ed 5b bc af 3c 32 8c b6 62 0c a8 96 25 cc b9 cc 1c e6 6e c2 4b 0a aa a4 66 48 f3 43 c5 7a d0 da 6c 29 92 d9 58 09 68 00 08 f7 f6 56 83 cb 89 33 ef c3 75 31 df 5e 70 66 06 42 Data Ascii: F#<CH/o_ax%9uRs:;gC-}WX#LZ%~GO y2vu^*OVf>W'ezZ#I'F($,vHNiiYO,sye#]^r5A[j\k[<2b%nKfHCzl)XhV3u1^pfB
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 08 56 9e ea 3b e1 e2 6c 86 71 c7 65 86 38 63 2b 0c 5c 46 4c bc e2 69 92 c3 45 1c 2c 81 8c 60 d2 d9 61 62 88 20 56 21 73 cb 0c 4c 79 95 2b 68 b6 a0 90 26 7a 0f b2 ea 1e e2 3b f3 cc 71 7c 94 73 4e b1 c0 fa 9e 1c c7 84 19 63 9a 48 5f 40 92 34 66 61 1a bd 82 51 59 85 9a b3 a0 13 0e 22 b3 9d dc d0 7d 79 2b 38 3c 23 29 ff 00 74 89 37 8e 9c ff 00 85 b1 71 fe 26 91 40 19 c6 ea 0f d4 0c 45 51 e1 8c 9d d5 8a 0c 75 4a a5 a0 d9 53 bb 01 db cf bd 33 88 e3 60 14 12 5d 87 90 6f 40 6f cc 93 d3 db 15 69 55 35 0e 8b 4b 17 85 14 40 25 de 4a e7 97 c9 11 ed 40 9b f7 1b fe f9 62 e3 5a b3 5d 50 68 b1 4e f8 3b c6 fb 98 2e 63 92 52 4d d4 61 75 11 77 7b 90 a0 6c 7d cd 1e 78 ae 46 67 42 d5 64 36 9e 63 a0 d8 28 ee eb 7e d4 d9 4c ee a5 29 36 56 48 dc a1 5c c7 85 bd 22 38 37 1b b6 9d Data Ascii: V;lqe8c+\FLiE,`ab V!sLy+h&z;q\|sNcH_@4faQY"}y+8<#)t7q&@EQuJS3`]o@oiU5K@%J@bZ]PhN;.cRMauw{l}xFgBd6c(~L)6VH\"87
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 65 67 20 98 03 55 b8 66 3b ce 9e 2c dc 32 c8 b1 f1 19 b2 51 24 23 29 9e c8 49 3e 4e 18 ec f8 aa c5 84 af e3 12 01 4c c4 4c 62 28 da 81 20 d6 33 03 09 3b 79 c7 d1 6c 97 00 0e a0 f4 91 f3 e7 f6 5a de 47 ed 7d 94 9f 29 99 53 90 c9 f0 dc de 5a 64 95 06 54 93 97 95 49 30 4b 19 2b 10 31 cb a6 66 d2 19 0a 06 5b 37 cb 06 59 36 ca 07 50 ab 83 06 43 c9 03 50 7c b7 5c c5 c6 38 8a c9 a4 ba 24 3e 20 56 10 43 99 78 c4 28 cc 18 c1 12 5b eb d2 9e 45 59 75 7a e9 e4 30 ed 19 6c 14 ae 39 84 93 f3 55 4e d0 e4 cc 19 83 09 78 44 59 98 2e 37 2a d2 08 63 9d c9 f0 9b 52 2a 8c c0 08 16 46 d0 06 e0 8d 21 ab 13 b4 e6 1e f6 54 9f 34 df 1c c7 a4 fd d7 48 f6 5f bd 8c 92 70 f9 72 39 5c a9 19 ec cc 8d 1e 51 ae 19 96 63 98 71 1a 43 24 b6 b2 68 a6 07 cb 03 15 ae 64 51 34 ea 53 22 ee f1 95 Data Ascii: eg Uf;,2Q$#)I>NLLb( 3;ylZG})SZdTI0K+1f[7Y6PCP\|\8$> VCx([EYuz0l9UNxDY.7cRF!T4H_pr9\QcqC$hdQ4S"
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 71 57 9a e1 f9 9c bc 93 64 f8 86 58 02 35 3e 56 67 68 89 a9 52 32 0d 4b 04 dc 2a 66 1a 60 fb f7 d1 69 f5 7f 3e 47 e6 30 90 a5 3c 1a 18 78 4d 2a 32 76 df 6c 02 95 08 37 84 85 04 d1 61 8a 20 52 51 8c 0a 24 ab 45 81 29 c1 4b 43 16 d8 49 12 9c f8 98 48 53 dc b6 0d 31 47 9d 30 90 a4 63 c2 4e 8d 21 c1 26 4d 4b 61 24 93 d3 86 84 93 c8 c6 26 0a 22 84 c5 88 e2 e8 a6 c9 cd e2 55 12 4a 45 c3 27 43 a7 09 24 74 c2 4c 8e 0e 1d 24 0e 70 25 10 44 41 84 13 14 a5 61 14 92 88 70 61 09 46 18 74 e8 be 26 12 4b cd 2d 0b e8 37 fa 7a e1 24 a8 cd df 67 0f fb da 64 9b 37 97 4c ec cb aa 18 19 a9 e5 df 61 1b 1f 23 33 0a 60 81 b5 11 bd 73 aa e2 bb 09 80 55 c7 61 2a 86 67 cb 6f 7b 2b 92 cb 7f 5d be 5e d8 96 55 48 5f 3f fb f3 ef c3 3f 99 6c d9 fb e2 e4 38 3a 89 32 f2 24 48 8f 2b e4 f3 Data Ascii: qWdX5>VghR2Kf`i>G0<xM2vl7a RQ$E)KCIHS1G0cN!&MKa$&"UJE'C$tL$p%DAapaFt&K-7z$gd7La#3`sUa*go{+]^UH_??l8:2$H+
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 00 62 60 a6 54 90 c2 e7 51 35 29 f1 10 b3 b6 f7 40 f2 74 85 67 ec 1f 6e 19 20 fb ba 53 ce ad 31 8c cf 28 42 82 64 0f 98 08 ec 4b 46 ee 01 07 c3 78 cb 13 ff 00 11 c9 40 91 be 98 26 4a 9e 9d 48 6e 51 aa d8 78 cf 73 13 66 32 8f 9d 88 cb 26 66 05 6c c6 7b 36 5c c5 97 9a 28 c2 c5 0e 53 87 65 04 c5 16 0c b2 85 74 66 89 64 00 50 5d ca e2 06 be 0c 11 01 4e 59 bc c9 dd 67 fd cc 76 31 65 e2 11 2e 67 34 d9 6e 1b 98 79 66 e2 29 0e 69 e3 6f b9 f0 f8 a4 ce 09 e5 94 2e 98 50 e6 62 8d 0e 96 f1 a3 d7 e5 f0 ca 87 12 bc db 4d 15 76 03 9a c6 c7 f0 7e eb 4a ec 2c 72 30 f1 38 71 96 2c a3 e7 38 a6 73 b3 b2 e6 0b 0c e6 57 39 c3 b2 f3 e7 fe f1 ac 90 e3 25 99 68 a6 ca e6 a0 94 10 cb 98 8c f8 86 e6 47 06 be 0d f5 df f0 8a a5 39 12 34 db a7 5d ac 4c af a3 9d d6 76 ec 71 1c 86 4b 3e Data Ascii: b`TQ5)@tgn S1(BdKFx@&JHnQxsf2&fl{6\(SetfdP]NYgv1e.g4nyf)io.PbMv~J,r08q,8sW9%hG94]LvqK>
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 53 2b 5b 2b 06 52 aa 09 1a 23 4a b0 4d a2 92 4d 98 c0 07 52 b3 59 c2 8e 49 4f 64 cd 8b 5b 21 10 04 ad 1c ea 42 ac eb a4 5b 09 40 1e 1a 11 c8 22 0e 67 00 88 a4 91 10 85 8c 49 60 ea 93 42 b6 a5 d9 48 0a cc 56 35 56 40 17 cb 44 b0 24 6f 7b 17 88 43 e6 a3 f2 7c 38 d0 0b ac 19 10 35 d6 83 40 95 15 60 7c 4c 2c 82 0b 0d 23 d6 f0 48 60 ab 19 e2 a1 22 ff 00 8b ab c6 1f 89 1a 30 26 d1 a9 8c 87 c3 6f 0d dd ad e9 9f 53 10 3a 13 60 44 a9 41 80 9a e4 38 ca 3b eb 7b 1e 65 6a 7b 2c ef a5 b7 23 e3 6a b0 d7 63 51 3e 55 5b 14 f1 08 73 ce a9 de 5b b5 12 e5 e2 f0 c4 be 12 c8 cd af 41 1a 74 58 2a 43 15 b8 db 50 3f 88 19 41 a5 b1 6a 4a b6 50 4d d1 f6 85 a2 02 71 99 e0 42 25 d3 9c 2b 13 b4 71 c9 1e 89 84 f2 c6 24 54 68 fc 6a 77 58 d9 83 1f 24 aa cc 3c 37 42 80 82 a8 e0 f2 43 11 Data Ascii: S+[+R#JMMRYIOd[!B[@"gI`BHV5V@D$o{C\|85@`\|L,#H`"0&oS:`DA8;{ej{,#jcQ>U[s[AtX*CP?AjJPMqB%+q$ThjwX$<7BC
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: d4 4a 04 d3 e6 55 2d 16 a2 54 2c 83 99 d4 c5 48 60 4f 23 b1 43 43 aa 2d d3 e2 de 76 68 cd 96 4d 00 89 35 48 c5 c1 5e 5c ca 92 42 0d 02 a8 81 e6 26 8b 58 84 5b a5 78 9f 0c 91 09 8d 80 57 86 a1 91 54 06 28 f6 de 24 4e 56 c0 74 74 65 21 5a b9 a2 92 45 05 29 41 16 f5 44 5c d5 f3 72 a0 d6 96 62 ca c2 bc aa 49 0c 08 e4 a2 c5 9b a2 77 03 08 04 8a b6 f6 3f b2 2e e8 ee 9a 28 34 6a ed ad 77 66 90 02 6e c5 79 99 55 4c 8a 00 52 5b 98 d8 91 b1 a7 64 c3 8d f0 d9 27 04 46 be 1a 19 1d e8 2e 85 2c 45 f9 63 0c 80 9a 5a dc 2d b0 3b 72 38 09 0d 4a 1c f1 03 45 1d 99 81 4d 96 42 aa 1b 4b 69 f3 33 2b 39 2c 48 40 d7 a5 0d d6 b0 5b a9 8c d9 c3 cc a1 22 12 5c 52 4d 48 fe 55 68 f9 2b 47 b2 9f 21 50 75 34 6a 7e 1a bd c1 a1 7b 1d 64 1a 12 15 a3 b2 7c 5a 35 3a e7 8f c6 06 98 90 07 94 Data Ascii: JU-T,H`O#CC-vhM5H^\B&X[xWT($NVtte!ZE)AD\rbIw?.(4jwfnyULR[d'F.,EcZ-;r8JEMBKi3+9,H@["\RMHUh+G!Pu4j~{d\|Z5:
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 6f c5 95 3c 45 ba 21 db 48 6d c6 c7 7d 4c 3a 15 1b d6 de 5d ad 17 6c 10 b5 9b 95 e7 6b 6a bd 0a bf 0b 2d a6 94 53 48 6f 62 54 8a bd 88 bb ac 3e c8 62 51 61 89 87 87 54 ce aa 5d 00 5a 20 9b 6f c4 22 80 2a c7 93 03 e6 00 7a e1 fc 52 8d 14 b4 b1 68 89 52 40 01 31 81 ab 4a 92 36 5a 21 48 ba 1d 24 15 a9 4a 1e 9b 81 52 01 6b a0 8f 3a c5 a3 10 93 2b bb aa 44 48 22 42 ee e2 30 54 2a e9 69 35 b5 02 c2 4a e4 1b 95 39 98 20 a6 b4 88 d5 38 9c 48 5b 44 92 54 9a d9 68 83 b9 46 b6 36 42 9a d4 03 00 a1 43 6e c3 51 20 e0 65 19 07 42 52 92 e6 23 55 a4 60 c1 ad c9 52 05 b2 ec 58 3d 13 e6 00 82 87 98 03 ca 77 38 2b a1 30 94 ec af 6b 65 cb f8 89 04 8c 22 91 74 ce 89 e6 49 05 3e 9f 8b 73 b7 90 b0 b1 a4 ef b6 ab 74 c0 90 ac bd 9e cb 1d 50 88 f3 11 29 9d b4 09 26 53 a6 3f 12 45 Data Ascii: o<E!Hm}L:]lkj-SHobT>bQaT]Z o"zRhR@1J6Z!H$JRk:+DH"B0Ti5J9 8H[DThF6BCnQ eBR#U`RX=w8+0ke"tI>stP)&S?E
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: f4 e2 00 d5 69 d5 06 a3 92 6f 97 e1 c8 42 34 ae 14 c6 be 15 12 41 8b 45 d9 08 88 cc 75 82 4b 69 df 62 00 b3 83 cd 0a 20 d0 60 95 37 c6 38 b8 39 74 8a 05 96 ed 99 c8 67 77 76 63 a9 64 d1 e6 58 c2 25 0f 0c 16 3b 02 28 92 30 00 5e ea 67 38 65 80 ab e9 3a 15 a3 12 df 95 59 d5 58 06 da 95 68 59 5a 7b 6f 11 d9 68 f2 1d 31 20 95 04 88 d1 47 66 b3 0c ce 74 85 8c 2a 53 52 96 2b 12 02 19 8d 90 c7 e2 2c ca 9a 42 d9 3a 48 0c c2 5d 54 13 07 92 5d d8 3a 69 32 06 0c 55 79 80 e3 42 b1 28 22 d5 f0 96 60 01 a2 07 99 80 1e 61 86 4e 6e 11 d3 86 cc 85 1e 21 22 9c b0 8a 43 e0 bb 9d 34 fa c3 ae a2 a0 01 27 90 ba 80 03 1d 5e 60 75 3b a4 d2 64 10 9d ac 6e 41 92 5d 68 c1 fc 4f 16 47 46 97 54 87 59 8e 25 66 2f 28 dd 1c 39 42 a0 19 37 21 94 10 d2 ca 48 27 bd f5 f7 75 13 c4 b2 ad e2 Data Ascii: ioB4AEuKib `789tgwvcdX%;(0^g8e:YXhYZ{oh1 Gft*SR+,B:H]T]:i2UyB("`aNn!"C4'^`u;dnA]hOGFTY%f/(9B7!H'u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50083	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:30 UTC	1316	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1203 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:30 UTC	1203	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 64 65 6e 74 69 74 79 2d 61 63 63 6f 75 6e 74 2d 63 72 65 61 74 69 6f 6e 2d 65 76 6f 6c 75 74 69 6f 6e 2d 75 69 5f 32 30 32 34 30 35 32 36 2e 30 32 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"boq_identity-account-creation-evolution-ui_20240526.02_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.13
2024-05-27 22:43:30 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:30 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:30 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50084	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:30 UTC	370	OUT	GET /assets-products/img/glue-icons.svg HTTP/1.1 Host: about.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:30 UTC	866	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 14116 Date: Mon, 27 May 2024 22:43:30 GMT Expires: Mon, 27 May 2024 22:43:30 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:30 UTC	524	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 63 68 65 76 72 6f 6e 2d 6c 65 66 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 34 31 20 35 2e 34 31 4c 31 35 20 34 6c 2d 38 20 38 20 38 20 38 20 31 2e 34 31 2d 31 2e 34 31 4c 39 2e 38 33 20 31 32 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 37 2e 35 39 20 31 38 2e 35 39 4c 39 20 32 30 6c 38 2d 38 2d 38 2d 38 2d 31 2e 34 31 20 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"> <defs> <svg id="chevron-left" viewBox="0 0 24 24"><path d="M16.41 5.41L15 4l-8 8 8 8 1.41-1.41L9.83 12"></path></svg> <svg id="chevron-right" viewBox="0 0 24 24"><path d="M7.59 18.59L9 20l8-8-8-8-1.41 1.4
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 72 6f 77 2d 62 61 63 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 30 20 31 31 48 37 2e 38 33 6c 35 2e 35 39 2d 35 2e 35 39 4c 31 32 20 34 6c 2d 38 20 38 20 38 20 38 20 31 2e 34 31 2d 31 2e 34 31 4c 37 2e 38 33 20 31 33 48 32 30 76 2d 32 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 61 72 72 6f 77 2d 66 6f 72 77 61 72 64 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 34 6c 2d 31 2e 34 31 20 31 2e 34 31 4c 31 36 2e 31 37 20 31 31 48 34 76 32 68 31 32 2e 31 37 6c 2d 35 2e 35 38 20 35 2e 35 39 4c 31 32 20 32 30 6c 38 2d 38 2d 38 2d 38 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 Data Ascii: row-back" viewBox="0 0 24 24"><path d="M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.41L7.83 13H20v-2z"></path></svg> <svg id="arrow-forward" viewBox="0 0 24 24"><path d="M12 4l-1.41 1.41L16.17 11H4v2h12.17l-5.58 5.59L12 20l8-8-8-8z"></path></svg> <s
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 2d 32 2d 32 2d 32 2d 32 20 2e 39 2d 32 20 32 20 2e 39 20 32 20 32 20 32 7a 6d 30 20 32 63 2d 31 2e 31 20 30 2d 32 20 2e 39 2d 32 20 32 73 2e 39 20 32 20 32 20 32 20 32 2d 2e 39 20 32 2d 32 2d 2e 39 2d 32 2d 32 2d 32 7a 6d 30 20 36 63 2d 31 2e 31 20 30 2d 32 20 2e 39 2d 32 20 32 73 2e 39 20 32 20 32 20 32 20 32 2d 2e 39 20 32 2d 32 2d 2e 39 2d 32 2d 32 2d 32 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 64 72 69 76 65 2d 70 64 66 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 37 20 31 31 2e 35 68 31 76 2d 31 48 37 76 31 7a 4d 31 39 20 33 48 35 63 2d 31 2e 31 20 30 2d 32 20 2e 39 2d 32 20 32 76 31 34 63 30 20 31 2e 31 2e 39 20 32 20 32 20 32 68 31 34 63 31 2e 31 20 Data Ascii: -2-2-2-2 .9-2 2 .9 2 2 2zm0 2c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2zm0 6c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2z"></path></svg> <svg id="drive-pdf" viewBox="0 0 24 24"><path d="M7 11.5h1v-1H7v1zM19 3H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 37 6c 38 20 35 2e 33 33 20 38 2d 35 2e 33 33 56 31 38 48 34 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 69 6e 73 74 61 67 72 61 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 2c 30 20 43 31 35 2e 33 2c 30 20 31 35 2e 37 2c 30 20 31 37 2c 30 20 43 31 38 2e 33 2c 30 2e 31 20 31 39 2e 31 2c 30 2e 33 20 31 39 2e 39 2c 30 2e 36 20 43 32 30 2e 37 2c 30 2e 39 20 32 31 2e 33 2c 31 2e 33 20 32 32 2c 32 20 43 32 32 2e 37 2c 32 2e 37 20 32 33 2e 31 2c 33 2e 34 20 32 33 2e 33 2c 34 2e 32 20 43 32 33 2e 36 2c 35 20 32 33 2e 38 2c 35 2e 38 20 32 33 2e 39 2c 37 2e 31 20 43 32 34 2c 38 2e 33 20 32 34 2c 38 2e 37 20 32 34 2c 31 32 20 43 32 34 2c 31 35 2e 33 20 32 34 2c Data Ascii: 7l8 5.33 8-5.33V18H4z"></path></svg> <svg id="instagram" viewBox="0 0 24 24"><path d="M12,0 C15.3,0 15.7,0 17,0 C18.3,0.1 19.1,0.3 19.9,0.6 C20.7,0.9 21.3,1.3 22,2 C22.7,2.7 23.1,3.4 23.3,4.2 C23.6,5 23.8,5.8 23.9,7.1 C24,8.3 24,8.7 24,12 C24,15.3 24,
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 2c 31 38 2e 32 20 43 38 2e 36 2c 31 38 2e 32 20 35 2e 38 2c 31 35 2e 34 20 35 2e 38 2c 31 32 20 43 35 2e 38 2c 38 2e 36 20 38 2e 36 2c 35 2e 38 20 31 32 2c 35 2e 38 20 5a 20 4d 31 32 2c 31 36 20 43 31 34 2e 32 2c 31 36 20 31 36 2c 31 34 2e 32 20 31 36 2c 31 32 20 43 31 36 2c 39 2e 38 20 31 34 2e 32 2c 38 20 31 32 2c 38 20 43 39 2e 38 2c 38 20 38 2c 39 2e 38 20 38 2c 31 32 20 43 38 2c 31 34 2e 32 20 39 2e 38 2c 31 36 20 31 32 2c 31 36 20 5a 20 4d 31 38 2e 34 2c 37 20 43 31 37 2e 36 32 36 38 30 31 34 2c 37 20 31 37 2c 36 2e 33 37 33 31 39 38 36 35 20 31 37 2c 35 2e 36 20 43 31 37 2c 34 2e 38 32 36 38 30 31 33 35 20 31 37 2e 36 32 36 38 30 31 34 2c 34 2e 32 20 31 38 2e 34 2c 34 2e 32 20 43 31 39 2e 31 37 33 31 39 38 36 2c 34 2e 32 20 31 39 2e 38 2c 34 2e 38 Data Ascii: ,18.2 C8.6,18.2 5.8,15.4 5.8,12 C5.8,8.6 8.6,5.8 12,5.8 Z M12,16 C14.2,16 16,14.2 16,12 C16,9.8 14.2,8 12,8 C9.8,8 8,9.8 8,12 C8,14.2 9.8,16 12,16 Z M18.4,7 C17.6268014,7 17,6.37319865 17,5.6 C17,4.82680135 17.6268014,4.2 18.4,4.2 C19.1731986,4.2 19.8,4.8
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 38 2e 33 31 63 2d 31 20 30 2d 31 2e 38 31 2d 2e 38 31 2d 31 2e 38 31 2d 31 2e 38 31 53 35 2e 35 20 34 2e 36 39 20 36 2e 35 20 34 2e 36 39 73 31 2e 38 31 2e 38 31 20 31 2e 38 31 20 31 2e 38 31 53 37 2e 35 20 38 2e 33 31 20 36 2e 35 20 38 2e 33 31 7a 4d 31 39 20 31 39 68 2d 33 76 2d 35 2e 33 63 30 2d 2e 38 33 2d 2e 36 37 2d 31 2e 35 2d 31 2e 35 2d 31 2e 35 73 2d 31 2e 35 2e 36 37 2d 31 2e 35 20 31 2e 35 56 31 39 68 2d 33 76 2d 39 68 33 76 31 2e 32 63 2e 35 32 2d 2e 38 34 20 31 2e 35 39 2d 31 2e 34 20 32 2e 35 2d 31 2e 34 20 31 2e 39 33 20 30 20 33 2e 35 20 31 2e 35 37 20 33 2e 35 20 33 2e 35 56 31 39 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 73 68 61 72 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 Data Ascii: 8.31c-1 0-1.81-.81-1.81-1.81S5.5 4.69 6.5 4.69s1.81.81 1.81 1.81S7.5 8.31 6.5 8.31zM19 19h-3v-5.3c0-.83-.67-1.5-1.5-1.5s-1.5.67-1.5 1.5V19h-3v-9h3v1.2c.52-.84 1.59-1.4 2.5-1.4 1.93 0 3.5 1.57 3.5 3.5V19z"></path></svg> <svg id="share" viewBox="0 0 24
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 39 36 2d 31 2e 39 33 2d 2e 39 36 2d 32 2e 34 2d 31 2e 30 32 43 31 37 2e 30 34 20 33 2e 34 37 20 31 32 20 33 2e 35 20 31 32 20 33 2e 35 73 2d 35 2e 30 32 2d 2e 30 33 2d 38 2e 33 37 2e 32 31 63 2d 2e 34 36 2e 30 36 2d 31 2e 34 38 2e 30 36 2d 32 2e 33 39 20 31 2e 30 32 43 2e 35 32 20 35 2e 34 35 2e 32 38 20 37 2e 31 2e 32 38 20 37 2e 31 53 2e 30 34 20 39 2e 30 35 20 30 20 31 30 2e 39 38 56 31 33 63 2e 30 34 20 31 2e 39 34 2e 32 38 20 33 2e 38 37 2e 32 38 20 33 2e 38 37 73 2e 32 34 20 31 2e 36 35 2e 39 36 20 32 2e 33 38 63 2e 39 31 2e 39 35 20 32 2e 31 2e 39 32 20 32 2e 36 34 20 31 2e 30 32 20 31 2e 38 38 2e 31 38 20 37 2e 39 31 2e 32 32 20 38 2e 31 32 2e 32 32 20 30 20 30 20 35 2e 30 35 2e 30 31 20 38 2e 34 2d 2e 32 33 2e 34 36 2d 2e 30 36 20 31 2e 34 38 2d Data Ascii: 96-1.93-.96-2.4-1.02C17.04 3.47 12 3.5 12 3.5s-5.02-.03-8.37.21c-.46.06-1.48.06-2.39 1.02C.52 5.45.28 7.1.28 7.1S.04 9.05 0 10.98V13c.04 1.94.28 3.87.28 3.87s.24 1.65.96 2.38c.91.95 2.1.92 2.64 1.02 1.88.18 7.91.22 8.12.22 0 0 5.05.01 8.4-.23.46-.06 1.48-
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 3c 2f 70 61 74 68 3e 3c 70 6f 6c 79 67 6f 6e 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 70 6f 69 6e 74 73 3d 22 39 2e 36 2c 31 35 2e 35 20 39 2e 36 2c 38 2e 35 20 31 36 2c 31 32 2e 31 20 22 3e 3c 2f 70 6f 6c 79 67 6f 6e 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 76 69 64 65 6f 2d 79 6f 75 74 75 62 65 2d 72 65 64 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 30 30 22 20 64 3d 22 4d 32 33 2e 37 34 20 37 2e 31 73 2d 2e 32 33 2d 31 2e 36 35 2d 2e 39 35 2d 32 2e 33 37 63 2d 2e 39 31 2d 2e 39 36 2d 31 2e 39 33 2d 2e 39 36 2d 32 2e 34 2d 31 2e 30 32 43 31 37 2e 30 34 20 33 2e 34 37 20 31 32 20 33 2e 35 20 31 32 20 33 2e 35 73 2d 35 2e 30 32 2d 2e 30 33 2d 38 2e 33 37 2e 32 31 63 2d 2e Data Ascii: </path><polygon fill="#fff" points="9.6,15.5 9.6,8.5 16,12.1 "></polygon></svg> <svg id="video-youtube-red" viewBox="0 0 24 24"><path fill="#f00" d="M23.74 7.1s-.23-1.65-.95-2.37c-.91-.96-1.93-.96-2.4-1.02C17.04 3.47 12 3.5 12 3.5s-5.02-.03-8.37.21c-.
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 2e 34 31 4c 31 38 20 38 6c 2d 36 2d 36 2d 36 20 36 20 31 2e 34 31 20 31 2e 34 31 4c 31 32 20 34 2e 38 33 6c 34 2e 35 39 20 34 2e 35 38 7a 4d 31 32 20 31 39 2e 31 37 6c 2d 34 2e 35 39 2d 34 2e 35 38 4c 36 20 31 36 6c 36 20 36 20 36 2d 36 2d 31 2e 34 31 2d 31 2e 34 31 4c 31 32 20 31 39 2e 31 37 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 20 20 20 20 3c 73 76 67 20 69 64 3d 22 70 6c 61 79 2d 63 69 72 63 6c 65 2d 66 69 6c 6c 65 64 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 32 43 36 2e 34 38 20 32 20 32 20 36 2e 34 38 20 32 20 31 32 73 34 2e 34 38 20 31 30 20 31 30 20 31 30 20 31 30 2d 34 2e 34 38 20 31 30 2d 31 30 53 31 37 2e 35 32 20 32 20 31 32 20 32 7a 6d 2d 32 20 31 34 2e 35 76 2d 39 6c Data Ascii: .41L18 8l-6-6-6 6 1.41 1.41L12 4.83l4.59 4.58zM12 19.17l-4.59-4.58L6 16l6 6 6-6-1.41-1.41L12 19.17z"></path></svg> <svg id="play-circle-filled" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm-2 14.5v-9l
2024-05-27 22:43:30 UTC	1390	IN	Data Raw: 31 2e 35 34 20 32 2e 33 33 20 33 2e 34 33 20 35 2e 31 35 20 33 2e 34 33 20 32 2e 39 39 20 30 20 35 2e 35 32 2d 31 2e 37 36 20 35 2e 35 32 2d 36 2e 30 35 56 36 2e 34 39 68 2d 32 2e 34 32 76 31 7a 6d 2d 32 2e 39 33 20 38 2e 30 33 63 2d 31 2e 37 36 20 30 2d 33 2e 31 2d 31 2e 35 2d 33 2e 31 2d 33 2e 35 32 20 30 2d 32 2e 30 35 20 31 2e 33 34 2d 33 2e 35 32 20 33 2e 31 2d 33 2e 35 32 20 31 2e 37 34 20 30 20 33 2e 31 20 31 2e 35 20 33 2e 31 20 33 2e 35 34 2e 30 31 20 32 2e 30 33 2d 31 2e 33 36 20 33 2e 35 2d 33 2e 31 20 33 2e 35 7a 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 42 42 43 30 35 22 20 64 3d 22 4d 33 38 20 36 2e 31 39 63 2d 33 2e 32 31 20 30 2d 35 2e 38 33 20 32 2e 34 34 2d 35 2e 38 33 20 35 2e 38 31 20 30 20 33 2e 33 34 20 32 Data Ascii: 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3.52 1.74 0 3.1 1.5 3.1 3.54.01 2.03-1.36 3.5-3.1 3.5z"></path><path fill="#FBBC05" d="M38 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50085	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:30 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:30 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:30 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:30 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:30 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50086	142.250.184.211	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:31 UTC	945	OUT	GET /api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube HTTP/1.1 Host: www.blog.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://about.google Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:31 UTC	739	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Location: https://blog.google/api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube Access-Control-Allow-Origin: https://about.google Vary: Origin X-Cloud-Trace-Context: ffc144c86d356cf40a3485a33cc1bfea Date: Mon, 27 May 2024 22:43:31 GMT Server: Google Frontend Content-Length: 1070 Connection: close
2024-05-27 22:43:31 UTC	669	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 33 2e 32 20 46 69 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 61 70 69 2f 76 32 2f 6c 61 74 65 73 74 2f 3f 73 68 6f 77 5f 68 65 72 6f 3d 74 72 75 65 26 61 6d 70 3b 74 61 67 73 3d 61 6e 64 72 6f 69 64 2c 61 6e 64 72 6f 69 64 2d 74 76 2c 63 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to target URL: <a href="https://blog.google/api/v2/latest/?show_hero=true&tags=android,android-tv,c
2024-05-27 22:43:31 UTC	401	IN	Data Raw: 61 6e 64 72 6f 69 64 2c 61 6e 64 72 6f 69 64 2d 74 76 2c 63 61 6c 65 6e 64 61 72 2c 63 68 72 6f 6d 65 2c 63 68 72 6f 6d 65 62 6f 6f 6b 73 2c 63 68 72 6f 6d 65 63 61 73 74 2c 63 6c 61 73 73 72 6f 6f 6d 2c 64 6f 63 73 2c 64 72 69 76 65 2c 66 6f 72 6d 73 2c 67 6d 61 69 6c 2c 67 6f 6f 67 6c 65 2d 61 64 73 2c 67 6f 6f 67 6c 65 2d 61 73 73 69 73 74 61 6e 74 2c 67 6f 6f 67 6c 65 2d 63 6c 6f 75 64 2c 67 6f 6f 67 6c 65 2d 64 75 6f 2c 67 6f 6f 67 6c 65 2d 65 61 72 74 68 2c 67 6f 6f 67 6c 65 2d 66 69 2c 67 6f 6f 67 6c 65 2d 66 69 74 2c 67 6f 6f 67 6c 65 2d 6f 6e 65 2c 67 6f 6f 67 6c 65 2d 70 61 79 2c 67 6f 6f 67 6c 65 2d 70 6c 61 79 2c 67 6f 6f 67 6c 65 2d 73 68 6f 70 70 69 6e 67 2c 67 6f 6f 67 6c 65 2d 76 6f 69 63 65 2c 67 6f 6f 67 6c 65 2d 77 69 66 69 2c 6d 65 65 Data Ascii: android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,mee

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50088	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:31 UTC	568	OUT	GET /xeVlvzZX32eg9zc9V7MLUWaEeOnwoa5OQfrgI10U4ub8QA6iwdq1TgcOpLTBiKQTosiNxtMBtpOvh_z7fq7eoISf53UZqZMd0dZR0gSLAAMFkK9vVfQ?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:31 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 39975 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:17:35 GMT Expires: Tue, 28 May 2024 19:17:35 GMT Cache-Control: public, max-age=86400, no-transform Age: 12356 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:31 UTC	856	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 0a 08 08 08 08 0a 0a 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 0a 0a 08 08 0d 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0d 0a 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 01 80 02 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 05 06 00 04 07 08 09 ff c4 00 58 10 00 02 01 02 03 05 04 05 08 05 08 06 07 06 07 00 01 02 03 00 11 04 12 21 05 06 31 41 51 07 13 22 61 32 71 81 91 a1 08 14 23 42 52 72 b1 f0 Data Ascii: JFIFX!1AQ"a2q#BRr
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 01 e6 78 69 5e 85 19 66 57 7f ac ba 22 f1 9b 58 20 48 e2 5f 1c 84 08 a2 e3 96 ff 00 5d cf 32 78 92 c3 4d 49 e1 61 d2 e6 db b2 ff 00 45 ae 48 41 b3 f2 29 66 39 dc 9f 13 1e 67 89 55 e8 8b cf 99 d2 fc 74 a5 d5 c8 b9 25 c1 45 c6 83 c2 57 ef 68 6f 5a e6 e0 4a 64 44 5b 04 14 c4 a4 96 ee f4 55 2f c0 38 24 e6 3f 75 00 2d eb 5b f1 ac ea d5 51 8a be f7 d0 d3 81 ca 36 96 cb 56 06 5c 3e 62 84 fd 92 06 52 48 06 f7 22 cf 62 54 36 52 47 01 ca bd 3c 92 4a ed 7f 46 ed 68 3f b1 f6 04 92 b2 a4 63 5b 8b f4 50 3e b3 1e 40 7c 74 1a d6 54 e9 4a ac ad 12 a3 8a 7e 8d ad e4 c3 d9 cf d7 c7 e1 5c 93 49 34 5d 69 a1 1b 87 86 e3 8d 96 f6 26 d7 2e 7a 01 c5 ad d0 68 39 f5 ad 5e 8f af a0 1f ee f9 20 b7 9f 16 f7 8d 17 d4 b7 3e 75 19 6e f9 95 1a 78 82 f1 d5 ba 7f 1f cd eb 46 ac 0f ad 55 f6 Data Ascii: xi^fW"X H_]2xMIaEHA)f9gUt%EWhoZJdD[U/8$?u-[Q6V\>bRH"bT6RG<JFh?c[P>@\|tTJ~\I4]i&.zh9^ >unxFU
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: b1 f3 ae 09 2b 6e 54 b1 6c 0c 46 47 56 fb 2d c3 af 51 ed 1a 57 3c b5 d1 94 e2 67 cd 84 53 cb 00 fd 1a bf 7e bf ac ac a0 c2 07 92 e6 6f 69 1d 2b 35 2b c5 7d 7c 0b cb 99 79 c1 63 f8 44 d7 2c 88 ae cd a5 81 7e 09 f7 82 15 bf de 1c f8 f2 4a 9b a6 f3 47 6d df 47 cf f2 72 4e 16 77 41 ec 4c 2e 4c 44 84 fa 32 95 6b db 98 16 6f 6f 97 af a5 31 12 f8 1a 42 e4 e6 db d8 16 6c e2 e5 5f 81 f5 d8 80 7c ee 2d 5e 76 1b 13 f0 ca 12 dd 3f a0 94 6d a8 c6 ca c2 85 8e 47 20 91 18 66 20 5e fe 15 26 c3 a9 36 d0 55 aa 4e f5 14 17 1b 58 ce 31 bb 38 df 62 9b 3c e2 71 f8 ad a1 27 10 4b 28 fb 2d 2d c2 af a9 10 65 1e 40 74 af d1 70 94 94 72 c1 6d 05 e6 ff 00 6e cf 49 69 13 b8 e2 5e bd 62 a4 6c f2 50 15 2d fa 8d 5b 0f 21 60 09 55 ba 92 01 2a 6e 38 1e 23 d9 5c 98 b8 a9 52 95 f9 12 8f 3f Data Ascii: +nTlFGV-QW<gS~oi+5+}\|ycD,~JGmGrNwAL.LD2koo1Bl_\|-^v?mG f ^&6UNX18b<q'K(--e@tprmnIi^blP-[!`U*n8#\R?
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 71 f0 b3 0f 67 c6 ac f2 cb e6 5a f3 0e cf 72 e1 82 c7 2b 29 61 99 3a 89 01 5f 76 60 09 1e cb fa ea 3b 37 c3 54 67 28 db 66 39 83 90 bb 88 a3 05 e4 20 95 44 d5 9a dc 72 29 b1 76 e3 e1 5b 9f 2a 95 4a 57 d0 a5 8e 89 ba fb eb 04 71 ac 2e 59 66 cc c0 c6 d1 4a 1f 3f d9 b6 4e 20 0f 47 8e 87 4a f6 b0 b5 61 4e 9a 8b 7a eb 7d 1e ff 00 e8 da 2d 58 de 8f b5 2c 29 39 44 86 f7 cb 6e ea 6f 48 fd 5f 43 89 e9 c4 d7 52 c4 53 7c 7e 8c b6 64 6d 43 bf 18 66 36 13 46 1a f6 ca ce 10 df a1 0f 94 df ca b4 55 69 bd 14 97 99 25 43 b6 8c 12 c9 85 59 7d 21 0c 89 29 2a 41 ba 2b 0e f0 02 2f e9 46 58 57 97 8f a6 b3 c2 6f 6f 95 f7 3f c6 a5 92 be 83 38 ed d4 f0 e5 8d 4b 38 d4 1d 00 74 e2 af 6e a4 71 b7 3b f2 af 2a be 19 c2 4e 3f ad 18 35 67 62 0d 30 3d f4 18 88 06 a5 e3 25 3c a5 8f c7 1f Data Ascii: qgZr+)a:_v`;7Tg(f9 Dr)v[JWq.YfJ?N GJaNz}-X,)9DnoH_CRS\|~dmCf6FUi%CY}!)A+/FXWoo?8K8tnq;*N?5gb0=%<
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 01 54 2a 8e 06 c1 7d d7 b6 83 a5 85 67 29 d8 c8 8b c7 6d 51 7b 00 3e fb 78 97 fc 2c 08 f7 57 2b ac b8 11 98 a8 6f 22 37 79 92 ca 09 c8 2c a2 d7 2e 6f ec 16 5f c6 b3 a1 53 b5 bd 4e f5 e5 fd 9d 50 77 57 20 67 65 05 b5 00 9f a2 bf 12 22 43 6d 07 23 2b dd db cb 28 37 ae a9 4b 4c ab f5 9a 5e c6 94 bb 4d 17 d1 07 c8 df 5f c3 f0 ac bb 29 4f 73 37 77 b9 a5 36 d9 0c 6c d7 1d 09 fe 35 b4 68 38 ab af a1 78 ab 1f 5f ab eb 4c c4 34 00 d0 08 68 04 34 00 de 80 4a 01 2f 40 21 34 20 1b d0 90 68 01 a1 0c 1a 15 10 d0 03 40 21 a0 04 d0 00 c6 80 02 68 04 61 40 01 14 00 9a 00 6f 40 0d 00 04 d0 b0 04 50 90 1a 80 0a 00 18 50 00 d4 00 5a 80 13 40 0b 50 0d 91 40 0b 50 00 68 0f 3b fc a3 36 41 18 a8 a6 3e 84 b1 85 1d 33 c5 7c c0 ff 00 55 94 8e ba f4 35 e1 63 62 d4 f3 73 5e 85 91 c9 Data Ascii: T*}g)mQ{>x,W+o"7y,.o_SNPwW ge"Cm#+(7KL^M_)Os7w6l5h8x_L4h4J/@!4 h@!ha@o@PPZ@P@Ph;6A>3\|U5cbs^
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: b2 2b 2d b6 14 ea 8c d7 e8 05 ff 00 80 f6 56 4e 49 0b 1a 18 bc 51 e4 4f b5 4a fe f3 55 cc 98 d0 38 55 de d9 b4 03 eb de f9 87 4b 73 f5 f0 f7 56 15 6b 46 2b 9b 2a da 37 5c 05 16 17 af 3e ee 6e ec c7 72 2b 69 2e 61 a1 ae ba 4f 2b d4 87 74 06 e8 6f 9b 41 22 a3 9f a3 66 5d 4d fc 16 70 df d9 63 e9 0e b6 3c 8d 7a 32 a5 9d 66 8e fa 79 16 5f 12 ea 5e b7 6f 67 07 da 45 38 c5 22 99 19 74 2a e1 55 c1 04 1b 83 ae 5d 75 ac 29 d1 8d 69 a8 cb 64 df 46 b4 be fd e6 8b 62 cb b7 77 05 7b d8 d5 98 b4 5d d9 c8 84 dc aa ab ea 01 3a e5 5b e8 b9 ac 34 1a 00 00 c2 52 74 6a ca 9c 9d f6 d5 ee f4 e3 d4 a3 96 51 a1 b9 31 14 78 48 7c b3 b2 49 28 ce 35 68 f3 e4 60 d9 73 06 f1 10 4a b0 bf 3b d8 54 ba d1 72 52 b6 aa ff 00 52 3b 54 f8 05 82 dd 1c 34 25 82 c2 b9 c6 43 ad dd ac d6 b9 cc f9 Data Ascii: +-VNIQOJU8UKsVkF+7\>nr+i.aO+toA"f]Mpc<z2fy_^ogE8"tU]u)idFbw{]:[4RtjQ1xH\|I(5h`sJ;TrRR;T4%C
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: e9 30 7e c8 a6 a2 a7 5d 5e 5b e5 7b 2e f5 c5 f7 e8 42 d3 60 de be 8c 1a d2 a5 48 34 a7 82 80 d2 97 0b 50 0d 29 70 94 2b 63 8d f6 c3 b9 f9 17 bf 89 00 56 7c d3 35 cf 84 9d 2f 62 48 01 89 bd 80 1e 2b f5 af 9a c7 61 d5 29 f6 ab 69 3b 3e 8f fb 2d b9 c7 a6 8c 9e 2d fd 9d 3f 1a e2 dd 14 18 7c 38 e3 ad ba b1 27 f1 ac 9f 41 98 95 83 70 31 4e 81 e2 c3 c8 c8 78 35 82 83 e6 03 95 24 79 da d5 d5 0c 25 59 2b a5 f6 25 5c 86 da 9b 97 8a 8d 95 25 85 91 9e d9 43 32 0b dc d8 6a 1c 8e 3a 6a 7f 75 5e 58 79 53 f9 89 d1 6e 47 b6 ee ca 1d 90 80 ac aa 18 82 47 02 42 e8 45 ef a9 eb c8 d5 5c 6d a3 2c e5 61 f8 f7 3e 6c f0 a6 4f 14 ec 16 23 98 65 24 9b 72 e1 6e 26 fc ae 78 55 57 c5 3e cd 6f a7 d7 8f 71 29 a6 48 ef ff 00 67 8f 84 80 4b 2b 24 8c 58 ae 55 56 b0 20 03 e9 b6 a6 e0 f2 51 Data Ascii: 0~]^[{.B`H4P)p+cV\|5/bH+a)i;>--?\|8'Ap1Nx5$y%Y+%\%C2j:ju^XySnGGBE\m,a>lO#e$rn&xUW>oq)HgK+$XUV Q
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: bf 02 45 ed e2 d3 f6 6c f0 f5 5c a9 eb 06 b5 e7 d3 4e 3e 04 bd ac 56 b6 6c c4 36 ba 6b 5d b5 62 a4 8e 46 5f f0 3b 38 b2 07 5e 06 e3 dd a5 69 81 c2 a9 2e d2 a6 bc 12 ee e6 68 de 96 43 b1 ec f2 0d 7b c6 67 d4 5b d5 cb 89 40 65 e8 00 b5 00 86 80 4a 01 28 40 84 d0 90 68 01 34 21 89 6a 15 04 d0 02 4d 00 36 a0 12 f4 00 d0 03 40 09 a0 01 a8 00 6a 00 4d 00 04 d0 02 c6 84 d8 13 42 c0 31 a1 08 13 42 40 61 40 36 68 01 34 00 31 a0 00 d0 02 45 00 36 a0 01 85 00 06 80 1a 03 16 5f 08 51 d3 53 cd b9 df d4 4e b6 af 9e f6 56 05 42 3e f3 57 5a 93 f8 af ca fa e9 d7 af 86 c6 93 7a d9 0c b5 7d 09 98 0c 68 06 d8 50 0d b5 00 d3 50 0d 35 00 c3 d0 0d 3a d0 0c c8 95 00 66 51 a1 27 40 01 24 9e 00 0e 67 ca dd 68 0e 6f bc 1d b1 43 19 2b 0a 34 c5 4d 8b 02 12 3b f0 39 58 82 5b 5e 61 6c Data Ascii: El\N>Vl6k]bF_;8^i.hC{g[@eJ(@h4!jM6@jMB1B@a@6h41E6_QSNVB>WZz}hPP5:fQ'@$ghoC+4M;9X[^al
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: cb f0 cd ac 6b ed 3d a4 59 99 89 be 77 36 ea 2e 6b 5a 54 94 52 49 6c 89 b6 87 4e ec 36 1c b8 c6 5e 27 b8 66 3e 57 2b 61 ec 1a 56 94 75 95 fa 14 9f ca 77 59 96 bb 0e 73 98 6c 0d 96 b2 e2 f1 0c e0 32 98 ee 41 ff 00 ae 76 61 ed 0a 05 ba 58 57 9d 08 aa b3 96 6d 8d 5b b2 28 db d1 ba e2 39 1a 30 6e aa 49 56 fd 5f 3f 35 3a 11 5c 49 a4 da 4f 6b af 20 99 15 86 c0 d8 dc 8b 5a f9 bd 9c c7 98 d0 f9 8a 97 ae e4 35 73 63 68 6c f2 cd 6e 4a 34 bf 01 7d 4d bd 7c 3d 83 a5 60 e7 d9 dd 19 49 ea 06 0f 73 a4 72 02 8f f3 f3 ab 2a fc 89 4d b3 eb d9 af a5 2c 25 e8 04 a0 10 9a 01 2f 40 0d 05 84 bd 00 26 80 13 42 19 84 d0 8b 82 68 40 04 50 02 4d 00 26 80 c3 40 61 a0 13 2d 00 2c 28 06 de 80 65 da 80 69 8d 41 20 de a4 9b 02 4d 09 04 9a 01 0d 00 86 84 0d 9a 12 03 50 02 4d 00 06 80 13 Data Ascii: k=Yw6.kZTRIlN6^'f>W+aVuwYsl2AvaXWm[(90nIV_?5:\IOk Z5schlnJ4}M\|=`Isr*M,%/@&Bh@PM&@a-,(eiA MPM
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 2e 0f a2 35 f5 da b9 ab cf 2c 74 df 64 4a 57 39 8e ee 76 3c d8 92 93 63 09 58 7d 24 84 12 1d c1 d4 16 3f 50 35 ef 7f 48 8e 19 6f 73 cb 4b 0c 9a bc b6 2c f4 d8 eb 9b 27 77 e1 80 65 82 24 8c 10 01 ee d0 29 20 70 cc 46 ad fd 62 6b d0 51 51 d9 14 2a 1b ff 00 b8 f2 b3 c7 8d c0 bf 77 8d 83 36 55 6f d1 4e 8d e9 c5 22 dc 0f 1d b8 e9 73 6f 44 85 75 e3 96 1d 46 6e ad 25 69 3d f9 4b bf af 50 48 ee 36 fd 26 2e 36 21 4c 73 c4 72 62 70 cf fa 58 24 e8 41 b1 28 d6 39 1e c2 fc 08 04 30 1d 34 ea 29 ab af 2e 28 13 f3 48 00 24 90 00 04 92 48 00 01 a9 24 9d 00 1c c9 ad 41 56 c4 f6 95 82 0a 5b e7 50 90 39 09 03 31 fb a8 b7 66 f6 03 59 e7 8f 32 6c ce 6f bd dd bc 2b 2b 47 86 88 b2 b0 65 67 98 15 0c a4 10 72 a0 20 ea 39 b1 1e aa e1 ab 8a 8b 4e 36 6d 77 13 93 99 40 9f 6e b4 9d d2 Data Ascii: .5,tdJW9v<cX}$?P5HosK,'we$) pFbkQQ*w6UoN"soDuFn%i=KPH6&.6!LsrbpX$A(904).(H$H$AV[P91fY2lo++Gegr 9N6mw@n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50089	172.217.16.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:31 UTC	1338	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 517 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:31 UTC	517	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 36 38 34 39 38 30 39 34 39 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1716849809493",null,null,null
2024-05-27 22:43:31 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 27 May 2024 22:43:31 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:31 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-27 22:43:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50090	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:31 UTC	567	OUT	GET /3vbmf-fE3hNTz_sGEcwIXWDO025BKBEfKgf8kLwMUqsTGFJNuEsBevc5aoUDXs0LeGQuxV3I55z3JelOJRYTxKzdoTWPoueELAx2WWZ-b-XO5vK1VQ?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:31 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 75403 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:26:49 GMT Expires: Tue, 28 May 2024 21:26:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 4602 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:31 UTC	857	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 0a 0a 0a 0a 08 0a 08 08 08 08 08 08 08 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 0a 0a 08 08 0b 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0f 0d 0b 0e 0f 0f 0f 0f 0f 0f 0f 0d 0f 0f 0f 0f 0f 0d 0d 0f 0f 0f 0f 0f 0d 0d 0d 0f 0d 0f 0f 0f 0d 0d 0d 0d 0f 0d 0d 0d 0d 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 01 80 02 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 00 09 ff c4 00 48 10 00 02 02 00 04 03 06 03 06 04 03 07 01 08 03 01 01 02 03 11 00 04 12 21 05 31 41 06 07 13 22 51 61 32 71 81 08 14 23 91 a1 f0 42 b1 c1 d1 Data Ascii: JFIFH!1A"Qa2q#B
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 8d 46 d9 cd 23 c8 a6 3c 43 b4 2a 87 48 05 db a8 04 00 2f a1 6f 5f 61 78 82 a6 25 ac 39 75 2a ee 1f 01 52 b3 73 e8 3a fe 13 09 3b 67 1d d3 86 43 cb a3 2d fb 95 dc 7d 57 11 ff 00 58 cf dd 23 e7 ef d1 4c ee 15 5a 25 90 7e 47 e7 f9 4f 20 e2 e8 79 32 fd 76 fe 75 89 db 5e 99 dc 2a 4f c2 56 66 ad 3e 57 fa 27 65 7a f4 c4 ea a6 86 0a 5a 23 86 49 27 9a ce 05 ad 46 83 1a 04 82 16 fd 0b 1f 28 24 ec 2c ee 76 e7 88 cb 80 d5 48 1a 4e 8b 8b fe dd df 69 69 f2 12 e5 b2 59 4f 2c 93 c4 73 bf 79 65 8d a1 09 17 8b 18 85 23 95 5d 5e 72 e5 a4 35 b8 11 c3 41 ac 8c 01 05 e7 5b 05 6a 98 0c da e7 df fa 5c 6b 92 ed 5b bc af 3c 32 8c b6 62 0c a8 96 25 cc b9 cc 1c e6 6e c2 4b 0a aa a4 66 48 f3 43 c5 7a d0 da 6c 29 92 d9 58 09 68 00 08 f7 f6 56 83 cb 89 33 ef c3 75 31 df 5e 70 66 06 42 Data Ascii: F#<CH/o_ax%9uRs:;gC-}WX#LZ%~GO y2vu^*OVf>W'ezZ#I'F($,vHNiiYO,sye#]^r5A[j\k[<2b%nKfHCzl)XhV3u1^pfB
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 08 56 9e ea 3b e1 e2 6c 86 71 c7 65 86 38 63 2b 0c 5c 46 4c bc e2 69 92 c3 45 1c 2c 81 8c 60 d2 d9 61 62 88 20 56 21 73 cb 0c 4c 79 95 2b 68 b6 a0 90 26 7a 0f b2 ea 1e e2 3b f3 cc 71 7c 94 73 4e b1 c0 fa 9e 1c c7 84 19 63 9a 48 5f 40 92 34 66 61 1a bd 82 51 59 85 9a b3 a0 13 0e 22 b3 9d dc d0 7d 79 2b 38 3c 23 29 ff 00 74 89 37 8e 9c ff 00 85 b1 71 fe 26 91 40 19 c6 ea 0f d4 0c 45 51 e1 8c 9d d5 8a 0c 75 4a a5 a0 d9 53 bb 01 db cf bd 33 88 e3 60 14 12 5d 87 90 6f 40 6f cc 93 d3 db 15 69 55 35 0e 8b 4b 17 85 14 40 25 de 4a e7 97 c9 11 ed 40 9b f7 1b fe f9 62 e3 5a b3 5d 50 68 b1 4e f8 3b c6 fb 98 2e 63 92 52 4d d4 61 75 11 77 7b 90 a0 6c 7d cd 1e 78 ae 46 67 42 d5 64 36 9e 63 a0 d8 28 ee eb 7e d4 d9 4c ee a5 29 36 56 48 dc a1 5c c7 85 bd 22 38 37 1b b6 9d Data Ascii: V;lqe8c+\FLiE,`ab V!sLy+h&z;q\|sNcH_@4faQY"}y+8<#)t7q&@EQuJS3`]o@oiU5K@%J@bZ]PhN;.cRMauw{l}xFgBd6c(~L)6VH\"87
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 65 67 20 98 03 55 b8 66 3b ce 9e 2c dc 32 c8 b1 f1 19 b2 51 24 23 29 9e c8 49 3e 4e 18 ec f8 aa c5 84 af e3 12 01 4c c4 4c 62 28 da 81 20 d6 33 03 09 3b 79 c7 d1 6c 97 00 0e a0 f4 91 f3 e7 f6 5a de 47 ed 7d 94 9f 29 99 53 90 c9 f0 dc de 5a 64 95 06 54 93 97 95 49 30 4b 19 2b 10 31 cb a6 66 d2 19 0a 06 5b 37 cb 06 59 36 ca 07 50 ab 83 06 43 c9 03 50 7c b7 5c c5 c6 38 8a c9 a4 ba 24 3e 20 56 10 43 99 78 c4 28 cc 18 c1 12 5b eb d2 9e 45 59 75 7a e9 e4 30 ed 19 6c 14 ae 39 84 93 f3 55 4e d0 e4 cc 19 83 09 78 44 59 98 2e 37 2a d2 08 63 9d c9 f0 9b 52 2a 8c c0 08 16 46 d0 06 e0 8d 21 ab 13 b4 e6 1e f6 54 9f 34 df 1c c7 a4 fd d7 48 f6 5f bd 8c 92 70 f9 72 39 5c a9 19 ec cc 8d 1e 51 ae 19 96 63 98 71 1a 43 24 b6 b2 68 a6 07 cb 03 15 ae 64 51 34 ea 53 22 ee f1 95 Data Ascii: eg Uf;,2Q$#)I>NLLb( 3;ylZG})SZdTI0K+1f[7Y6PCP\|\8$> VCx([EYuz0l9UNxDY.7cRF!T4H_pr9\QcqC$hdQ4S"
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 71 57 9a e1 f9 9c bc 93 64 f8 86 58 02 35 3e 56 67 68 89 a9 52 32 0d 4b 04 dc 2a 66 1a 60 fb f7 d1 69 f5 7f 3e 47 e6 30 90 a5 3c 1a 18 78 4d 2a 32 76 df 6c 02 95 08 37 84 85 04 d1 61 8a 20 52 51 8c 0a 24 ab 45 81 29 c1 4b 43 16 d8 49 12 9c f8 98 48 53 dc b6 0d 31 47 9d 30 90 a4 63 c2 4e 8d 21 c1 26 4d 4b 61 24 93 d3 86 84 93 c8 c6 26 0a 22 84 c5 88 e2 e8 a6 c9 cd e2 55 12 4a 45 c3 27 43 a7 09 24 74 c2 4c 8e 0e 1d 24 0e 70 25 10 44 41 84 13 14 a5 61 14 92 88 70 61 09 46 18 74 e8 be 26 12 4b cd 2d 0b e8 37 fa 7a e1 24 a8 cd df 67 0f fb da 64 9b 37 97 4c ec cb aa 18 19 a9 e5 df 61 1b 1f 23 33 0a 60 81 b5 11 bd 73 aa e2 bb 09 80 55 c7 61 2a 86 67 cb 6f 7b 2b 92 cb 7f 5d be 5e d8 96 55 48 5f 3f fb f3 ef c3 3f 99 6c d9 fb e2 e4 38 3a 89 32 f2 24 48 8f 2b e4 f3 Data Ascii: qWdX5>VghR2Kf`i>G0<xM2vl7a RQ$E)KCIHS1G0cN!&MKa$&"UJE'C$tL$p%DAapaFt&K-7z$gd7La#3`sUa*go{+]^UH_??l8:2$H+
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 00 62 60 a6 54 90 c2 e7 51 35 29 f1 10 b3 b6 f7 40 f2 74 85 67 ec 1f 6e 19 20 fb ba 53 ce ad 31 8c cf 28 42 82 64 0f 98 08 ec 4b 46 ee 01 07 c3 78 cb 13 ff 00 11 c9 40 91 be 98 26 4a 9e 9d 48 6e 51 aa d8 78 cf 73 13 66 32 8f 9d 88 cb 26 66 05 6c c6 7b 36 5c c5 97 9a 28 c2 c5 0e 53 87 65 04 c5 16 0c b2 85 74 66 89 64 00 50 5d ca e2 06 be 0c 11 01 4e 59 bc c9 dd 67 fd cc 76 31 65 e2 11 2e 67 34 d9 6e 1b 98 79 66 e2 29 0e 69 e3 6f b9 f0 f8 a4 ce 09 e5 94 2e 98 50 e6 62 8d 0e 96 f1 a3 d7 e5 f0 ca 87 12 bc db 4d 15 76 03 9a c6 c7 f0 7e eb 4a ec 2c 72 30 f1 38 71 96 2c a3 e7 38 a6 73 b3 b2 e6 0b 0c e6 57 39 c3 b2 f3 e7 fe f1 ac 90 e3 25 99 68 a6 ca e6 a0 94 10 cb 98 8c f8 86 e6 47 06 be 0d f5 df f0 8a a5 39 12 34 db a7 5d ac 4c af a3 9d d6 76 ec 71 1c 86 4b 3e Data Ascii: b`TQ5)@tgn S1(BdKFx@&JHnQxsf2&fl{6\(SetfdP]NYgv1e.g4nyf)io.PbMv~J,r08q,8sW9%hG94]LvqK>
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 53 2b 5b 2b 06 52 aa 09 1a 23 4a b0 4d a2 92 4d 98 c0 07 52 b3 59 c2 8e 49 4f 64 cd 8b 5b 21 10 04 ad 1c ea 42 ac eb a4 5b 09 40 1e 1a 11 c8 22 0e 67 00 88 a4 91 10 85 8c 49 60 ea 93 42 b6 a5 d9 48 0a cc 56 35 56 40 17 cb 44 b0 24 6f 7b 17 88 43 e6 a3 f2 7c 38 d0 0b ac 19 10 35 d6 83 40 95 15 60 7c 4c 2c 82 0b 0d 23 d6 f0 48 60 ab 19 e2 a1 22 ff 00 8b ab c6 1f 89 1a 30 26 d1 a9 8c 87 c3 6f 0d dd ad e9 9f 53 10 3a 13 60 44 a9 41 80 9a e4 38 ca 3b eb 7b 1e 65 6a 7b 2c ef a5 b7 23 e3 6a b0 d7 63 51 3e 55 5b 14 f1 08 73 ce a9 de 5b b5 12 e5 e2 f0 c4 be 12 c8 cd af 41 1a 74 58 2a 43 15 b8 db 50 3f 88 19 41 a5 b1 6a 4a b6 50 4d d1 f6 85 a2 02 71 99 e0 42 25 d3 9c 2b 13 b4 71 c9 1e 89 84 f2 c6 24 54 68 fc 6a 77 58 d9 83 1f 24 aa cc 3c 37 42 80 82 a8 e0 f2 43 11 Data Ascii: S+[+R#JMMRYIOd[!B[@"gI`BHV5V@D$o{C\|85@`\|L,#H`"0&oS:`DA8;{ej{,#jcQ>U[s[AtX*CP?AjJPMqB%+q$ThjwX$<7BC
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: d4 4a 04 d3 e6 55 2d 16 a2 54 2c 83 99 d4 c5 48 60 4f 23 b1 43 43 aa 2d d3 e2 de 76 68 cd 96 4d 00 89 35 48 c5 c1 5e 5c ca 92 42 0d 02 a8 81 e6 26 8b 58 84 5b a5 78 9f 0c 91 09 8d 80 57 86 a1 91 54 06 28 f6 de 24 4e 56 c0 74 74 65 21 5a b9 a2 92 45 05 29 41 16 f5 44 5c d5 f3 72 a0 d6 96 62 ca c2 bc aa 49 0c 08 e4 a2 c5 9b a2 77 03 08 04 8a b6 f6 3f b2 2e e8 ee 9a 28 34 6a ed ad 77 66 90 02 6e c5 79 99 55 4c 8a 00 52 5b 98 d8 91 b1 a7 64 c3 8d f0 d9 27 04 46 be 1a 19 1d e8 2e 85 2c 45 f9 63 0c 80 9a 5a dc 2d b0 3b 72 38 09 0d 4a 1c f1 03 45 1d 99 81 4d 96 42 aa 1b 4b 69 f3 33 2b 39 2c 48 40 d7 a5 0d d6 b0 5b a9 8c d9 c3 cc a1 22 12 5c 52 4d 48 fe 55 68 f9 2b 47 b2 9f 21 50 75 34 6a 7e 1a bd c1 a1 7b 1d 64 1a 12 15 a3 b2 7c 5a 35 3a e7 8f c6 06 98 90 07 94 Data Ascii: JU-T,H`O#CC-vhM5H^\B&X[xWT($NVtte!ZE)AD\rbIw?.(4jwfnyULR[d'F.,EcZ-;r8JEMBKi3+9,H@["\RMHUh+G!Pu4j~{d\|Z5:
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 6f c5 95 3c 45 ba 21 db 48 6d c6 c7 7d 4c 3a 15 1b d6 de 5d ad 17 6c 10 b5 9b 95 e7 6b 6a bd 0a bf 0b 2d a6 94 53 48 6f 62 54 8a bd 88 bb ac 3e c8 62 51 61 89 87 87 54 ce aa 5d 00 5a 20 9b 6f c4 22 80 2a c7 93 03 e6 00 7a e1 fc 52 8d 14 b4 b1 68 89 52 40 01 31 81 ab 4a 92 36 5a 21 48 ba 1d 24 15 a9 4a 1e 9b 81 52 01 6b a0 8f 3a c5 a3 10 93 2b bb aa 44 48 22 42 ee e2 30 54 2a e9 69 35 b5 02 c2 4a e4 1b 95 39 98 20 a6 b4 88 d5 38 9c 48 5b 44 92 54 9a d9 68 83 b9 46 b6 36 42 9a d4 03 00 a1 43 6e c3 51 20 e0 65 19 07 42 52 92 e6 23 55 a4 60 c1 ad c9 52 05 b2 ec 58 3d 13 e6 00 82 87 98 03 ca 77 38 2b a1 30 94 ec af 6b 65 cb f8 89 04 8c 22 91 74 ce 89 e6 49 05 3e 9f 8b 73 b7 90 b0 b1 a4 ef b6 ab 74 c0 90 ac bd 9e cb 1d 50 88 f3 11 29 9d b4 09 26 53 a6 3f 12 45 Data Ascii: o<E!Hm}L:]lkj-SHobT>bQaT]Z o"zRhR@1J6Z!H$JRk:+DH"B0Ti5J9 8H[DThF6BCnQ eBR#U`RX=w8+0ke"tI>stP)&S?E
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: f4 e2 00 d5 69 d5 06 a3 92 6f 97 e1 c8 42 34 ae 14 c6 be 15 12 41 8b 45 d9 08 88 cc 75 82 4b 69 df 62 00 b3 83 cd 0a 20 d0 60 95 37 c6 38 b8 39 74 8a 05 96 ed 99 c8 67 77 76 63 a9 64 d1 e6 58 c2 25 0f 0c 16 3b 02 28 92 30 00 5e ea 67 38 65 80 ab e9 3a 15 a3 12 df 95 59 d5 58 06 da 95 68 59 5a 7b 6f 11 d9 68 f2 1d 31 20 95 04 88 d1 47 66 b3 0c ce 74 85 8c 2a 53 52 96 2b 12 02 19 8d 90 c7 e2 2c ca 9a 42 d9 3a 48 0c c2 5d 54 13 07 92 5d d8 3a 69 32 06 0c 55 79 80 e3 42 b1 28 22 d5 f0 96 60 01 a2 07 99 80 1e 61 86 4e 6e 11 d3 86 cc 85 1e 21 22 9c b0 8a 43 e0 bb 9d 34 fa c3 ae a2 a0 01 27 90 ba 80 03 1d 5e 60 75 3b a4 d2 64 10 9d ac 6e 41 92 5d 68 c1 fc 4f 16 47 46 97 54 87 59 8e 25 66 2f 28 dd 1c 39 42 a0 19 37 21 94 10 d2 ca 48 27 bd f5 f7 75 13 c4 b2 ad e2 Data Ascii: ioB4AEuKib `789tgwvcdX%;(0^g8e:YXhYZ{oh1 Gft*SR+,B:H]T]:i2UyB("`aNn!"C4'^`u;dnA]hOGFTY%f/(9B7!H'u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50091	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:31 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:31 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:31 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:31 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:31 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50092	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:31 UTC	819	OUT	GET /1If7OvDczdPnWNfp6LhWWjmSpreHL-7WlUojUGgr4HhdU7Cqfh2NWNlX-evRfwDNgf3ojMiKYP5DSmJ9gLKhLdXyR5Zg9JRFjke_vtbnRqAftdbh4oY=w1440-l90-sg-rj-c0xffffff HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:31 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 18172 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:15:38 GMT Expires: Tue, 28 May 2024 22:15:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 1673 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:31 UTC	857	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 08 08 08 07 07 08 07 07 07 08 08 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 0a 07 07 07 08 09 09 09 07 07 0b 0d 0a 08 0d 07 08 09 08 01 03 04 04 06 05 06 08 06 06 08 08 08 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 01 fb 03 84 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 07 08 04 05 06 09 ff c4 00 5c 10 01 00 01 02 02 03 09 0a 09 06 09 0a 04 07 00 00 00 01 02 03 04 11 05 21 31 06 07 08 12 41 51 71 73 b2 13 32 33 34 61 72 81 91 b1 b3 14 22 Data Ascii: JFIF"\!1AQqs234ar"
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 95 18 9b 75 ce 54 d5 13 3d 1c ef 72 38 98 4d 25 45 7b 27 d1 2e 5b 44 c6 4e 8c c0 10 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c4 d2 7a 4e 8b 34 4d 75 ce ad 91 11 df 55 57 25 34 c7 2c cf aa 36 ce 51 13 29 88 9a a7 28 8c e6 75 43 1a aa 8a 62 66 78 a2 35 cb 95 32 e9 74 86 ed 70 b6 bb fb d4 e7 1c 96 e9 ae f4 f4 65 66 9b 99 4f 4e 4f 1f a5 b1 f7 31 13 3d d6 a9 a2 d7 25 9a 66 62 9c b9 38 fb 3b a4 f9 6a 8c a3 92 21 d6 fc 16 d5 3c 91 ea 5b db d1 f3 3c ba b2 9e 8a 63 3f 1c e2 37 67 d6 a7 b9 a4 62 39 14 e7 1d 35 4e 5e 19 4c ef cb a9 eb a7 7d 3c 2f d5 f8 45 5f d1 ee 51 9f fc 58 b6 b3 73 7d 4b 31 b2 ce 26 af ff 00 Data Ascii: uT=r8M%E{'.[DNzN4MuUW%4,6Q)(uCbfx52tpefONO1=%fb8;j!<[<c?7gb95N^L}</E_QXs}K1&
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: fc 74 55 62 7f be a6 14 95 de a2 6a 9c a7 f7 5e 51 45 51 4c 67 0f 5e 3c a5 3b e3 d8 fa d6 f1 14 fd 8a 2a f7 77 2b 5f a3 7c 1c 37 2c de a7 a7 0d 88 f6 c5 b9 86 3e d2 9e 98 67 c1 9e 89 7a 41 d0 d1 bb 9c 24 ff 00 1d 11 e7 51 76 9e d5 10 b9 4e ed 70 73 ab e1 58 68 9e 69 bd 6e 99 f5 55 54 4b 2e 15 3d 31 bd 19 4b ba 1d 7d 9d d0 61 ea ef 6f e1 ea e8 bd 6e 7d 95 39 96 ef d3 3b 2a a6 7a 26 27 d8 9c e1 0b 82 78 a8 c9 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c f6 ee 2b f9 18 8e 7b 94 47 ab 3a bf 06 37 d2 75 b2 3e ee 69 f9 2a 7a da 7b 35 b1 96 95 af 5b d4 68 dd 9f 7c f9 3c ae 93 da f7 47 9f ab ae b9 52 d5 55 22 bb 8b 55 5c 5c 29 d5 Data Ascii: tUbj^QEQLg^<;w+_\|7,>gzA$QvNpsXhinUTK.=1K}aon}9;z&'x <+{G:7u>i*z{5[h\|<GRU"U\\)
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 4a e8 9a 3c fd 25 82 a7 db 7e 1a e7 48 cf cb 11 df ff 00 c6 c8 d1 94 fc d3 dd 11 fc ba 88 d1 77 e7 f8 aa fd 31 11 ed 95 74 e8 0c 44 ff 00 17 97 4d 54 fe d7 ac d0 9b a4 c3 62 62 6a c2 62 70 d8 aa 63 5c d5 85 c4 59 c4 53 1d 35 59 ae b8 8f 5b b1 63 fe 42 e7 34 53 ba 7d 59 c6 8d b7 1a e6 ad f1 e8 f0 b4 ee 5f 11 3f 56 88 e9 ae 3f 08 95 74 ee 3f 11 3c b6 a3 ed 4f f8 5e e1 2c 27 1d 77 fd 77 7f 2c a3 47 da ff 00 6d ff 00 c3 c5 c6 e2 2e ff 00 29 44 7a 2a 9f d8 ae 9d c2 57 cb 7a 3d 16 e7 fc 6f 60 ed 30 db 9c bb 55 31 56 51 4d 33 ae 38 f3 c5 99 e6 ca 35 cc 44 f2 4c c4 44 b5 57 8f b9 4e ba e2 3b a9 f4 6d a7 47 da 9d 54 4c f7 d5 ea f0 36 f7 01 cf 7a 7d 14 44 7f 6a 5c fb 7b d5 d1 54 67 dd ee 47 fb 3a 7f c4 f4 77 b0 b5 51 57 16 b8 ca 7d 71 31 cf 13 1a a6 3a 1d ae 1e 75 Data Ascii: J<%~Hw1tDMTbbjbpc\YS5Y[cB4S}Y_?V?t?<O^,'ww,Gm.)Dz*Wz=o`0U1VQM385DLDWN;mGTL6z}Dj\{TgG:wQW}q1:u
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: fd 0e be c7 7a ee b4 ed 51 16 a6 7f 4b 2a 7e d4 cf ec 89 97 4b 63 bd 77 60 26 a9 b7 f8 ba 7c a1 cb 8b 88 8a f8 ba 1a c7 c2 d3 0d c6 a2 27 3c b2 a3 fb 55 bc 4f 05 6d c6 db c4 5c 98 aa ab 91 33 c6 8f 8b 34 c7 27 96 99 7b ce 15 fe 0f ec 7e 35 3a 6e 05 f1 f2 de 8a bf 7e 6f 5b 8a fe d2 ae b6 db 7c 98 65 fd f2 e9 c7 c6 02 70 f4 e0 6b ce dc 5b a6 2e ce 2b 09 dc eb 8b 59 47 1a 23 bb 45 c8 8a e2 33 88 ae dd 33 19 e5 3c ed 3b dd 06 ea 71 71 76 6d 55 63 8b 56 73 1e 16 dc c7 ae 9a a5 f4 27 7c 88 f9 bd 7d 12 f9 fb bb 4f 1c ab ce 98 f5 4b 9b 28 6e cc c0 68 ec 7d c8 89 8b 76 b5 f3 de 8f d8 ed ad 6e 33 49 ce cb 56 a7 fa 45 11 ed c9 e9 77 31 de c3 de 68 f3 28 4e 6c 41 5e e3 f4 ac 7f a2 e7 e6 e2 30 df 8d d8 71 ae 68 9d 21 4f 7d 83 bb e8 ae c5 5d 9b b2 cf d3 b1 d4 e2 ce 09 Data Ascii: zQK*~Kcw`&\|'<UOm\34'{~5:n~o[\|epk[.+YG#E33<;qqvmUcVs'\|}OK(nh}vn3IVEw1h(NlA^0qh!O}]
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: f1 54 c6 a9 98 cf 96 36 e5 d3 96 c6 db b6 68 b9 c7 56 f6 14 5c aa 9d 4e df 4a e9 79 bb 56 a8 e2 d1 1d ed 3f 8c f2 67 e4 e4 f2 ed 72 6c 6c 74 96 6b 89 ca 62 62 62 76 4c 6b 87 79 63 bd 6d a6 98 a6 32 8e 28 61 33 33 39 ce b6 b4 f0 af f0 7f 63 f1 a9 d1 f0 35 af e5 e3 d3 ec 77 9c 2b bc 1f d8 fc 6a 74 7c 0d a3 e5 a3 a6 54 37 f6 95 75 ac 2d f2 61 b4 fb e3 f8 0a fa 25 f3 f7 76 7e 39 57 9d 3e d7 d0 3d f1 67 e4 2a e8 97 cf cd da 4f cf 2a f3 a7 da d0 db 2f 77 b9 ad 91 e8 7b cd 1c f0 7b 99 d9 1e 87 bd d1 e1 0e d6 76 30 c7 08 5d fd ec 68 4b 11 54 d3 4d fc 6d ec e3 0d 85 e3 65 13 11 9f 1a f5 ec a6 2a a6 c5 13 f1 73 a7 e3 57 54 c5 31 96 55 d5 46 64 c4 e2 29 a2 8a ab ae a8 a2 8a 29 aa ba ea ab 65 34 53 13 55 75 4f 92 9a 62 66 7c 90 f9 39 bf 36 f9 37 34 b6 91 c4 e3 eb 99 Data Ascii: T6hV\NJyV?grlltkbbbvLkycm2(a339c5w+jt\|T7u-a%v~9W>=gO/w{{v0]hKTMme*sWT1UFd))e4SUuObf\|9674
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: e9 f6 b4 36 cb dd ee 66 3e 2c 7e fc 8f 7b a3 de 0b 73 31 aa 1e f3 47 04 3c 37 09 dd 3f 38 6d 01 a4 ee d3 33 15 d5 62 9b 14 cc 6d f9 cd eb 76 2a ff 00 cb b9 5b e5 93 e9 7f 0c db 33 3b 9d c6 cc 7d 5a f0 95 55 d1 f0 ab 51 ed 98 7c d1 81 9c 3b 0d 13 a2 6b bd 72 9b 36 a2 26 ba f5 44 4c e5 9c f3 66 bf a5 f4 25 dc 3d ca b0 f8 8a 2a b7 72 9c b8 d4 55 1a e3 38 89 a6 a8 e7 89 89 89 89 89 ca 62 5c ba 34 1d 74 d1 18 8a 2a 9a 66 27 38 98 9c a6 26 99 e7 8d 71 ce bd bb 5d d9 57 8d b9 45 db ba ee c5 ba 6d d7 56 51 1c 6e 2e c9 d5 ab 63 a6 6d d3 16 f3 9c e2 ae 29 8e 89 89 f3 86 bb 77 22 be 16 53 c9 9c b2 fa c4 f1 e6 f2 f5 53 96 a4 2b bd 3a fd 5e c8 5d c0 5b a2 6b 88 b9 54 d1 46 bc ea 88 e3 4c 6a d5 aa 22 73 d7 a9 cc da e3 ae 5b 8f df c9 ca a6 e4 46 73 96 b8 ce 72 9e 78 e4 Data Ascii: 6f>,~{s1G<7?8m3bmv[3;}ZUQ\|;kr6&DLf%=rU8b\4t*f'8&q]WEmVQn.cm)w"SS+:^][kTFLj"s[Fsrx
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 80 87 73 95 6b 15 67 8d 19 46 d8 d7 1d 3c d3 e4 9c e6 3c 99 ba ba ae e5 b7 38 9e 69 89 cf d1 96 7c 6f b3 9c 4b ba c8 cd 8d 54 c4 b3 a6 ac 9c 0d 19 86 99 aa 2b aa 26 22 3b ca 67 6e bd b5 d5 1f 56 72 ce 9a 69 9d 71 13 56 79 4c e5 4f aa b1 de ba 6b 71 ad dc da d5 4e bd 5d 3a 93 96 50 c6 67 36 b5 70 ae f0 7f 67 fb 55 3a 3e 06 be 1a 3e d3 ba e1 57 76 26 d6 a9 89 f8 bc 93 13 af 3a b5 6a 74 dc 0c e3 e5 a3 d2 a0 bf b4 ab ad 63 6f 93 0d a7 df 1f c0 57 d1 2f 9f 9b b4 8f 9e 55 e7 4f df 3a 9f 40 f7 c6 f0 15 f4 4b e7 ee ed 27 e7 95 79 d3 ed 68 6d 97 ba dc c7 7b 0f 7b a3 9e 0f 73 5b 21 ee f4 7e c0 79 fd fb 77 27 56 3b 43 e9 1c 1d 11 c6 b9 77 0b 72 6d 53 b6 66 ed 99 8b f6 a2 23 9e ab 96 e9 a6 3a 5f 26 66 1f 67 62 72 fc 1f 32 78 55 ef 41 56 8a d2 77 6a b7 4e 58 2c 65 57 Data Ascii: skgF<<8i\|oKT+&";gnVriqVyLOkqN]:Pg6pgU:>>Wv&:jtcoW/UO:@K'yhm{{s[!~yw'V;CwrmSf#:_&fgbr2xUAVwjNX,eW
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 9a 2a ed 53 2f 7b dc 96 b1 16 f5 27 d9 51 f2 d3 fa 63 d1 1e d6 b9 fc d5 7e a9 f5 60 9d f4 74 1d ac 3e 06 bb 76 2d 5b b3 44 dc aa a9 a6 d5 14 db a7 8d 34 d3 13 54 d3 4c 44 67 31 4c 46 79 67 aa 39 9d df 03 49 f9 68 f4 b8 db f8 53 f3 4a bc ea bd 90 e6 f0 2f 88 ee df ef 7e fc cf 9d e3 e3 2c 45 c8 8f 99 ee f0 53 9d 8b 7d 96 d1 ef 8f 3f 21 5f 44 be 7e ee ce 3e 79 57 9d 3e d6 ef ef 99 be 4e 8e a6 d5 74 4e 90 d1 f1 5c 71 a9 9a 3e 1b 86 e3 c4 c6 a9 89 a7 ba e7 13 13 b6 32 ce 1a 27 ba bd 39 62 bc 54 d5 45 fb 15 c4 d5 33 9d 37 6d cc 6d d5 ae 2a 98 70 3b 65 91 f7 33 de c7 a1 ef 74 74 31 be e6 b4 dd 9c a3 e5 ac c7 fb 5b 7f e2 7b cd 1b a6 6c ce 59 5e b1 ff 00 16 df f8 84 c3 d1 4e c7 85 df 47 7b bc 2e 95 c2 d7 82 c6 53 35 5b aa 62 aa 2b a6 62 2e 59 bb 11 54 51 7a d5 53 Data Ascii: S/{'Qc~`t>v-[D4TLDg1LFyg9IhSJ/~,ES}?!_D~>yW>NtN\q>2'9bTE37mmp;e3tt1[{lY^NG{.S5[b+b.YTQzS
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 5a d8 f7 49 ce b7 be dd cf 82 a3 ad a7 b1 5b c0 e9 17 a6 d1 db 38 eb 97 97 d2 5b 49 ea 87 57 5c 2c d4 bf 52 cd 6b a5 2a d4 ad cc 2e 54 a2 41 6e 54 cc 2b 95 32 21 6e 61 4c c2 e4 a8 91 2a 26 14 ca b5 32 0a 66 11 30 aa 54 88 53 30 89 55 30 89 80 52 85 4a 64 11 92 26 15 21 22 99 59 c4 ec 72 16 71 3b 11 29 86 12 df df c5 67 a6 af 63 81 c1 67 bd bd d5 5f f7 75 39 db fc d7 1f 06 e2 cf d7 af 89 9c 65 9c 67 19 cc eb 89 8d 51 13 aa 63 6e 5d 0e 0f 06 5d 17 77 0d 7b 17 85 bd 5d 37 78 b6 22 fd 9b b4 d3 c5 9a ec 62 70 f5 d7 44 57 4c 6a ee 96 ea a6 bb 75 4d 31 11 3c 5e 5d b3 f3 6c 7f c4 5c ed 3e 81 82 d8 5b ec b6 67 77 54 ff 00 9b 2c f5 78 6f 77 4b 5e 74 ad b6 c4 6e e7 e8 cb 5d 5e 1b dd d2 d7 cd 26 ab 95 93 a3 9b 2a 26 c3 97 92 32 40 e2 4e 1d 4f 70 73 38 a6 46 43 87 38 Data Ascii: ZI[8[IW\,Rk.TAnT+2!naL&2f0TS0U0RJd&!"Yrq;)gcg_u9egQcn]]w{]7x"bpDWLjuM1<^]l\>[gwT,xowK^tn]^&*&2@NOps8FC8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50094	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:31 UTC	568	OUT	GET /UrtOTOQn0umKcsyJwL9X7mffZz1_SCQcB8iv25zV81lMoHfaPD03Omb14RNyN33Uxr32rsqwRgHpGkhXIVJwD2jB1NBmRUiexA_bC1ICZBYvs3Ggh2A?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:31 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 312061 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:39:18 GMT Expires: Tue, 28 May 2024 20:39:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 7453 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:31 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 80 08 02 00 00 00 54 42 4d e8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 04 c2 af 49 44 41 54 78 9c c4 fd 59 8f 24 4b 92 26 8a 7d 22 a2 6a 8b 2f 11 91 cb d9 aa 7a 7a 7a 96 9e b9 03 5c 0c 71 f9 72 5f 48 e2 82 cf c4 fd 0f fc 99 04 7f 00 df 48 10 7c b9 33 18 f4 6c 55 dd 55 a7 ce c9 cc 88 70 77 5b 54 45 84 0f a2 e6 e1 19 99 e7 54 35 67 00 7a 55 65 45 84 9b a9 a9 99 a9 7e 22 f2 c9 46 ff d7 ff c3 bf 85 13 11 88 1d 80 bb 03 e4 4e 0e 07 08 ee 20 27 07 11 99 bb b9 03 ec ee 0a 32 73 38 88 20 4c 42 4e 00 01 0e 27 22 a2 18 c9 1d 20 22 18 21 fe 06 77 77 8a 43 e1 00 b6 4b 70 5c 39 8e 22 60 1b 04 0e c0 41 4c 70 b8 33 08 40 7c d3 ce 36 33 87 33 c0 44 8e 18 9e da 75 09 4c 10 61 66 Data Ascii: PNGIHDRTBMpHYsIDATxY$K&}"j/zzz\qr_HH\|3lUUpw[TET5gzUeE~"FN '2s8 LBN'" "!wwCKp\9"`ALp3@\|633DuLaf
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 38 af 9d 43 e4 ed 7a 2f a0 e0 6d 94 d8 39 6e e6 d7 2d 19 f0 6d 64 e4 64 e6 0e 6f 48 f8 02 5f de e6 d5 de 0b 0c e6 e0 b8 a6 1b 9a 08 05 ac 3d 86 f6 62 e1 21 2d 9c 01 62 6a c2 cf 9b d8 21 b8 13 87 b4 f4 76 fb 1c af c4 e1 6e 0e 26 5c ff 43 9b c0 8d 91 cd 9c 88 88 99 2c 73 dc 23 0c 2e 44 ce 14 37 47 44 88 67 12 8f cd dd 42 56 c5 3d b4 3d c6 db eb c0 2d 4e 7f 15 bb 7f 09 d0 af 7f 7f 75 c0 9f 15 24 ff 5d 20 f8 cf 8a 99 af 9e f2 97 1c 7f 3b f2 57 4f 79 35 ff af 8e 18 7f 34 c0 dd f9 17 6f d9 b7 95 df ce 68 bf 83 89 18 20 8e 55 e7 6e 9b 56 e3 20 c0 99 3c 56 23 b7 45 ce c5 94 1d 42 4c ee 6e c6 b1 1d dc 0c 1c 5a 8c 99 3b 19 44 66 f7 e7 e7 8b aa 96 52 aa 6a d1 75 18 3a ab ba 4e 73 4e c9 cc 04 b0 aa 7d 3f 5c a6 49 92 c4 a3 90 94 a7 69 9e ce 33 b9 ef f6 7b 06 72 ce b5 Data Ascii: 8Cz/m9n-mddoH_=b!-bj!vn&\C,s#.D7GDgBV==-Nu$] ;WOy54oh UnV <V#EBLnZ;DfRju:NsN}?\Ii3{r
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: d3 5c e6 b5 b8 7b ce 19 80 b9 af eb 0a a0 d6 1a 6b 52 44 84 45 18 6e 3a 5f e6 52 14 24 39 4b 4a 99 99 73 96 94 a4 14 3b 9f 4e aa c6 cc b9 1f e0 58 d7 a2 a6 eb ba e6 9c c7 be 27 78 ee 06 11 59 96 19 ce a9 4b 97 f3 e5 70 38 a0 2e e7 cb d9 5d 6b 2d b1 2f cd 94 45 cc 90 ba ee 78 3c 30 a5 b5 d4 71 b7 cb 5d a7 b5 76 03 58 78 9e 97 ae eb c9 9d c6 61 37 e6 9f fe f0 fb e9 d3 f3 5a f5 fd fe f0 ee ed c3 f9 f9 51 12 0b d1 65 5a 87 a1 4b 20 87 26 61 57 23 16 af f3 72 9a 88 79 b9 3c 3e 27 ea fb fe 70 ff cd 30 1c 89 38 a7 24 64 66 85 dc 09 ec ae 50 25 62 27 98 9a b9 33 13 31 5d 17 a2 bb b9 05 55 c0 a1 fc ba 99 9b ba d6 a0 68 6c c3 aa a0 f0 01 28 00 83 93 c3 af 06 bf 1b 79 da f8 f7 06 b2 84 4d c3 dd 96 a2 6f da b7 d3 55 53 dc 98 87 2b ec 85 82 4d c0 66 40 08 18 dc d8 84 Data Ascii: \{kRDEn:_R$9KJs;NX'xYKp8.]k-/Ex<0q]vXxa7ZQeZK &aW#ry<>'p08$dfP%b'31]Uhl(yMoUS+Mf@
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: fb 95 fc 6f 90 e4 86 6d a7 bb 06 9e b8 9b 87 57 93 37 14 66 00 7a dd 1d 1b 35 df 8c 8b 18 cd 83 6a 70 8f 60 1b 20 9c a8 de 88 a8 d0 51 e3 ab a6 53 c7 44 7c 63 4b a8 71 a4 4d d9 8a 61 37 6e a7 85 e9 60 13 2e 31 e3 66 64 50 bb a3 6d 02 4d 03 b6 2b 81 e4 ae 4d fd 26 55 6d 5c 4a 88 b8 2d c0 e7 4a 67 01 0e 70 dd 0c 17 87 0b c2 41 d7 48 5c d7 d8 bc bc 6d f2 eb 55 a0 30 62 de 68 36 fa 1c 43 5e bc 1d e1 1b 70 77 12 0e 53 bf 79 ca e3 87 eb cd 07 7b d3 82 88 42 8e 04 79 c7 06 b2 76 ef 11 4a e5 b6 51 5b 2f 96 d1 0b 5e 99 c1 14 1a 7e fd 66 1e 6c 00 f5 19 56 5e fd e0 57 08 fc 73 14 cd 5f c2 fc fc 0a 58 7f e9 b0 b9 3d fe 97 24 c4 97 c7 d3 67 6a c4 9f ff fc 92 a4 f9 ca 5f 36 c4 ff ec 5d 6e 5f bd fe f9 17 6f f5 6a c9 c5 6f cd 10 0c 63 b2 e9 7c 04 06 31 81 19 4d 73 db 44 Data Ascii: omW7fz5jp` QSD\|cKqMa7n`.1fdPmM+M&Um\J-JgpAH\mU0bh6C^pwSy{ByvJQ[/^~flV^Ws_X=$gj_6]n_ojoc\|1MsD
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 7e ff c2 e7 2f d1 ca 7f 15 37 5f 1f bb 9d f2 f5 13 7f e9 42 5f fe fd d7 2f 1a df 32 80 cd 03 6c 9f 9f e2 b7 6b ee 1f 71 0b 84 b6 68 d9 bd c6 7d a8 16 75 33 83 56 37 18 c3 48 dd cd 8c dd c1 6d 8f 55 57 37 27 36 47 2d 5a cd d7 5a 8b aa 13 0f ce b6 cc d5 a8 18 9b 5a b5 69 b7 df 91 d9 7c 9e b4 f8 c3 c3 83 88 a9 16 55 ed ba 2e 75 a2 66 96 d5 cd fa be ef bb 9c 84 01 01 48 6b 51 35 82 a7 c4 04 ca 49 86 ae 5b 96 e5 70 38 9a 6b 12 1e f6 7b 96 34 5f a6 e3 e1 ce 6a 3d 5f 2e e3 6e 67 a6 a7 e7 67 21 ea fa 21 49 aa cb 52 b5 ee c7 7e 9a ce a7 c7 4f c3 30 a6 24 16 71 ea 42 e6 94 45 4c 8b aa 26 21 72 90 e4 a5 d4 8f 8f cf 66 b6 ac eb b8 1b 86 61 98 e7 d9 cc 45 24 09 8f c3 e0 00 33 97 ba ee 76 e3 ae ef cb b2 54 b5 b9 ac eb 52 8e c7 e3 f1 78 7c 7e 7e ae 65 ed fb 9e 85 73 ca Data Ascii: ~/7_B_/2lkqh}u3V7HmUW7'6G-ZZZi\|U.ufHkQ5I[p8k{4_j=_.ngg!!IR~O0$qBEL&!rfaE$3vTRx\|~~es
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 72 9e 1e 2f e7 c7 ae 1b 76 87 b7 eb bc 30 41 52 5a 97 e5 7c 3e 95 52 f7 87 fd 7e b7 5b d6 b2 db 1f cc aa a4 4c ae d5 7d 5d 56 75 03 b8 ba ad b3 9a d9 ba d4 52 2b 31 1d 0f fb a1 ef 09 48 39 9b eb d8 0b 8b c0 bd d6 b2 d6 da 75 19 6e 97 cb 59 84 ff f4 d3 8f d3 b2 30 b1 40 fa 5d bf 3f 1c 1e 9f 9e e7 79 de ed 76 70 96 24 39 e7 d8 79 7d 3f 74 b9 ef 87 61 e8 07 11 49 5d 62 26 22 94 75 79 fa f0 61 dc 8f c4 32 9f 2f a5 b4 e0 a2 94 c4 01 c9 39 de a9 aa ba db bb 77 ef ef ee ee 3f 7d 3a d5 4a d3 34 57 d5 b9 cc 92 c8 c9 b4 28 80 8d c5 6a f5 15 cc 5d ad 92 90 08 3b 70 29 65 5a 7c 55 bb 3b 76 bb ae 67 e1 ea f5 b2 a2 db 59 b7 5e 78 f7 76 ff db 7f a3 eb 34 9f 7f 4e cb 9c 86 1d 8d 23 73 4f ce 44 06 53 73 d3 26 90 52 d0 3c 30 17 80 cd dc 16 b2 c2 ee ec c6 14 aa 66 d8 8f 55 Data Ascii: r/v0ARZ\|>R~[L}]VuR+1H9unY0@]?yvp$9y}?taI]b&"uya2/9w?}:J4W(j];p)eZ\|U;vgY^xv4N#sODSs&R<0fU
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: ab 19 e9 f9 f9 89 81 35 75 ee 30 d3 ae 63 87 a7 dc ef 86 43 b2 3b e4 3c 1e 0f 44 b4 4c 13 11 0f c3 50 6b 9d cf 97 a2 45 d5 d6 52 54 35 25 21 22 91 dc 75 3d dc 4c ad ef bb cb 87 d3 38 0c e7 cb a4 a5 98 d9 e5 74 be 7f 38 9a 9b 17 6b a1 d7 b1 3b 09 00 92 08 8b 98 29 cc cc d4 c1 b5 da cf 36 f5 79 7d 30 3b 1e 87 69 d5 d3 e5 d1 c9 13 ff 9e 4a e1 37 3f 74 0f ef b1 ae 65 7a 2a ee 36 9d 59 12 a5 4c 29 73 1e 41 24 44 11 90 62 a6 ee 4e 2c cc e2 1b 56 20 36 2d 0f 9e 80 ce 5c 8b 95 b3 e7 7d b2 cd 49 b8 31 30 9b 66 dd a0 91 68 73 08 30 d8 81 1a bc 89 b9 b9 79 53 ec 1b 43 8d a6 ec 1b c0 42 e0 8d 0b a0 16 47 2a 0e 8f 30 1a 10 98 38 32 1c dc 40 10 21 01 c1 95 cc b5 81 09 10 89 ab f0 08 09 43 ab 83 02 b0 79 8b 1b da 54 d1 d0 10 23 70 96 19 0e b7 46 d9 6f fb 97 60 aa f1 28 Data Ascii: 5u0cC;<DLPkERT5%!"u=L8t8k;)6y}0;iJ7?tez6YL)sA$DbN,V 6-\}I10fhs0ySCBG082@!CyT#pFo`(
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 65 5d 01 56 ad 44 a8 55 45 78 9a 27 b8 81 d8 4d 89 90 18 e6 10 62 66 31 b7 c5 aa 90 50 b8 ec 54 45 44 b2 24 20 25 39 cd 95 1f 9f 1f ee 8f 92 f1 f8 e9 43 01 de ff f0 cf b1 9e eb e5 03 ed bf 83 16 11 a2 dc 57 73 61 21 61 57 75 f3 10 da 10 d1 6b e2 91 23 2a 03 da 16 3f fa b2 68 89 48 fa 54 35 02 da 03 bb c8 e0 b0 20 82 9a 5a 44 9b ef 32 c4 0b 58 22 73 80 6e b4 22 6b 55 3f 35 ec d0 50 6e 89 00 da 7c 84 24 a1 d5 c7 b4 98 85 c9 e3 bf 71 7e 85 9b 39 71 4b 8d 8a b2 ca 91 d6 11 5a 4e 38 60 99 5a ad cb 70 c5 63 c3 6b 02 82 c4 0b 31 c4 b2 e5 1a 87 8c 70 72 30 a5 88 fc f1 ab 2f 22 c8 13 6b 53 6a 37 1b 52 c6 a3 04 21 13 82 0e 8f 04 61 69 65 47 dd 2c ea c4 b1 44 11 50 f7 2d d5 8d a3 1e 5d 7b 66 d8 70 9f ae 72 65 cb 4b 03 e0 46 b2 f9 58 e2 bf d7 9c 33 a8 35 f1 47 e6 20 Data Ascii: e]VDUEx'Mbf1PTED$ %9CWsa!aWuk#*?hHT5 ZD2X"sn"kU?5Pn\|$q~9qKZN8`Zpck1pr0/"kSj7R!aieG,DP-]{fpreKFX35G
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 69 44 80 b3 20 a2 77 c2 10 25 13 49 12 c7 b7 80 53 36 70 54 45 33 83 05 7c 50 e2 2c 51 ed cf 8d 5a 8f 94 04 88 ab 45 93 13 90 ab 93 13 73 b0 1f 2d 04 89 c2 00 a1 28 5d 14 2e 88 d8 b0 51 01 29 58 0a 30 93 45 0d 03 37 35 33 56 d3 a6 6e 6f c9 f4 0e 98 47 80 50 13 5f 86 56 7a 3f 5c 9d 9b 2d 60 c5 9d 6a f8 1e 08 1b 17 b1 51 4f 44 24 91 64 61 1e f1 17 1e ea 2f 6d 55 a8 b7 8d 1b 8a f7 e6 29 70 62 e6 a6 43 b7 74 af 48 af 20 c0 db b5 36 b8 d9 fe d7 2e c6 84 30 91 80 c8 1c 6e b8 ef 1b 74 c6 43 20 27 be fd 1d 8d a3 b9 82 05 83 8d c8 89 7c 13 29 1b 7e 39 28 ca 0b 35 be 08 e1 82 7e 49 be 86 85 03 67 53 51 49 9b 55 d1 20 af 65 25 c7 f3 0b 6a ec e5 c6 d0 18 8d 5f d4 e8 af 50 78 3d e0 96 1d ba 3e 93 40 c2 2f 85 c4 ed 59 9f fd fd e6 db 2b a0 fb e7 a7 5c af 45 9b 16 dd ee Data Ascii: iD w%IS6pTE3\|P,QZEs-(].Q)X0E753VnoGP_Vz?\-`jQOD$da/mU)pbCtH 6.0ntC '\|)~9(5~IgSQIU e%j_Px=>@/Y+\E
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 27 87 91 88 eb 5a ea 72 76 d3 c6 d3 81 36 8a bf 91 ec 4d 02 b7 f8 5b 57 73 8b a6 72 1e 96 01 a2 3a 2e dc a3 15 26 b1 80 89 9c dd ab c1 49 bc 19 30 ee a8 95 29 c3 43 ee 5d 09 eb b6 44 34 f2 c8 22 83 31 98 65 e2 56 9e db c3 c0 b4 6b 74 fc 46 2f 41 a9 bd 1e ba 41 c9 18 1b 2d 1d 7a 7b d8 db b7 74 e3 12 79 a5 14 df c2 bd df a0 a7 c6 f8 37 fc cc ab 53 70 f3 e8 6f 69 99 57 83 df ca 0f 42 8b c0 c5 cd f1 6d 79 44 01 84 2f 06 79 ed 58 be 7a 23 5e 8f 40 d7 7f bf 9c 2d 6e 9f d5 67 e4 d8 8d 57 22 56 5e 8b 11 88 28 ef 4d 53 22 a4 b6 f0 5a a4 99 b9 17 f3 3e f3 5c ca d3 e9 dc 28 e7 4a 92 92 80 b5 d6 61 3f 92 74 7d d7 1d 86 ae 13 36 b3 9e 7c 4c 22 39 af 65 c5 52 b5 94 a9 ea bb c3 fe 70 38 9c a6 cb bc 2c bb 61 c8 42 24 39 09 6b 29 02 3f f4 c3 be ef fb cc b9 e3 a5 e8 d3 e9 Data Ascii: 'Zrv6M[Wsr:.&I0)C]D4"1eVktF/AA-z{ty7SpoiWBmyD/yXz#^@-ngW"V^(MS"Z>\(Ja?t}6\|L"9eRp8,aB$9k)?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50093	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:31 UTC	800	OUT	GET /FW12KWakQzfFfGUf5yZghWb6h6-6dNMOHBolWF3nYWgOQdsiTeL_BS_PSvWy_1Y4d1OoZuzXpT6ihCY2z0iT2xjEQMMIoMsh7bbmd001ICguMO4kLhA?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:31 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 330224 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:41:59 GMT Expires: Tue, 28 May 2024 20:41:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 7292 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:31 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 57 08 02 00 00 00 5b 79 61 7f 00 00 0c 65 69 43 43 50 69 63 63 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 90 84 12 88 80 94 d0 9b 20 d2 8b 94 10 5a 0c 02 52 05 1b 21 09 24 94 18 13 82 8a 0d cb a2 82 6b 17 51 ac e8 aa 88 a2 ab 2b 20 8b 8a d8 cb a2 d8 fb 62 41 45 59 17 75 51 14 95 37 21 01 5d f7 95 ef 9d ef 9b 3b 7f ce 9c f9 4f c9 cc bd 33 00 e8 f4 f0 65 b2 5c 54 17 80 3c 69 be 3c 3e 32 94 35 36 35 8d 45 7a 0a 50 a0 0b f4 81 39 a0 f3 05 0a 19 3b 2e 2e 1a 40 19 e8 ff 2e ef 6e 00 44 d5 5f 75 51 71 fd 73 fc bf 8a be 50 a4 10 00 80 8c 87 38 43 a8 10 e4 41 dc 04 00 be 41 20 93 e7 03 40 54 e9 ad a7 e6 cb 54 b8 08 62 03 39 0c 10 e2 d5 2a 9c a5 c6 bb 54 38 43 8d 1b fb 6d 12 e3 39 10 5f 06 40 8b Data Ascii: PNGIHDRW[yaeiCCPiccHWXS[ ZR!$kQ+ bAEYuQ7!];O3e\T<i<>2565EzP9;..@.nD_uQqsP8CAA @TTb9*T8Cm9_@
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 5e 83 2c aa 5a 7f 5b 1f 75 ac 19 83 f5 e6 0c 8e 7c ef 9f f3 4d f5 85 b0 e7 7d 6f 89 2d c2 0e 62 67 b0 e3 d8 39 ac 11 ab 03 2c ec 18 56 8f 5d c4 8e a8 f0 e0 ea 7a d2 bf ba 06 bc c5 f7 c7 93 03 79 24 ff f0 c7 d7 f8 54 55 52 e1 56 ed d6 e1 f6 49 3d 96 2f 9a 96 af da 78 9c c9 b2 e9 72 49 96 38 9f c5 86 5f 07 11 8b 2b 15 b8 0e 63 b9 bb b9 bb 03 a0 fa d6 a8 5f 5f 6f 99 fd df 10 84 79 fe ab 6e be 25 00 81 d3 fb fa fa 1a bf ea 78 f0 9d 7b f0 08 dc fe 77 be ea ec db e1 6b e2 3c 00 67 d7 0a 94 f2 02 b5 0e 57 3d 08 f0 2d a1 03 77 9a 31 fc 8e 59 03 07 98 8f 3b f0 06 01 20 04 84 83 51 20 16 24 82 54 30 11 56 59 0c d7 b9 1c 4c 05 33 c1 5c 50 0c 4a c1 72 b0 06 ac 07 9b c1 36 b0 0b ec 05 07 40 1d 68 04 c7 c1 69 70 01 5c 06 d7 c1 5d b8 7a da c1 4b d0 05 de 81 5e 04 41 48 Data Ascii: ^,Z[u\|M}o-bg9,V]zy$TURVI=/xrI8_+c__oyn%x{wk<gW=-w1Y; Q $T0VYL3\PJr6@hip\]zK^AH
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 7d 4a 58 ca ca 94 b6 b1 c3 c7 ce 1a 7b 21 d5 24 55 92 5a 9f 46 4a 4b 4e db 91 d6 3d 2e 7c dc 9a 71 ed e3 bd c6 17 8f bf 31 c1 7e c2 b4 09 e7 26 9a 4c cc 9d 78 64 92 ce 24 fe a4 83 e9 84 f4 94 f4 dd e9 9f f8 b1 fc 4a 7e 77 06 37 63 43 46 97 80 23 58 2b 78 29 0c 11 ae 16 76 88 02 45 2b 45 cf 32 03 33 57 66 3e cf 0a cc 5a 95 d5 21 0e 16 97 89 3b 25 1c c9 7a c9 eb ec a8 ec cd d9 ef 73 62 73 76 e6 f4 e5 a6 e4 ee cb d3 ca 4b cf 3b 2c d5 97 e6 48 4f 4e 36 9f 3c 6d 72 ab cc 59 56 2c 6b 9b e2 3f 65 cd 94 2e 39 4f be 43 81 28 26 28 ea f3 0d e0 a1 fe a2 d2 41 f9 83 f2 61 41 50 41 45 41 cf d4 e4 a9 07 a7 e9 4d 93 4e bb 38 dd 69 fa e2 e9 cf 0a 23 0a 7f 9a 81 cf 10 cc 68 9e 69 39 73 ee cc 87 b3 d8 b3 b6 ce 46 66 67 cc 6e 9e 63 3d 67 c1 9c f6 a2 c8 a2 5d 73 29 73 73 e6 Data Ascii: }JX{!$UZFJKN=.\|q1~&Lxd$J~w7cCF#X+x)vE+E23Wf>Z!;%zsbsvK;,HON6<mrYV,k?e.9OC(&(AaAPAEAMN8i#hi9sFfgnc=g]s)ss
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: e7 ec 39 4b 8c 24 e2 ee da 26 b8 51 08 24 b2 6a 0e c0 77 4e 3e 39 4c b3 e7 0c 00 4c 12 2b 5f 3d f3 3b 76 a9 aa e5 04 1f 7d 91 99 39 c6 2b cf 5c 9d 52 d7 94 61 0a 22 8e b1 d8 e3 db 93 6f ae a9 85 3b 00 62 5e b5 56 66 1e 59 eb 3b f6 8e a5 ec 9a af bc 71 22 92 aa 02 d1 95 46 f4 dd f7 75 a5 59 b9 19 cc 4c 95 45 28 48 d9 a1 6b df 37 55 57 e3 18 e8 8a 01 7c 8f db ff ae 1d 7b e5 39 28 f3 a3 2a 31 38 31 01 ae d9 52 26 11 8e 61 34 31 6b e7 9b 69 4a 70 07 33 c7 48 04 37 b7 36 51 10 96 32 3c b3 94 dd 8c 25 70 10 27 22 77 4d c9 cd 88 59 62 74 80 56 ed cc 4d 01 30 c8 e1 10 f9 ae 01 fe 9d c7 3b e6 ea ef ba af b5 e3 bb 8d e8 ca f7 df f1 02 6a 96 5a 07 88 59 42 00 91 13 7d cf 0b fd 03 47 45 40 f8 9e a7 2e 0f d2 a0 49 4e 44 22 ec 8a b3 67 43 6a fc fc 79 5c bc 64 97 2e a6 Data Ascii: 9K$&Q$jwN>9LL+_=;v}9+\Ra"o;b^VfY;q"FuYLE(Hk7UW\|{9(*181R&a41kiJp3H76Q2<%p'"wMYbtVM0;jZYB}GE@.IND"gCjy\d.
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 9a 84 5a 0f ce 00 79 08 6d 64 71 04 f5 00 4f 42 29 b8 3b c4 40 0e b8 17 a8 7a 87 1f 5d db 1c 05 67 d7 90 97 88 be 63 e7 94 57 44 41 e8 e2 99 f3 d2 6f 69 6c 62 7a fb 0e 35 33 02 3b 8a ef 02 98 cd d8 85 9c e1 80 01 19 5a 33 02 cd cf 5d 1c 37 ea 45 69 23 37 39 09 19 13 9b 6a 09 62 53 db 76 ea 9a 00 22 ca 29 95 01 30 91 9a 31 51 2e fb d8 dd 55 cb af 0a 11 89 48 99 d2 9c dd 5d 73 62 16 26 10 60 c5 5b b8 07 50 ca 49 03 13 79 db b4 e3 75 6f 98 f3 65 84 0d 1f 7f 60 ef 0f fe a3 aa 33 a9 8d 6d be f9 9a aa d7 3b fd e2 e1 d0 a4 d8 ab ce 9d 3d f3 d6 5f 7f 59 2e 5e e8 c2 09 48 60 35 23 cb 4c 04 20 4a c8 6d 4b ab 29 a6 20 94 79 33 77 d5 4c 12 88 48 73 4e a6 a6 ca c4 44 18 33 76 0e 1e ab e3 4d 0b f8 99 3f 78 68 fa b5 b7 b6 3f f8 7d 13 bb b6 ba 78 95 5c 03 f7 eb 50 39 3a Data Ascii: ZymdqOB);@z]gcWDAoilbz53;Z3]7Ei#79jbSv")01Q.UH]sb&`[PIyuoe`3m;=_Y.^H`5#L JmK) y3wLHsND3vM?xh?}x\P9:
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 4c df 7c eb 62 77 e7 de ce f5 b7 9d fd 9b 2f ed be f9 16 6b 72 b3 70 a9 13 40 4a ad 70 20 e2 11 37 05 77 4f 6d 22 66 0e 62 ee 2c c2 44 a3 2d 2a 52 20 85 89 02 47 b3 0c f1 58 a0 86 ad 7f e8 e0 f9 af 3d ba 78 e4 0d ad 59 94 02 b1 c2 b8 62 67 0b cd e0 d2 f3 4f 6d e9 fa 85 97 5f ca ec ca b9 5a ba f0 f2 af fd 86 2e 2c 85 4c 81 dc 00 54 94 a3 d1 b0 15 75 30 62 b7 9e 7b fc c9 6d 1f f9 60 ec a1 b3 69 ba 7b e4 62 8b dc 52 60 b7 09 0b b9 c9 13 e0 d8 ed 34 8c ca 91 41 46 c2 c4 80 83 c9 55 0b a0 13 31 95 e8 de 0c 40 19 3f 11 09 51 49 a0 d7 58 38 07 cc 8c 01 22 56 57 02 88 89 c1 ea 70 22 1b 61 14 15 47 60 6c 64 4e 64 6d 40 54 22 0a f1 d6 9b c7 af de 63 ad 7b 87 d4 20 e3 71 cf 0f 3e f8 c6 5b 6f 76 56 1a 10 4b a0 c2 93 10 93 3b 4a 86 e1 0e 62 76 20 56 95 84 90 72 76 77 Data Ascii: L\|bw/krp@Jp 7wOm"fb,D-*R GX=xYbgOm_Z.,LTu0b{m`i{bR`4AFU1@?QIX8"VWp"aG`ldNdm@T"c{ q>[ovVK;Jbv Vrvw
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 5c 82 30 b1 aa 56 55 24 62 cb ba e6 99 0a db 0e c0 1c 21 8a 9b 17 76 92 45 9c dc e1 4d db 8c f5 7a 2a 9e cc a0 99 08 e6 d4 66 5c 75 ef bd eb af da f4 d6 57 fe e6 e2 57 bf b6 bd d3 f3 c7 9f 3a a5 76 e0 f1 a7 27 7f e9 17 77 dc f7 fe e3 07 9f cf 1c bc ea 34 6e e4 26 ee d4 66 22 76 a6 32 ce 55 af 63 4c 9c 35 b3 88 65 d5 42 4c 99 ba bb 48 08 21 68 36 23 78 6a 13 60 40 33 39 71 ed dd 77 bd fe ad 03 1d ae 6f bc e7 8e 37 0f 7c fb b5 bf fd b2 66 ba e6 bd ef 6f 73 73 e0 f7 3f 3f 3e d1 19 9e 39 c9 47 8e 8f 55 dc 47 13 39 c4 0c 07 2b 8f ec 73 b4 a9 d6 d6 c8 41 f0 4c 06 f6 0c 1e 92 68 ab 4b df 78 ae 7d f0 01 9b 98 b2 14 52 c5 ca 0e b7 14 3c cc 4c d3 d4 84 2d 9f 67 f8 4a 96 89 bb 3e b8 f7 53 3f 64 63 63 d4 3a 91 37 62 ee 60 82 19 26 77 ef e2 eb ae 1b bc f8 fc 58 8c ea Data Ascii: \0VU$b!vEMz*f\uWW:v'w4n&f"v2UcL5eBLH!h6#xj`@39qwo7\|foss??>9GUG9+sALhKx}R<L-gJ>S?dcc:7b`&wX
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: a9 fa a9 1b d9 49 92 0e ab 4e 7d ea 2b 5f 5b 79 f6 50 9c 5f 0e 22 39 6b e5 44 d9 52 64 13 4e 4d 03 21 1a ef f1 52 cb 84 20 8c 6c aa 76 65 00 37 a2 be 57 09 06 00 66 1e 42 60 1e d5 e7 b0 30 11 d4 0a 3e 79 c9 c2 99 58 dd 99 49 40 96 15 4c a6 96 73 96 20 5d 61 cb 29 32 25 e7 61 a6 5e e8 2e b5 2b 1b f6 5f 17 ea ee 10 d4 08 a2 c0 c9 60 ac 0e e9 8d 4d 5c b5 3d 9f 7e 33 56 e2 85 90 2f 91 28 81 79 54 8f e3 70 66 2a 0c 55 56 65 61 83 13 42 7f 65 68 2e c1 81 a5 95 06 22 fa ea ab fa b9 cf fa ba e9 62 7e 6b 38 55 90 3d 84 30 0a 0c 55 89 28 16 61 01 28 d0 1c ab aa 20 5a a0 42 89 d0 88 6c 21 16 82 b9 81 48 a8 88 1c ae 80 66 93 a2 4e a9 c6 2a aa 5b 56 85 39 95 ef bb 16 06 40 a4 18 e4 77 a8 ac b4 5a 08 64 a3 dc 4a 0a 7d 4c ab f5 3f 58 e5 0d 98 c5 e0 6b 82 6c 01 e9 b2 54 Data Ascii: IN}+_[yP_"9kDRdNM!R lve7WfB`0>yXI@Ls ]a)2%a^.+_`M\=~3V/(yTpfUVeaBeh."b~k8U=0U(a( ZBl!HfN[V9@wZdJ}L?XklT
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: 73 d3 36 31 54 21 88 66 65 92 20 52 d4 c2 11 79 aa d9 4a 2e 40 30 f6 8e 51 3b df 4c 7c ff 07 ba 53 eb 4e fc d9 5f 76 d0 5f c9 8b a1 0a b6 bc 9c ce 2c 9e 7d f9 f4 3c c2 a6 bd 57 cf 1d 7a b9 ff d2 cb de 09 1c d8 b3 92 b9 ab 99 a3 b1 e4 40 0c 55 d9 54 70 67 2a f5 c7 4a c4 0e 90 69 60 ca 4e b9 ee 6d ff c8 07 a7 f6 5d 33 77 e2 ec 86 ed db 2f 5d 9a 9f de 38 a3 6c d2 5a f0 d8 f6 d3 b6 db af 6f 6a bf fc fa b1 9a f3 38 a5 b3 2f be e8 1c 26 27 d7 45 e3 e8 4c 4c 14 24 33 33 48 44 64 ba 17 05 f9 c0 a1 61 b7 be e6 67 7f a2 5f d5 b9 8a 29 c3 dc e1 66 ae 9d c4 39 12 51 88 c3 10 8c 97 5f 38 b4 f4 c6 1b f5 7d 77 dd f2 0b 3f db db ba 85 8d 1c 94 85 e0 a4 12 64 c3 fa 99 7d 3b df 78 e6 89 b0 73 d7 cc 2d b7 b0 04 4a a6 17 2f 5d 7e f2 5b 21 04 36 63 43 24 86 9a 69 76 26 04 41 Data Ascii: s61T!fe RyJ.@0Q;L\|SN_v_,}<Wz@UTpg*Ji`Nm]3w/]8lZoj8/&'ELL$33HDdag_)f9Q_8}w?d};xs-J/]~[!6cC$iv&A
2024-05-27 22:43:31 UTC	1390	IN	Data Raw: d7 4d a7 dd ea 30 bb f9 be f7 a3 b6 e1 cc b6 37 bf f8 07 1c 1a b3 6c 29 8d bd e7 8e 2d 0f 3c 18 ea f1 e1 80 2e fd e5 5f 56 1d 72 cd 69 7a 66 c3 7b ee bf 74 f0 95 de f1 b3 5c ab 89 61 00 70 b7 4d c9 fb ad b4 a2 91 8c b9 e7 02 37 23 72 38 31 8d 8a 29 98 38 94 32 6d 72 37 77 98 97 d2 10 2e 15 40 85 05 2a 22 68 08 c1 d5 50 98 70 37 a2 b2 ab a9 f4 a4 10 28 a5 44 01 ee 0e 96 b1 ad 3b 4c 4d 66 26 6e da 7e 8f e6 d0 06 08 b5 7e f2 dc d2 b7 9e 5c 3f 58 58 f9 fa 97 2e 55 01 29 8f 01 02 77 22 03 e0 6c 66 6a 4a 30 22 37 b8 97 92 2a 09 e6 96 4d a9 54 d1 79 24 aa d2 a5 a5 74 69 29 38 91 9e 38 91 be f9 8d d0 ed 02 9e 52 22 62 11 21 5d ed 51 5a 3d b0 4a 04 15 a6 c5 dc 98 d8 47 42 46 91 98 b9 38 0c e2 62 ac 6f b3 37 4c 5c a2 af 02 46 66 9a dd 89 21 24 45 f6 2f b1 7c 4a 89 Data Ascii: M07l)-<._Vrizf{t\apM7#r81)82mr7w.@"hPp7(D;LMf&n~~\?XX.U)w"lfjJ0"7MTy$ti)88R"b!]QZ=JGBF8bo7L\Ff!$E/\|J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50100	216.239.38.21	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:32 UTC	925	OUT	GET /api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube HTTP/1.1 Host: blog.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:32 UTC	2626	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding content-security-policy: object-src 'none'; connect-src 'self' cdn.ampproject.org .google.com storage.googleapis.com https://services.google.com/fb/submissions/thekeywordtest/ https://services.google.com/fb/submissions/0a65d7733e1f11ea9701614fc033d30c/ .gstatic.com gstatic.com .cdn.ampproject.org .doubleclick.net https://readaloud.googleapis.com/ .google-analytics.com; img-src data: blob:; base-uri 'none'; font-src 'self' themes.googleusercontent.com .gstatic.com https://fonts.gstatic.com storage.googleapis.com fonts.googleapis.com .cdn.ampproject.org; frame-src 'self' www.google.com .youtube.com youtube.com accounts.google.com .doubleclick.net apis.google.com optimize.google.com .google.com .cdn.ampproject.org https://www.gstatic.com/ https://www.youtube-nocookie.com/; default-src 'self' .gstatic.com storage.googleapis.com; require-trusted-types-for 'script'; style-src 'self' 'unsafe-inline' fonts.googleapis.com .gstatic.com storage.googleapis.com *.google.com cdn.ampproject.org; media-src 'se [TRUNCATED] content-language: en-us Access-Control-Allow-Origin: null Vary: Origin X-Cloud-Trace-Context: 2440ad8b5178bf6d7726f8583c6c634a Date: Mon, 27 May 2024 22:43:32 GMT Server: Google Frontend Content-Length: 17340 Connection: close
2024-05-27 22:43:32 UTC	679	IN	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 74 6f 74 61 6c 5f 63 6f 75 6e 74 22 3a 33 38 34 36 7d 2c 22 6e 65 78 74 5f 70 61 67 65 22 3a 22 2f 61 70 69 2f 76 32 2f 6c 61 74 65 73 74 3f 70 61 67 69 6e 61 74 65 3d 31 32 26 74 61 67 73 3d 61 6e 64 72 6f 69 64 25 32 43 61 6e 64 72 6f 69 64 2d 74 76 25 32 43 63 61 6c 65 6e 64 61 72 25 32 43 63 68 72 6f 6d 65 25 32 43 63 68 72 6f 6d 65 62 6f 6f 6b 73 25 32 43 63 68 72 6f 6d 65 63 61 73 74 25 32 43 63 6c 61 73 73 72 6f 6f 6d 25 32 43 64 6f 63 73 25 32 43 64 72 69 76 65 25 32 43 66 6f 72 6d 73 25 32 43 67 6d 61 69 6c 25 32 43 67 6f 6f 67 6c 65 2d 61 64 73 25 32 43 67 6f 6f 67 6c 65 2d 61 73 73 69 73 74 61 6e 74 25 32 43 67 6f 6f 67 6c 65 2d 63 6c 6f 75 64 25 32 43 67 6f 6f 67 6c 65 2d 64 75 6f 25 32 43 67 6f 6f 67 6c 65 2d 65 Data Ascii: {"meta":{"total_count":3846},"next_page":"/api/v2/latest?paginate=12&tags=android%2Candroid-tv%2Ccalendar%2Cchrome%2Cchromebooks%2Cchromecast%2Cclassroom%2Cdocs%2Cdrive%2Cforms%2Cgmail%2Cgoogle-ads%2Cgoogle-assistant%2Cgoogle-cloud%2Cgoogle-duo%2Cgoogle-e
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 3c 74 69 6d 65 20 63 6c 61 73 73 3d 5c 22 75 6e 69 2d 74 69 6d 65 73 69 6e 63 65 5c 22 20 64 61 74 65 74 69 6d 65 3d 5c 22 32 30 32 34 2d 30 35 2d 32 33 20 31 36 3a 30 30 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 32 33 5c 22 3e 4d 61 79 20 32 33 3c 2f 74 69 6d 65 3e 20 2f 20 41 6e 64 72 6f 69 64 20 65 6e 74 65 72 70 72 69 73 65 22 2c 22 73 6c 75 67 22 3a 22 67 6f 6f 67 6c 65 2d 61 69 2d 6f 6e 2d 61 6e 64 72 6f 69 64 2d 61 74 2d 77 6f 72 6b 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 70 72 6f 64 75 63 74 73 2f 61 6e 64 72 6f 69 64 2d 65 6e 74 65 72 70 72 69 73 65 2f 67 6f 6f 67 6c 65 2d 61 Data Ascii: <time class=\"uni-timesince\" datetime=\"2024-05-23 16:00:00+00:00\" aria-label=\"May 23\">May 23</time> / Android enterprise","slug":"google-ai-on-android-at-work","sitespace_render":"","full_url":"https://blog.google/products/android-enterprise/google-a
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 3a 34 2c 22 65 79 65 62 72 6f 77 22 3a 22 3c 74 69 6d 65 20 63 6c 61 73 73 3d 5c 22 75 6e 69 2d 74 69 6d 65 73 69 6e 63 65 5c 22 20 64 61 74 65 74 69 6d 65 3d 5c 22 32 30 32 34 2d 30 35 2d 32 32 20 32 33 3a 35 39 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 32 32 5c 22 3e 4d 61 79 20 32 32 3c 2f 74 69 6d 65 3e 20 2f 20 50 75 62 6c 69 63 20 50 6f 6c 69 63 79 22 2c 22 73 6c 75 67 22 3a 22 65 70 69 63 73 2d 70 72 6f 70 6f 73 65 64 2d 72 65 6d 65 64 69 65 73 2d 61 72 65 2d 62 61 64 2d 66 6f 72 2d 65 76 65 72 79 6f 6e 65 2d 62 75 74 2d 65 70 69 63 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 6f 75 Data Ascii: :4,"eyebrow":"<time class=\"uni-timesince\" datetime=\"2024-05-22 23:59:00+00:00\" aria-label=\"May 22\">May 22</time> / Public Policy","slug":"epics-proposed-remedies-are-bad-for-everyone-but-epic","sitespace_render":"","full_url":"https://blog.google/ou
2024-05-27 22:43:32 UTC	1280	IN	Data Raw: 75 6e 69 2d 74 69 6d 65 73 69 6e 63 65 5c 22 20 64 61 74 65 74 69 6d 65 3d 5c 22 32 30 32 34 2d 30 35 2d 32 32 20 31 34 3a 33 30 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 32 32 5c 22 3e 4d 61 79 20 32 32 3c 2f 74 69 6d 65 3e 20 2f 20 44 6f 6f 64 6c 65 73 22 2c 22 73 6c 75 67 22 3a 22 64 6f 6f 64 6c 65 2d 66 6f 72 2d 67 6f 6f 67 6c 65 2d 32 30 32 34 2d 73 74 61 74 65 2d 74 65 72 72 69 74 6f 72 79 2d 77 69 6e 6e 65 72 73 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 70 72 6f 64 75 63 74 73 2f 73 65 61 72 63 68 2f 64 6f 6f 64 6c 65 2d 66 6f 72 2d 67 6f 6f 67 6c 65 2d 32 30 32 34 2d 73 74 61 74 Data Ascii: uni-timesince\" datetime=\"2024-05-22 14:30:00+00:00\" aria-label=\"May 22\">May 22</time> / Doodles","slug":"doodle-for-google-2024-state-territory-winners","sitespace_render":"","full_url":"https://blog.google/products/search/doodle-for-google-2024-stat
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 22 74 61 67 5f 6e 61 6d 65 22 3a 22 47 6f 6f 67 6c 65 20 50 6c 61 79 22 2c 22 64 61 79 73 5f 73 69 6e 63 65 5f 70 75 62 6c 69 73 68 65 64 22 3a 35 2c 22 65 79 65 62 72 6f 77 22 3a 22 3c 74 69 6d 65 20 63 6c 61 73 73 3d 5c 22 75 6e 69 2d 74 69 6d 65 73 69 6e 63 65 5c 22 20 64 61 74 65 74 69 6d 65 3d 5c 22 32 30 32 34 2d 30 35 2d 32 32 20 31 34 3a 30 30 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 32 32 5c 22 3e 4d 61 79 20 32 32 3c 2f 74 69 6d 65 3e 20 2f 20 47 6f 6f 67 6c 65 20 50 6c 61 79 22 2c 22 73 6c 75 67 22 3a 22 67 6f 6f 67 6c 65 2d 70 6c 61 79 2d 70 6f 69 6e 74 73 2d 69 73 2d 6c 65 76 65 6c 69 6e 67 2d 75 70 2d 74 68 65 2d 72 65 77 61 72 64 73 2d 67 61 6d 65 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e Data Ascii: "tag_name":"Google Play","days_since_published":5,"eyebrow":"<time class=\"uni-timesince\" datetime=\"2024-05-22 14:00:00+00:00\" aria-label=\"May 22\">May 22</time> / Google Play","slug":"google-play-points-is-leveling-up-the-rewards-game","sitespace_ren
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 72 74 69 63 6c 65 22 2c 22 74 61 67 5f 6e 61 6d 65 22 3a 22 47 6f 6f 67 6c 65 20 50 61 79 22 2c 22 64 61 79 73 5f 73 69 6e 63 65 5f 70 75 62 6c 69 73 68 65 64 22 3a 35 2c 22 65 79 65 62 72 6f 77 22 3a 22 3c 74 69 6d 65 20 63 6c 61 73 73 3d 5c 22 75 6e 69 2d 74 69 6d 65 73 69 6e 63 65 5c 22 20 64 61 74 65 74 69 6d 65 3d 5c 22 32 30 32 34 2d 30 35 2d 32 32 20 31 30 3a 30 30 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 32 32 5c 22 3e 4d 61 79 20 32 32 3c 2f 74 69 6d 65 3e 20 2f 20 47 6f 6f 67 6c 65 20 50 61 79 22 2c 22 73 6c 75 67 22 3a 22 67 6f 6f 67 6c 65 2d 70 61 79 2d 6f 6e 6c 69 6e 65 2d 63 68 65 63 6b 6f 75 74 2d 66 65 61 74 75 72 65 73 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 Data Ascii: rticle","tag_name":"Google Pay","days_since_published":5,"eyebrow":"<time class=\"uni-timesince\" datetime=\"2024-05-22 10:00:00+00:00\" aria-label=\"May 22\">May 22</time> / Google Pay","slug":"google-pay-online-checkout-features","sitespace_render":"","
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 31 20 31 35 3a 35 38 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 32 31 5c 22 3e 4d 61 79 20 32 31 3c 2f 74 69 6d 65 3e 20 2f 20 53 68 6f 70 70 69 6e 67 22 2c 22 73 6c 75 67 22 3a 22 67 6f 6f 67 6c 65 2d 67 65 6e 65 72 61 74 69 76 65 2d 61 69 2d 6d 61 72 6b 65 74 69 6e 67 2d 66 65 61 74 75 72 65 73 2d 6d 61 79 2d 32 30 32 34 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 70 72 6f 64 75 63 74 73 2f 73 68 6f 70 70 69 6e 67 2f 67 6f 6f 67 6c 65 2d 67 65 6e 65 72 61 74 69 76 65 2d 61 69 2d 6d 61 72 6b 65 74 69 6e 67 2d 66 65 61 74 75 72 65 73 2d 6d 61 79 2d 32 30 32 34 2f 22 2c 22 70 75 62 6c 69 73 Data Ascii: 1 15:58:00+00:00\" aria-label=\"May 21\">May 21</time> / Shopping","slug":"google-generative-ai-marketing-features-may-2024","sitespace_render":"","full_url":"https://blog.google/products/shopping/google-generative-ai-marketing-features-may-2024/","publis
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 2d 32 31 20 31 35 3a 35 38 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 32 31 5c 22 3e 4d 61 79 20 32 31 3c 2f 74 69 6d 65 3e 20 2f 20 47 6f 6f 67 6c 65 20 41 64 73 20 26 20 43 6f 6d 6d 65 72 63 65 22 2c 22 73 6c 75 67 22 3a 22 61 69 2d 63 72 65 61 74 69 76 69 74 79 2d 67 6f 6f 67 6c 65 2d 6d 61 72 6b 65 74 69 6e 67 2d 6c 69 76 65 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 47 6f 6f 67 6c 65 20 41 64 73 20 26 20 43 6f 6d 6d 65 72 63 65 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 70 72 6f 64 75 63 74 73 2f 61 64 73 2d 63 6f 6d 6d 65 72 63 65 2f 61 69 2d 63 72 65 61 74 69 76 69 74 79 2d 67 6f 6f 67 6c 65 2d 6d 61 72 6b 65 74 69 6e 67 2d Data Ascii: -21 15:58:00+00:00\" aria-label=\"May 21\">May 21</time> / Google Ads & Commerce","slug":"ai-creativity-google-marketing-live","sitespace_render":"Google Ads & Commerce","full_url":"https://blog.google/products/ads-commerce/ai-creativity-google-marketing-
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 6d 65 73 69 6e 63 65 5c 22 20 64 61 74 65 74 69 6d 65 3d 5c 22 32 30 32 34 2d 30 35 2d 31 36 20 31 36 3a 30 30 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 31 36 5c 22 3e 4d 61 79 20 31 36 3c 2f 74 69 6d 65 3e 20 2f 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 22 2c 22 73 6c 75 67 22 3a 22 61 69 2d 61 63 63 65 73 73 69 62 69 6c 69 74 79 2d 75 70 64 61 74 65 2d 67 61 61 64 2d 32 30 32 34 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 6f 75 74 72 65 61 63 68 2d 69 6e 69 74 69 61 74 69 76 65 73 2f 61 63 63 65 73 73 69 62 69 6c 69 74 79 2f 61 69 2d 61 63 63 65 73 73 69 62 69 6c 69 74 79 2d 75 70 64 61 Data Ascii: mesince\" datetime=\"2024-05-16 16:00:00+00:00\" aria-label=\"May 16\">May 16</time> / Accessibility","slug":"ai-accessibility-update-gaad-2024","sitespace_render":"","full_url":"https://blog.google/outreach-initiatives/accessibility/ai-accessibility-upda
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 6d 65 73 69 6e 63 65 5c 22 20 64 61 74 65 74 69 6d 65 3d 5c 22 32 30 32 34 2d 30 35 2d 31 36 20 31 36 3a 30 30 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 31 36 5c 22 3e 4d 61 79 20 31 36 3c 2f 74 69 6d 65 3e 20 2f 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 22 2c 22 73 6c 75 67 22 3a 22 67 61 61 64 2d 32 30 32 34 2d 63 6f 6d 6d 75 6e 69 74 79 2d 70 61 72 74 6e 65 72 73 68 69 70 73 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 6f 75 74 72 65 61 63 68 2d 69 6e 69 74 69 61 74 69 76 65 73 2f 61 63 63 65 73 73 69 62 69 6c 69 74 79 2f 67 61 61 64 2d 32 30 32 34 2d 63 6f 6d 6d 75 6e 69 74 79 2d 70 61 Data Ascii: mesince\" datetime=\"2024-05-16 16:00:00+00:00\" aria-label=\"May 16\">May 16</time> / Accessibility","slug":"gaad-2024-community-partnerships","sitespace_render":"","full_url":"https://blog.google/outreach-initiatives/accessibility/gaad-2024-community-pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50096	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:32 UTC	801	OUT	GET /4Ae0zBYFQOJlGcRaDFUatVMPtUP7L-EcbwRa2p1o2tD5xISasgZmgKCgfIyMVYcsUPs5YHOUsDfy8T07EPP7mvL8h9NhmnVbRpOKq4v7jXLZ6yzVHN0q?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:32 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 374689 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:48:50 GMT Expires: Tue, 28 May 2024 19:48:50 GMT Cache-Control: public, max-age=86400, no-transform Age: 10482 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:32 UTC	856	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 1f 08 06 00 00 00 37 10 7e 29 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c a4 bd 77 9c 64 c7 71 e7 f9 cd 57 de bb ae ea ea 6a ef dd 78 07 60 30 18 c2 3b 92 20 08 82 de c9 52 a7 8f cc 52 47 49 b7 46 14 b1 d2 67 57 ba 95 56 2b 9e 96 d4 52 a2 1c 29 2d 29 5a d0 81 00 e1 67 30 de cf 74 cf f4 b4 f7 dd 65 ba bc 37 ef dd 1f 65 ba ba ba 07 10 ef 1e 50 e8 7a af f2 65 46 46 64 c6 2f 22 32 32 21 fe c7 67 46 94 16 5f 0f 37 a7 16 d0 18 e3 94 34 7a 66 67 d3 e8 d4 31 2c 4d f7 d1 f5 d0 67 38 f1 d7 ef c3 6b d5 13 c9 58 98 09 94 30 9b b4 18 b5 12 06 b5 1a a7 49 8d c5 a6 e7 fa e4 3c 1e 9b 03 ad 46 4b 20 18 41 af 2b d0 ee 51 a1 d1 99 b8 70 33 84 ab a5 8d 5c 3c c8 c3 c7 f7 81 Data Ascii: PNGIHDR7~)sBIT\|d IDATxwdqWjx`0; RRGIFgWV+R)-)Zg0te7ePzeFFd/"22!gF_74zfg1,Mg8kX0I<FK A+Qp3\<
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 84 10 5b 1f 0a 79 5b b9 3b 5d db de 6d 68 4b 92 a4 da f7 6a d9 1d db fc ff d0 46 7d 5d 8a a2 20 10 70 87 a2 b2 2c 23 14 41 3e 13 e6 4f 3f 77 90 6e 9b 0e a7 d5 8c 56 a5 21 9d ce d2 ed b5 62 34 67 88 25 d4 e8 24 03 7a 53 89 40 c0 c0 da ca 32 6e b7 09 bd c5 c4 e0 a1 a7 38 f1 e6 29 7c 8e 28 7a ed 3a 26 bd 4c cf 91 df e5 c4 e9 1b bc f6 fd ef f1 2b 9f ff 12 9e 9e 7d 9c 7f fd 1b 88 64 08 11 fd 26 3e 6f 2b 37 c6 56 38 f0 c4 6f 33 7c fc f7 c8 14 4b 08 21 10 ca d6 7e 55 fb a0 20 43 c3 d8 aa f5 4f 40 63 07 1b 79 29 29 20 ea c4 ac 88 f2 78 10 8a 00 a5 7c af a0 80 02 12 52 b5 71 14 ca e3 07 49 20 cb db e5 2f 84 a8 d1 b1 e5 b9 02 52 dd f3 2a 2d 8d 65 eb 65 5f 69 f2 8e b2 ba d3 75 a7 71 50 7d ac 28 32 42 48 dc 79 b8 08 ca cd 2b 08 45 a9 f4 5e a0 54 ff 2b 44 f9 23 cb 20 Data Ascii: [y[;]mhKjF}] p,#A>O?wnV!b4g%$zS@2n8)\|(z:&L+}d&>o+7V8o3\|K!~U CO@cy)) x\|RqI /R*-ee_iuqP}(2BHy+E^T+D#
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: c4 89 c4 83 98 6d 36 26 26 a3 38 ec 3a bc 6e 27 4e 87 83 48 24 80 bb c9 46 22 95 47 c7 0a a1 f5 db e4 b2 45 5a db bd 14 0b 12 6f bd 71 86 97 ce ac a3 d3 ca a8 a4 3c 91 78 8e 78 22 81 c3 ac e3 e8 fe 01 06 ba ad 08 04 46 43 8e 6c 3e 81 4e 9b a7 cb d7 85 5a 63 63 7a 72 89 ef ff e8 04 89 c4 2a 26 bd 83 23 47 ba b0 b8 3b 39 7d f9 0a eb e1 08 9a e2 22 89 6c 8c 7c 41 e1 dd 87 0f b2 bc be 84 da 60 65 66 72 81 c9 1b 3f e5 c0 91 c7 69 1f 3e 40 97 38 89 de 77 84 75 dd 08 45 b5 96 96 e6 5e ce 7f e3 0b a4 53 21 a6 27 de a4 c3 d3 ce ed 57 7f 0f 77 d7 61 e6 67 c7 69 72 fb d8 75 ef 93 d8 3b 46 d0 37 ed c7 7b f4 77 29 7a 3e 44 54 b6 91 94 4d c8 72 91 12 0a 3a 8d 9e e0 e2 38 d7 9e ff 7d 1e fd 85 2f 23 5b 07 c9 a1 20 69 2d a8 8b 1a 3c d2 14 24 26 91 5c 77 61 ef 1c 45 6f 6e Data Ascii: m6&&8:n'NH$F"GEZoq<xx"FCl>NZcczr*&#G;9}"l\|A`efr?i>@8wuE^S!'Wwagiru;F7{w)z>DTMr:8}/#[ i-<$&\waEon
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 7e f2 1a 1f fe f4 2f a1 b1 75 f1 e2 3f fe 2f f6 1c 7d 37 06 53 13 d7 2f be c8 ae 9e 4e 1c 36 0d e1 70 98 81 9e dd ec ee b6 e0 b2 e7 e9 f2 e9 99 98 88 a2 33 9a 28 94 22 78 5c 36 fa fa 9a 41 58 29 64 62 f8 76 7d 02 a9 f5 38 f1 bc 1a f2 21 f6 ed 1e e6 e6 ed 79 b4 66 77 c5 b3 2a cf 50 b9 12 4e 2c 03 e5 db 7b ac 92 90 28 21 b0 79 07 68 3d f4 7e e6 af bd 4c 66 f5 02 bd 4d 1a 26 cf 7d 95 d1 43 ef 41 e8 1c dc 7e e3 0b a8 d4 6e b4 9a 66 2c 4d bb f0 b5 ef c3 2a 5f 46 29 29 cc ad dc 44 6b ea c2 6d 6f 41 d1 a9 e8 33 84 d0 ea 5d e4 b4 2d e0 18 a6 20 95 95 85 a8 80 b1 22 6f 02 7f bd ca da 49 b9 0a 49 a9 78 ff 54 5c c2 ad 46 c2 9d 14 73 bd 41 71 27 cf 42 54 94 98 82 b2 4d 4f d6 5f ff 7f c1 bf fc f2 f6 47 55 e3 24 9f 4b 30 71 fe ab b4 d8 9c a8 54 60 37 09 3a 5b 4c d8 4c Data Ascii: ~/u?/}7S/N6p3("x\6AX)dbv}8!yfwPN,{(!yh=~LfM&}CA~nf,M_F))DkmoA3]- "oIIxT\FsAq'BTMO_GU$K0qT`7:[LL
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 2b 5b ff d6 f7 61 a7 b2 db fb b9 69 08 34 1a 4c 5b e9 d8 81 ee 5a b4 aa b2 f0 21 94 9a 7b 5c 36 16 6b 0d 54 86 ae b2 c5 18 a0 fe f7 8a 47 2c 2a ce 80 a8 e6 53 50 5e fb af 8f 0e 56 1a af d1 2c 2a fa 61 f3 5e da 02 a2 65 1b 44 de d2 ff 5a 57 eb 64 d4 08 d6 0a 6c ea 9c aa 51 28 b6 ca 5c 61 bb b7 bf d9 35 51 cb 03 d8 39 aa 53 ce 4d a8 bd df 30 a6 41 41 f5 e9 07 47 9f d3 1b d5 9c ba 70 8b fe 56 1f 2d 2e 23 eb 91 38 d9 42 06 b5 4a 43 d0 bf 86 cd 61 a5 4d 9f 66 e6 d2 57 b9 7c 79 0c ab b3 05 8d de cc a5 97 5f 22 14 53 30 5a dc e8 b5 3a dc 4e 2d 3a ad 44 3a 9b 46 a5 d2 d0 d5 e2 c1 6d 35 a0 31 39 f1 2f 2f 30 da da 89 46 48 2c 2d c6 e9 72 99 28 e4 73 d8 dd 4e e4 5c 89 70 71 10 7f c2 88 54 4c 23 97 32 a8 c8 e2 b0 e9 30 ea 34 e4 8b 25 de 3a 7d 1b 24 1d bf f0 91 fd c8 Data Ascii: +[ai4L[Z!{\6kTG,SP^V,a^eDZWdlQ(\a5Q9SM0AAGpV-.#8BJCaMfW\|y_"S0Z:N-:D:Fm519//0FH,-r(sN\pqTL#204%:}$
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 0d 5a 1b 5a 25 4d 76 ec a7 f4 3e fd 97 44 16 af 90 cd 46 b9 b1 92 67 f6 da 1b e4 67 ff 89 bb 7a 25 0e 76 0e 70 e5 c2 02 4b e6 7d d8 9b 5b 29 a5 e7 d8 98 d9 a0 cd 6a c2 a4 d1 a0 17 32 7b f7 b5 d3 63 cd 30 3d 7e 8e b9 c5 00 c1 b9 13 04 56 22 ec ee ee e7 c2 e5 35 74 8e 56 26 af 9c a0 cf b5 ca 40 b3 91 6c 30 41 c8 9f c0 6c 34 e1 70 2a 24 92 1b 3c 76 6c 10 bb b9 84 5a d2 90 4e 49 bc f9 e6 39 0a d6 51 2e 4f e4 68 71 99 f1 da 4d 44 c3 61 cc 7a 03 3a 49 cb 50 b7 8d 85 f5 0c b9 42 81 11 7b 91 52 2c c4 b8 3f 4f 77 6f 0f 57 6f 87 f9 a7 6f ac 70 f8 98 0b ad 1c 60 6d bd 84 3a 33 4f 32 3c 83 c7 e3 e1 ec c9 13 e8 d5 19 02 fe 20 fb ef 39 82 cd d9 c5 ca ca 02 c5 d8 02 89 8d 00 26 4f 3f ef 7d fa 13 74 ef 7e 98 44 4e 8b cb 08 b1 9c 91 6f 7d 7b 82 e9 90 cc de a1 16 7e e7 13 Data Ascii: ZZ%Mv>DFggz%vpK}[)j2{c0=~V"5tV&@l0Al4p*$<vlZNI9Q.OhqMDaz:IPB{R,?OwoWoop`m:3O2< 9&O?}t~DNo}{~
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 82 94 4b 22 e9 ec 18 2c 4d cc 9c fd 0a 7b 0e 3e 4a 29 31 87 d6 de 83 6b f7 53 a8 93 3f c0 de ff 31 24 cf 21 4a c2 89 a9 e3 10 c5 92 00 a9 04 02 4a 8a 52 31 3c 2a b6 7a 25 92 a9 48 ca d6 ec f0 ad aa 72 f3 d3 a0 48 ee e4 19 ec 58 cb 3b 94 79 27 45 ff 4e d7 3b 81 c4 16 45 5f 55 54 25 85 d6 ee 61 e2 d9 12 7d fb 8f 91 4a 26 e8 6d ca d0 64 b5 90 cc 29 c4 e2 09 34 92 0e 9d 21 cb a1 bd 07 99 5f f5 b3 6b 97 0b a3 a9 c0 81 c7 7f 95 f6 a1 77 b1 be 34 41 78 f1 02 a9 8d 49 54 52 8c f6 3d bf 82 30 34 f3 d6 ab ff 84 53 7a 83 5c 3a 0c 92 03 6f 8b 93 f1 c9 20 16 6f 17 be 9e e3 e4 65 a9 a2 bc eb 79 58 f1 12 ab 06 40 4d bb 6f e9 cd 3b 1a 66 f5 57 39 fc 5b f1 c0 2b 7c 90 c4 d6 b5 f6 6a b5 f5 f6 a1 ac c8 b5 6d 83 db da 92 44 79 cb 1f a2 b2 92 53 9f c0 57 0d 93 6f a9 ae 9c b5 Data Ascii: K",M{>J)1kS?1$!JJR1<*z%HrHX;y'EN;E_UT%a}J&md)4!_kw4AxITR=04Sz\:o oeyX@Mo;fW9[+\|jmDySWo
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 86 e7 7a 5c 02 8a 19 fa bb cc 68 55 32 d1 44 06 a1 6f 62 7a 21 4e 3a 13 c1 a4 95 b9 7e 7b 09 9d be 89 54 34 86 6b f7 d3 58 da 47 40 67 c2 d5 b6 97 89 ab af 62 31 94 10 42 43 30 50 40 ab 01 94 1c 26 bb 85 d2 c0 2f 53 70 1e 47 e8 5a d0 58 db 19 bf f4 33 06 3c 0e dc 0f fd 01 ba fe 07 f1 8c 3e 4e 04 1f a3 c7 3e c0 cc d9 57 d8 d8 88 b2 b4 98 c6 ae 8f a2 c4 62 b4 dc f3 49 62 9a 21 b4 66 23 05 d3 30 ab d3 b7 69 ea e8 e2 c4 ed 0d ce 9c 59 c5 d0 d6 c5 9b 27 4f b2 b0 ec c7 ac 91 39 34 da 4a 47 8b 83 e6 26 85 70 38 cb 43 f7 ed a1 18 f8 0a 1a eb 31 b2 2a 0f 6b d3 17 98 99 b8 8c d5 ea e1 c8 bb 7f 89 1b 37 af 21 a1 62 de 1f 67 d8 51 e4 d6 52 1a cd cc f3 a8 a7 fe 11 6d cf a3 c8 4d fb b0 35 f5 61 6b ea e5 fc f9 37 d1 99 cc d8 51 71 ed c2 4f 58 9d b8 88 c3 d9 84 d0 9a 89 Data Ascii: z\hU2Dobz!N:~{T4kXG@gb1BC0P@&/SpGZX3<>N>WbIb!f#0iY'O94JG&p8C1*k7!bgQRmM5ak7QqOX
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 9d 2d 6a 12 b9 34 05 05 36 a2 32 f7 ed 6e c2 a2 82 85 70 0a 57 ab 8e 9e 76 2d 6a a1 66 76 29 48 49 29 70 64 57 33 fb 86 fa 68 f6 7a 39 7d 75 0d 83 2e 46 5f 9b 93 52 4e c5 5f fc f9 45 ee 7e 68 1f cb 89 56 2c 0e 1f f7 ec d3 70 fa e5 55 7e e9 c3 23 04 43 71 ba 7b da 19 ea b4 71 71 7c 89 40 2c 83 d1 6a 26 9e 93 e9 68 71 90 48 67 c9 e6 55 5c 9b cc e3 76 34 d1 d1 ec 40 6b b4 f0 e6 99 39 da 7d 0e 54 c5 02 7b 0f b6 90 4f 5c 22 bb 7e 09 a7 51 30 f0 f8 5f 92 15 16 3a 7a f7 b1 1e 0c 20 15 42 ec eb 77 a1 97 92 78 ec 76 ee 1a 76 60 35 1b c8 65 d4 34 f7 3f ce 52 d2 88 73 f8 bd ac cc 5f 65 63 e1 36 7a 75 90 c3 4f fc 32 7a 8b 97 40 20 c7 d4 f8 19 42 53 6f 40 36 86 d3 e1 64 71 ee 06 4d cd 07 f9 2f 7f f1 2f fc ec c5 e7 31 39 7b 90 54 16 e4 7c 02 59 29 e0 88 8f 61 d1 96 38 Data Ascii: -j462npWv-jfv)HI)pdW3hz9}u.F_RN_E~hV,pU~#Cq{qq\|@,j&hqHgU\v4@k9}T{O\"~Q0_:z Bwxvv`5e4?Rs_ec6zuO2z@ BSo@6dqM//19{T\|Y)a8
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 91 53 4a 08 a1 ab 29 60 55 65 7b 52 d5 7a af 2c 0e 97 bd 10 45 6c 09 a9 df 49 a1 8b 86 95 d2 ea 99 01 35 ef b4 1a 19 d8 c1 20 d8 69 af fa 4e ca 7d 5b fb 77 a0 eb df 7a 35 d6 5b 8e 5c 0a 24 14 2e bd fe 25 34 b2 82 c3 a8 66 68 e0 00 bd 87 3f c1 f9 b3 af 90 29 18 08 c7 52 58 0c b0 ef c0 71 ba 76 1d e3 7b 2f fe 98 67 1f bc 8b e1 76 37 67 6f dc 64 23 96 a6 c9 6b 43 ad 52 23 ab 3b 19 da f7 14 4e 6f 1f d1 99 8b 98 dd 56 84 b1 8d d0 ea 0c f3 57 5e 64 75 65 16 ad 56 87 c3 b4 41 df e1 5f 43 18 7d b5 6d 5d 8d 7c ae f9 a6 35 83 a5 54 56 fc d5 a5 1a ca ca bd ba 7f bd 1e 09 ab fb fe 6b 05 1b f8 7f 27 9e 34 7e df 7a 5f 1e 25 42 12 95 f5 8a 2a 7d a2 66 44 0a 41 e5 98 db 72 c3 f5 d1 8c 4d c0 da 04 9f 46 3a de 6e 2c 6c e7 4f e5 04 ba ba fa 76 f2 66 37 db 95 6a 20 d5 08 fe Data Ascii: SJ)`Ue{Rz,ElI5 iN}[wz5[\$.%4fh?)RXqv{/gv7god#kCR#;NoVW^dueVA_C}m]\|5TVk'4~z_%B*}fDArMF:n,lOvf7j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50097	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:32 UTC	801	OUT	GET /5aJF9xA7xUeccUjstpG7egKV6rX7m_iedrX2dzOptBB0ckf7XEK-fwp2bPtzPMlY9MmrvAKEFErirf4SHKLuUOSk8E3loYryDYOobe13o0fpPcbYL1An?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:32 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 193769 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:41:59 GMT Expires: Tue, 28 May 2024 20:41:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 7293 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:32 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 54 08 02 00 00 00 dd ed 13 d1 00 00 0c 65 69 43 43 50 69 63 63 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 90 84 12 88 80 94 d0 9b 20 d2 8b 94 10 5a 0c 02 52 05 1b 21 09 24 94 18 13 82 8a 0d cb a2 82 6b 17 51 ac e8 aa 88 a2 ab 2b 20 8b 8a d8 cb a2 d8 fb 62 41 45 59 17 75 51 14 95 37 21 01 5d f7 95 ef 9d ef 9b 3b 7f ce 9c f9 4f c9 cc bd 33 00 e8 f4 f0 65 b2 5c 54 17 80 3c 69 be 3c 3e 32 94 35 36 35 8d 45 7a 0a 50 a0 0b f4 81 39 a0 f3 05 0a 19 3b 2e 2e 1a 40 19 e8 ff 2e ef 6e 00 44 d5 5f 75 51 71 fd 73 fc bf 8a be 50 a4 10 00 80 8c 87 38 43 a8 10 e4 41 dc 04 00 be 41 20 93 e7 03 40 54 e9 ad a7 e6 cb 54 b8 08 62 03 39 0c 10 e2 d5 2a 9c a5 c6 bb 54 38 43 8d 1b fb 6d 12 e3 39 10 5f 06 40 8b Data Ascii: PNGIHDRTeiCCPiccHWXS[ ZR!$kQ+ bAEYuQ7!];O3e\T<i<>2565EzP9;..@.nD_uQqsP8CAA @TTb9*T8Cm9_@
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 5e 83 2c aa 5a 7f 5b 1f 75 ac 19 83 f5 e6 0c 8e 7c ef 9f f3 4d f5 85 b0 e7 7d 6f 89 2d c2 0e 62 67 b0 e3 d8 39 ac 11 ab 03 2c ec 18 56 8f 5d c4 8e a8 f0 e0 ea 7a d2 bf ba 06 bc c5 f7 c7 93 03 79 24 ff f0 c7 d7 f8 54 55 52 e1 56 ed d6 e1 f6 49 3d 96 2f 9a 96 af da 78 9c c9 b2 e9 72 49 96 38 9f c5 86 5f 07 11 8b 2b 15 b8 0e 63 b9 bb b9 bb 03 a0 fa d6 a8 5f 5f 6f 99 fd df 10 84 79 fe ab 6e be 25 00 81 d3 fb fa fa 1a bf ea 78 f0 9d 7b f0 08 dc fe 77 be ea ec db e1 6b e2 3c 00 67 d7 0a 94 f2 02 b5 0e 57 3d 08 f0 2d a1 03 77 9a 31 fc 8e 59 03 07 98 8f 3b f0 06 01 20 04 84 83 51 20 16 24 82 54 30 11 56 59 0c d7 b9 1c 4c 05 33 c1 5c 50 0c 4a c1 72 b0 06 ac 07 9b c1 36 b0 0b ec 05 07 40 1d 68 04 c7 c1 69 70 01 5c 06 d7 c1 5d b8 7a da c1 4b d0 05 de 81 5e 04 41 48 Data Ascii: ^,Z[u\|M}o-bg9,V]zy$TURVI=/xrI8_+c__oyn%x{wk<gW=-w1Y; Q $T0VYL3\PJr6@hip\]zK^AH
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 7d 4a 58 ca ca 94 b6 b1 c3 c7 ce 1a 7b 21 d5 24 55 92 5a 9f 46 4a 4b 4e db 91 d6 3d 2e 7c dc 9a 71 ed e3 bd c6 17 8f bf 31 c1 7e c2 b4 09 e7 26 9a 4c cc 9d 78 64 92 ce 24 fe a4 83 e9 84 f4 94 f4 dd e9 9f f8 b1 fc 4a 7e 77 06 37 63 43 46 97 80 23 58 2b 78 29 0c 11 ae 16 76 88 02 45 2b 45 cf 32 03 33 57 66 3e cf 0a cc 5a 95 d5 21 0e 16 97 89 3b 25 1c c9 7a c9 eb ec a8 ec cd d9 ef 73 62 73 76 e6 f4 e5 a6 e4 ee cb d3 ca 4b cf 3b 2c d5 97 e6 48 4f 4e 36 9f 3c 6d 72 ab cc 59 56 2c 6b 9b e2 3f 65 cd 94 2e 39 4f be 43 81 28 26 28 ea f3 0d e0 a1 fe a2 d2 41 f9 83 f2 61 41 50 41 45 41 cf d4 e4 a9 07 a7 e9 4d 93 4e bb 38 dd 69 fa e2 e9 cf 0a 23 0a 7f 9a 81 cf 10 cc 68 9e 69 39 73 ee cc 87 b3 d8 b3 b6 ce 46 66 67 cc 6e 9e 63 3d 67 c1 9c f6 a2 c8 a2 5d 73 29 73 73 e6 Data Ascii: }JX{!$UZFJKN=.\|q1~&Lxd$J~w7cCF#X+x)vE+E23Wf>Z!;%zsbsvK;,HON6<mrYV,k?e.9OC(&(AaAPAEAMN8i#hi9sFfgnc=g]s)ss
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: fc b4 e6 45 eb ae 2e 36 a5 e5 c8 5c ca 3f 1f b8 30 5c e9 09 02 08 62 e8 8c d0 3b b9 4f a6 b3 7d 42 36 f0 a2 89 b2 46 d9 b8 d6 e2 af c2 2c c5 43 60 4e 9f 99 c3 e8 85 45 c8 22 61 e4 03 b9 78 a2 fc 59 45 a7 b2 c5 d5 2d 3c ff 01 01 81 00 05 a9 98 1a 88 88 40 84 b9 4b 60 31 49 d6 6a 59 79 b6 52 e3 35 af 5d 95 e2 cc 99 2d 55 94 95 a5 da 0f dd 7f f8 0f ff d3 7f ff 3f fc 8f 7a 56 c6 f3 61 38 f6 56 29 6d 87 ee b7 ff f8 5f fe fc 87 df 0e 7d 47 4a 21 12 d2 64 6a 9e 5c 24 c8 a7 32 9c e7 ef a7 0a cc 3d 0e 61 92 62 c1 e7 57 f3 97 d5 9d fa 0d 00 29 7e 17 91 92 ad 8c 32 80 22 17 89 b2 22 f1 99 b4 58 26 49 8a a7 02 82 80 f1 7d 00 44 94 54 33 22 e6 87 00 80 12 f9 b0 20 4a e4 c9 27 18 d0 55 2c 69 f9 d2 ca 5b a1 bd b8 d2 88 93 49 66 79 8b 19 56 72 93 71 11 03 c4 a5 1b c8 00 Data Ascii: E.6\?0\b;O}B6F,C`NE"axYE-<@K`1IjYyR5]-U?zVa8V)m_}GJ!dj\$2=abW)~2""X&I}DT3" J'U,i[IfyVrq
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 32 14 38 af b7 b1 b9 09 34 13 c1 08 82 01 06 6f 2e 91 22 cc 0a 55 a4 6c 0a 02 a1 c0 b8 e6 92 c8 bd 8a f8 eb 52 c4 96 92 5c 0d 1e 01 10 c0 80 e3 c5 46 04 ab 60 b2 44 30 f3 a1 d4 21 79 b2 2c d8 7d 78 0a 61 fd 7d 39 56 f0 85 69 c2 5f ce 73 ff 04 82 64 23 20 3c 5d 64 9b 9b ed 49 32 c6 05 44 b3 5a 64 e2 16 ce 3f 46 4c a6 58 03 38 95 01 90 d8 31 b3 94 a0 14 33 a9 b0 1c 24 83 40 c0 c1 24 0f 43 24 71 4a 66 e2 a7 1a 71 c9 16 c2 c0 8e 10 4f d0 52 30 e1 fd 58 8a c2 b4 3c 5f 8c ca 14 3d b7 d4 ad 10 49 92 e9 bc fe d6 42 72 ac e6 92 62 9d 62 02 ac 4b 5a 0b d1 30 eb 0d 00 00 ed 59 76 9d d5 46 ff bf ff e5 3f ff fc d3 5f 46 dd 7f ce c1 57 82 13 16 7c 7b 5d 45 5a 7d 48 6b 05 e6 4a 57 34 89 85 2c c6 13 25 2f c5 e7 f5 54 9d 4e 79 81 40 04 9d 12 d6 1f 14 88 a4 10 47 64 48 f2 Data Ascii: 284o."UlR\F`D0!y,}xa}9Vi_sd# <]dI2DZd?FLX813$@$C$qJfqOR0X<_=IBrbbKZ0YvF?_FW\|{]EZ}HkJW4,%/TNy@GdH
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 11 19 33 09 2b d9 4a 39 71 aa 90 b3 69 59 f0 49 8b e4 3c 9d d7 57 97 3f 46 28 19 44 24 fa ca 22 d3 14 e1 14 c3 03 8b e1 49 0c d6 67 c6 38 1f bf 42 e6 40 8e 63 27 0a b8 44 76 1f 60 06 fc 16 85 04 a0 a3 ac 71 a5 05 53 b1 2c 13 f6 3f aa 9c 19 4c 0d 49 b2 86 95 74 fd d8 15 10 9d 6b 25 f7 19 ff 96 72 2f 05 77 a4 d5 f7 cb a9 4f 90 ab c1 e4 7d c9 90 03 0a 62 d8 6d 26 28 c8 9c 9c 04 e7 0a ba d2 0a 3b 45 84 bc ec fd 12 f1 9f 89 81 54 e6 6c c5 4e fb 7c 5a 7b 8e be 0a 50 4f 2c 16 80 45 6a 63 fe fa af fe ea 37 bf fe cd 9b 37 ef aa aa 26 50 30 32 b5 91 77 68 82 ca b4 b7 b7 6f bf ff d5 5f 3f 3c 7c fa c3 1f ff f0 cf 7f fe 63 d7 0f 41 25 88 2a cf 74 91 5d e8 cf 4c 5c ca 1e 18 b8 a4 0d 65 cc 0c 00 61 43 20 11 86 fe c0 f0 49 a2 2f 35 73 fa d8 6c 42 48 7e e0 65 e2 6c 1a 17 Data Ascii: 3+J9qiYI<W?F(D$"Ig8B@c'Dv`qS,?LItk%r/wO}bm&(;ETlN\|Z{PO,Ejc77&P02who_?<\|cA%*t]L\eaC I/5slBH~el
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: e0 d4 21 fa 78 d8 9d 01 e3 12 ef 98 be 9c 32 15 e6 c4 e9 9a a6 3c 2f 36 2c 0a 84 6c 4e e6 ea 2e a6 a9 ce b2 4a df f2 f7 17 fe 3a 69 d0 e9 d6 e1 ea c7 95 d2 4e d2 38 e9 1b 01 15 a1 20 08 9c 9d 83 5b 97 23 08 01 04 20 80 3e c3 1b d9 e0 0d 13 5a a2 48 88 07 aa c4 97 70 3c 6e a2 f0 cd 0b 20 50 d4 b6 01 c2 4e dc 95 26 27 61 c4 cc 61 9e 95 59 70 dc e9 95 4e ce 05 88 b8 6c 42 7e ca 99 32 b5 30 2f f7 58 31 3e 45 1f fd ff 92 62 27 4a 1c 30 02 64 29 15 b1 32 e3 f8 39 c2 cf 41 41 43 c0 35 31 30 db 50 35 89 21 5e 49 6b dc 7f 51 75 9e 55 e5 0c 47 86 45 b7 e7 51 49 0a f1 ac 26 64 e6 f7 ef bf 79 f7 f6 3d 00 cb 7c 25 5c cf b2 51 80 b5 32 db 9b 5b 0a db 5f cb 4a 22 86 23 44 d7 c7 3e 8d 9d 90 a1 48 58 74 fe 8c ce 12 52 92 bc 87 80 30 9c ee 98 ad cc f3 fd ff 2f 93 a4 04 07 Data Ascii: !x2</6,lN.J:iN8 [# >ZHp<n PN&'aaYpNlB~20/X1>Eb'J0d)29AAC510P5!^IkQuUGEQI&dy=\|%\Q2[_J"#D>HXtR0/
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 54 f6 cb 9c 72 ca 60 39 57 cf 2a 69 ab 8d 3b 5b 54 89 00 9d 91 c3 71 fb db a8 b3 c4 a1 0c a3 4a 20 8c 2c a8 8c d1 95 a9 94 52 41 07 14 e1 c3 f1 48 de a3 52 84 20 12 63 79 bd f7 ce b9 70 0e 16 33 87 6d 31 25 19 44 48 61 3b 13 08 84 1d fe 12 ee da 48 d9 a2 5b 41 14 02 e4 ab 51 b1 50 fc c3 f5 b9 a3 92 11 d5 52 c9 eb f0 14 8e 33 fd 5c 98 a8 63 c7 4d 5f 5a ed de 53 c3 f4 0b ca 00 40 80 42 49 c7 84 1b 5f 29 fc 0b b6 14 37 ee c5 7d 1e 21 c8 2b 8c bf 8c 5c 29 e4 bc 44 11 8e 12 34 eb b9 85 c9 11 c9 3e d5 9c 32 db e9 56 7c fa f4 f1 69 f7 fc f6 ee fe 02 35 a7 c9 1c 86 ee f7 bf ff ed 1f ff f8 07 6b ed ba e1 b4 92 22 ec b3 08 6f 29 72 a4 83 5a f3 93 75 2d 76 49 10 a6 83 60 83 59 99 56 5a c9 d3 c7 d3 78 2f 99 02 b0 66 34 ac ce db 17 59 0c 4b 27 f0 c9 34 0a bd cc 60 33 Data Ascii: Tr`9W*i;[TqJ ,RAHR cyp3m1%DHa;H[AQPR3\cM_ZS@BI_)7}!+\)D4>2V\|i5k"o)rZu-vI`YVZx/f4YK'4`3
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 88 50 2a af a4 9f 1c e4 92 9f 2e a4 e0 c4 28 1f c7 22 f2 2c 08 7b 9a 12 8e f1 6a c6 88 10 94 40 8c 7e 46 b6 3f fd fc 97 cf 0f 9f 6e b6 6f de bc 79 7b 7f 77 7f 73 bb ad 2a 43 4a 21 20 b3 1f ac ed ba 6e bf db 3d 3e 3f 3e 3d 3e 1c ba bd 73 96 99 83 77 89 24 95 b9 96 26 81 8e 8b 87 73 1d 7c 89 af 22 e2 e9 db ba 5e c0 2e e7 30 51 de 68 29 59 2a a0 64 71 37 c1 5b d2 65 4f 69 de 9f ef 77 29 2c bc 99 65 72 05 b1 97 2d 50 88 0a cb e5 b2 00 34 24 df 5d 49 f2 f5 13 e7 35 53 ec c2 3b 38 cd b2 f0 63 5c 89 44 e5 3f 6b 3f 40 5c 59 2f b0 96 67 27 95 be a8 e1 8a 74 65 8c d1 06 05 44 18 10 94 22 60 76 d6 0b 7b cf 5e 84 ad f7 ce 5a e7 9c 77 ce 0e 03 20 68 22 45 8a 08 99 3d 21 28 22 ad 08 00 86 c1 1e 8f 87 61 b0 ce 39 e7 2c 29 aa 40 44 c4 3b ef 9c 53 5a f7 83 46 c4 ed 76 7b Data Ascii: P.(",{j@~F?noy{wsCJ! n=>?>=>sw$&s\|"^.0Qh)Y*dq7[eOiw),er-P4$]I5S;8c\D?k?@\Y/g'teD"`v{^Zw h"E=!("a9,)@D;SZFv{
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: ec 65 f3 f2 65 3a fe f9 84 c9 b3 0a f1 70 ea 74 7c d2 15 c7 fb 2c b8 3f 4f b4 fe c4 fc 73 2d 69 ce 4e a0 fe b2 38 48 9c 08 e6 cc 41 20 c3 02 51 f7 4f c1 a6 53 9f 70 b4 66 5e bc ce 33 bf ce cc 32 96 85 38 d9 70 3e 92 85 93 97 b1 60 79 c9 68 9c a7 d9 7e b3 13 0b fb 5a 7a 5f 90 77 0e c6 af 26 14 02 11 a1 b3 43 3f 91 20 3c ea fc af 68 c8 69 4b 76 35 37 ce 09 42 00 24 e0 bc f5 7c a5 30 9d df 7d 19 65 57 e5 9f d2 bf a6 84 5f a1 a9 2d a0 cf 75 c8 35 8b 9c f5 d8 41 38 6b c5 ac 85 fb 9f a2 ed 94 6c c3 30 8b 42 31 21 e2 c7 28 b5 dd b4 37 ed c6 3b 7b 78 da 1d 76 4f bb dd ce f6 96 90 3c fb c3 b1 63 e6 7e 18 40 a4 aa 2a 42 14 11 67 ed e3 c3 67 f6 fe bb 6f bf f3 de 23 c3 f1 70 78 d2 e6 dd 3b 6d ad f3 5e b4 d6 4a 29 63 4c f8 c0 cc ce 3b 61 90 1b 6e 37 ed c3 c3 e7 e7 a7 Data Ascii: ee:pt\|,?Os-iN8HA QOSpf^328p>`yh~Zz_w&C? <hiKv57B$\|0}eW_-u5A8kl0B1!(7;{xvO<c~@*Bggo#px;m^J)cL;an7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50098	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:32 UTC	819	OUT	GET /eO6nD1O47tirNw4TM76SfwotF_tP25t_TASE2l8_Gyw4xLr7ckkcg4PuEb8cxngaWwks2XZqVMT-et2ZGUU9W648mg7_hSfl6kv93uyvXvvjwCVzRXw=w1440-l90-sg-rj-c0xffffff HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:32 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 24425 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:48:50 GMT Expires: Tue, 28 May 2024 19:48:50 GMT Cache-Control: public, max-age=86400, no-transform Age: 10482 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:32 UTC	856	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 0a 0a 0a 0a 0a 0a 0a 0a 08 0a 0a 08 0a 08 08 08 0a 08 0a 08 0a 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 0a 0a 08 08 10 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0d 0b 0d 0f 0d 0f 0f 0f 0f 0f 0d 0d 0f 0f 0d 0f 0f 0d 0d 0f 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 01 86 01 86 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 00 09 ff c4 00 4d 10 00 01 03 02 03 04 07 05 05 05 05 06 05 04 03 00 01 00 02 03 04 11 05 12 21 06 31 41 51 07 13 22 61 71 81 91 08 32 a1 b1 f0 14 42 52 c1 d1 Data Ascii: JFIF"M!1AQ"aq2BR
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: a9 e1 3c b6 36 ac 6b 55 4a 95 f3 0f 27 ab 0e 16 dc 9a d0 d3 e4 e3 c5 3e 83 0c 4b 37 0f d5 73 a5 53 03 67 6b 9b e3 4f 1d 7d 6d 61 19 a9 73 6b c5 46 63 18 b1 89 bb f5 53 db 8e 8a a1 b5 bb 2d 34 87 b3 bb 7a e4 43 2c a7 6b f0 9d 5a b9 e3 0b db 52 9d 53 b5 12 39 d7 cd 6d 55 f7 01 da eb b0 0e 2a 8a 76 32 60 6d 95 49 e1 3b 37 33 1d ab 74 e2 ba 55 61 4e 51 d2 c7 2e 84 e7 19 ea 9e a5 b0 63 c6 fd ca 42 1a 6c dd ab a8 79 30 87 72 52 78 64 0f 01 73 e7 15 6e 13 b2 bd 47 b0 52 03 c5 13 0e ac 1d 68 6a 42 ae a7 ab 06 ea 0f 63 ea 4b ea 2f c3 87 aa 10 a7 9a f2 e8 67 ad 53 2b 51 5b b3 65 8e 2d d6 dc a4 f0 d2 9a 39 f6 6d fb 92 3b 3b 5d 98 ab 50 5c 65 6a be 12 dd 1a 57 2a 24 41 2c 02 eb 9c d1 3b 20 4a 06 a0 44 00 d4 54 30 f1 d5 43 d4 ca ce 6a 41 db 08 7f 11 44 ff 00 e9 f7 79 Data Ascii: <6kUJ'>K7sSgkO}maskFcS-4zC,kZRS9mUv2`mI;73tUaNQ.cBly0rRxdsnGRhjBcK/gS+Q[e-9m;;]P\ejW$A,; JDT0CjADy
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 75 30 1d 9b 1b f7 d5 15 97 25 d7 df d3 f5 11 c6 71 52 e3 77 12 5c e3 bb f5 e4 3e bc 23 e9 a3 e2 77 70 b6 ee ef 92 42 26 9f 78 ef 3c f7 a5 e6 9b b2 3c ff 00 a2 e2 34 7a 3b df 50 5f 37 d7 21 f2 f3 49 fd a8 81 a7 1f 80 fe bf 5b d2 32 cb 6d 3d 7b cf 2f 00 91 6e ba 9f ea 7b be bf 34 54 4a b9 5c 7f 4f 58 79 f9 a7 cc c4 38 35 b7 dd 7b 9d 3c ed c4 a6 b8 5e 0e e7 9b db 4e 5c 2c af f8 26 cc ee dc 07 e6 b1 d5 ad 18 fa 9d 3c 3e 16 75 35 7a 22 a7 49 80 ca fd 4b 40 e3 94 69 eb fa 59 37 c4 36 6e 46 1f 74 9e 26 db ff 00 d5 6c 98 7e 0d 6d ca 54 e0 e1 db db f0 d7 f5 58 d6 2a 57 d8 e9 be cf 85 b7 77 39 ea 97 16 20 f6 4e 57 70 be e3 6e 1d c7 bf 4b 1d fc c6 a7 b1 5d 2a 92 32 4a 4d b7 02 77 83 c8 f7 26 db 77 d1 8e 60 5f 10 b3 c0 b9 60 dc eb 7c 9d df c7 8e f5 97 61 b5 39 5d 67 Data Ascii: u0%qRw\>#wpB&x<<4z;P_7!I[2m={/n{4TJ\OXy85{<^N\,&<>u5z"IK@iY76nFt&l~mTXWw9 NWpnK]2JMw&w`_`\|a9]g
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 4b dc 5d 58 36 9b 13 00 90 b3 7c 5a 72 6e b8 b0 95 aa 7c 9d 39 46 f4 df b1 11 25 66 aa b1 b6 58 d3 41 b5 f5 29 7c 5a ac b7 81 f4 59 ae db 56 13 63 ae 8b d7 43 1b ad cf 17 53 04 9a 6a c4 b6 2f b4 6d 68 df 6f ad eb 06 e9 1f 6a cc cf 27 ee 0b 86 0e 66 fb fc 07 c5 d7 e0 05 ac bb 45 88 12 db 5c 8d fa 9f ba 00 bb 9d fc ad f8 91 cc 2c 92 6a 92 f7 13 b9 a0 d9 a3 90 d4 34 79 6f 4c ad 8a 75 da 5c 91 30 d8 38 e1 a2 df 36 37 9f 97 06 ef 3c dd fa 72 fe 89 dc 63 4f 2f 86 bf 3b 69 e2 9b 3e 3b 90 06 ef 99 e7 ea 95 aa 9e cd b8 e3 a0 f2 d3 e6 0a 42 d4 d7 b0 d6 ae a7 87 af e8 13 3a 76 66 36 49 4a ef 8a 93 d9 e8 6e eb aa 54 79 62 d8 69 2c f5 14 59 73 d9 cc 38 68 07 72 be 52 d2 ee 0a bf b3 74 dc 55 8c 54 db bb bd 72 23 24 b5 67 a9 b5 95 90 38 8d 60 67 7b 94 04 fb 60 f6 fd db Data Ascii: K]X6\|Zrn\|9F%fXA)\|ZYVcCSj/mhoj'fE\,j4yoLu\0867<rcO/;i>;B:vf6IJnTybi,Ys8hrRtUTr#$g8`g{`
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 71 2d d5 c3 cd ad 27 c9 75 86 09 b4 32 80 2e d3 6e 7a f1 5e 76 bc 5a 96 88 ed c2 ce 37 b9 74 a8 a1 b8 d1 51 b1 fa 29 d9 ab 35 ee 57 8c 3b 11 cc 35 05 3f b0 3b c2 cc e0 f9 5c 64 2a 24 60 95 bb 7f 3c 66 ce 69 1f 25 0f 37 49 92 13 c4 2d d7 1c d8 d8 e4 07 b3 f0 59 4e d4 f4 52 e0 49 60 3e 16 41 29 74 3a 10 9d 29 6f a0 e3 67 3a 5a 6e e7 9b 1e f5 78 65 54 73 8d 1d bd 61 d2 74 73 3f e0 3e 85 3e c2 30 3a c8 8d da 1d 61 f7 4d ec ae e9 b6 56 71 a7 c9 a3 5a 1b 01 19 de 01 f2 41 51 d1 74 24 5b 28 09 ae cb ed 5c da 36 48 c8 f2 d3 d5 68 74 95 00 8b d8 84 1a 92 e4 cc 99 97 53 9c b6 cf a3 27 42 4b 9a 2e de 4b 53 f6 7f 8e d1 79 9f 9a bc e2 18 73 64 16 23 e0 83 62 f6 6f aa 26 c2 c2 eb 4e 1a f9 f5 2b 88 ab 9a 9d 8b fd 33 34 4b 16 23 53 45 a2 59 d1 ae e2 38 f6 1a 96 20 4e 0b Data Ascii: q-'u2.nz^vZ7tQ)5W;5?;\d*$`<fi%7I-YNRI`>A)t:)og:ZnxeTsats?>>0:aMVqZAQt$[(\6HhtS'BK.KSysd#bo&N+34K#SEY8 N
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 6d 8a e9 02 9a 46 c7 1d 5d 2b 1e 18 d7 34 39 8c 66 ae 36 d4 b1 d6 02 e2 ff 00 7b 7f 0e 5a 4e 1f b2 78 24 b0 32 3e a8 31 d7 61 cc 19 20 91 a4 b8 17 07 48 d6 96 91 62 41 bb 8b 40 f0 08 4a 9c 79 58 74 1c ed c5 17 f0 af fa 19 3c db 4e 2c 0c 64 10 45 c8 71 00 f9 01 a2 ce 7a 46 87 39 8d c3 47 07 6a 37 db 4d 46 9e 45 6c 3d 31 ec 1d 0b 18 45 0c 84 4c 64 8f dc 25 cd 8d 99 06 72 0b 9a 41 71 27 99 b0 be e5 90 7d 87 a9 89 fd 6b cb 83 4b 9e 5e fd 5c 79 92 74 d6 db ad dd 64 bc a9 3b ad cb 49 e9 6b 34 ba bd 0c e7 a4 9c 67 b1 14 03 fe a4 9f 16 b0 79 0c c7 cc 2a 65 33 ec 3e 4b d8 a6 20 65 91 d2 1d ee 24 81 c8 6e 68 f2 16 1e 49 37 37 4f 45 e8 61 4f 24 14 4f 1f 56 af 79 51 cf f2 c4 cd 0d 47 a5 b5 fa e7 65 dd 7e ca 55 e3 31 6e 63 fb fa 68 27 02 f7 05 ec 6f 57 36 ba dc 8f dd Data Ascii: mF]+49f6{ZNx$2>1a HbA@JyXt<N,dEqzF9Gj7MFEl=1ELd%rAq'}kK^\ytd;Ik4gy*e3>K e$nhI77OEaO$OVyQGe~U1nch'oW6
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: d8 ae 1f 68 a0 a6 69 02 47 02 f9 4f 27 ca 35 f3 6c 59 58 3c 4f e2 58 f1 13 49 5b af e9 cf f3 d4 df 85 a6 db 6f a6 bf 3c bf 3d 0c 7a 69 b3 4a e7 1e 24 fc 41 16 f8 7a a6 ad 87 42 78 8b b6 dc 78 9f 80 e2 95 ab 68 6b bb 27 71 73 6f a5 f4 e2 7c fe 7d c9 cd 2b 6f 98 8e e7 7a e8 49 f8 79 fc 37 27 64 9a e8 73 24 b5 6b d5 fd c8 bf af af 14 76 84 20 58 9d 34 fa b7 c1 3b 8a 3b a3 27 60 d3 8d c5 29 6b c8 d0 a9 18 ab 4e f1 e6 9b b3 0f 52 b4 1b 36 e7 5b 80 e7 a8 58 66 e1 b9 d6 a4 a7 b0 f3 06 da a7 46 6e 3d 38 2b 54 7d 28 17 02 2d ab 5a 5c 40 22 f6 02 e5 56 f6 ab 0e 64 34 ee d0 67 75 9a d3 c4 66 3a 90 48 bd ec 0a a6 6c b9 b1 78 23 57 46 f0 3c 5c 2c 12 63 4a 15 20 ea 7e 31 d3 af 3a 75 15 2e aa fe c2 7b 4b b4 ef a8 93 3b f7 0d 1a c1 b9 a3 f3 27 89 e3 e1 60 12 a6 d1 d6 f5 Data Ascii: hiGO'5lYX<OXI[o<=ziJ$AzBxxhk'qso\|}+ozIy7'ds$kv X4;;'`)kNR6[XfFn=8+T}(-Z\@"Vd4guf:Hlx#WF<\,cJ ~1:u.{K;'`
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: d5 08 b4 95 c5 ec bc 02 f1 6a 10 55 46 86 08 e1 12 c9 46 aa 97 41 90 95 e0 17 8a 21 0a 50 14 62 10 15 08 10 94 52 8e 42 0b 20 40 85 14 a3 22 a8 40 10 21 b2 05 08 3a 08 42 00 8c d0 ac 58 30 47 01 11 a8 e0 a2 40 c1 18 22 82 8e 14 00 21 1c 04 56 94 60 a0 01 42 10 00 8c 14 20 21 1d a1 15 18 be c2 e7 41 c7 f5 44 87 2a fb 68 f4 b7 d5 b5 b4 4c 3c 04 93 db 89 3f dd 46 7c 00 eb 08 3b ee ce 4b 88 9c f9 a7 76 97 b2 d5 7a 5c c4 4d 75 74 f3 9d 23 74 ae 2d bf e1 1a 31 ad 1c 6c c0 de ed 14 63 70 cb 0c ad ec 0e ed e7 ce eb 34 9d dd ca 14 c8 b6 25 df 78 eb de e1 7f 4b a5 e3 d9 c7 37 ee bb 4e 2d 37 0a 5e ab 66 41 e2 6f e2 7f 55 13 2e 1b 34 5a b1 ce d3 78 bd c7 c5 2d bb 8d 48 79 45 31 69 df 7f 11 ae bf 5f 05 2b 43 8a b4 e9 b8 a8 1a 3d b0 6d c3 66 6d 8f 3b 69 fd 14 fc 70 31 Data Ascii: jUFFA!PbRB @"@!:BX0G@"!V`B !AD*hL<?F\|;Kvz\Mut#t-1lcp4%xK7N-7^fAoU.4Zx-HyE1i_+C=mfm;ip1
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: ae b9 93 31 62 81 d4 e2 33 6d 66 19 ad 6e 01 fd ab 78 93 7f f4 4e e3 1a 17 80 6c 01 2d b9 b3 5b 1b 06 a4 9d e4 ee e6 49 23 8d 95 4e a6 c3 42 6c 4e a0 f8 5f e6 3e 21 2f 8f e2 4e 11 36 31 c6 c5 fd e0 0b b5 be 02 f7 ef 20 72 5b 7b 9b ed cd 99 9d 7b 6a f9 22 03 15 90 bd e5 ce 3a 1f 77 5b 9b 5e da 81 7d 78 94 9e 1e 6c 7e be b7 25 30 c6 e6 24 71 20 ef f0 e7 e4 9b 35 d9 5d a2 e9 a5 a6 53 8e de aa 7d 59 66 ae 83 33 33 7e 13 bf 9f 2f 3e ee f0 a7 76 1a ac 67 00 ef b1 dd cc 91 f9 05 05 09 ec 38 6f 1f d6 ed f8 1f 92 6d 87 d6 96 b8 11 c0 f9 ee fa fa 0b 9d 28 66 8b 89 d7 a7 35 19 c6 47 40 0a 4c cd d4 03 71 e5 bb 91 e3 fa ac 83 a4 3d 8f 31 1c ec 17 8c ef fe 1b 90 7d 2f bb 95 f9 59 6b 5b 1b 8c 09 a3 1b af 61 7e e3 ba e3 87 0b f9 84 ef 13 c2 c4 83 2b 85 ee 72 d8 ee bb bb Data Ascii: 1b3mfnxNl-[I#NBlN_>!/N61 r[{{j":w[^}xl~%0$q 5]S}Yf33~/>vg8om(f5G@Lq=1}/Yk[a~+r
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: f9 a7 b3 d5 6e 2d d0 9e b2 2f de c5 6d f7 67 bd 6f 21 ea 07 25 f4 33 d9 df 1a 35 51 b2 ae 4b 5d cc 0c 81 b7 b8 8d 80 8e b7 c1 d2 48 dc c7 f8 44 63 81 59 ef ae 56 68 71 d1 3e 5f 9f a1 b9 86 a3 04 50 42 30 4e 62 c5 1a 8c 8a 11 c0 40 ba 10 a9 6e 8a b5 5d b4 ac 61 d4 80 a6 f1 ea 9c ac 27 b8 ae 1b e9 b3 a4 f9 ba f2 c8 df 66 8b de de 89 b0 83 93 b2 11 5a a2 82 b9 d7 9f ed d4 7f 88 7c 13 98 ba 42 8b f1 0f 55 f3 d1 db 7d 53 ff 00 30 a4 ce dd 54 7f cc 72 d1 fe 3b ea 63 58 a4 7d 0f 93 a4 28 87 de 1e a1 37 7f 49 51 7e 21 ea be 7a 3f 6d ea 0f fc 57 7a a6 e7 6b aa 0f fc 47 7a a9 fe 33 ea 1f f3 3d 0f a1 ce e9 3a 2f c4 3d 57 97 ce ef f6 9e 7f f9 8e f5 42 ad fe 33 ea 0f f2 fd 0f a8 ed 28 e1 26 11 c1 58 4e a0 70 8c d4 50 84 2b 10 51 a8 e1 11 a8 ed 0a 10 38 46 08 97 46 63 Data Ascii: n-/mgo!%35QK]HDcYVhq>_PB0Nb@n]a'fZ\|BU}S0Tr;cX}(7IQ~!z?mWzkGz3=:/=WB3(&XNpP+Q8FFc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50101	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:32 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:32 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:32 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:32 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:32 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50103	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:32 UTC	587	OUT	GET /1If7OvDczdPnWNfp6LhWWjmSpreHL-7WlUojUGgr4HhdU7Cqfh2NWNlX-evRfwDNgf3ojMiKYP5DSmJ9gLKhLdXyR5Zg9JRFjke_vtbnRqAftdbh4oY=w1440-l90-sg-rj-c0xffffff HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:32 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 18172 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:15:38 GMT Expires: Tue, 28 May 2024 22:15:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 1674 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:32 UTC	857	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 08 08 08 07 07 08 07 07 07 08 08 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 07 0a 07 07 07 08 09 09 09 07 07 0b 0d 0a 08 0d 07 08 09 08 01 03 04 04 06 05 06 08 06 06 08 08 08 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 01 fb 03 84 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 07 08 04 05 06 09 ff c4 00 5c 10 01 00 01 02 02 03 09 0a 09 06 09 0a 04 07 00 00 00 01 02 03 04 11 05 21 31 06 07 08 12 41 51 71 73 b2 13 32 33 34 61 72 81 91 b1 b3 14 22 Data Ascii: JFIF"\!1AQqs234ar"
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 95 18 9b 75 ce 54 d5 13 3d 1c ef 72 38 98 4d 25 45 7b 27 d1 2e 5b 44 c6 4e 8c c0 10 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c4 d2 7a 4e 8b 34 4d 75 ce ad 91 11 df 55 57 25 34 c7 2c cf aa 36 ce 51 13 29 88 9a a7 28 8c e6 75 43 1a aa 8a 62 66 78 a2 35 cb 95 32 e9 74 86 ed 70 b6 bb fb d4 e7 1c 96 e9 ae f4 f4 65 66 9b 99 4f 4e 4f 1f a5 b1 f7 31 13 3d d6 a9 a2 d7 25 9a 66 62 9c b9 38 fb 3b a4 f9 6a 8c a3 92 21 d6 fc 16 d5 3c 91 ea 5b db d1 f3 3c ba b2 9e 8a 63 3f 1c e2 37 67 d6 a7 b9 a4 62 39 14 e7 1d 35 4e 5e 19 4c ef cb a9 eb a7 7d 3c 2f d5 f8 45 5f d1 ee 51 9f fc 58 b6 b3 73 7d 4b 31 b2 ce 26 af ff 00 Data Ascii: uT=r8M%E{'.[DNzN4MuUW%4,6Q)(uCbfx52tpefONO1=%fb8;j!<[<c?7gb95N^L}</E_QXs}K1&
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: fc 74 55 62 7f be a6 14 95 de a2 6a 9c a7 f7 5e 51 45 51 4c 67 0f 5e 3c a5 3b e3 d8 fa d6 f1 14 fd 8a 2a f7 77 2b 5f a3 7c 1c 37 2c de a7 a7 0d 88 f6 c5 b9 86 3e d2 9e 98 67 c1 9e 89 7a 41 d0 d1 bb 9c 24 ff 00 1d 11 e7 51 76 9e d5 10 b9 4e ed 70 73 ab e1 58 68 9e 69 bd 6e 99 f5 55 54 4b 2e 15 3d 31 bd 19 4b ba 1d 7d 9d d0 61 ea ef 6f e1 ea e8 bd 6e 7d 95 39 96 ef d3 3b 2a a6 7a 26 27 d8 9c e1 0b 82 78 a8 c9 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c f6 ee 2b f9 18 8e 7b 94 47 ab 3a bf 06 37 d2 75 b2 3e ee 69 f9 2a 7a da 7b 35 b1 96 95 af 5b d4 68 dd 9f 7c f9 3c ae 93 da f7 47 9f ab ae b9 52 d5 55 22 bb 8b 55 5c 5c 29 d5 Data Ascii: tUbj^QEQLg^<;w+_\|7,>gzA$QvNpsXhinUTK.=1K}aon}9;z&'x <+{G:7u>i*z{5[h\|<GRU"U\\)
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 4a e8 9a 3c fd 25 82 a7 db 7e 1a e7 48 cf cb 11 df ff 00 c6 c8 d1 94 fc d3 dd 11 fc ba 88 d1 77 e7 f8 aa fd 31 11 ed 95 74 e8 0c 44 ff 00 17 97 4d 54 fe d7 ac d0 9b a4 c3 62 62 6a c2 62 70 d8 aa 63 5c d5 85 c4 59 c4 53 1d 35 59 ae b8 8f 5b b1 63 fe 42 e7 34 53 ba 7d 59 c6 8d b7 1a e6 ad f1 e8 f0 b4 ee 5f 11 3f 56 88 e9 ae 3f 08 95 74 ee 3f 11 3c b6 a3 ed 4f f8 5e e1 2c 27 1d 77 fd 77 7f 2c a3 47 da ff 00 6d ff 00 c3 c5 c6 e2 2e ff 00 29 44 7a 2a 9f d8 ae 9d c2 57 cb 7a 3d 16 e7 fc 6f 60 ed 30 db 9c bb 55 31 56 51 4d 33 ae 38 f3 c5 99 e6 ca 35 cc 44 f2 4c c4 44 b5 57 8f b9 4e ba e2 3b a9 f4 6d a7 47 da 9d 54 4c f7 d5 ea f0 36 f7 01 cf 7a 7d 14 44 7f 6a 5c fb 7b d5 d1 54 67 dd ee 47 fb 3a 7f c4 f4 77 b0 b5 51 57 16 b8 ca 7d 71 31 cf 13 1a a6 3a 1d ae 1e 75 Data Ascii: J<%~Hw1tDMTbbjbpc\YS5Y[cB4S}Y_?V?t?<O^,'ww,Gm.)Dz*Wz=o`0U1VQM385DLDWN;mGTL6z}Dj\{TgG:wQW}q1:u
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: fd 0e be c7 7a ee b4 ed 51 16 a6 7f 4b 2a 7e d4 cf ec 89 97 4b 63 bd 77 60 26 a9 b7 f8 ba 7c a1 cb 8b 88 8a f8 ba 1a c7 c2 d3 0d c6 a2 27 3c b2 a3 fb 55 bc 4f 05 6d c6 db c4 5c 98 aa ab 91 33 c6 8f 8b 34 c7 27 96 99 7b ce 15 fe 0f ec 7e 35 3a 6e 05 f1 f2 de 8a bf 7e 6f 5b 8a fe d2 ae b6 db 7c 98 65 fd f2 e9 c7 c6 02 70 f4 e0 6b ce dc 5b a6 2e ce 2b 09 dc eb 8b 59 47 1a 23 bb 45 c8 8a e2 33 88 ae dd 33 19 e5 3c ed 3b dd 06 ea 71 71 76 6d 55 63 8b 56 73 1e 16 dc c7 ae 9a a5 f4 27 7c 88 f9 bd 7d 12 f9 fb bb 4f 1c ab ce 98 f5 4b 9b 28 6e cc c0 68 ec 7d c8 89 8b 76 b5 f3 de 8f d8 ed ad 6e 33 49 ce cb 56 a7 fa 45 11 ed c9 e9 77 31 de c3 de 68 f3 28 4e 6c 41 5e e3 f4 ac 7f a2 e7 e6 e2 30 df 8d d8 71 ae 68 9d 21 4f 7d 83 bb e8 ae c5 5d 9b b2 cf d3 b1 d4 e2 ce 09 Data Ascii: zQK*~Kcw`&\|'<UOm\34'{~5:n~o[\|epk[.+YG#E33<;qqvmUcVs'\|}OK(nh}vn3IVEw1h(NlA^0qh!O}]
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: f1 54 c6 a9 98 cf 96 36 e5 d3 96 c6 db b6 68 b9 c7 56 f6 14 5c aa 9d 4e df 4a e9 79 bb 56 a8 e2 d1 1d ed 3f 8c f2 67 e4 e4 f2 ed 72 6c 6c 74 96 6b 89 ca 62 62 62 76 4c 6b 87 79 63 bd 6d a6 98 a6 32 8e 28 61 33 33 39 ce b6 b4 f0 af f0 7f 63 f1 a9 d1 f0 35 af e5 e3 d3 ec 77 9c 2b bc 1f d8 fc 6a 74 7c 0d a3 e5 a3 a6 54 37 f6 95 75 ac 2d f2 61 b4 fb e3 f8 0a fa 25 f3 f7 76 7e 39 57 9d 3e d7 d0 3d f1 67 e4 2a e8 97 cf cd da 4f cf 2a f3 a7 da d0 db 2f 77 b9 ad 91 e8 7b cd 1c f0 7b 99 d9 1e 87 bd d1 e1 0e d6 76 30 c7 08 5d fd ec 68 4b 11 54 d3 4d fc 6d ec e3 0d 85 e3 65 13 11 9f 1a f5 ec a6 2a a6 c5 13 f1 73 a7 e3 57 54 c5 31 96 55 d5 46 64 c4 e2 29 a2 8a ab ae a8 a2 8a 29 aa ba ea ab 65 34 53 13 55 75 4f 92 9a 62 66 7c 90 f9 39 bf 36 f9 37 34 b6 91 c4 e3 eb 99 Data Ascii: T6hV\NJyV?grlltkbbbvLkycm2(a339c5w+jt\|T7u-a%v~9W>=gO/w{{v0]hKTMme*sWT1UFd))e4SUuObf\|9674
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: e9 f6 b4 36 cb dd ee 66 3e 2c 7e fc 8f 7b a3 de 0b 73 31 aa 1e f3 47 04 3c 37 09 dd 3f 38 6d 01 a4 ee d3 33 15 d5 62 9b 14 cc 6d f9 cd eb 76 2a ff 00 cb b9 5b e5 93 e9 7f 0c db 33 3b 9d c6 cc 7d 5a f0 95 55 d1 f0 ab 51 ed 98 7c d1 81 9c 3b 0d 13 a2 6b bd 72 9b 36 a2 26 ba f5 44 4c e5 9c f3 66 bf a5 f4 25 dc 3d ca b0 f8 8a 2a b7 72 9c b8 d4 55 1a e3 38 89 a6 a8 e7 89 89 89 89 89 ca 62 5c ba 34 1d 74 d1 18 8a 2a 9a 66 27 38 98 9c a6 26 99 e7 8d 71 ce bd bb 5d d9 57 8d b9 45 db ba ee c5 ba 6d d7 56 51 1c 6e 2e c9 d5 ab 63 a6 6d d3 16 f3 9c e2 ae 29 8e 89 89 f3 86 bb 77 22 be 16 53 c9 9c b2 fa c4 f1 e6 f2 f5 53 96 a4 2b bd 3a fd 5e c8 5d c0 5b a2 6b 88 b9 54 d1 46 bc ea 88 e3 4c 6a d5 aa 22 73 d7 a9 cc da e3 ae 5b 8f df c9 ca a6 e4 46 73 96 b8 ce 72 9e 78 e4 Data Ascii: 6f>,~{s1G<7?8m3bmv[3;}ZUQ\|;kr6&DLf%=rU8b\4t*f'8&q]WEmVQn.cm)w"SS+:^][kTFLj"s[Fsrx
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 80 87 73 95 6b 15 67 8d 19 46 d8 d7 1d 3c d3 e4 9c e6 3c 99 ba ba ae e5 b7 38 9e 69 89 cf d1 96 7c 6f b3 9c 4b ba c8 cd 8d 54 c4 b3 a6 ac 9c 0d 19 86 99 aa 2b aa 26 22 3b ca 67 6e bd b5 d5 1f 56 72 ce 9a 69 9d 71 13 56 79 4c e5 4f aa b1 de ba 6b 71 ad dc da d5 4e bd 5d 3a 93 96 50 c6 67 36 b5 70 ae f0 7f 67 fb 55 3a 3e 06 be 1a 3e d3 ba e1 57 76 26 d6 a9 89 f8 bc 93 13 af 3a b5 6a 74 dc 0c e3 e5 a3 d2 a0 bf b4 ab ad 63 6f 93 0d a7 df 1f c0 57 d1 2f 9f 9b b4 8f 9e 55 e7 4f df 3a 9f 40 f7 c6 f0 15 f4 4b e7 ee ed 27 e7 95 79 d3 ed 68 6d 97 ba dc c7 7b 0f 7b a3 9e 0f 73 5b 21 ee f4 7e c0 79 fd fb 77 27 56 3b 43 e9 1c 1d 11 c6 b9 77 0b 72 6d 53 b6 66 ed 99 8b f6 a2 23 9e ab 96 e9 a6 3a 5f 26 66 1f 67 62 72 fc 1f 32 78 55 ef 41 56 8a d2 77 6a b7 4e 58 2c 65 57 Data Ascii: skgF<<8i\|oKT+&";gnVriqVyLOkqN]:Pg6pgU:>>Wv&:jtcoW/UO:@K'yhm{{s[!~yw'V;CwrmSf#:_&fgbr2xUAVwjNX,eW
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 9a 2a ed 53 2f 7b dc 96 b1 16 f5 27 d9 51 f2 d3 fa 63 d1 1e d6 b9 fc d5 7e a9 f5 60 9d f4 74 1d ac 3e 06 bb 76 2d 5b b3 44 dc aa a9 a6 d5 14 db a7 8d 34 d3 13 54 d3 4c 44 67 31 4c 46 79 67 aa 39 9d df 03 49 f9 68 f4 b8 db f8 53 f3 4a bc ea bd 90 e6 f0 2f 88 ee df ef 7e fc cf 9d e3 e3 2c 45 c8 8f 99 ee f0 53 9d 8b 7d 96 d1 ef 8f 3f 21 5f 44 be 7e ee ce 3e 79 57 9d 3e d6 ef ef 99 be 4e 8e a6 d5 74 4e 90 d1 f1 5c 71 a9 9a 3e 1b 86 e3 c4 c6 a9 89 a7 ba e7 13 13 b6 32 ce 1a 27 ba bd 39 62 bc 54 d5 45 fb 15 c4 d5 33 9d 37 6d cc 6d d5 ae 2a 98 70 3b 65 91 f7 33 de c7 a1 ef 74 74 31 be e6 b4 dd 9c a3 e5 ac c7 fb 5b 7f e2 7b cd 1b a6 6c ce 59 5e b1 ff 00 16 df f8 84 c3 d1 4e c7 85 df 47 7b bc 2e 95 c2 d7 82 c6 53 35 5b aa 62 aa 2b a6 62 2e 59 bb 11 54 51 7a d5 53 Data Ascii: S/{'Qc~`t>v-[D4TLDg1LFyg9IhSJ/~,ES}?!_D~>yW>NtN\q>2'9bTE37mmp;e3tt1[{lY^NG{.S5[b+b.YTQzS
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 5a d8 f7 49 ce b7 be dd cf 82 a3 ad a7 b1 5b c0 e9 17 a6 d1 db 38 eb 97 97 d2 5b 49 ea 87 57 5c 2c d4 bf 52 cd 6b a5 2a d4 ad cc 2e 54 a2 41 6e 54 cc 2b 95 32 21 6e 61 4c c2 e4 a8 91 2a 26 14 ca b5 32 0a 66 11 30 aa 54 88 53 30 89 55 30 89 80 52 85 4a 64 11 92 26 15 21 22 99 59 c4 ec 72 16 71 3b 11 29 86 12 df df c5 67 a6 af 63 81 c1 67 bd bd d5 5f f7 75 39 db fc d7 1f 06 e2 cf d7 af 89 9c 65 9c 67 19 cc eb 89 8d 51 13 aa 63 6e 5d 0e 0f 06 5d 17 77 0d 7b 17 85 bd 5d 37 78 b6 22 fd 9b b4 d3 c5 9a ec 62 70 f5 d7 44 57 4c 6a ee 96 ea a6 bb 75 4d 31 11 3c 5e 5d b3 f3 6c 7f c4 5c ed 3e 81 82 d8 5b ec b6 67 77 54 ff 00 9b 2c f5 78 6f 77 4b 5e 74 ad b6 c4 6e e7 e8 cb 5d 5e 1b dd d2 d7 cd 26 ab 95 93 a3 9b 2a 26 c3 97 92 32 40 e2 4e 1d 4f 70 73 38 a6 46 43 87 38 Data Ascii: ZI[8[IW\,Rk.TAnT+2!naL&2f0TS0U0RJd&!"Yrq;)gcg_u9egQcn]]w{]7x"bpDWLjuM1<^]l\>[gwT,xowK^tn]^&*&2@NOps8FC8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50102	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:32 UTC	810	OUT	GET /T0I5MC5l-PS07tq1rHrLBvedNWkFGBMKK8FuV5qsmDDAu8HqlYyZsEgDoSXrhHfsPOEWyznrzAaU5HZ_4gdeEDGT9w1wUhilKwrRTUEZk6s36xBM1uPM=w1440-l80-sg-rp HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:32 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 99977 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:15:39 GMT Expires: Tue, 28 May 2024 22:15:39 GMT Cache-Control: public, max-age=86400, no-transform Age: 1673 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:32 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 9b 00 00 01 79 08 02 00 00 00 5f 94 76 27 00 01 86 50 49 44 41 54 78 9c ec fd 79 90 a4 f9 79 df 89 3d cf ef 7a cf 3c 2b eb 3e fa ee 9e 7b 00 cc 85 19 5c 04 40 02 02 49 91 94 48 51 22 25 cb f2 86 24 3b 28 ef 86 2d 7b b5 61 6d 28 ac 8d f5 ee 3a c2 6b 39 1c 5e af a5 a5 bc a2 6e 51 ab e5 01 80 02 78 00 24 88 6b 30 83 99 c1 dc 7d 9f 75 65 e5 9d f9 de bf cb 7f 64 55 75 56 77 0f 49 89 b4 80 e9 7e 3f d1 d1 9d 99 ef 99 6f 55 f4 f7 f7 dc 58 14 05 94 94 94 94 94 94 94 bc cf 21 df ef 1b 28 29 29 29 29 29 29 f9 13 a0 54 f4 92 92 92 92 92 92 fb 81 52 d1 4b 4a 4a 4a 4a 4a ee 07 4a 45 2f 29 29 29 29 29 b9 1f 28 15 bd a4 a4 a4 a4 a4 e4 7e a0 54 f4 92 92 92 92 92 92 fb 81 52 d1 4b 4a 4a 4a 4a 4a ee 07 4a 45 2f 29 29 Data Ascii: PNGIHDRy_v'PIDATxyy=z<+>{\@IHQ"%$;(-{am(:k9^nQx$k0}uedUuVwI~?oUX!())))))TRKJJJJJJE/)))))(~TRKJJJJJJE/))
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: bd b0 3e ea 77 bd a0 82 84 94 66 7a c9 03 4e a9 e8 25 25 25 7f 7c f6 d3 db 08 65 64 bf d8 cc a6 f1 38 9b 0c f3 78 24 b3 44 6b ad 0c 32 c7 f3 6b f3 2e 77 91 3b c2 71 39 65 c6 48 2d 65 91 27 b0 ef 96 7f cf b3 5b 6b 29 a5 8c 31 ad f5 41 4e 3c 68 2d b9 eb 16 59 54 e4 29 73 3c fb 5e c7 97 94 3c 18 94 5e f7 92 92 92 3f 2e 48 19 25 fb 82 1c 75 77 26 c3 ae 56 85 2c 0a 6b 81 08 9f fb 81 5f 69 70 27 00 44 42 91 22 d1 aa 50 4a 59 6b f6 63 ea ef c1 54 b9 29 a1 4c 70 ce 05 22 18 63 10 49 1a 47 4a 6b 42 88 b5 96 0b 27 89 46 0c a1 d6 9c 57 da 00 94 b2 5e f2 e0 52 da e8 25 25 25 ff 8e ec 27 b9 51 24 48 10 ac b5 ba c8 d2 64 9c ed a7 a9 27 86 70 2a c2 4a a3 e6 04 55 c2 98 b5 80 60 11 8c d1 4a 49 2d a7 c9 6d 88 88 77 77 a1 de df 44 08 21 84 30 ce 29 a5 5a eb 24 49 ba 7b 7b Data Ascii: >wfzN%%%\|ed8x$Dk2k.w;q9eH-e'[k)1AN<h-YT)s<^<^?.H%uw&V,k_ip'DB"PJYkcT)Lp"cIGJkB'FW^R%%%'Q$Hd'p*JU`JI-mwwD!0)Z$I{{
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: e1 1e 84 52 a5 a4 91 92 7b be d6 ba 74 bc 97 3c 80 94 8a 5e 52 72 1f b0 2f e4 84 50 64 74 9a a6 6e ad 51 e9 a4 c8 d2 62 3a a2 54 19 a0 cc f1 aa 6e a3 41 1c 87 33 87 71 06 d6 68 59 e8 22 53 7f 58 50 fc 50 c8 39 e7 c2 71 a6 69 ea 52 a9 c9 78 d2 ed ee ed ed ee f4 db ed d1 60 90 e5 a9 d1 9a 20 e1 8e 08 fc 00 09 81 83 14 77 0b fb 23 57 c8 c1 6b 82 30 dd 70 d8 68 e6 50 d4 e1 70 49 81 70 fb 0d 02 00 10 00 b0 04 11 db bb 3b b9 54 8c 31 ad 15 00 5a 6b 91 71 29 0b e1 fa 65 62 5c c9 83 49 a9 e8 25 25 ef 6f 10 d1 12 46 0f c7 a2 e4 51 1c 4f 8a 2c 95 69 92 e6 99 45 c6 dc c0 a9 2d 79 ae 47 29 67 94 11 4a 8c 56 5a 15 45 9a 1d 0c 36 7d 4f 31 b7 d6 22 00 21 84 09 47 08 81 04 a5 94 93 c9 64 3c 1c 76 f7 76 db 3b 3b 83 6e 37 49 23 6b 0c 02 32 c6 1c d7 e5 9c 03 10 6b 0d 5a 6b Data Ascii: R{t<^Rr/PdtnQb:TnA3qhY"SXPP9qiRx` w#Wk0phPpIp;T1Zkq)eb\I%%oFQO,iE-yG)gJVZE6}O1"!Gd<vv;;n7I#k2kZk
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: be e7 11 c2 00 01 a7 96 ad d1 5a 16 6a bf 25 cb ed c9 28 4a 29 21 c4 d2 d2 12 22 4e db aa 30 c6 8a a2 98 2a ba e3 79 68 6d 14 47 e3 76 bb df eb f6 bb 9d 41 b7 33 19 8e a4 2a 90 90 69 8b 18 d7 f5 18 a3 80 64 7f 36 da 4c b7 b5 c3 7c 34 38 d0 e2 43 c1 9e cd 5f bb 23 5e 3e c5 e2 81 f6 cf d4 9e cd 2a f4 ec 25 ec 41 91 fa 74 d7 c3 2c f7 83 0f 0e 2e 7a 34 b2 8e 00 82 f3 d1 a0 37 1c 0c 5b f3 f3 d3 fe 35 c6 18 42 a8 56 b2 d4 f2 92 07 90 52 d1 4b 4a fe ff c6 74 b6 27 21 fb 69 ea d3 48 af 2a b4 92 45 3a c9 26 63 29 a5 06 40 c2 90 bb 34 0c 85 1b 70 c7 01 63 a6 b2 6a ad 06 3d 15 58 7b 77 13 d6 83 2b 58 00 60 8c 21 22 65 8c 52 46 28 b1 c6 c4 69 32 1a 0c 7a 9d 4e af d3 1e f4 7a d1 64 92 65 19 5a c3 39 e7 82 0b 57 00 12 dc ef c3 3a cd 70 33 f6 a8 e9 0c 33 3a 8d 47 0d 6e Data Ascii: Zj%(J)!"N0yhmGvA3id6L\|48C_#^>%At,.z47[5BVRKJt'!iHE:&c)@4pcj=X{w+X`!"eRF(i2zNzdeZ9W:p33:Gn
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 93 c9 44 e5 39 e5 dc e8 72 0e 5b c9 03 41 a9 e8 25 25 53 6e 37 61 05 c2 28 3d 18 4e 2a 53 99 a5 2a 4f d2 64 92 65 b9 b6 c8 5d 9f bb 75 21 5c ca 1d c1 05 12 30 4a 69 ad 8a 5c fd a1 01 f1 a9 0d 6d ad 25 84 38 42 30 c7 61 84 58 00 29 d5 60 30 e8 76 3a bb 5b 9b 9d 4e 3b 99 4c f2 2c b3 c6 50 4a b8 e3 56 c2 10 0e 07 a2 1c 3d e1 ed 02 71 dc af d8 9e da b8 87 d5 62 77 08 b3 bd fb c8 d9 77 fb 1d 5e 67 6c f4 a3 4d 5d 0e 63 de 87 79 73 d3 b4 b5 43 07 be 39 cc 74 3b 08 bd df 4e b8 3b 0c 87 e3 fe da 02 0f 2e 7c d0 9d 76 3a 4a e6 60 39 72 97 e3 fd 8e 85 c8 c1 77 b4 94 d0 34 4f 3a ed f6 b1 13 a7 0e d7 35 48 a8 32 56 ab 82 3b 8e 56 7f f8 8f a6 a4 e4 3e a0 54 f4 92 12 00 00 40 06 8c f0 e9 4c 14 5d c8 68 a2 b2 ac c8 e2 3c 4d 95 b1 96 08 e1 87 7e 6b 09 99 a0 8c 32 ca c0 6a Data Ascii: D9r[A%%Sn7a(=NSOde]u!\0Ji\m%8B0aX)`0v:[N;L,PJV=qbww^glM]cysC9t;N;.\|v:J`9rw4O:5H2V;V>T@L]h<M~k2j
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 19 8b 27 e3 ce 5e bb 5e ab 11 42 2c 58 b0 86 10 62 ac 35 5a 51 26 ee 39 df b5 a4 e4 7e a2 54 f4 92 fb 12 8b 84 02 50 cc 86 49 7f bb 37 4e 69 d8 6a 2c b4 28 a3 48 08 1a a3 b5 54 59 61 f7 55 fc 8f e4 91 a5 94 52 4a b9 10 88 28 0b 39 99 4c 86 83 41 67 77 b7 d3 de 19 f6 bb 59 92 18 6b 10 29 a5 d4 f5 3c ce 39 ec f7 2f bb 9d e0 76 f7 ac 71 98 51 47 84 23 e5 da 77 1b e1 16 f6 b3 bb 8f 6c 9d 5d 16 1c 64 b6 c3 a1 f0 5b 80 3b 74 ec 40 32 67 b5 1f 0f 42 d4 b3 b6 3b 1c dc de ec f9 d1 02 dc a1 f1 47 6f f4 d0 3d 30 4d 83 3f b4 f2 61 ff 29 db c9 24 93 d2 22 82 10 54 08 aa 94 c9 0b 45 ac f5 03 97 b0 db de 87 43 4f 3b c0 6d 99 3f 4c 8f 3f b2 70 d9 ff d0 72 4a 33 6b b6 6e de 38 75 e6 0c 63 4c 4a 69 8c a1 94 52 c6 f2 34 f1 2b e2 1e ae ff 92 92 fb 8b 52 d1 4b ee 3f 2c 12 0a Data Ascii: '^^B,Xb5ZQ&9~TPI7Nij,(HTYaURJ(9LAgwYk)<9/vqQG#wl]d[;t@2gB;Go=0M?a)$"TECO;m?L?prJ3kn8ucLJiR4+RK?,
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 99 f1 68 ba dc 1d 87 1e 09 0d 1c dc c6 1d c3 d6 66 93 e6 2c 00 20 c6 49 61 b5 f9 cc 8f 3e b9 76 62 09 20 2f d2 5c 4a 45 c8 6c 95 1c 75 dc ea ea ea b1 2f 7d f9 eb b7 6e ed fe d8 8f 7d 66 7e 69 fe 27 ff 7c 7d eb 56 ef d5 17 af b7 db 93 4a d5 9d 75 e0 9b 99 2e 78 64 e6 d2 d6 ee 57 bb 21 80 e0 7c 38 e8 f5 7b fd d6 7c 4b 22 5a 00 ad 14 32 6e 64 51 ce 6b 29 b9 ef 29 15 bd e4 be 02 01 d1 5a a3 0a 29 25 f3 28 20 de d1 85 85 31 16 86 e1 f7 5e 7b f5 2b bf fd a5 af fd ee ef be 7d f1 ea f6 d6 56 96 17 07 87 83 4b c1 65 84 12 aa 2c ec 0d 33 c6 14 17 d4 a1 84 33 46 28 f1 1c 57 2a a9 8d 96 4a 45 93 4c 6a 3d e8 0f 6f de dc 74 1c 11 06 7e 6b 69 71 69 61 61 79 7e be d1 a8 d7 ea 35 97 33 c7 af 82 eb 49 0d 1a d1 71 3c c7 73 b5 52 c6 68 b0 30 ad 64 33 07 9d e6 a6 25 de b8 ff Data Ascii: hf, Ia>vb /\JElu/}n}f~i'\|}VJu.xdW!\|8{\|K"Z2ndQk))Z)%( 1^{+}VKe,33F(W*JELj=ot~kiqiaay~53Iq<sRh0d3%
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 94 b9 ae eb 39 9c 32 9a 44 11 a7 e0 08 e6 50 ca d0 8e a3 64 67 bb ed d7 5b b5 a5 f5 97 5e fc f6 dc dc e2 ea fa 7a b3 e6 9e 3a bd 5e 6b 84 d1 b0 57 a4 13 b4 8a 32 08 03 cf 77 18 1a c9 05 25 94 68 ad 95 d6 5a 83 d1 00 08 14 71 df da 3e f8 d6 fb 39 71 78 0f f5 7c 2f c1 9e dd e1 f0 0f cc 5a bc 78 e7 6e 53 2c de f6 bd cf c6 e6 0f ff 14 52 1b 6b 7e f8 73 8f 34 9a 61 32 49 66 b2 e1 de e3 06 10 ad 45 ad ba 82 db 3f fb d3 7f ee d4 c9 d5 22 ed 50 4a e6 17 6b d7 2f 77 c6 e3 dc 0f f8 34 c1 11 71 3f 31 10 67 2e 6a 8f de 3f a1 34 89 13 37 08 d6 37 8e 2b 25 0f 7e 2b 48 9e 67 8c 51 c7 f5 b4 d6 7f 7c e9 9d aa f8 1d e7 29 15 bd e4 fb 0b 16 45 f1 fd be 87 92 92 3f 49 28 e3 2a 4f f7 ae bc d9 db db ad ad 9e 5c 3c fe 90 2a 32 6b 0c 00 58 6b 6b b5 da 1b 6f be f9 91 67 9f 96 45 Data Ascii: 92DPdg[^z:^kW2w%hZq>9qx\|/ZxnS,Rk~s4a2IfE?"PJk/w4q?1g.j?477+%~+HgQ\|)E?I(O\<2kXkkogE
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 5d ca 45 21 95 05 f4 83 90 20 c6 f1 24 cf 0a 6d 21 2d 8a bc c8 29 da 5a ad 32 df 6a 7a 2e 32 52 04 1e f3 5d a1 b4 49 b3 42 69 4d 09 61 94 cc 3a cf 0f 1f d1 1f fc 00 ef f9 fa 90 bb 32 db 67 76 43 40 c4 34 51 8d 86 b7 b2 5e 97 07 8a 6e 8d 46 44 2f 5c a5 ac 49 99 47 79 8d f1 80 f1 45 2e 16 8d 1e 29 95 11 42 ef 79 33 4c 10 ad f4 d5 cb 9d a2 d0 8c 51 3c b8 d8 61 86 1f 12 06 c8 2c 10 46 59 ad 51 ef 0d 87 ff f0 ff f3 0f 7e f5 1f ff 43 bf 51 79 e2 a1 93 2f fc d0 67 10 60 da 3c 0e 91 58 b0 56 6b e1 b8 77 ae 53 4a 4a ee 0b 4a af 7b c9 fd c6 b4 dc 4b 04 55 ee 79 30 ea 67 d1 a8 ba b0 72 64 ab b5 b5 7a fd d8 c6 c2 67 f9 47 76 bb 83 b7 de 39 9f c7 13 a0 44 4a 7d a5 33 fc 07 ff ea f3 7f e6 27 3e f7 a3 7f f9 af 7f f2 27 fe cc 77 bf f9 7b d7 2e 5c d8 6b ef 6d 77 c6 13 05 Data Ascii: ]E! $m!-)Z2jz.2R]IBiMa:2gvC@4Q^nFD/\IGyE.)By3LQ<a,FYQ~CQy/g`<XVkwSJJJ{KUy0grdzgGv9DJ}3'>'w{.\kmw
2024-05-27 22:43:32 UTC	1390	IN	Data Raw: 37 2f be 3e 1a 0e 16 4f 3e da 5c 3e 96 a7 f1 fe 94 14 c4 b0 52 b9 7c f1 c2 ef ff d6 97 e7 5a ad 2b ef be f3 0f fe c1 df bf d2 ee 4f c5 c9 e1 c4 e7 b4 1e 7a 8c d1 f1 68 34 48 0c 77 1c 97 e3 d2 d2 d2 89 d3 a7 8e ad 2e 11 02 69 3c 32 45 f1 fa 4b df 89 c6 93 95 b5 63 3b 7b 9d ed 4e 24 3c e7 f8 99 d3 8d b9 f9 5b 57 2e 39 82 7e ee 27 7e 7a 6d 75 e5 ea a5 f3 00 60 8a 6c d8 6d 27 71 9c e5 19 01 4d 99 7b fd ea 75 82 32 ac 35 b5 52 04 01 10 9a 73 0b 41 bd 79 ee 91 47 d6 d7 37 76 b7 b7 95 31 61 58 ab 54 2b 8c 53 0b 28 5c d7 0f 2b 41 10 12 04 a3 54 21 0b 63 15 a7 9c 52 06 d6 2a ad e2 68 a4 8a bc de 5a 44 44 02 c8 18 37 08 1c 51 08 5a a9 56 8d 51 db 3b 9d cd ed be 94 ca 75 39 21 f4 30 eb 7c 56 42 cd d1 76 31 77 70 e8 81 9f 5d 01 dc 76 d4 cf 34 98 cb 92 62 69 b5 f6 a9 Data Ascii: 7/>O>\>R\|Z+Ozh4Hw.i<2EKc;{N$<[W.9~'~zmu`lm'qM{u25RsAyG7v1aXT+S(\+AT!cR*hZDD7QZVQ;u9!0\|VBv1wp]v4bi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50106	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:32 UTC	631	OUT	GET /assets-products/img/glue-google-solid-logo.svg HTTP/1.1 Host: about.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/products/?tab=uh Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:32 UTC	865	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 1554 Date: Mon, 27 May 2024 22:43:32 GMT Expires: Mon, 27 May 2024 22:43:32 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:32 UTC	525	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 67 6f 6f 67 6c 65 2d 73 6f 6c 69 64 2d 6c 6f 67 6f 22 20 77 69 64 74 68 3d 22 37 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 34 20 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 66 36 33 36 38 22 20 64 3d 22 4d 39 2e 32 34 20 38 2e 31 39 76 32 2e 34 36 68 35 2e 38 38 63 2d 2e 31 38 20 31 2e 33 38 2d 2e 36 34 20 32 2e 33 39 2d 31 2e 33 34 20 33 2e 31 2d 2e 38 36 2e 38 36 2d 32 2e 32 20 31 2e 38 2d 34 2e 35 34 20 31 2e 38 2d 33 2e 36 32 20 30 2d 36 2e 34 35 2d 32 2e 39 32 2d 36 2e 34 35 2d 36 2e 35 34 73 32 2e 38 33 2d 36 2e 35 34 20 36 2e 34 35 2d 36 2e 35 34 63 31 2e 39 35 20 Data Ascii: <svg id="google-solid-logo" width="74" height="24" viewBox="0 0 74 24" xmlns="http://www.w3.org/2000/svg"><path fill="#5f6368" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95
2024-05-27 22:43:32 UTC	1029	IN	Data Raw: 2e 38 31 2d 35 2e 38 33 2d 35 2e 38 31 7a 6d 30 20 39 2e 33 33 63 2d 31 2e 37 36 20 30 2d 33 2e 32 38 2d 31 2e 34 35 2d 33 2e 32 38 2d 33 2e 35 32 20 30 2d 32 2e 30 39 20 31 2e 35 32 2d 33 2e 35 32 20 33 2e 32 38 2d 33 2e 35 32 73 33 2e 32 38 20 31 2e 34 33 20 33 2e 32 38 20 33 2e 35 32 63 30 20 32 2e 30 37 2d 31 2e 35 32 20 33 2e 35 32 2d 33 2e 32 38 20 33 2e 35 32 7a 6d 32 38 2e 35 38 2d 38 2e 30 33 68 2d 2e 30 39 63 2d 2e 35 37 2d 2e 36 38 2d 31 2e 36 37 2d 31 2e 33 2d 33 2e 30 36 2d 31 2e 33 43 34 37 2e 35 33 20 36 2e 31 39 20 34 35 20 38 2e 37 32 20 34 35 20 31 32 63 30 20 33 2e 32 36 20 32 2e 35 33 20 35 2e 38 31 20 35 2e 34 33 20 35 2e 38 31 20 31 2e 33 39 20 30 20 32 2e 34 39 2d 2e 36 32 20 33 2e 30 36 2d 31 2e 33 32 68 2e 30 39 76 2e 38 31 63 30 Data Ascii: .81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52zm28.58-8.03h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50105	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:32 UTC	618	OUT	GET /assets-products/img/glue-help.svg HTTP/1.1 Host: about.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/products/?tab=uh Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:32 UTC	864	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 401 Date: Mon, 27 May 2024 22:43:32 GMT Expires: Mon, 27 May 2024 22:43:32 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:32 UTC	401	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 68 65 6c 70 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 66 36 33 36 38 22 20 64 3d 22 4d 31 32 20 32 43 36 2e 34 38 20 32 20 32 20 36 2e 34 38 20 32 20 31 32 73 34 2e 34 38 20 31 30 20 31 30 20 31 30 20 31 30 2d 34 2e 34 38 20 31 30 2d 31 30 53 31 37 2e 35 32 20 32 20 31 32 20 32 7a 6d 31 20 31 37 68 2d 32 76 2d 32 68 32 76 32 7a 6d 32 2e 30 37 2d 37 2e 37 35 6c 2d 2e 39 2e 39 32 43 31 33 2e 34 35 20 31 32 2e 39 20 31 33 20 31 33 2e 35 20 31 33 20 31 35 68 2d 32 76 2d 2e 35 63 30 2d 31 2e 31 2e Data Ascii: <svg id="help" width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path fill="#5f6368" d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 17h-2v-2h2v2zm2.07-7.75l-.9.92C13.45 12.9 13 13.5 13 15h-2v-.5c0-1.1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50107	216.239.34.21	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:32 UTC	743	OUT	GET /api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube HTTP/1.1 Host: blog.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:32 UTC	2577	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding content-security-policy: object-src 'none'; connect-src 'self' cdn.ampproject.org .google.com storage.googleapis.com https://services.google.com/fb/submissions/thekeywordtest/ https://services.google.com/fb/submissions/0a65d7733e1f11ea9701614fc033d30c/ .gstatic.com gstatic.com .cdn.ampproject.org .doubleclick.net https://readaloud.googleapis.com/ .google-analytics.com; img-src data: blob:; base-uri 'none'; font-src 'self' themes.googleusercontent.com .gstatic.com https://fonts.gstatic.com storage.googleapis.com fonts.googleapis.com .cdn.ampproject.org; frame-src 'self' www.google.com .youtube.com youtube.com accounts.google.com .doubleclick.net apis.google.com optimize.google.com .google.com .cdn.ampproject.org https://www.gstatic.com/ https://www.youtube-nocookie.com/; default-src 'self' .gstatic.com storage.googleapis.com; require-trusted-types-for 'script'; style-src 'self' 'unsafe-inline' fonts.googleapis.com .gstatic.com storage.googleapis.com *.google.com cdn.ampproject.org; media-src 'se [TRUNCATED] content-language: en-us X-Cloud-Trace-Context: 80c529f299397a84f30fef2c506ffd13 Date: Mon, 27 May 2024 22:43:32 GMT Server: Google Frontend Content-Length: 17340 Connection: close
2024-05-27 22:43:32 UTC	726	IN	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 74 6f 74 61 6c 5f 63 6f 75 6e 74 22 3a 33 38 34 36 7d 2c 22 6e 65 78 74 5f 70 61 67 65 22 3a 22 2f 61 70 69 2f 76 32 2f 6c 61 74 65 73 74 3f 70 61 67 69 6e 61 74 65 3d 31 32 26 74 61 67 73 3d 61 6e 64 72 6f 69 64 25 32 43 61 6e 64 72 6f 69 64 2d 74 76 25 32 43 63 61 6c 65 6e 64 61 72 25 32 43 63 68 72 6f 6d 65 25 32 43 63 68 72 6f 6d 65 62 6f 6f 6b 73 25 32 43 63 68 72 6f 6d 65 63 61 73 74 25 32 43 63 6c 61 73 73 72 6f 6f 6d 25 32 43 64 6f 63 73 25 32 43 64 72 69 76 65 25 32 43 66 6f 72 6d 73 25 32 43 67 6d 61 69 6c 25 32 43 67 6f 6f 67 6c 65 2d 61 64 73 25 32 43 67 6f 6f 67 6c 65 2d 61 73 73 69 73 74 61 6e 74 25 32 43 67 6f 6f 67 6c 65 2d 63 6c 6f 75 64 25 32 43 67 6f 6f 67 6c 65 2d 64 75 6f 25 32 43 67 6f 6f 67 6c 65 2d 65 Data Ascii: {"meta":{"total_count":3846},"next_page":"/api/v2/latest?paginate=12&tags=android%2Candroid-tv%2Ccalendar%2Cchrome%2Cchromebooks%2Cchromecast%2Cclassroom%2Cdocs%2Cdrive%2Cforms%2Cgmail%2Cgoogle-ads%2Cgoogle-assistant%2Cgoogle-cloud%2Cgoogle-duo%2Cgoogle-e
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 35 2d 32 33 20 31 36 3a 30 30 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 32 33 5c 22 3e 4d 61 79 20 32 33 3c 2f 74 69 6d 65 3e 20 2f 20 41 6e 64 72 6f 69 64 20 65 6e 74 65 72 70 72 69 73 65 22 2c 22 73 6c 75 67 22 3a 22 67 6f 6f 67 6c 65 2d 61 69 2d 6f 6e 2d 61 6e 64 72 6f 69 64 2d 61 74 2d 77 6f 72 6b 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 70 72 6f 64 75 63 74 73 2f 61 6e 64 72 6f 69 64 2d 65 6e 74 65 72 70 72 69 73 65 2f 67 6f 6f 67 6c 65 2d 61 69 2d 6f 6e 2d 61 6e 64 72 6f 69 64 2d 61 74 2d 77 6f 72 6b 2f 22 2c 22 70 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 34 2d 30 35 2d 32 33 54 Data Ascii: 5-23 16:00:00+00:00\" aria-label=\"May 23\">May 23</time> / Android enterprise","slug":"google-ai-on-android-at-work","sitespace_render":"","full_url":"https://blog.google/products/android-enterprise/google-ai-on-android-at-work/","published":"2024-05-23T
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 65 74 69 6d 65 3d 5c 22 32 30 32 34 2d 30 35 2d 32 32 20 32 33 3a 35 39 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 32 32 5c 22 3e 4d 61 79 20 32 32 3c 2f 74 69 6d 65 3e 20 2f 20 50 75 62 6c 69 63 20 50 6f 6c 69 63 79 22 2c 22 73 6c 75 67 22 3a 22 65 70 69 63 73 2d 70 72 6f 70 6f 73 65 64 2d 72 65 6d 65 64 69 65 73 2d 61 72 65 2d 62 61 64 2d 66 6f 72 2d 65 76 65 72 79 6f 6e 65 2d 62 75 74 2d 65 70 69 63 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 6f 75 74 72 65 61 63 68 2d 69 6e 69 74 69 61 74 69 76 65 73 2f 70 75 62 6c 69 63 2d 70 6f 6c 69 63 79 2f 65 70 69 63 73 2d 70 72 6f 70 6f 73 65 64 Data Ascii: etime=\"2024-05-22 23:59:00+00:00\" aria-label=\"May 22\">May 22</time> / Public Policy","slug":"epics-proposed-remedies-are-bad-for-everyone-but-epic","sitespace_render":"","full_url":"https://blog.google/outreach-initiatives/public-policy/epics-proposed
2024-05-27 22:43:32 UTC	1280	IN	Data Raw: 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 32 32 5c 22 3e 4d 61 79 20 32 32 3c 2f 74 69 6d 65 3e 20 2f 20 44 6f 6f 64 6c 65 73 22 2c 22 73 6c 75 67 22 3a 22 64 6f 6f 64 6c 65 2d 66 6f 72 2d 67 6f 6f 67 6c 65 2d 32 30 32 34 2d 73 74 61 74 65 2d 74 65 72 72 69 74 6f 72 79 2d 77 69 6e 6e 65 72 73 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 70 72 6f 64 75 63 74 73 2f 73 65 61 72 63 68 2f 64 6f 6f 64 6c 65 2d 66 6f 72 2d 67 6f 6f 67 6c 65 2d 32 30 32 34 2d 73 74 61 74 65 2d 74 65 72 72 69 74 6f 72 79 2d 77 69 6e 6e 65 72 73 2f 22 2c 22 70 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 34 2d 30 35 2d 32 32 54 31 Data Ascii: 00:00\" aria-label=\"May 22\">May 22</time> / Doodles","slug":"doodle-for-google-2024-state-territory-winners","sitespace_render":"","full_url":"https://blog.google/products/search/doodle-for-google-2024-state-territory-winners/","published":"2024-05-22T1
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 3a 35 2c 22 65 79 65 62 72 6f 77 22 3a 22 3c 74 69 6d 65 20 63 6c 61 73 73 3d 5c 22 75 6e 69 2d 74 69 6d 65 73 69 6e 63 65 5c 22 20 64 61 74 65 74 69 6d 65 3d 5c 22 32 30 32 34 2d 30 35 2d 32 32 20 31 34 3a 30 30 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 32 32 5c 22 3e 4d 61 79 20 32 32 3c 2f 74 69 6d 65 3e 20 2f 20 47 6f 6f 67 6c 65 20 50 6c 61 79 22 2c 22 73 6c 75 67 22 3a 22 67 6f 6f 67 6c 65 2d 70 6c 61 79 2d 70 6f 69 6e 74 73 2d 69 73 2d 6c 65 76 65 6c 69 6e 67 2d 75 70 2d 74 68 65 2d 72 65 77 61 72 64 73 2d 67 61 6d 65 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 70 72 6f 64 75 63 74 Data Ascii: :5,"eyebrow":"<time class=\"uni-timesince\" datetime=\"2024-05-22 14:00:00+00:00\" aria-label=\"May 22\">May 22</time> / Google Play","slug":"google-play-points-is-leveling-up-the-rewards-game","sitespace_render":"","full_url":"https://blog.google/product
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 6c 69 73 68 65 64 22 3a 35 2c 22 65 79 65 62 72 6f 77 22 3a 22 3c 74 69 6d 65 20 63 6c 61 73 73 3d 5c 22 75 6e 69 2d 74 69 6d 65 73 69 6e 63 65 5c 22 20 64 61 74 65 74 69 6d 65 3d 5c 22 32 30 32 34 2d 30 35 2d 32 32 20 31 30 3a 30 30 3a 30 30 2b 30 30 3a 30 30 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 32 32 5c 22 3e 4d 61 79 20 32 32 3c 2f 74 69 6d 65 3e 20 2f 20 47 6f 6f 67 6c 65 20 50 61 79 22 2c 22 73 6c 75 67 22 3a 22 67 6f 6f 67 6c 65 2d 70 61 79 2d 6f 6e 6c 69 6e 65 2d 63 68 65 63 6b 6f 75 74 2d 66 65 61 74 75 72 65 73 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 70 72 6f 64 75 63 74 73 2f 67 6f 6f 67 6c 65 2d Data Ascii: lished":5,"eyebrow":"<time class=\"uni-timesince\" datetime=\"2024-05-22 10:00:00+00:00\" aria-label=\"May 22\">May 22</time> / Google Pay","slug":"google-pay-online-checkout-features","sitespace_render":"","full_url":"https://blog.google/products/google-
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 3c 2f 74 69 6d 65 3e 20 2f 20 53 68 6f 70 70 69 6e 67 22 2c 22 73 6c 75 67 22 3a 22 67 6f 6f 67 6c 65 2d 67 65 6e 65 72 61 74 69 76 65 2d 61 69 2d 6d 61 72 6b 65 74 69 6e 67 2d 66 65 61 74 75 72 65 73 2d 6d 61 79 2d 32 30 32 34 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 70 72 6f 64 75 63 74 73 2f 73 68 6f 70 70 69 6e 67 2f 67 6f 6f 67 6c 65 2d 67 65 6e 65 72 61 74 69 76 65 2d 61 69 2d 6d 61 72 6b 65 74 69 6e 67 2d 66 65 61 74 75 72 65 73 2d 6d 61 79 2d 32 30 32 34 2f 22 2c 22 70 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 34 2d 30 35 2d 32 31 54 31 35 3a 35 38 3a 30 30 5a 22 2c 22 70 75 62 6c 69 73 68 65 64 5f 72 65 61 64 61 62 6c 65 Data Ascii: </time> / Shopping","slug":"google-generative-ai-marketing-features-may-2024","sitespace_render":"","full_url":"https://blog.google/products/shopping/google-generative-ai-marketing-features-may-2024/","published":"2024-05-21T15:58:00Z","published_readable
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 32 31 3c 2f 74 69 6d 65 3e 20 2f 20 47 6f 6f 67 6c 65 20 41 64 73 20 26 20 43 6f 6d 6d 65 72 63 65 22 2c 22 73 6c 75 67 22 3a 22 61 69 2d 63 72 65 61 74 69 76 69 74 79 2d 67 6f 6f 67 6c 65 2d 6d 61 72 6b 65 74 69 6e 67 2d 6c 69 76 65 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 47 6f 6f 67 6c 65 20 41 64 73 20 26 20 43 6f 6d 6d 65 72 63 65 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 70 72 6f 64 75 63 74 73 2f 61 64 73 2d 63 6f 6d 6d 65 72 63 65 2f 61 69 2d 63 72 65 61 74 69 76 69 74 79 2d 67 6f 6f 67 6c 65 2d 6d 61 72 6b 65 74 69 6e 67 2d 6c 69 76 65 2f 22 2c 22 70 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 34 2d 30 35 2d 32 31 54 31 35 3a 35 38 3a 30 30 5a 22 2c 22 70 75 62 6c Data Ascii: 21</time> / Google Ads & Commerce","slug":"ai-creativity-google-marketing-live","sitespace_render":"Google Ads & Commerce","full_url":"https://blog.google/products/ads-commerce/ai-creativity-google-marketing-live/","published":"2024-05-21T15:58:00Z","publ
2024-05-27 22:43:32 UTC	1408	IN	Data Raw: 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 31 36 5c 22 3e 4d 61 79 20 31 36 3c 2f 74 69 6d 65 3e 20 2f 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 22 2c 22 73 6c 75 67 22 3a 22 61 69 2d 61 63 63 65 73 73 69 62 69 6c 69 74 79 2d 75 70 64 61 74 65 2d 67 61 61 64 2d 32 30 32 34 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 6f 75 74 72 65 61 63 68 2d 69 6e 69 74 69 61 74 69 76 65 73 2f 61 63 63 65 73 73 69 62 69 6c 69 74 79 2f 61 69 2d 61 63 63 65 73 73 69 62 69 6c 69 74 79 2d 75 70 64 61 74 65 2d 67 61 61 64 2d 32 30 32 34 2f 22 2c 22 70 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 34 2d 30 35 2d 31 36 54 31 36 3a 30 30 3a 30 30 Data Ascii: " aria-label=\"May 16\">May 16</time> / Accessibility","slug":"ai-accessibility-update-gaad-2024","sitespace_render":"","full_url":"https://blog.google/outreach-initiatives/accessibility/ai-accessibility-update-gaad-2024/","published":"2024-05-16T16:00:00
2024-05-27 22:43:32 UTC	1152	IN	Data Raw: 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4d 61 79 20 31 36 5c 22 3e 4d 61 79 20 31 36 3c 2f 74 69 6d 65 3e 20 2f 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 22 2c 22 73 6c 75 67 22 3a 22 67 61 61 64 2d 32 30 32 34 2d 63 6f 6d 6d 75 6e 69 74 79 2d 70 61 72 74 6e 65 72 73 68 69 70 73 22 2c 22 73 69 74 65 73 70 61 63 65 5f 72 65 6e 64 65 72 22 3a 22 22 2c 22 66 75 6c 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 67 6f 6f 67 6c 65 2f 6f 75 74 72 65 61 63 68 2d 69 6e 69 74 69 61 74 69 76 65 73 2f 61 63 63 65 73 73 69 62 69 6c 69 74 79 2f 67 61 61 64 2d 32 30 32 34 2d 63 6f 6d 6d 75 6e 69 74 79 2d 70 61 72 74 6e 65 72 73 68 69 70 73 2f 22 2c 22 70 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 34 2d 30 35 2d 31 36 54 31 36 3a 30 30 3a 30 30 5a 22 Data Ascii: " aria-label=\"May 16\">May 16</time> / Accessibility","slug":"gaad-2024-community-partnerships","sitespace_render":"","full_url":"https://blog.google/outreach-initiatives/accessibility/gaad-2024-community-partnerships/","published":"2024-05-16T16:00:00Z"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50104	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	800	OUT	GET /MXe6LXpT_1IP98ElixZruA0GQf1A9i-4bfeCtry1-Gej5yWbCpSfNS0HX9JEJiPamMsW5bmJ6BlU_H4SzxLeAI0EWlkwFSA-DU5MCdW4k70Twm49Qzw?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:33 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 333997 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:15:40 GMT Expires: Tue, 28 May 2024 22:15:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 1673 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 55 08 02 00 00 00 16 b1 c0 74 00 05 18 74 49 44 41 54 78 9c 4c fd 49 93 2c 49 92 26 88 7d cc 2c 22 aa 6a 66 be bd 2d b6 8c dc b3 f6 ea ea e9 6d 66 00 cc 05 20 1a 9c 71 c4 ef c1 1f c0 01 7f 03 07 1c 41 a0 06 40 c0 50 63 68 1a 33 e8 ae b5 33 ab 2a 23 32 22 32 22 de e2 ab 6d aa 22 c2 fc e1 a0 1e d5 e3 f4 88 9e d3 23 7f e4 66 6a b2 30 7f 1b cb ff e1 ff f4 7f ac ad ef 4a be 28 50 1c d1 de f1 70 9f 04 db 9c b2 59 c9 a3 95 24 ec 21 11 00 44 50 32 d3 20 9a 60 c9 d2 24 36 c0 06 71 05 9b 2f 0f 11 67 aa 02 00 4c 54 81 04 74 ef 75 39 3f 1d ce f7 0f 87 77 ef 1e de ef 97 65 59 78 98 bd f7 d8 14 0c c9 19 9a 61 8a 24 9a 53 56 24 89 92 c4 46 53 6d 58 3a 1b 29 42 d3 50 15 81 33 db b0 dd 7c 34 a6 2b 92 59 Data Ascii: PNGIHDRUttIDATxLI,I&},"jf-mf qA@Pch33*#2"2"m"#fj0J(PpY$!DP2 `$6q/gLTtu9?weYxa$SV$FSmX:)BP3\|4+Y
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 71 b7 c9 c9 54 cc 76 e3 94 72 4a 86 6c 79 ca e9 e6 ca c6 b1 08 a4 64 dd 5d 6e 2e 5f 5d 6f 5f 5e 0f 9b 9d 49 12 4d 0a 88 65 53 11 21 40 02 42 85 10 84 58 46 ca 92 0a 00 90 aa 4a 32 e6 f9 7c ff fd fd 97 bf f9 fd 3f dc de ef dd cb b4 c8 b0 3f 1e 93 4a 32 39 9d e6 62 b9 2b 72 19 76 97 9b dc ce 17 56 5f ff e4 f3 cb cf 7e 95 92 ed 78 2b fd 43 e8 45 bc fa 0b 6c 5f e9 fe 77 e9 f1 1f 35 0f 6e d3 32 fc a8 4d af ed fc 01 bf fd bf c7 c3 af 87 8f ff 5c 3f f9 17 f5 78 c2 d3 b7 b6 19 54 c7 2e 85 2f 7f 56 4a 2a 8f 5f 60 ff 3b bd fe dc 5f ff 0b e6 09 c7 0f d3 d3 df 20 9e 9a be ea 3e 85 66 43 8d db df 78 6b f8 f4 5f fa f0 8a cb 41 6f ff 32 bd ff f7 fa e9 ff a2 5d fd 69 f5 d0 db bf 4b ed bd a6 e4 7a d9 ec 86 d3 2e c1 b5 1e 96 fd ad e4 29 7d f4 87 0c f4 af ff 27 de fe ad 7d Data Ascii: qTvrJlyd]n._]o_^IMeS!@BXFJ2\|??J29b+rvV_~x+CEl_w5n2M\?xT./VJ*_`;_ >fCxk_Ao2]iKz.)}'}
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 11 36 a1 84 48 f4 a3 72 f0 e4 64 74 3f f6 3e 47 90 0c 08 2a 6b 6b a7 c1 da a0 30 14 d3 8d 52 a3 cf d1 bc c5 00 59 5c d0 bb 20 51 44 a1 22 a9 3b a4 77 42 5a 95 0e 9f 8b f4 9c 16 b5 2e 22 42 91 48 12 03 b8 a3 25 b3 5c b0 cd dc a8 6c c4 ae 18 ad b4 7d 2c 35 6a f7 de 9a 5b e8 94 ca 50 0a f4 ea 86 2f 7f 5c 76 6f 06 4b 10 52 44 45 03 50 08 05 0a 08 04 a0 62 bd 10 0c 2a 59 34 bc 31 a2 f5 45 bd 89 57 c6 10 6a dd e9 75 49 a5 84 c0 84 79 18 6d 73 99 2e 5e 6b 9d 85 ae a9 d8 30 f6 5e 11 8b 9f 1f a3 57 2c 27 f6 8a f0 e8 73 44 63 5f 28 19 62 54 f3 de d5 c4 52 0a 6f b0 22 66 08 47 32 65 51 88 0e a5 75 9a 99 16 53 53 00 e2 20 34 18 e1 1e ec a6 05 de 95 3d e7 21 e5 9a a6 cd 38 a6 3b ca c2 38 b7 7e d8 cf c7 ba 38 35 65 cb b0 62 36 4e 69 37 5d 0c c3 98 95 89 01 77 31 55 05 Data Ascii: 6Hrdt?>Gkk0RY\ QD";wBZ."BH%\l},5j[P/\voKRDEPbY41EWjuIyms.^k0^W,'sDc_(bTRo"fG2eQuSS 4=!8;8~85eb6Ni7]w1U
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 94 34 0e 29 8f 42 11 09 97 50 68 10 64 98 29 44 55 4c 4c 41 67 a3 8a 50 c5 45 14 26 1a ec 0b 97 d9 4f e7 f9 e9 d4 96 1e 11 b5 b7 b2 c9 43 2e e7 e5 3c 1f 9e 48 87 a4 50 cf c3 06 6a 10 e4 71 93 da 62 46 4d 83 c3 a4 8c e2 17 ad 2d 78 f8 46 af 3e 0d b5 7a ff 95 1c de c9 9b 9f c9 72 d2 61 97 2f 6e 72 ed 3e 3f 76 8a be fa 05 74 f4 2f ff 5f f9 fc 98 5f 7e 0c 32 ea 59 6c d4 f6 01 87 af 71 f1 4b 99 5e 04 d0 97 53 69 07 2d 1b a6 4b 89 c6 5c ec e3 7f cd c7 6f ea e3 87 3a 7c ce dd c6 4e 1f fc f4 7d fb f0 c1 c6 9d 5e fd 58 da c9 1f be e4 fd 37 a8 8f f9 97 ff 5b df 7d ca 6f ff 26 4e df d8 70 1d 72 b9 bc fd 7b a6 cb f4 fa e7 38 df 2d bf f9 b7 52 2e c6 8f 7f 52 cf 4f fd ee cb 74 93 c4 62 a6 33 54 7c 79 6c 6d 81 26 07 4f fd 9c 58 c0 4d a2 61 c5 d2 d8 dc 17 84 79 f4 de 4e Data Ascii: 4)BPhd)DULLAgPE&OC.<HPjqbFM-xF>zra/nr>?vt/__~2YlqK^Si-K\o:\|N}^X7[}o&Npr{8-R.ROtb3T\|ylm&OXMayN
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 02 40 45 38 6a 5a c2 bf 8f b8 b2 98 24 8d 62 89 29 8b 98 85 93 44 af ba 1b fd ea f3 b4 7b 93 d4 84 41 7b 2e f5 85 14 91 00 41 10 50 02 60 90 b1 4a 07 a0 3d e2 74 ba f7 f7 ff 38 7f f7 cd 7e 5f c3 03 51 f3 30 f9 38 25 1b 90 65 59 ce 4b af c9 87 38 3d e8 ee 0d 18 be 9c bc 1e 7c 39 c4 7c f0 f3 81 74 0e d7 d1 1b ce 77 c8 97 11 e6 4e 84 cf c7 fb a5 55 00 3d 3c e5 9c 93 12 90 9c c5 b2 44 c4 ca 10 b5 46 91 20 7a 6d e1 51 22 97 41 00 b2 14 51 53 42 14 50 84 bb 18 d3 e6 42 a6 4b 19 36 53 af d3 f0 45 d6 a4 a8 62 29 69 ca 83 6d 37 57 c3 30 8e 82 92 75 c8 83 9a 41 85 b1 72 f2 49 05 42 57 91 5c 92 a6 44 8a b7 2a d1 60 2a a5 48 4a 0a aa 20 8d 5b 99 ae a2 8c 48 01 56 f6 ce 08 f4 80 9c 55 9b aa 51 6f 80 2c a0 68 06 07 91 14 e5 82 92 e2 fc a4 e7 7b 6f 07 ba 8b a8 95 01 aa Data Ascii: @E8jZ$b)D{A{.AP`J=t8~_Q08%eYK8=\|9\|twNU=<DF zmQ"AQSBPBK6SEb)im7W0uArIBW\D`HJ [HVUQo,h{o
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 37 48 e3 fc ee 37 50 19 37 17 71 78 8f fd f7 5a 86 f0 20 a2 6c c6 29 e9 78 fa 1d bc c9 f6 55 cb 1b f1 05 be 84 8d 71 7a 20 8b 7f f4 86 b4 38 de fa dd f7 7c fa 32 ff ec 8f ea f9 ec ef fe ca 1e fe 2a 0d 9b 3e 4c 00 d2 f6 66 e4 43 c2 af 42 52 47 68 b9 d1 32 e4 e4 68 df fa fd 3f e6 ab 3f d0 37 7f da 0e ef fd bb 7f b7 19 b7 76 f1 a3 2a 8a e5 29 6d 2e a7 ab 7f 83 b4 f5 65 6f 9b 2b 1b 8a d4 94 08 28 44 11 2e 80 24 a8 76 8f c5 7b d4 2a 27 4e f4 31 4e a2 e2 bd 7a b8 78 cc f5 7c 7f 38 dc ef f7 ad 63 c8 a3 98 95 a4 25 19 2d c4 53 6d 3e cf 4b c9 56 13 19 44 f7 00 a2 83 70 86 9a 14 58 76 5b 52 aa a6 0b 28 06 1d 87 69 ca bb 52 b6 66 a3 99 90 dd e9 94 a5 aa 6b 60 24 dd 6b 43 2c d9 55 d3 50 36 39 8d 39 67 35 cd 29 65 9b d4 26 d5 a2 9a 4c 12 a0 26 06 cd c9 86 a4 0a a1 0a Data Ascii: 7H7P7qxZ l)xUqz 8\|2>LfCBRGh2h??7v)m.eo+(D.$v{*'N1Nzx\|8c%-Sm>KVDpXv[R(iRfk`$kC,UP699g5)e&L&
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: d3 f1 e1 2e b7 b3 8d 57 6a 29 e5 01 59 b0 1c b8 ec d9 2b 6a 45 3d 87 f7 08 90 46 f6 94 ad e4 9c ca 90 4b 16 d3 15 cd 0e 11 78 ac c7 db 8a fb 05 43 54 4a 29 de dd cd 21 72 3e cd 8f a7 7d b0 5f e9 95 b5 1e 22 69 d8 98 0e 48 da 3d f4 f4 04 95 d8 3f 0a 8a e6 61 2c 16 0e 27 45 92 a9 98 c0 52 b6 3c ac 86 07 70 55 47 8b 6a 12 84 2a 52 32 2d 83 e6 62 ba 82 ef 80 88 d2 4c c2 4c 92 21 e5 8c 94 90 93 98 c1 14 a2 21 22 4e 84 53 dc 44 29 02 20 5a 8f e5 09 6a 32 ec fa f4 06 cb 83 2c 8f 04 68 25 8f 93 9a 4a 4a 9a 06 5a 26 4d 48 d2 85 8d 5c af e2 75 bd 3f 33 c0 5c af 25 42 19 21 14 11 c0 84 11 0c b8 af 78 ef 33 4b 46 97 88 88 75 d7 98 e4 51 53 51 27 89 76 b8 63 5b 42 02 75 d9 bc 7c 91 b7 97 12 4e 35 d0 f9 f4 7d 7b ff 6b 61 0b 24 1d 77 b6 7b 13 f5 c4 db bf 89 bb af 42 b7 Data Ascii: .Wj)Y+jE=FKxCTJ)!r>}_"iH=?a,'ER<pUGj*R2-bLL!!"NSD) Zj2,h%JJZ&MH\u?3\%B!x3KFuQSQ'vc[Bu\|N5}{ka$w{B
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: e5 4f ba 3b eb a3 1c bf 91 fd af f3 f6 5a 5e ff 99 53 f4 fd 5f da f2 0d 2e 7e da 6b 0d ce 7a f3 b9 b5 7b fe fe af 61 a2 2f ff c8 03 68 fb 78 fa 86 8f 5f e8 d5 1f b4 a6 fe f6 b7 99 47 91 94 d8 8e 0a 40 95 00 cd 94 c3 98 36 2c bd d5 b3 b7 ec 8d 7d 96 f3 5c 43 b7 c8 57 d3 24 a5 d8 8b 8b 9b 21 0f 59 b1 c9 db 64 1b 55 6d d1 1c 5d a1 49 90 c4 34 4d 82 22 6a 22 09 ec 50 b0 04 a9 08 b1 a4 10 05 d2 ea 19 52 49 a2 2b 76 07 00 22 1a 0c b0 13 42 0f a6 d0 ec d1 67 e9 55 e0 c9 8a 89 5a 1a ed 79 87 65 35 13 a8 68 32 33 11 55 44 82 9a 29 49 61 a8 a6 b5 e1 45 00 11 00 6c d5 43 68 16 91 00 24 1c de 95 a4 95 b8 bc 71 0c 1e ee ad b9 57 e9 6d 7b 3e 3b 64 99 97 94 11 11 60 48 91 de d3 b9 aa 16 a4 84 68 11 14 a8 d3 bd 7b d0 19 f4 90 d8 4c c3 f8 d1 24 af 54 ae 5f cb f6 c5 da ec Data Ascii: O;Z^S_.~kz{a/hx_G@6,}\CW$!YdUm]I4M"j"PRI+v"BgUZye5h23UD)IaElCh$qWm{>;d`Hh{L$T_
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 18 48 d0 c3 55 c5 54 2d 0d 29 ab e5 01 79 30 13 43 33 f7 ce ae 28 22 06 13 a8 5b d9 e8 78 25 39 2b e6 95 bc a7 18 49 69 27 f4 43 f4 c5 01 49 5b 68 59 35 a5 e8 1d a0 95 09 36 d0 97 98 9f 80 ae bb 2d ad 98 98 88 90 b1 d6 b4 00 c8 1e 0c 48 92 b5 07 83 92 7d 6d cf 56 9a 17 f4 68 2e c3 a4 de 3d 66 a4 2c ab 71 cc 2c 9e b5 11 29 32 a5 71 35 e7 4b 40 45 21 26 6a 96 10 c3 80 21 99 95 79 5f 11 cc e3 46 a2 f7 a7 f7 76 f1 26 5d 7d 66 d3 55 3f dd b5 c3 d3 fe d7 7f 73 fc fe f7 af fe cd bf 1e df 7c de 8e 8f 87 f7 1f 4e 8f 75 7b fb bd 9e 3e 1a ae 2f 3a 4e f3 fd dd 7c 7f 66 b7 e6 91 7a 8f e5 88 f3 b1 bc fe 89 4e af 55 26 46 e7 50 74 fc 48 b8 d4 f9 7f 7c 7c d8 bf fa d3 1f e7 ed 46 ea a3 2e 07 b4 a3 2c b7 8a f3 6e b7 2d 25 15 a5 5a d6 94 a3 cd 1a 5d 54 e9 2a 69 15 cb ba 18 Data Ascii: HUT-)y0C3("[x%9+Ii'CI[hY56-H}mVh.=f,q,)2q5K@E!&j!y_Fv&]}fU?s\|Nu{>/:N\|fzNU&FPtH\|\|F.,n-%Z]T*i
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 82 fe 4c e0 3c cb 78 88 15 c8 57 ac 37 da 4a 44 3e 7f cd 67 90 90 14 fc 81 09 c3 2a 09 5b 0d f0 ab 80 45 56 65 ba 2c 4d 40 8f 55 b3 b2 d2 c1 34 15 5a 82 2a 55 62 18 b0 b9 48 c9 d8 4f cc da 3d a5 74 02 a5 2f 33 62 c6 32 c7 5c 7b ad bd f5 4e 7a eb bb 9b ad be 1c fb 26 e9 66 b2 3c a8 6a f7 a5 f7 63 eb 8f ad 1f a3 2d d1 5d b4 02 55 ba 3f eb 66 18 5c 85 23 10 03 4c 90 c5 15 6d ca 81 44 a3 71 bd 26 7c 6e 5c 28 0e 34 44 90 4e 36 b2 c1 83 0c 95 39 eb 71 bd 49 33 ab c0 85 6a ae c6 a2 1c 35 92 63 4c 34 a8 08 46 61 01 94 21 10 fa b9 c6 f9 7d 68 ae 3d e2 7c 3c df ef e7 a6 63 ef 29 3f ca ab 6b 49 97 10 80 f1 03 4a 80 7f 82 58 f0 fc 31 08 c9 67 6d 15 25 80 98 1f 71 ff 5b ec df 53 95 6d ee b5 a2 af 51 0b be 9e 2d ab 4a 16 10 78 13 77 0d 8f 70 74 02 c1 b2 85 99 b6 56 72 Data Ascii: L<xW7JD>g[EVe,M@U4ZUbHO=t/3b2\{Nz&f<jc-]U?f\#LmDq&\|n\(4DN69qI3j5cL4Fa!}h=\|<c)?kIJX1gm%q[SmQ-JxwptVr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50109	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	568	OUT	GET /FW12KWakQzfFfGUf5yZghWb6h6-6dNMOHBolWF3nYWgOQdsiTeL_BS_PSvWy_1Y4d1OoZuzXpT6ihCY2z0iT2xjEQMMIoMsh7bbmd001ICguMO4kLhA?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:33 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 330224 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:41:59 GMT Expires: Tue, 28 May 2024 20:41:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 7294 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 57 08 02 00 00 00 5b 79 61 7f 00 00 0c 65 69 43 43 50 69 63 63 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 90 84 12 88 80 94 d0 9b 20 d2 8b 94 10 5a 0c 02 52 05 1b 21 09 24 94 18 13 82 8a 0d cb a2 82 6b 17 51 ac e8 aa 88 a2 ab 2b 20 8b 8a d8 cb a2 d8 fb 62 41 45 59 17 75 51 14 95 37 21 01 5d f7 95 ef 9d ef 9b 3b 7f ce 9c f9 4f c9 cc bd 33 00 e8 f4 f0 65 b2 5c 54 17 80 3c 69 be 3c 3e 32 94 35 36 35 8d 45 7a 0a 50 a0 0b f4 81 39 a0 f3 05 0a 19 3b 2e 2e 1a 40 19 e8 ff 2e ef 6e 00 44 d5 5f 75 51 71 fd 73 fc bf 8a be 50 a4 10 00 80 8c 87 38 43 a8 10 e4 41 dc 04 00 be 41 20 93 e7 03 40 54 e9 ad a7 e6 cb 54 b8 08 62 03 39 0c 10 e2 d5 2a 9c a5 c6 bb 54 38 43 8d 1b fb 6d 12 e3 39 10 5f 06 40 8b Data Ascii: PNGIHDRW[yaeiCCPiccHWXS[ ZR!$kQ+ bAEYuQ7!];O3e\T<i<>2565EzP9;..@.nD_uQqsP8CAA @TTb9*T8Cm9_@
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 5e 83 2c aa 5a 7f 5b 1f 75 ac 19 83 f5 e6 0c 8e 7c ef 9f f3 4d f5 85 b0 e7 7d 6f 89 2d c2 0e 62 67 b0 e3 d8 39 ac 11 ab 03 2c ec 18 56 8f 5d c4 8e a8 f0 e0 ea 7a d2 bf ba 06 bc c5 f7 c7 93 03 79 24 ff f0 c7 d7 f8 54 55 52 e1 56 ed d6 e1 f6 49 3d 96 2f 9a 96 af da 78 9c c9 b2 e9 72 49 96 38 9f c5 86 5f 07 11 8b 2b 15 b8 0e 63 b9 bb b9 bb 03 a0 fa d6 a8 5f 5f 6f 99 fd df 10 84 79 fe ab 6e be 25 00 81 d3 fb fa fa 1a bf ea 78 f0 9d 7b f0 08 dc fe 77 be ea ec db e1 6b e2 3c 00 67 d7 0a 94 f2 02 b5 0e 57 3d 08 f0 2d a1 03 77 9a 31 fc 8e 59 03 07 98 8f 3b f0 06 01 20 04 84 83 51 20 16 24 82 54 30 11 56 59 0c d7 b9 1c 4c 05 33 c1 5c 50 0c 4a c1 72 b0 06 ac 07 9b c1 36 b0 0b ec 05 07 40 1d 68 04 c7 c1 69 70 01 5c 06 d7 c1 5d b8 7a da c1 4b d0 05 de 81 5e 04 41 48 Data Ascii: ^,Z[u\|M}o-bg9,V]zy$TURVI=/xrI8_+c__oyn%x{wk<gW=-w1Y; Q $T0VYL3\PJr6@hip\]zK^AH
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 7d 4a 58 ca ca 94 b6 b1 c3 c7 ce 1a 7b 21 d5 24 55 92 5a 9f 46 4a 4b 4e db 91 d6 3d 2e 7c dc 9a 71 ed e3 bd c6 17 8f bf 31 c1 7e c2 b4 09 e7 26 9a 4c cc 9d 78 64 92 ce 24 fe a4 83 e9 84 f4 94 f4 dd e9 9f f8 b1 fc 4a 7e 77 06 37 63 43 46 97 80 23 58 2b 78 29 0c 11 ae 16 76 88 02 45 2b 45 cf 32 03 33 57 66 3e cf 0a cc 5a 95 d5 21 0e 16 97 89 3b 25 1c c9 7a c9 eb ec a8 ec cd d9 ef 73 62 73 76 e6 f4 e5 a6 e4 ee cb d3 ca 4b cf 3b 2c d5 97 e6 48 4f 4e 36 9f 3c 6d 72 ab cc 59 56 2c 6b 9b e2 3f 65 cd 94 2e 39 4f be 43 81 28 26 28 ea f3 0d e0 a1 fe a2 d2 41 f9 83 f2 61 41 50 41 45 41 cf d4 e4 a9 07 a7 e9 4d 93 4e bb 38 dd 69 fa e2 e9 cf 0a 23 0a 7f 9a 81 cf 10 cc 68 9e 69 39 73 ee cc 87 b3 d8 b3 b6 ce 46 66 67 cc 6e 9e 63 3d 67 c1 9c f6 a2 c8 a2 5d 73 29 73 73 e6 Data Ascii: }JX{!$UZFJKN=.\|q1~&Lxd$J~w7cCF#X+x)vE+E23Wf>Z!;%zsbsvK;,HON6<mrYV,k?e.9OC(&(AaAPAEAMN8i#hi9sFfgnc=g]s)ss
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: e7 ec 39 4b 8c 24 e2 ee da 26 b8 51 08 24 b2 6a 0e c0 77 4e 3e 39 4c b3 e7 0c 00 4c 12 2b 5f 3d f3 3b 76 a9 aa e5 04 1f 7d 91 99 39 c6 2b cf 5c 9d 52 d7 94 61 0a 22 8e b1 d8 e3 db 93 6f ae a9 85 3b 00 62 5e b5 56 66 1e 59 eb 3b f6 8e a5 ec 9a af bc 71 22 92 aa 02 d1 95 46 f4 dd f7 75 a5 59 b9 19 cc 4c 95 45 28 48 d9 a1 6b df 37 55 57 e3 18 e8 8a 01 7c 8f db ff ae 1d 7b e5 39 28 f3 a3 2a 31 38 31 01 ae d9 52 26 11 8e 61 34 31 6b e7 9b 69 4a 70 07 33 c7 48 04 37 b7 36 51 10 96 32 3c b3 94 dd 8c 25 70 10 27 22 77 4d c9 cd 88 59 62 74 80 56 ed cc 4d 01 30 c8 e1 10 f9 ae 01 fe 9d c7 3b e6 ea ef ba af b5 e3 bb 8d e8 ca f7 df f1 02 6a 96 5a 07 88 59 42 00 91 13 7d cf 0b fd 03 47 45 40 f8 9e a7 2e 0f d2 a0 49 4e 44 22 ec 8a b3 67 43 6a fc fc 79 5c bc 64 97 2e a6 Data Ascii: 9K$&Q$jwN>9LL+_=;v}9+\Ra"o;b^VfY;q"FuYLE(Hk7UW\|{9(*181R&a41kiJp3H76Q2<%p'"wMYbtVM0;jZYB}GE@.IND"gCjy\d.
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 9a 84 5a 0f ce 00 79 08 6d 64 71 04 f5 00 4f 42 29 b8 3b c4 40 0e b8 17 a8 7a 87 1f 5d db 1c 05 67 d7 90 97 88 be 63 e7 94 57 44 41 e8 e2 99 f3 d2 6f 69 6c 62 7a fb 0e 35 33 02 3b 8a ef 02 98 cd d8 85 9c e1 80 01 19 5a 33 02 cd cf 5d 1c 37 ea 45 69 23 37 39 09 19 13 9b 6a 09 62 53 db 76 ea 9a 00 22 ca 29 95 01 30 91 9a 31 51 2e fb d8 dd 55 cb af 0a 11 89 48 99 d2 9c dd 5d 73 62 16 26 10 60 c5 5b b8 07 50 ca 49 03 13 79 db b4 e3 75 6f 98 f3 65 84 0d 1f 7f 60 ef 0f fe a3 aa 33 a9 8d 6d be f9 9a aa d7 3b fd e2 e1 d0 a4 d8 ab ce 9d 3d f3 d6 5f 7f 59 2e 5e e8 c2 09 48 60 35 23 cb 4c 04 20 4a c8 6d 4b ab 29 a6 20 94 79 33 77 d5 4c 12 88 48 73 4e a6 a6 ca c4 44 18 33 76 0e 1e ab e3 4d 0b f8 99 3f 78 68 fa b5 b7 b6 3f f8 7d 13 bb b6 ba 78 95 5c 03 f7 eb 50 39 3a Data Ascii: ZymdqOB);@z]gcWDAoilbz53;Z3]7Ei#79jbSv")01Q.UH]sb&`[PIyuoe`3m;=_Y.^H`5#L JmK) y3wLHsND3vM?xh?}x\P9:
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 4c df 7c eb 62 77 e7 de ce f5 b7 9d fd 9b 2f ed be f9 16 6b 72 b3 70 a9 13 40 4a ad 70 20 e2 11 37 05 77 4f 6d 22 66 0e 62 ee 2c c2 44 a3 2d 2a 52 20 85 89 02 47 b3 0c f1 58 a0 86 ad 7f e8 e0 f9 af 3d ba 78 e4 0d ad 59 94 02 b1 c2 b8 62 67 0b cd e0 d2 f3 4f 6d e9 fa 85 97 5f ca ec ca b9 5a ba f0 f2 af fd 86 2e 2c 85 4c 81 dc 00 54 94 a3 d1 b0 15 75 30 62 b7 9e 7b fc c9 6d 1f f9 60 ec a1 b3 69 ba 7b e4 62 8b dc 52 60 b7 09 0b b9 c9 13 e0 d8 ed 34 8c ca 91 41 46 c2 c4 80 83 c9 55 0b a0 13 31 95 e8 de 0c 40 19 3f 11 09 51 49 a0 d7 58 38 07 cc 8c 01 22 56 57 02 88 89 c1 ea 70 22 1b 61 14 15 47 60 6c 64 4e 64 6d 40 54 22 0a f1 d6 9b c7 af de 63 ad 7b 87 d4 20 e3 71 cf 0f 3e f8 c6 5b 6f 76 56 1a 10 4b a0 c2 93 10 93 3b 4a 86 e1 0e 62 76 20 56 95 84 90 72 76 77 Data Ascii: L\|bw/krp@Jp 7wOm"fb,D-*R GX=xYbgOm_Z.,LTu0b{m`i{bR`4AFU1@?QIX8"VWp"aG`ldNdm@T"c{ q>[ovVK;Jbv Vrvw
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 5c 82 30 b1 aa 56 55 24 62 cb ba e6 99 0a db 0e c0 1c 21 8a 9b 17 76 92 45 9c dc e1 4d db 8c f5 7a 2a 9e cc a0 99 08 e6 d4 66 5c 75 ef bd eb af da f4 d6 57 fe e6 e2 57 bf b6 bd d3 f3 c7 9f 3a a5 76 e0 f1 a7 27 7f e9 17 77 dc f7 fe e3 07 9f cf 1c bc ea 34 6e e4 26 ee d4 66 22 76 a6 32 ce 55 af 63 4c 9c 35 b3 88 65 d5 42 4c 99 ba bb 48 08 21 68 36 23 78 6a 13 60 40 33 39 71 ed dd 77 bd fe ad 03 1d ae 6f bc e7 8e 37 0f 7c fb b5 bf fd b2 66 ba e6 bd ef 6f 73 73 e0 f7 3f 3f 3e d1 19 9e 39 c9 47 8e 8f 55 dc 47 13 39 c4 0c 07 2b 8f ec 73 b4 a9 d6 d6 c8 41 f0 4c 06 f6 0c 1e 92 68 ab 4b df 78 ae 7d f0 01 9b 98 b2 14 52 c5 ca 0e b7 14 3c cc 4c d3 d4 84 2d 9f 67 f8 4a 96 89 bb 3e b8 f7 53 3f 64 63 63 d4 3a 91 37 62 ee 60 82 19 26 77 ef e2 eb ae 1b bc f8 fc 58 8c ea Data Ascii: \0VU$b!vEMz*f\uWW:v'w4n&f"v2UcL5eBLH!h6#xj`@39qwo7\|foss??>9GUG9+sALhKx}R<L-gJ>S?dcc:7b`&wX
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: a9 fa a9 1b d9 49 92 0e ab 4e 7d ea 2b 5f 5b 79 f6 50 9c 5f 0e 22 39 6b e5 44 d9 52 64 13 4e 4d 03 21 1a ef f1 52 cb 84 20 8c 6c aa 76 65 00 37 a2 be 57 09 06 00 66 1e 42 60 1e d5 e7 b0 30 11 d4 0a 3e 79 c9 c2 99 58 dd 99 49 40 96 15 4c a6 96 73 96 20 5d 61 cb 29 32 25 e7 61 a6 5e e8 2e b5 2b 1b f6 5f 17 ea ee 10 d4 08 a2 c0 c9 60 ac 0e e9 8d 4d 5c b5 3d 9f 7e 33 56 e2 85 90 2f 91 28 81 79 54 8f e3 70 66 2a 0c 55 56 65 61 83 13 42 7f 65 68 2e c1 81 a5 95 06 22 fa ea ab fa b9 cf fa ba e9 62 7e 6b 38 55 90 3d 84 30 0a 0c 55 89 28 16 61 01 28 d0 1c ab aa 20 5a a0 42 89 d0 88 6c 21 16 82 b9 81 48 a8 88 1c ae 80 66 93 a2 4e a9 c6 2a aa 5b 56 85 39 95 ef bb 16 06 40 a4 18 e4 77 a8 ac b4 5a 08 64 a3 dc 4a 0a 7d 4c ab f5 3f 58 e5 0d 98 c5 e0 6b 82 6c 01 e9 b2 54 Data Ascii: IN}+_[yP_"9kDRdNM!R lve7WfB`0>yXI@Ls ]a)2%a^.+_`M\=~3V/(yTpfUVeaBeh."b~k8U=0U(a( ZBl!HfN[V9@wZdJ}L?XklT
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 73 d3 36 31 54 21 88 66 65 92 20 52 d4 c2 11 79 aa d9 4a 2e 40 30 f6 8e 51 3b df 4c 7c ff 07 ba 53 eb 4e fc d9 5f 76 d0 5f c9 8b a1 0a b6 bc 9c ce 2c 9e 7d f9 f4 3c c2 a6 bd 57 cf 1d 7a b9 ff d2 cb de 09 1c d8 b3 92 b9 ab 99 a3 b1 e4 40 0c 55 d9 54 70 67 2a f5 c7 4a c4 0e 90 69 60 ca 4e b9 ee 6d ff c8 07 a7 f6 5d 33 77 e2 ec 86 ed db 2f 5d 9a 9f de 38 a3 6c d2 5a f0 d8 f6 d3 b6 db af 6f 6a bf fc fa b1 9a f3 38 a5 b3 2f be e8 1c 26 27 d7 45 e3 e8 4c 4c 14 24 33 33 48 44 64 ba 17 05 f9 c0 a1 61 b7 be e6 67 7f a2 5f d5 b9 8a 29 c3 dc e1 66 ae 9d c4 39 12 51 88 c3 10 8c 97 5f 38 b4 f4 c6 1b f5 7d 77 dd f2 0b 3f db db ba 85 8d 1c 94 85 e0 a4 12 64 c3 fa 99 7d 3b df 78 e6 89 b0 73 d7 cc 2d b7 b0 04 4a a6 17 2f 5d 7e f2 5b 21 04 36 63 43 24 86 9a 69 76 26 04 41 Data Ascii: s61T!fe RyJ.@0Q;L\|SN_v_,}<Wz@UTpg*Ji`Nm]3w/]8lZoj8/&'ELL$33HDdag_)f9Q_8}w?d};xs-J/]~[!6cC$iv&A
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: d7 4d a7 dd ea 30 bb f9 be f7 a3 b6 e1 cc b6 37 bf f8 07 1c 1a b3 6c 29 8d bd e7 8e 2d 0f 3c 18 ea f1 e1 80 2e fd e5 5f 56 1d 72 cd 69 7a 66 c3 7b ee bf 74 f0 95 de f1 b3 5c ab 89 61 00 70 b7 4d c9 fb ad b4 a2 91 8c b9 e7 02 37 23 72 38 31 8d 8a 29 98 38 94 32 6d 72 37 77 98 97 d2 10 2e 15 40 85 05 2a 22 68 08 c1 d5 50 98 70 37 a2 b2 ab a9 f4 a4 10 28 a5 44 01 ee 0e 96 b1 ad 3b 4c 4d 66 26 6e da 7e 8f e6 d0 06 08 b5 7e f2 dc d2 b7 9e 5c 3f 58 58 f9 fa 97 2e 55 01 29 8f 01 02 77 22 03 e0 6c 66 6a 4a 30 22 37 b8 97 92 2a 09 e6 96 4d a9 54 d1 79 24 aa d2 a5 a5 74 69 29 38 91 9e 38 91 be f9 8d d0 ed 02 9e 52 22 62 11 21 5d ed 51 5a 3d b0 4a 04 15 a6 c5 dc 98 d8 47 42 46 91 98 b9 38 0c e2 62 ac 6f b3 37 4c 5c a2 af 02 46 66 9a dd 89 21 24 45 f6 2f b1 7c 4a 89 Data Ascii: M07l)-<._Vrizf{t\apM7#r81)82mr7w.@"hPp7(D;LMf&n~~\?XX.U)w"lfjJ0"7MTy$ti)88R"b!]QZ=JGBF8bo7L\Ff!$E/\|J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50108	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	799	OUT	GET /M24xvmPiIlXRQb7ReNXBDMRot0s_5GMSLkP08p5mb9s7bJYkuMcz6kFjeEhCIp6yikIZVfDrOjvgHzHxhSusOQkyC4VajtQxOHRMiazmvDLP_P3JjA?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:33 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 323693 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:15:40 GMT Expires: Tue, 28 May 2024 22:15:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 1673 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 55 08 02 00 00 00 16 b1 c0 74 00 04 f0 34 49 44 41 54 78 9c 4c fd 59 af 74 5b 96 1d 86 cd 66 35 bb 8b ee 9c f3 9d af b9 7d 76 37 33 ab 2a ab 21 59 64 91 94 44 d3 26 41 90 06 0c c8 0f 7e f0 93 0d ff 06 3f f9 1f 18 7e d2 8b 61 09 b0 0c 37 00 25 58 a2 20 17 40 89 45 16 25 b2 c8 2a 66 65 53 37 33 6f 36 37 6f ff f5 a7 8b 6e 77 6b ad 39 a7 1f e2 dc a2 9e 4e e0 20 76 c4 8e 1d 3b 66 33 e6 18 63 e2 ff ee 3f fb 27 04 c8 84 88 08 60 6c 46 04 66 e0 90 9c 19 10 00 11 9a 02 00 22 02 00 00 28 20 20 12 1a 03 02 22 00 20 00 19 28 2a 18 1a 20 00 00 82 21 32 18 df 1f 68 a0 a6 60 0a 60 a6 80 84 00 04 40 00 7c 7f 3c b2 a9 21 08 32 c2 fd 4b a0 99 21 02 98 43 24 10 46 04 22 54 33 40 60 22 03 40 34 04 d4 d3 d3 Data Ascii: PNGIHDRUt4IDATxLYt[f5}v73!YdD&A~?~a7%X @E%feS73o67onwk9N v;f3c?'`lFf"( " (* !2h``@\|<!2K!C$F"T3@`"@4
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 6f 6e 11 75 79 b1 e1 d0 58 08 6c 04 36 89 dd bc d6 9b 03 95 95 2a e4 e3 94 87 71 1a b2 84 b6 59 af da 15 cb 90 a5 00 23 35 68 6d 57 c7 b6 76 26 d3 f6 ee e6 e6 8b cf 6e c6 a7 47 98 c1 3c 1a 81 48 01 e2 f3 37 7f fb e2 c9 7b 69 bf ff ec 83 7f 71 b8 79 16 dc a2 7a 73 d9 3c e9 16 ab 65 b5 68 2d 38 54 aa e0 52 87 62 b9 5c dd be 3a 3e 7f b6 74 2d 46 ed f3 91 40 60 16 53 e2 05 53 74 49 f2 e2 fc 8d b7 7e f3 af bf fb e4 cd bf 7e 7e 19 f4 f6 f5 7c 77 9d 47 01 9b b4 bc 3c dc 1e fa b9 bf eb d3 61 9a 53 2e 88 f9 6e 5b f6 7b 75 31 93 df b4 ab b7 b8 09 87 bb 2d d1 d0 44 17 c0 d7 0b b0 98 63 a4 4d 44 99 91 dc c5 b2 59 34 ed ac e3 38 9a 40 e5 39 75 71 0e d0 cf c7 74 dc 6d 41 a6 cb 07 9b b6 69 a7 69 b8 39 66 23 17 eb ea b8 9f 5f 3e 9f fa 11 d7 55 d7 b4 4b f4 4d 92 2d a4 4f Data Ascii: onuyXl6*qY#5hmWv&nG<H7{iqyzs<eh-8TRb\:>t-F@`SStI~~~\|wG<aS.n[{u1-DcMDY48@9uqtmAii9f#_>UKM-O
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 85 30 0b 64 b3 6c 90 05 66 13 43 43 02 44 26 32 29 a0 64 9e 48 0d 0d 0a 80 17 40 05 24 00 20 32 c9 84 05 d0 2b 18 18 15 40 b3 42 58 3c 55 22 a6 74 aa d8 01 91 00 ad 98 0a a0 01 98 99 03 32 40 63 53 33 c6 53 d7 04 08 6c a4 a0 76 ba 46 44 a8 00 40 68 66 0e 0d 14 09 51 d1 50 41 4d 01 08 c1 10 40 4f af 4e 60 66 88 48 84 a6 76 2a df 1d 29 21 2a 20 a8 99 99 02 30 82 01 ea a9 2d 38 75 41 06 80 84 78 7a 68 00 aa 08 a8 44 04 45 e0 d5 cc af 32 1e b3 3c 0a ee 9d 2a bd d3 e0 04 ee 65 d2 c3 98 fb 09 d3 cd cf ff 7f bb 67 db fd 37 fe 83 f7 de 2d 39 bd b8 1b d9 b7 ed fa 51 99 5f 1e e7 9c 45 11 d1 54 55 74 2c f9 6f be f9 68 d5 3e f9 e0 fa d9 c7 c3 2d 85 70 50 f8 f5 d6 ff f6 66 28 10 5f 14 96 72 4c d3 e1 b3 d7 3f af 9b 4d 7f f7 8c a7 69 f3 c6 37 57 9b 37 d1 32 7b 5c 2e 97 Data Ascii: 0dlfCCD&2)dH@$ 2+@BX<U"t2@cS3SlvFD@hfQPAM@ON`fHv)! 0-8uAxzhDE2<*eg7-9Q_ETUt,oh>-pPf(_rL?Mi7W72{\.
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 96 31 f7 8e 2b 47 9e fc 90 72 99 19 52 36 9d 6c 4c 75 ed fc ca 6b a4 14 5d 5b b9 75 e0 c5 79 a7 31 a4 fd 38 93 89 40 90 64 5e b6 43 29 aa c3 34 98 10 2d 62 7b b1 ac ba 0a 0c 4a 29 47 f6 9e c0 48 98 1d 91 d7 0c 9e b1 20 9a 08 00 88 9a c9 e9 16 b5 62 40 40 a0 89 0c 91 9d 32 06 45 32 cb 60 84 c4 d8 7a ee 2a 62 2c 8a 09 c1 d8 d0 3b e5 b9 68 11 54 10 4f b0 02 5e 52 9c 47 1a 40 39 cf 7d 9f 8f 33 82 92 90 cb 24 a4 ea 88 24 9b 24 75 e4 aa 76 ed eb 00 35 f9 15 bb a6 36 02 b0 5c fa a9 cc d9 59 ed 1d a2 0e 87 e3 71 d8 ef 60 59 bb b3 0e e7 8c b3 cc e8 d1 07 65 43 d7 20 02 29 d7 5a fc 71 57 5e 7e fe d9 b6 9f 1f 6d be fd e4 22 bb 6e ce 2f fa 5d 1f 24 4d 49 76 b7 23 8c 00 06 65 1e 20 0d 00 40 1c 20 a7 18 a0 3b e7 c6 d7 dd c3 4d 5c 3f 72 cd 42 55 3a ef 4a dd aa ce 8c c9 Data Ascii: 1+GrR6lLuk][uy18@d^C)4-b{J)GH b@@2E2`z*b,;hTO^RG@9}3$$$uv56\Yq`YeC )ZqW^~m"n/]$MIv#e @ ;M\?rBU:J
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: fd f0 e0 3e 9b 98 e1 e9 ed 0c e0 2b c0 44 0d 0b a0 2a 88 61 31 cc 90 d5 14 0d 88 4e 28 bc 33 44 40 95 d3 40 19 e0 54 f3 a3 da 09 d6 34 10 24 42 3b 85 51 3b c1 50 6a 79 22 f5 a7 f1 32 20 03 30 80 52 be 9f 09 de 8f 78 e9 be 9d a1 fb cf 44 a4 0e 4c c1 29 b0 37 71 9c b3 49 12 3f 63 67 ce 55 5a ae 95 7f bc 3b c6 52 fe e0 2c d6 60 9f 59 f7 6c 0e 37 c7 bd 14 fd 5a d7 bd 5f a7 96 8a aa 0c 06 8a 7c 82 1e 4e 73 92 13 e8 46 66 80 a7 b9 31 09 18 9d 92 e8 a9 05 39 35 64 00 59 8d 00 1c 00 18 20 98 02 ec 4a fc 22 37 2f fb 6d 03 b2 ab 97 bf dc 3d 7d f9 fc 5f 47 57 9e af fe ee 36 7c 6f 1d 76 97 1d 5c 86 33 2a df dc b7 ee 93 9f ff 63 0f e8 43 87 00 36 6d e6 7d fa af 7e f6 8b 3f fb bc 8e a5 fc e6 5b 8f d6 0f 2e fe c5 af 3e fd 17 ff ee df a6 9b 17 c3 6e ef 38 f8 e8 5c d5 ae Data Ascii: >+Da1N(3D@@T4$B;Q;Pjy"2 0RxDL)7qI?cgUZ;R,`Yl7Z_\|NsFf195dY J"7/m=}_GW6\|ov\3cC6m}~?[.>n8\
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 10 d0 f8 c4 30 40 42 b4 e2 73 89 02 07 f2 8a c4 32 1b 66 74 94 42 0c 2d 17 99 aa 50 05 0e 59 5c ee 6a 92 a3 bb bb 09 04 66 21 4f 56 6c b2 a4 b1 db 18 cf a9 ef a3 f3 a7 72 2a 1b 7b 42 36 30 02 2f e0 c6 b1 df 8e e9 30 e6 36 54 cb 65 e8 96 fb 63 bf ac b1 eb c9 cc 26 65 eb 22 4c a9 80 ba aa aa 62 85 de 79 47 95 f7 9a 44 fa c3 8b d4 37 8e da 01 0f c7 b9 70 6c ea 25 1b e6 6c b5 03 6a db 50 05 95 49 cb e8 e7 bd 2b 65 52 e7 45 75 4e 53 9f fd ca 41 d7 01 d7 0e 51 cc c4 50 89 04 f9 ab fb 0c 05 0d 10 0d 09 98 c4 31 a2 81 29 92 33 84 84 60 66 01 2a 76 b5 91 03 62 65 42 4b 88 73 21 55 a0 ce 2f de 8c 81 21 17 70 4c a0 c8 04 73 21 f0 6d 90 74 c8 c9 74 cc 8e 2b 6b 1d 88 f7 b5 87 a6 71 8b aa 75 ae cc 73 e6 cc be 2d ae e5 c0 0f e2 1a 00 c4 c6 29 97 52 c4 42 8c 91 82 27 d7 Data Ascii: 0@Bs2ftB-PY\jf!OVlr{B60/06Tec&e"LbyGD7pl%ljPI+eREuNSAQP1)3`fvbeBKs!U/!pLs!mtt+kqus-)RB'
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 60 bd 68 cf 63 70 88 b1 8a 0e 75 92 a2 25 00 33 37 b1 72 b1 91 26 fb 7a e2 76 d2 a6 20 67 50 91 fd 79 74 21 6e 92 f9 79 2e 88 2e 22 93 60 62 52 c4 5c c6 94 c5 ed 6f 89 f0 48 e0 1e be ff ed ee ad 61 38 1c 86 ed 6d 7f 73 3b ec 8f 57 cf 9e df 3e 7d ce b5 5f 9e ad 97 17 0f eb cd b2 6e da 10 ab e0 5c f1 3e 02 3b 20 00 20 41 42 23 34 e5 7b 10 e8 84 f2 10 d0 a9 12 37 30 3b e1 d6 a7 86 e0 9e ec 03 68 20 60 fc 3f 51 15 20 c2 89 4b fa 97 b8 3a 80 9d 22 3f 7c 45 f7 bc ff 37 00 00 30 81 28 0a 02 20 8a 9a 00 14 44 31 42 2a 8a 64 68 4a 20 00 c8 fe 14 45 19 bc a2 a1 01 03 19 ea e9 90 13 43 e7 9e 29 8f 78 92 13 98 09 14 11 60 40 e0 7b 4c 08 15 81 d0 00 f5 84 e6 9f 4e 13 e8 f4 69 cc 21 3d 83 ee c3 ed d3 5f fd f8 bf 18 6f 3f 33 c2 09 dc ab 2f 7f 34 7c e7 3f ec da f6 cd cb Data Ascii: `hcpu%37r&zv gPyt!ny.."`bR\oHa8ms;W>}_n\>; AB#4{70;h `?Q K:"?\|E70( D1B*dhJ EC)x`@{LNi!=_o?3/4\|?
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: e5 1c 8b 71 ff fa 55 38 bf ac db b3 79 ec 9f fd e4 d7 d6 34 48 d5 74 25 37 91 9b 8b f5 bb bf f1 db fa 93 9f ff f4 5f fe 71 b5 be 58 3f 79 17 ff 75 7e ff 6f bf bf fa f6 5b 65 18 32 64 a5 6c 79 92 cc 04 42 35 2a 31 31 b9 ec c5 37 6f bf fb 9b 31 90 bb 78 52 75 f4 e9 2f ff 55 29 60 60 26 22 2a 14 da e0 63 92 61 98 0f 63 d6 0a 31 78 5f 10 cc 10 09 63 eb ea 65 1b 1c a7 61 2a 7b 3f 8f 23 18 40 56 1c 07 23 0e 44 18 2b 41 e7 80 51 60 3a ea 0c 5a 93 92 ce a3 2b 63 1a 4f f7 a7 d9 69 90 05 00 a6 60 8c ac 76 22 ee 02 4a 8a 29 cd 00 8c 18 cd 17 35 55 9b 46 74 e3 04 05 13 d3 f1 c8 8d 4b 87 7e 26 8f cd 79 8b ed a2 e6 75 b9 9b e6 dd 2d ea 2d ae aa 6e d9 95 49 73 df 43 55 a3 20 aa 10 98 cb 40 09 2c 6a 31 42 5f 6f f7 7b 34 57 69 a0 39 11 d3 71 3a 62 2e 0e 49 a3 30 aa 60 13 Data Ascii: qU8y4Ht%7_qX?yu~o[e2dlyB5117o1xRu/U)``&"cac1x_cea*{?#@V#D+AQ`:Z+cOi`v"J)5UFtK~&yu--nIsCU @,j1B_o{4Wi9q:b.I0`
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 63 0c cd 6a d9 74 15 38 29 e2 40 f3 78 dc 2b 79 29 24 ce b3 39 13 99 4b 9a ee 82 8f 44 61 3f f5 c5 a1 a4 3c c2 5c 0c 95 72 d5 92 d5 1d 05 14 54 f2 88 2e 60 00 f0 15 35 4b ea 7b f0 ee d1 5f fd 9d cd 1b 6f 57 58 48 e9 d5 d5 f3 9b 66 eb cf 64 f1 e4 62 f9 e8 a1 4b d2 bf ba 1d 82 eb ce ce 9a b6 e3 c5 2a 2c ce 87 d7 cf 6e af 5f 39 03 67 34 ba 49 ab d0 d4 c1 a6 7e 56 10 71 36 6f 9d 8b 1b 8e ab 2e 10 09 39 27 9c d1 85 61 a7 c7 e3 ac d1 d7 cd 1a ab 55 d3 b0 d1 ed f1 f6 35 6f f3 34 ca ab c9 32 34 7e 56 49 53 1a 27 9c 67 63 c2 82 87 a3 c4 ab 21 8b 3f 7b bc 6a bd 3b 1c ca 3c 14 f0 00 60 54 d2 f3 4f b7 9f f6 f3 37 ff da fb 8f da ae 0d e4 63 bb 0c 58 d5 50 11 28 f2 11 ca 30 6e 8f 19 4a 1a 6c 9e 04 73 ae 29 9b da 38 56 a1 ea 20 84 a1 df 3f bb 3d 1e fa 5d 51 23 02 28 bc Data Ascii: cjt8)@x+y)$9KDa?<\rT.`5K{_oWXHfdbK*,n_9g4I~Vq6o.9'aU5o424~VIS'gc!?{j;<`TO7cXP(0nJls)8V ?=]Q#(
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 80 20 76 4f f1 31 04 b5 93 7c ec 34 01 c6 0c a0 76 df 6f 28 82 a9 9e a4 c6 8a 48 c4 81 9d 29 2b 11 15 10 47 66 27 c1 1b 39 2a d9 c4 01 a0 96 ac ec 10 4f f9 0a 48 33 41 01 f2 f7 4a 63 34 33 35 06 40 33 39 99 ea 20 82 9a 39 32 22 9a a4 ba 85 b8 53 1d 87 ed 7e 3a ee c7 eb 92 7b 88 cd 2a ac 1e 2d 1e fd 76 b4 32 ee 35 a7 3b 03 8f b6 07 b7 2d 76 90 41 53 2f 32 de be 78 c6 c4 59 f2 e7 5f fc f0 e5 fb ff f1 ff ec 9d af 7f a7 1e 48 2d 9b 29 82 2a 02 18 12 9a 9e 50 09 d5 d3 07 06 cb 22 5d f4 cd a3 b7 ff ef ff fd 3f ff 57 7f fc c7 ef 7c eb b7 aa 94 d6 95 1f 77 cf af 6f b7 f3 b6 cf c3 c1 cc 98 a3 28 da 34 41 12 57 87 62 2a e3 1c 1c a6 fd dd f3 9b d7 54 a4 94 6c 84 98 70 64 a0 3b 0b f5 52 96 cd 88 37 06 65 04 1c 46 c9 f3 c4 aa 00 88 0e 51 66 0a 1d 48 ce e3 a0 c8 cd 26 Data Ascii: vO1\|4vo(H)+Gf'9OH3AJc435@39 92"S~:{-v25;-vAS/2xY_H-)P"]?W\|wo(4AWbTlpd;R7eFQfH&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50110	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	800	OUT	GET /JAHpZ2_EHeCUpdmIs4cbbahzG_fAB3drICQ6fzdVDU0bFa_Wx7Cae5JuN98SAvgfSOA4n8D2ODHsnRqwEoGqZw3KVilRloyOz8ydbrKXxSK6qdMmMUQ?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:33 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 314962 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:15:40 GMT Expires: Tue, 28 May 2024 22:15:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 1673 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 55 08 02 00 00 00 16 b1 c0 74 00 04 ce 19 49 44 41 54 78 9c 64 fd 59 ac 2c 59 96 1d 88 ed e1 9c 63 66 3e dd f9 dd 37 c4 7b f1 62 1e 73 a8 cc ac ca cc ca ca ac 31 9b 55 64 17 87 26 09 f6 40 76 0b 52 53 fa 20 04 09 fa d2 57 eb ab 05 01 02 04 e9 5b 68 09 6c 75 ab d9 14 d5 22 c5 6a 16 aa 48 56 b2 a6 cc ca 29 72 88 8c 88 8c f1 cd d3 1d 7d 36 b3 73 ce de 5b 1f 66 7e 5f 14 f4 10 08 dc eb d7 cd dd ed b8 d9 da 7b af b5 f6 3e f8 bf fb f7 7f a9 5e d7 66 06 0a a6 66 08 00 c6 2e 18 3b 00 28 d8 4c 85 08 98 49 45 9c 73 cc 9c 44 9c 63 22 d2 64 48 04 9a 73 4a 3e 94 22 c2 68 44 4e 55 bd 67 26 84 ac 5c b0 20 aa 8a 43 4c a2 66 8a e8 40 14 20 b3 f3 49 14 54 11 49 93 1a 9a 99 9a 98 82 80 5a 4a ea 1d 9b 41 93 Data Ascii: PNGIHDRUtIDATxdY,Ycf>7{bs1Ud&@vRS W[hlu"jHV)r}6s[f~_{>^ff.;(LIEsDc"dHsJ>"hDNUg&\ CLf@ ITIZJA
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 01 63 24 44 04 53 42 02 02 04 05 63 51 33 30 30 25 22 51 45 30 24 16 51 44 04 02 10 50 54 47 0e cd 92 19 03 30 0a 22 32 33 98 88 02 13 3a 42 20 d2 ac 0a e6 99 10 19 00 cd 24 25 61 f6 00 aa aa 00 06 84 9e 08 10 0d 11 00 1c 51 12 b5 ee 8d c0 88 a8 3b 39 43 00 00 67 86 4c 4d 4a aa 84 68 06 80 40 80 8a 8a 0a 00 68 0c 84 06 a2 02 ac 8e 28 9b 12 92 67 97 55 72 16 00 20 40 00 30 84 ee 60 84 6e 99 0d 00 88 c8 4c cd 94 36 eb 4a 84 40 88 06 86 40 80 66 46 00 00 28 66 9b 83 00 10 14 c0 cc 4c 04 cd 00 89 98 b3 69 56 45 04 44 02 03 36 40 53 03 34 33 30 00 34 41 ee fe 9a 10 08 8d 14 32 11 01 94 aa a2 ba 52 2d 10 cd 31 1a 51 6e 2d 27 6e 52 98 3d 70 a7 77 8a fb ef e5 c5 71 16 5d 64 bf 02 4e be ca d5 f5 5c 1e c0 28 58 59 02 06 15 51 ef cd 54 1c 9b 80 11 46 89 2e 38 50 64 Data Ascii: c$DSBcQ300%"QE0$QDPTG0"23:B $%aQ;9CgLMJh@h(gUr @0`nL6J@@fF(fLiVED6@S4304A2R-1Qn-'nR=pwq]dN\(XYQTF.8Pd
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 5c 89 c8 32 48 03 5c 18 13 29 00 98 31 21 92 21 9a 29 01 18 92 91 03 22 03 40 30 30 43 83 ae 10 00 43 51 45 33 44 ea 11 85 08 d5 04 04 01 80 50 ba dc c3 4c 55 11 80 58 cd d4 9b 57 42 20 84 8b 4c 15 c0 c0 08 51 0d 0c 8c 9c 4f 59 ec f1 1d 46 36 4d a6 d1 32 32 a1 73 28 92 00 01 4c 01 88 10 a3 09 92 31 b8 2c 11 d5 23 82 48 8b 22 2a 66 04 a9 59 ce cf ce d7 ab 65 bd 6e 40 33 33 b3 ea d9 d1 e9 3c b5 e7 eb e5 7c be dc 9a 4c c6 93 ad 1f 7f f2 61 77 23 0c 8b ca 39 97 73 2e cc ea ba 96 8a cc 34 d7 75 73 36 9d ea ed 4b 2f bd c2 e5 e0 c6 cb af 15 6c 1f dc ba f5 5f fd de 1f 29 17 ae 18 9c ce 57 7f f7 ab 5f f8 47 ff c9 5f 7f b2 5a 92 0f e2 f9 d2 ee f6 57 5f 41 7d ef 93 47 47 8f fe fb 3f f8 97 2d 0e 2f 5d ba 79 74 74 7b 18 aa 5f 7e f1 e6 07 0f 1e 82 af be f9 b9 cf fc e3 Data Ascii: \2H\)1!!)"@00CCQE3DPLUXWB LQOYF6M22s(L1,#H"*fYen@33<\|Law#9s.4us6K/l_)W_G_ZW_A}GG?-/]ytt{_~
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 7a 11 2f ba 33 ee f2 2e 33 35 40 40 ea a8 57 04 34 ea 6b 6f 04 01 eb 90 56 ba f2 0c 8c 6d 13 ed 81 09 0c 40 15 a8 ab 99 ba 9a a3 67 00 54 b3 b4 d8 d4 29 65 1d ef ea d6 55 1d 3f 5f ef 5e d1 8a 4a cf cc 8e 43 c1 ce b1 f7 da 43 9f 99 01 23 89 08 13 82 9a 63 4c 22 c4 68 02 44 cc ec 5c 47 45 76 84 a3 74 0c 17 b3 99 19 a2 77 4e 52 cc 92 1c fb c6 b2 89 78 e7 9b f5 da b9 80 de ad 57 cb e0 8b 0c 39 67 1b 86 32 27 55 80 e0 5c ca a2 0a 06 20 39 ab 82 63 df c6 96 90 c9 61 bd 6a ca 22 e4 98 d5 91 0f 2c 29 ab 1a 22 21 0a 2a 14 c1 c7 14 11 11 08 db 14 d9 3b 04 50 b5 a2 08 84 88 48 be f4 29 a9 88 86 aa 90 36 3b 46 e7 38 a7 ec 99 53 4a 66 e6 bd 17 91 82 02 01 58 6e 11 0c 4d fb 04 a7 bb 6e 00 00 99 9d 37 11 33 cb 6d 33 3d b9 33 dc 3e 84 34 9c 3d f8 58 db 66 b0 7f cd 8f b6 Data Ascii: z/3.35@@W4koVm@gT)eU?_^JCC#cL"hD\GEvtwNRxW9g2'U\ 9caj",)"!*;PH)6;F8SJfXnMn73m3=3>4=Xf
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: b3 17 6e 5c 7e fd eb df 48 e0 97 8b d3 e6 f8 c9 f2 c9 e3 77 3f fa e4 5f fe c5 4f 4f 17 f5 4b 37 ae 9d b4 f9 d1 6c b1 58 2c ae 5d bd 74 ff d1 23 94 f4 78 36 6b c0 ed 6e 6d 9f 2e 9a 1f df 79 f4 ca 0b 2f fc e2 e7 7e f1 f4 e4 c1 fb b7 3e 06 80 37 2e ef 1d ad 53 4d fe b3 37 9f fb bd 9f bd 7b 68 d5 6e 28 96 6d 83 92 3d 73 97 31 9c d4 ed ff f8 17 6f bd 76 fd da f3 93 e1 83 d3 b3 3f f9 e1 77 4e e6 ed 17 ae 1c 7c fd 73 6f fc 70 ae 27 38 49 80 51 6d bb 08 f7 ee dd ff f3 9f bd 7f 79 7b 67 7c f9 f0 bf fa e3 3f fa d2 e1 d5 4b 83 e1 f9 e9 b9 df 30 14 1b 6c ec 09 e1 2e 6b bd c8 35 2f 52 7a dc 30 0f 7f 29 07 c5 a7 ff fb 54 a2 bf c1 f8 1e 67 a0 a3 60 2e 60 b8 7b d8 a0 13 21 bb d7 93 0d bd f4 94 e9 c6 8b 37 e9 63 c8 06 64 37 9f 0b 00 88 36 f5 20 82 01 18 a0 81 22 10 03 28 Data Ascii: n\~Hw?_OOK7lX,]t#x6knm.y/~>7.SM7{hn(m=s1ov?wN\|sop'8IQmy{g\|?K0l.k5/Rz0)Tg`.`{!7cd76 "(
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 11 cd a0 08 a1 ab 31 5d f0 29 77 3a 36 b6 8d 30 07 74 94 55 ca 6a 20 22 04 ec 4a b7 98 2f c9 80 0d 01 cd 05 e7 88 09 d1 11 47 16 22 64 44 c9 66 96 52 d4 9a 30 58 25 39 65 91 14 1b 6a b3 36 85 5a 66 e7 d0 85 dc 36 a6 22 06 14 1b c6 22 b5 5c f8 41 96 1c 63 1d 2c 79 4d 44 98 db 55 13 1b 00 ed ec 01 ce 7b 45 72 c4 00 18 55 9c f3 a6 6c 86 92 93 aa 78 c7 a6 90 51 d9 53 56 66 34 02 4c 29 0f fc c0 d0 08 b9 9d 9f 17 83 6d 1a 26 55 41 62 1e ee 52 31 32 62 d9 be dc f6 e9 1e d6 82 be 18 30 a3 24 b6 b8 84 76 2e 6d 4d ed 8a 34 a3 24 66 76 04 d6 ac 89 a0 2c 07 e4 02 33 f1 72 c1 e5 39 85 90 35 6b 4e 92 23 00 42 59 ea 60 5b 53 1c 58 24 19 6a 28 30 32 11 01 7a 43 44 24 f0 0c e4 81 06 70 f6 00 d6 4b 04 d3 54 83 99 48 12 50 c9 ad 4a 42 55 6b 5b 34 a3 b2 00 04 8d 99 4c c1 31 Data Ascii: 1])w:60tUj "J/G"dDfR0X%9ej6Zf6""\Ac,yMDU{ErUlxQSVf4L)m&UAbR12b0$v.mM4$fv,3r95kN#BY`[SX$j(02zCD$pKTHPJBUk[4L1
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: f6 59 7c f7 3a 8a 64 26 00 17 6d 1b 9b 52 01 0c 41 11 78 13 37 2e e8 a8 4d bc 00 ea 39 ff fe f9 a8 4f e9 94 0d ba 5d d4 27 3d c1 81 8e 9c 22 88 62 50 10 33 73 4a 5c a9 4a bb 3e 6b 73 5c ad 97 6d b3 2a 42 e9 8b 01 52 c8 ed 7a bd 5e b6 cb f3 bc 3c 9f 9f 3c 69 17 67 ce 0f da d5 5c d6 b3 a2 ac 16 cb 66 76 7e 0c ed fa 64 77 7b b2 bb 3d b9 f6 ec ee cd d7 b6 0f 9e 2d b6 0e d1 95 60 4e b1 cb 89 51 cd c4 cc 00 1c f6 7c 10 02 66 00 02 25 d3 4e 07 e8 4e d6 a0 13 15 36 88 dd 7f f8 ce 78 65 66 42 9d 89 c8 00 b0 eb 3d b2 4f 63 7e 1f 06 3a 83 ec c5 37 b6 09 de d6 0b ca c4 fd 3a f6 2b d9 57 70 5d 5c ef 85 00 d8 d4 52 f0 94 cc 03 70 c6 82 62 d8 f9 ab 0d 0d a8 b3 f8 02 08 29 19 7a b1 e8 91 3b 60 e9 03 97 a1 21 a2 21 1a 03 90 77 e0 7c 70 01 99 00 25 93 db 74 92 18 77 6e 33 Data Ascii: Y\|:d&mRAx7.M9O]'="bP3sJ\J>ks\m*BRz^<<ig\fv~dw{=-`NQ\|f%NN6xefB=Oc~:7:+Wp]\Rpb)z;`!!w\|p%twn3
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 00 83 76 d5 f0 28 68 bd ce 84 6a e8 ca 21 b4 35 0e b7 c8 7b 30 13 51 0f 46 1e 81 d0 39 07 22 31 66 40 20 b2 62 38 d1 66 99 d6 e7 06 a8 92 41 a2 f3 01 aa 51 ce 19 11 72 bd 70 ec 84 d8 2c 29 12 95 23 e2 a0 44 30 3a 4c db 57 71 34 4e be 9a fb 51 08 d5 92 49 41 0b c3 81 1f a2 0f e4 08 18 d9 15 6e 39 b7 d5 34 4a 02 04 13 05 55 85 c4 66 a0 aa aa 58 06 8b 6d 5e b5 5c 56 e0 b8 4b 64 c8 c0 b2 80 76 82 17 02 a1 a9 22 13 e4 64 39 99 29 a4 04 00 c0 1c 97 73 67 e2 79 b7 d8 dd a7 ee 76 f4 c5 6a b9 d8 ba 74 a5 18 8c d2 6a b1 38 3f 0b 83 e1 f9 f1 e3 93 e3 d3 3a e9 f9 72 75 fb f8 7c 5d b7 ab 6c 3e 84 41 35 68 56 ab d5 ba 5e 2e 57 cc ee ea de ce 38 b8 e3 a3 d3 bd cb bb 57 2f 1f c4 9c ca c9 e0 73 cf 5e 3e 5b ad ef 34 30 28 8a 45 96 2b 83 e2 77 5f 79 f6 c7 1f 7d f4 47 ef df Data Ascii: v(hj!5{0QF9"1f@ b8fAQrp,)#D0:LWq4NQIAn94JUfXm^\VKdv"d9)sgyvjtj8?:ru\|]l>A5hV^.W8W/s^>[40(E+w_y}G
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: fc d6 56 b1 b3 ff d2 d1 83 e3 c5 f9 49 56 f5 45 2c 52 5b 0e 06 57 9e b9 d6 e6 ab eb e5 89 2c 17 60 8a cc a6 c4 39 95 ba aa 67 cd bd c7 b7 69 f0 d6 e8 e0 e6 e4 f0 c6 64 ef b2 2f 4a 04 e9 46 37 18 1a aa 59 07 d3 f8 e9 05 94 4e 70 b5 a7 8b b0 19 88 82 8a 17 aa af f5 70 ff e9 5f 9f 2a ba 7d 24 40 04 d8 4c 80 b8 28 0e ba d5 eb d5 e7 8d 09 ab ff 73 67 6c 25 83 ee 4e 46 30 ea f5 68 22 34 0f 28 d6 3b 6e 15 89 ac 37 dd 76 74 5f 26 ea 22 72 37 82 82 c0 50 85 a4 7b 25 22 62 70 9e d4 00 15 b1 eb 2b c7 8d e9 ab cf f6 c1 08 d1 b0 1b ef 61 9d c7 09 c1 50 81 cd 84 c8 54 01 90 f8 d7 5f bd a9 39 23 80 9a b2 73 48 68 2a a3 e1 18 88 04 a0 ac 2a 63 24 c3 aa ac 92 0a 21 04 e7 53 8c 88 e8 83 6f 9b e8 98 09 b0 69 db 10 82 8a 88 6a 19 82 22 20 93 f7 ac 00 20 16 0a 97 55 09 29 14 Data Ascii: VIVE,R[W,`9gid/JF7YNpp_}$@L(sgl%NF0h"4(;n7vt_&"r7P{%"bp+aPT_9#sHh*c$!Soij" U)
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: ca f1 3e 0f 07 45 70 44 0c c4 8e 99 3c 6d 2e 74 f2 de 73 31 90 a3 bb 7a fa 40 19 24 37 90 12 a9 92 2a 48 8b 31 69 4e 96 c5 72 94 14 4d 44 4d 08 89 ca ca 8a 02 7d a0 a2 e4 32 90 0b e0 03 7a 4f ce 11 92 00 3a e7 99 c9 4c d8 15 14 9c e5 84 44 ec 9c 1b 56 ec 02 39 34 4d 9a da 10 4a 30 d5 9c 3c c0 70 6b ec 07 45 19 7c 81 6c 6d 02 8f 3b a3 72 c8 6e 96 a4 8e 7a 30 99 8c 26 e3 c5 6a 35 1e 0e 56 ab ba a9 9b cb a3 00 a9 d9 1a 0d 2e 8d cb c0 be 2c d9 23 7d 78 ef e1 9b 87 97 be f2 fc 95 8f 1e 1d fd f8 d6 fd 59 5d ff f8 ee c3 f7 cf ce 0b c6 89 2f da 94 27 55 68 9a e6 f6 d1 71 92 bc 9c cd 9a f9 f4 c1 62 b5 4c 39 01 fc b5 cf bd f1 9b 6f bc fa 7f fd d3 ef 35 39 fd f2 8b cf fd d2 4b cf fd e1 8f df 7e e9 85 37 4b 1f 7e 70 e7 d6 c9 93 fb 90 9a 61 28 1f 9c 9d 3b 84 bb a7 e7 Data Ascii: >EpD<m.ts1z@$7*H1iNrMDM}2zO:LDV94MJ0<pkE\|lm;rnz0&j5V.,#}xY]/'UhqbL9o59K~7K~pa(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50117	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	382	OUT	GET /assets-products/img/glue-google-solid-logo.svg HTTP/1.1 Host: about.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:33 UTC	865	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 1554 Date: Mon, 27 May 2024 22:43:33 GMT Expires: Mon, 27 May 2024 22:43:33 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	525	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 67 6f 6f 67 6c 65 2d 73 6f 6c 69 64 2d 6c 6f 67 6f 22 20 77 69 64 74 68 3d 22 37 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 34 20 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 66 36 33 36 38 22 20 64 3d 22 4d 39 2e 32 34 20 38 2e 31 39 76 32 2e 34 36 68 35 2e 38 38 63 2d 2e 31 38 20 31 2e 33 38 2d 2e 36 34 20 32 2e 33 39 2d 31 2e 33 34 20 33 2e 31 2d 2e 38 36 2e 38 36 2d 32 2e 32 20 31 2e 38 2d 34 2e 35 34 20 31 2e 38 2d 33 2e 36 32 20 30 2d 36 2e 34 35 2d 32 2e 39 32 2d 36 2e 34 35 2d 36 2e 35 34 73 32 2e 38 33 2d 36 2e 35 34 20 36 2e 34 35 2d 36 2e 35 34 63 31 2e 39 35 20 Data Ascii: <svg id="google-solid-logo" width="74" height="24" viewBox="0 0 74 24" xmlns="http://www.w3.org/2000/svg"><path fill="#5f6368" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95
2024-05-27 22:43:33 UTC	1029	IN	Data Raw: 2e 38 31 2d 35 2e 38 33 2d 35 2e 38 31 7a 6d 30 20 39 2e 33 33 63 2d 31 2e 37 36 20 30 2d 33 2e 32 38 2d 31 2e 34 35 2d 33 2e 32 38 2d 33 2e 35 32 20 30 2d 32 2e 30 39 20 31 2e 35 32 2d 33 2e 35 32 20 33 2e 32 38 2d 33 2e 35 32 73 33 2e 32 38 20 31 2e 34 33 20 33 2e 32 38 20 33 2e 35 32 63 30 20 32 2e 30 37 2d 31 2e 35 32 20 33 2e 35 32 2d 33 2e 32 38 20 33 2e 35 32 7a 6d 32 38 2e 35 38 2d 38 2e 30 33 68 2d 2e 30 39 63 2d 2e 35 37 2d 2e 36 38 2d 31 2e 36 37 2d 31 2e 33 2d 33 2e 30 36 2d 31 2e 33 43 34 37 2e 35 33 20 36 2e 31 39 20 34 35 20 38 2e 37 32 20 34 35 20 31 32 63 30 20 33 2e 32 36 20 32 2e 35 33 20 35 2e 38 31 20 35 2e 34 33 20 35 2e 38 31 20 31 2e 33 39 20 30 20 32 2e 34 39 2d 2e 36 32 20 33 2e 30 36 2d 31 2e 33 32 68 2e 30 39 76 2e 38 31 63 30 Data Ascii: .81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52zm28.58-8.03h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50119	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	369	OUT	GET /assets-products/img/glue-help.svg HTTP/1.1 Host: about.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:33 UTC	864	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 401 Date: Mon, 27 May 2024 22:43:33 GMT Expires: Mon, 27 May 2024 22:43:33 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	401	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 68 65 6c 70 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 66 36 33 36 38 22 20 64 3d 22 4d 31 32 20 32 43 36 2e 34 38 20 32 20 32 20 36 2e 34 38 20 32 20 31 32 73 34 2e 34 38 20 31 30 20 31 30 20 31 30 20 31 30 2d 34 2e 34 38 20 31 30 2d 31 30 53 31 37 2e 35 32 20 32 20 31 32 20 32 7a 6d 31 20 31 37 68 2d 32 76 2d 32 68 32 76 32 7a 6d 32 2e 30 37 2d 37 2e 37 35 6c 2d 2e 39 2e 39 32 43 31 33 2e 34 35 20 31 32 2e 39 20 31 33 20 31 33 2e 35 20 31 33 20 31 35 68 2d 32 76 2d 2e 35 63 30 2d 31 2e 31 2e Data Ascii: <svg id="help" width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path fill="#5f6368" d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 17h-2v-2h2v2zm2.07-7.75l-.9.92C13.45 12.9 13 13.5 13 15h-2v-.5c0-1.1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50112	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:33 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:33 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:33 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50111	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	800	OUT	GET /RIuSgyC1CZvycdCvOhK6kyGWtKZwR6gN88CimyIAdew4WMYXisZeD2x5A3fOi3GETtFbnKgxw7hb_2_ERw1-ygGSCExAsemrYx79J0hRsa4SZzzxz3A?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:33 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 193609 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:10:34 GMT Expires: Tue, 28 May 2024 20:10:34 GMT Cache-Control: public, max-age=86400, no-transform Age: 9179 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 55 08 02 00 00 00 16 b1 c0 74 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 20 00 49 44 41 54 78 9c 64 7d db 92 1c c9 8e 23 c0 a8 6e 95 b4 6b b3 b6 36 ff ff a5 a3 74 ec 03 00 7a d4 d9 9e 39 dd 52 55 66 84 5f 48 10 bc 38 9d ff fd df ff 97 7c 00 08 02 48 1c 81 03 8a 80 0e f0 00 00 0f 31 02 a0 03 92 82 28 82 12 31 82 48 08 a0 70 00 02 24 24 11 f8 90 4f 7e a8 fc 98 94 30 10 d0 af 10 00 06 fb 8f 0e 39 c2 91 00 82 62 be ed 0f 0b 9a c3 f3 80 90 40 52 12 70 88 11 3f d0 3f c0 07 cc 00 48 f8 bf 90 48 cf 90 20 88 b3 6f f4 40 48 8f 76 8e 86 38 3b 14 60 c4 43 11 00 e8 4f e7 11 7e bd 24 00 c0 c3 39 12 49 65 fd 44 cc 81 44 e8 e8 6b e6 af 34 04 05 80 82 fc 84 03 0c a8 3e 9a d8 55 01 81 0f f4 90 e7 Data Ascii: PNGIHDRUtsBITO IDATxd}#nk6tz9RUf_H8\|H1(1Hp$$O~09b@Rp??HH o@Hv8;`CO~$9IeDDk4>U
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: d1 51 b4 69 3a 0b 41 02 9f 82 11 79 ce 8b 08 c8 c2 43 bc c0 09 1c 1a f5 fd dc 23 19 20 bc 61 d6 c1 07 10 34 a4 80 47 a1 3b 36 2e 5e 14 16 b6 44 92 a0 a5 8d c5 11 02 c4 63 22 94 6d d4 03 9e 0c 07 04 4e c9 45 75 50 c2 1c c1 4f 3b de 06 f0 29 6a fb 27 b3 6a a3 ac 75 25 c5 70 e9 57 96 17 65 19 29 e1 a9 54 89 b2 24 7a d6 02 1e 90 c4 21 21 3c 30 7d f2 fa 61 c8 a3 60 b1 c8 47 50 0c 86 d7 2f 3b 53 c5 8e b4 e4 e7 7c ed 61 39 8d b2 93 19 de 80 ea ba e9 0e 39 10 06 ea e1 92 43 af bd 97 cb 4f 3b 51 3d 9a e5 d8 c4 62 b2 c0 cc 54 a6 c4 d8 22 fe a6 42 c2 01 be 08 1b cc 93 ed 8c 68 75 34 7c bf 3a 7f 60 50 6e ee 3a 67 c4 e8 06 67 a6 26 75 d4 03 fe a5 86 51 6f 03 85 a9 92 30 36 0c 85 20 00 98 e7 cf 9f 6f 61 26 5a bd 9a 60 09 89 84 7a 33 66 61 0b 1f f2 bd 94 61 0d c0 00 87 Data Ascii: Qi:AyC# a4G;6.^Dc"mNEuPO;)j'ju%pWe)T$z!!<0}a`GP/;S\|a99CO;Q=bT"Bhu4\|:`Pn:gg&uQo06 oa&Z`z3faa
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 15 25 20 49 0e ef 45 53 31 9e ac 6e 6c 3a e4 79 5f 3d a1 7b 79 f2 da 30 80 4c d6 a7 a0 70 b2 f0 31 c3 e2 50 8c af 80 a9 0b 5c 2c 75 8e a7 b4 e4 66 01 35 8c 64 9a 81 66 84 0b 40 37 24 71 7f 20 d2 86 64 27 62 58 b4 56 6e e6 cf 04 6f c8 88 a0 57 af 1a 3a af ff b0 82 98 65 87 08 7d 32 bb ae d5 98 7f 24 2f f4 d4 27 4e 70 38 26 6d 89 67 e9 85 9f 50 b3 c1 2a 82 c5 db ce dc 92 d7 48 03 22 21 19 a9 06 5d 9f 5d 8b 75 3c 02 62 bc 9b e4 47 36 e1 c7 23 24 f4 27 c7 15 cb 0d 76 41 8c 15 28 d5 91 7d 68 cd c6 c1 ae 4f 10 40 7b de 06 b2 71 80 05 f6 b7 0a 02 8b 06 d0 f3 fb cf 37 12 86 56 11 2c 0f a9 c6 06 f6 70 61 e3 91 57 8b 8a 17 19 02 63 b2 7d cc 30 82 a6 47 87 e5 d1 71 89 27 39 87 4d 8f b1 99 e4 5d c1 9a 9d 4a fd d4 2a 8c 62 33 ae 06 52 53 06 b3 69 55 98 ca 75 23 a7 d3 Data Ascii: % IES1nl:y_={y0Lp1P\,uf5df@7$q d'bXVnoW:e}2$/'Np8&mgPH"!]]u<bG6#$'vA(}hO@{q7V,paWc}0Gq'9M]Jb3RSiUu#
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: f0 64 36 54 bc cc 29 da 26 5a 0d 17 2e d9 35 51 4a 27 4f a9 e1 52 ff cf c6 75 8b cf 9b 0d 82 5d 9e d7 16 1a 90 5b c2 b4 06 19 b8 b9 99 04 79 f0 72 0a df 34 81 b1 2e d6 87 77 d4 ce 86 16 ad 91 10 b7 fa 43 65 bd e2 50 1f 4d 6a e0 53 cd 54 7f e2 e5 1e 61 a7 69 21 d1 ea 50 98 2a 6e 1d 7c 77 11 9c 58 8c 98 aa 04 88 ba 32 31 30 e2 44 14 4a 3f 5d 2b c8 f8 97 b4 05 8d 03 c9 2d 92 a6 4b 9f 41 38 b9 f2 7c ff f9 cd 43 24 2f 3d 6b 7a 74 15 88 b4 34 d8 64 d5 ef 8e 6b 1b e3 38 ad a5 34 29 b9 2a e7 34 94 40 ba f6 ab a9 60 6f 70 ab ec 15 1f 3f 40 be 1b 1f 1b 68 81 d3 65 ca ec 08 16 79 16 c5 f1 fe 8c 91 a2 e5 ea a7 e8 37 20 c4 e3 c2 be ab 34 3c 11 77 9e d8 70 3b 28 e1 95 a8 c3 b5 71 32 7f d7 d1 ea 65 30 43 7c 6a e3 0a a3 9d 4e 12 99 98 f2 69 6b fc 00 a7 3e 83 0c 83 d7 44 Data Ascii: d6T)&Z.5QJ'ORu][yr4.wCePMjSTai!Pn\|wX210DJ?]+-KA8\|C$/=kzt4dk84)4@`op?@hey7 4<wp;(q2e0C\|jNik>D
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 10 b3 c2 e9 7c b8 d1 a0 11 f7 19 e2 13 d3 d3 b8 da e8 bd 64 f8 01 d9 5e 61 de 33 d8 2b a1 04 98 4d 2c 34 aa bb b7 ce 1f 3b a7 0b 76 a8 df e0 2d a8 c8 27 2f da b0 de 95 81 06 d3 c5 d5 53 96 56 04 cc 44 40 cf ef ef ef 3a 5c 75 9e ba 64 b0 a7 83 0f 37 60 1a fd 4e 41 b1 8d 33 ab 31 8d d3 cd c1 3e ca 7b e9 00 fa 69 a4 b5 7b 1d 7c 4f c8 0f 38 9c 2d 6e a8 a4 21 d1 32 39 ca fa b2 82 f1 45 34 a6 aa 02 12 ff 02 88 39 e0 cf d3 19 29 18 03 d0 9f 7b 95 36 d2 38 cb 44 14 5e 7c 62 95 f4 20 8a 5d fd 82 8b a7 ed ad 51 fc 8c a9 0d d5 91 78 77 3e 42 93 2b 0c 8e 76 5d b6 d0 25 67 45 5f fe 8d 9f 7c fa 31 04 eb 15 8a b8 c5 4b 95 5a 1b a2 e7 65 85 5e e0 7b 77 01 dc d4 77 1c b2 90 bc 94 5d ba c8 84 5f eb 18 05 93 d6 48 a4 e2 56 65 a0 4f 21 f0 71 36 a5 40 55 39 0f 33 70 b8 03 b5 Data Ascii: \|d^a3+M,4;v-'/SVD@:\ud7`NA31>{i{\|O8-n!29E49){68D^\|b ]Qxw>B+v]%gE_\|1KZe^{ww]_HVeO!q6@U93p
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 7d 70 90 d4 2e f0 18 47 d0 a5 0f 60 45 ec 6a a1 e2 3d 65 f1 b1 76 e9 9a a6 ec 93 92 17 23 29 07 70 cb 04 9e 5a ca e6 15 f8 e2 bc 15 c7 6c 6d 48 42 91 0f 15 d6 3d 2f 3e fd f9 ee 3d 5c aa 44 7c 46 0f 66 9d 0c 54 7c 67 3d 00 44 2e 76 cd 1f f7 9e 9c 30 b6 bb 83 83 39 b0 08 15 49 2f a5 0c f9 04 3e 74 14 02 9b 92 7c b2 1a 80 b2 74 a9 99 05 14 93 c1 a7 f9 ae 38 c5 39 0d e8 70 4d c2 8f 3d ea 0a 90 3a 7a 88 bf e0 5a 29 a2 d4 b7 6a fb a9 b5 3e 25 ab 9c 64 62 b5 a6 c0 12 1e b8 cf 3e e8 e2 11 a7 e9 30 6e 2d 40 43 30 ad 2c 74 60 7d ea 3a d9 58 3a 40 c7 01 ce 2c bb c7 a2 7f 2d 87 d7 cd f2 51 f2 de c1 55 92 84 f7 d1 45 1a 1c 01 84 4b 7e 61 d2 09 d2 81 df 35 24 46 58 e9 6c ff c2 32 88 47 dd f8 1e ad 98 b4 36 b2 a2 55 2f aa c0 2d 07 60 49 26 99 83 3f 2f 42 56 a8 26 5d b7 Data Ascii: }p.G`Ej=ev#)pZlmHB=/>=\D\|FfT\|g=D.v09I/>t\|t89pM=:zZ)j>%db>0n-@C0,t`}:X:@,-QUEK~a5$FXl2G6U/-`I&?/BV&]
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 78 c9 1e 65 9e 75 c7 02 9a 11 e6 12 6d 0b 99 65 4f 62 40 bd 39 b1 14 cb db 18 7e 80 a1 96 05 b7 98 29 d1 28 db a8 56 81 d6 4a b1 90 6a 11 48 43 38 b5 4d b5 67 13 09 06 af ce 18 19 bb 2b 5a db 60 c6 91 60 ce 6b fa 06 a5 0f 12 1c ac 6f c8 e3 2b 16 92 66 4b 7b 23 3f 37 ac 26 15 5e 38 0d 34 3e 49 27 26 89 6e f6 7c 4a 21 f6 1e 15 3f 62 64 9b 3d 15 f2 78 fe 4d e8 44 6f 54 67 b6 9a 54 36 1a fc 72 b8 d4 87 2a 70 e8 a7 a2 fd d9 72 3b 8d e7 3c 7b d7 82 ba fa 68 69 e5 c2 52 c0 38 6c 71 04 6e 65 5e b7 55 8d 13 d6 51 60 8e 88 5f a7 fb e2 20 17 47 da 55 7f 33 2b fe c8 24 95 da 37 49 6c ef 7b ba d1 37 9b 68 ad 55 5c 4d c5 3a 65 04 1a ba bc 66 39 34 a2 e7 fc 72 22 b7 be 51 95 fe a4 39 68 25 2d e0 66 ca d9 f1 56 f9 6d 9c ea 61 44 1c da 87 ae a4 bd d3 7f 6a d2 ee d2 32 42 Data Ascii: xeumeOb@9~)(VJjHC8Mg+Z``ko+fK{#?7&^84>I'&n\|J!?bd=xMDoTgT6r*pr;<{hiR8lqne^UQ`_ GU3+$7Il{7hU\M:ef94r"Q9h%-fVmaDj2B
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 31 d1 dc 2e 56 66 5b ac f0 32 e8 70 93 18 d9 9b ec 0f 5f 32 11 ae 61 f8 43 18 47 0b 55 eb 84 ed 63 36 a7 87 f7 81 ac 9f e4 e2 56 0e e4 83 f9 8e df f2 79 89 8b ed 4e 5b 3d 7b 2a 8d 78 d6 ff 28 1f cd ba 3b 5d 51 7d 30 69 0b 86 5a 13 fc a8 79 bf 81 2f 79 e7 0c c4 c3 43 88 12 e6 d9 2b 82 e4 62 c1 99 86 ed f6 c0 36 6a fe 63 e9 5f 53 d8 df ef 9f fb f6 1b 17 f0 cf 73 74 f6 44 80 77 cb b3 48 21 3a 77 1d b5 ce 5f 27 3b 69 af 1f 1e 6a c8 74 bc f5 61 0a 64 16 8b 3c 63 33 d0 c4 24 81 b3 9d b9 0a 16 57 75 1b 70 67 8f 95 17 4d 2a ca c5 15 96 ec 7b 78 8b b1 d3 9a 96 20 bb 99 ec be ab 13 ca 15 34 bb bf c1 d4 ed 2f 8a 14 09 61 1d 02 42 c7 f4 5b f5 66 67 0a 4b 35 e4 42 0a 04 7a 58 c4 8c fe 5e e2 31 e3 f8 67 42 aa 6e 3b 43 be 7c cf 8a 4c 2b d1 1b 4e 98 b6 fe 6f 74 21 37 47 Data Ascii: 1.Vf[2p_2aCGUc6VyN[={x(;]Q}0iZy/yC+b6jc_SstDwH!:w_';ijtad<c3$WupgM{x 4/aB[fgK5BzX^1gBn;C\|L+Not!7G
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 70 12 96 c8 ce 4e f4 21 f6 1d 29 90 2f 37 5e 3e 9f 5c 1c 81 d5 cf b4 aa 9f 2a ce f4 16 24 54 12 ce b4 87 c7 5b cc 92 f5 cd 66 b4 41 79 f0 b4 f6 45 eb 19 24 38 d9 a4 5d 42 a5 55 dc e6 57 6e aa f1 b3 be 48 a8 a8 61 c2 ad 0e 92 8c 70 67 7e 4f f8 10 5f bd 3b 05 ce 42 64 01 38 38 f6 68 05 db 46 c3 8c 6d 86 9e 2c 88 aa b6 af 23 78 45 c0 ad 26 b3 20 3d cd 06 61 d3 09 6d c0 b7 5b 8d de 96 43 eb 60 df e9 2d fb 38 10 8e 88 0e 01 3b fb 9b 18 c3 a2 4f ad c3 9e be 09 42 ac 31 b0 c1 4c cb 58 7d ba 75 91 bd 68 18 ca 4c 62 2b 2c 18 cf 2d da 86 34 03 fc 05 be d8 97 3a 35 b3 7d 3b 5a 62 b9 de c5 c9 f6 90 4c 4b b1 e9 55 a6 84 0b 75 0a 5b 84 94 9c 56 cc 70 26 a8 06 ac 01 60 86 f7 ca 02 94 4a cc 3c ae 88 1d 29 71 b9 55 20 e3 26 47 6e 2c 18 7f fe 62 ad 03 8f a0 49 a5 b7 69 aa Data Ascii: pN!)/7^>\*$T[fAyE$8]BUWnHapg~O_;Bd88hFm,#xE& =am[C`-8;OB1LX}uhLb+,-4:5};ZbLKUu[Vp&`J<)qU &Gn,bIi
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 95 5d 46 f6 88 16 76 41 aa 87 cd 72 d1 a4 5e 6d 22 16 f8 ae 15 a8 47 7e 49 df f8 56 86 f7 a0 4b 8f 2a 26 62 93 a2 ca 51 4d 87 d8 99 d0 42 96 55 24 9f 2a fd 6e 01 83 c2 dc d9 77 e1 93 77 89 db 9f 4f de dd d9 02 9e a9 99 c7 26 e7 3a ba 24 25 5e d8 cf 97 84 7a 11 a3 e2 d2 a7 14 cd 03 f0 77 f9 56 8b 65 8e 58 09 d3 f9 f9 c4 25 4f 73 ff 4a de f5 5f 11 cb d6 9c 3e ef 25 8f ad 4a d0 41 99 9c f8 fe 7e 86 e4 5f 8d f8 b9 e8 77 ff 90 81 bc b0 31 47 91 d6 ab c0 7b be 6e 45 07 bd 21 b7 e8 c5 b4 b7 5a c1 42 b5 3d b8 58 58 ce 17 a2 81 14 95 9a 46 7b ee 54 0f 3f 56 e6 6d 85 0e f8 c5 12 4e c3 a9 80 dc a7 be 99 99 96 f3 16 85 a8 0a 60 c8 61 63 ad bd a7 3d 86 c2 d5 01 cf f7 f7 f7 55 aa d8 6d bc 12 2c 37 e8 d4 2d aa 9d 8c 3e f0 b5 c8 9f d5 96 7e 52 d7 e6 59 74 76 7d e2 7d ba Data Ascii: ]FvAr^m"G~IVK&bQMBU$nwwO&:$%^zwVeX%OsJ_>%JA~_w1G{nE!ZB=XXF{T?VmN`ac=Um,7->~RYtv}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50114	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	587	OUT	GET /eO6nD1O47tirNw4TM76SfwotF_tP25t_TASE2l8_Gyw4xLr7ckkcg4PuEb8cxngaWwks2XZqVMT-et2ZGUU9W648mg7_hSfl6kv93uyvXvvjwCVzRXw=w1440-l90-sg-rj-c0xffffff HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:33 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 24425 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:48:50 GMT Expires: Tue, 28 May 2024 19:48:50 GMT Cache-Control: public, max-age=86400, no-transform Age: 10483 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	856	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 0a 0a 0a 0a 0a 0a 0a 0a 08 0a 0a 08 0a 08 08 08 0a 08 0a 08 0a 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 0a 0a 08 08 10 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0d 0b 0d 0f 0d 0f 0f 0f 0f 0f 0d 0d 0f 0f 0d 0f 0f 0d 0d 0f 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 01 86 01 86 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 00 09 ff c4 00 4d 10 00 01 03 02 03 04 07 05 05 05 05 06 05 04 03 00 01 00 02 03 04 11 05 12 21 06 31 41 51 07 13 22 61 71 81 91 08 32 a1 b1 f0 14 42 52 c1 d1 Data Ascii: JFIF"M!1AQ"aq2BR
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: a9 e1 3c b6 36 ac 6b 55 4a 95 f3 0f 27 ab 0e 16 dc 9a d0 d3 e4 e3 c5 3e 83 0c 4b 37 0f d5 73 a5 53 03 67 6b 9b e3 4f 1d 7d 6d 61 19 a9 73 6b c5 46 63 18 b1 89 bb f5 53 db 8e 8a a1 b5 bb 2d 34 87 b3 bb 7a e4 43 2c a7 6b f0 9d 5a b9 e3 0b db 52 9d 53 b5 12 39 d7 cd 6d 55 f7 01 da eb b0 0e 2a 8a 76 32 60 6d 95 49 e1 3b 37 33 1d ab 74 e2 ba 55 61 4e 51 d2 c7 2e 84 e7 19 ea 9e a5 b0 63 c6 fd ca 42 1a 6c dd ab a8 79 30 87 72 52 78 64 0f 01 73 e7 15 6e 13 b2 bd 47 b0 52 03 c5 13 0e ac 1d 68 6a 42 ae a7 ab 06 ea 0f 63 ea 4b ea 2f c3 87 aa 10 a7 9a f2 e8 67 ad 53 2b 51 5b b3 65 8e 2d d6 dc a4 f0 d2 9a 39 f6 6d fb 92 3b 3b 5d 98 ab 50 5c 65 6a be 12 dd 1a 57 2a 24 41 2c 02 eb 9c d1 3b 20 4a 06 a0 44 00 d4 54 30 f1 d5 43 d4 ca ce 6a 41 db 08 7f 11 44 ff 00 e9 f7 79 Data Ascii: <6kUJ'>K7sSgkO}maskFcS-4zC,kZRS9mUv2`mI;73tUaNQ.cBly0rRxdsnGRhjBcK/gS+Q[e-9m;;]P\ejW$A,; JDT0CjADy
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 75 30 1d 9b 1b f7 d5 15 97 25 d7 df d3 f5 11 c6 71 52 e3 77 12 5c e3 bb f5 e4 3e bc 23 e9 a3 e2 77 70 b6 ee ef 92 42 26 9f 78 ef 3c f7 a5 e6 9b b2 3c ff 00 a2 e2 34 7a 3b df 50 5f 37 d7 21 f2 f3 49 fd a8 81 a7 1f 80 fe bf 5b d2 32 cb 6d 3d 7b cf 2f 00 91 6e ba 9f ea 7b be bf 34 54 4a b9 5c 7f 4f 58 79 f9 a7 cc c4 38 35 b7 dd 7b 9d 3c ed c4 a6 b8 5e 0e e7 9b db 4e 5c 2c af f8 26 cc ee dc 07 e6 b1 d5 ad 18 fa 9d 3c 3e 16 75 35 7a 22 a7 49 80 ca fd 4b 40 e3 94 69 eb fa 59 37 c4 36 6e 46 1f 74 9e 26 db ff 00 d5 6c 98 7e 0d 6d ca 54 e0 e1 db db f0 d7 f5 58 d6 2a 57 d8 e9 be cf 85 b7 77 39 ea 97 16 20 f6 4e 57 70 be e3 6e 1d c7 bf 4b 1d fc c6 a7 b1 5d 2a 92 32 4a 4d b7 02 77 83 c8 f7 26 db 77 d1 8e 60 5f 10 b3 c0 b9 60 dc eb 7c 9d df c7 8e f5 97 61 b5 39 5d 67 Data Ascii: u0%qRw\>#wpB&x<<4z;P_7!I[2m={/n{4TJ\OXy85{<^N\,&<>u5z"IK@iY76nFt&l~mTXWw9 NWpnK]2JMw&w`_`\|a9]g
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 4b dc 5d 58 36 9b 13 00 90 b3 7c 5a 72 6e b8 b0 95 aa 7c 9d 39 46 f4 df b1 11 25 66 aa b1 b6 58 d3 41 b5 f5 29 7c 5a ac b7 81 f4 59 ae db 56 13 63 ae 8b d7 43 1b ad cf 17 53 04 9a 6a c4 b6 2f b4 6d 68 df 6f ad eb 06 e9 1f 6a cc cf 27 ee 0b 86 0e 66 fb fc 07 c5 d7 e0 05 ac bb 45 88 12 db 5c 8d fa 9f ba 00 bb 9d fc ad f8 91 cc 2c 92 6a 92 f7 13 b9 a0 d9 a3 90 d4 34 79 6f 4c ad 8a 75 da 5c 91 30 d8 38 e1 a2 df 36 37 9f 97 06 ef 3c dd fa 72 fe 89 dc 63 4f 2f 86 bf 3b 69 e2 9b 3e 3b 90 06 ef 99 e7 ea 95 aa 9e cd b8 e3 a0 f2 d3 e6 0a 42 d4 d7 b0 d6 ae a7 87 af e8 13 3a 76 66 36 49 4a ef 8a 93 d9 e8 6e eb aa 54 79 62 d8 69 2c f5 14 59 73 d9 cc 38 68 07 72 be 52 d2 ee 0a bf b3 74 dc 55 8c 54 db bb bd 72 23 24 b5 67 a9 b5 95 90 38 8d 60 67 7b 94 04 fb 60 f6 fd db Data Ascii: K]X6\|Zrn\|9F%fXA)\|ZYVcCSj/mhoj'fE\,j4yoLu\0867<rcO/;i>;B:vf6IJnTybi,Ys8hrRtUTr#$g8`g{`
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 71 2d d5 c3 cd ad 27 c9 75 86 09 b4 32 80 2e d3 6e 7a f1 5e 76 bc 5a 96 88 ed c2 ce 37 b9 74 a8 a1 b8 d1 51 b1 fa 29 d9 ab 35 ee 57 8c 3b 11 cc 35 05 3f b0 3b c2 cc e0 f9 5c 64 2a 24 60 95 bb 7f 3c 66 ce 69 1f 25 0f 37 49 92 13 c4 2d d7 1c d8 d8 e4 07 b3 f0 59 4e d4 f4 52 e0 49 60 3e 16 41 29 74 3a 10 9d 29 6f a0 e3 67 3a 5a 6e e7 9b 1e f5 78 65 54 73 8d 1d bd 61 d2 74 73 3f e0 3e 85 3e c2 30 3a c8 8d da 1d 61 f7 4d ec ae e9 b6 56 71 a7 c9 a3 5a 1b 01 19 de 01 f2 41 51 d1 74 24 5b 28 09 ae cb ed 5c da 36 48 c8 f2 d3 d5 68 74 95 00 8b d8 84 1a 92 e4 cc 99 97 53 9c b6 cf a3 27 42 4b 9a 2e de 4b 53 f6 7f 8e d1 79 9f 9a bc e2 18 73 64 16 23 e0 83 62 f6 6f aa 26 c2 c2 eb 4e 1a f9 f5 2b 88 ab 9a 9d 8b fd 33 34 4b 16 23 53 45 a2 59 d1 ae e2 38 f6 1a 96 20 4e 0b Data Ascii: q-'u2.nz^vZ7tQ)5W;5?;\d*$`<fi%7I-YNRI`>A)t:)og:ZnxeTsats?>>0:aMVqZAQt$[(\6HhtS'BK.KSysd#bo&N+34K#SEY8 N
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 6d 8a e9 02 9a 46 c7 1d 5d 2b 1e 18 d7 34 39 8c 66 ae 36 d4 b1 d6 02 e2 ff 00 7b 7f 0e 5a 4e 1f b2 78 24 b0 32 3e a8 31 d7 61 cc 19 20 91 a4 b8 17 07 48 d6 96 91 62 41 bb 8b 40 f0 08 4a 9c 79 58 74 1c ed c5 17 f0 af fa 19 3c db 4e 2c 0c 64 10 45 c8 71 00 f9 01 a2 ce 7a 46 87 39 8d c3 47 07 6a 37 db 4d 46 9e 45 6c 3d 31 ec 1d 0b 18 45 0c 84 4c 64 8f dc 25 cd 8d 99 06 72 0b 9a 41 71 27 99 b0 be e5 90 7d 87 a9 89 fd 6b cb 83 4b 9e 5e fd 5c 79 92 74 d6 db ad dd 64 bc a9 3b ad cb 49 e9 6b 34 ba bd 0c e7 a4 9c 67 b1 14 03 fe a4 9f 16 b0 79 0c c7 cc 2a 65 33 ec 3e 4b d8 a6 20 65 91 d2 1d ee 24 81 c8 6e 68 f2 16 1e 49 37 37 4f 45 e8 61 4f 24 14 4f 1f 56 af 79 51 cf f2 c4 cd 0d 47 a5 b5 fa e7 65 dd 7e ca 55 e3 31 6e 63 fb fa 68 27 02 f7 05 ec 6f 57 36 ba dc 8f dd Data Ascii: mF]+49f6{ZNx$2>1a HbA@JyXt<N,dEqzF9Gj7MFEl=1ELd%rAq'}kK^\ytd;Ik4gy*e3>K e$nhI77OEaO$OVyQGe~U1nch'oW6
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: d8 ae 1f 68 a0 a6 69 02 47 02 f9 4f 27 ca 35 f3 6c 59 58 3c 4f e2 58 f1 13 49 5b af e9 cf f3 d4 df 85 a6 db 6f a6 bf 3c bf 3d 0c 7a 69 b3 4a e7 1e 24 fc 41 16 f8 7a a6 ad 87 42 78 8b b6 dc 78 9f 80 e2 95 ab 68 6b bb 27 71 73 6f a5 f4 e2 7c fe 7d c9 cd 2b 6f 98 8e e7 7a e8 49 f8 79 fc 37 27 64 9a e8 73 24 b5 6b d5 fd c8 bf af af 14 76 84 20 58 9d 34 fa b7 c1 3b 8a 3b a3 27 60 d3 8d c5 29 6b c8 d0 a9 18 ab 4e f1 e6 9b b3 0f 52 b4 1b 36 e7 5b 80 e7 a8 58 66 e1 b9 d6 a4 a7 b0 f3 06 da a7 46 6e 3d 38 2b 54 7d 28 17 02 2d ab 5a 5c 40 22 f6 02 e5 56 f6 ab 0e 64 34 ee d0 67 75 9a d3 c4 66 3a 90 48 bd ec 0a a6 6c b9 b1 78 23 57 46 f0 3c 5c 2c 12 63 4a 15 20 ea 7e 31 d3 af 3a 75 15 2e aa fe c2 7b 4b b4 ef a8 93 3b f7 0d 1a c1 b9 a3 f3 27 89 e3 e1 60 12 a6 d1 d6 f5 Data Ascii: hiGO'5lYX<OXI[o<=ziJ$AzBxxhk'qso\|}+ozIy7'ds$kv X4;;'`)kNR6[XfFn=8+T}(-Z\@"Vd4guf:Hlx#WF<\,cJ ~1:u.{K;'`
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: d5 08 b4 95 c5 ec bc 02 f1 6a 10 55 46 86 08 e1 12 c9 46 aa 97 41 90 95 e0 17 8a 21 0a 50 14 62 10 15 08 10 94 52 8e 42 0b 20 40 85 14 a3 22 a8 40 10 21 b2 05 08 3a 08 42 00 8c d0 ac 58 30 47 01 11 a8 e0 a2 40 c1 18 22 82 8e 14 00 21 1c 04 56 94 60 a0 01 42 10 00 8c 14 20 21 1d a1 15 18 be c2 e7 41 c7 f5 44 87 2a fb 68 f4 b7 d5 b5 b4 4c 3c 04 93 db 89 3f dd 46 7c 00 eb 08 3b ee ce 4b 88 9c f9 a7 76 97 b2 d5 7a 5c c4 4d 75 74 f3 9d 23 74 ae 2d bf e1 1a 31 ad 1c 6c c0 de ed 14 63 70 cb 0c ad ec 0e ed e7 ce eb 34 9d dd ca 14 c8 b6 25 df 78 eb de e1 7f 4b a5 e3 d9 c7 37 ee bb 4e 2d 37 0a 5e ab 66 41 e2 6f e2 7f 55 13 2e 1b 34 5a b1 ce d3 78 bd c7 c5 2d bb 8d 48 79 45 31 69 df 7f 11 ae bf 5f 05 2b 43 8a b4 e9 b8 a8 1a 3d b0 6d c3 66 6d 8f 3b 69 fd 14 fc 70 31 Data Ascii: jUFFA!PbRB @"@!:BX0G@"!V`B !AD*hL<?F\|;Kvz\Mut#t-1lcp4%xK7N-7^fAoU.4Zx-HyE1i_+C=mfm;ip1
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: ae b9 93 31 62 81 d4 e2 33 6d 66 19 ad 6e 01 fd ab 78 93 7f f4 4e e3 1a 17 80 6c 01 2d b9 b3 5b 1b 06 a4 9d e4 ee e6 49 23 8d 95 4e a6 c3 42 6c 4e a0 f8 5f e6 3e 21 2f 8f e2 4e 11 36 31 c6 c5 fd e0 0b b5 be 02 f7 ef 20 72 5b 7b 9b ed cd 99 9d 7b 6a f9 22 03 15 90 bd e5 ce 3a 1f 77 5b 9b 5e da 81 7d 78 94 9e 1e 6c 7e be b7 25 30 c6 e6 24 71 20 ef f0 e7 e4 9b 35 d9 5d a2 e9 a5 a6 53 8e de aa 7d 59 66 ae 83 33 33 7e 13 bf 9f 2f 3e ee f0 a7 76 1a ac 67 00 ef b1 dd cc 91 f9 05 05 09 ec 38 6f 1f d6 ed f8 1f 92 6d 87 d6 96 b8 11 c0 f9 ee fa fa 0b 9d 28 66 8b 89 d7 a7 35 19 c6 47 40 0a 4c cd d4 03 71 e5 bb 91 e3 fa ac 83 a4 3d 8f 31 1c ec 17 8c ef fe 1b 90 7d 2f bb 95 f9 59 6b 5b 1b 8c 09 a3 1b af 61 7e e3 ba e3 87 0b f9 84 ef 13 c2 c4 83 2b 85 ee 72 d8 ee bb bb Data Ascii: 1b3mfnxNl-[I#NBlN_>!/N61 r[{{j":w[^}xl~%0$q 5]S}Yf33~/>vg8om(f5G@Lq=1}/Yk[a~+r
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: f9 a7 b3 d5 6e 2d d0 9e b2 2f de c5 6d f7 67 bd 6f 21 ea 07 25 f4 33 d9 df 1a 35 51 b2 ae 4b 5d cc 0c 81 b7 b8 8d 80 8e b7 c1 d2 48 dc c7 f8 44 63 81 59 ef ae 56 68 71 d1 3e 5f 9f a1 b9 86 a3 04 50 42 30 4e 62 c5 1a 8c 8a 11 c0 40 ba 10 a9 6e 8a b5 5d b4 ac 61 d4 80 a6 f1 ea 9c ac 27 b8 ae 1b e9 b3 a4 f9 ba f2 c8 df 66 8b de de 89 b0 83 93 b2 11 5a a2 82 b9 d7 9f ed d4 7f 88 7c 13 98 ba 42 8b f1 0f 55 f3 d1 db 7d 53 ff 00 30 a4 ce dd 54 7f cc 72 d1 fe 3b ea 63 58 a4 7d 0f 93 a4 28 87 de 1e a1 37 7f 49 51 7e 21 ea be 7a 3f 6d ea 0f fc 57 7a a6 e7 6b aa 0f fc 47 7a a9 fe 33 ea 1f f3 3d 0f a1 ce e9 3a 2f c4 3d 57 97 ce ef f6 9e 7f f9 8e f5 42 ad fe 33 ea 0f f2 fd 0f a8 ed 28 e1 26 11 c1 58 4e a0 70 8c d4 50 84 2b 10 51 a8 e1 11 a8 ed 0a 10 38 46 08 97 46 63 Data Ascii: n-/mgo!%35QK]HDcYVhq>_PB0Nb@n]a'fZ\|BU}S0Tr;cX}(7IQ~!z?mWzkGz3=:/=WB3(&XNpP+Q8FFc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50113	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	818	OUT	GET /sq57GaRCOEk-TcLHr8ZeehZOkRrOLLv0ZIL34gOO2TNqeQjAcLqZM_YvwoZCLFQbW1DS0K28QakL4JTKArVVV4pp-PtTltns7K25Pu5d7v-6dRSh-g=w1440-l90-sg-rj-c0xffffff HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:33 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 104459 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:41:59 GMT Expires: Tue, 28 May 2024 20:41:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 7294 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	856	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 0a 0a 0a 08 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 0a 0a 08 08 0d 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0f 0d 0a 0d 0f 0d 0f 0d 0f 0f 0f 0d 0d 0d 0d 0d 0d 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 02 35 03 e8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 00 09 ff c4 00 5d 10 00 01 03 02 03 05 04 06 06 05 07 08 07 07 01 09 01 00 02 03 04 11 05 12 21 06 07 31 41 51 13 22 61 71 08 32 81 91 a1 b1 14 23 42 52 c1 d1 Data Ascii: JFIF5"]!1AQ"aq2#BR
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 99 2f 58 11 16 4e 9b 20 19 1c cd 73 ce 97 e2 ae ad a5 a3 82 68 33 b6 d7 0d fc 15 07 4d 0e 82 f7 4e d8 55 45 43 9c 21 61 2e 0e 20 5b a2 a3 af a3 2f 78 95 af b1 6a 99 af 0c 69 ba 59 b2 bb 34 d9 64 0d 7f 0b f3 e8 9f 36 d7 66 23 6b da c8 c7 42 6c ac cc 1b 73 ce 64 5d a5 ce 70 2f e2 99 b0 9a 68 c3 dc 67 23 33 6f eb 2b 7c 33 16 8a a9 b9 01 ed 73 2a 9d c3 31 bb 15 5b b4 9b 3c d1 09 24 5a d7 d3 99 2a b8 c2 69 f3 1b 2b 77 6c b1 06 48 5e 18 41 02 e0 5b e6 a0 9b 3d b3 ce cf 98 03 c7 d8 ae 5d 3b 38 15 33 1a 72 eb ba 91 6c 74 06 33 7b 29 11 a6 cc fc dc d3 ce cf e1 6c ca 4f 41 af 9a 36 83 08 37 ed 8f aa 0e 8a 07 38 b9 b7 1b 26 17 00 75 dd 42 31 9a 4b 38 e6 d3 4d 11 10 55 b5 a3 53 75 2d da 9c 3c 4d a8 bb 6c 2f a0 50 78 68 5a 1d 94 ea 41 e6 81 2f 20 6a a5 b3 4a 54 5f 13 Data Ascii: /XN sh3MNUEC!a. [/xjiY4d6f#kBlsd]p/hg#3o+\|3s1[<$Zi+wlH^A[=];83rlt3{)lOA678&uB1K8MUSu-<Ml/PxhZA/ jJT_
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 5b 84 f8 92 d7 20 21 39 01 06 a6 4f 18 37 ac 14 8c a8 de 0b eb 05 24 2a 51 b2 62 e2 e0 5d 5c 09 57 2a fb 6f 3f a7 83 f5 87 cc 29 e7 d9 f6 7e 0a 0b b6 a3 f9 c4 3e 7f 8a 9d 1f 57 d8 a5 3b 04 3b 3d 67 2c ad b5 c7 eb a5 ff 00 78 ef 99 50 cc 49 b9 85 86 aa 5f b6 e3 eb a4 f1 7b be 65 35 60 54 20 b8 34 f1 24 0f 7a 2d a3 31 b2 6e 6c ad ba 8d e1 b8 1c 8d d7 29 b7 86 ab b5 4d b9 5a 63 07 d9 28 a3 6e 5c ad 26 da 92 01 24 fb 55 71 bd bd 83 6b 1b f4 a8 86 5c a4 76 8d 1c 08 75 80 70 1c 8d f8 f9 f8 29 09 03 44 2b ee 75 55 3c 58 69 25 4a f0 d8 6c 63 fd 66 a6 1a 7a e0 9f a8 65 bb a3 fd 60 b9 9c 50 ae 5a 73 64 bf a3 6f 92 91 a8 d6 c9 1e e3 7c 94 90 14 1b f7 56 ec d9 09 37 57 94 e0 9b 71 02 91 9b a5 7e c9 b8 14 3c c8 92 57 4b 91 28 54 70 2a 19 b7 ed bb 08 4a 31 8d ae 73 5d Data Ascii: [ !9O7$Qb]\Wo?)~>W;;=g,xPI_{e5`T 4$z-1nl)MZc(n\&$Uqk\vup)D+uU<Xi%Jlcfze`PZsdo\|V7Wq~<WK(Tp*J1s]
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 92 3f 58 97 3b dc 42 de e1 b4 f2 54 c6 d9 06 9c f9 02 ad 1f 88 31 8d ed ea e4 8f 6c 31 00 d9 e4 6c 4f ee 87 7d 93 a5 f9 a8 e4 94 d2 48 e1 ab 9c 49 eb 74 2c 1b 01 91 e6 fa ea 78 ff 00 1c d4 ee 1c 39 90 37 33 85 cf c4 ab ca cc 46 9e 85 bc 1c fb 6c 35 27 c9 54 c6 1d 39 b9 d0 25 38 6d 3e 56 80 ed 08 1c 14 37 1b af 8c c8 40 3a dd 3e c7 43 2c a4 b9 ce c8 c3 c1 a3 a7 89 50 8d ac 6c 30 93 a5 dd d4 5c 9b fc 57 99 55 74 a2 be 30 65 8a 00 d6 df 77 9d 48 ee 03 e6 ac de c0 e1 6b ab 1f 64 ea 4b 2c 73 77 4f 25 66 e1 d8 88 70 59 4f 03 de 51 2e 11 9c dc 74 e9 f0 e0 ae dd 90 c7 89 02 eb 4d 87 57 b3 10 87 ae 0e 05 df 88 0e 07 bd 4f 09 2d ec 9d b8 29 ad 56 05 1b 9e 1f 61 7e 29 d5 a3 4b 72 49 29 aa 2e 11 f1 48 ad da d1 b8 4e 3a 15 9f f7 cf b0 ad 6c a2 70 3d 6e eb b4 e2 39 7b Data Ascii: ?X;BT1l1lO}HIt,x973Fl5'T9%8m>V7@:>C,Pl0\WUt0ewHkdK,swO%fpYOQ.tMWO-)Va~)KrI).HN:lp=n9{
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: e2 76 a4 39 af a5 7b bb cc 39 e3 04 f1 61 e2 07 ea 9e 5e 29 fb 79 3b bc 64 ed 32 31 a3 b4 b7 78 5b d7 1f f1 05 65 23 1a e0 5a 47 fc a8 f5 61 d1 61 36 cb 9e 2d 78 b7 44 af 66 ea c1 89 cd 77 d9 52 fd b9 d8 23 03 9c f6 fa 8f bd c7 43 d5 57 b8 11 d5 d1 8e 2f 70 68 f3 2a a3 29 64 81 18 2c e8 8f 72 ad f1 99 fe b5 c0 72 71 4e d8 0e cf be 77 b5 8d 06 c4 8b ba da 05 ad 37 5f e8 7f 42 e3 f4 8a b2 f9 cb bb d9 33 65 65 cd b9 36 c4 fb d5 f5 45 ba 6a 28 d9 d8 c7 0c 6c 8e d6 00 34 69 ed e3 7f 15 6e 23 b1 ed 2a 6d 5f ab 46 8a a3 dd 96 ce b2 08 5a c6 8e 0d 0a 5f 11 d5 1f 89 6c 9b a9 cd 85 cc 67 d5 3d 3c 0a 4f 09 47 5c 70 52 81 61 60 9e 20 ae 2c d4 71 b2 8d 62 f8 d3 9e 73 38 e8 38 0e 40 75 4a 31 5a eb 0c be d7 7e 4a 05 b5 78 c1 b7 66 d3 de 7f 1b 72 08 19 1e 2f 7e 01 4a 02 Data Ascii: v9{9a^)y;d21x[e#ZGaa6-xDfwR#CW/ph)d,rrqNw7_B3ee6Ej(l4in#m_FZ_lg=<OG\pRa` ,qbs88@uJ1Z~Jxfr/~J
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: e1 91 c4 16 72 6b b9 11 d3 a1 57 34 98 9c ed 73 24 ad fd db 89 6b 5d a5 da fe 04 ff 00 0f 34 64 45 c0 02 7d 5b e9 dc 54 db 7c f5 31 c8 d8 9a db 39 c7 31 0e 16 d1 b6 e1 fd a3 63 ec 55 33 30 f8 98 2d 2d ad d5 58 b8 d6 07 df 2f fb 24 68 3a 11 cb da 81 26 ee 1d 3c 2f 79 6d 80 cc 00 3a 13 6e 24 69 c3 cd 7a 5b 71 37 e2 38 7c ed cb 69 99 98 00 35 d4 6a d2 3b 8e e1 0d 3c 2f 92 7c e0 7f c0 54 c6 27 88 46 1f d9 b1 fa 5a e3 5b e5 f1 07 f0 51 2c 43 62 26 a8 a9 8b b6 79 7c 37 b8 1c 93 6e d6 61 0e 8e 67 46 6e 2e 2e d3 c3 87 44 9e 8b 79 8f 88 08 9f 7c cd 3d d7 fc ae 79 2c 46 05 8c 43 56 7a aa d6 76 db 62 1d c4 f8 84 38 24 1d 3c 96 a3 c0 b6 7d b0 b0 35 bc 00 09 8f 6c ab 4c 6d 2e e8 1d f8 fe 49 ab 60 77 a4 24 01 92 f1 20 59 dc 8f b5 20 de e6 31 dd ec d9 77 67 b8 19 75 3a Data Ascii: rkW4s$k]4dE}[T\|191cU30--X/$h:&</ym:n$iz[q78\|i5j;</\|T'FZ[Q,Cb&y\|7nagFn..Dy\|=y,FCVzvb8$<}5lLm.I`w$ Y 1wgu:
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: f1 57 d5 ce a4 0d 0d 81 bd a1 c7 65 6d c4 db 8b f5 4c f8 e5 25 ac e1 c3 82 55 b3 d8 9b 5f 1b 48 3a 80 01 1e 23 f3 45 ed 0d 40 cb 97 9d d7 b7 bd a7 64 28 20 85 17 a8 7a 26 27 a1 4a e4 9c 27 34 59 22 58 f7 a2 c4 88 b4 4f 68 b9 c9 c1 31 ed 33 f4 2a bf c2 5f de 3e 65 4d 76 9e 7b 02 a0 18 5d 70 cc 7c d1 74 ee b2 12 63 64 4e da cf dd 72 cd 1b 59 42 64 79 1c f5 5a 2b 6b a7 bb 48 55 24 d8 47 7a e8 ba 9c 8f 66 47 0b 84 2c 4f ca eb 85 56 c1 82 4b 19 b8 b9 1d 13 9d 7c 0e 2d 0f 00 87 0e 2a c5 a5 a1 17 b1 00 a7 da 7d 9e 8c 82 2d c4 2c f9 c3 1a eb e5 75 82 b7 8e be c4 12 15 ab e8 ab 8e 07 53 c9 13 fd 66 65 76 bd 1d 98 5b d9 6f 8a 33 1a db 28 e0 9e 58 dc 45 bb 47 11 af 00 75 fc 55 0e 76 b6 a2 81 e4 c3 a3 5e dc ae b8 d3 8d c1 e5 c3 f1 47 6e ea 09 71 0a b2 e9 0e 60 d2 1c Data Ascii: WemL%U_H:#E@d( z&'J'4Y"XOh13_>eMv{]p\|tcdNrYBdyZ+kHU$GzfG,OVK\|-}-,uSfev[o3(XEGuUv^Gnq`
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: d1 82 ec b7 d0 1f 8a 88 6d 16 22 ec bd df 82 4e d9 f3 1e e6 a6 fc 4f e5 cd 21 c7 70 f9 c8 d4 d8 2a 2a 5b d4 48 e9 45 dd c0 5b 6f 7a ae 91 ee 21 31 50 62 4c 6b be b9 b9 8f 8d cf c1 5a 9b 2c fa 99 23 cd 14 46 36 db ba 5f 66 dc 78 34 0b 9f 6d 95 4b 45 4b 20 78 75 83 80 3c c6 8a ee c1 77 82 4b 03 5b 13 8b 80 b1 b5 b2 df cd 0d 51 2c 34 af fb c9 6c 4f 2d 4f 85 c5 d1 74 f9 6d da 50 aa cd d9 b2 a8 b9 f5 6f 2e 77 00 2f 60 df 60 4d bb 01 b2 74 d4 dd a3 5c 3b 42 1c 7b c5 b7 d3 90 f6 0f c5 59 f8 66 ef 5d 24 86 79 de f6 87 1c dd 8b 0e 51 e4 e3 c6 de 02 de 6a 71 4f 84 44 d1 95 ac 68 6f 4b 0d 7c fa f9 95 94 18 15 4d 73 cc cf 7e 51 7d 2f 72 5d c8 91 c3 db af 72 9c 45 b1 b5 88 bf 7d fd 8a 84 9b 62 4c af ed 69 da 22 06 f7 76 51 de f6 58 5b da 8b 9f 61 2b 1a 74 78 7b 7c ac Data Ascii: m"NO!p**[HE[oz!1PbLkZ,#F6_fx4mKEK xu<wK[Q,4lO-OtmPo.w/``Mt\;B{Yf]$yQjqODhoK\|Ms~Q}/r]rE}bLi"vQX[a+tx{\|
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 3b c5 da ba d6 6b 75 d6 e7 9d 82 b0 f6 9f 61 73 49 4c 1d ac 8e 36 d4 df bb cd d6 e4 2f f3 52 21 8c 53 c5 10 36 0d 24 8d 4f 1b 71 3e db 6a 7f 72 84 55 6f a6 9c 56 c6 5a e6 ca 59 fd 26 50 6c 1a 74 0d 1a 5b ba 2f a0 eb cd 32 5a 56 b4 99 4b b9 5b bf f5 c5 73 0b 47 dd 91 73 cf 92 d4 fb 37 b0 54 9d 8b 5b 25 9a e1 6f 5a d7 3e 5e 09 d4 ec 3d 33 4d c3 5a ef bb c1 65 9d ec 6d 6d 54 a5 b5 74 0f 7c 6d 8d a0 38 0e 0e 6f 3e e9 e9 d7 8a 9e 6e 9b 68 6b 67 81 b5 1d a9 7e 5b dd a7 81 cb c4 1e 60 a4 c4 71 26 c6 c6 32 58 cf 8f 77 34 74 75 51 31 e5 a1 b7 ef 0b 40 e1 f8 d1 67 70 0c a0 69 61 a2 70 9a bd c4 5c 1e 1a 9d 79 05 0f d9 4d b2 82 ac 59 a5 a5 ed 36 70 e6 08 eb d1 3d 63 b5 8d 8d 8e 23 42 1a 75 f6 2b 8a 77 c7 33 0b 9a eb b6 d7 b8 56 61 b6 01 d7 d0 ec 87 0e 30 c2 e3 7d 08 Data Ascii: ;kuasIL6/R!S6$Oq>jrUoVZY&Plt[/2ZVK[sGs7T[%oZ>^=3MZemmTt\|m8o>nhkg~[`q&2Xw4tuQ1@gpiap\yMY6p=c#Bu+w3Va0}
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 31 b7 b2 90 dc 34 5c 1e 9f b9 46 76 87 67 29 6b 2a 9d 2c 96 25 ac 0c b5 ed 7d 49 b9 eb c5 52 db 47 bc c9 8d dd 15 f5 16 07 f7 27 9d db 54 3a 42 5c f7 bb 33 b8 eb 65 29 89 9d 76 43 bd ae ab c4 ef 10 87 8d af 64 f7 b4 fb b5 63 2e 60 3a 0e 4e fc 0a ac 36 a7 78 95 74 cc 30 c7 23 98 0d c6 9c af cc 1e 5e c5 a8 f0 ed 9a 88 b6 c7 5b f5 2a a8 f4 81 dc f4 46 1e d6 21 67 82 01 03 5b 83 e1 d6 f6 41 e2 4c 2e 84 b6 13 da 56 54 53 38 bc 75 a2 e3 cd 64 aa 59 49 71 71 24 e6 24 92 4d c9 27 99 eb 75 66 6e 83 13 7b 6a 03 41 21 af 1a 8e 57 1c 15 7f 4b 80 4a d7 18 f2 3c b8 7d d6 93 a7 5d 15 d1 b9 bd df 4a 1e 26 94 16 e9 dd 07 8e bc ca f3 86 c3 33 aa 63 6b 01 b8 22 fd c0 6f ee 5b ea b1 1b 60 cc e3 b8 d1 69 2d 99 8b bc d3 e0 a4 bb 48 eb 46 ef d5 3f 25 1d d9 b1 67 00 9e f6 b1 df Data Ascii: 14\Fvg)k,%}IRG'T:B\3e)vCdc.`:N6xt0#^[F!g[AL.VTS8udYIqq$$M'ufn{jA!WKJ<}]J&3ck"o[`i-HF?%g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50120	142.250.185.238	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	826	OUT	GET /js/client.js HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:33 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 15102 Date: Mon, 27 May 2024 22:43:33 GMT Expires: Mon, 27 May 2024 22:43:33 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "7c8d949c56f70886" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 Data Ascii: break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegEx
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 76 61 72 20 78 3d 7b 7d 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 76 61 72 20 41 3d 7b 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 41 21 3d 3d 41 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 53 74 79 6c 65 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 74 68 69 73 2e 73 3d 22 22 7d 3b 42 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 2e 74 6f 53 Data Ascii: ring=function(){return this.v.toString()};var x={};new y("about:invalid#zClosurez");new y("about:blank");var A={},B=function(){if(A!==A)throw Error("SafeStyle is not meant to be built directly");this.s=""};B.prototype.toString=function(){return this.s.toS
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 7b 62 3d 4b 2e 68 3b 76 61 72 20 63 3d 52 65 67 45 78 70 28 22 28 5b 23 5d 2e 2a 26 7c 5b 23 5d 29 6a 73 68 3d 28 5b 5e 26 23 5d 2a 29 22 2c 22 67 22 29 2c 64 3d 52 65 67 45 78 70 28 22 28 5b 3f 23 5d 2e 2a 26 7c 5b 3f 23 5d 29 6a 73 68 3d 28 5b 5e 26 23 5d 2a 29 22 2c 22 67 22 29 3b 69 66 28 61 3d 61 26 26 28 63 2e 65 78 65 63 28 61 29 7c 7c 64 2e 65 78 65 63 28 61 29 29 29 74 72 79 7b 62 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 32 5d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 62 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 48 28 4b 2c 22 50 51 22 2c 5b 5d 29 3b 4b 2e 50 51 3d 5b 5d 3b 76 61 72 20 63 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 63 29 61 28 29 3b 65 6c 73 65 20 66 6f Data Ascii: {b=K.h;var c=RegExp("([#].&\|[#])jsh=([^&#])","g"),d=RegExp("([?#].&\|[?#])jsh=([^&#])","g");if(a=a&&(c.exec(a)\|\|d.exec(a)))try{b=decodeURIComponent(a[2])}catch(e){}}return b},pa=function(a){var b=H(K,"PQ",[]);K.PQ=[];var c=b.length;if(0===c)a();else fo
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 3d 62 2e 6d 61 74 63 68 28 41 61 29 3b 28 64 3d 62 2e 6d 61 74 63 68 28 42 61 29 29 26 26 31 3d 3d 3d 64 2e 6c 65 6e 67 74 68 26 26 43 61 2e 74 65 73 74 28 62 29 26 26 63 26 26 31 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 56 28 22 66 61 69 6c 65 64 20 73 61 6e 69 74 79 3a 20 22 2b 61 29 3b 74 72 79 7b 61 3d 22 3f 22 3b 69 66 28 65 26 26 30 3c 65 2e 6c 65 6e 67 74 68 29 7b 63 3d 62 3d 30 3b 66 6f 72 28 64 3d 7b 7d 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 70 3d 65 5b 63 2b 2b 5d 3b 66 3d 76 6f 69 64 20 30 3b 6b 3d 74 79 70 65 6f 66 20 70 3b 66 3d 22 6f 62 6a 65 63 74 22 3d 3d 6b 26 26 6e 75 6c 6c 21 3d 0a 70 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 6b 3f 22 6f 22 2b 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f Data Ascii: =b.match(Aa);(d=b.match(Ba))&&1===d.length&&Ca.test(b)&&c&&1===c.length\|\|V("failed sanity: "+a);try{a="?";if(e&&0<e.length){c=b=0;for(d={};c<e.length;){var p=e[c++];f=void 0;k=typeof p;f="object"==k&&null!=p\|\|"function"==k?"o"+(Object.prototype.hasOwnPro
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 29 3b 63 3d 57 28 61 2c 22 6b 22 2c 21 30 29 3b 64 3d 57 28 61 2c 22 61 6d 22 29 3b 65 3d 57 28 61 2c 22 72 73 22 29 3b 61 3d 57 28 61 2c 22 74 22 29 3b 72 65 74 75 72 6e 7b 70 61 74 68 50 72 65 66 69 78 3a 62 2c 76 65 72 73 69 6f 6e 3a 63 2c 67 3a 64 2c 69 3a 65 2c 6a 3a 61 7d 7d 2c 46 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 7b 76 61 72 20 65 3d 61 5b 63 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 5f 22 29 3b 7a 61 2e 74 65 73 74 28 65 29 26 26 62 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 2c 22 29 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b Data Ascii: );c=W(a,"k",!0);d=W(a,"am");e=W(a,"rs");a=W(a,"t");return{pathPrefix:b,version:c,g:d,i:e,j:a}},Fa=function(a){for(var b=[],c=0,d=a.length;c<d;++c){var e=a[c].replace(/\./g,"_").replace(/-/g,"_");za.test(e)&&b.push(e)}return b.join(",")},W=function(a,b,c){
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 29 3a 28 47 2e 68 65 61 64 7c 7c 47 2e 62 6f 64 79 7c 7c 47 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 7d 2c 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 4d 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 62 3d 3d 3d 6f 61 28 29 3f 48 28 4a 2c 22 5f 22 2c 49 28 29 29 3a 49 28 29 3b 64 3d 48 28 4e 28 62 29 2c 22 5f 22 2c 64 29 3b 61 28 64 29 7d 2c 63 29 7d 2c 50 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 0a 62 7c 7c 7b 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 28 63 3d 7b 7d 2c 63 2e 63 61 6c 6c 62 61 63 6b 3d 62 29 3b 76 61 72 20 64 3d 28 62 3d 63 29 26 26 62 2e 5f 63 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 55 Data Ascii: ):(G.head\|\|G.body\|\|G.documentElement).appendChild(b)},Na=function(a,b,c){Ma(function(){var d=b===oa()?H(J,"_",I()):I();d=H(N(b),"_",d);a(d)},c)},Pa=function(a,b){var c=b\|\|{};"function"==typeof b&&(c={},c.callback=b);var d=(b=c)&&b._c;if(d)for(var e=0;e<U
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 77 29 3b 4a 5b 54 5d 3d 6e 75 6c 6c 7d 3b 61 3d 44 61 28 63 2c 71 2c 22 67 61 70 69 2e 22 2b 54 2c 6c 2c 54 61 29 3b 6c 2e 70 75 73 68 2e 61 70 70 6c 79 28 6c 2c 71 29 3b 51 28 22 6d 6c 30 22 2c 71 2c 4c 29 3b 62 2e 73 79 6e 63 7c 7c 46 2e 5f 5f 5f 67 61 70 69 73 79 6e 63 3f 4c 61 28 61 29 3a 4b 61 28 61 29 7d 65 6c 73 65 20 75 5b 76 5d 28 6c 61 29 7d 65 6c 73 65 20 73 61 28 71 29 26 26 65 26 26 65 28 29 7d 2c 51 61 3b 76 61 72 20 52 61 3d 6e 75 6c 6c 2c 5a 3d 6d 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 5a 26 26 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 74 72 79 7b 52 61 3d 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 61 70 69 23 67 61 70 69 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 72 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 72 2c 63 Data Ascii: w);J[T]=null};a=Da(c,q,"gapi."+T,l,Ta);l.push.apply(l,q);Q("ml0",q,L);b.sync\|\|F.___gapisync?La(a):Ka(a)}else u[v](la)}else sa(q)&&e&&e()},Qa;var Ra=null,Z=m.trustedTypes;if(Z&&Z.createPolicy)try{Ra=Z.createPolicy("gapi#gapi",{createHTML:r,createScript:r,c
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 7d 2c 65 6e 61 62 6c 65 4d 75 6c 74 69 6c 6f 67 69 6e 3a 21 30 2c 22 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6e 66 69 67 22 3a 7b 61 75 74 68 3a 7b 75 73 65 46 69 72 73 74 50 61 72 74 79 41 75 74 68 56 32 3a 21 30 7d 2c 72 6f 6f 74 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 2c 22 72 6f 6f 74 2d 31 70 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6c 69 65 6e 74 73 36 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 7d 2c 69 6e 6c 69 6e 65 3a 7b 63 73 73 3a 31 7d 2c 0a 64 69 73 61 62 6c 65 52 65 61 6c 74 69 6d 65 43 61 6c 6c 62 61 63 6b 3a 21 31 2c 64 72 69 76 65 5f 73 68 61 72 65 3a 7b 73 6b 69 70 49 6e 69 74 43 6f 6d 6d 61 6e 64 3a 21 30 7d 2c 63 73 69 3a 7b 72 61 74 65 3a 2e 30 31 7d 2c Data Ascii: .google.com"},enableMultilogin:!0,"googleapis.config":{auth:{useFirstPartyAuthV2:!0},root:"https://content.googleapis.com","root-1p":"https://clients6.google.com"},inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 2f 2f 64 61 74 61 63 6f 6e 6e 65 63 74 6f 72 2e 63 6f 72 70 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 75 69 2f 77 69 64 67 65 74 76 69 65 77 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 73 75 72 76 65 79 6f 70 74 69 6e 3a 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 2f 63 75 73 74 6f 6d 65 72 72 65 76 69 65 77 73 2f 6f 70 74 69 6e 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 73 68 6f 72 74 6c 69 73 74 73 3a 7b 75 72 6c 3a 22 22 7d 2c 68 61 6e 67 6f 75 74 3a 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 67 61 64 67 65 74 2e 67 6f 6f Data Ascii: //dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1"},surveyoptin:{url:"https://www.google.com/shopping/customerreviews/optin?usegapi=1"},":socialhost:":"https://apis.google.com",shortlists:{url:""},hangout:{url:"https://talkgadget.goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50115	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	569	OUT	GET /5aJF9xA7xUeccUjstpG7egKV6rX7m_iedrX2dzOptBB0ckf7XEK-fwp2bPtzPMlY9MmrvAKEFErirf4SHKLuUOSk8E3loYryDYOobe13o0fpPcbYL1An?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:33 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 193769 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:41:59 GMT Expires: Tue, 28 May 2024 20:41:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 7294 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 54 08 02 00 00 00 dd ed 13 d1 00 00 0c 65 69 43 43 50 69 63 63 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 90 84 12 88 80 94 d0 9b 20 d2 8b 94 10 5a 0c 02 52 05 1b 21 09 24 94 18 13 82 8a 0d cb a2 82 6b 17 51 ac e8 aa 88 a2 ab 2b 20 8b 8a d8 cb a2 d8 fb 62 41 45 59 17 75 51 14 95 37 21 01 5d f7 95 ef 9d ef 9b 3b 7f ce 9c f9 4f c9 cc bd 33 00 e8 f4 f0 65 b2 5c 54 17 80 3c 69 be 3c 3e 32 94 35 36 35 8d 45 7a 0a 50 a0 0b f4 81 39 a0 f3 05 0a 19 3b 2e 2e 1a 40 19 e8 ff 2e ef 6e 00 44 d5 5f 75 51 71 fd 73 fc bf 8a be 50 a4 10 00 80 8c 87 38 43 a8 10 e4 41 dc 04 00 be 41 20 93 e7 03 40 54 e9 ad a7 e6 cb 54 b8 08 62 03 39 0c 10 e2 d5 2a 9c a5 c6 bb 54 38 43 8d 1b fb 6d 12 e3 39 10 5f 06 40 8b Data Ascii: PNGIHDRTeiCCPiccHWXS[ ZR!$kQ+ bAEYuQ7!];O3e\T<i<>2565EzP9;..@.nD_uQqsP8CAA @TTb9*T8Cm9_@
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 5e 83 2c aa 5a 7f 5b 1f 75 ac 19 83 f5 e6 0c 8e 7c ef 9f f3 4d f5 85 b0 e7 7d 6f 89 2d c2 0e 62 67 b0 e3 d8 39 ac 11 ab 03 2c ec 18 56 8f 5d c4 8e a8 f0 e0 ea 7a d2 bf ba 06 bc c5 f7 c7 93 03 79 24 ff f0 c7 d7 f8 54 55 52 e1 56 ed d6 e1 f6 49 3d 96 2f 9a 96 af da 78 9c c9 b2 e9 72 49 96 38 9f c5 86 5f 07 11 8b 2b 15 b8 0e 63 b9 bb b9 bb 03 a0 fa d6 a8 5f 5f 6f 99 fd df 10 84 79 fe ab 6e be 25 00 81 d3 fb fa fa 1a bf ea 78 f0 9d 7b f0 08 dc fe 77 be ea ec db e1 6b e2 3c 00 67 d7 0a 94 f2 02 b5 0e 57 3d 08 f0 2d a1 03 77 9a 31 fc 8e 59 03 07 98 8f 3b f0 06 01 20 04 84 83 51 20 16 24 82 54 30 11 56 59 0c d7 b9 1c 4c 05 33 c1 5c 50 0c 4a c1 72 b0 06 ac 07 9b c1 36 b0 0b ec 05 07 40 1d 68 04 c7 c1 69 70 01 5c 06 d7 c1 5d b8 7a da c1 4b d0 05 de 81 5e 04 41 48 Data Ascii: ^,Z[u\|M}o-bg9,V]zy$TURVI=/xrI8_+c__oyn%x{wk<gW=-w1Y; Q $T0VYL3\PJr6@hip\]zK^AH
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 7d 4a 58 ca ca 94 b6 b1 c3 c7 ce 1a 7b 21 d5 24 55 92 5a 9f 46 4a 4b 4e db 91 d6 3d 2e 7c dc 9a 71 ed e3 bd c6 17 8f bf 31 c1 7e c2 b4 09 e7 26 9a 4c cc 9d 78 64 92 ce 24 fe a4 83 e9 84 f4 94 f4 dd e9 9f f8 b1 fc 4a 7e 77 06 37 63 43 46 97 80 23 58 2b 78 29 0c 11 ae 16 76 88 02 45 2b 45 cf 32 03 33 57 66 3e cf 0a cc 5a 95 d5 21 0e 16 97 89 3b 25 1c c9 7a c9 eb ec a8 ec cd d9 ef 73 62 73 76 e6 f4 e5 a6 e4 ee cb d3 ca 4b cf 3b 2c d5 97 e6 48 4f 4e 36 9f 3c 6d 72 ab cc 59 56 2c 6b 9b e2 3f 65 cd 94 2e 39 4f be 43 81 28 26 28 ea f3 0d e0 a1 fe a2 d2 41 f9 83 f2 61 41 50 41 45 41 cf d4 e4 a9 07 a7 e9 4d 93 4e bb 38 dd 69 fa e2 e9 cf 0a 23 0a 7f 9a 81 cf 10 cc 68 9e 69 39 73 ee cc 87 b3 d8 b3 b6 ce 46 66 67 cc 6e 9e 63 3d 67 c1 9c f6 a2 c8 a2 5d 73 29 73 73 e6 Data Ascii: }JX{!$UZFJKN=.\|q1~&Lxd$J~w7cCF#X+x)vE+E23Wf>Z!;%zsbsvK;,HON6<mrYV,k?e.9OC(&(AaAPAEAMN8i#hi9sFfgnc=g]s)ss
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: fc b4 e6 45 eb ae 2e 36 a5 e5 c8 5c ca 3f 1f b8 30 5c e9 09 02 08 62 e8 8c d0 3b b9 4f a6 b3 7d 42 36 f0 a2 89 b2 46 d9 b8 d6 e2 af c2 2c c5 43 60 4e 9f 99 c3 e8 85 45 c8 22 61 e4 03 b9 78 a2 fc 59 45 a7 b2 c5 d5 2d 3c ff 01 01 81 00 05 a9 98 1a 88 88 40 84 b9 4b 60 31 49 d6 6a 59 79 b6 52 e3 35 af 5d 95 e2 cc 99 2d 55 94 95 a5 da 0f dd 7f f8 0f ff d3 7f ff 3f fc 8f 7a 56 c6 f3 61 38 f6 56 29 6d 87 ee b7 ff f8 5f fe fc 87 df 0e 7d 47 4a 21 12 d2 64 6a 9e 5c 24 c8 a7 32 9c e7 ef a7 0a cc 3d 0e 61 92 62 c1 e7 57 f3 97 d5 9d fa 0d 00 29 7e 17 91 92 ad 8c 32 80 22 17 89 b2 22 f1 99 b4 58 26 49 8a a7 02 82 80 f1 7d 00 44 94 54 33 22 e6 87 00 80 12 f9 b0 20 4a e4 c9 27 18 d0 55 2c 69 f9 d2 ca 5b a1 bd b8 d2 88 93 49 66 79 8b 19 56 72 93 71 11 03 c4 a5 1b c8 00 Data Ascii: E.6\?0\b;O}B6F,C`NE"axYE-<@K`1IjYyR5]-U?zVa8V)m_}GJ!dj\$2=abW)~2""X&I}DT3" J'U,i[IfyVrq
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 32 14 38 af b7 b1 b9 09 34 13 c1 08 82 01 06 6f 2e 91 22 cc 0a 55 a4 6c 0a 02 a1 c0 b8 e6 92 c8 bd 8a f8 eb 52 c4 96 92 5c 0d 1e 01 10 c0 80 e3 c5 46 04 ab 60 b2 44 30 f3 a1 d4 21 79 b2 2c d8 7d 78 0a 61 fd 7d 39 56 f0 85 69 c2 5f ce 73 ff 04 82 64 23 20 3c 5d 64 9b 9b ed 49 32 c6 05 44 b3 5a 64 e2 16 ce 3f 46 4c a6 58 03 38 95 01 90 d8 31 b3 94 a0 14 33 a9 b0 1c 24 83 40 c0 c1 24 0f 43 24 71 4a 66 e2 a7 1a 71 c9 16 c2 c0 8e 10 4f d0 52 30 e1 fd 58 8a c2 b4 3c 5f 8c ca 14 3d b7 d4 ad 10 49 92 e9 bc fe d6 42 72 ac e6 92 62 9d 62 02 ac 4b 5a 0b d1 30 eb 0d 00 00 ed 59 76 9d d5 46 ff bf ff e5 3f ff fc d3 5f 46 dd 7f ce c1 57 82 13 16 7c 7b 5d 45 5a 7d 48 6b 05 e6 4a 57 34 89 85 2c c6 13 25 2f c5 e7 f5 54 9d 4e 79 81 40 04 9d 12 d6 1f 14 88 a4 10 47 64 48 f2 Data Ascii: 284o."UlR\F`D0!y,}xa}9Vi_sd# <]dI2DZd?FLX813$@$C$qJfqOR0X<_=IBrbbKZ0YvF?_FW\|{]EZ}HkJW4,%/TNy@GdH
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 11 19 33 09 2b d9 4a 39 71 aa 90 b3 69 59 f0 49 8b e4 3c 9d d7 57 97 3f 46 28 19 44 24 fa ca 22 d3 14 e1 14 c3 03 8b e1 49 0c d6 67 c6 38 1f bf 42 e6 40 8e 63 27 0a b8 44 76 1f 60 06 fc 16 85 04 a0 a3 ac 71 a5 05 53 b1 2c 13 f6 3f aa 9c 19 4c 0d 49 b2 86 95 74 fd d8 15 10 9d 6b 25 f7 19 ff 96 72 2f 05 77 a4 d5 f7 cb a9 4f 90 ab c1 e4 7d c9 90 03 0a 62 d8 6d 26 28 c8 9c 9c 04 e7 0a ba d2 0a 3b 45 84 bc ec fd 12 f1 9f 89 81 54 e6 6c c5 4e fb 7c 5a 7b 8e be 0a 50 4f 2c 16 80 45 6a 63 fe fa af fe ea 37 bf fe cd 9b 37 ef aa aa 26 50 30 32 b5 91 77 68 82 ca b4 b7 b7 6f bf ff d5 5f 3f 3c 7c fa c3 1f ff f0 cf 7f fe 63 d7 0f 41 25 88 2a cf 74 91 5d e8 cf 4c 5c ca 1e 18 b8 a4 0d 65 cc 0c 00 61 43 20 11 86 fe c0 f0 49 a2 2f 35 73 fa d8 6c 42 48 7e e0 65 e2 6c 1a 17 Data Ascii: 3+J9qiYI<W?F(D$"Ig8B@c'Dv`qS,?LItk%r/wO}bm&(;ETlN\|Z{PO,Ejc77&P02who_?<\|cA%*t]L\eaC I/5slBH~el
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: e0 d4 21 fa 78 d8 9d 01 e3 12 ef 98 be 9c 32 15 e6 c4 e9 9a a6 3c 2f 36 2c 0a 84 6c 4e e6 ea 2e a6 a9 ce b2 4a df f2 f7 17 fe 3a 69 d0 e9 d6 e1 ea c7 95 d2 4e d2 38 e9 1b 01 15 a1 20 08 9c 9d 83 5b 97 23 08 01 04 20 80 3e c3 1b d9 e0 0d 13 5a a2 48 88 07 aa c4 97 70 3c 6e a2 f0 cd 0b 20 50 d4 b6 01 c2 4e dc 95 26 27 61 c4 cc 61 9e 95 59 70 dc e9 95 4e ce 05 88 b8 6c 42 7e ca 99 32 b5 30 2f f7 58 31 3e 45 1f fd ff 92 62 27 4a 1c 30 02 64 29 15 b1 32 e3 f8 39 c2 cf 41 41 43 c0 35 31 30 db 50 35 89 21 5e 49 6b dc 7f 51 75 9e 55 e5 0c 47 86 45 b7 e7 51 49 0a f1 ac 26 64 e6 f7 ef bf 79 f7 f6 3d 00 cb 7c 25 5c cf b2 51 80 b5 32 db 9b 5b 0a db 5f cb 4a 22 86 23 44 d7 c7 3e 8d 9d 90 a1 48 58 74 fe 8c ce 12 52 92 bc 87 80 30 9c ee 98 ad cc f3 fd ff 2f 93 a4 04 07 Data Ascii: !x2</6,lN.J:iN8 [# >ZHp<n PN&'aaYpNlB~20/X1>Eb'J0d)29AAC510P5!^IkQuUGEQI&dy=\|%\Q2[_J"#D>HXtR0/
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 54 f6 cb 9c 72 ca 60 39 57 cf 2a 69 ab 8d 3b 5b 54 89 00 9d 91 c3 71 fb db a8 b3 c4 a1 0c a3 4a 20 8c 2c a8 8c d1 95 a9 94 52 41 07 14 e1 c3 f1 48 de a3 52 84 20 12 63 79 bd f7 ce b9 70 0e 16 33 87 6d 31 25 19 44 48 61 3b 13 08 84 1d fe 12 ee da 48 d9 a2 5b 41 14 02 e4 ab 51 b1 50 fc c3 f5 b9 a3 92 11 d5 52 c9 eb f0 14 8e 33 fd 5c 98 a8 63 c7 4d 5f 5a ed de 53 c3 f4 0b ca 00 40 80 42 49 c7 84 1b 5f 29 fc 0b b6 14 37 ee c5 7d 1e 21 c8 2b 8c bf 8c 5c 29 e4 bc 44 11 8e 12 34 eb b9 85 c9 11 c9 3e d5 9c 32 db e9 56 7c fa f4 f1 69 f7 fc f6 ee fe 02 35 a7 c9 1c 86 ee f7 bf ff ed 1f ff f8 07 6b ed ba e1 b4 92 22 ec b3 08 6f 29 72 a4 83 5a f3 93 75 2d 76 49 10 a6 83 60 83 59 99 56 5a c9 d3 c7 d3 78 2f 99 02 b0 66 34 ac ce db 17 59 0c 4b 27 f0 c9 34 0a bd cc 60 33 Data Ascii: Tr`9W*i;[TqJ ,RAHR cyp3m1%DHa;H[AQPR3\cM_ZS@BI_)7}!+\)D4>2V\|i5k"o)rZu-vI`YVZx/f4YK'4`3
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 88 50 2a af a4 9f 1c e4 92 9f 2e a4 e0 c4 28 1f c7 22 f2 2c 08 7b 9a 12 8e f1 6a c6 88 10 94 40 8c 7e 46 b6 3f fd fc 97 cf 0f 9f 6e b6 6f de bc 79 7b 7f 77 7f 73 bb ad 2a 43 4a 21 20 b3 1f ac ed ba 6e bf db 3d 3e 3f 3e 3d 3e 1c ba bd 73 96 99 83 77 89 24 95 b9 96 26 81 8e 8b 87 73 1d 7c 89 af 22 e2 e9 db ba 5e c0 2e e7 30 51 de 68 29 59 2a a0 64 71 37 c1 5b d2 65 4f 69 de 9f ef 77 29 2c bc 99 65 72 05 b1 97 2d 50 88 0a cb e5 b2 00 34 24 df 5d 49 f2 f5 13 e7 35 53 ec c2 3b 38 cd b2 f0 63 5c 89 44 e5 3f 6b 3f 40 5c 59 2f b0 96 67 27 95 be a8 e1 8a 74 65 8c d1 06 05 44 18 10 94 22 60 76 d6 0b 7b cf 5e 84 ad f7 ce 5a e7 9c 77 ce 0e 03 20 68 22 45 8a 08 99 3d 21 28 22 ad 08 00 86 c1 1e 8f 87 61 b0 ce 39 e7 2c 29 aa 40 44 c4 3b ef 9c 53 5a f7 83 46 c4 ed 76 7b Data Ascii: P.(",{j@~F?noy{wsCJ! n=>?>=>sw$&s\|"^.0Qh)Y*dq7[eOiw),er-P4$]I5S;8c\D?k?@\Y/g'teD"`v{^Zw h"E=!("a9,)@D;SZFv{
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: ec 65 f3 f2 65 3a fe f9 84 c9 b3 0a f1 70 ea 74 7c d2 15 c7 fb 2c b8 3f 4f b4 fe c4 fc 73 2d 69 ce 4e a0 fe b2 38 48 9c 08 e6 cc 41 20 c3 02 51 f7 4f c1 a6 53 9f 70 b4 66 5e bc ce 33 bf ce cc 32 96 85 38 d9 70 3e 92 85 93 97 b1 60 79 c9 68 9c a7 d9 7e b3 13 0b fb 5a 7a 5f 90 77 0e c6 af 26 14 02 11 a1 b3 43 3f 91 20 3c ea fc af 68 c8 69 4b 76 35 37 ce 09 42 00 24 e0 bc f5 7c a5 30 9d df 7d 19 65 57 e5 9f d2 bf a6 84 5f a1 a9 2d a0 cf 75 c8 35 8b 9c f5 d8 41 38 6b c5 ac 85 fb 9f a2 ed 94 6c c3 30 8b 42 31 21 e2 c7 28 b5 dd b4 37 ed c6 3b 7b 78 da 1d 76 4f bb dd ce f6 96 90 3c fb c3 b1 63 e6 7e 18 40 a4 aa 2a 42 14 11 67 ed e3 c3 67 f6 fe bb 6f bf f3 de 23 c3 f1 70 78 d2 e6 dd 3b 6d ad f3 5e b4 d6 4a 29 63 4c f8 c0 cc ce 3b 61 90 1b 6e 37 ed c3 c3 e7 e7 a7 Data Ascii: ee:pt\|,?Os-iN8HA QOSpf^328p>`yh~Zz_w&C? <hiKv57B$\|0}eW_-u5A8kl0B1!(7;{xvO<c~@*Bggo#px;m^J)cL;an7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50116	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:33 UTC	569	OUT	GET /4Ae0zBYFQOJlGcRaDFUatVMPtUP7L-EcbwRa2p1o2tD5xISasgZmgKCgfIyMVYcsUPs5YHOUsDfy8T07EPP7mvL8h9NhmnVbRpOKq4v7jXLZ6yzVHN0q?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:33 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 374689 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:48:50 GMT Expires: Tue, 28 May 2024 19:48:50 GMT Cache-Control: public, max-age=86400, no-transform Age: 10483 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:33 UTC	856	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 1f 08 06 00 00 00 37 10 7e 29 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c a4 bd 77 9c 64 c7 71 e7 f9 cd 57 de bb ae ea ea 6a ef dd 78 07 60 30 18 c2 3b 92 20 08 82 de c9 52 a7 8f cc 52 47 49 b7 46 14 b1 d2 67 57 ba 95 56 2b 9e 96 d4 52 a2 1c 29 2d 29 5a d0 81 00 e1 67 30 de cf 74 cf f4 b4 f7 dd 65 ba bc 37 ef dd 1f 65 ba ba ba 07 10 ef 1e 50 e8 7a af f2 65 46 46 64 c6 2f 22 32 32 21 fe c7 67 46 94 16 5f 0f 37 a7 16 d0 18 e3 94 34 7a 66 67 d3 e8 d4 31 2c 4d f7 d1 f5 d0 67 38 f1 d7 ef c3 6b d5 13 c9 58 98 09 94 30 9b b4 18 b5 12 06 b5 1a a7 49 8d c5 a6 e7 fa e4 3c 1e 9b 03 ad 46 4b 20 18 41 af 2b d0 ee 51 a1 d1 99 b8 70 33 84 ab a5 8d 5c 3c c8 c3 c7 f7 81 Data Ascii: PNGIHDR7~)sBIT\|d IDATxwdqWjx`0; RRGIFgWV+R)-)Zg0te7ePzeFFd/"22!gF_74zfg1,Mg8kX0I<FK A+Qp3\<
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 84 10 5b 1f 0a 79 5b b9 3b 5d db de 6d 68 4b 92 a4 da f7 6a d9 1d db fc ff d0 46 7d 5d 8a a2 20 10 70 87 a2 b2 2c 23 14 41 3e 13 e6 4f 3f 77 90 6e 9b 0e a7 d5 8c 56 a5 21 9d ce d2 ed b5 62 34 67 88 25 d4 e8 24 03 7a 53 89 40 c0 c0 da ca 32 6e b7 09 bd c5 c4 e0 a1 a7 38 f1 e6 29 7c 8e 28 7a ed 3a 26 bd 4c cf 91 df e5 c4 e9 1b bc f6 fd ef f1 2b 9f ff 12 9e 9e 7d 9c 7f fd 1b 88 64 08 11 fd 26 3e 6f 2b 37 c6 56 38 f0 c4 6f 33 7c fc f7 c8 14 4b 08 21 10 ca d6 7e 55 fb a0 20 43 c3 d8 aa f5 4f 40 63 07 1b 79 29 29 20 ea c4 ac 88 f2 78 10 8a 00 a5 7c af a0 80 02 12 52 b5 71 14 ca e3 07 49 20 cb db e5 2f 84 a8 d1 b1 e5 b9 02 52 dd f3 2a 2d 8d 65 eb 65 5f 69 f2 8e b2 ba d3 75 a7 71 50 7d ac 28 32 42 48 dc 79 b8 08 ca cd 2b 08 45 a9 f4 5e a0 54 ff 2b 44 f9 23 cb 20 Data Ascii: [y[;]mhKjF}] p,#A>O?wnV!b4g%$zS@2n8)\|(z:&L+}d&>o+7V8o3\|K!~U CO@cy)) x\|RqI /R*-ee_iuqP}(2BHy+E^T+D#
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: c4 89 c4 83 98 6d 36 26 26 a3 38 ec 3a bc 6e 27 4e 87 83 48 24 80 bb c9 46 22 95 47 c7 0a a1 f5 db e4 b2 45 5a db bd 14 0b 12 6f bd 71 86 97 ce ac a3 d3 ca a8 a4 3c 91 78 8e 78 22 81 c3 ac e3 e8 fe 01 06 ba ad 08 04 46 43 8e 6c 3e 81 4e 9b a7 cb d7 85 5a 63 63 7a 72 89 ef ff e8 04 89 c4 2a 26 bd 83 23 47 ba b0 b8 3b 39 7d f9 0a eb e1 08 9a e2 22 89 6c 8c 7c 41 e1 dd 87 0f b2 bc be 84 da 60 65 66 72 81 c9 1b 3f e5 c0 91 c7 69 1f 3e 40 97 38 89 de 77 84 75 dd 08 45 b5 96 96 e6 5e ce 7f e3 0b a4 53 21 a6 27 de a4 c3 d3 ce ed 57 7f 0f 77 d7 61 e6 67 c7 69 72 fb d8 75 ef 93 d8 3b 46 d0 37 ed c7 7b f4 77 29 7a 3e 44 54 b6 91 94 4d c8 72 91 12 0a 3a 8d 9e e0 e2 38 d7 9e ff 7d 1e fd 85 2f 23 5b 07 c9 a1 20 69 2d a8 8b 1a 3c d2 14 24 26 91 5c 77 61 ef 1c 45 6f 6e Data Ascii: m6&&8:n'NH$F"GEZoq<xx"FCl>NZcczr*&#G;9}"l\|A`efr?i>@8wuE^S!'Wwagiru;F7{w)z>DTMr:8}/#[ i-<$&\waEon
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 7e f2 1a 1f fe f4 2f a1 b1 75 f1 e2 3f fe 2f f6 1c 7d 37 06 53 13 d7 2f be c8 ae 9e 4e 1c 36 0d e1 70 98 81 9e dd ec ee b6 e0 b2 e7 e9 f2 e9 99 98 88 a2 33 9a 28 94 22 78 5c 36 fa fa 9a 41 58 29 64 62 f8 76 7d 02 a9 f5 38 f1 bc 1a f2 21 f6 ed 1e e6 e6 ed 79 b4 66 77 c5 b3 2a cf 50 b9 12 4e 2c 03 e5 db 7b ac 92 90 28 21 b0 79 07 68 3d f4 7e e6 af bd 4c 66 f5 02 bd 4d 1a 26 cf 7d 95 d1 43 ef 41 e8 1c dc 7e e3 0b a8 d4 6e b4 9a 66 2c 4d bb f0 b5 ef c3 2a 5f 46 29 29 cc ad dc 44 6b ea c2 6d 6f 41 d1 a9 e8 33 84 d0 ea 5d e4 b4 2d e0 18 a6 20 95 95 85 a8 80 b1 22 6f 02 7f bd ca da 49 b9 0a 49 a9 78 ff 54 5c c2 ad 46 c2 9d 14 73 bd 41 71 27 cf 42 54 94 98 82 b2 4d 4f d6 5f ff 7f c1 bf fc f2 f6 47 55 e3 24 9f 4b 30 71 fe ab b4 d8 9c a8 54 60 37 09 3a 5b 4c d8 4c Data Ascii: ~/u?/}7S/N6p3("x\6AX)dbv}8!yfwPN,{(!yh=~LfM&}CA~nf,M_F))DkmoA3]- "oIIxT\FsAq'BTMO_GU$K0qT`7:[LL
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 2b 5b ff d6 f7 61 a7 b2 db fb b9 69 08 34 1a 4c 5b e9 d8 81 ee 5a b4 aa b2 f0 21 94 9a 7b 5c 36 16 6b 0d 54 86 ae b2 c5 18 a0 fe f7 8a 47 2c 2a ce 80 a8 e6 53 50 5e fb af 8f 0e 56 1a af d1 2c 2a fa 61 f3 5e da 02 a2 65 1b 44 de d2 ff 5a 57 eb 64 d4 08 d6 0a 6c ea 9c aa 51 28 b6 ca 5c 61 bb b7 bf d9 35 51 cb 03 d8 39 aa 53 ce 4d a8 bd df 30 a6 41 41 f5 e9 07 47 9f d3 1b d5 9c ba 70 8b fe 56 1f 2d 2e 23 eb 91 38 d9 42 06 b5 4a 43 d0 bf 86 cd 61 a5 4d 9f 66 e6 d2 57 b9 7c 79 0c ab b3 05 8d de cc a5 97 5f 22 14 53 30 5a dc e8 b5 3a dc 4e 2d 3a ad 44 3a 9b 46 a5 d2 d0 d5 e2 c1 6d 35 a0 31 39 f1 2f 2f 30 da da 89 46 48 2c 2d c6 e9 72 99 28 e4 73 d8 dd 4e e4 5c 89 70 71 10 7f c2 88 54 4c 23 97 32 a8 c8 e2 b0 e9 30 ea 34 e4 8b 25 de 3a 7d 1b 24 1d bf f0 91 fd c8 Data Ascii: +[ai4L[Z!{\6kTG,SP^V,a^eDZWdlQ(\a5Q9SM0AAGpV-.#8BJCaMfW\|y_"S0Z:N-:D:Fm519//0FH,-r(sN\pqTL#204%:}$
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 0d 5a 1b 5a 25 4d 76 ec a7 f4 3e fd 97 44 16 af 90 cd 46 b9 b1 92 67 f6 da 1b e4 67 ff 89 bb 7a 25 0e 76 0e 70 e5 c2 02 4b e6 7d d8 9b 5b 29 a5 e7 d8 98 d9 a0 cd 6a c2 a4 d1 a0 17 32 7b f7 b5 d3 63 cd 30 3d 7e 8e b9 c5 00 c1 b9 13 04 56 22 ec ee ee e7 c2 e5 35 74 8e 56 26 af 9c a0 cf b5 ca 40 b3 91 6c 30 41 c8 9f c0 6c 34 e1 70 2a 24 92 1b 3c 76 6c 10 bb b9 84 5a d2 90 4e 49 bc f9 e6 39 0a d6 51 2e 4f e4 68 71 99 f1 da 4d 44 c3 61 cc 7a 03 3a 49 cb 50 b7 8d 85 f5 0c b9 42 81 11 7b 91 52 2c c4 b8 3f 4f 77 6f 0f 57 6f 87 f9 a7 6f ac 70 f8 98 0b ad 1c 60 6d bd 84 3a 33 4f 32 3c 83 c7 e3 e1 ec c9 13 e8 d5 19 02 fe 20 fb ef 39 82 cd d9 c5 ca ca 02 c5 d8 02 89 8d 00 26 4f 3f ef 7d fa 13 74 ef 7e 98 44 4e 8b cb 08 b1 9c 91 6f 7d 7b 82 e9 90 cc de a1 16 7e e7 13 Data Ascii: ZZ%Mv>DFggz%vpK}[)j2{c0=~V"5tV&@l0Al4p*$<vlZNI9Q.OhqMDaz:IPB{R,?OwoWoop`m:3O2< 9&O?}t~DNo}{~
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 82 94 4b 22 e9 ec 18 2c 4d cc 9c fd 0a 7b 0e 3e 4a 29 31 87 d6 de 83 6b f7 53 a8 93 3f c0 de ff 31 24 cf 21 4a c2 89 a9 e3 10 c5 92 00 a9 04 02 4a 8a 52 31 3c 2a b6 7a 25 92 a9 48 ca d6 ec f0 ad aa 72 f3 d3 a0 48 ee e4 19 ec 58 cb 3b 94 79 27 45 ff 4e d7 3b 81 c4 16 45 5f 55 54 25 85 d6 ee 61 e2 d9 12 7d fb 8f 91 4a 26 e8 6d ca d0 64 b5 90 cc 29 c4 e2 09 34 92 0e 9d 21 cb a1 bd 07 99 5f f5 b3 6b 97 0b a3 a9 c0 81 c7 7f 95 f6 a1 77 b1 be 34 41 78 f1 02 a9 8d 49 54 52 8c f6 3d bf 82 30 34 f3 d6 ab ff 84 53 7a 83 5c 3a 0c 92 03 6f 8b 93 f1 c9 20 16 6f 17 be 9e e3 e4 65 a9 a2 bc eb 79 58 f1 12 ab 06 40 4d bb 6f e9 cd 3b 1a 66 f5 57 39 fc 5b f1 c0 2b 7c 90 c4 d6 b5 f6 6a b5 f5 f6 a1 ac c8 b5 6d 83 db da 92 44 79 cb 1f a2 b2 92 53 9f c0 57 0d 93 6f a9 ae 9c b5 Data Ascii: K",M{>J)1kS?1$!JJR1<*z%HrHX;y'EN;E_UT%a}J&md)4!_kw4AxITR=04Sz\:o oeyX@Mo;fW9[+\|jmDySWo
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 86 e7 7a 5c 02 8a 19 fa bb cc 68 55 32 d1 44 06 a1 6f 62 7a 21 4e 3a 13 c1 a4 95 b9 7e 7b 09 9d be 89 54 34 86 6b f7 d3 58 da 47 40 67 c2 d5 b6 97 89 ab af 62 31 94 10 42 43 30 50 40 ab 01 94 1c 26 bb 85 d2 c0 2f 53 70 1e 47 e8 5a d0 58 db 19 bf f4 33 06 3c 0e dc 0f fd 01 ba fe 07 f1 8c 3e 4e 04 1f a3 c7 3e c0 cc d9 57 d8 d8 88 b2 b4 98 c6 ae 8f a2 c4 62 b4 dc f3 49 62 9a 21 b4 66 23 05 d3 30 ab d3 b7 69 ea e8 e2 c4 ed 0d ce 9c 59 c5 d0 d6 c5 9b 27 4f b2 b0 ec c7 ac 91 39 34 da 4a 47 8b 83 e6 26 85 70 38 cb 43 f7 ed a1 18 f8 0a 1a eb 31 b2 2a 0f 6b d3 17 98 99 b8 8c d5 ea e1 c8 bb 7f 89 1b 37 af 21 a1 62 de 1f 67 d8 51 e4 d6 52 1a cd cc f3 a8 a7 fe 11 6d cf a3 c8 4d fb b0 35 f5 61 6b ea e5 fc f9 37 d1 99 cc d8 51 71 ed c2 4f 58 9d b8 88 c3 d9 84 d0 9a 89 Data Ascii: z\hU2Dobz!N:~{T4kXG@gb1BC0P@&/SpGZX3<>N>WbIb!f#0iY'O94JG&p8C1*k7!bgQRmM5ak7QqOX
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 9d 2d 6a 12 b9 34 05 05 36 a2 32 f7 ed 6e c2 a2 82 85 70 0a 57 ab 8e 9e 76 2d 6a a1 66 76 29 48 49 29 70 64 57 33 fb 86 fa 68 f6 7a 39 7d 75 0d 83 2e 46 5f 9b 93 52 4e c5 5f fc f9 45 ee 7e 68 1f cb 89 56 2c 0e 1f f7 ec d3 70 fa e5 55 7e e9 c3 23 04 43 71 ba 7b da 19 ea b4 71 71 7c 89 40 2c 83 d1 6a 26 9e 93 e9 68 71 90 48 67 c9 e6 55 5c 9b cc e3 76 34 d1 d1 ec 40 6b b4 f0 e6 99 39 da 7d 0e 54 c5 02 7b 0f b6 90 4f 5c 22 bb 7e 09 a7 51 30 f0 f8 5f 92 15 16 3a 7a f7 b1 1e 0c 20 15 42 ec eb 77 a1 97 92 78 ec 76 ee 1a 76 60 35 1b c8 65 d4 34 f7 3f ce 52 d2 88 73 f8 bd ac cc 5f 65 63 e1 36 7a 75 90 c3 4f fc 32 7a 8b 97 40 20 c7 d4 f8 19 42 53 6f 40 36 86 d3 e1 64 71 ee 06 4d cd 07 f9 2f 7f f1 2f fc ec c5 e7 31 39 7b 90 54 16 e4 7c 02 59 29 e0 88 8f 61 d1 96 38 Data Ascii: -j462npWv-jfv)HI)pdW3hz9}u.F_RN_E~hV,pU~#Cq{qq\|@,j&hqHgU\v4@k9}T{O\"~Q0_:z Bwxvv`5e4?Rs_ec6zuO2z@ BSo@6dqM//19{T\|Y)a8
2024-05-27 22:43:33 UTC	1390	IN	Data Raw: 91 53 4a 08 a1 ab 29 60 55 65 7b 52 d5 7a af 2c 0e 97 bd 10 45 6c 09 a9 df 49 a1 8b 86 95 d2 ea 99 01 35 ef b4 1a 19 d8 c1 20 d8 69 af fa 4e ca 7d 5b fb 77 a0 eb df 7a 35 d6 5b 8e 5c 0a 24 14 2e bd fe 25 34 b2 82 c3 a8 66 68 e0 00 bd 87 3f c1 f9 b3 af 90 29 18 08 c7 52 58 0c b0 ef c0 71 ba 76 1d e3 7b 2f fe 98 67 1f bc 8b e1 76 37 67 6f dc 64 23 96 a6 c9 6b 43 ad 52 23 ab 3b 19 da f7 14 4e 6f 1f d1 99 8b 98 dd 56 84 b1 8d d0 ea 0c f3 57 5e 64 75 65 16 ad 56 87 c3 b4 41 df e1 5f 43 18 7d b5 6d 5d 8d 7c ae f9 a6 35 83 a5 54 56 fc d5 a5 1a ca ca bd ba 7f bd 1e 09 ab fb fe 6b 05 1b f8 7f 27 9e 34 7e df 7a 5f 1e 25 42 12 95 f5 8a 2a 7d a2 66 44 0a 41 e5 98 db 72 c3 f5 d1 8c 4d c0 da 04 9f 46 3a de 6e 2c 6c e7 4f e5 04 ba ba fa 76 f2 66 37 db 95 6a 20 d5 08 fe Data Ascii: SJ)`Ue{Rz,ElI5 iN}[wz5[\$.%4fh?)RXqv{/gv7god#kCR#;NoVW^dueVA_C}m]\|5TVk'4~z_%B*}fDArMF:n,lOvf7j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50121	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:34 UTC	800	OUT	GET /QheKQlOajd_iZUvo2vtGYkrWjvhTjOuxC4YqFn9pznHDkFeHsEF3Ey4PmQtIe8eTDKyddsBy_miNYSstxPaM5q6RUp0LGWciI58mQZrWlbM1r3AtbRI?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:34 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 252091 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:11:52 GMT Expires: Tue, 28 May 2024 20:11:52 GMT Cache-Control: public, max-age=86400, no-transform Age: 9102 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:34 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 25 08 06 00 00 00 92 f1 5a e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c 84 bd c9 92 75 49 92 26 f4 a9 9a 9d 73 ef 75 ff a7 98 33 32 72 aa cc aa a4 b2 a4 a0 5b 10 a4 17 0c 0b 1e 80 87 e8 47 60 8d b0 e4 19 d8 22 02 22 2c 59 20 ec 10 a1 17 b5 68 40 5a 40 04 28 9a 22 a9 ea aa ca b1 22 e2 9f dd fd de 73 cc 54 59 e8 60 76 fd 8f 94 ba 99 7f b8 fb b9 e7 d8 b1 41 4d f5 d3 d1 88 99 15 0a 80 80 fc 09 ff 1d f6 37 4d 7f 42 01 a2 e9 6f 8c e7 e6 26 f4 0f 3d 3f dd 0f 5c 7f 17 cf 11 f9 f3 8f fb f2 5d 0f 4c b7 e1 c3 af ae 86 f6 f8 f1 78 19 01 00 11 d4 3b 4d 1f 3c 7d dd 09 55 c5 cd ed 0d be fa ea 2b 1c 3f 5a d1 0e 17 2c 2f 08 5c d8 5f c2 e0 c2 20 62 30 11 88 09 cc 0c 22 Data Ascii: PNGIHDR%ZsBIT\|d IDATxuI&su32r[G`"",Y h@Z@(""sTY`vAM7MBo&=?\]Lx;M<}U+?Z,/\_ b0"
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 2b a4 0b ea d3 15 eb f3 8a e3 81 c1 cc e8 68 f8 67 7f f4 67 f8 d1 f7 7f 88 9f ff fc cf f0 af ff f2 ff c2 17 5f 7e 85 d3 cd 0d ee ee ee f0 fb df fc 16 3f fd 93 1f e2 f5 cb 33 d0 ff 0e ff e9 7f f6 5f 82 71 02 5f 09 e3 eb 35 fe 83 92 55 8d 9f 5d 09 8f f9 96 bc 75 12 30 79 ff 2c 53 a7 7b 93 29 26 3f 9d 6e 72 62 05 29 e8 aa 31 0c 46 f0 61 d3 ff 18 ae 49 66 99 8c f9 ea d9 b1 d1 74 7a 2a c7 98 1b 4e 73 53 8a 33 6f 9b a3 b9 57 3a 6d 5e 9b bc f9 5e 63 e4 f0 89 75 41 43 48 a0 90 7d 63 8c 8d a8 f3 e8 66 c0 35 9e a1 60 b2 30 41 6c 5f d3 74 f3 10 e0 20 07 29 6c 82 96 0b 83 4b 41 29 84 52 18 4c c6 44 4a 2d 26 38 0a a3 70 41 29 8c a5 16 14 36 42 ac 85 bd 1d 03 26 26 03 75 30 1d 66 94 62 a0 86 08 f6 0e 2e 60 66 30 17 10 31 a0 2e 7c a8 d8 bc f9 ea 45 b7 83 f9 b6 6e 20 21 Data Ascii: +hgg_~?3_q_5U]u0y,S{)&?nrb)1FaIftz*NsS3oW:m^^cuACH}cf5`0Al_t )lKA)RLDJ-&8pA)6B&&u0fb.`f01.\|En !
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 4c f7 c2 51 af 09 e9 d0 03 66 0b 81 4e 9b 3d 90 b5 4d ef e8 3d 11 92 71 19 e3 d3 ab f9 eb dd cc b1 50 bd 9a a7 20 89 78 97 99 e5 c9 05 ea d4 ed 64 ea ea cc 6c cc a1 88 a4 a9 5e 9d 89 cd 7d 0f e1 20 a2 d0 6e cf 8a 18 50 11 07 3c 21 b0 43 50 a9 02 da 74 ac b7 98 36 61 60 40 d0 f7 06 f5 8d c6 22 20 38 63 d7 21 c0 09 3e 87 c9 1c d5 fa 16 42 20 c0 69 cc bb 6a 0a 07 9d 0d ff 13 df 1d 94 34 e6 26 01 d2 b4 c6 d1 de 2c e8 00 46 db 05 bd ab 9b ee 91 4c 93 5d 2b a5 69 8d 54 d5 ac 43 98 de 43 46 2f 03 9c 0d 41 04 95 fc 0e 70 01 e7 42 d0 04 89 8e 31 ab a6 19 df 14 aa 21 58 af 34 c5 68 2b dc 00 a1 4d e7 1d 39 34 1f ba 5d 0b d3 66 5c 49 66 3f 99 9c 35 41 5b ec a0 6b 77 4f 4c b0 8a a0 43 c1 85 7d 89 74 7e fb 78 8f 5c d3 76 f4 5e 7a 4f 80 1a 56 12 ed 46 5b 66 c8 b2 f7 30 Data Ascii: LQfN=M=qP xdl^} nP<!CPt6a`@" 8c!>B ij4&,FL]+iTCCF/ApB1!X4h+M94]f\If?5A[kwOLC}t~x\v^zOVF[f0
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 8d e7 63 11 88 00 9e e7 60 1a ff ec 96 9a b7 d6 fc 5d 58 84 e6 7d 33 82 06 d5 34 47 98 20 9c cd b1 e9 c2 00 46 5b 48 62 c8 7b 2c 84 83 9c 81 59 47 98 82 76 cd 74 1e 2e 28 f3 87 c2 c7 3a 6b e4 0c 40 20 0f ef 2c 4e a4 1e 4c a8 f5 86 5a 17 88 33 7a 05 e7 34 c6 3b 59 c2 bf 4c 08 bf 71 a9 0c 6d 1d 1c 80 6b a6 67 36 81 88 ec 6b ec 17 d3 46 45 61 9a 2a 8d 3e 86 b0 37 eb 95 f9 7b 15 30 b7 9f 83 29 52 5b bf 92 60 45 d1 d5 4c b7 e2 73 c6 50 df 7f c6 ec 1b 89 59 4c 22 88 34 34 78 93 7a 2e 48 35 dd 01 4c 06 10 2a 5b 1b 50 5b a3 4a 6e 49 e2 41 97 95 09 b5 10 80 06 a9 1d 7a 63 1a 3a 07 9f 82 05 9c 29 80 c2 66 e7 ea 50 14 28 44 80 1a 74 7c 64 6c 4f 0e f8 fd da f1 ab 6f 76 88 4c c0 c3 01 60 f2 1f b6 a0 3f 94 b8 6e 40 a9 14 b3 82 9a 35 28 cc ed 02 51 41 a5 92 ed 19 ff 09 Data Ascii: c`]X}34G F[Hb{,YGvt.(:k@ ,NLZ3z4;YLqmkg6kFEa>7{0)R[`ELsPYL"44xz.H5L[P[JnIAzc:)fP(Dt\|dlOovL`?n@5(QA
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 3a ae d6 cc 7e 01 d7 9b 14 0c a1 85 87 2f 98 dd 25 37 f6 93 03 60 b2 c9 29 c4 09 2a 89 47 3c 8d 48 98 c3 fd 99 69 6f 53 62 1b 82 b8 96 da da 9e 1a 6f f8 b2 09 70 d7 04 f0 a3 75 c7 cf 4a 43 df 1e a0 7d bb e6 0b 96 da 03 8a 80 5d 45 c6 ce 88 0c 9b 4e 04 c8 76 08 0a 28 f7 8a e2 c3 cc 80 70 9d 51 ac 11 31 c8 73 0f 48 05 da ec 41 21 c9 f1 80 08 16 41 11 2e 3f b3 2c c9 04 26 21 e1 16 d2 a4 f9 ba 10 96 b5 62 59 80 36 09 fd d8 33 cc b1 d5 05 e0 92 5a 6f ad 05 54 90 20 9d 89 41 64 81 d5 05 06 08 2c 35 52 3c 43 28 cc f3 b8 52 08 42 a0 8b a7 13 1b 1f 30 05 c5 84 b9 59 09 a8 1b 0f 29 9e 52 58 b5 60 bb 58 9b 5a 91 66 fe de 1a 74 59 50 2b 63 91 82 7d b3 00 bc 75 5d 8d ae c8 a2 ff bb 18 7d 55 32 3f ff be ed 1e a9 4f 28 8b 05 32 b6 66 20 60 a9 15 75 29 58 55 b1 6d 0d 0f Data Ascii: :~/%7`)*G<HioSbopuJC}]ENv(pQ1sHA!A.?,&!bY63ZoT Ad,5R<C(RB0Y)RX`XZftYP+c}u]}U2?O(2f `u)XUm
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 36 8b c5 14 14 0c a8 5b 7e 9c ce 03 57 10 12 38 da d8 1d 7c 07 d9 52 04 47 ba 6b c3 72 1f 01 62 44 1c 0f 51 ac 3c 25 38 20 66 34 1d b9 ef 00 5b ad 0e ef 77 61 82 34 5b 57 2e 66 4e 87 1a 28 ee bd bb b0 e6 cc 9c 30 cd de e3 00 2a 5c 20 5b c1 24 f6 74 40 71 8b 0d 33 03 1d 5e 5c 88 11 69 7f 61 8d a9 a5 64 9a 61 21 64 51 a1 c3 6a c2 5e c8 2d 28 4d a0 8b d5 1f a9 55 ad f0 cf d6 70 58 17 13 f0 6a a0 4e 7a f5 7a 27 05 6d db b1 ed 1d c7 a3 c5 23 44 fc 80 78 9a 60 2f 02 6a 16 77 50 d7 6a 99 06 5d 20 3e 07 97 6d c7 ba 56 2c 8b a7 20 f6 8e f3 f9 82 13 17 54 ae d0 a2 a8 2e b8 df be 79 8f 75 5d 72 8f 11 99 45 e1 70 5b 51 3d e7 9f 4b 70 63 5b 50 55 4b 43 84 2a 96 52 3d 7b 88 46 4a a6 5b 62 0a 17 d4 42 38 9e 9e 23 ca 96 0d 0b 00 c5 6e 98 7c da 1f 08 dc e0 4c b3 cc 9f 84 Data Ascii: 6[~W8\|RGkrbDQ<%8 f4[wa4[W.fN(0\ [$t@q3^\iada!dQj^-(MUpXjNzz'm#Dx`/jwPj] >mV, T.yu]rEp[Q=Kpc[PUKCR={FJ[bB8#n\|L
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: d6 8f 15 ee 82 1c fc c7 3b e4 da 36 d2 50 55 3c a2 3f 62 66 7a 57 9c db 3d 00 13 50 dd 05 3a 7c ae 63 5f 06 2e 8e e2 54 31 2e 91 0e d5 91 a9 24 fe 4c a9 25 0b 44 d5 5a 50 88 d1 c4 4a 00 87 20 4c d7 43 8f 5a 0c d1 47 fb 7e db 5b 56 e5 2b 9d 21 64 9a 7a 71 e0 cc 95 2c dd af 77 ac 65 49 1d 60 73 6d 7e 59 2a 44 05 db de dd 5d 50 21 6a 41 7d bd 9b 4b 21 d2 06 45 0c cc ae ad a0 2c 0b aa c7 83 58 2c c0 86 c3 e1 88 ba 14 4b ab 94 8e fb 87 33 d6 e3 8a 65 29 e8 dd e2 1e cc 32 36 ac a4 74 e8 58 4f 2b ea c2 66 f9 70 1e 36 2b 43 a2 66 15 29 44 28 4b 45 bf 0b 80 19 24 ae 5e 05 10 f8 f1 8f bf 8f e3 f1 88 b6 6d 68 6d 7b 04 00 62 53 3c 66 f8 13 7d a6 58 1e fc fa 5a ee 4e 42 22 08 68 a2 a5 d1 fe 77 5a 09 30 09 9f d0 a6 92 d2 1f f5 e7 31 68 f8 03 63 78 f4 99 44 e8 e8 aa ff Data Ascii: ;6PU<?bfzW=P:\|c_.T1.$L%DZPJ LCZG~[V+!dzq,weI`sm~Y*D]P!jA}K!E,X,K3e)26tXO+fp6+Cf)D(KE$^mhm{bS<f}XZNB"hwZ01hcxD
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 44 8a ed 5e a8 26 6f 29 cc 1e 99 ef ee 82 04 de 03 64 58 bf d8 ea 1c 28 65 05 45 cb 16 0e ea b2 d5 2a 99 29 e1 3e ff 29 c5 2e 02 81 a3 40 d0 ba 2e 06 4a 78 d0 01 17 c2 5c 36 3b fa 4f a1 1c b8 60 2e 6c 7b 4b d4 ac 04 2c 46 c7 95 2c 40 af 7b fc 45 29 5e d8 49 d4 2c 7f 14 42 5e 33 40 ce 82 76 8b 83 d9 08 64 64 c8 de dd 04 4a 1e 47 60 1b ca 84 7b f5 98 03 82 36 4b 7d 5e ea 9a 40 de dc 4e 1d 87 75 01 77 06 f5 7e 55 3c a8 16 cb 22 68 ad 63 39 2c 96 3d 55 cd c5 b0 2c ee 52 28 dd d2 fb f6 86 7d db b0 ae 0b b4 14 74 b6 54 c2 cb 65 c7 f1 74 44 54 28 54 65 3c 5c 36 2b 46 44 9e b9 20 51 12 1b a8 27 e0 78 bb 66 c9 df 61 6d 1f 81 c7 ea dc ab 96 d5 59 55 b9 8a 77 71 92 c0 b2 16 44 dc 4d 29 c5 f9 61 94 02 1e 34 77 8d 1c 27 cd f6 ea 73 a5 19 4f e8 f5 91 dc 1d 12 11 d3 17 Data Ascii: D^&o)dX(eE*)>).@.Jx\6;O`.l{K,F,@{E)^I,B^3@vddJG`{6K}^@Nuw~U<"hc9,=U,R(}tTetDT(Te<\6+FD Q'xfamYUwqDM)a4w'sO
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 42 c4 68 ac 3b a2 88 5a ff c6 ba 4c 28 08 0d 70 e0 aa 44 0a 75 25 82 68 68 f1 14 d5 b1 31 07 10 8b 46 e5 4d 40 dc 87 1c 34 e8 d5 87 01 b8 06 ae 1d cc 1d 9f df 6c 06 40 3d 0d 30 eb 8c 20 e6 55 d0 e0 c2 9f af e3 70 98 81 d6 e2 50 a1 01 6e 8c be ed 3d e4 a7 8d 0e e1 67 d1 f3 dc cd 4c 9f 55 03 bd b6 43 83 1d 2f 2c 05 d8 5b 47 a9 7e 80 19 05 7d 1b d0 b1 ba 01 8c 0e cb c9 3f ac 56 38 a8 78 6c d0 de 3b 8e 75 35 cb 42 17 f4 26 79 16 8a b9 0b 2c c5 73 59 dc bc ce 7e 48 d0 de ed d8 61 b6 13 51 2d 15 b4 61 59 56 a8 5a f6 4a 1c 35 bc 2c 66 bd 29 95 d1 bd 6c f0 e1 b0 a2 56 86 82 51 c5 9e ef 5d b0 2c 46 b7 04 42 39 74 d4 63 05 55 ce 60 c0 f9 d4 46 53 b2 06 1f e2 04 a1 80 48 03 f3 92 4a a0 a8 98 cb 46 60 71 0d eb 21 f9 51 4d 06 34 ff 8c 5d 92 a4 4a 33 e7 4a b0 90 da c8 Data Ascii: Bh;ZL(pDu%hh1FM@4l@=0 UpPn=gLUC/,[G~}?V8xl;u5B&y,sY~HaQ-aYVZJ5,f)lVQ],FB9tcU`FSHJF`q!QM4]J3J
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 18 01 ac 70 4d 5f 15 59 56 ba 4b 87 b8 55 43 ba 57 59 73 20 da 5b 1b 42 d1 dd 54 eb b2 62 a9 0b 9e 3c 7f 8a 7d eb 78 f6 d9 0d fe e1 ef 7f 05 c6 3d 0e ab e2 f4 fc 06 cf 3e 7e 0a 66 c2 27 9f 9c f0 ed af ff 16 af de ed de 17 5b d3 a6 8a 4b 94 ae a5 a8 82 39 2c 71 e4 1a 35 33 c0 eb 33 6c f8 1c e8 0b 22 e6 86 9d be 62 9d 40 a6 d9 13 b1 bb 12 27 a9 40 3a 68 de 23 f3 35 e3 75 6c d7 44 8d 8f 1e 3c be 5b c5 4c d3 f4 65 9c 75 e1 3c 0d 4e 4f 87 0e 00 6f 72 ff d5 9a 6a 84 b5 27 ea 45 79 3a 04 35 e3 94 6c 4d d4 2b f3 4d 8c 8a 3c e0 cf 95 8c f0 77 1b 29 0f 53 7f f5 23 82 a3 6c 33 51 68 e7 96 86 47 5e 20 ad 28 a7 65 87 89 d0 69 f4 4f 55 b3 8e 02 d4 b2 6a 8a 9f 6d 51 98 b0 ef 92 9a 77 61 46 2f e2 07 02 f9 69 99 ae 64 f5 26 58 17 38 f8 b0 02 45 fb b6 63 5d 16 14 a6 0c 2e Data Ascii: pM_YVKUCWYs [BTb<}x=>~f'[K9,q533l"b@'@:h#5ulD<[Leu<NOorj'Ey:5lM+M<w)S#l3QhG^ (eiOUjmQwaF/id&X8Ec].

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50122	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:34 UTC	578	OUT	GET /T0I5MC5l-PS07tq1rHrLBvedNWkFGBMKK8FuV5qsmDDAu8HqlYyZsEgDoSXrhHfsPOEWyznrzAaU5HZ_4gdeEDGT9w1wUhilKwrRTUEZk6s36xBM1uPM=w1440-l80-sg-rp HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:34 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 99977 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:15:39 GMT Expires: Tue, 28 May 2024 22:15:39 GMT Cache-Control: public, max-age=86400, no-transform Age: 1675 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:34 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 9b 00 00 01 79 08 02 00 00 00 5f 94 76 27 00 01 86 50 49 44 41 54 78 9c ec fd 79 90 a4 f9 79 df 89 3d cf ef 7a cf 3c 2b eb 3e fa ee 9e 7b 00 cc 85 19 5c 04 40 02 02 49 91 94 48 51 22 25 cb f2 86 24 3b 28 ef 86 2d 7b b5 61 6d 28 ac 8d f5 ee 3a c2 6b 39 1c 5e af a5 a5 bc a2 6e 51 ab e5 01 80 02 78 00 24 88 6b 30 83 99 c1 dc 7d 9f 75 65 e5 9d f9 de bf cb 7f 64 55 75 56 77 0f 49 89 b4 80 e9 7e 3f d1 d1 9d 99 ef 99 6f 55 f4 f7 f7 dc 58 14 05 94 94 94 94 94 94 94 bc cf 21 df ef 1b 28 29 29 29 29 29 29 f9 13 a0 54 f4 92 92 92 92 92 92 fb 81 52 d1 4b 4a 4a 4a 4a 4a ee 07 4a 45 2f 29 29 29 29 29 b9 1f 28 15 bd a4 a4 a4 a4 a4 e4 7e a0 54 f4 92 92 92 92 92 92 fb 81 52 d1 4b 4a 4a 4a 4a 4a ee 07 4a 45 2f 29 29 Data Ascii: PNGIHDRy_v'PIDATxyy=z<+>{\@IHQ"%$;(-{am(:k9^nQx$k0}uedUuVwI~?oUX!())))))TRKJJJJJJE/)))))(~TRKJJJJJJE/))
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: bd b0 3e ea 77 bd a0 82 84 94 66 7a c9 03 4e a9 e8 25 25 25 7f 7c f6 d3 db 08 65 64 bf d8 cc a6 f1 38 9b 0c f3 78 24 b3 44 6b ad 0c 32 c7 f3 6b f3 2e 77 91 3b c2 71 39 65 c6 48 2d 65 91 27 b0 ef 96 7f cf b3 5b 6b 29 a5 8c 31 ad f5 41 4e 3c 68 2d b9 eb 16 59 54 e4 29 73 3c fb 5e c7 97 94 3c 18 94 5e f7 92 92 92 3f 2e 48 19 25 fb 82 1c 75 77 26 c3 ae 56 85 2c 0a 6b 81 08 9f fb 81 5f 69 70 27 00 44 42 91 22 d1 aa 50 4a 59 6b f6 63 ea ef c1 54 b9 29 a1 4c 70 ce 05 22 18 63 10 49 1a 47 4a 6b 42 88 b5 96 0b 27 89 46 0c a1 d6 9c 57 da 00 94 b2 5e f2 e0 52 da e8 25 25 25 ff 8e ec 27 b9 51 24 48 10 ac b5 ba c8 d2 64 9c ed a7 a9 27 86 70 2a c2 4a a3 e6 04 55 c2 98 b5 80 60 11 8c d1 4a 49 2d a7 c9 6d 88 88 77 77 a1 de df 44 08 21 84 30 ce 29 a5 5a eb 24 49 ba 7b 7b Data Ascii: >wfzN%%%\|ed8x$Dk2k.w;q9eH-e'[k)1AN<h-YT)s<^<^?.H%uw&V,k_ip'DB"PJYkcT)Lp"cIGJkB'FW^R%%%'Q$Hd'p*JU`JI-mwwD!0)Z$I{{
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: e1 1e 84 52 a5 a4 91 92 7b be d6 ba 74 bc 97 3c 80 94 8a 5e 52 72 1f b0 2f e4 84 50 64 74 9a a6 6e ad 51 e9 a4 c8 d2 62 3a a2 54 19 a0 cc f1 aa 6e a3 41 1c 87 33 87 71 06 d6 68 59 e8 22 53 7f 58 50 fc 50 c8 39 e7 c2 71 a6 69 ea 52 a9 c9 78 d2 ed ee ed ed ee f4 db ed d1 60 90 e5 a9 d1 9a 20 e1 8e 08 fc 00 09 81 83 14 77 0b fb 23 57 c8 c1 6b 82 30 dd 70 d8 68 e6 50 d4 e1 70 49 81 70 fb 0d 02 00 10 00 b0 04 11 db bb 3b b9 54 8c 31 ad 15 00 5a 6b 91 71 29 0b e1 fa 65 62 5c c9 83 49 a9 e8 25 25 ef 6f 10 d1 12 46 0f c7 a2 e4 51 1c 4f 8a 2c 95 69 92 e6 99 45 c6 dc c0 a9 2d 79 ae 47 29 67 94 11 4a 8c 56 5a 15 45 9a 1d 0c 36 7d 4f 31 b7 d6 22 00 21 84 09 47 08 81 04 a5 94 93 c9 64 3c 1c 76 f7 76 db 3b 3b 83 6e 37 49 23 6b 0c 02 32 c6 1c d7 e5 9c 03 10 6b 0d 5a 6b Data Ascii: R{t<^Rr/PdtnQb:TnA3qhY"SXPP9qiRx` w#Wk0phPpIp;T1Zkq)eb\I%%oFQO,iE-yG)gJVZE6}O1"!Gd<vv;;n7I#k2kZk
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: be e7 11 c2 00 01 a7 96 ad d1 5a 16 6a bf 25 cb ed c9 28 4a 29 21 c4 d2 d2 12 22 4e db aa 30 c6 8a a2 98 2a ba e3 79 68 6d 14 47 e3 76 bb df eb f6 bb 9d 41 b7 33 19 8e a4 2a 90 90 69 8b 18 d7 f5 18 a3 80 64 7f 36 da 4c b7 b5 c3 7c 34 38 d0 e2 43 c1 9e cd 5f bb 23 5e 3e c5 e2 81 f6 cf d4 9e cd 2a f4 ec 25 ec 41 91 fa 74 d7 c3 2c f7 83 0f 0e 2e 7a 34 b2 8e 00 82 f3 d1 a0 37 1c 0c 5b f3 f3 d3 fe 35 c6 18 42 a8 56 b2 d4 f2 92 07 90 52 d1 4b 4a fe ff c6 74 b6 27 21 fb 69 ea d3 48 af 2a b4 92 45 3a c9 26 63 29 a5 06 40 c2 90 bb 34 0c 85 1b 70 c7 01 63 a6 b2 6a ad 06 3d 15 58 7b 77 13 d6 83 2b 58 00 60 8c 21 22 65 8c 52 46 28 b1 c6 c4 69 32 1a 0c 7a 9d 4e af d3 1e f4 7a d1 64 92 65 19 5a c3 39 e7 82 0b 57 00 12 dc ef c3 3a cd 70 33 f6 a8 e9 0c 33 3a 8d 47 0d 6e Data Ascii: Zj%(J)!"N0yhmGvA3id6L\|48C_#^>%At,.z47[5BVRKJt'!iHE:&c)@4pcj=X{w+X`!"eRF(i2zNzdeZ9W:p33:Gn
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 93 c9 44 e5 39 e5 dc e8 72 0e 5b c9 03 41 a9 e8 25 25 53 6e 37 61 05 c2 28 3d 18 4e 2a 53 99 a5 2a 4f d2 64 92 65 b9 b6 c8 5d 9f bb 75 21 5c ca 1d c1 05 12 30 4a 69 ad 8a 5c fd a1 01 f1 a9 0d 6d ad 25 84 38 42 30 c7 61 84 58 00 29 d5 60 30 e8 76 3a bb 5b 9b 9d 4e 3b 99 4c f2 2c b3 c6 50 4a b8 e3 56 c2 10 0e 07 a2 1c 3d e1 ed 02 71 dc af d8 9e da b8 87 d5 62 77 08 b3 bd fb c8 d9 77 fb 1d 5e 67 6c f4 a3 4d 5d 0e 63 de 87 79 73 d3 b4 b5 43 07 be 39 cc 74 3b 08 bd df 4e b8 3b 0c 87 e3 fe da 02 0f 2e 7c d0 9d 76 3a 4a e6 60 39 72 97 e3 fd 8e 85 c8 c1 77 b4 94 d0 34 4f 3a ed f6 b1 13 a7 0e d7 35 48 a8 32 56 ab 82 3b 8e 56 7f f8 8f a6 a4 e4 3e a0 54 f4 92 12 00 00 40 06 8c f0 e9 4c 14 5d c8 68 a2 b2 ac c8 e2 3c 4d 95 b1 96 08 e1 87 7e 6b 09 99 a0 8c 32 ca c0 6a Data Ascii: D9r[A%%Sn7a(=NSOde]u!\0Ji\m%8B0aX)`0v:[N;L,PJV=qbww^glM]cysC9t;N;.\|v:J`9rw4O:5H2V;V>T@L]h<M~k2j
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 19 8b 27 e3 ce 5e bb 5e ab 11 42 2c 58 b0 86 10 62 ac 35 5a 51 26 ee 39 df b5 a4 e4 7e a2 54 f4 92 fb 12 8b 84 02 50 cc 86 49 7f bb 37 4e 69 d8 6a 2c b4 28 a3 48 08 1a a3 b5 54 59 61 f7 55 fc 8f e4 91 a5 94 52 4a b9 10 88 28 0b 39 99 4c 86 83 41 67 77 b7 d3 de 19 f6 bb 59 92 18 6b 10 29 a5 d4 f5 3c ce 39 ec f7 2f bb 9d e0 76 f7 ac 71 98 51 47 84 23 e5 da 77 1b e1 16 f6 b3 bb 8f 6c 9d 5d 16 1c 64 b6 c3 a1 f0 5b 80 3b 74 ec 40 32 67 b5 1f 0f 42 d4 b3 b6 3b 1c dc de ec f9 d1 02 dc a1 f1 47 6f f4 d0 3d 30 4d 83 3f b4 f2 61 ff 29 db c9 24 93 d2 22 82 10 54 08 aa 94 c9 0b 45 ac f5 03 97 b0 db de 87 43 4f 3b c0 6d 99 3f 4c 8f 3f b2 70 d9 ff d0 72 4a 33 6b b6 6e de 38 75 e6 0c 63 4c 4a 69 8c a1 94 52 c6 f2 34 f1 2b e2 1e ae ff 92 92 fb 8b 52 d1 4b ee 3f 2c 12 0a Data Ascii: '^^B,Xb5ZQ&9~TPI7Nij,(HTYaURJ(9LAgwYk)<9/vqQG#wl]d[;t@2gB;Go=0M?a)$"TECO;m?L?prJ3kn8ucLJiR4+RK?,
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 99 f1 68 ba dc 1d 87 1e 09 0d 1c dc c6 1d c3 d6 66 93 e6 2c 00 20 c6 49 61 b5 f9 cc 8f 3e b9 76 62 09 20 2f d2 5c 4a 45 c8 6c 95 1c 75 dc ea ea ea b1 2f 7d f9 eb b7 6e ed fe d8 8f 7d 66 7e 69 fe 27 ff 7c 7d eb 56 ef d5 17 af b7 db 93 4a d5 9d 75 e0 9b 99 2e 78 64 e6 d2 d6 ee 57 bb 21 80 e0 7c 38 e8 f5 7b fd d6 7c 4b 22 5a 00 ad 14 32 6e 64 51 ce 6b 29 b9 ef 29 15 bd e4 be 02 01 d1 5a a3 0a 29 25 f3 28 20 de d1 85 85 31 16 86 e1 f7 5e 7b f5 2b bf fd a5 af fd ee ef be 7d f1 ea f6 d6 56 96 17 07 87 83 4b c1 65 84 12 aa 2c ec 0d 33 c6 14 17 d4 a1 84 33 46 28 f1 1c 57 2a a9 8d 96 4a 45 93 4c 6a 3d e8 0f 6f de dc 74 1c 11 06 7e 6b 69 71 69 61 61 79 7e be d1 a8 d7 ea 35 97 33 c7 af 82 eb 49 0d 1a d1 71 3c c7 73 b5 52 c6 68 b0 30 ad 64 33 07 9d e6 a6 25 de b8 ff Data Ascii: hf, Ia>vb /\JElu/}n}f~i'\|}VJu.xdW!\|8{\|K"Z2ndQk))Z)%( 1^{+}VKe,33F(W*JELj=ot~kiqiaay~53Iq<sRh0d3%
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 94 b9 ae eb 39 9c 32 9a 44 11 a7 e0 08 e6 50 ca d0 8e a3 64 67 bb ed d7 5b b5 a5 f5 97 5e fc f6 dc dc e2 ea fa 7a b3 e6 9e 3a bd 5e 6b 84 d1 b0 57 a4 13 b4 8a 32 08 03 cf 77 18 1a c9 05 25 94 68 ad 95 d6 5a 83 d1 00 08 14 71 df da 3e f8 d6 fb 39 71 78 0f f5 7c 2f c1 9e dd e1 f0 0f cc 5a bc 78 e7 6e 53 2c de f6 bd cf c6 e6 0f ff 14 52 1b 6b 7e f8 73 8f 34 9a 61 32 49 66 b2 e1 de e3 06 10 ad 45 ad ba 82 db 3f fb d3 7f ee d4 c9 d5 22 ed 50 4a e6 17 6b d7 2f 77 c6 e3 dc 0f f8 34 c1 11 71 3f 31 10 67 2e 6a 8f de 3f a1 34 89 13 37 08 d6 37 8e 2b 25 0f 7e 2b 48 9e 67 8c 51 c7 f5 b4 d6 7f 7c e9 9d aa f8 1d e7 29 15 bd e4 fb 0b 16 45 f1 fd be 87 92 92 3f 49 28 e3 2a 4f f7 ae bc d9 db db ad ad 9e 5c 3c fe 90 2a 32 6b 0c 00 58 6b 6b b5 da 1b 6f be f9 91 67 9f 96 45 Data Ascii: 92DPdg[^z:^kW2w%hZq>9qx\|/ZxnS,Rk~s4a2IfE?"PJk/w4q?1g.j?477+%~+HgQ\|)E?I(O\<2kXkkogE
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 5d ca 45 21 95 05 f4 83 90 20 c6 f1 24 cf 0a 6d 21 2d 8a bc c8 29 da 5a ad 32 df 6a 7a 2e 32 52 04 1e f3 5d a1 b4 49 b3 42 69 4d 09 61 94 cc 3a cf 0f 1f d1 1f fc 00 ef f9 fa 90 bb 32 db 67 76 43 40 c4 34 51 8d 86 b7 b2 5e 97 07 8a 6e 8d 46 44 2f 5c a5 ac 49 99 47 79 8d f1 80 f1 45 2e 16 8d 1e 29 95 11 42 ef 79 33 4c 10 ad f4 d5 cb 9d a2 d0 8c 51 3c b8 d8 61 86 1f 12 06 c8 2c 10 46 59 ad 51 ef 0d 87 ff f0 ff f3 0f 7e f5 1f ff 43 bf 51 79 e2 a1 93 2f fc d0 67 10 60 da 3c 0e 91 58 b0 56 6b e1 b8 77 ae 53 4a 4a ee 0b 4a af 7b c9 fd c6 b4 dc 4b 04 55 ee 79 30 ea 67 d1 a8 ba b0 72 64 ab b5 b5 7a fd d8 c6 c2 67 f9 47 76 bb 83 b7 de 39 9f c7 13 a0 44 4a 7d a5 33 fc 07 ff ea f3 7f e6 27 3e f7 a3 7f f9 af 7f f2 27 fe cc 77 bf f9 7b d7 2e 5c d8 6b ef 6d 77 c6 13 05 Data Ascii: ]E! $m!-)Z2jz.2R]IBiMa:2gvC@4Q^nFD/\IGyE.)By3LQ<a,FYQ~CQy/g`<XVkwSJJJ{KUy0grdzgGv9DJ}3'>'w{.\kmw
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 37 2f be 3e 1a 0e 16 4f 3e da 5c 3e 96 a7 f1 fe 94 14 c4 b0 52 b9 7c f1 c2 ef ff d6 97 e7 5a ad 2b ef be f3 0f fe c1 df bf d2 ee 4f c5 c9 e1 c4 e7 b4 1e 7a 8c d1 f1 68 34 48 0c 77 1c 97 e3 d2 d2 d2 89 d3 a7 8e ad 2e 11 02 69 3c 32 45 f1 fa 4b df 89 c6 93 95 b5 63 3b 7b 9d ed 4e 24 3c e7 f8 99 d3 8d b9 f9 5b 57 2e 39 82 7e ee 27 7e 7a 6d 75 e5 ea a5 f3 00 60 8a 6c d8 6d 27 71 9c e5 19 01 4d 99 7b fd ea 75 82 32 ac 35 b5 52 04 01 10 9a 73 0b 41 bd 79 ee 91 47 d6 d7 37 76 b7 b7 95 31 61 58 ab 54 2b 8c 53 0b 28 5c d7 0f 2b 41 10 12 04 a3 54 21 0b 63 15 a7 9c 52 06 d6 2a ad e2 68 a4 8a bc de 5a 44 44 02 c8 18 37 08 1c 51 08 5a a9 56 8d 51 db 3b 9d cd ed be 94 ca 75 39 21 f4 30 eb 7c 56 42 cd d1 76 31 77 70 e8 81 9f 5d 01 dc 76 d4 cf 34 98 cb 92 62 69 b5 f6 a9 Data Ascii: 7/>O>\>R\|Z+Ozh4Hw.i<2EKc;{N$<[W.9~'~zmu`lm'qM{u25RsAyG7v1aXT+S(\+AT!cR*hZDD7QZVQ;u9!0\|VBv1wp]v4bi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50124	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:34 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:34 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:34 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:34 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:34 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50123	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:34 UTC	801	OUT	GET /pWVbkjhtPTNZbVieBwoW5yp4_edEFybVMNXXAQdphReN5SvSsx3AS-0ssRnBRGbi9mFm9uTIxgrOEY0GdZLldlzaVSlJI8yprmEWEh2gnp1WCQdeMMoF?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:34 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 197432 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:47:30 GMT Expires: Tue, 28 May 2024 21:47:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 3364 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:34 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 25 08 02 00 00 00 1d 93 cd b5 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 03 02 ea 49 44 41 54 78 9c ac fd 59 b3 e4 c8 92 26 06 ea 62 06 c0 dd cf 16 4b 46 2e f7 56 75 57 77 89 34 c9 21 5f 66 38 32 c2 3f 33 3f 79 86 c2 a1 b0 ab ba 6e 77 2d 99 79 33 63 3b ab bb 03 30 33 55 9d 07 35 03 e0 11 99 55 5d 4d fa bd 79 c2 8f 1f 38 60 30 a8 7d fa e9 6a f8 ff fe bf ff 05 00 00 80 a9 a8 aa 2a 00 20 00 20 22 12 11 42 40 44 42 24 43 24 42 20 04 44 04 00 66 24 22 68 2f 33 14 d1 2c 2a 45 73 51 35 30 50 46 8b 91 bb 2e 0e 43 b7 1b ba 7e 88 a1 8b 1c 02 13 21 80 21 9a 01 a8 69 56 cd 2a 93 94 53 3e 1f a7 e3 69 2a 88 f1 ea aa bf bb de dd dd ec 6f 6e ba c3 2e 76 1d 72 c0 f6 02 40 43 f0 a1 Data Ascii: PNGIHDR%pHYsIDATxY&bKF.VuWw4!_f82?3?ynw-y3c;03U5U]My8`0}j* "B@DB$C$B Df$"h/3,EsQ50PF.C~!!iVS>i*on.vr@C
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: b6 15 fd 7f 13 1a 2e 7f 5d 9e ab e1 ba 50 db d9 01 c0 16 20 a9 62 5d d7 db 46 15 b5 bf 6f 5f b6 fd fc ff 84 3a f8 72 d1 02 5c 5c d7 c0 08 c8 3f 30 b0 f5 4f 66 8a d4 96 24 fe 33 03 b8 c4 e1 df 1c c1 32 cb bf f7 f9 0a 57 e6 43 42 da 1e b6 40 a9 99 5d e2 f2 fa 22 dc ca 0e fe f6 f4 36 9a b2 99 8c 4b bd 41 2b 03 f8 8d 1b dc 48 de 06 76 11 c8 af 45 70 71 e6 af 46 b0 9e 61 11 82 75 38 17 3c c0 69 ce e6 9d a2 81 e1 f2 55 f3 79 42 5a f4 7b d5 80 97 0b c7 0c 5c 7d b7 b3 1b e8 17 77 0c 00 ea 57 27 44 30 b1 3a cf cb 61 6d 09 6f a7 ca 29 43 5b 2c aa 25 95 79 2e 59 8a a8 68 bd 25 22 03 04 1f 74 5d a1 a6 6a 73 9a cf a7 53 0c 01 d1 44 25 76 85 02 2f eb ad 6a 71 64 30 24 04 63 46 44 33 c8 22 22 66 8e 12 14 1c 2a 14 40 cd 51 d3 59 8a 5a 9b 09 43 ff dd cc 95 a7 19 28 f8 41 Data Ascii: .]P b]Fo_:r\\?0Of$32WCB@]"6KA+HvEpqFau8<iUyBZ{\}wW'D0:amo)C[,%y.Yh%"t]jsSD%v/jqd0$cFD3""f*@QYZC(A
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 58 1a af 70 c5 d9 4c 69 db ea 8b ed 69 37 c3 5a 7e 23 a2 75 85 7f 41 26 5d 65 c1 c5 19 36 ca 64 59 b7 5f ea 15 b8 b0 7e 56 09 b1 d5 1c f8 1a 3b fe b5 2f 5c 4f f2 d5 c9 1a 91 be f8 8b 2d e0 e9 5e 87 46 95 fe c5 d7 c6 3d 03 e0 1c d2 36 3e a5 76 72 40 40 30 b5 a6 54 2e 7c 9e 0d 84 9c d5 a9 96 52 44 c4 61 86 88 76 bb 1d 07 2e aa d5 55 8a 54 6d ac 3a c9 ff bc 89 52 ef 19 2e 67 bb 29 0e 04 42 33 58 02 11 fe 14 09 91 98 d9 f9 29 2d 58 bd 0c f3 37 34 cd f6 5a 0b a6 36 43 70 85 82 2d dc 6e 87 bd dc cc 17 af d5 a1 dc ae 4c 28 cc a4 ca 6c 0c 84 20 00 80 04 a8 a2 2a 52 54 4c 45 cd 14 6a ec 70 b9 fd 6a 95 b4 99 df 4a ba 2d 84 c8 9f 95 ad 12 54 17 36 42 75 d4 b7 df cd 8c c8 17 96 29 a8 a9 3f 53 36 23 03 44 a7 e1 84 08 90 72 96 3c a9 a4 52 a6 f3 f1 b1 ef 62 37 ec fa 61 Data Ascii: XpLii7Z~#uA&]e6dY_~V;/\O-^F=6>vr@@0T.\|RDav.UTm:R.g)B3X)-X74Z6Cp-nL(l *RTLEjpjJ-T6Bu)?S6#Dr<Rb7a
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 2a 86 60 0a 11 49 0b ba 2d e8 6b ca 93 44 a5 13 31 0d 06 80 a0 c6 2e e7 c8 81 ad 33 11 0b 1d 07 d3 42 2e 57 d5 48 ae b9 9a 2b 78 e3 ca d8 b7 d0 89 6e 9a 6f a0 bf 0a ef 97 b8 b9 75 a2 38 b2 6f fd 32 1b b1 6f 50 de d0 fb 42 79 e0 4a bf 7f e3 b4 cd dd bc 60 fd f2 8d af 8e dc 7c b2 2a 07 40 23 30 b7 62 a8 46 8b 7f 03 f4 bf 78 0f 06 48 c8 00 ce 14 9b f1 d4 1e e4 92 7e e5 c7 db 05 8a 2e 47 2d ef fe 1b 5f d6 26 a8 8e ca 56 ff ae 99 81 1b ed 15 50 0c cc 44 a4 94 92 a4 94 a2 a5 88 35 f2 ef 51 e0 7f c6 0a d8 38 dc be bc 83 0d d4 62 c5 28 58 c3 22 5f 78 88 2a 03 35 87 15 10 95 2c d9 47 52 a4 e4 9c 11 31 08 4b a9 8f d4 23 9d 7e 62 ab ce 3d 43 a7 a9 d6 ee b6 c9 aa a3 27 56 b5 d3 1e 57 f3 49 6d 1e 9f 81 81 98 96 52 4a ca aa e2 b9 d8 81 63 e8 02 33 c5 c0 60 bd 85 c8 08 Data Ascii: `I-kD1.3B.WH+xnou8o2oPByJ`\|@#0bFxH~.G-_&VPD5Q8b(X"_x*5,GR1K#~b=C'VWImRJc3`
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 08 81 43 0c 5d d7 75 dd d0 85 08 48 8a cb f2 c4 56 9b 78 31 1b 5f b2 b4 cd f3 6e e3 6e ea de cc 54 8d 94 28 86 d0 71 08 c4 a1 85 28 10 36 f5 9d 44 d8 75 fd 30 74 31 52 64 94 92 8e cf 0f f7 8f 9f c7 f3 78 3c 9e 4e a7 a3 a8 82 29 7b 94 d1 80 01 18 d1 00 93 14 97 5c 61 50 20 8f 01 83 b3 38 04 f0 2c 20 33 2d 02 aa ae 91 d0 74 cd 2b a3 6a 11 9a 29 7a e1 1c 02 02 11 01 90 91 87 40 11 00 45 2d a3 07 40 08 99 90 2c 08 05 51 10 20 a3 a0 81 89 98 54 a3 61 3f 14 9c 13 98 a2 01 01 9a 81 1b 2d c4 cc c6 80 bb 6e b8 2e f9 a4 f9 b8 91 b4 45 cc 10 6b d8 b9 8a 4c f0 e1 e9 9a 7c 0b ae f7 ab 7b 05 6d c9 59 77 6c f2 cc 3d 42 21 60 40 67 9b 9e a6 6c ab a3 d9 93 50 11 d9 10 49 41 1c 50 8b 88 b4 8c 20 15 51 51 63 51 14 00 f6 2b 10 06 a3 40 1c 39 18 80 92 c6 e0 40 66 06 ea e2 5c Data Ascii: C]uHVx1_nnT(q(6Du0t1Rdx<N){\aP 8, 3-t+j)z@E-@,Q Ta?-n.EkL\|{mYwl=B!`@glPIAP QQcQ+@9@f\
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 77 63 be e1 e3 86 bb 2f d0 4f 8d 24 54 14 24 80 9a df 54 bf 8b ed e6 37 ff 56 7e dd d8 44 bb b1 45 af 7c 45 bd 1b 8b 6c a0 dc 1a 0c d5 a9 47 dc 0e 09 00 d7 fa b1 15 c4 71 d5 45 d5 43 d7 2e d5 ea ad 61 39 5b 70 46 8d e8 6b a2 1e bb 9e 63 53 af f2 1b fa a0 a5 1d 5c 2c b3 ed 6f d4 f2 02 7e e7 f5 95 b8 7f 79 70 1d 93 53 3c b3 da ab c6 d9 86 3a 4d 57 13 00 33 91 22 39 97 22 5a 0a 32 a9 a9 9a e5 9c e6 29 21 a0 48 39 4f e7 9c 32 a8 7a 86 35 02 10 92 6a cd 45 81 c5 97 53 29 b4 27 d7 a1 01 2a 56 3c b2 96 f3 e3 d5 6f 65 c3 8a 29 93 98 19 00 9b a8 59 e8 62 df f7 c3 d0 e7 54 d2 3c 21 80 a8 e6 9c fb be 07 33 24 12 91 97 e3 31 a5 d4 c5 a8 aa f3 3c f7 7d c7 1c 44 b4 a8 f6 43 1f 43 54 2d d3 3c 4f 45 bb be 43 24 69 79 e0 04 b5 37 47 93 5e 02 28 fe 88 51 09 d1 82 21 11 79 Data Ascii: wc/O$T$T7V~DE\|ElGqEC.a9[pFkcS\,o~ypS<:MW3"9"Z2)!H9O2z5jES)'*V<oe)YbT<!3$1<}DCCT-<OEC$iy7G^(Q!y
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: e7 71 9e d3 6e b7 db ed 86 3e c6 19 a1 a8 21 5a ce 79 37 ec 7b e2 9f 7f fe 19 11 5d 55 cc 29 01 c0 d3 d3 d3 3c cf 62 ca 21 1e ae 6f e6 94 cf e7 b3 37 9f 49 b9 e4 9c 76 fb 61 bf db 49 29 a6 82 04 bb 61 b8 bd b9 b9 3a ec 3d f9 b2 e6 47 c0 02 29 88 4c c8 8c a1 16 e0 20 a0 b7 a6 59 b8 fe 12 bd 41 00 30 5d 58 cb 52 f5 60 88 60 e6 25 b2 a8 a2 39 5b c9 a0 33 48 f1 65 04 1c 10 00 89 c0 d8 9f 8a 21 21 71 4d b8 a0 0a e7 48 a4 be 70 10 11 88 d0 00 19 b0 4a 14 11 b6 6c 4f 22 64 44 6e de 24 fa 1d 57 c9 3f f7 6a ab 64 95 36 f0 70 83 aa 94 92 72 1a c7 f3 79 1c a7 79 4e 59 f6 95 73 91 eb ff 4a fc cc 0c 80 62 08 7d e7 25 75 86 d6 49 b7 df ef 76 bb fe e9 41 4f c7 e7 c7 87 cf aa 50 b2 00 46 8a 7b 56 01 24 60 0e 48 0a c0 00 c6 c4 58 d1 7f f1 1f d7 7a 75 55 30 45 d3 46 34 05 Data Ascii: qn>!Zy7{]U)<b!o7IvaI)a:=G)L YA0]XR``%9[3He!!qMHpJlO"dDn$W?jd6pryyNYsJb}%uIvAOPF{V$`HXzuU0EF4
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 8d 48 55 fd 63 80 56 29 ef dc 9f 16 f4 a7 3a 18 04 58 eb b4 5a f5 ec bf 28 5c 4d 74 eb bd a1 93 13 11 2d 45 72 9a e7 71 1c cf e7 f3 9c b3 68 f1 21 58 f3 9d 7a 00 c0 e3 44 29 e7 34 4e b5 6d 9d 66 c9 b9 94 82 68 ce 62 ad a6 60 c6 c0 31 70 20 24 23 24 32 01 25 60 82 1a ff e0 ea a6 68 c6 56 b5 63 37 b1 54 ac da 0d 09 99 29 78 2a 1b 9b 19 a1 02 a0 9a 29 6a 0b 55 11 11 79 c7 27 46 d6 10 68 e8 ba 61 37 74 0c 65 66 85 d9 2c a5 39 89 68 40 02 63 41 42 c2 21 c6 2e 62 2a 05 b4 20 a3 88 13 a3 66 9c 99 41 1c 42 dc 13 07 20 59 b6 74 a8 85 16 66 2d c2 67 80 1a b6 b3 8c 0b 42 60 ed c7 d8 3e c5 96 d0 54 f5 80 67 78 10 bb b3 c8 f1 dd c8 f5 01 d5 94 01 b7 fd 00 a8 a0 1a 01 0a 07 04 2f 23 07 4b a6 e6 9e 9d 52 44 92 94 20 81 8d 0d 11 81 89 88 40 10 c4 6b c5 a4 98 16 41 31 f5 Data Ascii: HUcV):XZ(\Mt-Erqh!XzD)4Nmfhb`1p $#$2%`hVc7T)x)jUy'Fha7tef,9h@cAB!.b fAB Ytf-gB`>Tgx/#KRD @kA1
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 88 48 61 65 97 cb da 59 b8 5e b5 2c aa 0d 80 80 de b4 cb 5b 9a 8b 79 12 43 6d 4c 6b ae 28 44 4c c5 14 00 29 c6 50 4b a4 63 64 66 43 60 a3 7e 18 86 fd ae 0b dc f7 9d 45 64 ba 3e 6a f2 3c 34 53 e1 40 de e4 94 83 ed 7a 3c 8f 98 b5 30 46 af 1e 8f 21 c4 c0 e4 7a 99 28 ec 0e 40 01 34 51 ed b6 51 4b 30 71 f3 1f 40 8b 01 6c 0b 81 b0 f6 92 c6 f5 05 0e ff 4e da 5a 3e 3d 70 0b 17 80 11 78 c1 ba 97 c8 7b 7c 76 c1 3b 36 34 40 65 00 20 63 d6 e8 61 73 28 96 bd 95 76 96 12 44 44 8a 0a 43 10 24 2f c4 53 62 60 04 06 cb 22 50 0c 8a 2a b2 86 60 56 dc 3e e5 06 26 8b a1 b2 b8 59 a0 12 89 05 fe 36 24 77 75 f9 d4 a2 d7 0d a4 6e dd 41 b0 1e e7 dd b3 89 00 b1 95 0e 41 4b ef 5f e4 17 db 72 69 e0 0b 50 ed 11 ac 2a 63 f9 bc 45 98 9b 69 d0 2e d6 2e b9 ce 5e f5 88 d5 6d 0a 36 43 42 4f Data Ascii: HaeY^,[yCmLk(DL)PKcdfC`~Ed>j<4S@z<0F!z(@4QQK0q@lNZ>=px{\|v;64@e cas(vDDC$/Sb`"P`V>&Y6$wunAAK_riPcEi..^m6CBO
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 00 55 4d 55 c1 7c 1b 89 5c 64 4e 45 d4 10 99 b9 8b 5d c7 21 c6 10 98 89 14 b2 88 9b 77 6a 6a 26 8c 60 c4 91 63 29 59 ca 2c 79 b2 18 80 a3 01 04 b6 3e d2 d0 59 2a 0a a6 9e 61 12 42 60 02 0a 01 d1 8c 78 77 b8 e3 78 d0 f9 a9 4d 26 7a 61 4c c5 83 45 01 20 5e ac f1 d6 77 9e eb a3 a7 4d 7e 3d 2c 00 77 c1 2e dd cf c5 cc c4 8c e4 2c 00 80 5c 2f 55 d2 8b 86 68 a0 0c e0 2d 64 8d cc 58 20 88 a9 94 22 2a a5 e4 52 58 84 8a 30 8b e7 8d 01 03 19 62 20 56 94 22 d9 44 85 58 72 d1 22 58 db 51 41 4b 48 c5 0b c7 fa 65 01 1c 6c 3e c7 4d fe cd 16 eb 9b 8c d9 16 3c 71 a9 86 a7 ea bd 6e 91 e1 85 fc 7b 70 d7 6a ca 45 73 d3 d4 ec 58 40 ef 8d b4 5c d1 7d 4a 80 cd 4a c5 5a c6 b5 b9 62 1b d6 c5 87 ab 85 80 bf 65 a3 7c 7d 70 35 1a 10 ab 32 5f 6f 7d d3 20 69 fd a7 0a c5 76 26 3c 48 b4 Data Ascii: UMU\|\dNE]!wjj&`c)Y,y>YaB`xwxM&zaLE ^wM~=,w.,\/Uh-dX "RX0b V"DXr"XQAKHel>M<qn{pjEsX@\}JJZbe\|}p52_o} iv&<H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50125	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:34 UTC	800	OUT	GET /bl7lc5NGrZQEr-cUfR-Gur5eANjLuMdaTUZP9yYxNneDJjHdzbRfd2Mfdx9L1ecDSXLbSj3kmNlkeg5pu83uUov2jx4xzHi2Akotz5lIKABiRlmJYFg?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:34 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 214394 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:41:59 GMT Expires: Tue, 28 May 2024 20:41:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 7295 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:34 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 25 08 06 00 00 00 92 f1 5a e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c 84 bd 69 cc 66 c9 75 df f7 3b 75 97 67 7b f7 7e 7b 9d ee e9 6d f6 19 0e 69 71 a7 48 9a 16 4d 91 8a 15 49 96 95 28 89 90 0d 88 15 20 41 0c 23 31 e0 0f 31 10 20 fe 12 38 41 04 f9 4b 04 db 30 e4 44 b1 22 04 b2 2c c5 d4 c2 45 24 87 e4 70 c8 e1 ec 33 9c e9 99 5e 66 7a 7a 7a 7d bb df fd 7d b6 7b ab f2 a1 6e 6d f7 79 9a ba c0 4c 3f ef bd 75 ab 4e 9d 3a e7 fc 4f 9d 3a 55 57 7e f7 9f fc a6 11 11 44 40 44 50 4a 10 04 25 02 02 22 0a 00 c1 3e 07 fc 33 7b 19 7f 1f 0c e1 32 18 e3 8a 19 fb c4 d8 12 c6 68 54 de e5 f0 03 e7 18 2c 2d 20 80 31 c6 b6 62 0c 34 f4 80 fd d3 16 00 09 8f 7d ad 82 60 00 31 Data Ascii: PNGIHDR%ZsBIT\|d IDATxifu;ug{~{miqHMI( A#11 8AK0D",E$p3^fzzz}}{nmyL?uN:O:UW~D@DPJ%">3{2hT,- 1b4}`1
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 8c d1 18 63 c8 41 70 0e 40 32 2e 11 c0 83 34 9d 0a 46 d2 33 ab 11 1c 09 25 71 e0 9f 5a 32 c1 d0 30 4d 13 31 39 c8 9b ad 2f 1e 40 92 81 89 07 d8 18 37 a0 26 d0 eb e9 0b 34 cc e2 48 cb 39 90 06 36 4c 24 e0 33 97 1b d0 88 66 89 9e c5 bf e3 3a 44 d2 22 31 58 9b 16 40 26 ef cd 92 1b 03 9c 73 7a 92 36 3c 60 b9 91 68 ea 17 63 89 f5 b7 83 33 26 de 91 73 63 e4 f8 2f 8d 63 13 7e 27 75 3b e7 42 e2 bf db bc 76 ca e4 18 f0 53 90 37 e9 6c 33 68 6d 87 c4 3f 4e 50 df f3 20 36 f2 09 7f 5c 41 51 91 21 37 d1 93 16 d2 bb 3f a3 31 95 e8 76 62 54 24 90 14 d4 a5 29 e1 f5 24 c8 59 da d3 86 c6 e0 25 07 39 99 e3 fc 28 0c 3b 53 d8 98 c0 83 7d d8 ad 85 8d b1 b0 ae 0c 43 81 47 16 33 44 14 5b d3 9a 2f 1f 51 74 14 54 06 7a 0a d6 3a 8a ed a9 e1 b1 35 c5 de d4 f0 b5 9b f0 d6 3e 7c 6c 49 Data Ascii: cAp@2.4F3%qZ20M19/@7&4H96L$3f:D"1X@&sz6<`hc3&sc/c~'u;BvS7l3hm?NP 6\AQ!7?1vbT$)$Y%9(;S}CG3D[/QtTz:5>\|lI
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: a0 2c 3a 8d 1c 90 ce 1c c2 12 45 70 ee 62 fe c5 6d 7b c7 82 b6 17 9d 30 32 65 6d ec 58 79 63 14 3b 46 8e 8f 84 59 96 73 58 5a 32 e3 c3 b8 8d 41 8b 83 3c f7 33 82 73 45 d3 c6 fd e6 bf e5 bb dc d4 da a2 d9 2f 61 35 54 a5 78 10 a2 2f b5 11 96 0a c3 b9 81 22 cf 0c bd 0c b4 12 ae 8f e0 70 57 78 75 db 50 01 95 86 02 38 b5 a0 b8 76 a0 39 3d 50 64 39 ac 96 8a 9f 6c d5 5c d9 d1 1c 1f 28 fa b9 70 7b 6c c8 05 96 0a 43 37 b3 11 83 ad b1 21 af 0c 3f bf 26 9c 59 12 c6 22 dc ad 60 b5 84 be 32 ec 6a d8 ae 85 53 1d b8 57 09 cf ef 08 b7 46 b0 94 c1 b9 65 c5 8f ee 68 8a 5c 58 34 42 85 30 55 42 a6 34 0f f6 85 83 da 70 6d 08 9f 5b 15 8a 4c 73 a6 9b b1 57 af b1 58 e4 1c 2e 5e a7 76 7c aa 0d 39 70 db fc 3d ae e5 a7 39 df d9 a3 aa 75 34 e4 c2 8c 6d 68 d8 9b 2e a9 45 0f 22 c3 ef Data Ascii: ,:Epbm{02emXyc;FYsXZ2A<3sE/a5Tx/"pWxuP8v9=Pd9l\(p{lC7!?&Y"`2jSWFeh\X4B0UB4pm[LsWX.^v\|9p=9u4mh.E"
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: fd fd 9a 07 7b 9a af dd 30 9c 5e 50 0c 35 5c df 87 0b db 86 5d ad c8 8c e6 0b 8b c2 ed a1 a6 d6 70 a8 50 7c 72 d5 70 b4 a8 c9 c5 46 04 6e 4f 14 fb 13 61 62 84 63 a5 61 35 37 8c 6a c3 e6 54 f1 c1 08 ee 8c 6b 36 47 b0 3b 81 db c3 9a 89 86 ed 1a 6a 84 13 03 b8 3e d4 7c 78 09 de aa e0 fd 3d c3 62 21 dc 38 80 a9 81 33 3d 43 a1 84 6b 63 21 2f 14 db 93 9a 17 b7 e1 61 3e cf 63 9d d7 58 29 8f a0 8a 4f b0 57 f7 b8 2d 47 39 52 4e 29 a5 60 77 a2 58 c4 58 5b 3b f7 9a a3 67 ad 19 5d 98 8c c0 fd 86 66 ae b6 b6 74 d0 8d d3 68 52 73 4c ad b2 76 ec 63 6c ec fe 84 07 37 d7 31 3d 41 8f 35 db 3b 43 ea be a2 da 37 5c b9 b8 cf db 4b 39 af 5e 3e a0 e8 68 f6 a7 35 bf fc c9 25 fe f6 cf 3e 48 a1 14 5a 07 27 c5 39 81 09 6d 7e 86 9d e6 1f 18 2f 84 44 76 b4 4d aa 89 e4 3f 7e dc 2e 18 Data Ascii: {0^P5\]pP\|rpFnOabca57jTk6G;j>\|x=b!83=Ckc!/a>cX)OW-G9RN)`wXX[;g]fthRsLvcl71=A5;C7\K9^>h5%>HZ'9m~/DvM?~.
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: b2 3b 0e 56 32 e8 e5 70 bc 27 2c 66 50 6b 2b 49 2b a5 70 65 cf 1a bb c7 97 61 a5 f7 10 ef d7 7d 3e c8 0c 27 64 c4 e5 ea 34 1b 07 15 e3 42 28 94 d8 65 55 d5 c8 85 b1 3a 31 33 27 4c f1 2a 66 3e 2d ad 88 c6 0a 0f 6e e9 e5 a2 87 a9 3c 7b 00 d1 1a 53 74 18 51 31 f9 d3 9f b0 74 3b 63 28 fb 2c 1c 5e 25 eb e4 74 cb 92 ad 9d 3d ee 1c ee 70 9d 8c 7e 5d 03 82 36 9a 7e a1 78 f3 c6 88 0b 1f ec 70 fa d8 c0 26 6e b4 08 8f 9d 5a ff 7f 13 95 89 26 4b c6 18 92 c5 71 67 f1 4d 48 2a f6 39 04 31 6f 12 dd 08 ef fa 25 d6 48 5f a3 9a 1b f6 a4 ed 79 8e 3a 9d 72 2a d1 d8 ef 24 6c 3f 67 a9 43 5c 7b da d1 2f 81 6e 22 2b 92 e8 52 cb 86 78 33 6e 70 db d7 63 fb e0 1c 6b e7 1c d8 19 72 6a 1b 1d 4b 54 96 db 2d 80 22 91 4d 14 bc 43 e6 68 d3 b6 bd b2 28 28 ca 9c f1 78 c2 37 be f3 43 7e ff Data Ascii: ;V2p',fPk+I+pea}>'d4B(eU:13'Lf>-n<{StQ1t;c(,^%t=p~]6~xp&nZ&KqgMH91o%H_y:r*$l?gC\{/n"+Rx3npckrjKT-"MCh((x7C~
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: fc 15 7b 03 b8 2e 19 85 36 48 ae 7c c2 9f d6 42 2f 83 1f 5d 38 e0 57 3f 3b 62 ad df 61 5a eb c8 72 b6 35 2d f4 c3 44 fd 49 72 a3 22 07 c1 39 c2 f6 55 27 9f 51 dd c9 c4 c9 cd f8 83 5d f3 8b 00 91 63 62 9a 70 7c e2 3f a5 7f 34 23 91 02 2d 0d 2f 5c b9 e0 84 a7 d7 4c 64 d0 63 86 b4 6c 8f 09 e3 eb f5 2c 1a d1 06 ab 62 a7 2f b6 b3 26 3e 8d 47 ac c3 d3 26 17 ec 56 3f 4f 83 52 a0 8d 0b fc a0 8d 26 cf 0b fa 9d 92 f1 64 c2 8f 5f b9 c0 ef fe fe 37 78 e7 ea 1d c8 7a 9c 39 73 8c c7 1f 7d 88 27 1e 7b 94 a5 a5 45 24 b3 b6 35 2f 4a ca a2 a4 c8 33 74 64 03 cb b2 a0 28 4a b2 4c 35 dd b5 34 56 95 a6 df 2b e9 74 fa 8c 46 13 9e 7b 69 87 6f fd 70 8b a5 52 71 67 2b 67 77 f7 80 c3 87 17 2d c5 ba 46 6b c3 e6 fe 3e ee 1c 22 17 89 34 c6 34 8e 00 28 95 a1 eb ba 09 a6 29 72 67 f0 c5 Data Ascii: {.6H\|B/]8W?;baZr5-DIr"9U'Q]cbp\|?4#-/\Ldcl,b/&>G&V?OR&d_7xz9s}'{E$5/J3td(JL54V+tF{iopRqg+gw-Fk>"44()rg
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: 18 22 20 71 64 37 ca 8e f7 36 af d1 a1 64 89 ae 29 17 eb 58 cb 29 48 96 0e 23 91 0e fa 1d 6b 76 18 3b 89 fe 9f 3c 9f 89 16 3a a3 11 9e 85 a0 81 09 ba 93 be 15 7e 36 b3 79 68 9c 85 56 a9 b6 de 6a ad d1 da 90 65 8a 7e af cb b4 9a 72 e1 e2 7b fc d1 5f 3c c7 77 7e 70 01 e8 72 f8 d8 21 7e e6 23 4f f0 e8 f9 73 ac ad 2e 23 59 86 a0 28 f3 82 bc 53 a0 9a 65 6f 67 9f f2 a2 a0 28 72 0b fc 31 0f c4 2e 07 80 41 65 19 4a 29 8a 52 d8 dc 32 98 4a b1 be 5e f2 ea e5 7d 1e 58 57 fc 77 bf 71 8a e3 c7 33 ae 6e dc a5 2c 4a c0 d2 b8 b7 3f 66 3a 9d 92 e7 3d 26 d3 09 da b5 8b f1 07 0b d1 c8 90 a0 9a 1c 80 a6 d3 a2 52 63 15 83 78 62 d4 5b 4e 80 67 7c 2c 74 71 58 a6 29 e7 66 b9 a6 f9 fb be 80 14 0d 42 22 00 8e 0e 3f a6 a9 00 46 de 87 f5 ea 5a 33 c3 04 ec 63 30 4e 44 20 a2 cb af b9 Data Ascii: " qd76d)X)H#kv;<:~6yhVje~r{_<w~pr!~#Os.#Y(Seog(r1.AeJ)R2J^}XWwq3n,J?f:=&Rcxb[Ng\|,tqX)fB"?FZ3c0ND
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: cc 5f e3 fc f9 33 1c 59 5f b3 b3 75 11 f2 3c 27 2f 6d 48 5f 6b 8d c6 e6 5d 75 ca c2 2f 01 c4 61 c0 30 71 b6 07 06 a9 4c 51 55 9a ed ed 7b 2c 2e 2d 53 55 d0 eb 65 1c 3e 54 f0 3f ff e6 39 4e 1c cf b9 be f9 01 5f 7f fd 65 be ff fe 4b 88 51 f4 b2 2e 45 a7 60 3a 9e 32 58 c8 d8 d9 1b 31 99 4e 29 54 66 f9 d0 7c 97 c0 45 20 74 a5 51 79 06 8d 93 95 5b ec 0e 40 1b db 7d a7 07 6e 66 29 b4 78 da cc 4a 62 e1 f3 01 fa 08 14 ac e1 77 c3 e0 d6 e7 9d 47 22 e1 00 8b 48 70 e6 e1 55 5b 26 5a 71 e6 f0 af 93 90 96 54 cd 4d 0e 4b 6a 6c 81 57 54 55 52 a4 ad 44 6d 6f bd 61 a2 c5 ac 74 5d d9 e7 3d 34 7b ba 03 d9 0d 54 39 80 4c da 09 4e 42 3a b3 8d ac 96 ff cd 1c 86 85 72 33 8f 25 fe 19 25 49 c5 ca 9f 68 4e eb 65 89 58 13 6b 56 4c 4b a4 9c 09 e4 b6 c3 7b 29 a9 41 18 9b b1 6c 52 2f Data Ascii: _3Y_u<'/mH_k]u/a0qLQU{,.-SUe>T?9N_eKQ.E`:2X1N)Tf\|E tQy[@}nf)xJbwG"HpU[&ZqTMKjlWTURDmoat]=4{T9LNB:r3%%IhNeXkVLK{)AlR/
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: bd 01 85 ca d9 3a d8 e6 e2 ad 77 79 f6 ca 0b 5c de bd 46 4f 0a 06 79 8f 5c ec 99 fe ce 61 95 52 a1 2b 8b f2 fb a3 8a 4a 57 40 07 5d 37 df 2b 30 8d fc 68 8d 64 0a 63 0f e3 b0 4b 00 44 80 e0 3a a2 9a 2c cc 00 e2 a9 ee f8 ac 6f af 88 29 43 c5 44 82 96 80 58 a8 4c f9 3b 21 c4 39 ef f2 fa 19 7b 7f d1 32 84 49 da 36 fe 79 2a b0 2d 8f 31 a1 39 ad 2f bd 12 8b 1c fe 6d 79 91 e9 d6 c4 e0 39 a4 5b f3 1c 4d f3 88 49 7b 1c 74 c4 09 75 70 88 c2 c9 5a 81 f6 b6 f2 24 eb f4 b3 da 60 ab 6c eb 42 bb cb 33 7f df 0f 0c 83 92 a6 49 47 f3 2a bb ff d5 72 53 3c f8 c6 09 86 a9 63 e3 8a 46 66 3e e6 53 5c 5d cb f1 9a 27 69 41 8e 1c ff 5b f2 1b cb d3 4c 4d 7e e3 54 64 ac 12 06 b5 1c 8a fb 5c 6d bb ea bb 68 9d 8d bb 95 a2 d0 f6 cc fd 23 25 1c 2e 61 a9 a3 b8 34 86 17 77 0d bf b0 06 4f Data Ascii: :wy\FOy\aR+JW@]7+0hdcKD:,o)CDXL;!9{2I6y-19/my9[MI{tupZ$`lB3IGrS<cFf>S\]'iA[LM~Td\mh#%.a4wO
2024-05-27 22:43:34 UTC	1390	IN	Data Raw: b4 d8 c3 f4 bd 14 9f 00 68 99 1e 0c b0 b8 2f ba 45 9f b8 f5 fb 5b fd 2c da b5 d6 56 da 40 4e 7c 37 3e 51 ca 1e 42 e4 c2 5c 44 8a 1b e8 48 66 80 de ab 36 e1 6b 73 e2 5a 6f 25 e5 fd b4 ab 31 e8 76 1d cd 4b 67 0c 7f 01 6a 3c 1d 01 07 62 81 4c c4 dd 03 45 ab f3 51 9f 7d df 52 2b 18 b5 98 2a 5c a2 f3 4d b1 b0 c7 d9 dd 88 5f 8b 19 10 81 7f bb 92 98 e4 d8 51 71 e5 da 5f e1 33 24 63 31 8f d6 d0 c4 1c 83 4d 4b 99 e3 f0 5f ab 6c 3b b2 d4 40 6f d4 83 34 79 d3 81 ff 4c f8 3f 7a db 11 27 2d fa fc f6 a4 38 2a 16 ff 8c 1d 28 4c ca 83 18 eb 13 de bb ad 99 9a 5a 0b 6b 9d 82 1d 0c 9b 5a b3 98 c3 33 b7 34 af ec 1a 8e 94 f0 85 e5 8c 3f db d5 7c 7e a4 79 f8 90 e6 e6 14 86 b5 62 67 64 28 33 30 59 c6 03 a3 9b 6c 7d f3 77 78 77 e1 bf e6 43 79 41 17 c3 d6 54 b8 31 51 3c b9 a0 b9 Data Ascii: h/E[,V@N\|7>QB\DHf6ksZo%1vKgj<bLEQ}R+\M_Qq_3$c1MK_l;@o4yL?z'-8(LZkZ34?\|~ybgd(30Yl}wxwCyAT1Q<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50128	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:34 UTC	794	OUT	GET /jUoaTIlBn5ibfQcND2n5OMD6Z7xoqNj-ShHlFR6QuLffLXD5pS8V2eNg1rGlrsRrnDkoQ28O8UHzqzBQKAGY4l1CS2NQSq2SkRScK6FOjl82jppyohK- HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:35 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 46194 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:58:39 GMT Expires: Tue, 28 May 2024 18:58:39 GMT Cache-Control: public, max-age=86400, no-transform Age: 13496 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:35 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8c 00 00 02 00 08 06 00 00 00 91 a3 5b 74 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec 9d 79 80 24 65 79 ff bf cf 5b d5 d7 dc 7b 2f 7b b1 cb 0d 82 78 c5 03 6f f1 02 51 54 40 d1 20 88 07 a7 22 f1 4a 7e 89 c6 44 4d a2 46 13 8d 26 fe 3c 11 51 50 f1 d6 28 9a 28 f8 43 44 82 11 39 94 9b dd 9d d9 63 76 76 77 ce 9e be aa ea 7d 7f 7f d4 f5 56 75 75 4f 77 4f cf f4 f4 cc f3 81 99 9d ee 7e af aa ae 7a be ef f3 3e ef fb 16 c0 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 Data Ascii: PNGIHDR[tsBIT\|d IDATxy$ey[{/{xoQT@ "J~DMF&<QP((CD9cvvw}VuuOwO~z>00000000000000000000000000000
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 00 80 65 43 95 4b 50 95 32 64 b9 24 94 54 8f a5 06 fa 7e 5e d9 bb 37 6d 8d ec 4c 9d 70 df de 7f 5b 84 53 c1 30 0b 0a 0b 06 d3 35 dc 7f c2 11 4f ea 7d ce e9 ef 17 7d 7d 45 39 9b 7f 21 65 b3 06 19 29 33 4d 6a 00 86 01 08 01 a9 42 3b 9f 84 94 da a7 2a f8 d5 18 44 80 0a d3 1b 9e 10 c5 4b a0 e0 47 41 39 0e 48 4a 54 a0 0e ab 52 d9 80 a0 fb 40 b4 cf 9e 18 cf ec b8 fe 87 af 6c bc 72 86 e9 3c 2c 18 cc 92 e2 d1 33 9f f5 81 d4 f6 a3 0c 08 63 0d 09 e3 85 22 95 29 1b a4 4e 31 cd 14 14 00 a9 14 00 05 07 f0 bc 02 e5 8a 80 e3 40 49 07 90 ca f5 06 1c 07 ca b1 bd 7f 1d c0 91 e1 6b 25 01 e9 96 03 a5 dc d7 0a 80 94 11 41 80 a1 79 21 00 40 ae 37 42 24 5c f1 30 4d 90 61 00 c2 00 19 ee 0f fc 7f 49 00 42 b8 ef 0b 01 82 02 88 e0 96 e8 22 88 20 a0 50 28 57 0e 08 a2 43 f6 cc 4c 9a Data Ascii: eCKP2d$T~^7mLp[S05O}}}E9!e)3MjB;*DKGA9HJTR@lr<,3c")N1@Ik%Ay!@7B$\0MaIB" P(WCL
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: de 02 b0 62 11 ce d4 24 e4 cc 54 d0 f3 5c 30 4f a2 1e 2b c1 cb e8 e4 b0 d4 9c c9 dc 7d b6 a8 a7 17 c6 e0 10 44 df 00 84 61 c0 20 c0 2a 95 a1 2a e5 9b 8b 77 fe f6 47 c7 df f5 c8 bf b6 d8 10 a6 8b 61 c1 58 41 0c bf ed 4d 9f 10 99 ec 1b 33 e9 f4 6a 1b 80 b4 2a 70 f2 33 70 26 26 a0 ac 4a 34 70 dd 89 9e f7 7c ea ed 26 c1 70 2b 5d dc 7c cd 4e 0c d0 d7 7a 0c 0c c2 18 5c 05 91 c9 c2 10 02 24 1d 94 a7 a7 f7 d8 e3 07 3f 73 f4 f7 fe fb a3 2d 36 88 e9 42 58 30 56 00 23 57 5e 7c b3 e8 e9 79 62 26 95 1e b4 94 82 53 2e c1 1e 3f 0c 99 9f 76 77 f8 f3 63 13 71 ba c9 90 ce 23 2f 7b 18 73 20 25 20 25 28 d7 03 63 d5 1a 37 e6 21 04 52 4a a2 5c 2e 3f 66 8d ed fb d7 a3 6e fc d9 67 5a af 80 e9 16 58 30 96 29 f7 3c f5 98 2d ab 9e f9 c2 cf 9b a9 d4 19 c2 34 20 a5 82 5d 98 85 3d 7e Data Ascii: b$T\0O+}Da *wGaXAM3jp3p&&J4p\|&p+]\|Nz\$?s-6BX0V#W^\|yb&S.?vwcq#/{s % %(c7!RJ\.?fngZX0)<-4 ]=~
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: f4 1c eb d8 0e ac 03 a3 90 f9 a9 c6 17 df c5 61 2f a3 bd 79 c0 82 d1 fe fa 5a ab 32 f2 3d 48 09 98 26 52 9b b6 20 d5 db 0b a7 52 91 ce d4 c4 55 db af fb de bf b7 d6 20 a6 55 58 30 16 89 dd 6f 7d c3 1b cc 55 43 ff 66 a6 53 43 95 d9 3c ac bd 7b 41 4a 41 cd e7 1b 60 c1 68 6f 9e 20 6b 17 1c 5f cb f9 ba 43 30 dc ea 62 19 1d 07 c6 da 75 48 af 5b 0f a5 14 64 a9 f8 cb 6d ff f7 ba d3 5b 2b 9d 69 05 16 8c 45 60 cf 3b 2f ff 3a 32 e9 f3 05 91 a8 8c 8d 41 4e 8e bb 33 a0 40 20 02 54 47 6e e2 65 2e 18 f3 c8 c7 82 d1 ce fa 5a af 36 f1 7b 90 12 94 ce 20 bd 65 2b d2 d9 2c ca e5 ca 23 a5 c7 ee 3f ef b8 9f fc e6 0f ad 37 8e 69 14 16 8c 05 66 e4 3d 57 fe 3a 97 cb 3c b3 58 28 c1 da b7 17 aa 5c 06 09 e1 0a 85 ea 52 c1 68 47 fe c5 a8 8b 05 23 29 53 6b 75 f9 79 17 71 72 56 cd ef Data Ascii: a/yZ2=H&R RU UX0o}UCfSC<{AJA`ho k_C0buH[dm[+iE`;/:2AN3@ TGne.Z6{ e+,#?7if=W:<X(\RhG#)SkuyqrV
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: dd 80 a5 ca 83 6f 7d fd 5f e4 d6 6d f8 b8 6d 3b 28 ee da 09 e5 d8 e1 36 1e 48 be 24 55 ec 95 d2 3f f1 02 15 51 df 42 45 7e ab 48 ee 50 34 18 86 59 00 0c 03 d6 fe 3d 28 8e 1f 42 a6 af ff e4 91 cb 2f fc 63 a7 9b b4 d4 61 c1 48 e0 c1 cb 2f fc cb dc 9a 35 ff 62 5b 16 4a 8f 3d ec 8a 05 a8 ce d3 f1 e2 a6 1e ee 90 14 00 28 15 91 85 e8 7b 88 fc 1b 29 5e a1 3a 1f c3 30 ed 45 18 b0 46 f7 a2 70 f0 00 d2 b9 9e 93 46 ae 78 e3 9f 3a dd a4 a5 0c 0b 46 8c 07 df 7a c1 5f 64 06 06 3e 52 2e 16 51 da fd 58 b8 2f 20 80 60 4f a3 06 bc 8c e0 5f 8a 7d 48 81 a4 c4 52 26 94 a8 7c 2f 83 45 63 31 e1 f3 bd b2 20 c3 84 73 70 14 85 03 a3 48 e7 b2 27 0e 5f 71 f1 bd 9d 6e d3 52 85 05 43 e3 fe b7 be fe 2f 33 ab 06 ff c5 2a 96 dc 98 85 bf ec 5a 25 08 40 95 4d 49 f2 32 bc bf 93 bc 05 15 ca Data Ascii: o}_mm;(6H$U?QBE~HP4Y=(B/caH/5b[J=({)^:0EFpFx:Fz_d>R.QX/ `O_}HR&\|/Ec1 spH'_qnRC/3*Z%@MI2
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 95 e0 71 44 fe 0e 86 b2 28 3e aa 05 5f 6c 74 78 9a ed 0a 84 bf f0 f6 d2 ca f9 34 0c d8 63 a3 40 b1 08 63 cd da 0f b5 bf 51 4b 8f 65 2b 18 7f 78 cb 6b 3f 9e e9 ef 7b e9 f4 de 11 c8 4a 19 8a 5c 25 08 2f 0b 7f 38 88 a2 db 7d 28 15 11 08 15 89 2d 44 85 a4 d6 3e 53 8a 62 6a a1 4f b3 0d 03 20 ee 47 49 5e 86 d6 96 6a 2f 23 5a 74 e2 90 56 3d d8 d0 30 4c fb 10 02 a5 91 5d 30 15 d6 ac 84 87 2f 2d 5b c1 30 fb 87 ae 98 1d 1f 87 3d 39 01 08 11 11 81 30 16 e0 19 62 ad 87 ae 80 1a 01 70 cd d6 26 06 c0 a3 ab c4 a3 6e 07 aa 82 0d 11 01 82 3e cb 4a 45 45 a6 2a 00 ae 90 24 0e 8b e2 65 74 8b d8 74 4b 3b 99 36 d3 a1 ef 5d 29 14 86 77 c2 4c a7 4f 1c be fc a2 2f 77 a6 11 8b c3 b2 14 8c 7b de f1 96 51 55 2e e5 4a a3 7b a1 0c 23 f6 69 6c 5e 91 ef 65 44 bc 02 bd 9b ef 41 7a fa 6a Data Ascii: qD(>_ltx4c@cQKe+xk?{J\%/8}(-D>SbjO GI^j/#ZtV=0L]0/-[0=90bp&n>JEE*$ettK;6])wLO/w{QU.J{#il^eDAzj
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 78 38 aa 3e dd 74 9c 5d d4 d4 96 68 f8 bb 20 c0 71 50 18 dd 0f a3 af ef b5 0b da a6 05 a6 fb 04 63 ec 1b 2f 1e 7d d2 8e 53 67 1e dd 89 82 10 50 ca 37 99 2a 18 5a 92 be a9 d5 0c 37 a1 56 00 5c 1b 2a 42 4c 48 e0 0a 4f c4 fb 50 61 6c 21 b0 de 14 0e 4d 29 20 1c 9a 4a f2 32 f4 fa 74 cf 03 88 dd 60 9e 24 d4 da 67 2a 69 05 b8 8a e6 56 b1 7c 4d d9 9a 6e 32 4c dd 06 9f db 9a 2c 5b 6f 4f 08 d8 93 e3 10 a5 72 ef c8 95 6f fc 4d a7 9b d3 2a 5d 27 18 e7 fc 61 d7 37 7e 7a 54 1f 0e 0a 09 47 2a 54 b4 00 b7 04 02 17 20 1e 00 97 12 55 d3 6c e3 b8 79 62 c3 4e 7e 86 e0 1d f7 77 f5 5e 54 0d 0c 4d 21 29 81 e6 65 c4 93 e8 75 54 e5 47 ac 6d 5e 4a a9 c2 04 5a fa b9 f7 99 5a 02 74 c4 58 2c f1 73 c2 2c 1f 88 50 dc b3 1b 10 c6 d3 47 de f8 9a 2b 3a dd 9c 56 e8 2a c1 38 eb 27 1f fc d7 Data Ascii: x8>t]h qPc/}SgP7Z7V\BLHOPal!M) J2t`$giV\|Mn2L,[oOroM]'a7~zTGT UlybN~w^TM!)euTGm^JZZtX,s,PG+:V8'
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 5e 7d 73 a7 9b 33 17 4b 56 30 b6 0d ac bd 7c 6c ea 30 1c 25 e7 4e 0c 85 52 79 16 b7 bc f0 04 60 d6 42 05 0a 8e ef 69 c8 d0 9c ea 3f 7e f7 de 7f d0 92 3f 34 e5 8b 8a 9f 47 1f fc af da 67 4a 9b a2 aa 80 ea 00 38 1a f0 32 92 d2 e8 23 45 89 43 53 5a 3b ea 04 c0 ab 7d b2 d8 f4 5b d5 e1 69 b6 1d aa 78 e5 0c 47 2d 01 83 d8 20 5d 15 f0 6e 77 5b 0d 03 a5 fd fb 90 ce 64 4e 7a ec 75 67 2e e9 15 e0 4b 52 30 5e f4 c3 f7 bd 5f 0a 6c de 5f 98 84 d1 c0 3c 69 02 c1 b2 cb d8 db 9b c2 f0 8b 8e 85 51 74 50 52 12 04 42 49 29 4c 79 e3 3b fe 6e b6 be 97 11 08 88 a2 60 95 b4 7f 8f 05 c1 6e d2 b6 4b 87 96 c4 f3 32 aa 1e b4 14 df 67 4a 2f 54 fb 3b ea 65 68 65 26 ee 33 a5 12 cb 88 04 c0 e3 f5 c4 47 a9 62 af 95 d2 ea d5 da b3 92 20 fe e1 9f a5 f2 e3 38 a8 1c 3a 84 f4 ea 8d ef c6 12 Data Ascii: ^}s3KV0\|l0%NRy`Bi?~?4GgJ82#ECSZ;}[ixG- ]nw[dNzug.KR0^_l_<iQtPRBI)Ly;n`nK2gJ/T;ehe&3Gb 8:
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 5e 86 d7 2d d1 1f c4 54 ed 65 a8 d0 cb 50 d5 ff ea 99 74 93 af bf 13 79 9c 2b c5 d2 28 04 8f 86 8d 7b 3b 81 10 e9 9e c8 42 8b 46 13 f8 cd 90 00 66 1d 89 19 29 51 91 12 4e b9 08 14 f3 40 79 06 e6 e6 e3 d0 f7 d4 67 62 e8 b4 e7 60 e0 98 63 90 1a 5a 0d 61 1a 10 e9 0c 00 b8 c3 4e de aa 7f a7 52 69 4f bb 8c 2c 72 ab b7 21 b7 86 80 ed a7 82 48 40 4a 1b d2 2a c3 a9 94 51 1c 7b 14 b3 23 f7 a0 b0 eb e7 c0 ec ad 30 30 0e 23 b5 03 42 0c 79 02 52 c3 92 03 71 7b e8 a5 53 d1 2f 2c 41 77 a3 36 55 85 ff f8 f1 38 fd f3 aa 90 41 b2 51 ac ba d2 22 8a 51 9f a0 a9 2a 76 ff 54 19 e3 50 2c 94 66 d4 49 3b d8 6a 6d 52 a1 98 ea 06 b8 2a 99 ae 0a b1 3f f5 43 ae 23 1e ba 8b 47 52 ff de b4 9b 12 31 2d d1 4c 98 de 3e fd 23 0a 14 4d 9f 27 49 70 8a 13 48 e7 d6 9d 84 25 c8 12 31 0b c0 99 Data Ascii: ^-TePty+({;BFf)QN@ygb`cZaNRiO,r!H@JQ{#00#ByRq{S/,Aw6U8AQ"QvTP,fI;jmR*?C#GR1-L>#M'IpH%1
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 88 20 44 f8 6f 34 3d 12 50 d5 9a 51 25 12 f1 fc 0e 32 ab 8e 87 78 d6 d7 e2 12 dc 31 3a de 8a 67 7f ff 2f df dd 97 ed fd e7 fb 0f 0d cf db bb 48 42 02 18 ec 5b 85 73 7f 74 1f 56 3f 3c 06 33 65 a2 87 dc 19 53 22 b8 79 3c d1 30 5c d1 00 dc d8 83 21 dc 00 84 f0 0d be 08 8d 6a e4 5e f1 cb f1 f6 f2 20 ef 82 8e 5e 90 14 8d 65 10 a2 f1 8e 1a 5e 46 30 7c 44 b1 34 d0 ff 8d 4b 47 90 39 14 0d ef 18 22 37 9e 66 6e 92 86 a6 a0 1f cf 7c 50 c9 c6 69 56 2a 4c 3a 12 e5 c2 2c 30 b9 1f fd a7 bf 0a 5b 5e 77 21 fa 8f 3d 0e 24 04 a4 e3 2c 4b 91 a8 05 09 03 20 01 7b 76 1c 87 ee f9 31 a6 ef fd 67 a4 45 1e d9 dc 56 90 10 f1 ce a8 fb b7 e6 89 b8 ef 27 a5 8a 5e a7 20 15 11 8c da 06 2b fe 76 b4 1b 1e b9 2e e2 df b1 5e 3e 45 af 5b 5d 3c 42 43 4a 11 7b 1e 89 29 04 ed d7 49 6e 7f 24 3e Data Ascii: Do4=PQ%2x1:g/HB[stV?<3eS"y<0\!j^ ^e^F0\|D4KG9"7fn\|PiV*L:,0[^w!=$,K {v1gEV'^ +v.^>E[]<BCJ{)In$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50127	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:35 UTC	792	OUT	GET /p4M1mK1Lbtc2tt54b6JUQUJ5U8RcwHnEAPH7_87X2NH9Rc8N9ek0Xm2BUq_wmLuOWXlylcDlZFOg4xF3aQtwsyF9frOHoqiQdWVpG-v4VO-Jb_4lIQ HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:35 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 24042 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:17:12 GMT Expires: Tue, 28 May 2024 21:17:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5183 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:35 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 66 00 00 02 00 08 06 00 00 00 b1 63 c6 cc 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 b9 f8 f1 ef bb d6 3e 7d 66 92 c9 64 92 90 40 a8 0a 48 0b 5d 6a 68 a2 14 05 14 15 c4 7b fd a9 5c af d7 4b b5 20 48 33 14 f1 ea b5 81 58 50 44 41 51 51 9a 17 11 48 28 41 04 94 2e 20 48 09 24 90 4c 7a 9b c9 cc 9c 73 f6 5e ef ef 8f 33 03 01 53 26 39 65 9f b2 3e cf 83 0f 02 b3 f7 9b 39 fb bc 67 9d b5 de f5 2e f0 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf 6b Data Ascii: PNGIHDRfcsBIT\|d IDATxw]U>}fd@H]jh{\K H3XPDAQQH(A. H$Lzs^3S&9e>9g.<<<<<<<<<<<<<<<<<<<<<<<<<<<<<k
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 8a 6b 6d 68 ba 43 0c 19 e3 c2 cd 3b 72 2b 50 fd 6b 54 94 99 33 a7 e5 be e1 df a0 ad c9 bf ee 2d e4 42 85 2b cf 5c 70 7e c2 ea 61 20 53 04 ed c0 04 a5 1a 5f f5 a3 e2 b8 28 90 32 c2 a4 f6 2c e9 c0 82 b1 68 14 3a 55 b7 44 45 fe 1a 15 b8 f3 fe 69 6d df f7 6f d6 d6 e1 5f eb 26 a7 40 f7 19 f3 3f 15 18 8e 11 61 0f 81 09 98 c0 f8 64 5c 1f 14 08 44 98 d4 96 26 97 b0 ab 4d 1a 09 32 34 e5 a1 2e 2c 2a cc 77 ca e3 1a c9 ff dd 7f 61 ee ea f8 22 f6 6a c1 27 e6 26 d5 f1 b9 79 87 a7 93 f6 28 6b 75 aa 20 ef 44 4c 86 d5 6b 89 bd d8 29 a5 37 e0 c4 5c 8a 8e 54 62 1d ff e5 ea 49 3a 1a 70 aa cf a9 63 c6 40 de dc fc b7 4b b3 0f d7 28 5c af 86 7c 62 6e 22 a5 45 bc 85 5f 0a 82 e8 48 54 a6 88 31 a3 11 29 6d 45 f6 c9 b8 ee 28 30 2e 93 a4 2b 93 1c f9 0f 89 20 62 51 17 81 b2 38 c2 3d Data Ascii: kmhC;r+PkT3-B+\p~a S_(2,h:UDEimo_&@?ad\D&M24.,*wa"j'&y(ku DLk)7\TbI:pc@K(\\|bn"E_HT1)mE(0.+ bQ8=
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: f1 e7 ec b5 0e 05 92 56 d8 bc 3d 4b a2 0a 47 43 35 bc a1 5d 83 51 14 bd 60 5d 78 c2 dd 17 8c f6 53 1b 1b c1 4f 65 6c 84 f1 a7 cf fb 72 32 65 af 11 6b b7 29 95 c1 f9 b7 67 2b 18 ee 81 31 a9 2d e3 93 f2 da 94 4a e9 b0 36 78 a7 da e0 4f fb 5f b4 f2 b4 b8 43 6a 44 7e c4 bc 81 c6 9d 3e ff 87 81 d5 ff c4 58 f1 53 17 ad c5 29 4c 6e 4f d3 5e cb a3 a1 1a 98 88 45 35 8a 9c d3 1f dc 77 7e bb 4f d0 1b c0 8f 98 47 e8 33 ba 3b e3 cf 9c 7f 7b 90 30 9f c5 18 9f 94 5b 8c 03 26 64 93 b4 a7 e2 3b 1a aa d1 a8 46 20 62 ad b5 a7 4e bd a8 f7 b6 47 fd ef 6d c4 fc 88 79 04 3a ff 6b c1 be e9 0c 97 8b 31 bb fb f9 e4 d6 e3 14 ba d2 09 c6 e7 52 71 87 d2 a0 4a f3 ce 4e a3 c7 fa 96 b9 53 1f f9 df 8e 87 e2 8e a8 de f9 11 f3 7a 8c 3e 65 de c7 d3 59 bd c1 58 bb bb 9f 4f 6e 3d 0e 68 4f 58 Data Ascii: V=KGC5]Q`]xSOelr2ek)g+1-J6xO_CjD~>XS)LnO^E5w~OG3;{0[&d;F bNGmy:k1RqJNSz>eYXOn=hOX
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: b3 d9 a3 ef 29 f2 99 6d f8 73 6a 1c 39 c4 2f 0b 36 99 52 05 46 c0 f8 5c 0a f1 8b 7d ad 45 15 31 41 5b 3e d2 7d 67 df fb b5 9f c5 1d 4e b9 1a 7e c4 bc 70 ea ee df 4d 06 e6 e0 35 27 e5 37 45 92 63 52 7e 2e 5f 7d f9 bf b8 60 c9 3d cc 17 88 7c 6a 6e 1a 0a a4 ac 61 52 5b da 57 60 b4 28 75 21 81 b5 fb 1d 74 51 df 0f e3 8e a5 5c 0d 9d 98 17 1d 38 e5 34 09 e4 e4 70 84 5b b9 22 49 91 75 39 fe 6b f6 39 5c f3 fa 75 2c 30 96 a2 4f ce 0d 6f f8 d5 9f dc 51 4a ca 7e aa aa 75 29 0e b1 7c ea c0 8b fa 3e 1f 77 2c e5 68 d8 ac b4 70 af 77 ee 42 ae e3 76 6b 65 62 b4 81 ef 44 41 b1 d1 6c 1e 19 f3 ef bc 77 cb 2f d2 2e 96 76 bf 11 a5 61 85 aa 6c d5 91 25 97 b4 7e bb b5 87 18 8b 46 d1 fc 95 3a 78 d0 a3 e7 8f fd 67 dc f1 6c 8c 86 1d 31 6b 5b c7 d5 09 6b 36 38 29 03 28 42 68 b7 60 Data Ascii: )msj9/6RF\}E1A[>}gN~pM5'7EcR~._}`=\|jnaR[W`(u!tQ\84p["Iu9k9\u,0OoQJ~u)\|>w,hpwBvkebDAlw/.val%~F:xgl1k[k68)(Bh`
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 29 72 51 c8 c9 af 4d e3 ea 79 d7 b3 d8 0d d0 eb 17 05 d7 4a 80 f1 99 14 6d 49 5f 76 e8 c5 43 d5 21 62 c7 77 66 53 5f 8e 3b 96 61 75 91 31 e6 bf fb 1d 7b a9 04 87 c6 1d 47 a5 38 09 b0 32 8a 0f cc bf 92 ff 9b 7d 39 a9 70 25 3d 7e a7 e0 bf 50 4a 3d 30 46 a5 7d 63 22 2f 7e c5 dc b3 fb 6d f9 7b 0e 88 3b 0e a8 93 c4 6c 32 ed 9f b7 a6 31 2a 31 46 4a 31 a8 e9 62 ff 65 37 f3 c7 17 bf c2 9e f9 79 be 62 63 35 4e 61 54 32 a0 2b 93 aa 8f 87 d0 6b 5d 6a 09 93 b3 c8 4f f8 e1 84 d1 c5 f7 9d 1a 77 38 00 b1 0f e3 e6 ef bb e3 51 92 48 9c 25 42 ba f9 92 96 e0 24 cb b8 c2 6b 1c b8 f2 21 a2 cc 76 cc 4c 4d 20 47 03 b4 f5 ab 22 47 e9 68 a8 4d 72 69 12 be 07 86 17 27 35 68 b0 92 fe 09 97 a3 a9 d7 30 9a 1e df 7e ec 56 8f 2c b9 f9 c5 57 e3 0c 2b f6 c1 8a 24 92 9f 0c 8c 19 5d e7 fb Data Ascii: )rQMyJmI_vC!bwfS_;au1{G82}9p%=~PJ=0F}c"/~m{;l21*1FJ1be7ybc5NaT2+k]jOw8QH%B$k!vLM G"GhMri'5h0~V,W+$]
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: af 20 4c 3f 89 8c 70 b1 6f ad 44 50 75 8b 1e 3b e1 a6 7f dd 8d 52 25 35 4b cc f3 0f da ed 3b c9 20 38 23 f4 0f f9 06 13 14 75 4b 79 b8 f3 58 ce dc ec 3f 79 39 31 86 89 a5 29 d4 ba a0 40 20 c2 a6 ed 29 b2 c1 da 1b de 8b b1 a0 8a 2a 0b 54 f5 e1 d0 71 db 9f 2f c8 c5 56 c4 bf 2e 07 5c b4 e2 bc c0 98 a3 44 64 8a 18 9b 06 50 57 3f bf 73 6f 6d 86 1b 13 5d 4b a1 fd ff 10 6d ab cc 65 8d 10 16 8b e7 3e 79 d2 ad 5f ab cc 05 d7 ad 66 89 79 e1 21 bb bf 66 8c dd b4 99 7a 2e d7 92 a0 58 b7 9c 59 99 77 71 d6 56 5f e5 9e f4 64 26 6a 18 77 58 40 a9 8d e7 e4 b6 34 ed 6b 3c 85 44 de 58 ac 8b c2 e2 d3 ea cc 75 33 2f cc 7d b3 c6 21 6e 34 05 0e bc a8 f7 ca 84 35 87 89 b1 ef 04 50 57 1f bf 77 6f 0d 5c 40 be fb 77 e4 3b af 03 6d a3 52 29 4e 8c e0 22 f7 dc 63 27 de f4 ae 8a 5c 70 Data Ascii: L?poDPu;R%5K; 8#uKyX?y91)@ )*Tq/V.\DdPW?som]Kme>y_fy!fz.XYwqV_d&jwX@4k<DXu3/}!n45PWwo\@w;mR)N"c'\p
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: d9 cd 7f d7 8d 5f 64 da d9 b4 30 8f 0b 67 9d cd f9 4b ef 67 fe 08 2b 36 14 48 04 09 3a 93 f6 d9 4b cf 6f df 7a fa 57 64 66 f5 a3 6d 6e f7 5f d0 76 7d 3e af 1f d5 28 9a 2f a6 a6 1d 77 1b 5c a9 31 d1 60 d7 1f 09 73 33 47 7c 34 54 55 29 58 61 e7 6a 5d be 2a 89 79 c1 d4 9b 3e 66 60 73 df b0 a8 3e 44 92 66 54 54 e4 94 57 4e e3 7b f3 6f 66 81 08 e1 7a 92 b3 35 01 ed 96 87 1e bb 78 f4 8e 07 8b 14 6b 14 6a d3 fb cb 45 6d d3 f3 01 87 a9 0b 5f 11 1b cf 57 f1 86 e3 0c 85 d1 f7 52 18 75 3d 90 a5 1e 4e 9f 51 55 04 79 c7 76 d7 1e 31 b5 1a d7 af ce 88 d9 04 c7 5a 31 69 9f 96 eb 87 93 00 63 26 f2 89 d7 3f c7 9f 5e b9 9c 85 44 0c ac 65 be 53 6c 92 8c d1 47 9f f9 5a d7 be f1 bf 05 9a cf 5f ce 6e 7b f6 ee 73 db b6 72 61 f1 45 e3 93 f3 3a 89 0b 08 db 9e 66 b0 eb 87 d4 4b 52 Data Ascii: _d0gKg+6H:KozWdfmn_v}>(/w\1`s3G\|4TU)Xaj]*y>f`s>DfTTWN{ofz5xkjEm_WRu=NQUyv1Z1ic&?^DeSlGZ_n{sraE:fKR
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: bc 8d 73 df 05 6d e7 aa f2 b2 98 06 9d 8f 55 c8 77 fd 89 b0 ed 9e fa 38 1a aa 0a 04 52 92 a7 22 0b 80 15 79 95 c5 06 9b 07 7e dd af 7e 38 10 89 c8 be bf 87 e4 16 4b 08 8b 06 51 fd 5d dc 61 79 1b 4f 00 e7 e4 56 d5 c6 5b c9 11 97 a0 30 fa 7e 0a a3 af 05 ad a3 53 48 2a 49 01 91 a4 b5 54 a4 a1 51 65 3e 7e 0d 13 2a 72 1d af 7c 43 65 71 e9 c3 17 91 dc 76 21 06 03 e8 eb 21 ea 4f b8 6e 70 7d 09 73 b9 aa ce 96 b7 9f 3a 53 cf 34 a0 98 7b 96 c1 ae 1f 00 69 9a 32 29 0f 11 23 88 c8 a4 4a 5c ab 32 73 cc 2a 9b 35 de e7 78 73 d2 41 21 b9 ef 32 d2 bb cd 05 31 c3 4d 24 ef 4b 1f ce 2b 71 c7 e6 95 e7 b1 b3 33 73 9c 63 06 8d 52 a1 a1 16 4d cc 67 60 c2 d7 87 2a 30 1a 74 1a 66 a4 54 11 2a 33 48 2d fb 37 f5 e2 8b b7 a7 44 74 bc df f1 17 3f cd 0b 89 ed fa c8 1e f4 2a 04 a5 17 d7 Data Ascii: smUw8R"y~~8KQ]ayOV[0~SHITQe>~r\|Ceqv!!Onp}s:S4{i2)#J\2s5xsA!21M$K+q3scRMg`0tfT3H-7Dt?
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: e1 8b b0 46 40 04 23 31 8e 98 fd 71 52 95 a7 83 42 72 9f 95 64 0f 9e f5 2f 3d 30 46 f4 f3 ca b2 2a 84 e5 d5 a9 99 d3 a6 85 aa ba bc 2a db 09 d4 e2 12 0b 58 b5 c9 c5 60 2c be 00 6b e4 a4 cc 1a c2 72 7f d3 7e 2a a3 92 0a a5 1e 18 6d 47 3f 87 86 1b 5b 86 a4 75 d4 72 cc ab 05 41 06 2a 7e d1 a1 a3 a1 06 c6 ff 08 0d 56 80 fa b3 30 36 84 48 99 b3 11 e5 fc b0 c6 df 41 a5 79 84 82 e9 2c d0 f6 91 17 20 61 37 ee bc 4d 01 27 14 2b 1e 9b 57 d7 54 64 a0 b2 25 73 02 92 67 60 dc f5 84 99 27 5a e8 68 a8 ca d1 38 47 cc 7e b6 a9 42 9c 40 32 24 7b dc 6b d8 d1 f9 f5 96 c5 ad 95 82 44 66 69 65 83 f3 ea 9d e2 fa 2b 77 35 01 75 e4 bb fe 44 d8 76 07 d2 72 47 43 55 82 82 4a 59 3b 6f ca dc f9 e7 32 7e 73 49 99 5c e9 7f b2 1f e8 21 b1 f9 52 34 da f8 0f 5a 55 30 38 9f 98 5b 8d ca 60 Data Ascii: F@#1qRBrd/=0F*X`,kr~mG?[urA*~V06HAy, a7M'+WTd%sg`'Zh8G~B@2${kDfie+w5uDvrGCUJY;o2~sI\!R4ZU08[`
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 09 de ba 95 54 2d 61 6a 36 03 dd 97 83 18 7c 05 46 0c 44 00 5d 5c ee 65 ca 7e e5 04 96 b5 6a 5a d6 41 21 b9 eb 4a b2 07 cf 02 a9 ee 76 eb 0d e1 14 ac a1 b3 58 d4 8f c7 1d 8b 57 79 53 2f d4 d1 22 b2 f7 5b a6 31 74 a8 07 c6 a4 b3 c1 28 f5 32 48 68 35 02 28 b2 a0 dc eb 94 ff 91 aa ac 2c fb 1a 8d 28 14 82 cd 07 c8 1d f9 52 5d 25 e5 37 08 18 a3 07 c5 1d 86 57 79 a1 59 75 92 c0 84 37 a7 31 04 d4 b1 6a d3 af 83 2d 80 d6 b8 76 de 7b 93 00 5a fe 49 f5 e5 8f 98 85 de 96 1b 31 47 82 c9 14 69 3b fe 25 24 e3 ea f2 b0 70 e7 40 31 ef 8c ee e0 63 71 c7 e2 55 56 c2 70 98 31 41 b2 34 1a 10 c4 19 06 26 fe 98 28 f9 8c af c0 88 9d e0 60 45 b9 57 a9 c0 88 d9 ad a8 bf b4 54 45 0a 84 11 b9 8f bf 3a 54 16 57 9f f3 78 aa 10 58 32 ce d8 63 e2 8e c5 ab 9c 23 2e d7 b1 c6 b0 67 69 1a Data Ascii: T-aj6\|FD]\e~jZA!JvXWyS/"[1t(2Hh5(,(R]%7WyYu71j-v{ZI1Gi;%$p@1cqUVp1A4&(`EWTE:TWxX2c#.gi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50129	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:35 UTC	794	OUT	GET /NksFVpnLFiAE4YKEh9n84ebvfznogwh0AyAUDpmpLqpBP7h791LS9RcIzWpE8XfsiR0NJiHomxV8FyVO2ccMF2VzB_L3omeUWuHu9d3LGJ4Ww6JKviev HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:35 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 94168 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:29 GMT Expires: Tue, 28 May 2024 21:11:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 5526 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:35 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 87 00 00 02 00 08 06 00 00 00 69 43 a0 83 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec bd 79 b0 25 59 7a 17 f6 cb f5 de b7 d4 7b b5 ef 5d d5 5b 55 57 75 57 f5 4c f7 4c cf 74 f7 74 4b 33 12 12 96 30 02 83 80 08 1c 36 c2 80 65 04 46 6c 01 08 4f 20 61 d9 88 c0 c2 60 8c 64 09 64 a4 08 8c 65 40 11 12 03 61 20 42 60 c4 48 42 9a e9 99 e9 b5 aa ab aa 6b ef ea 5a 5f 55 bd f5 de cc 3c 8b ff 38 b9 9c 3c 4b de 7b 5f ed dd df 2f e2 bd 7b f3 e4 59 be 93 37 f3 fb e5 f7 7d 67 01 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 Data Ascii: PNGIHDRiCsBIT\|d IDATxy%Yz{][UWuWLLttK306eFlO a`dde@a B`HBkZ_U<8<K{_/{Y7}g@ @ @ @ @ @ @ @ @ @
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: ef 50 2f 4d 76 c6 51 b4 59 02 33 41 10 cc 42 62 a3 84 dc 18 c8 60 2e 08 c3 19 19 60 0a 52 f4 81 20 41 88 28 40 10 04 40 20 25 42 40 06 41 10 40 4a 19 04 08 24 02 48 29 21 a1 4e 08 01 21 20 04 93 08 b3 30 c0 50 08 b1 86 20 58 0e 02 2c 4a 89 45 29 e5 52 14 04 ab 9c f3 15 70 71 23 cf f9 87 bf fc f6 ff fb f5 3f fe 07 ff fc cd 07 7d 7d 08 84 f5 82 c8 81 f0 50 e3 da 89 b7 5e 4b 92 99 4f 27 49 b4 07 61 b0 05 52 3e 16 04 e1 5e 00 5b 02 04 31 82 20 05 64 1f 01 7a 69 9c 20 08 02 48 00 28 b5 7b eb 53 4a 00 80 fe bf fa e8 44 00 04 ea 1f ca 6f 08 aa ef 41 80 ea 14 e7 02 05 63 22 40 30 0c 02 0c 01 14 5c 88 1c c0 55 40 7e 18 20 b8 24 99 b8 25 c1 cf 0d 56 57 be b1 fd b9 17 de bc 5b d7 89 40 b8 db 20 72 20 3c 14 58 38 7d ec bf e8 25 fd 17 10 85 bb 02 89 27 25 82 a7 a2 20 Data Ascii: P/MvQY3ABb`.`R A(@@ %B@A@J$H)!N! 0P X,JE)Rpq#?}}P^KO'IaR>^[1 dzi H({SJDoAc"@0\U@~ $%VW[@ r <X8}%'%
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 28 5d 06 9d ab 80 75 4d 08 52 d6 84 c3 8a 02 8c 15 60 79 0e 5e 64 c8 8b 1c 92 33 48 ce 81 00 08 c3 10 71 1c 21 4e 12 a4 69 82 38 4d 10 c7 31 92 38 41 14 47 88 e3 a8 54 ee 01 a2 30 84 2c bd 43 2a 64 21 6a 19 19 53 d6 0e 63 0c ac 60 28 f2 1c 45 c1 50 14 39 18 e3 e0 5c c9 1d 94 0a 3d 4a 52 44 49 8a 24 49 11 27 09 e2 38 41 94 a8 b6 83 30 aa c9 a2 0e 4e eb a4 13 b5 e3 13 b5 7b 29 08 10 94 d6 85 45 0e 71 5c 7f 0f a3 18 51 54 12 4a 14 96 c4 51 59 17 25 91 04 01 b8 1a 0d 76 11 52 7e ed d6 ad 5b 7f ef b1 e7 5f fc 8f 0f f6 4e 23 3c 8c 20 72 20 b4 b0 7c fe f4 3f 0a c2 e8 b5 28 8e 0e 44 51 d4 28 64 ce 6b 17 91 3a 66 ca 02 28 ad 02 56 54 44 50 d4 e9 82 2b 52 50 ae 9f 46 e1 4a ed 6d be 22 84 c6 22 90 90 82 a3 28 0a b0 3c 43 9e 65 c8 86 6b 28 b2 21 24 2f 10 86 01 7a bd Data Ascii: (]uMR`y^d3Hq!Ni8M18AGT0,C*d!jSc`(EP9\=JRDI$I'8A0N{)Eq\QTJQY%vR~[_N#< r \|?(DQ(dk:f(VTDP+RPFJm""(<Cek(!$/z
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 18 be a2 93 5a 06 e3 12 43 07 e1 4c 50 6f 97 95 e3 22 06 68 a3 6a 9b c9 7a ea 5b 08 40 6a 4b 71 70 c6 b0 b2 b2 8a 1b 37 16 70 f9 d2 47 58 b8 b1 00 2e 80 fe cc 1c 66 66 e7 d1 9f 9e 51 8a 5e 1b 02 1b d5 24 90 94 69 71 ed 7a 8a d3 a4 b1 2e 92 b4 19 01 55 b9 ad 42 55 3e 89 13 64 79 b6 26 05 7e 6d 69 e9 f6 8f ef 39 fa e2 7f 1a e7 8a 12 1e 2d 10 39 7c cc 70 eb ec 89 df 93 44 e9 5f 08 a2 e8 e5 34 49 12 35 c9 8c 29 52 a8 62 08 45 01 56 e4 28 b2 1c 45 9e a1 c8 d5 31 67 4d 60 59 b2 c6 32 e0 e5 10 51 29 24 38 67 ca 55 b4 ba 8c 62 b8 86 7e 3f c1 8e 5d 3b b1 67 ef 1e 6c de b2 19 53 53 53 90 90 f5 c4 37 1d 6e 45 59 9f f5 58 05 5d e7 ee 15 31 74 e5 75 93 97 cf ba 68 a4 69 10 94 99 5d 16 43 95 5f 76 a6 37 24 82 ca 15 15 86 60 79 81 a5 e5 65 5c bb 72 15 1f 5d fa 08 cb 4b Data Ascii: ZCLPo"hjz[@jKqp7pGX.ffQ^$iqz.UBU>dy&~mi9-9\|pD_4I5)RbEV(E1gM`Y2Q)$8gUb~?];glSSS7nEYX]1tuhi]C_v7$`ye\r]K
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 73 39 e3 00 5a 5f f4 b7 7b 5b 69 37 a5 7c 73 21 00 db 92 18 65 31 54 8b 0b b6 64 ad 2c 8d 72 c5 58 29 05 96 96 96 f1 e1 f9 8b b8 74 e9 12 b8 88 30 bf 79 1b a6 37 cc 21 49 fb ca 95 94 c4 48 92 14 51 9a a8 f5 a2 aa 80 75 a2 dc 4d 15 61 d4 93 ee ca 21 b1 49 9a 82 15 6c 49 72 fe 95 0d 4f d0 12 1d 0f 33 88 1c 1e 52 2c 9d 3f fd 37 c2 30 fc 81 34 ed ed e2 dc 20 85 ca 75 94 65 c8 87 ca 5a a8 48 a1 5a 22 5b 94 a4 20 05 07 2b 0a 0c 56 57 b0 b6 7c 0b 33 53 3d 3c fe e4 13 78 6c ff 5e cc cc ce 00 52 b9 8d c6 85 3f c6 e0 d3 e0 ad 1c 2e e7 7d 59 af a7 cc 5d 73 3d b9 eb 70 b9 8d c6 0d 48 fb 82 cf 81 46 22 26 31 54 69 2e 8b 61 b4 15 d1 90 8e 77 e2 5c 99 d2 25 97 29 93 2b 6f 58 ae 6c 9b 65 39 ae 5d bd 8e 73 67 cf 61 f1 f6 12 a6 e7 36 63 6e d3 96 c6 9a 48 ca 15 6f cb 38 44 Data Ascii: s9Z_{[i7\|s!e1Td,rX)t0y7!IHQuMa!IlIrO3R,?704 ueZHZ"[ +VW\|3S=<xl^R?.}Y]s=pHF"&1Ti.aw\%)+oXle9]sga6cnHo8D
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 2f 36 6c da 8c 38 e9 a9 51 4c 69 5a 12 43 13 9b 50 b3 ad 2b 97 53 dc c4 24 e2 18 32 00 24 e3 bf 36 f7 e4 c1 2f 5a 5d 20 dc 33 10 39 dc 27 2c 9d f9 e0 2f 86 49 f4 23 49 9c 6c ae 86 a6 72 56 a0 c8 0b 35 79 ad 8a 2b 0c 87 60 79 86 82 15 10 95 b5 c0 0a 80 0b 0c 07 6b 58 bc 7e 19 d3 fd 04 9f fa ec 0b d8 bd 67 37 10 00 c2 31 14 b5 eb cd 7f 14 d6 b3 24 46 e7 b9 bb ea 62 ea 2a e7 6c dc eb 0a ea 76 c3 a8 b4 f1 89 61 bc b7 73 d9 ca 1f 78 87 97 da 79 1b 8b a1 4a 19 6d 49 b5 09 65 2c 99 a4 39 ea c9 ce e7 b2 7e 4c 92 51 7b 50 00 0b 37 6e e2 bd 77 8f 61 6d 75 88 6d 7b 1f c7 ec dc 46 45 00 bd 32 1e 91 f6 ca 60 75 45 16 15 51 b4 83 d6 49 9a 82 31 b6 22 18 ff fb 1b 0f 1c a2 85 fd ee 03 88 1c ee 03 96 2f 9c fd cd 24 49 5e 51 7b 28 37 71 85 3c cb 50 0c 07 8a 14 06 43 14 f9 Data Ascii: /6l8QLiZCP+S$2$6/Z] 39',/I#IlrV5y+`ykX~g71$Fb*lvasxyJmIe,9~LQ{P7nwamum{FE2`uEQI1"/$I^Q{(7q<PC
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: f2 a1 22 85 e1 60 ad 5c 4e 7b 08 96 17 10 a5 0b 49 94 6b 20 2d 5e fb 08 3b 77 6c c5 8b 9f fb 2c 66 e6 66 c1 0b 56 d6 dc ed 6e 71 3d 74 e3 a2 8b 18 fc 75 76 59 13 ee 32 5e c2 e8 20 9f c9 48 a1 cc 3f 81 c5 e0 0b 86 9b e9 be c9 6d be cb d3 b5 26 91 a9 4c ed 8f 46 b9 9b 64 30 2e e1 8d 4f 0c 0e 8b c1 33 34 d5 47 02 e3 58 16 ad be 19 16 83 75 54 66 89 a3 08 83 c1 10 ef bd fb 1e 16 16 16 b1 73 ff 53 98 9d 9b 47 dc eb 95 a3 9a fa e5 52 1c 29 d2 5e b9 02 6c bd 22 6c 63 45 24 49 8c c1 70 f8 cb 9b 0f 3c fb fb ac 4b 42 18 1b 44 0e 77 80 a5 f3 a7 df ee f7 fa 47 0b 56 ad 9c 9a a3 18 e6 c8 86 ca 52 c8 d6 d6 94 f5 50 e4 e0 79 51 4f 64 e3 45 81 a5 9b d7 01 36 c0 8b 9f 7b 09 8f ed 7f 4c ed b7 20 1b 95 30 32 f0 bc 6e 62 f0 97 9b 6c cf e6 f2 cc 5d 9b db a0 ce a9 b2 be f3 8e Data Ascii: "`\N{Ik -^;wl,ffVnq=tuvY2^ H?m&LFd0.O34GXuTfsSGR)^l"lcE$Ip<KBDwGVRPyQOdE6{L 02nbl]
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 91 2f df c2 67 5e 79 09 fb 1e df 07 c1 c5 3a ad 85 f2 ff 3a 88 e1 ee 8e 4a ba bb a3 95 1c ba a1 03 93 2b f0 b1 49 c0 e9 fe f0 d4 eb b0 16 aa 8c f6 9b bc ff 2d be 2a 5f 95 b1 96 dc 68 aa 75 d6 e7 92 77 b4 c5 e0 0f 9c bb f2 98 fd 69 5b 16 e3 06 9e db fd 69 9d 73 3d 0b 56 3e 57 9d cd b7 28 8a 70 f9 f2 55 1c 7b e7 3d 6c d9 b5 1f 9b b7 ef d2 dc 4c fd 66 a3 a1 44 9b 34 17 ab 79 11 49 1c ab 38 04 2b fe f5 96 83 cf 7d 2f 08 4e 10 39 78 b0 78 e1 f4 6f f6 e2 f4 95 6a 15 d5 22 cf d5 1e ce 6b 03 0c d7 56 d5 fc 85 3c 53 db 76 66 e5 a2 79 ac c0 cd ab 97 b0 69 7e 06 9f 7b f5 f3 98 dd 30 6b 8c 44 52 18 c7 45 a4 1e 96 c9 59 a1 bb dc 7a e2 02 93 12 c6 88 11 49 13 73 dd 64 56 c0 78 c4 30 39 e1 8c 37 1b b9 79 a3 6e 2b f2 f6 1b b9 1e 67 70 29 fa 71 17 f6 53 e9 ee d8 87 e9 8a Data Ascii: /g^y::J+I-*_huwi[is=V>W(pU{=lLfD4yI8+}/N9xxoj"kV<Svfyi~{0kDREYzIsdVx097yn+gp)qS
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 49 4e a3 64 1a 37 c6 30 7a 39 8c b6 c0 be eb d6 9c b3 7f 38 33 dd 7b dc ca 5f 7e d3 c6 fc ba c9 c1 4d 3a 51 18 62 69 69 05 ef bc f9 0e e6 b7 ed c5 b6 dd 8f 21 4a 13 24 3d b5 ec 46 9a a6 e5 16 a4 cd fe 10 51 19 87 e8 a5 29 b2 22 ff 8d ad 07 8f bc 86 4f 28 3e b1 e4 b0 74 f6 e4 7f 48 7a fd 6f e7 9c 83 97 81 e7 62 30 c0 70 ad 74 25 0d d7 50 64 43 14 55 e0 59 70 dc be fa 11 e6 66 7b 78 f5 db 5e 45 af df 87 e0 ae a5 d8 70 cf 89 c1 f7 00 8e aa d7 3f 9a 69 32 c2 f0 f6 6f 4c 17 5a 55 b7 4f f9 6b a7 c7 2e e3 23 81 f1 2c 06 f7 92 db ae 05 ec 4c 37 8b 5f 99 b6 a4 6e 7d 73 8d 16 ea ba 16 ae 89 6b 2e b9 5c f2 b8 46 29 05 5a 3e bb 7e bb 0d ef 1c 0f 43 d4 96 e2 76 29 fd 31 89 c1 ca d3 99 cf 43 4e e5 47 10 06 28 f2 02 ef bc f5 2e 82 78 06 7b 9e 3c 80 b8 df 43 9a a6 e5 48 Data Ascii: INd70z983{_~M:Qbii!J$=FQ)"O(>tHzob0pt%PdCUYpf{x^Ep?i2oLZUOk.#,L7_n}sk.\F)Z>~Cv)1CNG(.x{<CH
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: fd 5d e4 61 4c 84 71 91 85 2d ab db b5 54 1d 87 61 80 a2 60 78 e3 b7 de c0 d6 bd 4f 61 db 9e 72 a8 6b da 47 9a aa 18 44 3d 8a a9 24 88 b0 dc 9f ba c8 8b f3 db 0e 1f 7d 1c 1f 63 7c ac c9 61 f9 dc 07 6f 27 bd de d1 22 cf 5b b3 9e 07 ab ab c8 56 57 90 95 16 43 91 65 e0 9c 63 f9 c6 55 f4 62 81 2f 7d f7 77 22 8e 63 f7 8c 67 60 2c a5 3f 99 2f 7e fc f2 ae 07 b3 7d 7e 12 62 f0 a7 fb fa 38 7e bf 24 dc 55 77 93 9e 56 d4 59 97 53 b5 38 48 a0 cb 62 68 29 72 47 8c c1 ad ac db 16 83 3d 1a a9 5d d6 a5 d4 01 ff 3a 49 a6 0c e3 2c a2 e7 9b 09 dd ae cb 45 4a e3 ce 63 d0 ae b8 57 01 eb ba d8 a3 f4 0d 59 5a e5 a4 59 97 23 8f e3 87 b3 87 b0 9a 79 5c 2f 31 8e 7b 2f 00 a4 90 f8 e6 d7 be 81 0d 5b f7 62 d7 e3 4f 20 4c 92 7a 55 d7 6a b9 8d 6a 78 ab 9a 4d 9d a0 df eb a1 60 c5 e9 ad Data Ascii: ]aLq-Ta`xOarkGD=$}c\|ao'"[VWCecUb/}w"cg`,?/~}~b8~$UwVYS8Hbh)rG=]:I,EJcWYZY#y\/1{/[bO LzUjjxM`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50131	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:35 UTC	568	OUT	GET /MXe6LXpT_1IP98ElixZruA0GQf1A9i-4bfeCtry1-Gej5yWbCpSfNS0HX9JEJiPamMsW5bmJ6BlU_H4SzxLeAI0EWlkwFSA-DU5MCdW4k70Twm49Qzw?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:35 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 333997 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:15:40 GMT Expires: Tue, 28 May 2024 22:15:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 1675 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:35 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 55 08 02 00 00 00 16 b1 c0 74 00 05 18 74 49 44 41 54 78 9c 4c fd 49 93 2c 49 92 26 88 7d cc 2c 22 aa 6a 66 be bd 2d b6 8c dc b3 f6 ea ea e9 6d 66 00 cc 05 20 1a 9c 71 c4 ef c1 1f c0 01 7f 03 07 1c 41 a0 06 40 c0 50 63 68 1a 33 e8 ae b5 33 ab 2a 23 32 22 32 22 de e2 ab 6d aa 22 c2 fc e1 a0 1e d5 e3 f4 88 9e d3 23 7f e4 66 6a b2 30 7f 1b cb ff e1 ff f4 7f ac ad ef 4a be 28 50 1c d1 de f1 70 9f 04 db 9c b2 59 c9 a3 95 24 ec 21 11 00 44 50 32 d3 20 9a 60 c9 d2 24 36 c0 06 71 05 9b 2f 0f 11 67 aa 02 00 4c 54 81 04 74 ef 75 39 3f 1d ce f7 0f 87 77 ef 1e de ef 97 65 59 78 98 bd f7 d8 14 0c c9 19 9a 61 8a 24 9a 53 56 24 89 92 c4 46 53 6d 58 3a 1b 29 42 d3 50 15 81 33 db b0 dd 7c 34 a6 2b 92 59 Data Ascii: PNGIHDRUttIDATxLI,I&},"jf-mf qA@Pch33*#2"2"m"#fj0J(PpY$!DP2 `$6q/gLTtu9?weYxa$SV$FSmX:)BP3\|4+Y
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 71 b7 c9 c9 54 cc 76 e3 94 72 4a 86 6c 79 ca e9 e6 ca c6 b1 08 a4 64 dd 5d 6e 2e 5f 5d 6f 5f 5e 0f 9b 9d 49 12 4d 0a 88 65 53 11 21 40 02 42 85 10 84 58 46 ca 92 0a 00 90 aa 4a 32 e6 f9 7c ff fd fd 97 bf f9 fd 3f dc de ef dd cb b4 c8 b0 3f 1e 93 4a 32 39 9d e6 62 b9 2b 72 19 76 97 9b dc ce 17 56 5f ff e4 f3 cb cf 7e 95 92 ed 78 2b fd 43 e8 45 bc fa 0b 6c 5f e9 fe 77 e9 f1 1f 35 0f 6e d3 32 fc a8 4d af ed fc 01 bf fd bf c7 c3 af 87 8f ff 5c 3f f9 17 f5 78 c2 d3 b7 b6 19 54 c7 2e 85 2f 7f 56 4a 2a 8f 5f 60 ff 3b bd fe dc 5f ff 0b e6 09 c7 0f d3 d3 df 20 9e 9a be ea 3e 85 66 43 8d db df 78 6b f8 f4 5f fa f0 8a cb 41 6f ff 32 bd ff f7 fa e9 ff a2 5d fd 69 f5 d0 db bf 4b ed bd a6 e4 7a d9 ec 86 d3 2e c1 b5 1e 96 fd ad e4 29 7d f4 87 0c f4 af ff 27 de fe ad 7d Data Ascii: qTvrJlyd]n._]o_^IMeS!@BXFJ2\|??J29b+rvV_~x+CEl_w5n2M\?xT./VJ*_`;_ >fCxk_Ao2]iKz.)}'}
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 11 36 a1 84 48 f4 a3 72 f0 e4 64 74 3f f6 3e 47 90 0c 08 2a 6b 6b a7 c1 da a0 30 14 d3 8d 52 a3 cf d1 bc c5 00 59 5c d0 bb 20 51 44 a1 22 a9 3b a4 77 42 5a 95 0e 9f 8b f4 9c 16 b5 2e 22 42 91 48 12 03 b8 a3 25 b3 5c b0 cd dc a8 6c c4 ae 18 ad b4 7d 2c 35 6a f7 de 9a 5b e8 94 ca 50 0a f4 ea 86 2f 7f 5c 76 6f 06 4b 10 52 44 45 03 50 08 05 0a 08 04 a0 62 bd 10 0c 2a 59 34 bc 31 a2 f5 45 bd 89 57 c6 10 6a dd e9 75 49 a5 84 c0 84 79 18 6d 73 99 2e 5e 6b 9d 85 ae a9 d8 30 f6 5e 11 8b 9f 1f a3 57 2c 27 f6 8a f0 e8 73 44 63 5f 28 19 62 54 f3 de d5 c4 52 0a 6f b0 22 66 08 47 32 65 51 88 0e a5 75 9a 99 16 53 53 00 e2 20 34 18 e1 1e ec a6 05 de 95 3d e7 21 e5 9a a6 cd 38 a6 3b ca c2 38 b7 7e d8 cf c7 ba 38 35 65 cb b0 62 36 4e 69 37 5d 0c c3 98 95 89 01 77 31 55 05 Data Ascii: 6Hrdt?>Gkk0RY\ QD";wBZ."BH%\l},5j[P/\voKRDEPbY41EWjuIyms.^k0^W,'sDc_(bTRo"fG2eQuSS 4=!8;8~85eb6Ni7]w1U
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 94 34 0e 29 8f 42 11 09 97 50 68 10 64 98 29 44 55 4c 4c 41 67 a3 8a 50 c5 45 14 26 1a ec 0b 97 d9 4f e7 f9 e9 d4 96 1e 11 b5 b7 b2 c9 43 2e e7 e5 3c 1f 9e 48 87 a4 50 cf c3 06 6a 10 e4 71 93 da 62 46 4d 83 c3 a4 8c e2 17 ad 2d 78 f8 46 af 3e 0d b5 7a ff 95 1c de c9 9b 9f c9 72 d2 61 97 2f 6e 72 ed 3e 3f 76 8a be fa 05 74 f4 2f ff 5f f9 fc 98 5f 7e 0c 32 ea 59 6c d4 f6 01 87 af 71 f1 4b 99 5e 04 d0 97 53 69 07 2d 1b a6 4b 89 c6 5c ec e3 7f cd c7 6f ea e3 87 3a 7c ce dd c6 4e 1f fc f4 7d fb f0 c1 c6 9d 5e fd 58 da c9 1f be e4 fd 37 a8 8f f9 97 ff 5b df 7d ca 6f ff 26 4e df d8 70 1d 72 b9 bc fd 7b a6 cb f4 fa e7 38 df 2d bf f9 b7 52 2e c6 8f 7f 52 cf 4f fd ee cb 74 93 c4 62 a6 33 54 7c 79 6c 6d 81 26 07 4f fd 9c 58 c0 4d a2 61 c5 d2 d8 dc 17 84 79 f4 de 4e Data Ascii: 4)BPhd)DULLAgPE&OC.<HPjqbFM-xF>zra/nr>?vt/__~2YlqK^Si-K\o:\|N}^X7[}o&Npr{8-R.ROtb3T\|ylm&OXMayN
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 02 40 45 38 6a 5a c2 bf 8f b8 b2 98 24 8d 62 89 29 8b 98 85 93 44 af ba 1b fd ea f3 b4 7b 93 d4 84 41 7b 2e f5 85 14 91 00 41 10 50 02 60 90 b1 4a 07 a0 3d e2 74 ba f7 f7 ff 38 7f f7 cd 7e 5f c3 03 51 f3 30 f9 38 25 1b 90 65 59 ce 4b af c9 87 38 3d e8 ee 0d 18 be 9c bc 1e 7c 39 c4 7c f0 f3 81 74 0e d7 d1 1b ce 77 c8 97 11 e6 4e 84 cf c7 fb a5 55 00 3d 3c e5 9c 93 12 90 9c c5 b2 44 c4 ca 10 b5 46 91 20 7a 6d e1 51 22 97 41 00 b2 14 51 53 42 14 50 84 bb 18 d3 e6 42 a6 4b 19 36 53 af d3 f0 45 d6 a4 a8 62 29 69 ca 83 6d 37 57 c3 30 8e 82 92 75 c8 83 9a 41 85 b1 72 f2 49 05 42 57 91 5c 92 a6 44 8a b7 2a d1 60 2a a5 48 4a 0a aa 20 8d 5b 99 ae a2 8c 48 01 56 f6 ce 08 f4 80 9c 55 9b aa 51 6f 80 2c a0 68 06 07 91 14 e5 82 92 e2 fc a4 e7 7b 6f 07 ba 8b a8 95 01 aa Data Ascii: @E8jZ$b)D{A{.AP`J=t8~_Q08%eYK8=\|9\|twNU=<DF zmQ"AQSBPBK6SEb)im7W0uArIBW\D`HJ [HVUQo,h{o
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 37 48 e3 fc ee 37 50 19 37 17 71 78 8f fd f7 5a 86 f0 20 a2 6c c6 29 e9 78 fa 1d bc c9 f6 55 cb 1b f1 05 be 84 8d 71 7a 20 8b 7f f4 86 b4 38 de fa dd f7 7c fa 32 ff ec 8f ea f9 ec ef fe ca 1e fe 2a 0d 9b 3e 4c 00 d2 f6 66 e4 43 c2 af 42 52 47 68 b9 d1 32 e4 e4 68 df fa fd 3f e6 ab 3f d0 37 7f da 0e ef fd bb 7f b7 19 b7 76 f1 a3 2a 8a e5 29 6d 2e a7 ab 7f 83 b4 f5 65 6f 9b 2b 1b 8a d4 94 08 28 44 11 2e 80 24 a8 76 8f c5 7b d4 2a 27 4e f4 31 4e a2 e2 bd 7a b8 78 cc f5 7c 7f 38 dc ef f7 ad 63 c8 a3 98 95 a4 25 19 2d c4 53 6d 3e cf 4b c9 56 13 19 44 f7 00 a2 83 70 86 9a 14 58 76 5b 52 aa a6 0b 28 06 1d 87 69 ca bb 52 b6 66 a3 99 90 dd e9 94 a5 aa 6b 60 24 dd 6b 43 2c d9 55 d3 50 36 39 8d 39 67 35 cd 29 65 9b d4 26 d5 a2 9a 4c 12 a0 26 06 cd c9 86 a4 0a a1 0a Data Ascii: 7H7P7qxZ l)xUqz 8\|2>LfCBRGh2h??7v)m.eo+(D.$v{*'N1Nzx\|8c%-Sm>KVDpXv[R(iRfk`$kC,UP699g5)e&L&
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: d3 f1 e1 2e b7 b3 8d 57 6a 29 e5 01 59 b0 1c b8 ec d9 2b 6a 45 3d 87 f7 08 90 46 f6 94 ad e4 9c ca 90 4b 16 d3 15 cd 0e 11 78 ac c7 db 8a fb 05 43 54 4a 29 de dd cd 21 72 3e cd 8f a7 7d b0 5f e9 95 b5 1e 22 69 d8 98 0e 48 da 3d f4 f4 04 95 d8 3f 0a 8a e6 61 2c 16 0e 27 45 92 a9 98 c0 52 b6 3c ac 86 07 70 55 47 8b 6a 12 84 2a 52 32 2d 83 e6 62 ba 82 ef 80 88 d2 4c c2 4c 92 21 e5 8c 94 90 93 98 c1 14 a2 21 22 4e 84 53 dc 44 29 02 20 5a 8f e5 09 6a 32 ec fa f4 06 cb 83 2c 8f 04 68 25 8f 93 9a 4a 4a 9a 06 5a 26 4d 48 d2 85 8d 5c af e2 75 bd 3f 33 c0 5c af 25 42 19 21 14 11 c0 84 11 0c b8 af 78 ef 33 4b 46 97 88 88 75 d7 98 e4 51 53 51 27 89 76 b8 63 5b 42 02 75 d9 bc 7c 91 b7 97 12 4e 35 d0 f9 f4 7d 7b ff 6b 61 0b 24 1d 77 b6 7b 13 f5 c4 db bf 89 bb af 42 b7 Data Ascii: .Wj)Y+jE=FKxCTJ)!r>}_"iH=?a,'ER<pUGj*R2-bLL!!"NSD) Zj2,h%JJZ&MH\u?3\%B!x3KFuQSQ'vc[Bu\|N5}{ka$w{B
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: e5 4f ba 3b eb a3 1c bf 91 fd af f3 f6 5a 5e ff 99 53 f4 fd 5f da f2 0d 2e 7e da 6b 0d ce 7a f3 b9 b5 7b fe fe af 61 a2 2f ff c8 03 68 fb 78 fa 86 8f 5f e8 d5 1f b4 a6 fe f6 b7 99 47 91 94 d8 8e 0a 40 95 00 cd 94 c3 98 36 2c bd d5 b3 b7 ec 8d 7d 96 f3 5c 43 b7 c8 57 d3 24 a5 d8 8b 8b 9b 21 0f 59 b1 c9 db 64 1b 55 6d d1 1c 5d a1 49 90 c4 34 4d 82 22 6a 22 09 ec 50 b0 04 a9 08 b1 a4 10 05 d2 ea 19 52 49 a2 2b 76 07 00 22 1a 0c b0 13 42 0f a6 d0 ec d1 67 e9 55 e0 c9 8a 89 5a 1a ed 79 87 65 35 13 a8 68 32 33 11 55 44 82 9a 29 49 61 a8 a6 b5 e1 45 00 11 00 6c d5 43 68 16 91 00 24 1c de 95 a4 95 b8 bc 71 0c 1e ee ad b9 57 e9 6d 7b 3e 3b 64 99 97 94 11 11 60 48 91 de d3 b9 aa 16 a4 84 68 11 14 a8 d3 bd 7b d0 19 f4 90 d8 4c c3 f8 d1 24 af 54 ae 5f cb f6 c5 da ec Data Ascii: O;Z^S_.~kz{a/hx_G@6,}\CW$!YdUm]I4M"j"PRI+v"BgUZye5h23UD)IaElCh$qWm{>;d`Hh{L$T_
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 18 48 d0 c3 55 c5 54 2d 0d 29 ab e5 01 79 30 13 43 33 f7 ce ae 28 22 06 13 a8 5b d9 e8 78 25 39 2b e6 95 bc a7 18 49 69 27 f4 43 f4 c5 01 49 5b 68 59 35 a5 e8 1d a0 95 09 36 d0 97 98 9f 80 ae bb 2d ad 98 98 88 90 b1 d6 b4 00 c8 1e 0c 48 92 b5 07 83 92 7d 6d cf 56 9a 17 f4 68 2e c3 a4 de 3d 66 a4 2c ab 71 cc 2c 9e b5 11 29 32 a5 71 35 e7 4b 40 45 21 26 6a 96 10 c3 80 21 99 95 79 5f 11 cc e3 46 a2 f7 a7 f7 76 f1 26 5d 7d 66 d3 55 3f dd b5 c3 d3 fe d7 7f 73 fc fe f7 af fe cd bf 1e df 7c de 8e 8f 87 f7 1f 4e 8f 75 7b fb bd 9e 3e 1a ae 2f 3a 4e f3 fd dd 7c 7f 66 b7 e6 91 7a 8f e5 88 f3 b1 bc fe 89 4e af 55 26 46 e7 50 74 fc 48 b8 d4 f9 7f 7c 7c d8 bf fa d3 1f e7 ed 46 ea a3 2e 07 b4 a3 2c b7 8a f3 6e b7 2d 25 15 a5 5a d6 94 a3 cd 1a 5d 54 e9 2a 69 15 cb ba 18 Data Ascii: HUT-)y0C3("[x%9+Ii'CI[hY56-H}mVh.=f,q,)2q5K@E!&j!y_Fv&]}fU?s\|Nu{>/:N\|fzNU&FPtH\|\|F.,n-%Z]T*i
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 82 fe 4c e0 3c cb 78 88 15 c8 57 ac 37 da 4a 44 3e 7f cd 67 90 90 14 fc 81 09 c3 2a 09 5b 0d f0 ab 80 45 56 65 ba 2c 4d 40 8f 55 b3 b2 d2 c1 34 15 5a 82 2a 55 62 18 b0 b9 48 c9 d8 4f cc da 3d a5 74 02 a5 2f 33 62 c6 32 c7 5c 7b ad bd f5 4e 7a eb bb 9b ad be 1c fb 26 e9 66 b2 3c a8 6a f7 a5 f7 63 eb 8f ad 1f a3 2d d1 5d b4 02 55 ba 3f eb 66 18 5c 85 23 10 03 4c 90 c5 15 6d ca 81 44 a3 71 bd 26 7c 6e 5c 28 0e 34 44 90 4e 36 b2 c1 83 0c 95 39 eb 71 bd 49 33 ab c0 85 6a ae c6 a2 1c 35 92 63 4c 34 a8 08 46 61 01 94 21 10 fa b9 c6 f9 7d 68 ae 3d e2 7c 3c df ef e7 a6 63 ef 29 3f ca ab 6b 49 97 10 80 f1 03 4a 80 7f 82 58 f0 fc 31 08 c9 67 6d 15 25 80 98 1f 71 ff 5b ec df 53 95 6d ee b5 a2 af 51 0b be 9e 2d ab 4a 16 10 78 13 77 0d 8f 70 74 02 c1 b2 85 99 b6 56 72 Data Ascii: L<xW7JD>g[EVe,M@U4ZUbHO=t/3b2\{Nz&f<jc-]U?f\#LmDq&\|n\(4DN69qI3j5cL4Fa!}h=\|<c)?kIJX1gm%q[SmQ-JxwptVr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50133	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:35 UTC	567	OUT	GET /M24xvmPiIlXRQb7ReNXBDMRot0s_5GMSLkP08p5mb9s7bJYkuMcz6kFjeEhCIp6yikIZVfDrOjvgHzHxhSusOQkyC4VajtQxOHRMiazmvDLP_P3JjA?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:35 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 323693 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:15:40 GMT Expires: Tue, 28 May 2024 22:15:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 1675 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:35 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 55 08 02 00 00 00 16 b1 c0 74 00 04 f0 34 49 44 41 54 78 9c 4c fd 59 af 74 5b 96 1d 86 cd 66 35 bb 8b ee 9c f3 9d af b9 7d 76 37 33 ab 2a ab 21 59 64 91 94 44 d3 26 41 90 06 0c c8 0f 7e f0 93 0d ff 06 3f f9 1f 18 7e d2 8b 61 09 b0 0c 37 00 25 58 a2 20 17 40 89 45 16 25 b2 c8 2a 66 65 53 37 33 6f 36 37 6f ff f5 a7 8b 6e 77 6b ad 39 a7 1f e2 dc a2 9e 4e e0 20 76 c4 8e 1d 3b 66 33 e6 18 63 e2 ff ee 3f fb 27 04 c8 84 88 08 60 6c 46 04 66 e0 90 9c 19 10 00 11 9a 02 00 22 02 00 00 28 20 20 12 1a 03 02 22 00 20 00 19 28 2a 18 1a 20 00 00 82 21 32 18 df 1f 68 a0 a6 60 0a 60 a6 80 84 00 04 40 00 7c 7f 3c b2 a9 21 08 32 c2 fd 4b a0 99 21 02 98 43 24 10 46 04 22 54 33 40 60 22 03 40 34 04 d4 d3 d3 Data Ascii: PNGIHDRUt4IDATxLYt[f5}v73!YdD&A~?~a7%X @E%feS73o67onwk9N v;f3c?'`lFf"( " (* !2h``@\|<!2K!C$F"T3@`"@4
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 6f 6e 11 75 79 b1 e1 d0 58 08 6c 04 36 89 dd bc d6 9b 03 95 95 2a e4 e3 94 87 71 1a b2 84 b6 59 af da 15 cb 90 a5 00 23 35 68 6d 57 c7 b6 76 26 d3 f6 ee e6 e6 8b cf 6e c6 a7 47 98 c1 3c 1a 81 48 01 e2 f3 37 7f fb e2 c9 7b 69 bf ff ec 83 7f 71 b8 79 16 dc a2 7a 73 d9 3c e9 16 ab 65 b5 68 2d 38 54 aa e0 52 87 62 b9 5c dd be 3a 3e 7f b6 74 2d 46 ed f3 91 40 60 16 53 e2 05 53 74 49 f2 e2 fc 8d b7 7e f3 af bf fb e4 cd bf 7e 7e 19 f4 f6 f5 7c 77 9d 47 01 9b b4 bc 3c dc 1e fa b9 bf eb d3 61 9a 53 2e 88 f9 6e 5b f6 7b 75 31 93 df b4 ab b7 b8 09 87 bb 2d d1 d0 44 17 c0 d7 0b b0 98 63 a4 4d 44 99 91 dc c5 b2 59 34 ed ac e3 38 9a 40 e5 39 75 71 0e d0 cf c7 74 dc 6d 41 a6 cb 07 9b b6 69 a7 69 b8 39 66 23 17 eb ea b8 9f 5f 3e 9f fa 11 d7 55 d7 b4 4b f4 4d 92 2d a4 4f Data Ascii: onuyXl6*qY#5hmWv&nG<H7{iqyzs<eh-8TRb\:>t-F@`SStI~~~\|wG<aS.n[{u1-DcMDY48@9uqtmAii9f#_>UKM-O
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 85 30 0b 64 b3 6c 90 05 66 13 43 43 02 44 26 32 29 a0 64 9e 48 0d 0d 0a 80 17 40 05 24 00 20 32 c9 84 05 d0 2b 18 18 15 40 b3 42 58 3c 55 22 a6 74 aa d8 01 91 00 ad 98 0a a0 01 98 99 03 32 40 63 53 33 c6 53 d7 04 08 6c a4 a0 76 ba 46 44 a8 00 40 68 66 0e 0d 14 09 51 d1 50 41 4d 01 08 c1 10 40 4f af 4e 60 66 88 48 84 a6 76 2a df 1d 29 21 2a 20 a8 99 99 02 30 82 01 ea a9 2d 38 75 41 06 80 84 78 7a 68 00 aa 08 a8 44 04 45 e0 d5 cc af 32 1e b3 3c 0a ee 9d 2a bd d3 e0 04 ee 65 d2 c3 98 fb 09 d3 cd cf ff 7f bb 67 db fd 37 fe 83 f7 de 2d 39 bd b8 1b d9 b7 ed fa 51 99 5f 1e e7 9c 45 11 d1 54 55 74 2c f9 6f be f9 68 d5 3e f9 e0 fa d9 c7 c3 2d 85 70 50 f8 f5 d6 ff f6 66 28 10 5f 14 96 72 4c d3 e1 b3 d7 3f af 9b 4d 7f f7 8c a7 69 f3 c6 37 57 9b 37 d1 32 7b 5c 2e 97 Data Ascii: 0dlfCCD&2)dH@$ 2+@BX<U"t2@cS3SlvFD@hfQPAM@ON`fHv)! 0-8uAxzhDE2<*eg7-9Q_ETUt,oh>-pPf(_rL?Mi7W72{\.
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 96 31 f7 8e 2b 47 9e fc 90 72 99 19 52 36 9d 6c 4c 75 ed fc ca 6b a4 14 5d 5b b9 75 e0 c5 79 a7 31 a4 fd 38 93 89 40 90 64 5e b6 43 29 aa c3 34 98 10 2d 62 7b b1 ac ba 0a 0c 4a 29 47 f6 9e c0 48 98 1d 91 d7 0c 9e b1 20 9a 08 00 88 9a c9 e9 16 b5 62 40 40 a0 89 0c 91 9d 32 06 45 32 cb 60 84 c4 d8 7a ee 2a 62 2c 8a 09 c1 d8 d0 3b e5 b9 68 11 54 10 4f b0 02 5e 52 9c 47 1a 40 39 cf 7d 9f 8f 33 82 92 90 cb 24 a4 ea 88 24 9b 24 75 e4 aa 76 ed eb 00 35 f9 15 bb a6 36 02 b0 5c fa a9 cc d9 59 ed 1d a2 0e 87 e3 71 d8 ef 60 59 bb b3 0e e7 8c b3 cc e8 d1 07 65 43 d7 20 02 29 d7 5a fc 71 57 5e 7e fe d9 b6 9f 1f 6d be fd e4 22 bb 6e ce 2f fa 5d 1f 24 4d 49 76 b7 23 8c 00 06 65 1e 20 0d 00 40 1c 20 a7 18 a0 3b e7 c6 d7 dd c3 4d 5c 3f 72 cd 42 55 3a ef 4a dd aa ce 8c c9 Data Ascii: 1+GrR6lLuk][uy18@d^C)4-b{J)GH b@@2E2`z*b,;hTO^RG@9}3$$$uv56\Yq`YeC )ZqW^~m"n/]$MIv#e @ ;M\?rBU:J
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: fd f0 e0 3e 9b 98 e1 e9 ed 0c e0 2b c0 44 0d 0b a0 2a 88 61 31 cc 90 d5 14 0d 88 4e 28 bc 33 44 40 95 d3 40 19 e0 54 f3 a3 da 09 d6 34 10 24 42 3b 85 51 3b c1 50 6a 79 22 f5 a7 f1 32 20 03 30 80 52 be 9f 09 de 8f 78 e9 be 9d a1 fb cf 44 a4 0e 4c c1 29 b0 37 71 9c b3 49 12 3f 63 67 ce 55 5a ae 95 7f bc 3b c6 52 fe e0 2c d6 60 9f 59 f7 6c 0e 37 c7 bd 14 fd 5a d7 bd 5f a7 96 8a aa 0c 06 8a 7c 82 1e 4e 73 92 13 e8 46 66 80 a7 b9 31 09 18 9d 92 e8 a9 05 39 35 64 00 59 8d 00 1c 00 18 20 98 02 ec 4a fc 22 37 2f fb 6d 03 b2 ab 97 bf dc 3d 7d f9 fc 5f 47 57 9e af fe ee 36 7c 6f 1d 76 97 1d 5c 86 33 2a df dc b7 ee 93 9f ff 63 0f e8 43 87 00 36 6d e6 7d fa af 7e f6 8b 3f fb bc 8e a5 fc e6 5b 8f d6 0f 2e fe c5 af 3e fd 17 ff ee df a6 9b 17 c3 6e ef 38 f8 e8 5c d5 ae Data Ascii: >+Da1N(3D@@T4$B;Q;Pjy"2 0RxDL)7qI?cgUZ;R,`Yl7Z_\|NsFf195dY J"7/m=}_GW6\|ov\3cC6m}~?[.>n8\
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 10 d0 f8 c4 30 40 42 b4 e2 73 89 02 07 f2 8a c4 32 1b 66 74 94 42 0c 2d 17 99 aa 50 05 0e 59 5c ee 6a 92 a3 bb bb 09 04 66 21 4f 56 6c b2 a4 b1 db 18 cf a9 ef a3 f3 a7 72 2a 1b 7b 42 36 30 02 2f e0 c6 b1 df 8e e9 30 e6 36 54 cb 65 e8 96 fb 63 bf ac b1 eb c9 cc 26 65 eb 22 4c a9 80 ba aa aa 62 85 de 79 47 95 f7 9a 44 fa c3 8b d4 37 8e da 01 0f c7 b9 70 6c ea 25 1b e6 6c b5 03 6a db 50 05 95 49 cb e8 e7 bd 2b 65 52 e7 45 75 4e 53 9f fd ca 41 d7 01 d7 0e 51 cc c4 50 89 04 f9 ab fb 0c 05 0d 10 0d 09 98 c4 31 a2 81 29 92 33 84 84 60 66 01 2a 76 b5 91 03 62 65 42 4b 88 73 21 55 a0 ce 2f de 8c 81 21 17 70 4c a0 c8 04 73 21 f0 6d 90 74 c8 c9 74 cc 8e 2b 6b 1d 88 f7 b5 87 a6 71 8b aa 75 ae cc 73 e6 cc be 2d ae e5 c0 0f e2 1a 00 c4 c6 29 97 52 c4 42 8c 91 82 27 d7 Data Ascii: 0@Bs2ftB-PY\jf!OVlr{B60/06Tec&e"LbyGD7pl%ljPI+eREuNSAQP1)3`fvbeBKs!U/!pLs!mtt+kqus-)RB'
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 60 bd 68 cf 63 70 88 b1 8a 0e 75 92 a2 25 00 33 37 b1 72 b1 91 26 fb 7a e2 76 d2 a6 20 67 50 91 fd 79 74 21 6e 92 f9 79 2e 88 2e 22 93 60 62 52 c4 5c c6 94 c5 ed 6f 89 f0 48 e0 1e be ff ed ee ad 61 38 1c 86 ed 6d 7f 73 3b ec 8f 57 cf 9e df 3e 7d ce b5 5f 9e ad 97 17 0f eb cd b2 6e da 10 ab e0 5c f1 3e 02 3b 20 00 20 41 42 23 34 e5 7b 10 e8 84 f2 10 d0 a9 12 37 30 3b e1 d6 a7 86 e0 9e ec 03 68 20 60 fc 3f 51 15 20 c2 89 4b fa 97 b8 3a 80 9d 22 3f 7c 45 f7 bc ff 37 00 00 30 81 28 0a 02 20 8a 9a 00 14 44 31 42 2a 8a 64 68 4a 20 00 c8 fe 14 45 19 bc a2 a1 01 03 19 ea e9 90 13 43 e7 9e 29 8f 78 92 13 98 09 14 11 60 40 e0 7b 4c 08 15 81 d0 00 f5 84 e6 9f 4e 13 e8 f4 69 cc 21 3d 83 ee c3 ed d3 5f fd f8 bf 18 6f 3f 33 c2 09 dc ab 2f 7f 34 7c e7 3f ec da f6 cd cb Data Ascii: `hcpu%37r&zv gPyt!ny.."`bR\oHa8ms;W>}_n\>; AB#4{70;h `?Q K:"?\|E70( D1B*dhJ EC)x`@{LNi!=_o?3/4\|?
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: e5 1c 8b 71 ff fa 55 38 bf ac db b3 79 ec 9f fd e4 d7 d6 34 48 d5 74 25 37 91 9b 8b f5 bb bf f1 db fa 93 9f ff f4 5f fe 71 b5 be 58 3f 79 17 ff 75 7e ff 6f bf bf fa f6 5b 65 18 32 64 a5 6c 79 92 cc 04 42 35 2a 31 31 b9 ec c5 37 6f bf fb 9b 31 90 bb 78 52 75 f4 e9 2f ff 55 29 60 60 26 22 2a 14 da e0 63 92 61 98 0f 63 d6 0a 31 78 5f 10 cc 10 09 63 eb ea 65 1b 1c a7 61 2a 7b 3f 8f 23 18 40 56 1c 07 23 0e 44 18 2b 41 e7 80 51 60 3a ea 0c 5a 93 92 ce a3 2b 63 1a 4f f7 a7 d9 69 90 05 00 a6 60 8c ac 76 22 ee 02 4a 8a 29 cd 00 8c 18 cd 17 35 55 9b 46 74 e3 04 05 13 d3 f1 c8 8d 4b 87 7e 26 8f cd 79 8b ed a2 e6 75 b9 9b e6 dd 2d ea 2d ae aa 6e d9 95 49 73 df 43 55 a3 20 aa 10 98 cb 40 09 2c 6a 31 42 5f 6f f7 7b 34 57 69 a0 39 11 d3 71 3a 62 2e 0e 49 a3 30 aa 60 13 Data Ascii: qU8y4Ht%7_qX?yu~o[e2dlyB5117o1xRu/U)``&"cac1x_cea*{?#@V#D+AQ`:Z+cOi`v"J)5UFtK~&yu--nIsCU @,j1B_o{4Wi9q:b.I0`
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 63 0c cd 6a d9 74 15 38 29 e2 40 f3 78 dc 2b 79 29 24 ce b3 39 13 99 4b 9a ee 82 8f 44 61 3f f5 c5 a1 a4 3c c2 5c 0c 95 72 d5 92 d5 1d 05 14 54 f2 88 2e 60 00 f0 15 35 4b ea 7b f0 ee d1 5f fd 9d cd 1b 6f 57 58 48 e9 d5 d5 f3 9b 66 eb cf 64 f1 e4 62 f9 e8 a1 4b d2 bf ba 1d 82 eb ce ce 9a b6 e3 c5 2a 2c ce 87 d7 cf 6e af 5f 39 03 67 34 ba 49 ab d0 d4 c1 a6 7e 56 10 71 36 6f 9d 8b 1b 8e ab 2e 10 09 39 27 9c d1 85 61 a7 c7 e3 ac d1 d7 cd 1a ab 55 d3 b0 d1 ed f1 f6 35 6f f3 34 ca ab c9 32 34 7e 56 49 53 1a 27 9c 67 63 c2 82 87 a3 c4 ab 21 8b 3f 7b bc 6a bd 3b 1c ca 3c 14 f0 00 60 54 d2 f3 4f b7 9f f6 f3 37 ff da fb 8f da ae 0d e4 63 bb 0c 58 d5 50 11 28 f2 11 ca 30 6e 8f 19 4a 1a 6c 9e 04 73 ae 29 9b da 38 56 a1 ea 20 84 a1 df 3f bb 3d 1e fa 5d 51 23 02 28 bc Data Ascii: cjt8)@x+y)$9KDa?<\rT.`5K{_oWXHfdbK*,n_9g4I~Vq6o.9'aU5o424~VIS'gc!?{j;<`TO7cXP(0nJls)8V ?=]Q#(
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 80 20 76 4f f1 31 04 b5 93 7c ec 34 01 c6 0c a0 76 df 6f 28 82 a9 9e a4 c6 8a 48 c4 81 9d 29 2b 11 15 10 47 66 27 c1 1b 39 2a d9 c4 01 a0 96 ac ec 10 4f f9 0a 48 33 41 01 f2 f7 4a 63 34 33 35 06 40 33 39 99 ea 20 82 9a 39 32 22 9a a4 ba 85 b8 53 1d 87 ed 7e 3a ee c7 eb 92 7b 88 cd 2a ac 1e 2d 1e fd 76 b4 32 ee 35 a7 3b 03 8f b6 07 b7 2d 76 90 41 53 2f 32 de be 78 c6 c4 59 f2 e7 5f fc f0 e5 fb ff f1 ff ec 9d af 7f a7 1e 48 2d 9b 29 82 2a 02 18 12 9a 9e 50 09 d5 d3 07 06 cb 22 5d f4 cd a3 b7 ff ef ff fd 3f ff 57 7f fc c7 ef 7c eb b7 aa 94 d6 95 1f 77 cf af 6f b7 f3 b6 cf c3 c1 cc 98 a3 28 da 34 41 12 57 87 62 2a e3 1c 1c a6 fd dd f3 9b d7 54 a4 94 6c 84 98 70 64 a0 3b 0b f5 52 96 cd 88 37 06 65 04 1c 46 c9 f3 c4 aa 00 88 0e 51 66 0a 1d 48 ce e3 a0 c8 cd 26 Data Ascii: vO1\|4vo(H)+Gf'9OH3AJc435@39 92"S~:{-v25;-vAS/2xY_H-)P"]?W\|wo(4AWbTlpd;R7eFQfH&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50132	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:35 UTC	568	OUT	GET /JAHpZ2_EHeCUpdmIs4cbbahzG_fAB3drICQ6fzdVDU0bFa_Wx7Cae5JuN98SAvgfSOA4n8D2ODHsnRqwEoGqZw3KVilRloyOz8ydbrKXxSK6qdMmMUQ?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:35 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 314962 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:15:40 GMT Expires: Tue, 28 May 2024 22:15:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 1675 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:35 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 55 08 02 00 00 00 16 b1 c0 74 00 04 ce 19 49 44 41 54 78 9c 64 fd 59 ac 2c 59 96 1d 88 ed e1 9c 63 66 3e dd f9 dd 37 c4 7b f1 62 1e 73 a8 cc ac ca cc ca ca ac 31 9b 55 64 17 87 26 09 f6 40 76 0b 52 53 fa 20 04 09 fa d2 57 eb ab 05 01 02 04 e9 5b 68 09 6c 75 ab d9 14 d5 22 c5 6a 16 aa 48 56 b2 a6 cc ca 29 72 88 8c 88 8c f1 cd d3 1d 7d 36 b3 73 ce de 5b 1f 66 7e 5f 14 f4 10 08 dc eb d7 cd dd ed b8 d9 da 7b af b5 f6 3e f8 bf fb f7 7f a9 5e d7 66 06 0a a6 66 08 00 c6 2e 18 3b 00 28 d8 4c 85 08 98 49 45 9c 73 cc 9c 44 9c 63 22 d2 64 48 04 9a 73 4a 3e 94 22 c2 68 44 4e 55 bd 67 26 84 ac 5c b0 20 aa 8a 43 4c a2 66 8a e8 40 14 20 b3 f3 49 14 54 11 49 93 1a 9a 99 9a 98 82 80 5a 4a ea 1d 9b 41 93 Data Ascii: PNGIHDRUtIDATxdY,Ycf>7{bs1Ud&@vRS W[hlu"jHV)r}6s[f~_{>^ff.;(LIEsDc"dHsJ>"hDNUg&\ CLf@ ITIZJA
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 01 63 24 44 04 53 42 02 02 04 05 63 51 33 30 30 25 22 51 45 30 24 16 51 44 04 02 10 50 54 47 0e cd 92 19 03 30 0a 22 32 33 98 88 02 13 3a 42 20 d2 ac 0a e6 99 10 19 00 cd 24 25 61 f6 00 aa aa 00 06 84 9e 08 10 0d 11 00 1c 51 12 b5 ee 8d c0 88 a8 3b 39 43 00 00 67 86 4c 4d 4a aa 84 68 06 80 40 80 8a 8a 0a 00 68 0c 84 06 a2 02 ac 8e 28 9b 12 92 67 97 55 72 16 00 20 40 00 30 84 ee 60 84 6e 99 0d 00 88 c8 4c cd 94 36 eb 4a 84 40 88 06 86 40 80 66 46 00 00 28 66 9b 83 00 10 14 c0 cc 4c 04 cd 00 89 98 b3 69 56 45 04 44 02 03 36 40 53 03 34 33 30 00 34 41 ee fe 9a 10 08 8d 14 32 11 01 94 aa a2 ba 52 2d 10 cd 31 1a 51 6e 2d 27 6e 52 98 3d 70 a7 77 8a fb ef e5 c5 71 16 5d 64 bf 02 4e be ca d5 f5 5c 1e c0 28 58 59 02 06 15 51 ef cd 54 1c 9b 80 11 46 89 2e 38 50 64 Data Ascii: c$DSBcQ300%"QE0$QDPTG0"23:B $%aQ;9CgLMJh@h(gUr @0`nL6J@@fF(fLiVED6@S4304A2R-1Qn-'nR=pwq]dN\(XYQTF.8Pd
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 5c 89 c8 32 48 03 5c 18 13 29 00 98 31 21 92 21 9a 29 01 18 92 91 03 22 03 40 30 30 43 83 ae 10 00 43 51 45 33 44 ea 11 85 08 d5 04 04 01 80 50 ba dc c3 4c 55 11 80 58 cd d4 9b 57 42 20 84 8b 4c 15 c0 c0 08 51 0d 0c 8c 9c 4f 59 ec f1 1d 46 36 4d a6 d1 32 32 a1 73 28 92 00 01 4c 01 88 10 a3 09 92 31 b8 2c 11 d5 23 82 48 8b 22 2a 66 04 a9 59 ce cf ce d7 ab 65 bd 6e 40 33 33 b3 ea d9 d1 e9 3c b5 e7 eb e5 7c be dc 9a 4c c6 93 ad 1f 7f f2 61 77 23 0c 8b ca 39 97 73 2e cc ea ba 96 8a cc 34 d7 75 73 36 9d ea ed 4b 2f bd c2 e5 e0 c6 cb af 15 6c 1f dc ba f5 5f fd de 1f 29 17 ae 18 9c ce 57 7f f7 ab 5f f8 47 ff c9 5f 7f b2 5a 92 0f e2 f9 d2 ee f6 57 5f 41 7d ef 93 47 47 8f fe fb 3f f8 97 2d 0e 2f 5d ba 79 74 74 7b 18 aa 5f 7e f1 e6 07 0f 1e 82 af be f9 b9 cf fc e3 Data Ascii: \2H\)1!!)"@00CCQE3DPLUXWB LQOYF6M22s(L1,#H"*fYen@33<\|Law#9s.4us6K/l_)W_G_ZW_A}GG?-/]ytt{_~
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 7a 11 2f ba 33 ee f2 2e 33 35 40 40 ea a8 57 04 34 ea 6b 6f 04 01 eb 90 56 ba f2 0c 8c 6d 13 ed 81 09 0c 40 15 a8 ab 99 ba 9a a3 67 00 54 b3 b4 d8 d4 29 65 1d ef ea d6 55 1d 3f 5f ef 5e d1 8a 4a cf cc 8e 43 c1 ce b1 f7 da 43 9f 99 01 23 89 08 13 82 9a 63 4c 22 c4 68 02 44 cc ec 5c 47 45 76 84 a3 74 0c 17 b3 99 19 a2 77 4e 52 cc 92 1c fb c6 b2 89 78 e7 9b f5 da b9 80 de ad 57 cb e0 8b 0c 39 67 1b 86 32 27 55 80 e0 5c ca a2 0a 06 20 39 ab 82 63 df c6 96 90 c9 61 bd 6a ca 22 e4 98 d5 91 0f 2c 29 ab 1a 22 21 0a 2a 14 c1 c7 14 11 11 08 db 14 d9 3b 04 50 b5 a2 08 84 88 48 be f4 29 a9 88 86 aa 90 36 3b 46 e7 38 a7 ec 99 53 4a 66 e6 bd 17 91 82 02 01 58 6e 11 0c 4d fb 04 a7 bb 6e 00 00 99 9d 37 11 33 cb 6d 33 3d b9 33 dc 3e 84 34 9c 3d f8 58 db 66 b0 7f cd 8f b6 Data Ascii: z/3.35@@W4koVm@gT)eU?_^JCC#cL"hD\GEvtwNRxW9g2'U\ 9caj",)"!*;PH)6;F8SJfXnMn73m3=3>4=Xf
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: b3 17 6e 5c 7e fd eb df 48 e0 97 8b d3 e6 f8 c9 f2 c9 e3 77 3f fa e4 5f fe c5 4f 4f 17 f5 4b 37 ae 9d b4 f9 d1 6c b1 58 2c ae 5d bd 74 ff d1 23 94 f4 78 36 6b c0 ed 6e 6d 9f 2e 9a 1f df 79 f4 ca 0b 2f fc e2 e7 7e f1 f4 e4 c1 fb b7 3e 06 80 37 2e ef 1d ad 53 4d fe b3 37 9f fb bd 9f bd 7b 68 d5 6e 28 96 6d 83 92 3d 73 97 31 9c d4 ed ff f8 17 6f bd 76 fd da f3 93 e1 83 d3 b3 3f f9 e1 77 4e e6 ed 17 ae 1c 7c fd 73 6f fc 70 ae 27 38 49 80 51 6d bb 08 f7 ee dd ff f3 9f bd 7f 79 7b 67 7c f9 f0 bf fa e3 3f fa d2 e1 d5 4b 83 e1 f9 e9 b9 df 30 14 1b 6c ec 09 e1 2e 6b bd c8 35 2f 52 7a dc 30 0f 7f 29 07 c5 a7 ff fb 54 a2 bf c1 f8 1e 67 a0 a3 60 2e 60 b8 7b d8 a0 13 21 bb d7 93 0d bd f4 94 e9 c6 8b 37 e9 63 c8 06 64 37 9f 0b 00 88 36 f5 20 82 01 18 a0 81 22 10 03 28 Data Ascii: n\~Hw?_OOK7lX,]t#x6knm.y/~>7.SM7{hn(m=s1ov?wN\|sop'8IQmy{g\|?K0l.k5/Rz0)Tg`.`{!7cd76 "(
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 11 cd a0 08 a1 ab 31 5d f0 29 77 3a 36 b6 8d 30 07 74 94 55 ca 6a 20 22 04 ec 4a b7 98 2f c9 80 0d 01 cd 05 e7 88 09 d1 11 47 16 22 64 44 c9 66 96 52 d4 9a 30 58 25 39 65 91 14 1b 6a b3 36 85 5a 66 e7 d0 85 dc 36 a6 22 06 14 1b c6 22 b5 5c f8 41 96 1c 63 1d 2c 79 4d 44 98 db 55 13 1b 00 ed ec 01 ce 7b 45 72 c4 00 18 55 9c f3 a6 6c 86 92 93 aa 78 c7 a6 90 51 d9 53 56 66 34 02 4c 29 0f fc c0 d0 08 b9 9d 9f 17 83 6d 1a 26 55 41 62 1e ee 52 31 32 62 d9 be dc f6 e9 1e d6 82 be 18 30 a3 24 b6 b8 84 76 2e 6d 4d ed 8a 34 a3 24 66 76 04 d6 ac 89 a0 2c 07 e4 02 33 f1 72 c1 e5 39 85 90 35 6b 4e 92 23 00 42 59 ea 60 5b 53 1c 58 24 19 6a 28 30 32 11 01 7a 43 44 24 f0 0c e4 81 06 70 f6 00 d6 4b 04 d3 54 83 99 48 12 50 c9 ad 4a 42 55 6b 5b 34 a3 b2 00 04 8d 99 4c c1 31 Data Ascii: 1])w:60tUj "J/G"dDfR0X%9ej6Zf6""\Ac,yMDU{ErUlxQSVf4L)m&UAbR12b0$v.mM4$fv,3r95kN#BY`[SX$j(02zCD$pKTHPJBUk[4L1
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: f6 59 7c f7 3a 8a 64 26 00 17 6d 1b 9b 52 01 0c 41 11 78 13 37 2e e8 a8 4d bc 00 ea 39 ff fe f9 a8 4f e9 94 0d ba 5d d4 27 3d c1 81 8e 9c 22 88 62 50 10 33 73 4a 5c a9 4a bb 3e 6b 73 5c ad 97 6d b3 2a 42 e9 8b 01 52 c8 ed 7a bd 5e b6 cb f3 bc 3c 9f 9f 3c 69 17 67 ce 0f da d5 5c d6 b3 a2 ac 16 cb 66 76 7e 0c ed fa 64 77 7b b2 bb 3d b9 f6 ec ee cd d7 b6 0f 9e 2d b6 0e d1 95 60 4e b1 cb 89 51 cd c4 cc 00 1c f6 7c 10 02 66 00 02 25 d3 4e 07 e8 4e d6 a0 13 15 36 88 dd 7f f8 ce 78 65 66 42 9d 89 c8 00 b0 eb 3d b2 4f 63 7e 1f 06 3a 83 ec c5 37 b6 09 de d6 0b ca c4 fd 3a f6 2b d9 57 70 5d 5c ef 85 00 d8 d4 52 f0 94 cc 03 70 c6 82 62 d8 f9 ab 0d 0d a8 b3 f8 02 08 29 19 7a b1 e8 91 3b 60 e9 03 97 a1 21 a2 21 1a 03 90 77 e0 7c 70 01 99 00 25 93 db 74 92 18 77 6e 33 Data Ascii: Y\|:d&mRAx7.M9O]'="bP3sJ\J>ks\m*BRz^<<ig\fv~dw{=-`NQ\|f%NN6xefB=Oc~:7:+Wp]\Rpb)z;`!!w\|p%twn3
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 00 83 76 d5 f0 28 68 bd ce 84 6a e8 ca 21 b4 35 0e b7 c8 7b 30 13 51 0f 46 1e 81 d0 39 07 22 31 66 40 20 b2 62 38 d1 66 99 d6 e7 06 a8 92 41 a2 f3 01 aa 51 ce 19 11 72 bd 70 ec 84 d8 2c 29 12 95 23 e2 a0 44 30 3a 4c db 57 71 34 4e be 9a fb 51 08 d5 92 49 41 0b c3 81 1f a2 0f e4 08 18 d9 15 6e 39 b7 d5 34 4a 02 04 13 05 55 85 c4 66 a0 aa aa 58 06 8b 6d 5e b5 5c 56 e0 b8 4b 64 c8 c0 b2 80 76 82 17 02 a1 a9 22 13 e4 64 39 99 29 a4 04 00 c0 1c 97 73 67 e2 79 b7 d8 dd a7 ee 76 f4 c5 6a b9 d8 ba 74 a5 18 8c d2 6a b1 38 3f 0b 83 e1 f9 f1 e3 93 e3 d3 3a e9 f9 72 75 fb f8 7c 5d b7 ab 6c 3e 84 41 35 68 56 ab d5 ba 5e 2e 57 cc ee ea de ce 38 b8 e3 a3 d3 bd cb bb 57 2f 1f c4 9c ca c9 e0 73 cf 5e 3e 5b ad ef 34 30 28 8a 45 96 2b 83 e2 77 5f 79 f6 c7 1f 7d f4 47 ef df Data Ascii: v(hj!5{0QF9"1f@ b8fAQrp,)#D0:LWq4NQIAn94JUfXm^\VKdv"d9)sgyvjtj8?:ru\|]l>A5hV^.W8W/s^>[40(E+w_y}G
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: fc d6 56 b1 b3 ff d2 d1 83 e3 c5 f9 49 56 f5 45 2c 52 5b 0e 06 57 9e b9 d6 e6 ab eb e5 89 2c 17 60 8a cc a6 c4 39 95 ba aa 67 cd bd c7 b7 69 f0 d6 e8 e0 e6 e4 f0 c6 64 ef b2 2f 4a 04 e9 46 37 18 1a aa 59 07 d3 f8 e9 05 94 4e 70 b5 a7 8b b0 19 88 82 8a 17 aa af f5 70 ff e9 5f 9f 2a ba 7d 24 40 04 d8 4c 80 b8 28 0e ba d5 eb d5 e7 8d 09 ab ff 73 67 6c 25 83 ee 4e 46 30 ea f5 68 22 34 0f 28 d6 3b 6e 15 89 ac 37 dd 76 74 5f 26 ea 22 72 37 82 82 c0 50 85 a4 7b 25 22 62 70 9e d4 00 15 b1 eb 2b c7 8d e9 ab cf f6 c1 08 d1 b0 1b ef 61 9d c7 09 c1 50 81 cd 84 c8 54 01 90 f8 d7 5f bd a9 39 23 80 9a b2 73 48 68 2a a3 e1 18 88 04 a0 ac 2a 63 24 c3 aa ac 92 0a 21 04 e7 53 8c 88 e8 83 6f 9b e8 98 09 b0 69 db 10 82 8a 88 6a 19 82 22 20 93 f7 ac 00 20 16 0a 97 55 09 29 14 Data Ascii: VIVE,R[W,`9gid/JF7YNpp_}$@L(sgl%NF0h"4(;n7vt_&"r7P{%"bp+aPT_9#sHh*c$!Soij" U)
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: ca f1 3e 0f 07 45 70 44 0c c4 8e 99 3c 6d 2e 74 f2 de 73 31 90 a3 bb 7a fa 40 19 24 37 90 12 a9 92 2a 48 8b 31 69 4e 96 c5 72 94 14 4d 44 4d 08 89 ca ca 8a 02 7d a0 a2 e4 32 90 0b e0 03 7a 4f ce 11 92 00 3a e7 99 c9 4c d8 15 14 9c e5 84 44 ec 9c 1b 56 ec 02 39 34 4d 9a da 10 4a 30 d5 9c 3c c0 70 6b ec 07 45 19 7c 81 6c 6d 02 8f 3b a3 72 c8 6e 96 a4 8e 7a 30 99 8c 26 e3 c5 6a 35 1e 0e 56 ab ba a9 9b cb a3 00 a9 d9 1a 0d 2e 8d cb c0 be 2c d9 23 7d 78 ef e1 9b 87 97 be f2 fc 95 8f 1e 1d fd f8 d6 fd 59 5d ff f8 ee c3 f7 cf ce 0b c6 89 2f da 94 27 55 68 9a e6 f6 d1 71 92 bc 9c cd 9a f9 f4 c1 62 b5 4c 39 01 fc b5 cf bd f1 9b 6f bc fa 7f fd d3 ef 35 39 fd f2 8b cf fd d2 4b cf fd e1 8f df 7e e9 85 37 4b 1f 7e 70 e7 d6 c9 93 fb 90 9a 61 28 1f 9c 9d 3b 84 bb a7 e7 Data Ascii: >EpD<m.ts1z@$7*H1iNrMDM}2zO:LDV94MJ0<pkE\|lm;rnz0&j5V.,#}xY]/'UhqbL9o59K~7K~pa(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50135	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:35 UTC	586	OUT	GET /sq57GaRCOEk-TcLHr8ZeehZOkRrOLLv0ZIL34gOO2TNqeQjAcLqZM_YvwoZCLFQbW1DS0K28QakL4JTKArVVV4pp-PtTltns7K25Pu5d7v-6dRSh-g=w1440-l90-sg-rj-c0xffffff HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:35 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 104459 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:41:59 GMT Expires: Tue, 28 May 2024 20:41:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 7296 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:35 UTC	856	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 0a 0a 0a 08 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 0a 0a 08 08 0d 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0f 0d 0a 0d 0f 0d 0f 0d 0f 0f 0f 0d 0d 0d 0d 0d 0d 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 02 35 03 e8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 00 09 ff c4 00 5d 10 00 01 03 02 03 05 04 06 06 05 07 08 07 07 01 09 01 00 02 03 04 11 05 12 21 06 07 31 41 51 13 22 61 71 08 32 81 91 a1 b1 14 23 42 52 c1 d1 Data Ascii: JFIF5"]!1AQ"aq2#BR
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 99 2f 58 11 16 4e 9b 20 19 1c cd 73 ce 97 e2 ae ad a5 a3 82 68 33 b6 d7 0d fc 15 07 4d 0e 82 f7 4e d8 55 45 43 9c 21 61 2e 0e 20 5b a2 a3 af a3 2f 78 95 af b1 6a 99 af 0c 69 ba 59 b2 bb 34 d9 64 0d 7f 0b f3 e8 9f 36 d7 66 23 6b da c8 c7 42 6c ac cc 1b 73 ce 64 5d a5 ce 70 2f e2 99 b0 9a 68 c3 dc 67 23 33 6f eb 2b 7c 33 16 8a a9 b9 01 ed 73 2a 9d c3 31 bb 15 5b b4 9b 3c d1 09 24 5a d7 d3 99 2a b8 c2 69 f3 1b 2b 77 6c b1 06 48 5e 18 41 02 e0 5b e6 a0 9b 3d b3 ce cf 98 03 c7 d8 ae 5d 3b 38 15 33 1a 72 eb ba 91 6c 74 06 33 7b 29 11 a6 cc fc dc d3 ce cf e1 6c ca 4f 41 af 9a 36 83 08 37 ed 8f aa 0e 8a 07 38 b9 b7 1b 26 17 00 75 dd 42 31 9a 4b 38 e6 d3 4d 11 10 55 b5 a3 53 75 2d da 9c 3c 4d a8 bb 6c 2f a0 50 78 68 5a 1d 94 ea 41 e6 81 2f 20 6a a5 b3 4a 54 5f 13 Data Ascii: /XN sh3MNUEC!a. [/xjiY4d6f#kBlsd]p/hg#3o+\|3s1[<$Zi+wlH^A[=];83rlt3{)lOA678&uB1K8MUSu-<Ml/PxhZA/ jJT_
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 5b 84 f8 92 d7 20 21 39 01 06 a6 4f 18 37 ac 14 8c a8 de 0b eb 05 24 2a 51 b2 62 e2 e0 5d 5c 09 57 2a fb 6f 3f a7 83 f5 87 cc 29 e7 d9 f6 7e 0a 0b b6 a3 f9 c4 3e 7f 8a 9d 1f 57 d8 a5 3b 04 3b 3d 67 2c ad b5 c7 eb a5 ff 00 78 ef 99 50 cc 49 b9 85 86 aa 5f b6 e3 eb a4 f1 7b be 65 35 60 54 20 b8 34 f1 24 0f 7a 2d a3 31 b2 6e 6c ad ba 8d e1 b8 1c 8d d7 29 b7 86 ab b5 4d b9 5a 63 07 d9 28 a3 6e 5c ad 26 da 92 01 24 fb 55 71 bd bd 83 6b 1b f4 a8 86 5c a4 76 8d 1c 08 75 80 70 1c 8d f8 f9 f8 29 09 03 44 2b ee 75 55 3c 58 69 25 4a f0 d8 6c 63 fd 66 a6 1a 7a e0 9f a8 65 bb a3 fd 60 b9 9c 50 ae 5a 73 64 bf a3 6f 92 91 a8 d6 c9 1e e3 7c 94 90 14 1b f7 56 ec d9 09 37 57 94 e0 9b 71 02 91 9b a5 7e c9 b8 14 3c c8 92 57 4b 91 28 54 70 2a 19 b7 ed bb 08 4a 31 8d ae 73 5d Data Ascii: [ !9O7$Qb]\Wo?)~>W;;=g,xPI_{e5`T 4$z-1nl)MZc(n\&$Uqk\vup)D+uU<Xi%Jlcfze`PZsdo\|V7Wq~<WK(Tp*J1s]
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 92 3f 58 97 3b dc 42 de e1 b4 f2 54 c6 d9 06 9c f9 02 ad 1f 88 31 8d ed ea e4 8f 6c 31 00 d9 e4 6c 4f ee 87 7d 93 a5 f9 a8 e4 94 d2 48 e1 ab 9c 49 eb 74 2c 1b 01 91 e6 fa ea 78 ff 00 1c d4 ee 1c 39 90 37 33 85 cf c4 ab ca cc 46 9e 85 bc 1c fb 6c 35 27 c9 54 c6 1d 39 b9 d0 25 38 6d 3e 56 80 ed 08 1c 14 37 1b af 8c c8 40 3a dd 3e c7 43 2c a4 b9 ce c8 c3 c1 a3 a7 89 50 8d ac 6c 30 93 a5 dd d4 5c 9b fc 57 99 55 74 a2 be 30 65 8a 00 d6 df 77 9d 48 ee 03 e6 ac de c0 e1 6b ab 1f 64 ea 4b 2c 73 77 4f 25 66 e1 d8 88 70 59 4f 03 de 51 2e 11 9c dc 74 e9 f0 e0 ae dd 90 c7 89 02 eb 4d 87 57 b3 10 87 ae 0e 05 df 88 0e 07 bd 4f 09 2d ec 9d b8 29 ad 56 05 1b 9e 1f 61 7e 29 d5 a3 4b 72 49 29 aa 2e 11 f1 48 ad da d1 b8 4e 3a 15 9f f7 cf b0 ad 6c a2 70 3d 6e eb b4 e2 39 7b Data Ascii: ?X;BT1l1lO}HIt,x973Fl5'T9%8m>V7@:>C,Pl0\WUt0ewHkdK,swO%fpYOQ.tMWO-)Va~)KrI).HN:lp=n9{
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: e2 76 a4 39 af a5 7b bb cc 39 e3 04 f1 61 e2 07 ea 9e 5e 29 fb 79 3b bc 64 ed 32 31 a3 b4 b7 78 5b d7 1f f1 05 65 23 1a e0 5a 47 fc a8 f5 61 d1 61 36 cb 9e 2d 78 b7 44 af 66 ea c1 89 cd 77 d9 52 fd b9 d8 23 03 9c f6 fa 8f bd c7 43 d5 57 b8 11 d5 d1 8e 2f 70 68 f3 2a a3 29 64 81 18 2c e8 8f 72 ad f1 99 fe b5 c0 72 71 4e d8 0e cf be 77 b5 8d 06 c4 8b ba da 05 ad 37 5f e8 7f 42 e3 f4 8a b2 f9 cb bb d9 33 65 65 cd b9 36 c4 fb d5 f5 45 ba 6a 28 d9 d8 c7 0c 6c 8e d6 00 34 69 ed e3 7f 15 6e 23 b1 ed 2a 6d 5f ab 46 8a a3 dd 96 ce b2 08 5a c6 8e 0d 0a 5f 11 d5 1f 89 6c 9b a9 cd 85 cc 67 d5 3d 3c 0a 4f 09 47 5c 70 52 81 61 60 9e 20 ae 2c d4 71 b2 8d 62 f8 d3 9e 73 38 e8 38 0e 40 75 4a 31 5a eb 0c be d7 7e 4a 05 b5 78 c1 b7 66 d3 de 7f 1b 72 08 19 1e 2f 7e 01 4a 02 Data Ascii: v9{9a^)y;d21x[e#ZGaa6-xDfwR#CW/ph)d,rrqNw7_B3ee6Ej(l4in#m_FZ_lg=<OG\pRa` ,qbs88@uJ1Z~Jxfr/~J
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: e1 91 c4 16 72 6b b9 11 d3 a1 57 34 98 9c ed 73 24 ad fd db 89 6b 5d a5 da fe 04 ff 00 0f 34 64 45 c0 02 7d 5b e9 dc 54 db 7c f5 31 c8 d8 9a db 39 c7 31 0e 16 d1 b6 e1 fd a3 63 ec 55 33 30 f8 98 2d 2d ad d5 58 b8 d6 07 df 2f fb 24 68 3a 11 cb da 81 26 ee 1d 3c 2f 79 6d 80 cc 00 3a 13 6e 24 69 c3 cd 7a 5b 71 37 e2 38 7c ed cb 69 99 98 00 35 d4 6a d2 3b 8e e1 0d 3c 2f 92 7c e0 7f c0 54 c6 27 88 46 1f d9 b1 fa 5a e3 5b e5 f1 07 f0 51 2c 43 62 26 a8 a9 8b b6 79 7c 37 b8 1c 93 6e d6 61 0e 8e 67 46 6e 2e 2e d3 c3 87 44 9e 8b 79 8f 88 08 9f 7c cd 3d d7 fc ae 79 2c 46 05 8c 43 56 7a aa d6 76 db 62 1d c4 f8 84 38 24 1d 3c 96 a3 c0 b6 7d b0 b0 35 bc 00 09 8f 6c ab 4c 6d 2e e8 1d f8 fe 49 ab 60 77 a4 24 01 92 f1 20 59 dc 8f b5 20 de e6 31 dd ec d9 77 67 b8 19 75 3a Data Ascii: rkW4s$k]4dE}[T\|191cU30--X/$h:&</ym:n$iz[q78\|i5j;</\|T'FZ[Q,Cb&y\|7nagFn..Dy\|=y,FCVzvb8$<}5lLm.I`w$ Y 1wgu:
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: f1 57 d5 ce a4 0d 0d 81 bd a1 c7 65 6d c4 db 8b f5 4c f8 e5 25 ac e1 c3 82 55 b3 d8 9b 5f 1b 48 3a 80 01 1e 23 f3 45 ed 0d 40 cb 97 9d d7 b7 bd a7 64 28 20 85 17 a8 7a 26 27 a1 4a e4 9c 27 34 59 22 58 f7 a2 c4 88 b4 4f 68 b9 c9 c1 31 ed 33 f4 2a bf c2 5f de 3e 65 4d 76 9e 7b 02 a0 18 5d 70 cc 7c d1 74 ee b2 12 63 64 4e da cf dd 72 cd 1b 59 42 64 79 1c f5 5a 2b 6b a7 bb 48 55 24 d8 47 7a e8 ba 9c 8f 66 47 0b 84 2c 4f ca eb 85 56 c1 82 4b 19 b8 b9 1d 13 9d 7c 0e 2d 0f 00 87 0e 2a c5 a5 a1 17 b1 00 a7 da 7d 9e 8c 82 2d c4 2c f9 c3 1a eb e5 75 82 b7 8e be c4 12 15 ab e8 ab 8e 07 53 c9 13 fd 66 65 76 bd 1d 98 5b d9 6f 8a 33 1a db 28 e0 9e 58 dc 45 bb 47 11 af 00 75 fc 55 0e 76 b6 a2 81 e4 c3 a3 5e dc ae b8 d3 8d c1 e5 c3 f1 47 6e ea 09 71 0a b2 e9 0e 60 d2 1c Data Ascii: WemL%U_H:#E@d( z&'J'4Y"XOh13_>eMv{]p\|tcdNrYBdyZ+kHU$GzfG,OVK\|-}-,uSfev[o3(XEGuUv^Gnq`
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: d1 82 ec b7 d0 1f 8a 88 6d 16 22 ec bd df 82 4e d9 f3 1e e6 a6 fc 4f e5 cd 21 c7 70 f9 c8 d4 d8 2a 2a 5b d4 48 e9 45 dd c0 5b 6f 7a ae 91 ee 21 31 50 62 4c 6b be b9 b9 8f 8d cf c1 5a 9b 2c fa 99 23 cd 14 46 36 db ba 5f 66 dc 78 34 0b 9f 6d 95 4b 45 4b 20 78 75 83 80 3c c6 8a ee c1 77 82 4b 03 5b 13 8b 80 b1 b5 b2 df cd 0d 51 2c 34 af fb c9 6c 4f 2d 4f 85 c5 d1 74 f9 6d da 50 aa cd d9 b2 a8 b9 f5 6f 2e 77 00 2f 60 df 60 4d bb 01 b2 74 d4 dd a3 5c 3b 42 1c 7b c5 b7 d3 90 f6 0f c5 59 f8 66 ef 5d 24 86 79 de f6 87 1c dd 8b 0e 51 e4 e3 c6 de 02 de 6a 71 4f 84 44 d1 95 ac 68 6f 4b 0d 7c fa f9 95 94 18 15 4d 73 cc cf 7e 51 7d 2f 72 5d c8 91 c3 db af 72 9c 45 b1 b5 88 bf 7d fd 8a 84 9b 62 4c af ed 69 da 22 06 f7 76 51 de f6 58 5b da 8b 9f 61 2b 1a 74 78 7b 7c ac Data Ascii: m"NO!p**[HE[oz!1PbLkZ,#F6_fx4mKEK xu<wK[Q,4lO-OtmPo.w/``Mt\;B{Yf]$yQjqODhoK\|Ms~Q}/r]rE}bLi"vQX[a+tx{\|
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 3b c5 da ba d6 6b 75 d6 e7 9d 82 b0 f6 9f 61 73 49 4c 1d ac 8e 36 d4 df bb cd d6 e4 2f f3 52 21 8c 53 c5 10 36 0d 24 8d 4f 1b 71 3e db 6a 7f 72 84 55 6f a6 9c 56 c6 5a e6 ca 59 fd 26 50 6c 1a 74 0d 1a 5b ba 2f a0 eb cd 32 5a 56 b4 99 4b b9 5b bf f5 c5 73 0b 47 dd 91 73 cf 92 d4 fb 37 b0 54 9d 8b 5b 25 9a e1 6f 5a d7 3e 5e 09 d4 ec 3d 33 4d c3 5a ef bb c1 65 9d ec 6d 6d 54 a5 b5 74 0f 7c 6d 8d a0 38 0e 0e 6f 3e e9 e9 d7 8a 9e 6e 9b 68 6b 67 81 b5 1d a9 7e 5b dd a7 81 cb c4 1e 60 a4 c4 71 26 c6 c6 32 58 cf 8f 77 34 74 75 51 31 e5 a1 b7 ef 0b 40 e1 f8 d1 67 70 0c a0 69 61 a2 70 9a bd c4 5c 1e 1a 9d 79 05 0f d9 4d b2 82 ac 59 a5 a5 ed 36 70 e6 08 eb d1 3d 63 b5 8d 8d 8e 23 42 1a 75 f6 2b 8a 77 c7 33 0b 9a eb b6 d7 b8 56 61 b6 01 d7 d0 ec 87 0e 30 c2 e3 7d 08 Data Ascii: ;kuasIL6/R!S6$Oq>jrUoVZY&Plt[/2ZVK[sGs7T[%oZ>^=3MZemmTt\|m8o>nhkg~[`q&2Xw4tuQ1@gpiap\yMY6p=c#Bu+w3Va0}
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 31 b7 b2 90 dc 34 5c 1e 9f b9 46 76 87 67 29 6b 2a 9d 2c 96 25 ac 0c b5 ed 7d 49 b9 eb c5 52 db 47 bc c9 8d dd 15 f5 16 07 f7 27 9d db 54 3a 42 5c f7 bb 33 b8 eb 65 29 89 9d 76 43 bd ae ab c4 ef 10 87 8d af 64 f7 b4 fb b5 63 2e 60 3a 0e 4e fc 0a ac 36 a7 78 95 74 cc 30 c7 23 98 0d c6 9c af cc 1e 5e c5 a8 f0 ed 9a 88 b6 c7 5b f5 2a a8 f4 81 dc f4 46 1e d6 21 67 82 01 03 5b 83 e1 d6 f6 41 e2 4c 2e 84 b6 13 da 56 54 53 38 bc 75 a2 e3 cd 64 aa 59 49 71 71 24 e6 24 92 4d c9 27 99 eb 75 66 6e 83 13 7b 6a 03 41 21 af 1a 8e 57 1c 15 7f 4b 80 4a d7 18 f2 3c b8 7d d6 93 a7 5d 15 d1 b9 bd df 4a 1e 26 94 16 e9 dd 07 8e bc ca f3 86 c3 33 aa 63 6b 01 b8 22 fd c0 6f ee 5b ea b1 1b 60 cc e3 b8 d1 69 2d 99 8b bc d3 e0 a4 bb 48 eb 46 ef d5 3f 25 1d d9 b1 67 00 9e f6 b1 df Data Ascii: 14\Fvg)k,%}IRG'T:B\3e)vCdc.`:N6xt0#^[F!g[AL.VTS8udYIqq$$M'ufn{jA!WKJ<}]J&3ck"o[`i-HF?%g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50134	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:35 UTC	568	OUT	GET /RIuSgyC1CZvycdCvOhK6kyGWtKZwR6gN88CimyIAdew4WMYXisZeD2x5A3fOi3GETtFbnKgxw7hb_2_ERw1-ygGSCExAsemrYx79J0hRsa4SZzzxz3A?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:35 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 193609 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:10:34 GMT Expires: Tue, 28 May 2024 20:10:34 GMT Cache-Control: public, max-age=86400, no-transform Age: 9181 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:35 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 55 08 02 00 00 00 16 b1 c0 74 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 20 00 49 44 41 54 78 9c 64 7d db 92 1c c9 8e 23 c0 a8 6e 95 b4 6b b3 b6 36 ff ff a5 a3 74 ec 03 00 7a d4 d9 9e 39 dd 52 55 66 84 5f 48 10 bc 38 9d ff fd df ff 97 7c 00 08 02 48 1c 81 03 8a 80 0e f0 00 00 0f 31 02 a0 03 92 82 28 82 12 31 82 48 08 a0 70 00 02 24 24 11 f8 90 4f 7e a8 fc 98 94 30 10 d0 af 10 00 06 fb 8f 0e 39 c2 91 00 82 62 be ed 0f 0b 9a c3 f3 80 90 40 52 12 70 88 11 3f d0 3f c0 07 cc 00 48 f8 bf 90 48 cf 90 20 88 b3 6f f4 40 48 8f 76 8e 86 38 3b 14 60 c4 43 11 00 e8 4f e7 11 7e bd 24 00 c0 c3 39 12 49 65 fd 44 cc 81 44 e8 e8 6b e6 af 34 04 05 80 82 fc 84 03 0c a8 3e 9a d8 55 01 81 0f f4 90 e7 Data Ascii: PNGIHDRUtsBITO IDATxd}#nk6tz9RUf_H8\|H1(1Hp$$O~09b@Rp??HH o@Hv8;`CO~$9IeDDk4>U
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: d1 51 b4 69 3a 0b 41 02 9f 82 11 79 ce 8b 08 c8 c2 43 bc c0 09 1c 1a f5 fd dc 23 19 20 bc 61 d6 c1 07 10 34 a4 80 47 a1 3b 36 2e 5e 14 16 b6 44 92 a0 a5 8d c5 11 02 c4 63 22 94 6d d4 03 9e 0c 07 04 4e c9 45 75 50 c2 1c c1 4f 3b de 06 f0 29 6a fb 27 b3 6a a3 ac 75 25 c5 70 e9 57 96 17 65 19 29 e1 a9 54 89 b2 24 7a d6 02 1e 90 c4 21 21 3c 30 7d f2 fa 61 c8 a3 60 b1 c8 47 50 0c 86 d7 2f 3b 53 c5 8e b4 e4 e7 7c ed 61 39 8d b2 93 19 de 80 ea ba e9 0e 39 10 06 ea e1 92 43 af bd 97 cb 4f 3b 51 3d 9a e5 d8 c4 62 b2 c0 cc 54 a6 c4 d8 22 fe a6 42 c2 01 be 08 1b cc 93 ed 8c 68 75 34 7c bf 3a 7f 60 50 6e ee 3a 67 c4 e8 06 67 a6 26 75 d4 03 fe a5 86 51 6f 03 85 a9 92 30 36 0c 85 20 00 98 e7 cf 9f 6f 61 26 5a bd 9a 60 09 89 84 7a 33 66 61 0b 1f f2 bd 94 61 0d c0 00 87 Data Ascii: Qi:AyC# a4G;6.^Dc"mNEuPO;)j'ju%pWe)T$z!!<0}a`GP/;S\|a99CO;Q=bT"Bhu4\|:`Pn:gg&uQo06 oa&Z`z3faa
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 15 25 20 49 0e ef 45 53 31 9e ac 6e 6c 3a e4 79 5f 3d a1 7b 79 f2 da 30 80 4c d6 a7 a0 70 b2 f0 31 c3 e2 50 8c af 80 a9 0b 5c 2c 75 8e a7 b4 e4 66 01 35 8c 64 9a 81 66 84 0b 40 37 24 71 7f 20 d2 86 64 27 62 58 b4 56 6e e6 cf 04 6f c8 88 a0 57 af 1a 3a af ff b0 82 98 65 87 08 7d 32 bb ae d5 98 7f 24 2f f4 d4 27 4e 70 38 26 6d 89 67 e9 85 9f 50 b3 c1 2a 82 c5 db ce dc 92 d7 48 03 22 21 19 a9 06 5d 9f 5d 8b 75 3c 02 62 bc 9b e4 47 36 e1 c7 23 24 f4 27 c7 15 cb 0d 76 41 8c 15 28 d5 91 7d 68 cd c6 c1 ae 4f 10 40 7b de 06 b2 71 80 05 f6 b7 0a 02 8b 06 d0 f3 fb cf 37 12 86 56 11 2c 0f a9 c6 06 f6 70 61 e3 91 57 8b 8a 17 19 02 63 b2 7d cc 30 82 a6 47 87 e5 d1 71 89 27 39 87 4d 8f b1 99 e4 5d c1 9a 9d 4a fd d4 2a 8c 62 33 ae 06 52 53 06 b3 69 55 98 ca 75 23 a7 d3 Data Ascii: % IES1nl:y_={y0Lp1P\,uf5df@7$q d'bXVnoW:e}2$/'Np8&mgPH"!]]u<bG6#$'vA(}hO@{q7V,paWc}0Gq'9M]Jb3RSiUu#
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: f0 64 36 54 bc cc 29 da 26 5a 0d 17 2e d9 35 51 4a 27 4f a9 e1 52 ff cf c6 75 8b cf 9b 0d 82 5d 9e d7 16 1a 90 5b c2 b4 06 19 b8 b9 99 04 79 f0 72 0a df 34 81 b1 2e d6 87 77 d4 ce 86 16 ad 91 10 b7 fa 43 65 bd e2 50 1f 4d 6a e0 53 cd 54 7f e2 e5 1e 61 a7 69 21 d1 ea 50 98 2a 6e 1d 7c 77 11 9c 58 8c 98 aa 04 88 ba 32 31 30 e2 44 14 4a 3f 5d 2b c8 f8 97 b4 05 8d 03 c9 2d 92 a6 4b 9f 41 38 b9 f2 7c ff f9 cd 43 24 2f 3d 6b 7a 74 15 88 b4 34 d8 64 d5 ef 8e 6b 1b e3 38 ad a5 34 29 b9 2a e7 34 94 40 ba f6 ab a9 60 6f 70 ab ec 15 1f 3f 40 be 1b 1f 1b 68 81 d3 65 ca ec 08 16 79 16 c5 f1 fe 8c 91 a2 e5 ea a7 e8 37 20 c4 e3 c2 be ab 34 3c 11 77 9e d8 70 3b 28 e1 95 a8 c3 b5 71 32 7f d7 d1 ea 65 30 43 7c 6a e3 0a a3 9d 4e 12 99 98 f2 69 6b fc 00 a7 3e 83 0c 83 d7 44 Data Ascii: d6T)&Z.5QJ'ORu][yr4.wCePMjSTai!Pn\|wX210DJ?]+-KA8\|C$/=kzt4dk84)4@`op?@hey7 4<wp;(q2e0C\|jNik>D
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 10 b3 c2 e9 7c b8 d1 a0 11 f7 19 e2 13 d3 d3 b8 da e8 bd 64 f8 01 d9 5e 61 de 33 d8 2b a1 04 98 4d 2c 34 aa bb b7 ce 1f 3b a7 0b 76 a8 df e0 2d a8 c8 27 2f da b0 de 95 81 06 d3 c5 d5 53 96 56 04 cc 44 40 cf ef ef ef 3a 5c 75 9e ba 64 b0 a7 83 0f 37 60 1a fd 4e 41 b1 8d 33 ab 31 8d d3 cd c1 3e ca 7b e9 00 fa 69 a4 b5 7b 1d 7c 4f c8 0f 38 9c 2d 6e a8 a4 21 d1 32 39 ca fa b2 82 f1 45 34 a6 aa 02 12 ff 02 88 39 e0 cf d3 19 29 18 03 d0 9f 7b 95 36 d2 38 cb 44 14 5e 7c 62 95 f4 20 8a 5d fd 82 8b a7 ed ad 51 fc 8c a9 0d d5 91 78 77 3e 42 93 2b 0c 8e 76 5d b6 d0 25 67 45 5f fe 8d 9f 7c fa 31 04 eb 15 8a b8 c5 4b 95 5a 1b a2 e7 65 85 5e e0 7b 77 01 dc d4 77 1c b2 90 bc 94 5d ba c8 84 5f eb 18 05 93 d6 48 a4 e2 56 65 a0 4f 21 f0 71 36 a5 40 55 39 0f 33 70 b8 03 b5 Data Ascii: \|d^a3+M,4;v-'/SVD@:\ud7`NA31>{i{\|O8-n!29E49){68D^\|b ]Qxw>B+v]%gE_\|1KZe^{ww]_HVeO!q6@U93p
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 7d 70 90 d4 2e f0 18 47 d0 a5 0f 60 45 ec 6a a1 e2 3d 65 f1 b1 76 e9 9a a6 ec 93 92 17 23 29 07 70 cb 04 9e 5a ca e6 15 f8 e2 bc 15 c7 6c 6d 48 42 91 0f 15 d6 3d 2f 3e fd f9 ee 3d 5c aa 44 7c 46 0f 66 9d 0c 54 7c 67 3d 00 44 2e 76 cd 1f f7 9e 9c 30 b6 bb 83 83 39 b0 08 15 49 2f a5 0c f9 04 3e 74 14 02 9b 92 7c b2 1a 80 b2 74 a9 99 05 14 93 c1 a7 f9 ae 38 c5 39 0d e8 70 4d c2 8f 3d ea 0a 90 3a 7a 88 bf e0 5a 29 a2 d4 b7 6a fb a9 b5 3e 25 ab 9c 64 62 b5 a6 c0 12 1e b8 cf 3e e8 e2 11 a7 e9 30 6e 2d 40 43 30 ad 2c 74 60 7d ea 3a d9 58 3a 40 c7 01 ce 2c bb c7 a2 7f 2d 87 d7 cd f2 51 f2 de c1 55 92 84 f7 d1 45 1a 1c 01 84 4b 7e 61 d2 09 d2 81 df 35 24 46 58 e9 6c ff c2 32 88 47 dd f8 1e ad 98 b4 36 b2 a2 55 2f aa c0 2d 07 60 49 26 99 83 3f 2f 42 56 a8 26 5d b7 Data Ascii: }p.G`Ej=ev#)pZlmHB=/>=\D\|FfT\|g=D.v09I/>t\|t89pM=:zZ)j>%db>0n-@C0,t`}:X:@,-QUEK~a5$FXl2G6U/-`I&?/BV&]
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 78 c9 1e 65 9e 75 c7 02 9a 11 e6 12 6d 0b 99 65 4f 62 40 bd 39 b1 14 cb db 18 7e 80 a1 96 05 b7 98 29 d1 28 db a8 56 81 d6 4a b1 90 6a 11 48 43 38 b5 4d b5 67 13 09 06 af ce 18 19 bb 2b 5a db 60 c6 91 60 ce 6b fa 06 a5 0f 12 1c ac 6f c8 e3 2b 16 92 66 4b 7b 23 3f 37 ac 26 15 5e 38 0d 34 3e 49 27 26 89 6e f6 7c 4a 21 f6 1e 15 3f 62 64 9b 3d 15 f2 78 fe 4d e8 44 6f 54 67 b6 9a 54 36 1a fc 72 b8 d4 87 2a 70 e8 a7 a2 fd d9 72 3b 8d e7 3c 7b d7 82 ba fa 68 69 e5 c2 52 c0 38 6c 71 04 6e 65 5e b7 55 8d 13 d6 51 60 8e 88 5f a7 fb e2 20 17 47 da 55 7f 33 2b fe c8 24 95 da 37 49 6c ef 7b ba d1 37 9b 68 ad 55 5c 4d c5 3a 65 04 1a ba bc 66 39 34 a2 e7 fc 72 22 b7 be 51 95 fe a4 39 68 25 2d e0 66 ca d9 f1 56 f9 6d 9c ea 61 44 1c da 87 ae a4 bd d3 7f 6a d2 ee d2 32 42 Data Ascii: xeumeOb@9~)(VJjHC8Mg+Z``ko+fK{#?7&^84>I'&n\|J!?bd=xMDoTgT6r*pr;<{hiR8lqne^UQ`_ GU3+$7Il{7hU\M:ef94r"Q9h%-fVmaDj2B
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 31 d1 dc 2e 56 66 5b ac f0 32 e8 70 93 18 d9 9b ec 0f 5f 32 11 ae 61 f8 43 18 47 0b 55 eb 84 ed 63 36 a7 87 f7 81 ac 9f e4 e2 56 0e e4 83 f9 8e df f2 79 89 8b ed 4e 5b 3d 7b 2a 8d 78 d6 ff 28 1f cd ba 3b 5d 51 7d 30 69 0b 86 5a 13 fc a8 79 bf 81 2f 79 e7 0c c4 c3 43 88 12 e6 d9 2b 82 e4 62 c1 99 86 ed f6 c0 36 6a fe 63 e9 5f 53 d8 df ef 9f fb f6 1b 17 f0 cf 73 74 f6 44 80 77 cb b3 48 21 3a 77 1d b5 ce 5f 27 3b 69 af 1f 1e 6a c8 74 bc f5 61 0a 64 16 8b 3c 63 33 d0 c4 24 81 b3 9d b9 0a 16 57 75 1b 70 67 8f 95 17 4d 2a ca c5 15 96 ec 7b 78 8b b1 d3 9a 96 20 bb 99 ec be ab 13 ca 15 34 bb bf c1 d4 ed 2f 8a 14 09 61 1d 02 42 c7 f4 5b f5 66 67 0a 4b 35 e4 42 0a 04 7a 58 c4 8c fe 5e e2 31 e3 f8 67 42 aa 6e 3b 43 be 7c cf 8a 4c 2b d1 1b 4e 98 b6 fe 6f 74 21 37 47 Data Ascii: 1.Vf[2p_2aCGUc6VyN[={x(;]Q}0iZy/yC+b6jc_SstDwH!:w_';ijtad<c3$WupgM{x 4/aB[fgK5BzX^1gBn;C\|L+Not!7G
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 70 12 96 c8 ce 4e f4 21 f6 1d 29 90 2f 37 5e 3e 9f 5c 1c 81 d5 cf b4 aa 9f 2a ce f4 16 24 54 12 ce b4 87 c7 5b cc 92 f5 cd 66 b4 41 79 f0 b4 f6 45 eb 19 24 38 d9 a4 5d 42 a5 55 dc e6 57 6e aa f1 b3 be 48 a8 a8 61 c2 ad 0e 92 8c 70 67 7e 4f f8 10 5f bd 3b 05 ce 42 64 01 38 38 f6 68 05 db 46 c3 8c 6d 86 9e 2c 88 aa b6 af 23 78 45 c0 ad 26 b3 20 3d cd 06 61 d3 09 6d c0 b7 5b 8d de 96 43 eb 60 df e9 2d fb 38 10 8e 88 0e 01 3b fb 9b 18 c3 a2 4f ad c3 9e be 09 42 ac 31 b0 c1 4c cb 58 7d ba 75 91 bd 68 18 ca 4c 62 2b 2c 18 cf 2d da 86 34 03 fc 05 be d8 97 3a 35 b3 7d 3b 5a 62 b9 de c5 c9 f6 90 4c 4b b1 e9 55 a6 84 0b 75 0a 5b 84 94 9c 56 cc 70 26 a8 06 ac 01 60 86 f7 ca 02 94 4a cc 3c ae 88 1d 29 71 b9 55 20 e3 26 47 6e 2c 18 7f fe 62 ad 03 8f a0 49 a5 b7 69 aa Data Ascii: pN!)/7^>\*$T[fAyE$8]BUWnHapg~O_;Bd88hFm,#xE& =am[C`-8;OB1LX}uhLb+,-4:5};ZbLKUu[Vp&`J<)qU &Gn,bIi
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 95 5d 46 f6 88 16 76 41 aa 87 cd 72 d1 a4 5e 6d 22 16 f8 ae 15 a8 47 7e 49 df f8 56 86 f7 a0 4b 8f 2a 26 62 93 a2 ca 51 4d 87 d8 99 d0 42 96 55 24 9f 2a fd 6e 01 83 c2 dc d9 77 e1 93 77 89 db 9f 4f de dd d9 02 9e a9 99 c7 26 e7 3a ba 24 25 5e d8 cf 97 84 7a 11 a3 e2 d2 a7 14 cd 03 f0 77 f9 56 8b 65 8e 58 09 d3 f9 f9 c4 25 4f 73 ff 4a de f5 5f 11 cb d6 9c 3e ef 25 8f ad 4a d0 41 99 9c f8 fe 7e 86 e4 5f 8d f8 b9 e8 77 ff 90 81 bc b0 31 47 91 d6 ab c0 7b be 6e 45 07 bd 21 b7 e8 c5 b4 b7 5a c1 42 b5 3d b8 58 58 ce 17 a2 81 14 95 9a 46 7b ee 54 0f 3f 56 e6 6d 85 0e f8 c5 12 4e c3 a9 80 dc a7 be 99 99 96 f3 16 85 a8 0a 60 c8 61 63 ad bd a7 3d 86 c2 d5 01 cf f7 f7 f7 55 aa d8 6d bc 12 2c 37 e8 d4 2d aa 9d 8c 3e f0 b5 c8 9f d5 96 7e 52 d7 e6 59 74 76 7d e2 7d ba Data Ascii: ]FvAr^m"G~IVK&bQMBU$nwwO&:$%^zwVeX%OsJ_>%JA~_w1G{nE!ZB=XXF{T?VmN`ac=Um,7->~RYtv}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50136	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:35 UTC	792	OUT	GET /kQDv-46ToDkqXJ2DIlr7hKXKalQvL0NJy4oGIhNlUkxX95btXayCKNoZuaY_KT-6U8-Iz35FlDZXRd1U3bNFo99a3k0-vwIIbtEIStTKYwD_UxNkjA HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:35 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 433358 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:29 GMT Expires: Tue, 28 May 2024 21:11:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 5526 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:35 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 97 00 00 02 00 08 06 00 00 00 4e ed 21 6b 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 20 00 49 44 41 54 78 9c ec bd 59 ac 6f 59 7e df f5 59 d3 9e fe e3 99 cf 9d 6f 4d 5d 55 dd b1 bb 63 07 3b 71 b0 15 4b 21 0f 01 04 48 c8 0f 10 1e 78 08 41 48 28 41 c9 23 0f 48 80 20 82 30 04 f1 00 42 80 c4 13 43 9e 12 29 40 84 9c 80 85 71 3c b7 53 dd d5 55 f7 de ba e3 99 cf f9 cf 7b 5c 03 0f Data Ascii: PNGIHDRN!ksBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2 IDATxYoY~YoM]Uc;qK!HxAH(A#H 0BC)@q<SU{\
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: f4 c7 13 78 ef 31 ca d0 79 1b 7f 36 78 ac 73 20 25 a1 73 e8 44 e1 3d e8 fe 77 11 22 be 41 81 1b a9 e4 ae 08 61 ee 7c 98 0a c4 89 90 8c 85 90 43 e7 6c 27 10 5a 09 51 06 21 93 10 fc eb d6 b6 13 29 d4 85 14 a2 76 c1 1f 29 a9 df 04 ef 6a a5 f5 42 04 de 75 de 6d 02 2c 05 08 29 84 08 21 04 21 78 49 fc c4 41 20 ee 37 ae 3b 4d b4 ba f2 81 1d 09 4a 4a 2d 3a 6b 4f 5d f0 52 49 b9 ee ac 2f b5 94 65 10 c1 68 25 37 cb f5 e6 33 15 82 4f 8c 51 ca 76 b3 c7 8f 3f f8 cd af ef c9 7e bb 7e 14 d6 db e4 f2 35 af 93 eb 93 3f 55 d7 ee 03 29 c4 1d a1 d5 c8 f9 ee 91 d6 a9 96 a0 3a ef 72 04 53 23 95 27 84 89 f3 61 4f 4a 61 a5 60 e0 3c 19 04 a7 94 6a 94 94 05 42 e0 9c f5 d6 f9 36 49 d2 2c 04 0f 21 20 84 40 2b 49 6b 1d 21 04 42 ff b5 00 28 21 e8 9c 45 0a 49 20 06 f4 10 3c 46 29 ca ae Data Ascii: x1y6xs %sD=w"Aa\|Cl'ZQ!)v)jBum,)!!xIA 7;MJJ-:kO]RI/eh%73OQv?~~5?U):rS#'aOJa`<jB6I,! @+Ik!B(!EI <F)
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 64 e2 67 f5 c1 d3 11 b6 15 36 04 1a 1b ab 6e d7 c3 36 75 db 32 4c 73 84 8c 7d 44 f0 60 a4 c0 11 d0 5a 21 7c 0c 72 3e 04 12 69 e8 a4 c7 39 4b db 57 f1 b7 1d 92 56 8a ae 4f 50 c1 7f d9 65 24 52 53 fa 06 21 25 ce 79 0c 82 d6 f7 9d 07 01 a3 34 b7 a1 58 4a f1 e5 35 0b 50 db 96 22 c9 70 c1 e1 f1 b8 1e 6a 0b 21 d0 fa 0e eb 2c 59 92 d2 75 2d ce 3b ac 75 18 6d d0 5a b3 69 ea d8 cd 48 87 10 32 72 3b c4 04 9f f4 49 c4 13 10 7d 32 70 21 9e 5f f0 31 f1 dc de a7 ca 76 f8 3e 69 4b 25 fb ee 4b 60 fb c4 ec 5c a0 75 5d 9f 6c e2 f3 22 7b e8 b2 ed 1c 89 51 78 19 bb 44 d7 77 87 85 36 6c da a6 bf 47 3d 54 49 4c 1c c1 c5 a2 44 02 ce 3b 8c 49 49 13 13 ef a9 10 11 82 53 01 eb 1c 9e 78 4c 89 8c 30 a9 f7 38 6f b1 d6 62 9d 53 5a eb 5d d3 27 35 a1 14 42 8a 3b 4a 1a 1c e1 8f cb 49 f1 Data Ascii: dg6n6u2Ls}D`Z!\|r>i9KWVOPe$RS!%y4XJ5P"pj!,Yu-;umZiH2r;I}2p!_1v>iK%K`\u]l"{QxDw6lG=TILD;IISxL08obSZ]'5B;JI
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: c6 c5 80 55 55 d2 5a db ab b2 04 aa 57 75 79 e7 09 2a 56 ff de 07 aa a6 61 98 17 f1 5a 3b 47 59 37 4c 07 86 61 5e d0 79 bb e5 79 12 6d 68 ad ed bb 51 cf 20 8b 01 15 1f b0 ce 32 cc 8b 2d 84 e6 7d 40 99 98 78 ba 6d 97 17 28 b2 3c 1e a3 4f 22 52 4a 02 16 db 73 38 ce 5b b2 34 63 55 57 f1 39 f3 0e a3 34 5e c6 a4 0c 91 57 53 f4 fc 93 d2 d8 e0 69 bb 96 34 49 e3 b3 17 a2 fa 2c f1 51 19 08 f1 ff 3b 67 31 3a 3e 43 46 c5 ce cd 87 58 bc b8 10 3b 3a d9 3f cf de 07 b4 8c e2 0b 17 3c f4 fc 51 ec 7e 4d ec 3e 43 7c 8e 95 f8 52 9c e1 9d 25 f4 30 68 e8 93 69 e4 e6 a4 14 52 7e a0 a4 fc 40 2b 45 d3 b4 d7 52 89 ea f9 f9 9b 7f 46 78 ff ab da cb 5f bb 77 ef de df f8 4a 5f fa b7 eb 2b 59 3f b2 c9 e5 64 7e f1 ef 74 d6 bd 2f 90 3f 23 25 53 81 48 81 04 62 e0 af 9b 06 fa 17 f6 16 ea Data Ascii: UUZWuy*VaZ;GY7La^yymhQ 2-}@xm(<O"RJs8[4cUW94^WSi4I,Q;g1:>CFX;:?<Q~M>C\|R%0hiR~@+ERFx_wJ_+Y?d~t/?#%SHb
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 1f bf 1b 3b 01 ef 59 97 2b 12 a5 48 8c 81 3e d9 35 b6 63 32 1c c6 73 72 b1 aa 56 b9 a2 90 f9 df 97 3c 22 c3 23 b0 5d 34 48 ba 5e 11 a6 94 42 86 68 98 2c 9b 86 51 9e 33 c8 72 bc 08 b4 9d 45 2b 8d d1 66 0b a1 69 29 63 87 24 55 0f 31 42 9e e5 d0 f3 05 55 5d 93 65 59 ec 4a da 86 55 59 32 c8 72 64 0f 6f ae 36 25 a3 62 c0 78 38 ec 03 7b 89 4b 53 46 c3 78 cc d5 7a 45 00 26 c3 61 84 a0 3c 2c d7 4b 46 c3 21 9d b7 04 04 17 37 57 1c 4c 77 19 0e 06 00 6c ca 92 46 6b 76 8a 21 b5 eb d8 54 35 8b cd 8a e3 dd 7d 8a 2c c3 e3 a8 db 06 2d 25 a9 49 7a ff 8d 65 b1 5e a1 27 3b 24 49 42 10 71 22 81 0f 81 69 31 a4 69 1b ac 73 d4 5d 8b 56 3a 2a 11 9d 45 48 41 22 34 5d 67 59 f4 f7 b4 c8 72 bc f7 ac ab 8a c4 18 ee 1f 1c b1 6c 2a ac 73 58 6b 99 0e 46 f1 3c db ba bf 86 29 42 c8 28 9d Data Ascii: ;Y+H>5c2srV<"#]4H^Bh,Q3rE+fi)c$U1BU]eYJUY2rdo6%bx8{KSFxzE&a<,KF!7WLwlFkv!T5},-%Ize^';$IBq"i1is]V:EHA"4]gYrlsXkF<)B(
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 5d 5f 70 9e d9 66 c5 78 30 e2 76 32 41 59 57 64 69 4a f5 bb d4 77 59 92 b0 2c 4b 06 69 46 d3 b5 d1 bb 14 c0 18 c3 7a b3 26 4b 32 3c 7e cb eb ac ab 72 cb 4f d9 5e 44 90 f4 9d 4e db d9 a0 a5 7a e9 bd 7b ed 6d f8 db 1f 3e 7e e7 df fc 1a c2 cb db f5 8f b8 7e 68 92 cb c5 ec f2 bf 68 9c fb b6 10 62 aa b4 fe 30 78 bf 35 04 76 fd c3 2a 05 58 17 55 32 a6 af fe 6e 89 6a eb 6d 3f 2c 51 6e cd 84 b7 2e 7a df 13 fa 9d ed b6 d8 7c 62 cc 56 02 7c 39 9f b1 37 99 72 cb b7 2f 37 1b f2 3c a3 ac 2a 26 c3 51 24 6e 05 34 6d c7 a8 c8 b7 10 db 7c b5 64 90 65 48 a5 c9 8d 61 5d 57 91 2c d7 1a dd 9b f6 36 75 c5 fe 64 87 75 59 52 64 19 75 17 1d e4 97 8b 19 07 d3 1d 6c 9f 74 ae 17 0b 0e 77 f7 22 b4 e4 23 b9 6e 9d 63 3a 1e 13 7a 21 41 5d d7 ec 4c a6 f1 82 09 78 73 71 ce 64 30 64 67 32 Data Ascii: ]_pfx0v2AYWdiJwY,KiFz&K2<~rO^DNz{m>~~hhb0x5vXU2njm?,Qn.z\|bV\|97r/7<&Q$n4m\|deHa]W,6uduYRdultw"#nc:z!A]Lxsqd0dg2
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 2c e3 66 3e e7 f9 eb 57 40 e0 ce de 01 de 39 2e ae ae 30 5a 73 e7 e8 88 22 cd f9 c1 93 27 2c 56 6b f6 a7 3b 14 45 c6 62 bd e4 ea e6 1a 27 3c ca e8 5e 12 5b 22 a5 64 90 17 6c 67 78 e1 a3 50 a1 1f 98 78 b4 b7 87 d4 71 06 17 01 0e 76 76 99 8e c7 34 6d c3 d9 e5 25 42 29 0e 77 77 d1 52 f1 fd a7 4f 98 af d7 dc 3d 3a 66 67 34 e1 fc ea 82 b3 9b 4b b2 2c 61 34 1e b1 29 4b be ff e4 f3 78 dc fd 43 20 f0 e9 d3 cf b9 b8 be e6 e1 dd fb 14 45 ce f3 97 2f 79 f2 fc 19 07 bb f1 ef 9c 5f 5f f2 ab df fd 4d 92 34 e5 e8 f0 00 6b 3b 4e ce 4e d9 54 15 7b d3 29 5a 6b ce 2f ae 38 bd b8 60 34 18 31 c8 0b 56 eb 15 27 67 27 14 59 ce 74 32 c1 79 c7 ab 93 37 34 5d cb 70 30 40 4a c5 f5 6c c6 a6 2c d9 db 99 30 2c 0a ce af 2f 59 6d d6 0c 87 03 26 c3 11 c1 79 2e 6f ae 49 75 c2 a0 18 d0 74 Data Ascii: ,f>W@9.0Zs"',Vk;Eb'<^["dlgxPxqvv4m%B)wwRO=:fg4K,a4)KxC E/y__M4k;NNT{)Zk/8`41V'g'Yt2y74]p0@Jl,0,/Ym&y.oIut
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 97 cf 79 ef de 43 b2 be db 7a 7d 76 8a 31 86 7b 87 c7 18 a5 98 cd 17 bc be 38 e3 e1 bd 7b 71 66 55 67 f9 fe b3 cf d9 99 4c b9 77 7c 8c 16 9a b3 cb 73 5e 9d 9d f2 63 1f 7f 33 0e 88 34 09 bf f1 3b df e5 9d 77 de 25 cb 12 34 82 93 8b 73 b2 34 e3 ce c1 21 75 db b2 5a ad b8 bc b9 e2 dd 07 8f 68 9c 65 5a 0c f9 f4 e9 13 0e f6 f6 18 14 03 5a 67 39 bb 38 a3 28 06 dc d9 3b 60 53 97 54 75 cd 6a b3 e6 d1 dd fb 9c cd af d9 1b 4e 38 e9 83 9e 94 8a 2c 4d 79 f1 fa 35 79 9e b3 bb b3 13 e1 9b f5 9a 75 55 f2 ce bd 07 ac ab 12 e7 6d e4 18 c6 53 36 65 c9 30 cb 98 6f 56 4c 86 e3 ad d1 f5 66 31 c7 a4 09 79 92 50 b7 2d a9 8e 5e 99 c3 dd 3d 4e 2e cf c9 f3 3c 16 0a 69 c6 cd ec 86 c1 60 00 22 4a d1 db 2e fa 45 d2 24 8d ee 7b ad 59 97 15 83 3c f2 68 c3 ac e0 66 bd 24 91 1a d3 8b 3f Data Ascii: yCz}v1{8{qfUgLw\|s^c34;w%4s4!uZheZZg98(;`STujN8,My5yuUmS6e0oVLf1yP-^=N.<i`"J.E${Y<hf$?
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 3b 77 b7 fb c6 7c ef c9 0f 78 ef c1 63 c6 e3 11 c1 7b 4e ce cf 51 4a 71 b4 7f 40 59 57 51 56 3b 9f 71 f7 e8 38 8e e5 0f 70 7a 71 ce 74 3c 61 50 14 38 ef 29 cb 0d 4d 5d 73 7c 74 cc 7c b3 22 51 86 e5 72 c1 de ee de f6 7e 36 4d 8d 54 12 a5 e2 d4 81 c9 68 c4 a6 2a c9 d2 8c c5 66 c5 64 38 64 b5 5c 33 9d 4e 59 95 1b b2 24 21 38 1f e1 39 17 af e9 20 2f 68 bb 8e 3c cb 38 bd bc e0 70 6f 9f cd 66 43 91 e7 5c ce ae 99 8e 27 5f 42 90 36 56 de 69 9a 62 b4 c1 3a cb eb f3 b3 08 9d f5 72 f6 ef 7f f6 19 0f ef df 67 50 14 74 d6 72 3d bb 61 3c 18 52 e4 05 08 41 53 d7 b1 a3 d8 df 27 00 83 24 e5 fb cf 9f 71 f7 e8 28 72 69 da f0 ea e4 0d ad 73 3c bc 7b 17 e7 3d 6d d3 f0 ea e2 8c 87 c7 f7 50 5a 91 19 c3 eb b3 33 82 80 fd 9d dd 28 44 90 8a 1f 3c 7f c6 c3 bb f7 f1 de 93 67 19 97 Data Ascii: ;w\|xc{NQJq@YWQV;q8pzqt<aP8)M]s\|t\|"Qr~6MTh*fd8d\3NY$!89 /h<8pofC\'_B6Vib:rgPtr=a<RAS'$q(ris<{=mPZ3(D<g
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 30 2c 46 cc 56 0b 76 06 23 ac b5 28 a3 a9 aa 8a 24 89 f7 cb 28 1d 8d 90 42 c4 f9 67 de 61 84 e2 7c 76 cd 74 3c 8e 81 b5 87 84 a6 93 49 14 57 84 c0 a6 aa 28 eb 8a a3 dd 7d b4 52 d4 4d cb c5 ec 2a c2 86 2a ba d4 cf af af 98 0e 47 4c 46 63 44 ef ff 69 ea 9a 8f de 79 9f a6 6b 59 95 1b 4e cf 2f 78 ef f1 43 94 88 02 92 27 af 5e 70 bc 7f b0 ed fa 4e 2f ce a9 eb 9a f7 1f bf 13 87 74 d6 15 bf f4 1b 7f 97 3f f9 33 3f 87 14 50 37 0d 9f 3e 7b 1a 89 7b 6d f0 01 9e bd 7a 4e d5 34 7c e7 a3 6f e1 9c 65 59 6e 78 f2 e2 39 3f fe e1 c7 08 21 18 a4 19 bf f9 f7 7e 07 65 14 1f be f7 01 84 c0 6c b9 e0 fb 4f 9e f0 53 df f9 0e ce 07 bc 77 7c f6 f4 09 fb bb 7b 3c b8 73 37 ca 75 bd e7 b3 17 cf 78 7c ef 01 c6 24 24 5a f3 e2 cd 6b 8a a2 e0 60 77 b7 1f 17 d3 71 7e 73 c9 fd bd a3 5e 59 Data Ascii: 0,FVv#($(Bga\|vt<IW(}RM**GLFcDiykYN/xC'^pN/t?3?P7>{{mzN4\|oeYnx9?!~elOSw\|{<s7ux\|$$Zk`wq~s^Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50137	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:35 UTC	568	OUT	GET /QheKQlOajd_iZUvo2vtGYkrWjvhTjOuxC4YqFn9pznHDkFeHsEF3Ey4PmQtIe8eTDKyddsBy_miNYSstxPaM5q6RUp0LGWciI58mQZrWlbM1r3AtbRI?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:35 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 252091 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:11:52 GMT Expires: Tue, 28 May 2024 20:11:52 GMT Cache-Control: public, max-age=86400, no-transform Age: 9103 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:35 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 25 08 06 00 00 00 92 f1 5a e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c 84 bd c9 92 75 49 92 26 f4 a9 9a 9d 73 ef 75 ff a7 98 33 32 72 aa cc aa a4 b2 a4 a0 5b 10 a4 17 0c 0b 1e 80 87 e8 47 60 8d b0 e4 19 d8 22 02 22 2c 59 20 ec 10 a1 17 b5 68 40 5a 40 04 28 9a 22 a9 ea aa ca b1 22 e2 9f dd fd de 73 cc 54 59 e8 60 76 fd 8f 94 ba 99 7f b8 fb b9 e7 d8 b1 41 4d f5 d3 d1 88 99 15 0a 80 80 fc 09 ff 1d f6 37 4d 7f 42 01 a2 e9 6f 8c e7 e6 26 f4 0f 3d 3f dd 0f 5c 7f 17 cf 11 f9 f3 8f fb f2 5d 0f 4c b7 e1 c3 af ae 86 f6 f8 f1 78 19 01 00 11 d4 3b 4d 1f 3c 7d dd 09 55 c5 cd ed 0d be fa ea 2b 1c 3f 5a d1 0e 17 2c 2f 08 5c d8 5f c2 e0 c2 20 62 30 11 88 09 cc 0c 22 Data Ascii: PNGIHDR%ZsBIT\|d IDATxuI&su32r[G`"",Y h@Z@(""sTY`vAM7MBo&=?\]Lx;M<}U+?Z,/\_ b0"
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 2b a4 0b ea d3 15 eb f3 8a e3 81 c1 cc e8 68 f8 67 7f f4 67 f8 d1 f7 7f 88 9f ff fc cf f0 af ff f2 ff c2 17 5f 7e 85 d3 cd 0d ee ee ee f0 fb df fc 16 3f fd 93 1f e2 f5 cb 33 d0 ff 0e ff e9 7f f6 5f 82 71 02 5f 09 e3 eb 35 fe 83 92 55 8d 9f 5d 09 8f f9 96 bc 75 12 30 79 ff 2c 53 a7 7b 93 29 26 3f 9d 6e 72 62 05 29 e8 aa 31 0c 46 f0 61 d3 ff 18 ae 49 66 99 8c f9 ea d9 b1 d1 74 7a 2a c7 98 1b 4e 73 53 8a 33 6f 9b a3 b9 57 3a 6d 5e 9b bc f9 5e 63 e4 f0 89 75 41 43 48 a0 90 7d 63 8c 8d a8 f3 e8 66 c0 35 9e a1 60 b2 30 41 6c 5f d3 74 f3 10 e0 20 07 29 6c 82 96 0b 83 4b 41 29 84 52 18 4c c6 44 4a 2d 26 38 0a a3 70 41 29 8c a5 16 14 36 42 ac 85 bd 1d 03 26 26 03 75 30 1d 66 94 62 a0 86 08 f6 0e 2e 60 66 30 17 10 31 a0 2e 7c a8 d8 bc f9 ea 45 b7 83 f9 b6 6e 20 21 Data Ascii: +hgg_~?3_q_5U]u0y,S{)&?nrb)1FaIftz*NsS3oW:m^^cuACH}cf5`0Al_t )lKA)RLDJ-&8pA)6B&&u0fb.`f01.\|En !
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 4c f7 c2 51 af 09 e9 d0 03 66 0b 81 4e 9b 3d 90 b5 4d ef e8 3d 11 92 71 19 e3 d3 ab f9 eb dd cc b1 50 bd 9a a7 20 89 78 97 99 e5 c9 05 ea d4 ed 64 ea ea cc 6c cc a1 88 a4 a9 5e 9d 89 cd 7d 0f e1 20 a2 d0 6e cf 8a 18 50 11 07 3c 21 b0 43 50 a9 02 da 74 ac b7 98 36 61 60 40 d0 f7 06 f5 8d c6 22 20 38 63 d7 21 c0 09 3e 87 c9 1c d5 fa 16 42 20 c0 69 cc bb 6a 0a 07 9d 0d ff 13 df 1d 94 34 e6 26 01 d2 b4 c6 d1 de 2c e8 00 46 db 05 bd ab 9b ee 91 4c 93 5d 2b a5 69 8d 54 d5 ac 43 98 de 43 46 2f 03 9c 0d 41 04 95 fc 0e 70 01 e7 42 d0 04 89 8e 31 ab a6 19 df 14 aa 21 58 af 34 c5 68 2b dc 00 a1 4d e7 1d 39 34 1f ba 5d 0b d3 66 5c 49 66 3f 99 9c 35 41 5b ec a0 6b 77 4f 4c b0 8a a0 43 c1 85 7d 89 74 7e fb 78 8f 5c d3 76 f4 5e 7a 4f 80 1a 56 12 ed 46 5b 66 c8 b2 f7 30 Data Ascii: LQfN=M=qP xdl^} nP<!CPt6a`@" 8c!>B ij4&,FL]+iTCCF/ApB1!X4h+M94]f\If?5A[kwOLC}t~x\v^zOVF[f0
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 8d e7 63 11 88 00 9e e7 60 1a ff ec 96 9a b7 d6 fc 5d 58 84 e6 7d 33 82 06 d5 34 47 98 20 9c cd b1 e9 c2 00 46 5b 48 62 c8 7b 2c 84 83 9c 81 59 47 98 82 76 cd 74 1e 2e 28 f3 87 c2 c7 3a 6b e4 0c 40 20 0f ef 2c 4e a4 1e 4c a8 f5 86 5a 17 88 33 7a 05 e7 34 c6 3b 59 c2 bf 4c 08 bf 71 a9 0c 6d 1d 1c 80 6b a6 67 36 81 88 ec 6b ec 17 d3 46 45 61 9a 2a 8d 3e 86 b0 37 eb 95 f9 7b 15 30 b7 9f 83 29 52 5b bf 92 60 45 d1 d5 4c b7 e2 73 c6 50 df 7f c6 ec 1b 89 59 4c 22 88 34 34 78 93 7a 2e 48 35 dd 01 4c 06 10 2a 5b 1b 50 5b a3 4a 6e 49 e2 41 97 95 09 b5 10 80 06 a9 1d 7a 63 1a 3a 07 9f 82 05 9c 29 80 c2 66 e7 ea 50 14 28 44 80 1a 74 7c 64 6c 4f 0e f8 fd da f1 ab 6f 76 88 4c c0 c3 01 60 f2 1f b6 a0 3f 94 b8 6e 40 a9 14 b3 82 9a 35 28 cc ed 02 51 41 a5 92 ed 19 ff 09 Data Ascii: c`]X}34G F[Hb{,YGvt.(:k@ ,NLZ3z4;YLqmkg6kFEa>7{0)R[`ELsPYL"44xz.H5L[P[JnIAzc:)fP(Dt\|dlOovL`?n@5(QA
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 3a ae d6 cc 7e 01 d7 9b 14 0c a1 85 87 2f 98 dd 25 37 f6 93 03 60 b2 c9 29 c4 09 2a 89 47 3c 8d 48 98 c3 fd 99 69 6f 53 62 1b 82 b8 96 da da 9e 1a 6f f8 b2 09 70 d7 04 f0 a3 75 c7 cf 4a 43 df 1e a0 7d bb e6 0b 96 da 03 8a 80 5d 45 c6 ce 88 0c 9b 4e 04 c8 76 08 0a 28 f7 8a e2 c3 cc 80 70 9d 51 ac 11 31 c8 73 0f 48 05 da ec 41 21 c9 f1 80 08 16 41 11 2e 3f b3 2c c9 04 26 21 e1 16 d2 a4 f9 ba 10 96 b5 62 59 80 36 09 fd d8 33 cc b1 d5 05 e0 92 5a 6f ad 05 54 90 20 9d 89 41 64 81 d5 05 06 08 2c 35 52 3c 43 28 cc f3 b8 52 08 42 a0 8b a7 13 1b 1f 30 05 c5 84 b9 59 09 a8 1b 0f 29 9e 52 58 b5 60 bb 58 9b 5a 91 66 fe de 1a 74 59 50 2b 63 91 82 7d b3 00 bc 75 5d 8d ae c8 a2 ff bb 18 7d 55 32 3f ff be ed 1e a9 4f 28 8b 05 32 b6 66 20 60 a9 15 75 29 58 55 b1 6d 0d 0f Data Ascii: :~/%7`)*G<HioSbopuJC}]ENv(pQ1sHA!A.?,&!bY63ZoT Ad,5R<C(RB0Y)RX`XZftYP+c}u]}U2?O(2f `u)XUm
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 36 8b c5 14 14 0c a8 5b 7e 9c ce 03 57 10 12 38 da d8 1d 7c 07 d9 52 04 47 ba 6b c3 72 1f 01 62 44 1c 0f 51 ac 3c 25 38 20 66 34 1d b9 ef 00 5b ad 0e ef 77 61 82 34 5b 57 2e 66 4e 87 1a 28 ee bd bb b0 e6 cc 9c 30 cd de e3 00 2a 5c 20 5b c1 24 f6 74 40 71 8b 0d 33 03 1d 5e 5c 88 11 69 7f 61 8d a9 a5 64 9a 61 21 64 51 a1 c3 6a c2 5e c8 2d 28 4d a0 8b d5 1f a9 55 ad f0 cf d6 70 58 17 13 f0 6a a0 4e 7a f5 7a 27 05 6d db b1 ed 1d c7 a3 c5 23 44 fc 80 78 9a 60 2f 02 6a 16 77 50 d7 6a 99 06 5d 20 3e 07 97 6d c7 ba 56 2c 8b a7 20 f6 8e f3 f9 82 13 17 54 ae d0 a2 a8 2e b8 df be 79 8f 75 5d 72 8f 11 99 45 e1 70 5b 51 3d e7 9f 4b 70 63 5b 50 55 4b 43 84 2a 96 52 3d 7b 88 46 4a a6 5b 62 0a 17 d4 42 38 9e 9e 23 ca 96 0d 0b 00 c5 6e 98 7c da 1f 08 dc e0 4c b3 cc 9f 84 Data Ascii: 6[~W8\|RGkrbDQ<%8 f4[wa4[W.fN(0\ [$t@q3^\iada!dQj^-(MUpXjNzz'm#Dx`/jwPj] >mV, T.yu]rEp[Q=Kpc[PUKCR={FJ[bB8#n\|L
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: d6 8f 15 ee 82 1c fc c7 3b e4 da 36 d2 50 55 3c a2 3f 62 66 7a 57 9c db 3d 00 13 50 dd 05 3a 7c ae 63 5f 06 2e 8e e2 54 31 2e 91 0e d5 91 a9 24 fe 4c a9 25 0b 44 d5 5a 50 88 d1 c4 4a 00 87 20 4c d7 43 8f 5a 0c d1 47 fb 7e db 5b 56 e5 2b 9d 21 64 9a 7a 71 e0 cc 95 2c dd af 77 ac 65 49 1d 60 73 6d 7e 59 2a 44 05 db de dd 5d 50 21 6a 41 7d bd 9b 4b 21 d2 06 45 0c cc ae ad a0 2c 0b aa c7 83 58 2c c0 86 c3 e1 88 ba 14 4b ab 94 8e fb 87 33 d6 e3 8a 65 29 e8 dd e2 1e cc 32 36 ac a4 74 e8 58 4f 2b ea c2 66 f9 70 1e 36 2b 43 a2 66 15 29 44 28 4b 45 bf 0b 80 19 24 ae 5e 05 10 f8 f1 8f bf 8f e3 f1 88 b6 6d 68 6d 7b 04 00 62 53 3c 66 f8 13 7d a6 58 1e fc fa 5a ee 4e 42 22 08 68 a2 a5 d1 fe 77 5a 09 30 09 9f d0 a6 92 d2 1f f5 e7 31 68 f8 03 63 78 f4 99 44 e8 e8 aa ff Data Ascii: ;6PU<?bfzW=P:\|c_.T1.$L%DZPJ LCZG~[V+!dzq,weI`sm~Y*D]P!jA}K!E,X,K3e)26tXO+fp6+Cf)D(KE$^mhm{bS<f}XZNB"hwZ01hcxD
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 44 8a ed 5e a8 26 6f 29 cc 1e 99 ef ee 82 04 de 03 64 58 bf d8 ea 1c 28 65 05 45 cb 16 0e ea b2 d5 2a 99 29 e1 3e ff 29 c5 2e 02 81 a3 40 d0 ba 2e 06 4a 78 d0 01 17 c2 5c 36 3b fa 4f a1 1c b8 60 2e 6c 7b 4b d4 ac 04 2c 46 c7 95 2c 40 af 7b fc 45 29 5e d8 49 d4 2c 7f 14 42 5e 33 40 ce 82 76 8b 83 d9 08 64 64 c8 de dd 04 4a 1e 47 60 1b ca 84 7b f5 98 03 82 36 4b 7d 5e ea 9a 40 de dc 4e 1d 87 75 01 77 06 f5 7e 55 3c a8 16 cb 22 68 ad 63 39 2c 96 3d 55 cd c5 b0 2c ee 52 28 dd d2 fb f6 86 7d db b0 ae 0b b4 14 74 b6 54 c2 cb 65 c7 f1 74 44 54 28 54 65 3c 5c 36 2b 46 44 9e b9 20 51 12 1b a8 27 e0 78 bb 66 c9 df 61 6d 1f 81 c7 ea dc ab 96 d5 59 55 b9 8a 77 71 92 c0 b2 16 44 dc 4d 29 c5 f9 61 94 02 1e 34 77 8d 1c 27 cd f6 ea 73 a5 19 4f e8 f5 91 dc 1d 12 11 d3 17 Data Ascii: D^&o)dX(eE*)>).@.Jx\6;O`.l{K,F,@{E)^I,B^3@vddJG`{6K}^@Nuw~U<"hc9,=U,R(}tTetDT(Te<\6+FD Q'xfamYUwqDM)a4w'sO
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 42 c4 68 ac 3b a2 88 5a ff c6 ba 4c 28 08 0d 70 e0 aa 44 0a 75 25 82 68 68 f1 14 d5 b1 31 07 10 8b 46 e5 4d 40 dc 87 1c 34 e8 d5 87 01 b8 06 ae 1d cc 1d 9f df 6c 06 40 3d 0d 30 eb 8c 20 e6 55 d0 e0 c2 9f af e3 70 98 81 d6 e2 50 a1 01 6e 8c be ed 3d e4 a7 8d 0e e1 67 d1 f3 dc cd 4c 9f 55 03 bd b6 43 83 1d 2f 2c 05 d8 5b 47 a9 7e 80 19 05 7d 1b d0 b1 ba 01 8c 0e cb c9 3f ac 56 38 a8 78 6c d0 de 3b 8e 75 35 cb 42 17 f4 26 79 16 8a b9 0b 2c c5 73 59 dc bc ce 7e 48 d0 de ed d8 61 b6 13 51 2d 15 b4 61 59 56 a8 5a f6 4a 1c 35 bc 2c 66 bd 29 95 d1 bd 6c f0 e1 b0 a2 56 86 82 51 c5 9e ef 5d b0 2c 46 b7 04 42 39 74 d4 63 05 55 ce 60 c0 f9 d4 46 53 b2 06 1f e2 04 a1 80 48 03 f3 92 4a a0 a8 98 cb 46 60 71 0d eb 21 f9 51 4d 06 34 ff 8c 5d 92 a4 4a 33 e7 4a b0 90 da c8 Data Ascii: Bh;ZL(pDu%hh1FM@4l@=0 UpPn=gLUC/,[G~}?V8xl;u5B&y,sY~HaQ-aYVZJ5,f)lVQ],FB9tcU`FSHJF`q!QM4]J3J
2024-05-27 22:43:35 UTC	1390	IN	Data Raw: 18 01 ac 70 4d 5f 15 59 56 ba 4b 87 b8 55 43 ba 57 59 73 20 da 5b 1b 42 d1 dd 54 eb b2 62 a9 0b 9e 3c 7f 8a 7d eb 78 f6 d9 0d fe e1 ef 7f 05 c6 3d 0e ab e2 f4 fc 06 cf 3e 7e 0a 66 c2 27 9f 9c f0 ed af ff 16 af de ed de 17 5b d3 a6 8a 4b 94 ae a5 a8 82 39 2c 71 e4 1a 35 33 c0 eb 33 6c f8 1c e8 0b 22 e6 86 9d be 62 9d 40 a6 d9 13 b1 bb 12 27 a9 40 3a 68 de 23 f3 35 e3 75 6c d7 44 8d 8f 1e 3c be 5b c5 4c d3 f4 65 9c 75 e1 3c 0d 4e 4f 87 0e 00 6f 72 ff d5 9a 6a 84 b5 27 ea 45 79 3a 04 35 e3 94 6c 4d d4 2b f3 4d 8c 8a 3c e0 cf 95 8c f0 77 1b 29 0f 53 7f f5 23 82 a3 6c 33 51 68 e7 96 86 47 5e 20 ad 28 a7 65 87 89 d0 69 f4 4f 55 b3 8e 02 d4 b2 6a 8a 9f 6d 51 98 b0 ef 92 9a 77 61 46 2f e2 07 02 f9 69 99 ae 64 f5 26 58 17 38 f8 b0 02 45 fb b6 63 5d 16 14 a6 0c 2e Data Ascii: pM_YVKUCWYs [BTb<}x=>~f'[K9,q533l"b@'@:h#5ulD<[Leu<NOorj'Ey:5lM+M<w)S#l3QhG^ (eiOUjmQwaF/id&X8Ec].

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50138	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:35 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:35 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:35 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:35 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:35 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50139	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:35 UTC	794	OUT	GET /PtL9QBP58JZC0A0k1u4fSn-rXbpaG52216P0l4ydM3c21L78uPPad73jY6ngd2tS-qu8Ec7jV_oxz8wK70fhBxYrffuWUGmuh-HfMyUsfUJSPQzGuCOW HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:36 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 14159 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:30 GMT Expires: Tue, 28 May 2024 21:11:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 5526 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:36 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a9 00 00 02 00 08 06 00 00 00 38 d7 93 e0 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ed dd 77 80 5c 65 bd 3e f0 e7 fb be 67 66 93 2d 49 28 49 08 52 44 a5 08 84 90 82 a0 f4 d0 04 e9 78 b9 09 d5 7b 29 2a 96 ab 17 f5 fa 93 14 43 b1 5e 10 45 f4 8a 8a 17 84 04 bd 18 ba 90 dd 40 1a 3d 10 08 bd 28 82 4a 49 42 4b df 9d 73 de f7 fb fb 63 66 09 21 d9 64 77 33 b3 ef 39 67 9e 8f 12 20 99 9d 7d 42 76 e6 d9 b7 9c f7 00 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 Data Ascii: PNGIHDR8sBIT\|d IDATxw\e>gf-I(IRDx{)*C^E@=(JIBKscf!dw39g }BvDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: aa 0a 31 66 70 b1 10 fd 6b bf a4 b8 78 c9 d8 31 4f bf fe c9 5d ce 08 9d 8f ea 1b 47 52 44 35 b0 64 ec 98 b7 21 b2 59 56 8a 6a 7d 6c e5 da ad d8 fb e7 b4 a3 fd 9a ad ee 7b ea 07 a1 33 51 fd 61 49 11 d5 c0 92 b1 63 de 82 c8 e6 59 2e a9 4e 56 ca 6f 13 de fb 97 7c 69 f5 d5 43 ef 7d fa 92 c0 91 a8 8e b0 a4 88 6a 20 4f 25 d5 a9 73 64 95 a8 7f 4d 3b 4a 57 0d bd f7 89 29 a1 33 51 fe b1 a4 88 6a 20 8f 25 d5 c9 88 a0 20 82 0e e7 df 40 5c fa f5 90 79 0b 27 85 ce 44 f9 c5 8d 13 44 d4 23 5e 15 1d de c3 18 d9 ca 36 34 4c 5c 7c c8 98 27 5e df f3 c3 07 86 ce 45 f9 c4 92 22 a2 5e f1 aa 70 aa 88 c4 0c b7 5b 0c 9e b9 e8 80 51 d3 42 67 a2 fc 61 49 11 d1 26 49 54 21 40 d4 d0 50 18 b7 78 ec 98 b7 16 ef 3f fc 9b a1 33 51 7e b0 a4 88 68 93 29 80 92 f7 30 c6 6c 1e 35 f4 ff d1 e2 Data Ascii: 1fpkx1O]GRD5d!YVj}l{3QaIcY.NVo\|iC}j O%sdM;JW)3Qj % @\y'DD#^64L\\|'^E"^p[QBgaI&IT!@Px?3Q~h)0l5
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: be 7b 1c 13 3a 0b ad 1f 4b 8a 88 ea 9e 2b 46 c7 85 ce 40 eb c7 92 22 a2 ba e6 15 80 98 31 a1 73 d0 fa b1 a4 88 a8 ae 79 55 08 64 07 fc 91 d7 4b a5 11 4b 8a 88 ea 9a 02 80 60 c0 1b 57 8c 3c 3b 74 16 5a 17 4b 8a 88 ea 5e 24 02 13 99 43 43 e7 a0 75 b1 a4 88 88 00 28 cc 36 a1 33 d0 ba 58 52 44 54 f7 3c 00 23 18 16 3a 07 ad 8b 25 45 44 75 4f cb b7 ee d8 f2 9d e3 0e 1c 14 3a 0b ad 8d 25 45 44 04 40 44 8b c9 db 6f ed 1b 3a 07 ad 8d 25 45 44 75 af bc f9 5c fa 39 89 46 04 8e 42 1f 10 85 0e 40 44 94 06 91 11 a8 18 9e e3 97 32 1c 49 11 11 01 50 05 60 cc 87 42 e7 a0 b5 b1 a4 88 88 d0 79 51 af 7c 38 6c 0a fa 20 96 14 11 11 00 85 42 44 b7 0c 9d 83 d6 c6 92 22 22 42 79 ba cf 43 9a df da 6f d7 5d 43 67 a1 35 58 52 44 44 15 02 f4 2b 25 d1 76 a1 73 d0 1a dc dd 97 22 3a 1d Data Ascii: {:K+F@"1syUdKK`W<;tZK^$CCu(63XRDT<#:%EDuO:%ED@Do:%EDu\9FB@D2IP`ByQ\|8l BD""ByCo]Cg5XRDD+%vs":
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 5d 1a 3a 07 ad 91 ab 92 8a 5b cd 57 65 60 74 5f 64 cd ee 9c da cb 87 f2 c6 0a 0c f5 26 ba 36 69 b5 57 84 ce 43 f9 55 b9 0f 69 a2 de b3 a4 52 24 37 25 15 b7 da eb c5 9a 9f 1a 8b 81 1c 3d e5 8b 2b 1f 62 1b d9 82 7c b9 d4 6a ee 0d 9d 87 72 4c b1 2a 6a 68 79 2e 74 0c 5a 23 f3 25 d5 71 1b 76 49 66 da 67 a3 06 39 05 e0 da 53 5e 75 ae 55 15 8a 66 df b8 2d 7a b3 74 97 e1 f4 1f 55 95 88 00 a2 cb b7 98 f3 f0 3f 43 67 a1 35 32 5d 52 ee 2e f3 1f a6 bf 9d 6f ad ec c2 e9 bd fa 50 99 fe db 42 22 73 5d a9 cd 5e 19 3a 0f e5 87 00 80 f2 e6 9d 69 93 d9 92 8a db ec f5 3e 32 97 1b 23 cd 9c de ab 2f 95 e9 3f 53 88 e4 bc 64 a6 e5 f4 1f 55 85 00 50 d5 97 43 e7 a0 b5 65 b2 a4 e2 36 d3 1a 15 e4 14 11 4e ef d5 ab f7 b6 aa 47 b2 6f 3c d3 72 0d 81 36 99 08 60 54 5f 0b 9d 83 d6 96 b9 Data Ascii: ]:[We`t_d&6iWCUiR$7%=+b\|jrL*jhy.tZ#%qvIfg9S^uUf-ztU?Cg52]R.oPB"s]^:i>2#/?SdUPCe6NGo<r6`T_
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: b1 ff 57 42 67 a1 9e ab 7a 49 b9 99 e6 f3 36 32 1f e7 28 8a f2 c0 2b 10 15 64 40 d2 66 7f 1b 3a 0b f5 4e 24 02 28 5a 9b 66 cc 7b 3d 74 16 ea b9 aa 97 94 07 be cc 11 14 e5 89 4f 00 35 38 3e 74 0e ea b9 f2 5a 94 ae d6 d5 2b 7f 1a 3a 0b f5 4e 55 4b aa 74 17 4e 17 31 bb 7b 8e a2 28 47 bc 02 91 91 cd 93 36 e1 01 b4 19 63 45 a0 de df 3f f4 81 67 ee 0e 9d 85 7a a7 aa 25 65 22 f3 1f d6 70 2d 8a f2 c7 2b a0 62 4e 0c 9d 83 ba af b2 a3 af dd ad 5e 79 51 e8 2c d4 7b 55 2b a9 d2 9d 38 53 61 46 f2 c2 5d ca 23 ef 81 c8 ca d0 52 9b fc 2c 74 16 ea 9e c8 08 d4 fb a9 c3 1e 7c 6e 4e e8 2c d4 7b 55 2b 29 53 30 e7 46 96 37 33 a4 fc f2 0a 88 18 de 18 31 03 ac 08 62 ef 5f 1d 3a 6b c1 59 a1 b3 d0 a6 a9 4a 49 25 33 ed d1 0a b3 37 47 51 94 67 be 7c cf a9 6d e2 56 33 29 74 16 da 30 Data Ascii: WBgzI62(+d@f:N$(Zf{=tO58>tZ+:NUKtN1{(G6cE?gz%e"p-+bN^yQ,{U+8SaF]#R,t\|nN,{U+)S0F731b_:kYJI%37GQg\|mV3)t0
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: a4 88 36 4e 00 18 8f 41 fc 8e 0e b0 22 50 28 e2 52 32 6d c8 9c 05 a7 84 ce 43 d9 d4 cd ee 31 dc b1 44 d4 4d 22 3a 00 75 3c dd 27 a8 9c 1e a1 fe d5 a4 d4 f1 35 16 14 6d 8a 6e 8d a4 54 dd 20 80 57 f2 12 75 87 f7 a6 08 d3 9b 1b 8a 66 5f 79 6b b9 6a a9 14 5f 3b 74 ce 63 9f 0b 9d 87 b2 af 7b 5b d0 c5 0c a8 71 0e a2 5c 50 00 a2 be 3f 8c 9a f2 98 a2 3e 74 ee dc 8b 9d 7f 6c e8 3d f3 47 71 ff 3d 55 4b b7 be db 13 f1 83 6a 1d 84 28 37 54 1a 20 f5 31 92 ea 3c 77 cf 7b 7d 23 e9 68 ff ce d0 59 8f b0 a0 a8 aa ba 79 31 2f af a2 27 ea 96 f2 f9 7d fd 61 f3 5d 52 82 f2 c6 88 44 d5 c7 71 32 7d c8 6c 9e bb 47 b5 d1 bd 17 92 a0 b1 c6 39 88 72 41 01 40 b5 51 22 cd e5 22 6e e7 89 11 00 e0 9c 7b 20 79 77 e9 81 83 59 50 54 43 dd 1a 49 09 50 a8 75 10 a2 bc 50 95 fe 30 6a 2b 77 eb Data Ascii: 6NA"P(R2mC1DM":u<'5mnT Wuf_ykj_;tc{[q\P?>tl=Gq=UKj(7T 1<w{}#hYy1/'}a]RDq2}lG9rA@Q""n{ ywYPTCIPuP0j+w
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: ac ab 5f 65 49 51 50 1f f9 df 43 0f 19 d8 d0 f2 ff ac 98 03 24 32 05 75 1e 9a e4 a1 98 78 75 07 51 0f 74 79 81 3c 4b 8a 82 d8 e9 da 43 f7 6b 29 0e f8 be 40 f6 11 6b 22 f5 f9 29 27 45 e2 55 d1 2e 90 46 6e ea 20 ea 06 91 2e ef 69 c6 92 a2 3e b5 d3 35 87 1f d9 5c 6c 9e 62 ad d9 0b 82 7c 4e e9 49 e2 20 b2 42 14 8d ac 28 a2 8d 11 a0 7c 2f ce f5 62 49 51 9f d8 e1 d7 63 f7 d8 ac 65 d0 2f ac 31 fb 42 50 b9 9e 29 a7 c4 7b 40 56 41 78 3e 39 51 77 a8 d3 b7 bb fa 35 96 14 d5 dc c8 a9 c7 fd d2 4a 74 a6 58 d3 3f 77 a3 a6 0f 12 01 34 f1 0a 59 19 3a 0a 51 26 88 c0 8b 76 f9 7a 61 49 51 cd ec 76 ed a7 c7 35 14 1a 7f 64 23 bb ad 7a 9f bf 69 bd 2e 28 54 45 b1 8a 9b 27 88 36 4e 00 08 e4 9d ae 7e 9d 25 45 55 f7 91 6b 0f 1b 32 a8 d0 3c 35 8a a2 43 ca 47 15 d5 47 39 bd 47 9c 17 Data Ascii: _eIQPC$2uxuQty<KCk)@k")'EU.Fn .i>5\lb\|NI B(\|/bIQce/1BP){@VAx>9Qw5JtX?w4Y:Q&vzaIQv5d#zi.(TE'6N~%EUk2<5CGG9G
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 54 f4 be 5e 7d 68 b5 b3 50 3a f4 6f 28 4e e2 76 f3 74 f2 de dc 13 3a 03 51 9f f2 0e a5 0e ff 9b de 7c 28 4b 2a 87 46 4c 3d f6 7b c6 98 e1 9c e6 4b a7 cd 86 37 5e a8 de ad e6 94 1f d5 03 11 0b 55 ff f2 fd 17 0e b8 a3 37 1f cf 92 ca 99 59 07 2a 0a a6 70 1e 37 f3 a5 d7 cd 27 c8 5b 0e b8 47 4c 14 3a 0a 51 ed 89 c0 25 fe 0f bd fd 70 96 54 ce 9c ff c5 13 ee 90 c8 0c e4 0d 0c d3 ae 38 41 5d ec c0 43 67 29 c7 44 0c d4 27 af ce 9e 3c e0 db bd 7d 0e 96 54 8e 0c bf ee b8 cf 1a d8 23 35 e1 66 89 b4 9b 73 41 f1 71 55 9d 27 96 a3 29 ca 31 11 24 0e b7 6d ca b7 62 2c a9 1c 29 5a fb 3d 31 5c e8 c8 8a 52 ac 3f 51 17 c7 5c 9b a2 3c 12 31 f0 ce bf 39 77 52 f3 17 37 e5 79 58 52 39 31 72 da 71 97 1a 6b 76 e4 66 89 ec b8 6f ca 80 5b d5 e3 61 11 5e dc 4b f9 23 26 82 03 6e dc d4 Data Ascii: T^}hP:o(Nvt:Q\|(KFL={K7^U7Yp7'[GL:Q%pT8A]Cg)D'<}T#5fsAqU')1$mb,)Z=1\R?Q\<19wR7yXR91rqkvfo[a^K#&n
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: d0 9f db cf a9 a7 66 4f 68 39 2c 89 e3 9b c5 18 5e f0 4b eb 55 3e 5a 4b 9d 4b f4 c7 73 27 36 7d 21 74 9e ae b0 a4 d2 cc db 3d 01 69 64 47 51 6f cc 9e d8 7c 42 12 bb ab a5 72 7a 35 51 27 11 03 85 77 49 8c f3 e7 4c 6e f9 56 e8 3c 1b c2 92 4a b1 42 c1 ee 24 11 8f bc a6 de 9b 33 a9 f9 ac 52 29 f9 5e f9 04 25 be dc a9 7c 16 9f aa 5f 19 77 e0 b4 b9 93 9b 7f 1a 3a cf c6 f0 ab 36 c5 ac 9a ed 42 67 a0 ec 9b f7 dd 01 17 94 12 f7 0d 55 df c1 d3 29 ea 9b d8 02 bc f3 8b 57 ac 76 27 ce 9b d2 7c 43 e8 3c dd c1 92 4a 33 23 1f e5 ce 3e aa 86 7b 27 0f b8 74 65 3b 3e e7 bd 7b 8d 17 fd d6 23 81 b1 45 f8 38 5e b8 4c 56 ed f9 f0 c5 03 83 9d c5 d7 53 9c 4a 4a 31 23 b2 0d d7 a3 a8 5a 1e ba a8 f9 06 00 37 1c 74 c9 ca b9 51 d4 b0 bf 77 25 f0 9b a0 fc eb 9c e6 8d e3 8e a9 73 26 b6 Data Ascii: fOh9,^KU>ZKKs'6}!t=idGQo\|Brz5Q'wILnV<JB$3R)^%\|_w:6BgU)Wv'\|C<J3#>{'te;>{#E8^LVSJJ1#Z7tQw%s&
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 03 f3 57 75 b8 e7 1e bd 64 e0 b4 de fd ae 69 63 58 52 29 a5 a2 ef f2 36 09 54 cf 1e ba a8 e5 aa f5 fd fc fe 17 eb b6 de ad 1a 67 05 fb 5a 6b 07 09 f0 21 00 43 15 da 04 bc f7 aa 11 94 a7 22 a4 73 2a 0e 62 ca 3f a5 0a 54 46 67 aa 0a 88 6a a5 cb d6 4c 30 aa 2e 85 97 d7 3c b0 d8 79 bf 48 12 33 73 ce 94 a6 df f2 d8 c2 be c7 92 4a 29 9f b8 65 5a e4 64 1f d1 07 cd 9b 20 ff 00 f0 e3 ca 5f eb a5 00 f6 9b bc 7a bb 92 2b ed 6a 8c 6e 6b 04 43 45 30 cc 18 e9 e7 9d 2e 87 e2 f5 44 cc eb 2e 89 ff de 3c b0 f8 dc 9c 6f 35 bd b1 b1 cf 2b 17 56 f1 37 41 dd c6 92 4a ab 7e c5 37 7c e2 bc 80 f7 47 20 ea 29 01 80 29 fd ff 0e e0 ef 81 a3 d0 26 e2 1b 60 4a 3d 7d f2 2d cf 40 b1 94 b7 45 20 a2 7a c6 92 4a a9 72 35 c9 32 76 14 11 d5 33 96 54 9a 89 be 1e 3a 02 11 51 48 2c a9 54 d3 bf Data Ascii: WudicXR)6TgZk!C"s*b?TFgjL0.<yH3sJ)eZd _z+jnkCE0.D.<o5+V7AJ~7\|G ))&`J=}-@E zJr52v3T:QH,T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50140	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:35 UTC	792	OUT	GET /uY0DBQik6UA-8r3u940KST-4No0y-XK9SdLkA8cirg9XMg5hw43uvY04aMt_suipYETIU-g7GYZ12T1nUvefZBSpugr9xlvkvVb9L6p5EibJwYIX2A HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:36 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 67119 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:30 GMT Expires: Tue, 28 May 2024 21:11:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 5526 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:36 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 3a 00 00 02 00 08 06 00 00 00 12 4b a0 0a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec bd 79 b8 5d 47 71 2f fa 5b 7b 9e 8e ce d1 68 1d 6b 96 2c 4b 96 b0 85 21 c6 06 e7 9a 19 87 84 c1 f9 c2 10 42 6c 20 0c 06 0c 2f 0c 8f 24 dc 7c ef dd 7b 93 4b 48 78 21 04 c8 0d 81 e0 00 31 c4 10 08 43 12 93 60 46 db 60 ec 00 b6 f1 20 cb 92 2d cb 1a 91 65 49 67 d8 f3 b4 de 1f e7 d4 52 ed da 55 dd 6b 4b b2 b1 61 d5 f7 ed 6f af d5 ab 87 ea ee ea 5f 55 75 f7 ea 05 24 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 Data Ascii: PNGIHDR:KsBIT\|d IDATxy]Gq/[{hk,K!Bl /$\|{KHx!1C`F` -eIgRUkKao_Uu$PB%PB%PB%PB%PB%PB%PB%PB%PB%PB%PB%PB%PB%PB%PB
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 61 18 6e 0c c3 f0 ec 20 08 96 00 28 05 41 30 11 86 e1 44 3e 9f 0f 38 20 59 ff 1c 84 38 28 3d d1 5d 46 09 7e 74 af 01 22 85 d3 7d af d7 43 b7 db ad 07 41 70 3c 0c c3 6a bf df af a6 52 a9 bd 41 10 ec e8 f7 fb 7b db ed f6 fe 33 cf 3c f3 e6 f1 f1 f1 63 8f 6d ad 12 3a 15 7a 62 4b f4 2f 30 ed da b5 eb 65 00 b6 a4 d3 e9 33 01 6c 0a c3 70 4d 10 04 45 00 e3 99 4c a6 98 4e a7 d1 ef f7 01 9c 00 2f ba 97 24 07 fe 13 8d 88 f7 53 b5 0e 47 a1 54 2a 35 50 3e f1 d0 6e b7 fb 98 b3 0a 6b fd 7e ff 38 80 9d 00 1e ec f7 fb fb 83 20 b8 e9 ac b3 ce ba ed 31 63 32 a1 d8 f4 c4 95 fe 5f 10 6a 34 1a ab f7 ee dd fb ea 4c 26 b3 31 0c c3 b5 41 10 9c 1d 04 41 25 08 82 52 26 93 c9 02 c3 d6 d7 fc a4 3e e8 99 06 62 8f 07 70 73 b9 ae a7 c3 ad 7d ac c8 72 8f b9 35 d8 ed 76 11 86 61 2d 0c c3 Data Ascii: an (A0D>8 Y8(=]F~t"}CAp<jRA{3<cm:zbK/0e3lpMELN/$SGT*5P>nk~8 1c2_j4L&1AA%R&>bps}r5va-
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 92 16 d8 d2 35 b9 bd bd 5e 0f 9d 4e 67 00 fc a8 fd 00 a0 d7 eb 1d eb f7 fb df 4d a5 52 7f 75 d6 59 67 fd 52 b8 b6 bf f0 40 77 df 7d f7 bd 2b 08 82 df 0b 82 60 2b b7 de 32 99 0c b2 d9 2c 72 b9 5c 24 b0 73 42 33 e7 9a 10 0d 82 16 dd db 2b 6f 1a 90 91 20 f6 7a 3d b4 db 6d 34 1a 0d 34 1a 0d 34 9b 4d d4 6a 35 d4 eb 75 54 ab 55 cc ce ce 62 76 76 16 33 33 33 a8 56 ab a8 56 ab a8 d5 6a 68 36 9b a8 d7 eb 68 b5 5a 03 69 1b 8d 06 6a f5 3a 66 a6 a7 d1 6e b7 4f ba 8d 08 24 72 b9 dc 10 c0 58 8b 25 54 2f 6b 40 d2 4f 9b a7 73 59 8f 14 9f bf 3d 42 03 5a 4e 2b c8 d5 ef f9 f7 4d 01 20 b2 74 c2 30 a4 c9 fa 93 6e 9b 4a a5 82 72 b9 8c 52 a9 84 72 b9 8c 42 a1 10 fd 8a c5 22 8a c5 22 4a a5 12 2a 95 0a 2a 95 0a c6 c6 c6 b0 60 c1 02 54 2a 63 a8 54 ca a8 54 2a 51 9c 62 b1 88 42 a1 Data Ascii: 5^NgMRuYgR@w}+`+2,r\$sB3+o z=m444Mj5uTUbvv333VVjh6hZij:fnO$rX%T/k@OsY=BZN+M t0nJrRrB""J*`TcTT*QbB
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: a2 82 36 1f 42 20 d4 68 34 b0 6b d7 2e dc 7a eb ad f8 d6 b7 be 85 ef 7d ef 7b 08 c3 10 ab 57 af 8e 2c c2 74 3a 1d 81 27 5f b8 e0 79 6a 16 a1 c5 83 66 cd 68 82 4d 82 48 f9 75 bb dd c8 9d e0 71 e3 ba 45 da 3f 2f db 35 07 e6 02 1a 97 65 06 9c b0 62 e3 b8 7f 94 1f 81 9c b4 62 79 1e 71 81 d3 d7 3e c3 2e f1 e0 33 b3 5e 22 2e 6d 4b e2 c0 c6 ad 31 4d c9 69 75 e7 d7 d2 fa 92 5b 6a 78 fd 49 46 68 55 b5 d3 e9 cc 59 64 ed 36 0e 1d 3c 88 76 bb 8d 8b 2e ba 08 cf 79 ce 73 70 f1 c5 17 63 d3 a6 4d 58 b0 60 01 c2 30 34 37 bc 4b 7e c8 8d 9e df 09 f0 93 ad 5b b7 fe 8a b3 71 1f 87 f4 84 02 ba bb ee ba eb ea 7c 3e ff 7b 8b 16 2d 8a 56 26 e5 bb 82 5c c0 b8 d6 6b 34 1a b8 ff fe fb 71 c3 0d 37 e0 7d ef 7b 1f 80 b9 09 df f1 f1 f1 68 a1 a2 58 2c 0e 2c 5a 70 30 eb 87 21 42 63 3f 19 Data Ascii: 6B h4k.z}{W,t:'_yjfhMHuqE?/5ebbyq>.3^".mK1Miu[jxIFhUYd6<v.yspcMX`047K~[q\|>{-V&\k4q7}{hX,,Zp0!Bc?
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: cb 5f 3c 0f c3 10 d5 6a 15 ed 76 3b 12 50 ce 03 e5 cb 49 ae 2e 4b ab 50 92 f6 4c b3 ce a4 45 a3 dd 4b eb 93 bb 80 be 32 2d 90 03 30 d0 67 32 4d b7 db 45 a1 50 40 a9 54 02 80 81 c3 0d f8 14 06 e5 e3 52 76 2e 30 b5 78 75 d5 cd 65 e9 59 60 23 2d 7f be 70 a1 59 7b d4 df b4 d1 bd d9 6c 62 76 76 16 dd 6e 17 f5 7a 1d 7b f6 ec c1 3b df f9 4e fc ce ef fc 0e 26 27 27 07 56 99 e5 c2 05 fd 8e 1e 3d ba ff b6 db 6e 7b d9 65 97 5d 76 ab d9 08 8f 31 3d 6e 80 ee ee bb ef 7e e7 a2 45 8b de 3f 31 31 91 d7 c0 86 9f c8 30 33 33 83 eb af bf 1e ef 78 c7 3b b0 72 e5 ca e8 15 2b 7a f1 5a 03 37 cd 4a 93 3f 60 78 ce 85 87 13 b9 84 d9 b2 36 5c 96 9c 8c e3 02 3d 97 90 73 c0 e3 73 2c bd 5e 0f d5 6a 15 bd 5e 2f da 6b c8 f3 f3 f1 a8 01 b7 b4 04 35 10 d1 e2 84 f3 ab 9d a7 42 12 28 7c e0 Data Ascii: _<jv;PI.KPLEK2-0g2MEP@TRv.0xueY`#-pY{lbvvnz{;N&''V=n{e]v1=n~E?11033x;r+zZ7J?`x6\=ss,^j^/k5B(\|
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 1b 36 6c 18 3a dc 96 83 5d b5 5a 0d 0f 1d 3a f4 8e 6d db b6 7d 44 6d 84 47 89 1e 53 a0 bb e5 96 5b 7e 7b fd fa f5 9f ad 54 2a 69 09 72 64 c5 35 9b 4d dc 7a eb ad 78 fd eb 5f 8f b3 ce da 88 7e ff c4 ea 18 09 b8 b6 78 a0 59 71 da 73 40 7f 2f 55 4e 5a 53 3c 8b e4 c0 d6 04 d3 02 01 9f d0 ca 7c 78 1c 5f de fc df b5 af 8a 7f c5 2c 9b cd 46 82 4b 1b 65 e5 20 b2 78 d3 ea 2e e3 ba da 4f 82 80 8c 23 ff b9 92 d0 c0 05 40 b4 3a 3f 36 36 16 4d 8a 93 4c 70 4b 8e cb 86 f6 45 2d cd aa 73 29 bb 38 0a d1 ca 47 5a ae 27 4b dc f2 a2 7b fa b7 c0 8b a7 b1 5c 5a 4d 79 f6 fb 7d cc ce ce a2 d7 eb 21 9d 4e e3 be fb ee c3 c7 3f fe 71 5c 7c f1 c5 c8 e7 f3 28 16 8b 03 72 06 cc 2d 78 34 1a 0d 1c 3c 78 f0 0f ce 3b ef bc ff ef a4 2b 3a 22 a5 1f ab 82 ee b8 e3 8e d7 ad 5a b5 ea ea b1 b1 Data Ascii: 6l:]Z:m}DmGS[~{T*ird5Mzx_~xYqs@/UNZS<\|x_,FKe x.O#@:?66MLpKE-s)8GZ'K{\ZMy}!N?q\\|(r-x4<x;+:"Z
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 5a e7 94 87 d6 c7 96 f5 a5 59 eb 9a 05 2b c1 58 b3 ea b5 70 5b 16 02 00 c3 87 44 50 1c 17 e0 59 56 1e bf 27 cb 2e 97 cb a1 56 ab e1 b2 cb 2e c3 e5 97 5f 3e 04 76 94 7f 2e 97 c3 a1 43 87 6e 58 b7 6e dd b3 d4 4e 38 45 7a 54 e6 e8 76 ec d8 f1 fe c9 c9 c9 d7 f0 3d 4a fd 7e 1f ed 76 1b b5 5a 0d d5 6a 15 5f fe f2 97 f1 f9 cf 7f 1e 63 63 63 68 b7 db 28 97 cb 91 bb ca d3 58 ae 87 bc a6 34 12 e0 a4 5b a2 5d 6b 96 1b a0 cf c1 48 8b 46 5d 59 9d 4b 81 20 18 9c a7 b3 34 aa 2c 33 ce 9c 98 65 21 fa e2 c9 30 2d 1d e5 c7 db 93 0e 03 a8 56 ab 43 df 47 70 01 b9 6c 37 ea 0f 9f 15 44 4f 65 5f 35 1a 0d 34 1a 0d 94 cb 65 64 b3 d9 e8 3d 68 0b e4 64 3d 46 05 39 ab dd 00 f7 3c 9b 5a 27 a5 ff 65 fe c3 d6 eb 60 9e d2 6b 38 59 a2 2c 35 00 96 61 b2 4e 96 85 cd db 96 3c 83 46 a3 81 4a Data Ascii: ZY+Xp[DPYV'.V._>v.CnXnN8EzTv=J~vZj_ccch(X4[]kHF]YK 4,3e!0-VCGpl7DOe_54ed=hd=F9<Z'e`k8Y,5aN<FJ
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 74 e9 ff 00 f0 19 b3 43 46 a0 d3 02 74 bb 76 ed fa 3f e3 e3 e3 eb e4 a6 e0 66 b3 89 5a ad 86 87 1e 7a 08 9f fb dc e7 30 31 31 81 d9 d9 d9 e8 c0 47 b9 62 0a 9c 68 5c 0a b3 2c b7 53 5d 49 d3 40 c9 b2 f4 64 b8 45 da 3c 98 06 74 be c1 a4 69 52 0d b8 b8 60 52 1a 6b d0 bb da 82 f3 a4 6d 01 91 79 f0 b2 24 38 a7 52 a9 c8 2a ab d5 6a ea b6 04 4b 81 f1 3c 88 b4 f9 58 c9 0b 0f d3 14 04 57 02 1c 2c 25 b9 14 95 76 cf 15 03 7f 66 01 13 e7 4f ca d6 dc b5 7f fb 8d cb c2 e2 e1 3e d9 d7 d2 49 92 f9 c8 3d 7d 03 8a 51 28 3f 02 37 2e 2b 04 68 b5 5a 0d 0b 17 2e c4 e7 bf f0 05 ac 5e bd 3a fa 66 2e 3f f4 b3 db ed 62 7c 7c 7c dd ee dd bb 3f b2 7e fd fa ff cb c9 68 0c 3a 2d 6b d5 e3 e3 e3 6f 94 40 45 5b 49 a6 a7 a7 f1 9f ff f9 9f 68 34 1a 68 36 9b 08 c3 30 9a 50 d6 2c 34 eb ab 5c Data Ascii: tCFtv?fZz011Gbh\,S]I@dE<tiR`Rkmy$8R*jK<XW,%vfO>I=}Q(?7.+hZ.^:f.?b\|\|\|?~h:-ko@E[Ih4h60P,4\
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 30 4d f8 2d ad 1d 07 18 2d e1 1e c8 53 f0 c1 cb 97 6e 93 c6 87 56 77 4e 96 90 f3 b6 b3 06 83 0f 70 a4 92 e1 f9 04 81 3e 07 28 2d 09 8d 2f 99 bf f5 cc aa 93 d5 66 b2 5f 5d 80 63 f5 a3 15 a6 a5 95 71 2d 79 d1 56 cf 7d ca 59 2b d3 52 86 bc 4d 64 5f 6b 6d ea ea 6f 0d d4 e4 4f 9b 22 a1 72 5b ad 16 96 2d 5b 8a 1b 6f bc 31 5a 94 a0 ef 39 13 cd 7f 01 f0 39 66 03 78 e8 64 81 ee 8f 8a c5 62 99 33 4f ef b3 ce ce ce 62 f7 ee dd d8 b9 73 67 b4 19 94 3a 4d 6a 0a e0 c4 80 d0 ce 11 a3 78 03 bf b9 c0 28 3f 6b 60 4b 21 f1 4d 98 47 0d 22 5c 5b 4d 68 a4 90 f0 30 4b 83 5a f9 72 10 88 9e a9 9c 0e f2 ac 0d 82 38 83 d9 97 2f cf 5f 13 6e cd e2 a2 70 cd e2 93 6e 95 1c 5c 72 82 dd e2 81 c2 38 38 5a 6d a1 85 5b e0 ae a5 e1 7d 62 59 58 71 14 a8 06 86 3c bd 26 07 44 bc dd 7c 9e 83 cc Data Ascii: 0M--SnVwNp>(-/f_]cq-yV}Y+RMd_kmoO"r[-[o1Z99fxdb3Obsg:Mjx(?k`K!MG"\[Mh0KZr8/_npn\r88Zm[}bYXq<&D\|
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 95 65 80 9c 35 e8 e2 d6 8f df f3 6d 4c 5a 3f 58 72 16 28 79 fa ca b5 e4 46 2b 5f 56 4d b3 de 2d 05 48 e1 da 1c ba ac 93 9e df e8 63 98 5f 4b 1c 08 82 20 fa 06 48 2a 95 c2 fe fd fb a3 b9 7f b9 a7 6e 7e f5 75 db 10 83 0e 8a 0d 74 37 df 7c f3 a5 a5 52 69 c0 6d ed 76 bb 11 d0 d5 6a 35 dc 77 df 7d f3 ab ad 9d 01 a6 38 c8 0d 37 1e fd db 96 dc 89 b8 fe 55 37 7e af 59 94 52 eb 11 b9 00 23 8e 96 d4 c0 8e 5b 35 3e ad ce e3 70 80 95 f5 d1 d2 5b 61 be 81 ae 91 cb ba b2 04 97 bb 42 5c 70 ad f8 9c cf 38 61 56 7b 68 f1 4e 96 2c 05 72 e2 f8 f8 13 e5 6a 69 5d 7d a7 95 21 c3 ac 67 f2 37 58 e7 98 95 13 c4 79 b4 94 8d ec d3 38 79 5a 79 59 4a 95 03 1e 70 e2 38 af 7c 3e 8f 3d 7b f6 44 d8 c2 e7 e9 c2 70 6e cf 6d 2e 97 5b 3b 4a 9d 63 03 dd ea d5 ab 7f 8f 33 4a 6e 2b cd cf 4d 4f Data Ascii: e5mLZ?Xr(yF+_VM-Hc_K H*n~ut7\|Rimvj5w}87U7~YR#[5>p[aB\p8aV{hN,rji]}!g7Xy8yZyYJp8\|>={Dpnm.[;Jc3Jn+MO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50141	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:36 UTC	798	OUT	GET /4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi5QWrjpBGqtY9zgr06lOsx3KVezooiNyD8bzJwIHK2UC1bE-RE=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:36 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8005 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:38:04 GMT Expires: Tue, 28 May 2024 21:38:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 3932 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:36 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 4e 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 6f c9 23 ba 00 00 1e b2 49 44 41 54 78 9c ed 9d 79 ac 6c d9 55 de 7f 6b ef 73 6a bc 75 c7 37 bf d7 fd ba db 3d d8 71 db 31 10 70 9c 8e b1 b1 49 44 e2 c4 0e 60 14 d1 8e 91 19 62 41 82 25 82 15 90 23 20 09 28 04 0c 0e 8a 44 42 42 24 12 1c 26 29 51 00 4b 24 20 11 3b 80 21 96 0d c6 0c b1 cd d0 4d db c6 ef f5 1b ee 54 f3 39 67 ef bd f2 c7 19 ea 54 dd db dd af af ef 6b 8b 52 7d 4f 47 b7 ea d4 a9 33 7d 7b ad f5 Data Ascii: PNGIHDRxx9d6NeXIfMM*>F(HHo#IDATxylUksju7=q1pID`bA%# (DBB$&)QK$ ;!MT9gTkR}OG3}{
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 67 72 3b c1 da 85 e1 a8 82 0f 11 4f b6 9f f8 e6 db 9b b7 e9 68 0b 54 08 56 d1 30 e5 e6 8d 1b 24 1b d3 57 f7 ce ed fc 03 db 8f 7f ca b7 dc 11 57 26 62 d0 49 06 a1 79 2a a7 fc bc a0 10 a9 41 5a 01 59 18 b8 82 20 59 60 6f f3 e0 e7 f6 dd 1e 83 83 01 21 53 82 53 34 c0 24 9b 70 23 bb 45 3c e4 cd 3d bd fa 1b 99 4c 8f ec de 27 9e d6 d9 1e 72 17 cc f8 d4 4c c2 18 61 3a 49 18 8d 26 c4 0d 3b f7 99 a8 90 7a cb 81 db df f6 cd 14 5a 2d a2 28 46 44 20 04 92 24 61 9c 8c 89 cf 34 fe 43 67 b7 fd b3 4c d4 6b 14 a8 fb 64 45 21 05 1a e6 05 75 d5 62 04 e7 20 d9 0f a8 86 b9 cf 14 88 d3 88 c9 e6 f0 6d fd 66 ff 25 93 c1 94 e0 3d 82 10 d9 18 2f 8e 90 39 d2 e1 84 f1 68 1c b9 96 27 d3 6c e1 00 82 cb 1c c1 83 59 f4 df a7 80 53 21 58 15 10 e8 b5 ba 68 b3 41 dc b4 73 06 28 08 1d e9 f0 Data Ascii: gr;OhTV0$WW&bIy*AZY Y`o!SS4$p#E<=L'rLa:I&;zZ-(FD $a4CgLkdE!ub mf%=/9h'lYS!XhAs(
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 89 aa 1e e7 33 0e 6f 1f f2 8a f8 af bc 6b 6b 6b 67 74 e0 f6 91 68 46 a0 88 e0 33 a5 75 d9 60 5b e0 46 9a 5f d3 5d c2 5d a9 fd 05 0f b6 25 6c 5e 6a 72 fd 89 3e 78 87 d4 2e c2 69 ca 7a b4 ce 7d e3 07 be e9 a3 bb 1f f9 a5 ac 9b 61 ac c5 aa c5 1a 4b 20 57 a2 2e cb 98 74 27 5f 1b e0 dd 9b c3 8d 8f 59 63 51 09 a8 d5 87 c2 9a 7b 5d da 08 af 0d ed e4 95 a1 a1 f7 6b ac f9 d5 18 f2 98 8e e4 93 07 f9 5b 44 aa f4 b9 03 ba a9 70 29 00 aa 69 5e 8a 74 20 0e 4c 6a f6 6c 6a 3e 2a 89 fd 75 3b 35 ef 97 89 fc a6 4c c1 34 0d 0d 84 dd f3 a3 1f 9b b4 13 b2 83 b4 10 96 16 10 bc e6 82 71 30 e9 d3 1b ae df 38 d3 dc fa a1 eb a3 6b b8 50 93 fb 02 6e ec 68 6f 77 58 bb d4 c3 4f ef 9e 6b 2e 71 57 08 16 01 9f 2a 9d ad 06 71 47 e9 df 1a d1 ec c4 94 fe 4f 81 3d 4d b8 64 2e fc cf 6b 93 0b Data Ascii: 3okkkgthF3u`[F_]]%l^jr>x.iz}aK W.t'_YcQ{]k[Dp)i^t Ljlj>u;5L4q08kPnhowXOk.qWqGO=Md.k
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: ff 38 6d a5 58 89 68 da 88 d8 c6 58 1b 11 9b 88 46 e1 8e 05 53 29 5d a5 c8 59 6b 04 87 c2 7e 73 eb a5 46 7c ee b8 4b 68 19 98 a1 12 60 25 cd a6 70 ce 55 fe ac be 96 66 cd 94 79 b9 5d be 8b 3c 46 47 92 f7 67 a5 65 aa 6b 05 51 48 9a 19 fb db 07 ff ba 27 6b 2f 6b f5 5b 6f 91 70 37 ba ad ee 0c a7 4a b0 3c d3 3c bc e4 05 ff 86 8f 98 b6 c7 df 3f 6a 1f bc 2b 89 1d 16 4b a3 24 d7 e4 e4 c6 26 ca 63 1f 52 59 6c 9e c2 e4 74 06 42 41 72 41 6f e9 9a 55 51 a9 59 af 32 eb c0 28 c4 d6 4c 61 17 b3 44 d5 e9 cd 08 15 a8 91 6a 8a 98 2b c5 ba 9c f0 f2 5b 06 21 12 4b 30 c5 f1 54 50 ab f8 10 48 c5 71 b0 79 f0 f8 9a 5d 7b 60 63 b0 fe 37 14 86 77 3e bb 71 7a 38 b5 96 1d 55 aa bc 73 ee 33 c0 22 58 13 93 46 07 ff e9 b0 73 f8 4d de f8 22 77 cd 53 1f 53 15 2c 4c 75 db bd 86 5a 8c 2d Data Ascii: 8mXhXFS)]Yk~sF\|Kh`%pUfy]<FGgekQH'k/k[op7J<<?j+K$&cRYltBArAoUQY2(LaDj+[!K0TPHqy]{`c7w>qz8Us3"XFsM"wSS,LuZ-
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 64 03 67 ce 9f e1 f7 7e ea f7 f8 e0 4f 7e 90 d4 a7 f9 bd 30 96 9d 97 9e e5 0d ef 7c 03 eb db 3d 46 bb 23 54 a8 aa 6a e5 64 88 56 5a 22 3f cc 6d d9 ed 36 43 e3 a7 7b 93 ad 37 3b 4d 8f bf d1 9f 23 4e de 55 69 9b 73 8b 98 16 d8 a6 b9 dd da ff d9 81 8c 8a c2 44 a1 80 2b 79 54 54 a1 0a e1 a4 a2 48 c7 f2 8b 3f f0 8b c8 ef 78 de f2 d5 8f cf 1d e2 63 1f f8 18 1f fc b1 0f b2 7e 66 9d 50 14 ee 35 84 59 ab 4d d0 da cd 9b cd 1c cd 92 ad 82 af b2 c4 99 27 ca b5 ed 99 ff 6e 2d be 97 71 3f 5f 14 ef 03 9b 97 36 f8 d3 5f fd 13 de ff 13 ef af c8 05 f8 ca bf fb 95 bc 6a eb 4b f8 f9 77 fd 0f 0e f7 fb d8 4e 44 f0 7e 46 6a a9 21 8a f3 f0 ea 71 ea 49 34 63 d7 ec 7e b5 9a e4 75 4d 63 b0 26 10 19 ad 96 d3 c0 89 09 76 41 6a 0b 48 88 e9 4b f2 ee 5b 1c f6 72 81 14 66 84 86 d9 0d 0c Data Ascii: dg~O~0\|=F#TjdVZ"?m6C{7;M#NUisD+yTTH?xc~fP5YM'n-q?_6_jKwND~Fj!qI4c~uMc&vAjHK[rf
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 78 e1 fc c0 0d 1e 4b d5 e5 13 06 28 aa b3 b2 a4 68 40 55 08 85 55 18 9d 2f 1b a6 d3 94 38 44 bc f4 4d 8f 72 df ab ef c3 4d 3c ed 8d 16 ad cd 16 93 dd 09 64 4a 14 47 05 89 c5 dc 6b c1 eb b3 a2 24 e5 39 b6 13 65 8e 62 39 62 8f b3 1d 96 d6 6d 63 83 4f 02 e3 5b 43 1e 78 ed fd 5c 79 e5 65 46 b7 47 88 81 b5 f3 eb 90 c0 f8 60 3c 23 57 29 72 f3 c2 72 4b 91 55 c5 94 19 e9 1e 38 74 7d 86 0c bf a6 6b 3a ff fe 39 ae f2 8e 70 f2 18 1c 79 c6 32 7c 53 df 0f 2a b7 93 df ae d2 9d 2e 8c d4 39 f7 34 13 1a 2e 73 4c 6f 4f 68 c5 2d 7a db 5d 4c 10 26 37 27 f9 33 bf b6 36 4b f5 4c 6e 57 e6 fb 99 ab c9 01 99 5b 03 73 4b b9 cb c5 11 f0 2c 23 a2 76 68 63 0d d6 5a a6 bb 13 34 51 7a 3b 3d d6 36 7b b8 be 23 1d 25 f9 64 88 6a 45 66 d5 f1 59 13 6c d4 2c bb 74 dd 21 04 26 7e c2 58 d3 af Data Ascii: xK(h@UU/8DMrM<dJGk$9eb9bmcO[Cx\yeFG`<#W)rrKU8t}k:9py2\|S*.94.sLoOh-z]L&7'36KLnW[sK,#vhcZ4Qz;=6{#%djEfYl,t!&~X
2024-05-27 22:43:36 UTC	196	IN	Data Raw: 1e ac 69 af 6f 83 f4 63 d3 38 88 a5 b9 6f 91 5d 1b db 5b 9d 6e e7 c6 f6 fa e6 f5 5e 7b 7b dc 68 35 98 ba 53 09 c1 c8 11 f1 b1 c2 52 61 f5 ff 26 2d 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 fe 3f 02 63 bc e3 05 dd c3 54 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ioc8o][n^{{h5SRa&-9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9?cTIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50142	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:36 UTC	785	OUT	GET /3Vr1H8EL1F2w2g35zmQkqnbbqfM8e28GxuaTXxkovnYV7ldiiKJVqlnFRlIOfurcfZ7XDVJIJ5ET51yXw8_fJkXIzakq30XzVzI6Og=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:36 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8164 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:40:48 GMT Expires: Tue, 28 May 2024 21:40:48 GMT Cache-Control: public, max-age=86400, no-transform Age: 3768 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:36 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1f 9b 49 44 41 54 78 9c ed 7d 77 98 5c c5 95 ef af ea 76 9a d1 04 85 91 34 8a 23 66 94 23 41 48 20 19 50 40 20 50 20 08 11 24 a2 08 0e 2c 19 0c c6 f6 c3 e1 2d 7e d6 be 5d 7b 0d d8 fe 76 bd f6 67 ef c2 87 0d cf cb 12 fc 6c 16 bc 20 2c 64 82 4c f2 1a 83 04 42 42 59 13 3a dc ee 9b aa ea bc 3f 6e df 99 9e 9e ce d3 3d 3d a3 c7 4f 5f 33 76 df db 55 a7 ee af eb d4 39 a7 ce a9 06 3e c3 71 0d 56 6d 01 06 0a 77 bd 63 6b 87 63 09 3e 6e 44 2d 26 d5 f9 e4 6d 2d 5c 55 5b a6 81 c0 71 4f f0 aa ff db 35 2c 26 d4 b4 a6 00 5f 6a 2b 39 b1 a1 7e 98 d4 c0 f6 76 09 b5 63 78 80 7f fc ab 25 a1 44 b5 65 ac 24 8e 5b 82 af 38 40 fc Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx}w\v4#f#AH P@ P $,-~]{vgl ,dLBBY:?n==O_3vU9>qVmwckc>nD-&m-\U[qO5,&_j+9~vcx%De$[8@
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 32 93 eb bd e5 e7 c0 9e 38 4d 4f 58 f4 f9 d2 a4 ac 3e 86 e4 76 e1 aa a7 f4 d9 bb 0d fd ad 84 a0 40 ae cd 84 74 30 22 b0 c6 46 c8 1c df 80 f4 b7 05 01 23 34 96 58 34 dd bf e0 d1 99 fe dd a5 ca 5c 2d 0c c9 19 1c 53 f6 77 63 42 05 0a 35 ac 52 41 45 90 0b b8 06 57 bb a0 da fd c7 c4 83 c5 f7 56 7d 0c 39 82 af 7b 29 7e ce 11 cb 5a eb 09 9e be ce 52 86 57 cf fb d9 15 77 2e 95 ee 63 c0 ae 0e b5 f1 aa 1d ce 99 fd 91 bd 1a 18 52 04 bf 47 14 7a bd 23 b1 35 ea 10 32 59 ce 59 5d a0 1c 6d e6 5a af bd f7 39 03 74 05 ec d6 c5 56 22 f2 17 2e 71 f5 31 a4 08 be f3 b7 5d 37 c7 0c b1 c0 57 80 5b 94 0f f9 0c b1 f4 6b 41 0e ec 8d ab c5 97 6c 37 6e ea 77 e7 03 88 21 43 f0 85 af 47 4f d8 15 b5 6f 31 a5 6b 19 12 15 e7 d7 7a 28 c8 6d ca f0 1e 27 c0 94 c0 db 61 ba e3 ce 03 6a 42 f1 Data Ascii: 28MOX>v@t0"F#4X4\-SwcB5RAEWV}9{)~ZRWw.cRGz#52YY]mZ9tV".q1]7W[kAl7nw!CGOo1kz(m'ajB
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 30 7f 8c 1f 57 b7 04 71 cc 91 60 b6 03 1e 8d 81 db 4e 4f ea 26 4a 0b 61 02 ee 96 e2 21 53 e1 70 97 f3 50 11 c3 2b 2b aa 42 f0 d9 ef c5 96 7c d2 61 ae 4b 8f 68 f4 d7 f7 25 02 74 41 40 80 e1 4b d3 02 68 08 00 22 47 b6 80 90 84 ba 00 70 d5 b4 1a f8 6b 18 74 a5 00 db 02 8b c6 c0 1c 07 c4 d0 af 48 17 08 08 30 86 f7 23 f2 b2 1b f6 da 55 71 9b 06 9c e0 08 11 db f7 e7 f8 c3 56 32 86 9b 09 a5 fa be 44 80 29 09 5f 6f f1 63 66 93 06 9e a7 0d ef 5a 6b 93 0f f7 b7 86 a0 0b 09 52 04 66 59 e0 11 97 e4 9c fd e5 91 05 48 1e b4 46 0c af bf 2f 1e 29 62 28 65 c3 80 13 bc 6a 5b e4 8b 9d 96 3a 89 17 48 5f 31 44 77 4a c2 49 f5 0c eb a6 f8 31 3c c0 e0 14 90 eb e3 48 42 9d 1f 38 bb 25 88 25 8d 1c 47 85 9b 59 cf 1c 1b 5a 4c 07 13 a2 8f 04 b9 64 ca 64 27 04 38 b0 4f a7 d3 cf 7f cd Data Ascii: 0Wq`NO&Ja!SpP++B\|aKh%tA@Kh"GpktH0#UqV2D)_ocfZkRfYHF/)b(ej[:H_1DwJI1<HB8%%GYZLdd'8O
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 52 24 e3 d4 0a ac fb 6b e7 f9 b8 2e c9 2c 61 02 32 b7 cf 96 da ab 02 10 71 d8 79 87 23 58 bd 3a 26 7c c5 8f 2a 3b ca 4a f0 fe 8f 12 27 da a6 da a2 9b aa e0 4c 8d 42 67 35 03 a0 db 84 cb 5b 03 58 35 de 07 dd 2e af 61 95 ab df a8 a5 70 fa 18 8e 2d d3 82 08 1b 02 ac 7b 2d 06 ba 47 49 ae 8f 4c 8c b9 86 97 61 80 29 95 31 18 92 3e 54 ce 00 d3 26 2e 4d da b2 77 a7 33 af 9c f2 97 8d e0 53 9e 8a d5 c7 a3 6a 63 cc 52 73 79 ba 6a 46 61 c6 53 2e b2 63 42 01 41 86 fb e7 87 40 82 b2 64 30 57 06 c4 00 d3 56 b8 79 5e 2d 50 c3 10 15 22 29 a8 ea ae 4b ea 35 c6 6e 75 6d 82 c9 9e 35 39 e7 33 e0 40 d4 a2 93 99 45 1b 56 bf 6d 95 ed 27 f6 ca 46 70 d4 b2 4e 35 6c b9 c5 94 7d 8b b6 3d 14 a3 51 7b e7 5b 11 a4 4d f8 ce ac 00 e6 0d e7 d0 c5 c0 cc 5e 0f 0c 40 42 12 da ea 80 ad 73 6a Data Ascii: R$k.,a2qy#X:&\|*;J'LBg5[X5.ap-{-GILa)1>T&.Mw3SjcRsyjFaS.cBA@d0WVy^-P")K5num593@EVm'FpN5l}=Q{[M^@Bsj
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: 22 5c 3a c9 8f d9 4d 1a 9c 5c 0b ef 20 85 2d 14 66 8c d2 b0 7e a2 1f 80 82 ed cd e2 a4 db d4 fd 8c 18 32 86 2a bb c3 9b 49 3f 99 db 02 e9 47 13 08 82 76 c4 54 e7 4c 7d c5 ba a0 50 b9 0a 22 b8 e5 9f 8d 71 ce 41 fb 7a 47 50 53 ae 45 b1 58 a2 bd bf b6 22 5c 34 9c e3 ac 16 3f 1a 7d 28 4b 02 fb 40 c3 21 a0 56 23 9c 3e 29 80 0d 8d 0c 86 94 80 72 b7 15 99 b7 1e a7 57 55 a6 bc fa 18 61 4a b9 75 50 a9 d5 1a 0c 90 0a 63 cc 76 79 c3 fc 8f 65 41 e7 7e 14 44 b0 ac d5 af 4a 28 5a e4 69 cd 7c ea b6 17 d1 79 08 37 15 81 73 60 75 8b 1f b3 46 69 30 86 80 61 95 09 0c 80 e9 10 a6 35 32 ac 9c 1c c0 08 ae 60 28 99 92 30 df f3 d4 7a 3f bf 1c a3 4d 92 ec c5 b8 bd 3a e3 28 d1 e9 d1 0f ad 4d 85 c8 95 97 e0 59 cf 85 4f b2 49 6c 10 8a 1a 8a 75 8b bc 70 5d b6 99 4d 70 23 42 9b 47 69 Data Ascii: "\:M\ -f~2*I?GvTL}P"qAzGPSEX"\4?}(K@!V#>)rWUaJuPcvyeA~DJ(Zi\|y7s`uFi0a52`(0z?M:(MYOIlup]Mp#BGi
2024-05-27 22:43:36 UTC	1390	IN	Data Raw: b8 47 33 56 7b ed ad 66 46 26 91 5b c1 b4 72 02 c7 ca d1 1a 2c 47 02 9e 9a ee b5 d3 e0 25 08 24 9f 3b 4b 79 fe 8c 81 18 07 31 0e 26 6c 70 a1 bf 0a c4 1f b6 2f 9d b5 2f 53 9f 59 43 95 f6 d1 31 db c8 b4 be cc 44 fc d7 5c c4 2d 26 2c 30 d5 53 dd ee 95 4e 66 7b 31 52 10 42 02 8c 70 f7 cc 00 46 d7 b2 aa 6e 05 72 ce a1 71 0e c6 18 58 15 cd 77 45 c0 f0 00 f0 f9 36 1f c0 14 6c 47 80 a9 a4 ba 56 84 ee 9d 27 42 af 67 e9 32 ae dc b5 5b 58 e0 96 1e e7 56 e4 71 58 e1 7b ed 71 3b 5e cd d6 5f de 91 86 1e 7e f3 04 f8 82 67 91 cd 96 30 c6 a7 81 61 24 28 cf 69 f9 cc 55 cd 8e a5 9c 5b 67 d5 8f bf 77 f1 f0 b1 23 42 9c 95 72 cc 6f 7f a1 69 ae e7 60 db 16 62 7a e2 48 4c d7 b5 9a 60 a0 29 10 08 00 a8 ce 8c f6 71 06 dd 21 fa f1 db fa c1 ef ed 32 f6 86 42 01 3f d7 7c 44 5c 73 eb Data Ascii: G3V{fF&[r,G%$;Ky1&lp//SYC1D\-&,0SNf{1RBpFnrqXwE6lGV'Bg2[XVqX{q;^_~g0a$(iU[gw#Broi`bzHL`)q!2B?\|D\s
2024-05-27 22:43:36 UTC	355	IN	Data Raw: 06 82 73 34 8d b7 78 fe 35 d0 9b 6c 4d d3 60 da d6 bb bb 77 ed de b8 fa dc 73 3f cc d4 66 31 28 cb e1 d3 44 d4 24 84 98 ed f3 f9 7a a9 60 a5 14 0c c3 e8 74 1c e7 ed 44 22 b1 e3 68 7b fb 6b db 77 ec 78 f3 2b f7 dc 73 a8 1c fd 0e 05 1c c6 6e 6b c3 fa 75 db 01 6c 7f ec c9 27 27 4e 1e 37 fe d4 9a 9a d0 69 35 a1 d0 69 9a a6 2d 08 06 02 8d 9c f3 5e 2a 5c 09 39 87 03 63 01 f4 9b e0 b2 cc e0 48 24 32 c2 b2 ac 9b 34 4d bb 5f e3 bc c1 11 42 19 96 f5 ae 6d db db f5 68 74 c7 ae 8f 3e 7a 6b e3 86 0d 1f c2 ad 7e fc ff 1e df f8 ee df 07 4f 9d 37 7b 7a 53 d3 a8 93 42 a1 d0 52 bf cf b7 34 e0 0f cc f1 fb 7d b0 1d 27 11 8b c5 b6 46 a3 d1 87 97 2d 5b d6 d1 df be ca 69 64 d5 c5 e3 f1 6b 84 e3 2c 71 1c e7 95 63 e1 f0 1b cf bf f4 d2 c7 5f bb f3 ce b2 99 fc c7 23 7e f6 af ff d6 Data Ascii: s4x5lM`ws?f1(D$z`tD"h{kwx+snkul''N7i5i-^*\9cH$24M_Bmht>zk~O7{zSBR4}'F-[idk,qc_#~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50143	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:36 UTC	798	OUT	GET /WVR82wo80fHsNaPFIXDrmwaUcE6lFSxs_zHXc6Bedrglc3MA9mPkDqKFWBMvdVU3RbUEFGd3bYZjLgM21FuTEBGx9MycBQ5Sejajl3w9jgq3o7APtl8=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:37 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2018 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:40:48 GMT Expires: Tue, 28 May 2024 21:40:48 GMT Cache-Control: public, max-age=86400, no-transform Age: 3768 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 07 a9 49 44 41 54 78 9c ed 9d 7f cc 4e 55 1c c0 3f 2f f2 3b 24 3f 2a 65 7e b6 12 25 2a 1a 99 f5 13 8d da ab 4c 7e e4 57 6f 0c a5 cc 56 4b 6b 64 91 8a 12 5b 53 94 a8 a4 bc 91 d2 68 16 a5 d6 0f b1 24 64 16 15 a3 8c 84 42 c2 db 1f df 73 77 cf 73 df e7 3e cf 7d 5e ef b3 ea bb ef 67 bb 3b e7 39 f7 dc 73 ef fb 7c ce b9 e7 7b ce 63 53 50 52 52 82 a1 97 0a ff f6 03 18 f9 c5 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 Data Ascii: PNGIHDRxx9d6IDATxNU?/;$?e~%L~WoVKkd[Sh$dBsws>}^g;9s\|{cSPRR++++++++++++++++++++++++++++++++
2024-05-27 22:43:37 UTC	1159	IN	Data Raw: 83 c4 3a 51 82 79 f7 dd 6c 0d e5 32 82 47 b8 f4 28 b2 f6 0b 58 e6 ca a0 74 d4 08 12 0d 06 72 57 21 23 bd 3f b0 d5 95 dd 07 f4 72 f9 8a c8 97 16 c8 7d 13 f9 62 fb 21 23 06 64 74 43 28 b8 88 50 ee 4f de fd c6 00 57 91 2a 77 aa 3b 57 84 4c 2f 00 3d bc 3a bf 7b 75 0f bb 74 1a a1 dc ef dd b5 85 c0 f3 ae 2c 76 0d 7a 06 2c 75 e9 84 34 e7 ea 23 4b b3 d7 93 34 94 74 04 d7 05 6e 71 f9 69 a4 2e 57 fe 06 9e 05 c6 23 23 b9 2e e1 d2 a1 22 e1 5c f2 35 70 93 77 5d 31 f0 33 b2 86 1c 87 74 94 11 c8 1a 10 24 d8 78 cc ab bf 10 58 8e 08 81 70 99 14 b4 7f 00 68 03 1c f1 ae d9 e8 e5 3b 03 9f 79 9f e7 20 73 d8 35 c8 28 1f 05 ec f4 ce ef 46 3a d1 58 f7 79 33 70 39 12 7f 80 8c b0 8d 64 09 72 ce 80 c5 48 c7 aa 43 6a c7 1b e5 d2 27 92 34 92 74 04 0f f2 f2 87 90 2f eb 3a 77 74 8e 3c Data Ascii: :Qyl2G(XtrW!#?r}b!#dtC(POW*w;WL/=:{ut,vz,u4#K4tnqi.W##."\5pw]13t$xXph;y s5(F:Xy3p9drHCj'4t/:wt<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50146	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:36 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:37 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:36 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:37 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50150	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	569	OUT	GET /pWVbkjhtPTNZbVieBwoW5yp4_edEFybVMNXXAQdphReN5SvSsx3AS-0ssRnBRGbi9mFm9uTIxgrOEY0GdZLldlzaVSlJI8yprmEWEh2gnp1WCQdeMMoF?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:37 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 197432 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:47:30 GMT Expires: Tue, 28 May 2024 21:47:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 3367 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 25 08 02 00 00 00 1d 93 cd b5 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 03 02 ea 49 44 41 54 78 9c ac fd 59 b3 e4 c8 92 26 06 ea 62 06 c0 dd cf 16 4b 46 2e f7 56 75 57 77 89 34 c9 21 5f 66 38 32 c2 3f 33 3f 79 86 c2 a1 b0 ab ba 6e 77 2d 99 79 33 63 3b ab bb 03 30 33 55 9d 07 35 03 e0 11 99 55 5d 4d fa bd 79 c2 8f 1f 38 60 30 a8 7d fa e9 6a f8 ff fe bf ff 05 00 00 80 a9 a8 aa 2a 00 20 00 20 22 12 11 42 40 44 42 24 43 24 42 20 04 44 04 00 66 24 22 68 2f 33 14 d1 2c 2a 45 73 51 35 30 50 46 8b 91 bb 2e 0e 43 b7 1b ba 7e 88 a1 8b 1c 02 13 21 80 21 9a 01 a8 69 56 cd 2a 93 94 53 3e 1f a7 e3 69 2a 88 f1 ea aa bf bb de dd dd ec 6f 6e ba c3 2e 76 1d 72 c0 f6 02 40 43 f0 a1 Data Ascii: PNGIHDR%pHYsIDATxY&bKF.VuWw4!_f82?3?ynw-y3c;03U5U]My8`0}j* "B@DB$C$B Df$"h/3,EsQ50PF.C~!!iVS>i*on.vr@C
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: b6 15 fd 7f 13 1a 2e 7f 5d 9e ab e1 ba 50 db d9 01 c0 16 20 a9 62 5d d7 db 46 15 b5 bf 6f 5f b6 fd fc ff 84 3a f8 72 d1 02 5c 5c d7 c0 08 c8 3f 30 b0 f5 4f 66 8a d4 96 24 fe 33 03 b8 c4 e1 df 1c c1 32 cb bf f7 f9 0a 57 e6 43 42 da 1e b6 40 a9 99 5d e2 f2 fa 22 dc ca 0e fe f6 f4 36 9a b2 99 8c 4b bd 41 2b 03 f8 8d 1b dc 48 de 06 76 11 c8 af 45 70 71 e6 af 46 b0 9e 61 11 82 75 38 17 3c c0 69 ce e6 9d a2 81 e1 f2 55 f3 79 42 5a f4 7b d5 80 97 0b c7 0c 5c 7d b7 b3 1b e8 17 77 0c 00 ea 57 27 44 30 b1 3a cf cb 61 6d 09 6f a7 ca 29 43 5b 2c aa 25 95 79 2e 59 8a a8 68 bd 25 22 03 04 1f 74 5d a1 a6 6a 73 9a cf a7 53 0c 01 d1 44 25 76 85 02 2f eb ad 6a 71 64 30 24 04 63 46 44 33 c8 22 22 66 8e 12 14 1c 2a 14 40 cd 51 d3 59 8a 5a 9b 09 43 ff dd cc 95 a7 19 28 f8 41 Data Ascii: .]P b]Fo_:r\\?0Of$32WCB@]"6KA+HvEpqFau8<iUyBZ{\}wW'D0:amo)C[,%y.Yh%"t]jsSD%v/jqd0$cFD3""f*@QYZC(A
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 58 1a af 70 c5 d9 4c 69 db ea 8b ed 69 37 c3 5a 7e 23 a2 75 85 7f 41 26 5d 65 c1 c5 19 36 ca 64 59 b7 5f ea 15 b8 b0 7e 56 09 b1 d5 1c f8 1a 3b fe b5 2f 5c 4f f2 d5 c9 1a 91 be f8 8b 2d e0 e9 5e 87 46 95 fe c5 d7 c6 3d 03 e0 1c d2 36 3e a5 76 72 40 40 30 b5 a6 54 2e 7c 9e 0d 84 9c d5 a9 96 52 44 c4 61 86 88 76 bb 1d 07 2e aa d5 55 8a 54 6d ac 3a c9 ff bc 89 52 ef 19 2e 67 bb 29 0e 04 42 33 58 02 11 fe 14 09 91 98 d9 f9 29 2d 58 bd 0c f3 37 34 cd f6 5a 0b a6 36 43 70 85 82 2d dc 6e 87 bd dc cc 17 af d5 a1 dc ae 4c 28 cc a4 ca 6c 0c 84 20 00 80 04 a8 a2 2a 52 54 4c 45 cd 14 6a ec 70 b9 fd 6a 95 b4 99 df 4a ba 2d 84 c8 9f 95 ad 12 54 17 36 42 75 d4 b7 df cd 8c c8 17 96 29 a8 a9 3f 53 36 23 03 44 a7 e1 84 08 90 72 96 3c a9 a4 52 a6 f3 f1 b1 ef 62 37 ec fa 61 Data Ascii: XpLii7Z~#uA&]e6dY_~V;/\O-^F=6>vr@@0T.\|RDav.UTm:R.g)B3X)-X74Z6Cp-nL(l *RTLEjpjJ-T6Bu)?S6#Dr<Rb7a
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 2a 86 60 0a 11 49 0b ba 2d e8 6b ca 93 44 a5 13 31 0d 06 80 a0 c6 2e e7 c8 81 ad 33 11 0b 1d 07 d3 42 2e 57 d5 48 ae b9 9a 2b 78 e3 ca d8 b7 d0 89 6e 9a 6f a0 bf 0a ef 97 b8 b9 75 a2 38 b2 6f fd 32 1b b1 6f 50 de d0 fb 42 79 e0 4a bf 7f e3 b4 cd dd bc 60 fd f2 8d af 8e dc 7c b2 2a 07 40 23 30 b7 62 a8 46 8b 7f 03 f4 bf 78 0f 06 48 c8 00 ce 14 9b f1 d4 1e e4 92 7e e5 c7 db 05 8a 2e 47 2d ef fe 1b 5f d6 26 a8 8e ca 56 ff ae 99 81 1b ed 15 50 0c cc 44 a4 94 92 a4 94 a2 a5 88 35 f2 ef 51 e0 7f c6 0a d8 38 dc be bc 83 0d d4 62 c5 28 58 c3 22 5f 78 88 2a 03 35 87 15 10 95 2c d9 47 52 a4 e4 9c 11 31 08 4b a9 8f d4 23 9d 7e 62 ab ce 3d 43 a7 a9 d6 ee b6 c9 aa a3 27 56 b5 d3 1e 57 f3 49 6d 1e 9f 81 81 98 96 52 4a ca aa e2 b9 d8 81 63 e8 02 33 c5 c0 60 bd 85 c8 08 Data Ascii: `I-kD1.3B.WH+xnou8o2oPByJ`\|@#0bFxH~.G-_&VPD5Q8b(X"_x*5,GR1K#~b=C'VWImRJc3`
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 08 81 43 0c 5d d7 75 dd d0 85 08 48 8a cb f2 c4 56 9b 78 31 1b 5f b2 b4 cd f3 6e e3 6e ea de cc 54 8d 94 28 86 d0 71 08 c4 a1 85 28 10 36 f5 9d 44 d8 75 fd 30 74 31 52 64 94 92 8e cf 0f f7 8f 9f c7 f3 78 3c 9e 4e a7 a3 a8 82 29 7b 94 d1 80 01 18 d1 00 93 14 97 5c 61 50 20 8f 01 83 b3 38 04 f0 2c 20 33 2d 02 aa ae 91 d0 74 cd 2b a3 6a 11 9a 29 7a e1 1c 02 02 11 01 90 91 87 40 11 00 45 2d a3 07 40 08 99 90 2c 08 05 51 10 20 a3 a0 81 89 98 54 a3 61 3f 14 9c 13 98 a2 01 01 9a 81 1b 2d c4 cc c6 80 bb 6e b8 2e f9 a4 f9 b8 91 b4 45 cc 10 6b d8 b9 8a 4c f0 e1 e9 9a 7c 0b ae f7 ab 7b 05 6d c9 59 77 6c f2 cc 3d 42 21 60 40 67 9b 9e a6 6c ab a3 d9 93 50 11 d9 10 49 41 1c 50 8b 88 b4 8c 20 15 51 51 63 51 14 00 f6 2b 10 06 a3 40 1c 39 18 80 92 c6 e0 40 66 06 ea e2 5c Data Ascii: C]uHVx1_nnT(q(6Du0t1Rdx<N){\aP 8, 3-t+j)z@E-@,Q Ta?-n.EkL\|{mYwl=B!`@glPIAP QQcQ+@9@f\
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 77 63 be e1 e3 86 bb 2f d0 4f 8d 24 54 14 24 80 9a df 54 bf 8b ed e6 37 ff 56 7e dd d8 44 bb b1 45 af 7c 45 bd 1b 8b 6c a0 dc 1a 0c d5 a9 47 dc 0e 09 00 d7 fa b1 15 c4 71 d5 45 d5 43 d7 2e d5 ea ad 61 39 5b 70 46 8d e8 6b a2 1e bb 9e 63 53 af f2 1b fa a0 a5 1d 5c 2c b3 ed 6f d4 f2 02 7e e7 f5 95 b8 7f 79 70 1d 93 53 3c b3 da ab c6 d9 86 3a 4d 57 13 00 33 91 22 39 97 22 5a 0a 32 a9 a9 9a e5 9c e6 29 21 a0 48 39 4f e7 9c 32 a8 7a 86 35 02 10 92 6a cd 45 81 c5 97 53 29 b4 27 d7 a1 01 2a 56 3c b2 96 f3 e3 d5 6f 65 c3 8a 29 93 98 19 00 9b a8 59 e8 62 df f7 c3 d0 e7 54 d2 3c 21 80 a8 e6 9c fb be 07 33 24 12 91 97 e3 31 a5 d4 c5 a8 aa f3 3c f7 7d c7 1c 44 b4 a8 f6 43 1f 43 54 2d d3 3c 4f 45 bb be 43 24 69 79 e0 04 b5 37 47 93 5e 02 28 fe 88 51 09 d1 82 21 11 79 Data Ascii: wc/O$T$T7V~DE\|ElGqEC.a9[pFkcS\,o~ypS<:MW3"9"Z2)!H9O2z5jES)'*V<oe)YbT<!3$1<}DCCT-<OEC$iy7G^(Q!y
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: e7 71 9e d3 6e b7 db ed 86 3e c6 19 a1 a8 21 5a ce 79 37 ec 7b e2 9f 7f fe 19 11 5d 55 cc 29 01 c0 d3 d3 d3 3c cf 62 ca 21 1e ae 6f e6 94 cf e7 b3 37 9f 49 b9 e4 9c 76 fb 61 bf db 49 29 a6 82 04 bb 61 b8 bd b9 b9 3a ec 3d f9 b2 e6 47 c0 02 29 88 4c c8 8c a1 16 e0 20 a0 b7 a6 59 b8 fe 12 bd 41 00 30 5d 58 cb 52 f5 60 88 60 e6 25 b2 a8 a2 39 5b c9 a0 33 48 f1 65 04 1c 10 00 89 c0 d8 9f 8a 21 21 71 4d b8 a0 0a e7 48 a4 be 70 10 11 88 d0 00 19 b0 4a 14 11 b6 6c 4f 22 64 44 6e de 24 fa 1d 57 c9 3f f7 6a ab 64 95 36 f0 70 83 aa 94 92 72 1a c7 f3 79 1c a7 79 4e 59 f6 95 73 91 eb ff 4a fc cc 0c 80 62 08 7d e7 25 75 86 d6 49 b7 df ef 76 bb fe e9 41 4f c7 e7 c7 87 cf aa 50 b2 00 46 8a 7b 56 01 24 60 0e 48 0a c0 00 c6 c4 58 d1 7f f1 1f d7 7a 75 55 30 45 d3 46 34 05 Data Ascii: qn>!Zy7{]U)<b!o7IvaI)a:=G)L YA0]XR``%9[3He!!qMHpJlO"dDn$W?jd6pryyNYsJb}%uIvAOPF{V$`HXzuU0EF4
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 8d 48 55 fd 63 80 56 29 ef dc 9f 16 f4 a7 3a 18 04 58 eb b4 5a f5 ec bf 28 5c 4d 74 eb bd a1 93 13 11 2d 45 72 9a e7 71 1c cf e7 f3 9c b3 68 f1 21 58 f3 9d 7a 00 c0 e3 44 29 e7 34 4e b5 6d 9d 66 c9 b9 94 82 68 ce 62 ad a6 60 c6 c0 31 70 20 24 23 24 32 01 25 60 82 1a ff e0 ea a6 68 c6 56 b5 63 37 b1 54 ac da 0d 09 99 29 78 2a 1b 9b 19 a1 02 a0 9a 29 6a 0b 55 11 11 79 c7 27 46 d6 10 68 e8 ba 61 37 74 0c 65 66 85 d9 2c a5 39 89 68 40 02 63 41 42 c2 21 c6 2e 62 2a 05 b4 20 a3 88 13 a3 66 9c 99 41 1c 42 dc 13 07 20 59 b6 74 a8 85 16 66 2d c2 67 80 1a b6 b3 8c 0b 42 60 ed c7 d8 3e c5 96 d0 54 f5 80 67 78 10 bb b3 c8 f1 dd c8 f5 01 d5 94 01 b7 fd 00 a8 a0 1a 01 0a 07 04 2f 23 07 4b a6 e6 9e 9d 52 44 92 94 20 81 8d 0d 11 81 89 88 40 10 c4 6b c5 a4 98 16 41 31 f5 Data Ascii: HUcV):XZ(\Mt-Erqh!XzD)4Nmfhb`1p $#$2%`hVc7T)x)jUy'Fha7tef,9h@cAB!.b fAB Ytf-gB`>Tgx/#KRD @kA1
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 88 48 61 65 97 cb da 59 b8 5e b5 2c aa 0d 80 80 de b4 cb 5b 9a 8b 79 12 43 6d 4c 6b ae 28 44 4c c5 14 00 29 c6 50 4b a4 63 64 66 43 60 a3 7e 18 86 fd ae 0b dc f7 9d 45 64 ba 3e 6a f2 3c 34 53 e1 40 de e4 94 83 ed 7a 3c 8f 98 b5 30 46 af 1e 8f 21 c4 c0 e4 7a 99 28 ec 0e 40 01 34 51 ed b6 51 4b 30 71 f3 1f 40 8b 01 6c 0b 81 b0 f6 92 c6 f5 05 0e ff 4e da 5a 3e 3d 70 0b 17 80 11 78 c1 ba 97 c8 7b 7c 76 c1 3b 36 34 40 65 00 20 63 d6 e8 61 73 28 96 bd 95 76 96 12 44 44 8a 0a 43 10 24 2f c4 53 62 60 04 06 cb 22 50 0c 8a 2a b2 86 60 56 dc 3e e5 06 26 8b a1 b2 b8 59 a0 12 89 05 fe 36 24 77 75 f9 d4 a2 d7 0d a4 6e dd 41 b0 1e e7 dd b3 89 00 b1 95 0e 41 4b ef 5f e4 17 db 72 69 e0 0b 50 ed 11 ac 2a 63 f9 bc 45 98 9b 69 d0 2e d6 2e b9 ce 5e f5 88 d5 6d 0a 36 43 42 4f Data Ascii: HaeY^,[yCmLk(DL)PKcdfC`~Ed>j<4S@z<0F!z(@4QQK0q@lNZ>=px{\|v;64@e cas(vDDC$/Sb`"P`V>&Y6$wunAAK_riPcEi..^m6CBO
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 00 55 4d 55 c1 7c 1b 89 5c 64 4e 45 d4 10 99 b9 8b 5d c7 21 c6 10 98 89 14 b2 88 9b 77 6a 6a 26 8c 60 c4 91 63 29 59 ca 2c 79 b2 18 80 a3 01 04 b6 3e d2 d0 59 2a 0a a6 9e 61 12 42 60 02 0a 01 d1 8c 78 77 b8 e3 78 d0 f9 a9 4d 26 7a 61 4c c5 83 45 01 20 5e ac f1 d6 77 9e eb a3 a7 4d 7e 3d 2c 00 77 c1 2e dd cf c5 cc c4 8c e4 2c 00 80 5c 2f 55 d2 8b 86 68 a0 0c e0 2d 64 8d cc 58 20 88 a9 94 22 2a a5 e4 52 58 84 8a 30 8b e7 8d 01 03 19 62 20 56 94 22 d9 44 85 58 72 d1 22 58 db 51 41 4b 48 c5 0b c7 fa 65 01 1c 6c 3e c7 4d fe cd 16 eb 9b 8c d9 16 3c 71 a9 86 a7 ea bd 6e 91 e1 85 fc 7b 70 d7 6a ca 45 73 d3 d4 ec 58 40 ef 8d b4 5c d1 7d 4a 80 cd 4a c5 5a c6 b5 b9 62 1b d6 c5 87 ab 85 80 bf 65 a3 7c 7d 70 35 1a 10 ab 32 5f 6f 7d d3 20 69 fd a7 0a c5 76 26 3c 48 b4 Data Ascii: UMU\|\dNE]!wjj&`c)Y,y>YaB`xwxM&zaLE ^wM~=,w.,\/Uh-dX "RX0b V"DXr"XQAKHel>M<qn{pjEsX@\}JJZbe\|}p52_o} iv&<H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50151	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	785	OUT	GET /DaaQa-Y-b3_IAhu6SBFb2vRl8PFR5iuCLwLszc16_OTlLrEFvFF9P4CS0ui-414nG9016ul3dQD1R3mHtmMx4P1bIA-zRXuPpFN4yw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:37 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2457 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5517 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 09 50 49 44 41 54 78 9c ed dd 6d 8c 15 d5 1d c7 f1 ef 99 99 fb b8 7b 59 04 dc 05 5c 58 04 a4 0b c5 28 d6 08 a6 16 45 4d ad d8 68 8c 69 ac ad 68 14 52 45 d3 6a d3 a6 26 4d 4c d1 56 9a 34 4d b1 2f 88 10 1f b0 6a 03 49 d3 5a 53 23 45 ca 6a 8d 1a 8b 2b 4f b1 58 96 07 a5 12 77 57 b7 bb cb ee de dd fb 30 33 a7 2f ee 85 bd 94 db 65 67 76 f6 e1 cc 3d 9f 57 70 f7 9e b9 33 fb bb 67 e6 3f e7 cc cc 82 a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 8d 2e 11 c4 42 ae 79 3c 5d 65 98 f2 1b c0 42 c0 02 64 99 65 57 c4 6b 86 61 b0 f7 e8 21 a2 a6 e9 77 79 39 10 87 25 ee 6b 6d 9b 2f 49 33 42 23 0a 78 c5 13 bd 29 81 d8 08 ac Data Ascii: PNGIHDRxx9d6sBIT\|dPIDATxm{Y\X(EMhihREj&MLV4M/jIZS#Ej+OXwW03/egv=Wp3g?iiiii.By<]eBdeWka!wy9%km/I3B#x)
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: dd 0f 26 b8 68 e6 e0 dc eb 1a e0 c9 5e c9 cf b6 65 d8 d3 ea 92 2c 6e e1 55 49 c1 13 af e6 d8 fa fd f2 9b dc d6 e5 f2 bd e7 33 1c e9 92 2c 28 ee 92 c3 40 99 1e 5c 3b 59 30 35 21 38 98 2e f4 ce b7 fa 25 cf df 13 3f 23 dc 53 a6 a5 04 1b ee 4d d0 27 c0 2d 56 bf 51 03 b6 9d 70 e9 cd 9c 3d 6b de b4 2f cf 35 bf 1d a0 b3 4f 32 23 3e 38 b7 de 67 ab 7f 2b a5 32 01 df b2 2c ca bb 3f ad e2 b5 7b e2 34 4e 13 3c bd 3c c2 fc 32 e1 9e 12 35 e1 f1 15 11 3a f3 83 af 4d b3 a0 b5 d3 3d e3 7d 8e 84 55 7f ce 31 cd 84 58 71 71 79 17 da b2 70 d7 e5 16 42 a8 1d b2 32 01 43 a1 67 2d 99 6f f1 ec da 24 77 5f 7f ee 53 95 c9 29 41 b6 24 4f 0b 70 fe e7 30 6c 0a d8 b5 3a ce 91 ac 44 02 5d 39 a8 8a 09 fe 72 7f 9c 3b 57 44 cf f8 82 a8 48 a9 80 4b 45 86 71 c9 d3 c9 5e 49 b4 64 0b db 5c a8 Data Ascii: &h^e,nUI3,(@\;Y05!8.%?#SM'-VQp=k/5O2#>8g+2,?{4N<<25:M=}U1XqqypB2Cg-o$w_S)A$Op0l:D]9r;WDHKEq^Id\
2024-05-27 22:43:37 UTC	208	IN	Data Raw: 7e 02 56 7c 3e 6f 5c 8d 6a 41 55 8e 9f 80 ff 15 f8 5a 54 86 51 2f a8 ca f1 53 64 6d 0f 7c 2d c2 6f 4c 0a aa 72 3c f7 e0 b6 75 ef a5 81 17 47 61 5d c2 6a cc 0a aa 72 7c 55 d1 2e ce 83 40 7f c0 eb 12 46 63 5a 50 95 e3 2b e0 cf d7 bd df 0b 2c 02 2a eb b1 71 c3 55 38 cf 18 f3 82 aa 1c df e7 c1 6d eb de 3b ee e2 d6 01 5b 83 58 11 01 a7 ff 00 a4 d2 a4 44 38 e3 53 50 95 13 c8 39 6d dd ba 65 55 c0 4a e0 22 01 51 ca 5f 57 3b e4 6b b6 ed 30 f7 92 39 b8 8e eb b9 ed 44 7a ed a4 20 da 72 7b f3 06 c1 f1 71 ed b9 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a 36 56 fe 0b 72 45 0b 5a ee b8 f4 1a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ~V\|>o\jAUZTQ/Sdm\|-oLr<uGa]jr\|U.@FcZP+,*qU8m;[XD8SP9meUJ"Q_W;k09Dz r{qiiiii6VrEZIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50148	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	568	OUT	GET /bl7lc5NGrZQEr-cUfR-Gur5eANjLuMdaTUZP9yYxNneDJjHdzbRfd2Mfdx9L1ecDSXLbSj3kmNlkeg5pu83uUov2jx4xzHi2Akotz5lIKABiRlmJYFg?=w1440 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:37 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 214394 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:41:59 GMT Expires: Tue, 28 May 2024 20:41:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 7298 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 25 08 06 00 00 00 92 f1 5a e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c 84 bd 69 cc 66 c9 75 df f7 3b 75 97 67 7b f7 7e 7b 9d ee e9 6d f6 19 0e 69 71 a7 48 9a 16 4d 91 8a 15 49 96 95 28 89 90 0d 88 15 20 41 0c 23 31 e0 0f 31 10 20 fe 12 38 41 04 f9 4b 04 db 30 e4 44 b1 22 04 b2 2c c5 d4 c2 45 24 87 e4 70 c8 e1 ec 33 9c e9 99 5e 66 7a 7a 7a 7d bb df fd 7d b6 7b ab f2 a1 6e 6d f7 79 9a ba c0 4c 3f ef bd 75 ab 4e 9d 3a e7 fc 4f 9d 3a 55 57 7e f7 9f fc a6 11 11 44 40 44 50 4a 10 04 25 02 02 22 0a 00 c1 3e 07 fc 33 7b 19 7f 1f 0c e1 32 18 e3 8a 19 fb c4 d8 12 c6 68 54 de e5 f0 03 e7 18 2c 2d 20 80 31 c6 b6 62 0c 34 f4 80 fd d3 16 00 09 8f 7d ad 82 60 00 31 Data Ascii: PNGIHDR%ZsBIT\|d IDATxifu;ug{~{miqHMI( A#11 8AK0D",E$p3^fzzz}}{nmyL?uN:O:UW~D@DPJ%">3{2hT,- 1b4}`1
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 8c d1 18 63 c8 41 70 0e 40 32 2e 11 c0 83 34 9d 0a 46 d2 33 ab 11 1c 09 25 71 e0 9f 5a 32 c1 d0 30 4d 13 31 39 c8 9b ad 2f 1e 40 92 81 89 07 d8 18 37 a0 26 d0 eb e9 0b 34 cc e2 48 cb 39 90 06 36 4c 24 e0 33 97 1b d0 88 66 89 9e c5 bf e3 3a 44 d2 22 31 58 9b 16 40 26 ef cd 92 1b 03 9c 73 7a 92 36 3c 60 b9 91 68 ea 17 63 89 f5 b7 83 33 26 de 91 73 63 e4 f8 2f 8d 63 13 7e 27 75 3b e7 42 e2 bf db bc 76 ca e4 18 f0 53 90 37 e9 6c 33 68 6d 87 c4 3f 4e 50 df f3 20 36 f2 09 7f 5c 41 51 91 21 37 d1 93 16 d2 bb 3f a3 31 95 e8 76 62 54 24 90 14 d4 a5 29 e1 f5 24 c8 59 da d3 86 c6 e0 25 07 39 99 e3 fc 28 0c 3b 53 d8 98 c0 83 7d d8 ad 85 8d b1 b0 ae 0c 43 81 47 16 33 44 14 5b d3 9a 2f 1f 51 74 14 54 06 7a 0a d6 3a 8a ed a9 e1 b1 35 c5 de d4 f0 b5 9b f0 d6 3e 7c 6c 49 Data Ascii: cAp@2.4F3%qZ20M19/@7&4H96L$3f:D"1X@&sz6<`hc3&sc/c~'u;BvS7l3hm?NP 6\AQ!7?1vbT$)$Y%9(;S}CG3D[/QtTz:5>\|lI
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: a0 2c 3a 8d 1c 90 ce 1c c2 12 45 70 ee 62 fe c5 6d 7b c7 82 b6 17 9d 30 32 65 6d ec 58 79 63 14 3b 46 8e 8f 84 59 96 73 58 5a 32 e3 c3 b8 8d 41 8b 83 3c f7 33 82 73 45 d3 c6 fd e6 bf e5 bb dc d4 da a2 d9 2f 61 35 54 a5 78 10 a2 2f b5 11 96 0a c3 b9 81 22 cf 0c bd 0c b4 12 ae 8f e0 70 57 78 75 db 50 01 95 86 02 38 b5 a0 b8 76 a0 39 3d 50 64 39 ac 96 8a 9f 6c d5 5c d9 d1 1c 1f 28 fa b9 70 7b 6c c8 05 96 0a 43 37 b3 11 83 ad b1 21 af 0c 3f bf 26 9c 59 12 c6 22 dc ad 60 b5 84 be 32 ec 6a d8 ae 85 53 1d b8 57 09 cf ef 08 b7 46 b0 94 c1 b9 65 c5 8f ee 68 8a 5c 58 34 42 85 30 55 42 a6 34 0f f6 85 83 da 70 6d 08 9f 5b 15 8a 4c 73 a6 9b b1 57 af b1 58 e4 1c 2e 5e a7 76 7c aa 0d 39 70 db fc 3d ae e5 a7 39 df d9 a3 aa 75 34 e4 c2 8c 6d 68 d8 9b 2e a9 45 0f 22 c3 ef Data Ascii: ,:Epbm{02emXyc;FYsXZ2A<3sE/a5Tx/"pWxuP8v9=Pd9l\(p{lC7!?&Y"`2jSWFeh\X4B0UB4pm[LsWX.^v\|9p=9u4mh.E"
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: fd fd 9a 07 7b 9a af dd 30 9c 5e 50 0c 35 5c df 87 0b db 86 5d ad c8 8c e6 0b 8b c2 ed a1 a6 d6 70 a8 50 7c 72 d5 70 b4 a8 c9 c5 46 04 6e 4f 14 fb 13 61 62 84 63 a5 61 35 37 8c 6a c3 e6 54 f1 c1 08 ee 8c 6b 36 47 b0 3b 81 db c3 9a 89 86 ed 1a 6a 84 13 03 b8 3e d4 7c 78 09 de aa e0 fd 3d c3 62 21 dc 38 80 a9 81 33 3d 43 a1 84 6b 63 21 2f 14 db 93 9a 17 b7 e1 61 3e cf 63 9d d7 58 29 8f a0 8a 4f b0 57 f7 b8 2d 47 39 52 4e 29 a5 60 77 a2 58 c4 58 5b 3b f7 9a a3 67 ad 19 5d 98 8c c0 fd 86 66 ae b6 b6 74 d0 8d d3 68 52 73 4c ad b2 76 ec 63 6c ec fe 84 07 37 d7 31 3d 41 8f 35 db 3b 43 ea be a2 da 37 5c b9 b8 cf db 4b 39 af 5e 3e a0 e8 68 f6 a7 35 bf fc c9 25 fe f6 cf 3e 48 a1 14 5a 07 27 c5 39 81 09 6d 7e 86 9d e6 1f 18 2f 84 44 76 b4 4d aa 89 e4 3f 7e dc 2e 18 Data Ascii: {0^P5\]pP\|rpFnOabca57jTk6G;j>\|x=b!83=Ckc!/a>cX)OW-G9RN)`wXX[;g]fthRsLvcl71=A5;C7\K9^>h5%>HZ'9m~/DvM?~.
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: b2 3b 0e 56 32 e8 e5 70 bc 27 2c 66 50 6b 2b 49 2b a5 70 65 cf 1a bb c7 97 61 a5 f7 10 ef d7 7d 3e c8 0c 27 64 c4 e5 ea 34 1b 07 15 e3 42 28 94 d8 65 55 d5 c8 85 b1 3a 31 33 27 4c f1 2a 66 3e 2d ad 88 c6 0a 0f 6e e9 e5 a2 87 a9 3c 7b 00 d1 1a 53 74 18 51 31 f9 d3 9f b0 74 3b 63 28 fb 2c 1c 5e 25 eb e4 74 cb 92 ad 9d 3d ee 1c ee 70 9d 8c 7e 5d 03 82 36 9a 7e a1 78 f3 c6 88 0b 1f ec 70 fa d8 c0 26 6e b4 08 8f 9d 5a ff 7f 13 95 89 26 4b c6 18 92 c5 71 67 f1 4d 48 2a f6 39 04 31 6f 12 dd 08 ef fa 25 d6 48 5f a3 9a 1b f6 a4 ed 79 8e 3a 9d 72 2a d1 d8 ef 24 6c 3f 67 a9 43 5c 7b da d1 2f 81 6e 22 2b 92 e8 52 cb 86 78 33 6e 70 db d7 63 fb e0 1c 6b e7 1c d8 19 72 6a 1b 1d 4b 54 96 db 2d 80 22 91 4d 14 bc 43 e6 68 d3 b6 bd b2 28 28 ca 9c f1 78 c2 37 be f3 43 7e ff Data Ascii: ;V2p',fPk+I+pea}>'d4B(eU:13'Lf>-n<{StQ1t;c(,^%t=p~]6~xp&nZ&KqgMH91o%H_y:r*$l?gC\{/n"+Rx3npckrjKT-"MCh((x7C~
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: fc 15 7b 03 b8 2e 19 85 36 48 ae 7c c2 9f d6 42 2f 83 1f 5d 38 e0 57 3f 3b 62 ad df 61 5a eb c8 72 b6 35 2d f4 c3 44 fd 49 72 a3 22 07 c1 39 c2 f6 55 27 9f 51 dd c9 c4 c9 cd f8 83 5d f3 8b 00 91 63 62 9a 70 7c e2 3f a5 7f 34 23 91 02 2d 0d 2f 5c b9 e0 84 a7 d7 4c 64 d0 63 86 b4 6c 8f 09 e3 eb f5 2c 1a d1 06 ab 62 a7 2f b6 b3 26 3e 8d 47 ac c3 d3 26 17 ec 56 3f 4f 83 52 a0 8d 0b fc a0 8d 26 cf 0b fa 9d 92 f1 64 c2 8f 5f b9 c0 ef fe fe 37 78 e7 ea 1d c8 7a 9c 39 73 8c c7 1f 7d 88 27 1e 7b 94 a5 a5 45 24 b3 b6 35 2f 4a ca a2 a4 c8 33 74 64 03 cb b2 a0 28 4a b2 4c 35 dd b5 34 56 95 a6 df 2b e9 74 fa 8c 46 13 9e 7b 69 87 6f fd 70 8b a5 52 71 67 2b 67 77 f7 80 c3 87 17 2d c5 ba 46 6b c3 e6 fe 3e ee 1c 22 17 89 34 c6 34 8e 00 28 95 a1 eb ba 09 a6 29 72 67 f0 c5 Data Ascii: {.6H\|B/]8W?;baZr5-DIr"9U'Q]cbp\|?4#-/\Ldcl,b/&>G&V?OR&d_7xz9s}'{E$5/J3td(JL54V+tF{iopRqg+gw-Fk>"44()rg
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 18 22 20 71 64 37 ca 8e f7 36 af d1 a1 64 89 ae 29 17 eb 58 cb 29 48 96 0e 23 91 0e fa 1d 6b 76 18 3b 89 fe 9f 3c 9f 89 16 3a a3 11 9e 85 a0 81 09 ba 93 be 15 7e 36 b3 79 68 9c 85 56 a9 b6 de 6a ad d1 da 90 65 8a 7e af cb b4 9a 72 e1 e2 7b fc d1 5f 3c c7 77 7e 70 01 e8 72 f8 d8 21 7e e6 23 4f f0 e8 f9 73 ac ad 2e 23 59 86 a0 28 f3 82 bc 53 a0 9a 65 6f 67 9f f2 a2 a0 28 72 0b fc 31 0f c4 2e 07 80 41 65 19 4a 29 8a 52 d8 dc 32 98 4a b1 be 5e f2 ea e5 7d 1e 58 57 fc 77 bf 71 8a e3 c7 33 ae 6e dc a5 2c 4a c0 d2 b8 b7 3f 66 3a 9d 92 e7 3d 26 d3 09 da b5 8b f1 07 0b d1 c8 90 a0 9a 1c 80 a6 d3 a2 52 63 15 83 78 62 d4 5b 4e 80 67 7c 2c 74 71 58 a6 29 e7 66 b9 a6 f9 fb be 80 14 0d 42 22 00 8e 0e 3f a6 a9 00 46 de 87 f5 ea 5a 33 c3 04 ec 63 30 4e 44 20 a2 cb af b9 Data Ascii: " qd76d)X)H#kv;<:~6yhVje~r{_<w~pr!~#Os.#Y(Seog(r1.AeJ)R2J^}XWwq3n,J?f:=&Rcxb[Ng\|,tqX)fB"?FZ3c0ND
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: cc 5f e3 fc f9 33 1c 59 5f b3 b3 75 11 f2 3c 27 2f 6d 48 5f 6b 8d c6 e6 5d 75 ca c2 2f 01 c4 61 c0 30 71 b6 07 06 a9 4c 51 55 9a ed ed 7b 2c 2e 2d 53 55 d0 eb 65 1c 3e 54 f0 3f ff e6 39 4e 1c cf b9 be f9 01 5f 7f fd 65 be ff fe 4b 88 51 f4 b2 2e 45 a7 60 3a 9e 32 58 c8 d8 d9 1b 31 99 4e 29 54 66 f9 d0 7c 97 c0 45 20 74 a5 51 79 06 8d 93 95 5b ec 0e 40 1b db 7d a7 07 6e 66 29 b4 78 da cc 4a 62 e1 f3 01 fa 08 14 ac e1 77 c3 e0 d6 e7 9d 47 22 e1 00 8b 48 70 e6 e1 55 5b 26 5a 71 e6 f0 af 93 90 96 54 cd 4d 0e 4b 6a 6c 81 57 54 55 52 a4 ad 44 6d 6f bd 61 a2 c5 ac 74 5d d9 e7 3d 34 7b ba 03 d9 0d 54 39 80 4c da 09 4e 42 3a b3 8d ac 96 ff cd 1c 86 85 72 33 8f 25 fe 19 25 49 c5 ca 9f 68 4e eb 65 89 58 13 6b 56 4c 4b a4 9c 09 e4 b6 c3 7b 29 a9 41 18 9b b1 6c 52 2f Data Ascii: _3Y_u<'/mH_k]u/a0qLQU{,.-SUe>T?9N_eKQ.E`:2X1N)Tf\|E tQy[@}nf)xJbwG"HpU[&ZqTMKjlWTURDmoat]=4{T9LNB:r3%%IhNeXkVLK{)AlR/
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: bd 01 85 ca d9 3a d8 e6 e2 ad 77 79 f6 ca 0b 5c de bd 46 4f 0a 06 79 8f 5c ec 99 fe ce 61 95 52 a1 2b 8b f2 fb a3 8a 4a 57 40 07 5d 37 df 2b 30 8d fc 68 8d 64 0a 63 0f e3 b0 4b 00 44 80 e0 3a a2 9a 2c cc 00 e2 a9 ee f8 ac 6f af 88 29 43 c5 44 82 96 80 58 a8 4c f9 3b 21 c4 39 ef f2 fa 19 7b 7f d1 32 84 49 da 36 fe 79 2a b0 2d 8f 31 a1 39 ad 2f bd 12 8b 1c fe 6d 79 91 e9 d6 c4 e0 39 a4 5b f3 1c 4d f3 88 49 7b 1c 74 c4 09 75 70 88 c2 c9 5a 81 f6 b6 f2 24 eb f4 b3 da 60 ab 6c eb 42 bb cb 33 7f df 0f 0c 83 92 a6 49 47 f3 2a bb ff d5 72 53 3c f8 c6 09 86 a9 63 e3 8a 46 66 3e e6 53 5c 5d cb f1 9a 27 69 41 8e 1c ff 5b f2 1b cb d3 4c 4d 7e e3 54 64 ac 12 06 b5 1c 8a fb 5c 6d bb ea bb 68 9d 8d bb 95 a2 d0 f6 cc fd 23 25 1c 2e 61 a9 a3 b8 34 86 17 77 0d bf b0 06 4f Data Ascii: :wy\FOy\aR+JW@]7+0hdcKD:,o)CDXL;!9{2I6y-19/my9[MI{tupZ$`lB3IGrS<cFf>S\]'iA[LM~Td\mh#%.a4wO
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: b4 d8 c3 f4 bd 14 9f 00 68 99 1e 0c b0 b8 2f ba 45 9f b8 f5 fb 5b fd 2c da b5 d6 56 da 40 4e 7c 37 3e 51 ca 1e 42 e4 c2 5c 44 8a 1b e8 48 66 80 de ab 36 e1 6b 73 e2 5a 6f 25 e5 fd b4 ab 31 e8 76 1d cd 4b 67 0c 7f 01 6a 3c 1d 01 07 62 81 4c c4 dd 03 45 ab f3 51 9f 7d df 52 2b 18 b5 98 2a 5c a2 f3 4d b1 b0 c7 d9 dd 88 5f 8b 19 10 81 7f bb 92 98 e4 d8 51 71 e5 da 5f e1 33 24 63 31 8f d6 d0 c4 1c 83 4d 4b 99 e3 f0 5f ab 6c 3b b2 d4 40 6f d4 83 34 79 d3 81 ff 4c f8 3f 7a db 11 27 2d fa fc f6 a4 38 2a 16 ff 8c 1d 28 4c ca 83 18 eb 13 de bb ad 99 9a 5a 0b 6b 9d 82 1d 0c 9b 5a b3 98 c3 33 b7 34 af ec 1a 8e 94 f0 85 e5 8c 3f db d5 7c 7e a4 79 f8 90 e6 e6 14 86 b5 62 67 64 28 33 30 59 c6 03 a3 9b 6c 7d f3 77 78 77 e1 bf e6 43 79 41 17 c3 d6 54 b8 31 51 3c b9 a0 b9 Data Ascii: h/E[,V@N\|7>QB\DHf6ksZo%1vKgj<bLEQ}R+\M_Qq_3$c1MK_l;@o4yL?z'-8(LZkZ34?\|~ybgd(30Yl}wxwCyAT1Q<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50152	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	562	OUT	GET /jUoaTIlBn5ibfQcND2n5OMD6Z7xoqNj-ShHlFR6QuLffLXD5pS8V2eNg1rGlrsRrnDkoQ28O8UHzqzBQKAGY4l1CS2NQSq2SkRScK6FOjl82jppyohK- HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:37 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 46194 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:58:39 GMT Expires: Tue, 28 May 2024 18:58:39 GMT Cache-Control: public, max-age=86400, no-transform Age: 13498 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8c 00 00 02 00 08 06 00 00 00 91 a3 5b 74 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec 9d 79 80 24 65 79 ff bf cf 5b d5 d7 dc 7b 2f 7b b1 cb 0d 82 78 c5 03 6f f1 02 51 54 40 d1 20 88 07 a7 22 f1 4a 7e 89 c6 44 4d a2 46 13 8d 26 fe 3c 11 51 50 f1 d6 28 9a 28 f8 43 44 82 11 39 94 9b dd 9d d9 63 76 76 77 ce 9e be aa ea 7d 7f 7f d4 f5 56 75 75 4f 77 4f cf f4 f4 cc f3 81 99 9d ee 7e af aa ae 7a be ef f3 3e ef fb 16 c0 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 Data Ascii: PNGIHDR[tsBIT\|d IDATxy$ey[{/{xoQT@ "J~DMF&<QP((CD9cvvw}VuuOwO~z>00000000000000000000000000000
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 00 80 65 43 95 4b 50 95 32 64 b9 24 94 54 8f a5 06 fa 7e 5e d9 bb 37 6d 8d ec 4c 9d 70 df de 7f 5b 84 53 c1 30 0b 0a 0b 06 d3 35 dc 7f c2 11 4f ea 7d ce e9 ef 17 7d 7d 45 39 9b 7f 21 65 b3 06 19 29 33 4d 6a 00 86 01 08 01 a9 42 3b 9f 84 94 da a7 2a f8 d5 18 44 80 0a d3 1b 9e 10 c5 4b a0 e0 47 41 39 0e 48 4a 54 a0 0e ab 52 d9 80 a0 fb 40 b4 cf 9e 18 cf ec b8 fe 87 af 6c bc 72 86 e9 3c 2c 18 cc 92 e2 d1 33 9f f5 81 d4 f6 a3 0c 08 63 0d 09 e3 85 22 95 29 1b a4 4e 31 cd 14 14 00 a9 14 00 05 07 f0 bc 02 e5 8a 80 e3 40 49 07 90 ca f5 06 1c 07 ca b1 bd 7f 1d c0 91 e1 6b 25 01 e9 96 03 a5 dc d7 0a 80 94 11 41 80 a1 79 21 00 40 ae 37 42 24 5c f1 30 4d 90 61 00 c2 00 19 ee 0f fc 7f 49 00 42 b8 ef 0b 01 82 02 88 e0 96 e8 22 88 20 a0 50 28 57 0e 08 a2 43 f6 cc 4c 9a Data Ascii: eCKP2d$T~^7mLp[S05O}}}E9!e)3MjB;*DKGA9HJTR@lr<,3c")N1@Ik%Ay!@7B$\0MaIB" P(WCL
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: de 02 b0 62 11 ce d4 24 e4 cc 54 d0 f3 5c 30 4f a2 1e 2b c1 cb e8 e4 b0 d4 9c c9 dc 7d b6 a8 a7 17 c6 e0 10 44 df 00 84 61 c0 20 c0 2a 95 a1 2a e5 9b 8b 77 fe f6 47 c7 df f5 c8 bf b6 d8 10 a6 8b 61 c1 58 41 0c bf ed 4d 9f 10 99 ec 1b 33 e9 f4 6a 1b 80 b4 2a 70 f2 33 70 26 26 a0 ac 4a 34 70 dd 89 9e f7 7c ea ed 26 c1 70 2b 5d dc 7c cd 4e 0c d0 d7 7a 0c 0c c2 18 5c 05 91 c9 c2 10 02 24 1d 94 a7 a7 f7 d8 e3 07 3f 73 f4 f7 fe fb a3 2d 36 88 e9 42 58 30 56 00 23 57 5e 7c b3 e8 e9 79 62 26 95 1e b4 94 82 53 2e c1 1e 3f 0c 99 9f 76 77 f8 f3 63 13 71 ba c9 90 ce 23 2f 7b 18 73 20 25 20 25 28 d7 03 63 d5 1a 37 e6 21 04 52 4a a2 5c 2e 3f 66 8d ed fb d7 a3 6e fc d9 67 5a af 80 e9 16 58 30 96 29 f7 3c f5 98 2d ab 9e f9 c2 cf 9b a9 d4 19 c2 34 20 a5 82 5d 98 85 3d 7e Data Ascii: b$T\0O+}Da *wGaXAM3jp3p&&J4p\|&p+]\|Nz\$?s-6BX0V#W^\|yb&S.?vwcq#/{s % %(c7!RJ\.?fngZX0)<-4 ]=~
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: f4 1c eb d8 0e ac 03 a3 90 f9 a9 c6 17 df c5 61 2f a3 bd 79 c0 82 d1 fe fa 5a ab 32 f2 3d 48 09 98 26 52 9b b6 20 d5 db 0b a7 52 91 ce d4 c4 55 db af fb de bf b7 d6 20 a6 55 58 30 16 89 dd 6f 7d c3 1b cc 55 43 ff 66 a6 53 43 95 d9 3c ac bd 7b 41 4a 41 cd e7 1b 60 c1 68 6f 9e 20 6b 17 1c 5f cb f9 ba 43 30 dc ea 62 19 1d 07 c6 da 75 48 af 5b 0f a5 14 64 a9 f8 cb 6d ff f7 ba d3 5b 2b 9d 69 05 16 8c 45 60 cf 3b 2f ff 3a 32 e9 f3 05 91 a8 8c 8d 41 4e 8e bb 33 a0 40 20 02 54 47 6e e2 65 2e 18 f3 c8 c7 82 d1 ce fa 5a af 36 f1 7b 90 12 94 ce 20 bd 65 2b d2 d9 2c ca e5 ca 23 a5 c7 ee 3f ef b8 9f fc e6 0f ad 37 8e 69 14 16 8c 05 66 e4 3d 57 fe 3a 97 cb 3c b3 58 28 c1 da b7 17 aa 5c 06 09 e1 0a 85 ea 52 c1 68 47 fe c5 a8 8b 05 23 29 53 6b 75 f9 79 17 71 72 56 cd ef Data Ascii: a/yZ2=H&R RU UX0o}UCfSC<{AJA`ho k_C0buH[dm[+iE`;/:2AN3@ TGne.Z6{ e+,#?7if=W:<X(\RhG#)SkuyqrV
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: dd 80 a5 ca 83 6f 7d fd 5f e4 d6 6d f8 b8 6d 3b 28 ee da 09 e5 d8 e1 36 1e 48 be 24 55 ec 95 d2 3f f1 02 15 51 df 42 45 7e ab 48 ee 50 34 18 86 59 00 0c 03 d6 fe 3d 28 8e 1f 42 a6 af ff e4 91 cb 2f fc 63 a7 9b b4 d4 61 c1 48 e0 c1 cb 2f fc cb dc 9a 35 ff 62 5b 16 4a 8f 3d ec 8a 05 a8 ce d3 f1 e2 a6 1e ee 90 14 00 28 15 91 85 e8 7b 88 fc 1b 29 5e a1 3a 1f c3 30 ed 45 18 b0 46 f7 a2 70 f0 00 d2 b9 9e 93 46 ae 78 e3 9f 3a dd a4 a5 0c 0b 46 8c 07 df 7a c1 5f 64 06 06 3e 52 2e 16 51 da fd 58 b8 2f 20 80 60 4f a3 06 bc 8c e0 5f 8a 7d 48 81 a4 c4 52 26 94 a8 7c 2f 83 45 63 31 e1 f3 bd b2 20 c3 84 73 70 14 85 03 a3 48 e7 b2 27 0e 5f 71 f1 bd 9d 6e d3 52 85 05 43 e3 fe b7 be fe 2f 33 ab 06 ff c5 2a 96 dc 98 85 bf ec 5a 25 08 40 95 4d 49 f2 32 bc bf 93 bc 05 15 ca Data Ascii: o}_mm;(6H$U?QBE~HP4Y=(B/caH/5b[J=({)^:0EFpFx:Fz_d>R.QX/ `O_}HR&\|/Ec1 spH'_qnRC/3*Z%@MI2
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 95 e0 71 44 fe 0e 86 b2 28 3e aa 05 5f 6c 74 78 9a ed 0a 84 bf f0 f6 d2 ca f9 34 0c d8 63 a3 40 b1 08 63 cd da 0f b5 bf 51 4b 8f 65 2b 18 7f 78 cb 6b 3f 9e e9 ef 7b e9 f4 de 11 c8 4a 19 8a 5c 25 08 2f 0b 7f 38 88 a2 db 7d 28 15 11 08 15 89 2d 44 85 a4 d6 3e 53 8a 62 6a a1 4f b3 0d 03 20 ee 47 49 5e 86 d6 96 6a 2f 23 5a 74 e2 90 56 3d d8 d0 30 4c fb 10 02 a5 91 5d 30 15 d6 ac 84 87 2f 2d 5b c1 30 fb 87 ae 98 1d 1f 87 3d 39 01 08 11 11 81 30 16 e0 19 62 ad 87 ae 80 1a 01 70 cd d6 26 06 c0 a3 ab c4 a3 6e 07 aa 82 0d 11 01 82 3e cb 4a 45 45 a6 2a 00 ae 90 24 0e 8b e2 65 74 8b d8 74 4b 3b 99 36 d3 a1 ef 5d 29 14 86 77 c2 4c a7 4f 1c be fc a2 2f 77 a6 11 8b c3 b2 14 8c 7b de f1 96 51 55 2e e5 4a a3 7b a1 0c 23 f6 69 6c 5e 91 ef 65 44 bc 02 bd 9b ef 41 7a fa 6a Data Ascii: qD(>_ltx4c@cQKe+xk?{J\%/8}(-D>SbjO GI^j/#ZtV=0L]0/-[0=90bp&n>JEE*$ettK;6])wLO/w{QU.J{#il^eDAzj
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 78 38 aa 3e dd 74 9c 5d d4 d4 96 68 f8 bb 20 c0 71 50 18 dd 0f a3 af ef b5 0b da a6 05 a6 fb 04 63 ec 1b 2f 1e 7d d2 8e 53 67 1e dd 89 82 10 50 ca 37 99 2a 18 5a 92 be a9 d5 0c 37 a1 56 00 5c 1b 2a 42 4c 48 e0 0a 4f c4 fb 50 61 6c 21 b0 de 14 0e 4d 29 20 1c 9a 4a f2 32 f4 fa 74 cf 03 88 dd 60 9e 24 d4 da 67 2a 69 05 b8 8a e6 56 b1 7c 4d d9 9a 6e 32 4c dd 06 9f db 9a 2c 5b 6f 4f 08 d8 93 e3 10 a5 72 ef c8 95 6f fc 4d a7 9b d3 2a 5d 27 18 e7 fc 61 d7 37 7e 7a 54 1f 0e 0a 09 47 2a 54 b4 00 b7 04 02 17 20 1e 00 97 12 55 d3 6c e3 b8 79 62 c3 4e 7e 86 e0 1d f7 77 f5 5e 54 0d 0c 4d 21 29 81 e6 65 c4 93 e8 75 54 e5 47 ac 6d 5e 4a a9 c2 04 5a fa b9 f7 99 5a 02 74 c4 58 2c f1 73 c2 2c 1f 88 50 dc b3 1b 10 c6 d3 47 de f8 9a 2b 3a dd 9c 56 e8 2a c1 38 eb 27 1f fc d7 Data Ascii: x8>t]h qPc/}SgP7Z7V\BLHOPal!M) J2t`$giV\|Mn2L,[oOroM]'a7~zTGT UlybN~w^TM!)euTGm^JZZtX,s,PG+:V8'
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 5e 7d 73 a7 9b 33 17 4b 56 30 b6 0d ac bd 7c 6c ea 30 1c 25 e7 4e 0c 85 52 79 16 b7 bc f0 04 60 d6 42 05 0a 8e ef 69 c8 d0 9c ea 3f 7e f7 de 7f d0 92 3f 34 e5 8b 8a 9f 47 1f fc af da 67 4a 9b a2 aa 80 ea 00 38 1a f0 32 92 d2 e8 23 45 89 43 53 5a 3b ea 04 c0 ab 7d b2 d8 f4 5b d5 e1 69 b6 1d aa 78 e5 0c 47 2d 01 83 d8 20 5d 15 f0 6e 77 5b 0d 03 a5 fd fb 90 ce 64 4e 7a ec 75 67 2e e9 15 e0 4b 52 30 5e f4 c3 f7 bd 5f 0a 6c de 5f 98 84 d1 c0 3c 69 02 c1 b2 cb d8 db 9b c2 f0 8b 8e 85 51 74 50 52 12 04 42 49 29 4c 79 e3 3b fe 6e b6 be 97 11 08 88 a2 60 95 b4 7f 8f 05 c1 6e d2 b6 4b 87 96 c4 f3 32 aa 1e b4 14 df 67 4a 2f 54 fb 3b ea 65 68 65 26 ee 33 a5 12 cb 88 04 c0 e3 f5 c4 47 a9 62 af 95 d2 ea d5 da b3 92 20 fe e1 9f a5 f2 e3 38 a8 1c 3a 84 f4 ea 8d ef c6 12 Data Ascii: ^}s3KV0\|l0%NRy`Bi?~?4GgJ82#ECSZ;}[ixG- ]nw[dNzug.KR0^_l_<iQtPRBI)Ly;n`nK2gJ/T;ehe&3Gb 8:
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 5e 86 d7 2d d1 1f c4 54 ed 65 a8 d0 cb 50 d5 ff ea 99 74 93 af bf 13 79 9c 2b c5 d2 28 04 8f 86 8d 7b 3b 81 10 e9 9e c8 42 8b 46 13 f8 cd 90 00 66 1d 89 19 29 51 91 12 4e b9 08 14 f3 40 79 06 e6 e6 e3 d0 f7 d4 67 62 e8 b4 e7 60 e0 98 63 90 1a 5a 0d 61 1a 10 e9 0c 00 b8 c3 4e de aa 7f a7 52 69 4f bb 8c 2c 72 ab b7 21 b7 86 80 ed a7 82 48 40 4a 1b d2 2a c3 a9 94 51 1c 7b 14 b3 23 f7 a0 b0 eb e7 c0 ec ad 30 30 0e 23 b5 03 42 0c 79 02 52 c3 92 03 71 7b e8 a5 53 d1 2f 2c 41 77 a3 36 55 85 ff f8 f1 38 fd f3 aa 90 41 b2 51 ac ba d2 22 8a 51 9f a0 a9 2a 76 ff 54 19 e3 50 2c 94 66 d4 49 3b d8 6a 6d 52 a1 98 ea 06 b8 2a 99 ae 0a b1 3f f5 43 ae 23 1e ba 8b 47 52 ff de b4 9b 12 31 2d d1 4c 98 de 3e fd 23 0a 14 4d 9f 27 49 70 8a 13 48 e7 d6 9d 84 25 c8 12 31 0b c0 99 Data Ascii: ^-TePty+({;BFf)QN@ygb`cZaNRiO,r!H@JQ{#00#ByRq{S/,Aw6U8AQ"QvTP,fI;jmR*?C#GR1-L>#M'IpH%1
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 88 20 44 f8 6f 34 3d 12 50 d5 9a 51 25 12 f1 fc 0e 32 ab 8e 87 78 d6 d7 e2 12 dc 31 3a de 8a 67 7f ff 2f df dd 97 ed fd e7 fb 0f 0d cf db bb 48 42 02 18 ec 5b 85 73 7f 74 1f 56 3f 3c 06 33 65 a2 87 dc 19 53 22 b8 79 3c d1 30 5c d1 00 dc d8 83 21 dc 00 84 f0 0d be 08 8d 6a e4 5e f1 cb f1 f6 f2 20 ef 82 8e 5e 90 14 8d 65 10 a2 f1 8e 1a 5e 46 30 7c 44 b1 34 d0 ff 8d 4b 47 90 39 14 0d ef 18 22 37 9e 66 6e 92 86 a6 a0 1f cf 7c 50 c9 c6 69 56 2a 4c 3a 12 e5 c2 2c 30 b9 1f fd a7 bf 0a 5b 5e 77 21 fa 8f 3d 0e 24 04 a4 e3 2c 4b 91 a8 05 09 03 20 01 7b 76 1c 87 ee f9 31 a6 ef fd 67 a4 45 1e d9 dc 56 90 10 f1 ce a8 fb b7 e6 89 b8 ef 27 a5 8a 5e a7 20 15 11 8c da 06 2b fe 76 b4 1b 1e b9 2e e2 df b1 5e 3e 45 af 5b 5d 3c 42 43 4a 11 7b 1e 89 29 04 ed d7 49 6e 7f 24 3e Data Ascii: Do4=PQ%2x1:g/HB[stV?<3eS"y<0\!j^ ^e^F0\|D4KG9"7fn\|PiV*L:,0[^w!=$,K {v1gEV'^ +v.^>E[]<BCJ{)In$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50153	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	797	OUT	GET /X7G-hd59XdxQgAu0Pg3jUf5LoAQQqSWjyKZSk0lvDBnRdboJB3f6rLhL9PSJLNy-ONa8vUba3hHAB3dmf35jpCuWWnabyN0BBDYYoXLZf1sMNPthFg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:37 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5805 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:30 GMT Expires: Tue, 28 May 2024 21:11:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 5527 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 64 49 44 41 54 78 9c ed 9d 79 98 15 d5 99 ff 3f ef a9 aa 7b 6f 2f 34 4b b3 2f 82 80 28 8c 60 04 64 13 e4 a7 82 1b 1a 89 cb 38 2e 93 49 c6 38 eb 33 f9 65 fc 25 a2 18 e3 38 6e 41 74 9c 68 1c 27 93 38 4f 36 b3 99 98 c4 b8 a0 a0 71 8b 6c 46 45 d4 44 11 50 44 96 66 ed f5 2e 55 75 de df 1f 0d da b4 dd 74 df ee 5b f7 de c6 fb 79 9e 7e ba 9f ae aa f3 be 55 df 3a a7 ce f2 9e 73 a0 44 89 12 25 4a 14 29 52 68 07 72 88 01 2a f8 dc fc 32 4d 35 24 b0 c4 31 36 86 35 2e c6 ba 20 06 44 b0 80 aa 45 d4 22 26 c4 d8 00 c4 27 b4 e9 9f 9e 3d 2f 75 d9 57 6e 4b 01 8d 40 50 d8 db c9 0d 3d 59 e0 2a 3d 6b 66 7f ac 56 63 a8 06 46 Data Ascii: PNGIHDRxx9d6sBIT\|ddIDATxy?{o/4K/(`d8.I83e%8nAth'8O6qlFEDPDf.Uut[y~U:sD%J)Rhr2M5$165. DE"&'=/uWnK@P=Y=kfVcF
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 6e f7 83 05 9e 94 c4 6d 8d 11 48 86 36 1c 1e 8b 7f 07 db 78 a3 2c 5f b7 3b 12 3b 11 a4 29 7a c6 d4 e9 c4 dd ff de e9 87 25 71 db c1 2a 24 8c 71 6a fc cc e5 38 f1 f3 a2 b2 e3 e6 38 3d d1 79 d3 e7 20 7c 73 57 10 cc 34 d2 73 3b 2d f2 41 0c ea ab 1c f7 3e 59 b6 ea 37 51 d9 c8 65 11 2d 3a 6f e6 1c 1c ee d8 15 04 d3 73 98 ee 11 49 1c ea ab 8c 73 af 2c 5f 75 07 50 1b 95 9d 9c e5 60 3d 63 ea 34 c4 de be 2b b0 25 71 3b c0 83 c6 7c 88 0b 39 fa 06 eb dc a9 c7 81 bb 64 57 10 ce ca 45 7a 47 32 8e 6a aa 8f 31 77 cb f2 55 4b 88 58 5c c8 81 c0 2b fe f9 b8 6a 12 ce 9d 3b 83 60 6e 11 8c 5d 14 35 61 a8 b6 9f e3 2e 91 e5 ab ef 00 ea f2 61 b3 db 45 f4 e9 1b 7a df b5 2d 08 16 c4 8a bc b6 dc fa d5 cb a7 af 07 47 99 86 78 ce 8d b2 7c d5 dd 34 07 f5 e5 85 6e 09 ac 67 cd 58 bc 35 Data Ascii: nmH6x,_;;)z%q*$qj88=y \|sW4s;-A>Y7Qe-:osIs,_uP`=c4+%q;\|9dWEzG2j1wUKX\+j;`n]5a.aEz-Gx\|4ngX5
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: ee dd eb fb f7 77 3d f1 12 d9 f0 89 2e 0a 5d cd 30 7c f3 45 55 19 db ed 3e 2a 6b 70 fb 37 e1 8e d8 87 cd 54 a0 bb 3d 02 ab 8c 7d fe d5 4b 81 7d dd 4d be 44 c7 7c 32 07 37 b9 d5 c9 8c 4c c8 95 01 0d 1c 9c ea 90 ca 33 de 26 31 67 3f 99 aa d4 16 60 63 ae d2 2f 71 78 da ea 8b ae f6 7d 8e 8a e5 72 de a1 15 88 1b 2a 66 6f a2 72 aa f7 6d 22 9b 4b d7 31 f3 97 ea 67 c9 5d 70 5e a1 11 a0 d6 71 78 73 d9 d5 b2 bf ad 13 5a cb e8 00 47 55 94 09 1d b6 7f b3 f6 44 a8 6f 32 54 f5 4a ff 3c b7 29 67 47 98 69 3c 72 da dd 22 a8 0d 3f b0 b1 5e 5f a2 9d 15 7c 5a 17 d1 e5 a0 a3 a3 a8 de 8a 40 dc b5 2f 93 91 48 66 b2 7f 5a b1 36 ac b2 d0 b7 bd e3 ad 04 ae 28 03 46 44 35 87 2c 1e 33 cf cb 7c 2d 0d 28 e4 0a 55 04 ed ed 08 d5 ed 9d 72 88 c0 fa 74 32 81 32 2c 1a 67 00 58 c3 91 f3 fd Data Ascii: w=.]0\|EU>kp7T=}K}MD\|27L3&1g?`c/qx}rform"K1g]p^qxsZGUDo2TJ<)gGi<r"?^_\|Z@/HfZ6(FD5,3\|-(Urt22,gX
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 6c 0a fb f1 ab c6 99 5c d5 30 8a 6a 8d 53 de dd 48 58 05 f5 b5 62 d7 ef 36 fe f3 b9 ba f8 af 3b f2 a9 07 50 7e da 52 fd 9a cd 24 4f 92 48 06 ce 04 55 52 56 f9 23 9d 58 c2 b8 a3 87 19 12 ea b2 72 4f df 15 f1 79 35 3d 86 ff 69 98 c4 9d a9 c1 f4 c3 b4 d9 04 ea 2a 61 63 30 78 d7 e3 9b bf 7e ae 5e 7f 51 ce 12 cd 3f 72 ea 37 f5 2a 03 97 a3 36 1e c9 3c 3b 01 27 5e b9 c5 d4 3d f4 64 27 4f ef 90 98 be 1a ff df df bd 37 e1 f2 5f 06 83 59 1b 96 53 46 34 d9 4c ad e2 f6 89 bf d3 ff ec d1 df 78 4c 6e fd 05 3d 6c 26 e2 69 77 e8 e7 45 b8 45 d3 0d 23 22 09 4d 05 d4 06 38 b1 de bf 59 b1 48 2e a4 13 2b f3 76 46 a7 0c 15 e9 9f de 5f 3e f6 fd d7 6c 05 e5 9d bc a8 2b 88 11 82 da f4 b8 dd 8f 6d fc e6 39 ba f8 0b f4 a0 6f f2 e9 4b f5 72 23 fc 9b 4d d7 47 26 2e 08 4e a2 f7 6e 94 Data Ascii: l\0jSHXb6;P~R$OHURV#XrOy5=iac0x~^Q?r76<;'^=d'O7_YSF4LxLn=l&iwEE#"M8YH.+vF_>l+m9oKr#MG&.Nn
2024-05-27 22:43:37 UTC	776	IN	Data Raw: 47 34 a1 f2 8e 45 c4 85 c6 63 1b 06 0f be f9 e6 57 cf e1 9e ad 48 ce 97 b0 8a 34 7b 5d a9 ff da 77 c3 1b c9 3b 1a 5e db 71 a5 89 b9 b9 df e9 a3 07 23 46 50 b5 7b fa 5f 94 58 bc cc f9 c9 77 89 28 0b e4 a5 fc 3c f9 f7 57 7c 35 b5 ad f1 56 e3 3a b1 82 f5 5d 17 13 02 ea c8 87 c9 f5 f5 5f 7a eb a6 27 97 45 6c 2a 6f 4c 39 e9 77 17 fd 44 1b ec b8 4f 73 5b 59 ad 12 1f 58 f6 c2 4b f3 1e fc 2b 0e 33 ed 33 57 e4 fb 49 3b d3 9f b8 e4 81 b0 21 b8 a4 10 e3 c9 85 46 3c a9 f3 fa 95 fd cf 4b a7 fe e8 6b 79 b3 99 2f 43 ad 58 30 e3 b1 4b ef 09 ea 33 c3 91 ac a6 33 f5 3c 04 b0 1a c4 06 94 fd e9 a5 79 0f 5e 0d e4 a4 03 23 1b f3 85 a2 7c ce ea 2f de 12 d6 fa 17 a6 6a 1a 87 1b cf 98 23 4a 68 01 f5 2d f1 81 15 5b 4c 85 f3 9b 17 4f fe c1 bf d2 c9 50 d7 1c bb 51 58 c6 78 43 a6 8c Data Ascii: G4EcWH4{]w;^q#FP{_Xw(<W\|5V:]_z'El*oL9wDOs[YXK+33WI;!F<Kky/CX0K33<y^#\|/j#Jh-[LOPQXxC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50149	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	560	OUT	GET /p4M1mK1Lbtc2tt54b6JUQUJ5U8RcwHnEAPH7_87X2NH9Rc8N9ek0Xm2BUq_wmLuOWXlylcDlZFOg4xF3aQtwsyF9frOHoqiQdWVpG-v4VO-Jb_4lIQ HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:37 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 24042 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:17:12 GMT Expires: Tue, 28 May 2024 21:17:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5185 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 66 00 00 02 00 08 06 00 00 00 b1 63 c6 cc 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 b9 f8 f1 ef bb d6 3e 7d 66 92 c9 64 92 90 40 a8 0a 48 0b 5d 6a 68 a2 14 05 14 15 c4 7b fd a9 5c af d7 4b b5 20 48 33 14 f1 ea b5 81 58 50 44 41 51 51 9a 17 11 48 28 41 04 94 2e 20 48 09 24 90 4c 7a 9b c9 cc 9c 73 f6 5e ef ef 8f 33 03 01 53 26 39 65 9f b2 3e cf 83 0f 02 b3 f7 9b 39 fb bc 67 9d b5 de f5 2e f0 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf f3 3c cf 6b Data Ascii: PNGIHDRfcsBIT\|d IDATxw]U>}fd@H]jh{\K H3XPDAQQH(A. H$Lzs^3S&9e>9g.<<<<<<<<<<<<<<<<<<<<<<<<<<<<<k
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 8a 6b 6d 68 ba 43 0c 19 e3 c2 cd 3b 72 2b 50 fd 6b 54 94 99 33 a7 e5 be e1 df a0 ad c9 bf ee 2d e4 42 85 2b cf 5c 70 7e c2 ea 61 20 53 04 ed c0 04 a5 1a 5f f5 a3 e2 b8 28 90 32 c2 a4 f6 2c e9 c0 82 b1 68 14 3a 55 b7 44 45 fe 1a 15 b8 f3 fe 69 6d df f7 6f d6 d6 e1 5f eb 26 a7 40 f7 19 f3 3f 15 18 8e 11 61 0f 81 09 98 c0 f8 64 5c 1f 14 08 44 98 d4 96 26 97 b0 ab 4d 1a 09 32 34 e5 a1 2e 2c 2a cc 77 ca e3 1a c9 ff dd 7f 61 ee ea f8 22 f6 6a c1 27 e6 26 d5 f1 b9 79 87 a7 93 f6 28 6b 75 aa 20 ef 44 4c 86 d5 6b 89 bd d8 29 a5 37 e0 c4 5c 8a 8e 54 62 1d ff e5 ea 49 3a 1a 70 aa cf a9 63 c6 40 de dc fc b7 4b b3 0f d7 28 5c af 86 7c 62 6e 22 a5 45 bc 85 5f 0a 82 e8 48 54 a6 88 31 a3 11 29 6d 45 f6 c9 b8 ee 28 30 2e 93 a4 2b 93 1c f9 0f 89 20 62 51 17 81 b2 38 c2 3d Data Ascii: kmhC;r+PkT3-B+\p~a S_(2,h:UDEimo_&@?ad\D&M24.,*wa"j'&y(ku DLk)7\TbI:pc@K(\\|bn"E_HT1)mE(0.+ bQ8=
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: f1 e7 ec b5 0e 05 92 56 d8 bc 3d 4b a2 0a 47 43 35 bc a1 5d 83 51 14 bd 60 5d 78 c2 dd 17 8c f6 53 1b 1b c1 4f 65 6c 84 f1 a7 cf fb 72 32 65 af 11 6b b7 29 95 c1 f9 b7 67 2b 18 ee 81 31 a9 2d e3 93 f2 da 94 4a e9 b0 36 78 a7 da e0 4f fb 5f b4 f2 b4 b8 43 6a 44 7e c4 bc 81 c6 9d 3e ff 87 81 d5 ff c4 58 f1 53 17 ad c5 29 4c 6e 4f d3 5e cb a3 a1 1a 98 88 45 35 8a 9c d3 1f dc 77 7e bb 4f d0 1b c0 8f 98 47 e8 33 ba 3b e3 cf 9c 7f 7b 90 30 9f c5 18 9f 94 5b 8c 03 26 64 93 b4 a7 e2 3b 1a aa d1 a8 46 20 62 ad b5 a7 4e bd a8 f7 b6 47 fd ef 6d c4 fc 88 79 04 3a ff 6b c1 be e9 0c 97 8b 31 bb fb f9 e4 d6 e3 14 ba d2 09 c6 e7 52 71 87 d2 a0 4a f3 ce 4e a3 c7 fa 96 b9 53 1f f9 df 8e 87 e2 8e a8 de f9 11 f3 7a 8c 3e 65 de c7 d3 59 bd c1 58 bb bb 9f 4f 6e 3d 0e 68 4f 58 Data Ascii: V=KGC5]Q`]xSOelr2ek)g+1-J6xO_CjD~>XS)LnO^E5w~OG3;{0[&d;F bNGmy:k1RqJNSz>eYXOn=hOX
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: b3 d9 a3 ef 29 f2 99 6d f8 73 6a 1c 39 c4 2f 0b 36 99 52 05 46 c0 f8 5c 0a f1 8b 7d ad 45 15 31 41 5b 3e d2 7d 67 df fb b5 9f c5 1d 4e b9 1a 7e c4 bc 70 ea ee df 4d 06 e6 e0 35 27 e5 37 45 92 63 52 7e 2e 5f 7d f9 bf b8 60 c9 3d cc 17 88 7c 6a 6e 1a 0a a4 ac 61 52 5b da 57 60 b4 28 75 21 81 b5 fb 1d 74 51 df 0f e3 8e a5 5c 0d 9d 98 17 1d 38 e5 34 09 e4 e4 70 84 5b b9 22 49 91 75 39 fe 6b f6 39 5c f3 fa 75 2c 30 96 a2 4f ce 0d 6f f8 d5 9f dc 51 4a ca 7e aa aa 75 29 0e b1 7c ea c0 8b fa 3e 1f 77 2c e5 68 d8 ac b4 70 af 77 ee 42 ae e3 76 6b 65 62 b4 81 ef 44 41 b1 d1 6c 1e 19 f3 ef bc 77 cb 2f d2 2e 96 76 bf 11 a5 61 85 aa 6c d5 91 25 97 b4 7e bb b5 87 18 8b 46 d1 fc 95 3a 78 d0 a3 e7 8f fd 67 dc f1 6c 8c 86 1d 31 6b 5b c7 d5 09 6b 36 38 29 03 28 42 68 b7 60 Data Ascii: )msj9/6RF\}E1A[>}gN~pM5'7EcR~._}`=\|jnaR[W`(u!tQ\84p["Iu9k9\u,0OoQJ~u)\|>w,hpwBvkebDAlw/.val%~F:xgl1k[k68)(Bh`
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 29 72 51 c8 c9 af 4d e3 ea 79 d7 b3 d8 0d d0 eb 17 05 d7 4a 80 f1 99 14 6d 49 5f 76 e8 c5 43 d5 21 62 c7 77 66 53 5f 8e 3b 96 61 75 91 31 e6 bf fb 1d 7b a9 04 87 c6 1d 47 a5 38 09 b0 32 8a 0f cc bf 92 ff 9b 7d 39 a9 70 25 3d 7e a7 e0 bf 50 4a 3d 30 46 a5 7d 63 22 2f 7e c5 dc b3 fb 6d f9 7b 0e 88 3b 0e a8 93 c4 6c 32 ed 9f b7 a6 31 2a 31 46 4a 31 a8 e9 62 ff 65 37 f3 c7 17 bf c2 9e f9 79 be 62 63 35 4e 61 54 32 a0 2b 93 aa 8f 87 d0 6b 5d 6a 09 93 b3 c8 4f f8 e1 84 d1 c5 f7 9d 1a 77 38 00 b1 0f e3 e6 ef bb e3 51 92 48 9c 25 42 ba f9 92 96 e0 24 cb b8 c2 6b 1c b8 f2 21 a2 cc 76 cc 4c 4d 20 47 03 b4 f5 ab 22 47 e9 68 a8 4d 72 69 12 be 07 86 17 27 35 68 b0 92 fe 09 97 a3 a9 d7 30 9a 1e df 7e ec 56 8f 2c b9 f9 c5 57 e3 0c 2b f6 c1 8a 24 92 9f 0c 8c 19 5d e7 fb Data Ascii: )rQMyJmI_vC!bwfS_;au1{G82}9p%=~PJ=0F}c"/~m{;l21*1FJ1be7ybc5NaT2+k]jOw8QH%B$k!vLM G"GhMri'5h0~V,W+$]
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: af 20 4c 3f 89 8c 70 b1 6f ad 44 50 75 8b 1e 3b e1 a6 7f dd 8d 52 25 35 4b cc f3 0f da ed 3b c9 20 38 23 f4 0f f9 06 13 14 75 4b 79 b8 f3 58 ce dc ec 3f 79 39 31 86 89 a5 29 d4 ba a0 40 20 c2 a6 ed 29 b2 c1 da 1b de 8b b1 a0 8a 2a 0b 54 f5 e1 d0 71 db 9f 2f c8 c5 56 c4 bf 2e 07 5c b4 e2 bc c0 98 a3 44 64 8a 18 9b 06 50 57 3f bf 73 6f 6d 86 1b 13 5d 4b a1 fd ff 10 6d ab cc 65 8d 10 16 8b e7 3e 79 d2 ad 5f ab cc 05 d7 ad 66 89 79 e1 21 bb bf 66 8c dd b4 99 7a 2e d7 92 a0 58 b7 9c 59 99 77 71 d6 56 5f e5 9e f4 64 26 6a 18 77 58 40 a9 8d e7 e4 b6 34 ed 6b 3c 85 44 de 58 ac 8b c2 e2 d3 ea cc 75 33 2f cc 7d b3 c6 21 6e 34 05 0e bc a8 f7 ca 84 35 87 89 b1 ef 04 50 57 1f bf 77 6f 0d 5c 40 be fb 77 e4 3b af 03 6d a3 52 29 4e 8c e0 22 f7 dc 63 27 de f4 ae 8a 5c 70 Data Ascii: L?poDPu;R%5K; 8#uKyX?y91)@ )*Tq/V.\DdPW?som]Kme>y_fy!fz.XYwqV_d&jwX@4k<DXu3/}!n45PWwo\@w;mR)N"c'\p
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: d9 cd 7f d7 8d 5f 64 da d9 b4 30 8f 0b 67 9d cd f9 4b ef 67 fe 08 2b 36 14 48 04 09 3a 93 f6 d9 4b cf 6f df 7a fa 57 64 66 f5 a3 6d 6e f7 5f d0 76 7d 3e af 1f d5 28 9a 2f a6 a6 1d 77 1b 5c a9 31 d1 60 d7 1f 09 73 33 47 7c 34 54 55 29 58 61 e7 6a 5d be 2a 89 79 c1 d4 9b 3e 66 60 73 df b0 a8 3e 44 92 66 54 54 e4 94 57 4e e3 7b f3 6f 66 81 08 e1 7a 92 b3 35 01 ed 96 87 1e bb 78 f4 8e 07 8b 14 6b 14 6a d3 fb cb 45 6d d3 f3 01 87 a9 0b 5f 11 1b cf 57 f1 86 e3 0c 85 d1 f7 52 18 75 3d 90 a5 1e 4e 9f 51 55 04 79 c7 76 d7 1e 31 b5 1a d7 af ce 88 d9 04 c7 5a 31 69 9f 96 eb 87 93 00 63 26 f2 89 d7 3f c7 9f 5e b9 9c 85 44 0c ac 65 be 53 6c 92 8c d1 47 9f f9 5a d7 be f1 bf 05 9a cf 5f ce 6e 7b f6 ee 73 db b6 72 61 f1 45 e3 93 f3 3a 89 0b 08 db 9e 66 b0 eb 87 d4 4b 52 Data Ascii: _d0gKg+6H:KozWdfmn_v}>(/w\1`s3G\|4TU)Xaj]*y>f`s>DfTTWN{ofz5xkjEm_WRu=NQUyv1Z1ic&?^DeSlGZ_n{sraE:fKR
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: bc 8d 73 df 05 6d e7 aa f2 b2 98 06 9d 8f 55 c8 77 fd 89 b0 ed 9e fa 38 1a aa 0a 04 52 92 a7 22 0b 80 15 79 95 c5 06 9b 07 7e dd af 7e 38 10 89 c8 be bf 87 e4 16 4b 08 8b 06 51 fd 5d dc 61 79 1b 4f 00 e7 e4 56 d5 c6 5b c9 11 97 a0 30 fa 7e 0a a3 af 05 ad a3 53 48 2a 49 01 91 a4 b5 54 a4 a1 51 65 3e 7e 0d 13 2a 72 1d af 7c 43 65 71 e9 c3 17 91 dc 76 21 06 03 e8 eb 21 ea 4f b8 6e 70 7d 09 73 b9 aa ce 96 b7 9f 3a 53 cf 34 a0 98 7b 96 c1 ae 1f 00 69 9a 32 29 0f 11 23 88 c8 a4 4a 5c ab 32 73 cc 2a 9b 35 de e7 78 73 d2 41 21 b9 ef 32 d2 bb cd 05 31 c3 4d 24 ef 4b 1f ce 2b 71 c7 e6 95 e7 b1 b3 33 73 9c 63 06 8d 52 a1 a1 16 4d cc 67 60 c2 d7 87 2a 30 1a 74 1a 66 a4 54 11 2a 33 48 2d fb 37 f5 e2 8b b7 a7 44 74 bc df f1 17 3f cd 0b 89 ed fa c8 1e f4 2a 04 a5 17 d7 Data Ascii: smUw8R"y~~8KQ]ayOV[0~SHITQe>~r\|Ceqv!!Onp}s:S4{i2)#J\2s5xsA!21M$K+q3scRMg`0tfT3H-7Dt?
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: e1 8b b0 46 40 04 23 31 8e 98 fd 71 52 95 a7 83 42 72 9f 95 64 0f 9e f5 2f 3d 30 46 f4 f3 ca b2 2a 84 e5 d5 a9 99 d3 a6 85 aa ba bc 2a db 09 d4 e2 12 0b 58 b5 c9 c5 60 2c be 00 6b e4 a4 cc 1a c2 72 7f d3 7e 2a a3 92 0a a5 1e 18 6d 47 3f 87 86 1b 5b 86 a4 75 d4 72 cc ab 05 41 06 2a 7e d1 a1 a3 a1 06 c6 ff 08 0d 56 80 fa b3 30 36 84 48 99 b3 11 e5 fc b0 c6 df 41 a5 79 84 82 e9 2c d0 f6 91 17 20 61 37 ee bc 4d 01 27 14 2b 1e 9b 57 d7 54 64 a0 b2 25 73 02 92 67 60 dc f5 84 99 27 5a e8 68 a8 ca d1 38 47 cc 7e b6 a9 42 9c 40 32 24 7b dc 6b d8 d1 f9 f5 96 c5 ad 95 82 44 66 69 65 83 f3 ea 9d e2 fa 2b 77 35 01 75 e4 bb fe 44 d8 76 07 d2 72 47 43 55 82 82 4a 59 3b 6f ca dc f9 e7 32 7e 73 49 99 5c e9 7f b2 1f e8 21 b1 f9 52 34 da f8 0f 5a 55 30 38 9f 98 5b 8d ca 60 Data Ascii: F@#1qRBrd/=0F*X`,kr~mG?[urA*~V06HAy, a7M'+WTd%sg`'Zh8G~B@2${kDfie+w5uDvrGCUJY;o2~sI\!R4ZU08[`
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 09 de ba 95 54 2d 61 6a 36 03 dd 97 83 18 7c 05 46 0c 44 00 5d 5c ee 65 ca 7e e5 04 96 b5 6a 5a d6 41 21 b9 eb 4a b2 07 cf 02 a9 ee 76 eb 0d e1 14 ac a1 b3 58 d4 8f c7 1d 8b 57 79 53 2f d4 d1 22 b2 f7 5b a6 31 74 a8 07 c6 a4 b3 c1 28 f5 32 48 68 35 02 28 b2 a0 dc eb 94 ff 91 aa ac 2c fb 1a 8d 28 14 82 cd 07 c8 1d f9 52 5d 25 e5 37 08 18 a3 07 c5 1d 86 57 79 a1 59 75 92 c0 84 37 a7 31 04 d4 b1 6a d3 af 83 2d 80 d6 b8 76 de 7b 93 00 5a fe 49 f5 e5 8f 98 85 de 96 1b 31 47 82 c9 14 69 3b fe 25 24 e3 ea f2 b0 70 e7 40 31 ef 8c ee e0 63 71 c7 e2 55 56 c2 70 98 31 41 b2 34 1a 10 c4 19 06 26 fe 98 28 f9 8c af c0 88 9d e0 60 45 b9 57 a9 c0 88 d9 ad a8 bf b4 54 45 0a 84 11 b9 8f bf 3a 54 16 57 9f f3 78 aa 10 58 32 ce d8 63 e2 8e c5 ab 9c 23 2e d7 b1 c6 b0 67 69 1a Data Ascii: T-aj6\|FD]\e~jZA!JvXWyS/"[1t(2Hh5(,(R]%7WyYu71j-v{ZI1Gi;%$p@1cqUVp1A4&(`EWTE:TWxX2c#.gi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50145	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	562	OUT	GET /NksFVpnLFiAE4YKEh9n84ebvfznogwh0AyAUDpmpLqpBP7h791LS9RcIzWpE8XfsiR0NJiHomxV8FyVO2ccMF2VzB_L3omeUWuHu9d3LGJ4Ww6JKviev HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:37 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 94168 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:29 GMT Expires: Tue, 28 May 2024 21:11:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 5528 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 87 00 00 02 00 08 06 00 00 00 69 43 a0 83 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec bd 79 b0 25 59 7a 17 f6 cb f5 de b7 d4 7b b5 ef 5d d5 5b 55 57 75 57 f5 4c f7 4c cf 74 f7 74 4b 33 12 12 96 30 02 83 80 08 1c 36 c2 80 65 04 46 6c 01 08 4f 20 61 d9 88 c0 c2 60 8c 64 09 64 a4 08 8c 65 40 11 12 03 61 20 42 60 c4 48 42 9a e9 99 e9 b5 aa ab aa 6b ef ea 5a 5f 55 bd f5 de cc 3c 8b ff 38 b9 9c 3c 4b de 7b 5f ed dd df 2f e2 bd 7b f3 e4 59 be 93 37 f3 fb e5 f7 7d 67 01 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 Data Ascii: PNGIHDRiCsBIT\|d IDATxy%Yz{][UWuWLLttK306eFlO a`dde@a B`HBkZ_U<8<K{_/{Y7}g@ @ @ @ @ @ @ @ @ @
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: ef 50 2f 4d 76 c6 51 b4 59 02 33 41 10 cc 42 62 a3 84 dc 18 c8 60 2e 08 c3 19 19 60 0a 52 f4 81 20 41 88 28 40 10 04 40 20 25 42 40 06 41 10 40 4a 19 04 08 24 02 48 29 21 a1 4e 08 01 21 20 04 93 08 b3 30 c0 50 08 b1 86 20 58 0e 02 2c 4a 89 45 29 e5 52 14 04 ab 9c f3 15 70 71 23 cf f9 87 bf fc f6 ff fb f5 3f fe 07 ff fc cd 07 7d 7d 08 84 f5 82 c8 81 f0 50 e3 da 89 b7 5e 4b 92 99 4f 27 49 b4 07 61 b0 05 52 3e 16 04 e1 5e 00 5b 02 04 31 82 20 05 64 1f 01 7a 69 9c 20 08 02 48 00 28 b5 7b eb 53 4a 00 80 fe bf fa e8 44 00 04 ea 1f ca 6f 08 aa ef 41 80 ea 14 e7 02 05 63 22 40 30 0c 02 0c 01 14 5c 88 1c c0 55 40 7e 18 20 b8 24 99 b8 25 c1 cf 0d 56 57 be b1 fd b9 17 de bc 5b d7 89 40 b8 db 20 72 20 3c 14 58 38 7d ec bf e8 25 fd 17 10 85 bb 02 89 27 25 82 a7 a2 20 Data Ascii: P/MvQY3ABb`.`R A(@@ %B@A@J$H)!N! 0P X,JE)Rpq#?}}P^KO'IaR>^[1 dzi H({SJDoAc"@0\U@~ $%VW[@ r <X8}%'%
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 28 5d 06 9d ab 80 75 4d 08 52 d6 84 c3 8a 02 8c 15 60 79 0e 5e 64 c8 8b 1c 92 33 48 ce 81 00 08 c3 10 71 1c 21 4e 12 a4 69 82 38 4d 10 c7 31 92 38 41 14 47 88 e3 a8 54 ee 01 a2 30 84 2c bd 43 2a 64 21 6a 19 19 53 d6 0e 63 0c ac 60 28 f2 1c 45 c1 50 14 39 18 e3 e0 5c c9 1d 94 0a 3d 4a 52 44 49 8a 24 49 11 27 09 e2 38 41 94 a8 b6 83 30 aa c9 a2 0e 4e eb a4 13 b5 e3 13 b5 7b 29 08 10 94 d6 85 45 0e 71 5c 7f 0f a3 18 51 54 12 4a 14 96 c4 51 59 17 25 91 04 01 b8 1a 0d 76 11 52 7e ed d6 ad 5b 7f ef b1 e7 5f fc 8f 0f f6 4e 23 3c 8c 20 72 20 b4 b0 7c fe f4 3f 0a c2 e8 b5 28 8e 0e 44 51 d4 28 64 ce 6b 17 91 3a 66 ca 02 28 ad 02 56 54 44 50 d4 e9 82 2b 52 50 ae 9f 46 e1 4a ed 6d be 22 84 c6 22 90 90 82 a3 28 0a b0 3c 43 9e 65 c8 86 6b 28 b2 21 24 2f 10 86 01 7a bd Data Ascii: (]uMR`y^d3Hq!Ni8M18AGT0,C*d!jSc`(EP9\=JRDI$I'8A0N{)Eq\QTJQY%vR~[_N#< r \|?(DQ(dk:f(VTDP+RPFJm""(<Cek(!$/z
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 18 be a2 93 5a 06 e3 12 43 07 e1 4c 50 6f 97 95 e3 22 06 68 a3 6a 9b c9 7a ea 5b 08 40 6a 4b 71 70 c6 b0 b2 b2 8a 1b 37 16 70 f9 d2 47 58 b8 b1 00 2e 80 fe cc 1c 66 66 e7 d1 9f 9e 51 8a 5e 1b 02 1b d5 24 90 94 69 71 ed 7a 8a d3 a4 b1 2e 92 b4 19 01 55 b9 ad 42 55 3e 89 13 64 79 b6 26 05 7e 6d 69 e9 f6 8f ef 39 fa e2 7f 1a e7 8a 12 1e 2d 10 39 7c cc 70 eb ec 89 df 93 44 e9 5f 08 a2 e8 e5 34 49 12 35 c9 8c 29 52 a8 62 08 45 01 56 e4 28 b2 1c 45 9e a1 c8 d5 31 67 4d 60 59 b2 c6 32 e0 e5 10 51 29 24 38 67 ca 55 b4 ba 8c 62 b8 86 7e 3f c1 8e 5d 3b b1 67 ef 1e 6c de b2 19 53 53 53 90 90 f5 c4 37 1d 6e 45 59 9f f5 58 05 5d e7 ee 15 31 74 e5 75 93 97 cf ba 68 a4 69 10 94 99 5d 16 43 95 5f 76 a6 37 24 82 ca 15 15 86 60 79 81 a5 e5 65 5c bb 72 15 1f 5d fa 08 cb 4b Data Ascii: ZCLPo"hjz[@jKqp7pGX.ffQ^$iqz.UBU>dy&~mi9-9\|pD_4I5)RbEV(E1gM`Y2Q)$8gUb~?];glSSS7nEYX]1tuhi]C_v7$`ye\r]K
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 73 39 e3 00 5a 5f f4 b7 7b 5b 69 37 a5 7c 73 21 00 db 92 18 65 31 54 8b 0b b6 64 ad 2c 8d 72 c5 58 29 05 96 96 96 f1 e1 f9 8b b8 74 e9 12 b8 88 30 bf 79 1b a6 37 cc 21 49 fb ca 95 94 c4 48 92 14 51 9a a8 f5 a2 aa 80 75 a2 dc 4d 15 61 d4 93 ee ca 21 b1 49 9a 82 15 6c 49 72 fe 95 0d 4f d0 12 1d 0f 33 88 1c 1e 52 2c 9d 3f fd 37 c2 30 fc 81 34 ed ed e2 dc 20 85 ca 75 94 65 c8 87 ca 5a a8 48 a1 5a 22 5b 94 a4 20 05 07 2b 0a 0c 56 57 b0 b6 7c 0b 33 53 3d 3c fe e4 13 78 6c ff 5e cc cc ce 00 52 b9 8d c6 85 3f c6 e0 d3 e0 ad 1c 2e e7 7d 59 af a7 cc 5d 73 3d b9 eb 70 b9 8d c6 0d 48 fb 82 cf 81 46 22 26 31 54 69 2e 8b 61 b4 15 d1 90 8e 77 e2 5c 99 d2 25 97 29 93 2b 6f 58 ae 6c 9b 65 39 ae 5d bd 8e 73 67 cf 61 f1 f6 12 a6 e7 36 63 6e d3 96 c6 9a 48 ca 15 6f cb 38 44 Data Ascii: s9Z_{[i7\|s!e1Td,rX)t0y7!IHQuMa!IlIrO3R,?704 ueZHZ"[ +VW\|3S=<xl^R?.}Y]s=pHF"&1Ti.aw\%)+oXle9]sga6cnHo8D
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 2f 36 6c da 8c 38 e9 a9 51 4c 69 5a 12 43 13 9b 50 b3 ad 2b 97 53 dc c4 24 e2 18 32 00 24 e3 bf 36 f7 e4 c1 2f 5a 5d 20 dc 33 10 39 dc 27 2c 9d f9 e0 2f 86 49 f4 23 49 9c 6c ae 86 a6 72 56 a0 c8 0b 35 79 ad 8a 2b 0c 87 60 79 86 82 15 10 95 b5 c0 0a 80 0b 0c 07 6b 58 bc 7e 19 d3 fd 04 9f fa ec 0b d8 bd 67 37 10 00 c2 31 14 b5 eb cd 7f 14 d6 b3 24 46 e7 b9 bb ea 62 ea 2a e7 6c dc eb 0a ea 76 c3 a8 b4 f1 89 61 bc b7 73 d9 ca 1f 78 87 97 da 79 1b 8b a1 4a 19 6d 49 b5 09 65 2c 99 a4 39 ea c9 ce e7 b2 7e 4c 92 51 7b 50 00 0b 37 6e e2 bd 77 8f 61 6d 75 88 6d 7b 1f c7 ec dc 46 45 00 bd 32 1e 91 f6 ca 60 75 45 16 15 51 b4 83 d6 49 9a 82 31 b6 22 18 ff fb 1b 0f 1c a2 85 fd ee 03 88 1c ee 03 96 2f 9c fd cd 24 49 5e 51 7b 28 37 71 85 3c cb 50 0c 07 8a 14 06 43 14 f9 Data Ascii: /6l8QLiZCP+S$2$6/Z] 39',/I#IlrV5y+`ykX~g71$Fb*lvasxyJmIe,9~LQ{P7nwamum{FE2`uEQI1"/$I^Q{(7q<PC
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: f2 a1 22 85 e1 60 ad 5c 4e 7b 08 96 17 10 a5 0b 49 94 6b 20 2d 5e fb 08 3b 77 6c c5 8b 9f fb 2c 66 e6 66 c1 0b 56 d6 dc ed 6e 71 3d 74 e3 a2 8b 18 fc 75 76 59 13 ee 32 5e c2 e8 20 9f c9 48 a1 cc 3f 81 c5 e0 0b 86 9b e9 be c9 6d be cb d3 b5 26 91 a9 4c ed 8f 46 b9 9b 64 30 2e e1 8d 4f 0c 0e 8b c1 33 34 d5 47 02 e3 58 16 ad be 19 16 83 75 54 66 89 a3 08 83 c1 10 ef bd fb 1e 16 16 16 b1 73 ff 53 98 9d 9b 47 dc eb 95 a3 9a fa e5 52 1c 29 d2 5e b9 02 6c bd 22 6c 63 45 24 49 8c c1 70 f8 cb 9b 0f 3c fb fb ac 4b 42 18 1b 44 0e 77 80 a5 f3 a7 df ee f7 fa 47 0b 56 ad 9c 9a a3 18 e6 c8 86 ca 52 c8 d6 d6 94 f5 50 e4 e0 79 51 4f 64 e3 45 81 a5 9b d7 01 36 c0 8b 9f 7b 09 8f ed 7f 4c ed b7 20 1b 95 30 32 f0 bc 6e 62 f0 97 9b 6c cf e6 f2 cc 5d 9b db a0 ce a9 b2 be f3 8e Data Ascii: "`\N{Ik -^;wl,ffVnq=tuvY2^ H?m&LFd0.O34GXuTfsSGR)^l"lcE$Ip<KBDwGVRPyQOdE6{L 02nbl]
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 91 2f df c2 67 5e 79 09 fb 1e df 07 c1 c5 3a ad 85 f2 ff 3a 88 e1 ee 8e 4a ba bb a3 95 1c ba a1 03 93 2b f0 b1 49 c0 e9 fe f0 d4 eb b0 16 aa 8c f6 9b bc ff 2d be 2a 5f 95 b1 96 dc 68 aa 75 d6 e7 92 77 b4 c5 e0 0f 9c bb f2 98 fd 69 5b 16 e3 06 9e db fd 69 9d 73 3d 0b 56 3e 57 9d cd b7 28 8a 70 f9 f2 55 1c 7b e7 3d 6c d9 b5 1f 9b b7 ef d2 dc 4c fd 66 a3 a1 44 9b 34 17 ab 79 11 49 1c ab 38 04 2b fe f5 96 83 cf 7d 2f 08 4e 10 39 78 b0 78 e1 f4 6f f6 e2 f4 95 6a 15 d5 22 cf d5 1e ce 6b 03 0c d7 56 d5 fc 85 3c 53 db 76 66 e5 a2 79 ac c0 cd ab 97 b0 69 7e 06 9f 7b f5 f3 98 dd 30 6b 8c 44 52 18 c7 45 a4 1e 96 c9 59 a1 bb dc 7a e2 02 93 12 c6 88 11 49 13 73 dd 64 56 c0 78 c4 30 39 e1 8c 37 1b b9 79 a3 6e 2b f2 f6 1b b9 1e 67 70 29 fa 71 17 f6 53 e9 ee d8 87 e9 8a Data Ascii: /g^y::J+I-*_huwi[is=V>W(pU{=lLfD4yI8+}/N9xxoj"kV<Svfyi~{0kDREYzIsdVx097yn+gp)qS
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 49 4e a3 64 1a 37 c6 30 7a 39 8c b6 c0 be eb d6 9c b3 7f 38 33 dd 7b dc ca 5f 7e d3 c6 fc ba c9 c1 4d 3a 51 18 62 69 69 05 ef bc f9 0e e6 b7 ed c5 b6 dd 8f 21 4a 13 24 3d b5 ec 46 9a a6 e5 16 a4 cd fe 10 51 19 87 e8 a5 29 b2 22 ff 8d ad 07 8f bc 86 4f 28 3e b1 e4 b0 74 f6 e4 7f 48 7a fd 6f e7 9c 83 97 81 e7 62 30 c0 70 ad 74 25 0d d7 50 64 43 14 55 e0 59 70 dc be fa 11 e6 66 7b 78 f5 db 5e 45 af df 87 e0 ae a5 d8 70 cf 89 c1 f7 00 8e aa d7 3f 9a 69 32 c2 f0 f6 6f 4c 17 5a 55 b7 4f f9 6b a7 c7 2e e3 23 81 f1 2c 06 f7 92 db ae 05 ec 4c 37 8b 5f 99 b6 a4 6e 7d 73 8d 16 ea ba 16 ae 89 6b 2e b9 5c f2 b8 46 29 05 5a 3e bb 7e bb 0d ef 1c 0f 43 d4 96 e2 76 29 fd 31 89 c1 ca d3 99 cf 43 4e e5 47 10 06 28 f2 02 ef bc f5 2e 82 78 06 7b 9e 3c 80 b8 df 43 9a a6 e5 48 Data Ascii: INd70z983{_~M:Qbii!J$=FQ)"O(>tHzob0pt%PdCUYpf{x^Ep?i2oLZUOk.#,L7_n}sk.\F)Z>~Cv)1CNG(.x{<CH
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: fd 5d e4 61 4c 84 71 91 85 2d ab db b5 54 1d 87 61 80 a2 60 78 e3 b7 de c0 d6 bd 4f 61 db 9e 72 a8 6b da 47 9a aa 18 44 3d 8a a9 24 88 b0 dc 9f ba c8 8b f3 db 0e 1f 7d 1c 1f 63 7c ac c9 61 f9 dc 07 6f 27 bd de d1 22 cf 5b b3 9e 07 ab ab c8 56 57 90 95 16 43 91 65 e0 9c 63 f9 c6 55 f4 62 81 2f 7d f7 77 22 8e 63 f7 8c 67 60 2c a5 3f 99 2f 7e fc f2 ae 07 b3 7d 7e 12 62 f0 a7 fb fa 38 7e bf 24 dc 55 77 93 9e 56 d4 59 97 53 b5 38 48 a0 cb 62 68 29 72 47 8c c1 ad ac db 16 83 3d 1a a9 5d d6 a5 d4 01 ff 3a 49 a6 0c e3 2c a2 e7 9b 09 dd ae cb 45 4a e3 ce 63 d0 ae b8 57 01 eb ba d8 a3 f4 0d 59 5a e5 a4 59 97 23 8f e3 87 b3 87 b0 9a 79 5c 2f 31 8e 7b 2f 00 a4 90 f8 e6 d7 be 81 0d 5b f7 62 d7 e3 4f 20 4c 92 7a 55 d7 6a b9 8d 6a 78 ab 9a 4d 9d a0 df eb a1 60 c5 e9 ad Data Ascii: ]aLq-Ta`xOarkGD=$}c\|ao'"[VWCecUb/}w"cg`,?/~}~b8~$UwVYS8Hbh)rG=]:I,EJcWYZY#y\/1{/[bO LzUjjxM`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50156	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	786	OUT	GET /7hNVq4eXYDqKikz_x6QUIN1x3ArrF3IzcaNWS6TQpna79BIWfNfnRviifT6hBugE7mYpKpiM7Ps7YN5XkGFmXaTyTKjiYsUoNquxGvQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:37 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 10341 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:16:10 GMT Expires: Tue, 28 May 2024 21:16:10 GMT Cache-Control: public, max-age=86400, no-transform Age: 5247 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ed 9d 79 9c 5c 47 75 ef bf a7 6e af b3 6a 66 24 8d 24 6b b1 24 cb c2 b6 6c 79 37 36 78 c5 10 8c 17 08 60 e3 d8 0f 1c 08 79 40 20 2b 3c f2 92 10 5e 0c 49 c8 4b 1e c9 cb 63 49 d8 92 4f d8 62 43 00 43 88 59 62 08 c6 26 c4 78 43 b6 c0 b6 24 5b b6 65 c9 b6 96 d1 ec dd 7d ef ad 3a ef 8f 7b 6f 2f 33 dd d3 dd 33 3d 96 01 fd a4 9e 9e b9 b7 aa 6e 55 fd ea 9c 3a 75 6a b9 70 14 47 71 14 47 71 14 47 71 14 47 02 72 a4 33 b0 18 d8 f1 96 37 e4 f3 9e 64 c5 33 19 e7 e5 d3 c6 23 a5 46 44 f0 0c 80 d1 d0 39 45 c5 b9 50 8b 05 3f 08 6d 80 17 94 d6 ff fd cd 85 23 9d f7 4e e3 67 9a e0 87 5e 72 41 36 bf 72 Data Ascii: PNGIHDRxx9d6sBIT\|d IDATxy\Gunjf$$k$ly76x`y@ +<^IKcIObCCYb&xC$[e}:{o/33=nU:ujpGqGqGqGr37d3#FD9EP?m#Ng^rA6r
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 7e 60 c3 e7 6e f9 b3 e6 99 e8 3c 9e 73 82 77 5d 79 e9 31 d9 b5 ab 6e 0b c7 c6 5f a0 a5 3a dd 54 bb 12 dc 42 9c 23 42 70 d5 73 25 9b c3 f4 f6 3d 58 3a fc e8 a5 2f f8 da 7d fb 9b 67 a6 73 78 4e 09 7e f4 86 d7 fe 6e 2a 9d fd 6b 3b 7e b8 31 79 2d 19 3c ed c5 39 d2 04 27 c3 39 af 77 10 b4 f8 96 f5 37 7f e3 e3 cd 33 d4 19 3c 27 04 ef ba f6 8a 41 d7 dd f7 09 cf 2f be 9a e2 34 22 a6 72 b3 59 c5 fe 3c 10 5c 15 c0 e4 bb 90 5c fe 73 ae 30 fa f6 8d 5f fa 8f b1 e6 19 5b 18 16 95 60 05 79 f8 86 57 9e 99 f6 72 1f 91 c2 f4 59 1a f8 65 72 25 19 cf fe 42 11 4c 34 bc ca 64 d0 9e ee 3b d3 53 e1 db 8e fd ca ad db 9b 67 6e fe 58 34 82 1f fa 6f 57 a6 3d ab 97 91 ce fe 6f 4a 85 17 60 2d 82 60 62 62 1b 12 3c f3 da cf 1b c1 91 b9 8d 78 19 bc 7c f7 36 55 fb ae 8c 0d be 77 cc 97 be Data Ascii: ~`n<sw]y1n_:TB#Bps%=X:/}gsxN~n*k;~1y-<9'9w73<'A/4"rY<\\s0_[`yWrYer%BL4d;SgnX4oW=oJ`-`bb<x\|6Uw
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: eb 60 11 8d a7 0f a3 ba 88 ee 69 54 4d 15 a1 2e 4b 92 cc 14 e3 7a e4 3a 47 e8 17 b1 62 60 d5 1a 64 dd 46 e4 98 b5 48 5f 1f a9 ae 2e 52 3d 3d a4 d2 19 34 9b 0d a5 0b 17 06 25 8f 30 d4 b0 30 69 b5 30 65 dd f4 b8 0d 46 9f 50 3b fa 10 6e ec 27 2a 2e 40 bc 1e 44 bc 48 b6 ab 08 16 22 ff 4d a2 9d 28 37 c4 98 8c f8 77 43 a4 ac 8c 01 a3 12 95 56 2c 46 3c 2d 17 9e 19 e5 13 45 44 b5 9c b6 28 c6 8b 92 16 03 a8 1a 8c 3d c1 76 f5 bd 1e f8 58 2b bc b5 24 c1 27 7d e1 37 7a 45 cd 17 4a 36 78 79 b5 e1 e2 80 34 c2 65 f7 1f e0 ac 1f ee a1 ab 2b 45 bf 08 d9 58 92 4d fc f1 92 c1 2f 82 89 a5 d5 90 48 74 95 e4 d6 91 e2 e4 ef 32 6a c6 8d 8e a0 54 c4 76 75 63 4e 7b 21 a9 cd 27 91 5d 31 4c 6e 78 25 d9 e5 c3 98 4c 26 36 e0 12 0b 6e 66 e9 63 03 d0 06 04 93 cf 12 8e 3d 4d 30 b2 97 e0 Data Ascii: `iTM.Kz:Gb`dFH_.R==4%00i0eFP;n'*.@DH"M(7wCV,F<-ED(=vX+$'}7zEJ6xy4e+EXM/Ht2jTvucN{!']1Lnx%L&6nfc=M0
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: f0 34 a0 21 c1 73 ba 2a ad af 5b 71 ac 9b 2b 8c 56 fd 33 ea 78 68 20 c7 13 9b 87 28 f9 0e e7 a2 59 a6 50 95 49 b5 d8 aa 32 27 de 9c 48 55 6b b9 35 bb aa 61 27 d6 51 28 4c 30 7c e3 df 54 c8 4d 54 7a dc 36 ee 7c 44 78 ff 57 3d be fd b0 b0 6f 32 ba 9d 31 15 89 ad c9 6b 1d 33 42 88 1a 43 26 4e fa a9 49 f8 c6 4f 85 1b 6f f1 f8 c1 0e a9 08 50 5c 5a 30 64 06 37 d2 7f c6 df 91 ef 1e a5 bb 0b 32 59 93 9c df 82 94 e7 46 a5 42 6a 32 3e 2e 8f 77 2a f7 cb 7d 71 65 7c 55 15 2f 31 26 a8 18 16 e5 8c 1b ac 9a 0d be d5 ad 73 f1 d3 90 e0 2d 9f 7f c7 ea 40 c2 53 ac b4 b8 11 3b ce 53 c9 13 ee 5f d5 cb de 4d 03 68 18 4f 23 aa 23 54 65 ca 39 2c c9 62 bb d8 8c d2 0a d9 e5 89 06 17 c5 29 1e 78 82 a1 3f fa 0b ba 37 6d ae 21 d7 c4 0d e4 93 77 08 7f 75 9b e1 e0 74 f4 ec 94 a9 d2 7c Data Ascii: 4!s[q+V3xh (YPI2'HUk5a'Q(L0\|TMTz6\|DxW=o21k3BC&NIOoP\Z0d72YFBj2>.w}qe\|U/1&s-@S;S_MhO##Te9,b)x?7m!wut\|
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 4a 21 3c fa 0c 1c 9a ac d2 b0 ea a0 6b 25 61 fa 38 9c 06 31 99 5a 45 9e 99 a5 ae 6b 86 52 65 b5 5d f5 a1 aa 71 d4 cf 59 f5 f7 80 dd fe aa 59 63 8b 59 04 5b f1 b3 22 d2 5f 9b cc c2 c8 36 80 9f 12 fe e3 a4 e5 8c e7 d2 d1 02 33 a2 f5 d4 38 8d d5 76 48 66 f5 3a b2 cb 6a 8d ab 64 e2 c0 6b a6 51 16 d8 e7 36 0a 5b 6f dc 6f 04 f6 4d c2 a3 cf 56 4b b1 83 ec 30 2e bd 16 4d a6 03 6b 54 33 55 a4 d5 51 b3 0b 85 6a 1f fe f4 ac f1 c5 6c 15 8d 4d 83 76 37 4c a7 ce bf 56 90 71 8e 1d 03 19 ee db b2 1c 5f 23 c9 8d 16 cc 3b 54 2d a6 bb 9f 4c ff 12 4c a6 b2 c1 dd 08 ec 3b 14 cd 0a cd b4 45 2a e5 9a 07 b9 2d b2 de c8 a9 63 80 03 85 28 6f 09 c1 aa 0a 26 83 cb f4 81 d7 05 e2 ea 0c 69 a8 22 ba 1d cc 25 bd 65 74 1b 91 e6 12 6c 0c 29 23 d2 d5 de e3 9b ff 03 c8 e0 f8 d6 89 cb d8 db Data Ascii: J!<k%a81ZEkRe]qYYcY["_638vHf:jdkQ6[ooMVK0.MkT3UQjlMv7LVq_#;T-LL;E*-c(o&i"%etl)#
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: cf d3 0f 32 72 f8 60 b9 2f 73 0a 2b fa e1 fa 17 3a 4a b6 f5 a1 5a 33 a9 6d 87 5c 25 9a 5c 78 c3 8b 5c 79 9b 29 10 49 6f 70 90 d4 f4 7d a4 f4 10 b5 d2 db 2a e6 d9 f7 26 59 40 1f 73 e2 0e d4 bb 57 97 e0 fd be b7 0f e5 a1 a4 95 b6 32 e4 69 15 73 a5 25 c0 52 93 e6 c3 07 7f 64 77 8d ed 2d 69 d5 9c 9b 73 70 ee 26 e5 ca 93 1d 23 2d bc d7 73 5e 2a 79 8e 9b 07 8b 70 cd e9 ca d9 1b b5 e6 2d 7c 41 68 dd d4 f8 e3 a1 29 dc a1 a6 bc a0 6e a1 e4 b6 a6 9a ab 42 3e c2 54 66 5f bd fb 75 09 0e de fa 0f 81 0b 82 c7 9c 9b fb dd ae cd c6 bc f3 69 14 59 84 47 c5 79 7f bf e7 f6 cc 9e 89 fd c6 33 5e f9 59 22 f0 e6 0b 94 33 d7 29 13 7e fd f8 f3 ee 6f e7 b8 39 ea c3 79 1b 95 1b 5e ec 6a e8 33 c6 23 2c ed 37 3a f2 ad 54 8e 89 78 12 6e a1 3a af bd f8 a1 a5 54 f4 65 77 d7 c5 b7 d5 dd Data Ascii: 2r`/s+:JZ3m\%\x\y)Iop}&Y@sW2is%Rdw-isp&#-s^yp-\|Ah)nB>Tf_uiYGy3^Y"3)~o9y^j3#,7:Txn:Tew
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 1b 55 09 9c 2a 25 df 7d 35 3f a0 d7 ca 09 77 14 9b 85 6f 99 ad 55 1f bf fe 0d a4 bd bf 56 23 43 ad c6 69 15 0b b1 bd 55 95 00 65 44 2d 78 69 2e e9 5e c1 d6 9e 55 1c d7 33 4c 7f 57 1f 5d 99 6e 7a b3 5d 64 bc 34 19 2f ea 91 4a 36 c0 0f 43 26 4a 53 4c 97 a6 18 9b 18 65 e7 a1 7d 6c 1b 7d 8a ef 8d ed 83 c0 67 50 23 62 b1 8e 67 8b 96 f7 af 4f f1 9e 17 e6 a1 b8 9f d6 9c 1a 6d 90 1b 15 a4 a5 f2 5a e7 0e 4c 4d d9 77 f4 5f 74 e7 17 5a 09 df f2 89 ef 86 be 9b 6d 30 f6 7a cd a4 2e 6d 24 c5 75 37 88 b5 fa 80 36 51 dd 8f a7 11 86 25 85 75 8e 1f 8d ef e5 bb e3 7b 40 0c 83 a9 1c c7 a6 bb 58 9e ee 26 6f 52 e4 4c 34 10 28 b8 80 a2 0b 78 c6 9f 62 77 71 92 b1 a9 49 28 59 fa 54 58 ae 44 5b 7c d4 81 53 42 67 a1 64 79 cb 29 83 50 7a 96 23 49 ae aa 12 f8 f6 9e be 54 ea cb 2d 45 Data Ascii: U*%}5?woUV#CiUeD-xi.^U3LW]nz]d4/J6C&JSLe}l}gP#bgOmZLMw_tZm0z.m$u76Q%u{@X&oRL4(xbwqI(YTXD[\|SBgdy)Pz#IT-E
2024-05-27 22:43:37 UTC	1143	IN	Data Raw: 5f 3d 25 4b 5e 26 ea 38 35 16 43 6a a3 74 83 50 99 2a d8 7b 53 9e fc 56 cf 50 ea df bb ce ee 9c 5a ae c6 a2 3b 1a 07 ff fe 9a 93 32 d6 7d 54 f3 d9 0b dc 5c 3b b8 17 80 7a eb b1 35 21 d6 b9 aa 7e 57 51 67 c1 77 4c 86 8e 13 8c f2 be 13 33 5c b5 01 f0 c7 a8 ad 8e c5 25 77 72 4a bf 93 f2 dc 3b fa 2e ec 8c b5 dc 08 1d 57 d1 33 31 f2 d6 2f fc c4 12 5e a1 05 ff 9f a4 d4 39 bf e6 9c bb 23 e2 55 e1 65 12 e2 c9 05 87 c6 0b 9f 15 3f 50 5e d6 65 b8 62 7d 0e fc ea 89 fc 45 52 c9 71 ba 85 92 63 72 42 3f 91 23 7c d5 62 93 0b cf e1 54 01 c0 8a bf bb ee 4d 8a fb a4 cb a6 da de e6 d4 ce ae 89 b2 2b 32 1e e3 26 a4 aa 3a c4 77 8c f8 96 4b 3c e5 2f cf ce 71 c6 90 5f b5 43 61 f1 a4 16 e0 e0 44 a0 79 23 af ef b9 e0 ce cf cd 33 a1 b6 b1 e8 12 5c 8d 67 de f6 f9 7f 28 0d e6 97 7a Data Ascii: _=%K^&85CjtP*{SVPZ;2}T\;z5!~WQgwL3\%wrJ;.W31/^9#Ue?P^eb}ERqcrB?#\|bTM+2&:wK</q_CaDy#3\g(z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50147	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	562	OUT	GET /PtL9QBP58JZC0A0k1u4fSn-rXbpaG52216P0l4ydM3c21L78uPPad73jY6ngd2tS-qu8Ec7jV_oxz8wK70fhBxYrffuWUGmuh-HfMyUsfUJSPQzGuCOW HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:37 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 14159 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:30 GMT Expires: Tue, 28 May 2024 21:11:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 5527 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a9 00 00 02 00 08 06 00 00 00 38 d7 93 e0 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ed dd 77 80 5c 65 bd 3e f0 e7 fb be 67 66 93 2d 49 28 49 08 52 44 a5 08 84 90 82 a0 f4 d0 04 e9 78 b9 09 d5 7b 29 2a 96 ab 17 f5 fa 93 14 43 b1 5e 10 45 f4 8a 8a 17 84 04 bd 18 ba 90 dd 40 1a 3d 10 08 bd 28 82 4a 49 42 4b df 9d 73 de f7 fb fb 63 66 09 21 d9 64 77 33 b3 ef 39 67 9e 8f 12 20 99 9d 7d 42 76 e6 d9 b7 9c f7 00 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 Data Ascii: PNGIHDR8sBIT\|d IDATxw\e>gf-I(IRDx{)*C^E@=(JIBKscf!dw39g }BvDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: aa 0a 31 66 70 b1 10 fd 6b bf a4 b8 78 c9 d8 31 4f bf fe c9 5d ce 08 9d 8f ea 1b 47 52 44 35 b0 64 ec 98 b7 21 b2 59 56 8a 6a 7d 6c e5 da ad d8 fb e7 b4 a3 fd 9a ad ee 7b ea 07 a1 33 51 fd 61 49 11 d5 c0 92 b1 63 de 82 c8 e6 59 2e a9 4e 56 ca 6f 13 de fb 97 7c 69 f5 d5 43 ef 7d fa 92 c0 91 a8 8e b0 a4 88 6a 20 4f 25 d5 a9 73 64 95 a8 7f 4d 3b 4a 57 0d bd f7 89 29 a1 33 51 fe b1 a4 88 6a 20 8f 25 d5 c9 88 a0 20 82 0e e7 df 40 5c fa f5 90 79 0b 27 85 ce 44 f9 c5 8d 13 44 d4 23 5e 15 1d de c3 18 d9 ca 36 34 4c 5c 7c c8 98 27 5e df f3 c3 07 86 ce 45 f9 c4 92 22 a2 5e f1 aa 70 aa 88 c4 0c b7 5b 0c 9e b9 e8 80 51 d3 42 67 a2 fc 61 49 11 d1 26 49 54 21 40 d4 d0 50 18 b7 78 ec 98 b7 16 ef 3f fc 9b a1 33 51 7e b0 a4 88 68 93 29 80 92 f7 30 c6 6c 1e 35 f4 ff d1 e2 Data Ascii: 1fpkx1O]GRD5d!YVj}l{3QaIcY.NVo\|iC}j O%sdM;JW)3Qj % @\y'DD#^64L\\|'^E"^p[QBgaI&IT!@Px?3Q~h)0l5
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: be 7b 1c 13 3a 0b ad 1f 4b 8a 88 ea 9e 2b 46 c7 85 ce 40 eb c7 92 22 a2 ba e6 15 80 98 31 a1 73 d0 fa b1 a4 88 a8 ae 79 55 08 64 07 fc 91 d7 4b a5 11 4b 8a 88 ea 9a 02 80 60 c0 1b 57 8c 3c 3b 74 16 5a 17 4b 8a 88 ea 5e 24 02 13 99 43 43 e7 a0 75 b1 a4 88 88 00 28 cc 36 a1 33 d0 ba 58 52 44 54 f7 3c 00 23 18 16 3a 07 ad 8b 25 45 44 75 4f cb b7 ee d8 f2 9d e3 0e 1c 14 3a 0b ad 8d 25 45 44 04 40 44 8b c9 db 6f ed 1b 3a 07 ad 8d 25 45 44 75 af bc f9 5c fa 39 89 46 04 8e 42 1f 10 85 0e 40 44 94 06 91 11 a8 18 9e e3 97 32 1c 49 11 11 01 50 05 60 cc 87 42 e7 a0 b5 b1 a4 88 88 d0 79 51 af 7c 38 6c 0a fa 20 96 14 11 11 00 85 42 44 b7 0c 9d 83 d6 c6 92 22 22 42 79 ba cf 43 9a df da 6f d7 5d 43 67 a1 35 58 52 44 44 15 02 f4 2b 25 d1 76 a1 73 d0 1a dc dd 97 22 3a 1d Data Ascii: {:K+F@"1syUdKK`W<;tZK^$CCu(63XRDT<#:%EDuO:%ED@Do:%EDu\9FB@D2IP`ByQ\|8l BD""ByCo]Cg5XRDD+%vs":
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 5d 1a 3a 07 ad 91 ab 92 8a 5b cd 57 65 60 74 5f 64 cd ee 9c da cb 87 f2 c6 0a 0c f5 26 ba 36 69 b5 57 84 ce 43 f9 55 b9 0f 69 a2 de b3 a4 52 24 37 25 15 b7 da eb c5 9a 9f 1a 8b 81 1c 3d e5 8b 2b 1f 62 1b d9 82 7c b9 d4 6a ee 0d 9d 87 72 4c b1 2a 6a 68 79 2e 74 0c 5a 23 f3 25 d5 71 1b 76 49 66 da 67 a3 06 39 05 e0 da 53 5e 75 ae 55 15 8a 66 df b8 2d 7a b3 74 97 e1 f4 1f 55 95 88 00 a2 cb b7 98 f3 f0 3f 43 67 a1 35 32 5d 52 ee 2e f3 1f a6 bf 9d 6f ad ec c2 e9 bd fa 50 99 fe db 42 22 73 5d a9 cd 5e 19 3a 0f e5 87 00 80 f2 e6 9d 69 93 d9 92 8a db ec f5 3e 32 97 1b 23 cd 9c de ab 2f 95 e9 3f 53 88 e4 bc 64 a6 e5 f4 1f 55 85 00 50 d5 97 43 e7 a0 b5 65 b2 a4 e2 36 d3 1a 15 e4 14 11 4e ef d5 ab f7 b6 aa 47 b2 6f 3c d3 72 0d 81 36 99 08 60 54 5f 0b 9d 83 d6 96 b9 Data Ascii: ]:[We`t_d&6iWCUiR$7%=+b\|jrL*jhy.tZ#%qvIfg9S^uUf-ztU?Cg52]R.oPB"s]^:i>2#/?SdUPCe6NGo<r6`T_
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: b1 ff 57 42 67 a1 9e ab 7a 49 b9 99 e6 f3 36 32 1f e7 28 8a f2 c0 2b 10 15 64 40 d2 66 7f 1b 3a 0b f5 4e 24 02 28 5a 9b 66 cc 7b 3d 74 16 ea b9 aa 97 94 07 be cc 11 14 e5 89 4f 00 35 38 3e 74 0e ea b9 f2 5a 94 ae d6 d5 2b 7f 1a 3a 0b f5 4e 55 4b aa 74 17 4e 17 31 bb 7b 8e a2 28 47 bc 02 91 91 cd 93 36 e1 01 b4 19 63 45 a0 de df 3f f4 81 67 ee 0e 9d 85 7a a7 aa 25 65 22 f3 1f d6 70 2d 8a f2 c7 2b a0 62 4e 0c 9d 83 ba af b2 a3 af dd ad 5e 79 51 e8 2c d4 7b 55 2b a9 d2 9d 38 53 61 46 f2 c2 5d ca 23 ef 81 c8 ca d0 52 9b fc 2c 74 16 ea 9e c8 08 d4 fb a9 c3 1e 7c 6e 4e e8 2c d4 7b 55 2b 29 53 30 e7 46 96 37 33 a4 fc f2 0a 88 18 de 18 31 03 ac 08 62 ef 5f 1d 3a 6b c1 59 a1 b3 d0 a6 a9 4a 49 25 33 ed d1 0a b3 37 47 51 94 67 be 7c cf a9 6d e2 56 33 29 74 16 da 30 Data Ascii: WBgzI62(+d@f:N$(Zf{=tO58>tZ+:NUKtN1{(G6cE?gz%e"p-+bN^yQ,{U+8SaF]#R,t\|nN,{U+)S0F731b_:kYJI%37GQg\|mV3)t0
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: a4 88 36 4e 00 18 8f 41 fc 8e 0e b0 22 50 28 e2 52 32 6d c8 9c 05 a7 84 ce 43 d9 d4 cd ee 31 dc b1 44 d4 4d 22 3a 00 75 3c dd 27 a8 9c 1e a1 fe d5 a4 d4 f1 35 16 14 6d 8a 6e 8d a4 54 dd 20 80 57 f2 12 75 87 f7 a6 08 d3 9b 1b 8a 66 5f 79 6b b9 6a a9 14 5f 3b 74 ce 63 9f 0b 9d 87 b2 af 7b 5b d0 c5 0c a8 71 0e a2 5c 50 00 a2 be 3f 8c 9a f2 98 a2 3e 74 ee dc 8b 9d 7f 6c e8 3d f3 47 71 ff 3d 55 4b b7 be db 13 f1 83 6a 1d 84 28 37 54 1a 20 f5 31 92 ea 3c 77 cf 7b 7d 23 e9 68 ff ce d0 59 8f b0 a0 a8 aa ba 79 31 2f af a2 27 ea 96 f2 f9 7d fd 61 f3 5d 52 82 f2 c6 88 44 d5 c7 71 32 7d c8 6c 9e bb 47 b5 d1 bd 17 92 a0 b1 c6 39 88 72 41 01 40 b5 51 22 cd e5 22 6e e7 89 11 00 e0 9c 7b 20 79 77 e9 81 83 59 50 54 43 dd 1a 49 09 50 a8 75 10 a2 bc 50 95 fe 30 6a 2b 77 eb Data Ascii: 6NA"P(R2mC1DM":u<'5mnT Wuf_ykj_;tc{[q\P?>tl=Gq=UKj(7T 1<w{}#hYy1/'}a]RDq2}lG9rA@Q""n{ ywYPTCIPuP0j+w
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: ac ab 5f 65 49 51 50 1f f9 df 43 0f 19 d8 d0 f2 ff ac 98 03 24 32 05 75 1e 9a e4 a1 98 78 75 07 51 0f 74 79 81 3c 4b 8a 82 d8 e9 da 43 f7 6b 29 0e f8 be 40 f6 11 6b 22 f5 f9 29 27 45 e2 55 d1 2e 90 46 6e ea 20 ea 06 91 2e ef 69 c6 92 a2 3e b5 d3 35 87 1f d9 5c 6c 9e 62 ad d9 0b 82 7c 4e e9 49 e2 20 b2 42 14 8d ac 28 a2 8d 11 a0 7c 2f ce f5 62 49 51 9f d8 e1 d7 63 f7 d8 ac 65 d0 2f ac 31 fb 42 50 b9 9e 29 a7 c4 7b 40 56 41 78 3e 39 51 77 a8 d3 b7 bb fa 35 96 14 d5 dc c8 a9 c7 fd d2 4a 74 a6 58 d3 3f 77 a3 a6 0f 12 01 34 f1 0a 59 19 3a 0a 51 26 88 c0 8b 76 f9 7a 61 49 51 cd ec 76 ed a7 c7 35 14 1a 7f 64 23 bb ad 7a 9f bf 69 bd 2e 28 54 45 b1 8a 9b 27 88 36 4e 00 08 e4 9d ae 7e 9d 25 45 55 f7 91 6b 0f 1b 32 a8 d0 3c 35 8a a2 43 ca 47 15 d5 47 39 bd 47 9c 17 Data Ascii: _eIQPC$2uxuQty<KCk)@k")'EU.Fn .i>5\lb\|NI B(\|/bIQce/1BP){@VAx>9Qw5JtX?w4Y:Q&vzaIQv5d#zi.(TE'6N~%EUk2<5CGG9G
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 54 f4 be 5e 7d 68 b5 b3 50 3a f4 6f 28 4e e2 76 f3 74 f2 de dc 13 3a 03 51 9f f2 0e a5 0e ff 9b de 7c 28 4b 2a 87 46 4c 3d f6 7b c6 98 e1 9c e6 4b a7 cd 86 37 5e a8 de ad e6 94 1f d5 03 11 0b 55 ff f2 fd 17 0e b8 a3 37 1f cf 92 ca 99 59 07 2a 0a a6 70 1e 37 f3 a5 d7 cd 27 c8 5b 0e b8 47 4c 14 3a 0a 51 ed 89 c0 25 fe 0f bd fd 70 96 54 ce 9c ff c5 13 ee 90 c8 0c e4 0d 0c d3 ae 38 41 5d ec c0 43 67 29 c7 44 0c d4 27 af ce 9e 3c e0 db bd 7d 0e 96 54 8e 0c bf ee b8 cf 1a d8 23 35 e1 66 89 b4 9b 73 41 f1 71 55 9d 27 96 a3 29 ca 31 11 24 0e b7 6d ca b7 62 2c a9 1c 29 5a fb 3d 31 5c e8 c8 8a 52 ac 3f 51 17 c7 5c 9b a2 3c 12 31 f0 ce bf 39 77 52 f3 17 37 e5 79 58 52 39 31 72 da 71 97 1a 6b 76 e4 66 89 ec b8 6f ca 80 5b d5 e3 61 11 5e dc 4b f9 23 26 82 03 6e dc d4 Data Ascii: T^}hP:o(Nvt:Q\|(KFL={K7^U7Yp7'[GL:Q%pT8A]Cg)D'<}T#5fsAqU')1$mb,)Z=1\R?Q\<19wR7yXR91rqkvfo[a^K#&n
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: d0 9f db cf a9 a7 66 4f 68 39 2c 89 e3 9b c5 18 5e f0 4b eb 55 3e 5a 4b 9d 4b f4 c7 73 27 36 7d 21 74 9e ae b0 a4 d2 cc db 3d 01 69 64 47 51 6f cc 9e d8 7c 42 12 bb ab a5 72 7a 35 51 27 11 03 85 77 49 8c f3 e7 4c 6e f9 56 e8 3c 1b c2 92 4a b1 42 c1 ee 24 11 8f bc a6 de 9b 33 a9 f9 ac 52 29 f9 5e f9 04 25 be dc a9 7c 16 9f aa 5f 19 77 e0 b4 b9 93 9b 7f 1a 3a cf c6 f0 ab 36 c5 ac 9a ed 42 67 a0 ec 9b f7 dd 01 17 94 12 f7 0d 55 df c1 d3 29 ea 9b d8 02 bc f3 8b 57 ac 76 27 ce 9b d2 7c 43 e8 3c dd c1 92 4a 33 23 1f e5 ce 3e aa 86 7b 27 0f b8 74 65 3b 3e e7 bd 7b 8d 17 fd d6 23 81 b1 45 f8 38 5e b8 4c 56 ed f9 f0 c5 03 83 9d c5 d7 53 9c 4a 4a 31 23 b2 0d d7 a3 a8 5a 1e ba a8 f9 06 00 37 1c 74 c9 ca b9 51 d4 b0 bf 77 25 f0 9b a0 fc eb 9c e6 8d e3 8e a9 73 26 b6 Data Ascii: fOh9,^KU>ZKKs'6}!t=idGQo\|Brz5Q'wILnV<JB$3R)^%\|_w:6BgU)Wv'\|C<J3#>{'te;>{#E8^LVSJJ1#Z7tQw%s&
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 03 f3 57 75 b8 e7 1e bd 64 e0 b4 de fd ae 69 63 58 52 29 a5 a2 ef f2 36 09 54 cf 1e ba a8 e5 aa f5 fd fc fe 17 eb b6 de ad 1a 67 05 fb 5a 6b 07 09 f0 21 00 43 15 da 04 bc f7 aa 11 94 a7 22 a4 73 2a 0e 62 ca 3f a5 0a 54 46 67 aa 0a 88 6a a5 cb d6 4c 30 aa 2e 85 97 d7 3c b0 d8 79 bf 48 12 33 73 ce 94 a6 df f2 d8 c2 be c7 92 4a 29 9f b8 65 5a e4 64 1f d1 07 cd 9b 20 ff 00 f0 e3 ca 5f eb a5 00 f6 9b bc 7a bb 92 2b ed 6a 8c 6e 6b 04 43 45 30 cc 18 e9 e7 9d 2e 87 e2 f5 44 cc eb 2e 89 ff de 3c b0 f8 dc 9c 6f 35 bd b1 b1 cf 2b 17 56 f1 37 41 dd c6 92 4a ab 7e c5 37 7c e2 bc 80 f7 47 20 ea 29 01 80 29 fd ff 0e e0 ef 81 a3 d0 26 e2 1b 60 4a 3d 7d f2 2d cf 40 b1 94 b7 45 20 a2 7a c6 92 4a a9 72 35 c9 32 76 14 11 d5 33 96 54 9a 89 be 1e 3a 02 11 51 48 2c a9 54 d3 bf Data Ascii: WudicXR)6TgZk!C"s*b?TFgjL0.<yH3sJ)eZd _z+jnkCE0.D.<o5+V7AJ~7\|G ))&`J=}-@E zJr52v3T:QH,T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50157	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	785	OUT	GET /osfLtqeBdEJUR4Rc-zmj4r5eqSd0GCJaB8wihnbgYfx_UBKhS1PMKwZlWXw6FqtjLktNqWJTcpDBMp5boZlSD2nkjeOloEA6VhJKlg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:37 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5735 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:21:51 GMT Expires: Tue, 28 May 2024 22:21:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 1306 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 1e 49 44 41 54 78 9c ed 9d 7b 8c 5c 57 7d c7 3f bf 73 1f 33 b3 ef f5 da bb 7e c6 8e 9d 38 89 e3 84 12 02 79 50 aa a2 b6 42 29 14 54 10 0d 52 25 a2 82 fa 50 a1 94 8a 16 da 82 28 6a 29 22 05 b5 25 42 54 48 40 94 96 44 09 90 17 60 27 8e 31 90 17 0d b6 e3 a4 ce c3 89 9d d8 89 9f bb 76 f6 bd 3b 73 ef dc 7b cf e9 1f 77 66 5f f3 9e d9 b5 77 b3 f3 b5 46 de 9d 7b ce ef 9c 7b bf e7 f7 3b bf f3 3b bf 73 17 9a 68 a2 89 26 9a 68 a2 89 26 9a 68 a2 89 26 9a 68 a2 89 26 9a 68 a2 89 26 9a 68 62 61 21 73 bf 38 73 e6 4c bb 31 e6 37 8d 31 17 6b ad b5 31 a6 58 bd a2 5f d6 80 46 eb 63 8a 74 cc 18 43 89 fe 16 40 29 d5 50 fd Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{\W}?s3~8yPB)TR%P(j)"%BTH@D`'1v;s{wf_wF{{;;sh&h&h&h&h&hba!s8sL171k1X_FctC@)P
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: cb 41 7b 61 99 9b e8 e5 80 65 49 f0 72 d1 5e 58 a6 04 2f 27 2c 3b 82 97 93 f6 c2 32 24 78 b9 61 59 11 bc dc b4 17 96 19 c1 cb 11 cb 86 e0 e5 a8 bd b0 4c 08 5e 26 e4 36 7e ba b0 89 a5 87 37 3d c1 cb 44 7b a1 de d3 85 4b 19 cb 88 dc 92 78 d3 12 dc 24 37 c6 92 dd f0 2f 0a 91 f8 43 6c af 0c 73 ed 56 fe b7 69 f2 a7 7e ca 0f 08 63 a6 7f 7e 13 60 69 13 2c 02 4a 21 08 46 47 98 89 09 f4 f8 28 3a 9d c6 78 1e 26 08 d0 61 08 5a 17 12 a7 14 a2 14 62 db 88 e3 20 c9 04 92 6a 45 75 74 20 ad 6d 88 b2 30 98 e9 ba 4b 14 4b 8f 60 a5 10 51 80 21 1a 3c 47 74 76 80 68 74 14 33 36 86 1e 1a 44 9f 1b 40 8f 0c 62 c6 46 30 13 e3 98 4c 1a fc 0c 26 0c 40 47 d3 32 6c 07 12 29 24 d5 82 b4 76 20 1d 5d a8 ee 1e 64 55 1f d2 dd 83 d5 d1 8e d5 d9 89 d5 bb 1a d5 b3 12 83 e4 c8 d6 17 f4 f6 6b Data Ascii: A{aeIr^X/',;2$xaYL^&6~7=D{Kx$7/ClsVi~c~`i,J!FG(:x&aZb jEut m0KK`Q!<Gtvht36D@bF0L&@G2l)$v ]dUk
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: ff 80 e8 e4 f1 78 93 62 9e 31 bf c6 5f 29 a2 a1 41 fc 5f fe 8c e8 b9 fd d3 9a 5b 33 6a d0 da a5 46 ee 5c 38 09 c2 a7 7f 85 f7 cb 3d 0b e2 74 cd 9f 34 11 24 9b 25 3a f4 22 fe 4f 7f 04 6e 82 da c3 82 35 38 5b d5 10 db 10 b9 0d b6 5f b2 de 9c df 45 c0 4d e1 df f7 df 64 0f bf 04 41 c0 7c be 8b ae 28 c1 f5 cc c1 96 28 8e 8d 9e e5 fb 8f 7f 03 57 e7 b6 fb aa 46 8d c4 36 a8 b5 b1 98 3a 03 19 f9 3e d4 75 ad c4 f7 4a 40 39 78 df fb 26 d1 1b 67 e3 2d c8 79 42 81 a4 fc 3b 1a 6b 81 88 30 e4 8d 73 fb a9 27 78 a1 a7 8d 13 dd 29 54 a9 3d d7 29 18 6a 22 16 aa d3 9a 85 26 b7 bc e0 fa ea 01 38 2e e1 eb af e0 3d fc 53 cc d8 e8 bc 79 d5 f3 a2 c1 da 18 8e 8f f6 73 db d1 3d 7c 77 75 17 fb de d6 8d 29 19 a0 a9 91 54 68 7c 27 69 86 f7 6e 82 08 42 03 91 81 88 22 9f 52 df e7 3e 61 Data Ascii: xb1_)A_[3jF\8=t4$%:"On58[_EMdA\|((WF6:>uJ@9x&g-yB;k0s'x)T=)j"&8.=Sys=\|wu)Th\|'inB"R>a
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 18 1c 87 3b 1e 13 ee dc 27 3c 7b 36 3e b4 90 b0 72 e4 54 19 34 13 89 eb 88 81 67 fa 85 3b f7 0a 77 3c ae 18 4e 4f 93 8c 09 d1 89 75 64 56 7d 11 a3 3c 66 cf 89 0b 41 6e ee 7b 59 89 3b f1 bf 98 3a f7 85 ea 8e 6a ef 39 7d 90 0e 55 fd 76 60 77 a4 f9 cc f5 bd 98 a4 8a b5 b8 96 fd 85 c1 13 b4 ff e3 ad 38 eb 2f 9a 3a a5 2f 12 9b d9 6f ec 12 76 1f 11 26 b3 90 50 33 56 96 d5 ca 9e f1 b3 10 13 3d 91 85 47 0e 0b b7 ed 52 0c 4d ce f0 c2 8d 26 4a 5d 84 b7 ea 5f 40 9f a9 ed 26 2a b6 5e 02 92 c2 4d 3f 55 e3 e6 cd 34 6a ae a5 44 f1 ea 44 3f c7 fc 11 12 55 36 6a 8c 21 a9 0d 47 1d e1 8e 2d c5 3d ee 92 75 27 c7 48 7e e8 e3 24 2e bf 72 6a af 54 04 d2 3e dc fa 90 f0 ec 19 99 32 c1 d3 95 aa 90 5b a6 98 95 9b b7 f7 9f 12 be fa 90 c2 cb ca 8c a5 96 22 6c bd 8a a0 e3 66 30 13 35 Data Ascii: ;'<{6>rT4g;w<NOudV}<fAn{Y;:j9}Uv`w8/:/ov&P3V=GRM&J]_@&*^M?U4jDD?U6j!G-=u'H~$.rjT>2["lf05
2024-05-27 22:43:37 UTC	706	IN	Data Raw: 6c 1c 93 cd c6 37 66 a0 a7 0d 1c 55 fa 51 d5 4a 6c 3d e4 1a c0 55 b0 aa 2d 6f 91 04 b4 0f d1 58 61 52 5e 29 21 05 97 6b 58 77 a8 a2 a9 8b 44 51 44 10 04 47 77 ee dc 59 a0 98 05 04 df 74 d3 4d 61 14 45 4f 1b 63 4e 15 44 b4 0c b4 39 49 92 a8 79 89 be ce 12 8c 61 85 31 7c f6 a2 56 0e fe ce 45 a8 fe 33 18 2f 1d 5f 35 b0 a6 d3 90 28 42 70 ad a7 5a aa 26 b6 48 41 63 20 61 43 ef 8c 03 07 a2 33 48 d8 0f 14 7b 61 ea 7c 91 6b 00 0b 5d 24 55 48 44 08 c3 f0 35 cf f3 0e 7c ea 53 9f 2a 98 5a 8b 7a d1 67 cf 9e 7d 74 72 72 f2 db be ef cf 0a 5b 1a 0c ed 6e 0b 09 51 0d 2f 91 8a 2d 72 9c b8 c7 3c d1 d1 ca c9 c1 53 90 ce e4 4c 13 24 6d 58 bf 72 ba 6c 3d c4 d6 a3 b5 b3 2e 09 6c ea 8d fb 12 17 13 24 ca a0 c2 53 f9 de 57 27 08 6a 9e 73 0d 0a 63 b5 cc f2 01 44 84 6c 36 4b 18 86 Data Ascii: l7fUQJl=U-oXaR^)!kXwDQDGwYtMaEOcND9Iya1\|VE3/_5(BpZ&HAc aC3H{a\|k]$UHD5\|S*Zzg}trr[nQ/-r<SL$mXrl=.l$SW'jscDl6K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50158	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	785	OUT	GET /Ucxl6g9AKLX3XmK7an_99LzivIJsXn5cvQdIMM_g4nNFZdULnGa4TH45WVlFu3vKd_c41R28NdjDzCEWgAwb5wjONbIPR4agLFUO1w=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:37 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 10341 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:30 GMT Expires: Tue, 28 May 2024 21:11:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 5527 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:37 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ed 9d 79 9c 5c 47 75 ef bf a7 6e af b3 6a 66 24 8d 24 6b b1 24 cb c2 b6 6c 79 37 36 78 c5 10 8c 17 08 60 e3 d8 0f 1c 08 79 40 20 2b 3c f2 92 10 5e 0c 49 c8 4b 1e c9 cb 63 49 d8 92 4f d8 62 43 00 43 88 59 62 08 c6 26 c4 78 43 b6 c0 b6 24 5b b6 65 c9 b6 96 d1 ec dd 7d ef ad 3a ef 8f 7b 6f 2f 33 dd d3 dd 33 3d 96 01 fd a4 9e 9e b9 b7 aa 6e 55 fd ea 9c 3a 75 6a b9 70 14 47 71 14 47 71 14 47 71 14 47 02 72 a4 33 b0 18 d8 f1 96 37 e4 f3 9e 64 c5 33 19 e7 e5 d3 c6 23 a5 46 44 f0 0c 80 d1 d0 39 45 c5 b9 50 8b 05 3f 08 6d 80 17 94 d6 ff fd cd 85 23 9d f7 4e e3 67 9a e0 87 5e 72 41 36 bf 72 Data Ascii: PNGIHDRxx9d6sBIT\|d IDATxy\Gunjf$$k$ly76x`y@ +<^IKcIObCCYb&xC$[e}:{o/33=nU:ujpGqGqGqGr37d3#FD9EP?m#Ng^rA6r
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 7e 60 c3 e7 6e f9 b3 e6 99 e8 3c 9e 73 82 77 5d 79 e9 31 d9 b5 ab 6e 0b c7 c6 5f a0 a5 3a dd 54 bb 12 dc 42 9c 23 42 70 d5 73 25 9b c3 f4 f6 3d 58 3a fc e8 a5 2f f8 da 7d fb 9b 67 a6 73 78 4e 09 7e f4 86 d7 fe 6e 2a 9d fd 6b 3b 7e b8 31 79 2d 19 3c ed c5 39 d2 04 27 c3 39 af 77 10 b4 f8 96 f5 37 7f e3 e3 cd 33 d4 19 3c 27 04 ef ba f6 8a 41 d7 dd f7 09 cf 2f be 9a e2 34 22 a6 72 b3 59 c5 fe 3c 10 5c 15 c0 e4 bb 90 5c fe 73 ae 30 fa f6 8d 5f fa 8f b1 e6 19 5b 18 16 95 60 05 79 f8 86 57 9e 99 f6 72 1f 91 c2 f4 59 1a f8 65 72 25 19 cf fe 42 11 4c 34 bc ca 64 d0 9e ee 3b d3 53 e1 db 8e fd ca ad db 9b 67 6e fe 58 34 82 1f fa 6f 57 a6 3d ab 97 91 ce fe 6f 4a 85 17 60 2d 82 60 62 62 1b 12 3c f3 da cf 1b c1 91 b9 8d 78 19 bc 7c f7 36 55 fb ae 8c 0d be 77 cc 97 be Data Ascii: ~`n<sw]y1n_:TB#Bps%=X:/}gsxN~n*k;~1y-<9'9w73<'A/4"rY<\\s0_[`yWrYer%BL4d;SgnX4oW=oJ`-`bb<x\|6Uw
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: eb 60 11 8d a7 0f a3 ba 88 ee 69 54 4d 15 a1 2e 4b 92 cc 14 e3 7a e4 3a 47 e8 17 b1 62 60 d5 1a 64 dd 46 e4 98 b5 48 5f 1f a9 ae 2e 52 3d 3d a4 d2 19 34 9b 0d a5 0b 17 06 25 8f 30 d4 b0 30 69 b5 30 65 dd f4 b8 0d 46 9f 50 3b fa 10 6e ec 27 2a 2e 40 bc 1e 44 bc 48 b6 ab 08 16 22 ff 4d a2 9d 28 37 c4 98 8c f8 77 43 a4 ac 8c 01 a3 12 95 56 2c 46 3c 2d 17 9e 19 e5 13 45 44 b5 9c b6 28 c6 8b 92 16 03 a8 1a 8c 3d c1 76 f5 bd 1e f8 58 2b bc b5 24 c1 27 7d e1 37 7a 45 cd 17 4a 36 78 79 b5 e1 e2 80 34 c2 65 f7 1f e0 ac 1f ee a1 ab 2b 45 bf 08 d9 58 92 4d fc f1 92 c1 2f 82 89 a5 d5 90 48 74 95 e4 d6 91 e2 e4 ef 32 6a c6 8d 8e a0 54 c4 76 75 63 4e 7b 21 a9 cd 27 91 5d 31 4c 6e 78 25 d9 e5 c3 98 4c 26 36 e0 12 0b 6e 66 e9 63 03 d0 06 04 93 cf 12 8e 3d 4d 30 b2 97 e0 Data Ascii: `iTM.Kz:Gb`dFH_.R==4%00i0eFP;n'*.@DH"M(7wCV,F<-ED(=vX+$'}7zEJ6xy4e+EXM/Ht2jTvucN{!']1Lnx%L&6nfc=M0
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: f0 34 a0 21 c1 73 ba 2a ad af 5b 71 ac 9b 2b 8c 56 fd 33 ea 78 68 20 c7 13 9b 87 28 f9 0e e7 a2 59 a6 50 95 49 b5 d8 aa 32 27 de 9c 48 55 6b b9 35 bb aa 61 27 d6 51 28 4c 30 7c e3 df 54 c8 4d 54 7a dc 36 ee 7c 44 78 ff 57 3d be fd b0 b0 6f 32 ba 9d 31 15 89 ad c9 6b 1d 33 42 88 1a 43 26 4e fa a9 49 f8 c6 4f 85 1b 6f f1 f8 c1 0e a9 08 50 5c 5a 30 64 06 37 d2 7f c6 df 91 ef 1e a5 bb 0b 32 59 93 9c df 82 94 e7 46 a5 42 6a 32 3e 2e 8f 77 2a f7 cb 7d 71 65 7c 55 15 2f 31 26 a8 18 16 e5 8c 1b ac 9a 0d be d5 ad 73 f1 d3 90 e0 2d 9f 7f c7 ea 40 c2 53 ac b4 b8 11 3b ce 53 c9 13 ee 5f d5 cb de 4d 03 68 18 4f 23 aa 23 54 65 ca 39 2c c9 62 bb d8 8c d2 0a d9 e5 89 06 17 c5 29 1e 78 82 a1 3f fa 0b ba 37 6d ae 21 d7 c4 0d e4 93 77 08 7f 75 9b e1 e0 74 f4 ec 94 a9 d2 7c Data Ascii: 4!s[q+V3xh (YPI2'HUk5a'Q(L0\|TMTz6\|DxW=o21k3BC&NIOoP\Z0d72YFBj2>.w}qe\|U/1&s-@S;S_MhO##Te9,b)x?7m!wut\|
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 4a 21 3c fa 0c 1c 9a ac d2 b0 ea a0 6b 25 61 fa 38 9c 06 31 99 5a 45 9e 99 a5 ae 6b 86 52 65 b5 5d f5 a1 aa 71 d4 cf 59 f5 f7 80 dd fe aa 59 63 8b 59 04 5b f1 b3 22 d2 5f 9b cc c2 c8 36 80 9f 12 fe e3 a4 e5 8c e7 d2 d1 02 33 a2 f5 d4 38 8d d5 76 48 66 f5 3a b2 cb 6a 8d ab 64 e2 c0 6b a6 51 16 d8 e7 36 0a 5b 6f dc 6f 04 f6 4d c2 a3 cf 56 4b b1 83 ec 30 2e bd 16 4d a6 03 6b 54 33 55 a4 d5 51 b3 0b 85 6a 1f fe f4 ac f1 c5 6c 15 8d 4d 83 76 37 4c a7 ce bf 56 90 71 8e 1d 03 19 ee db b2 1c 5f 23 c9 8d 16 cc 3b 54 2d a6 bb 9f 4c ff 12 4c a6 b2 c1 dd 08 ec 3b 14 cd 0a cd b4 45 2a e5 9a 07 b9 2d b2 de c8 a9 63 80 03 85 28 6f 09 c1 aa 0a 26 83 cb f4 81 d7 05 e2 ea 0c 69 a8 22 ba 1d cc 25 bd 65 74 1b 91 e6 12 6c 0c 29 23 d2 d5 de e3 9b ff 03 c8 e0 f8 d6 89 cb d8 db Data Ascii: J!<k%a81ZEkRe]qYYcY["_638vHf:jdkQ6[ooMVK0.MkT3UQjlMv7LVq_#;T-LL;E*-c(o&i"%etl)#
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: cf d3 0f 32 72 f8 60 b9 2f 73 0a 2b fa e1 fa 17 3a 4a b6 f5 a1 5a 33 a9 6d 87 5c 25 9a 5c 78 c3 8b 5c 79 9b 29 10 49 6f 70 90 d4 f4 7d a4 f4 10 b5 d2 db 2a e6 d9 f7 26 59 40 1f 73 e2 0e d4 bb 57 97 e0 fd be b7 0f e5 a1 a4 95 b6 32 e4 69 15 73 a5 25 c0 52 93 e6 c3 07 7f 64 77 8d ed 2d 69 d5 9c 9b 73 70 ee 26 e5 ca 93 1d 23 2d bc d7 73 5e 2a 79 8e 9b 07 8b 70 cd e9 ca d9 1b b5 e6 2d 7c 41 68 dd d4 f8 e3 a1 29 dc a1 a6 bc a0 6e a1 e4 b6 a6 9a ab 42 3e c2 54 66 5f bd fb 75 09 0e de fa 0f 81 0b 82 c7 9c 9b fb dd ae cd c6 bc f3 69 14 59 84 47 c5 79 7f bf e7 f6 cc 9e 89 fd c6 33 5e f9 59 22 f0 e6 0b 94 33 d7 29 13 7e fd f8 f3 ee 6f e7 b8 39 ea c3 79 1b 95 1b 5e ec 6a e8 33 c6 23 2c ed 37 3a f2 ad 54 8e 89 78 12 6e a1 3a af bd f8 a1 a5 54 f4 65 77 d7 c5 b7 d5 dd Data Ascii: 2r`/s+:JZ3m\%\x\y)Iop}&Y@sW2is%Rdw-isp&#-s^yp-\|Ah)nB>Tf_uiYGy3^Y"3)~o9y^j3#,7:Txn:Tew
2024-05-27 22:43:37 UTC	1390	IN	Data Raw: 1b 55 09 9c 2a 25 df 7d 35 3f a0 d7 ca 09 77 14 9b 85 6f 99 ad 55 1f bf fe 0d a4 bd bf 56 23 43 ad c6 69 15 0b b1 bd 55 95 00 65 44 2d 78 69 2e e9 5e c1 d6 9e 55 1c d7 33 4c 7f 57 1f 5d 99 6e 7a b3 5d 64 bc 34 19 2f ea 91 4a 36 c0 0f 43 26 4a 53 4c 97 a6 18 9b 18 65 e7 a1 7d 6c 1b 7d 8a ef 8d ed 83 c0 67 50 23 62 b1 8e 67 8b 96 f7 af 4f f1 9e 17 e6 a1 b8 9f d6 9c 1a 6d 90 1b 15 a4 a5 f2 5a e7 0e 4c 4d d9 77 f4 5f 74 e7 17 5a 09 df f2 89 ef 86 be 9b 6d 30 f6 7a cd a4 2e 6d 24 c5 75 37 88 b5 fa 80 36 51 dd 8f a7 11 86 25 85 75 8e 1f 8d ef e5 bb e3 7b 40 0c 83 a9 1c c7 a6 bb 58 9e ee 26 6f 52 e4 4c 34 10 28 b8 80 a2 0b 78 c6 9f 62 77 71 92 b1 a9 49 28 59 fa 54 58 ae 44 5b 7c d4 81 53 42 67 a1 64 79 cb 29 83 50 7a 96 23 49 ae aa 12 f8 f6 9e be 54 ea cb 2d 45 Data Ascii: U*%}5?woUV#CiUeD-xi.^U3LW]nz]d4/J6C&JSLe}l}gP#bgOmZLMw_tZm0z.m$u76Q%u{@X&oRL4(xbwqI(YTXD[\|SBgdy)Pz#IT-E
2024-05-27 22:43:37 UTC	1143	IN	Data Raw: 5f 3d 25 4b 5e 26 ea 38 35 16 43 6a a3 74 83 50 99 2a d8 7b 53 9e fc 56 cf 50 ea df bb ce ee 9c 5a ae c6 a2 3b 1a 07 ff fe 9a 93 32 d6 7d 54 f3 d9 0b dc 5c 3b b8 17 80 7a eb b1 35 21 d6 b9 aa 7e 57 51 67 c1 77 4c 86 8e 13 8c f2 be 13 33 5c b5 01 f0 c7 a8 ad 8e c5 25 77 72 4a bf 93 f2 dc 3b fa 2e ec 8c b5 dc 08 1d 57 d1 33 31 f2 d6 2f fc c4 12 5e a1 05 ff 9f a4 d4 39 bf e6 9c bb 23 e2 55 e1 65 12 e2 c9 05 87 c6 0b 9f 15 3f 50 5e d6 65 b8 62 7d 0e fc ea 89 fc 45 52 c9 71 ba 85 92 63 72 42 3f 91 23 7c d5 62 93 0b cf e1 54 01 c0 8a bf bb ee 4d 8a fb a4 cb a6 da de e6 d4 ce ae 89 b2 2b 32 1e e3 26 a4 aa 3a c4 77 8c f8 96 4b 3c e5 2f cf ce 71 c6 90 5f b5 43 61 f1 a4 16 e0 e0 44 a0 79 23 af ef b9 e0 ce cf cd 33 a1 b6 b1 e8 12 5c 8d 67 de f6 f9 7f 28 0d e6 97 7a Data Ascii: _=%K^&85CjtP*{SVPZ;2}T\;z5!~WQgwL3\%wrJ;.W31/^9#Ue?P^eb}ERqcrB?#\|bTM+2&:wK</q_CaDy#3\g(z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50160	172.217.18.14	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:38 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:37 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:38 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50159	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:37 UTC	783	OUT	GET /IW5qFdrQ464i6bDzhjV2xJvvGDsrvssd3hqgNC-Y0VDwnriCuvrzsftsfCEBzXg37G0QJAfGy9te8w8v2jebrajiiviDGB6_y1G2=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:38 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2571 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:10:17 GMT Expires: Tue, 28 May 2024 20:10:17 GMT Cache-Control: public, max-age=86400, no-transform Age: 9200 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 09 57 49 44 41 54 78 9c ed 9d 7f b0 55 55 15 c7 3f 8f 07 0a 92 90 21 98 5a 3e 50 2a 8c 4a 08 94 7e 4b 22 29 63 13 fd 20 b0 c1 32 4c d6 96 61 9e 35 53 99 a6 61 5a 4a 98 c5 88 8e b5 57 98 85 41 49 41 34 35 a6 85 4d 93 35 11 0d 01 59 ea e0 cb c0 31 50 1f f2 4b 1b ea c1 e3 f5 c7 3e 0c 84 f7 c7 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2WIDATxUU?!Z>P*J~K")c 2La5SaZJWAIA45M5Y1PK>
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 2c 4e fc 6c a3 4e c4 08 3c b8 ee a3 08 0c 03 2e 07 1e 56 af 73 d5 6b bf 9c fa 69 2a 62 04 ce d3 a7 6d 21 24 13 dc 09 2c 53 af af cd b1 af a6 20 66 91 35 05 18 03 8c 24 2c 96 46 13 aa ed b4 01 c7 d5 69 5c 2d c0 34 60 bc 7a 6d 07 1e b0 50 68 1c 31 1b fe 2f 00 0f 27 17 00 ea b5 3f f0 66 e0 9d c0 44 60 3c e1 c4 5c ad 82 0f 07 56 01 37 aa d7 bb cc 77 ce 4e 2e d9 8f ea b5 8d 10 e0 98 4e 28 94 76 32 50 eb 77 ea 52 e0 1a 71 b2 b5 46 3b bd 0e f5 7a 26 21 d7 ed a2 0a b7 3d 26 4e 46 67 b5 9d 8b 9b 24 4e b6 88 93 7b c5 c9 14 e0 c3 80 07 9e 20 ec 3e c5 32 13 58 92 7c 18 46 4a 72 f7 83 c5 c9 1a 71 d2 0e 5c 0a dc 42 28 cf b7 37 d2 dc 24 60 85 7a 3d 72 b3 c3 28 43 c3 02 1d e2 64 a3 38 99 0f 7c 12 58 08 6c 8a 34 35 06 f8 a1 7a 3d a7 5e 63 2b 32 99 05 56 af c7 d5 e2 a3 8a Data Ascii: ,NlN<.Vski*bm!$,S f5$,Fi\-4`zmPh1/'?fD`<\V7wN.N(v2PwRqF;z&!=&NFg$N{ >2X\|FJrq\B(7$`z=r(Cd8\|Xl45z=^c+2V
2024-05-27 22:43:38 UTC	322	IN	Data Raw: 94 f2 51 ad be 44 7e 90 0d 20 ea c7 2b 1b 91 93 35 03 b8 b8 42 ce f2 16 e0 c7 29 6d 4d ab f0 de b3 84 23 aa 69 98 58 e6 f5 3e f4 de 0a bc 8f c6 34 6a d4 4f bc cf 04 4a ce 62 c2 ae d0 aa 94 76 26 55 08 7a ec 24 9c 95 4a 43 b9 dd a5 6e ea 5f 45 a8 1e 1c 20 3c e9 32 13 23 70 b5 d4 9a 52 4c 04 2e 2c 35 8b 93 55 f1 26 c2 b9 a6 6a 0c a6 fc 21 b5 97 08 b3 38 0d 23 cb bc be 8f de f7 83 22 dd c0 22 71 f2 50 4c e3 5a 1e 47 07 32 5c 10 76 74 4e 2a 63 ab 13 f8 73 15 bb 07 9f 1c 13 ca d8 e8 22 6c 40 1c 5c 95 57 1a cb e9 65 36 31 ba 38 b4 21 92 e5 ef cb e3 da 03 ac 05 6e 02 ae 29 f3 37 57 25 c6 0f be 89 e0 98 77 67 68 d3 8f 90 db 5c ce 25 da 09 dc 01 fc 96 ff 0f 85 1e 4e 0b e1 e9 f1 a7 52 6f 8a 13 d4 eb 6a c0 01 27 54 18 5f 3f c2 a9 c8 56 5e 3e 5b 9f 01 6e 23 9c ac c8 Data Ascii: QD~ +5B)mM#iX>4jOJbv&Uz$JCn_E <2#pRL.,5U&j!8#""qPLZG2\vtN*cs"l@\We618!n)7W%wgh\%NRoj'T_?V^>[n#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50162	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	560	OUT	GET /kQDv-46ToDkqXJ2DIlr7hKXKalQvL0NJy4oGIhNlUkxX95btXayCKNoZuaY_KT-6U8-Iz35FlDZXRd1U3bNFo99a3k0-vwIIbtEIStTKYwD_UxNkjA HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:38 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 433358 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:29 GMT Expires: Tue, 28 May 2024 21:11:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 5529 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 97 00 00 02 00 08 06 00 00 00 4e ed 21 6b 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 20 00 49 44 41 54 78 9c ec bd 59 ac 6f 59 7e df f5 59 d3 9e fe e3 99 cf 9d 6f 4d 5d 55 dd b1 bb 63 07 3b 71 b0 15 4b 21 0f 01 04 48 c8 0f 10 1e 78 08 41 48 28 41 c9 23 0f 48 80 20 82 30 04 f1 00 42 80 c4 13 43 9e 12 29 40 84 9c 80 85 71 3c b7 53 dd d5 55 f7 de ba e3 99 cf f9 cf 7b 5c 03 0f Data Ascii: PNGIHDRN!ksBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2 IDATxYoY~YoM]Uc;qK!HxAH(A#H 0BC)@q<SU{\
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: f4 c7 13 78 ef 31 ca d0 79 1b 7f 36 78 ac 73 20 25 a1 73 e8 44 e1 3d e8 fe 77 11 22 be 41 81 1b a9 e4 ae 08 61 ee 7c 98 0a c4 89 90 8c 85 90 43 e7 6c 27 10 5a 09 51 06 21 93 10 fc eb d6 b6 13 29 d4 85 14 a2 76 c1 1f 29 a9 df 04 ef 6a a5 f5 42 04 de 75 de 6d 02 2c 05 08 29 84 08 21 04 21 78 49 fc c4 41 20 ee 37 ae 3b 4d b4 ba f2 81 1d 09 4a 4a 2d 3a 6b 4f 5d f0 52 49 b9 ee ac 2f b5 94 65 10 c1 68 25 37 cb f5 e6 33 15 82 4f 8c 51 ca 76 b3 c7 8f 3f f8 cd af ef c9 7e bb 7e 14 d6 db e4 f2 35 af 93 eb 93 3f 55 d7 ee 03 29 c4 1d a1 d5 c8 f9 ee 91 d6 a9 96 a0 3a ef 72 04 53 23 95 27 84 89 f3 61 4f 4a 61 a5 60 e0 3c 19 04 a7 94 6a 94 94 05 42 e0 9c f5 d6 f9 36 49 d2 2c 04 0f 21 20 84 40 2b 49 6b 1d 21 04 42 ff b5 00 28 21 e8 9c 45 0a 49 20 06 f4 10 3c 46 29 ca ae Data Ascii: x1y6xs %sD=w"Aa\|Cl'ZQ!)v)jBum,)!!xIA 7;MJJ-:kO]RI/eh%73OQv?~~5?U):rS#'aOJa`<jB6I,! @+Ik!B(!EI <F)
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 64 e2 67 f5 c1 d3 11 b6 15 36 04 1a 1b ab 6e d7 c3 36 75 db 32 4c 73 84 8c 7d 44 f0 60 a4 c0 11 d0 5a 21 7c 0c 72 3e 04 12 69 e8 a4 c7 39 4b db 57 f1 b7 1d 92 56 8a ae 4f 50 c1 7f d9 65 24 52 53 fa 06 21 25 ce 79 0c 82 d6 f7 9d 07 01 a3 34 b7 a1 58 4a f1 e5 35 0b 50 db 96 22 c9 70 c1 e1 f1 b8 1e 6a 0b 21 d0 fa 0e eb 2c 59 92 d2 75 2d ce 3b ac 75 18 6d d0 5a b3 69 ea d8 cd 48 87 10 32 72 3b c4 04 9f f4 49 c4 13 10 7d 32 70 21 9e 5f f0 31 f1 dc de a7 ca 76 f8 3e 69 4b 25 fb ee 4b 60 fb c4 ec 5c a0 75 5d 9f 6c e2 f3 22 7b e8 b2 ed 1c 89 51 78 19 bb 44 d7 77 87 85 36 6c da a6 bf 47 3d 54 49 4c 1c c1 c5 a2 44 02 ce 3b 8c 49 49 13 13 ef a9 10 11 82 53 01 eb 1c 9e 78 4c 89 8c 30 a9 f7 38 6f b1 d6 62 9d 53 5a eb 5d d3 27 35 a1 14 42 8a 3b 4a 1a 1c e1 8f cb 49 f1 Data Ascii: dg6n6u2Ls}D`Z!\|r>i9KWVOPe$RS!%y4XJ5P"pj!,Yu-;umZiH2r;I}2p!_1v>iK%K`\u]l"{QxDw6lG=TILD;IISxL08obSZ]'5B;JI
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: c6 c5 80 55 55 d2 5a db ab b2 04 aa 57 75 79 e7 09 2a 56 ff de 07 aa a6 61 98 17 f1 5a 3b 47 59 37 4c 07 86 61 5e d0 79 bb e5 79 12 6d 68 ad ed bb 51 cf 20 8b 01 15 1f b0 ce 32 cc 8b 2d 84 e6 7d 40 99 98 78 ba 6d 97 17 28 b2 3c 1e a3 4f 22 52 4a 02 16 db 73 38 ce 5b b2 34 63 55 57 f1 39 f3 0e a3 34 5e c6 a4 0c 91 57 53 f4 fc 93 d2 d8 e0 69 bb 96 34 49 e3 b3 17 a2 fa 2c f1 51 19 08 f1 ff 3b 67 31 3a 3e 43 46 c5 ce cd 87 58 bc b8 10 3b 3a d9 3f cf de 07 b4 8c e2 0b 17 3c f4 fc 51 ec 7e 4d ec 3e 43 7c 8e 95 f8 52 9c e1 9d 25 f4 30 68 e8 93 69 e4 e6 a4 14 52 7e a0 a4 fc 40 2b 45 d3 b4 d7 52 89 ea f9 f9 9b 7f 46 78 ff ab da cb 5f bb 77 ef de df f8 4a 5f fa b7 eb 2b 59 3f b2 c9 e5 64 7e f1 ef 74 d6 bd 2f 90 3f 23 25 53 81 48 81 04 62 e0 af 9b 06 fa 17 f6 16 ea Data Ascii: UUZWuy*VaZ;GY7La^yymhQ 2-}@xm(<O"RJs8[4cUW94^WSi4I,Q;g1:>CFX;:?<Q~M>C\|R%0hiR~@+ERFx_wJ_+Y?d~t/?#%SHb
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 1f bf 1b 3b 01 ef 59 97 2b 12 a5 48 8c 81 3e d9 35 b6 63 32 1c c6 73 72 b1 aa 56 b9 a2 90 f9 df 97 3c 22 c3 23 b0 5d 34 48 ba 5e 11 a6 94 42 86 68 98 2c 9b 86 51 9e 33 c8 72 bc 08 b4 9d 45 2b 8d d1 66 0b a1 69 29 63 87 24 55 0f 31 42 9e e5 d0 f3 05 55 5d 93 65 59 ec 4a da 86 55 59 32 c8 72 64 0f 6f ae 36 25 a3 62 c0 78 38 ec 03 7b 89 4b 53 46 c3 78 cc d5 7a 45 00 26 c3 61 84 a0 3c 2c d7 4b 46 c3 21 9d b7 04 04 17 37 57 1c 4c 77 19 0e 06 00 6c ca 92 46 6b 76 8a 21 b5 eb d8 54 35 8b cd 8a e3 dd 7d 8a 2c c3 e3 a8 db 06 2d 25 a9 49 7a ff 8d 65 b1 5e a1 27 3b 24 49 42 10 71 22 81 0f 81 69 31 a4 69 1b ac 73 d4 5d 8b 56 3a 2a 11 9d 45 48 41 22 34 5d 67 59 f4 f7 b4 c8 72 bc f7 ac ab 8a c4 18 ee 1f 1c b1 6c 2a ac 73 58 6b 99 0e 46 f1 3c db ba bf 86 29 42 c8 28 9d Data Ascii: ;Y+H>5c2srV<"#]4H^Bh,Q3rE+fi)c$U1BU]eYJUY2rdo6%bx8{KSFxzE&a<,KF!7WLwlFkv!T5},-%Ize^';$IBq"i1is]V:EHA"4]gYrlsXkF<)B(
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 5d 5f 70 9e d9 66 c5 78 30 e2 76 32 41 59 57 64 69 4a f5 bb d4 77 59 92 b0 2c 4b 06 69 46 d3 b5 d1 bb 14 c0 18 c3 7a b3 26 4b 32 3c 7e cb eb ac ab 72 cb 4f d9 5e 44 90 f4 9d 4e db d9 a0 a5 7a e9 bd 7b ed 6d f8 db 1f 3e 7e e7 df fc 1a c2 cb db f5 8f b8 7e 68 92 cb c5 ec f2 bf 68 9c fb b6 10 62 aa b4 fe 30 78 bf 35 04 76 fd c3 2a 05 58 17 55 32 a6 af fe 6e 89 6a eb 6d 3f 2c 51 6e cd 84 b7 2e 7a df 13 fa 9d ed b6 d8 7c 62 cc 56 02 7c 39 9f b1 37 99 72 cb b7 2f 37 1b f2 3c a3 ac 2a 26 c3 51 24 6e 05 34 6d c7 a8 c8 b7 10 db 7c b5 64 90 65 48 a5 c9 8d 61 5d 57 91 2c d7 1a dd 9b f6 36 75 c5 fe 64 87 75 59 52 64 19 75 17 1d e4 97 8b 19 07 d3 1d 6c 9f 74 ae 17 0b 0e 77 f7 22 b4 e4 23 b9 6e 9d 63 3a 1e 13 7a 21 41 5d d7 ec 4c a6 f1 82 09 78 73 71 ce 64 30 64 67 32 Data Ascii: ]_pfx0v2AYWdiJwY,KiFz&K2<~rO^DNz{m>~~hhb0x5vXU2njm?,Qn.z\|bV\|97r/7<&Q$n4m\|deHa]W,6uduYRdultw"#nc:z!A]Lxsqd0dg2
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 2c e3 66 3e e7 f9 eb 57 40 e0 ce de 01 de 39 2e ae ae 30 5a 73 e7 e8 88 22 cd f9 c1 93 27 2c 56 6b f6 a7 3b 14 45 c6 62 bd e4 ea e6 1a 27 3c ca e8 5e 12 5b 22 a5 64 90 17 6c 67 78 e1 a3 50 a1 1f 98 78 b4 b7 87 d4 71 06 17 01 0e 76 76 99 8e c7 34 6d c3 d9 e5 25 42 29 0e 77 77 d1 52 f1 fd a7 4f 98 af d7 dc 3d 3a 66 67 34 e1 fc ea 82 b3 9b 4b b2 2c 61 34 1e b1 29 4b be ff e4 f3 78 dc fd 43 20 f0 e9 d3 cf b9 b8 be e6 e1 dd fb 14 45 ce f3 97 2f 79 f2 fc 19 07 bb f1 ef 9c 5f 5f f2 ab df fd 4d 92 34 e5 e8 f0 00 6b 3b 4e ce 4e d9 54 15 7b d3 29 5a 6b ce 2f ae 38 bd b8 60 34 18 31 c8 0b 56 eb 15 27 67 27 14 59 ce 74 32 c1 79 c7 ab 93 37 34 5d cb 70 30 40 4a c5 f5 6c c6 a6 2c d9 db 99 30 2c 0a ce af 2f 59 6d d6 0c 87 03 26 c3 11 c1 79 2e 6f ae 49 75 c2 a0 18 d0 74 Data Ascii: ,f>W@9.0Zs"',Vk;Eb'<^["dlgxPxqvv4m%B)wwRO=:fg4K,a4)KxC E/y__M4k;NNT{)Zk/8`41V'g'Yt2y74]p0@Jl,0,/Ym&y.oIut
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 97 cf 79 ef de 43 b2 be db 7a 7d 76 8a 31 86 7b 87 c7 18 a5 98 cd 17 bc be 38 e3 e1 bd 7b 71 66 55 67 f9 fe b3 cf d9 99 4c b9 77 7c 8c 16 9a b3 cb 73 5e 9d 9d f2 63 1f 7f 33 0e 88 34 09 bf f1 3b df e5 9d 77 de 25 cb 12 34 82 93 8b 73 b2 34 e3 ce c1 21 75 db b2 5a ad b8 bc b9 e2 dd 07 8f 68 9c 65 5a 0c f9 f4 e9 13 0e f6 f6 18 14 03 5a 67 39 bb 38 a3 28 06 dc d9 3b 60 53 97 54 75 cd 6a b3 e6 d1 dd fb 9c cd af d9 1b 4e 38 e9 83 9e 94 8a 2c 4d 79 f1 fa 35 79 9e b3 bb b3 13 e1 9b f5 9a 75 55 f2 ce bd 07 ac ab 12 e7 6d e4 18 c6 53 36 65 c9 30 cb 98 6f 56 4c 86 e3 ad d1 f5 66 31 c7 a4 09 79 92 50 b7 2d a9 8e 5e 99 c3 dd 3d 4e 2e cf c9 f3 3c 16 0a 69 c6 cd ec 86 c1 60 00 22 4a d1 db 2e fa 45 d2 24 8d ee 7b ad 59 97 15 83 3c f2 68 c3 ac e0 66 bd 24 91 1a d3 8b 3f Data Ascii: yCz}v1{8{qfUgLw\|s^c34;w%4s4!uZheZZg98(;`STujN8,My5yuUmS6e0oVLf1yP-^=N.<i`"J.E${Y<hf$?
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 3b 77 b7 fb c6 7c ef c9 0f 78 ef c1 63 c6 e3 11 c1 7b 4e ce cf 51 4a 71 b4 7f 40 59 57 51 56 3b 9f 71 f7 e8 38 8e e5 0f 70 7a 71 ce 74 3c 61 50 14 38 ef 29 cb 0d 4d 5d 73 7c 74 cc 7c b3 22 51 86 e5 72 c1 de ee de f6 7e 36 4d 8d 54 12 a5 e2 d4 81 c9 68 c4 a6 2a c9 d2 8c c5 66 c5 64 38 64 b5 5c 33 9d 4e 59 95 1b b2 24 21 38 1f e1 39 17 af e9 20 2f 68 bb 8e 3c cb 38 bd bc e0 70 6f 9f cd 66 43 91 e7 5c ce ae 99 8e 27 5f 42 90 36 56 de 69 9a 62 b4 c1 3a cb eb f3 b3 08 9d f5 72 f6 ef 7f f6 19 0f ef df 67 50 14 74 d6 72 3d bb 61 3c 18 52 e4 05 08 41 53 d7 b1 a3 d8 df 27 00 83 24 e5 fb cf 9f 71 f7 e8 28 72 69 da f0 ea e4 0d ad 73 3c bc 7b 17 e7 3d 6d d3 f0 ea e2 8c 87 c7 f7 50 5a 91 19 c3 eb b3 33 82 80 fd 9d dd 28 44 90 8a 1f 3c 7f c6 c3 bb f7 f1 de 93 67 19 97 Data Ascii: ;w\|xc{NQJq@YWQV;q8pzqt<aP8)M]s\|t\|"Qr~6MTh*fd8d\3NY$!89 /h<8pofC\'_B6Vib:rgPtr=a<RAS'$q(ris<{=mPZ3(D<g
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 30 2c 46 cc 56 0b 76 06 23 ac b5 28 a3 a9 aa 8a 24 89 f7 cb 28 1d 8d 90 42 c4 f9 67 de 61 84 e2 7c 76 cd 74 3c 8e 81 b5 87 84 a6 93 49 14 57 84 c0 a6 aa 28 eb 8a a3 dd 7d b4 52 d4 4d cb c5 ec 2a c2 86 2a ba d4 cf af af 98 0e 47 4c 46 63 44 ef ff 69 ea 9a 8f de 79 9f a6 6b 59 95 1b 4e cf 2f 78 ef f1 43 94 88 02 92 27 af 5e 70 bc 7f b0 ed fa 4e 2f ce a9 eb 9a f7 1f bf 13 87 74 d6 15 bf f4 1b 7f 97 3f f9 33 3f 87 14 50 37 0d 9f 3e 7b 1a 89 7b 6d f0 01 9e bd 7a 4e d5 34 7c e7 a3 6f e1 9c 65 59 6e 78 f2 e2 39 3f fe e1 c7 08 21 18 a4 19 bf f9 f7 7e 07 65 14 1f be f7 01 84 c0 6c b9 e0 fb 4f 9e f0 53 df f9 0e ce 07 bc 77 7c f6 f4 09 fb bb 7b 3c b8 73 37 ca 75 bd e7 b3 17 cf 78 7c ef 01 c6 24 24 5a f3 e2 cd 6b 8a a2 e0 60 77 b7 1f 17 d3 71 7e 73 c9 fd bd a3 5e 59 Data Ascii: 0,FVv#($(Bga\|vt<IW(}RM**GLFcDiykYN/xC'^pN/t?3?P7>{{mzN4\|oeYnx9?!~elOSw\|{<s7ux\|$$Zk`wq~s^Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50161	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	797	OUT	GET /uPpZapQO32gCKWztePKdTRzpg7rCr4_40vlgIAslU9JyF135ZdGvC33DbzA2mdmOTNK6qgbu7xWfKkR9rfJUwaK20saGLsFW9yw014GdOKBVEN9zow=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:38 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2718 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:19:07 GMT Expires: Tue, 28 May 2024 22:19:07 GMT Cache-Control: public, max-age=86400, no-transform Age: 1471 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0a 55 49 44 41 54 78 9c ed dd 7d 70 14 e5 1d 07 f0 ef ef d9 dd bb 4b 78 49 48 48 43 10 44 8d 22 2f 41 a0 60 2b a5 d3 19 a9 e8 48 5b ea d8 e1 a5 50 28 f5 0f 3a 9d b6 33 9d 82 60 75 ea b4 56 66 94 d1 19 fd ab 75 94 82 0c a5 24 42 78 b3 32 4c 05 a7 bc 77 46 94 48 12 29 70 19 54 48 24 92 90 e4 20 dc dd de 3e 4f ff b8 9c 82 c9 91 bb bd 67 6f 77 c3 f3 f9 33 dc 3d fb bd fb f2 dc ee ed de 3d 07 28 8a a2 28 8a a2 28 8a a2 28 8a a2 28 8a 1f 90 db 01 1c b3 34 3c 0e 66 e4 c7 10 fc 7b 60 c6 64 24 a2 15 20 62 00 00 21 38 f4 50 0b b8 59 07 62 07 60 0c d9 89 8d 95 a7 5c 4e ec 88 81 55 f0 cb 42 c3 f1 fa a7 c0 13 ab 21 ac Data Ascii: PNGIHDRxx9d6sBIT\|dUIDATx}pKxIHHCD"/A`+H[P(:3`uVfu$Bx2LwFH)pTH$ >Ogow3==(((((4<f{`d$ b!8PYb`\NUB!
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 23 8e 39 bf 31 f9 fc b7 0f be de b2 86 4a c4 cc 53 e0 a6 2e ff a1 08 80 19 09 04 8d 71 d8 30 31 2c 79 f0 bc f1 77 c1 29 8b ea 77 c1 8a fe 48 ea 98 5a 68 37 36 57 cd 95 3a a6 0b fc f9 12 fd 75 9b ab e6 c2 18 fc 00 48 6b c8 79 2c d2 1a 60 0c 7e 60 20 94 0b 0c 94 19 7c bd 45 0d 53 01 b1 0a 3c be 30 e3 0f eb 11 03 58 60 0b 40 6b b1 79 e2 87 ce 06 cc af 81 57 f0 f5 96 36 55 81 c7 1e 84 15 9f 00 d2 2a 91 b8 9a 5c 09 40 1f d4 09 61 85 a1 05 1a c1 82 ef 61 e3 5d be f8 9e 91 a2 28 8a a2 28 8a a2 28 8a a2 28 37 e7 cb 13 1d 35 ef 5d 1d 1d 08 84 26 12 12 65 a1 c2 40 b9 10 28 68 6d 8b 05 4e 37 b5 e3 3f 4d 26 1a 2f 46 b5 2b 9c 89 18 19 bc ff 0f ea 11 18 8f 6b 1a 04 ca 0b 43 d6 98 21 06 ca 4a 4a 30 68 50 10 00 c0 2d 80 df 7c 08 01 81 28 b7 e2 17 89 e9 9f 71 b3 fd 83 ad Data Ascii: #91JS.q01,yw)wHZh76W:uHky,`~` \|ES<0X`@kyW6U*\@aa]((((75]&e@(hmN7?M&/F+kC!JJ0hP-\|(q
2024-05-27 22:43:38 UTC	469	IN	Data Raw: 13 02 df 28 2e b2 3f 07 85 90 ba 22 80 2a 58 36 cb 42 69 49 49 0e fd 5a 19 7f d4 29 13 aa 60 99 84 c0 98 e2 a1 08 05 ed 7d d3 10 10 8d 6f ad 0e 49 fd c9 5a 55 b0 4c 09 0b e3 46 8d cc 62 b1 96 1b 09 ce 9f 93 1b 48 15 2c 8f 10 28 2d 0c a1 64 58 b1 bd d9 2b c4 a5 9a 55 ba f4 ef 27 a9 82 65 31 2d 7c fb 9e bb 72 38 7a b6 a4 7f 2f 09 50 05 cb 61 71 4c aa 18 8e e2 a1 76 df 1e 89 b7 6b 56 19 fb 65 c7 02 54 c1 b9 13 02 83 03 3a 26 56 56 da 58 5a 09 00 44 a4 7a 25 93 fb 8b 31 d7 51 05 e7 a2 67 8d 8e 47 ee ab b2 3d 04 8f 47 1d bd 86 2e b3 e0 5b eb 62 b0 10 00 e7 78 6c ea 24 db 0b b0 80 30 c1 c9 05 58 00 89 05 c7 63 d1 6b 76 ef 4b ba d6 ef 8a 9f 9e c2 39 74 c6 f0 f8 b4 29 08 85 42 b6 d6 c9 12 c0 ed d5 2b e8 63 67 02 7e 45 5a c1 f3 1f 2c f8 c8 ce fd 84 00 4a 8a 43 b2 Data Ascii: (.?"*X6BiIIZ)`}oIZULFbH,(-dX+U'e1-\|r8z/PaqLvkVeT:&VVXZDz%1QgG=G.[bxl$0XckvK9t)B+cg~EZ,JC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50164	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	783	OUT	GET /Ac9zapU8rN332VMysmJIaTk1Nk-3IGzqCwFS-6PwDFUFpEzEBKPTGWfIFN4BXL3eHP5s1DJP2tyh8NTS8_LjvXHzpkyZC2fu58Ov=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:38 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1165 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:02 GMT Expires: Tue, 28 May 2024 22:42:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 96 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 04 44 49 44 41 54 78 9c ed dd bd 6f 1c 55 14 c6 e1 f7 cc ac d7 6b 03 c6 11 a0 54 20 62 58 83 08 4a 8a 54 11 42 d4 a1 8f 94 ff 20 02 04 74 14 91 a0 01 cb 12 55 44 43 4d 1b 51 93 8a 12 a8 92 82 2f 89 24 4e 84 6c 84 10 01 83 83 ed 35 ec dc 43 b1 8b 12 28 b0 37 39 77 e7 dc 93 f7 91 ec 72 e6 6a 7e 9e 9d 63 df b5 0d 10 11 11 11 91 39 c9 7d 82 fe 8a 9e 16 e0 cd 34 d8 7c a1 9a 5d c8 7d 3a 53 22 82 ed 3f 6e 6d 6f ac 2e 3e 09 e0 66 db eb b9 1b d9 02 2f bd ab 4f d4 35 3e 91 d4 1c 85 08 a0 c0 f8 53 31 44 04 5b bf 6f e2 c7 5b bb 3f e1 c3 c7 9f 47 81 91 ab 1c 07 ed af ea 91 3a ed dc 10 4d 47 01 00 aa 28 2d ee bf 0c 77 Data Ascii: PNGIHDRxx9d6sBIT\|dDIDATxoUkT bXJTB tUDCMQ/$Nl5C(79wrj~c9}4\|]}:S"?nmo.>f/O5>S1D[o[?G:MG(-w
2024-05-27 22:43:38 UTC	304	IN	Data Raw: 60 af 5b 6f 25 72 19 98 ec 30 70 70 2e 03 7b dd 7a 2b 91 bb 21 cb c3 76 e1 ec 8c 00 33 ed 9c db 9a bb c0 5e b6 0b 97 4d ff 73 42 7b dc 05 06 b8 5d 68 c9 e5 33 98 ec 30 70 70 0c 1c 1c 03 07 c7 c0 c1 31 70 70 0c 1c 1c 03 07 c7 c0 c1 31 70 70 0c 1c 1c 03 07 c7 c0 c1 31 70 70 0c 1c 1c 03 07 c7 c0 c1 31 70 70 0c 1c 1c 03 07 c7 c0 c1 31 70 70 e6 81 d3 de 16 00 fe 6a c2 e4 04 cd e0 37 f3 a3 9a 07 ae 7a 87 3e 67 df bb 20 40 3d ff c8 17 d6 87 35 0f ac c0 79 68 61 7f c4 cc 03 55 a8 e2 03 eb c3 66 b9 d7 fa 2b fa 8d 20 3d c7 d0 07 24 02 48 f5 dd 95 73 f2 ac f5 a1 b3 0c 59 4d c2 cb 3a 1c 24 08 5f ab f7 25 02 fd 6b 90 74 88 53 39 0e 9f 25 f0 f5 b7 e5 7b 74 e7 9f 86 54 57 00 8c bf 42 19 fb b6 db d7 43 51 7d db cc cc 2f 5d 7d 47 6e 64 3a 53 5e fd 15 3d 03 e0 f5 b4 f3 eb Data Ascii: `[o%r0pp.{z+!v3^MsB{]h30pp1pp1pp1pp1pp1ppj7z>g @=5yhaUf+ =$HsYM:$_%ktS9%{tTWBCQ}/]}Gnd:S^=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50163	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	785	OUT	GET /flHLQ2o9o8gGi2lHhT5QeZT3fC04iz-gTgOhgTDMgP9l2iiXAWFrvEiPKPGcQ1hgVNBJ2j8dpa-XpJ3rGkIUxBXh63rtfdImVnTjMA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:38 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5268 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:02:11 GMT Expires: Tue, 28 May 2024 19:02:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 13287 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 14 4b 49 44 41 54 78 9c ed 5d 69 b0 1c d5 75 fe ce ed 6d 66 de bc 4d 2b 0a da 59 84 b0 10 4a c5 c4 26 08 14 ca 98 c5 60 63 3b c1 c4 64 33 21 fc 60 37 55 40 6c a7 5c 48 62 09 b8 12 57 61 62 10 5a 30 8b cb e5 22 29 1b 07 27 15 14 30 20 28 8b 20 63 11 2c 36 17 60 a1 05 21 a1 ed bd a7 37 6f a6 7b fa 9e fc e8 9e 37 cb 9b a5 bb e7 f6 4c bf e4 7d 55 f3 34 9a be 5b df af ef b9 e7 9e 73 ee 6d 60 0a 53 98 c2 14 a6 30 85 29 74 03 d4 89 4a f6 7f 67 4d 4a 8e 0c 4f 97 2e 52 2c 40 20 80 24 f3 84 da 99 01 29 6b 9a c5 de ff 39 48 53 d9 fb d4 2b 37 28 a4 04 34 c1 30 cd dd c7 af f9 47 27 78 c6 64 22 56 82 f7 af fd d6 2c fb Data Ascii: PNGIHDRxx9d6sBIT\|dKIDATx]iumfM+YJ&`c;d3!`7U@l\HbWabZ0")'0 ( c,6`!7o{7L}U4[sm`S0)tJgMJO.R,@ $)k9HS+7(40G'xd"V,
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 56 eb 2e 64 59 ee 28 d5 64 86 1c bd 6a c4 73 18 df 74 f9 ab 26 c4 2c 4b a7 b5 4b e1 12 ba ec 6a 54 2c a2 09 b1 04 89 24 79 e4 37 80 26 68 66 4a d7 ee d8 f5 83 0d 5d 5d 42 75 7f 99 d4 0a cd c8 55 35 7a 23 6a cf 55 a8 f3 5c 6b 82 a6 67 0c ed 8e 0f 1e de 70 53 b8 c2 d4 41 ad b3 41 65 61 40 24 72 55 20 d2 7d 34 88 0f 13 82 06 7a 2c ed ce 9d 9b d6 5f db 5e ab a2 41 29 c1 92 65 c0 e0 b6 00 88 48 ae 9a b9 97 94 3e ac 82 28 9b 4d e9 77 ed dc b4 be e3 0e 0a c5 22 ba 64 a7 6c b7 98 0e ce b9 0d 02 f7 54 b7 40 10 0d 64 53 fa 9a 9d 9b d6 77 d4 d5 98 ac 39 b8 4d a7 84 aa d1 2b 0b 85 89 e1 bb 4d db 14 ec 47 41 34 98 4d e9 ab df dd b8 ae 63 23 39 39 04 b7 e9 94 88 44 6e 9d 3c 44 84 e2 f0 51 48 b7 26 b6 5a 11 04 d1 e0 40 da 5c fb ee c6 75 1d 99 93 bb 6f 8b 56 e0 71 52 45 Data Ascii: V.dY(djst&,KKjT,$y7&hfJ]]BuU5z#jU\kgpSAAea@$rU }4z,_^A)eH>(Mw"dlT@dSw9M+MGA4Mc#99Dn<DQH&Z@\uoVqRE
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 98 33 07 62 da 8c aa fa b8 f4 5d 08 50 b6 17 7a 6f 1f e8 78 01 63 e1 62 58 4b 97 a1 f0 3f bf c6 d8 23 f7 83 a5 ee 89 ee 52 7b 5b d5 db e8 52 04 87 05 d8 73 28 98 04 38 0c c8 aa 43 cb 4b c2 4c ad 8c 4e e6 1c 5c 09 66 f0 e1 bd c8 5c 7d 1b d2 67 9d 03 ed b8 39 5e ff b9 4d ce e8 f6 c9 66 48 90 65 41 9f 37 1f da b4 e9 30 4e 5c 82 91 35 5f 87 74 ec 32 c9 0d cb 68 56 7c 04 72 2b a0 f9 9e 27 bb 64 c4 1a cf 42 cc a4 29 1d 21 c9 5d 26 95 48 3a bc 17 3d 37 ad 45 e6 fc 8b 3c 72 a5 04 b8 e2 29 17 02 a4 eb 20 c3 f0 3e ba ee 29 56 95 73 bb eb 82 d2 69 98 27 2f 41 ff 3d 0f 81 52 06 aa 0e 2a 9f 50 77 b3 66 45 ec ff 9a 7c 82 08 26 91 1f 29 e2 ad 81 89 08 ac 38 fe 3a 39 23 b8 5e c7 1d d9 8f cc d5 b7 22 bd f2 6c 88 6c 6f f5 2b 01 84 00 09 01 77 ff 3e d8 6f ee 80 7b f0 63 b0 Data Ascii: 3b]PzoxcbXK?#R{[Rs(8CKLN\f\}g9^MfHeA70N\5_t2hV\|r+'dB)!]&H:=7E<r) >)Vsi'/A=R*PwfE\|&)8:9#^"llo+w>o{c
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 3c 08 df c9 2f 25 d8 29 40 1e dc 05 f3 f7 57 a2 f7 c6 ef c3 58 78 c2 04 25 4a 8e 0c 23 f7 d8 83 a0 9e 7e 94 3a 97 87 0f c2 ba f0 36 64 fe 68 a5 e7 c4 08 28 93 48 d3 21 ad 34 0a 3f 7b cc f3 4c d5 43 77 96 c1 31 f9 83 c3 dc 4c 83 b4 94 e9 43 ee e1 fb 60 9c 74 32 cc 93 4f 29 5f 90 5e 18 4e f6 2f ae 42 e6 c2 cf 63 f4 3f 7e 06 fb a5 67 e1 be f5 22 78 74 04 62 c1 72 58 9f 5c 85 d4 85 77 c2 5c b6 a2 5a 2c 03 e3 0f c1 f0 fd f7 42 8e e5 cb e2 b9 e8 c0 f8 c4 1f c0 98 3b 17 48 a5 9b 87 04 d5 42 d3 bc 07 a8 d1 fc d9 b2 3f e2 63 5f ad 3f 78 dc 18 a1 a0 30 21 00 61 60 f8 f6 9b d0 ff 9d 0d 30 e6 cd f7 7e af 50 70 c4 ac e3 d0 77 d5 b5 c0 df 5e 5f 73 4a 11 03 ae f4 14 aa 5a 72 99 31 f2 d0 f7 60 6f 7d 0e 34 38 bb 9c 7e ec 18 ac 8b ff 14 c6 a2 13 ab 35 ed 76 d1 45 72 81 a4 Data Ascii: </%)@WXx%J#~:6dh(H!4?{LCw1LC`t2O)_^N/Bc?~g"xtbrX\w\Z,B;HB?c_?x0!a`0~Ppw^_sJZr1`o}48~5vEr
2024-05-27 22:43:38 UTC	240	IN	Data Raw: 31 5c 2a 40 a5 86 5c 71 5f 0e 33 72 ae fc f9 98 94 1b 3e fb 8b 57 86 c2 37 ae 39 62 93 a4 5b 3e f3 87 4b b3 9a b8 46 48 fa 2b 93 a8 df 28 bd 33 23 ae 0a 7d 70 c5 5f 6f cb 7f 3b 66 4b d5 09 d9 e7 96 e1 00 28 b2 3c ec 30 3d 3a 5a 74 d6 af 7a f1 b5 b7 a3 35 b2 39 62 ed ef 67 2e 38 73 9a e9 e0 cc ac 46 cb 00 9c 4c c0 34 00 6a df dd 06 00 60 10 97 62 2c 22 96 ee e7 8e 96 9d d1 ba 2b b9 f4 d2 4e c9 c0 21 10 7e 3b 26 8b 3b 46 a0 6d bd e8 f9 5f 29 55 ac 2a d1 91 15 cd bf 7c f1 5c 23 3d 52 18 d4 81 34 38 d0 ab b3 c2 81 d9 3f 62 a9 f4 43 84 2a 4a 65 44 cc de 0a 52 4a ef ad 75 44 5c 74 39 9f 73 f5 c3 97 bf fc 4a a7 36 29 4f 61 0a 53 98 c2 14 a6 30 85 0e e3 7f 01 8d 26 1e b5 5e 9c cb 8e 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 1\@\q_3r>W79b[>KFH+(3#}p_o;fK(<0=:Ztz59bg.8sFL4j`b,"+N!~;&;Fm_)U\|\#=R48?bC*JeDRJuD\t9sJ6)OaS0&^IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50165	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	560	OUT	GET /uY0DBQik6UA-8r3u940KST-4No0y-XK9SdLkA8cirg9XMg5hw43uvY04aMt_suipYETIU-g7GYZ12T1nUvefZBSpugr9xlvkvVb9L6p5EibJwYIX2A HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:38 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 67119 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:30 GMT Expires: Tue, 28 May 2024 21:11:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 5528 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 3a 00 00 02 00 08 06 00 00 00 12 4b a0 0a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec bd 79 b8 5d 47 71 2f fa 5b 7b 9e 8e ce d1 68 1d 6b 96 2c 4b 96 b0 85 21 c6 06 e7 9a 19 87 84 c1 f9 c2 10 42 6c 20 0c 06 0c 2f 0c 8f 24 dc 7c ef dd 7b 93 4b 48 78 21 04 c8 0d 81 e0 00 31 c4 10 08 43 12 93 60 46 db 60 ec 00 b6 f1 20 cb 92 2d cb 1a 91 65 49 67 d8 f3 b4 de 1f e7 d4 52 ed da 55 dd 6b 4b b2 b1 61 d5 f7 ed 6f af d5 ab 87 ea ee ea 5f 55 75 f7 ea 05 24 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 25 94 50 42 09 Data Ascii: PNGIHDR:KsBIT\|d IDATxy]Gq/[{hk,K!Bl /$\|{KHx!1C`F` -eIgRUkKao_Uu$PB%PB%PB%PB%PB%PB%PB%PB%PB%PB%PB%PB%PB%PB%PB
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 61 18 6e 0c c3 f0 ec 20 08 96 00 28 05 41 30 11 86 e1 44 3e 9f 0f 38 20 59 ff 1c 84 38 28 3d d1 5d 46 09 7e 74 af 01 22 85 d3 7d af d7 43 b7 db ad 07 41 70 3c 0c c3 6a bf df af a6 52 a9 bd 41 10 ec e8 f7 fb 7b db ed f6 fe 33 cf 3c f3 e6 f1 f1 f1 63 8f 6d ad 12 3a 15 7a 62 4b f4 2f 30 ed da b5 eb 65 00 b6 a4 d3 e9 33 01 6c 0a c3 70 4d 10 04 45 00 e3 99 4c a6 98 4e a7 d1 ef f7 01 9c 00 2f ba 97 24 07 fe 13 8d 88 f7 53 b5 0e 47 a1 54 2a 35 50 3e f1 d0 6e b7 fb 98 b3 0a 6b fd 7e ff 38 80 9d 00 1e ec f7 fb fb 83 20 b8 e9 ac b3 ce ba ed 31 63 32 a1 d8 f4 c4 95 fe 5f 10 6a 34 1a ab f7 ee dd fb ea 4c 26 b3 31 0c c3 b5 41 10 9c 1d 04 41 25 08 82 52 26 93 c9 02 c3 d6 d7 fc a4 3e e8 99 06 62 8f 07 70 73 b9 ae a7 c3 ad 7d ac c8 72 8f b9 35 d8 ed 76 11 86 61 2d 0c c3 Data Ascii: an (A0D>8 Y8(=]F~t"}CAp<jRA{3<cm:zbK/0e3lpMELN/$SGT*5P>nk~8 1c2_j4L&1AA%R&>bps}r5va-
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 92 16 d8 d2 35 b9 bd bd 5e 0f 9d 4e 67 00 fc a8 fd 00 a0 d7 eb 1d eb f7 fb df 4d a5 52 7f 75 d6 59 67 fd 52 b8 b6 bf f0 40 77 df 7d f7 bd 2b 08 82 df 0b 82 60 2b b7 de 32 99 0c b2 d9 2c 72 b9 5c 24 b0 73 42 33 e7 9a 10 0d 82 16 dd db 2b 6f 1a 90 91 20 f6 7a 3d b4 db 6d 34 1a 0d 34 1a 0d 34 9b 4d d4 6a 35 d4 eb 75 54 ab 55 cc ce ce 62 76 76 16 33 33 33 a8 56 ab a8 56 ab a8 d5 6a 68 36 9b a8 d7 eb 68 b5 5a 03 69 1b 8d 06 6a f5 3a 66 a6 a7 d1 6e b7 4f ba 8d 08 24 72 b9 dc 10 c0 58 8b 25 54 2f 6b 40 d2 4f 9b a7 73 59 8f 14 9f bf 3d 42 03 5a 4e 2b c8 d5 ef f9 f7 4d 01 20 b2 74 c2 30 a4 c9 fa 93 6e 9b 4a a5 82 72 b9 8c 52 a9 84 72 b9 8c 42 a1 10 fd 8a c5 22 8a c5 22 4a a5 12 2a 95 0a 2a 95 0a c6 c6 c6 b0 60 c1 02 54 2a 63 a8 54 ca a8 54 2a 51 9c 62 b1 88 42 a1 Data Ascii: 5^NgMRuYgR@w}+`+2,r\$sB3+o z=m444Mj5uTUbvv333VVjh6hZij:fnO$rX%T/k@OsY=BZN+M t0nJrRrB""J*`TcTT*QbB
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: a2 82 36 1f 42 20 d4 68 34 b0 6b d7 2e dc 7a eb ad f8 d6 b7 be 85 ef 7d ef 7b 08 c3 10 ab 57 af 8e 2c c2 74 3a 1d 81 27 5f b8 e0 79 6a 16 a1 c5 83 66 cd 68 82 4d 82 48 f9 75 bb dd c8 9d e0 71 e3 ba 45 da 3f 2f db 35 07 e6 02 1a 97 65 06 9c b0 62 e3 b8 7f 94 1f 81 9c b4 62 79 1e 71 81 d3 d7 3e c3 2e f1 e0 33 b3 5e 22 2e 6d 4b e2 c0 c6 ad 31 4d c9 69 75 e7 d7 d2 fa 92 5b 6a 78 fd 49 46 68 55 b5 d3 e9 cc 59 64 ed 36 0e 1d 3c 88 76 bb 8d 8b 2e ba 08 cf 79 ce 73 70 f1 c5 17 63 d3 a6 4d 58 b0 60 01 c2 30 34 37 bc 4b 7e c8 8d 9e df 09 f0 93 ad 5b b7 fe 8a b3 71 1f 87 f4 84 02 ba bb ee ba eb ea 7c 3e ff 7b 8b 16 2d 8a 56 26 e5 bb 82 5c c0 b8 d6 6b 34 1a b8 ff fe fb 71 c3 0d 37 e0 7d ef 7b 1f 80 b9 09 df f1 f1 f1 68 a1 a2 58 2c 0e 2c 5a 70 30 eb 87 21 42 63 3f 19 Data Ascii: 6B h4k.z}{W,t:'_yjfhMHuqE?/5ebbyq>.3^".mK1Miu[jxIFhUYd6<v.yspcMX`047K~[q\|>{-V&\k4q7}{hX,,Zp0!Bc?
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: cb 5f 3c 0f c3 10 d5 6a 15 ed 76 3b 12 50 ce 03 e5 cb 49 ae 2e 4b ab 50 92 f6 4c b3 ce a4 45 a3 dd 4b eb 93 bb 80 be 32 2d 90 03 30 d0 67 32 4d b7 db 45 a1 50 40 a9 54 02 80 81 c3 0d f8 14 06 e5 e3 52 76 2e 30 b5 78 75 d5 cd 65 e9 59 60 23 2d 7f be 70 a1 59 7b d4 df b4 d1 bd d9 6c 62 76 76 16 dd 6e 17 f5 7a 1d 7b f6 ec c1 3b df f9 4e fc ce ef fc 0e 26 27 27 07 56 99 e5 c2 05 fd 8e 1e 3d ba ff b6 db 6e 7b d9 65 97 5d 76 ab d9 08 8f 31 3d 6e 80 ee ee bb ef 7e e7 a2 45 8b de 3f 31 31 91 d7 c0 86 9f c8 30 33 33 83 eb af bf 1e ef 78 c7 3b b0 72 e5 ca e8 15 2b 7a f1 5a 03 37 cd 4a 93 3f 60 78 ce 85 87 13 b9 84 d9 b2 36 5c 96 9c 8c e3 02 3d 97 90 73 c0 e3 73 2c bd 5e 0f d5 6a 15 bd 5e 2f da 6b c8 f3 f3 f1 a8 01 b7 b4 04 35 10 d1 e2 84 f3 ab 9d a7 42 12 28 7c e0 Data Ascii: _<jv;PI.KPLEK2-0g2MEP@TRv.0xueY`#-pY{lbvvnz{;N&''V=n{e]v1=n~E?11033x;r+zZ7J?`x6\=ss,^j^/k5B(\|
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 1b 36 6c 18 3a dc 96 83 5d b5 5a 0d 0f 1d 3a f4 8e 6d db b6 7d 44 6d 84 47 89 1e 53 a0 bb e5 96 5b 7e 7b fd fa f5 9f ad 54 2a 69 09 72 64 c5 35 9b 4d dc 7a eb ad 78 fd eb 5f 8f b3 ce da 88 7e ff c4 ea 18 09 b8 b6 78 a0 59 71 da 73 40 7f 2f 55 4e 5a 53 3c 8b e4 c0 d6 04 d3 02 01 9f d0 ca 7c 78 1c 5f de fc df b5 af 8a 7f c5 2c 9b cd 46 82 4b 1b 65 e5 20 b2 78 d3 ea 2e e3 ba da 4f 82 80 8c 23 ff b9 92 d0 c0 05 40 b4 3a 3f 36 36 16 4d 8a 93 4c 70 4b 8e cb 86 f6 45 2d cd aa 73 29 bb 38 0a d1 ca 47 5a ae 27 4b dc f2 a2 7b fa b7 c0 8b a7 b1 5c 5a 4d 79 f6 fb 7d cc ce ce a2 d7 eb 21 9d 4e e3 be fb ee c3 c7 3f fe 71 5c 7c f1 c5 c8 e7 f3 28 16 8b 03 72 06 cc 2d 78 34 1a 0d 1c 3c 78 f0 0f ce 3b ef bc ff ef a4 2b 3a 22 a5 1f ab 82 ee b8 e3 8e d7 ad 5a b5 ea ea b1 b1 Data Ascii: 6l:]Z:m}DmGS[~{T*ird5Mzx_~xYqs@/UNZS<\|x_,FKe x.O#@:?66MLpKE-s)8GZ'K{\ZMy}!N?q\\|(r-x4<x;+:"Z
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 5a e7 94 87 d6 c7 96 f5 a5 59 eb 9a 05 2b c1 58 b3 ea b5 70 5b 16 02 00 c3 87 44 50 1c 17 e0 59 56 1e bf 27 cb 2e 97 cb a1 56 ab e1 b2 cb 2e c3 e5 97 5f 3e 04 76 94 7f 2e 97 c3 a1 43 87 6e 58 b7 6e dd b3 d4 4e 38 45 7a 54 e6 e8 76 ec d8 f1 fe c9 c9 c9 d7 f0 3d 4a fd 7e 1f ed 76 1b b5 5a 0d d5 6a 15 5f fe f2 97 f1 f9 cf 7f 1e 63 63 63 68 b7 db 28 97 cb 91 bb ca d3 58 ae 87 bc a6 34 12 e0 a4 5b a2 5d 6b 96 1b a0 cf c1 48 8b 46 5d 59 9d 4b 81 20 18 9c a7 b3 34 aa 2c 33 ce 9c 98 65 21 fa e2 c9 30 2d 1d e5 c7 db 93 0e 03 a8 56 ab 43 df 47 70 01 b9 6c 37 ea 0f 9f 15 44 4f 65 5f 35 1a 0d 34 1a 0d 94 cb 65 64 b3 d9 e8 3d 68 0b e4 64 3d 46 05 39 ab dd 00 f7 3c 9b 5a 27 a5 ff 65 fe c3 d6 eb 60 9e d2 6b 38 59 a2 2c 35 00 96 61 b2 4e 96 85 cd db 96 3c 83 46 a3 81 4a Data Ascii: ZY+Xp[DPYV'.V._>v.CnXnN8EzTv=J~vZj_ccch(X4[]kHF]YK 4,3e!0-VCGpl7DOe_54ed=hd=F9<Z'e`k8Y,5aN<FJ
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 74 e9 ff 00 f0 19 b3 43 46 a0 d3 02 74 bb 76 ed fa 3f e3 e3 e3 eb e4 a6 e0 66 b3 89 5a ad 86 87 1e 7a 08 9f fb dc e7 30 31 31 81 d9 d9 d9 e8 c0 47 b9 62 0a 9c 68 5c 0a b3 2c b7 53 5d 49 d3 40 c9 b2 f4 64 b8 45 da 3c 98 06 74 be c1 a4 69 52 0d b8 b8 60 52 1a 6b d0 bb da 82 f3 a4 6d 01 91 79 f0 b2 24 38 a7 52 a9 c8 2a ab d5 6a ea b6 04 4b 81 f1 3c 88 b4 f9 58 c9 0b 0f d3 14 04 57 02 1c 2c 25 b9 14 95 76 cf 15 03 7f 66 01 13 e7 4f ca d6 dc b5 7f fb 8d cb c2 e2 e1 3e d9 d7 d2 49 92 f9 c8 3d 7d 03 8a 51 28 3f 02 37 2e 2b 04 68 b5 5a 0d 0b 17 2e c4 e7 bf f0 05 ac 5e bd 3a fa 66 2e 3f f4 b3 db ed 62 7c 7c 7c dd ee dd bb 3f b2 7e fd fa ff cb c9 68 0c 3a 2d 6b d5 e3 e3 e3 6f 94 40 45 5b 49 a6 a7 a7 f1 9f ff f9 9f 68 34 1a 68 36 9b 08 c3 30 9a 50 d6 2c 34 eb ab 5c Data Ascii: tCFtv?fZz011Gbh\,S]I@dE<tiR`Rkmy$8R*jK<XW,%vfO>I=}Q(?7.+hZ.^:f.?b\|\|\|?~h:-ko@E[Ih4h60P,4\
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 30 4d f8 2d ad 1d 07 18 2d e1 1e c8 53 f0 c1 cb 97 6e 93 c6 87 56 77 4e 96 90 f3 b6 b3 06 83 0f 70 a4 92 e1 f9 04 81 3e 07 28 2d 09 8d 2f 99 bf f5 cc aa 93 d5 66 b2 5f 5d 80 63 f5 a3 15 a6 a5 95 71 2d 79 d1 56 cf 7d ca 59 2b d3 52 86 bc 4d 64 5f 6b 6d ea ea 6f 0d d4 e4 4f 9b 22 a1 72 5b ad 16 96 2d 5b 8a 1b 6f bc 31 5a 94 a0 ef 39 13 cd 7f 01 f0 39 66 03 78 e8 64 81 ee 8f 8a c5 62 99 33 4f ef b3 ce ce ce 62 f7 ee dd d8 b9 73 67 b4 19 94 3a 4d 6a 0a e0 c4 80 d0 ce 11 a3 78 03 bf b9 c0 28 3f 6b 60 4b 21 f1 4d 98 47 0d 22 5c 5b 4d 68 a4 90 f0 30 4b 83 5a f9 72 10 88 9e a9 9c 0e f2 ac 0d 82 38 83 d9 97 2f cf 5f 13 6e cd e2 a2 70 cd e2 93 6e 95 1c 5c 72 82 dd e2 81 c2 38 38 5a 6d a1 85 5b e0 ae a5 e1 7d 62 59 58 71 14 a8 06 86 3c bd 26 07 44 bc dd 7c 9e 83 cc Data Ascii: 0M--SnVwNp>(-/f_]cq-yV}Y+RMd_kmoO"r[-[o1Z99fxdb3Obsg:Mjx(?k`K!MG"\[Mh0KZr8/_npn\r88Zm[}bYXq<&D\|
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 95 65 80 9c 35 e8 e2 d6 8f df f3 6d 4c 5a 3f 58 72 16 28 79 fa ca b5 e4 46 2b 5f 56 4d b3 de 2d 05 48 e1 da 1c ba ac 93 9e df e8 63 98 5f 4b 1c 08 82 20 fa 06 48 2a 95 c2 fe fd fb a3 b9 7f b9 a7 6e 7e f5 75 db 10 83 0e 8a 0d 74 37 df 7c f3 a5 a5 52 69 c0 6d ed 76 bb 11 d0 d5 6a 35 dc 77 df 7d f3 ab ad 9d 01 a6 38 c8 0d 37 1e fd db 96 dc 89 b8 fe 55 37 7e af 59 94 52 eb 11 b9 00 23 8e 96 d4 c0 8e 5b 35 3e ad ce e3 70 80 95 f5 d1 d2 5b 61 be 81 ae 91 cb ba b2 04 97 bb 42 5c 70 ad f8 9c cf 38 61 56 7b 68 f1 4e 96 2c 05 72 e2 f8 f8 13 e5 6a 69 5d 7d a7 95 21 c3 ac 67 f2 37 58 e7 98 95 13 c4 79 b4 94 8d ec d3 38 79 5a 79 59 4a 95 03 1e 70 e2 38 af 7c 3e 8f 3d 7b f6 44 d8 c2 e7 e9 c2 70 6e cf 6d 2e 97 5b 3b 4a 9d 63 03 dd ea d5 ab 7f 8f 33 4a 6e 2b cd cf 4d 4f Data Ascii: e5mLZ?Xr(yF+_VM-Hc_K H*n~ut7\|Rimvj5w}87U7~YR#[5>p[aB\p8aV{hN,rji]}!g7Xy8yZyYJp8\|>={Dpnm.[;Jc3Jn+MO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50166	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	566	OUT	GET /4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi5QWrjpBGqtY9zgr06lOsx3KVezooiNyD8bzJwIHK2UC1bE-RE=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:38 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8005 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:38:04 GMT Expires: Tue, 28 May 2024 21:38:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 3934 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 4e 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 6f c9 23 ba 00 00 1e b2 49 44 41 54 78 9c ed 9d 79 ac 6c d9 55 de 7f 6b ef 73 6a bc 75 c7 37 bf d7 fd ba db 3d d8 71 db 31 10 70 9c 8e b1 b1 49 44 e2 c4 0e 60 14 d1 8e 91 19 62 41 82 25 82 15 90 23 20 09 28 04 0c 0e 8a 44 42 42 24 12 1c 26 29 51 00 4b 24 20 11 3b 80 21 96 0d c6 0c b1 cd d0 4d db c6 ef f5 1b ee 54 f3 39 67 ef bd f2 c7 19 ea 54 dd db dd af af ef 6b 8b 52 7d 4f 47 b7 ea d4 a9 33 7d 7b ad f5 Data Ascii: PNGIHDRxx9d6NeXIfMM*>F(HHo#IDATxylUksju7=q1pID`bA%# (DBB$&)QK$ ;!MT9gTkR}OG3}{
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 67 72 3b c1 da 85 e1 a8 82 0f 11 4f b6 9f f8 e6 db 9b b7 e9 68 0b 54 08 56 d1 30 e5 e6 8d 1b 24 1b d3 57 f7 ce ed fc 03 db 8f 7f ca b7 dc 11 57 26 62 d0 49 06 a1 79 2a a7 fc bc a0 10 a9 41 5a 01 59 18 b8 82 20 59 60 6f f3 e0 e7 f6 dd 1e 83 83 01 21 53 82 53 34 c0 24 9b 70 23 bb 45 3c e4 cd 3d bd fa 1b 99 4c 8f ec de 27 9e d6 d9 1e 72 17 cc f8 d4 4c c2 18 61 3a 49 18 8d 26 c4 0d 3b f7 99 a8 90 7a cb 81 db df f6 cd 14 5a 2d a2 28 46 44 20 04 92 24 61 9c 8c 89 cf 34 fe 43 67 b7 fd b3 4c d4 6b 14 a8 fb 64 45 21 05 1a e6 05 75 d5 62 04 e7 20 d9 0f a8 86 b9 cf 14 88 d3 88 c9 e6 f0 6d fd 66 ff 25 93 c1 94 e0 3d 82 10 d9 18 2f 8e 90 39 d2 e1 84 f1 68 1c b9 96 27 d3 6c e1 00 82 cb 1c c1 83 59 f4 df a7 80 53 21 58 15 10 e8 b5 ba 68 b3 41 dc b4 73 06 28 08 1d e9 f0 Data Ascii: gr;OhTV0$WW&bIy*AZY Y`o!SS4$p#E<=L'rLa:I&;zZ-(FD $a4CgLkdE!ub mf%=/9h'lYS!XhAs(
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 89 aa 1e e7 33 0e 6f 1f f2 8a f8 af bc 6b 6b 6b 67 74 e0 f6 91 68 46 a0 88 e0 33 a5 75 d9 60 5b e0 46 9a 5f d3 5d c2 5d a9 fd 05 0f b6 25 6c 5e 6a 72 fd 89 3e 78 87 d4 2e c2 69 ca 7a b4 ce 7d e3 07 be e9 a3 bb 1f f9 a5 ac 9b 61 ac c5 aa c5 1a 4b 20 57 a2 2e cb 98 74 27 5f 1b e0 dd 9b c3 8d 8f 59 63 51 09 a8 d5 87 c2 9a 7b 5d da 08 af 0d ed e4 95 a1 a1 f7 6b ac f9 d5 18 f2 98 8e e4 93 07 f9 5b 44 aa f4 b9 03 ba a9 70 29 00 aa 69 5e 8a 74 20 0e 4c 6a f6 6c 6a 3e 2a 89 fd 75 3b 35 ef 97 89 fc a6 4c c1 34 0d 0d 84 dd f3 a3 1f 9b b4 13 b2 83 b4 10 96 16 10 bc e6 82 71 30 e9 d3 1b ae df 38 d3 dc fa a1 eb a3 6b b8 50 93 fb 02 6e ec 68 6f 77 58 bb d4 c3 4f ef 9e 6b 2e 71 57 08 16 01 9f 2a 9d ad 06 71 47 e9 df 1a d1 ec c4 94 fe 4f 81 3d 4d b8 64 2e fc cf 6b 93 0b Data Ascii: 3okkkgthF3u`[F_]]%l^jr>x.iz}aK W.t'_YcQ{]k[Dp)i^t Ljlj>u;5L4q08kPnhowXOk.qWqGO=Md.k
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: ff 38 6d a5 58 89 68 da 88 d8 c6 58 1b 11 9b 88 46 e1 8e 05 53 29 5d a5 c8 59 6b 04 87 c2 7e 73 eb a5 46 7c ee b8 4b 68 19 98 a1 12 60 25 cd a6 70 ce 55 fe ac be 96 66 cd 94 79 b9 5d be 8b 3c 46 47 92 f7 67 a5 65 aa 6b 05 51 48 9a 19 fb db 07 ff ba 27 6b 2f 6b f5 5b 6f 91 70 37 ba ad ee 0c a7 4a b0 3c d3 3c bc e4 05 ff 86 8f 98 b6 c7 df 3f 6a 1f bc 2b 89 1d 16 4b a3 24 d7 e4 e4 c6 26 ca 63 1f 52 59 6c 9e c2 e4 74 06 42 41 72 41 6f e9 9a 55 51 a9 59 af 32 eb c0 28 c4 d6 4c 61 17 b3 44 d5 e9 cd 08 15 a8 91 6a 8a 98 2b c5 ba 9c f0 f2 5b 06 21 12 4b 30 c5 f1 54 50 ab f8 10 48 c5 71 b0 79 f0 f8 9a 5d 7b 60 63 b0 fe 37 14 86 77 3e bb 71 7a 38 b5 96 1d 55 aa bc 73 ee 33 c0 22 58 13 93 46 07 ff e9 b0 73 f8 4d de f8 22 77 cd 53 1f 53 15 2c 4c 75 db bd 86 5a 8c 2d Data Ascii: 8mXhXFS)]Yk~sF\|Kh`%pUfy]<FGgekQH'k/k[op7J<<?j+K$&cRYltBArAoUQY2(LaDj+[!K0TPHqy]{`c7w>qz8Us3"XFsM"wSS,LuZ-
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 64 03 67 ce 9f e1 f7 7e ea f7 f8 e0 4f 7e 90 d4 a7 f9 bd 30 96 9d 97 9e e5 0d ef 7c 03 eb db 3d 46 bb 23 54 a8 aa 6a e5 64 88 56 5a 22 3f cc 6d d9 ed 36 43 e3 a7 7b 93 ad 37 3b 4d 8f bf d1 9f 23 4e de 55 69 9b 73 8b 98 16 d8 a6 b9 dd da ff d9 81 8c 8a c2 44 a1 80 2b 79 54 54 a1 0a e1 a4 a2 48 c7 f2 8b 3f f0 8b c8 ef 78 de f2 d5 8f cf 1d e2 63 1f f8 18 1f fc b1 0f b2 7e 66 9d 50 14 ee 35 84 59 ab 4d d0 da cd 9b cd 1c cd 92 ad 82 af b2 c4 99 27 ca b5 ed 99 ff 6e 2d be 97 71 3f 5f 14 ef 03 9b 97 36 f8 d3 5f fd 13 de ff 13 ef af c8 05 f8 ca bf fb 95 bc 6a eb 4b f8 f9 77 fd 0f 0e f7 fb d8 4e 44 f0 7e 46 6a a9 21 8a f3 f0 ea 71 ea 49 34 63 d7 ec 7e b5 9a e4 75 4d 63 b0 26 10 19 ad 96 d3 c0 89 09 76 41 6a 0b 48 88 e9 4b f2 ee 5b 1c f6 72 81 14 66 84 86 d9 0d 0c Data Ascii: dg~O~0\|=F#TjdVZ"?m6C{7;M#NUisD+yTTH?xc~fP5YM'n-q?_6_jKwND~Fj!qI4c~uMc&vAjHK[rf
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 78 e1 fc c0 0d 1e 4b d5 e5 13 06 28 aa b3 b2 a4 68 40 55 08 85 55 18 9d 2f 1b a6 d3 94 38 44 bc f4 4d 8f 72 df ab ef c3 4d 3c ed 8d 16 ad cd 16 93 dd 09 64 4a 14 47 05 89 c5 dc 6b c1 eb b3 a2 24 e5 39 b6 13 65 8e 62 39 62 8f b3 1d 96 d6 6d 63 83 4f 02 e3 5b 43 1e 78 ed fd 5c 79 e5 65 46 b7 47 88 81 b5 f3 eb 90 c0 f8 60 3c 23 57 29 72 f3 c2 72 4b 91 55 c5 94 19 e9 1e 38 74 7d 86 0c bf a6 6b 3a ff fe 39 ae f2 8e 70 f2 18 1c 79 c6 32 7c 53 df 0f 2a b7 93 df ae d2 9d 2e 8c d4 39 f7 34 13 1a 2e 73 4c 6f 4f 68 c5 2d 7a db 5d 4c 10 26 37 27 f9 33 bf b6 36 4b f5 4c 6e 57 e6 fb 99 ab c9 01 99 5b 03 73 4b b9 cb c5 11 f0 2c 23 a2 76 68 63 0d d6 5a a6 bb 13 34 51 7a 3b 3d d6 36 7b b8 be 23 1d 25 f9 64 88 6a 45 66 d5 f1 59 13 6c d4 2c bb 74 dd 21 04 26 7e c2 58 d3 af Data Ascii: xK(h@UU/8DMrM<dJGk$9eb9bmcO[Cx\yeFG`<#W)rrKU8t}k:9py2\|S*.94.sLoOh-z]L&7'36KLnW[sK,#vhcZ4Qz;=6{#%djEfYl,t!&~X
2024-05-27 22:43:38 UTC	196	IN	Data Raw: 1e ac 69 af 6f 83 f4 63 d3 38 88 a5 b9 6f 91 5d 1b db 5b 9d 6e e7 c6 f6 fa e6 f5 5e 7b 7b dc 68 35 98 ba 53 09 c1 c8 11 f1 b1 c2 52 61 f5 ff 26 2d 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 fe 3f 02 63 bc e3 05 dd c3 54 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ioc8o][n^{{h5SRa&-9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9?cTIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50167	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	783	OUT	GET /AGsg9hOAylBkWuFrfSgOt8psYWcr3b-vZcmIVk0ocwx7KAVSu--tg1ZIAUSL7nAbORTHI5eZaweHYVPMJu5ac8Xw7GP_WiCs1w60=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:38 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3727 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:34:04 GMT Expires: Tue, 28 May 2024 22:34:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 574 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0e 46 49 44 41 54 78 9c ed 9d 69 90 5c d5 75 80 bf fb fa 75 4f cf d6 b3 4f 8f 76 45 cb 48 62 09 65 23 99 18 83 62 30 74 23 13 c7 76 d5 48 76 08 65 e2 92 4d 12 12 11 82 29 9c 4a 29 72 c2 62 bb c0 36 9b 0d 48 0a 0e 2e 12 c7 b2 46 94 8d 5d 42 3d 84 41 12 21 80 06 27 01 1b c9 5a 4c ac 10 a1 11 91 40 8b 25 34 33 dd f7 e4 c7 68 c8 20 f5 f6 f6 37 e2 7d bf a4 f7 de 3d e7 74 9f 3e f3 ee 3d f7 dc 7b 21 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 62 22 a0 82 36 c0 32 b7 9d 7f 29 8a 2f 02 1f 01 66 f9 a4 75 2f f0 1c c2 63 ac fa f9 26 9f 74 ba c2 c4 71 f0 ba 2b b3 ec dc 7f 1f 4a cd 0b d4 0e 61 df e1 45 af 2e 6f Data Ascii: PNGIHDRxx9d6sBIT\|dFIDATxi\uuOOvEHbe#b0t#vHveM)J)rb6H.F]B=A!'ZL@%43h 7}=t>={!"""""""""""""""""b"62)/fu/c&tq+JaE.o
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 65 89 96 08 ce c1 1b b2 4b 18 2d bb 71 0f 11 48 d5 42 9d c5 61 93 28 ae 69 1a e2 a2 96 83 76 86 45 95 b8 44 fa 58 e2 ba d4 2a 09 ce c1 c2 0f bd 12 cc 94 56 6b ef 50 11 6e 9b f5 3f de 98 33 8a 47 9f b5 32 c1 38 b8 37 fb 57 40 83 27 b2 c7 86 4d 2d f5 d5 bd 8b b5 e2 f6 ce e3 cc 6e 3c ee 65 a5 48 83 f4 f1 65 cf a4 97 c1 ff 4e 56 6f a6 0d d4 20 60 7a aa 47 04 b6 ef 1b 4d 67 96 23 af 38 71 f1 2b d4 7a ff 4d 8c 00 69 95 e1 6d cf 35 8d 23 80 08 56 f7 e3 b5 73 01 62 06 4c 6a 29 9f a7 ce 2b 1e 9f 7d 90 5a 4b b3 09 b6 89 03 0f f9 a2 69 1c fe 46 f0 fa cc 6c 94 da e3 ab ce dd 83 c5 cb 7b 04 3e 54 93 e7 b9 0f ec f0 e1 d7 f6 1e bd e7 aa 2c db fd 52 e7 6f 04 2b e5 6f 2d f1 d8 b0 a9 58 79 8f 56 3c 3c eb 4d 4c bf 5f 52 8a f5 7e aa f3 cf c1 bd d9 6b b0 9b 6f b6 8b 08 34 26 Data Ascii: eK-qHBa(ivEDX*VkPn?3G287W@'M-n<eHeNVo `zGMg#8q+zMim5#VsbLj)+}ZKiFl{>T,Ro+o-XyV<<ML_R~ko4&
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 5c bb 29 34 c7 d5 a8 0b 11 24 54 ab 22 66 4b ae f8 06 37 c5 1d 2c ea 62 4f cd b1 c6 af e8 c9 85 ee a4 4f 95 e5 51 08 6e 9b e0 22 2c 2c 76 b1 f8 1e 60 b1 7d 33 46 ab 60 03 de e7 40 f2 50 bf fd 63 c1 1a 51 86 56 3e ce 11 f6 84 a2 a7 a2 98 59 ec 72 71 07 0f ac 6e 40 82 b6 5a 48 25 1b 98 6c fc f6 f7 f4 1d 85 f0 a4 08 c7 a1 9e 8c 9d 7c 61 f8 9e 03 e7 1c ba 2d 5d 30 66 04 6a 8b 8c a8 4e 8a 4c d3 17 77 f0 9b e9 03 5e 1b 54 1e 01 14 1d 53 a7 a3 55 21 b4 e7 f3 4e 37 34 7f a9 96 0f 6f f8 f9 fd 05 93 58 0c e5 eb a6 88 a7 73 b8 d8 c5 e2 16 19 da 71 f1 9a 23 44 93 6e 6e c3 8c c7 10 3f 0e a0 b4 49 52 84 e7 93 a9 c4 53 e7 3d 78 e8 13 db 7f af 2d 6f 5e 18 98 2d 02 2f 17 bb 5e a2 93 c5 36 4f ad a9 80 32 4c 9a 9a 5a 42 ed dc 31 e6 68 cd 75 53 33 a9 a3 35 17 1f 57 e2 5a 59 Data Ascii: \)4$T"fK7,bOOQn",,v`}3F`@PcQV>Yrqn@ZH%l\|a-]0fjNLw^TSU!N74oXsq#Dnn?IRS=x-o^-/^6O2LZB1huS35WZY
2024-05-27 22:43:38 UTC	87	IN	Data Raw: 9b 73 95 27 ef 31 5f 3a b7 73 6f 1f 99 ae 94 ba 04 98 01 d4 8c bb 25 45 6c 38 9b af 01 0c 09 6a 0f c8 bf ee 5e 69 ee 2f 72 3f 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 62 42 f1 7f aa fc 2e 2a 6a 73 72 e5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: s'1_:so%El8j^i/r?"""""""""""""""""""""bB.*jsrIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50168	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	553	OUT	GET /3Vr1H8EL1F2w2g35zmQkqnbbqfM8e28GxuaTXxkovnYV7ldiiKJVqlnFRlIOfurcfZ7XDVJIJ5ET51yXw8_fJkXIzakq30XzVzI6Og=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:38 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8164 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:40:48 GMT Expires: Tue, 28 May 2024 21:40:48 GMT Cache-Control: public, max-age=86400, no-transform Age: 3770 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1f 9b 49 44 41 54 78 9c ed 7d 77 98 5c c5 95 ef af ea 76 9a d1 04 85 91 34 8a 23 66 94 23 41 48 20 19 50 40 20 50 20 08 11 24 a2 08 0e 2c 19 0c c6 f6 c3 e1 2d 7e d6 be 5d 7b 0d d8 fe 76 bd f6 67 ef c2 87 0d cf cb 12 fc 6c 16 bc 20 2c 64 82 4c f2 1a 83 04 42 42 59 13 3a dc ee 9b aa ea bc 3f 6e df 99 9e 9e ce d3 3d 3d a3 c7 4f 5f 33 76 df db 55 a7 ee af eb d4 39 a7 ce a9 06 3e c3 71 0d 56 6d 01 06 0a 77 bd 63 6b 87 63 09 3e 6e 44 2d 26 d5 f9 e4 6d 2d 5c 55 5b a6 81 c0 71 4f f0 aa ff db 35 2c 26 d4 b4 a6 00 5f 6a 2b 39 b1 a1 7e 98 d4 c0 f6 76 09 b5 63 78 80 7f fc ab 25 a1 44 b5 65 ac 24 8e 5b 82 af 38 40 fc Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx}w\v4#f#AH P@ P $,-~]{vgl ,dLBBY:?n==O_3vU9>qVmwckc>nD-&m-\U[qO5,&_j+9~vcx%De$[8@
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 32 93 eb bd e5 e7 c0 9e 38 4d 4f 58 f4 f9 d2 a4 ac 3e 86 e4 76 e1 aa a7 f4 d9 bb 0d fd ad 84 a0 40 ae cd 84 74 30 22 b0 c6 46 c8 1c df 80 f4 b7 05 01 23 34 96 58 34 dd bf e0 d1 99 fe dd a5 ca 5c 2d 0c c9 19 1c 53 f6 77 63 42 05 0a 35 ac 52 41 45 90 0b b8 06 57 bb a0 da fd c7 c4 83 c5 f7 56 7d 0c 39 82 af 7b 29 7e ce 11 cb 5a eb 09 9e be ce 52 86 57 cf fb d9 15 77 2e 95 ee 63 c0 ae 0e b5 f1 aa 1d ce 99 fd 91 bd 1a 18 52 04 bf 47 14 7a bd 23 b1 35 ea 10 32 59 ce 59 5d a0 1c 6d e6 5a af bd f7 39 03 74 05 ec d6 c5 56 22 f2 17 2e 71 f5 31 a4 08 be f3 b7 5d 37 c7 0c b1 c0 57 80 5b 94 0f f9 0c b1 f4 6b 41 0e ec 8d ab c5 97 6c 37 6e ea 77 e7 03 88 21 43 f0 85 af 47 4f d8 15 b5 6f 31 a5 6b 19 12 15 e7 d7 7a 28 c8 6d ca f0 1e 27 c0 94 c0 db 61 ba e3 ce 03 6a 42 f1 Data Ascii: 28MOX>v@t0"F#4X4\-SwcB5RAEWV}9{)~ZRWw.cRGz#52YY]mZ9tV".q1]7W[kAl7nw!CGOo1kz(m'ajB
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 30 7f 8c 1f 57 b7 04 71 cc 91 60 b6 03 1e 8d 81 db 4e 4f ea 26 4a 0b 61 02 ee 96 e2 21 53 e1 70 97 f3 50 11 c3 2b 2b aa 42 f0 d9 ef c5 96 7c d2 61 ae 4b 8f 68 f4 d7 f7 25 02 74 41 40 80 e1 4b d3 02 68 08 00 22 47 b6 80 90 84 ba 00 70 d5 b4 1a f8 6b 18 74 a5 00 db 02 8b c6 c0 1c 07 c4 d0 af 48 17 08 08 30 86 f7 23 f2 b2 1b f6 da 55 71 9b 06 9c e0 08 11 db f7 e7 f8 c3 56 32 86 9b 09 a5 fa be 44 80 29 09 5f 6f f1 63 66 93 06 9e a7 0d ef 5a 6b 93 0f f7 b7 86 a0 0b 09 52 04 66 59 e0 11 97 e4 9c fd e5 91 05 48 1e b4 46 0c af bf 2f 1e 29 62 28 65 c3 80 13 bc 6a 5b e4 8b 9d 96 3a 89 17 48 5f 31 44 77 4a c2 49 f5 0c eb a6 f8 31 3c c0 e0 14 90 eb e3 48 42 9d 1f 38 bb 25 88 25 8d 1c 47 85 9b 59 cf 1c 1b 5a 4c 07 13 a2 8f 04 b9 64 ca 64 27 04 38 b0 4f a7 d3 cf 7f cd Data Ascii: 0Wq`NO&Ja!SpP++B\|aKh%tA@Kh"GpktH0#UqV2D)_ocfZkRfYHF/)b(ej[:H_1DwJI1<HB8%%GYZLdd'8O
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 52 24 e3 d4 0a ac fb 6b e7 f9 b8 2e c9 2c 61 02 32 b7 cf 96 da ab 02 10 71 d8 79 87 23 58 bd 3a 26 7c c5 8f 2a 3b ca 4a f0 fe 8f 12 27 da a6 da a2 9b aa e0 4c 8d 42 67 35 03 a0 db 84 cb 5b 03 58 35 de 07 dd 2e af 61 95 ab df a8 a5 70 fa 18 8e 2d d3 82 08 1b 02 ac 7b 2d 06 ba 47 49 ae 8f 4c 8c b9 86 97 61 80 29 95 31 18 92 3e 54 ce 00 d3 26 2e 4d da b2 77 a7 33 af 9c f2 97 8d e0 53 9e 8a d5 c7 a3 6a 63 cc 52 73 79 ba 6a 46 61 c6 53 2e b2 63 42 01 41 86 fb e7 87 40 82 b2 64 30 57 06 c4 00 d3 56 b8 79 5e 2d 50 c3 10 15 22 29 a8 ea ae 4b ea 35 c6 6e 75 6d 82 c9 9e 35 39 e7 33 e0 40 d4 a2 93 99 45 1b 56 bf 6d 95 ed 27 f6 ca 46 70 d4 b2 4e 35 6c b9 c5 94 7d 8b b6 3d 14 a3 51 7b e7 5b 11 a4 4d f8 ce ac 00 e6 0d e7 d0 c5 c0 cc 5e 0f 0c 40 42 12 da ea 80 ad 73 6a Data Ascii: R$k.,a2qy#X:&\|*;J'LBg5[X5.ap-{-GILa)1>T&.Mw3SjcRsyjFaS.cBA@d0WVy^-P")K5num593@EVm'FpN5l}=Q{[M^@Bsj
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 22 5c 3a c9 8f d9 4d 1a 9c 5c 0b ef 20 85 2d 14 66 8c d2 b0 7e a2 1f 80 82 ed cd e2 a4 db d4 fd 8c 18 32 86 2a bb c3 9b 49 3f 99 db 02 e9 47 13 08 82 76 c4 54 e7 4c 7d c5 ba a0 50 b9 0a 22 b8 e5 9f 8d 71 ce 41 fb 7a 47 50 53 ae 45 b1 58 a2 bd bf b6 22 5c 34 9c e3 ac 16 3f 1a 7d 28 4b 02 fb 40 c3 21 a0 56 23 9c 3e 29 80 0d 8d 0c 86 94 80 72 b7 15 99 b7 1e a7 57 55 a6 bc fa 18 61 4a b9 75 50 a9 d5 1a 0c 90 0a 63 cc 76 79 c3 fc 8f 65 41 e7 7e 14 44 b0 ac d5 af 4a 28 5a e4 69 cd 7c ea b6 17 d1 79 08 37 15 81 73 60 75 8b 1f b3 46 69 30 86 80 61 95 09 0c 80 e9 10 a6 35 32 ac 9c 1c c0 08 ae 60 28 99 92 30 df f3 d4 7a 3f bf 1c a3 4d 92 ec c5 b8 bd 3a e3 28 d1 e9 d1 0f ad 4d 85 c8 95 97 e0 59 cf 85 4f b2 49 6c 10 8a 1a 8a 75 8b bc 70 5d b6 99 4d 70 23 42 9b 47 69 Data Ascii: "\:M\ -f~2*I?GvTL}P"qAzGPSEX"\4?}(K@!V#>)rWUaJuPcvyeA~DJ(Zi\|y7s`uFi0a52`(0z?M:(MYOIlup]Mp#BGi
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: b8 47 33 56 7b ed ad 66 46 26 91 5b c1 b4 72 02 c7 ca d1 1a 2c 47 02 9e 9a ee b5 d3 e0 25 08 24 9f 3b 4b 79 fe 8c 81 18 07 31 0e 26 6c 70 a1 bf 0a c4 1f b6 2f 9d b5 2f 53 9f 59 43 95 f6 d1 31 db c8 b4 be cc 44 fc d7 5c c4 2d 26 2c 30 d5 53 dd ee 95 4e 66 7b 31 52 10 42 02 8c 70 f7 cc 00 46 d7 b2 aa 6e 05 72 ce a1 71 0e c6 18 58 15 cd 77 45 c0 f0 00 f0 f9 36 1f c0 14 6c 47 80 a9 a4 ba 56 84 ee 9d 27 42 af 67 e9 32 ae dc b5 5b 58 e0 96 1e e7 56 e4 71 58 e1 7b ed 71 3b 5e cd d6 5f de 91 86 1e 7e f3 04 f8 82 67 91 cd 96 30 c6 a7 81 61 24 28 cf 69 f9 cc 55 cd 8e a5 9c 5b 67 d5 8f bf 77 f1 f0 b1 23 42 9c 95 72 cc 6f 7f a1 69 ae e7 60 db 16 62 7a e2 48 4c d7 b5 9a 60 a0 29 10 08 00 a8 ce 8c f6 71 06 dd 21 fa f1 db fa c1 ef ed 32 f6 86 42 01 3f d7 7c 44 5c 73 eb Data Ascii: G3V{fF&[r,G%$;Ky1&lp//SYC1D\-&,0SNf{1RBpFnrqXwE6lGV'Bg2[XVqX{q;^_~g0a$(iU[gw#Broi`bzHL`)q!2B?\|D\s
2024-05-27 22:43:38 UTC	355	IN	Data Raw: 06 82 73 34 8d b7 78 fe 35 d0 9b 6c 4d d3 60 da d6 bb bb 77 ed de b8 fa dc 73 3f cc d4 66 31 28 cb e1 d3 44 d4 24 84 98 ed f3 f9 7a a9 60 a5 14 0c c3 e8 74 1c e7 ed 44 22 b1 e3 68 7b fb 6b db 77 ec 78 f3 2b f7 dc 73 a8 1c fd 0e 05 1c c6 6e 6b c3 fa 75 db 01 6c 7f ec c9 27 27 4e 1e 37 fe d4 9a 9a d0 69 35 a1 d0 69 9a a6 2d 08 06 02 8d 9c f3 5e 2a 5c 09 39 87 03 63 01 f4 9b e0 b2 cc e0 48 24 32 c2 b2 ac 9b 34 4d bb 5f e3 bc c1 11 42 19 96 f5 ae 6d db db f5 68 74 c7 ae 8f 3e 7a 6b e3 86 0d 1f c2 ad 7e fc ff 1e df f8 ee df 07 4f 9d 37 7b 7a 53 d3 a8 93 42 a1 d0 52 bf cf b7 34 e0 0f cc f1 fb 7d b0 1d 27 11 8b c5 b6 46 a3 d1 87 97 2d 5b d6 d1 df be ca 69 64 d5 c5 e3 f1 6b 84 e3 2c 71 1c e7 95 63 e1 f0 1b cf bf f4 d2 c7 5f bb f3 ce b2 99 fc c7 23 7e f6 af ff d6 Data Ascii: s4x5lM`ws?f1(D$z`tD"h{kwx+snkul''N7i5i-^*\9cH$24M_Bmht>zk~O7{zSBR4}'F-[idk,qc_#~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50169	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	783	OUT	GET /HWgUyUNqdsifoczBOT-DYy-hV_ldW-cwWkz3tvlY0eQysaY1ra4D1bkfE-0BVFUlk5wComQdca8g-fwiPcOhdMHoMjqiiNh2TD2b=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:38 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 7652 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:47:38 GMT Expires: Tue, 28 May 2024 18:47:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 14160 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1d 9b 49 44 41 54 78 9c ed 9d 79 b4 64 47 7d df 3f bf ba b7 97 d7 fd d6 79 33 23 0d d2 8c 0c 92 90 00 2b 32 23 61 cc e2 04 08 b6 63 62 16 67 3b 10 0e 0e 09 b1 49 82 1d 08 42 c6 81 83 13 fb 9f 00 8e 41 76 8e e3 1c 93 c4 3e d8 60 73 20 87 cd c6 49 84 10 60 81 40 48 48 9a 45 23 cd 68 34 a3 59 de be f7 76 d7 aa fc 71 bb df eb f7 de ed ee 7b bb 6f bf 11 39 f3 3d a7 67 e9 aa fa d5 ef d6 f7 fe aa 7e f5 ab a5 e1 2a ae e2 2a ae e2 2a ae e2 2a ae e2 2a 32 87 5c 69 05 32 c2 61 13 34 7e 0c b1 a7 41 6e 44 b8 1d 51 b7 ac ae ae 1e 0e 82 70 d2 52 6a 24 97 cf 63 db 36 5a 6b 1a 8d 06 41 10 04 b6 6d 57 2d cb aa 4f 4d 4d 9d Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxydG}?y3#+2#acbg;IBAv>`s I`@HHE#h4Yvq{o9=g~*****2\i2a4~AnDQpRj$c6ZkAmW-OMM
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 9c 37 ef 75 5c e7 1e 2b 5f c4 0d a2 ca 05 f0 42 f0 03 70 3c 68 f8 e0 06 11 f1 61 73 6e 23 02 b6 05 79 0b 4a 05 28 e4 20 67 41 de 66 73 6a 93 94 b8 be 7b 83 d6 b4 4c e0 70 d9 63 ba 18 a4 92 d5 36 3e ff aa 88 fc 41 bf 6a a4 c5 5e 11 5c 3e 39 6f 3e e9 f9 c1 2f eb e6 3c 36 d4 b0 51 87 d5 1a 78 3e f8 1a 82 80 58 2b 36 3b ac d7 52 60 ab 88 e4 f1 12 4c 95 23 b2 25 66 1e bb 13 83 10 dc fe cf 6b 46 7c ae 2d f9 a9 44 88 08 41 10 30 36 36 f6 69 11 79 0f 50 ed 57 9d c4 75 0e bb 02 e0 79 27 17 cc 37 03 cd cd 5e 08 eb 35 58 6f c0 72 35 22 59 35 b5 e8 a5 48 dc 1c b6 d5 4d 1b 03 63 23 30 59 82 e9 31 b6 a6 37 09 e4 24 c6 8e 82 da c0 44 3e e4 f9 e3 2e 92 42 6e 6b 0e 5d 2c 16 4f 8b c8 4f 03 0b fd aa 94 a8 be 61 0a 3f b5 60 5e a3 e1 b3 6e c8 a1 d5 1a cc ae 42 cd 6d 3a 2e ad Data Ascii: 7u\+_Bp<hasn#yJ( gAfsj{Lpc6>Aj^\>9o>/<6Qx>X+6;R`L#%fkF\|-DA066iyPWuy'7^5Xor5"Y5HMc#0Y17$D>.Bnk],OOa?`^nBm:.
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 88 31 a0 b5 61 74 44 71 60 5c 71 68 9f cd d4 b8 a2 90 93 d4 87 cb 86 05 11 b8 b4 12 ed e6 2c 17 32 f4 d8 9b 53 a7 11 5b 33 62 e9 e4 a7 2e b4 c6 75 dd db 80 a3 44 47 5b bb 22 d1 30 f0 b9 87 cd a7 d7 5d de 11 a7 85 08 d4 1a 9a b3 33 3e 33 2b 21 5e 73 1d 38 cd 34 43 9b c8 ea 45 a0 60 c3 91 83 36 87 0f e6 28 15 65 73 17 c6 4e 64 3a f6 76 c8 b8 39 51 30 50 cc c1 4b 0e 77 d8 54 90 b4 8e 98 72 45 cb 70 f3 84 83 9d 62 93 80 88 30 32 32 f2 17 22 f2 b6 9e 79 7b 65 78 72 d1 1c 7e f0 69 7e e8 69 f6 63 b6 0a b4 2c f2 fc 6c c0 93 97 3d fc 20 1a 57 d3 4f 01 76 ff 3f d4 50 c8 09 87 0f 58 bc f0 48 9e bc c5 b6 f9 63 1a 2b ca 82 60 88 ea bf 61 3f 5c 33 91 ed f1 1a 63 60 a2 10 f2 82 31 37 15 c1 5a eb f5 72 b9 7c bb 88 3c db 2d 6f 4f 27 eb e1 73 fc 92 26 22 17 a2 87 11 81 86 Data Ascii: 1atDq`\qh,2S[3b.uDG["0]3>3+!^s84CE`6(esNd:v9Q0PKwTrEpb022"y{exr~i~ic,l= WOv?PXHc+`a?\3c`17Zr\|<-oO's&"
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 4c c7 a5 c5 12 bc 56 0f 73 92 4a 93 ec 90 74 79 b1 6b 96 1d d3 a7 53 97 02 16 d7 a2 f9 7c 26 8f 14 23 a4 53 10 66 bd 01 4f 5e 06 d7 cb 7e 05 ae 05 11 f0 42 93 8f 4b eb e0 64 45 fe a7 21 59 63 67 81 34 c4 26 25 b7 85 9c 05 c7 cf 79 d4 9c 0c e6 c7 29 db 43 49 64 c1 4f 5c 8e 8e c5 40 c2 71 39 61 3d 22 50 77 e0 c2 5a 29 be fe b8 2f 03 f2 db 6a e8 77 01 bf 13 fa 91 97 a8 9b ef 90 21 ea 2e 0d 4f 5e f0 ba cf eb 7b 8b ea 2b 6f eb ea 88 f3 8b d1 27 34 0c 1c 37 87 56 04 0f ce ce 81 1b c4 af 1b c5 7e 1b 6a 41 7a 28 d0 89 94 9d db 63 07 45 22 11 09 c6 6a 4b c1 d3 73 01 87 a6 2d 0e ed b3 fb bb be 38 61 d7 1c 87 d6 1a ee 52 05 96 2b d1 95 4e 07 27 a3 de 65 d7 b5 8b 3d 84 2a 89 9c b7 b9 b5 c8 5b 57 0a 74 18 7f 6f 66 2c c1 3a 74 b1 54 39 85 fa 6d ba 65 d4 a5 67 e5 88 b4 Data Ascii: LVsJtykS\|&#SfO^~BKdE!Ycg4&%y)CIdO\@q9a="PwZ)/jw!.O^{+o'47V~jAz(cE"jKs-8aR+N'e=*[Wtof,:tT9meg
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 14 6c e1 87 67 3d 1e 3b e3 36 a7 76 3d 1f 21 35 ba fa 08 bb 94 8a 4e 55 3e 7c da c5 84 21 96 e2 9b 40 d8 49 44 d7 ce e7 2b ef 95 af 19 63 c2 c0 8b 7e 35 d2 90 ed 9b d9 5a 21 e9 b6 b3 43 44 a8 6d 34 d8 58 a9 c6 8f c7 89 2a 1a 20 b9 e9 61 3f 33 1f f0 ed c7 1b ac 6e 84 58 56 8f 3d cf 59 b4 51 6c 5b 44 97 df 3c 70 ac 41 c3 33 88 09 f5 33 77 c9 97 bb 89 e9 35 ba 3c 6a 17 c6 4e 6d ee 38 68 56 9a e6 1e 8e 9e f7 76 24 68 0c 11 61 6d a9 4a bd e6 44 8b 14 64 67 b5 dd 64 b4 3f 53 ce 82 d5 9a e6 6f 4e 3a 3c f5 ac 8f 17 98 d8 4d 74 69 c9 4d ea 58 89 40 b5 a1 f9 ce 89 06 2b 55 8d 65 09 b9 91 89 33 67 88 8f 60 b5 d0 db 7d 50 fc 89 49 78 41 65 d6 7b b7 da 21 18 56 e7 d6 f1 92 cc c3 13 b0 df 4b b5 38 dd 5b e7 71 1f 3b ef f2 bd 27 1c e6 56 03 72 f6 f6 65 be 34 48 ea 70 5a Data Ascii: lg=;6v=!5NU>\|!@ID+c~5Z!CDm4X* a?3nXV=YQl[D<pA33w5<jNm8hVv$hamJDdgd?SoN:<MtiMX@+Ue3g`}PIxAe{!VK8[q;'Vre4HpZ
2024-05-27 22:43:38 UTC	1234	IN	Data Raw: ee c2 12 5e 65 b1 52 3e 78 f4 6d 64 40 6e 4b 7c 66 f8 89 0f 98 3b dc d9 ef 3c ac 8a d7 64 2d 7a 1b fa 79 0f da 09 31 06 8c 36 94 c6 0a 8c ef 1b 65 a4 5c 44 1b 4d fb b2 5e 12 39 a9 f4 8a 49 14 25 78 cd 4d 85 b5 4a 03 dc 25 4a 87 5f f9 9a e3 bf 2b df ea a1 46 62 64 ce c2 d1 bb cd 5b 9c f9 47 3e 23 b9 89 52 96 e2 fb ed b9 bb 12 12 6d dd 64 74 62 84 d1 89 12 76 31 87 ea 70 30 3d ab 65 c5 d6 fa 6f e0 87 ac 2f 6d 50 ab b8 68 1d 82 bf de 28 5c f3 b2 7f 7e f2 1e f9 5c f7 9a d2 61 28 66 76 e7 fb cd 9b aa 73 0f 7c d9 1a b9 16 36 f7 36 a4 c3 20 43 71 da 0d e7 a6 b9 1f 76 a4 94 67 6c b2 c4 c8 e8 48 9b 2c 93 09 b9 d2 bc be c2 77 03 aa 6b 55 6a 15 87 c0 d7 08 06 ed 2e 50 3c f4 aa b7 66 4d 2e 0c b1 1f 7d d1 87 cd 51 b9 f8 83 fb c4 1e 9f 44 72 f4 a2 2c 2b df 3b 29 b9 71 Data Ascii: ^eR>xmd@nK\|f;<d-zy16e\DM^9I%xMJ%J_+Fbd[G>#Rmdtbv1p0=eo/mPh(\~\a(fvs\|66 CqvglH,wkUj.P<fM.}QDr,+;)q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50170	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	566	OUT	GET /WVR82wo80fHsNaPFIXDrmwaUcE6lFSxs_zHXc6Bedrglc3MA9mPkDqKFWBMvdVU3RbUEFGd3bYZjLgM21FuTEBGx9MycBQ5Sejajl3w9jgq3o7APtl8=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:38 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2018 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:40:48 GMT Expires: Tue, 28 May 2024 21:40:48 GMT Cache-Control: public, max-age=86400, no-transform Age: 3770 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 07 a9 49 44 41 54 78 9c ed 9d 7f cc 4e 55 1c c0 3f 2f f2 3b 24 3f 2a 65 7e b6 12 25 2a 1a 99 f5 13 8d da ab 4c 7e e4 57 6f 0c a5 cc 56 4b 6b 64 91 8a 12 5b 53 94 a8 a4 bc 91 d2 68 16 a5 d6 0f b1 24 64 16 15 a3 8c 84 42 c2 db 1f df 73 77 cf 73 df e7 3e cf 7d 5e ef b3 ea bb ef 67 bb 3b e7 39 f7 dc 73 ef fb 7c ce b9 e7 7b ce 63 53 50 52 52 82 a1 97 0a ff f6 03 18 f9 c5 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 2b c7 04 Data Ascii: PNGIHDRxx9d6IDATxNU?/;$?e~%L~WoVKkd[Sh$dBsws>}^g;9s\|{cSPRR++++++++++++++++++++++++++++++++
2024-05-27 22:43:38 UTC	1159	IN	Data Raw: 83 c4 3a 51 82 79 f7 dd 6c 0d e5 32 82 47 b8 f4 28 b2 f6 0b 58 e6 ca a0 74 d4 08 12 0d 06 72 57 21 23 bd 3f b0 d5 95 dd 07 f4 72 f9 8a c8 97 16 c8 7d 13 f9 62 fb 21 23 06 64 74 43 28 b8 88 50 ee 4f de fd c6 00 57 91 2a 77 aa 3b 57 84 4c 2f 00 3d bc 3a bf 7b 75 0f bb 74 1a a1 dc ef dd b5 85 c0 f3 ae 2c 76 0d 7a 06 2c 75 e9 84 34 e7 ea 23 4b b3 d7 93 34 94 74 04 d7 05 6e 71 f9 69 a4 2e 57 fe 06 9e 05 c6 23 23 b9 2e e1 d2 a1 22 e1 5c f2 35 70 93 77 5d 31 f0 33 b2 86 1c 87 74 94 11 c8 1a 10 24 d8 78 cc ab bf 10 58 8e 08 81 70 99 14 b4 7f 00 68 03 1c f1 ae d9 e8 e5 3b 03 9f 79 9f e7 20 73 d8 35 c8 28 1f 05 ec f4 ce ef 46 3a d1 58 f7 79 33 70 39 12 7f 80 8c b0 8d 64 09 72 ce 80 c5 48 c7 aa 43 6a c7 1b e5 d2 27 92 34 92 74 04 0f f2 f2 87 90 2f eb 3a 77 74 8e 3c Data Ascii: :Qyl2G(XtrW!#?r}b!#dtC(POW*w;WL/=:{ut,vz,u4#K4tnqi.W##."\5pw]13t$xXph;y s5(F:Xy3p9drHCj'4t/:wt<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50172	142.250.185.238	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	960	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:38 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 325611 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 23 May 2024 08:48:46 GMT Expires: Fri, 23 May 2025 08:48:46 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 18:15:45 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 395692 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	474	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 Data Ascii: n a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw E
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 77 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e Data Ascii: Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error("b`"+String(a));};va=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};wa="function"==typeof Object.assign?Object.
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 3b 74 68 69 73 2e 6c 73 3d 5b 5d 3b 74 68 69 73 2e 73 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 44 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 59 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 6a 4b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 59 64 61 3d 66 75 6e 63 74 69 Data Ascii: ;this.ls=[];this.sV=!1;var k=this.DF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.DF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Yda),reject:h(this.jK)}};e.prototype.Yda=functi
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 6c 73 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 6c 73 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 73 50 28 74 68 69 73 2e 6c 73 5b 68 5d 29 3b 0a 74 68 69 73 2e 6c 73 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 41 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 44 46 28 29 3b 68 2e 42 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 44 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 Data Ascii: totype.G7=function(){if(null!=this.ls){for(var h=0;h<this.ls.length;++h)f.sP(this.ls[h]);this.ls=null}};var f=new b;e.prototype.Afa=function(h){var k=this.DF();h.By(k.resolve,k.reject)};e.prototype.Bfa=function(h,k){var l=this.DF();try{h.call(k,l.resolve
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 49 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d 7d 29 Data Ascii: gular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ia(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}})
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 5f 2e 75 61 28 5b 5b 6b 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6c 2e 67 65 74 28 6b 29 7c 7c 31 21 3d 6c 2e 73 69 7a 65 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 32 21 3d 6c 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d Data Ascii: tion(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var k=Object.seal({x:4}),l=new a(_.ua([[k,"s"]]));if("s"!=l.get(k)\|\|1!=l.size\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|2!=l.size)return!1;var m
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 0a 6e 3b 21 28 6e 3d 6d 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6e 3d 6e 2e 76 61 6c 75 65 2c 6b 2e 63 61 6c 6c 28 6c 2c 6e 5b 31 5d 2c 6e 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 Data Ascii: totype.values=function(){return e(this,function(k){return k.value})};c.prototype.forEach=function(k,l){for(var m=this.entries(),n;!(n=m.next()).done;)n=n.value,k.call(l,n[1],n[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(k,l)
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 75 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 32 21 3d 64 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 Data Ascii: ntries\|\|"function"!=typeof Object.seal)return!1;try{var c=Object.seal({x:4}),d=new a(_.ua([c]));if(!d.has(c)\|\|1!=d.size\|\|d.add(c)!=d\|\|1!=d.size\|\|d.add({x:4})!=d\|\|2!=d.size)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)retur
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 7d 29 3b 0a 6e 61 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 6e 75 6c 6c 21 3d 63 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 Data Ascii: :function(){return Ka(this,function(b,c){return c})}});na("Array.from",function(a){return a?a:function(b,c,d){c=null!=c?c:function(k){return k};var e=[],f="undefined"!=typeof Symbol&&Symbol.iterator&&b[Symbol.iterator];if("function"==typeof f){b=f.call(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50171	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	553	OUT	GET /DaaQa-Y-b3_IAhu6SBFb2vRl8PFR5iuCLwLszc16_OTlLrEFvFF9P4CS0ui-414nG9016ul3dQD1R3mHtmMx4P1bIA-zRXuPpFN4yw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:38 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2457 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5518 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:38 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 09 50 49 44 41 54 78 9c ed dd 6d 8c 15 d5 1d c7 f1 ef 99 99 fb b8 7b 59 04 dc 05 5c 58 04 a4 0b c5 28 d6 08 a6 16 45 4d ad d8 68 8c 69 ac ad 68 14 52 45 d3 6a d3 a6 26 4d 4c d1 56 9a 34 4d b1 2f 88 10 1f b0 6a 03 49 d3 5a 53 23 45 ca 6a 8d 1a 8b 2b 4f b1 58 96 07 a5 12 77 57 b7 bb cb ee de dd fb 30 33 a7 2f ee 85 bd 94 db 65 67 76 f6 e1 cc 3d 9f 57 70 f7 9e b9 33 fb bb 67 e6 3f e7 cc cc 82 a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 8d 2e 11 c4 42 ae 79 3c 5d 65 98 f2 1b c0 42 c0 02 64 99 65 57 c4 6b 86 61 b0 f7 e8 21 a2 a6 e9 77 79 39 10 87 25 ee 6b 6d 9b 2f 49 33 42 23 0a 78 c5 13 bd 29 81 d8 08 ac Data Ascii: PNGIHDRxx9d6sBIT\|dPIDATxm{Y\X(EMhihREj&MLV4M/jIZS#Ej+OXwW03/egv=Wp3g?iiiii.By<]eBdeWka!wy9%km/I3B#x)
2024-05-27 22:43:38 UTC	1390	IN	Data Raw: dd 0f 26 b8 68 e6 e0 dc eb 1a e0 c9 5e c9 cf b6 65 d8 d3 ea 92 2c 6e e1 55 49 c1 13 af e6 d8 fa fd f2 9b dc d6 e5 f2 bd e7 33 1c e9 92 2c 28 ee 92 c3 40 99 1e 5c 3b 59 30 35 21 38 98 2e f4 ce b7 fa 25 cf df 13 3f 23 dc 53 a6 a5 04 1b ee 4d d0 27 c0 2d 56 bf 51 03 b6 9d 70 e9 cd 9c 3d 6b de b4 2f cf 35 bf 1d a0 b3 4f 32 23 3e 38 b7 de 67 ab 7f 2b a5 32 01 df b2 2c ca bb 3f ad e2 b5 7b e2 34 4e 13 3c bd 3c c2 fc 32 e1 9e 12 35 e1 f1 15 11 3a f3 83 af 4d b3 a0 b5 d3 3d e3 7d 8e 84 55 7f ce 31 cd 84 58 71 71 79 17 da b2 70 d7 e5 16 42 a8 1d b2 32 01 43 a1 67 2d 99 6f f1 ec da 24 77 5f 7f ee 53 95 c9 29 41 b6 24 4f 0b 70 fe e7 30 6c 0a d8 b5 3a ce 91 ac 44 02 5d 39 a8 8a 09 fe 72 7f 9c 3b 57 44 cf f8 82 a8 48 a9 80 4b 45 86 71 c9 d3 c9 5e 49 b4 64 0b db 5c a8 Data Ascii: &h^e,nUI3,(@\;Y05!8.%?#SM'-VQp=k/5O2#>8g+2,?{4N<<25:M=}U1XqqypB2Cg-o$w_S)A$Op0l:D]9r;WDHKEq^Id\
2024-05-27 22:43:38 UTC	208	IN	Data Raw: 7e 02 56 7c 3e 6f 5c 8d 6a 41 55 8e 9f 80 ff 15 f8 5a 54 86 51 2f a8 ca f1 53 64 6d 0f 7c 2d c2 6f 4c 0a aa 72 3c f7 e0 b6 75 ef a5 81 17 47 61 5d c2 6a cc 0a aa 72 7c 55 d1 2e ce 83 40 7f c0 eb 12 46 63 5a 50 95 e3 2b e0 cf d7 bd df 0b 2c 02 2a eb b1 71 c3 55 38 cf 18 f3 82 aa 1c df e7 c1 6d eb de 3b ee e2 d6 01 5b 83 58 11 01 a7 ff 00 a4 d2 a4 44 38 e3 53 50 95 13 c8 39 6d dd ba 65 55 c0 4a e0 22 01 51 ca 5f 57 3b e4 6b b6 ed 30 f7 92 39 b8 8e eb b9 ed 44 7a ed a4 20 da 72 7b f3 06 c1 f1 71 ed b9 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a 36 56 fe 0b 72 45 0b 5a ee b8 f4 1a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ~V\|>o\jAUZTQ/Sdm\|-oLr<uGa]jr\|U.@FcZP+,*qU8m;[XD8SP9meUJ"Q_W;k09Dz r{qiiiii6VrEZIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50175	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:39 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:38 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:39 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50174	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:38 UTC	785	OUT	GET /TVNK8r0QEiNhXwfjVlziAqFcBQPkuPHKyilz6atnzslwMho1no8n4EJV30tOT0T6y3RXrmCzyiNd74HSYkJPsAk4545WWBxBZgoPxg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:39 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 9615 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:51:45 GMT Expires: Tue, 28 May 2024 18:51:45 GMT Cache-Control: public, max-age=86400, no-transform Age: 13914 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ed 9d 79 9c 1e 55 95 f7 bf e7 56 d5 b3 f5 be a4 3b fb 9e 40 42 12 42 22 01 e2 04 07 04 75 14 87 77 1c 41 71 1c 17 44 47 1d 46 5f 1c 71 43 47 50 47 40 71 46 7c 55 c6 99 41 11 95 91 d1 11 41 96 61 1b 90 7d df 92 10 92 40 42 16 b2 f4 be 3d 6b 55 dd fb fe 51 f5 2c dd fd 74 a7 3b bd 05 26 bf cf e7 e9 ea a7 6e 2d b7 ee af ce b9 e7 9e 73 ee 7d e0 28 8e e2 28 8e e2 28 8e e2 28 8e e2 28 8e 62 2c 30 9f 3e ed d8 4d e7 9e bc 72 aa eb 31 99 b0 a7 ba 02 93 8a 6c e7 77 33 b9 5c 14 78 db 54 57 65 b2 a0 a6 ba 02 93 05 ff 6f d6 6d 40 eb b3 b4 d1 67 be 78 ce 8a d3 a7 ba 3e 93 85 ff 35 04 4b 2e 77 05 Data Ascii: PNGIHDRxx9d6sBIT\|d IDATxyUV;@BB"uwAqDGF_qCGPG@qF\|UAAa}@B=kUQ,t;&n-s}(((((b,0>Mr1lw3\xTWeom@gx>5K.w
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: aa af f4 1c 75 7f fa bd 17 6c ae 9d 71 dc 11 49 f4 11 49 70 ee 17 df 58 a9 da 3b df 4d 6f e7 df a8 b6 dd 73 a5 b7 bd 44 ca 42 98 50 b2 fc 24 26 56 87 df b0 18 bf 61 2e d4 ce c4 af ae 45 57 56 62 12 15 98 78 1c 1d 89 83 e3 04 04 03 a2 03 82 55 36 8d 64 d2 48 b2 0f d5 97 44 f5 74 22 1d af 61 75 bc 8a d5 ba 15 c9 74 80 55 1d 10 2e 25 03 8e 3c d1 d5 d3 d0 d3 e6 ee 34 55 75 ff e2 d5 37 dc 1e 3f ff 1b 9b 26 b9 a9 0e 89 23 8a e0 f4 5d d7 36 d9 2f 6f 7d 8f 6a 3f f0 61 e9 6e 3d 59 3a f7 13 f4 a9 f9 c6 0d fb 47 b7 1b 1d af c1 9d 7b 12 7a ce 4a 74 f3 2c fc ba 06 74 43 13 a6 a6 11 89 25 50 4a 21 22 28 04 11 19 d4 65 1a 03 c6 18 34 26 d8 6a 8d c9 a4 90 ae 36 54 47 0b 56 7b 1b 72 70 37 d6 ae 17 70 76 3d 84 4a 77 81 d3 18 74 0b a5 9a 03 83 a9 9f 85 ae 6e 7c 44 9a 66 fd Data Ascii: ulqIIpX;MosDBP$&Va.EWVbxU6dHDt"autU.%<4Uu7?&#]6/o}j?an=Y:G{zJt,tC%PJ!"(e4&j6TGV{rp7pv=Jwtn\|Df
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: f6 27 97 ac 9e a8 fb 4f 08 c1 e9 bb 7f d6 c4 ab 2f 7d 8e de b6 35 79 e3 02 a3 31 24 49 9d f5 59 ec 55 eb 11 6f 74 de 3b 83 42 75 ef c4 d9 71 27 d1 4d 3f 26 f2 f2 4d 48 eb 56 72 ae 57 20 b9 40 f6 11 46 b4 d2 3e f6 da d3 48 fe c5 25 18 7f 67 18 85 02 8c 40 b2 73 9d b5 67 fb e7 dd 3b ff b5 61 22 ee 3d 21 2a fa d2 75 4b 3e 68 b5 1f b8 48 7a 5a 6d 54 f8 0e 65 0e 90 3d ed 42 fc 33 de 8b 65 8f ce b6 30 00 5e 1f d1 a7 2f c3 de fa 35 54 e7 c3 58 07 6f 43 b5 6f a3 b7 62 15 26 5a 87 12 c1 10 0e 0b 26 c1 a5 39 d4 cb 33 54 17 a1 44 d0 33 17 62 d2 95 38 5b 7f 13 84 1e 45 82 a4 03 a7 72 a1 64 bc 1d df b8 eb 89 e7 c6 bb 9e e3 2e c1 99 6b bf b6 52 b5 ed fb 88 b4 ef 2a f6 bb 6e 12 f7 98 b7 e1 be e5 6c ec 68 ec 30 1a 5f a1 3a 37 61 b5 3e 1a bc 92 76 35 d8 09 ac d4 7d 44 5f Data Ascii: 'O/}5y1$IYUot;Buq'M?&MHVrW @F>H%g@sg;a"=!uK>hHzZmTe=B3e0^/5TXoCob&Z&93TD3b8[Erd.kRnlh0_:7a>v5}D_
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 5e c0 4f 34 9c 45 69 54 c8 ef c5 cc 5b 8d 9e 36 b3 e4 8d 1c 07 1c b2 df 85 c3 97 de 11 1c e3 a6 8a e4 ce 58 42 cc 12 94 b2 b0 6c 1b cb b2 b1 6c 0b 65 db 28 a5 0a d3 66 44 04 a5 14 99 4c 86 be be be 21 2c 6a 8d 6e 9a 85 5e b4 16 dc bd e1 4e 81 5c 06 6f de c2 b7 8f a0 f2 c3 62 cc 04 9b 8e 96 8f 15 1a c8 68 4c ac 1e dd 3c 1b a9 a8 99 00 87 7f fe 3e 63 20 77 24 75 1a 78 8c 97 22 53 b7 80 17 d6 ff 25 7d 25 e4 da b6 8d ed 04 1f cb b2 0b 52 2b 2a 54 d9 f9 f9 51 21 c9 65 d5 b5 31 48 55 1d 7a fa 7c 4c b4 b9 44 28 34 a6 ab fd 63 87 ae ec f0 18 33 c1 ea c0 cb ab c1 0a da 57 7b 98 69 4b 31 75 75 c8 84 64 44 96 f3 56 85 fb c7 72 cd e1 e0 25 49 35 2c 65 f3 c9 ef a5 6f c6 12 e2 05 c9 0d 09 0e 25 38 2f b9 56 b8 2d 95 62 08 0c b0 5c 2e 47 2a 95 1a 44 b2 20 98 fa 3a f4 f4 Data Ascii: ^O4EiT[6XBlle(fDL!,jn^N\obhL<>c w$ux"S%}%R+TQ!e1HUz\|LD(4c3W{iK1uudDVr%I5,eo%8/V-b\.GD :
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 65 9f c6 37 9f c2 70 0c e0 14 6e 1e 89 41 36 13 aa 90 50 9d b8 93 b8 a2 df b0 2a 76 ac e4 0e 05 01 63 51 fd c4 6f d1 76 94 83 27 bf 0b 3f 12 47 fc 60 d5 5a 3b 24 99 92 61 d3 50 92 5b 54 cf 61 fb 79 2e 78 39 0a 3d a7 26 68 63 53 1c 1a 1a 63 72 c0 16 51 ea 87 6b ee d8 f5 ef 87 aa ed 88 ac e8 d5 bf d9 f2 e3 e6 55 0b 4f 42 a9 ef 23 b2 d9 04 77 c2 c4 ab 28 04 00 8c 20 b9 14 e4 32 13 a7 ad 4b af 3b 5e e4 8e e6 1a 85 ec 4e 0b f1 34 b5 8f fd 9a e6 27 ee 44 32 29 7c 63 30 f9 b9 51 e1 b1 a5 52 3c 2c b9 c1 5e 54 36 83 e4 92 f4 f7 2d 54 e5 8d 2e 03 6c 54 96 b9 6a c5 bc ba 75 23 21 17 46 31 0e 9e 71 e9 ed 29 e0 0b 3b 3e b4 e1 87 9d bd ad 97 89 d1 27 f9 91 f8 32 3b bf 34 81 28 c8 f6 22 99 41 56 df f8 21 df ff 0c 7b c0 50 45 43 91 3e ca eb e4 a1 6c 24 9b a3 f6 d1 5f a2 Data Ascii: e7pnA6P*vcQov'?G`Z;$aP[Tay.x9=&hcScrQkUOB#w( 2K;^N4'D2)\|c0QR<,^T6-T.lTju#!F1q);>'2;4("AV!{PEC>l$_
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: ff f7 2f 2f 7e f2 c7 05 dd 80 15 6a 0a ab 7f 6e 74 b9 e1 59 09 0a 65 4a 61 b7 1e c0 7e f6 16 70 66 17 9e c6 8f 54 12 d9 fc 87 df cd 3d e1 5d 63 ee df c6 65 02 78 e6 b8 37 f7 f9 c7 9e fc 2c 7e 7e 15 37 1b 79 f5 4e 64 f7 2b 98 74 b2 30 d3 fd 50 9f a1 31 84 e3 3f 74 5a e4 87 24 82 14 d2 57 f3 d2 10 58 ba fd a7 91 94 6e f3 7d e8 70 e5 fd 87 5e 83 cb ca cd 62 18 0a 85 32 11 54 26 85 b3 eb 65 d4 de 47 8b 3f ee e1 e5 70 8f 59 f7 70 ea 94 73 87 9f 7b 3a 42 8c 0b c1 95 e7 5f 76 40 7b fe b7 4c 24 4e a1 33 73 16 61 3f f6 3b 54 cb be f1 51 d3 12 fe 19 22 a3 a3 10 72 23 ec 5b f3 35 29 43 cc c0 c9 61 87 4b ee 50 53 54 86 7c 84 d2 21 99 52 d8 2d af e1 3c f6 9f 10 29 4a af 8e 54 22 c9 ec e5 d5 1f bf bc 65 ec 8d 36 5e 8b b0 88 e0 9b cc 8b b9 a6 f9 fb 0b b3 f9 ed 18 b2 f5 Data Ascii: //~jntYeJa~pfT=]cex7,~~7yNd+t0P1?tZ$WXn}p^b2T&eG?pYps{:B_v@{L$N3sa?;TQ"r#[5)CaKPST\|!R-<)JT"e6^
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 17 d9 fb 3c 38 75 05 72 0d 90 89 d5 be ba f3 67 0f 1e 77 9c c4 27 25 81 7c c2 25 38 8f 19 15 0b ba 5a 3f fb ed 37 67 23 d5 7b 4d 21 39 40 c0 a9 45 f6 6d 21 fa d3 4b b0 1f fa 43 c9 38 79 40 e3 86 aa b9 a1 3a 41 5d 22 42 44 7c 6c 4b 21 f9 38 6c b8 38 99 65 a9 42 0a 4d 41 4d 97 60 22 c8 a5 64 9c 1b 7f e8 16 12 bf f8 2a b2 ef a5 50 2d 17 ab 9f 8d 54 ed e9 f9 f2 0f 4e 9a 2c 72 61 12 25 38 8f 3d 9b ee 9f d5 f0 cf 5f 7c 38 9a ed 9d a7 28 71 5d fa 39 88 81 77 e6 85 78 1b fe 1c 5d d7 14 4c 28 0f 27 75 e5 b7 c1 9c 65 4d 4f 77 0f e9 74 1a 83 09 c3 76 56 61 89 23 25 52 5c da 68 20 19 8c 37 b9 0a 31 3e 56 67 0b b1 87 6e 25 72 ef 0f 20 6b 15 ad 65 0c 1a 45 3a 56 f3 6a f2 cb 3f 38 a9 f9 98 f5 e3 12 06 1c 29 26 9d 60 80 7d 6d 9b 6b 62 5f fe f8 93 d5 b9 be 25 96 97 a5 90 Data Ascii: <8urgw'%\|%8Z?7g#{M!9@Em!KC8y@:A]"BD\|lK!8l8eBMAM`"d*P-TN,ra%8=_\|8(q]9wx]L('ueMOwtvVa#%R\h 71>Vgn%r keE:Vj?8)&`}mkb_%
2024-05-27 22:43:39 UTC	417	IN	Data Raw: b0 f1 b1 30 45 a9 1c a4 6a 29 91 70 13 38 4f 00 0f 0b cf 08 fe b4 f9 98 99 0b 1f 32 95 75 ff a6 76 ed bc 27 59 57 d5 97 fa d3 77 a4 16 9f 7a ee 11 2d ad e5 f0 ba 24 78 28 b4 fc e4 aa 4a cb ce ac b0 33 bd 67 f8 07 f6 7e 9a 64 f7 0c c9 24 21 db 17 ac da ea ba 81 6a 77 1c 4c 24 86 89 55 e0 45 2b 70 2b 6b f6 d9 4d b3 af 51 91 c4 dd 9e 17 db d4 f4 e9 2f 8d 79 56 df 91 82 37 14 c1 a5 30 ef 64 19 d5 f3 6f 44 d4 ca 82 04 0b 3c d6 9a c5 ce e7 74 19 8d 18 7f b3 b4 1c 3c 6f ed 0b 87 bf 54 d1 91 8c 49 0b 17 4e 36 e4 76 b6 f8 c6 7a dc 60 05 d3 0f 43 4e 2d 0c 96 12 2c a5 b0 2c db 88 15 7d ec 8d 4a 2e bc 81 09 06 b0 e2 55 97 08 6c 1c b4 56 56 11 9b 2a a2 f6 d7 26 b7 56 93 8b 37 34 c1 72 dd 73 2d 1e e6 16 20 5b a6 38 a7 44 dd 7a ec 2d 3b f6 4f 76 bd 26 13 6f 68 82 01 ec Data Ascii: 0Ej)p8O2uv'YWwz-$x(J3g~d$!jwL$UE+p+kMQ/yV70doD<t<oTIN6vz`CN-,,}J.UlVV*&V74rs- [8Dz-;Ov&oh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50179	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	799	OUT	GET /QuPkNiIrKnxQiue2xno3-rcRB6yg-hk6W5XISyjaY1EJ4hNq-_ZHCcYPdVDnI9E3xrQWrWX-VZI5kHRdO4C6RgvXPBvJN3s_ee9_gXR6gZrmjmXel2Su=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:39 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 10051 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:38:38 GMT Expires: Tue, 28 May 2024 22:38:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 301 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 27 0a 49 44 41 54 78 9c ed 7d 77 b8 1e 47 75 f7 ef 9c 99 dd 7d db ed 4d 5d b2 24 77 b9 f7 10 30 98 18 30 3c 89 43 08 10 20 38 04 42 0b c6 c6 14 d3 eb 07 24 24 f9 02 26 84 90 60 8a 6d 20 98 66 6c 63 6c 02 18 3e 3b 84 66 aa 2d 82 8b 6c c9 92 55 af 6f 7b cb b6 99 73 be 3f de f7 5e 5d c9 32 f7 4a ba 4d 42 bf e7 d9 67 f7 dd 77 77 76 77 7e 33 67 ce 9c 39 67 86 54 15 47 70 f8 82 e7 fb 05 8e 60 76 71 84 e0 c3 1c 47 08 3e cc 71 84 e0 c3 1c 76 aa 0b 9e f7 e5 c7 9e 23 06 24 06 1e 79 04 28 46 40 d1 03 0f d0 c3 e8 1e 6d 47 c1 75 e2 d8 2d 40 7c 16 70 cd 6d 00 6e 01 96 be 60 23 ce 39 ab 17 e1 58 05 e4 81 91 1e 60 f3 c8 43 68 db 15 61 d9 79 4b b0 7c 08 f8 d8 7a 20 fb Data Ascii: PNGIHDRxx9d6'IDATx}wGu}M]$w00<C 8B$$&`m flcl>;f-lUo{s?^]2JMBgwwvw~3g9gTGp`vqG>qv#$y(F@mGu-@\|pmn`#9X`ChayK\|z
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: de 48 64 d7 68 9e fa 66 5b 3b 7d 72 27 d0 24 91 f3 2c 17 c3 c1 d9 81 89 be 19 26 f9 89 e5 5a ea 0d 81 e8 10 22 f9 d0 26 98 40 de 00 43 a6 2e 29 e7 7f 1a 6a f4 0d 10 f7 4b 9e 7a 05 19 e0 60 06 52 14 50 65 9f e7 9e 38 3c 06 a6 f0 dd 52 ee ce 71 f5 4c 52 05 08 87 06 c9 87 26 c1 04 a0 9b c8 3a 28 1a 75 4d 22 bd 24 e4 d2 0d 4a 28 a8 77 1e 84 83 24 77 32 d4 f8 3c 75 cc 66 20 0c c3 ef 8c a6 ee a2 44 52 25 01 30 b4 3f c2 7f 7e 70 48 12 4c c8 f8 d4 ab 44 0b b5 1c 85 9c 5e 67 83 e2 35 e2 1d 54 72 01 74 36 ba 35 d6 fb dc 43 b5 12 85 85 af 11 e4 85 c5 be 54 8f 7e 3d 34 11 10 2d e0 21 d7 43 af 9b 14 81 cd 35 cf 97 ca 05 01 9b 75 ee 3d c2 d1 3b 25 4d a1 2a 4a 44 b3 59 60 8d 88 17 a8 14 ac 0d 3f 83 2e ed 3e 77 60 eb c7 f4 bf 47 34 29 94 5b 4a fc c2 c3 a1 53 83 15 20 02 Data Ascii: Hdhf[;}r'$,&Z"&@C.)jKz`RPe8<RqLR&:(uM"$J(w$w2<uf DR%0?~pHLD^g5Trt65CT~=4-!C5u=;%M*JDY`?.>w`G4)[JS
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: f5 79 7f 18 d1 57 1b 5d 4b 9f f7 b4 3b da 71 4b 2e ba a9 04 0a 0e 22 bb 66 9c e0 c0 81 ab 39 b4 c1 0d 9c 18 ea 7b 5c a1 f8 11 9f c5 50 91 43 dc f4 38 cb 20 22 11 af 92 e7 c5 a0 18 5c df 19 e4 af f8 e8 5d 09 36 37 12 04 e6 c0 9b b2 99 35 74 28 71 d2 07 d9 c1 0d c4 81 7c a4 12 96 2e cf d3 18 ea bd 10 f1 11 72 a7 00 11 91 77 5e 34 49 d9 76 16 fe fd cf 7e 19 77 ed ea 38 f9 43 ce 58 f0 01 c6 2a cf 18 c1 0a 32 c6 d6 7d da d6 16 1a c6 bf 95 51 7a 69 9e 26 50 ef f5 08 b9 d3 07 31 b1 38 51 d7 48 89 7a 0a 7f 5f 4a 57 74 aa cb df 3a 56 09 84 65 ff 49 3e e8 8c 27 00 a2 e0 0e ea f3 05 13 b5 57 46 d3 2f 06 1a bd d4 a7 09 d4 8b 12 cd bb d7 ca 21 07 62 22 f1 a2 79 92 c1 46 ee 2d 46 e5 e3 ae a4 81 0d 21 a2 30 fb d3 24 1f 1c c1 04 ca 02 b0 ad e6 52 6a 68 9f 9a f2 d7 0c 85 Data Ascii: yW]K;qK."f9{\PC8 "\]675t(q\|.rw^4Iv~w8CX*2}Qzi&P18QHz_JWt:VeI>'WF/!b"yF-F!0$Rjh
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 90 3a 54 85 f0 b0 52 b4 9d bc cd eb d3 79 93 a9 eb f8 d3 3e f5 98 b7 2f df f3 26 e0 ee ef 8f 92 3d f6 7e b6 bc 58 7c a2 e0 c9 22 d0 b5 b6 c9 9a e3 44 a3 bc d7 fe 50 27 73 ba d8 d7 77 ee dd 2f 9b ac 14 d3 5e c7 b6 29 01 3d c4 da 12 93 cf 7e 33 9d a7 4e 49 f0 69 bf b8 e2 31 e7 da aa f7 52 19 cb 1a 3b 35 b9 59 95 9e 04 b8 c7 31 6c ec fd 92 47 f0 bb 31 95 2e a1 4a ac ec b2 06 c4 cb 4d d3 49 71 4a 82 bb 86 ef 78 cc 39 1f 74 28 97 3b 80 aa bf 9e ac be 92 8a 76 ad 8f 9d d0 2c 7a 07 1e 01 00 55 09 4a 91 91 3c ff 81 66 72 eb 74 6e 99 ba 9b 74 fe b3 f6 71 96 10 d4 14 27 7c 75 cb 66 a3 3b df 60 6c 74 83 04 cc c8 55 c0 f3 1f 0e 73 38 42 55 85 8c 31 e2 92 d4 e7 f4 86 d2 ce 78 64 3a f7 4d 49 b0 37 fd fb 38 4b 30 1d 42 51 f7 98 8e f4 e3 26 1e cd de d7 56 4b df e3 19 d4 Data Ascii: :TRy>/&=~X\|"DP'sw/^)=~3NIi1R;5Y1lG1.JMIqJx9t(;v,zUJ<frtntq'\|uf;`ltUs8BU1xd:MI78K0BQ&VK
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: d1 23 03 0f eb 6c 68 44 53 26 d9 33 ba 14 fd b5 95 a8 c0 c2 d7 ab b8 ec ce b7 62 d7 e6 0b 61 57 97 70 f5 93 ae c6 86 ae 0d 18 2e 0c 4f ef 61 69 a4 85 6a 91 a3 b8 2c f5 b8 f8 77 61 39 39 b3 50 f0 7f e6 c7 4b c0 b8 0b 31 f6 dc 4f c6 38 49 2d 87 53 18 28 cc a4 6b c7 dd 1c 14 80 07 21 01 21 53 a0 8e 16 91 ca 70 6a c0 ad 28 82 76 25 88 02 01 9a f9 6b 01 30 35 8f a9 15 3b 31 d9 75 62 52 a4 11 b4 f5 c2 8f 57 ff 1f 53 18 9a de 2e 6a ac 21 ef ea 1f 4b 87 2b d7 86 d6 42 43 87 c0 05 c8 6d 3e 65 1e ee 2f a6 24 38 e7 1c 19 65 c8 48 e0 4c 0e c7 16 71 10 63 49 36 80 4f dc f2 09 dc d3 7b 0f ae bc f0 4a ec 2c ef 9c f2 61 79 d1 63 d3 13 37 48 ba 74 33 3f fc e3 73 a4 f7 e1 9e cb d6 9d f4 c0 29 0d 14 d7 f8 c4 a9 b6 82 52 9a ae de 8a a0 75 df 9e 19 45 c8 00 24 20 8c 29 50 6d Data Ascii: #lhDS&3baWp.Oaij,wa99PK1O8I-S(k!!Spj(v%k05;1ubRWS.j!K+BCm>e/$8eHLqcI6O{J,ayc7Ht3?s)RuE$ )Pm
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 8e a2 53 4c 81 9e 20 c9 a1 e5 60 4d 00 c0 00 f3 20 3e d9 f5 f2 9b 77 d4 7a 3f f8 f6 62 02 2c 5d 07 70 a8 c0 1a cc e5 17 cd e9 a2 1c aa 0c 63 32 f4 f5 fd 16 f5 7a 1f ee b8 e3 1d 28 95 1e c5 13 9e f0 8f 28 f6 0c 02 80 d0 90 1a 1a d6 d8 2d b1 2f 06 d1 0f 98 75 b1 7a 1c 32 e3 c7 0a 12 c3 9e b3 74 e0 de d3 6b f7 5f 82 fa 8f 84 96 9d cd e8 3c 4e 80 2a 80 63 e6 f4 7d e6 25 d3 44 0c 4a a5 41 d4 eb fd d8 be fd 24 88 ac 87 ea ff c0 69 88 96 62 69 ac ba 87 48 e4 72 0a 91 c1 80 a7 65 59 9f 7f 28 19 61 09 db c6 c4 b9 4b cf 18 fa dc c8 19 63 0f 18 b8 b2 60 a2 63 90 cf e0 36 35 e6 6d 81 68 55 86 b5 09 8c 51 58 db 8f 46 a3 1f 9b 87 af c5 71 bd 97 02 6b 07 3d fa 40 54 97 2f bb 8c d7 99 02 bd 4b 63 88 08 98 16 68 7b 4c 80 82 55 b9 c0 94 d5 8b ef 32 3c fa 1d 74 78 86 f7 1e Data Ascii: SL `M >wz?b,]pc2z((-/uz2tk_<N*c}%DJA$ibiHreY(aKc`c65mhUQXFqk=@T/Kch{LU2<tx
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 17 ed b2 14 cc 6d 69 96 c5 9b d6 9d 7c f2 26 9f a5 3f f8 ee c3 5b 02 bb 63 7b 79 69 ff a2 3f 0a c3 d2 f5 50 65 ef fd 04 c9 d6 18 38 e7 30 3c 32 b6 69 c9 e2 45 1d de 6b a7 f7 6e 7f 48 26 ef 3d e2 38 46 18 46 ef 8e a2 d2 fa 2c a9 7f 33 a9 96 cd 1d 3b 3e e0 4f 3f ed 75 ba f8 d4 7b 89 32 ad 49 86 cb 39 c2 b7 4d 84 5e 9f 4d c7 49 e0 00 a1 10 2e aa 89 a5 e3 01 cd ec 15 c5 ac e6 61 16 03 64 14 ce 02 c9 34 27 cd 98 49 4c e3 91 53 6b d1 cc 48 92 04 ab 56 ad c2 92 45 8b b0 79 e3 46 f2 cc f9 40 4f db 48 48 3b be 32 3a da f3 b6 ae ce 8e bf 8f d3 a4 b5 7c 1d 10 46 05 22 92 41 15 7d 6a 9a b8 67 31 e3 2a 55 26 11 99 76 90 3f 11 91 f7 5e d2 34 29 1b 6b ae aa 54 da 7e ea 5c bc cb 71 ca b7 ff f8 8d f2 ec 0b 5f a6 e5 9f 81 4c bb fb a5 af f2 6b b9 60 fe 93 59 59 fd 2c 18 41 Data Ascii: mi\|&?[c{yi?Pe80<2iEknH&=8FF,3;>O?u{2I9M^MI.ad4'ILSkHVEyF@OHH;2:\|F"A}jg1*U&v?^4)kT~\q_Lk`YY,A
2024-05-27 22:43:39 UTC	852	IN	Data Raw: c3 a0 fd 9f 72 e7 10 c9 56 6c a3 f3 e9 3e f3 7e 1c eb df 04 45 08 a1 bc 15 5d bc 37 04 10 ab 1c 7a d2 02 c3 d7 3b 2f 2d e1 81 fb 90 ef 20 9f 18 1d 1b 1b c3 6e 82 0f 2d cc 19 c1 c6 04 38 ff fc b3 11 45 56 57 1f 75 3e ed 02 63 5b 1c 5f de 1e a7 27 06 51 f1 bc 2c 4b 45 55 a7 2d aa 55 95 1a 71 ac 85 42 71 5d 47 7b d7 95 9d 5d 43 1f 8a b2 d2 47 3d d8 66 79 ae 0c 70 51 37 63 83 fd 13 94 75 3b 96 c9 55 00 2c 14 6d 50 d4 d0 74 3f 20 28 0c 48 8d 1a 3b 4c 28 84 90 46 ef ff 7d 68 34 f8 cf ae 63 af a2 be ee 2e 54 96 16 70 e9 89 d3 9b 7c 7b 21 62 ce 08 26 62 f4 f4 74 b5 7e 75 6b 06 f0 70 5c 6f 94 92 e4 e5 6c 82 db 89 a8 5f 44 a6 6d 04 21 22 a8 2a d2 34 01 11 5e 0d 04 7f ec b2 74 ad 23 07 52 22 25 82 85 03 74 08 ff 6b 5f 80 4c 4a 58 e1 ff 05 56 1b 50 a4 68 4e f0 50 47 Data Ascii: rVl>~E]7z;/- n-8EVWu>c[_'Q,KEU-UqBq]G{]CG=fypQ7cu;U,mPt? (H;L(F}h4c.Tp\|{!b&bt~ukp\ol_Dm!"*4^t#R"%tk_LJXVPhNPG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50178	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	786	OUT	GET /uzkOxzfGFGjzRx0FK6B541qcv469wNDTQf_TUu4oqH_oPUGJoajTkqHLJ9DD188Kmocg_DJg2OBf1FxyRc6MLK_gMFFRmm7n7XTreZU=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:39 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 6744 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:40:38 GMT Expires: Tue, 28 May 2024 21:40:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 3781 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 19 a4 49 44 41 54 78 9c ed 5d 5b 8c 5d 57 79 fe fe bd f7 39 73 9f f1 8c ec 90 90 84 c4 09 90 92 aa 12 97 46 58 ea 0d a9 b4 10 51 28 55 ab be 40 4a 5f 50 91 1a 23 ec 56 ea 43 1f fa 50 8a 2a 8d 91 80 f2 52 f1 d2 02 2f 7d 6a 45 50 45 49 21 06 aa 2a ad 54 02 c6 76 c8 d8 c9 78 7c c9 d8 33 b1 e7 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx][]Wy9sFXQ(U@J_P#VCPR/}jEPEI!Tvx\|3
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: bd 64 c5 55 26 42 b8 df ba eb 92 3c ca c8 1e 01 3b 6d 7e cf 3f fd ef a0 69 94 8d 81 a7 bb 4a 1f 02 70 e9 be f7 d3 2b d7 e7 29 01 77 86 ae 7f 9d 7b 97 00 af 89 a8 4f 68 af ce 42 f8 00 33 81 38 02 58 80 c1 20 a6 6c 45 09 20 22 84 9d bb 0f f2 28 34 88 10 fc ec 62 38 91 bf fe 0b 0d f0 ef 01 58 bd ff 98 b7 b2 b1 e0 01 df 8d c1 5d 8f 25 b7 09 22 81 ce c6 22 7a 3b 0d 30 31 18 04 08 96 de 6f ea 4f 25 20 67 80 5a d5 f5 6d 22 1a d3 46 12 0c 5c 7d 43 18 5e 62 30 96 de ef 12 7d 1b 00 ae bf 28 00 60 e3 07 4f 4b 9b db bd 04 90 d4 54 e4 09 ec ae 2e a6 db 98 65 c4 1b b7 56 43 a2 bc b1 25 84 ed 16 82 e9 59 90 d7 c0 b0 de f5 dd 20 66 60 6b df e4 b3 12 c0 7f f8 fc df 3f 19 46 d1 a7 07 22 3c 26 58 2c 11 88 29 b7 28 f9 7d 58 b6 33 8d f6 15 36 b2 16 32 32 c0 2c b0 d6 03 8e f3 Data Ascii: dU&B<;m~?iJp+)w{OhB38X lE "(4b8X]%""z;01oO% gZm"F\}C^b0}(`OKT.eVC%Y f`k?F"<&X,)(}X3622,
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 27 b2 f0 88 28 f3 9e 0d fe 72 68 3a 6c ae 55 7a f3 e0 e6 eb c4 e5 51 b7 0d 7f 72 1a e4 f9 46 17 77 c2 fe 02 15 9d ac aa 71 b1 95 65 9b 4d 56 25 77 26 96 dc d6 35 00 4d 68 49 68 db 8d 0a 0b 11 09 ec bf 31 8f 70 cf 4f 01 55 6f 27 90 d2 2e b5 ce 16 70 9d de b4 ca 7a a9 2f a6 6c c1 54 92 a3 c2 3e f5 b1 ab 53 95 3d 62 00 2c 2a 84 47 45 87 2b bc e2 f8 19 e4 84 ab 0b 7d c6 a9 e9 3d 9c 38 fa 53 bb cd cd bf 94 43 86 e0 64 65 5e 84 9b 2f 2f c2 6f 24 89 0d ca 54 73 1c 26 65 8a 32 a7 03 92 3e 19 31 7a 8a 7d 76 48 66 be a9 ab 3c a1 30 75 bc 86 a0 31 09 b8 01 30 0d e1 19 bb 1d 29 f3 1a 18 e9 ad 3f 09 6e 0b cf 3e 72 3e f6 96 ab d8 5c 1b c9 8e c5 20 c4 ce f9 39 78 01 67 49 0d 8a bd 68 4b 0b 8b af 55 be 9e 44 9a 26 4b 9b 72 56 5e d0 58 4a 72 24 25 79 7c 59 c1 f2 3a 4e 15 Data Ascii: '(rh:lUzQrFwqeMV%w&5MhIh1pOUo'.pz/lT>S=b,*GE+}=8SCde^//o$Ts&e2>1z}vHf<0u10)?n>r>\ 9xgIhKUD&KrV^XJr$%y\|Y:N
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 75 16 60 4f be a1 e0 31 1a 13 52 91 f9 71 3b 09 30 49 49 56 24 38 ed db b6 00 5a 81 fc 4e 41 72 41 b3 c9 07 04 37 29 2b de e6 a6 e4 02 aa 2a ce ca a3 41 1f 7e a3 69 80 6c 30 67 19 b0 d4 06 b3 25 e9 b1 d6 07 96 0f b5 70 fc f1 97 2b a9 e5 cc ae c5 7f 79 0c d1 17 18 ec 33 ba db 01 76 ae 3c 80 bd ab f3 e8 6e 4e 41 74 03 78 01 23 98 88 6f 38 40 71 9e 12 47 4a 01 d4 57 9c ab ea 94 5b 7c 8a 3b 77 84 2f ea 4c b2 36 6e f8 ac 6b ad 75 40 f6 3e 73 e5 59 1d 42 34 18 c0 8f 25 79 18 73 6c aa 68 5b 2d 91 81 bc da 03 96 17 63 c9 6d e5 25 d7 c2 6a ec fd b2 60 88 3e 63 d0 02 da 9b b3 d8 bb b6 88 d6 b5 79 b4 af 4e cb d7 4c 7c c0 f3 19 fe a4 48 41 25 e8 59 29 15 d8 e4 7a f2 72 99 ba a8 ee a5 17 10 b6 f2 b2 5b 7e 8e fa ae e7 b5 86 02 57 75 ae 39 77 21 47 89 e3 65 48 72 01 e2 Data Ascii: u`O1Rq;0IIV$8ZNArA7)+*A~il0g%p+y3v<nNAtx#o8@qGJW[\|;w/L6nku@>sYB4%yslh[-cm%j`>cyNL\|HA%Y)zr[~Wu9w!GeHr
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 60 f9 b3 3b ab bd 07 78 ee d0 22 0b de 02 0f fa 20 0a c0 10 20 9f b5 ad e6 91 02 70 5e 8c 52 a9 48 54 b4 35 80 2c 3c 2d f1 34 cc ff 54 af 52 59 14 4f 55 e1 09 c8 c9 c1 71 5d 07 b8 72 ba 8e bb 42 05 92 3b 0c b8 b6 d7 51 ad 8f 13 0d a9 9a 13 52 00 fe 2e 80 26 26 3d 8f 99 19 c1 f4 02 c2 f6 4e 0c b2 27 07 4d dd 61 4a 55 b4 3e 8f c4 5e 92 13 1f ca 33 9e 35 2b ba 90 2b 4e 74 aa 32 45 45 53 18 dd a7 41 b5 b2 21 ab 80 eb e2 64 88 38 37 cf a6 56 7f 9c e0 3a e6 a2 00 2c 3f a6 ed 35 1a 4c 90 93 0f 66 0e 21 dc df 05 47 03 dd d5 d1 3a 22 e5 92 fb c3 9e f9 fa ee 4b 45 76 50 2f 37 c6 d2 ca 39 5f a0 f7 ed 58 90 6c 7d 87 b3 b9 2e 6f f9 c0 e0 56 a1 c4 d4 58 3e 21 64 c9 45 fb d2 4e 31 c0 cc 68 cc cc 63 d0 de cd be b0 aa 2d 62 c6 08 ab 7c 39 f9 2b 92 dc 8a 52 eb aa 6d 94 4b Data Ascii: `;x" p^RHT5,<-4TRYOUq]rB;QR.&&=N'MaJU>^35++Nt2EESA!d87V:,?5Lf!G:"KEvP/79_Xl}.oVX>!dEN1hc-b\|9+RmK
2024-05-27 22:43:39 UTC	325	IN	Data Raw: 6b ff d7 3c b4 f4 de c2 07 de 46 20 6d cd 88 10 75 93 9f 9b 29 ab 6c 96 15 f9 3c 56 9b 5b 74 61 28 9d ef 2e b3 9b 7f 1d 5c b3 b8 4c 72 ed 43 73 fc 4f 6f e7 d6 8f ff fb 8b 47 df 67 6b ed 4c 74 0c b6 6e 7d a0 bf 7d 73 83 85 48 19 ac 12 12 95 91 26 e9 82 e1 35 27 01 cf 37 63 dd a2 b8 78 5c cf 82 8d 64 d0 df 24 e0 12 81 85 40 6f e7 e6 46 7f e7 d6 07 86 e7 36 a6 df fa 8b 8b df f2 a7 a6 3f 9a 38 47 ae c9 1f 54 ba e5 b7 92 e3 df 14 aa 98 93 75 94 ba 2f d9 1e 4a 30 3b 1f ae 6f 14 6d 78 42 72 47 ca 3e 54 41 58 c6 b9 f1 14 6f 99 a3 10 61 af 8b b0 b3 ff dc 8b 5f 7e e2 63 05 0c 57 c3 e5 37 3e f7 f3 27 c9 f3 3f 4d be 7f 8c 3c 6f 09 07 13 62 27 27 51 af 5b dc 33 95 31 6c 91 5c d3 18 16 34 2d b1 83 96 dc b4 db bb 96 85 6e e7 db ed a0 19 9e bd 62 25 85 10 b7 38 8a 5e 64 Data Ascii: k<F mu)l<V[ta(.\LrCsOoGgkLtn}}sH&5'7cx\d$@oF6?8GTu/J0;omxBrG>TAXoa_~cW7>'?M<ob''Q[31l\4-nb%8^d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50180	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	785	OUT	GET /v58NX5Yjsfo7e9kmvZYz-UpgxiBwecURTpNGU7dQ9CDZLnQaxf5dKsWQDUPxO91gZX-_BGEGd-HvLLXIjrzfOQw-NrQfqlxKLEFF1g=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:39 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4621 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5519 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 11 c4 49 44 41 54 78 9c ed 9d 79 90 1c d5 7d c7 3f af e7 d8 43 c7 6a 2f 49 bb ba 48 a8 12 09 60 88 01 a7 ca a4 6c 92 70 84 98 14 15 fb af c4 c5 3f a9 8a 93 3f 5c ae 1c 55 49 a5 ca b1 ff 20 a9 4a b9 48 2a 21 c6 18 10 2e 99 23 e1 08 31 37 08 dd 04 84 04 58 b1 4d 90 05 3a 76 97 3d 24 b4 3a 76 57 3b b3 33 3d dd fd 7e f9 63 8e ed 9d e9 99 e9 ee 39 b4 40 7f 0b 49 6c 77 bf df 7b d3 9f 79 bf f7 de ef d7 af 17 22 45 8a 14 29 52 a4 48 91 22 45 8a 14 29 52 a4 48 91 22 45 8a 14 29 52 a4 d6 4a 35 c3 c8 d9 b3 67 07 0d c3 b8 de 30 8c 75 4a a9 a4 88 a0 b5 ae 5f b9 52 18 86 21 ee 63 35 ca 8a d7 c1 32 7b 62 18 c6 92 63 5a Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxy}?Cj/IH`lp??\UI JH*!.#17XM:v=$:vW;3=~c9@Ilw{y"E)RH"E)RH"E)RJ5g0uJ_R!c52{bcZ
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 7f 33 a8 8d 52 6c b9 5d 8a 5c 74 93 54 e1 96 45 b0 1d 9b ed 23 fb f9 ee b1 97 19 54 dd c4 5c 39 9a 76 c5 13 c2 24 1b c4 cf f3 56 9f 25 79 c1 cd 58 26 4f 8e 1d e0 7b 27 76 d2 a7 d5 12 b8 ed 54 d4 83 1b 94 17 dc 54 2e c3 b3 e3 87 b8 6f 64 37 d8 39 9f 6e b9 35 3d 3a 02 dc 80 2a e1 e6 23 54 2f 4d bc c3 03 23 7b b9 90 5b a0 ab 81 31 b7 19 c8 a3 49 56 48 79 c1 9d 35 53 bc 32 f1 2e db 46 f7 33 69 ce d3 5d 05 6e 3b e3 f9 51 0f 0e 21 4f b8 d9 79 76 4e 1e e6 e1 b1 fd 9c cc ce 7a 04 31 2e 8d a2 6c 52 40 55 83 bb 6b f2 7f 79 78 ec 75 3e c8 cc 84 80 db ba 7b 1a 01 0e a0 6a 6e 79 57 a1 e7 96 a7 fc bc ee 94 f7 fd f3 37 c3 0e 33 0f 8f 5c b4 4f 79 cd 96 2f 9a 0b ec 9c f8 29 db c6 f6 73 b4 4e b2 3e 70 7d 1e 3f 87 59 9c 46 80 7d a8 da 52 e8 95 89 77 78 68 74 3f 27 cc ca 94 Data Ascii: 3Rl]\tTE#T\9v$V%yX&O{'vTT.od79n5=:*#T/M#{[1IVHy5S2.F3i]n;Q!OyvNz1.lR@Ukyxu>{jnyW73\Oy/)sN>p}?YF}Rwxht?'
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: bd e4 80 bd e0 fe 64 ea 10 db 66 8e b2 41 f2 bf f0 c2 4f cf 5a 96 70 5d bd 56 34 a4 44 b8 a2 23 c9 2d eb 56 71 c5 40 82 4e 95 c5 74 1c fc 6f 5d f9 84 cd a2 bd e0 3e 7b ea 10 0f 5e 38 92 87 4b e3 bd 36 7f 4d bb e0 7a 14 96 7c ed d3 5a f8 fd 9e 95 fc d6 da 2e 2e 5b 63 60 eb 05 2c 0d de 70 bd ed 1b b1 e0 84 c3 00 2e 4e 4e 1b 92 77 cf 3d c8 83 17 8e 30 2c 2c 99 50 55 6b 84 bf c6 b6 13 ae b8 fe 11 10 85 ad e1 3c f0 8d e1 3e ae ec 4b b0 ae cb c1 74 16 08 95 fb 0b b1 f7 e9 92 f4 60 f7 53 14 8e e3 30 92 3a c3 33 53 6f b1 ed c2 2f 19 96 7c 60 a3 6a 59 bf 75 d4 b9 b2 25 70 dd a7 45 31 eb 68 56 25 12 7c 7b e3 1a b6 f4 1a 74 19 66 c9 25 87 a8 1d 82 07 b2 da 0f d8 1d 6a d4 5a 33 92 9e e6 c9 c9 37 d8 3e 73 94 61 51 55 e1 06 71 19 8d cc 94 c3 b9 26 a9 74 c9 b6 e6 e6 35 Data Ascii: dfAOZp]V4D#-Vq@Nto]>{^8K6Mz\|Z..[c`,p.NNw=0,,PUk<>Kt`S0:3So/\|`jYu%pE1hV%\|{tf%jZ37>saQUq&t5
2024-05-27 22:43:39 UTC	982	IN	Data Raw: 20 35 45 4f 95 64 7d 85 5c 70 85 fc 23 2d 5f df 32 c0 0d fd 0a 91 5c e9 89 ff c5 3f fe 25 04 8d 70 d5 6b 67 e8 d3 ad aa 36 af 10 6f 07 0d dc 83 8f 9b 67 07 b7 a7 df 36 7e 96 3a 4d 1f fe 62 cb e5 70 3f 36 6d be b9 75 88 2f f6 4b e1 a1 ef 70 6a 1a d4 92 c1 46 57 b1 ad 72 cd e1 15 18 f0 ab e9 a3 bf 76 22 75 26 de 89 3f a7 21 2e b8 0e 70 d6 72 f8 e6 d6 21 6e 1a 14 16 ac ac 4f 2b 65 36 5b d1 8f 3e 85 70 21 cc 18 ec 58 76 0c 85 e5 e7 39 fb b2 09 95 88 f0 ad cb d7 71 63 7f 70 b8 2d 81 0a 0d 4e a6 ea 5d 11 f2 4b d3 24 b8 10 26 d0 21 3e 37 5f 96 2d 85 56 1a 06 5f dd d4 cf 17 fa a9 b2 17 c7 cb 44 ab 46 bc 62 05 8d f6 da 5a 57 5d 7a b8 10 02 b0 65 eb 40 3d 37 2b c2 60 2c c6 1d 1b d6 70 5d 9f c2 d1 d5 c7 dc 96 03 2d 55 d4 ca 5e 5b bf 74 18 b8 61 ef 4c 88 74 61 9d 0b Data Ascii: 5EOd}\p#-_2\?%pkg6og6~:Mbp?6mu/KpjFWrv"u&?!.pr!nO+e6[>p!Xv9qcp-N]K$&!>7_-V_DFbZW]ze@=7+`,p]-U^[taLta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50181	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	565	OUT	GET /X7G-hd59XdxQgAu0Pg3jUf5LoAQQqSWjyKZSk0lvDBnRdboJB3f6rLhL9PSJLNy-ONa8vUba3hHAB3dmf35jpCuWWnabyN0BBDYYoXLZf1sMNPthFg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:39 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5805 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:30 GMT Expires: Tue, 28 May 2024 21:11:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 5529 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 64 49 44 41 54 78 9c ed 9d 79 98 15 d5 99 ff 3f ef a9 aa 7b 6f 2f 34 4b b3 2f 82 80 28 8c 60 04 64 13 e4 a7 82 1b 1a 89 cb 38 2e 93 49 c6 38 eb 33 f9 65 fc 25 a2 18 e3 38 6e 41 74 9c 68 1c 27 93 38 4f 36 b3 99 98 c4 b8 a0 a0 71 8b 6c 46 45 d4 44 11 50 44 96 66 ed f5 2e 55 75 de df 1f 0d da b4 dd 74 df ee 5b f7 de c6 fb 79 9e 7e ba 9f ae aa f3 be 55 df 3a a7 ce f2 9e 73 a0 44 89 12 25 4a 14 29 52 68 07 72 88 01 2a f8 dc fc 32 4d 35 24 b0 c4 31 36 86 35 2e c6 ba 20 06 44 b0 80 aa 45 d4 22 26 c4 d8 00 c4 27 b4 e9 9f 9e 3d 2f 75 d9 57 6e 4b 01 8d 40 50 d8 db c9 0d 3d 59 e0 2a 3d 6b 66 7f ac 56 63 a8 06 46 Data Ascii: PNGIHDRxx9d6sBIT\|ddIDATxy?{o/4K/(`d8.I83e%8nAth'8O6qlFEDPDf.Uut[y~U:sD%J)Rhr2M5$165. DE"&'=/uWnK@P=Y=kfVcF
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 6e f7 83 05 9e 94 c4 6d 8d 11 48 86 36 1c 1e 8b 7f 07 db 78 a3 2c 5f b7 3b 12 3b 11 a4 29 7a c6 d4 e9 c4 dd ff de e9 87 25 71 db c1 2a 24 8c 71 6a fc cc e5 38 f1 f3 a2 b2 e3 e6 38 3d d1 79 d3 e7 20 7c 73 57 10 cc 34 d2 73 3b 2d f2 41 0c ea ab 1c f7 3e 59 b6 ea 37 51 d9 c8 65 11 2d 3a 6f e6 1c 1c ee d8 15 04 d3 73 98 ee 11 49 1c ea ab 8c 73 af 2c 5f 75 07 50 1b 95 9d 9c e5 60 3d 63 ea 34 c4 de be 2b b0 25 71 3b c0 83 c6 7c 88 0b 39 fa 06 eb dc a9 c7 81 bb 64 57 10 ce ca 45 7a 47 32 8e 6a aa 8f 31 77 cb f2 55 4b 88 58 5c c8 81 c0 2b fe f9 b8 6a 12 ce 9d 3b 83 60 6e 11 8c 5d 14 35 61 a8 b6 9f e3 2e 91 e5 ab ef 00 ea f2 61 b3 db 45 f4 e9 1b 7a df b5 2d 08 16 c4 8a bc b6 dc fa d5 cb a7 af 07 47 99 86 78 ce 8d b2 7c d5 dd 34 07 f5 e5 85 6e 09 ac 67 cd 58 bc 35 Data Ascii: nmH6x,_;;)z%q*$qj88=y \|sW4s;-A>Y7Qe-:osIs,_uP`=c4+%q;\|9dWEzG2j1wUKX\+j;`n]5a.aEz-Gx\|4ngX5
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: ee dd eb fb f7 77 3d f1 12 d9 f0 89 2e 0a 5d cd 30 7c f3 45 55 19 db ed 3e 2a 6b 70 fb 37 e1 8e d8 87 cd 54 a0 bb 3d 02 ab 8c 7d fe d5 4b 81 7d dd 4d be 44 c7 7c 32 07 37 b9 d5 c9 8c 4c c8 95 01 0d 1c 9c ea 90 ca 33 de 26 31 67 3f 99 aa d4 16 60 63 ae d2 2f 71 78 da ea 8b ae f6 7d 8e 8a e5 72 de a1 15 88 1b 2a 66 6f a2 72 aa f7 6d 22 9b 4b d7 31 f3 97 ea 67 c9 5d 70 5e a1 11 a0 d6 71 78 73 d9 d5 b2 bf ad 13 5a cb e8 00 47 55 94 09 1d b6 7f b3 f6 44 a8 6f 32 54 f5 4a ff 3c b7 29 67 47 98 69 3c 72 da dd 22 a8 0d 3f b0 b1 5e 5f a2 9d 15 7c 5a 17 d1 e5 a0 a3 a3 a8 de 8a 40 dc b5 2f 93 91 48 66 b2 7f 5a b1 36 ac b2 d0 b7 bd e3 ad 04 ae 28 03 46 44 35 87 2c 1e 33 cf cb 7c 2d 0d 28 e4 0a 55 04 ed ed 08 d5 ed 9d 72 88 c0 fa 74 32 81 32 2c 1a 67 00 58 c3 91 f3 fd Data Ascii: w=.]0\|EU>kp7T=}K}MD\|27L3&1g?`c/qx}rform"K1g]p^qxsZGUDo2TJ<)gGi<r"?^_\|Z@/HfZ6(FD5,3\|-(Urt22,gX
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 6c 0a fb f1 ab c6 99 5c d5 30 8a 6a 8d 53 de dd 48 58 05 f5 b5 62 d7 ef 36 fe f3 b9 ba f8 af 3b f2 a9 07 50 7e da 52 fd 9a cd 24 4f 92 48 06 ce 04 55 52 56 f9 23 9d 58 c2 b8 a3 87 19 12 ea b2 72 4f df 15 f1 79 35 3d 86 ff 69 98 c4 9d a9 c1 f4 c3 b4 d9 04 ea 2a 61 63 30 78 d7 e3 9b bf 7e ae 5e 7f 51 ce 12 cd 3f 72 ea 37 f5 2a 03 97 a3 36 1e c9 3c 3b 01 27 5e b9 c5 d4 3d f4 64 27 4f ef 90 98 be 1a ff df df bd 37 e1 f2 5f 06 83 59 1b 96 53 46 34 d9 4c ad e2 f6 89 bf d3 ff ec d1 df 78 4c 6e fd 05 3d 6c 26 e2 69 77 e8 e7 45 b8 45 d3 0d 23 22 09 4d 05 d4 06 38 b1 de bf 59 b1 48 2e a4 13 2b f3 76 46 a7 0c 15 e9 9f de 5f 3e f6 fd d7 6c 05 e5 9d bc a8 2b 88 11 82 da f4 b8 dd 8f 6d fc e6 39 ba f8 0b f4 a0 6f f2 e9 4b f5 72 23 fc 9b 4d d7 47 26 2e 08 4e a2 f7 6e 94 Data Ascii: l\0jSHXb6;P~R$OHURV#XrOy5=iac0x~^Q?r76<;'^=d'O7_YSF4LxLn=l&iwEE#"M8YH.+vF_>l+m9oKr#MG&.Nn
2024-05-27 22:43:39 UTC	776	IN	Data Raw: 47 34 a1 f2 8e 45 c4 85 c6 63 1b 06 0f be f9 e6 57 cf e1 9e ad 48 ce 97 b0 8a 34 7b 5d a9 ff da 77 c3 1b c9 3b 1a 5e db 71 a5 89 b9 b9 df e9 a3 07 23 46 50 b5 7b fa 5f 94 58 bc cc f9 c9 77 89 28 0b e4 a5 fc 3c f9 f7 57 7c 35 b5 ad f1 56 e3 3a b1 82 f5 5d 17 13 02 ea c8 87 c9 f5 f5 5f 7a eb a6 27 97 45 6c 2a 6f 4c 39 e9 77 17 fd 44 1b ec b8 4f 73 5b 59 ad 12 1f 58 f6 c2 4b f3 1e fc 2b 0e 33 ed 33 57 e4 fb 49 3b d3 9f b8 e4 81 b0 21 b8 a4 10 e3 c9 85 46 3c a9 f3 fa 95 fd cf 4b a7 fe e8 6b 79 b3 99 2f 43 ad 58 30 e3 b1 4b ef 09 ea 33 c3 91 ac a6 33 f5 3c 04 b0 1a c4 06 94 fd e9 a5 79 0f 5e 0d e4 a4 03 23 1b f3 85 a2 7c ce ea 2f de 12 d6 fa 17 a6 6a 1a 87 1b cf 98 23 4a 68 01 f5 2d f1 81 15 5b 4c 85 f3 9b 17 4f fe c1 bf d2 c9 50 d7 1c bb 51 58 c6 78 43 a6 8c Data Ascii: G4EcWH4{]w;^q#FP{_Xw(<W\|5V:]_z'El*oL9wDOs[YXK+33WI;!F<Kky/CX0K33<y^#\|/j#Jh-[LOPQXxC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50182	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	783	OUT	GET /33fCN1bFbB2G1iGDGzlBd_BAWes-Nlv-Qt8ByRpEBU43Lu_mF6twx5kmmN4OE6Z_Gz6x7qXTStQItO4yGA0eEejKPSmSqPb-xpF-=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:39 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 10906 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:38:49 GMT Expires: Tue, 28 May 2024 22:38:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 290 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ed 9d 77 b4 25 47 7d e7 3f bf ea ee 9b ef 7b 93 de 24 49 68 18 09 05 14 50 46 08 07 6c 11 77 b1 17 63 30 8b bc d8 80 40 12 36 60 d2 e2 f5 f1 ee 3a 70 ce 1e 7b 49 66 d7 36 36 12 48 18 8c 0c 0b 36 02 83 2c 19 09 44 56 42 11 65 cd 8c 34 a3 89 9a 79 f9 dd d0 dd f5 db 3f 3a dc be f9 be 30 a3 d1 39 fa 9d 73 df ed d7 b7 ba ba aa be fd 8b f5 ab 6a 78 8e 9e a3 e7 e8 39 7a 8e 9e a3 e7 e8 99 20 79 a6 1b b0 e2 f4 37 db f3 63 79 67 bc 6a 6c c5 13 5b 70 5d 93 77 54 5d 10 e3 b9 c6 00 f8 81 b5 a0 b6 09 81 ef 07 8d 40 4c bd 89 33 77 28 f0 a6 b9 ec 98 c6 33 dd 85 95 a4 67 37 c0 7f b3 ad b2 b9 e0 6c Data Ascii: PNGIHDRxx9d6sBIT\|d IDATxw%G}?{$IhPFlwc0@6`:p{If66H6,DVBe4y?:09sjx9z y7cygjl[p]wT]@L3w(3g7l
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: d4 16 c4 7c f1 a9 4b 9f 7f 59 8f 6a 0e 3b 1d 79 80 3f bd fb cc b3 ab cd 1b a7 7d dd 50 0f 5b c3 b2 14 5d 38 ca 75 2b a1 87 97 7b df 82 2b ac f6 cc 9e 47 6c e9 57 b8 74 c3 c3 3d aa 3b 6c 64 8e e4 cd b6 5e bd ed a3 67 55 1a f7 ec af db 0d b5 b0 7d 48 a4 e3 51 5b ea 93 77 54 18 15 1d 54 0b 94 dd b5 70 d3 89 3a f7 d0 c4 d5 db 3e 72 24 ef 7d 44 c6 e3 bc 2f 3f 5e a9 d5 9d af fb 70 f1 9c 6f 7b ea 58 58 ba 45 3b a8 cc 91 e2 e0 51 ee 1b 02 63 9e 21 ef ca bf 39 52 7f c3 b6 b7 9e 7a d8 7d e7 c3 ce c1 2f fa f2 ae 93 c3 c0 fd 5e cd 6a 0a 2e f4 7e b2 3a b9 f8 48 d1 b0 fb ae 54 b3 0c 30 eb 5b e6 9b f6 d5 d8 fc 4d 9b ae da b6 75 85 aa ee 4b 87 6d 48 2f fb f6 9c dc 39 7d f0 c2 a6 e5 ef 66 9b f6 cc 66 a8 5d 37 3b 1c 2e 4b ef 32 2b 6f 49 2f 47 72 28 90 17 a8 b8 72 97 53 94 Data Ascii: \|KYj;y?}P[]8u+{+GlWt=;ld^gU}HQ[wTTp:>r$}D/?^po{XXE;Qc!9Rz}/^j.~:HT0[MuKmH/9}ff]7;.K2+oI/Gr(rS
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: ad f2 5e 77 ee 4f 16 26 7c 95 37 af bb b6 d6 d3 0e ea a4 91 00 1e d7 da 1b 7c e5 8c 95 9c 89 1e d4 a5 23 e1 52 8d fc 0c a8 b2 a0 60 1d f8 97 f3 ab bc e2 c4 02 8e b5 0c 9a 31 33 02 4f cc 84 ec 99 b3 a0 60 82 10 33 17 83 dc 95 72 b8 38 5d 67 15 1a 56 cf a2 18 be 7a 94 f2 43 01 2e 5d f9 44 c5 62 2f 56 74 0d 0c e6 ba 61 a4 0c bf 7e b9 e0 ae a8 7e 8e c1 6d 3a c2 3f 5f 38 c6 af 6c c9 23 61 38 b4 3e d7 08 b7 ef 6a 70 7f dd 52 26 02 59 c2 10 b3 b0 10 89 ed 84 85 bb 59 79 a4 f6 2a 1c 17 58 7e ad 7c e5 dc 50 1b 6a 28 c0 ab 25 bc 38 50 7b 8e ed 61 e5 8d 02 18 fd ca f4 90 e5 ba 18 c5 3e f0 6e fd fe 6b dd 7a f0 55 91 98 5f b0 11 b8 df b8 b0 ca cb b6 e4 c0 76 eb da 4e 12 81 43 75 cb bd 3b 1b 6c ab 5b 3c 55 14 8d 38 37 08 90 85 1a 26 08 92 45 cc c9 55 23 f5 2c 21 ab e0 Data Ascii: ^wO&\|7\|#R`13O`3r8]gVzC.]Db/Vta~~m:?_8l#a8>jpR&YYy*X~\|Pj(%8P{a>nkzU_vNCu;l[<U87&EU#,!
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 16 8a 86 cf fd d2 7a 5e b6 b5 42 a5 e4 92 77 97 07 74 5b 5b 88 5c 16 63 24 9a c5 31 c2 64 43 d9 3b 1f f2 c4 8c cf ae 29 cb d3 d3 4d e6 6a 21 e7 3d af c0 6b 5e 50 5a 34 b8 df 7f 64 8e 37 75 82 1b df cb 4a a4 77 11 89 b8 51 22 bd ab 09 98 f1 6c 92 c6 7a 38 05 37 e1 64 c7 a0 85 5c a4 ab 3b 87 b5 a3 91 0a 18 e1 cb 79 4f 3e 34 fd ba f2 ae ce f2 3d 75 b0 8a ae 17 65 51 6b 57 7b a7 b1 74 9e 10 a8 14 d8 84 e2 2f d4 78 fb f5 bb 79 d9 a6 02 ef b9 60 0d 67 1c 53 66 75 25 47 ce 08 76 99 01 0b 05 02 ab 71 9a 45 44 25 e0 84 0a 9c 34 96 c3 1c 27 88 29 d3 b0 44 ee d5 62 74 6e d0 87 73 33 e0 46 16 5f 64 60 21 0e 6a b2 ee 5d 0c a2 68 c4 c9 9d 96 bd 80 58 0b f5 26 1a 73 f2 a0 7e 02 88 b2 55 7d bb 1e 18 0d 60 47 83 31 45 36 26 fe ef 32 ec ac b8 05 59 f7 46 b0 e5 02 1e ca 26 Data Ascii: z^Bwt[[\c$1dC;)Mj!=k^PZ4d7uJwQ"lz87d\;yO>4=ueQkW{t/xy`gSfu%GvqED%4')Dbtns3F_d`!j]hX&s~U}`G1E6&2YF&
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 5a c9 1d 63 15 49 8c 38 52 17 26 0b dd 24 27 a1 74 e1 39 d2 dc 94 76 7c 96 43 6d 75 65 c5 19 d0 d2 5d 1a 83 5c 42 4b 85 56 90 40 88 5d 10 52 57 c4 33 b0 d6 11 72 ae f0 b5 3d 0d 76 3f 5d 27 ec b3 4f 48 df 36 a9 b2 7b f7 21 b6 6d df 87 0d c3 48 b5 09 6c 2c c2 b8 0b f5 04 a1 18 38 11 13 89 92 c4 ea 4d 5d 26 46 02 77 59 9c 9b 8c 4f 52 48 15 b1 21 a2 21 d9 e8 5c 42 dd 3a 18 6b 15 0d 06 0e c8 a0 1f 97 42 9d 62 1b 03 58 54 20 a8 14 71 54 90 46 0d b1 b1 04 12 1b 5d 63 23 1d 3e 2f 8a c9 39 5c fd 4b eb 79 cd d9 6b a3 34 9b 11 1b 69 ad b2 6f df 24 3b 9e dc 17 4f 47 9a 68 b2 c7 08 eb 4b 42 05 a1 81 52 21 ce ca 48 2d e5 0e 71 9c 02 3b 5c 2c b7 37 2d fb 10 64 ca 68 37 b8 9a 05 57 33 d7 59 50 a3 be 15 ed 42 b8 8b 83 d5 5a 25 da 18 f5 c8 53 62 a4 90 a4 bb 44 03 16 56 8b Data Ascii: ZcI8R&$'t9v\|Cmue]\BKV@]RW3r=v?]'OH6{!mHl,8M]&FwYORH!!\B:kBbXT qTF]c#>/9\Kyk4io$;OGhKBR!H-q;\,7-dh7W3YPBZ%SbDV
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 3b 8c 91 a4 d3 87 83 f5 c5 dd bd c6 a3 37 07 7f e8 a4 79 a9 87 8f 11 1b 31 cb d6 a5 d9 6b 54 99 0c 94 c9 9a 32 d9 b0 4c 35 2d 53 81 52 4b 97 04 b7 7a 31 dd 54 fe fa 82 2a bf 72 7c 8e 82 33 fc 7e ae 23 dc b1 b3 c6 9f dc 32 c5 b5 7b 02 2a 8e c1 33 82 95 78 42 de 11 42 84 aa 23 dc d6 f4 f8 e1 3e 87 bc 97 35 b0 4c 9a bc d0 0a 33 0b 05 a3 9c 3a 26 34 b2 8b d7 34 8e 4d b7 c5 d1 fb 83 ab 74 83 ab 3d c0 6d 33 a2 e2 e3 5e e0 a6 75 58 6d 68 d3 6e e7 95 e5 9e 7a ab ef e2 b3 20 1f ee 31 46 f6 1a 18 b8 27 e5 a2 40 56 65 ba 66 f9 f3 0b c7 79 e7 a9 25 1e 9c 0c f8 f9 64 c0 4f f6 37 f8 d2 de 26 8d 43 71 a4 4d 80 40 f9 b3 73 2b bc f6 c4 02 55 6f 70 08 52 00 31 c2 6d 4f d4 78 db cd 93 3c 39 af ac 75 0d 62 24 9a 5f 11 8d e6 4c 01 71 84 1c 86 dd 56 b9 f7 50 91 97 6c ae 31 91 Data Ascii: ;7y1kT2L5-SRKz1Tr\|3~#2{3xBB#>5L3:&44Mt=m3^uXmhnz 1F'@Vefy%dO7&CqM@s+UopR1mOx<9ub$_LqVPl1
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 1b 8d 2b 0a 43 73 e7 46 4a 9b f5 f3 d5 af 4a 10 dc 97 7d 94 3a 23 5a a3 7c 5a 5d 50 20 06 c5 71 a2 2d 84 f2 79 8c e3 b0 7e ac 04 b9 12 df da d6 64 ff 6c d0 c6 c5 56 95 d3 d6 79 24 d1 88 34 c2 93 8a 4a 49 75 30 29 b8 19 31 6a 5a e3 dd ca 6d 8a 1e 86 8a 03 0f 36 3d 6e 3d e8 31 d9 a4 4b 7a a8 c2 fa 3c 91 f1 46 3b a0 51 10 2e d3 53 89 ff b7 0c f5 73 07 82 db cb 7b 89 7c cb bb 28 4c dc d0 eb 92 4e 1a 09 e0 e0 8a e3 0e 5a b5 df 40 99 19 5e ba 0f a5 9d 4b 1c 4e 6d 85 fa 8c 41 8b 05 64 f5 18 5a 2a b3 ca 75 f8 dc 6e 9f 87 0f f8 d4 33 5c 6c 2d bc 60 4d 04 70 4b 2c 47 f2 36 dd dd 26 59 59 9f 70 ae 40 92 34 9f ce da 24 1b 2b 65 f4 a5 62 c8 19 c3 5f 1d ca b3 73 d6 ed da 2e 58 01 cf 58 56 8f 47 fb 58 4a 32 21 df a9 3e 13 70 93 a7 af 03 5c cd 1c 0f 05 b7 e7 69 3d a0 7e Data Ascii: +CsFJJ}:#Z\|Z]P q-y~dlVy$4JIu0)1jZm6=n=1Kz<F;Q.Ss{\|(LNZ@^KNmAdZ*un3\l-`MpK,G6&YYp@4$+eb_s.XXVGXJ2!>p\i=~
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: db f2 66 a6 01 69 f7 73 89 af 8d ea e9 35 53 94 e8 ec 96 1e 6e 4d 31 c6 81 32 2f c7 e7 77 16 b9 f3 a0 c7 ef 3f 3a 46 c1 75 49 12 de 35 d9 af 03 48 36 44 eb 31 04 3d 3b 3e d0 a8 aa d5 6f 08 dc ca bb fb 5d 3e 2a 2d 9b 83 01 4a 1f bf 77 ab 03 5f d5 7c fe 6c 95 98 93 55 11 63 70 ca 25 28 57 08 45 fa fa 78 3d a9 3d f1 a8 35 1a 36 44 10 a8 35 30 7e 40 b2 dd 43 f2 7e 04 8d c5 6c d6 17 d5 44 bd 4a 67 77 63 4b b8 63 18 22 b5 9a 98 df d1 57 2d 88 b6 13 cc bb f1 4e 27 12 85 5a 55 e2 a9 29 43 2a de 5b e1 cf 5e f7 64 30 b8 1a 62 e6 9a 3f b4 8d e0 b7 82 f7 1c 3b f2 22 c0 7e b4 22 00 03 54 3f 71 df f9 18 73 95 75 73 67 46 c6 8e c4 e0 96 09 c5 2c 2d c2 a9 b4 e2 ba a9 d8 b6 b1 8f 19 ed c6 9a be 9a 46 32 dc 2f 1d c0 75 81 9b 70 7a eb b8 67 5c 38 99 1a 94 e8 35 01 9a 8d 41 Data Ascii: fis5SnM12/w?:FuI5H6D1=;>o]>-Jw_\|lUcp%(WEx==56D50~@C~lDJgwcKc"W-N'ZU)C[^d0b?;"~"T?qsusgF,-F2/upzg\85A
2024-05-27 22:43:39 UTC	317	IN	Data Raw: 74 15 39 4b 2c 27 e2 88 a7 8e 13 bd a3 37 fb 0e a1 21 b2 3c 65 46 6b 89 b2 d5 3b a2 5d 80 5a 8b 84 16 c2 10 51 f5 c5 c8 a3 d6 b7 77 9b f9 da cf 7d cf dc 63 c7 4a 77 e8 7f 59 77 64 77 03 5c 02 3d 2b 00 ce 92 fb 8f 53 1b dd a9 f9 53 c5 ea 16 2d ba c7 e3 79 a7 2a fa 02 55 8e 15 65 42 92 79 d9 24 bb c2 c4 59 17 9d 3d 55 10 8d 01 8c df 21 8c 55 d4 5a 54 e4 80 11 d9 a9 ca 63 12 f8 0f 9a 66 b8 c3 b8 ec 98 2f 8e 3f c8 ef 8e 1f f5 a0 66 e9 59 07 70 1b dd a4 4e 7e d7 a1 cd 52 5b d8 60 03 bb c6 18 77 35 39 77 42 5d b3 19 31 eb 41 57 ab d8 55 58 53 c2 90 b3 aa 1e 80 11 f1 b1 34 31 76 01 35 53 a8 9d 24 b4 fb 25 08 77 ab 1f 1c 50 ec a4 e3 78 87 82 7c 7e 5f f0 e2 75 bb 39 4d 8e 4a f1 3b 0a 3d bb 01 ee 45 aa 98 6b 67 2b 9e 1f 94 d4 36 0b 1a 36 f3 8e 2f 1e 8e 98 c0 46 af Data Ascii: t9K,'7!<eFk;]ZQw}cJwYwdw\=+SS-y*UeBy$Y=U!UZTcf/?fYpN~R[`w59wB]1AWUXS41v5S$%wPx\|~_u9MJ;=Ekg+66/F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50183	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	554	OUT	GET /7hNVq4eXYDqKikz_x6QUIN1x3ArrF3IzcaNWS6TQpna79BIWfNfnRviifT6hBugE7mYpKpiM7Ps7YN5XkGFmXaTyTKjiYsUoNquxGvQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:39 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 10341 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:16:10 GMT Expires: Tue, 28 May 2024 21:16:10 GMT Cache-Control: public, max-age=86400, no-transform Age: 5249 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ed 9d 79 9c 5c 47 75 ef bf a7 6e af b3 6a 66 24 8d 24 6b b1 24 cb c2 b6 6c 79 37 36 78 c5 10 8c 17 08 60 e3 d8 0f 1c 08 79 40 20 2b 3c f2 92 10 5e 0c 49 c8 4b 1e c9 cb 63 49 d8 92 4f d8 62 43 00 43 88 59 62 08 c6 26 c4 78 43 b6 c0 b6 24 5b b6 65 c9 b6 96 d1 ec dd 7d ef ad 3a ef 8f 7b 6f 2f 33 dd d3 dd 33 3d 96 01 fd a4 9e 9e b9 b7 aa 6e 55 fd ea 9c 3a 75 6a b9 70 14 47 71 14 47 71 14 47 71 14 47 02 72 a4 33 b0 18 d8 f1 96 37 e4 f3 9e 64 c5 33 19 e7 e5 d3 c6 23 a5 46 44 f0 0c 80 d1 d0 39 45 c5 b9 50 8b 05 3f 08 6d 80 17 94 d6 ff fd cd 85 23 9d f7 4e e3 67 9a e0 87 5e 72 41 36 bf 72 Data Ascii: PNGIHDRxx9d6sBIT\|d IDATxy\Gunjf$$k$ly76x`y@ +<^IKcIObCCYb&xC$[e}:{o/33=nU:ujpGqGqGqGr37d3#FD9EP?m#Ng^rA6r
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 7e 60 c3 e7 6e f9 b3 e6 99 e8 3c 9e 73 82 77 5d 79 e9 31 d9 b5 ab 6e 0b c7 c6 5f a0 a5 3a dd 54 bb 12 dc 42 9c 23 42 70 d5 73 25 9b c3 f4 f6 3d 58 3a fc e8 a5 2f f8 da 7d fb 9b 67 a6 73 78 4e 09 7e f4 86 d7 fe 6e 2a 9d fd 6b 3b 7e b8 31 79 2d 19 3c ed c5 39 d2 04 27 c3 39 af 77 10 b4 f8 96 f5 37 7f e3 e3 cd 33 d4 19 3c 27 04 ef ba f6 8a 41 d7 dd f7 09 cf 2f be 9a e2 34 22 a6 72 b3 59 c5 fe 3c 10 5c 15 c0 e4 bb 90 5c fe 73 ae 30 fa f6 8d 5f fa 8f b1 e6 19 5b 18 16 95 60 05 79 f8 86 57 9e 99 f6 72 1f 91 c2 f4 59 1a f8 65 72 25 19 cf fe 42 11 4c 34 bc ca 64 d0 9e ee 3b d3 53 e1 db 8e fd ca ad db 9b 67 6e fe 58 34 82 1f fa 6f 57 a6 3d ab 97 91 ce fe 6f 4a 85 17 60 2d 82 60 62 62 1b 12 3c f3 da cf 1b c1 91 b9 8d 78 19 bc 7c f7 36 55 fb ae 8c 0d be 77 cc 97 be Data Ascii: ~`n<sw]y1n_:TB#Bps%=X:/}gsxN~n*k;~1y-<9'9w73<'A/4"rY<\\s0_[`yWrYer%BL4d;SgnX4oW=oJ`-`bb<x\|6Uw
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: eb 60 11 8d a7 0f a3 ba 88 ee 69 54 4d 15 a1 2e 4b 92 cc 14 e3 7a e4 3a 47 e8 17 b1 62 60 d5 1a 64 dd 46 e4 98 b5 48 5f 1f a9 ae 2e 52 3d 3d a4 d2 19 34 9b 0d a5 0b 17 06 25 8f 30 d4 b0 30 69 b5 30 65 dd f4 b8 0d 46 9f 50 3b fa 10 6e ec 27 2a 2e 40 bc 1e 44 bc 48 b6 ab 08 16 22 ff 4d a2 9d 28 37 c4 98 8c f8 77 43 a4 ac 8c 01 a3 12 95 56 2c 46 3c 2d 17 9e 19 e5 13 45 44 b5 9c b6 28 c6 8b 92 16 03 a8 1a 8c 3d c1 76 f5 bd 1e f8 58 2b bc b5 24 c1 27 7d e1 37 7a 45 cd 17 4a 36 78 79 b5 e1 e2 80 34 c2 65 f7 1f e0 ac 1f ee a1 ab 2b 45 bf 08 d9 58 92 4d fc f1 92 c1 2f 82 89 a5 d5 90 48 74 95 e4 d6 91 e2 e4 ef 32 6a c6 8d 8e a0 54 c4 76 75 63 4e 7b 21 a9 cd 27 91 5d 31 4c 6e 78 25 d9 e5 c3 98 4c 26 36 e0 12 0b 6e 66 e9 63 03 d0 06 04 93 cf 12 8e 3d 4d 30 b2 97 e0 Data Ascii: `iTM.Kz:Gb`dFH_.R==4%00i0eFP;n'*.@DH"M(7wCV,F<-ED(=vX+$'}7zEJ6xy4e+EXM/Ht2jTvucN{!']1Lnx%L&6nfc=M0
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: f0 34 a0 21 c1 73 ba 2a ad af 5b 71 ac 9b 2b 8c 56 fd 33 ea 78 68 20 c7 13 9b 87 28 f9 0e e7 a2 59 a6 50 95 49 b5 d8 aa 32 27 de 9c 48 55 6b b9 35 bb aa 61 27 d6 51 28 4c 30 7c e3 df 54 c8 4d 54 7a dc 36 ee 7c 44 78 ff 57 3d be fd b0 b0 6f 32 ba 9d 31 15 89 ad c9 6b 1d 33 42 88 1a 43 26 4e fa a9 49 f8 c6 4f 85 1b 6f f1 f8 c1 0e a9 08 50 5c 5a 30 64 06 37 d2 7f c6 df 91 ef 1e a5 bb 0b 32 59 93 9c df 82 94 e7 46 a5 42 6a 32 3e 2e 8f 77 2a f7 cb 7d 71 65 7c 55 15 2f 31 26 a8 18 16 e5 8c 1b ac 9a 0d be d5 ad 73 f1 d3 90 e0 2d 9f 7f c7 ea 40 c2 53 ac b4 b8 11 3b ce 53 c9 13 ee 5f d5 cb de 4d 03 68 18 4f 23 aa 23 54 65 ca 39 2c c9 62 bb d8 8c d2 0a d9 e5 89 06 17 c5 29 1e 78 82 a1 3f fa 0b ba 37 6d ae 21 d7 c4 0d e4 93 77 08 7f 75 9b e1 e0 74 f4 ec 94 a9 d2 7c Data Ascii: 4!s[q+V3xh (YPI2'HUk5a'Q(L0\|TMTz6\|DxW=o21k3BC&NIOoP\Z0d72YFBj2>.w}qe\|U/1&s-@S;S_MhO##Te9,b)x?7m!wut\|
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 4a 21 3c fa 0c 1c 9a ac d2 b0 ea a0 6b 25 61 fa 38 9c 06 31 99 5a 45 9e 99 a5 ae 6b 86 52 65 b5 5d f5 a1 aa 71 d4 cf 59 f5 f7 80 dd fe aa 59 63 8b 59 04 5b f1 b3 22 d2 5f 9b cc c2 c8 36 80 9f 12 fe e3 a4 e5 8c e7 d2 d1 02 33 a2 f5 d4 38 8d d5 76 48 66 f5 3a b2 cb 6a 8d ab 64 e2 c0 6b a6 51 16 d8 e7 36 0a 5b 6f dc 6f 04 f6 4d c2 a3 cf 56 4b b1 83 ec 30 2e bd 16 4d a6 03 6b 54 33 55 a4 d5 51 b3 0b 85 6a 1f fe f4 ac f1 c5 6c 15 8d 4d 83 76 37 4c a7 ce bf 56 90 71 8e 1d 03 19 ee db b2 1c 5f 23 c9 8d 16 cc 3b 54 2d a6 bb 9f 4c ff 12 4c a6 b2 c1 dd 08 ec 3b 14 cd 0a cd b4 45 2a e5 9a 07 b9 2d b2 de c8 a9 63 80 03 85 28 6f 09 c1 aa 0a 26 83 cb f4 81 d7 05 e2 ea 0c 69 a8 22 ba 1d cc 25 bd 65 74 1b 91 e6 12 6c 0c 29 23 d2 d5 de e3 9b ff 03 c8 e0 f8 d6 89 cb d8 db Data Ascii: J!<k%a81ZEkRe]qYYcY["_638vHf:jdkQ6[ooMVK0.MkT3UQjlMv7LVq_#;T-LL;E*-c(o&i"%etl)#
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: cf d3 0f 32 72 f8 60 b9 2f 73 0a 2b fa e1 fa 17 3a 4a b6 f5 a1 5a 33 a9 6d 87 5c 25 9a 5c 78 c3 8b 5c 79 9b 29 10 49 6f 70 90 d4 f4 7d a4 f4 10 b5 d2 db 2a e6 d9 f7 26 59 40 1f 73 e2 0e d4 bb 57 97 e0 fd be b7 0f e5 a1 a4 95 b6 32 e4 69 15 73 a5 25 c0 52 93 e6 c3 07 7f 64 77 8d ed 2d 69 d5 9c 9b 73 70 ee 26 e5 ca 93 1d 23 2d bc d7 73 5e 2a 79 8e 9b 07 8b 70 cd e9 ca d9 1b b5 e6 2d 7c 41 68 dd d4 f8 e3 a1 29 dc a1 a6 bc a0 6e a1 e4 b6 a6 9a ab 42 3e c2 54 66 5f bd fb 75 09 0e de fa 0f 81 0b 82 c7 9c 9b fb dd ae cd c6 bc f3 69 14 59 84 47 c5 79 7f bf e7 f6 cc 9e 89 fd c6 33 5e f9 59 22 f0 e6 0b 94 33 d7 29 13 7e fd f8 f3 ee 6f e7 b8 39 ea c3 79 1b 95 1b 5e ec 6a e8 33 c6 23 2c ed 37 3a f2 ad 54 8e 89 78 12 6e a1 3a af bd f8 a1 a5 54 f4 65 77 d7 c5 b7 d5 dd Data Ascii: 2r`/s+:JZ3m\%\x\y)Iop}&Y@sW2is%Rdw-isp&#-s^yp-\|Ah)nB>Tf_uiYGy3^Y"3)~o9y^j3#,7:Txn:Tew
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 1b 55 09 9c 2a 25 df 7d 35 3f a0 d7 ca 09 77 14 9b 85 6f 99 ad 55 1f bf fe 0d a4 bd bf 56 23 43 ad c6 69 15 0b b1 bd 55 95 00 65 44 2d 78 69 2e e9 5e c1 d6 9e 55 1c d7 33 4c 7f 57 1f 5d 99 6e 7a b3 5d 64 bc 34 19 2f ea 91 4a 36 c0 0f 43 26 4a 53 4c 97 a6 18 9b 18 65 e7 a1 7d 6c 1b 7d 8a ef 8d ed 83 c0 67 50 23 62 b1 8e 67 8b 96 f7 af 4f f1 9e 17 e6 a1 b8 9f d6 9c 1a 6d 90 1b 15 a4 a5 f2 5a e7 0e 4c 4d d9 77 f4 5f 74 e7 17 5a 09 df f2 89 ef 86 be 9b 6d 30 f6 7a cd a4 2e 6d 24 c5 75 37 88 b5 fa 80 36 51 dd 8f a7 11 86 25 85 75 8e 1f 8d ef e5 bb e3 7b 40 0c 83 a9 1c c7 a6 bb 58 9e ee 26 6f 52 e4 4c 34 10 28 b8 80 a2 0b 78 c6 9f 62 77 71 92 b1 a9 49 28 59 fa 54 58 ae 44 5b 7c d4 81 53 42 67 a1 64 79 cb 29 83 50 7a 96 23 49 ae aa 12 f8 f6 9e be 54 ea cb 2d 45 Data Ascii: U*%}5?woUV#CiUeD-xi.^U3LW]nz]d4/J6C&JSLe}l}gP#bgOmZLMw_tZm0z.m$u76Q%u{@X&oRL4(xbwqI(YTXD[\|SBgdy)Pz#IT-E
2024-05-27 22:43:39 UTC	1143	IN	Data Raw: 5f 3d 25 4b 5e 26 ea 38 35 16 43 6a a3 74 83 50 99 2a d8 7b 53 9e fc 56 cf 50 ea df bb ce ee 9c 5a ae c6 a2 3b 1a 07 ff fe 9a 93 32 d6 7d 54 f3 d9 0b dc 5c 3b b8 17 80 7a eb b1 35 21 d6 b9 aa 7e 57 51 67 c1 77 4c 86 8e 13 8c f2 be 13 33 5c b5 01 f0 c7 a8 ad 8e c5 25 77 72 4a bf 93 f2 dc 3b fa 2e ec 8c b5 dc 08 1d 57 d1 33 31 f2 d6 2f fc c4 12 5e a1 05 ff 9f a4 d4 39 bf e6 9c bb 23 e2 55 e1 65 12 e2 c9 05 87 c6 0b 9f 15 3f 50 5e d6 65 b8 62 7d 0e fc ea 89 fc 45 52 c9 71 ba 85 92 63 72 42 3f 91 23 7c d5 62 93 0b cf e1 54 01 c0 8a bf bb ee 4d 8a fb a4 cb a6 da de e6 d4 ce ae 89 b2 2b 32 1e e3 26 a4 aa 3a c4 77 8c f8 96 4b 3c e5 2f cf ce 71 c6 90 5f b5 43 61 f1 a4 16 e0 e0 44 a0 79 23 af ef b9 e0 ce cf cd 33 a1 b6 b1 e8 12 5c 8d 67 de f6 f9 7f 28 0d e6 97 7a Data Ascii: _=%K^&85CjtP*{SVPZ;2}T\;z5!~WQgwL3\%wrJ;.W31/^9#Ue?P^eb}ERqcrB?#\|bTM+2&:wK</q_CaDy#3\g(z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50185	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	783	OUT	GET /p5lVJAicHuI6Ra6jtpYimNt53JZQNCcN06a-Q4fUaNVFo3cjVisZMY_UwBTg5fv2MUkrbwbfTw70N9-bbTfejp9S8rUNadIhWiqh=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:39 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1366 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5519 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 05 0d 49 44 41 54 78 9c ed dc cd 6b 5c 55 18 c7 f1 df b9 f3 92 69 66 32 35 31 2f b4 c6 a8 45 ac b5 ea a2 94 62 28 ee c4 49 5d 08 82 d6 fe 01 82 0b 51 49 8b 85 82 e0 be 8b 36 08 45 d0 95 a8 20 d5 95 8b 9a 91 0a 4a 5b 2b 05 15 31 11 2d c4 d6 98 8a 69 ab b1 3a 31 93 64 e6 1c 17 45 db 92 97 66 92 e7 dc fb cc e9 ef 03 5d 0d 3d f7 32 df 99 cc 43 9e 4e 01 22 22 22 22 12 67 7c 5f 60 70 a0 fc 8c 01 5e 06 b0 d3 f7 b5 a4 19 18 54 66 7f 9f 1e bb 78 f2 ee e3 a3 47 2e 27 7d 3f ab e1 2d f0 be c7 87 fb 5c 64 8e 01 d8 ea eb 1a be 19 63 f0 d7 cc 24 fe 9c be 30 69 4c f4 e0 d1 33 fb 9b 2e 72 e4 e3 d0 c1 d2 f0 3d 2e 32 e7 d0 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxk\Uif251/Eb(I]QI6E J[+1-i:1dEf]=2CN""""g\|_`p^TfxG.'}?-\dc$0iL3.r=.2
2024-05-27 22:43:39 UTC	507	IN	Data Raw: 5f 9f 98 c0 7b 07 7e c0 ba 9e 85 81 d3 eb 0d 2e 4d 5e 7d e7 5b 1b ef e7 61 2a 1d e1 ca 1f 55 44 2d b1 5e 76 45 c4 5f 77 7b 07 ca 22 cf ee fc b4 45 ae 98 c6 96 47 db 51 6c cf e1 a7 91 29 8c 7d fe 37 5a 37 a4 96 7c b7 54 26 6a a8 5d 49 66 d8 c9 6d 8c 90 6b 5f fc 27 4b 23 0e 0d 97 44 9b a8 7b 07 ff 27 93 8f 50 9b b3 f8 e6 d8 25 38 0b a4 b2 06 f9 8d cb 3f 81 85 de 34 d0 1b d3 0d 36 09 b5 81 01 c0 a4 80 4c ab ba 31 a1 a9 f0 d9 0b 1c 03 07 8e 81 03 a7 3e 30 d7 85 6b a3 76 c8 e2 ba 50 86 ca c0 5c 17 ca 51 17 98 eb 42 59 ba 5e 6e e0 ba 50 9a ba c0 5c 17 ca 52 17 98 eb 42 59 ea 02 73 5d 28 4b dd 90 c5 75 a1 2c ae 0b 85 70 5d d8 20 ae 0b 65 a8 0d 0c 70 5d 28 81 cf 5e e0 18 38 70 0c 1c 38 f5 81 b9 2e 5c 1b b5 43 16 d7 85 32 54 06 e6 ba 50 8e ba c0 5c 17 ca d2 f5 72 Data Ascii: _{~.M^}[a*UD-^vE_w{"EGQl)}7Z7\|T&j]Ifmk_'K#D{'P%8?46L1>0kvP\QBY^nP\RBYs](Ku,p] ep](^8p8.\C2TP\r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50184	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	553	OUT	GET /osfLtqeBdEJUR4Rc-zmj4r5eqSd0GCJaB8wihnbgYfx_UBKhS1PMKwZlWXw6FqtjLktNqWJTcpDBMp5boZlSD2nkjeOloEA6VhJKlg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:39 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5735 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:21:51 GMT Expires: Tue, 28 May 2024 22:21:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 1308 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 1e 49 44 41 54 78 9c ed 9d 7b 8c 5c 57 7d c7 3f bf 73 1f 33 b3 ef f5 da bb 7e c6 8e 9d 38 89 e3 84 12 02 79 50 aa a2 b6 42 29 14 54 10 0d 52 25 a2 82 fa 50 a1 94 8a 16 da 82 28 6a 29 22 05 b5 25 42 54 48 40 94 96 44 09 90 17 60 27 8e 31 90 17 0d b6 e3 a4 ce c3 89 9d d8 89 9f bb 76 f6 bd 3b 73 ef dc 7b cf e9 1f 77 66 5f f3 9e d9 b5 77 b3 f3 b5 46 de 9d 7b ce ef 9c 7b bf e7 f7 3b bf f3 3b bf 73 17 9a 68 a2 89 26 9a 68 a2 89 26 9a 68 a2 89 26 9a 68 a2 89 26 9a 68 a2 89 26 9a 68 62 61 21 73 bf 38 73 e6 4c bb 31 e6 37 8d 31 17 6b ad b5 31 a6 58 bd a2 5f d6 80 46 eb 63 8a 74 cc 18 43 89 fe 16 40 29 d5 50 fd Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{\W}?s3~8yPB)TR%P(j)"%BTH@D`'1v;s{wf_wF{{;;sh&h&h&h&h&hba!s8sL171k1X_FctC@)P
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: cb 41 7b 61 99 9b e8 e5 80 65 49 f0 72 d1 5e 58 a6 04 2f 27 2c 3b 82 97 93 f6 c2 32 24 78 b9 61 59 11 bc dc b4 17 96 19 c1 cb 11 cb 86 e0 e5 a8 bd b0 4c 08 5e 26 e4 36 7e ba b0 89 a5 87 37 3d c1 cb 44 7b a1 de d3 85 4b 19 cb 88 dc 92 78 d3 12 dc 24 37 c6 92 dd f0 2f 0a 91 f8 43 6c af 0c 73 ed 56 fe b7 69 f2 a7 7e ca 0f 08 63 a6 7f 7e 13 60 69 13 2c 02 4a 21 08 46 47 98 89 09 f4 f8 28 3a 9d c6 78 1e 26 08 d0 61 08 5a 17 12 a7 14 a2 14 62 db 88 e3 20 c9 04 92 6a 45 75 74 20 ad 6d 88 b2 30 98 e9 ba 4b 14 4b 8f 60 a5 10 51 80 21 1a 3c 47 74 76 80 68 74 14 33 36 86 1e 1a 44 9f 1b 40 8f 0c 62 c6 46 30 13 e3 98 4c 1a fc 0c 26 0c 40 47 d3 32 6c 07 12 29 24 d5 82 b4 76 20 1d 5d a8 ee 1e 64 55 1f d2 dd 83 d5 d1 8e d5 d9 89 d5 bb 1a d5 b3 12 83 e4 c8 d6 17 f4 f6 6b Data Ascii: A{aeIr^X/',;2$xaYL^&6~7=D{Kx$7/ClsVi~c~`i,J!FG(:x&aZb jEut m0KK`Q!<Gtvht36D@bF0L&@G2l)$v ]dUk
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: ff 80 e8 e4 f1 78 93 62 9e 31 bf c6 5f 29 a2 a1 41 fc 5f fe 8c e8 b9 fd d3 9a 5b 33 6a d0 da a5 46 ee 5c 38 09 c2 a7 7f 85 f7 cb 3d 0b e2 74 cd 9f 34 11 24 9b 25 3a f4 22 fe 4f 7f 04 6e 82 da c3 82 35 38 5b d5 10 db 10 b9 0d b6 5f b2 de 9c df 45 c0 4d e1 df f7 df 64 0f bf 04 41 c0 7c be 8b ae 28 c1 f5 cc c1 96 28 8e 8d 9e e5 fb 8f 7f 03 57 e7 b6 fb aa 46 8d c4 36 a8 b5 b1 98 3a 03 19 f9 3e d4 75 ad c4 f7 4a 40 39 78 df fb 26 d1 1b 67 e3 2d c8 79 42 81 a4 fc 3b 1a 6b 81 88 30 e4 8d 73 fb a9 27 78 a1 a7 8d 13 dd 29 54 a9 3d d7 29 18 6a 22 16 aa d3 9a 85 26 b7 bc e0 fa ea 01 38 2e e1 eb af e0 3d fc 53 cc d8 e8 bc 79 d5 f3 a2 c1 da 18 8e 8f f6 73 db d1 3d 7c 77 75 17 fb de d6 8d 29 19 a0 a9 91 54 68 7c 27 69 86 f7 6e 82 08 42 03 91 81 88 22 9f 52 df e7 3e 61 Data Ascii: xb1_)A_[3jF\8=t4$%:"On58[_EMdA\|((WF6:>uJ@9x&g-yB;k0s'x)T=)j"&8.=Sys=\|wu)Th\|'inB"R>a
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 18 1c 87 3b 1e 13 ee dc 27 3c 7b 36 3e b4 90 b0 72 e4 54 19 34 13 89 eb 88 81 67 fa 85 3b f7 0a 77 3c ae 18 4e 4f 93 8c 09 d1 89 75 64 56 7d 11 a3 3c 66 cf 89 0b 41 6e ee 7b 59 89 3b f1 bf 98 3a f7 85 ea 8e 6a ef 39 7d 90 0e 55 fd 76 60 77 a4 f9 cc f5 bd 98 a4 8a b5 b8 96 fd 85 c1 13 b4 ff e3 ad 38 eb 2f 9a 3a a5 2f 12 9b d9 6f ec 12 76 1f 11 26 b3 90 50 33 56 96 d5 ca 9e f1 b3 10 13 3d 91 85 47 0e 0b b7 ed 52 0c 4d ce f0 c2 8d 26 4a 5d 84 b7 ea 5f 40 9f a9 ed 26 2a b6 5e 02 92 c2 4d 3f 55 e3 e6 cd 34 6a ae a5 44 f1 ea 44 3f c7 fc 11 12 55 36 6a 8c 21 a9 0d 47 1d e1 8e 2d c5 3d ee 92 75 27 c7 48 7e e8 e3 24 2e bf 72 6a af 54 04 d2 3e dc fa 90 f0 ec 19 99 32 c1 d3 95 aa 90 5b a6 98 95 9b b7 f7 9f 12 be fa 90 c2 cb ca 8c a5 96 22 6c bd 8a a0 e3 66 30 13 35 Data Ascii: ;'<{6>rT4g;w<NOudV}<fAn{Y;:j9}Uv`w8/:/ov&P3V=GRM&J]_@&*^M?U4jDD?U6j!G-=u'H~$.rjT>2["lf05
2024-05-27 22:43:39 UTC	706	IN	Data Raw: 6c 1c 93 cd c6 37 66 a0 a7 0d 1c 55 fa 51 d5 4a 6c 3d e4 1a c0 55 b0 aa 2d 6f 91 04 b4 0f d1 58 61 52 5e 29 21 05 97 6b 58 77 a8 a2 a9 8b 44 51 44 10 04 47 77 ee dc 59 a0 98 05 04 df 74 d3 4d 61 14 45 4f 1b 63 4e 15 44 b4 0c b4 39 49 92 a8 79 89 be ce 12 8c 61 85 31 7c f6 a2 56 0e fe ce 45 a8 fe 33 18 2f 1d 5f 35 b0 a6 d3 90 28 42 70 ad a7 5a aa 26 b6 48 41 63 20 61 43 ef 8c 03 07 a2 33 48 d8 0f 14 7b 61 ea 7c 91 6b 00 0b 5d 24 55 48 44 08 c3 f0 35 cf f3 0e 7c ea 53 9f 2a 98 5a 8b 7a d1 67 cf 9e 7d 74 72 72 f2 db be ef cf 0a 5b 1a 0c ed 6e 0b 09 51 0d 2f 91 8a 2d 72 9c b8 c7 3c d1 d1 ca c9 c1 53 90 ce e4 4c 13 24 6d 58 bf 72 ba 6c 3d c4 d6 a3 b5 b3 2e 09 6c ea 8d fb 12 17 13 24 ca a0 c2 53 f9 de 57 27 08 6a 9e 73 0d 0a 63 b5 cc f2 01 44 84 6c 36 4b 18 86 Data Ascii: l7fUQJl=U-oXaR^)!kXwDQDGwYtMaEOcND9Iya1\|VE3/_5(BpZ&HAc aC3H{a\|k]$UHD5\|S*Zzg}trr[nQ/-r<SL$mXrl=.l$SW'jscDl6K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50186	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	553	OUT	GET /Ucxl6g9AKLX3XmK7an_99LzivIJsXn5cvQdIMM_g4nNFZdULnGa4TH45WVlFu3vKd_c41R28NdjDzCEWgAwb5wjONbIPR4agLFUO1w=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:39 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 10341 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:30 GMT Expires: Tue, 28 May 2024 21:11:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 5529 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ed 9d 79 9c 5c 47 75 ef bf a7 6e af b3 6a 66 24 8d 24 6b b1 24 cb c2 b6 6c 79 37 36 78 c5 10 8c 17 08 60 e3 d8 0f 1c 08 79 40 20 2b 3c f2 92 10 5e 0c 49 c8 4b 1e c9 cb 63 49 d8 92 4f d8 62 43 00 43 88 59 62 08 c6 26 c4 78 43 b6 c0 b6 24 5b b6 65 c9 b6 96 d1 ec dd 7d ef ad 3a ef 8f 7b 6f 2f 33 dd d3 dd 33 3d 96 01 fd a4 9e 9e b9 b7 aa 6e 55 fd ea 9c 3a 75 6a b9 70 14 47 71 14 47 71 14 47 71 14 47 02 72 a4 33 b0 18 d8 f1 96 37 e4 f3 9e 64 c5 33 19 e7 e5 d3 c6 23 a5 46 44 f0 0c 80 d1 d0 39 45 c5 b9 50 8b 05 3f 08 6d 80 17 94 d6 ff fd cd 85 23 9d f7 4e e3 67 9a e0 87 5e 72 41 36 bf 72 Data Ascii: PNGIHDRxx9d6sBIT\|d IDATxy\Gunjf$$k$ly76x`y@ +<^IKcIObCCYb&xC$[e}:{o/33=nU:ujpGqGqGqGr37d3#FD9EP?m#Ng^rA6r
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 7e 60 c3 e7 6e f9 b3 e6 99 e8 3c 9e 73 82 77 5d 79 e9 31 d9 b5 ab 6e 0b c7 c6 5f a0 a5 3a dd 54 bb 12 dc 42 9c 23 42 70 d5 73 25 9b c3 f4 f6 3d 58 3a fc e8 a5 2f f8 da 7d fb 9b 67 a6 73 78 4e 09 7e f4 86 d7 fe 6e 2a 9d fd 6b 3b 7e b8 31 79 2d 19 3c ed c5 39 d2 04 27 c3 39 af 77 10 b4 f8 96 f5 37 7f e3 e3 cd 33 d4 19 3c 27 04 ef ba f6 8a 41 d7 dd f7 09 cf 2f be 9a e2 34 22 a6 72 b3 59 c5 fe 3c 10 5c 15 c0 e4 bb 90 5c fe 73 ae 30 fa f6 8d 5f fa 8f b1 e6 19 5b 18 16 95 60 05 79 f8 86 57 9e 99 f6 72 1f 91 c2 f4 59 1a f8 65 72 25 19 cf fe 42 11 4c 34 bc ca 64 d0 9e ee 3b d3 53 e1 db 8e fd ca ad db 9b 67 6e fe 58 34 82 1f fa 6f 57 a6 3d ab 97 91 ce fe 6f 4a 85 17 60 2d 82 60 62 62 1b 12 3c f3 da cf 1b c1 91 b9 8d 78 19 bc 7c f7 36 55 fb ae 8c 0d be 77 cc 97 be Data Ascii: ~`n<sw]y1n_:TB#Bps%=X:/}gsxN~n*k;~1y-<9'9w73<'A/4"rY<\\s0_[`yWrYer%BL4d;SgnX4oW=oJ`-`bb<x\|6Uw
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: eb 60 11 8d a7 0f a3 ba 88 ee 69 54 4d 15 a1 2e 4b 92 cc 14 e3 7a e4 3a 47 e8 17 b1 62 60 d5 1a 64 dd 46 e4 98 b5 48 5f 1f a9 ae 2e 52 3d 3d a4 d2 19 34 9b 0d a5 0b 17 06 25 8f 30 d4 b0 30 69 b5 30 65 dd f4 b8 0d 46 9f 50 3b fa 10 6e ec 27 2a 2e 40 bc 1e 44 bc 48 b6 ab 08 16 22 ff 4d a2 9d 28 37 c4 98 8c f8 77 43 a4 ac 8c 01 a3 12 95 56 2c 46 3c 2d 17 9e 19 e5 13 45 44 b5 9c b6 28 c6 8b 92 16 03 a8 1a 8c 3d c1 76 f5 bd 1e f8 58 2b bc b5 24 c1 27 7d e1 37 7a 45 cd 17 4a 36 78 79 b5 e1 e2 80 34 c2 65 f7 1f e0 ac 1f ee a1 ab 2b 45 bf 08 d9 58 92 4d fc f1 92 c1 2f 82 89 a5 d5 90 48 74 95 e4 d6 91 e2 e4 ef 32 6a c6 8d 8e a0 54 c4 76 75 63 4e 7b 21 a9 cd 27 91 5d 31 4c 6e 78 25 d9 e5 c3 98 4c 26 36 e0 12 0b 6e 66 e9 63 03 d0 06 04 93 cf 12 8e 3d 4d 30 b2 97 e0 Data Ascii: `iTM.Kz:Gb`dFH_.R==4%00i0eFP;n'*.@DH"M(7wCV,F<-ED(=vX+$'}7zEJ6xy4e+EXM/Ht2jTvucN{!']1Lnx%L&6nfc=M0
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: f0 34 a0 21 c1 73 ba 2a ad af 5b 71 ac 9b 2b 8c 56 fd 33 ea 78 68 20 c7 13 9b 87 28 f9 0e e7 a2 59 a6 50 95 49 b5 d8 aa 32 27 de 9c 48 55 6b b9 35 bb aa 61 27 d6 51 28 4c 30 7c e3 df 54 c8 4d 54 7a dc 36 ee 7c 44 78 ff 57 3d be fd b0 b0 6f 32 ba 9d 31 15 89 ad c9 6b 1d 33 42 88 1a 43 26 4e fa a9 49 f8 c6 4f 85 1b 6f f1 f8 c1 0e a9 08 50 5c 5a 30 64 06 37 d2 7f c6 df 91 ef 1e a5 bb 0b 32 59 93 9c df 82 94 e7 46 a5 42 6a 32 3e 2e 8f 77 2a f7 cb 7d 71 65 7c 55 15 2f 31 26 a8 18 16 e5 8c 1b ac 9a 0d be d5 ad 73 f1 d3 90 e0 2d 9f 7f c7 ea 40 c2 53 ac b4 b8 11 3b ce 53 c9 13 ee 5f d5 cb de 4d 03 68 18 4f 23 aa 23 54 65 ca 39 2c c9 62 bb d8 8c d2 0a d9 e5 89 06 17 c5 29 1e 78 82 a1 3f fa 0b ba 37 6d ae 21 d7 c4 0d e4 93 77 08 7f 75 9b e1 e0 74 f4 ec 94 a9 d2 7c Data Ascii: 4!s[q+V3xh (YPI2'HUk5a'Q(L0\|TMTz6\|DxW=o21k3BC&NIOoP\Z0d72YFBj2>.w}qe\|U/1&s-@S;S_MhO##Te9,b)x?7m!wut\|
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 4a 21 3c fa 0c 1c 9a ac d2 b0 ea a0 6b 25 61 fa 38 9c 06 31 99 5a 45 9e 99 a5 ae 6b 86 52 65 b5 5d f5 a1 aa 71 d4 cf 59 f5 f7 80 dd fe aa 59 63 8b 59 04 5b f1 b3 22 d2 5f 9b cc c2 c8 36 80 9f 12 fe e3 a4 e5 8c e7 d2 d1 02 33 a2 f5 d4 38 8d d5 76 48 66 f5 3a b2 cb 6a 8d ab 64 e2 c0 6b a6 51 16 d8 e7 36 0a 5b 6f dc 6f 04 f6 4d c2 a3 cf 56 4b b1 83 ec 30 2e bd 16 4d a6 03 6b 54 33 55 a4 d5 51 b3 0b 85 6a 1f fe f4 ac f1 c5 6c 15 8d 4d 83 76 37 4c a7 ce bf 56 90 71 8e 1d 03 19 ee db b2 1c 5f 23 c9 8d 16 cc 3b 54 2d a6 bb 9f 4c ff 12 4c a6 b2 c1 dd 08 ec 3b 14 cd 0a cd b4 45 2a e5 9a 07 b9 2d b2 de c8 a9 63 80 03 85 28 6f 09 c1 aa 0a 26 83 cb f4 81 d7 05 e2 ea 0c 69 a8 22 ba 1d cc 25 bd 65 74 1b 91 e6 12 6c 0c 29 23 d2 d5 de e3 9b ff 03 c8 e0 f8 d6 89 cb d8 db Data Ascii: J!<k%a81ZEkRe]qYYcY["_638vHf:jdkQ6[ooMVK0.MkT3UQjlMv7LVq_#;T-LL;E*-c(o&i"%etl)#
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: cf d3 0f 32 72 f8 60 b9 2f 73 0a 2b fa e1 fa 17 3a 4a b6 f5 a1 5a 33 a9 6d 87 5c 25 9a 5c 78 c3 8b 5c 79 9b 29 10 49 6f 70 90 d4 f4 7d a4 f4 10 b5 d2 db 2a e6 d9 f7 26 59 40 1f 73 e2 0e d4 bb 57 97 e0 fd be b7 0f e5 a1 a4 95 b6 32 e4 69 15 73 a5 25 c0 52 93 e6 c3 07 7f 64 77 8d ed 2d 69 d5 9c 9b 73 70 ee 26 e5 ca 93 1d 23 2d bc d7 73 5e 2a 79 8e 9b 07 8b 70 cd e9 ca d9 1b b5 e6 2d 7c 41 68 dd d4 f8 e3 a1 29 dc a1 a6 bc a0 6e a1 e4 b6 a6 9a ab 42 3e c2 54 66 5f bd fb 75 09 0e de fa 0f 81 0b 82 c7 9c 9b fb dd ae cd c6 bc f3 69 14 59 84 47 c5 79 7f bf e7 f6 cc 9e 89 fd c6 33 5e f9 59 22 f0 e6 0b 94 33 d7 29 13 7e fd f8 f3 ee 6f e7 b8 39 ea c3 79 1b 95 1b 5e ec 6a e8 33 c6 23 2c ed 37 3a f2 ad 54 8e 89 78 12 6e a1 3a af bd f8 a1 a5 54 f4 65 77 d7 c5 b7 d5 dd Data Ascii: 2r`/s+:JZ3m\%\x\y)Iop}&Y@sW2is%Rdw-isp&#-s^yp-\|Ah)nB>Tf_uiYGy3^Y"3)~o9y^j3#,7:Txn:Tew
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 1b 55 09 9c 2a 25 df 7d 35 3f a0 d7 ca 09 77 14 9b 85 6f 99 ad 55 1f bf fe 0d a4 bd bf 56 23 43 ad c6 69 15 0b b1 bd 55 95 00 65 44 2d 78 69 2e e9 5e c1 d6 9e 55 1c d7 33 4c 7f 57 1f 5d 99 6e 7a b3 5d 64 bc 34 19 2f ea 91 4a 36 c0 0f 43 26 4a 53 4c 97 a6 18 9b 18 65 e7 a1 7d 6c 1b 7d 8a ef 8d ed 83 c0 67 50 23 62 b1 8e 67 8b 96 f7 af 4f f1 9e 17 e6 a1 b8 9f d6 9c 1a 6d 90 1b 15 a4 a5 f2 5a e7 0e 4c 4d d9 77 f4 5f 74 e7 17 5a 09 df f2 89 ef 86 be 9b 6d 30 f6 7a cd a4 2e 6d 24 c5 75 37 88 b5 fa 80 36 51 dd 8f a7 11 86 25 85 75 8e 1f 8d ef e5 bb e3 7b 40 0c 83 a9 1c c7 a6 bb 58 9e ee 26 6f 52 e4 4c 34 10 28 b8 80 a2 0b 78 c6 9f 62 77 71 92 b1 a9 49 28 59 fa 54 58 ae 44 5b 7c d4 81 53 42 67 a1 64 79 cb 29 83 50 7a 96 23 49 ae aa 12 f8 f6 9e be 54 ea cb 2d 45 Data Ascii: U*%}5?woUV#CiUeD-xi.^U3LW]nz]d4/J6C&JSLe}l}gP#bgOmZLMw_tZm0z.m$u76Q%u{@X&oRL4(xbwqI(YTXD[\|SBgdy)Pz#IT-E
2024-05-27 22:43:39 UTC	1143	IN	Data Raw: 5f 3d 25 4b 5e 26 ea 38 35 16 43 6a a3 74 83 50 99 2a d8 7b 53 9e fc 56 cf 50 ea df bb ce ee 9c 5a ae c6 a2 3b 1a 07 ff fe 9a 93 32 d6 7d 54 f3 d9 0b dc 5c 3b b8 17 80 7a eb b1 35 21 d6 b9 aa 7e 57 51 67 c1 77 4c 86 8e 13 8c f2 be 13 33 5c b5 01 f0 c7 a8 ad 8e c5 25 77 72 4a bf 93 f2 dc 3b fa 2e ec 8c b5 dc 08 1d 57 d1 33 31 f2 d6 2f fc c4 12 5e a1 05 ff 9f a4 d4 39 bf e6 9c bb 23 e2 55 e1 65 12 e2 c9 05 87 c6 0b 9f 15 3f 50 5e d6 65 b8 62 7d 0e fc ea 89 fc 45 52 c9 71 ba 85 92 63 72 42 3f 91 23 7c d5 62 93 0b cf e1 54 01 c0 8a bf bb ee 4d 8a fb a4 cb a6 da de e6 d4 ce ae 89 b2 2b 32 1e e3 26 a4 aa 3a c4 77 8c f8 96 4b 3c e5 2f cf ce 71 c6 90 5f b5 43 61 f1 a4 16 e0 e0 44 a0 79 23 af ef b9 e0 ce cf cd 33 a1 b6 b1 e8 12 5c 8d 67 de f6 f9 7f 28 0d e6 97 7a Data Ascii: _=%K^&85CjtP*{SVPZ;2}T\;z5!~WQgwL3\%wrJ;.W31/^9#Ue?P^eb}ERqcrB?#\|bTM+2&:wK</q_CaDy#3\g(z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50187	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	551	OUT	GET /IW5qFdrQ464i6bDzhjV2xJvvGDsrvssd3hqgNC-Y0VDwnriCuvrzsftsfCEBzXg37G0QJAfGy9te8w8v2jebrajiiviDGB6_y1G2=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:39 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2571 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:10:17 GMT Expires: Tue, 28 May 2024 20:10:17 GMT Cache-Control: public, max-age=86400, no-transform Age: 9202 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 09 57 49 44 41 54 78 9c ed 9d 7f b0 55 55 15 c7 3f 8f 07 0a 92 90 21 98 5a 3e 50 2a 8c 4a 08 94 7e 4b 22 29 63 13 fd 20 b0 c1 32 4c d6 96 61 9e 35 53 99 a6 61 5a 4a 98 c5 88 8e b5 57 98 85 41 49 41 34 35 a6 85 4d 93 35 11 0d 01 59 ea e0 cb c0 31 50 1f f2 4b 1b ea c1 e3 f5 c7 3e 0c 84 f7 c7 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2WIDATxUU?!Z>P*J~K")c 2La5SaZJWAIA45M5Y1PK>
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 2c 4e fc 6c a3 4e c4 08 3c b8 ee a3 08 0c 03 2e 07 1e 56 af 73 d5 6b bf 9c fa 69 2a 62 04 ce d3 a7 6d 21 24 13 dc 09 2c 53 af af cd b1 af a6 20 66 91 35 05 18 03 8c 24 2c 96 46 13 aa ed b4 01 c7 d5 69 5c 2d c0 34 60 bc 7a 6d 07 1e b0 50 68 1c 31 1b fe 2f 00 0f 27 17 00 ea b5 3f f0 66 e0 9d c0 44 60 3c e1 c4 5c ad 82 0f 07 56 01 37 aa d7 bb cc 77 ce 4e 2e d9 8f ea b5 8d 10 e0 98 4e 28 94 76 32 50 eb 77 ea 52 e0 1a 71 b2 b5 46 3b bd 0e f5 7a 26 21 d7 ed a2 0a b7 3d 26 4e 46 67 b5 9d 8b 9b 24 4e b6 88 93 7b c5 c9 14 e0 c3 80 07 9e 20 ec 3e c5 32 13 58 92 7c 18 46 4a 72 f7 83 c5 c9 1a 71 d2 0e 5c 0a dc 42 28 cf b7 37 d2 dc 24 60 85 7a 3d 72 b3 c3 28 43 c3 02 1d e2 64 a3 38 99 0f 7c 12 58 08 6c 8a 34 35 06 f8 a1 7a 3d a7 5e 63 2b 32 99 05 56 af c7 d5 e2 a3 8a Data Ascii: ,NlN<.Vski*bm!$,S f5$,Fi\-4`zmPh1/'?fD`<\V7wN.N(v2PwRqF;z&!=&NFg$N{ >2X\|FJrq\B(7$`z=r(Cd8\|Xl45z=^c+2V
2024-05-27 22:43:39 UTC	322	IN	Data Raw: 94 f2 51 ad be 44 7e 90 0d 20 ea c7 2b 1b 91 93 35 03 b8 b8 42 ce f2 16 e0 c7 29 6d 4d ab f0 de b3 84 23 aa 69 98 58 e6 f5 3e f4 de 0a bc 8f c6 34 6a d4 4f bc cf 04 4a ce 62 c2 ae d0 aa 94 76 26 55 08 7a ec 24 9c 95 4a 43 b9 dd a5 6e ea 5f 45 a8 1e 1c 20 3c e9 32 13 23 70 b5 d4 9a 52 4c 04 2e 2c 35 8b 93 55 f1 26 c2 b9 a6 6a 0c a6 fc 21 b5 97 08 b3 38 0d 23 cb bc be 8f de f7 83 22 dd c0 22 71 f2 50 4c e3 5a 1e 47 07 32 5c 10 76 74 4e 2a 63 ab 13 f8 73 15 bb 07 9f 1c 13 ca d8 e8 22 6c 40 1c 5c 95 57 1a cb e9 65 36 31 ba 38 b4 21 92 e5 ef cb e3 da 03 ac 05 6e 02 ae 29 f3 37 57 25 c6 0f be 89 e0 98 77 67 68 d3 8f 90 db 5c ce 25 da 09 dc 01 fc 96 ff 0f 85 1e 4e 0b e1 e9 f1 a7 52 6f 8a 13 d4 eb 6a c0 01 27 54 18 5f 3f c2 a9 c8 56 5e 3e 5b 9f 01 6e 23 9c ac c8 Data Ascii: QD~ +5B)mM#iX>4jOJbv&Uz$JCn_E <2#pRL.,5U&j!8#""qPLZG2\vtN*cs"l@\We618!n)7W%wgh\%NRoj'T_?V^>[n#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50188	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	565	OUT	GET /uPpZapQO32gCKWztePKdTRzpg7rCr4_40vlgIAslU9JyF135ZdGvC33DbzA2mdmOTNK6qgbu7xWfKkR9rfJUwaK20saGLsFW9yw014GdOKBVEN9zow=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:39 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2718 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:19:07 GMT Expires: Tue, 28 May 2024 22:19:07 GMT Cache-Control: public, max-age=86400, no-transform Age: 1472 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:39 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0a 55 49 44 41 54 78 9c ed dd 7d 70 14 e5 1d 07 f0 ef ef d9 dd bb 4b 78 49 48 48 43 10 44 8d 22 2f 41 a0 60 2b a5 d3 19 a9 e8 48 5b ea d8 e1 a5 50 28 f5 0f 3a 9d b6 33 9d 82 60 75 ea b4 56 66 94 d1 19 fd ab 75 94 82 0c a5 24 42 78 b3 32 4c 05 a7 bc 77 46 94 48 12 29 70 19 54 48 24 92 90 e4 20 dc dd de 3e 4f ff b8 9c 82 c9 91 bb bd 67 6f 77 c3 f3 f9 33 dc 3d fb bd fb f2 dc ee ed de 3d 07 28 8a a2 28 8a a2 28 8a a2 28 8a a2 28 8a 1f 90 db 01 1c b3 34 3c 0e 66 e4 c7 10 fc 7b 60 c6 64 24 a2 15 20 62 00 00 21 38 f4 50 0b b8 59 07 62 07 60 0c d9 89 8d 95 a7 5c 4e ec 88 81 55 f0 cb 42 c3 f1 fa a7 c0 13 ab 21 ac Data Ascii: PNGIHDRxx9d6sBIT\|dUIDATx}pKxIHHCD"/A`+H[P(:3`uVfu$Bx2LwFH)pTH$ >Ogow3==(((((4<f{`d$ b!8PYb`\NUB!
2024-05-27 22:43:39 UTC	1390	IN	Data Raw: 23 8e 39 bf 31 f9 fc b7 0f be de b2 86 4a c4 cc 53 e0 a6 2e ff a1 08 80 19 09 04 8d 71 d8 30 31 2c 79 f0 bc f1 77 c1 29 8b ea 77 c1 8a fe 48 ea 98 5a 68 37 36 57 cd 95 3a a6 0b fc f9 12 fd 75 9b ab e6 c2 18 fc 00 48 6b c8 79 2c d2 1a 60 0c 7e 60 20 94 0b 0c 94 19 7c bd 45 0d 53 01 b1 0a 3c be 30 e3 0f eb 11 03 58 60 0b 40 6b b1 79 e2 87 ce 06 cc af 81 57 f0 f5 96 36 55 81 c7 1e 84 15 9f 00 d2 2a 91 b8 9a 5c 09 40 1f d4 09 61 85 a1 05 1a c1 82 ef 61 e3 5d be f8 9e 91 a2 28 8a a2 28 8a a2 28 8a a2 28 37 e7 cb 13 1d 35 ef 5d 1d 1d 08 84 26 12 12 65 a1 c2 40 b9 10 28 68 6d 8b 05 4e 37 b5 e3 3f 4d 26 1a 2f 46 b5 2b 9c 89 18 19 bc ff 0f ea 11 18 8f 6b 1a 04 ca 0b 43 d6 98 21 06 ca 4a 4a 30 68 50 10 00 c0 2d 80 df 7c 08 01 81 28 b7 e2 17 89 e9 9f 71 b3 fd 83 ad Data Ascii: #91JS.q01,yw)wHZh76W:uHky,`~` \|ES<0X`@kyW6U*\@aa]((((75]&e@(hmN7?M&/F+kC!JJ0hP-\|(q
2024-05-27 22:43:39 UTC	469	IN	Data Raw: 13 02 df 28 2e b2 3f 07 85 90 ba 22 80 2a 58 36 cb 42 69 49 49 0e fd 5a 19 7f d4 29 13 aa 60 99 84 c0 98 e2 a1 08 05 ed 7d d3 10 10 8d 6f ad 0e 49 fd c9 5a 55 b0 4c 09 0b e3 46 8d cc 62 b1 96 1b 09 ce 9f 93 1b 48 15 2c 8f 10 28 2d 0c a1 64 58 b1 bd d9 2b c4 a5 9a 55 ba f4 ef 27 a9 82 65 31 2d 7c fb 9e bb 72 38 7a b6 a4 7f 2f 09 50 05 cb 61 71 4c aa 18 8e e2 a1 76 df 1e 89 b7 6b 56 19 fb 65 c7 02 54 c1 b9 13 02 83 03 3a 26 56 56 da 58 5a 09 00 44 a4 7a 25 93 fb 8b 31 d7 51 05 e7 a2 67 8d 8e 47 ee ab b2 3d 04 8f 47 1d bd 86 2e b3 e0 5b eb 62 b0 10 00 e7 78 6c ea 24 db 0b b0 80 30 c1 c9 05 58 00 89 05 c7 63 d1 6b 76 ef 4b ba d6 ef 8a 9f 9e c2 39 74 c6 f0 f8 b4 29 08 85 42 b6 d6 c9 12 c0 ed d5 2b e8 63 67 02 7e 45 5a c1 f3 1f 2c f8 c8 ce fd 84 00 4a 8a 43 b2 Data Ascii: (.?"*X6BiIIZ)`}oIZULFbH,(-dX+U'e1-\|r8z/PaqLvkVeT:&VVXZDz%1QgG=G.[bxl$0XckvK9t)B+cg~EZ,JC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50189	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:40 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:39 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:40 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50191	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:39 UTC	783	OUT	GET /9ks6e2i7ubrVUEkBwpoJeXTceixbWT3ppLdca04jQg6VPMqXiz6B8KEeczJhnRWmjR453_UREmwtS2jP8-yNq-pU5cEDTbEU6Nqb=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:40 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8691 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:27:18 GMT Expires: Tue, 28 May 2024 22:27:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 982 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ed 9d 79 bc 64 47 75 df bf a7 ea de de de 3a fb 8c 46 b3 69 43 8a 24 90 d0 8a 20 c2 0a 48 80 0c 84 dd 06 12 3e 78 c1 01 02 71 c0 c4 31 26 c0 c7 c4 36 31 49 8c 09 7c 02 91 71 c4 c7 08 2c c0 18 9b 3d 2c 02 2d 68 34 08 a1 6d d0 32 5a 66 46 a3 d1 2c 6f 99 b7 f6 eb ee 7b 6f 9d fc 71 6f 6f af 97 d7 dd ef cd 9b 37 f2 fc 3e 9f 9e d7 73 bb 6e 55 dd fa d5 a9 3a 75 ce a9 ba 70 0a a7 70 0a a7 70 0a a7 70 0a 27 02 72 a2 2b 70 ef bd 4f 7b 5b b6 f4 af 13 d1 ac 88 b1 ce 21 aa 8a aa eb e0 6e 51 63 4c dd 95 66 f7 aa 82 b5 b6 a3 fa a8 3a 54 b5 c9 fd a6 c5 1d f3 e1 34 8a a2 48 55 e6 f6 ee 9d 1a 7d c1 Data Ascii: PNGIHDRxx9d6sBIT\|d IDATxydGu:FiC$ H>xq1&61I\|q,=,-h4m2ZfF,o{oqoo7>snU:upppp'r+pO{[!nQcLf:T4HU}
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 32 7a e8 60 2c f1 27 19 4e 2e 09 2e 7b 68 ee bf 97 f0 cf ff 10 1d 1f 87 cd 17 1f bf f2 ac 87 6c bb 8c e8 ff fe 0f dc 2f 77 92 fe f8 a7 61 70 e8 a4 1a ae 4f 9e 2e 29 02 ea 70 bf bc 9b e0 03 6f 45 67 0b d0 3f bc 3c 65 7b 1e 72 da 76 b4 58 a8 d7 d6 4f 02 9c 3c 12 6c 2d d1 5d 77 11 7e fc 8f 21 bd 26 9e 2f 3b 45 79 ad ab 11 38 4d d6 c6 d5 35 72 5b 8c 1d c0 bc e6 b7 f0 df fc 36 64 c3 69 10 9d d0 00 8d ae 71 72 10 ec f9 e8 c3 bb 09 3f ff 19 b4 58 04 3f dd c1 4d 0a 41 09 a6 47 41 42 64 c7 f3 60 78 35 e4 fa 60 66 1a 26 c6 d0 a7 1f 85 48 a0 7f 75 f3 3c c7 f6 63 5e ff 7b f8 6f 7a 2b b2 79 cb 49 47 2e 9c 0c 04 1b 83 1e 7a 9a e0 6b 5f 42 0f ee 03 af 03 c9 2d 15 60 fa 08 e6 8a 6b 91 ab af c5 9c f9 1c 24 9b 89 d7 b5 d6 42 14 41 14 a1 f9 3c 6e cf c3 b8 3b 6e 41 ef fe 11 Data Ascii: 2z`,'N..{hl/wapO.)poEg?<e{rvXO<l-]w~!&/;Ey8M5r[6diqr?X?MAGABd`x5`f&Hu<c^{oz+yIG.zk_B-`k$BA<n;nA
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 36 9f 7f e9 1f 3c f0 f9 a1 5c 1a f1 2c 18 53 67 c3 6e 95 4f 7c 59 10 24 72 c8 7d 73 21 9f 7e e4 fb 0f 7d e9 c9 5d af 68 6b 62 69 4b f0 9b 3e 3d 7d 49 5f ca fc 65 29 74 57 8f 4c 41 a4 5d 8c 41 ce e1 54 c1 29 1a 28 e3 79 a5 58 72 1d 4f 53 82 c1 ad da 41 34 79 35 b7 05 c3 7c 64 64 80 b1 d2 51 d6 cf b3 e8 0f 9b 34 5f 1a bd 9d 75 8f ae e1 cd e7 bd 86 8c 4d 2d 6a ad 29 12 0f cf df be 47 b8 f3 69 48 b7 19 e3 22 e0 bc f5 ca b6 35 da 71 40 61 18 c1 d3 53 4a 10 29 62 15 31 0e ad 6c b9 69 9e 49 f5 71 14 c0 1a e1 92 5c 5a be f0 bc 57 9c fb ce 73 af dd f7 fe ef fe e9 f6 9d ad ca 6b 59 fd 37 ff af 99 ab 3d 31 37 4e cd 71 f5 f4 5c 32 6c d1 85 1b cd 48 bc ff ba bc 0f bb 5b b7 9a 46 c8 e0 a5 7c ab ff b7 f8 c0 68 86 63 a5 39 fa 9a 64 20 08 c3 ea f1 d9 a7 be cd 3f 3c f6 3d Data Ascii: 6<\,SgnO\|Y$r}s!~}]hkbiK>=}I_e)tWLA]AT)(yXrOSA4y5\|ddQ4_uM-j)GiH"5q@aSJ)b1liIq\ZWskY7=17Nq\2lH[F\|hc9d ?<=
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 71 db e3 05 b6 fd 64 9c b7 be 74 35 88 d7 b3 59 51 55 59 97 59 cd 2b b6 bf 98 4b d6 9f cf b7 9f fa 29 1f db f7 8f 64 c3 80 4d b6 0f bf 87 63 31 23 75 4c bb 22 8f 4b 91 ff b8 e9 1a be 7c c6 ab 39 7d 60 23 39 3f db 73 3d 45 04 23 11 5f f8 de 61 7e f4 70 91 c1 b4 9f 9c 06 24 b1 25 6b 11 01 29 75 35 12 43 33 79 ed dc 57 ae e5 0a f7 50 13 29 3f 8c 21 eb 7b dc 74 67 81 b9 60 8c b7 5f 37 8c e7 a5 71 3d ed 0c 8f 25 2d 65 7c 36 f7 6f e4 77 cf 7b 23 af d9 7e 2d b7 1f f9 05 37 ef ff 01 3f 98 7c 98 61 49 b3 c1 64 c8 88 87 c1 60 12 13 a6 53 c5 11 db ca 03 22 8e b9 12 87 35 cf 85 b9 cd fc c6 86 ab 79 fd d6 97 b2 75 e0 34 52 d6 8f 3b 69 8f e4 1a 23 84 41 91 cf 7d eb 30 5f bd 7d 8e 9c e7 c5 44 94 75 ab da 67 59 8c f4 96 5f 4e d2 84 9c ae fd c1 f3 0b ac 3b 22 92 58 bb 2c Data Ascii: qdt5YQUYY+K)dMc1#uL"K\|9}`#9?s=E#_a~p$%k)u5C3yWP)?!{tg`_7q=%-e\|6ow{#~-7?\|aId`S"5yu4R;i#A}0_}DugY_N;"X,
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: c1 3d fb 4a 1c 99 9c e1 05 17 84 9c b7 bd 1f c5 2e db 56 cc 58 3f 88 78 70 cf 04 b7 de 7d 8c c7 0f 45 64 32 1e ce 59 22 e7 11 e4 2d c7 0a f1 0e 43 31 52 b5 1a 26 d6 3c df c4 46 8c d5 03 f3 ed 93 f5 5f 8f 4c 3a f2 a5 b8 23 b4 25 b7 a2 50 25 65 d5 49 73 3d 7a 9f 83 e7 9b 2c 81 62 08 7b 8e 38 9e 99 68 b3 97 5f 60 a2 a0 f8 b6 7a 41 4c 6c ef 15 55 8c 28 23 79 98 7d c6 e1 8b e0 42 43 14 1a a2 c0 63 f7 d3 01 bb f7 4f 73 fd e5 21 d7 3c 7f 10 6b fd 25 f3 20 b5 82 31 b1 27 e8 c7 bb 46 f9 e6 ad 13 ec 3d a6 e4 d2 3e 66 46 30 c6 20 5e bc b5 a5 10 95 97 40 71 87 50 ad b6 b6 67 e2 76 e9 9f 48 46 d7 26 55 56 85 7c 49 29 45 34 1a 31 3a 20 57 45 70 4d de 1a d8 82 e0 16 3a f7 42 50 28 04 30 57 6a df e8 95 fa d6 5e 4b 8c 2b 22 e0 d4 30 55 4a 1a 22 4a ce f2 0e e3 bf bb 8f 2a Data Ascii: =J.VX?xp}Ed2Y"-C1R&<F_L:#%P%eIs=z,b{8h_`zALlU(#y}BCcOs!<k% 1'F=>fF0 ^@qPgvHF&UV\|I)E41: WEpM:BP(0Wj^K+"0UJ"J*
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 2b 73 af 96 25 5c 9b 92 4b 13 c9 15 8d e3 cf 5b 6d c3 e9 cd 1f dc a4 9b 2a d2 d5 0e 42 6d 41 73 39 54 be 3d 04 8c 56 ac 47 52 8e 33 b6 92 04 b2 09 c6 17 32 59 c5 b3 86 5d 7b 42 a6 f2 33 5c 7a ae 12 45 8e 9d f7 8d 71 f7 23 05 72 19 8b b3 1e c6 13 c4 09 12 1b 93 ab cb a0 72 59 8b 5c 2b 68 92 45 ed de e6 5a 72 cb a5 94 e7 e5 6a e7 4d 7e 59 80 dc ea 85 4e bd 49 3d 3d 45 77 8a 59 1c 58 d6 a4 a3 74 98 4d 59 aa aa 56 24 49 0e 10 07 f1 c0 7a 06 3f 0d 69 2f c2 1a c3 9e c3 8e c0 15 c8 cf ce f1 e0 e3 25 fa 72 29 3c cf 12 85 26 36 4a d9 c4 7f 1b 67 9e 68 c9 2c 96 db f8 99 2a ba 72 52 f7 56 e4 4a 59 12 75 49 c8 85 95 7a 4e 56 37 90 b8 c1 14 62 2d 37 11 17 b1 0e 2f 25 a4 7c 8b 31 16 2f e5 38 3c ad 84 81 61 fd 06 8f e2 6c 09 cf b7 84 65 b7 5e 8d f2 d2 4c 99 ea 05 31 21 Data Ascii: +s%\K[mBmAs9T=VGR32Y]{B3\zEq#rrY\+hEZrjM~YNI==EwYXtMYV$Iz?i/%r)<&6Jgh,rRVJYuIzNV7b-7/%\|1/8<ale^L1!
2024-05-27 22:43:40 UTC	881	IN	Data Raw: 6b 0d f9 99 39 0a 85 52 a2 4c d7 93 0b d2 11 b9 d5 78 8e ee c8 ad 7c 6f c2 51 d7 47 19 ce c7 b3 81 f8 c5 ae c7 3d df a3 7f b0 0f e3 19 8a 73 d5 d3 74 2b f4 48 2c bd a2 e6 f8 90 1b eb f2 34 63 78 c9 4e ba eb 04 2b a9 33 2c b5 91 c5 58 43 5f 7f 0e 6b 0d 73 f9 22 9a 9c a8 53 e1 e3 78 4a 6e 83 b2 55 c5 b2 ce c1 b5 db 38 3a d3 b7 8f 4f f9 c7 0b 22 42 26 17 cf cb b3 33 05 9c 73 c9 3a d9 54 d7 c5 c9 1f 41 aa 96 ad 5a cc 1b da 3b 22 b7 e2 63 ee c0 92 b5 1c ed 9e b6 f0 ab 03 21 e7 6f f1 8e 6b 61 0b f9 8c 97 bc 3c 00 04 df 4b 93 cd f8 4c 4f 4d 13 85 ca 9e c3 21 a9 b2 11 a2 09 b9 4d b5 e5 ba 5a 2f 40 2e da f2 50 94 06 82 8d 43 23 ad 76 f6 e3 d1 38 69 0b b7 ef 89 f8 e1 c3 d1 92 d3 bb 24 f9 f5 90 49 a3 7f 18 44 d3 b8 42 1e 4f 1d 29 4b 75 7d bb d4 e4 22 18 11 35 4d 6a Data Ascii: k9RLx\|oQG=st+H,4cxN+3,XC_ks"SxJnU8:O"B&3s:TAZ;"c!oka<KLOM!MZ/@.PC#v8i$IDBO)Ku}"5Mj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50193	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	798	OUT	GET /gglWI8y0x_H0LIUgCjTQp7RLHEkMVvcd5A4iH6V7BO-fqALnIaJAbVcBsfWa_3iCiK6ZdJhAyJf-dUPJfLXvIXTXXGdZxLDFY5Zbw4O0xyQRoQK_1ZU=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:40 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5149 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:14:22 GMT Expires: Tue, 28 May 2024 22:14:22 GMT Cache-Control: public, max-age=86400, no-transform Age: 1758 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 13 d4 49 44 41 54 78 9c ed 5d 7b 90 15 55 7a ff 7d 7d 67 86 19 58 06 e4 31 0c 83 8b 0c 62 41 14 a2 d9 50 5b b1 12 2a ac e5 26 6c 45 41 c6 64 c5 05 d7 ac 6e 5c cd 5a a6 2a 55 bb f9 23 55 c6 94 95 b2 70 e3 83 e1 25 ba be 10 61 4b 2b ae 71 63 49 d6 aa 5d 15 ca c0 08 8a 30 c8 4b 98 81 e1 e9 20 20 30 c3 cc dc b9 e7 cb 1f dd a7 cf 77 4e f7 80 2c 73 bb e7 de cb af 8a a2 6f f7 ed ee ef 9c df f9 9e e7 9c 3b c0 65 5c 46 b1 e0 d7 2f 72 05 ef d9 53 9e b6 1c 49 a2 2c 6d 01 92 c4 d9 0e 54 be b0 76 12 00 64 d3 96 25 29 78 69 0b 90 24 ba 19 d5 4a 61 68 da 72 24 89 92 22 98 19 a3 e0 61 64 da 72 24 89 92 32 d1 20 8c 80 07 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx]{Uz}}gX1bAP[&lEAdn\ZU#Up%aK+qcI]0K 0wN,so;e\F/rSI,mTvd%)xi$Jahr$"adr$2
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: d5 be ef cd 14 44 cf 1b 8a 86 e0 45 cb 79 69 4e f5 54 49 b2 38 34 c5 64 05 57 61 34 0d 9b 78 06 d0 d3 7d 76 c4 fd 2f f3 63 a9 34 22 0f 28 8a 20 ab 71 29 4f 6b 39 d0 b4 55 a7 45 20 20 07 8f 75 79 52 91 0e b2 62 52 24 f2 98 c1 64 52 26 82 02 e3 8a f1 d7 4f 7a ee 6e da 9b 72 d3 2e 19 45 a1 c1 87 8f 34 af 03 00 0e 26 14 14 00 90 2e 47 52 c4 0c cb 7a 34 02 72 4d 50 06 c0 23 74 9c 68 fb 30 85 a6 f4 3b 0a 9e e0 45 4b 79 55 4f b6 73 98 31 bf c4 90 64 02 76 ee 1b 18 2d 45 fe bc 70 78 9f 47 1c 0e 06 00 dd e7 4e d5 dc fb 0a ff 32 85 26 f5 2b 0a da 44 2f 5e c6 73 5b 5a 9b de e0 c0 b4 fa e6 d8 98 5f 06 85 79 b0 8e 9c 95 b8 66 99 6f 8f 98 01 92 d7 98 80 61 57 4e 9b fd d2 5d f4 9b 94 9b fa 07 a3 60 09 5e b2 8c c7 ed 6b d9 78 90 9d 82 85 2e 64 b8 e5 49 fb 1a a0 3c 8f 99 Data Ascii: DEyiNTI84dWa4x}v/c4"( q)Ok9UE uyRbR$dR&Oznr.E4&.GRz4rMP#th0;EKyUOs1dv-EpxGN2&+D/^s[Z_yfoaWN]`^kx.dI<
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 81 87 b7 ed 5b 77 b3 36 9b c6 d7 7a cc 5e e0 0f c9 d6 a4 a8 d6 89 c1 20 ca 88 d2 67 5b cb 75 a2 83 c0 44 d2 da 2f 8b f3 e1 c0 81 3d 38 d8 79 d7 f9 4a 9a e7 f7 e3 a4 d7 7f 91 74 2d 08 34 3a 33 66 c2 bb 4c 78 74 e7 ad b4 2e 1f 3c f4 2b c1 ef 2e e4 3a 95 c1 03 3b da 9a 1e ea c9 75 57 2b 49 44 8c 36 f9 c7 d1 12 63 2c e1 17 08 ba fc b2 a5 43 1a 39 83 02 d2 4f fb 32 ab 18 4d 8b c4 04 fa 18 b0 48 35 7e 1b 90 95 30 e9 7b dd 73 56 59 54 bc 9b 2a 2a 4f d3 f0 9a c6 9c c2 f2 96 39 fd a7 d5 97 4c f0 fb 0b 79 aa f2 70 47 eb 17 3b 17 9c e8 f8 62 82 2c e9 f9 a5 c1 c0 77 09 33 96 03 e0 9a eb 50 6b 61 82 a7 1c db 35 e5 90 08 f1 1c 63 a6 1d 93 eb 06 3c b0 49 f5 8f dd 3c d9 31 b3 31 1a 2b 06 8e 15 a5 bb 16 c4 8a ac c3 fa b6 bc 1e a3 f9 41 1b 68 44 ed 7e 64 ca 5f c9 31 5e 3b Data Ascii: [w6z^ g[uD/=8yJt-4:3fLxt.<+.:;uW+ID6c,C9O2MH5~0{sVYT**O9LypG;b,w3Pka5c<I<11+AhD~d_1^;
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 4c 04 54 0e 39 45 d5 a3 67 6c bf 8d 9a 53 eb d4 00 03 82 60 8d ff 78 96 57 b5 1d d8 3c df 4e a7 a2 3e 38 52 c3 86 1d 58 45 6a c2 e8 4b d3 9c 74 27 72 dd 21 d2 79 8f 65 19 02 f2 cb c6 d4 af da 3a 87 ee 4a be f7 e2 91 fa aa 4a 89 7f bd 8f 16 d4 5e f5 a7 0d 7a 93 99 55 67 0e 3e 03 10 44 89 f3 e2 d8 d4 9d fd 1b 58 df 27 06 87 fb 6c d7 5c db b5 66 f3 1c bb be 2e e4 60 46 59 4d fd ed 03 89 5c 60 80 69 b0 c6 c3 2f f0 b8 63 07 3f db 99 cd 75 7f c3 ad 6f 9b 85 02 d1 34 24 36 8a 16 c1 92 9b c2 44 35 31 ce 37 c7 a7 5f 61 aa 45 04 54 54 9d cd 0c ab 9d b2 a5 81 0e a5 d5 67 7d 61 40 12 ac f1 cf 4b 4f 37 7f d9 be f7 3a 06 6b b2 62 cd 68 34 15 8a 06 4e ee 84 81 eb 9b a5 9f 85 73 bd ef 54 88 50 5e 5b bf fd e3 db 68 c0 fe 15 b5 01 65 a2 5d 3c f9 d3 ea a9 35 e3 6f 58 1b 76 Data Ascii: LT9EglS`xW<N>8RXEjKt'r!ye:JJ^zUg>DX'l\f.`FYM\`i/c?uo4$6D517_aETTg}a@KO7:kbh4NsTP^[he]<5oXv
2024-05-27 22:43:40 UTC	120	IN	Data Raw: dd 69 cb 91 24 4a 8a 60 00 bb 98 d0 95 b6 10 49 a2 a4 08 56 c0 1e 82 ff 57 7d 4a 05 25 45 30 13 5a 99 d1 9b b6 1c 49 a2 b4 08 06 0e 43 af 7d 2f 11 94 16 c1 84 13 e0 cb 04 17 2d 58 e1 38 9b 3d 69 25 81 92 22 58 65 70 3a 53 32 d3 2b 3e 4a a6 d0 01 00 d3 a7 e1 dc f8 b1 38 97 b6 1c 97 71 19 fd 86 ff 07 13 5d d5 71 d6 b0 09 e4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: i$J`IVW}J%E0ZIC}/-X8=i%"Xep:S2+>J8q]qIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50194	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	786	OUT	GET /mK6uPlO8TKCVSU8TsniV0pOUB0SSETbAPB_QUaaJ96qbBdZwaygmzf_bWRTIHmCNKgJ2hhn86KSfEAHvHN-P2EjFWAxPd77ob_2k8ew=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:40 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2593 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:40:38 GMT Expires: Tue, 28 May 2024 21:40:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 3782 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 09 d8 49 44 41 54 78 9c ed dd 6b 6c 1c d5 15 c0 f1 ff 1d af a3 bc 4c 00 11 af 13 e4 47 1c 9b 42 fa 84 78 42 e3 c4 04 3c 86 0a 82 aa 00 aa 70 02 4e a2 92 b6 29 54 ad 80 7e 68 85 44 a5 aa 15 aa 0a 82 96 52 04 a2 6d 62 03 41 20 da aa 95 82 48 bd 1b d4 c6 3c b2 6e 3e 54 25 a2 76 48 62 bb c5 f1 9a d8 60 40 31 de 9d 39 fd 90 b8 da b8 bb f6 7a 3d b3 33 bb be bf 8f e3 d9 3b 27 39 be 67 67 ee 99 19 83 a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 05 47 e5 f2 a1 43 ab 2b ab 94 18 1b 80 cb 00 03 f8 40 94 fc 43 0c e7 af 4d bd ff 4e b8 1a e1 3c 63 47 8c c5 8e 28 13 58 07 6a 29 e0 00 3d 82 74 2d Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxklLGBxB<pN)T~hDRmbA H<n>T%vHb`@19z=3;'9ggiiiiiiiiGC+@CMN<cG(Xj)=t-
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: ed 02 7b fc 8e 23 1b 41 2e d1 53 b5 c5 2d f3 5a 47 49 73 45 67 b7 2f ed c7 78 cb da 3a e6 d2 de f3 41 a1 cc e0 49 95 86 a8 de b8 65 e6 bd fd 18 b7 cc 56 e6 da de f3 41 fa 04 8b 9d e7 30 66 6d 5f dc 32 f3 b6 90 30 6c 99 cf 02 81 5e 88 51 48 da ed 69 4b 74 52 9d 61 41 f2 13 9c 50 d8 d3 a0 e6 68 5b dc 32 1b 05 75 7d 38 72 d8 93 92 fd 7e b3 b9 da 51 74 8a 37 1d 20 d7 94 90 e4 8c a4 9f ab 69 b7 3e bd b5 9b 0f 2f de 48 e8 e3 3e c8 f0 9b 11 10 35 0a e9 19 b2 4c d7 17 46 86 ad 86 36 47 e1 55 7b cf 35 21 95 24 ee 5c c4 dd 1f a4 ef 0f a5 4d 70 ff 92 0a 7e f8 b5 3f 70 74 e3 a3 94 8c f6 a3 64 c2 d3 20 e7 48 29 68 8f 5b a6 2b ed 47 d9 8d 8a 5b 66 bb 9c 5d b8 08 6c 3b 53 21 84 54 92 37 c6 3f 4f c5 e9 66 de b2 17 a5 dd 2f 6d 82 4b c5 e6 42 0c 1e 5d 77 37 af dc 7e 00 39 Data Ascii: {#A.S-ZGIsEg/x:AIeVA0fm_20l^QHiKtRaAPh[2u}8r~Qt7 i>/H>5LF6GU{5!$\Mp~?ptd H)h[+G[f]l;S!T7?Of/mKB]w7~9
2024-05-27 22:43:40 UTC	344	IN	Data Raw: 64 89 9e 6a 79 f4 c8 20 b0 22 6e 35 ec 01 35 a7 77 6a 09 ec 9d ec 00 15 83 82 9f c1 a9 e6 da 7e 4c 6d ef 15 8b a2 4a 30 e4 dc 7e 0c 4c 7b cf 6d 45 51 a2 a7 9a 65 fb 31 50 ed 3d b7 15 dd 0c 4e 35 53 fb 31 88 ed 3d b7 15 75 82 21 63 fb 31 b0 ed 3d b7 15 7d 82 e1 bc f6 e3 8b 02 2f 06 b9 bd e7 b6 a2 fc 0e 4e e7 56 0e 08 11 a6 fd 33 70 c5 68 5e cc e0 f9 4c 27 b8 c8 e9 04 17 39 9d e0 22 a7 13 5c e4 74 82 8b 9c 4e 70 91 d3 09 2e 72 3a c1 45 4e 27 b8 c8 e9 04 17 39 9d e0 22 a7 13 5c 3c d2 3e 1f 95 29 c1 af 7b 18 88 e6 8d 37 d2 6d 4c 9b 60 81 c7 bc 8d 45 73 9d e2 f1 74 9b d3 26 f8 e0 03 4b 5f 02 8e 7a 1a 90 e6 a6 7f 75 df fe 72 da c7 6a 32 7e 07 3b 38 37 01 f3 e8 6d 65 05 cb 71 44 d2 ff d9 33 a6 49 f0 6b 0f 5c d0 e7 20 75 40 8f 27 61 69 6e 38 2a b6 53 7b 64 eb ef Data Ascii: djy "n55wj~LmJ0~L{mEQe1P=N5S1=u!c1=}/NV3ph^L'9"\tNp.r:EN'9"\<>){7mL`Est&K_zurj2~;87meqD3Ik\ u@'ain8*S{d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50196	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	783	OUT	GET /XfxlbB7Imi28_w277XeVC0u8Yngn8e1bQxhd6YK2snOdqt_uiwripgSEl5VNxgS2cJP2kf0dHv6LfSq8AG6YeJf9cpu1BE1kP36R=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:40 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2860 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5520 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0a e3 49 44 41 54 78 9c ed 9d 79 6c 1c d5 1d c7 bf bf 37 7b f8 8a 43 9c a3 24 5c 09 b9 2f 02 89 43 42 80 16 52 02 24 02 a5 50 5a 54 b5 a8 fc 43 43 69 41 45 45 48 40 ff ab 2a d4 96 ba 40 da 22 90 8a 5a 50 29 15 10 25 0a 49 0a a8 12 2a 6d 1c c7 e1 f8 a3 44 ea 41 55 2e d7 b5 bd 5e ef e5 b9 de 7b bf fe 61 3b d8 8e 03 59 ef ce cc ee cb 7c 24 5f bb 7e f3 fb cd 7c e6 bd 79 f3 66 76 1e 10 13 13 13 13 13 13 13 05 14 75 02 61 e0 76 de 30 03 c9 c4 d9 4a 8b 66 00 80 e0 a2 e5 ca de f4 e5 fb 8b 11 a7 16 38 46 0b 1e 7e f3 2b ad da 29 6c b0 60 6f 03 e1 52 66 b1 00 00 40 dc 43 cc 5d 5a 34 bd 86 74 cb b1 e6 f5 2f 18 2b da Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxyl7{C$\/CBR$PZTCCiAEEH@@"ZP)%ImDAU.^{a;Y\|$_~\|yfvuav0Jf8F~+)l`oRf@C]Z4t/+
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 0a b6 5f d9 30 4f 7a 43 b7 b0 6f 7f 17 7e 76 25 94 5d f1 32 2b 17 3c 06 03 d4 08 58 ad c7 75 a2 e1 71 91 9c b5 a7 a9 fd 85 fe 8a 13 0c 80 9a 14 5c 3c b4 76 09 dc c2 bd 5a 16 be 01 7f a8 15 5c 9d 0a 52 3d c1 c0 48 b3 9d 00 5b 2d 39 4a b4 3c 23 52 ad 8f 35 b4 ef 7b af 0a 69 56 95 9a bb d8 50 da b7 b2 9d ed a1 0e ed 66 ee 80 97 a9 9a dc ea 43 00 24 48 e5 66 42 66 77 b1 97 7d c4 ee da 71 49 d4 59 4d a6 a6 04 17 5e 5e b6 59 c9 5c 07 7b 03 37 42 15 92 51 e7 f3 d9 8c b6 02 6a 38 c5 7e f6 4b ec 17 3a 4a 5d d7 6f 8c 36 a7 89 d4 8c e0 e2 fe e5 1b e1 16 77 c3 1b b8 12 ba f2 e3 6d e8 68 07 90 d9 ab e0 15 77 17 3b af db 10 75 3a 63 d4 84 e0 fc fe c5 8b e1 15 7e c1 5e 7f 3b d8 8b 3a 9d 69 42 00 bb 20 39 b8 49 e8 d2 6e f7 c8 b6 45 51 67 04 d4 80 60 fb 8f 17 cf 12 4a 3e Data Ascii: _0OzCo~v%]2+<Xuq\<vZ\R=H[-9J<#R5{iVPfC$HfBfw}qIYM^^Y\{7BQj8~K:J]o6wmhw;u:c~^;:iB 9InEQg`J>
2024-05-27 22:43:40 UTC	611	IN	Data Raw: d0 10 60 9c f2 21 db ec 81 30 e8 43 49 ff 94 79 93 20 9f 08 1a d3 d8 98 01 42 00 24 33 06 ca 2d 58 be e0 61 7a 46 4a 3e f8 a9 d5 20 64 98 58 a6 8b 2d 17 59 4e ea 7e 30 2d c0 d8 78 29 e1 c4 2e 48 00 c0 0c 3d 34 74 e2 ed 91 55 f8 c4 35 01 82 05 fd 4b b6 5a 3f 95 73 ac bf 91 aa a9 b9 26 58 b0 55 b6 e0 9a 91 54 29 03 f7 cf bb 8d 80 67 46 9a e2 51 69 e3 e5 8e ad e9 98 cf 49 fb e7 b8 b7 b5 56 f8 fa ec 47 fa 9e 0f 32 df b0 30 e2 4e 8b cc fd f3 e7 12 e8 8a 29 e5 12 26 ee c6 04 40 d0 c8 cf d1 2f 9a f8 bb b0 92 b8 3c f7 e0 5c 23 06 71 8c 10 4c 90 6d 04 bd 12 93 26 df 9a f2 20 72 8a 9a 3b f1 45 5e c9 c0 ec aa 25 18 21 b5 74 8c 99 36 4c dc 48 c0 ec 13 ba b8 12 b9 c0 a8 dc c0 a7 bc 09 03 23 6a b0 d4 80 e6 51 5f 15 ca 1d 5d 06 31 9b d1 3f 31 a2 06 93 22 07 02 83 10 55 Data Ascii: `!0CIy B$3-XazFJ> dX-YN~0-x).H=4tU5KZ?s&XUT)gFQiIVG20N)&@/<\#qLm& r;E^%!t6LH#jQ_]1?1"U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50199	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	551	OUT	GET /Ac9zapU8rN332VMysmJIaTk1Nk-3IGzqCwFS-6PwDFUFpEzEBKPTGWfIFN4BXL3eHP5s1DJP2tyh8NTS8_LjvXHzpkyZC2fu58Ov=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:40 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1165 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:02 GMT Expires: Tue, 28 May 2024 22:42:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 98 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 04 44 49 44 41 54 78 9c ed dd bd 6f 1c 55 14 c6 e1 f7 cc ac d7 6b 03 c6 11 a0 54 20 62 58 83 08 4a 8a 54 11 42 d4 a1 8f 94 ff 20 02 04 74 14 91 a0 01 cb 12 55 44 43 4d 1b 51 93 8a 12 a8 92 82 2f 89 24 4e 84 6c 84 10 01 83 83 ed 35 ec dc 43 b1 8b 12 28 b0 37 39 77 e7 dc 93 f7 91 ec 72 e6 6a 7e 9e 9d 63 df b5 0d 10 11 11 11 91 39 c9 7d 82 fe 8a 9e 16 e0 cd 34 d8 7c a1 9a 5d c8 7d 3a 53 22 82 ed 3f 6e 6d 6f ac 2e 3e 09 e0 66 db eb b9 1b d9 02 2f bd ab 4f d4 35 3e 91 d4 1c 85 08 a0 c0 f8 53 31 44 04 5b bf 6f e2 c7 5b bb 3f e1 c3 c7 9f 47 81 91 ab 1c 07 ed af ea 91 3a ed dc 10 4d 47 01 00 aa 28 2d ee bf 0c 77 Data Ascii: PNGIHDRxx9d6sBIT\|dDIDATxoUkT bXJTB tUDCMQ/$Nl5C(79wrj~c9}4\|]}:S"?nmo.>f/O5>S1D[o[?G:MG(-w
2024-05-27 22:43:40 UTC	304	IN	Data Raw: 60 af 5b 6f 25 72 19 98 ec 30 70 70 2e 03 7b dd 7a 2b 91 bb 21 cb c3 76 e1 ec 8c 00 33 ed 9c db 9a bb c0 5e b6 0b 97 4d ff 73 42 7b dc 05 06 b8 5d 68 c9 e5 33 98 ec 30 70 70 0c 1c 1c 03 07 c7 c0 c1 31 70 70 0c 1c 1c 03 07 c7 c0 c1 31 70 70 0c 1c 1c 03 07 c7 c0 c1 31 70 70 0c 1c 1c 03 07 c7 c0 c1 31 70 70 0c 1c 1c 03 07 c7 c0 c1 31 70 70 e6 81 d3 de 16 00 fe 6a c2 e4 04 cd e0 37 f3 a3 9a 07 ae 7a 87 3e 67 df bb 20 40 3d ff c8 17 d6 87 35 0f ac c0 79 68 61 7f c4 cc 03 55 a8 e2 03 eb c3 66 b9 d7 fa 2b fa 8d 20 3d c7 d0 07 24 02 48 f5 dd 95 73 f2 ac f5 a1 b3 0c 59 4d c2 cb 3a 1c 24 08 5f ab f7 25 02 fd 6b 90 74 88 53 39 0e 9f 25 f0 f5 b7 e5 7b 74 e7 9f 86 54 57 00 8c bf 42 19 fb b6 db d7 43 51 7d db cc cc 2f 5d 7d 47 6e 64 3a 53 5e fd 15 3d 03 e0 f5 b4 f3 eb Data Ascii: `[o%r0pp.{z+!v3^MsB{]h30pp1pp1pp1pp1pp1ppj7z>g @=5yhaUf+ =$HsYM:$_%ktS9%{tTWBCQ}/]}Gnd:S^=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50201	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	553	OUT	GET /flHLQ2o9o8gGi2lHhT5QeZT3fC04iz-gTgOhgTDMgP9l2iiXAWFrvEiPKPGcQ1hgVNBJ2j8dpa-XpJ3rGkIUxBXh63rtfdImVnTjMA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:40 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5268 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:02:11 GMT Expires: Tue, 28 May 2024 19:02:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 13289 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 14 4b 49 44 41 54 78 9c ed 5d 69 b0 1c d5 75 fe ce ed 6d 66 de bc 4d 2b 0a da 59 84 b0 10 4a c5 c4 26 08 14 ca 98 c5 60 63 3b c1 c4 64 33 21 fc 60 37 55 40 6c a7 5c 48 62 09 b8 12 57 61 62 10 5a 30 8b cb e5 22 29 1b 07 27 15 14 30 20 28 8b 20 63 11 2c 36 17 60 a1 05 21 a1 ed bd a7 37 6f a6 7b fa 9e fc e8 9e 37 cb 9b a5 bb e7 f6 4c bf e4 7d 55 f3 34 9a be 5b df af ef b9 e7 9e 73 ee 6d 60 0a 53 98 c2 14 a6 30 85 29 74 03 d4 89 4a f6 7f 67 4d 4a 8e 0c 4f 97 2e 52 2c 40 20 80 24 f3 84 da 99 01 29 6b 9a c5 de ff 39 48 53 d9 fb d4 2b 37 28 a4 04 34 c1 30 cd dd c7 af f9 47 27 78 c6 64 22 56 82 f7 af fd d6 2c fb Data Ascii: PNGIHDRxx9d6sBIT\|dKIDATx]iumfM+YJ&`c;d3!`7U@l\HbWabZ0")'0 ( c,6`!7o{7L}U4[sm`S0)tJgMJO.R,@ $)k9HS+7(40G'xd"V,
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 56 eb 2e 64 59 ee 28 d5 64 86 1c bd 6a c4 73 18 df 74 f9 ab 26 c4 2c 4b a7 b5 4b e1 12 ba ec 6a 54 2c a2 09 b1 04 89 24 79 e4 37 80 26 68 66 4a d7 ee d8 f5 83 0d 5d 5d 42 75 7f 99 d4 0a cd c8 55 35 7a 23 6a cf 55 a8 f3 5c 6b 82 a6 67 0c ed 8e 0f 1e de 70 53 b8 c2 d4 41 ad b3 41 65 61 40 24 72 55 20 d2 7d 34 88 0f 13 82 06 7a 2c ed ce 9d 9b d6 5f db 5e ab a2 41 29 c1 92 65 c0 e0 b6 00 88 48 ae 9a b9 97 94 3e ac 82 28 9b 4d e9 77 ed dc b4 be e3 0e 0a c5 22 ba 64 a7 6c b7 98 0e ce b9 0d 02 f7 54 b7 40 10 0d 64 53 fa 9a 9d 9b d6 77 d4 d5 98 ac 39 b8 4d a7 84 aa d1 2b 0b 85 89 e1 bb 4d db 14 ec 47 41 34 98 4d e9 ab df dd b8 ae 63 23 39 39 04 b7 e9 94 88 44 6e 9d 3c 44 84 e2 f0 51 48 b7 26 b6 5a 11 04 d1 e0 40 da 5c fb ee c6 75 1d 99 93 bb 6f 8b 56 e0 71 52 45 Data Ascii: V.dY(djst&,KKjT,$y7&hfJ]]BuU5z#jU\kgpSAAea@$rU }4z,_^A)eH>(Mw"dlT@dSw9M+MGA4Mc#99Dn<DQH&Z@\uoVqRE
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 98 33 07 62 da 8c aa fa b8 f4 5d 08 50 b6 17 7a 6f 1f e8 78 01 63 e1 62 58 4b 97 a1 f0 3f bf c6 d8 23 f7 83 a5 ee 89 ee 52 7b 5b d5 db e8 52 04 87 05 d8 73 28 98 04 38 0c c8 aa 43 cb 4b c2 4c ad 8c 4e e6 1c 5c 09 66 f0 e1 bd c8 5c 7d 1b d2 67 9d 03 ed b8 39 5e ff b9 4d ce e8 f6 c9 66 48 90 65 41 9f 37 1f da b4 e9 30 4e 5c 82 91 35 5f 87 74 ec 32 c9 0d cb 68 56 7c 04 72 2b a0 f9 9e 27 bb 64 c4 1a cf 42 cc a4 29 1d 21 c9 5d 26 95 48 3a bc 17 3d 37 ad 45 e6 fc 8b 3c 72 a5 04 b8 e2 29 17 02 a4 eb 20 c3 f0 3e ba ee 29 56 95 73 bb eb 82 d2 69 98 27 2f 41 ff 3d 0f 81 52 06 aa 0e 2a 9f 50 77 b3 66 45 ec ff 9a 7c 82 08 26 91 1f 29 e2 ad 81 89 08 ac 38 fe 3a 39 23 b8 5e c7 1d d9 8f cc d5 b7 22 bd f2 6c 88 6c 6f f5 2b 01 84 00 09 01 77 ff 3e d8 6f ee 80 7b f0 63 b0 Data Ascii: 3b]PzoxcbXK?#R{[Rs(8CKLN\f\}g9^MfHeA70N\5_t2hV\|r+'dB)!]&H:=7E<r) >)Vsi'/A=R*PwfE\|&)8:9#^"llo+w>o{c
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 3c 08 df c9 2f 25 d8 29 40 1e dc 05 f3 f7 57 a2 f7 c6 ef c3 58 78 c2 04 25 4a 8e 0c 23 f7 d8 83 a0 9e 7e 94 3a 97 87 0f c2 ba f0 36 64 fe 68 a5 e7 c4 08 28 93 48 d3 21 ad 34 0a 3f 7b cc f3 4c d5 43 77 96 c1 31 f9 83 c3 dc 4c 83 b4 94 e9 43 ee e1 fb 60 9c 74 32 cc 93 4f 29 5f 90 5e 18 4e f6 2f ae 42 e6 c2 cf 63 f4 3f 7e 06 fb a5 67 e1 be f5 22 78 74 04 62 c1 72 58 9f 5c 85 d4 85 77 c2 5c b6 a2 5a 2c 03 e3 0f c1 f0 fd f7 42 8e e5 cb e2 b9 e8 c0 f8 c4 1f c0 98 3b 17 48 a5 9b 87 04 d5 42 d3 bc 07 a8 d1 fc d9 b2 3f e2 63 5f ad 3f 78 dc 18 a1 a0 30 21 00 61 60 f8 f6 9b d0 ff 9d 0d 30 e6 cd f7 7e af 50 70 c4 ac e3 d0 77 d5 b5 c0 df 5e 5f 73 4a 11 03 ae f4 14 aa 5a 72 99 31 f2 d0 f7 60 6f 7d 0e 34 38 bb 9c 7e ec 18 ac 8b ff 14 c6 a2 13 ab 35 ed 76 d1 45 72 81 a4 Data Ascii: </%)@WXx%J#~:6dh(H!4?{LCw1LC`t2O)_^N/Bc?~g"xtbrX\w\Z,B;HB?c_?x0!a`0~Ppw^_sJZr1`o}48~5vEr
2024-05-27 22:43:40 UTC	240	IN	Data Raw: 31 5c 2a 40 a5 86 5c 71 5f 0e 33 72 ae fc f9 98 94 1b 3e fb 8b 57 86 c2 37 ae 39 62 93 a4 5b 3e f3 87 4b b3 9a b8 46 48 fa 2b 93 a8 df 28 bd 33 23 ae 0a 7d 70 c5 5f 6f cb 7f 3b 66 4b d5 09 d9 e7 96 e1 00 28 b2 3c ec 30 3d 3a 5a 74 d6 af 7a f1 b5 b7 a3 35 b2 39 62 ed ef 67 2e 38 73 9a e9 e0 cc ac 46 cb 00 9c 4c c0 34 00 6a df dd 06 00 60 10 97 62 2c 22 96 ee e7 8e 96 9d d1 ba 2b b9 f4 d2 4e c9 c0 21 10 7e 3b 26 8b 3b 46 a0 6d bd e8 f9 5f 29 55 ac 2a d1 91 15 cd bf 7c f1 5c 23 3d 52 18 d4 81 34 38 d0 ab b3 c2 81 d9 3f 62 a9 f4 43 84 2a 4a 65 44 cc de 0a 52 4a ef ad 75 44 5c 74 39 9f 73 f5 c3 97 bf fc 4a a7 36 29 4f 61 0a 53 98 c2 14 a6 30 85 0e e3 7f 01 8d 26 1e b5 5e 9c cb 8e 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 1\@\q_3r>W79b[>KFH+(3#}p_o;fK(<0=:Ztz59bg.8sFL4j`b,"+N!~;&;Fm_)U\|\#=R48?bC*JeDRJuD\t9sJ6)OaS0&^IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50200	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	798	OUT	GET /UCUgyJDzxd1yRkMkEOgWSSoDkQAowQJ38mgljJHX9y6xODGoglnCV-6LRLsoTIY4Og4Bi3cmX5-hduZsp2vtNQyPpRGVuP-dSc_7StvSfN7FT5N8mkI=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:40 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3024 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:38:04 GMT Expires: Tue, 28 May 2024 21:38:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 3936 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0b 65 49 44 41 54 78 01 ed 9d 7f 4c 95 d7 19 c7 9f 7b 2f 20 15 28 68 43 05 dc 2c 54 c5 64 12 6d 31 6a 32 6b c1 6c d3 25 b2 9a f4 8f aa 9b 62 b7 4c 47 dd 8f a4 5a bb fe b1 c2 e4 af 4e b1 4b b6 ce 99 d1 65 29 d6 49 9b cc 64 0b 24 a3 5b a7 54 d9 a2 1d 4c 8d 76 29 da 8a 1b 8a 42 a2 20 3f e5 c7 bd 3d df 97 de e6 16 b8 70 ef 7b 9e f3 9e f3 de de 4f 42 a4 70 63 e3 fd dc e7 fc 7a 9e f3 bc 9e 80 80 e2 c4 2c 5e 8a 13 d3 c4 05 c7 38 09 14 63 dc 1c e8 a4 96 db 1f 50 6b cf 35 ea e8 eb a2 d6 ee b6 f1 9f f7 77 7e ee 75 Data Ascii: PNGIHDRxx9d6pHYssRGBgAMAaeIDATxL{/ (hC,Tdm1j2kl%bLGZNKe)Id$[TLv)B ?=p{OBpcz,^8cPk5w~u
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: ba d0 22 58 36 7a b7 2e 29 21 27 c1 87 49 e6 03 a5 f3 8c 5d 8b e0 de 61 b9 74 20 8a d2 9d 46 46 70 87 c6 e4 83 16 c1 57 3e bd 4e 62 07 2c ae 74 94 c7 e0 6a 8b 5d 90 80 40 65 a8 0e 5c 77 f9 0c 77 8a 74 b0 44 42 30 e8 1d e9 23 1d 68 11 2c 73 7f 28 5b 53 71 5b b6 a6 0f 96 2c 5a d2 85 d6 7d 9f cc 02 b2 43 24 c3 b3 ff f6 4d 1a bd da 4a fe be 3e f1 7d 87 f5 b3 31 f1 67 c2 c2 7c 7a e0 e9 2d a4 03 dc 74 cc 99 ed fc 87 44 8b 60 ce 2d 4e a0 bf 97 46 ce 37 d3 f0 85 16 1a 11 5f 10 19 e8 eb 9d f2 b5 49 cb 57 68 13 8c 43 13 1d b8 f2 7e 30 a4 0e 35 d4 d3 fd a6 46 21 b5 99 9c a0 55 62 61 08 52 67 e9 29 a9 75 95 60 c8 ec af 79 dd 31 a9 a1 c8 de 3b d6 31 3c 03 57 08 1e 7a a7 9e 06 6a aa 69 ec d6 4d d2 85 4c e6 4b d7 f0 0c 8c 16 6c 82 d8 20 b8 6d 61 17 15 e9 cc 48 31 52 f0 Data Ascii: "X6z.)!'I]at FFpW>Nb,tj]@e\wwtDB0#h,s([Sq[,Z}C$MJ>}1g\|z-tD`-NF7_IWhC~05F!UbaRg)u`y1;1<WzjiMLKl maH1R
2024-05-27 22:43:40 UTC	775	IN	Data Raw: 63 ab 94 38 4d 09 6c 24 60 45 8d 06 e1 4e 60 8a 64 6f 76 04 8b 2b 1b 28 c9 07 87 de 31 b2 0b 86 6a d5 ad 0f 83 e8 96 ec 49 7e 44 44 f0 53 a4 02 25 82 b1 0a 96 8d 62 e0 64 f3 52 9d 92 bd 8f 96 93 2a 7c 3f 17 90 02 b0 a2 c6 6d 7f 59 10 c9 1e 22 47 fa 50 2e 9a e7 a5 ac 74 2f 35 b5 8e 11 27 17 ef 3d 41 f8 47 2c 7f f0 cc a4 df 21 7a bd 5f f9 3d a9 42 59 c9 0e 57 14 03 2c ba 62 75 b8 56 19 bd 80 f5 a0 63 22 78 c0 d5 9d 1f 6c 23 2e 70 14 9a 5e 79 70 52 9b 60 15 a8 3a 0c d9 f6 a5 57 68 fb fc 57 ac ef 3d a9 cb c8 b7 5a ed c3 bf 94 0d d1 c0 3b f7 21 91 fc 16 67 cc ff bd 44 1c f8 ef de b1 1e c1 63 35 fa 5e 18 f9 6d 08 3b 38 31 5c 27 ac 3c 13 d5 b1 a3 1d 94 46 30 c0 96 e7 4e d9 76 f2 33 b7 13 86 e0 f4 ca 03 6a a3 79 b4 9b fe fa ee 09 3a d8 bc 99 b8 d9 5e f0 2f 7a f6 Data Ascii: c8Ml$`EN`dov+(1jI~DDS%bdR*\|?mY"GP.t/5'=AG,!z_=BYW,buVc"xl#.p^ypR`:WhW=Z;!gDc5^m;81\'<F0Nv3jy:^/z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50202	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	785	OUT	GET /Iyn9yCCDxgHqvjX5jMZ_looun-kL0Sk60FraoMU5-JQG2WstyK6QNzj3JguQRbvQmWqVBSoO88Oh1kGQAoXMPkIIEF0pQrvXL52XXw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:40 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 909 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:54:32 GMT Expires: Tue, 28 May 2024 18:54:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13748 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5a 50 4c 54 45 47 70 4c fb bc 05 42 85 f5 eb 43 35 42 85 f4 ea 43 35 3c 93 b7 8f 83 98 42 85 f5 42 85 f5 34 a8 53 ea 43 35 fb bc 04 fc bd 05 fb bc 05 34 a8 53 fb bc 05 42 85 f4 fb bd 05 fb bc 05 34 a8 53 42 85 f4 fb bc 04 ea 43 35 42 85 f4 fb bc 05 fb bc 05 42 85 f4 ea 43 35 34 a8 53 50 e7 68 62 00 00 00 1a 74 52 4e 53 00 65 76 4e a1 88 1e 0a c9 4d c4 d7 7d 3f f1 f3 bd f8 9e d5 57 ef 24 e4 e6 4c b9 c3 9d 59 00 00 02 b9 49 44 41 54 68 81 ed 99 e9 92 e2 20 10 80 35 17 39 46 33 de 16 49 de ff 35 37 8c a3 01 e5 6c e8 50 bb cb f7 37 65 7d d2 07 34 c9 66 93 48 24 12 ff 12 55 93 15 f5 65 98 b9 d4 45 d6 54 eb 58 Data Ascii: PNGIHDRxxsBITOZPLTEGpLBC5BC5<BB4SC54SB4SBC5BBC54SPhbtRNSevNM}?W$LYIDATh 59F3I57lP7e}4fH$UeETX
2024-05-27 22:43:40 UTC	50	IN	Data Raw: 5c d1 a6 cc 78 73 75 bc 9b 44 bc bb 53 bc db e2 26 da fd 98 11 e9 8d 40 22 91 48 ac c1 1f a3 d5 e5 dc f4 13 1d e1 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: \xsuDS&@"HIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50203	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	551	OUT	GET /AGsg9hOAylBkWuFrfSgOt8psYWcr3b-vZcmIVk0ocwx7KAVSu--tg1ZIAUSL7nAbORTHI5eZaweHYVPMJu5ac8Xw7GP_WiCs1w60=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:40 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3727 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:34:04 GMT Expires: Tue, 28 May 2024 22:34:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 576 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0e 46 49 44 41 54 78 9c ed 9d 69 90 5c d5 75 80 bf fb fa 75 4f cf d6 b3 4f 8f 76 45 cb 48 62 09 65 23 99 18 83 62 30 74 23 13 c7 76 d5 48 76 08 65 e2 92 4d 12 12 11 82 29 9c 4a 29 72 c2 62 bb c0 36 9b 0d 48 0a 0e 2e 12 c7 b2 46 94 8d 5d 42 3d 84 41 12 21 80 06 27 01 1b c9 5a 4c ac 10 a1 11 91 40 8b 25 34 33 dd f7 e4 c7 68 c8 20 f5 f6 f6 37 e2 7d bf a4 f7 de 3d e7 74 9f 3e f3 ee 3d f7 dc 7b 21 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 62 22 a0 82 36 c0 32 b7 9d 7f 29 8a 2f 02 1f 01 66 f9 a4 75 2f f0 1c c2 63 ac fa f9 26 9f 74 ba c2 c4 71 f0 ba 2b b3 ec dc 7f 1f 4a cd 0b d4 0e 61 df e1 45 af 2e 6f Data Ascii: PNGIHDRxx9d6sBIT\|dFIDATxi\uuOOvEHbe#b0t#vHveM)J)rb6H.F]B=A!'ZL@%43h 7}=t>={!"""""""""""""""""b"62)/fu/c&tq+JaE.o
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 65 89 96 08 ce c1 1b b2 4b 18 2d bb 71 0f 11 48 d5 42 9d c5 61 93 28 ae 69 1a e2 a2 96 83 76 86 45 95 b8 44 fa 58 e2 ba d4 2a 09 ce c1 c2 0f bd 12 cc 94 56 6b ef 50 11 6e 9b f5 3f de 98 33 8a 47 9f b5 32 c1 38 b8 37 fb 57 40 83 27 b2 c7 86 4d 2d f5 d5 bd 8b b5 e2 f6 ce e3 cc 6e 3c ee 65 a5 48 83 f4 f1 65 cf a4 97 c1 ff 4e 56 6f a6 0d d4 20 60 7a aa 47 04 b6 ef 1b 4d 67 96 23 af 38 71 f1 2b d4 7a ff 4d 8c 00 69 95 e1 6d cf 35 8d 23 80 08 56 f7 e3 b5 73 01 62 06 4c 6a 29 9f a7 ce 2b 1e 9f 7d 90 5a 4b b3 09 b6 89 03 0f f9 a2 69 1c fe 46 f0 fa cc 6c 94 da e3 ab ce dd 83 c5 cb 7b 04 3e 54 93 e7 b9 0f ec f0 e1 d7 f6 1e bd e7 aa 2c db fd 52 e7 6f 04 2b e5 6f 2d f1 d8 b0 a9 58 79 8f 56 3c 3c eb 4d 4c bf 5f 52 8a f5 7e aa f3 cf c1 bd d9 6b b0 9b 6f b6 8b 08 34 26 Data Ascii: eK-qHBa(ivEDX*VkPn?3G287W@'M-n<eHeNVo `zGMg#8q+zMim5#VsbLj)+}ZKiFl{>T,Ro+o-XyV<<ML_R~ko4&
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 5c bb 29 34 c7 d5 a8 0b 11 24 54 ab 22 66 4b ae f8 06 37 c5 1d 2c ea 62 4f cd b1 c6 af e8 c9 85 ee a4 4f 95 e5 51 08 6e 9b e0 22 2c 2c 76 b1 f8 1e 60 b1 7d 33 46 ab 60 03 de e7 40 f2 50 bf fd 63 c1 1a 51 86 56 3e ce 11 f6 84 a2 a7 a2 98 59 ec 72 71 07 0f ac 6e 40 82 b6 5a 48 25 1b 98 6c fc f6 f7 f4 1d 85 f0 a4 08 c7 a1 9e 8c 9d 7c 61 f8 9e 03 e7 1c ba 2d 5d 30 66 04 6a 8b 8c a8 4e 8a 4c d3 17 77 f0 9b e9 03 5e 1b 54 1e 01 14 1d 53 a7 a3 55 21 b4 e7 f3 4e 37 34 7f a9 96 0f 6f f8 f9 fd 05 93 58 0c e5 eb a6 88 a7 73 b8 d8 c5 e2 16 19 da 71 f1 9a 23 44 93 6e 6e c3 8c c7 10 3f 0e a0 b4 49 52 84 e7 93 a9 c4 53 e7 3d 78 e8 13 db 7f af 2d 6f 5e 18 98 2d 02 2f 17 bb 5e a2 93 c5 36 4f ad a9 80 32 4c 9a 9a 5a 42 ed dc 31 e6 68 cd 75 53 33 a9 a3 35 17 1f 57 e2 5a 59 Data Ascii: \)4$T"fK7,bOOQn",,v`}3F`@PcQV>Yrqn@ZH%l\|a-]0fjNLw^TSU!N74oXsq#Dnn?IRS=x-o^-/^6O2LZB1huS35WZY
2024-05-27 22:43:40 UTC	87	IN	Data Raw: 9b 73 95 27 ef 31 5f 3a b7 73 6f 1f 99 ae 94 ba 04 98 01 d4 8c bb 25 45 6c 38 9b af 01 0c 09 6a 0f c8 bf ee 5e 69 ee 2f 72 3f 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 62 42 f1 7f aa fc 2e 2a 6a 73 72 e5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: s'1_:so%El8j^i/r?"""""""""""""""""""""bB.*jsrIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50204	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	551	OUT	GET /HWgUyUNqdsifoczBOT-DYy-hV_ldW-cwWkz3tvlY0eQysaY1ra4D1bkfE-0BVFUlk5wComQdca8g-fwiPcOhdMHoMjqiiNh2TD2b=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:40 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 7652 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:47:38 GMT Expires: Tue, 28 May 2024 18:47:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 14162 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1d 9b 49 44 41 54 78 9c ed 9d 79 b4 64 47 7d df 3f bf ba b7 97 d7 fd d6 79 33 23 0d d2 8c 0c 92 90 00 2b 32 23 61 cc e2 04 08 b6 63 62 16 67 3b 10 0e 0e 09 b1 49 82 1d 08 42 c6 81 83 13 fb 9f 00 8e 41 76 8e e3 1c 93 c4 3e d8 60 73 20 87 cd c6 49 84 10 60 81 40 48 48 9a 45 23 cd 68 34 a3 59 de be f7 76 d7 aa fc 71 bb df eb f7 de ed ee 7b bb 6f bf 11 39 f3 3d a7 67 e9 aa fa d5 ef d6 f7 fe aa 7e f5 ab a5 e1 2a ae e2 2a ae e2 2a ae e2 2a ae e2 2a 32 87 5c 69 05 32 c2 61 13 34 7e 0c b1 a7 41 6e 44 b8 1d 51 b7 ac ae ae 1e 0e 82 70 d2 52 6a 24 97 cf 63 db 36 5a 6b 1a 8d 06 41 10 04 b6 6d 57 2d cb aa 4f 4d 4d 9d Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxydG}?y3#+2#acbg;IBAv>`s I`@HHE#h4Yvq{o9=g~*****2\i2a4~AnDQpRj$c6ZkAmW-OMM
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 9c 37 ef 75 5c e7 1e 2b 5f c4 0d a2 ca 05 f0 42 f0 03 70 3c 68 f8 e0 06 11 f1 61 73 6e 23 02 b6 05 79 0b 4a 05 28 e4 20 67 41 de 66 73 6a 93 94 b8 be 7b 83 d6 b4 4c e0 70 d9 63 ba 18 a4 92 d5 36 3e ff aa 88 fc 41 bf 6a a4 c5 5e 11 5c 3e 39 6f 3e e9 f9 c1 2f eb e6 3c 36 d4 b0 51 87 d5 1a 78 3e f8 1a 82 80 58 2b 36 3b ac d7 52 60 ab 88 e4 f1 12 4c 95 23 b2 25 66 1e bb 13 83 10 dc fe cf 6b 46 7c ae 2d f9 a9 44 88 08 41 10 30 36 36 f6 69 11 79 0f 50 ed 57 9d c4 75 0e bb 02 e0 79 27 17 cc 37 03 cd cd 5e 08 eb 35 58 6f c0 72 35 22 59 35 b5 e8 a5 48 dc 1c b6 d5 4d 1b 03 63 23 30 59 82 e9 31 b6 a6 37 09 e4 24 c6 8e 82 da c0 44 3e e4 f9 e3 2e 92 42 6e 6b 0e 5d 2c 16 4f 8b c8 4f 03 0b fd aa 94 a8 be 61 0a 3f b5 60 5e a3 e1 b3 6e c8 a1 d5 1a cc ae 42 cd 6d 3a 2e ad Data Ascii: 7u\+_Bp<hasn#yJ( gAfsj{Lpc6>Aj^\>9o>/<6Qx>X+6;R`L#%fkF\|-DA066iyPWuy'7^5Xor5"Y5HMc#0Y17$D>.Bnk],OOa?`^nBm:.
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 88 31 a0 b5 61 74 44 71 60 5c 71 68 9f cd d4 b8 a2 90 93 d4 87 cb 86 05 11 b8 b4 12 ed e6 2c 17 32 f4 d8 9b 53 a7 11 5b 33 62 e9 e4 a7 2e b4 c6 75 dd db 80 a3 44 47 5b bb 22 d1 30 f0 b9 87 cd a7 d7 5d de 11 a7 85 08 d4 1a 9a b3 33 3e 33 2b 21 5e 73 1d 38 cd 34 43 9b c8 ea 45 a0 60 c3 91 83 36 87 0f e6 28 15 65 73 17 c6 4e 64 3a f6 76 c8 b8 39 51 30 50 cc c1 4b 0e 77 d8 54 90 b4 8e 98 72 45 cb 70 f3 84 83 9d 62 93 80 88 30 32 32 f2 17 22 f2 b6 9e 79 7b 65 78 72 d1 1c 7e f0 69 7e e8 69 f6 63 b6 0a b4 2c f2 fc 6c c0 93 97 3d fc 20 1a 57 d3 4f 01 76 ff 3f d4 50 c8 09 87 0f 58 bc f0 48 9e bc c5 b6 f9 63 1a 2b ca 82 60 88 ea bf 61 3f 5c 33 91 ed f1 1a 63 60 a2 10 f2 82 31 37 15 c1 5a eb f5 72 b9 7c bb 88 3c db 2d 6f 4f 27 eb e1 73 fc 92 26 22 17 a2 87 11 81 86 Data Ascii: 1atDq`\qh,2S[3b.uDG["0]3>3+!^s84CE`6(esNd:v9Q0PKwTrEpb022"y{exr~i~ic,l= WOv?PXHc+`a?\3c`17Zr\|<-oO's&"
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 4c c7 a5 c5 12 bc 56 0f 73 92 4a 93 ec 90 74 79 b1 6b 96 1d d3 a7 53 97 02 16 d7 a2 f9 7c 26 8f 14 23 a4 53 10 66 bd 01 4f 5e 06 d7 cb 7e 05 ae 05 11 f0 42 93 8f 4b eb e0 64 45 fe a7 21 59 63 67 81 34 c4 26 25 b7 85 9c 05 c7 cf 79 d4 9c 0c e6 c7 29 db 43 49 64 c1 4f 5c 8e 8e c5 40 c2 71 39 61 3d 22 50 77 e0 c2 5a 29 be fe b8 2f 03 f2 db 6a e8 77 01 bf 13 fa 91 97 a8 9b ef 90 21 ea 2e 0d 4f 5e f0 ba cf eb 7b 8b ea 2b 6f eb ea 88 f3 8b d1 27 34 0c 1c 37 87 56 04 0f ce ce 81 1b c4 af 1b c5 7e 1b 6a 41 7a 28 d0 89 94 9d db 63 07 45 22 11 09 c6 6a 4b c1 d3 73 01 87 a6 2d 0e ed b3 fb bb be 38 61 d7 1c 87 d6 1a ee 52 05 96 2b d1 95 4e 07 27 a3 de 65 d7 b5 8b 3d 84 2a 89 9c b7 b9 b5 c8 5b 57 0a 74 18 7f 6f 66 2c c1 3a 74 b1 54 39 85 fa 6d ba 65 d4 a5 67 e5 88 b4 Data Ascii: LVsJtykS\|&#SfO^~BKdE!Ycg4&%y)CIdO\@q9a="PwZ)/jw!.O^{+o'47V~jAz(cE"jKs-8aR+N'e=*[Wtof,:tT9meg
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 14 6c e1 87 67 3d 1e 3b e3 36 a7 76 3d 1f 21 35 ba fa 08 bb 94 8a 4e 55 3e 7c da c5 84 21 96 e2 9b 40 d8 49 44 d7 ce e7 2b ef 95 af 19 63 c2 c0 8b 7e 35 d2 90 ed 9b d9 5a 21 e9 b6 b3 43 44 a8 6d 34 d8 58 a9 c6 8f c7 89 2a 1a 20 b9 e9 61 3f 33 1f f0 ed c7 1b ac 6e 84 58 56 8f 3d cf 59 b4 51 6c 5b 44 97 df 3c 70 ac 41 c3 33 88 09 f5 33 77 c9 97 bb 89 e9 35 ba 3c 6a 17 c6 4e 6d ee 38 68 56 9a e6 1e 8e 9e f7 76 24 68 0c 11 61 6d a9 4a bd e6 44 8b 14 64 67 b5 dd 64 b4 3f 53 ce 82 d5 9a e6 6f 4e 3a 3c f5 ac 8f 17 98 d8 4d 74 69 c9 4d ea 58 89 40 b5 a1 f9 ce 89 06 2b 55 8d 65 09 b9 91 89 33 67 88 8f 60 b5 d0 db 7d 50 fc 89 49 78 41 65 d6 7b b7 da 21 18 56 e7 d6 f1 92 cc c3 13 b0 df 4b b5 38 dd 5b e7 71 1f 3b ef f2 bd 27 1c e6 56 03 72 f6 f6 65 be 34 48 ea 70 5a Data Ascii: lg=;6v=!5NU>\|!@ID+c~5Z!CDm4X* a?3nXV=YQl[D<pA33w5<jNm8hVv$hamJDdgd?SoN:<MtiMX@+Ue3g`}PIxAe{!VK8[q;'Vre4HpZ
2024-05-27 22:43:40 UTC	1234	IN	Data Raw: ee c2 12 5e 65 b1 52 3e 78 f4 6d 64 40 6e 4b 7c 66 f8 89 0f 98 3b dc d9 ef 3c ac 8a d7 64 2d 7a 1b fa 79 0f da 09 31 06 8c 36 94 c6 0a 8c ef 1b 65 a4 5c 44 1b 4d fb b2 5e 12 39 a9 f4 8a 49 14 25 78 cd 4d 85 b5 4a 03 dc 25 4a 87 5f f9 9a e3 bf 2b df ea a1 46 62 64 ce c2 d1 bb cd 5b 9c f9 47 3e 23 b9 89 52 96 e2 fb ed b9 bb 12 12 6d dd 64 74 62 84 d1 89 12 76 31 87 ea 70 30 3d ab 65 c5 d6 fa 6f e0 87 ac 2f 6d 50 ab b8 68 1d 82 bf de 28 5c f3 b2 7f 7e f2 1e f9 5c f7 9a d2 61 28 66 76 e7 fb cd 9b aa 73 0f 7c d9 1a b9 16 36 f7 36 a4 c3 20 43 71 da 0d e7 a6 b9 1f 76 a4 94 67 6c b2 c4 c8 e8 48 9b 2c 93 09 b9 d2 bc be c2 77 03 aa 6b 55 6a 15 87 c0 d7 08 06 ed 2e 50 3c f4 aa b7 66 4d 2e 0c b1 1f 7d d1 87 cd 51 b9 f8 83 fb c4 1e 9f 44 72 f4 a2 2c 2b df 3b 29 b9 71 Data Ascii: ^eR>xmd@nK\|f;<d-zy16e\DM^9I%xMJ%J_+Fbd[G>#Rmdtbv1p0=eo/mPh(\~\a(fvs\|66 CqvglH,wkUj.P<fM.}QDr,+;)q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50206	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	553	OUT	GET /TVNK8r0QEiNhXwfjVlziAqFcBQPkuPHKyilz6atnzslwMho1no8n4EJV30tOT0T6y3RXrmCzyiNd74HSYkJPsAk4545WWBxBZgoPxg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:40 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 9615 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:51:45 GMT Expires: Tue, 28 May 2024 18:51:45 GMT Cache-Control: public, max-age=86400, no-transform Age: 13915 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ed 9d 79 9c 1e 55 95 f7 bf e7 56 d5 b3 f5 be a4 3b fb 9e 40 42 12 42 22 01 e2 04 07 04 75 14 87 77 1c 41 71 1c 17 44 47 1d 46 5f 1c 71 43 47 50 47 40 71 46 7c 55 c6 99 41 11 95 91 d1 11 41 96 61 1b 90 7d df 92 10 92 40 42 16 b2 f4 be 3d 6b 55 dd fb fe 51 f5 2c dd fd 74 a7 3b bd 05 26 bf cf e7 e9 ea a7 6e 2d b7 ee af ce b9 e7 9e 73 ee 7d e0 28 8e e2 28 8e e2 28 8e e2 28 8e e2 28 8e 62 2c 30 9f 3e ed d8 4d e7 9e bc 72 aa eb 31 99 b0 a7 ba 02 93 8a 6c e7 77 33 b9 5c 14 78 db 54 57 65 b2 a0 a6 ba 02 93 05 ff 6f d6 6d 40 eb b3 b4 d1 67 be 78 ce 8a d3 a7 ba 3e 93 85 ff 35 04 4b 2e 77 05 Data Ascii: PNGIHDRxx9d6sBIT\|d IDATxyUV;@BB"uwAqDGF_qCGPG@qF\|UAAa}@B=kUQ,t;&n-s}(((((b,0>Mr1lw3\xTWeom@gx>5K.w
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: aa af f4 1c 75 7f fa bd 17 6c ae 9d 71 dc 11 49 f4 11 49 70 ee 17 df 58 a9 da 3b df 4d 6f e7 df a8 b6 dd 73 a5 b7 bd 44 ca 42 98 50 b2 fc 24 26 56 87 df b0 18 bf 61 2e d4 ce c4 af ae 45 57 56 62 12 15 98 78 1c 1d 89 83 e3 04 04 03 a2 03 82 55 36 8d 64 d2 48 b2 0f d5 97 44 f5 74 22 1d af 61 75 bc 8a d5 ba 15 c9 74 80 55 1d 10 2e 25 03 8e 3c d1 d5 d3 d0 d3 e6 ee 34 55 75 ff e2 d5 37 dc 1e 3f ff 1b 9b 26 b9 a9 0e 89 23 8a e0 f4 5d d7 36 d9 2f 6f 7d 8f 6a 3f f0 61 e9 6e 3d 59 3a f7 13 f4 a9 f9 c6 0d fb 47 b7 1b 1d af c1 9d 7b 12 7a ce 4a 74 f3 2c fc ba 06 74 43 13 a6 a6 11 89 25 50 4a 21 22 28 04 11 19 d4 65 1a 03 c6 18 34 26 d8 6a 8d c9 a4 90 ae 36 54 47 0b 56 7b 1b 72 70 37 d6 ae 17 70 76 3d 84 4a 77 81 d3 18 74 0b a5 9a 03 83 a9 9f 85 ae 6e 7c 44 9a 66 fd Data Ascii: ulqIIpX;MosDBP$&Va.EWVbxU6dHDt"autU.%<4Uu7?&#]6/o}j?an=Y:G{zJt,tC%PJ!"(e4&j6TGV{rp7pv=Jwtn\|Df
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: f6 27 97 ac 9e a8 fb 4f 08 c1 e9 bb 7f d6 c4 ab 2f 7d 8e de b6 35 79 e3 02 a3 31 24 49 9d f5 59 ec 55 eb 11 6f 74 de 3b 83 42 75 ef c4 d9 71 27 d1 4d 3f 26 f2 f2 4d 48 eb 56 72 ae 57 20 b9 40 f6 11 46 b4 d2 3e f6 da d3 48 fe c5 25 18 7f 67 18 85 02 8c 40 b2 73 9d b5 67 fb e7 dd 3b ff b5 61 22 ee 3d 21 2a fa d2 75 4b 3e 68 b5 1f b8 48 7a 5a 6d 54 f8 0e 65 0e 90 3d ed 42 fc 33 de 8b 65 8f ce b6 30 00 5e 1f d1 a7 2f c3 de fa 35 54 e7 c3 58 07 6f 43 b5 6f a3 b7 62 15 26 5a 87 12 c1 10 0e 0b 26 c1 a5 39 d4 cb 33 54 17 a1 44 d0 33 17 62 d2 95 38 5b 7f 13 84 1e 45 82 a4 03 a7 72 a1 64 bc 1d df b8 eb 89 e7 c6 bb 9e e3 2e c1 99 6b bf b6 52 b5 ed fb 88 b4 ef 2a f6 bb 6e 12 f7 98 b7 e1 be e5 6c ec 68 ec 30 1a 5f a1 3a 37 61 b5 3e 1a bc 92 76 35 d8 09 ac d4 7d 44 5f Data Ascii: 'O/}5y1$IYUot;Buq'M?&MHVrW @F>H%g@sg;a"=!uK>hHzZmTe=B3e0^/5TXoCob&Z&93TD3b8[Erd.kRnlh0_:7a>v5}D_
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 5e c0 4f 34 9c 45 69 54 c8 ef c5 cc 5b 8d 9e 36 b3 e4 8d 1c 07 1c b2 df 85 c3 97 de 11 1c e3 a6 8a e4 ce 58 42 cc 12 94 b2 b0 6c 1b cb b2 b1 6c 0b 65 db 28 a5 0a d3 66 44 04 a5 14 99 4c 86 be be be 21 2c 6a 8d 6e 9a 85 5e b4 16 dc bd e1 4e 81 5c 06 6f de c2 b7 8f a0 f2 c3 62 cc 04 9b 8e 96 8f 15 1a c8 68 4c ac 1e dd 3c 1b a9 a8 99 00 87 7f fe 3e 63 20 77 24 75 1a 78 8c 97 22 53 b7 80 17 d6 ff 25 7d 25 e4 da b6 8d ed 04 1f cb b2 0b 52 2b 2a 54 d9 f9 f9 51 21 c9 65 d5 b5 31 48 55 1d 7a fa 7c 4c b4 b9 44 28 34 a6 ab fd 63 87 ae ec f0 18 33 c1 ea c0 cb ab c1 0a da 57 7b 98 69 4b 31 75 75 c8 84 64 44 96 f3 56 85 fb c7 72 cd e1 e0 25 49 35 2c 65 f3 c9 ef a5 6f c6 12 e2 05 c9 0d 09 0e 25 38 2f b9 56 b8 2d 95 62 08 0c b0 5c 2e 47 2a 95 1a 44 b2 20 98 fa 3a f4 f4 Data Ascii: ^O4EiT[6XBlle(fDL!,jn^N\obhL<>c w$ux"S%}%R+TQ!e1HUz\|LD(4c3W{iK1uudDVr%I5,eo%8/V-b\.GD :
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 65 9f c6 37 9f c2 70 0c e0 14 6e 1e 89 41 36 13 aa 90 50 9d b8 93 b8 a2 df b0 2a 76 ac e4 0e 05 01 63 51 fd c4 6f d1 76 94 83 27 bf 0b 3f 12 47 fc 60 d5 5a 3b 24 99 92 61 d3 50 92 5b 54 cf 61 fb 79 2e 78 39 0a 3d a7 26 68 63 53 1c 1a 1a 63 72 c0 16 51 ea 87 6b ee d8 f5 ef 87 aa ed 88 ac e8 d5 bf d9 f2 e3 e6 55 0b 4f 42 a9 ef 23 b2 d9 04 77 c2 c4 ab 28 04 00 8c 20 b9 14 e4 32 13 a7 ad 4b af 3b 5e e4 8e e6 1a 85 ec 4e 0b f1 34 b5 8f fd 9a e6 27 ee 44 32 29 7c 63 30 f9 b9 51 e1 b1 a5 52 3c 2c b9 c1 5e 54 36 83 e4 92 f4 f7 2d 54 e5 8d 2e 03 6c 54 96 b9 6a c5 bc ba 75 23 21 17 46 31 0e 9e 71 e9 ed 29 e0 0b 3b 3e b4 e1 87 9d bd ad 97 89 d1 27 f9 91 f8 32 3b bf 34 81 28 c8 f6 22 99 41 56 df f8 21 df ff 0c 7b c0 50 45 43 91 3e ca eb e4 a1 6c 24 9b a3 f6 d1 5f a2 Data Ascii: e7pnA6P*vcQov'?G`Z;$aP[Tay.x9=&hcScrQkUOB#w( 2K;^N4'D2)\|c0QR<,^T6-T.lTju#!F1q);>'2;4("AV!{PEC>l$_
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: ff f7 2f 2f 7e f2 c7 05 dd 80 15 6a 0a ab 7f 6e 74 b9 e1 59 09 0a 65 4a 61 b7 1e c0 7e f6 16 70 66 17 9e c6 8f 54 12 d9 fc 87 df cd 3d e1 5d 63 ee df c6 65 02 78 e6 b8 37 f7 f9 c7 9e fc 2c 7e 7e 15 37 1b 79 f5 4e 64 f7 2b 98 74 b2 30 d3 fd 50 9f a1 31 84 e3 3f 74 5a e4 87 24 82 14 d2 57 f3 d2 10 58 ba fd a7 91 94 6e f3 7d e8 70 e5 fd 87 5e 83 cb ca cd 62 18 0a 85 32 11 54 26 85 b3 eb 65 d4 de 47 8b 3f ee e1 e5 70 8f 59 f7 70 ea 94 73 87 9f 7b 3a 42 8c 0b c1 95 e7 5f 76 40 7b fe b7 4c 24 4e a1 33 73 16 61 3f f6 3b 54 cb be f1 51 d3 12 fe 19 22 a3 a3 10 72 23 ec 5b f3 35 29 43 cc c0 c9 61 87 4b ee 50 53 54 86 7c 84 d2 21 99 52 d8 2d af e1 3c f6 9f 10 29 4a af 8e 54 22 c9 ec e5 d5 1f bf bc 65 ec 8d 36 5e 8b b0 88 e0 9b cc 8b b9 a6 f9 fb 0b b3 f9 ed 18 b2 f5 Data Ascii: //~jntYeJa~pfT=]cex7,~~7yNd+t0P1?tZ$WXn}p^b2T&eG?pYps{:B_v@{L$N3sa?;TQ"r#[5)CaKPST\|!R-<)JT"e6^
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 17 d9 fb 3c 38 75 05 72 0d 90 89 d5 be ba f3 67 0f 1e 77 9c c4 27 25 81 7c c2 25 38 8f 19 15 0b ba 5a 3f fb ed 37 67 23 d5 7b 4d 21 39 40 c0 a9 45 f6 6d 21 fa d3 4b b0 1f fa 43 c9 38 79 40 e3 86 aa b9 a1 3a 41 5d 22 42 44 7c 6c 4b 21 f9 38 6c b8 38 99 65 a9 42 0a 4d 41 4d 97 60 22 c8 a5 64 9c 1b 7f e8 16 12 bf f8 2a b2 ef a5 50 2d 17 ab 9f 8d 54 ed e9 f9 f2 0f 4e 9a 2c 72 61 12 25 38 8f 3d 9b ee 9f d5 f0 cf 5f 7c 38 9a ed 9d a7 28 71 5d fa 39 88 81 77 e6 85 78 1b fe 1c 5d d7 14 4c 28 0f 27 75 e5 b7 c1 9c 65 4d 4f 77 0f e9 74 1a 83 09 c3 76 56 61 89 23 25 52 5c da 68 20 19 8c 37 b9 0a 31 3e 56 67 0b b1 87 6e 25 72 ef 0f 20 6b 15 ad 65 0c 1a 45 3a 56 f3 6a f2 cb 3f 38 a9 f9 98 f5 e3 12 06 1c 29 26 9d 60 80 7d 6d 9b 6b 62 5f fe f8 93 d5 b9 be 25 96 97 a5 90 Data Ascii: <8urgw'%\|%8Z?7g#{M!9@Em!KC8y@:A]"BD\|lK!8l8eBMAM`"d*P-TN,ra%8=_\|8(q]9wx]L('ueMOwtvVa#%R\h 71>Vgn%r keE:Vj?8)&`}mkb_%
2024-05-27 22:43:40 UTC	417	IN	Data Raw: b0 f1 b1 30 45 a9 1c a4 6a 29 91 70 13 38 4f 00 0f 0b cf 08 fe b4 f9 98 99 0b 1f 32 95 75 ff a6 76 ed bc 27 59 57 d5 97 fa d3 77 a4 16 9f 7a ee 11 2d ad e5 f0 ba 24 78 28 b4 fc e4 aa 4a cb ce ac b0 33 bd 67 f8 07 f6 7e 9a 64 f7 0c c9 24 21 db 17 ac da ea ba 81 6a 77 1c 4c 24 86 89 55 e0 45 2b 70 2b 6b f6 d9 4d b3 af 51 91 c4 dd 9e 17 db d4 f4 e9 2f 8d 79 56 df 91 82 37 14 c1 a5 30 ef 64 19 d5 f3 6f 44 d4 ca 82 04 0b 3c d6 9a c5 ce e7 74 19 8d 18 7f b3 b4 1c 3c 6f ed 0b 87 bf 54 d1 91 8c 49 0b 17 4e 36 e4 76 b6 f8 c6 7a dc 60 05 d3 0f 43 4e 2d 0c 96 12 2c a5 b0 2c db 88 15 7d ec 8d 4a 2e bc 81 09 06 b0 e2 55 97 08 6c 1c b4 56 56 11 9b 2a a2 f6 d7 26 b7 56 93 8b 37 34 c1 72 dd 73 2d 1e e6 16 20 5b a6 38 a7 44 dd 7a ec 2d 3b f6 4f 76 bd 26 13 6f 68 82 01 ec Data Ascii: 0Ej)p8O2uv'YWwz-$x(J3g~d$!jwL$UE+p+kMQ/yV70doD<t<oTIN6vz`CN-,,}J.UlVV*&V74rs- [8Dz-;Ov&oh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50205	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	567	OUT	GET /QuPkNiIrKnxQiue2xno3-rcRB6yg-hk6W5XISyjaY1EJ4hNq-_ZHCcYPdVDnI9E3xrQWrWX-VZI5kHRdO4C6RgvXPBvJN3s_ee9_gXR6gZrmjmXel2Su=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:40 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 10051 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:38:38 GMT Expires: Tue, 28 May 2024 22:38:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 302 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 27 0a 49 44 41 54 78 9c ed 7d 77 b8 1e 47 75 f7 ef 9c 99 dd 7d db ed 4d 5d b2 24 77 b9 f7 10 30 98 18 30 3c 89 43 08 10 20 38 04 42 0b c6 c6 14 d3 eb 07 24 24 f9 02 26 84 90 60 8a 6d 20 98 66 6c 63 6c 02 18 3e 3b 84 66 aa 2d 82 8b 6c c9 92 55 af 6f 7b cb b6 99 73 be 3f de f7 5e 5d c9 32 f7 4a ba 4d 42 bf e7 d9 67 f7 dd 77 77 76 77 7e 33 67 ce 9c 39 67 86 54 15 47 70 f8 82 e7 fb 05 8e 60 76 71 84 e0 c3 1c 47 08 3e cc 71 84 e0 c3 1c 76 aa 0b 9e f7 e5 c7 9e 23 06 24 06 1e 79 04 28 46 40 d1 03 0f d0 c3 e8 1e 6d 47 c1 75 e2 d8 2d 40 7c 16 70 cd 6d 00 6e 01 96 be 60 23 ce 39 ab 17 e1 58 05 e4 81 91 1e 60 f3 c8 43 68 db 15 61 d9 79 4b b0 7c 08 f8 d8 7a 20 fb Data Ascii: PNGIHDRxx9d6'IDATx}wGu}M]$w00<C 8B$$&`m flcl>;f-lUo{s?^]2JMBgwwvw~3g9gTGp`vqG>qv#$y(F@mGu-@\|pmn`#9X`ChayK\|z
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: de 48 64 d7 68 9e fa 66 5b 3b 7d 72 27 d0 24 91 f3 2c 17 c3 c1 d9 81 89 be 19 26 f9 89 e5 5a ea 0d 81 e8 10 22 f9 d0 26 98 40 de 00 43 a6 2e 29 e7 7f 1a 6a f4 0d 10 f7 4b 9e 7a 05 19 e0 60 06 52 14 50 65 9f e7 9e 38 3c 06 a6 f0 dd 52 ee ce 71 f5 4c 52 05 08 87 06 c9 87 26 c1 04 a0 9b c8 3a 28 1a 75 4d 22 bd 24 e4 d2 0d 4a 28 a8 77 1e 84 83 24 77 32 d4 f8 3c 75 cc 66 20 0c c3 ef 8c a6 ee a2 44 52 25 01 30 b4 3f c2 7f 7e 70 48 12 4c c8 f8 d4 ab 44 0b b5 1c 85 9c 5e 67 83 e2 35 e2 1d 54 72 01 74 36 ba 35 d6 fb dc 43 b5 12 85 85 af 11 e4 85 c5 be 54 8f 7e 3d 34 11 10 2d e0 21 d7 43 af 9b 14 81 cd 35 cf 97 ca 05 01 9b 75 ee 3d c2 d1 3b 25 4d a1 2a 4a 44 b3 59 60 8d 88 17 a8 14 ac 0d 3f 83 2e ed 3e 77 60 eb c7 f4 bf 47 34 29 94 5b 4a fc c2 c3 a1 53 83 15 20 02 Data Ascii: Hdhf[;}r'$,&Z"&@C.)jKz`RPe8<RqLR&:(uM"$J(w$w2<uf DR%0?~pHLD^g5Trt65CT~=4-!C5u=;%M*JDY`?.>w`G4)[JS
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: f5 79 7f 18 d1 57 1b 5d 4b 9f f7 b4 3b da 71 4b 2e ba a9 04 0a 0e 22 bb 66 9c e0 c0 81 ab 39 b4 c1 0d 9c 18 ea 7b 5c a1 f8 11 9f c5 50 91 43 dc f4 38 cb 20 22 11 af 92 e7 c5 a0 18 5c df 19 e4 af f8 e8 5d 09 36 37 12 04 e6 c0 9b b2 99 35 74 28 71 d2 07 d9 c1 0d c4 81 7c a4 12 96 2e cf d3 18 ea bd 10 f1 11 72 a7 00 11 91 77 5e 34 49 d9 76 16 fe fd cf 7e 19 77 ed ea 38 f9 43 ce 58 f0 01 c6 2a cf 18 c1 0a 32 c6 d6 7d da d6 16 1a c6 bf 95 51 7a 69 9e 26 50 ef f5 08 b9 d3 07 31 b1 38 51 d7 48 89 7a 0a 7f 5f 4a 57 74 aa cb df 3a 56 09 84 65 ff 49 3e e8 8c 27 00 a2 e0 0e ea f3 05 13 b5 57 46 d3 2f 06 1a bd d4 a7 09 d4 8b 12 cd bb d7 ca 21 07 62 22 f1 a2 79 92 c1 46 ee 2d 46 e5 e3 ae a4 81 0d 21 a2 30 fb d3 24 1f 1c c1 04 ca 02 b0 ad e6 52 6a 68 9f 9a f2 d7 0c 85 Data Ascii: yW]K;qK."f9{\PC8 "\]675t(q\|.rw^4Iv~w8CX*2}Qzi&P18QHz_JWt:VeI>'WF/!b"yF-F!0$Rjh
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 90 3a 54 85 f0 b0 52 b4 9d bc cd eb d3 79 93 a9 eb f8 d3 3e f5 98 b7 2f df f3 26 e0 ee ef 8f 92 3d f6 7e b6 bc 58 7c a2 e0 c9 22 d0 b5 b6 c9 9a e3 44 a3 bc d7 fe 50 27 73 ba d8 d7 77 ee dd 2f 9b ac 14 d3 5e c7 b6 29 01 3d c4 da 12 93 cf 7e 33 9d a7 4e 49 f0 69 bf b8 e2 31 e7 da aa f7 52 19 cb 1a 3b 35 b9 59 95 9e 04 b8 c7 31 6c ec fd 92 47 f0 bb 31 95 2e a1 4a ac ec b2 06 c4 cb 4d d3 49 71 4a 82 bb 86 ef 78 cc 39 1f 74 28 97 3b 80 aa bf 9e ac be 92 8a 76 ad 8f 9d d0 2c 7a 07 1e 01 00 55 09 4a 91 91 3c ff 81 66 72 eb 74 6e 99 ba 9b 74 fe b3 f6 71 96 10 d4 14 27 7c 75 cb 66 a3 3b df 60 6c 74 83 04 cc c8 55 c0 f3 1f 0e 73 38 42 55 85 8c 31 e2 92 d4 e7 f4 86 d2 ce 78 64 3a f7 4d 49 b0 37 fd fb 38 4b 30 1d 42 51 f7 98 8e f4 e3 26 1e cd de d7 56 4b df e3 19 d4 Data Ascii: :TRy>/&=~X\|"DP'sw/^)=~3NIi1R;5Y1lG1.JMIqJx9t(;v,zUJ<frtntq'\|uf;`ltUs8BU1xd:MI78K0BQ&VK
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: d1 23 03 0f eb 6c 68 44 53 26 d9 33 ba 14 fd b5 95 a8 c0 c2 d7 ab b8 ec ce b7 62 d7 e6 0b 61 57 97 70 f5 93 ae c6 86 ae 0d 18 2e 0c 4f ef 61 69 a4 85 6a 91 a3 b8 2c f5 b8 f8 77 61 39 39 b3 50 f0 7f e6 c7 4b c0 b8 0b 31 f6 dc 4f c6 38 49 2d 87 53 18 28 cc a4 6b c7 dd 1c 14 80 07 21 01 21 53 a0 8e 16 91 ca 70 6a c0 ad 28 82 76 25 88 02 01 9a f9 6b 01 30 35 8f a9 15 3b 31 d9 75 62 52 a4 11 b4 f5 c2 8f 57 ff 1f 53 18 9a de 2e 6a ac 21 ef ea 1f 4b 87 2b d7 86 d6 42 43 87 c0 05 c8 6d 3e 65 1e ee 2f a6 24 38 e7 1c 19 65 c8 48 e0 4c 0e c7 16 71 10 63 49 36 80 4f dc f2 09 dc d3 7b 0f ae bc f0 4a ec 2c ef 9c f2 61 79 d1 63 d3 13 37 48 ba 74 33 3f fc e3 73 a4 f7 e1 9e cb d6 9d f4 c0 29 0d 14 d7 f8 c4 a9 b6 82 52 9a ae de 8a a0 75 df 9e 19 45 c8 00 24 20 8c 29 50 6d Data Ascii: #lhDS&3baWp.Oaij,wa99PK1O8I-S(k!!Spj(v%k05;1ubRWS.j!K+BCm>e/$8eHLqcI6O{J,ayc7Ht3?s)RuE$ )Pm
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 8e a2 53 4c 81 9e 20 c9 a1 e5 60 4d 00 c0 00 f3 20 3e d9 f5 f2 9b 77 d4 7a 3f f8 f6 62 02 2c 5d 07 70 a8 c0 1a cc e5 17 cd e9 a2 1c aa 0c 63 32 f4 f5 fd 16 f5 7a 1f ee b8 e3 1d 28 95 1e c5 13 9e f0 8f 28 f6 0c 02 80 d0 90 1a 1a d6 d8 2d b1 2f 06 d1 0f 98 75 b1 7a 1c 32 e3 c7 0a 12 c3 9e b3 74 e0 de d3 6b f7 5f 82 fa 8f 84 96 9d cd e8 3c 4e 80 2a 80 63 e6 f4 7d e6 25 d3 44 0c 4a a5 41 d4 eb fd d8 be fd 24 88 ac 87 ea ff c0 69 88 96 62 69 ac ba 87 48 e4 72 0a 91 c1 80 a7 65 59 9f 7f 28 19 61 09 db c6 c4 b9 4b cf 18 fa dc c8 19 63 0f 18 b8 b2 60 a2 63 90 cf e0 36 35 e6 6d 81 68 55 86 b5 09 8c 51 58 db 8f 46 a3 1f 9b 87 af c5 71 bd 97 02 6b 07 3d fa 40 54 97 2f bb 8c d7 99 02 bd 4b 63 88 08 98 16 68 7b 4c 80 82 55 b9 c0 94 d5 8b ef 32 3c fa 1d 74 78 86 f7 1e Data Ascii: SL `M >wz?b,]pc2z((-/uz2tk_<N*c}%DJA$ibiHreY(aKc`c65mhUQXFqk=@T/Kch{LU2<tx
2024-05-27 22:43:40 UTC	1390	IN	Data Raw: 17 ed b2 14 cc 6d 69 96 c5 9b d6 9d 7c f2 26 9f a5 3f f8 ee c3 5b 02 bb 63 7b 79 69 ff a2 3f 0a c3 d2 f5 50 65 ef fd 04 c9 d6 18 38 e7 30 3c 32 b6 69 c9 e2 45 1d de 6b a7 f7 6e 7f 48 26 ef 3d e2 38 46 18 46 ef 8e a2 d2 fa 2c a9 7f 33 a9 96 cd 1d 3b 3e e0 4f 3f ed 75 ba f8 d4 7b 89 32 ad 49 86 cb 39 c2 b7 4d 84 5e 9f 4d c7 49 e0 00 a1 10 2e aa 89 a5 e3 01 cd ec 15 c5 ac e6 61 16 03 64 14 ce 02 c9 34 27 cd 98 49 4c e3 91 53 6b d1 cc 48 92 04 ab 56 ad c2 92 45 8b b0 79 e3 46 f2 cc f9 40 4f db 48 48 3b be 32 3a da f3 b6 ae ce 8e bf 8f d3 a4 b5 7c 1d 10 46 05 22 92 41 15 7d 6a 9a b8 67 31 e3 2a 55 26 11 99 76 90 3f 11 91 f7 5e d2 34 29 1b 6b ae aa 54 da 7e ea 5c bc cb 71 ca b7 ff f8 8d f2 ec 0b 5f a6 e5 9f 81 4c bb fb a5 af f2 6b b9 60 fe 93 59 59 fd 2c 18 41 Data Ascii: mi\|&?[c{yi?Pe80<2iEknH&=8FF,3;>O?u{2I9M^MI.ad4'ILSkHVEyF@OHH;2:\|F"A}jg1*U&v?^4)kT~\q_Lk`YY,A
2024-05-27 22:43:40 UTC	852	IN	Data Raw: c3 a0 fd 9f 72 e7 10 c9 56 6c a3 f3 e9 3e f3 7e 1c eb df 04 45 08 a1 bc 15 5d bc 37 04 10 ab 1c 7a d2 02 c3 d7 3b 2f 2d e1 81 fb 90 ef 20 9f 18 1d 1b 1b c3 6e 82 0f 2d cc 19 c1 c6 04 38 ff fc b3 11 45 56 57 1f 75 3e ed 02 63 5b 1c 5f de 1e a7 27 06 51 f1 bc 2c 4b 45 55 a7 2d aa 55 95 1a 71 ac 85 42 71 5d 47 7b d7 95 9d 5d 43 1f 8a b2 d2 47 3d d8 66 79 ae 0c 70 51 37 63 83 fd 13 94 75 3b 96 c9 55 00 2c 14 6d 50 d4 d0 74 3f 20 28 0c 48 8d 1a 3b 4c 28 84 90 46 ef ff 7d 68 34 f8 cf ae 63 af a2 be ee 2e 54 96 16 70 e9 89 d3 9b 7c 7b 21 62 ce 08 26 62 f4 f4 74 b5 7e 75 6b 06 f0 70 5c 6f 94 92 e4 e5 6c 82 db 89 a8 5f 44 a6 6d 04 21 22 a8 2a d2 34 01 11 5e 0d 04 7f ec b2 74 ad 23 07 52 22 25 82 85 03 74 08 ff 6b 5f 80 4c 4a 58 e1 ff 05 56 1b 50 a4 68 4e f0 50 47 Data Ascii: rVl>~E]7z;/- n-8EVWu>c[_'Q,KEU-UqBq]G{]CG=fypQ7cu;U,mPt? (H;L(F}h4c.Tp\|{!b&bt~ukp\ol_Dm!"*4^t#R"%tk_LJXVPhNPG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50207	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:40 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:40 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:40 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:40 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50208	142.250.184.206	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	866	OUT	GET /js/googleapis.proxy.js?onload=startup HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://scone-pa.clients6.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:41 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 15118 Date: Mon, 27 May 2024 22:43:41 GMT Expires: Mon, 27 May 2024 22:43:41 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "9bc2326c55ad9a5d" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 Data Ascii: break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegEx
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 76 61 72 20 78 3d 7b 7d 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 76 61 72 20 41 3d 7b 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 41 21 3d 3d 41 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 53 74 79 6c 65 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 74 68 69 73 2e 73 3d 22 22 7d 3b 42 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 2e 74 6f 53 Data Ascii: ring=function(){return this.v.toString()};var x={};new y("about:invalid#zClosurez");new y("about:blank");var A={},B=function(){if(A!==A)throw Error("SafeStyle is not meant to be built directly");this.s=""};B.prototype.toString=function(){return this.s.toS
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 7b 62 3d 4b 2e 68 3b 76 61 72 20 63 3d 52 65 67 45 78 70 28 22 28 5b 23 5d 2e 2a 26 7c 5b 23 5d 29 6a 73 68 3d 28 5b 5e 26 23 5d 2a 29 22 2c 22 67 22 29 2c 64 3d 52 65 67 45 78 70 28 22 28 5b 3f 23 5d 2e 2a 26 7c 5b 3f 23 5d 29 6a 73 68 3d 28 5b 5e 26 23 5d 2a 29 22 2c 22 67 22 29 3b 69 66 28 61 3d 61 26 26 28 63 2e 65 78 65 63 28 61 29 7c 7c 64 2e 65 78 65 63 28 61 29 29 29 74 72 79 7b 62 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 32 5d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 62 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 48 28 4b 2c 22 50 51 22 2c 5b 5d 29 3b 4b 2e 50 51 3d 5b 5d 3b 76 61 72 20 63 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 63 29 61 28 29 3b 65 6c 73 65 20 66 6f Data Ascii: {b=K.h;var c=RegExp("([#].&\|[#])jsh=([^&#])","g"),d=RegExp("([?#].&\|[?#])jsh=([^&#])","g");if(a=a&&(c.exec(a)\|\|d.exec(a)))try{b=decodeURIComponent(a[2])}catch(e){}}return b},pa=function(a){var b=H(K,"PQ",[]);K.PQ=[];var c=b.length;if(0===c)a();else fo
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 3d 62 2e 6d 61 74 63 68 28 41 61 29 3b 28 64 3d 62 2e 6d 61 74 63 68 28 42 61 29 29 26 26 31 3d 3d 3d 64 2e 6c 65 6e 67 74 68 26 26 43 61 2e 74 65 73 74 28 62 29 26 26 63 26 26 31 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 56 28 22 66 61 69 6c 65 64 20 73 61 6e 69 74 79 3a 20 22 2b 61 29 3b 74 72 79 7b 61 3d 22 3f 22 3b 69 66 28 65 26 26 30 3c 65 2e 6c 65 6e 67 74 68 29 7b 63 3d 62 3d 30 3b 66 6f 72 28 64 3d 7b 7d 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 70 3d 65 5b 63 2b 2b 5d 3b 66 3d 76 6f 69 64 20 30 3b 6b 3d 74 79 70 65 6f 66 20 70 3b 66 3d 22 6f 62 6a 65 63 74 22 3d 3d 6b 26 26 6e 75 6c 6c 21 3d 0a 70 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 6b 3f 22 6f 22 2b 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f Data Ascii: =b.match(Aa);(d=b.match(Ba))&&1===d.length&&Ca.test(b)&&c&&1===c.length\|\|V("failed sanity: "+a);try{a="?";if(e&&0<e.length){c=b=0;for(d={};c<e.length;){var p=e[c++];f=void 0;k=typeof p;f="object"==k&&null!=p\|\|"function"==k?"o"+(Object.prototype.hasOwnPro
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 29 3b 63 3d 57 28 61 2c 22 6b 22 2c 21 30 29 3b 64 3d 57 28 61 2c 22 61 6d 22 29 3b 65 3d 57 28 61 2c 22 72 73 22 29 3b 61 3d 57 28 61 2c 22 74 22 29 3b 72 65 74 75 72 6e 7b 70 61 74 68 50 72 65 66 69 78 3a 62 2c 76 65 72 73 69 6f 6e 3a 63 2c 67 3a 64 2c 69 3a 65 2c 6a 3a 61 7d 7d 2c 46 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 7b 76 61 72 20 65 3d 61 5b 63 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 5f 22 29 3b 7a 61 2e 74 65 73 74 28 65 29 26 26 62 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 2c 22 29 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b Data Ascii: );c=W(a,"k",!0);d=W(a,"am");e=W(a,"rs");a=W(a,"t");return{pathPrefix:b,version:c,g:d,i:e,j:a}},Fa=function(a){for(var b=[],c=0,d=a.length;c<d;++c){var e=a[c].replace(/\./g,"_").replace(/-/g,"_");za.test(e)&&b.push(e)}return b.join(",")},W=function(a,b,c){
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 29 3a 28 47 2e 68 65 61 64 7c 7c 47 2e 62 6f 64 79 7c 7c 47 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 7d 2c 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 4d 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 62 3d 3d 3d 6f 61 28 29 3f 48 28 4a 2c 22 5f 22 2c 49 28 29 29 3a 49 28 29 3b 64 3d 48 28 4e 28 62 29 2c 22 5f 22 2c 64 29 3b 61 28 64 29 7d 2c 63 29 7d 2c 50 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 0a 62 7c 7c 7b 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 28 63 3d 7b 7d 2c 63 2e 63 61 6c 6c 62 61 63 6b 3d 62 29 3b 76 61 72 20 64 3d 28 62 3d 63 29 26 26 62 2e 5f 63 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 55 Data Ascii: ):(G.head\|\|G.body\|\|G.documentElement).appendChild(b)},Na=function(a,b,c){Ma(function(){var d=b===oa()?H(J,"_",I()):I();d=H(N(b),"_",d);a(d)},c)},Pa=function(a,b){var c=b\|\|{};"function"==typeof b&&(c={},c.callback=b);var d=(b=c)&&b._c;if(d)for(var e=0;e<U
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 77 29 3b 4a 5b 54 5d 3d 6e 75 6c 6c 7d 3b 61 3d 44 61 28 63 2c 71 2c 22 67 61 70 69 2e 22 2b 54 2c 6c 2c 54 61 29 3b 6c 2e 70 75 73 68 2e 61 70 70 6c 79 28 6c 2c 71 29 3b 51 28 22 6d 6c 30 22 2c 71 2c 4c 29 3b 62 2e 73 79 6e 63 7c 7c 46 2e 5f 5f 5f 67 61 70 69 73 79 6e 63 3f 4c 61 28 61 29 3a 4b 61 28 61 29 7d 65 6c 73 65 20 75 5b 76 5d 28 6c 61 29 7d 65 6c 73 65 20 73 61 28 71 29 26 26 65 26 26 65 28 29 7d 2c 51 61 3b 76 61 72 20 52 61 3d 6e 75 6c 6c 2c 5a 3d 6d 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 5a 26 26 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 74 72 79 7b 52 61 3d 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 61 70 69 23 67 61 70 69 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 72 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 72 2c 63 Data Ascii: w);J[T]=null};a=Da(c,q,"gapi."+T,l,Ta);l.push.apply(l,q);Q("ml0",q,L);b.sync\|\|F.___gapisync?La(a):Ka(a)}else u[v](la)}else sa(q)&&e&&e()},Qa;var Ra=null,Z=m.trustedTypes;if(Z&&Z.createPolicy)try{Ra=Z.createPolicy("gapi#gapi",{createHTML:r,createScript:r,c
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 7d 2c 65 6e 61 62 6c 65 4d 75 6c 74 69 6c 6f 67 69 6e 3a 21 30 2c 22 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6e 66 69 67 22 3a 7b 61 75 74 68 3a 7b 75 73 65 46 69 72 73 74 50 61 72 74 79 41 75 74 68 56 32 3a 21 30 7d 2c 72 6f 6f 74 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 2c 22 72 6f 6f 74 2d 31 70 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6c 69 65 6e 74 73 36 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 7d 2c 69 6e 6c 69 6e 65 3a 7b 63 73 73 3a 31 7d 2c 0a 64 69 73 61 62 6c 65 52 65 61 6c 74 69 6d 65 43 61 6c 6c 62 61 63 6b 3a 21 31 2c 64 72 69 76 65 5f 73 68 61 72 65 3a 7b 73 6b 69 70 49 6e 69 74 43 6f 6d 6d 61 6e 64 3a 21 30 7d 2c 63 73 69 3a 7b 72 61 74 65 Data Ascii: //apis.google.com"},enableMultilogin:!0,"googleapis.config":{auth:{useFirstPartyAuthV2:!0},root:"https://content.googleapis.com","root-1p":"https://clients6.google.com"},inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 64 61 74 61 63 6f 6e 6e 65 63 74 6f 72 2e 63 6f 72 70 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 75 69 2f 77 69 64 67 65 74 76 69 65 77 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 73 75 72 76 65 79 6f 70 74 69 6e 3a 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 2f 63 75 73 74 6f 6d 65 72 72 65 76 69 65 77 73 2f 6f 70 74 69 6e 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 73 68 6f 72 74 6c 69 73 74 73 3a 7b 75 72 6c 3a 22 22 7d 2c 68 61 6e 67 6f 75 74 3a 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 67 61 64 67 Data Ascii: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1"},surveyoptin:{url:"https://www.google.com/shopping/customerreviews/optin?usegapi=1"},":socialhost:":"https://apis.google.com",shortlists:{url:""},hangout:{url:"https://talkgadg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50209	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:40 UTC	785	OUT	GET /7j1-9AjGTjyFcEDU5lJw2BpZNYWNKgkxegHVv012Pm5OPBratN5ZsNVtpILRwXqE5Givogcj2VMswYdKR1dKvLvo2EQFSM0p7yTxYw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:41 UTC	575	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 7289 X-XSS-Protection: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 22:24:38 GMT Expires: Tue, 28 May 2024 22:24:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 1143 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	815	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 1b c5 49 44 41 54 78 9c ed 5d 7b 6c 1c d5 b9 ff 9d 99 7d af df 36 76 1c 07 43 4c 5a e2 06 27 69 45 7c 09 94 0b 51 09 88 87 10 a8 01 2a 52 a9 a5 ea 4b 50 a9 e8 aa a0 2b c1 6d ff 00 74 d5 f6 9f a2 12 a8 04 d4 8e 70 a3 3c 48 69 2b b5 51 00 95 f4 36 21 21 10 db 71 48 c0 29 09 c1 76 fc 8a 5f eb Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx]{l}6vCLZ'iE\|Q*RKP+mtp<Hi+Q6!!qH)v_
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 9d b0 0f 58 74 82 29 a5 1b 0e 1e 3c 78 60 66 66 a6 3e 9d 4e 17 d5 20 52 55 15 2b 57 ae 44 30 18 e4 de 57 14 05 83 83 83 59 63 c9 69 ba 6e 65 11 45 11 65 65 65 43 f7 dc 73 cf 9d 84 90 93 ae 33 28 00 82 7d 10 ff 40 29 fd e9 be 7d fb ba a7 a6 a6 ea d3 e9 8c 87 d0 cc d8 f9 22 c1 ee 19 d2 e9 34 26 27 27 eb 77 ed da d5 4d 29 fd e9 22 89 05 60 f1 34 98 74 77 77 ff df 27 9f 7c f2 75 45 51 f2 6e 16 43 6b 80 c5 ab a2 9d c4 63 f7 83 c1 20 d6 ac 59 73 b8 b5 b5 f5 3f 91 ef 3e f5 1d 45 27 98 52 5a ff f6 db 6f 1f 9f 98 98 58 65 d6 d6 16 fb a5 ba 31 b2 bc ca e3 c6 f2 17 45 11 95 95 95 03 77 dd 75 57 2b 21 84 2f 84 4f 28 2a c1 94 d2 1b f6 ec d9 73 74 e1 b7 5d 58 2f e9 3b ba ef a6 9b 54 6c 59 18 58 5f fc db df fe f6 66 42 c8 31 d7 19 3a 44 d1 08 a6 94 7e 73 df be 7d af 3b Data Ascii: Xt)<x`ff>N RU+WD0WYcineEeeeCs3(}@)}"4&''wM)"`4tww'\|uEQnCkc Ys?>E'RZoXe1EwuW+!/O(*st]X/;TlYX_fB1:D~s};
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: d5 2f 8b c7 d3 8c 42 60 96 07 fb cd 9e 23 16 8b e1 b3 cf 3e 43 67 67 67 f6 39 45 51 c4 c0 c0 00 7a 7a 7a b2 5d 21 b3 34 f5 df 56 a0 94 62 62 62 e2 06 4a a9 2b 82 5d bd 89 bf ff fd ef 1f 0f 0f 0f 5f eb 26 8e 63 41 08 81 a6 69 38 72 e4 08 92 c9 64 4e 95 6c f5 52 ec aa 36 16 c6 c9 35 bb 30 bc c2 cc fa f7 8a a2 20 1c 0e e3 a6 9b 6e c2 d0 d0 10 ba ba ba 10 89 44 4c 0b 1e af 06 72 22 4b 3c 1e ef 7d fe f9 e7 d7 da 46 58 80 63 0d a6 94 de 3f 3a 3a 5a 54 72 8f 1f 3f 8e 54 2a 05 51 14 73 34 d5 d8 15 b2 aa 8a 8b 09 5e ed c0 fe 07 83 41 28 8a 82 c3 87 0f e3 cc 99 33 39 4e 0c ab b6 d7 2d e6 e6 e6 ae 9d 9f 9f bf df b1 cc 4e 03 be fd f6 db 9f 8c 8e 8e 5e e3 5a 22 3b 01 16 4a f0 e1 c3 87 91 4a a5 b2 55 1f bb a7 b7 52 79 da eb 04 7e 6a 30 ef bf fe 9b e7 b1 d3 7f 1b af 7b Data Ascii: /B`#>Cggg9EQzzz]!4VbbbJ+]_&cAi8rdNlR650 nDLr"K<}FXc?::ZTr?T*Qs4^A(39N-N^Z";JJURy~j0{
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 9e b5 12 5d 38 e3 80 9b 59 7d 7d 3d ca cb cb 11 0c 06 11 0c 06 51 5e 5e 8e fa fa 7a d3 07 d0 34 2d af ff 6b 96 b6 59 1a 84 64 f6 b5 d2 87 b5 4a 07 c8 54 cb b7 dd 76 1b 56 ac 58 81 99 99 19 cb bc 8b 0d 1f fd ce a8 ae ae c6 86 0d 1b a0 df 6e 79 81 e0 28 32 87 8f e4 80 47 30 25 84 e4 49 44 69 66 21 b7 be 0d 60 d7 83 c1 20 77 81 19 bb cf aa 66 b3 f6 d3 c9 0b 60 c3 7e 4e fb bf 94 52 b4 b4 b4 78 f2 42 15 a3 2b e3 05 3c bb 47 96 65 7c e9 4b 5f 42 32 99 cc 79 77 34 f3 23 4f 70 37 f3 a2 2d 97 81 9a dd 63 f7 79 44 ba e9 9b da 11 6b 24 b7 bc 3c 33 4f e1 72 93 5b 8c c2 12 89 44 b8 e7 55 f0 50 f4 cd 48 0b e9 fb 3a 79 00 ab 36 db ed 3e 5d 4b 45 73 01 6b 59 d8 aa 46 5f 09 66 0e 7e b3 59 18 7e 3a e4 9d 12 6b d5 66 b3 fd 39 dc e4 e9 37 8a 91 26 21 04 53 53 53 8e f3 e1 11 Data Ascii: ]8Y}}=Q^^z4-kYdJTvVXny(2G0%IDif!` wf`~NRxB+<Ge\|K_B2yw4#Op7-cyDk$<3Or[DUPH:y6>]KEskYF_f~Y~:kf97&!SSS
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 97 53 4d b6 22 b0 d0 fe af a6 69 58 b9 72 65 51 c8 4d a7 d3 f8 d1 8f 7e b4 c3 2e 9c 2d c1 84 90 8b 6b d6 ac 79 87 65 5e 88 b5 ab ff b0 ea b4 a5 a5 25 67 62 bc 53 cd 70 62 d8 78 b5 ae fd 70 92 a8 aa 8a ba ba ba 9c a9 46 76 70 e3 f8 a8 a9 a9 79 87 10 72 d1 2e ac a3 49 77 b7 dc 72 cb 53 56 9a 60 46 bc 5d 21 50 14 05 ab 57 af c6 55 57 5d 95 e3 00 e1 c5 71 5b a0 58 1c b7 d6 b5 1f e4 b2 93 c7 cb ca ca 1c 6b af 9b e7 d2 34 0d cf 3d f7 dc 53 4e c2 3a 22 98 10 72 34 16 8b 9d f3 d3 d8 62 48 26 93 68 69 69 41 45 45 45 de 6c 7d a7 73 7f ad e0 c6 ba f6 8b 5c e6 46 f5 d3 51 a4 47 30 18 3c 17 8d 46 8f 3a 09 eb 78 da ec b6 6d db 9e 28 d6 a9 a2 c9 64 12 37 de 78 23 aa ab ab 91 4a a5 1c 7b ba 9c c2 ce ba 76 e2 31 73 02 4d d3 10 8f c7 71 e5 95 57 22 95 4a 39 96 cf ad f6 fe Data Ascii: SM"iXreQM~.-kye^%gbSpbxpFvpyr.IwrSV`F]!PWUW]q[Xk4=SN:"r4bH&hiiAEEEl}s\FQG0<F:xm(d7x#J{v1sMqW"J9
2024-05-27 22:43:41 UTC	914	IN	Data Raw: 79 bf 57 79 79 28 0a 0b 94 d2 07 5f 7e f9 e5 3d 3c eb d1 87 b4 7d 4d cf 09 44 51 c4 f0 f0 30 4e 9d 3a c5 ad ae 0b 19 ed d2 93 db d2 d2 b2 b7 50 59 8d 28 9a 9a 51 4a bf f9 d2 4b 2f bd ee 64 67 56 9b 74 fc 92 c7 93 0d c0 e2 88 a2 88 b1 b1 b1 bc 36 b9 50 72 93 c9 24 9e 7e fa e9 6d 7e 6b 2e 43 51 eb 51 4a e9 0d 2f bc f0 c2 51 e3 36 be 16 e1 8b 25 07 2a 2b 2b 73 76 06 9a 9c 9c b4 25 d9 28 8f 28 8a 18 19 19 f1 c5 ba 66 bd 89 5d bb 76 f9 66 50 f1 b0 18 fb 07 d5 b7 b7 b7 1f 07 b0 8a 79 88 16 1b 2b 57 ae cc db 67 59 51 14 0c 0e 0e 72 c3 5b c9 e8 97 75 4d 29 1d 68 6f 6f 6f 85 0f 5d 21 2b 14 7d 2b 43 00 43 df fd ee 77 1b cb cb cb 0f a7 d3 e9 45 31 be 18 28 a5 d9 9d 71 79 7e 60 de 06 e1 76 05 b0 10 eb 7a 61 e0 00 d1 68 f4 70 7b 7b 7b 23 8a 4c 2e b0 38 1a 9c 05 a5 f4 Data Ascii: yWyy(_~=<}MDQ0N:PY(QJK/dgVt6Pr$~m~k.CQQJ/Q6%*++sv%((f]vfPy+WgYQr[uM)hooo]!+}+CCwE1(qy~`vzahp{{{#L.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50213	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	786	OUT	GET /R-_6O0_uuaRmQfOGA1NNI4aj7lQBWjg-t3tpiWJqWC8xx84LL9kuIMoHj9FovIG7SCho36_AXGKT6NQi3xYZwaRcS2je7mrtyI761To=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:41 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 6717 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:02:11 GMT Expires: Tue, 28 May 2024 19:02:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 13290 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 19 f4 49 44 41 54 78 9c ed 9d 7b 90 64 57 7d df 3f bf 73 ef ed ee e9 e9 79 ed cc ec 68 77 b5 5a 3d 56 2b a1 5d 2d 96 b4 42 2f 90 57 12 42 b6 9c 32 24 04 2a 4e c9 72 08 11 29 b0 2b 45 90 65 ec 98 c4 18 0a 9b 82 14 8e 51 b0 ab 90 8a 0a 09 15 3b 4e 30 72 6c 1c 42 0c 02 3d 90 04 7a 21 19 01 92 d8 d5 6b 57 33 fb 9a 57 bf ef bd e7 97 3f 6e f7 4c 4f f7 ed 9e 7e cd ec 1a fa bb d5 d5 3b f7 9e c7 ef 9e ef 3d bf f3 3b bf f3 3b a7 61 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 d8 44 48 3b 89 de fe c4 ac c9 1d 33 db 1c 6b b6 88 6a c2 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{dW}?syhwZ=V+]-B/WB2$*Nr)+EeQ;N0rlB=z!kW3W?nLO~;=;;a````````DH;3kj
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 51 21 00 f5 35 5a c9 70 81 44 25 a1 0b b8 12 bd 15 cd 08 e8 57 23 9e 69 64 9c 69 f2 b4 8b 06 82 af 4d 8b b3 d5 95 e4 b8 2b f8 aa 94 2d e4 2c 2c 87 ca 82 85 d7 02 38 1a e8 9a f5 ba 51 89 1c e0 ad d4 41 27 bd b7 59 6b 6e 84 97 ac 27 87 4d bb c3 4d f7 35 f4 8c 06 82 0f 4c d8 a1 cb 27 bd a9 4b a7 3d ca a1 e2 5b a5 10 40 21 50 0a 3e e4 ca 4a a9 0c 79 1f 4e 95 95 a3 25 e5 70 d1 f2 48 51 59 f2 23 d2 5d 81 2d 02 4e a5 cc 4e db f0 74 3a 47 36 ad ee 4d b2 45 1a 08 96 a0 2c 5b 5c e3 ec 1a 49 12 da d5 89 95 88 20 02 82 20 06 ca a1 b2 50 b2 cc 17 95 53 05 cb 42 01 16 0b f0 4a de f2 83 ac e5 2f b3 4a e0 03 02 93 02 5e 9c f0 1d 08 ba 11 53 ae 9f 05 77 6b ec 72 a1 2a 6a b5 ea f4 58 bd 58 2d 5e 03 45 04 c6 5c 98 18 35 5c 30 66 30 22 94 2d 9c 2a 58 4e e4 2d ff 22 0f 47 b3 Data Ascii: Q!5ZpD%W#idiM+-,,8QA'Ykn'MM5L'K=[@!P>JyN%pHQY#]-NNt:G6ME,[\I PSBJ/J^SwkrjXX-^E\5\0f0"-XN-"G
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: db 2a 64 12 ca db 2f f4 c8 fb ca 5d 87 02 5c 64 cd 44 ff 4c f1 32 f6 4e 7a 93 09 79 cc e5 06 82 3f 70 71 26 79 7e c6 99 38 67 c4 21 e7 5b 16 8a 96 d9 5c c0 0b 0b 3e 7f 79 ac 04 f3 7e 94 d0 81 94 11 26 1c 59 d7 e7 25 40 c6 08 c3 46 78 a2 a0 dc 7f c8 e7 fb b3 af 70 cb de 51 7e e5 aa 69 5c 91 9a d0 9f ee a1 0a 23 1e bc f3 a2 04 27 f3 96 4f 1e b5 8c 57 e4 6b 55 7a 3f 7a 6f af 2a 77 a3 9c 28 0d 04 8f 78 ea ee 9d 74 92 57 ef 1c aa 58 bf 2b 71 95 dc 23 50 28 2b af 2e 05 3c 75 ac c8 ff 3e 94 e7 6b 2f 64 23 49 3c e1 2c 27 f2 7a b5 78 0c 86 0d a4 11 fe 36 6f 78 ec 7b cb 3c fd 52 8e f7 de 78 16 fb b7 a5 29 f9 3d 1c bb 53 81 55 98 4c c1 ed 97 26 39 51 2c 70 ef 29 65 c2 69 2e 54 d3 46 ec 75 92 da 69 7d 1b 54 66 03 c1 e5 20 00 eb e1 54 0e e6 58 39 e2 aa 72 7a 50 26 09 Data Ascii: d/]\dDL2Nzy?pq&y~8g![\>y~&Y%@FxpQ~i\#'OWkUz?zow(xtWX+q#P(+.<u>k/d#I<,'zx6ox{<Rx)=SUL&9Q,p)ei.TFui}Tf TX9rzP&
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 45 cb fb 9e c8 31 a5 8a 91 55 ff a6 0a 8c 02 cf e1 71 ef 43 27 f9 d4 3b b6 b7 3c 0e a2 69 5d 44 27 ae 5e b5 cd 8b 7a 71 2e 24 0d 15 75 9d 07 01 9b 4c ae a4 ed f4 39 3a 95 65 23 d1 40 f0 63 cb 09 ff 29 bf bc ec 94 cb 33 1e 01 c3 5a 64 14 cb 84 28 33 a3 86 3d 33 09 6e da 33 c6 e5 3b 52 58 ab 04 7d 8c b3 aa 8e c9 b7 5c 3c c4 27 b2 01 bf fb f7 05 b6 26 2a 03 4b 85 64 01 c6 5d 87 af cc 2b 97 3d b5 c0 7b 0e 4c 50 6a e1 34 69 5e 97 32 9a 84 3f d9 93 e0 03 df cd 93 f6 04 91 28 f6 d7 64 f3 80 10 26 13 cd f3 37 91 bf 93 f4 cd 65 eb ac 8c 56 65 37 10 ec 81 4a c5 d3 59 16 a1 88 61 0e 28 02 c1 12 98 f9 90 4f 7c 7f 8e 4b 32 70 fb be 0c b7 5f 31 c1 90 2b f8 61 7f 02 e0 55 61 22 29 fc d2 a5 19 0e 2f 59 ee 7d ad cc b4 57 a3 8a 45 f0 80 e3 c6 e1 6b 3f 28 f2 96 f3 7c 76 8d Data Ascii: E1UqC';<i]D'^zq.$uL9:e#@c)3Zd(3=3n3;RX}\<'&*Kd]+={LPj4i^2?(d&7eVe7JYa(O\|K2p_1+aUa")/Y}WEk?(\|v
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 47 2d b1 25 e9 f0 a9 17 02 be f1 62 ae eb fa fc 50 79 eb ce 24 88 34 3a 25 00 8c c3 f7 8e 07 cc 2d fb 1d bf 44 56 61 2a 25 9c 37 bc 52 f0 9a f2 1b c8 ad 56 60 15 29 45 24 d7 63 53 5c 9a eb 64 ea cb ef 26 19 11 67 df 8e a1 d1 8f 5f 99 76 2e cf 30 7f ca 56 8c 14 91 95 79 9f 41 70 52 09 7e f3 a1 45 72 25 db 55 2f 56 60 d4 55 de bd 3b c5 42 8d 27 25 3a 0c 46 f0 5c 87 ff 73 d2 32 9f 0d a2 85 83 0e 91 34 30 9e 76 20 61 2a 4a 62 1d 72 6b ec 8d 6a 4f ae 95 b5 e9 73 f4 69 c5 a9 9d 72 9a 10 dc 59 e3 28 e0 18 63 2e 3d 3b 3d f2 87 57 a5 4d e0 d8 bc bf a6 81 23 1f ef 84 81 57 ca 0e ff e5 c9 45 bc 2e fd c7 7e 10 72 fb ee 21 a8 3a 3d 6a bc 4f 69 81 43 59 25 57 d0 ae e2 bb 55 95 91 61 e1 9a b4 90 af 5e 5b 8f dc ea 72 66 95 e4 a0 b5 9d b1 19 e3 6e 2d 62 08 6e 61 92 b5 80 Data Ascii: G-%bPy$4:%-DVa%7RV`)E$cS\d&g_v.0VyApR~Er%U/V`U;B'%:F\s240v aJbrkjOsirY(c.=;=WM#WE.~r!:=jOiCY%WUa^[rfn-bna
2024-05-27 22:43:41 UTC	299	IN	Data Raw: ae ed e0 b4 44 23 c8 4f b2 d6 5f 5c 0a 96 c8 d9 60 8d 36 16 b3 ea 7e ad 87 54 ab 5f ab d6 d7 9c 4c 50 d3 db 89 26 1a 95 9d 92 8d f3 9b 58 81 05 c5 ea a2 c2 73 26 28 3f 40 3e 7c b0 74 e7 f9 87 4e b4 78 9e 75 0f 23 bd fa ea 3d 87 80 43 5f f8 ef 8f fd cd e4 58 72 cc 73 35 59 7b 02 a4 71 ab ff 97 e8 a0 e9 1a 9e 1c 23 bc b8 10 32 97 b5 69 b7 2c ee ca dc 50 54 0d 50 16 78 f6 a4 75 13 9e 93 88 23 58 50 02 67 ed 3c 37 7a f8 28 e9 4b a7 fc 80 bc 5f c6 a9 68 79 13 35 94 67 61 ce 11 73 ff eb 9a 18 4e 38 46 eb 82 03 ea 51 5b b1 11 98 2f 5a 3b bb 54 2e 9b 5c d9 ae 68 62 55 70 12 c4 36 bd 82 18 d0 4a 53 d4 3a b5 6c ed 4f b8 d5 a9 fc e8 4f 13 65 6e 78 f6 18 18 55 0d a5 84 71 4e 95 3e 74 fe 5c d3 07 1a 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 Data Ascii: D#O_\`6~T_LP&Xs&(?@>\|tNxu#=C_Xrs5Y{q#2i,PTPxu#XPg<7z(K_hy5gasN8FQ[/Z;T.\hbUp6JS:lOOenxUqN>t\`````

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50214	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	798	OUT	GET /ndBjgsc_sRzVPfSLYwGYEWLMHYbkfEMjy0u4Foa-TxNDNDi9wn_5rPcPq7ZSEJh-iO3NmYjpfowhqFxrWKyBsJZrHMwtHhqVJBsKG1ryO8N6dKmTosA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:41 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3139 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:58:39 GMT Expires: Tue, 28 May 2024 18:58:39 GMT Cache-Control: public, max-age=86400, no-transform Age: 13502 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 0c 0a 49 44 41 54 78 9c ed 9d 6d 8c 5c 57 79 80 9f f7 9c 7b ef cc ec ce d8 bb 3b bb f6 ee 3a 2d ce da 21 41 a0 f2 a3 2d 55 db a0 46 c2 b4 5e 27 a9 50 10 89 40 94 0a 08 71 63 b5 14 b5 55 fb af 28 95 2a 55 fd 55 50 3f d4 38 71 15 55 54 82 26 42 8a 20 81 d2 08 b5 52 48 c0 80 14 3b 8d 00 27 71 28 69 11 8d 3f d7 bb 3b 73 3f ce 3d fd 31 33 f6 ee fa ae ed 9d 9d 3b f7 de f1 7d a4 91 56 33 a3 39 ef ce 33 ef 79 cf d7 dc 11 6b 2d 25 a3 8b ca 3a 80 92 74 29 05 8f 38 a5 e0 11 a7 14 3c e2 38 49 77 ca 5f 42 6d f9 22 3b 2e fd 14 df 8d a8 2d 07 bf 84 f6 3e 0a f6 4e 60 06 30 40 df a3 b3 9f 2e 2d f0 7b ef fa 7b fb 0f ef fb 53 c7 ae 28 8c 1d dd cf 99 9e 89 bc d5 af cf fe Data Ascii: PNGIHDRxx9d6IDATxm\Wy{;:-!A-UF^'P@qcU(*UUP?8qUT&B RH;'q(i?;s?=13;}V393yk-%:t)8<8Iw_Bm";.->N`0@.-{{S(
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 6f 49 24 7f 37 69 08 44 56 31 ed 2d 83 d4 79 f8 e4 a3 68 89 58 dc fb 4f 85 cf 64 dd cd dc 7b ce 1e 04 60 bf 93 7a e6 5e 93 4c c7 b1 91 55 4c bb cb ec aa c0 e1 13 c7 78 f6 8d 8f 17 36 93 85 6e cd f5 27 38 78 e6 10 1a cb 82 ce 56 2e e4 60 a2 d2 93 dc e9 ae 8b 2b 59 bb 21 af 05 13 2c 9e 39 c4 05 eb b2 d7 b9 44 94 fd db 9b 83 08 b8 d2 5d cf 78 f0 d0 89 63 85 aa c9 bd 01 d5 b7 5b b3 bc ef ad 7b 58 ea d4 dc cc 33 b7 47 3e a2 e0 8a e4 5d 15 38 72 f2 d1 c2 64 b2 76 42 5e f7 77 f2 c0 d9 03 ac a2 59 c8 91 5c c8 91 60 b8 4e 77 6d f3 25 59 d1 9d 0a 05 13 1c 3c 73 37 3e 3a 57 99 db 23 5f d1 b0 be bb 3e 7c e2 18 cf 9c fe 64 47 b2 ca 57 26 2b 27 e4 87 fe 14 87 ce 2c 72 c1 ba b9 cb dc 1e f9 8b 88 f5 dd f5 43 27 1e e3 ab a7 1f cc 55 77 ed b8 21 df 6b ef e2 ae b7 ee e5 52 Data Ascii: oI$7iDV1-yhXOd{`z^LULx6n'8xV.`+Y!,9D]xc[{X3G>]8rdvB^wY\`Nwm%Y<s7>:W#_>\|dGW&+',rC'Uw!kR
2024-05-27 22:43:41 UTC	891	IN	Data Raw: af cf da 54 7f 1a ab 64 90 58 b1 48 ac dc a4 c7 12 05 fb fb cf 3f ab 97 bc 74 a3 2a 19 18 ae 5f c1 af af bc 94 f4 58 72 06 2f 35 ff 56 b9 1a 4b 9c 6e 64 25 db 26 b6 02 6e 48 5d fb 7f 95 f4 78 a2 e0 e5 33 3f f9 9f 95 ea cf fe c2 a1 92 6e 74 25 db c6 73 42 56 8c f3 c2 1b a7 ee 78 2a e9 f1 44 c1 2b ee 1b b4 ed b9 cf 2a 55 f9 57 09 05 31 aa 1c 76 e5 0c b1 82 32 1a cf 8d 8e b7 fc b1 df fa df 37 f7 27 3e 6f d3 e9 90 b2 0e 12 ab fb ed 4e fb 67 a6 1a 5e 24 02 ec e0 06 5e 36 2e 07 71 fd 22 56 88 55 8c 3f d6 3a 1a 21 ef d1 62 2f 51 5d 4d 7c ee 35 d7 a2 55 db c5 ec 6b fd b5 59 32 8f d5 de 9c fc 60 5c 33 bf 61 e3 78 76 7b d1 09 b1 89 41 a4 89 f0 6e d2 ef 1b 9e 4b f9 f5 87 8b 70 21 86 17 62 2f f8 ca f2 e4 f9 1f 8e 9f 9f ba e6 55 2d ae bd d9 20 16 8c 80 b1 e7 94 a3 8e Data Ascii: TdXH?t_Xr/5VKnd%&nH]x3?nt%sBVxD+*UW1v27'>oNg^$^6.q"VU?:!b/Q]M\|5UkY2`\3axv{AnKp!b/U-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50215	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	553	OUT	GET /v58NX5Yjsfo7e9kmvZYz-UpgxiBwecURTpNGU7dQ9CDZLnQaxf5dKsWQDUPxO91gZX-_BGEGd-HvLLXIjrzfOQw-NrQfqlxKLEFF1g=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:41 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4621 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5521 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 11 c4 49 44 41 54 78 9c ed 9d 79 90 1c d5 7d c7 3f af e7 d8 43 c7 6a 2f 49 bb ba 48 a8 12 09 60 88 01 a7 ca a4 6c 92 70 84 98 14 15 fb af c4 c5 3f a9 8a 93 3f 5c ae 1c 55 49 a5 ca b1 ff 20 a9 4a b9 48 2a 21 c6 18 10 2e 99 23 e1 08 31 37 08 dd 04 84 04 58 b1 4d 90 05 3a 76 97 3d 24 b4 3a 76 57 3b b3 33 3d dd fd 7e f9 63 8e ed 9d e9 99 e9 ee 39 b4 40 7f 0b 49 6c 77 bf df 7b d3 9f 79 bf f7 de ef d7 af 17 22 45 8a 14 29 52 a4 48 91 22 45 8a 14 29 52 a4 48 91 22 45 8a 14 29 52 a4 d6 4a 35 c3 c8 d9 b3 67 07 0d c3 b8 de 30 8c 75 4a a9 a4 88 a0 b5 ae 5f b9 52 18 86 21 ee 63 35 ca 8a d7 c1 32 7b 62 18 c6 92 63 5a Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxy}?Cj/IH`lp??\UI JH*!.#17XM:v=$:vW;3=~c9@Ilw{y"E)RH"E)RH"E)RJ5g0uJ_R!c52{bcZ
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 7f 33 a8 8d 52 6c b9 5d 8a 5c 74 93 54 e1 96 45 b0 1d 9b ed 23 fb f9 ee b1 97 19 54 dd c4 5c 39 9a 76 c5 13 c2 24 1b c4 cf f3 56 9f 25 79 c1 cd 58 26 4f 8e 1d e0 7b 27 76 d2 a7 d5 12 b8 ed 54 d4 83 1b 94 17 dc 54 2e c3 b3 e3 87 b8 6f 64 37 d8 39 9f 6e b9 35 3d 3a 02 dc 80 2a e1 e6 23 54 2f 4d bc c3 03 23 7b b9 90 5b a0 ab 81 31 b7 19 c8 a3 49 56 48 79 c1 9d 35 53 bc 32 f1 2e db 46 f7 33 69 ce d3 5d 05 6e 3b e3 f9 51 0f 0e 21 4f b8 d9 79 76 4e 1e e6 e1 b1 fd 9c cc ce 7a 04 31 2e 8d a2 6c 52 40 55 83 bb 6b f2 7f 79 78 ec 75 3e c8 cc 84 80 db ba 7b 1a 01 0e a0 6a 6e 79 57 a1 e7 96 a7 fc bc ee 94 f7 fd f3 37 c3 0e 33 0f 8f 5c b4 4f 79 cd 96 2f 9a 0b ec 9c f8 29 db c6 f6 73 b4 4e b2 3e 70 7d 1e 3f 87 59 9c 46 80 7d a8 da 52 e8 95 89 77 78 68 74 3f 27 cc ca 94 Data Ascii: 3Rl]\tTE#T\9v$V%yX&O{'vTT.od79n5=:*#T/M#{[1IVHy5S2.F3i]n;Q!OyvNz1.lR@Ukyxu>{jnyW73\Oy/)sN>p}?YF}Rwxht?'
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: bd e4 80 bd e0 fe 64 ea 10 db 66 8e b2 41 f2 bf f0 c2 4f cf 5a 96 70 5d bd 56 34 a4 44 b8 a2 23 c9 2d eb 56 71 c5 40 82 4e 95 c5 74 1c fc 6f 5d f9 84 cd a2 bd e0 3e 7b ea 10 0f 5e 38 92 87 4b e3 bd 36 7f 4d bb e0 7a 14 96 7c ed d3 5a f8 fd 9e 95 fc d6 da 2e 2e 5b 63 60 eb 05 2c 0d de 70 bd ed 1b b1 e0 84 c3 00 2e 4e 4e 1b 92 77 cf 3d c8 83 17 8e 30 2c 2c 99 50 55 6b 84 bf c6 b6 13 ae b8 fe 11 10 85 ad e1 3c f0 8d e1 3e ae ec 4b b0 ae cb c1 74 16 08 95 fb 0b b1 f7 e9 92 f4 60 f7 53 14 8e e3 30 92 3a c3 33 53 6f b1 ed c2 2f 19 96 7c 60 a3 6a 59 bf 75 d4 b9 b2 25 70 dd a7 45 31 eb 68 56 25 12 7c 7b e3 1a b6 f4 1a 74 19 66 c9 25 87 a8 1d 82 07 b2 da 0f d8 1d 6a d4 5a 33 92 9e e6 c9 c9 37 d8 3e 73 94 61 51 55 e1 06 71 19 8d cc 94 c3 b9 26 a9 74 c9 b6 e6 e6 35 Data Ascii: dfAOZp]V4D#-Vq@Nto]>{^8K6Mz\|Z..[c`,p.NNw=0,,PUk<>Kt`S0:3So/\|`jYu%pE1hV%\|{tf%jZ37>saQUq&t5
2024-05-27 22:43:41 UTC	982	IN	Data Raw: 20 35 45 4f 95 64 7d 85 5c 70 85 fc 23 2d 5f df 32 c0 0d fd 0a 91 5c e9 89 ff c5 3f fe 25 04 8d 70 d5 6b 67 e8 d3 ad aa 36 af 10 6f 07 0d dc 83 8f 9b 67 07 b7 a7 df 36 7e 96 3a 4d 1f fe 62 cb e5 70 3f 36 6d be b9 75 88 2f f6 4b e1 a1 ef 70 6a 1a d4 92 c1 46 57 b1 ad 72 cd e1 15 18 f0 ab e9 a3 bf 76 22 75 26 de 89 3f a7 21 2e b8 0e 70 d6 72 f8 e6 d6 21 6e 1a 14 16 ac ac 4f 2b 65 36 5b d1 8f 3e 85 70 21 cc 18 ec 58 76 0c 85 e5 e7 39 fb b2 09 95 88 f0 ad cb d7 71 63 7f 70 b8 2d 81 0a 0d 4e a6 ea 5d 11 f2 4b d3 24 b8 10 26 d0 21 3e 37 5f 96 2d 85 56 1a 06 5f dd d4 cf 17 fa a9 b2 17 c7 cb 44 ab 46 bc 62 05 8d f6 da 5a 57 5d 7a b8 10 02 b0 65 eb 40 3d 37 2b c2 60 2c c6 1d 1b d6 70 5d 9f c2 d1 d5 c7 dc 96 03 2d 55 d4 ca 5e 5b bf 74 18 b8 61 ef 4c 88 74 61 9d 0b Data Ascii: 5EOd}\p#-_2\?%pkg6og6~:Mbp?6mu/KpjFWrv"u&?!.pr!nO+e6[>p!Xv9qcp-N]K$&!>7_-V_DFbZW]ze@=7+`,p]-U^[taLta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50211	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	785	OUT	GET /Qvc6rWiGG_a6LNQ7Yx5vMmve_5ku8TG7z4vmWG7VBkbcOQfOSE2BS7eBcD1NUOWTsbs9A_Vh-mJpKtsGtG_0f7sIGFy5LwhdOLRg4w=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:41 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5502 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:02 GMT Expires: Tue, 28 May 2024 22:42:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 99 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 15 35 49 44 41 54 78 9c ed 9d 69 8c 65 47 75 c7 7f 75 ef bb 6f ed 6d ba 7b 7a ba 7b ec 9e c5 e3 b1 c1 60 e3 18 c6 80 82 41 8e 42 84 04 11 8e 82 f2 89 10 b2 11 05 25 ca f2 2d 12 f9 1a 29 41 88 58 a0 2c 7c c8 a2 80 40 0a 42 09 1f a2 44 64 71 12 b6 31 04 db 60 e2 31 8c c7 5b 4f 4f cf b8 f7 e5 2d f7 de 3a f9 70 df eb b7 dc e5 dd e5 bd d7 e3 e8 fd 47 af a7 fb de aa 53 e7 d6 bf ea d4 a9 53 75 eb c1 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 0c 17 2a 41 da 53 f0 73 6f b9 fc 55 67 65 61 8a 7c eb a2 ed 3a 62 c6 c9 1d 90 c8 05 5c 57 c4 77 51 bb b1 14 d2 39 dd 9d 57 03 ae 8e 95 Data Ascii: PNGIHDRxx9d6sBIT\|d5IDATxieGuuom{z{`AB%-)AX,\|@BDdq1`1[OO-:pGSSuc1c1c1c1c1c*ASsoUgea\|:b\WwQ9W
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 68 79 9a ff df cc 18 f8 09 8d 64 0d 02 c7 ed 0f 8f 2a 02 37 e8 d8 db 20 b5 4e 49 70 88 e3 d3 99 22 e1 d8 1b d8 33 12 10 14 dc 33 d2 23 d1 c8 9f 6a fc 1d 0d 22 4c 74 b6 69 c3 60 25 0e 4e c6 71 5b 95 51 63 e0 26 3a 4d 2b 0d 9f ca 8c 56 8f e3 c1 70 c3 ba 03 25 38 aa 52 93 39 1d 09 cb cd 28 23 b6 89 8d 59 ce ed d4 b4 fc 26 ba 11 6f 47 44 27 fa 55 50 e2 07 4e e8 7d c7 16 9b 31 ff eb 11 fe 1e 9c 4f d0 a9 45 32 91 1b d6 23 32 13 99 d5 bc 8f b0 ac 2c 65 c7 19 c6 7c 6c 36 2a 39 d0 22 be 65 c2 d6 df 47 9f 6c ca 86 9a bb 64 97 47 66 9e b3 e2 b8 7c 02 9f 89 f6 45 ab 53 39 4d fd ee 87 47 9d 86 55 0d d9 cd fb eb 6f fc 85 61 78 d1 7d ef a7 71 c4 e2 cb 1a ad 79 ce 54 54 c2 d2 d2 21 63 a8 b2 8d 38 aa 46 92 3b c4 b9 73 d2 32 13 48 18 88 1e e9 8a 8e 57 b6 7f 0c 8e b1 37 b8 Data Ascii: hyd7 NIp"33#j"Lti`%Nq[Qc&:M+Vp%8R9(#Y&oGD'UPN}1OE2#2,e\|l69"eGldGf\|ES9MGUoax}qyTT!c8F;s2HW7
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 5f c6 50 c9 1c bd 01 78 df 02 55 5f 62 df 80 93 36 1a 9b 36 b4 28 22 18 86 81 65 5a 28 54 a0 1c e9 fa 5d 98 cc 97 bb 76 8e 75 56 8e 02 4e 2b 93 cf ae 3f c5 d6 b7 77 79 f4 ec db 78 ef d9 b7 b2 5c 9e eb ea cd d7 ab 1b fc f3 b5 ef f0 6f 2f 5e e6 0b 3b 2f b0 a4 cc f6 8e 8e 9e ca d6 08 93 56 39 f4 19 bb cb 57 e4 4d 0b 53 a9 c0 b9 78 92 5a 0a af d3 b0 49 a5 7f a9 c8 47 f0 37 ae d9 3c 7a 34 4e f6 9e 39 11 a4 42 7a 62 23 45 47 95 2a 6d cd 82 5a be 42 71 1a 93 2f ee 5c e5 c9 1f de e0 6b 57 bf c1 e9 e9 25 a6 cb 93 00 ec 1c ee b1 ba bb c6 77 6b af f1 23 fb 80 25 95 6b 3f 69 60 4f 0a 26 eb f6 42 b0 c5 f0 11 bc dd d5 08 06 ff 50 41 84 d8 e2 52 b7 eb be f2 02 ab 5a 29 b6 1a fb 18 a8 be d3 a0 25 95 63 d7 ae f1 65 fb 65 64 ff 55 26 0d cf 54 ef 68 17 85 66 0e 93 e5 0e af Data Ascii: _PxU_b66("eZ(T]vuVN+?wyx\o/^;/V9WMSxZIG7<z4N9Bzb#EG*mZBq/\kW%wk#%k?i`O&BPARZ)%ceedU&Thf
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 7d e3 ec 19 7e 61 e5 61 f6 dd 46 c4 a4 a5 35 75 14 ca 56 81 93 95 59 de 3c b7 c2 f9 ca 3c 35 1d df 37 18 04 b9 30 aa f5 e0 e6 7c d9 11 cd 4a 65 8e bb a6 97 a8 e4 4b d1 cb 89 2d fb 87 67 ce ef a8 9c e0 d2 c9 8b c7 fa c6 80 88 70 e9 e4 45 ee ac cc f9 96 2b 3b 52 75 fc e6 fd 9b c8 97 b8 30 b3 cc b9 89 39 6c 9f 75 1a d4 f3 8c 28 16 dd bb 09 be 45 88 20 e4 4d 8b 0b d3 a7 28 98 f9 88 cd 65 7e 5d 1d 71 b9 38 b9 4c 31 97 f7 df 1c 29 84 52 2e cf 3d 93 4b 38 a1 a7 be fb e1 8a 50 30 f3 5c 98 59 26 17 b2 59 a1 bf 94 a8 3b e1 39 d2 9f 36 db 11 c9 8a 13 73 d6 02 a7 4a 53 1e b9 41 0a 05 10 db 82 23 c2 4a 79 2e 72 ea 31 0a 78 0e 95 62 a5 3c 8f 93 f0 0d 0e 41 28 98 16 a7 3b 36 2b 24 39 0b bb 7f 09 c1 f0 11 fc f9 6b 35 da b5 1d f6 49 0e 8d 78 a1 bd a0 0d 87 7d 44 0a de 76 Data Ascii: }~aaF5uVY<<570\|JeK-gpE+;Ru09lu(E M(e~]q8L1)R.=K8P0\Y&Y;96sJSA#Jy.r1xb<A(;6+$9k5Ix}Dv
2024-05-27 22:43:41 UTC	471	IN	Data Raw: 30 21 3f a1 b1 0f 15 12 7c 46 5b cc b2 fc f7 dd 86 f2 48 2e 64 23 b7 99 62 95 80 8e 19 40 f0 0f f7 71 8b d7 c4 c5 3b ea 26 2e 86 f6 de ee 90 c7 e2 18 9b 03 94 09 56 45 b0 0f 94 17 8e f2 55 4b 4a 82 04 74 03 5c 05 a6 95 54 6e 47 2a 17 d0 bc 04 1c f4 de 0b b6 b1 87 85 6f 56 8a fc 97 a9 9a 61 ba 38 9f 81 a3 33 a2 9b 34 5f 9c 64 71 f4 6e df 57 86 47 b2 91 f3 de 12 54 46 eb 23 1d bf f7 7e 22 ee a9 e6 7d 05 ba a1 02 9c b9 78 cf 61 1a 50 29 f3 1f 1c f0 f5 a0 fb 81 04 ab 9f dd f9 01 07 c6 5f 6d 6e e1 1a 23 3d 95 4f c8 46 6c 1c 47 2a 2e b1 fe 34 ca 80 5c 49 50 39 ef bb 3b 94 29 cd ff 83 3e 51 f7 fc f7 b5 dd 1c 02 8e ca ef 0f c3 80 8d 6d 1c 0e f8 1b f5 18 3f 0c 4a 13 69 83 e5 2b 95 8f 6d ba ee 27 0b 65 26 62 95 98 18 a3 8b e8 78 c9 b3 79 c0 9d 72 b4 ad 22 62 20 fd Data Ascii: 0!?\|F[H.d#b@q;&.VEUKJt\TnGoVa834_dqnWGTF#~"}xaP)_mn#=OFlG.4\IP9;)>Qm?Ji+m'e&bxyr"b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50217	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	554	OUT	GET /uzkOxzfGFGjzRx0FK6B541qcv469wNDTQf_TUu4oqH_oPUGJoajTkqHLJ9DD188Kmocg_DJg2OBf1FxyRc6MLK_gMFFRmm7n7XTreZU=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:41 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 6744 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:40:38 GMT Expires: Tue, 28 May 2024 21:40:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 3783 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 19 a4 49 44 41 54 78 9c ed 5d 5b 8c 5d 57 79 fe fe bd f7 39 73 9f f1 8c ec 90 90 84 c4 09 90 92 aa 12 97 46 58 ea 0d a9 b4 10 51 28 55 ab be 40 4a 5f 50 91 1a 23 ec 56 ea 43 1f fa 50 8a 2a 8d 91 80 f2 52 f1 d2 02 2f 7d 6a 45 50 45 49 21 06 aa 2a ad 54 02 c6 76 c8 d8 c9 78 7c c9 d8 33 b1 e7 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx][]Wy9sFXQ(U@J_P#VCPR/}jEPEI!Tvx\|3
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: bd 64 c5 55 26 42 b8 df ba eb 92 3c ca c8 1e 01 3b 6d 7e cf 3f fd ef a0 69 94 8d 81 a7 bb 4a 1f 02 70 e9 be f7 d3 2b d7 e7 29 01 77 86 ae 7f 9d 7b 97 00 af 89 a8 4f 68 af ce 42 f8 00 33 81 38 02 58 80 c1 20 a6 6c 45 09 20 22 84 9d bb 0f f2 28 34 88 10 fc ec 62 38 91 bf fe 0b 0d f0 ef 01 58 bd ff 98 b7 b2 b1 e0 01 df 8d c1 5d 8f 25 b7 09 22 81 ce c6 22 7a 3b 0d 30 31 18 04 08 96 de 6f ea 4f 25 20 67 80 5a d5 f5 6d 22 1a d3 46 12 0c 5c 7d 43 18 5e 62 30 96 de ef 12 7d 1b 00 ae bf 28 00 60 e3 07 4f 4b 9b db bd 04 90 d4 54 e4 09 ec ae 2e a6 db 98 65 c4 1b b7 56 43 a2 bc b1 25 84 ed 16 82 e9 59 90 d7 c0 b0 de f5 dd 20 66 60 6b df e4 b3 12 c0 7f f8 fc df 3f 19 46 d1 a7 07 22 3c 26 58 2c 11 88 29 b7 28 f9 7d 58 b6 33 8d f6 15 36 b2 16 32 32 c0 2c b0 d6 03 8e f3 Data Ascii: dU&B<;m~?iJp+)w{OhB38X lE "(4b8X]%""z;01oO% gZm"F\}C^b0}(`OKT.eVC%Y f`k?F"<&X,)(}X3622,
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 27 b2 f0 88 28 f3 9e 0d fe 72 68 3a 6c ae 55 7a f3 e0 e6 eb c4 e5 51 b7 0d 7f 72 1a e4 f9 46 17 77 c2 fe 02 15 9d ac aa 71 b1 95 65 9b 4d 56 25 77 26 96 dc d6 35 00 4d 68 49 68 db 8d 0a 0b 11 09 ec bf 31 8f 70 cf 4f 01 55 6f 27 90 d2 2e b5 ce 16 70 9d de b4 ca 7a a9 2f a6 6c c1 54 92 a3 c2 3e f5 b1 ab 53 95 3d 62 00 2c 2a 84 47 45 87 2b bc e2 f8 19 e4 84 ab 0b 7d c6 a9 e9 3d 9c 38 fa 53 bb cd cd bf 94 43 86 e0 64 65 5e 84 9b 2f 2f c2 6f 24 89 0d ca 54 73 1c 26 65 8a 32 a7 03 92 3e 19 31 7a 8a 7d 76 48 66 be a9 ab 3c a1 30 75 bc 86 a0 31 09 b8 01 30 0d e1 19 bb 1d 29 f3 1a 18 e9 ad 3f 09 6e 0b cf 3e 72 3e f6 96 ab d8 5c 1b c9 8e c5 20 c4 ce f9 39 78 01 67 49 0d 8a bd 68 4b 0b 8b af 55 be 9e 44 9a 26 4b 9b 72 56 5e d0 58 4a 72 24 25 79 7c 59 c1 f2 3a 4e 15 Data Ascii: '(rh:lUzQrFwqeMV%w&5MhIh1pOUo'.pz/lT>S=b,*GE+}=8SCde^//o$Ts&e2>1z}vHf<0u10)?n>r>\ 9xgIhKUD&KrV^XJr$%y\|Y:N
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 75 16 60 4f be a1 e0 31 1a 13 52 91 f9 71 3b 09 30 49 49 56 24 38 ed db b6 00 5a 81 fc 4e 41 72 41 b3 c9 07 04 37 29 2b de e6 a6 e4 02 aa 2a ce ca a3 41 1f 7e a3 69 80 6c 30 67 19 b0 d4 06 b3 25 e9 b1 d6 07 96 0f b5 70 fc f1 97 2b a9 e5 cc ae c5 7f 79 0c d1 17 18 ec 33 ba db 01 76 ae 3c 80 bd ab f3 e8 6e 4e 41 74 03 78 01 23 98 88 6f 38 40 71 9e 12 47 4a 01 d4 57 9c ab ea 94 5b 7c 8a 3b 77 84 2f ea 4c b2 36 6e f8 ac 6b ad 75 40 f6 3e 73 e5 59 1d 42 34 18 c0 8f 25 79 18 73 6c aa 68 5b 2d 91 81 bc da 03 96 17 63 c9 6d e5 25 d7 c2 6a ec fd b2 60 88 3e 63 d0 02 da 9b b3 d8 bb b6 88 d6 b5 79 b4 af 4e cb d7 4c 7c c0 f3 19 fe a4 48 41 25 e8 59 29 15 d8 e4 7a f2 72 99 ba a8 ee a5 17 10 b6 f2 b2 5b 7e 8e fa ae e7 b5 86 02 57 75 ae 39 77 21 47 89 e3 65 48 72 01 e2 Data Ascii: u`O1Rq;0IIV$8ZNArA7)+*A~il0g%p+y3v<nNAtx#o8@qGJW[\|;w/L6nku@>sYB4%yslh[-cm%j`>cyNL\|HA%Y)zr[~Wu9w!GeHr
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 60 f9 b3 3b ab bd 07 78 ee d0 22 0b de 02 0f fa 20 0a c0 10 20 9f b5 ad e6 91 02 70 5e 8c 52 a9 48 54 b4 35 80 2c 3c 2d f1 34 cc ff 54 af 52 59 14 4f 55 e1 09 c8 c9 c1 71 5d 07 b8 72 ba 8e bb 42 05 92 3b 0c b8 b6 d7 51 ad 8f 13 0d a9 9a 13 52 00 fe 2e 80 26 26 3d 8f 99 19 c1 f4 02 c2 f6 4e 0c b2 27 07 4d dd 61 4a 55 b4 3e 8f c4 5e 92 13 1f ca 33 9e 35 2b ba 90 2b 4e 74 aa 32 45 45 53 18 dd a7 41 b5 b2 21 ab 80 eb e2 64 88 38 37 cf a6 56 7f 9c e0 3a e6 a2 00 2c 3f a6 ed 35 1a 4c 90 93 0f 66 0e 21 dc df 05 47 03 dd d5 d1 3a 22 e5 92 fb c3 9e f9 fa ee 4b 45 76 50 2f 37 c6 d2 ca 39 5f a0 f7 ed 58 90 6c 7d 87 b3 b9 2e 6f f9 c0 e0 56 a1 c4 d4 58 3e 21 64 c9 45 fb d2 4e 31 c0 cc 68 cc cc 63 d0 de cd be b0 aa 2d 62 c6 08 ab 7c 39 f9 2b 92 dc 8a 52 eb aa 6d 94 4b Data Ascii: `;x" p^RHT5,<-4TRYOUq]rB;QR.&&=N'MaJU>^35++Nt2EESA!d87V:,?5Lf!G:"KEvP/79_Xl}.oVX>!dEN1hc-b\|9+RmK
2024-05-27 22:43:41 UTC	325	IN	Data Raw: 6b ff d7 3c b4 f4 de c2 07 de 46 20 6d cd 88 10 75 93 9f 9b 29 ab 6c 96 15 f9 3c 56 9b 5b 74 61 28 9d ef 2e b3 9b 7f 1d 5c b3 b8 4c 72 ed 43 73 fc 4f 6f e7 d6 8f ff fb 8b 47 df 67 6b ed 4c 74 0c b6 6e 7d a0 bf 7d 73 83 85 48 19 ac 12 12 95 91 26 e9 82 e1 35 27 01 cf 37 63 dd a2 b8 78 5c cf 82 8d 64 d0 df 24 e0 12 81 85 40 6f e7 e6 46 7f e7 d6 07 86 e7 36 a6 df fa 8b 8b df f2 a7 a6 3f 9a 38 47 ae c9 1f 54 ba e5 b7 92 e3 df 14 aa 98 93 75 94 ba 2f d9 1e 4a 30 3b 1f ae 6f 14 6d 78 42 72 47 ca 3e 54 41 58 c6 b9 f1 14 6f 99 a3 10 61 af 8b b0 b3 ff dc 8b 5f 7e e2 63 05 0c 57 c3 e5 37 3e f7 f3 27 c9 f3 3f 4d be 7f 8c 3c 6f 09 07 13 62 27 27 51 af 5b dc 33 95 31 6c 91 5c d3 18 16 34 2d b1 83 96 dc b4 db bb 96 85 6e e7 db ed a0 19 9e bd 62 25 85 10 b7 38 8a 5e 64 Data Ascii: k<F mu)l<V[ta(.\LrCsOoGgkLtn}}sH&5'7cx\d$@oF6?8GTu/J0;omxBrG>TAXoa_~cW7>'?M<ob''Q[31l\4-nb%8^d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50220	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	798	OUT	GET /1zrYQvVLwo2Mubiugujr-Gn82yOoooWQ1dyIO_ougkdqVKDU_UaL7b-i6i4JNL_7V-gRitDbpIulH5hWGdHlAxp6zoCq4fvNg2PqIvpmh0QE56eXAHA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:41 UTC	576	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2893 X-XSS-Protection: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 19:35:07 GMT Expires: Tue, 28 May 2024 19:35:07 GMT Cache-Control: public, max-age=86400, no-transform Age: 11314 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	814	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0b 04 49 44 41 54 78 9c ed 9d 6b 8c 94 d5 19 c7 7f cf 79 67 76 f6 c6 ee c2 2e 8b c0 02 55 14 5a a0 78 ab 15 14 62 40 b4 d8 34 56 6b eb 25 95 5e 35 2d da b4 a9 16 d3 06 d1 72 d1 44 50 6b 62 fa 41 7b d1 1a af d8 a4 15 da 40 1b 15 ad c4 ad a9 b5 51 81 aa 01 14 41 5c b9 ee 75 60 67 de f7 7d fa 61 96 96 7a 59 76 e7 9c 61 67 76 cf ef db ee ec 79 ce 3f fb 9f 73 de 73 79 ce 79 c1 e3 f1 78 3c 1e 8f c7 e3 f1 78 3c 1e 8f c7 e3 f1 78 06 1c 29 60 ec da 0b 56 e9 15 28 b3 55 18 27 d0 00 68 01 eb 2b 3a 54 c1 08 c4 40 3a 03 ed e9 43 1c 3a 9c 26 9b e9 26 48 24 3b a5 62 e4 bf 13 01 7f 78 6b b9 ac 2d 94 06 e7 06 9f bf 52 c7 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxkygv.UZxb@4Vk%^5-rDPkbA{@QA\u`g}azYvagvy?ssyyx<x<x)`V(U'h+:T@:C:&&H$;bxk-R
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: fd ed ae 85 d4 a8 69 2f ee b8 77 fc 59 ae 14 39 5b 5b 7b e6 26 79 ad 6a 58 4d 43 90 ac 7c 29 f7 9b a1 69 b4 aa 92 48 24 99 34 f9 4c 1a 86 37 92 09 43 e2 3e 8d ae 95 aa 13 e7 de be e3 17 a3 ce 75 a9 a7 20 2e cc 5b a5 b3 05 7e 96 3d 74 f0 22 93 48 f5 2c 00 0c bd 15 2f 63 02 ba 0f 77 71 60 ff 6e da da 0e 90 0d b3 1f c9 c9 32 89 8a b6 f2 f1 e7 3c 31 6e 24 8b 9e ff 91 b4 bb d6 50 f0 66 36 77 a5 4e 12 18 6f 84 86 42 d7 55 94 48 ae 9b 8c 15 ba 32 d0 91 81 74 08 e5 09 3a 54 d9 b2 65 99 bc 3d d0 12 3d 1e 8f c7 e3 f1 78 3c 1e cf d1 14 6c 9a 34 53 6f 9a d0 da d2 7a 79 f7 eb 07 26 45 dd 61 65 aa a6 9c da 86 2a 1d 39 e9 04 ca 12 89 02 ec 9d da a3 a8 80 49 43 bc 13 78 65 8d 2c ff d3 40 6b b2 c5 b9 c1 a7 e9 8d 5f 7a ef 96 8d f7 c5 e9 70 cc 87 3f 53 55 e2 58 a9 1c 56 4e Data Ascii: i/wY9[[{&yjXMC\|)iH$4L7C>u .[~=t"H,/cwq`n2<1n$Pf6wNoBUH2t:Te==x<l4Sozy&Eae*9ICxe,@k_zp?SUXVN
2024-05-27 22:43:41 UTC	689	IN	Data Raw: ff d3 04 8c ae e3 cf 8e 54 95 3c b6 5d 74 47 2a a9 f7 bb 7a 0e 8b 40 e5 a7 0c 6a f1 a5 89 01 ea f9 8e 1b 45 a5 8f f5 b0 46 e6 44 0b 03 a1 d5 85 c9 1a 43 79 a3 21 51 2b e4 f3 e2 12 11 68 1c ce 6d 72 25 d6 6f 2b 19 2c b8 18 b7 c6 10 4d 09 23 22 57 26 d7 4c 09 08 ca e9 97 c9 22 d0 30 8c df cb 42 6e b6 57 31 78 70 37 c9 51 aa f5 b9 c4 cb 51 c4 e4 dc 8f 16 f4 a8 ea 7c 33 22 b3 4f 7b dd 78 10 72 dd 72 63 1d cb e5 3a 4a ea 92 b2 e3 81 f3 8c 0e dd 10 7c 05 e4 d6 c3 19 a6 27 2d cf 73 4b 00 d9 76 e5 f0 ee 98 6c ab e6 9c 3c 6a c3 3f 13 c3 98 e1 fc 91 3a 16 ca d7 69 71 a1 7f b0 51 c8 c4 f7 0a dd 10 4c 05 c6 92 1b 1b e7 47 00 18 81 8c c2 07 31 b4 c6 60 08 29 67 a7 7c 93 97 9d a9 f5 78 3c 1e 8f c7 e3 71 88 fb 51 f4 fc 99 d3 10 ae 05 39 37 8c e3 a6 84 31 ed c0 5b a8 ae Data Ascii: T<]tG*z@jEFDCy!Q+hmr%o+,M#"W&L"0BnW1xp7QQ\|3"O{xrrc:J\|'-sKvl<j?:iqQLG1`)g\|x<qQ971[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50221	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	783	OUT	GET /Y1i12gHz-cP0Ir3LztFSUMijuVGSe9qetVu98aQNchjhxw9byxecnFAFfhxGFyd79tgcGpJrHjJ8S_AQmFnBqtxxDAjh81bxUMe1=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:41 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 9452 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5521 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 02 00 00 00 b6 06 a1 85 00 00 0c 20 69 43 43 50 69 63 63 00 00 48 89 95 97 07 58 53 c9 16 80 e7 96 24 24 24 b4 40 28 52 42 6f d2 a5 4b af 11 04 a4 0a 36 42 12 48 28 31 24 04 15 3b b2 a8 e0 5a 50 b1 60 45 57 45 6c 6b 01 64 51 11 0b 16 16 c1 de 1f 88 a8 28 eb 62 c1 86 ca 9b 24 80 ae 7e ef bd ef 9d ef 9b 7b ff 9c 39 73 e6 9c 73 e7 4e ee 00 a0 1a c3 16 89 b2 51 35 00 72 84 79 e2 d8 b0 40 e6 c4 e4 14 26 e9 11 40 80 21 a0 02 1a 40 d9 1c 89 28 20 26 26 12 40 19 be ff 53 de dd 84 d6 50 ae d9 c9 7c fd dc ff 5f 45 9d cb 93 70 00 40 62 20 a7 71 25 9c 1c c8 47 01 c0 dd 38 22 71 1e 00 84 5e a8 37 9d 91 27 82 4c 84 51 02 4d 31 0c 10 b2 99 8c 33 14 ec 21 e3 34 05 47 ca 6d e2 63 83 20 a7 02 a0 44 Data Ascii: PNGIHDRxx iCCPiccHXS$$$@(RBoK6BH(1$;ZP`EWElkdQ(b$~{9ssNQ5ry@&@!@( &&@SP\|_Ep@b q%G8"q^7'LQM13!4Gmc D
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: c7 f2 b5 31 3c 5b ac 3c 9e 2c e8 47 f0 d3 7c ec a1 39 65 55 93 38 56 3b f6 38 7e 1e ea 03 79 bc 99 79 b2 97 25 68 ba 68 96 58 90 c1 cf 63 06 c0 dd 9a c7 64 09 39 f6 a3 99 ce 8e 4e 70 17 95 ed fd 8a ad e5 0d 43 be a7 23 8c 4b df 74 b9 8d 00 78 96 40 65 c6 37 1d 1b ee 41 c7 9f 00 40 7f f7 4d 67 fa 1a 2e fb 95 00 9c 68 e3 48 c5 f9 0a 1d 2e bb 10 00 05 a8 c2 37 45 17 fe b7 98 02 2b 98 91 33 70 03 de c0 1f 84 80 71 20 1a c4 83 64 30 15 d6 99 0f d7 a9 18 cc 00 73 c0 42 50 0c 4a c1 4a b0 16 6c 04 5b c1 0e b0 07 ec 07 87 41 2d 68 00 a7 c1 79 70 19 b4 81 1b e0 1e 5c 2b dd e0 05 e8 03 ef c0 00 82 20 24 84 86 d0 11 5d c4 08 31 47 6c 11 67 c4 03 f1 45 42 90 48 24 16 49 46 52 91 0c 44 88 48 91 39 c8 22 a4 14 29 43 36 22 db 91 2a e4 77 e4 38 72 1a b9 88 b4 23 77 90 4e Data Ascii: 1<[<,G\|9eU8V;8~yy%hhXcd9NpC#Ktx@e7A@Mg.hH.7E+3pq d0sBPJJl[A-hyp\+ $]1GlgEBH$IFRDH9")C6"*w8r#wN
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: aa d3 d8 d3 8e a4 12 52 93 52 f7 a6 7e 66 47 b3 2b d9 fd 69 ac b4 4d 69 7d 9c 20 ce 3a ce 0b ae 3f 77 0d b7 87 e7 c3 2b e3 3d 4d f7 49 2f 4b 7f 96 e1 93 b1 3a a3 87 ef c7 2f e7 f7 0a 82 04 1b 05 af 32 c3 33 b7 66 be cf 8a ce da 9d 35 98 9d 94 7d 30 47 29 27 35 e7 b8 50 43 98 25 3c 3b dd 70 fa cc e9 ed 22 5b 51 b1 a8 23 d7 2b 77 6d 6e 9f 38 42 bc 4b 82 48 a6 48 ea f2 34 e1 47 76 8b d4 4a fa 8b b4 33 df 37 bf 22 ff c3 8c c4 19 47 66 aa cf 14 ce 6c 99 65 33 6b e9 ac a7 05 a1 05 bf cd c6 67 73 66 37 cd 31 9e b3 70 4e e7 dc 80 b9 db e7 21 f3 d2 e6 35 cd 37 9d 5f 34 bf 7b 41 d8 82 3d 0b 29 0b b3 16 fe 59 e8 58 58 56 f8 76 51 d2 a2 fa 22 83 a2 05 45 5d bf 84 fd 52 5d ac 52 2c 2e be b5 d8 7b f1 d6 25 f8 12 c1 92 d6 a5 2e 4b 37 2c fd 5a c2 2d b9 54 ea 58 5a 5e fa Data Ascii: RR~fG+iMi} :?w+=MI/K:/23f5}0G)'5PC%<;p"[Q#+wmn8BKHH4GvJ37"Gfle3kgsf71pN!57_4{A=)YXXVvQ"E]R]R,.{%.K7,Z-TXZ^
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 4b d5 b1 71 57 f0 b3 1c 75 5b 9e 9e 62 62 b2 60 b0 b3 00 01 44 f0 a8 e0 22 86 b5 16 47 5e 2a f7 bc c0 30 6c 63 a0 95 fd 3f bb 9e 99 a5 ed da 28 64 76 85 c5 66 b8 cb 95 44 04 25 40 a7 8f 8a ed bb 3b 1e 79 c2 da 6f 40 a4 15 9e 2b 45 c7 67 bb 83 cf 6d 09 7a fd 14 2f 33 39 e2 d1 96 08 01 8e fc 20 75 4c 12 e6 5f 6b ed dc 4a 0a bd bb a1 82 a6 40 c0 fd da ca c0 fa 35 e0 04 73 b4 87 57 55 21 67 a1 65 ec e4 98 49 77 88 c9 a9 51 a9 f2 48 81 fe fa 67 81 8f 0e 69 49 32 13 a3 f9 f1 01 80 c2 a1 03 57 77 10 ef b9 ca 16 6b 0d a9 f6 90 40 2b 39 fb 5c 8b e6 e9 39 bb 59 42 2a 84 ba 89 08 89 c8 5d c2 1c b1 71 7f 5e 6a e9 d5 3b c2 ca 36 ef 56 e6 6c f6 5b 19 b3 45 2f aa aa 24 22 b8 54 34 8b 65 b3 46 58 7a b6 ab 7d 24 a9 1d b4 6f eb 17 65 f3 67 43 51 61 b1 45 a9 93 d5 4b 53 c9 Data Ascii: KqWu[bb`D"G^0lc?(dvfD%@;yo@+Egmz/39 uL_kJ@5sWU!geIwQHgiI2Wwk@+9\9YB]q^j;6Vl[E/$"T4eFXz}$oegCQaEKS
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: db 1e 6d 4d 33 ae b4 e4 07 0c 93 96 04 7c 74 92 6b 3a 50 0e 5a 3d 72 88 25 ca a8 7a 3b b8 5a 91 b7 4c be e5 5e 73 d7 ee 46 9b 07 c0 6c f6 b8 29 d3 e4 eb c7 52 c1 f1 6a 7b a9 14 97 66 75 7a ae fd 63 fb 85 84 c8 29 e7 07 e8 8e 1e a6 89 43 ac e1 6d 6b 5d 71 89 7c 71 aa 60 74 00 61 80 c4 51 e0 e6 a8 00 7d f8 10 62 9b 1b ab 83 73 66 b1 39 26 dc 6e ac d4 d9 9d b0 d9 13 67 cf b5 4c 9c 4a a7 ab 60 2d 29 45 c7 da dd 30 a7 f3 b2 02 66 b7 46 ee 65 05 0f f4 97 ef bd da 16 49 b8 f6 c8 50 8b 97 c3 a8 ab e3 44 e4 97 fc 06 5a 77 3a 0d 87 5c aa 22 76 eb 25 b7 68 69 b0 dd 73 25 8a 71 77 4f b3 8c 9f 4a a7 4f 9c f3 b2 e6 2a 6c d1 77 59 9b 69 b9 70 58 c8 f8 34 74 96 08 28 08 d0 3d bd 4c 13 06 47 9a 21 d5 3c 4d 6c 9f c0 74 83 dd 31 31 b8 fd bf 81 e6 1e 0f 44 63 2b 37 0a fa e4 Data Ascii: mM3\|tk:PZ=r%z;ZL^sFl)Rj{fuzc)Cmk]q\|q`taQ}bsf9&ngLJ`-)E0fFeIPDZw:\"v%his%qwOJO*lwYipX4t(=LG!<Mlt11Dc+7
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: f0 ea 27 fe 35 7b b4 54 73 f8 2d b8 34 4c ed 2f 5f d2 a6 2a 47 33 59 76 8c 9b 48 7e 4f 78 e1 1a 00 08 02 ac 76 f7 e8 11 be 4f 3f 3e fb 65 ee fc 49 fd 6e 28 94 82 08 28 03 00 41 94 e9 e7 bb 07 ee 1e 33 c0 54 47 94 35 8e 57 3f f1 2f dd a1 38 a4 30 bd 0c 40 27 24 99 71 45 d7 73 a6 e8 73 56 51 e6 6e dd e5 ab 6e 24 af 3b dc 26 00 41 10 fa f4 2f 7b 66 a6 67 e3 bf ca 5f e0 ce 1c 75 ef 54 e8 12 98 3d fc 6a 01 80 83 ef 13 da ad 33 b5 9f 16 59 3d 35 69 f9 26 df ea ef d4 56 b6 88 3e c7 62 85 ee ec 6f 4e 74 9c 53 47 e5 e5 6a cc 1d 93 99 24 40 8f e0 76 b0 20 c0 ea 28 1b 7f 83 6f cb 57 dc b9 5f dd 7d 2d 94 13 11 7a 19 d0 a1 ef 93 2e 58 2d b5 b9 39 b2 7a aa 6f 80 e3 8d cf 02 af 7e af 3a 4c e1 7b 19 40 40 47 bf 4c f1 aa 1e 95 f7 9e aa c8 f8 f7 6d f9 dc 3d f5 66 d6 a2 73 Data Ascii: '5{Ts-4L/_*G3YvH~OxvO?>eIn((A3TG5W?/80@'$qEssVQnn$;&A/{fg_uT=j3Y=5i&V>boNtSGj$@v (oW_}-z.X-9zo~:L{@@GLm=fs
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: dc 10 49 7f ce 48 e1 ea dc 6d 4b 17 1f 78 a7 a5 29 3e c4 48 ae 3a 15 6b de 91 19 7d 56 0d 5b 10 23 47 b4 43 14 fe d0 71 46 e4 3f a5 6c cf 00 6f 1d ca 18 c2 c0 05 c6 16 29 3d ff ee f6 27 80 ce 66 c0 41 45 ba 6f 49 cf fb af 69 3f 24 92 fe e8 c4 17 7d f3 f2 aa a3 1f 47 65 c4 68 e1 48 5f 37 7c 89 23 32 ca 88 ca 41 dd cc 9a 2e f7 cf 67 d6 2e e0 b5 64 f1 0a e0 2a b3 2e 08 f6 5c e6 f4 56 a2 0c 40 00 4b 11 6d 23 77 ce 79 37 67 53 d8 9d 09 ea ca 9c 2f 97 2c 3f bc 21 39 62 ca 05 5a d9 d0 b4 9e 51 a1 8c a8 38 ba 5c e4 cd 53 bf bb 81 94 c2 ea 7c cd c0 89 09 f3 02 3d d7 7b 7c 71 e7 51 3e 23 0e f2 72 e5 f1 2e b7 df 72 d1 b5 46 fb a0 93 fe cc b6 65 ef 9d f8 32 f2 18 c3 a5 fb 07 a4 74 59 30 e8 b1 38 73 38 53 fd f9 8a 5a 2e 31 b3 37 33 f5 5a cf cc ad c1 ab c8 e1 13 c0 15 Data Ascii: IHmKx)>H:k}V[#GCqF?lo)='fAEoIi?$}GehH_7\|#2A.g.d*.\V@Km#wy7gS/,?!9bZQ8\S\|={\|qQ>#r.rFe2tY08s8SZ.173Z
2024-05-27 22:43:41 UTC	253	IN	Data Raw: 67 cf b1 b3 db dc 78 48 2d ad 21 37 8c 13 3f a8 bb d6 75 7f a8 31 53 46 63 76 74 b9 08 78 77 df 07 37 ef 5e d2 57 4e 15 ce cb c0 d1 48 df cb 5d 9f f6 7f e6 b2 56 7d 1a a4 7b a1 ab f1 3a ba 5c 0c b8 e9 a2 ab d7 74 7b b0 50 f7 f1 73 cf 5e 56 49 57 05 7c d4 6f 6e e3 a7 8c c6 ef e8 33 fa 70 ff e7 d7 7c f7 e7 3e 52 92 c8 04 00 0a 69 4e a6 fd 6d c0 9c de 59 dd 1a ba 6b 21 e9 0f 03 1a c0 d6 23 3b a6 ec 5c 18 07 93 46 3c c6 64 5b 76 d9 ac 2e 69 1d 1b ba 53 a1 ea 8f 04 1a c0 17 87 b7 67 ef 98 db 57 4e 79 79 e0 13 97 a4 77 6a e8 ee 18 d0 1f 0c 34 80 3d f9 39 89 f6 f8 96 b1 e1 fe c0 65 03 e9 8f 07 fa 0f aa c6 1e 75 fc 9f 51 13 e8 7a 52 13 e8 7a 52 13 e8 7a 52 13 e8 7a 52 13 e8 7a 52 13 e8 7a d2 ff 02 e8 a8 9c 8a a3 c6 15 ce 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: gxH-!7?u1SFcvtxw7^WNH]V}{:\t{Ps^VIW\|on3p\|>RiNmYk!#;\F<d[v.iSgWNyywj4=9euQzRzRzRzRzRzIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50227	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	551	OUT	GET /33fCN1bFbB2G1iGDGzlBd_BAWes-Nlv-Qt8ByRpEBU43Lu_mF6twx5kmmN4OE6Z_Gz6x7qXTStQItO4yGA0eEejKPSmSqPb-xpF-=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:41 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 10906 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:38:49 GMT Expires: Tue, 28 May 2024 22:38:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 292 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ed 9d 77 b4 25 47 7d e7 3f bf ea ee 9b ef 7b 93 de 24 49 68 18 09 05 14 50 46 08 07 6c 11 77 b1 17 63 30 8b bc d8 80 40 12 36 60 d2 e2 f5 f1 ee 3a 70 ce 1e 7b 49 66 d7 36 36 12 48 18 8c 0c 0b 36 02 83 2c 19 09 44 56 42 11 65 cd 8c 34 a3 89 9a 79 f9 dd d0 dd f5 db 3f 3a dc be f9 be 30 a3 d1 39 fa 9d 73 df ed d7 b7 ba ba aa be fd 8b f5 ab 6a 78 8e 9e a3 e7 e8 39 7a 8e 9e a3 e7 e8 99 20 79 a6 1b b0 e2 f4 37 db f3 63 79 67 bc 6a 6c c5 13 5b 70 5d 93 77 54 5d 10 e3 b9 c6 00 f8 81 b5 a0 b6 09 81 ef 07 8d 40 4c bd 89 33 77 28 f0 a6 b9 ec 98 c6 33 dd 85 95 a4 67 37 c0 7f b3 ad b2 b9 e0 6c Data Ascii: PNGIHDRxx9d6sBIT\|d IDATxw%G}?{$IhPFlwc0@6`:p{If66H6,DVBe4y?:09sjx9z y7cygjl[p]wT]@L3w(3g7l
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: d4 16 c4 7c f1 a9 4b 9f 7f 59 8f 6a 0e 3b 1d 79 80 3f bd fb cc b3 ab cd 1b a7 7d dd 50 0f 5b c3 b2 14 5d 38 ca 75 2b a1 87 97 7b df 82 2b ac f6 cc 9e 47 6c e9 57 b8 74 c3 c3 3d aa 3b 6c 64 8e e4 cd b6 5e bd ed a3 67 55 1a f7 ec af db 0d b5 b0 7d 48 a4 e3 51 5b ea 93 77 54 18 15 1d 54 0b 94 dd b5 70 d3 89 3a f7 d0 c4 d5 db 3e 72 24 ef 7d 44 c6 e3 bc 2f 3f 5e a9 d5 9d af fb 70 f1 9c 6f 7b ea 58 58 ba 45 3b a8 cc 91 e2 e0 51 ee 1b 02 63 9e 21 ef ca bf 39 52 7f c3 b6 b7 9e 7a d8 7d e7 c3 ce c1 2f fa f2 ae 93 c3 c0 fd 5e cd 6a 0a 2e f4 7e b2 3a b9 f8 48 d1 b0 fb ae 54 b3 0c 30 eb 5b e6 9b f6 d5 d8 fc 4d 9b ae da b6 75 85 aa ee 4b 87 6d 48 2f fb f6 9c dc 39 7d f0 c2 a6 e5 ef 66 9b f6 cc 66 a8 5d 37 3b 1c 2e 4b ef 32 2b 6f 49 2f 47 72 28 90 17 a8 b8 72 97 53 94 Data Ascii: \|KYj;y?}P[]8u+{+GlWt=;ld^gU}HQ[wTTp:>r$}D/?^po{XXE;Qc!9Rz}/^j.~:HT0[MuKmH/9}ff]7;.K2+oI/Gr(rS
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: ad f2 5e 77 ee 4f 16 26 7c 95 37 af bb b6 d6 d3 0e ea a4 91 00 1e d7 da 1b 7c e5 8c 95 9c 89 1e d4 a5 23 e1 52 8d fc 0c a8 b2 a0 60 1d f8 97 f3 ab bc e2 c4 02 8e b5 0c 9a 31 33 02 4f cc 84 ec 99 b3 a0 60 82 10 33 17 83 dc 95 72 b8 38 5d 67 15 1a 56 cf a2 18 be 7a 94 f2 43 01 2e 5d f9 44 c5 62 2f 56 74 0d 0c e6 ba 61 a4 0c bf 7e b9 e0 ae a8 7e 8e c1 6d 3a c2 3f 5f 38 c6 af 6c c9 23 61 38 b4 3e d7 08 b7 ef 6a 70 7f dd 52 26 02 59 c2 10 b3 b0 10 89 ed 84 85 bb 59 79 a4 f6 2a 1c 17 58 7e ad 7c e5 dc 50 1b 6a 28 c0 ab 25 bc 38 50 7b 8e ed 61 e5 8d 02 18 fd ca f4 90 e5 ba 18 c5 3e f0 6e fd fe 6b dd 7a f0 55 91 98 5f b0 11 b8 df b8 b0 ca cb b6 e4 c0 76 eb da 4e 12 81 43 75 cb bd 3b 1b 6c ab 5b 3c 55 14 8d 38 37 08 90 85 1a 26 08 92 45 cc c9 55 23 f5 2c 21 ab e0 Data Ascii: ^wO&\|7\|#R`13O`3r8]gVzC.]Db/Vta~~m:?_8l#a8>jpR&YYy*X~\|Pj(%8P{a>nkzU_vNCu;l[<U87&EU#,!
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 16 8a 86 cf fd d2 7a 5e b6 b5 42 a5 e4 92 77 97 07 74 5b 5b 88 5c 16 63 24 9a c5 31 c2 64 43 d9 3b 1f f2 c4 8c cf ae 29 cb d3 d3 4d e6 6a 21 e7 3d af c0 6b 5e 50 5a 34 b8 df 7f 64 8e 37 75 82 1b df cb 4a a4 77 11 89 b8 51 22 bd ab 09 98 f1 6c 92 c6 7a 38 05 37 e1 64 c7 a0 85 5c a4 ab 3b 87 b5 a3 91 0a 18 e1 cb 79 4f 3e 34 fd ba f2 ae ce f2 3d 75 b0 8a ae 17 65 51 6b 57 7b a7 b1 74 9e 10 a8 14 d8 84 e2 2f d4 78 fb f5 bb 79 d9 a6 02 ef b9 60 0d 67 1c 53 66 75 25 47 ce 08 76 99 01 0b 05 02 ab 71 9a 45 44 25 e0 84 0a 9c 34 96 c3 1c 27 88 29 d3 b0 44 ee d5 62 74 6e d0 87 73 33 e0 46 16 5f 64 60 21 0e 6a b2 ee 5d 0c a2 68 c4 c9 9d 96 bd 80 58 0b f5 26 1a 73 f2 a0 7e 02 88 b2 55 7d bb 1e 18 0d 60 47 83 31 45 36 26 fe ef 32 ec ac b8 05 59 f7 46 b0 e5 02 1e ca 26 Data Ascii: z^Bwt[[\c$1dC;)Mj!=k^PZ4d7uJwQ"lz87d\;yO>4=ueQkW{t/xy`gSfu%GvqED%4')Dbtns3F_d`!j]hX&s~U}`G1E6&2YF&
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 5a c9 1d 63 15 49 8c 38 52 17 26 0b dd 24 27 a1 74 e1 39 d2 dc 94 76 7c 96 43 6d 75 65 c5 19 d0 d2 5d 1a 83 5c 42 4b 85 56 90 40 88 5d 10 52 57 c4 33 b0 d6 11 72 ae f0 b5 3d 0d 76 3f 5d 27 ec b3 4f 48 df 36 a9 b2 7b f7 21 b6 6d df 87 0d c3 48 b5 09 6c 2c c2 b8 0b f5 04 a1 18 38 11 13 89 92 c4 ea 4d 5d 26 46 02 77 59 9c 9b 8c 4f 52 48 15 b1 21 a2 21 d9 e8 5c 42 dd 3a 18 6b 15 0d 06 0e c8 a0 1f 97 42 9d 62 1b 03 58 54 20 a8 14 71 54 90 46 0d b1 b1 04 12 1b 5d 63 23 1d 3e 2f 8a c9 39 5c fd 4b eb 79 cd d9 6b a3 34 9b 11 1b 69 ad b2 6f df 24 3b 9e dc 17 4f 47 9a 68 b2 c7 08 eb 4b 42 05 a1 81 52 21 ce ca 48 2d e5 0e 71 9c 02 3b 5c 2c b7 37 2d fb 10 64 ca 68 37 b8 9a 05 57 33 d7 59 50 a3 be 15 ed 42 b8 8b 83 d5 5a 25 da 18 f5 c8 53 62 a4 90 a4 bb 44 03 16 56 8b Data Ascii: ZcI8R&$'t9v\|Cmue]\BKV@]RW3r=v?]'OH6{!mHl,8M]&FwYORH!!\B:kBbXT qTF]c#>/9\Kyk4io$;OGhKBR!H-q;\,7-dh7W3YPBZ%SbDV
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 3b 8c 91 a4 d3 87 83 f5 c5 dd bd c6 a3 37 07 7f e8 a4 79 a9 87 8f 11 1b 31 cb d6 a5 d9 6b 54 99 0c 94 c9 9a 32 d9 b0 4c 35 2d 53 81 52 4b 97 04 b7 7a 31 dd 54 fe fa 82 2a bf 72 7c 8e 82 33 fc 7e ae 23 dc b1 b3 c6 9f dc 32 c5 b5 7b 02 2a 8e c1 33 82 95 78 42 de 11 42 84 aa 23 dc d6 f4 f8 e1 3e 87 bc 97 35 b0 4c 9a bc d0 0a 33 0b 05 a3 9c 3a 26 34 b2 8b d7 34 8e 4d b7 c5 d1 fb 83 ab 74 83 ab 3d c0 6d 33 a2 e2 e3 5e e0 a6 75 58 6d 68 d3 6e e7 95 e5 9e 7a ab ef e2 b3 20 1f ee 31 46 f6 1a 18 b8 27 e5 a2 40 56 65 ba 66 f9 f3 0b c7 79 e7 a9 25 1e 9c 0c f8 f9 64 c0 4f f6 37 f8 d2 de 26 8d 43 71 a4 4d 80 40 f9 b3 73 2b bc f6 c4 02 55 6f 70 08 52 00 31 c2 6d 4f d4 78 db cd 93 3c 39 af ac 75 0d 62 24 9a 5f 11 8d e6 4c 01 71 84 1c 86 dd 56 b9 f7 50 91 97 6c ae 31 91 Data Ascii: ;7y1kT2L5-SRKz1Tr\|3~#2{3xBB#>5L3:&44Mt=m3^uXmhnz 1F'@Vefy%dO7&CqM@s+UopR1mOx<9ub$_LqVPl1
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 1b 8d 2b 0a 43 73 e7 46 4a 9b f5 f3 d5 af 4a 10 dc 97 7d 94 3a 23 5a a3 7c 5a 5d 50 20 06 c5 71 a2 2d 84 f2 79 8c e3 b0 7e ac 04 b9 12 df da d6 64 ff 6c d0 c6 c5 56 95 d3 d6 79 24 d1 88 34 c2 93 8a 4a 49 75 30 29 b8 19 31 6a 5a e3 dd ca 6d 8a 1e 86 8a 03 0f 36 3d 6e 3d e8 31 d9 a4 4b 7a a8 c2 fa 3c 91 f1 46 3b a0 51 10 2e d3 53 89 ff b7 0c f5 73 07 82 db cb 7b 89 7c cb bb 28 4c dc d0 eb 92 4e 1a 09 e0 e0 8a e3 0e 5a b5 df 40 99 19 5e ba 0f a5 9d 4b 1c 4e 6d 85 fa 8c 41 8b 05 64 f5 18 5a 2a b3 ca 75 f8 dc 6e 9f 87 0f f8 d4 33 5c 6c 2d bc 60 4d 04 70 4b 2c 47 f2 36 dd dd 26 59 59 9f 70 ae 40 92 34 9f ce da 24 1b 2b 65 f4 a5 62 c8 19 c3 5f 1d ca b3 73 d6 ed da 2e 58 01 cf 58 56 8f 47 fb 58 4a 32 21 df a9 3e 13 70 93 a7 af 03 5c cd 1c 0f 05 b7 e7 69 3d a0 7e Data Ascii: +CsFJJ}:#Z\|Z]P q-y~dlVy$4JIu0)1jZm6=n=1Kz<F;Q.Ss{\|(LNZ@^KNmAdZ*un3\l-`MpK,G6&YYp@4$+eb_s.XXVGXJ2!>p\i=~
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: db f2 66 a6 01 69 f7 73 89 af 8d ea e9 35 53 94 e8 ec 96 1e 6e 4d 31 c6 81 32 2f c7 e7 77 16 b9 f3 a0 c7 ef 3f 3a 46 c1 75 49 12 de 35 d9 af 03 48 36 44 eb 31 04 3d 3b 3e d0 a8 aa d5 6f 08 dc ca bb fb 5d 3e 2a 2d 9b 83 01 4a 1f bf 77 ab 03 5f d5 7c fe 6c 95 98 93 55 11 63 70 ca 25 28 57 08 45 fa fa 78 3d a9 3d f1 a8 35 1a 36 44 10 a8 35 30 7e 40 b2 dd 43 f2 7e 04 8d c5 6c d6 17 d5 44 bd 4a 67 77 63 4b b8 63 18 22 b5 9a 98 df d1 57 2d 88 b6 13 cc bb f1 4e 27 12 85 5a 55 e2 a9 29 43 2a de 5b e1 cf 5e f7 64 30 b8 1a 62 e6 9a 3f b4 8d e0 b7 82 f7 1c 3b f2 22 c0 7e b4 22 00 03 54 3f 71 df f9 18 73 95 75 73 67 46 c6 8e c4 e0 96 09 c5 2c 2d c2 a9 b4 e2 ba a9 d8 b6 b1 8f 19 ed c6 9a be 9a 46 32 dc 2f 1d c0 75 81 9b 70 7a eb b8 67 5c 38 99 1a 94 e8 35 01 9a 8d 41 Data Ascii: fis5SnM12/w?:FuI5H6D1=;>o]>-Jw_\|lUcp%(WEx==56D50~@C~lDJgwcKc"W-N'ZU)C[^d0b?;"~"T?qsusgF,-F2/upzg\85A
2024-05-27 22:43:41 UTC	317	IN	Data Raw: 74 15 39 4b 2c 27 e2 88 a7 8e 13 bd a3 37 fb 0e a1 21 b2 3c 65 46 6b 89 b2 d5 3b a2 5d 80 5a 8b 84 16 c2 10 51 f5 c5 c8 a3 d6 b7 77 9b f9 da cf 7d cf dc 63 c7 4a 77 e8 7f 59 77 64 77 03 5c 02 3d 2b 00 ce 92 fb 8f 53 1b dd a9 f9 53 c5 ea 16 2d ba c7 e3 79 a7 2a fa 02 55 8e 15 65 42 92 79 d9 24 bb c2 c4 59 17 9d 3d 55 10 8d 01 8c df 21 8c 55 d4 5a 54 e4 80 11 d9 a9 ca 63 12 f8 0f 9a 66 b8 c3 b8 ec 98 2f 8e 3f c8 ef 8e 1f f5 a0 66 e9 59 07 70 1b dd a4 4e 7e d7 a1 cd 52 5b d8 60 03 bb c6 18 77 35 39 77 42 5d b3 19 31 eb 41 57 ab d8 55 58 53 c2 90 b3 aa 1e 80 11 f1 b1 34 31 76 01 35 53 a8 9d 24 b4 fb 25 08 77 ab 1f 1c 50 ec a4 e3 78 87 82 7c 7e 5f f0 e2 75 bb 39 4d 8e 4a f1 3b 0a 3d bb 01 ee 45 aa 98 6b 67 2b 9e 1f 94 d4 36 0b 1a 36 f3 8e 2f 1e 8e 98 c0 46 af Data Ascii: t9K,'7!<eFk;]ZQw}cJwYwdw\=+SS-y*UeBy$Y=U!UZTcf/?fYpN~R[`w59wB]1AWUXS41v5S$%wPx\|~_u9MJ;=Ekg+66/F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50226	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	551	OUT	GET /p5lVJAicHuI6Ra6jtpYimNt53JZQNCcN06a-Q4fUaNVFo3cjVisZMY_UwBTg5fv2MUkrbwbfTw70N9-bbTfejp9S8rUNadIhWiqh=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:41 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1366 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5521 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 05 0d 49 44 41 54 78 9c ed dc cd 6b 5c 55 18 c7 f1 df b9 f3 92 69 66 32 35 31 2f b4 c6 a8 45 ac b5 ea a2 94 62 28 ee c4 49 5d 08 82 d6 fe 01 82 0b 51 49 8b 85 82 e0 be 8b 36 08 45 d0 95 a8 20 d5 95 8b 9a 91 0a 4a 5b 2b 05 15 31 11 2d c4 d6 98 8a 69 ab b1 3a 31 93 64 e6 1c 17 45 db 92 97 66 92 e7 dc fb cc e9 ef 03 5d 0d 3d f7 32 df 99 cc 43 9e 4e 01 22 22 22 22 12 67 7c 5f 60 70 a0 fc 8c 01 5e 06 b0 d3 f7 b5 a4 19 18 54 66 7f 9f 1e bb 78 f2 ee e3 a3 47 2e 27 7d 3f ab e1 2d f0 be c7 87 fb 5c 64 8e 01 d8 ea eb 1a be 19 63 f0 d7 cc 24 fe 9c be 30 69 4c f4 e0 d1 33 fb 9b 2e 72 e4 e3 d0 c1 d2 f0 3d 2e 32 e7 d0 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxk\Uif251/Eb(I]QI6E J[+1-i:1dEf]=2CN""""g\|_`p^TfxG.'}?-\dc$0iL3.r=.2
2024-05-27 22:43:41 UTC	507	IN	Data Raw: 5f 9f 98 c0 7b 07 7e c0 ba 9e 85 81 d3 eb 0d 2e 4d 5e 7d e7 5b 1b ef e7 61 2a 1d e1 ca 1f 55 44 2d b1 5e 76 45 c4 5f 77 7b 07 ca 22 cf ee fc b4 45 ae 98 c6 96 47 db 51 6c cf e1 a7 91 29 8c 7d fe 37 5a 37 a4 96 7c b7 54 26 6a a8 5d 49 66 d8 c9 6d 8c 90 6b 5f fc 27 4b 23 0e 0d 97 44 9b a8 7b 07 ff 27 93 8f 50 9b b3 f8 e6 d8 25 38 0b a4 b2 06 f9 8d cb 3f 81 85 de 34 d0 1b d3 0d 36 09 b5 81 01 c0 a4 80 4c ab ba 31 a1 a9 f0 d9 0b 1c 03 07 8e 81 03 a7 3e 30 d7 85 6b a3 76 c8 e2 ba 50 86 ca c0 5c 17 ca 51 17 98 eb 42 59 ba 5e 6e e0 ba 50 9a ba c0 5c 17 ca 52 17 98 eb 42 59 ea 02 73 5d 28 4b dd 90 c5 75 a1 2c ae 0b 85 70 5d d8 20 ae 0b 65 a8 0d 0c 70 5d 28 81 cf 5e e0 18 38 70 0c 1c 38 f5 81 b9 2e 5c 1b b5 43 16 d7 85 32 54 06 e6 ba 50 8e ba c0 5c 17 ca d2 f5 72 Data Ascii: _{~.M^}[a*UD-^vE_w{"EGQl)}7Z7\|T&j]Ifmk_'K#D{'P%8?46L1>0kvP\QBY^nP\RBYs](Ku,p] ep](^8p8.\C2TP\r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50229	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	551	OUT	GET /9ks6e2i7ubrVUEkBwpoJeXTceixbWT3ppLdca04jQg6VPMqXiz6B8KEeczJhnRWmjR453_UREmwtS2jP8-yNq-pU5cEDTbEU6Nqb=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:41 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8691 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:27:18 GMT Expires: Tue, 28 May 2024 22:27:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 983 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ed 9d 79 bc 64 47 75 df bf a7 ea de de de 3a fb 8c 46 b3 69 43 8a 24 90 d0 8a 20 c2 0a 48 80 0c 84 dd 06 12 3e 78 c1 01 02 71 c0 c4 31 26 c0 c7 c4 36 31 49 8c 09 7c 02 91 71 c4 c7 08 2c c0 18 9b 3d 2c 02 2d 68 34 08 a1 6d d0 32 5a 66 46 a3 d1 2c 6f 99 b7 f6 eb ee 7b 6f 9d fc 71 6f 6f af 97 d7 dd ef cd 9b 37 f2 fc 3e 9f 9e d7 73 bb 6e 55 dd fa d5 a9 3a 75 ce a9 ba 70 0a a7 70 0a a7 70 0a a7 70 0a 27 02 72 a2 2b 70 ef bd 4f 7b 5b b6 f4 af 13 d1 ac 88 b1 ce 21 aa 8a aa eb e0 6e 51 63 4c dd 95 66 f7 aa 82 b5 b6 a3 fa a8 3a 54 b5 c9 fd a6 c5 1d f3 e1 34 8a a2 48 55 e6 f6 ee 9d 1a 7d c1 Data Ascii: PNGIHDRxx9d6sBIT\|d IDATxydGu:FiC$ H>xq1&61I\|q,=,-h4m2ZfF,o{oqoo7>snU:upppp'r+pO{[!nQcLf:T4HU}
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 32 7a e8 60 2c f1 27 19 4e 2e 09 2e 7b 68 ee bf 97 f0 cf ff 10 1d 1f 87 cd 17 1f bf f2 ac 87 6c bb 8c e8 ff fe 0f dc 2f 77 92 fe f8 a7 61 70 e8 a4 1a ae 4f 9e 2e 29 02 ea 70 bf bc 9b e0 03 6f 45 67 0b d0 3f bc 3c 65 7b 1e 72 da 76 b4 58 a8 d7 d6 4f 02 9c 3c 12 6c 2d d1 5d 77 11 7e fc 8f 21 bd 26 9e 2f 3b 45 79 ad ab 11 38 4d d6 c6 d5 35 72 5b 8c 1d c0 bc e6 b7 f0 df fc 36 64 c3 69 10 9d d0 00 8d ae 71 72 10 ec f9 e8 c3 bb 09 3f ff 19 b4 58 04 3f dd c1 4d 0a 41 09 a6 47 41 42 64 c7 f3 60 78 35 e4 fa 60 66 1a 26 c6 d0 a7 1f 85 48 a0 7f 75 f3 3c c7 f6 63 5e ff 7b f8 6f 7a 2b b2 79 cb 49 47 2e 9c 0c 04 1b 83 1e 7a 9a e0 6b 5f 42 0f ee 03 af 03 c9 2d 15 60 fa 08 e6 8a 6b 91 ab af c5 9c f9 1c 24 9b 89 d7 b5 d6 42 14 41 14 a1 f9 3c 6e cf c3 b8 3b 6e 41 ef fe 11 Data Ascii: 2z`,'N..{hl/wapO.)poEg?<e{rvXO<l-]w~!&/;Ey8M5r[6diqr?X?MAGABd`x5`f&Hu<c^{oz+yIG.zk_B-`k$BA<n;nA
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 36 9f 7f e9 1f 3c f0 f9 a1 5c 1a f1 2c 18 53 67 c3 6e 95 4f 7c 59 10 24 72 c8 7d 73 21 9f 7e e4 fb 0f 7d e9 c9 5d af 68 6b 62 69 4b f0 9b 3e 3d 7d 49 5f ca fc 65 29 74 57 8f 4c 41 a4 5d 8c 41 ce e1 54 c1 29 1a 28 e3 79 a5 58 72 1d 4f 53 82 c1 ad da 41 34 79 35 b7 05 c3 7c 64 64 80 b1 d2 51 d6 cf b3 e8 0f 9b 34 5f 1a bd 9d 75 8f ae e1 cd e7 bd 86 8c 4d 2d 6a ad 29 12 0f cf df be 47 b8 f3 69 48 b7 19 e3 22 e0 bc f5 ca b6 35 da 71 40 61 18 c1 d3 53 4a 10 29 62 15 31 0e ad 6c b9 69 9e 49 f5 71 14 c0 1a e1 92 5c 5a be f0 bc 57 9c fb ce 73 af dd f7 fe ef fe e9 f6 9d ad ca 6b 59 fd 37 ff af 99 ab 3d 31 37 4e cd 71 f5 f4 5c 32 6c d1 85 1b cd 48 bc ff ba bc 0f bb 5b b7 9a 46 c8 e0 a5 7c ab ff b7 f8 c0 68 86 63 a5 39 fa 9a 64 20 08 c3 ea f1 d9 a7 be cd 3f 3c f6 3d Data Ascii: 6<\,SgnO\|Y$r}s!~}]hkbiK>=}I_e)tWLA]AT)(yXrOSA4y5\|ddQ4_uM-j)GiH"5q@aSJ)b1liIq\ZWskY7=17Nq\2lH[F\|hc9d ?<=
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 71 db e3 05 b6 fd 64 9c b7 be 74 35 88 d7 b3 59 51 55 59 97 59 cd 2b b6 bf 98 4b d6 9f cf b7 9f fa 29 1f db f7 8f 64 c3 80 4d b6 0f bf 87 63 31 23 75 4c bb 22 8f 4b 91 ff b8 e9 1a be 7c c6 ab 39 7d 60 23 39 3f db 73 3d 45 04 23 11 5f f8 de 61 7e f4 70 91 c1 b4 9f 9c 06 24 b1 25 6b 11 01 29 75 35 12 43 33 79 ed dc 57 ae e5 0a f7 50 13 29 3f 8c 21 eb 7b dc 74 67 81 b9 60 8c b7 5f 37 8c e7 a5 71 3d ed 0c 8f 25 2d 65 7c 36 f7 6f e4 77 cf 7b 23 af d9 7e 2d b7 1f f9 05 37 ef ff 01 3f 98 7c 98 61 49 b3 c1 64 c8 88 87 c1 60 12 13 a6 53 c5 11 db ca 03 22 8e b9 12 87 35 cf 85 b9 cd fc c6 86 ab 79 fd d6 97 b2 75 e0 34 52 d6 8f 3b 69 8f e4 1a 23 84 41 91 cf 7d eb 30 5f bd 7d 8e 9c e7 c5 44 94 75 ab da 67 59 8c f4 96 5f 4e d2 84 9c ae fd c1 f3 0b ac 3b 22 92 58 bb 2c Data Ascii: qdt5YQUYY+K)dMc1#uL"K\|9}`#9?s=E#_a~p$%k)u5C3yWP)?!{tg`_7q=%-e\|6ow{#~-7?\|aId`S"5yu4R;i#A}0_}DugY_N;"X,
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: c1 3d fb 4a 1c 99 9c e1 05 17 84 9c b7 bd 1f c5 2e db 56 cc 58 3f 88 78 70 cf 04 b7 de 7d 8c c7 0f 45 64 32 1e ce 59 22 e7 11 e4 2d c7 0a f1 0e 43 31 52 b5 1a 26 d6 3c df c4 46 8c d5 03 f3 ed 93 f5 5f 8f 4c 3a f2 a5 b8 23 b4 25 b7 a2 50 25 65 d5 49 73 3d 7a 9f 83 e7 9b 2c 81 62 08 7b 8e 38 9e 99 68 b3 97 5f 60 a2 a0 f8 b6 7a 41 4c 6c ef 15 55 8c 28 23 79 98 7d c6 e1 8b e0 42 43 14 1a a2 c0 63 f7 d3 01 bb f7 4f 73 fd e5 21 d7 3c 7f 10 6b fd 25 f3 20 b5 82 31 b1 27 e8 c7 bb 46 f9 e6 ad 13 ec 3d a6 e4 d2 3e 66 46 30 c6 20 5e bc b5 a5 10 95 97 40 71 87 50 ad b6 b6 67 e2 76 e9 9f 48 46 d7 26 55 56 85 7c 49 29 45 34 1a 31 3a 20 57 45 70 4d de 1a d8 82 e0 16 3a f7 42 50 28 04 30 57 6a df e8 95 fa d6 5e 4b 8c 2b 22 e0 d4 30 55 4a 1a 22 4a ce f2 0e e3 bf bb 8f 2a Data Ascii: =J.VX?xp}Ed2Y"-C1R&<F_L:#%P%eIs=z,b{8h_`zALlU(#y}BCcOs!<k% 1'F=>fF0 ^@qPgvHF&UV\|I)E41: WEpM:BP(0Wj^K+"0UJ"J*
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: 2b 73 af 96 25 5c 9b 92 4b 13 c9 15 8d e3 cf 5b 6d c3 e9 cd 1f dc a4 9b 2a d2 d5 0e 42 6d 41 73 39 54 be 3d 04 8c 56 ac 47 52 8e 33 b6 92 04 b2 09 c6 17 32 59 c5 b3 86 5d 7b 42 a6 f2 33 5c 7a ae 12 45 8e 9d f7 8d 71 f7 23 05 72 19 8b b3 1e c6 13 c4 09 12 1b 93 ab cb a0 72 59 8b 5c 2b 68 92 45 ed de e6 5a 72 cb a5 94 e7 e5 6a e7 4d 7e 59 80 dc ea 85 4e bd 49 3d 3d 45 77 8a 59 1c 58 d6 a4 a3 74 98 4d 59 aa aa 56 24 49 0e 10 07 f1 c0 7a 06 3f 0d 69 2f c2 1a c3 9e c3 8e c0 15 c8 cf ce f1 e0 e3 25 fa 72 29 3c cf 12 85 26 36 4a d9 c4 7f 1b 67 9e 68 c9 2c 96 db f8 99 2a ba 72 52 f7 56 e4 4a 59 12 75 49 c8 85 95 7a 4e 56 37 90 b8 c1 14 62 2d 37 11 17 b1 0e 2f 25 a4 7c 8b 31 16 2f e5 38 3c ad 84 81 61 fd 06 8f e2 6c 09 cf b7 84 65 b7 5e 8d f2 d2 4c 99 ea 05 31 21 Data Ascii: +s%\K[mBmAs9T=VGR32Y]{B3\zEq#rrY\+hEZrjM~YNI==EwYXtMYV$Iz?i/%r)<&6Jgh,rRVJYuIzNV7b-7/%\|1/8<ale^L1!
2024-05-27 22:43:41 UTC	881	IN	Data Raw: 6b 0d f9 99 39 0a 85 52 a2 4c d7 93 0b d2 11 b9 d5 78 8e ee c8 ad 7c 6f c2 51 d7 47 19 ce c7 b3 81 f8 c5 ae c7 3d df a3 7f b0 0f e3 19 8a 73 d5 d3 74 2b f4 48 2c bd a2 e6 f8 90 1b eb f2 34 63 78 c9 4e ba eb 04 2b a9 33 2c b5 91 c5 58 43 5f 7f 0e 6b 0d 73 f9 22 9a 9c a8 53 e1 e3 78 4a 6e 83 b2 55 c5 b2 ce c1 b5 db 38 3a d3 b7 8f 4f f9 c7 0b 22 42 26 17 cf cb b3 33 05 9c 73 c9 3a d9 54 d7 c5 c9 1f 41 aa 96 ad 5a cc 1b da 3b 22 b7 e2 63 ee c0 92 b5 1c ed 9e b6 f0 ab 03 21 e7 6f f1 8e 6b 61 0b f9 8c 97 bc 3c 00 04 df 4b 93 cd f8 4c 4f 4d 13 85 ca 9e c3 21 a9 b2 11 a2 09 b9 4d b5 e5 ba 5a 2f 40 2e da f2 50 94 06 82 8d 43 23 ad 76 f6 e3 d1 38 69 0b b7 ef 89 f8 e1 c3 d1 92 d3 bb 24 f9 f5 90 49 a3 7f 18 44 d3 b8 42 1e 4f 1d 29 4b 75 7d bb d4 e4 22 18 11 35 4d 6a Data Ascii: k9RLx\|oQG=st+H,4cxN+3,XC_ks"SxJnU8:O"B&3s:TAZ;"c!oka<KLOM!MZ/@.PC#v8i$IDBO)Ku}"5Mj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50230	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	554	OUT	GET /mK6uPlO8TKCVSU8TsniV0pOUB0SSETbAPB_QUaaJ96qbBdZwaygmzf_bWRTIHmCNKgJ2hhn86KSfEAHvHN-P2EjFWAxPd77ob_2k8ew=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:41 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2593 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:40:38 GMT Expires: Tue, 28 May 2024 21:40:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 3783 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 09 d8 49 44 41 54 78 9c ed dd 6b 6c 1c d5 15 c0 f1 ff 1d af a3 bc 4c 00 11 af 13 e4 47 1c 9b 42 fa 84 78 42 e3 c4 04 3c 86 0a 82 aa 00 aa 70 02 4e a2 92 b6 29 54 ad 80 7e 68 85 44 a5 aa 15 aa 0a 82 96 52 04 a2 6d 62 03 41 20 da aa 95 82 48 bd 1b d4 c6 3c b2 6e 3e 54 25 a2 76 48 62 bb c5 f1 9a d8 60 40 31 de 9d 39 fd 90 b8 da b8 bb f6 7a 3d b3 33 bb be bf 8f e3 d9 3b 27 39 be 67 67 ee 99 19 83 a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 05 47 e5 f2 a1 43 ab 2b ab 94 18 1b 80 cb 00 03 f8 40 94 fc 43 0c e7 af 4d bd ff 4e b8 1a e1 3c 63 47 8c c5 8e 28 13 58 07 6a 29 e0 00 3d 82 74 2d Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxklLGBxB<pN)T~hDRmbA H<n>T%vHb`@19z=3;'9ggiiiiiiiiGC+@CMN<cG(Xj)=t-
2024-05-27 22:43:41 UTC	1390	IN	Data Raw: ed 02 7b fc 8e 23 1b 41 2e d1 53 b5 c5 2d f3 5a 47 49 73 45 67 b7 2f ed c7 78 cb da 3a e6 d2 de f3 41 a1 cc e0 49 95 86 a8 de b8 65 e6 bd fd 18 b7 cc 56 e6 da de f3 41 fa 04 8b 9d e7 30 66 6d 5f dc 32 f3 b6 90 30 6c 99 cf 02 81 5e 88 51 48 da ed 69 4b 74 52 9d 61 41 f2 13 9c 50 d8 d3 a0 e6 68 5b dc 32 1b 05 75 7d 38 72 d8 93 92 fd 7e b3 b9 da 51 74 8a 37 1d 20 d7 94 90 e4 8c a4 9f ab 69 b7 3e bd b5 9b 0f 2f de 48 e8 e3 3e c8 f0 9b 11 10 35 0a e9 19 b2 4c d7 17 46 86 ad 86 36 47 e1 55 7b cf 35 21 95 24 ee 5c c4 dd 1f a4 ef 0f a5 4d 70 ff 92 0a 7e f8 b5 3f 70 74 e3 a3 94 8c f6 a3 64 c2 d3 20 e7 48 29 68 8f 5b a6 2b ed 47 d9 8d 8a 5b 66 bb 9c 5d b8 08 6c 3b 53 21 84 54 92 37 c6 3f 4f c5 e9 66 de b2 17 a5 dd 2f 6d 82 4b c5 e6 42 0c 1e 5d 77 37 af dc 7e 00 39 Data Ascii: {#A.S-ZGIsEg/x:AIeVA0fm_20l^QHiKtRaAPh[2u}8r~Qt7 i>/H>5LF6GU{5!$\Mp~?ptd H)h[+G[f]l;S!T7?Of/mKB]w7~9
2024-05-27 22:43:41 UTC	344	IN	Data Raw: 64 89 9e 6a 79 f4 c8 20 b0 22 6e 35 ec 01 35 a7 77 6a 09 ec 9d ec 00 15 83 82 9f c1 a9 e6 da 7e 4c 6d ef 15 8b a2 4a 30 e4 dc 7e 0c 4c 7b cf 6d 45 51 a2 a7 9a 65 fb 31 50 ed 3d b7 15 dd 0c 4e 35 53 fb 31 88 ed 3d b7 15 75 82 21 63 fb 31 b0 ed 3d b7 15 7d 82 e1 bc f6 e3 8b 02 2f 06 b9 bd e7 b6 a2 fc 0e 4e e7 56 0e 08 11 a6 fd 33 70 c5 68 5e cc e0 f9 4c 27 b8 c8 e9 04 17 39 9d e0 22 a7 13 5c e4 74 82 8b 9c 4e 70 91 d3 09 2e 72 3a c1 45 4e 27 b8 c8 e9 04 17 39 9d e0 22 a7 13 5c 3c d2 3e 1f 95 29 c1 af 7b 18 88 e6 8d 37 d2 6d 4c 9b 60 81 c7 bc 8d 45 73 9d e2 f1 74 9b d3 26 f8 e0 03 4b 5f 02 8e 7a 1a 90 e6 a6 7f 75 df fe 72 da c7 6a 32 7e 07 3b 38 37 01 f3 e8 6d 65 05 cb 71 44 d2 ff d9 33 a6 49 f0 6b 0f 5c d0 e7 20 75 40 8f 27 61 69 6e 38 2a b6 53 7b 64 eb ef Data Ascii: djy "n55wj~LmJ0~L{mEQe1P=N5S1=u!c1=}/NV3ph^L'9"\tNp.r:EN'9"\<>){7mL`Est&K_zurj2~;87meqD3Ik\ u@'ain8*S{d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50231	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:41 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:41 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:41 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:41 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50232	142.250.184.206	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	985	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://scone-pa.clients6.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:42 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 79644 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 23 May 2024 11:41:06 GMT Expires: Fri, 23 May 2025 11:41:06 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 18:15:45 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 385355 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:42 UTC	475	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 Data Ascii: a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Er
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 77 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 Data Ascii: Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error("b`"+String(a));};va=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};wa="function"==typeof Object.assign?Object.a
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 74 68 69 73 2e 6c 73 3d 5b 5d 3b 74 68 69 73 2e 73 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 44 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 59 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 6a 4b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 59 64 61 3d 66 75 6e 63 74 69 6f Data Ascii: this.ls=[];this.sV=!1;var k=this.DF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.DF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Yda),reject:h(this.jK)}};e.prototype.Yda=functio
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 6c 73 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 6c 73 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 73 50 28 74 68 69 73 2e 6c 73 5b 68 5d 29 3b 0a 74 68 69 73 2e 6c 73 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 41 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 44 46 28 29 3b 68 2e 42 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 44 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 2c Data Ascii: otype.G7=function(){if(null!=this.ls){for(var h=0;h<this.ls.length;++h)f.sP(this.ls[h]);this.ls=null}};var f=new b;e.prototype.Afa=function(h){var k=this.DF();h.By(k.resolve,k.reject)};e.prototype.Bfa=function(h,k){var l=this.DF();try{h.call(k,l.resolve,
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 49 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d 7d 29 3b Data Ascii: ular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ia(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}});
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 5f 2e 75 61 28 5b 5b 6b 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6c 2e 67 65 74 28 6b 29 7c 7c 31 21 3d 6c 2e 73 69 7a 65 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 32 21 3d 6c 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d Data Ascii: ion(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var k=Object.seal({x:4}),l=new a(_.ua([[k,"s"]]));if("s"!=l.get(k)\|\|1!=l.size\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|2!=l.size)return!1;var m=
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 0a 6e 3b 21 28 6e 3d 6d 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6e 3d 6e 2e 76 61 6c 75 65 2c 6b 2e 63 61 6c 6c 28 6c 2c 6e 5b 31 5d 2c 6e 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b Data Ascii: otype.values=function(){return e(this,function(k){return k.value})};c.prototype.forEach=function(k,l){for(var m=this.entries(),n;!(n=m.next()).done;)n=n.value,k.call(l,n[1],n[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(k,l){
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 75 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 32 21 3d 64 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e Data Ascii: tries\|\|"function"!=typeof Object.seal)return!1;try{var c=Object.seal({x:4}),d=new a(_.ua([c]));if(!d.has(c)\|\|1!=d.size\|\|d.add(c)!=d\|\|1!=d.size\|\|d.add({x:4})!=d\|\|2!=d.size)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 7d 29 3b 0a 6e 61 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 6e 75 6c 6c 21 3d 63 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 Data Ascii: function(){return Ka(this,function(b,c){return c})}});na("Array.from",function(a){return a?a:function(b,c,d){c=null!=c?c:function(k){return k};var e=[],f="undefined"!=typeof Symbol&&Symbol.iterator&&b[Symbol.iterator];if("function"==typeof f){b=f.call(b)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50233	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:41 UTC	798	OUT	GET /6nGdwtbmSCuuGF5fSCqvv0f-GOsp927ZXRFxC1NNEqlH-EwAGEqlHXN2rcarUTB7C8Tj8shbcg-9z-CO4XJGTVSaLbT5FPsq0rKET0ZIfWNsj9_f424=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:42 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1351 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5522 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:42 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 05 0e 49 44 41 54 78 01 ed 9a 05 8c db 48 00 45 47 2a 33 05 9c 3d 66 c6 e0 b1 d5 94 b9 4d b6 cc cc 90 a5 63 66 66 66 0a 1d f3 dd c2 31 33 f3 95 9b ac 73 4c e5 4e c7 92 be 54 08 78 ec 71 71 be f4 05 cb ff f9 7b 70 89 94 94 94 94 94 94 94 94 94 54 71 fd a6 06 f7 d4 ba 79 4f ce 76 0b 86 34 d5 af 10 8b 1a 7d c5 43 87 ec 11 cb 94 9b 75 d9 b4 af 66 2a e3 df 3b 67 8f 58 36 b4 47 f5 b2 3d 89 1d 5a a8 aa 2d 73 61 7f 85 d6 2d f0 a3 16 f6 d3 2d fc a9 16 0e 4c a2 aa da 94 70 8a be 4a da 26 ef 1f 96 29 ab c8 52 1e 7b e6 fe 42 3d 63 5e a7 ee 21 8f 53 f7 80 47 75 6f fa f9 1f cb 2a 33 57 39 ab 34 85 88 d0 af 3d bc 87 22 78 09 7f c8 db 88 b5 b5 4d af 7a ea a1 41 5c e1 Data Ascii: PNGIHDR@@iqIDATxHEG3=fMcfff13sLNTxqq{pTqyOv4}Cuf;gX6G=Z-sa--LpJ&)R{B=c^!SGuo*3W94="xMzA\
2024-05-27 22:43:42 UTC	492	IN	Data Raw: e1 21 7b da 57 fd da 26 11 04 12 0d c0 13 fb 9c 85 3f 0d 41 cd 00 80 bf 3d f6 c9 41 1d ed a8 be 83 05 c9 89 05 80 f0 4b d8 fb 3e 18 21 cd 03 80 93 d1 17 ed af be 40 00 8e 39 37 21 a0 00 00 80 10 89 88 ac 7e 5f 04 11 0f 60 21 ab fe 09 22 01 c0 3f 8a aa 7e 47 16 60 a9 5d 00 5c 73 1f 41 38 d1 00 a8 37 55 7e b2 88 39 ff 3e 84 b0 03 40 e7 99 33 ed 03 90 8c 5c b5 dd ab 0f 3f f6 60 f4 8f 7c 00 30 ed 09 06 00 bf 6a a5 fa 6d d9 d3 5f 28 0a c0 79 37 5d 70 67 1e 00 58 e9 d9 05 e0 47 2b 4f ff 26 01 c1 e1 57 f5 2b ee fc 00 8e b2 ef 15 48 44 16 12 4e e1 4a 4b 15 18 fe 1f fd d0 a4 30 80 80 9d 0d f8 72 bb 57 5f 3f 33 20 4c 85 00 74 98 d6 cb 4e 00 b5 84 57 b8 d0 14 e4 77 09 53 31 00 9d 67 56 db 09 80 ef 88 0c 77 f9 82 c2 af d4 8f ca 4b 01 70 cd 7b da 46 00 83 8f 24 10 cf Data Ascii: !{W&?A=AK>!@97!~_`!"?~G`]\sA87U~9>@3\?`\|0jm_(y7]pgXG+O&W+HDNJK0rW_?3 LtNWwS1gVwKp{F$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50235	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:42 UTC	798	OUT	GET /6heYcmK08nJrjH3yvIin-c8kYQbqTfUs9t-8QUdkxIBcGvGMZ2HVhe2jIYrIRmWOn8qXvivlwGvVDfv9gr8r0ahcQBOqYqITNZB9T0tz_SS2bnOScJY=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:42 UTC	574	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3665 X-XSS-Protection: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 22:39:02 GMT Expires: Tue, 28 May 2024 22:39:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 280 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:42 UTC	816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0e 03 49 44 41 54 78 9c ed 9d 6b 70 5c 65 19 c7 7f e7 ec 6e 96 4b 94 da ca ba 06 11 04 d3 a0 d0 12 35 21 20 02 da 64 bc 80 15 98 ba 12 a0 c8 58 6f 23 38 e3 87 f8 41 0d 8c e3 05 c6 2f 99 f1 83 77 04 46 54 8c ac 71 1c c1 cb 8c dd 0a 5a 94 b0 81 6e a9 42 c3 52 05 a1 6b 8c 18 db 34 d8 ee ee d9 73 fc f0 9e 6d 9b 36 7b 3d cf 7b 76 73 c8 6f a6 1f 9a ec fe f7 e9 fe 7b ce 79 cf fb 3e ef ff 18 8e e3 b0 42 70 31 5b 5d c0 0a 7a 59 31 38 e0 ac 18 1c 70 56 0c 0e 38 2b 06 07 9c 70 a5 5f 18 86 e1 67 1d 5a e9 1b df 14 02 a2 1c f9 f7 5a 40 7e 6a 78 a2 d4 ba aa 64 a9 74 37 64 54 fc c5 32 37 d8 35 f5 3a e0 66 Data Ascii: PNGIHDRxx9d6pHYsIDATxkp\enK5! dXo#8A/wFTqZnBRk4sm6{={vso{y>Bp1[]zY18pV8+p_gZZ@~jxdt7dT275:f
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: bc fe 96 b9 37 af 8a 46 76 85 4d c3 cb 28 7e 2f b0 6e db 68 a7 97 89 8d 9a 14 ee 37 d7 1a 51 f3 49 4c 42 1e 64 72 c0 7a 9d a7 eb b6 ea e8 38 21 6c de ef d1 5c 80 d3 50 d7 43 bd 84 8d fb 3d 9a 0b d0 85 1a 67 f8 8e ef 47 f0 79 a3 73 17 9f 7a 52 c7 76 21 f5 22 70 fa b6 d1 ce 7f c9 c8 2d a6 f0 4b 73 c0 38 c9 6c 64 c2 a4 1a 45 e0 0c 5d a3 eb b6 39 82 a3 21 f3 f3 82 ff 75 22 a8 db 15 3d 84 f8 9c a0 5a 84 16 b4 e3 fa 6e 70 24 64 f4 0b 4b 5e 22 ac 77 84 90 71 a1 b0 e2 3b 84 f5 6a e2 bb c1 61 c3 58 2d 2c 79 b6 b0 de 61 0c 03 e9 5a bb 85 f5 6a e2 ab c1 5d 23 33 1d 86 61 54 dc 93 dc 24 d2 26 00 90 4f 12 c6 30 3a 84 65 bd 6c ab 69 0a bf 8f e0 33 6d f9 d8 26 5d ad 35 af 47 be d6 79 69 c1 5a f8 6d f0 59 85 92 f8 3e 6b 5d ab 40 67 39 f2 fb ff b3 e2 8a 35 f0 db e0 fe 83 Data Ascii: 7FvM(~/nh7QILBdrz8!l\PC=gGyszRv!"p-Ks8ldE]9!u"=Znp$dK^"wq;jaX-,yaZj]#3aT$&O0:eli3m&]5GyiZmY>k]@g95
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 25 a2 09 ca 51 86 5e 6a dd 0f 5c 13 4d 88 4f f0 2c 22 96 4a 3b 78 8f 5d 9c 07 ae ab 76 7a 86 3a 6e 93 72 63 f1 a7 80 8d 34 f7 c5 cd 01 97 e7 c6 e2 be f4 25 45 13 4c a3 a2 0c 9b a9 75 3f f0 de 68 02 5f 1e 6f 17 4b a5 f7 d0 7c ec 62 79 b9 b0 66 ad 75 dd 07 e7 c6 e2 7f 40 2d 48 3f de 40 11 93 c0 05 b9 b1 b8 af bd 49 d1 04 7f 02 2e a0 b1 d3 75 1a e8 8f 26 b4 8d f2 97 24 96 4a 4f a2 6a 6d e4 3b 9a 42 2d 13 d6 d5 01 53 f7 44 47 6e 2c be 1b b5 5a b3 19 35 62 5d ea b6 c4 41 8d 10 af 01 2e ca 8d c5 5b 12 0f e8 1e c9 03 a8 cb cb c3 54 ae 75 3b ea 81 5a 17 46 13 fe 6f 0c 03 88 a5 d2 cf a0 62 17 87 51 df 5d a5 db bd 3f a3 be fb 81 7a 8e dc 32 5e 9a ee ca cd 61 71 f7 47 33 c0 8e dc 58 7c 5f bd 1f ee 17 ee 62 c4 71 8d 6c ee ed 55 5b 71 54 d3 5d 97 fb a3 19 60 87 2f 4d Data Ascii: %Q^j\MO,"J;x]vz:nrc4%ELu?h_oK\|byfu@-H?@I.u&$JOjm;B-SDGn,Z5b]A.[Tu;ZFobQ]?z2^aqG3X\|_bqlU[qT]`/M
2024-05-27 22:43:42 UTC	69	IN	Data Raw: 9b 40 2c 36 d4 c2 ed 79 8e 72 a4 83 c5 02 f2 ed be 88 df 08 0d 2f f8 af 10 0c 02 79 8a 5e e1 08 2b 06 07 9c 15 83 03 ce 8a c1 01 67 c5 e0 80 f3 7f 58 e3 d5 04 46 74 c2 89 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: @,6yr/y^+gXFtIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50234	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:42 UTC	785	OUT	GET /zGSQ3CkZCuntNXuuiLsvHnljLEmpJD6MKKWjzuL20jMovKj8akWzk6gb0zmXZTMH6ORoD_I5UMOVT4JRUKYwA2S4ki7MQbyZ0rUIZw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:42 UTC	574	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2903 X-XSS-Protection: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 22:29:04 GMT Expires: Tue, 28 May 2024 22:29:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 878 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:42 UTC	816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 0a a3 49 44 41 54 78 9c ed 9d 5f 6c 1c 47 1d c7 bf 33 f7 cf f9 63 bb 4d 70 68 30 55 aa 4a 48 24 95 10 0d 4f e4 01 f5 a5 8e 82 44 80 3c 54 fc 09 54 aa 84 c2 83 9b 84 84 54 ca 1f 27 2a a1 8e 90 08 50 ce cf 7d a0 14 54 10 ea 03 82 ca 0e a2 88 87 e4 11 5a 0a ee 4b 50 4c d3 fc 71 52 27 be 8b 2f Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx_lG3cMph0UJH$OD<TTT'*P}TZKPLqR'/
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: fc cc 75 c2 19 50 bb 4f b8 9a 03 93 33 6b b0 ab b9 80 7e 7b 01 94 1e 7e 24 65 ee 8a 22 a9 d3 27 af cb b6 c9 99 34 d8 d5 5c 20 16 7b c3 98 eb ac 46 1e 4c ce 9c c1 9e e6 02 d1 03 f6 d8 54 6a 5e c7 f4 d0 fe 50 e1 ba 55 c3 32 79 78 a8 32 f1 6a c6 4c ce 94 c1 9e e6 02 b1 84 7b 79 d3 57 95 c3 05 56 9a 7c 24 63 26 67 c6 e0 e8 e6 02 61 03 2e 35 af 63 7a cb 7e 1c d8 11 2e dc a0 aa b4 6c 7d 72 56 4c ce 84 c1 d1 cd 05 c2 84 cb 00 94 5b 37 70 79 f3 d7 f0 fd 1d 2f 85 0e 37 a8 16 59 34 39 75 83 7d cd 05 b4 35 cd 0c c0 42 b3 8e e9 cd fb 30 f6 b9 63 78 b4 d5 0c 1d ae 5f 55 ec 9b 44 86 4c 4e 35 60 3a 73 74 dc 77 e2 40 93 bd 1c 40 5d 08 7c aa f8 b7 0b a5 9d 84 67 51 7f b6 58 29 87 be 23 26 1b 30 b0 1c f2 b6 2d 95 73 3f fb 16 3b 11 ea 44 1a 49 ad 89 0e 9c 15 d2 14 2e 43 3b Data Ascii: uPO3k~{~$e"'4\ {FLTj^PU2yx2jL{yWV\|$c&ga.5cz~.l}rVL[7py/7Y49u}5B0cx_UDLN5`:stw@@]\|gQX)#&0-s?;DI.C;
2024-05-27 22:43:42 UTC	697	IN	Data Raw: a5 80 4b 4f d7 b1 61 ef fb fe e1 66 65 de 2c 65 d2 7a 19 14 02 de 81 8d fb fe 05 6a 95 3b 4b 75 4c 90 5e 28 bd 34 e9 2d 9b fd 0f d0 2c b6 47 d2 5a c2 15 02 c0 3d 0d 05 a5 cd 3d 06 de fd 24 82 a6 2f ef 8b 8c fa 28 5a c7 4d 2a 12 68 a0 3c f0 c2 e4 f7 68 91 4a 21 df 75 64 fb 37 cc 11 7e 3b c8 95 46 ab 4a 22 90 a8 e0 e3 f7 17 80 56 9f 7a b8 04 e5 f1 49 2a 4b 76 56 d2 be 44 12 d4 c2 7f eb d7 b0 48 45 14 42 1c 1b 2a 58 89 9d e5 4a f4 da 4b 80 51 1f 36 50 f0 2c 5b e0 19 32 b3 aa 32 34 ee 35 67 60 28 30 8e 02 78 60 c0 cb 2f 6f c8 af 02 0e 1a e4 23 58 99 a0 7d 18 f1 4c 5d d2 27 14 b0 9e 67 1c ce d7 ce 31 52 d6 2e ff ab fb fc 51 c8 f0 aa ca 78 5e 80 b8 82 0d 53 b6 74 1d 32 d2 34 5b 68 08 58 77 a8 d6 a8 2d 9a 2f 61 26 af b4 86 ab e1 65 c8 de 9a 2c 89 3e 4b 8e 76 a8 Data Ascii: KOafe,ezj;KuL^(4-,GZ==$/(ZMh<hJ!ud7~;FJ"VzIKvVDHEB*XJKQ6P,[2245g`(0x`/o#X}L]'g1R.Qx^St24[hXw-/a&e,>Kv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50236	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:42 UTC	566	OUT	GET /gglWI8y0x_H0LIUgCjTQp7RLHEkMVvcd5A4iH6V7BO-fqALnIaJAbVcBsfWa_3iCiK6ZdJhAyJf-dUPJfLXvIXTXXGdZxLDFY5Zbw4O0xyQRoQK_1ZU=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:42 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5149 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:14:22 GMT Expires: Tue, 28 May 2024 22:14:22 GMT Cache-Control: public, max-age=86400, no-transform Age: 1760 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:42 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 13 d4 49 44 41 54 78 9c ed 5d 7b 90 15 55 7a ff 7d 7d 67 86 19 58 06 e4 31 0c 83 8b 0c 62 41 14 a2 d9 50 5b b1 12 2a ac e5 26 6c 45 41 c6 64 c5 05 d7 ac 6e 5c cd 5a a6 2a 55 bb f9 23 55 c6 94 95 b2 70 e3 83 e1 25 ba be 10 61 4b 2b ae 71 63 49 d6 aa 5d 15 ca c0 08 8a 30 c8 4b 98 81 e1 e9 20 20 30 c3 cc dc b9 e7 cb 1f dd a7 cf 77 4e f7 80 2c 73 bb e7 de cb af 8a a2 6f f7 ed ee ef 9c df f9 9e e7 9c 3b c0 65 5c 46 b1 e0 d7 2f 72 05 ef d9 53 9e b6 1c 49 a2 2c 6d 01 92 c4 d9 0e 54 be b0 76 12 00 64 d3 96 25 29 78 69 0b 90 24 ba 19 d5 4a 61 68 da 72 24 89 92 22 98 19 a3 e0 61 64 da 72 24 89 92 32 d1 20 8c 80 07 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx]{Uz}}gX1bAP[&lEAdn\ZU#Up%aK+qcI]0K 0wN,so;e\F/rSI,mTvd%)xi$Jahr$"adr$2
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: d5 be ef cd 14 44 cf 1b 8a 86 e0 45 cb 79 69 4e f5 54 49 b2 38 34 c5 64 05 57 61 34 0d 9b 78 06 d0 d3 7d 76 c4 fd 2f f3 63 a9 34 22 0f 28 8a 20 ab 71 29 4f 6b 39 d0 b4 55 a7 45 20 20 07 8f 75 79 52 91 0e b2 62 52 24 f2 98 c1 64 52 26 82 02 e3 8a f1 d7 4f 7a ee 6e da 9b 72 d3 2e 19 45 a1 c1 87 8f 34 af 03 00 0e 26 14 14 00 90 2e 47 52 c4 0c cb 7a 34 02 72 4d 50 06 c0 23 74 9c 68 fb 30 85 a6 f4 3b 0a 9e e0 45 4b 79 55 4f b6 73 98 31 bf c4 90 64 02 76 ee 1b 18 2d 45 fe bc 70 78 9f 47 1c 0e 06 00 dd e7 4e d5 dc fb 0a ff 32 85 26 f5 2b 0a da 44 2f 5e c6 73 5b 5a 9b de e0 c0 b4 fa e6 d8 98 5f 06 85 79 b0 8e 9c 95 b8 66 99 6f 8f 98 01 92 d7 98 80 61 57 4e 9b fd d2 5d f4 9b 94 9b fa 07 a3 60 09 5e b2 8c c7 ed 6b d9 78 90 9d 82 85 2e 64 b8 e5 49 fb 1a a0 3c 8f 99 Data Ascii: DEyiNTI84dWa4x}v/c4"( q)Ok9UE uyRbR$dR&Oznr.E4&.GRz4rMP#th0;EKyUOs1dv-EpxGN2&+D/^s[Z_yfoaWN]`^kx.dI<
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 81 87 b7 ed 5b 77 b3 36 9b c6 d7 7a cc 5e e0 0f c9 d6 a4 a8 d6 89 c1 20 ca 88 d2 67 5b cb 75 a2 83 c0 44 d2 da 2f 8b f3 e1 c0 81 3d 38 d8 79 d7 f9 4a 9a e7 f7 e3 a4 d7 7f 91 74 2d 08 34 3a 33 66 c2 bb 4c 78 74 e7 ad b4 2e 1f 3c f4 2b c1 ef 2e e4 3a 95 c1 03 3b da 9a 1e ea c9 75 57 2b 49 44 8c 36 f9 c7 d1 12 63 2c e1 17 08 ba fc b2 a5 43 1a 39 83 02 d2 4f fb 32 ab 18 4d 8b c4 04 fa 18 b0 48 35 7e 1b 90 95 30 e9 7b dd 73 56 59 54 bc 9b 2a 2a 4f d3 f0 9a c6 9c c2 f2 96 39 fd a7 d5 97 4c f0 fb 0b 79 aa f2 70 47 eb 17 3b 17 9c e8 f8 62 82 2c e9 f9 a5 c1 c0 77 09 33 96 03 e0 9a eb 50 6b 61 82 a7 1c db 35 e5 90 08 f1 1c 63 a6 1d 93 eb 06 3c b0 49 f5 8f dd 3c d9 31 b3 31 1a 2b 06 8e 15 a5 bb 16 c4 8a ac c3 fa b6 bc 1e a3 f9 41 1b 68 44 ed 7e 64 ca 5f c9 31 5e 3b Data Ascii: [w6z^ g[uD/=8yJt-4:3fLxt.<+.:;uW+ID6c,C9O2MH5~0{sVYT**O9LypG;b,w3Pka5c<I<11+AhD~d_1^;
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 4c 04 54 0e 39 45 d5 a3 67 6c bf 8d 9a 53 eb d4 00 03 82 60 8d ff 78 96 57 b5 1d d8 3c df 4e a7 a2 3e 38 52 c3 86 1d 58 45 6a c2 e8 4b d3 9c 74 27 72 dd 21 d2 79 8f 65 19 02 f2 cb c6 d4 af da 3a 87 ee 4a be f7 e2 91 fa aa 4a 89 7f bd 8f 16 d4 5e f5 a7 0d 7a 93 99 55 67 0e 3e 03 10 44 89 f3 e2 d8 d4 9d fd 1b 58 df 27 06 87 fb 6c d7 5c db b5 66 f3 1c bb be 2e e4 60 46 59 4d fd ed 03 89 5c 60 80 69 b0 c6 c3 2f f0 b8 63 07 3f db 99 cd 75 7f c3 ad 6f 9b 85 02 d1 34 24 36 8a 16 c1 92 9b c2 44 35 31 ce 37 c7 a7 5f 61 aa 45 04 54 54 9d cd 0c ab 9d b2 a5 81 0e a5 d5 67 7d 61 40 12 ac f1 cf 4b 4f 37 7f d9 be f7 3a 06 6b b2 62 cd 68 34 15 8a 06 4e ee 84 81 eb 9b a5 9f 85 73 bd ef 54 88 50 5e 5b bf fd e3 db 68 c0 fe 15 b5 01 65 a2 5d 3c f9 d3 ea a9 35 e3 6f 58 1b 76 Data Ascii: LT9EglS`xW<N>8RXEjKt'r!ye:JJ^zUg>DX'l\f.`FYM\`i/c?uo4$6D517_aETTg}a@KO7:kbh4NsTP^[he]<5oXv
2024-05-27 22:43:42 UTC	120	IN	Data Raw: dd 69 cb 91 24 4a 8a 60 00 bb 98 d0 95 b6 10 49 a2 a4 08 56 c0 1e 82 ff 57 7d 4a 05 25 45 30 13 5a 99 d1 9b b6 1c 49 a2 b4 08 06 0e 43 af 7d 2f 11 94 16 c1 84 13 e0 cb 04 17 2d 58 e1 38 9b 3d 69 25 81 92 22 58 65 70 3a 53 32 d3 2b 3e 4a a6 d0 01 00 d3 a7 e1 dc f8 b1 38 97 b6 1c 97 71 19 fd 86 ff 07 13 5d d5 71 d6 b0 09 e4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: i$J`IVW}J%E0ZIC}/-X8=i%"Xep:S2+>J8q]qIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50237	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:42 UTC	786	OUT	GET /l7AGEV3K2ayj5g1Vb4nsrQs5WyHTr7Bl65GhPxO68pDZDsVurAbsSOTwmXnjK8qMt2gahvRxN9y3nnd1G118dLTtN5k8-j7MLD0qMl4=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:42 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 7323 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:38:38 GMT Expires: Tue, 28 May 2024 22:38:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 304 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:42 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1c 52 49 44 41 54 78 9c ed 9d 7b 90 1c c7 7d df 3f dd f3 d8 d7 ed 3d f0 06 08 52 24 01 90 14 08 90 20 04 91 22 45 33 34 49 9b b2 54 25 3a 51 ca a5 54 8a 55 4c 5c 21 a5 bc 2a 72 24 55 fe b2 ca 7f a5 92 a8 e2 2a fd 61 2a 2c a7 a4 a2 4b 89 a9 28 b6 4b 96 13 90 92 a8 d8 e0 0b 7c 8a 00 28 81 a0 08 80 78 92 c0 dd e1 f6 f6 f6 39 33 dd f9 63 6f 16 b3 b3 33 b3 b3 77 7b 7b 0b 19 df aa c1 dd cd f4 f4 eb db fd eb df a3 a7 01 57 71 15 57 71 15 57 71 15 57 b1 1a 10 ab 5d 81 5b fe c7 73 99 4d d7 6d 5c 97 95 76 ce 90 52 68 94 d0 28 34 2a cd eb 5a 84 9a a0 35 68 45 57 cb 74 ca a6 ea c5 2b 0c 2f 6d 4f 69 81 a7 3c 55 77 9d Data Ascii: PNGIHDRxx9d6sBIT\|dRIDATx{}?=R$ "E34IT%:QTUL\!r$Ua,K(K\|(x93co3w{{WqWqWqW][sMm\vRh(4Z5hEWt+/mOi<Uw
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 27 72 4c 66 4c 44 c2 4b 02 98 b2 4d be 3c 91 65 be 8f 59 3c 8a 33 35 0e ab 42 b0 8e b8 d2 bc 93 94 97 0f 05 20 05 0f 8f 67 98 b2 8c 64 71 af 61 ca 36 f8 9d f1 0c 08 d1 15 81 be d2 d7 5f 18 a1 19 9c 84 7e fa 79 46 c3 67 f3 16 d7 e6 2c 6c 71 f9 5d 29 e0 54 c3 e5 83 86 8b 6f 19 69 20 23 04 1f cb d9 3c 98 b3 98 5b 06 a3 d1 cb c0 ea 8f 90 91 26 b8 d7 ec 8e 7c a6 35 ff a8 98 61 43 c6 24 a8 38 9b 42 f0 fd 99 0a 3f 98 a9 62 06 4c 26 a5 35 1b b2 26 bf 37 9e 4d 5d a7 2b 09 23 4b 70 af 8e 8c 7a 5e 03 76 64 0c 6e 2e d8 14 0d d9 4e 23 80 b2 d2 fc f9 6c 95 ff 39 5b a1 ac 74 47 ec b9 68 48 6e 29 d8 5c 63 99 54 fd fb 57 1a 93 31 18 09 82 fb 5d 93 e3 9e 2f 28 cd 3f 1d b3 d9 92 b3 3a fc cf 86 10 1c 28 d5 39 d6 54 1c 6b 2a 0e 94 6a 18 1d 8e 0f cd 96 9c c5 63 63 76 97 bd 9c Data Ascii: 'rLfLDKM<eY<35B gdqa6_~yFg,lq])Toi #<[&\|5aC$8B?bL&5&7M]+#Kpz^vdn.N#l9[tGhHn)\cTW1]/(?:(9Tk*jccv
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: db b7 6f ff 27 96 65 fd 2b c3 30 3e 69 18 46 af 57 80 96 bd a7 94 6a ff 54 f5 1a 07 77 dd c3 cf af bf 05 2d 64 64 c1 bd 98 9f f5 14 2f de ba 91 3d f9 ce b8 2f 02 5e 9d a9 f2 d0 7b 33 29 5b 15 57 e9 d6 3f 3f d9 b1 8e 3b d7 e6 3b 2a 64 08 c1 6b 0b 75 ee ff c5 47 8c 1b dd 82 2f d5 ec 55 8a dd ef be c5 1d 6f 3c 0f 99 1c 7e 5f 4a 79 39 bf 38 3b d9 bf af 94 02 f8 b9 d6 fa 4f f2 f9 fc d3 df fc e6 37 1b 49 4d 4a 9c c1 5f fd ea 57 ef c9 66 b3 7f ec 38 ce 9d e5 72 b9 2f 23 dd f7 52 29 a5 50 4a 21 1a 35 aa f5 3a fe 21 74 fd 8a ad 92 d6 4c e6 33 ec c9 db 1d e4 4a e0 42 d3 e3 87 f3 0d 30 04 53 09 b3 38 4d 99 73 4a f3 7f e6 1b dc 58 cc b0 21 e0 44 f1 b4 e6 93 63 59 c8 d9 cc 37 5c c6 43 c1 89 b4 e5 d5 5d 97 b9 4b b3 e8 4c 1e 29 25 42 88 f6 15 5b ef 50 01 52 ca 3d 99 4c Data Ascii: o'e+0>iFWjTw-dd/=/^{3)[W??;;*dkuG/Uo<~_Jy98;O7IMJ_Wf8r/#R)PJ!5:!tL3JB0S8MsJX!DcY7\C]KL)%B[PR=L
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 56 37 b0 8e 47 45 fa 96 1d 0f f6 2b a1 b5 26 97 cb 71 cf 3d f7 b0 7d fb f6 f6 3d ad 35 9e e7 e1 ba 2e ae eb e2 38 0e 27 4f 9e e4 85 03 07 d8 7c fa 57 fc c3 1f 7e 87 97 ef ff 5d 16 36 5e 83 d4 9d 9f 5e 2f 57 d3 eb 87 d8 34 13 25 0d b9 1a 81 12 50 3c 77 8a df dc ff 0c c5 d2 34 ae 90 7c 62 df 3e ae b9 e6 1a 0c c3 68 5f 61 33 e9 d4 a9 53 1c 3d 7a 94 46 a3 91 4a 52 06 c9 8d 4b df 25 b4 fd 18 6e bf d0 5a 33 36 36 c6 e4 e4 64 9b 48 9f d4 45 db ba 9d f6 fa eb af 6f 6d 6e b3 6c c6 e7 67 b9 ef c7 df e7 9a f7 df 41 2b 17 6f d1 1d b9 1c 72 35 7a a0 e4 a6 a9 8f 06 94 10 a0 5c b6 be fb 36 77 ff e8 cf 28 96 67 c1 ce a0 b4 66 cb 96 2d 1d d2 2c 38 e0 fd 3e 2a 16 8b e4 f3 f9 c5 3a f5 d2 13 74 58 0a 68 15 21 05 07 ba a3 23 ca 0f ed 87 c3 b4 d6 48 29 b1 2c ab 43 24 79 42 90 Data Ascii: V7GE+&q=}=5.8'O\|W~]6^^/W4%P<w4\|b>h_a3S=zFJRK%nZ366dHEomnlgA+or5z\6w(gf-,8>*:tXh!#H),C$yB
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: eb 84 4d a1 7c 89 3b 7e fa bf 98 28 3d c8 91 5d fb 90 96 1d bb 2e c7 75 b3 12 02 dd 6c b2 e7 d0 2b 5c fb f2 7e 32 1a 84 6d 77 88 61 bf dc 30 b1 4b 25 37 49 4a f6 49 6e 2c 06 16 0f 0e 57 20 89 f8 a8 4a 47 e5 19 95 4f 50 b1 f1 bf be f0 84 20 eb ba dc f4 ea 73 14 6a 0b 1c b9 ed 4e aa 85 09 24 97 77 fb c4 75 85 66 31 12 54 9e e3 e3 6f bd c4 a6 37 ff 16 d3 b0 c0 bc 6c f2 84 cd 1f bf 6e 49 7d 10 7e 16 74 e6 f8 7f c7 ad df fd 92 db 97 a3 63 39 a2 58 4a c9 ba 75 eb 58 bf 7e 7d 62 ba e9 e9 69 ce 9f 3f 1f e9 e5 f1 e3 ca 9b 36 6d 6a 3b 3b 82 9d e4 5f 8d 46 83 93 27 4f d2 6c b6 0e 3c 13 42 20 a4 e0 da b7 5f 20 b3 30 cf d1 3b 3e cd 87 6b 36 b4 42 75 31 f5 50 b4 3a 71 fd cc 47 6c 7f ed ff b1 fe dd 37 11 99 1c 42 1a ed ba 65 b3 59 36 6f de 8c 65 59 b1 22 b9 d1 68 30 33 Data Ascii: M\|;~(=].ul+\~2mwa0K%7IJIn,W JGOP sjN$wuf1To7lnI}~tc9XJuX~}bi?6mj;;_F'Ol<B _ 0;>k6Bu1P:qGl7BeY6oeY"h03
2024-05-27 22:43:42 UTC	903	IN	Data Raw: 07 ff 5e 0a b9 fe cf d4 fb a2 57 7a 4d 75 1c 87 7b ef bd b7 c3 2e bc 12 d0 68 34 28 97 cb ed 23 16 82 1d 1c 26 21 f8 ac 54 2a 71 f0 e0 41 2c eb f2 b6 83 41 92 bb 64 2d 7a a5 e0 38 0e 3b 76 ec 88 5d db 46 19 6b d7 ae 65 7e 7e 9e 6a b5 0a d0 e1 dc 88 73 3f ae 5d bb 96 17 5e 78 a1 4d f0 4a 90 cb 20 76 55 0e 0a 61 c3 fe 4a 81 1f 67 9e 98 98 40 4a 49 f0 24 fc b0 42 95 d6 e2 48 22 37 78 bf 07 b9 40 f4 61 08 bf 16 e1 c2 95 44 14 51 52 4a c6 c7 c7 b1 2c 8b 4a a5 d2 f6 43 87 d7 e5 a8 bf 83 e8 45 6e 9c 76 de 8f a5 13 fb f9 e8 28 3a 35 86 89 34 5e b4 7c be f5 1f 6b 2c 2c 2c 10 3e 40 7d 10 e4 c6 b9 3f 63 82 1e 4b fb 00 3c ae 82 bf 8e 58 ca 92 91 cd 66 31 0c a3 43 53 8e b3 49 7d 24 29 46 bd c8 ed 17 cb 8a 07 2f b7 f0 51 c1 72 75 01 cb b2 28 16 8b 18 86 41 bd 5e ef 7a Data Ascii: ^WzMu{.h4(#&!T*qA,Ad-z8;v]Fke~~js?]^xMJ vUaJg@JI$BH"7x@aDQRJ,JCEnv(:54^\|k,,,>@}?cK<Xf1CSI}$)F/Qru(A^z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50238	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:42 UTC	551	OUT	GET /XfxlbB7Imi28_w277XeVC0u8Yngn8e1bQxhd6YK2snOdqt_uiwripgSEl5VNxgS2cJP2kf0dHv6LfSq8AG6YeJf9cpu1BE1kP36R=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:42 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2860 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5522 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:42 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0a e3 49 44 41 54 78 9c ed 9d 79 6c 1c d5 1d c7 bf bf 37 7b f8 8a 43 9c a3 24 5c 09 b9 2f 02 89 43 42 80 16 52 02 24 02 a5 50 5a 54 b5 a8 fc 43 43 69 41 45 45 48 40 ff ab 2a d4 96 ba 40 da 22 90 8a 5a 50 29 15 10 25 0a 49 0a a8 12 2a 6d 1c c7 e1 f8 a3 44 ea 41 55 2e d7 b5 bd 5e ef e5 b9 de 7b bf fe 61 3b d8 8e 03 59 ef ce cc ee cb 7c 24 5f bb 7e f3 fb cd 7c e6 bd 79 f3 66 76 1e 10 13 13 13 13 13 13 13 05 14 75 02 61 e0 76 de 30 03 c9 c4 d9 4a 8b 66 00 80 e0 a2 e5 ca de f4 e5 fb 8b 11 a7 16 38 46 0b 1e 7e f3 2b ad da 29 6c b0 60 6f 03 e1 52 66 b1 00 00 40 dc 43 cc 5d 5a 34 bd 86 74 cb b1 e6 f5 2f 18 2b da Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxyl7{C$\/CBR$PZTCCiAEEH@@"ZP)%ImDAU.^{a;Y\|$_~\|yfvuav0Jf8F~+)l`oRf@C]Z4t/+
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 0a b6 5f d9 30 4f 7a 43 b7 b0 6f 7f 17 7e 76 25 94 5d f1 32 2b 17 3c 06 03 d4 08 58 ad c7 75 a2 e1 71 91 9c b5 a7 a9 fd 85 fe 8a 13 0c 80 9a 14 5c 3c b4 76 09 dc c2 bd 5a 16 be 01 7f a8 15 5c 9d 0a 52 3d c1 c0 48 b3 9d 00 5b 2d 39 4a b4 3c 23 52 ad 8f 35 b4 ef 7b af 0a 69 56 95 9a bb d8 50 da b7 b2 9d ed a1 0e ed 66 ee 80 97 a9 9a dc ea 43 00 24 48 e5 66 42 66 77 b1 97 7d c4 ee da 71 49 d4 59 4d a6 a6 04 17 5e 5e b6 59 c9 5c 07 7b 03 37 42 15 92 51 e7 f3 d9 8c b6 02 6a 38 c5 7e f6 4b ec 17 3a 4a 5d d7 6f 8c 36 a7 89 d4 8c e0 e2 fe e5 1b e1 16 77 c3 1b b8 12 ba f2 e3 6d e8 68 07 90 d9 ab e0 15 77 17 3b af db 10 75 3a 63 d4 84 e0 fc fe c5 8b e1 15 7e c1 5e 7f 3b d8 8b 3a 9d 69 42 00 bb 20 39 b8 49 e8 d2 6e f7 c8 b6 45 51 67 04 d4 80 60 fb 8f 17 cf 12 4a 3e Data Ascii: _0OzCo~v%]2+<Xuq\<vZ\R=H[-9J<#R5{iVPfC$HfBfw}qIYM^^Y\{7BQj8~K:J]o6wmhw;u:c~^;:iB 9InEQg`J>
2024-05-27 22:43:42 UTC	611	IN	Data Raw: d0 10 60 9c f2 21 db ec 81 30 e8 43 49 ff 94 79 93 20 9f 08 1a d3 d8 98 01 42 00 24 33 06 ca 2d 58 be e0 61 7a 46 4a 3e f8 a9 d5 20 64 98 58 a6 8b 2d 17 59 4e ea 7e 30 2d c0 d8 78 29 e1 c4 2e 48 00 c0 0c 3d 34 74 e2 ed 91 55 f8 c4 35 01 82 05 fd 4b b6 5a 3f 95 73 ac bf 91 aa a9 b9 26 58 b0 55 b6 e0 9a 91 54 29 03 f7 cf bb 8d 80 67 46 9a e2 51 69 e3 e5 8e ad e9 98 cf 49 fb e7 b8 b7 b5 56 f8 fa ec 47 fa 9e 0f 32 df b0 30 e2 4e 8b cc fd f3 e7 12 e8 8a 29 e5 12 26 ee c6 04 40 d0 c8 cf d1 2f 9a f8 bb b0 92 b8 3c f7 e0 5c 23 06 71 8c 10 4c 90 6d 04 bd 12 93 26 df 9a f2 20 72 8a 9a 3b f1 45 5e c9 c0 ec aa 25 18 21 b5 74 8c 99 36 4c dc 48 c0 ec 13 ba b8 12 b9 c0 a8 dc c0 a7 bc 09 03 23 6a b0 d4 80 e6 51 5f 15 ca 1d 5d 06 31 9b d1 3f 31 a2 06 93 22 07 02 83 10 55 Data Ascii: `!0CIy B$3-XazFJ> dX-YN~0-x).H=4tU5KZ?s&XUT)gFQiIVG20N)&@/<\#qLm& r;E^%!t6LH#jQ_]1?1"U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50239	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:42 UTC	786	OUT	GET /9NuRdiRepVI3n1txfg7Ky2wWzB3DvXkWABXeFMSn2tzDYYkv8T_RMA9R17fWi0ziUDIDTVJx0JruCzOev37c4dkK9Wrgkeyam3pM8lI=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:42 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4217 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:08 GMT Expires: Tue, 28 May 2024 18:50:08 GMT Cache-Control: public, max-age=86400, no-transform Age: 14014 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:42 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 0f c5 49 44 41 54 78 9c ed 9d 7b 74 1c d5 7d c7 3f 77 76 56 2b ad 56 b2 fc c0 96 d7 2f 01 26 3c 8c 01 db 92 0b 38 3c 22 09 48 ca 23 14 b7 66 78 04 17 4a 12 9e e5 10 c5 0d b0 a5 69 1a 4c 7a c2 33 21 e1 38 21 49 69 5e 08 93 21 38 29 27 a7 20 04 b4 10 0a 1e c0 e0 17 10 08 2f 23 64 15 5b c2 92 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx{t}?wvV+V/&<8<"H#fxJiLz3!8!Ii^!8)' /#d[
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: bb 9a 1a 04 e9 a1 be 85 65 a9 9d bc 55 bd 96 53 0f fd 06 bd 81 0a a2 32 a5 cc af 1c fa 3b bc a6 12 5d 13 1e fc 9c 0e e0 3d a0 ae 3d 16 f1 d4 b5 1f b7 e8 0d c0 42 80 44 e0 48 0e ee fd 03 2f ee f8 0a 4b 93 1f d3 21 74 65 4e 53 43 63 cc 7a c0 17 71 21 7d ce 1b bc 76 ea 69 0d ee 6a 6a 38 11 78 76 f4 76 4d 0e e0 c8 6e 6e 3d bc 95 bb ab 96 10 75 dc 7d fd 9a 94 92 ba 48 39 d3 ca cb f2 19 86 54 c5 aa f6 58 e4 8f 5e 39 f3 ba 06 3f 90 69 a3 23 2a 10 da 6c 6e 7e ed 24 be b3 f7 8f 74 04 42 38 2e 39 b4 a5 64 4e 79 59 a9 88 0b 63 5c 03 55 78 26 70 57 53 c3 3f 32 74 6b ce 84 44 c7 09 d4 73 d5 9f ce 62 d3 bb ff 46 a7 a6 33 58 e4 0d c6 91 30 bd 4c 67 4e 24 af 17 08 aa 59 d8 78 4b dc b3 fe b1 27 b7 e8 ae a6 06 0d c8 b9 05 55 66 6f e6 95 99 31 4e 39 f8 5a 10 1a 51 99 7f 7d Data Ascii: eUS2;]==BDH/K!teNSCczq!}vijj8xvvMnn=u}H9TX^9?i#*ln~$tB8.9dNyYc\Ux&pWS?2tkDsbF3X0LgN$YxK'Ufo1N9ZQ}
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 82 b2 5b 50 79 f9 6e 82 f3 f6 20 53 63 be 62 3b a9 50 fb 85 22 9c e0 a1 fb 67 3d 41 32 d2 8a 90 d3 55 b8 e8 51 61 54 95 c0 ef 15 52 48 7e ac 51 71 5e 37 e5 c7 bc 3b b2 c5 9c 91 64 9b 7e 76 41 91 15 40 d3 b7 e4 95 c9 ea 57 18 98 f5 4d 84 a3 2c c3 66 e2 d4 e0 d9 4f 6c ce 7b 8c 58 0e 08 f4 e3 e2 84 4f fa d3 b8 e2 0e e1 5e e6 c5 38 a4 2a df ba 3e dd 62 56 97 3e 65 19 e6 3b 2a ec aa 6c 02 e6 3e 55 30 29 08 2c 4a 50 7d fe b6 6c b7 e5 d1 ac 4a b6 e9 ca 6f d5 a7 dc b1 cd e8 9f 7b fb 61 c8 30 0a 2f 97 b2 69 95 2a 05 ce 2d c3 c2 01 d9 2f a9 be 68 27 04 44 a6 16 73 36 36 16 14 59 1e 0c cc d9 70 bf d4 3b 50 dc 33 73 2d 1b 65 34 2a 05 1e 7f 06 9d 04 06 a1 7a dd 9f d1 2a 13 63 b5 98 b3 51 9b 6c d3 7f 55 48 70 b9 50 ff c0 9a 36 47 ff 20 84 0c aa 72 31 cc 7f a9 32 ac 52 Data Ascii: [Pyn Scb;P"g=A2UQaTRH~Qq^7;d~vA@WM,fOl{XO^8>bV>e;l>U0),JP}lJo{a0/i-/h'Ds66Yp;P3s-e4z*cQlUHpP6G r12R
2024-05-27 22:43:42 UTC	579	IN	Data Raw: 86 b9 cc ef 20 c6 a3 a4 6b f0 30 c1 66 7b 9d 2e ec 2d cf 0d 2e e5 d2 81 b9 a5 20 2e 28 5c a5 dd 4d 4a 27 59 79 1c 4e 8c 73 62 4f ff 61 1f 2e 17 ce 34 bf 63 01 4e b6 0c b3 e0 a5 a2 bc 64 42 d4 60 80 e7 ce 66 20 80 76 6a 09 04 fc 6d cb 30 ff db ef 20 72 a5 74 66 81 e5 40 d7 6f 76 74 46 ff fa a8 38 70 9a 4f 21 bc 60 19 e6 45 3e f9 2e 88 12 a8 10 f9 61 19 e6 6d e4 b0 fe 87 02 92 c0 e7 7d f0 5b 14 13 4e e0 21 4e 06 d7 be 02 9f 2b 67 58 86 59 d0 d2 10 7e 32 21 05 b6 0c d3 01 fe ca 43 97 3f b7 0c f3 49 0f fd b9 c6 84 e8 07 8f 45 7d eb ea 9f 01 97 2a 76 a3 74 91 14 d5 4c c8 1a 3c 8c 65 98 97 01 83 8a dd 7c 41 b1 7d a5 4c 68 81 87 50 d9 a2 fe 57 cb 30 b7 2b b4 af 9c 09 2f b0 65 98 cf 00 2a 96 33 ec 04 6e 52 60 d7 53 26 f4 33 78 24 f5 ad ab 13 e0 ea 7c ee 7a cb 30 Data Ascii: k0f{.-. .(\MJ'YyNsbOa.4cNdB`f vjm0 rtf@ovtF8pO!`E>.am}[N!N+gXY~2!C?IE}vtL<e\|A}LhPW0+/e3nR`S&3x$\|z0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50243	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:42 UTC	566	OUT	GET /UCUgyJDzxd1yRkMkEOgWSSoDkQAowQJ38mgljJHX9y6xODGoglnCV-6LRLsoTIY4Og4Bi3cmX5-hduZsp2vtNQyPpRGVuP-dSc_7StvSfN7FT5N8mkI=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:42 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3024 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:38:04 GMT Expires: Tue, 28 May 2024 21:38:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 3938 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:42 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0b 65 49 44 41 54 78 01 ed 9d 7f 4c 95 d7 19 c7 9f 7b 2f 20 15 28 68 43 05 dc 2c 54 c5 64 12 6d 31 6a 32 6b c1 6c d3 25 b2 9a f4 8f aa 9b 62 b7 4c 47 dd 8f a4 5a bb fe b1 c2 e4 af 4e b1 4b b6 ce 99 d1 65 29 d6 49 9b cc 64 0b 24 a3 5b a7 54 d9 a2 1d 4c 8d 76 29 da 8a 1b 8a 42 a2 20 3f e5 c7 bd 3d df 97 de e6 16 b8 70 ef 7b 9e f3 9e f3 de de 4f 42 a4 70 63 e3 fd dc e7 fc 7a 9e f3 bc 9e 80 80 e2 c4 2c 5e 8a 13 d3 c4 05 c7 38 09 14 63 dc 1c e8 a4 96 db 1f 50 6b cf 35 ea e8 eb a2 d6 ee b6 f1 9f f7 77 7e ee 75 Data Ascii: PNGIHDRxx9d6pHYssRGBgAMAaeIDATxL{/ (hC,Tdm1j2kl%bLGZNKe)Id$[TLv)B ?=p{OBpcz,^8cPk5w~u
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: ba d0 22 58 36 7a b7 2e 29 21 27 c1 87 49 e6 03 a5 f3 8c 5d 8b e0 de 61 b9 74 20 8a d2 9d 46 46 70 87 c6 e4 83 16 c1 57 3e bd 4e 62 07 2c ae 74 94 c7 e0 6a 8b 5d 90 80 40 65 a8 0e 5c 77 f9 0c 77 8a 74 b0 44 42 30 e8 1d e9 23 1d 68 11 2c 73 7f 28 5b 53 71 5b b6 a6 0f 96 2c 5a d2 85 d6 7d 9f cc 02 b2 43 24 c3 b3 ff f6 4d 1a bd da 4a fe be 3e f1 7d 87 f5 b3 31 f1 67 c2 c2 7c 7a e0 e9 2d a4 03 dc 74 cc 99 ed fc 87 44 8b 60 ce 2d 4e a0 bf 97 46 ce 37 d3 f0 85 16 1a 11 5f 10 19 e8 eb 9d f2 b5 49 cb 57 68 13 8c 43 13 1d b8 f2 7e 30 a4 0e 35 d4 d3 fd a6 46 21 b5 99 9c a0 55 62 61 08 52 67 e9 29 a9 75 95 60 c8 ec af 79 dd 31 a9 a1 c8 de 3b d6 31 3c 03 57 08 1e 7a a7 9e 06 6a aa 69 ec d6 4d d2 85 4c e6 4b d7 f0 0c 8c 16 6c 82 d8 20 b8 6d 61 17 15 e9 cc 48 31 52 f0 Data Ascii: "X6z.)!'I]at FFpW>Nb,tj]@e\wwtDB0#h,s([Sq[,Z}C$MJ>}1g\|z-tD`-NF7_IWhC~05F!UbaRg)u`y1;1<WzjiMLKl maH1R
2024-05-27 22:43:42 UTC	775	IN	Data Raw: 63 ab 94 38 4d 09 6c 24 60 45 8d 06 e1 4e 60 8a 64 6f 76 04 8b 2b 1b 28 c9 07 87 de 31 b2 0b 86 6a d5 ad 0f 83 e8 96 ec 49 7e 44 44 f0 53 a4 02 25 82 b1 0a 96 8d 62 e0 64 f3 52 9d 92 bd 8f 96 93 2a 7c 3f 17 90 02 b0 a2 c6 6d 7f 59 10 c9 1e 22 47 fa 50 2e 9a e7 a5 ac 74 2f 35 b5 8e 11 27 17 ef 3d 41 f8 47 2c 7f f0 cc a4 df 21 7a bd 5f f9 3d a9 42 59 c9 0e 57 14 03 2c ba 62 75 b8 56 19 bd 80 f5 a0 63 22 78 c0 d5 9d 1f 6c 23 2e 70 14 9a 5e 79 70 52 9b 60 15 a8 3a 0c d9 f6 a5 57 68 fb fc 57 ac ef 3d a9 cb c8 b7 5a ed c3 bf 94 0d d1 c0 3b f7 21 91 fc 16 67 cc ff bd 44 1c f8 ef de b1 1e c1 63 35 fa 5e 18 f9 6d 08 3b 38 31 5c 27 ac 3c 13 d5 b1 a3 1d 94 46 30 c0 96 e7 4e d9 76 f2 33 b7 13 86 e0 f4 ca 03 6a a3 79 b4 9b fe fa ee 09 3a d8 bc 99 b8 d9 5e f0 2f 7a f6 Data Ascii: c8Ml$`EN`dov+(1jI~DDS%bdR*\|?mY"GP.t/5'=AG,!z_=BYW,buVc"xl#.p^ypR`:WhW=Z;!gDc5^m;81\'<F0Nv3jy:^/z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50242	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:42 UTC	553	OUT	GET /Iyn9yCCDxgHqvjX5jMZ_looun-kL0Sk60FraoMU5-JQG2WstyK6QNzj3JguQRbvQmWqVBSoO88Oh1kGQAoXMPkIIEF0pQrvXL52XXw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:42 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 909 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:54:32 GMT Expires: Tue, 28 May 2024 18:54:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13750 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:42 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5a 50 4c 54 45 47 70 4c fb bc 05 42 85 f5 eb 43 35 42 85 f4 ea 43 35 3c 93 b7 8f 83 98 42 85 f5 42 85 f5 34 a8 53 ea 43 35 fb bc 04 fc bd 05 fb bc 05 34 a8 53 fb bc 05 42 85 f4 fb bd 05 fb bc 05 34 a8 53 42 85 f4 fb bc 04 ea 43 35 42 85 f4 fb bc 05 fb bc 05 42 85 f4 ea 43 35 34 a8 53 50 e7 68 62 00 00 00 1a 74 52 4e 53 00 65 76 4e a1 88 1e 0a c9 4d c4 d7 7d 3f f1 f3 bd f8 9e d5 57 ef 24 e4 e6 4c b9 c3 9d 59 00 00 02 b9 49 44 41 54 68 81 ed 99 e9 92 e2 20 10 80 35 17 39 46 33 de 16 49 de ff 35 37 8c a3 01 e5 6c e8 50 bb cb f7 37 65 7d d2 07 34 c9 66 93 48 24 12 ff 12 55 93 15 f5 65 98 b9 d4 45 d6 54 eb 58 Data Ascii: PNGIHDRxxsBITOZPLTEGpLBC5BC5<BB4SC54SB4SBC5BBC54SPhbtRNSevNM}?W$LYIDATh 59F3I57lP7e}4fH$UeETX
2024-05-27 22:43:42 UTC	50	IN	Data Raw: 5c d1 a6 cc 78 73 75 bc 9b 44 bc bb 53 bc db e2 26 da fd 98 11 e9 8d 40 22 91 48 ac c1 1f a3 d5 e5 dc f4 13 1d e1 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: \xsuDS&@"HIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50244	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:42 UTC	553	OUT	GET /7j1-9AjGTjyFcEDU5lJw2BpZNYWNKgkxegHVv012Pm5OPBratN5ZsNVtpILRwXqE5Givogcj2VMswYdKR1dKvLvo2EQFSM0p7yTxYw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:42 UTC	575	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 7289 X-XSS-Protection: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 22:24:38 GMT Expires: Tue, 28 May 2024 22:24:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 1144 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:42 UTC	815	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 1b c5 49 44 41 54 78 9c ed 5d 7b 6c 1c d5 b9 ff 9d 99 7d af df 36 76 1c 07 43 4c 5a e2 06 27 69 45 7c 09 94 0b 51 09 88 87 10 a8 01 2a 52 a9 a5 ea 4b 50 a9 e8 aa a0 2b c1 6d ff 00 74 d5 f6 9f a2 12 a8 04 d4 8e 70 a3 3c 48 69 2b b5 51 00 95 f4 36 21 21 10 db 71 48 c0 29 09 c1 76 fc 8a 5f eb Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx]{l}6vCLZ'iE\|Q*RKP+mtp<Hi+Q6!!qH)v_
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 9d b0 0f 58 74 82 29 a5 1b 0e 1e 3c 78 60 66 66 a6 3e 9d 4e 17 d5 20 52 55 15 2b 57 ae 44 30 18 e4 de 57 14 05 83 83 83 59 63 c9 69 ba 6e 65 11 45 11 65 65 65 43 f7 dc 73 cf 9d 84 90 93 ae 33 28 00 82 7d 10 ff 40 29 fd e9 be 7d fb ba a7 a6 a6 ea d3 e9 8c 87 d0 cc d8 f9 22 c1 ee 19 d2 e9 34 26 27 27 eb 77 ed da d5 4d 29 fd e9 22 89 05 60 f1 34 98 74 77 77 ff df 27 9f 7c f2 75 45 51 f2 6e 16 43 6b 80 c5 ab a2 9d c4 63 f7 83 c1 20 d6 ac 59 73 b8 b5 b5 f5 3f 91 ef 3e f5 1d 45 27 98 52 5a ff f6 db 6f 1f 9f 98 98 58 65 d6 d6 16 fb a5 ba 31 b2 bc ca e3 c6 f2 17 45 11 95 95 95 03 77 dd 75 57 2b 21 84 2f 84 4f 28 2a c1 94 d2 1b f6 ec d9 73 74 e1 b7 5d 58 2f e9 3b ba ef a6 9b 54 6c 59 18 58 5f fc db df fe f6 66 42 c8 31 d7 19 3a 44 d1 08 a6 94 7e 73 df be 7d af 3b Data Ascii: Xt)<x`ff>N RU+WD0WYcineEeeeCs3(}@)}"4&''wM)"`4tww'\|uEQnCkc Ys?>E'RZoXe1EwuW+!/O(*st]X/;TlYX_fB1:D~s};
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: d5 2f 8b c7 d3 8c 42 60 96 07 fb cd 9e 23 16 8b e1 b3 cf 3e 43 67 67 67 f6 39 45 51 c4 c0 c0 00 7a 7a 7a b2 5d 21 b3 34 f5 df 56 a0 94 62 62 62 e2 06 4a a9 2b 82 5d bd 89 bf ff fd ef 1f 0f 0f 0f 5f eb 26 8e 63 41 08 81 a6 69 38 72 e4 08 92 c9 64 4e 95 6c f5 52 ec aa 36 16 c6 c9 35 bb 30 bc c2 cc fa f7 8a a2 20 1c 0e e3 a6 9b 6e c2 d0 d0 10 ba ba ba 10 89 44 4c 0b 1e af 06 72 22 4b 3c 1e ef 7d fe f9 e7 d7 da 46 58 80 63 0d a6 94 de 3f 3a 3a 5a 54 72 8f 1f 3f 8e 54 2a 05 51 14 73 34 d5 d8 15 b2 aa 8a 8b 09 5e ed c0 fe 07 83 41 28 8a 82 c3 87 0f e3 cc 99 33 39 4e 0c ab b6 d7 2d e6 e6 e6 ae 9d 9f 9f bf df b1 cc 4e 03 be fd f6 db 9f 8c 8e 8e 5e e3 5a 22 3b 01 16 4a f0 e1 c3 87 91 4a a5 b2 55 1f bb a7 b7 52 79 da eb 04 7e 6a 30 ef bf fe 9b e7 b1 d3 7f 1b af 7b Data Ascii: /B`#>Cggg9EQzzz]!4VbbbJ+]_&cAi8rdNlR650 nDLr"K<}FXc?::ZTr?T*Qs4^A(39N-N^Z";JJURy~j0{
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 9e b5 12 5d 38 e3 80 9b 59 7d 7d 3d ca cb cb 11 0c 06 11 0c 06 51 5e 5e 8e fa fa 7a d3 07 d0 34 2d af ff 6b 96 b6 59 1a 84 64 f6 b5 d2 87 b5 4a 07 c8 54 cb b7 dd 76 1b 56 ac 58 81 99 99 19 cb bc 8b 0d 1f fd ce a8 ae ae c6 86 0d 1b a0 df 6e 79 81 e0 28 32 87 8f e4 80 47 30 25 84 e4 49 44 69 66 21 b7 be 0d 60 d7 83 c1 20 77 81 19 bb cf aa 66 b3 f6 d3 c9 0b 60 c3 7e 4e fb bf 94 52 b4 b4 b4 78 f2 42 15 a3 2b e3 05 3c bb 47 96 65 7c e9 4b 5f 42 32 99 cc 79 77 34 f3 23 4f 70 37 f3 a2 2d 97 81 9a dd 63 f7 79 44 ba e9 9b da 11 6b 24 b7 bc 3c 33 4f e1 72 93 5b 8c c2 12 89 44 b8 e7 55 f0 50 f4 cd 48 0b e9 fb 3a 79 00 ab 36 db ed 3e 5d 4b 45 73 01 6b 59 d8 aa 46 5f 09 66 0e 7e b3 59 18 7e 3a e4 9d 12 6b d5 66 b3 fd 39 dc e4 e9 37 8a 91 26 21 04 53 53 53 8e f3 e1 11 Data Ascii: ]8Y}}=Q^^z4-kYdJTvVXny(2G0%IDif!` wf`~NRxB+<Ge\|K_B2yw4#Op7-cyDk$<3Or[DUPH:y6>]KEskYF_f~Y~:kf97&!SSS
2024-05-27 22:43:42 UTC	1390	IN	Data Raw: 97 53 4d b6 22 b0 d0 fe af a6 69 58 b9 72 65 51 c8 4d a7 d3 f8 d1 8f 7e b4 c3 2e 9c 2d c1 84 90 8b 6b d6 ac 79 87 65 5e 88 b5 ab ff b0 ea b4 a5 a5 25 67 62 bc 53 cd 70 62 d8 78 b5 ae fd 70 92 a8 aa 8a ba ba ba 9c a9 46 76 70 e3 f8 a8 a9 a9 79 87 10 72 d1 2e ac a3 49 77 b7 dc 72 cb 53 56 9a 60 46 bc 5d 21 50 14 05 ab 57 af c6 55 57 5d 95 e3 00 e1 c5 71 5b a0 58 1c b7 d6 b5 1f e4 b2 93 c7 cb ca ca 1c 6b af 9b e7 d2 34 0d cf 3d f7 dc 53 4e c2 3a 22 98 10 72 34 16 8b 9d f3 d3 d8 62 48 26 93 68 69 69 41 45 45 45 de 6c 7d a7 73 7f ad e0 c6 ba f6 8b 5c e6 46 f5 d3 51 a4 47 30 18 3c 17 8d 46 8f 3a 09 eb 78 da ec b6 6d db 9e 28 d6 a9 a2 c9 64 12 37 de 78 23 aa ab ab 91 4a a5 1c 7b ba 9c c2 ce ba 76 e2 31 73 02 4d d3 10 8f c7 71 e5 95 57 22 95 4a 39 96 cf ad f6 fe Data Ascii: SM"iXreQM~.-kye^%gbSpbxpFvpyr.IwrSV`F]!PWUW]q[Xk4=SN:"r4bH&hiiAEEEl}s\FQG0<F:xm(d7x#J{v1sMqW"J9
2024-05-27 22:43:42 UTC	914	IN	Data Raw: 79 bf 57 79 79 28 0a 0b 94 d2 07 5f 7e f9 e5 3d 3c eb d1 87 b4 7d 4d cf 09 44 51 c4 f0 f0 30 4e 9d 3a c5 ad ae 0b 19 ed d2 93 db d2 d2 b2 b7 50 59 8d 28 9a 9a 51 4a bf f9 d2 4b 2f bd ee 64 67 56 9b 74 fc 92 c7 93 0d c0 e2 88 a2 88 b1 b1 b1 bc 36 b9 50 72 93 c9 24 9e 7e fa e9 6d 7e 6b 2e 43 51 eb 51 4a e9 0d 2f bc f0 c2 51 e3 36 be 16 e1 8b 25 07 2a 2b 2b 73 76 06 9a 9c 9c b4 25 d9 28 8f 28 8a 18 19 19 f1 c5 ba 66 bd 89 5d bb 76 f9 66 50 f1 b0 18 fb 07 d5 b7 b7 b7 1f 07 b0 8a 79 88 16 1b 2b 57 ae cc db 67 59 51 14 0c 0e 0e 72 c3 5b c9 e8 97 75 4d 29 1d 68 6f 6f 6f 85 0f 5d 21 2b 14 7d 2b 43 00 43 df fd ee 77 1b cb cb cb 0f a7 d3 e9 45 31 be 18 28 a5 d9 9d 71 79 7e 60 de 06 e1 76 05 b0 10 eb 7a 61 e0 00 d1 68 f4 70 7b 7b 7b 23 8a 4c 2e b0 38 1a 9c 05 a5 f4 Data Ascii: yWyy(_~=<}MDQ0N:PY(QJK/dgVt6Pr$~m~k.CQQJ/Q6%*++sv%((f]vfPy+WgYQr[uM)hooo]!+}+CCwE1(qy~`vzahp{{{#L.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50246	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:42 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:43 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:42 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:43 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50245	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:42 UTC	554	OUT	GET /R-_6O0_uuaRmQfOGA1NNI4aj7lQBWjg-t3tpiWJqWC8xx84LL9kuIMoHj9FovIG7SCho36_AXGKT6NQi3xYZwaRcS2je7mrtyI761To=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:43 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 6717 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:02:11 GMT Expires: Tue, 28 May 2024 19:02:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 13291 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 19 f4 49 44 41 54 78 9c ed 9d 7b 90 64 57 7d df 3f bf 73 ef ed ee e9 e9 79 ed cc ec 68 77 b5 5a 3d 56 2b a1 5d 2d 96 b4 42 2f 90 57 12 42 b6 9c 32 24 04 2a 4e c9 72 08 11 29 b0 2b 45 90 65 ec 98 c4 18 0a 9b 82 14 8e 51 b0 ab 90 8a 0a 09 15 3b 4e 30 72 6c 1c 42 0c 02 3d 90 04 7a 21 19 01 92 d8 d5 6b 57 33 fb 9a 57 bf ef bd e7 97 3f 6e f7 4c 4f f7 ed 9e 7e cd ec 1a fa bb d5 d5 3b f7 9e c7 ef 9e ef 3d bf f3 3b bf f3 3b a7 61 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 d8 44 48 3b 89 de fe c4 ac c9 1d 33 db 1c 6b b6 88 6a c2 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{dW}?syhwZ=V+]-B/WB2$*Nr)+EeQ;N0rlB=z!kW3W?nLO~;=;;a````````DH;3kj
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: 51 21 00 f5 35 5a c9 70 81 44 25 a1 0b b8 12 bd 15 cd 08 e8 57 23 9e 69 64 9c 69 f2 b4 8b 06 82 af 4d 8b b3 d5 95 e4 b8 2b f8 aa 94 2d e4 2c 2c 87 ca 82 85 d7 02 38 1a e8 9a f5 ba 51 89 1c e0 ad d4 41 27 bd b7 59 6b 6e 84 97 ac 27 87 4d bb c3 4d f7 35 f4 8c 06 82 0f 4c d8 a1 cb 27 bd a9 4b a7 3d ca a1 e2 5b a5 10 40 21 50 0a 3e e4 ca 4a a9 0c 79 1f 4e 95 95 a3 25 e5 70 d1 f2 48 51 59 f2 23 d2 5d 81 2d 02 4e a5 cc 4e db f0 74 3a 47 36 ad ee 4d b2 45 1a 08 96 a0 2c 5b 5c e3 ec 1a 49 12 da d5 89 95 88 20 02 82 20 06 ca a1 b2 50 b2 cc 17 95 53 05 cb 42 01 16 0b f0 4a de f2 83 ac e5 2f b3 4a e0 03 02 93 02 5e 9c f0 1d 08 ba 11 53 ae 9f 05 77 6b ec 72 a1 2a 6a b5 ea f4 58 bd 58 2d 5e 03 45 04 c6 5c 98 18 35 5c 30 66 30 22 94 2d 9c 2a 58 4e e4 2d ff 22 0f 47 b3 Data Ascii: Q!5ZpD%W#idiM+-,,8QA'Ykn'MM5L'K=[@!P>JyN%pHQY#]-NNt:G6ME,[\I PSBJ/J^SwkrjXX-^E\5\0f0"-XN-"G
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: db 2a 64 12 ca db 2f f4 c8 fb ca 5d 87 02 5c 64 cd 44 ff 4c f1 32 f6 4e 7a 93 09 79 cc e5 06 82 3f 70 71 26 79 7e c6 99 38 67 c4 21 e7 5b 16 8a 96 d9 5c c0 0b 0b 3e 7f 79 ac 04 f3 7e 94 d0 81 94 11 26 1c 59 d7 e7 25 40 c6 08 c3 46 78 a2 a0 dc 7f c8 e7 fb b3 af 70 cb de 51 7e e5 aa 69 5c 91 9a d0 9f ee a1 0a 23 1e bc f3 a2 04 27 f3 96 4f 1e b5 8c 57 e4 6b 55 7a 3f 7a 6f af 2a 77 a3 9c 28 0d 04 8f 78 ea ee 9d 74 92 57 ef 1c aa 58 bf 2b 71 95 dc 23 50 28 2b af 2e 05 3c 75 ac c8 ff 3e 94 e7 6b 2f 64 23 49 3c e1 2c 27 f2 7a b5 78 0c 86 0d a4 11 fe 36 6f 78 ec 7b cb 3c fd 52 8e f7 de 78 16 fb b7 a5 29 f9 3d 1c bb 53 81 55 98 4c c1 ed 97 26 39 51 2c 70 ef 29 65 c2 69 2e 54 d3 46 ec 75 92 da 69 7d 1b 54 66 03 c1 e5 20 00 eb e1 54 0e e6 58 39 e2 aa 72 7a 50 26 09 Data Ascii: d/]\dDL2Nzy?pq&y~8g![\>y~&Y%@FxpQ~i\#'OWkUz?zow(xtWX+q#P(+.<u>k/d#I<,'zx6ox{<Rx)=SUL&9Q,p)ei.TFui}Tf TX9rzP&
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: 45 cb fb 9e c8 31 a5 8a 91 55 ff a6 0a 8c 02 cf e1 71 ef 43 27 f9 d4 3b b6 b7 3c 0e a2 69 5d 44 27 ae 5e b5 cd 8b 7a 71 2e 24 0d 15 75 9d 07 01 9b 4c ae a4 ed f4 39 3a 95 65 23 d1 40 f0 63 cb 09 ff 29 bf bc ec 94 cb 33 1e 01 c3 5a 64 14 cb 84 28 33 a3 86 3d 33 09 6e da 33 c6 e5 3b 52 58 ab 04 7d 8c b3 aa 8e c9 b7 5c 3c c4 27 b2 01 bf fb f7 05 b6 26 2a 03 4b 85 64 01 c6 5d 87 af cc 2b 97 3d b5 c0 7b 0e 4c 50 6a e1 34 69 5e 97 32 9a 84 3f d9 93 e0 03 df cd 93 f6 04 91 28 f6 d7 64 f3 80 10 26 13 cd f3 37 91 bf 93 f4 cd 65 eb ac 8c 56 65 37 10 ec 81 4a c5 d3 59 16 a1 88 61 0e 28 02 c1 12 98 f9 90 4f 7c 7f 8e 4b 32 70 fb be 0c b7 5f 31 c1 90 2b f8 61 7f 02 e0 55 61 22 29 fc d2 a5 19 0e 2f 59 ee 7d ad cc b4 57 a3 8a 45 f0 80 e3 c6 e1 6b 3f 28 f2 96 f3 7c 76 8d Data Ascii: E1UqC';<i]D'^zq.$uL9:e#@c)3Zd(3=3n3;RX}\<'&*Kd]+={LPj4i^2?(d&7eVe7JYa(O\|K2p_1+aUa")/Y}WEk?(\|v
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: 47 2d b1 25 e9 f0 a9 17 02 be f1 62 ae eb fa fc 50 79 eb ce 24 88 34 3a 25 00 8c c3 f7 8e 07 cc 2d fb 1d bf 44 56 61 2a 25 9c 37 bc 52 f0 9a f2 1b c8 ad 56 60 15 29 45 24 d7 63 53 5c 9a eb 64 ea cb ef 26 19 11 67 df 8e a1 d1 8f 5f 99 76 2e cf 30 7f ca 56 8c 14 91 95 79 9f 41 70 52 09 7e f3 a1 45 72 25 db 55 2f 56 60 d4 55 de bd 3b c5 42 8d 27 25 3a 0c 46 f0 5c 87 ff 73 d2 32 9f 0d a2 85 83 0e 91 34 30 9e 76 20 61 2a 4a 62 1d 72 6b ec 8d 6a 4f ae 95 b5 e9 73 f4 69 c5 a9 9d 72 9a 10 dc 59 e3 28 e0 18 63 2e 3d 3b 3d f2 87 57 a5 4d e0 d8 bc bf a6 81 23 1f ef 84 81 57 ca 0e ff e5 c9 45 bc 2e fd c7 7e 10 72 fb ee 21 a8 3a 3d 6a bc 4f 69 81 43 59 25 57 d0 ae e2 bb 55 95 91 61 e1 9a b4 90 af 5e 5b 8f dc ea 72 66 95 e4 a0 b5 9d b1 19 e3 6e 2d 62 08 6e 61 92 b5 80 Data Ascii: G-%bPy$4:%-DVa%7RV`)E$cS\d&g_v.0VyApR~Er%U/V`U;B'%:F\s240v aJbrkjOsirY(c.=;=WM#WE.~r!:=jOiCY%WUa^[rfn-bna
2024-05-27 22:43:43 UTC	299	IN	Data Raw: ae ed e0 b4 44 23 c8 4f b2 d6 5f 5c 0a 96 c8 d9 60 8d 36 16 b3 ea 7e ad 87 54 ab 5f ab d6 d7 9c 4c 50 d3 db 89 26 1a 95 9d 92 8d f3 9b 58 81 05 c5 ea a2 c2 73 26 28 3f 40 3e 7c b0 74 e7 f9 87 4e b4 78 9e 75 0f 23 bd fa ea 3d 87 80 43 5f f8 ef 8f fd cd e4 58 72 cc 73 35 59 7b 02 a4 71 ab ff 97 e8 a0 e9 1a 9e 1c 23 bc b8 10 32 97 b5 69 b7 2c ee ca dc 50 54 0d 50 16 78 f6 a4 75 13 9e 93 88 23 58 50 02 67 ed 3c 37 7a f8 28 e9 4b a7 fc 80 bc 5f c6 a9 68 79 13 35 94 67 61 ce 11 73 ff eb 9a 18 4e 38 46 eb 82 03 ea 51 5b b1 11 98 2f 5a 3b bb 54 2e 9b 5c d9 ae 68 62 55 70 12 c4 36 bd 82 18 d0 4a 53 d4 3a b5 6c ed 4f b8 d5 a9 fc e8 4f 13 65 6e 78 f6 18 18 55 0d a5 84 71 4e 95 3e 74 fe 5c d3 07 1a 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 Data Ascii: D#O_\`6~T_LP&Xs&(?@>\|tNxu#=C_Xrs5Y{q#2i,PTPxu#XPg<7z(K_hy5gasN8FQ[/Z;T.\hbUp6JS:lOOenxUqN>t\`````

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50247	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:42 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:43 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:43 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:43 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50250	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	566	OUT	GET /ndBjgsc_sRzVPfSLYwGYEWLMHYbkfEMjy0u4Foa-TxNDNDi9wn_5rPcPq7ZSEJh-iO3NmYjpfowhqFxrWKyBsJZrHMwtHhqVJBsKG1ryO8N6dKmTosA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:43 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3139 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:58:39 GMT Expires: Tue, 28 May 2024 18:58:39 GMT Cache-Control: public, max-age=86400, no-transform Age: 13504 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 0c 0a 49 44 41 54 78 9c ed 9d 6d 8c 5c 57 79 80 9f f7 9c 7b ef cc ec ce d8 bb 3b bb f6 ee 3a 2d ce da 21 41 a0 f2 a3 2d 55 db a0 46 c2 b4 5e 27 a9 50 10 89 40 94 0a 08 71 63 b5 14 b5 55 fb af 28 95 2a 55 fd 55 50 3f d4 38 71 15 55 54 82 26 42 8a 20 81 d2 08 b5 52 48 c0 80 14 3b 8d 00 27 71 28 69 11 8d 3f d7 bb 3b 73 3f ce 3d fd 31 33 f6 ee fa ae ed 9d 9d 3b f7 de f1 7d a4 91 56 33 a3 39 ef ce 33 ef 79 cf d7 dc 11 6b 2d 25 a3 8b ca 3a 80 92 74 29 05 8f 38 a5 e0 11 a7 14 3c e2 38 49 77 ca 5f 42 6d f9 22 3b 2e fd 14 df 8d a8 2d 07 bf 84 f6 3e 0a f6 4e 60 06 30 40 df a3 b3 9f 2e 2d f0 7b ef fa 7b fb 0f ef fb 53 c7 ae 28 8c 1d dd cf 99 9e 89 bc d5 af cf fe Data Ascii: PNGIHDRxx9d6IDATxm\Wy{;:-!A-UF^'P@qcU(*UUP?8qUT&B RH;'q(i?;s?=13;}V393yk-%:t)8<8Iw_Bm";.->N`0@.-{{S(
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: 6f 49 24 7f 37 69 08 44 56 31 ed 2d 83 d4 79 f8 e4 a3 68 89 58 dc fb 4f 85 cf 64 dd cd dc 7b ce 1e 04 60 bf 93 7a e6 5e 93 4c c7 b1 91 55 4c bb cb ec aa c0 e1 13 c7 78 f6 8d 8f 17 36 93 85 6e cd f5 27 38 78 e6 10 1a cb 82 ce 56 2e e4 60 a2 d2 93 dc e9 ae 8b 2b 59 bb 21 af 05 13 2c 9e 39 c4 05 eb b2 d7 b9 44 94 fd db 9b 83 08 b8 d2 5d cf 78 f0 d0 89 63 85 aa c9 bd 01 d5 b7 5b b3 bc ef ad 7b 58 ea d4 dc cc 33 b7 47 3e a2 e0 8a e4 5d 15 38 72 f2 d1 c2 64 b2 76 42 5e f7 77 f2 c0 d9 03 ac a2 59 c8 91 5c c8 91 60 b8 4e 77 6d f3 25 59 d1 9d 0a 05 13 1c 3c 73 37 3e 3a 57 99 db 23 5f d1 b0 be bb 3e 7c e2 18 cf 9c fe 64 47 b2 ca 57 26 2b 27 e4 87 fe 14 87 ce 2c 72 c1 ba b9 cb dc 1e f9 8b 88 f5 dd f5 43 27 1e e3 ab a7 1f cc 55 77 ed b8 21 df 6b ef e2 ae b7 ee e5 52 Data Ascii: oI$7iDV1-yhXOd{`z^LULx6n'8xV.`+Y!,9D]xc[{X3G>]8rdvB^wY\`Nwm%Y<s7>:W#_>\|dGW&+',rC'Uw!kR
2024-05-27 22:43:43 UTC	891	IN	Data Raw: af cf da 54 7f 1a ab 64 90 58 b1 48 ac dc a4 c7 12 05 fb fb cf 3f ab 97 bc 74 a3 2a 19 18 ae 5f c1 af af bc 94 f4 58 72 06 2f 35 ff 56 b9 1a 4b 9c 6e 64 25 db 26 b6 02 6e 48 5d fb 7f 95 f4 78 a2 e0 e5 33 3f f9 9f 95 ea cf fe c2 a1 92 6e 74 25 db c6 73 42 56 8c f3 c2 1b a7 ee 78 2a e9 f1 44 c1 2b ee 1b b4 ed b9 cf 2a 55 f9 57 09 05 31 aa 1c 76 e5 0c b1 82 32 1a cf 8d 8e b7 fc b1 df fa df 37 f7 27 3e 6f d3 e9 90 b2 0e 12 ab fb ed 4e fb 67 a6 1a 5e 24 02 ec e0 06 5e 36 2e 07 71 fd 22 56 88 55 8c 3f d6 3a 1a 21 ef d1 62 2f 51 5d 4d 7c ee 35 d7 a2 55 db c5 ec 6b fd b5 59 32 8f d5 de 9c fc 60 5c 33 bf 61 e3 78 76 7b d1 09 b1 89 41 a4 89 f0 6e d2 ef 1b 9e 4b f9 f5 87 8b 70 21 86 17 62 2f f8 ca f2 e4 f9 1f 8e 9f 9f ba e6 55 2d ae bd d9 20 16 8c 80 b1 e7 94 a3 8e Data Ascii: TdXH?t_Xr/5VKnd%&nH]x3?nt%sBVxD+*UW1v27'>oNg^$^6.q"VU?:!b/Q]M\|5UkY2`\3axv{AnKp!b/U-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50251	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	785	OUT	GET /5CsRqfMEP1Rv-PPv9G4962lyEuvb4roSLJHJQWPbmCa51AmvynfoGfoKsKiS87QhX07xQMZAeLp8qoSy7CjVZkXJ1WapQiJkroCeJw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:43 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1852 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:51:32 GMT Expires: Tue, 28 May 2024 18:51:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13931 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 06 f3 49 44 41 54 78 9c ed dd 5f 6c 54 65 1a c7 f1 ef 7b a6 d3 7f 50 fe b6 4b cb 16 5a 0a 0c 26 c6 18 c3 b2 71 35 92 b8 08 c3 5e 18 b2 bb 53 88 26 1b 63 24 66 dd c4 44 2f 8c 86 78 b3 46 2f 4c bc 30 d9 0d ab a2 de 48 d4 84 c1 68 a2 b1 07 bc 58 75 d7 b0 37 ae 22 cb 2e a0 2b a2 96 5a a0 68 95 7f d2 39 cf 5e 9c a9 34 48 67 cf 9c 39 e7 bc 67 a6 cf 27 69 48 5b e6 7d 1f e6 d7 f7 3d cf 9c 39 87 82 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 4a 17 63 bb 80 a9 64 2f 37 20 4c d8 ae 23 a4 d3 66 03 47 6c 17 71 b9 26 db 05 4c 1a e9 bd 7e 08 67 5f 9e 92 ed 4a c2 93 3d 9c 04 76 9a 0d dc 6f bb 96 49 8e ed Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx_lTe{PKZ&q5^S&c$fD/xF/L0HhXu7".+Zh9^4Hg9g'iH[}=9RJ)RJ)RJ)RJ)Jcd/7 L#fGlq&L~g_J=voI
2024-05-27 22:43:43 UTC	994	IN	Data Raw: e9 f1 9f c9 54 dd ca e7 d3 80 c3 30 30 01 fc f1 d0 00 f7 1c 5b 00 99 74 ad da a9 52 73 77 61 dd 30 70 a6 04 bf 3f b8 8a 9d e3 2d d0 94 ee 9b aa 34 e0 6a 38 f0 c5 99 59 2c f9 a8 1f 4a 99 54 af dc 49 ba 45 07 95 81 7f 8c 2d 64 c9 fe 65 e0 39 a9 ea 94 2b d1 80 83 70 e0 d5 e1 1e ae 3f d0 0b 98 54 36 53 d3 d1 80 2b 31 fe 69 ae 27 3e 59 c6 af 3f ee 82 6c ba 8f b7 57 a2 c7 e0 e9 18 ff 2c e3 1d ff ca b1 f3 9b 56 ff b4 63 1d d2 80 af c4 81 91 73 ad f4 ec 5f 0e 13 f5 d1 4c 4d 47 b7 e8 cb 65 e0 c0 f8 1c 7a fe b9 d2 7f 87 ab 4e 9a a9 e9 68 c0 53 39 e0 1e ef e1 9a fd fd fe e7 75 d4 4c 4d 47 03 06 ff 59 70 60 fb a7 7d 6c 3c d2 e5 6f c9 0d 10 2e e8 31 18 80 af ce c1 f6 cf 97 f1 c8 89 8e ba 6d a6 a6 a3 01 03 dd df ae 87 89 71 e0 3b 1a 6d 53 6b ac 7f 4d 58 2d 0e f4 ce 87 Data Ascii: T00[tRswa0p?-4j8Y,JTIE-de9+p?T6S+1i'>Y?lW,Vcs_LMGezNhS9uLMGYp`}l<o.1mq;mSkMX-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50252	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	553	OUT	GET /Qvc6rWiGG_a6LNQ7Yx5vMmve_5ku8TG7z4vmWG7VBkbcOQfOSE2BS7eBcD1NUOWTsbs9A_Vh-mJpKtsGtG_0f7sIGFy5LwhdOLRg4w=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:43 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5502 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:02 GMT Expires: Tue, 28 May 2024 22:42:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 101 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 15 35 49 44 41 54 78 9c ed 9d 69 8c 65 47 75 c7 7f 75 ef bb 6f ed 6d ba 7b 7a ba 7b ec 9e c5 e3 b1 c1 60 e3 18 c6 80 82 41 8e 42 84 04 11 8e 82 f2 89 10 b2 11 05 25 ca f2 2d 12 f9 1a 29 41 88 58 a0 2c 7c c8 a2 80 40 0a 42 09 1f a2 44 64 71 12 b6 31 04 db 60 e2 31 8c c7 5b 4f 4f cf b8 f7 e5 2d f7 de 3a f9 70 df eb b7 dc e5 dd e5 bd d7 e3 e8 fd 47 af a7 fb de aa 53 e7 d6 bf ea d4 a9 53 75 eb c1 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 0c 17 2a 41 da 53 f0 73 6f b9 fc 55 67 65 61 8a 7c eb a2 ed 3a 62 c6 c9 1d 90 c8 05 5c 57 c4 77 51 bb b1 14 d2 39 dd 9d 57 03 ae 8e 95 Data Ascii: PNGIHDRxx9d6sBIT\|d5IDATxieGuuom{z{`AB%-)AX,\|@BDdq1`1[OO-:pGSSuc1c1c1c1c1c*ASsoUgea\|:b\WwQ9W
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: 18 68 79 9a ff df cc 18 f8 09 8d 64 0d 02 c7 ed 0f 8f 2a 02 37 e8 d8 db 20 b5 4e 49 70 88 e3 d3 99 22 e1 d8 1b d8 33 12 10 14 dc 33 d2 23 d1 c8 9f 6a fc 1d 0d 22 4c 74 b6 69 c3 60 25 0e 4e c6 71 5b 95 51 63 e0 26 3a 4d 2b 0d 9f ca 8c 56 8f e3 c1 70 c3 ba 03 25 38 aa 52 93 39 1d 09 cb cd 28 23 b6 89 8d 59 ce ed d4 b4 fc 26 ba 11 6f 47 44 27 fa 55 50 e2 07 4e e8 7d c7 16 9b 31 ff eb 11 fe 1e 9c 4f d0 a9 45 32 91 1b d6 23 32 13 99 d5 bc 8f b0 ac 2c 65 c7 19 c6 7c 6c 36 2a 39 d0 22 be 65 c2 d6 df 47 9f 6c ca 86 9a bb 64 97 47 66 9e b3 e2 b8 7c 02 9f 89 f6 45 ab 53 39 4d fd ee 87 47 9d 86 55 0d d9 cd fb eb 6f fc 85 61 78 d1 7d ef a7 71 c4 e2 cb 1a ad 79 ce 54 54 c2 d2 d2 21 63 a8 b2 8d 38 aa 46 92 3b c4 b9 73 d2 32 13 48 18 88 1e e9 8a 8e 57 b6 7f 0c 8e b1 37 Data Ascii: hyd7 NIp"33#j"Lti`%Nq[Qc&:M+Vp%8R9(#Y&oGD'UPN}1OE2#2,e\|l69"eGldGf\|ES9MGUoax}qyTT!c8F;s2HW7
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: 2a 5f c6 50 c9 1c bd 01 78 df 02 55 5f 62 df 80 93 36 1a 9b 36 b4 28 22 18 86 81 65 5a 28 54 a0 1c e9 fa 5d 98 cc 97 bb 76 8e 75 56 8e 02 4e 2b 93 cf ae 3f c5 d6 b7 77 79 f4 ec db 78 ef d9 b7 b2 5c 9e eb ea cd d7 ab 1b fc f3 b5 ef f0 6f 2f 5e e6 0b 3b 2f b0 a4 cc f6 8e 8e 9e ca d6 08 93 56 39 f4 19 bb cb 57 e4 4d 0b 53 a9 c0 b9 78 92 5a 0a af d3 b0 49 a5 7f a9 c8 47 f0 37 ae d9 3c 7a 34 4e f6 9e 39 11 a4 42 7a 62 23 45 47 95 2a 6d cd 82 5a be 42 71 1a 93 2f ee 5c e5 c9 1f de e0 6b 57 bf c1 e9 e9 25 a6 cb 93 00 ec 1c ee b1 ba bb c6 77 6b af f1 23 fb 80 25 95 6b 3f 69 60 4f 0a 26 eb f6 42 b0 c5 f0 11 bc dd d5 08 06 ff 50 41 84 d8 e2 52 b7 eb be f2 02 ab 5a 29 b6 1a fb 18 a8 be d3 a0 25 95 63 d7 ae f1 65 fb 65 64 ff 55 26 0d cf 54 ef 68 17 85 66 0e 93 e5 0e Data Ascii: _PxU_b66("eZ(T]vuVN+?wyx\o/^;/V9WMSxZIG7<z4N9Bzb#EGmZBq/\kW%wk#%k?i`O&BPARZ)%ceedU&Thf
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: af 7d e3 ec 19 7e 61 e5 61 f6 dd 46 c4 a4 a5 35 75 14 ca 56 81 93 95 59 de 3c b7 c2 f9 ca 3c 35 1d df 37 18 04 b9 30 aa f5 e0 e6 7c d9 11 cd 4a 65 8e bb a6 97 a8 e4 4b d1 cb 89 2d fb 87 67 ce ef a8 9c e0 d2 c9 8b c7 fa c6 80 88 70 e9 e4 45 ee ac cc f9 96 2b 3b 52 75 fc e6 fd 9b c8 97 b8 30 b3 cc b9 89 39 6c 9f 75 1a d4 f3 8c 28 16 dd bb 09 be 45 88 20 e4 4d 8b 0b d3 a7 28 98 f9 88 cd 65 7e 5d 1d 71 b9 38 b9 4c 31 97 f7 df 1c 29 84 52 2e cf 3d 93 4b 38 a1 a7 be fb e1 8a 50 30 f3 5c 98 59 26 17 b2 59 a1 bf 94 a8 3b e1 39 d2 9f 36 db 11 c9 8a 13 73 d6 02 a7 4a 53 1e b9 41 0a 05 10 db 82 23 c2 4a 79 2e 72 ea 31 0a 78 0e 95 62 a5 3c 8f 93 f0 0d 0e 41 28 98 16 a7 3b 36 2b 24 39 0b bb 7f 09 c1 f0 11 fc f9 6b 35 da b5 1d f6 49 0e 8d 78 a1 bd a0 0d 87 7d 44 0a de Data Ascii: }~aaF5uVY<<570\|JeK-gpE+;Ru09lu(E M(e~]q8L1)R.=K8P0\Y&Y;96sJSA#Jy.r1xb<A(;6+$9k5Ix}D
2024-05-27 22:43:43 UTC	472	IN	Data Raw: d2 30 21 3f a1 b1 0f 15 12 7c 46 5b cc b2 fc f7 dd 86 f2 48 2e 64 23 b7 99 62 95 80 8e 19 40 f0 0f f7 71 8b d7 c4 c5 3b ea 26 2e 86 f6 de ee 90 c7 e2 18 9b 03 94 09 56 45 b0 0f 94 17 8e f2 55 4b 4a 82 04 74 03 5c 05 a6 95 54 6e 47 2a 17 d0 bc 04 1c f4 de 0b b6 b1 87 85 6f 56 8a fc 97 a9 9a 61 ba 38 9f 81 a3 33 a2 9b 34 5f 9c 64 71 f4 6e df 57 86 47 b2 91 f3 de 12 54 46 eb 23 1d bf f7 7e 22 ee a9 e6 7d 05 ba a1 02 9c b9 78 cf 61 1a 50 29 f3 1f 1c f0 f5 a0 fb 81 04 ab 9f dd f9 01 07 c6 5f 6d 6e e1 1a 23 3d 95 4f c8 46 6c 1c 47 2a 2e b1 fe 34 ca 80 5c 49 50 39 ef bb 3b 94 29 cd ff 83 3e 51 f7 fc f7 b5 dd 1c 02 8e ca ef 0f c3 80 8d 6d 1c 0e f8 1b f5 18 3f 0c 4a 13 69 83 e5 2b 95 8f 6d ba ee 27 0b 65 26 62 95 98 18 a3 8b e8 78 c9 b3 79 c0 9d 72 b4 ad 22 62 20 Data Ascii: 0!?\|F[H.d#b@q;&.VEUKJt\TnGoVa834_dqnWGTF#~"}xaP)_mn#=OFlG.4\IP9;)>Qm?Ji+m'e&bxyr"b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50253	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	785	OUT	GET /wbRbWxRbQyojtDDUj_ITsoMZNbSAnroic0AYABmbab8qE-sgODk26wLCYUcJrqW11-I50N3GE6iTCY_Sfa7ud4vMa9fig4YdinEa9w=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:43 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2820 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5523 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0a bb 49 44 41 54 78 9c ed 9d 7b 8c 15 d5 1d 80 bf 79 dd d7 de bb ec ba ec 53 16 82 14 50 6c 45 23 eb ab 52 52 f7 a2 46 a3 a5 12 db b5 8f a4 69 b4 5a 4b ac 35 55 fe 69 6d eb 83 36 9a da 34 6a 83 22 68 9b d6 2a ed 96 6a 15 da 75 20 d0 50 43 64 0b d4 47 10 5c 1f b5 ba b0 77 41 57 17 58 76 67 ee 9c fe 31 77 75 81 05 ee ee de 79 dc 99 f9 36 93 6c 72 e7 9e df ef e6 cb 6f ce 9c 33 67 66 24 22 c8 b5 b6 64 80 2b 81 45 c0 7c a0 e9 a8 5d ba 81 0d c0 ba ba f5 5b 9f 74 39 bd 09 21 79 9d 80 97 e4 5a 5b 9a 81 25 c0 2d 40 a2 c8 af 0d 01 77 01 cb eb d6 6f dd ef 54 6e a5 22 94 82 73 ad 2d 1a b0 10 78 1c a8 1b 67 33 db 81 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{ySPlE#RRFiZK5Uim64j"h*ju PCdG\wAWXvg1wuy6lro3gf$"d+E\|][t9!yZ[%-@woTn"s-xg3
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: b4 4c fc 38 0e f6 95 60 43 57 cf 03 7e 0a b4 02 31 6f b3 19 1d 59 18 98 b2 c2 86 a9 df 61 5d d3 e5 ec 8c 4f a6 52 f8 4f ec 30 be 11 6c e8 6a 16 f8 15 70 26 3e 9d 58 94 c5 20 03 8a c6 33 33 96 f2 4c fd 7c fa d4 4a 92 22 ef c3 ba fd 14 5f 08 36 74 f5 06 e0 6e a0 de eb 5c 8e 87 66 1d e4 bd 44 35 ab 67 ff 9c f5 55 73 b0 94 04 71 e1 db e5 d0 9f e0 b9 60 43 57 1f 01 be 01 a4 bc ce e5 78 c4 cc 1c af 55 ce e4 37 67 3d ca ae f8 29 68 28 28 c2 f2 75 e5 0e e3 99 e0 c2 35 dc 0e e0 12 af 72 38 19 12 82 c4 50 27 6b 9b 97 f2 c4 ac 1f 92 53 12 c4 85 40 2a 0b b5 36 9e 08 36 74 b5 1e d8 08 9c ee 45 fc 62 90 85 81 c8 ef 60 c5 19 bf e5 e9 a6 ab b1 64 8d b8 65 8f 71 cb 47 af 07 82 0d 5d 9d 07 6c 01 14 b7 63 17 87 40 16 87 e9 89 d7 f2 d8 ec 8d 74 54 9f 4b 06 d0 7c 36 81 51 2c Data Ascii: L8`CW~1oYa]ORO0ljp&>X 33L\|J"_6tn\fD5gUsq`CWxU7g=)h((u5r8P'kS@*66tEb`deqG]lc@tTK\|6Q,
2024-05-27 22:43:43 UTC	571	IN	Data Raw: dd 45 aa a1 17 35 b5 87 fe 77 2f c3 32 aa ca b2 5f 0e e7 30 a9 18 44 0c 49 3d 48 bc fa 1f 54 cf 5a 85 96 de 8d 95 8f 95 db 28 29 12 7c 42 84 0c a8 28 a9 57 a8 9a b9 82 54 a3 8e 65 24 f0 e9 cb 51 47 25 12 7c 52 a4 42 35 7f 40 7a ca 6a aa 4f 7f 04 21 06 11 96 82 10 8c ba f9 89 48 70 b1 08 15 49 ca 13 af da cc e4 cf 3e 80 92 78 17 91 f7 e5 3b ac 8f 20 12 3c 26 24 40 43 49 76 51 73 e6 32 52 0d 9b ec 6b cc 47 5d 99 f2 13 91 e0 f1 20 62 48 4a 9e ca 69 8f 52 fd 99 27 91 63 1f fb cf 6c 81 68 98 34 5e 84 0c 24 48 d4 ac 45 8e f7 d0 ff de 55 0c f5 4f b5 97 07 f9 08 7f 65 53 76 48 20 52 c4 33 db 50 a6 ef e1 40 f7 57 19 ea 9f ee 75 52 47 10 09 2e 01 c2 4a a2 c4 f7 51 d9 fc 18 56 5e e3 bf 5e 27 34 82 48 70 a9 10 2a 92 62 a2 a8 fe 7a 65 4f 24 b8 a4 48 be 5b 02 14 9d 45 Data Ascii: E5w/2_0DI=HTZ()\|B(WTe$QG%\|RB5@zjO!HpI>x; <&$@CIvQs2RkG] bHJiR'clh4^$HEUOeSvH R3P@WuRG.JQV^^'4Hp*bzeO$H[E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50257	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:43 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:43 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:43 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50255	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	798	OUT	GET /yemTWtzfavZZqaWs0_ijOcSrLtp93cAfiJA4HqGSpJNYBxe13WWQxeqV7xt7Bdf34Nug2nw2z-a4T85pXURHj8tcOPFh1-l7BvYANqrAXd7zHVQ93x0=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:43 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 7717 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:09:37 GMT Expires: Tue, 28 May 2024 22:09:37 GMT Cache-Control: public, max-age=86400, no-transform Age: 2046 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 1d d7 49 44 41 54 78 9c ed 9d 79 98 a4 55 7d ef 3f bf f3 be b5 f6 3e d3 dd b3 2f cc c0 88 88 04 94 0b b9 5c 83 cb 8d 9a a8 91 47 82 46 63 f2 b8 3c 46 13 24 ee 4b ae 46 8c 5b a2 b9 62 16 42 2e c6 88 51 94 10 14 c1 0d 1d 34 2e 57 14 45 40 70 00 33 c3 30 03 03 0c b3 4f af 55 5d 55 ef 39 bf fb c7 5b 7b bd d5 5d 5d 55 3d d3 f4 ed ef 3c a7 a7 ea 9c 53 a7 4e d5 f7 fd ad e7 bc a7 44 55 59 c6 d2 85 39 d9 13 58 c6 c2 62 99 e0 25 8e 65 82 97 38 96 09 5e e2 58 26 78 89 63 99 e0 25 8e 65 82 97 38 96 09 5e e2 58 26 78 89 63 99 e0 25 8e 65 82 97 38 96 09 5e e2 f0 a3 2a 9f fb a1 ee 0c 2e 04 48 6c 06 25 86 Data Ascii: PNGIHDRxx9d6pHYsIDATxyU}?>/\GFc<F$KF[bB.Q4.WE@p30OU]U9[{]]U=<SNDUY9Xb%e8^X&xc%e8^X&xc%e8^*.Hl%
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: 26 07 05 8f dc f8 26 b2 ee 38 d9 42 40 b6 50 60 a6 90 23 93 d5 17 17 f2 de 1f 3c 09 84 b7 01 0a 7d ce c9 e5 82 ec 12 e4 e5 0b 6d 9b 17 2d c1 00 ce 42 32 7f 06 2b fb 85 15 fd 79 56 0e 14 18 e8 73 78 86 eb 75 b1 e7 08 67 85 22 c2 29 ce 7a 37 d8 c0 fc 48 84 0b 16 ea 5a 5d d4 b9 68 13 87 60 ec 6c c6 f6 6f c2 c9 34 86 24 be 17 7b 3b ea f5 8a b8 93 3d bd b6 e1 04 0a be a1 e0 09 0e 2e 14 e4 27 71 d5 ab 8c e3 f2 04 1c eb 26 d9 27 9a e0 04 e8 25 08 cf 03 7d 2a aa 83 28 be c2 b4 c2 e3 08 3f 43 e5 6b 82 ee 00 50 2f 80 dc 1a bc 60 3d de e0 3d b8 6c ff 48 10 98 2b 3c ef c9 43 6e 98 84 81 e9 a4 61 bc c7 27 1b 33 a4 f2 8e c1 e9 80 c1 e9 80 98 55 ac 11 a6 13 e6 cd c7 7a fd 3f cc a6 fc 2b e2 b8 8f a5 27 82 70 c1 a4 43 45 75 a2 08 4e 82 be 53 e1 52 44 d7 02 65 d3 53 99 bf Data Ascii: &&8B@P`#<}m-B2+yVsxug")z7HZ]h`lo4${;=.'q&'%}*(?CkP/`==lH+<Cna'3Uz?+'pCEuNSRDeS
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: 68 63 e7 2a ee db 56 cd 11 08 a4 f0 a9 40 0a e4 9b 24 80 9a c4 31 a6 f5 e2 04 94 cd a0 6f 6e 36 89 48 a7 89 2a f2 aa d4 73 43 5b e9 79 43 b6 ab ea af 7a 98 d4 31 72 87 cf a3 70 e4 42 4c f2 20 0b b9 cb c3 43 d9 6b fb 78 96 1e e2 75 83 0f c2 8b 0b 6c fd 9b bd ac 7d f3 13 98 84 23 bb 37 85 cb 0b e2 69 8d 6a 2e 49 68 a8 9a eb f4 71 89 e9 79 32 2c b0 a5 60 e4 92 1c d1 91 4f 34 c1 c6 b5 58 2c 78 8a f1 e4 c6 b9 26 35 7b 6a b2 22 c7 b5 a4 6b 8d 23 56 ac a9 72 b8 aa fa 4a 80 3a 28 1c 3f 17 69 7d b3 5e 5b 98 c1 c3 21 fc fd c0 cf 01 70 bb 43 45 36 fc fa 23 6c fd fb 3d 8c be f2 10 f6 b8 4f e1 70 02 f1 b4 31 b8 ad b3 b9 e1 45 00 35 be 76 cb db 3e 04 1f f7 41 a3 d1 5a 2b 9a 60 6b e6 2e 2e fc 5f 94 67 23 ee 19 cd 08 ae 09 89 1a 6c 69 14 59 b5 ea b9 66 1c ad ed 5b 79 1a Data Ascii: hcV@$1on6HsC[yCz1rpBL Ckxul}#7ij.Ihqy2,`O4X,x&5{j"k#VrJ:(?i}^[!pCE6#l=Op1E5v>AZ+`k.._g#liYf[y
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: 1f 23 ca 87 fa ee 9e 7f 58 14 05 05 52 60 c7 e2 d8 89 38 12 d3 9a 45 87 ce 86 56 04 73 6f 0c ff bf a2 da e7 d8 d1 e1 21 c6 bd 01 b1 a7 b7 6c 7b 23 6c 69 d9 56 96 9e 47 da d2 ca 84 1b 1d b1 ba 70 0a 40 1c 76 66 84 d8 d0 6e d2 9b be 88 cd ae e9 4a 7a d2 47 d9 69 fb 79 53 7a 27 a7 25 26 d1 76 c2 a2 e8 81 c9 ed ea 47 b3 7e 65 09 b1 0b 10 c0 a9 f9 70 c1 c5 22 db 9b d8 e0 02 68 1e 34 88 8b e8 95 f3 7d d3 7a 5b 5a 6b 93 35 ba 6f 8d ea 6d f4 c0 a1 4e cd ab c1 15 0c a9 f5 37 62 12 87 d1 42 7f c4 2b e6 07 01 0e 6b 92 2d fe 14 97 f7 de 1b 69 fb e7 0d 05 d3 0b 7a 10 32 77 ad c4 eb 2b d0 69 6a b2 7a c6 a2 ec f1 6c ee ab 86 4c 64 8f 68 82 93 79 48 16 90 78 fe 3d 60 93 ad 48 2f 54 a9 d5 b2 03 55 df 56 f5 b8 8a d0 06 9b 5c 69 a8 ed 5b b2 e7 e2 b0 99 11 12 ab 7e 41 6a dd Data Ascii: #XR`8EVso!l{#liVGp@vfnJzGiySz'%&vG~ep"h4}z[Zk5omN7bB+k-iz2w+ijzlLdhyHx=`H/TUV\i[~Aj
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: d8 88 97 72 a1 2d a6 4e 35 b7 a1 9e 15 f0 e0 91 b4 e5 5f 0d ed 5d dc 4d 24 58 f6 81 fe e6 5c 6f 5e d2 a9 f5 5f 52 c3 f3 ba 90 69 ce 71 c4 61 33 03 24 d6 6f 27 3e fa 3d 6c 66 73 57 1c 2b 45 38 64 53 7c aa ef 0e c4 a7 3b d2 ab c0 30 8c 7f 66 98 dc ee 3e 52 a7 4e 83 9a aa a4 06 6d 45 47 c5 1d 3e 14 54 fe 74 dc d8 96 5e bf 3a a2 ae 49 98 c4 ee d9 06 6a a6 56 cb 1e 70 95 84 36 53 cf d5 a9 49 ad e9 a1 b8 42 2f 26 9e 27 b1 e1 df 51 9b 06 d7 f9 81 67 1e ca 2e 3b c0 4b 92 fb 78 75 ef 9e ee 6c c3 71 60 46 20 d8 e9 31 7e eb 6a 62 a3 b9 e2 9e ab 72 3c 44 f5 da ef fc 86 56 7c 95 6f e2 bc ef b4 b8 5a 1b 89 66 36 78 d7 5c 2f ac 0d 75 a2 bc e1 3a f5 1c 11 fb 16 6b 6a 5e a8 22 b8 99 34 c9 ad d7 e2 0f dc 8d 9d de da 15 e9 cd aa 87 87 e3 13 7d 77 75 67 1b 0e c5 7c 73 1c 8e Data Ascii: r-N5_]M$X\o^_Riqa3$o'>=lfsW+E8dS\|;0f>RNmEG>Tt^:IjVp6SIB/&'Qg.;Kxulq`F 1~jbr<DV\|oZf6x\/u:kj^"4}wug\|s
2024-05-27 22:43:43 UTC	1298	IN	Data Raw: b6 b6 1e a6 0f 82 5d 1e c7 bf be 06 7f 30 a8 91 ce f2 b9 cf d4 a5 26 5b 80 a2 f8 f0 f3 b4 95 af 96 55 57 97 d1 24 93 d5 e8 7b 89 b3 60 ec 05 4e fc ef a1 fc f7 ca 14 cb b3 2d 4b 6a f1 69 53 d5 5d b2 c9 56 0d 62 60 43 fa 91 72 9f d9 e0 4a 9d 4e f4 6f 70 0c c0 d8 8d c3 37 e6 f6 a7 9f 9d da 92 19 16 15 a4 b2 c5 b9 c2 f7 3c 54 73 f1 6c ab e9 69 97 78 e1 94 1a a4 0b d2 db 7a aa b2 c9 94 44 c8 28 7a 01 2a 77 aa e8 33 2b 2a 37 6a a3 5d d5 f3 26 27 d8 39 3c 92 06 56 25 0e 2c ee 1f 33 73 ec 8a 8d 04 97 68 5a 47 44 b9 0a e1 e5 0d aa 79 9e ea 59 44 09 9c ff c2 9c 26 c6 bb 41 6e 33 cc eb 68 f4 70 1a 82 a8 39 17 95 7f 8a 94 52 2a 7f ea bd e7 6a 0f 4d 15 9c 0a 31 81 b4 37 bd 30 ba b5 5b c8 f0 47 bd db c6 89 8d e4 0e 6b 4e 5e e1 89 f7 3c 11 f9 09 84 92 d8 46 6a f2 11 e0 Data Ascii: ]0&[UW${`N-KjiS]Vb`CrJNop7<TslixzD(zw3+7j]&'9<V%,3shZGDyYD&An3hp9R*jM170[GkN^<Fj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50256	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	786	OUT	GET /RwVe2Cm1EjeDmYhdTzr179G0ovq_PCxgPzQ92PO-YxTBEFTHWh0L6Ev8FFDWRgRGrE81vwn95tyg9Ey189OO4kllhhpLAMIsGFZ-UKA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:43 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2589 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:12 GMT Expires: Tue, 28 May 2024 21:14:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5371 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 09 d4 49 44 41 54 78 9c ed 9d 4d 6c 14 e7 1d c6 7f ff dd 05 a3 ca eb 84 aa 89 39 40 cd 47 a3 e4 80 da 82 3f 42 11 12 60 43 15 5f 90 ba e6 80 23 15 01 e2 50 29 49 95 43 53 a9 f5 9a 8a 90 b4 52 73 49 23 7a 6a f8 10 87 60 10 eb 4a 1c ea 56 de d9 35 11 d0 80 d7 a4 8d 38 a4 0a 01 13 d2 03 50 89 b4 54 01 bc f6 fc 7b b0 a1 84 ac 3f 76 77 66 de 77 96 f9 1d d7 de f7 ff ac 1e cd ee ec 3b cf 33 0b 11 11 11 11 11 11 11 11 11 9e 23 a6 05 04 cd f5 1f ae 5a 21 13 89 7e e0 bb 0f 3d 7c 55 e1 92 c0 88 a0 c3 82 7c fc 2d 67 f8 a2 29 8d 5e f2 d8 19 7c a3 a3 e5 3c 48 eb 2c ff 76 0b b8 04 e4 70 d9 ff 74 7e f8 f3 00 a4 f9 c2 63 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxMl9@G?B`C_#P)ICSRsI#zj`JV58PT{?vwfw;3#Z!~=\|U\|-g)^\|<H,vpt~c
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: 98 1a 3e 67 83 c7 9c 78 1b ca 60 39 cf 31 86 32 30 ee 24 6c 09 a0 7f d2 98 2b 18 db 8d 9b bb 59 ca 71 02 d8 da f4 88 3a 54 fb 4d 8b 98 22 67 72 f8 9c 0c 2e 3a 89 5e d3 67 cb e5 a2 48 d3 d4 f7 73 b3 b8 fc de e4 f8 59 0d 1e 1b 8c af 41 79 3d 08 31 3e f0 f2 58 36 61 32 80 9e 31 7d 03 97 d9 8f 60 e1 57 01 e8 f0 8b 05 02 c6 02 e8 aa f2 8e a9 d9 f7 99 d1 e0 b1 c1 d8 7a 41 5e 08 4a 8c 4f ac 1d cb 26 02 0f a0 ab 32 d0 98 33 7f 57 9e 19 0d 16 89 fd 34 28 21 3e 63 22 80 be d7 c0 cc af 31 ad c1 c5 c1 d8 62 c0 78 f5 c2 0b 04 3a 8b 83 89 c0 82 6f aa b2 a7 31 67 c7 cd 59 a6 35 58 91 97 83 14 e2 37 2a ec 0a 64 8e 32 da 98 3b bf 2f 88 59 73 61 5a 83 45 a4 3d 48 21 7e 23 b0 05 98 4c 06 f9 c7 b8 8a 6e f3 75 42 99 94 34 f8 de e0 bc 95 c0 33 01 6b f1 9b 26 fd 27 df 66 c2 b7 Data Ascii: >gx`9120$l+Yq:TM"gr.:^gHsYAy=1>X6a21}`WzA^JO&23W4(!>c"1bx:o1gY5X7*d2;/YsaZE=H!~#LnuB43k&'f
2024-05-27 22:43:43 UTC	340	IN	Data Raw: c1 b3 e8 1a 0d a0 5b 86 b9 9d 2c a9 d9 00 ba 55 98 3b 82 55 6b 31 80 6e 1d e6 0c fe e8 b9 0f a9 bd 00 ba 75 18 33 b8 f0 9b 5f d7 62 00 dd 3a cc 26 3a 88 d5 54 00 dd 46 8c 1a 5c e8 3e 51 33 01 74 5b 31 7f b1 a1 46 02 e8 b6 62 dc e0 42 77 7f 3f 10 ea 00 ba cd 18 37 18 40 35 f4 01 74 6b b1 c2 e0 91 ee cc 30 61 0d a0 5b 8e 15 06 03 14 ba 33 a1 0b a0 87 01 6b 0c 06 50 d5 30 05 d0 43 81 55 06 5f e8 ee bf 80 4a 18 02 e8 a1 c1 2a 83 01 0a dd 27 f2 aa d8 1c 40 0f 15 d6 19 0c 30 d2 9d 39 ac ca 0e 2c 0c a0 87 0d 2b 0d 06 18 e9 ce 1c 41 c5 a6 00 7a 28 b1 d6 60 80 42 f7 89 21 57 31 1e 40 0f 33 56 1b 0c 70 a1 3b 73 6e 64 5b 66 19 b0 c7 b4 96 30 62 bd c1 f7 29 6c cb ec 53 08 2c 80 5e 2b 84 f2 86 e9 ab 8f a6 d6 8b 54 16 40 2f 6c cb 84 f2 35 57 4a a8 5f 6c eb 7b 5b 17 bb Data Ascii: [,U;Uk1nu3_b:&:TF\>Q3t[1FbBw?7@5tk0a[3kP0CU_J*'@09,+Az(`B!W1@3Vp;snd[f0b)lS,^+T@/l5WJ_l{[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50258	64.233.184.157	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	859	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-69658807-1&cid=1670225768.1716849819&jid=124093720&gjid=1729122249&_gid=36880739.1716849821&_u=YADAAAAAAAAAACgBY~&z=1138529095 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.google X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:43 UTC	590	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://about.google Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Mon, 27 May 2024 22:43:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50260	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:43 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:43 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:43 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50262	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	566	OUT	GET /1zrYQvVLwo2Mubiugujr-Gn82yOoooWQ1dyIO_ougkdqVKDU_UaL7b-i6i4JNL_7V-gRitDbpIulH5hWGdHlAxp6zoCq4fvNg2PqIvpmh0QE56eXAHA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:43 UTC	576	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2893 X-XSS-Protection: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 19:35:07 GMT Expires: Tue, 28 May 2024 19:35:07 GMT Cache-Control: public, max-age=86400, no-transform Age: 11316 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	814	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0b 04 49 44 41 54 78 9c ed 9d 6b 8c 94 d5 19 c7 7f cf 79 67 76 f6 c6 ee c2 2e 8b c0 02 55 14 5a a0 78 ab 15 14 62 40 b4 d8 34 56 6b eb 25 95 5e 35 2d da b4 a9 16 d3 06 d1 72 d1 44 50 6b 62 fa 41 7b d1 1a af d8 a4 15 da 40 1b 15 ad c4 ad a9 b5 51 81 aa 01 14 41 5c b9 ee 75 60 67 de f7 7d fa 61 96 96 7a 59 76 e7 9c 61 67 76 cf ef db ee ec 79 ce 3f fb 9f 73 de 73 79 ce 79 c1 e3 f1 78 3c 1e 8f c7 e3 f1 78 3c 1e 8f c7 e3 f1 78 06 1c 29 60 ec da 0b 56 e9 15 28 b3 55 18 27 d0 00 68 01 eb 2b 3a 54 c1 08 c4 40 3a 03 ed e9 43 1c 3a 9c 26 9b e9 26 48 24 3b a5 62 e4 bf 13 01 7f 78 6b b9 ac 2d 94 06 e7 06 9f bf 52 c7 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxkygv.UZxb@4Vk%^5-rDPkbA{@QA\u`g}azYvagvy?ssyyx<x<x)`V(U'h+:T@:C:&&H$;bxk-R
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: fd ed ae 85 d4 a8 69 2f ee b8 77 fc 59 ae 14 39 5b 5b 7b e6 26 79 ad 6a 58 4d 43 90 ac 7c 29 f7 9b a1 69 b4 aa 92 48 24 99 34 f9 4c 1a 86 37 92 09 43 e2 3e 8d ae 95 aa 13 e7 de be e3 17 a3 ce 75 a9 a7 20 2e cc 5b a5 b3 05 7e 96 3d 74 f0 22 93 48 f5 2c 00 0c bd 15 2f 63 02 ba 0f 77 71 60 ff 6e da da 0e 90 0d b3 1f c9 c9 32 89 8a b6 f2 f1 e7 3c 31 6e 24 8b 9e ff 91 b4 bb d6 50 f0 66 36 77 a5 4e 12 18 6f 84 86 42 d7 55 94 48 ae 9b 8c 15 ba 32 d0 91 81 74 08 e5 09 3a 54 d9 b2 65 99 bc 3d d0 12 3d 1e 8f c7 e3 f1 78 3c 1e cf d1 14 6c 9a 34 53 6f 9a d0 da d2 7a 79 f7 eb 07 26 45 dd 61 65 aa a6 9c da 86 2a 1d 39 e9 04 ca 12 89 02 ec 9d da a3 a8 80 49 43 bc 13 78 65 8d 2c ff d3 40 6b b2 c5 b9 c1 a7 e9 8d 5f 7a ef 96 8d f7 c5 e9 70 cc 87 3f 53 55 e2 58 a9 1c 56 4e Data Ascii: i/wY9[[{&yjXMC\|)iH$4L7C>u .[~=t"H,/cwq`n2<1n$Pf6wNoBUH2t:Te==x<l4Sozy&Eae*9ICxe,@k_zp?SUXVN
2024-05-27 22:43:43 UTC	689	IN	Data Raw: ff d3 04 8c ae e3 cf 8e 54 95 3c b6 5d 74 47 2a a9 f7 bb 7a 0e 8b 40 e5 a7 0c 6a f1 a5 89 01 ea f9 8e 1b 45 a5 8f f5 b0 46 e6 44 0b 03 a1 d5 85 c9 1a 43 79 a3 21 51 2b e4 f3 e2 12 11 68 1c ce 6d 72 25 d6 6f 2b 19 2c b8 18 b7 c6 10 4d 09 23 22 57 26 d7 4c 09 08 ca e9 97 c9 22 d0 30 8c df cb 42 6e b6 57 31 78 70 37 c9 51 aa f5 b9 c4 cb 51 c4 e4 dc 8f 16 f4 a8 ea 7c 33 22 b3 4f 7b dd 78 10 72 dd 72 63 1d cb e5 3a 4a ea 92 b2 e3 81 f3 8c 0e dd 10 7c 05 e4 d6 c3 19 a6 27 2d cf 73 4b 00 d9 76 e5 f0 ee 98 6c ab e6 9c 3c 6a c3 3f 13 c3 98 e1 fc 91 3a 16 ca d7 69 71 a1 7f b0 51 c8 c4 f7 0a dd 10 4c 05 c6 92 1b 1b e7 47 00 18 81 8c c2 07 31 b4 c6 60 08 29 67 a7 7c 93 97 9d a9 f5 78 3c 1e 8f c7 e3 71 88 fb 51 f4 fc 99 d3 10 ae 05 39 37 8c e3 a6 84 31 ed c0 5b a8 ae Data Ascii: T<]tG*z@jEFDCy!Q+hmr%o+,M#"W&L"0BnW1xp7QQ\|3"O{xrrc:J\|'-sKvl<j?:iqQLG1`)g\|x<qQ971[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50263	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	551	OUT	GET /Y1i12gHz-cP0Ir3LztFSUMijuVGSe9qetVu98aQNchjhxw9byxecnFAFfhxGFyd79tgcGpJrHjJ8S_AQmFnBqtxxDAjh81bxUMe1=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:43 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 9452 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5523 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 02 00 00 00 b6 06 a1 85 00 00 0c 20 69 43 43 50 69 63 63 00 00 48 89 95 97 07 58 53 c9 16 80 e7 96 24 24 24 b4 40 28 52 42 6f d2 a5 4b af 11 04 a4 0a 36 42 12 48 28 31 24 04 15 3b b2 a8 e0 5a 50 b1 60 45 57 45 6c 6b 01 64 51 11 0b 16 16 c1 de 1f 88 a8 28 eb 62 c1 86 ca 9b 24 80 ae 7e ef bd ef 9d ef 9b 7b ff 9c 39 73 e6 9c 73 e7 4e ee 00 a0 1a c3 16 89 b2 51 35 00 72 84 79 e2 d8 b0 40 e6 c4 e4 14 26 e9 11 40 80 21 a0 02 1a 40 d9 1c 89 28 20 26 26 12 40 19 be ff 53 de dd 84 d6 50 ae d9 c9 7c fd dc ff 5f 45 9d cb 93 70 00 40 62 20 a7 71 25 9c 1c c8 47 01 c0 dd 38 22 71 1e 00 84 5e a8 37 9d 91 27 82 4c 84 51 02 4d 31 0c 10 b2 99 8c 33 14 ec 21 e3 34 05 47 ca 6d e2 63 83 20 a7 02 a0 44 Data Ascii: PNGIHDRxx iCCPiccHXS$$$@(RBoK6BH(1$;ZP`EWElkdQ(b$~{9ssNQ5ry@&@!@( &&@SP\|_Ep@b q%G8"q^7'LQM13!4Gmc D
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: c7 f2 b5 31 3c 5b ac 3c 9e 2c e8 47 f0 d3 7c ec a1 39 65 55 93 38 56 3b f6 38 7e 1e ea 03 79 bc 99 79 b2 97 25 68 ba 68 96 58 90 c1 cf 63 06 c0 dd 9a c7 64 09 39 f6 a3 99 ce 8e 4e 70 17 95 ed fd 8a ad e5 0d 43 be a7 23 8c 4b df 74 b9 8d 00 78 96 40 65 c6 37 1d 1b ee 41 c7 9f 00 40 7f f7 4d 67 fa 1a 2e fb 95 00 9c 68 e3 48 c5 f9 0a 1d 2e bb 10 00 05 a8 c2 37 45 17 fe b7 98 02 2b 98 91 33 70 03 de c0 1f 84 80 71 20 1a c4 83 64 30 15 d6 99 0f d7 a9 18 cc 00 73 c0 42 50 0c 4a c1 4a b0 16 6c 04 5b c1 0e b0 07 ec 07 87 41 2d 68 00 a7 c1 79 70 19 b4 81 1b e0 1e 5c 2b dd e0 05 e8 03 ef c0 00 82 20 24 84 86 d0 11 5d c4 08 31 47 6c 11 67 c4 03 f1 45 42 90 48 24 16 49 46 52 91 0c 44 88 48 91 39 c8 22 a4 14 29 43 36 22 db 91 2a e4 77 e4 38 72 1a b9 88 b4 23 77 90 4e Data Ascii: 1<[<,G\|9eU8V;8~yy%hhXcd9NpC#Ktx@e7A@Mg.hH.7E+3pq d0sBPJJl[A-hyp\+ $]1GlgEBH$IFRDH9")C6"*w8r#wN
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: aa d3 d8 d3 8e a4 12 52 93 52 f7 a6 7e 66 47 b3 2b d9 fd 69 ac b4 4d 69 7d 9c 20 ce 3a ce 0b ae 3f 77 0d b7 87 e7 c3 2b e3 3d 4d f7 49 2f 4b 7f 96 e1 93 b1 3a a3 87 ef c7 2f e7 f7 0a 82 04 1b 05 af 32 c3 33 b7 66 be cf 8a ce da 9d 35 98 9d 94 7d 30 47 29 27 35 e7 b8 50 43 98 25 3c 3b dd 70 fa cc e9 ed 22 5b 51 b1 a8 23 d7 2b 77 6d 6e 9f 38 42 bc 4b 82 48 a6 48 ea f2 34 e1 47 76 8b d4 4a fa 8b b4 33 df 37 bf 22 ff c3 8c c4 19 47 66 aa cf 14 ce 6c 99 65 33 6b e9 ac a7 05 a1 05 bf cd c6 67 73 66 37 cd 31 9e b3 70 4e e7 dc 80 b9 db e7 21 f3 d2 e6 35 cd 37 9d 5f 34 bf 7b 41 d8 82 3d 0b 29 0b b3 16 fe 59 e8 58 58 56 f8 76 51 d2 a2 fa 22 83 a2 05 45 5d bf 84 fd 52 5d ac 52 2c 2e be b5 d8 7b f1 d6 25 f8 12 c1 92 d6 a5 2e 4b 37 2c fd 5a c2 2d b9 54 ea 58 5a 5e fa Data Ascii: RR~fG+iMi} :?w+=MI/K:/23f5}0G)'5PC%<;p"[Q#+wmn8BKHH4GvJ37"Gfle3kgsf71pN!57_4{A=)YXXVvQ"E]R]R,.{%.K7,Z-TXZ^
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: 4b d5 b1 71 57 f0 b3 1c 75 5b 9e 9e 62 62 b2 60 b0 b3 00 01 44 f0 a8 e0 22 86 b5 16 47 5e 2a f7 bc c0 30 6c 63 a0 95 fd 3f bb 9e 99 a5 ed da 28 64 76 85 c5 66 b8 cb 95 44 04 25 40 a7 8f 8a ed bb 3b 1e 79 c2 da 6f 40 a4 15 9e 2b 45 c7 67 bb 83 cf 6d 09 7a fd 14 2f 33 39 e2 d1 96 08 01 8e fc 20 75 4c 12 e6 5f 6b ed dc 4a 0a bd bb a1 82 a6 40 c0 fd da ca c0 fa 35 e0 04 73 b4 87 57 55 21 67 a1 65 ec e4 98 49 77 88 c9 a9 51 a9 f2 48 81 fe fa 67 81 8f 0e 69 49 32 13 a3 f9 f1 01 80 c2 a1 03 57 77 10 ef b9 ca 16 6b 0d a9 f6 90 40 2b 39 fb 5c 8b e6 e9 39 bb 59 42 2a 84 ba 89 08 89 c8 5d c2 1c b1 71 7f 5e 6a e9 d5 3b c2 ca 36 ef 56 e6 6c f6 5b 19 b3 45 2f aa aa 24 22 b8 54 34 8b 65 b3 46 58 7a b6 ab 7d 24 a9 1d b4 6f eb 17 65 f3 67 43 51 61 b1 45 a9 93 d5 4b 53 c9 Data Ascii: KqWu[bb`D"G^0lc?(dvfD%@;yo@+Egmz/39 uL_kJ@5sWU!geIwQHgiI2Wwk@+9\9YB]q^j;6Vl[E/$"T4eFXz}$oegCQaEKS
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: db 1e 6d 4d 33 ae b4 e4 07 0c 93 96 04 7c 74 92 6b 3a 50 0e 5a 3d 72 88 25 ca a8 7a 3b b8 5a 91 b7 4c be e5 5e 73 d7 ee 46 9b 07 c0 6c f6 b8 29 d3 e4 eb c7 52 c1 f1 6a 7b a9 14 97 66 75 7a ae fd 63 fb 85 84 c8 29 e7 07 e8 8e 1e a6 89 43 ac e1 6d 6b 5d 71 89 7c 71 aa 60 74 00 61 80 c4 51 e0 e6 a8 00 7d f8 10 62 9b 1b ab 83 73 66 b1 39 26 dc 6e ac d4 d9 9d b0 d9 13 67 cf b5 4c 9c 4a a7 ab 60 2d 29 45 c7 da dd 30 a7 f3 b2 02 66 b7 46 ee 65 05 0f f4 97 ef bd da 16 49 b8 f6 c8 50 8b 97 c3 a8 ab e3 44 e4 97 fc 06 5a 77 3a 0d 87 5c aa 22 76 eb 25 b7 68 69 b0 dd 73 25 8a 71 77 4f b3 8c 9f 4a a7 4f 9c f3 b2 e6 2a 6c d1 77 59 9b 69 b9 70 58 c8 f8 34 74 96 08 28 08 d0 3d bd 4c 13 06 47 9a 21 d5 3c 4d 6c 9f c0 74 83 dd 31 31 b8 fd bf 81 e6 1e 0f 44 63 2b 37 0a fa e4 Data Ascii: mM3\|tk:PZ=r%z;ZL^sFl)Rj{fuzc)Cmk]q\|q`taQ}bsf9&ngLJ`-)E0fFeIPDZw:\"v%his%qwOJO*lwYipX4t(=LG!<Mlt11Dc+7
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: f0 ea 27 fe 35 7b b4 54 73 f8 2d b8 34 4c ed 2f 5f d2 a6 2a 47 33 59 76 8c 9b 48 7e 4f 78 e1 1a 00 08 02 ac 76 f7 e8 11 be 4f 3f 3e fb 65 ee fc 49 fd 6e 28 94 82 08 28 03 00 41 94 e9 e7 bb 07 ee 1e 33 c0 54 47 94 35 8e 57 3f f1 2f dd a1 38 a4 30 bd 0c 40 27 24 99 71 45 d7 73 a6 e8 73 56 51 e6 6e dd e5 ab 6e 24 af 3b dc 26 00 41 10 fa f4 2f 7b 66 a6 67 e3 bf ca 5f e0 ce 1c 75 ef 54 e8 12 98 3d fc 6a 01 80 83 ef 13 da ad 33 b5 9f 16 59 3d 35 69 f9 26 df ea ef d4 56 b6 88 3e c7 62 85 ee ec 6f 4e 74 9c 53 47 e5 e5 6a cc 1d 93 99 24 40 8f e0 76 b0 20 c0 ea 28 1b 7f 83 6f cb 57 dc b9 5f dd 7d 2d 94 13 11 7a 19 d0 a1 ef 93 2e 58 2d b5 b9 39 b2 7a aa 6f 80 e3 8d cf 02 af 7e af 3a 4c e1 7b 19 40 40 47 bf 4c f1 aa 1e 95 f7 9e aa c8 f8 f7 6d f9 dc 3d f5 66 d6 a2 73 Data Ascii: '5{Ts-4L/_*G3YvH~OxvO?>eIn((A3TG5W?/80@'$qEssVQnn$;&A/{fg_uT=j3Y=5i&V>boNtSGj$@v (oW_}-z.X-9zo~:L{@@GLm=fs
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: dc 10 49 7f ce 48 e1 ea dc 6d 4b 17 1f 78 a7 a5 29 3e c4 48 ae 3a 15 6b de 91 19 7d 56 0d 5b 10 23 47 b4 43 14 fe d0 71 46 e4 3f a5 6c cf 00 6f 1d ca 18 c2 c0 05 c6 16 29 3d ff ee f6 27 80 ce 66 c0 41 45 ba 6f 49 cf fb af 69 3f 24 92 fe e8 c4 17 7d f3 f2 aa a3 1f 47 65 c4 68 e1 48 5f 37 7c 89 23 32 ca 88 ca 41 dd cc 9a 2e f7 cf 67 d6 2e e0 b5 64 f1 0a e0 2a b3 2e 08 f6 5c e6 f4 56 a2 0c 40 00 4b 11 6d 23 77 ce 79 37 67 53 d8 9d 09 ea ca 9c 2f 97 2c 3f bc 21 39 62 ca 05 5a d9 d0 b4 9e 51 a1 8c a8 38 ba 5c e4 cd 53 bf bb 81 94 c2 ea 7c cd c0 89 09 f3 02 3d d7 7b 7c 71 e7 51 3e 23 0e f2 72 e5 f1 2e b7 df 72 d1 b5 46 fb a0 93 fe cc b6 65 ef 9d f8 32 f2 18 c3 a5 fb 07 a4 74 59 30 e8 b1 38 73 38 53 fd f9 8a 5a 2e 31 b3 37 33 f5 5a cf cc ad c1 ab c8 e1 13 c0 15 Data Ascii: IHmKx)>H:k}V[#GCqF?lo)='fAEoIi?$}GehH_7\|#2A.g.d*.\V@Km#wy7gS/,?!9bZQ8\S\|={\|qQ>#r.rFe2tY08s8SZ.173Z
2024-05-27 22:43:43 UTC	253	IN	Data Raw: 67 cf b1 b3 db dc 78 48 2d ad 21 37 8c 13 3f a8 bb d6 75 7f a8 31 53 46 63 76 74 b9 08 78 77 df 07 37 ef 5e d2 57 4e 15 ce cb c0 d1 48 df cb 5d 9f f6 7f e6 b2 56 7d 1a a4 7b a1 ab f1 3a ba 5c 0c b8 e9 a2 ab d7 74 7b b0 50 f7 f1 73 cf 5e 56 49 57 05 7c d4 6f 6e e3 a7 8c c6 ef e8 33 fa 70 ff e7 d7 7c f7 e7 3e 52 92 c8 04 00 0a 69 4e a6 fd 6d c0 9c de 59 dd 1a ba 6b 21 e9 0f 03 1a c0 d6 23 3b a6 ec 5c 18 07 93 46 3c c6 64 5b 76 d9 ac 2e 69 1d 1b ba 53 a1 ea 8f 04 1a c0 17 87 b7 67 ef 98 db 57 4e 79 79 e0 13 97 a4 77 6a e8 ee 18 d0 1f 0c 34 80 3d f9 39 89 f6 f8 96 b1 e1 fe c0 65 03 e9 8f 07 fa 0f aa c6 1e 75 fc 9f 51 13 e8 7a 52 13 e8 7a 52 13 e8 7a 52 13 e8 7a 52 13 e8 7a 52 13 e8 7a d2 ff 02 e8 a8 9c 8a a3 c6 15 ce 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: gxH-!7?u1SFcvtxw7^WNH]V}{:\t{Ps^VIW\|on3p\|>RiNmYk!#;\F<d[v.iSgWNyywj4=9euQzRzRzRzRzRzIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50254	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	795	OUT	GET /aTWbsnyhhmgnwKeD6_8X0cdmN12iq1vC2D6dMfw2B36N5Nh73BN1e1IplijPNtzp4IUgiJRRA-4M5e2SLfTIFOfVW09DeezqPYGnXoEfNBliIP4l=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:43 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2970 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:12 GMT Expires: Tue, 28 May 2024 21:14:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5371 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 0b 61 49 44 41 54 78 9c ed 9d 7b 70 5c 55 1d c7 3f e7 ee 26 fb 4a b6 e1 d9 a7 8c 30 83 88 da 0a 2d 20 68 1d 47 8a 20 b4 e0 1f d4 69 87 51 18 c1 47 4b 81 56 a0 e0 00 4e d1 36 45 29 0f d1 51 a6 4a e9 14 fd 03 06 1d 04 3a 0a 8a 23 23 03 18 12 82 53 81 a1 ad 94 29 92 4c 88 d9 34 bb 4d d2 64 5f c7 3f 4e 16 96 ed 6e 92 de bd f7 9e 7b 6e f7 f3 67 ee e6 de df ec 77 3e 7b de bb 42 4a 49 83 e0 62 e9 2e a0 81 bb 34 02 0e 38 8d 80 03 4e 23 e0 80 13 b6 fb 8f 67 3f b6 7c b2 cb 6d c0 62 60 29 f0 59 20 5e 76 6d 1c e8 00 fe 06 3c 0f a4 ed d6 e0 37 32 b2 89 93 43 c3 ec 68 7b 9e 99 a1 61 f2 d2 f6 db 7b c4 84 97 e4 aa ff dd 85 67 7d 09 b8 15 38 1f 88 d4 78 cd 39 c0 2a e0 Data Ascii: PNGIHDRxx9d6aIDATx{p\U?&J0- hG iQGKVN6E)QJ:##S)L4Md_?Nn{ngw>{BJIb.48N#g?\|mb`)Y ^vm<72Ch{a{g}8x9*
2024-05-27 22:43:43 UTC	1390	IN	Data Raw: d7 32 2d 34 1d 3e 33 d6 64 50 e7 ae ee 43 05 bd 42 6f 29 53 a3 f1 74 a1 d1 26 83 3a cd f1 28 f0 14 b0 50 73 2d 35 d1 7c 7c d4 68 93 4b 5c 0a bc 0a fc 1a 98 ab b9 96 c3 f0 c1 f9 60 e3 4d 06 40 c0 77 f2 88 ae a1 62 64 5d c1 47 75 fb 20 60 30 dd 64 81 64 4c 5a 64 65 68 d6 f2 e8 be fb 8f 0b 1d ea 2e c8 d0 a4 07 a8 bd c2 27 01 83 a9 26 0b 60 5c 86 48 15 a3 dc 90 78 83 9b 93 af 11 a1 70 66 11 eb 71 d4 b6 a1 33 75 d6 e7 a3 80 c1 34 93 4b e6 0e ca 28 eb 12 6f b0 be f5 35 90 82 9c 0c 21 90 f0 e1 b6 a1 9f 02 27 ea a8 d1 67 01 43 75 93 53 48 6b 0c 3f 85 5c 6e ee f5 89 37 58 9f ec 06 09 39 19 ae 56 e5 2d a8 8e d8 77 3d 2e d3 8f 01 43 a5 c9 b1 f7 af 07 72 60 8d e0 87 92 2b cd bd a5 b5 7b c2 dc 70 c9 dc 6a cc 03 b6 a2 82 be d4 ab 5a f5 bf 5b 35 29 99 9c 27 d6 bf 82 d8 Data Ascii: 2-4>3dPCBo)St&:(Ps-5\|\|hK\`M@wbd]Gu `0ddLZdeh.'&`\Hxpfq3u4K(o5!'gCuSHk?\n7X9V-w=.Cr`+{pjZ[5)'
2024-05-27 22:43:43 UTC	721	IN	Data Raw: 10 f8 21 2e b5 b3 93 d6 e8 e5 c3 a6 cb 60 a4 85 13 c7 d2 b4 77 ad 61 41 aa 83 fe d8 1c 24 c2 57 e1 96 98 86 c9 db 51 c3 9e 4d d8 9c ac a8 07 5f 05 5c 6e ee 3d 1d 57 b3 20 f5 0a fd b1 39 be df 45 f3 11 93 53 11 b5 40 51 74 76 3c 6b bb 36 5d 0f ae 46 b9 b9 f3 53 1d f4 c7 66 fb 3e dc 12 a1 19 59 f2 ef b4 92 d9 76 da 9e c2 ff a2 57 89 78 c1 d1 f1 ac 5d 7c 11 b0 a9 e6 56 90 b6 da b2 b7 e6 de 3c 76 61 ee ed e4 23 22 e1 8f e6 c4 17 73 d1 87 9b 6b 5c b8 5b 81 fb 91 ec 16 f1 3c a2 b9 08 45 dd 25 29 b4 06 2c 90 a4 22 2d cc 1b e9 63 73 d7 1a e6 9b 67 ee 4e 60 33 1e 0d 79 ec a0 35 60 83 cd 7d 0b b8 0b 8f 87 3c 76 d0 12 b0 c1 e6 d6 bd 3e eb 35 5a 02 36 d4 5c 47 d6 67 bd c6 d3 5e b4 a1 bd 65 5f 8c 67 ed e2 a9 c1 86 99 bb 07 68 c7 80 76 76 32 3c 09 d8 b0 36 37 8d ea 19 Data Ascii: !.`waA$WQM_\n=W 9ES@Qtv<k6]FSf>YvWx]\|V<va#"sk\[<E%),"-csgN`3y5`}<v>5Z6\Gg^e_ghvv2<67

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50261	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	566	OUT	GET /6nGdwtbmSCuuGF5fSCqvv0f-GOsp927ZXRFxC1NNEqlH-EwAGEqlHXN2rcarUTB7C8Tj8shbcg-9z-CO4XJGTVSaLbT5FPsq0rKET0ZIfWNsj9_f424=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:43 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1351 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5523 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:43 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 05 0e 49 44 41 54 78 01 ed 9a 05 8c db 48 00 45 47 2a 33 05 9c 3d 66 c6 e0 b1 d5 94 b9 4d b6 cc cc 90 a5 63 66 66 66 0a 1d f3 dd c2 31 33 f3 95 9b ac 73 4c e5 4e c7 92 be 54 08 78 ec 71 71 be f4 05 cb ff f9 7b 70 89 94 94 94 94 94 94 94 94 94 54 71 fd a6 06 f7 d4 ba 79 4f ce 76 0b 86 34 d5 af 10 8b 1a 7d c5 43 87 ec 11 cb 94 9b 75 d9 b4 af 66 2a e3 df 3b 67 8f 58 36 b4 47 f5 b2 3d 89 1d 5a a8 aa 2d 73 61 7f 85 d6 2d f0 a3 16 f6 d3 2d fc a9 16 0e 4c a2 aa da 94 70 8a be 4a da 26 ef 1f 96 29 ab c8 52 1e 7b e6 fe 42 3d 63 5e a7 ee 21 8f 53 f7 80 47 75 6f fa f9 1f cb 2a 33 57 39 ab 34 85 88 d0 af 3d bc 87 22 78 09 7f c8 db 88 b5 b5 4d af 7a ea a1 41 5c e1 Data Ascii: PNGIHDR@@iqIDATxHEG3=fMcfff13sLNTxqq{pTqyOv4}Cuf;gX6G=Z-sa--LpJ&)R{B=c^!SGuo*3W94="xMzA\
2024-05-27 22:43:43 UTC	492	IN	Data Raw: e1 21 7b da 57 fd da 26 11 04 12 0d c0 13 fb 9c 85 3f 0d 41 cd 00 80 bf 3d f6 c9 41 1d ed a8 be 83 05 c9 89 05 80 f0 4b d8 fb 3e 18 21 cd 03 80 93 d1 17 ed af be 40 00 8e 39 37 21 a0 00 00 80 10 89 88 ac 7e 5f 04 11 0f 60 21 ab fe 09 22 01 c0 3f 8a aa 7e 47 16 60 a9 5d 00 5c 73 1f 41 38 d1 00 a8 37 55 7e b2 88 39 ff 3e 84 b0 03 40 e7 99 33 ed 03 90 8c 5c b5 dd ab 0f 3f f6 60 f4 8f 7c 00 30 ed 09 06 00 bf 6a a5 fa 6d d9 d3 5f 28 0a c0 79 37 5d 70 67 1e 00 58 e9 d9 05 e0 47 2b 4f ff 26 01 c1 e1 57 f5 2b ee fc 00 8e b2 ef 15 48 44 16 12 4e e1 4a 4b 15 18 fe 1f fd d0 a4 30 80 80 9d 0d f8 72 bb 57 5f 3f 33 20 4c 85 00 74 98 d6 cb 4e 00 b5 84 57 b8 d0 14 e4 77 09 53 31 00 9d 67 56 db 09 80 ef 88 0c 77 f9 82 c2 af d4 8f ca 4b 01 70 cd 7b da 46 00 83 8f 24 10 cf Data Ascii: !{W&?A=AK>!@97!~_`!"?~G`]\sA87U~9>@3\?`\|0jm_(y7]pgXG+O&W+HDNJK0rW_?3 LtNWwS1gVwKp{F$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50266	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:44 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:43 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:44 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50267	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:44 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:43 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:44 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50265	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	553	OUT	GET /zGSQ3CkZCuntNXuuiLsvHnljLEmpJD6MKKWjzuL20jMovKj8akWzk6gb0zmXZTMH6ORoD_I5UMOVT4JRUKYwA2S4ki7MQbyZ0rUIZw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	574	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2903 X-XSS-Protection: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 22:29:04 GMT Expires: Tue, 28 May 2024 22:29:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 880 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 0a a3 49 44 41 54 78 9c ed 9d 5f 6c 1c 47 1d c7 bf 33 f7 cf f9 63 bb 4d 70 68 30 55 aa 4a 48 24 95 10 0d 4f e4 01 f5 a5 8e 82 44 80 3c 54 fc 09 54 aa 84 c2 83 9b 84 84 54 ca 1f 27 2a a1 8e 90 08 50 ce cf 7d a0 14 54 10 ea 03 82 ca 0e a2 88 87 e4 11 5a 0a ee 4b 50 4c d3 fc 71 52 27 be 8b 2f Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx_lG3cMph0UJH$OD<TTT'*P}TZKPLqR'/
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: fc cc 75 c2 19 50 bb 4f b8 9a 03 93 33 6b b0 ab b9 80 7e 7b 01 94 1e 7e 24 65 ee 8a 22 a9 d3 27 af cb b6 c9 99 34 d8 d5 5c 20 16 7b c3 98 eb ac 46 1e 4c ce 9c c1 9e e6 02 d1 03 f6 d8 54 6a 5e c7 f4 d0 fe 50 e1 ba 55 c3 32 79 78 a8 32 f1 6a c6 4c ce 94 c1 9e e6 02 b1 84 7b 79 d3 57 95 c3 05 56 9a 7c 24 63 26 67 c6 e0 e8 e6 02 61 03 2e 35 af 63 7a cb 7e 1c d8 11 2e dc a0 aa b4 6c 7d 72 56 4c ce 84 c1 d1 cd 05 c2 84 cb 00 94 5b 37 70 79 f3 d7 f0 fd 1d 2f 85 0e 37 a8 16 59 34 39 75 83 7d cd 05 b4 35 cd 0c c0 42 b3 8e e9 cd fb 30 f6 b9 63 78 b4 d5 0c 1d ae 5f 55 ec 9b 44 86 4c 4e 35 60 3a 73 74 dc 77 e2 40 93 bd 1c 40 5d 08 7c aa f8 b7 0b a5 9d 84 67 51 7f b6 58 29 87 be 23 26 1b 30 b0 1c f2 b6 2d 95 73 3f fb 16 3b 11 ea 44 1a 49 ad 89 0e 9c 15 d2 14 2e 43 3b Data Ascii: uPO3k~{~$e"'4\ {FLTj^PU2yx2jL{yWV\|$c&ga.5cz~.l}rVL[7py/7Y49u}5B0cx_UDLN5`:stw@@]\|gQX)#&0-s?;DI.C;
2024-05-27 22:43:44 UTC	697	IN	Data Raw: a5 80 4b 4f d7 b1 61 ef fb fe e1 66 65 de 2c 65 d2 7a 19 14 02 de 81 8d fb fe 05 6a 95 3b 4b 75 4c 90 5e 28 bd 34 e9 2d 9b fd 0f d0 2c b6 47 d2 5a c2 15 02 c0 3d 0d 05 a5 cd 3d 06 de fd 24 82 a6 2f ef 8b 8c fa 28 5a c7 4d 2a 12 68 a0 3c f0 c2 e4 f7 68 91 4a 21 df 75 64 fb 37 cc 11 7e 3b c8 95 46 ab 4a 22 90 a8 e0 e3 f7 17 80 56 9f 7a b8 04 e5 f1 49 2a 4b 76 56 d2 be 44 12 d4 c2 7f eb d7 b0 48 45 14 42 1c 1b 2a 58 89 9d e5 4a f4 da 4b 80 51 1f 36 50 f0 2c 5b e0 19 32 b3 aa 32 34 ee 35 67 60 28 30 8e 02 78 60 c0 cb 2f 6f c8 af 02 0e 1a e4 23 58 99 a0 7d 18 f1 4c 5d d2 27 14 b0 9e 67 1c ce d7 ce 31 52 d6 2e ff ab fb fc 51 c8 f0 aa ca 78 5e 80 b8 82 0d 53 b6 74 1d 32 d2 34 5b 68 08 58 77 a8 d6 a8 2d 9a 2f 61 26 af b4 86 ab e1 65 c8 de 9a 2c 89 3e 4b 8e 76 a8 Data Ascii: KOafe,ezj;KuL^(4-,GZ==$/(ZMh<hJ!ud7~;FJ"VzIKvVDHEB*XJKQ6P,[2245g`(0x`/o#X}L]'g1R.Qx^St24[hXw-/a&e,>Kv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50268	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:43 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:44 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:44 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:44 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50225	172.217.23.118	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	705	OUT	GET /vi_webp/5amGvnxGO54/maxresdefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 85454 Date: Mon, 27 May 2024 22:43:44 GMT Expires: Tue, 28 May 2024 00:43:44 GMT Cache-Control: public, max-age=7200 ETag: "1649424894" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	767	IN	Data Raw: 52 49 46 46 c6 4d 01 00 57 45 42 50 56 50 38 20 ba 4d 01 00 b0 79 06 9d 01 2a 00 05 d0 02 3e 6d 32 95 47 a4 23 2b ac a7 32 ab 89 90 0d 89 65 6e 29 39 9c a1 40 3f 7e 55 cf 3b e7 f8 31 35 ea b8 e4 ab db 4b a7 7e 71 fd e3 c2 1f ec bc 40 bd 4b fd 37 a2 9e a8 47 eb ff 94 5f 34 7f 6c 7a 83 ff df f4 da fd 27 a4 5f fb be 67 fe ce bd f6 dd da 97 77 be 57 98 97 28 f9 ed 19 7f f9 78 af f0 9f f9 bc f4 3d 87 fb 2f 37 9f f9 7d 84 ff 5c f5 2b fe bd e8 c7 ff 77 b2 2f f0 be 8f 7f 75 7d 57 3f f6 7e ee 7c 16 fe c3 ea 55 fc cf fe 0f 5e 3f f8 3f 56 ef dd df 59 9f 5b af eb bf f9 ff 74 bd b0 f3 88 fc 9e fc cb fb 2f fb de 23 fe 6b f7 8f 28 ef e8 b3 c7 ef 5f ee f9 b7 f8 03 3a 7f e4 fe da f9 cb fa df f6 7e 85 f8 f3 df 05 c5 ff ce fd bb f6 2c f8 4f f2 3f b4 3e b4 5f bd e8 5f f1 bf Data Ascii: RIFFMWEBPVP8 My*>m2G#+2en)9@?~U;15K~q@K7G_4lz'_gwW(x=/7}\+w/u}W?~\|U^??VY[t/#k(_:~,O?>__
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: ee 87 12 ba 27 be bb bb 2b 9c 0c af 21 cb da da ca bc 3a 03 59 5d ef 03 e9 1d 8a 1b 49 f4 9f e2 05 97 4d 82 90 4b cb 09 22 e3 cf 69 1c b3 ad fb f3 a4 3d 4f 84 f9 da 4d e7 50 ec 72 dd 56 6f d1 59 fe fe 7f bb b1 7d fc bc 27 0d bf e6 53 eb 8d 80 6f 22 45 a7 f3 3f 84 40 a6 17 35 68 1c 8f 12 6f 2b 22 69 3e 91 03 b2 e2 8e 4c e5 cf 2d c5 62 20 74 13 34 1a d1 58 63 e2 81 0e 09 8c 4d 03 6b 6f 93 8b e5 39 f3 ff b2 80 59 f2 1c 72 9a 92 9b fd 3d 81 3a 0a 73 31 41 0d 80 9c 38 30 16 00 96 82 fb db 10 45 fd 3b 28 30 c8 bf be 44 f4 49 c2 4b 5d c6 a6 96 8d c1 e7 dd 10 f9 a4 fe 2f 69 24 e4 23 ee 55 d2 5f 15 df 34 6b 81 54 0b ae 1e 5b 44 02 20 37 ef 5f e6 6c 7f 06 5d ad 89 de d2 5b 18 1b 9d 29 91 4b 4d 02 92 5c c5 0d 71 51 de 8c 31 01 51 a9 c2 c4 1b df 5f b4 7d 3e 44 b3 b6 Data Ascii: '+!:Y]IMK"i=OMPrVoY}'So"E?@5ho+"i>L-b t4XcMko9Yr=:s1A80E;(0DIK]/i$#U_4kT[D 7_l][)KM\qQ1Q_}>D
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 6e b8 15 be 28 eb 04 1c 43 d1 de b5 09 a6 c1 be 54 d2 54 29 12 36 87 0a b2 e6 64 de 0c 64 c2 ed 7d ea 98 51 da dc 40 1f ae c2 0a e2 eb 53 36 15 6a 53 47 b8 fa e5 a4 6c b4 ec 6b cf 03 fd f7 75 ff f0 a4 20 34 a3 a9 a5 79 1a 82 0b 35 95 58 9d 6e 5d a5 5e 72 19 77 5b 51 ff ac b9 99 e0 4d 66 ed bf 37 29 07 a4 25 ea e9 3d b2 92 f7 59 6d 69 ca b9 60 09 43 21 ea 22 77 94 10 56 4d 9a 47 88 01 9d 7e 1c b7 96 e4 95 66 38 2b 9b e5 d5 bc 8c bf e3 9c cf 11 0e 3c 12 ea ed 7f 56 55 06 10 1c ac 69 11 80 c2 9f 70 05 ee d2 11 31 52 94 a5 d6 c6 e0 db db ab b5 f5 35 10 45 35 a7 c6 ce 78 fc 9a 1a f2 82 4a da 56 41 77 e7 8d 7e d1 fa 52 3d 8b ee 65 ff 33 41 2c 32 6b fa 96 fe 4f 08 b6 bc 77 7b 0d e8 5e 32 33 ac 41 d6 75 0e c1 40 4c c4 ad 70 a2 55 ad 89 2b 54 cc 1a c2 03 0e bc 9a Data Ascii: n(CTT)6dd}Q@S6jSGlku 4y5Xn]^rw[QMf7)%=Ymi`C!"wVMG~f8+<VUip1R5E5xJVAw~R=e3A,2kOw{^23Au@LpU+T
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 1e f3 d6 69 11 e0 25 03 31 46 e2 7c 3e 9a 7b 8e 66 39 db dd 51 ea e4 29 2b 3a 12 89 3b bd 01 ed 37 49 d3 a6 f1 29 6e d1 c2 f3 59 37 78 b6 88 e3 81 87 0f 8c 65 4a 53 c5 ba 61 fd d5 ad 78 73 f8 bc 0e 66 16 4f 24 ea bd ec 25 b3 3d cc 67 7d ad 46 3a ff 6d 4c 11 b9 b4 b1 cc 86 d6 61 c8 15 31 3e 73 22 8d 5d b1 5c 48 7e 79 87 4d 6d 9d 9b 65 91 b4 11 be 35 24 7e 84 bd 51 73 88 e8 a9 3a e2 96 69 76 3b 4c b4 00 43 93 c6 47 91 31 bf 0b d0 2f 9a 8d 84 e8 34 a6 d2 0d b6 b2 eb 89 5d 3d fc d0 85 95 d3 d8 96 74 1d 4c 70 02 cf c2 f8 b1 fa c1 44 57 c0 5a c6 ea 2a 88 df cf af 7e 42 55 3d ba fc a7 3a 6b 18 b3 4d b9 fb 70 bc 39 e0 19 27 d0 e0 ce 7d 5d 62 a5 96 62 e5 84 8f 4e b7 f5 ed de 73 66 b0 90 90 b1 9b 18 1a f5 da be ab 0f 5d 53 4f 90 e2 10 4c ad 63 98 b0 06 37 82 3f 30 Data Ascii: i%1F\|>{f9Q)+:;7I)nY7xeJSaxsfO$%=g}F:mLa1>s"]\H~yMme5$~Qs:iv;LCG1/4]=tLpDWZ*~BU=:kMp9'}]bbNsf]SOLc7?0
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 43 2d 63 11 83 8e dc 6f 8b 21 49 4f ef b0 1b 21 5c 37 96 3d 16 a0 b4 1e be 4e fa b2 79 6d 20 34 dc ed fb 71 6d 1f 64 c5 44 9f a2 10 61 e5 f3 f1 be 7a 16 e7 1f a1 a1 20 d3 18 87 72 28 2f e9 9c 48 0d ef aa b7 c1 1b dd b5 ac 9c 8c 1b ac 57 6e 62 7c f9 91 17 14 23 95 6d ca c9 13 dc 72 29 18 26 b5 4f e4 f5 b6 40 56 fe eb 9a da 2c c3 20 2f 92 42 71 d5 ba b9 84 d1 26 d2 fa 87 7f 03 9e 5a a9 06 ec 77 dd 7e 7f c8 84 7f 6e 7f 84 01 10 f2 be 1e bb f0 f0 17 10 5c a1 ce 5f 9d d4 25 d6 69 03 65 ad ac 87 00 ad 19 80 df 38 88 24 d2 81 75 fc 46 f7 c7 cf 6a 78 85 67 e6 70 11 bc f4 c4 f3 e7 ba 63 ac 66 4d e8 8a f9 42 b0 2d 1c b8 eb bd e8 ec 5a 16 10 74 28 5d d4 b2 ab df 5b 96 a2 5c 2b 51 fc db 13 d0 1e ee 36 c7 3f 83 c9 3e 69 20 b8 b2 42 f5 6f f2 9e c2 27 1d 89 71 e9 0a e7 Data Ascii: C-co!IO!\7=Nym 4qmdDaz r(/HWnb\|#mr)&O@V, /Bq&Zw~n\_%ie8$uFjxgpcfMB-Zt(][\+Q6?>i Bo'q
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 64 65 e3 d9 dc f6 cb 24 e3 b9 0c d3 77 5e b1 da cb f6 f2 2f 4c d0 3a 62 1f 49 f2 11 2f 46 a6 d5 db 09 47 c6 14 e3 73 f1 45 83 24 f5 ca 49 bb ec b9 26 88 91 11 64 40 0b 10 c9 d8 94 ef a7 b8 7b b7 f5 63 ff 1b ed 41 c7 2d 35 de b4 38 ec 25 8d bd 8e f1 30 a8 14 51 4f 60 ea 07 52 8c e9 42 63 0a 6c ed ca 5f 28 e7 52 33 62 a7 cf e4 61 74 df 73 5b 93 48 cf 2c b9 bc e5 6f c9 36 4d ef 6a 30 18 15 a7 b2 77 cf 0f 18 fb d7 eb c7 fd e3 71 8d c4 d6 2b 56 7e ae 15 76 72 69 47 9f 62 35 57 c7 51 6b 2b 0b 16 6b 98 03 31 e9 6a 5a 3d 9e 31 97 a1 27 6a 2f 2a f3 85 2d 2e e4 fd cd 20 a8 c4 5f 05 7c f7 69 9f 79 4b 7f b2 3f 02 69 47 17 da 7d c4 fe a7 bb 0a 6e ab bb 4c 1b a6 84 85 ee 14 54 bc 0f 97 e4 b7 78 5d 3f 93 82 0b 99 c2 ec c0 21 34 d3 80 d9 f3 33 50 27 14 d0 1c 39 83 b1 35 Data Ascii: de$w^/L:bI/FGsE$I&d@{cA-58%0QO`RBcl_(R3bats[H,o6Mj0wq+V~vriGb5WQk+k1jZ=1'j/*-. _\|iyK?iG}nLTx]?!43P'95
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 6d 35 13 0c 0e 83 cf 48 91 a8 18 f3 f9 8a 5d af 80 60 a2 de 5a 56 51 fd 75 6a a5 1e aa 50 dc cb 3c 3d 6f 57 e3 ac 2e ca b9 5e ce 03 95 de 44 1a 45 47 01 bc 5b 9d 8e 4e fd da 1f 27 fb d9 0d 61 9e 93 37 74 7c 72 7f 41 8e 16 81 61 a1 e5 1f 06 9e 4a c5 5d 2e 48 b9 d9 03 d0 58 d0 ee bf 56 d5 28 23 99 1d 8c 12 a9 7c 96 d8 8d 06 2a 46 e2 70 87 c2 1d e0 f0 aa cd a1 7d 2c 70 4e ab 9d 85 83 56 d3 d5 31 36 a0 b5 5f 49 9e 51 0b b4 0e f7 f9 ea 62 0f fc d5 8f 81 85 e3 48 56 4f 06 5b c8 be 8c b4 36 e2 6a d8 3b df 94 d6 fb 07 2d ed 5e cb e2 a4 99 09 04 c4 fa 52 89 c5 0d 87 e4 08 e5 da 7d ff 90 e9 95 a3 60 8d 1d 2b 84 fe df c7 98 79 d1 44 72 8f 63 88 a9 ae 65 80 f3 40 da ef ce ae 47 20 fe 8b e9 83 f2 ed 81 fe 89 3b b5 f8 e0 8d 67 70 71 19 56 e7 a2 b0 2e ef c3 ca fc b9 1a Data Ascii: m5H]`ZVQujP<=oW.^DEG[N'a7t\|rAaJ].HXV(#\|*Fp},pNV16_IQbHVO[6j;-^R}`+yDrce@G ;gpqV.
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 59 b9 aa bf 46 a8 2f 5b 01 3f 38 55 b0 2f 99 2d 1b b5 5b d1 db ea e9 9c 7c 97 f4 90 68 58 61 8f a1 38 63 ff 42 83 eb af 57 94 fa d8 10 1f 40 00 33 d5 13 75 98 1e d8 82 27 98 9f b4 cb 81 90 14 f3 87 5c 18 80 b6 0f bd 68 05 4d 68 21 c2 f2 17 02 70 b0 71 8f a1 d6 d3 4b d5 c4 51 f3 94 74 4e 03 0f b2 a9 85 34 1c 6d 9e 6a 61 4b f8 5b 6e ea 63 d0 16 6e 0f 7e f1 bf 29 23 9e 23 37 45 e8 97 b9 67 b1 92 6f c5 47 1c 88 2e 9e 23 1c 4b e8 65 8d 2f e7 1d d9 96 c5 ae 12 33 b1 12 9c 8f b8 01 06 91 66 e2 05 f1 a0 55 48 34 93 1d 6f b0 1f 05 c9 bc 8a 88 f4 4a 79 b9 32 03 f7 d1 12 5c 9c 16 d9 b0 14 5e d3 27 b8 b9 b2 ea bb e4 44 57 94 d2 21 9e 3c 65 92 39 db d6 4a 3a 12 dc 28 29 8a 04 c4 9f 36 94 af 67 81 a8 21 29 b6 83 20 5a be fb f7 f7 f4 bb ac f0 04 52 27 92 21 a8 5f c5 7c Data Ascii: YF/[?8U/-[\|hXa8cBW@3u'\hMh!pqKQtN4mjaK[ncn~)##7EgoG.#Ke/3fUH4oJy2\^'DW!<e9J:()6g!) ZR'!_\|
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: bb 0e f3 d8 a4 f6 2b 98 70 7e d2 98 9b 34 1b d8 70 e1 df 38 15 3f e3 05 7d 9c 46 90 87 35 3e bd 59 10 1e c7 6c 91 8c 18 2e cd 27 23 92 42 ad 61 43 6a 54 75 d6 3b 6b c6 15 44 71 6e 5c c4 e1 d1 e4 88 76 22 74 17 de 19 a3 db 61 07 9d 07 cc 62 55 61 82 77 ea eb 26 62 1b 16 8c d2 ae 3b be 4f d2 81 4f 5c 5a 06 8b 98 c8 65 a0 c6 e9 67 3a e8 b1 ff 12 3b 8f 84 a4 02 5b 23 2b 30 e3 52 c5 e7 f3 45 6c 38 73 ad b2 93 42 34 a3 28 d7 d8 b2 5d a9 4f bd 57 a2 f2 6b 17 09 17 f6 bb 92 f8 7e 44 4b 02 e6 75 c6 06 25 3e b9 d2 21 03 2c 50 2f ce 23 7f 98 5b d0 85 36 6f 60 a5 21 4d 48 c7 7c ed 9f 4e d8 82 4c ad fa 0d ea 1c 34 d3 f3 7b ff 01 ca fb fc 8a 2f 5d 84 ae 9c e8 1a 61 f4 b0 2e f6 bf e0 59 c1 d6 7b 91 e1 1f ca 92 e6 04 e2 d1 63 7a ff 18 1d 31 a8 dd 72 5f d5 2f 91 41 03 1a Data Ascii: +p~4p8?}F5>Yl.'#BaCjTu;kDqn\v"tabUaw&b;OO\Zeg:;[#+0REl8sB4(]OWk~DKu%>!,P/#[6o`!MH\|NL4{/]a.Y{cz1r_/A
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: bf 8a a6 63 c4 85 b6 22 8d 70 1f 09 5f 1f 2e 24 1e 03 89 25 df f6 2f 38 d0 1d c5 02 2a 51 03 bf b8 1d 1b 7e 9e 0d 88 3f 07 ca 49 a8 fd fa 35 83 2b 0d 6c 20 63 6b 68 d4 17 1e 74 d3 e0 28 57 47 d9 3a 5a d6 88 6a e2 23 ba d2 17 77 2b 31 03 b2 1f 3c 50 3c 6d 74 b4 cf 66 3b 63 17 98 12 2e d2 56 72 87 b4 6c 4e 24 93 be d9 14 3e 49 3d 30 dc 68 7a f1 5c e3 ab f0 58 97 c4 b6 96 1f 26 2c 64 6b 56 a7 15 68 29 2e c9 d8 60 d0 37 6d ef 4f 53 96 41 e3 e8 10 1d 01 dc 85 19 12 98 55 f3 be 5a 48 b2 83 c2 8c 80 1c 97 39 90 e6 4b fd ac 03 8b ac 9e d2 09 6d 7b 21 a0 d2 44 5c 20 5d a7 66 d2 a1 cc d6 bc f0 a5 6f eb f3 42 aa 92 e0 63 ac 2b 0a df b1 10 0b d5 80 92 61 54 c8 ea 78 19 35 21 30 ae 0d c0 da 3b 08 f1 c5 6c 3d 94 31 4c 78 66 02 d9 ee b6 90 01 e7 b1 0e 92 47 9e c2 c2 a6 Data Ascii: c"p_.$%/8*Q~?I5+l ckht(WG:Zj#w+1<P<mtf;c.VrlN$>I=0hz\X&,dkVh).`7mOSAUZH9Km{!D\ ]foBc+aTx5!0;l=1LxfG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50270	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	566	OUT	GET /6heYcmK08nJrjH3yvIin-c8kYQbqTfUs9t-8QUdkxIBcGvGMZ2HVhe2jIYrIRmWOn8qXvivlwGvVDfv9gr8r0ahcQBOqYqITNZB9T0tz_SS2bnOScJY=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	574	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3665 X-XSS-Protection: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 27 May 2024 22:39:02 GMT Expires: Tue, 28 May 2024 22:39:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 282 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0e 03 49 44 41 54 78 9c ed 9d 6b 70 5c 65 19 c7 7f e7 ec 6e 96 4b 94 da ca ba 06 11 04 d3 a0 d0 12 35 21 20 02 da 64 bc 80 15 98 ba 12 a0 c8 58 6f 23 38 e3 87 f8 41 0d 8c e3 05 c6 2f 99 f1 83 77 04 46 54 8c ac 71 1c c1 cb 8c dd 0a 5a 94 b0 81 6e a9 42 c3 52 05 a1 6b 8c 18 db 34 d8 ee ee d9 73 fc f0 9e 6d 9b 36 7b 3d cf 7b 76 73 c8 6f a6 1f 9a ec fe f7 e9 fe 7b ce 79 cf fb 3e ef ff 18 8e e3 b0 42 70 31 5b 5d c0 0a 7a 59 31 38 e0 ac 18 1c 70 56 0c 0e 38 2b 06 07 9c 70 a5 5f 18 86 e1 67 1d 5a e9 1b df 14 02 a2 1c f9 f7 5a 40 7e 6a 78 a2 d4 ba aa 64 a9 74 37 64 54 fc c5 32 37 d8 35 f5 3a e0 66 Data Ascii: PNGIHDRxx9d6pHYsIDATxkp\enK5! dXo#8A/wFTqZnBRk4sm6{={vso{y>Bp1[]zY18pV8+p_gZZ@~jxdt7dT275:f
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: bc fe 96 b9 37 af 8a 46 76 85 4d c3 cb 28 7e 2f b0 6e db 68 a7 97 89 8d 9a 14 ee 37 d7 1a 51 f3 49 4c 42 1e 64 72 c0 7a 9d a7 eb b6 ea e8 38 21 6c de ef d1 5c 80 d3 50 d7 43 bd 84 8d fb 3d 9a 0b d0 85 1a 67 f8 8e ef 47 f0 79 a3 73 17 9f 7a 52 c7 76 21 f5 22 70 fa b6 d1 ce 7f c9 c8 2d a6 f0 4b 73 c0 38 c9 6c 64 c2 a4 1a 45 e0 0c 5d a3 eb b6 39 82 a3 21 f3 f3 82 ff 75 22 a8 db 15 3d 84 f8 9c a0 5a 84 16 b4 e3 fa 6e 70 24 64 f4 0b 4b 5e 22 ac 77 84 90 71 a1 b0 e2 3b 84 f5 6a e2 bb c1 61 c3 58 2d 2c 79 b6 b0 de 61 0c 03 e9 5a bb 85 f5 6a e2 ab c1 5d 23 33 1d 86 61 54 dc 93 dc 24 d2 26 00 90 4f 12 c6 30 3a 84 65 bd 6c ab 69 0a bf 8f e0 33 6d f9 d8 26 5d ad 35 af 47 be d6 79 69 c1 5a f8 6d f0 59 85 92 f8 3e 6b 5d ab 40 67 39 f2 fb ff b3 e2 8a 35 f0 db e0 fe 83 Data Ascii: 7FvM(~/nh7QILBdrz8!l\PC=gGyszRv!"p-Ks8ldE]9!u"=Znp$dK^"wq;jaX-,yaZj]#3aT$&O0:eli3m&]5GyiZmY>k]@g95
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 25 a2 09 ca 51 86 5e 6a dd 0f 5c 13 4d 88 4f f0 2c 22 96 4a 3b 78 8f 5d 9c 07 ae ab 76 7a 86 3a 6e 93 72 63 f1 a7 80 8d 34 f7 c5 cd 01 97 e7 c6 e2 be f4 25 45 13 4c a3 a2 0c 9b a9 75 3f f0 de 68 02 5f 1e 6f 17 4b a5 f7 d0 7c ec 62 79 b9 b0 66 ad 75 dd 07 e7 c6 e2 7f 40 2d 48 3f de 40 11 93 c0 05 b9 b1 b8 af bd 49 d1 04 7f 02 2e a0 b1 d3 75 1a e8 8f 26 b4 8d f2 97 24 96 4a 4f a2 6a 6d e4 3b 9a 42 2d 13 d6 d5 01 53 f7 44 47 6e 2c be 1b b5 5a b3 19 35 62 5d ea b6 c4 41 8d 10 af 01 2e ca 8d c5 5b 12 0f e8 1e c9 03 a8 cb cb c3 54 ae 75 3b ea 81 5a 17 46 13 fe 6f 0c 03 88 a5 d2 cf a0 62 17 87 51 df 5d a5 db bd 3f a3 be fb 81 7a 8e dc 32 5e 9a ee ca cd 61 71 f7 47 33 c0 8e dc 58 7c 5f bd 1f ee 17 ee 62 c4 71 8d 6c ee ed 55 5b 71 54 d3 5d 97 fb a3 19 60 87 2f 4d Data Ascii: %Q^j\MO,"J;x]vz:nrc4%ELu?h_oK\|byfu@-H?@I.u&$JOjm;B-SDGn,Z5b]A.[Tu;ZFobQ]?z2^aqG3X\|_bqlU[qT]`/M
2024-05-27 22:43:44 UTC	69	IN	Data Raw: 9b 40 2c 36 d4 c2 ed 79 8e 72 a4 83 c5 02 f2 ed be 88 df 08 0d 2f f8 af 10 0c 02 79 8a 5e e1 08 2b 06 07 9c 15 83 03 ce 8a c1 01 67 c5 e0 80 f3 7f 58 e3 d5 04 46 74 c2 89 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: @,6yr/y^+gXFtIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50271	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	798	OUT	GET /kLMr5zuHxfe-IxhnKdLp_1JkP5sl2ova0svHjQkFnV1q8X7yE6uA9p8AToT_L7xL5s5EIayVVVljNtp7BgoL69PtZ-Mf00qUbpTLfrrqXWv99tatmXI=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2454 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:25:55 GMT Expires: Tue, 28 May 2024 20:25:55 GMT Cache-Control: public, max-age=86400, no-transform Age: 8269 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 09 5d 49 44 41 54 78 9c ed 9d 7d 90 55 65 1d 80 9f 73 ce fd be 77 f7 26 6b 83 59 0e 35 1a d5 8c a3 a6 36 8c 45 35 4e 60 cc f8 07 a5 35 7d 58 53 39 a9 39 59 93 69 53 36 63 29 7d d9 07 e5 18 35 4a 49 0e 4e a2 b0 c2 9a 0a 1b 84 ec 82 c0 82 0a ca 2e 6e 0b d8 c2 82 21 db ee 28 0b 2c 2e b0 f7 f4 c7 ef 5e d8 d9 65 77 ef b9 f7 9c f3 9e 7b ce fb cc dc 19 66 39 f7 bc bf e5 e1 7d df df fb 71 de 63 d8 b6 8d 26 bc 98 aa 03 d0 78 8b 16 1c 72 b4 e0 90 13 73 72 f1 05 d7 fd bd dc 4b e3 c0 fb 80 fa e2 9f 0b c0 db c0 be c3 7d 47 de 9a 7b eb 2c 2e 9f 75 11 03 fd a7 9c 14 ef 1a 86 61 90 cc 58 6c 59 d9 4e 6b e3 56 32 75 29 25 71 b8 c1 fe e5 37 4c f8 f7 8e 04 97 41 3d 30 07 Data Ascii: PNGIHDRxx9d6]IDATx}Uesw&kY56E5N`5}XS99YiS6c)}5JIN.n!(,.^ew{f9}qc&xrsrK}G{,.uaXlYNkV2u)%q7LA=0
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: e4 17 48 f6 ed 1b 5a b0 7f 18 c0 8f 91 6d bd 5f f3 ab 50 2d d8 7f a6 02 8f 20 0f ba 7b fe 94 a6 16 ac 8e 19 c0 06 60 29 72 84 85 27 68 c1 ea f9 3c d0 09 dc 8d 07 db 86 b4 e0 60 90 05 e6 21 89 d8 57 dc bc b1 16 1c 2c de 03 3c 8a 34 dd 57 b8 71 43 2d 38 98 cc 04 5e 44 f6 70 57 b5 2c a9 05 07 9b 1b 91 61 d5 dd 95 de a0 f6 04 db 60 98 06 89 54 8c 28 3c 99 80 6c eb 9d 07 3c 47 05 9b f4 6b 4b b0 0d 86 65 10 8b 59 0c 0d 0e 11 4b 98 44 e8 8d 04 57 03 eb 71 78 00 4d ed 08 b6 c1 8c 99 e4 f2 16 9d 5b f7 b0 78 5e 13 af ef ee 25 df e0 f6 89 c8 81 e6 fd c8 bc 76 d9 c7 68 d4 84 60 db 06 33 66 50 3f c5 a4 7d e3 3e d6 3c ba 91 de 9e 7e 56 3e dc c2 fe 5d fd 22 39 3a 35 79 26 72 42 6f 59 04 5e b0 6d 43 2c 6e 90 cb 5b 6c 5f d7 cd 33 0b d7 32 3c 3c 4c c3 f9 e7 70 b8 ff 28 cb Data Ascii: HZm_P- {`)r'h<`!W,<4WqC-8^DpW,a`T(<l<GkKeYKDWqxM[x^%vh`3fP?}><~V>]"9:5y&rBoY^mC,n[l_32<<Lp(
2024-05-27 22:43:44 UTC	205	IN	Data Raw: 28 88 c6 01 95 8e 83 17 b8 1a c5 d9 19 42 1e d8 fa 10 f0 0f 1f ca 0b 25 95 0a 6e 45 de 62 ed 15 7f 05 de 8b 3c 6a 79 ca c3 72 42 4f 35 33 59 3f 02 5e 71 2b 90 22 9b 90 97 4d dc 84 9a 7e 3e 74 54 23 f8 10 d2 37 3a 3a 79 6d 1c 0e 00 d7 23 db 65 5c 39 5d 46 23 54 3b 17 bd 0f 59 5b fd 57 85 df 3f 0e dc 0b 4c 47 56 7d 34 2e e3 c6 62 c3 21 60 36 70 0b 32 d1 5f 0e a7 80 a5 c8 78 f6 1e 44 b4 c6 03 dc 9c aa 5c 88 1c 09 34 07 69 ba af 02 1a 90 99 2f 13 c9 8a 77 20 e3 d9 46 64 17 a3 c6 63 8c 1a 3b 4e 57 e3 90 30 ae 07 6b 46 a0 05 87 1c 2d 38 e4 68 c1 21 e7 ff 7e ec 67 4d 5a b8 75 39 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: (B%nEb<jyrBO53Y?^q+"M~>tT#7::ym#e\9]F#T;Y[W?LGV}4.b!`6p2_xD\4i/w Fdc;NW0kF-8h!~gMZu9IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50272	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	798	OUT	GET /1bBfkvken8Lqz8NftP9_n8PmC2j6iMPUovX_c-tahFJYXo1tImjmPBU1nv1ATO_XIIh2dHUH6DMp0blUuhL7PZ7JvhZwNQ4QaiYnBsE7sGZcTDP3fLI=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3395 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:12:41 GMT Expires: Tue, 28 May 2024 21:12:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 5463 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 0d 0a 49 44 41 54 78 9c ed 9d 79 74 15 e5 19 87 9f 4b 02 48 c8 be 0e 61 8b 4a c4 8b 0b bb 8c b5 08 45 b1 7a e4 14 77 8b 54 40 a9 7a 3c 9e 5e a4 02 2e 28 7c 9e aa 47 3c ad 4b b5 6a d5 ba 55 11 97 aa b5 58 59 44 51 b4 0c 6b 44 20 60 0c 4b 48 02 43 80 04 02 2d 26 37 4b ff 98 04 91 24 64 66 ee cc fd e6 de dc e7 9c fc 95 77 de f9 e5 fc f2 cd 7c eb 3b be c6 c6 46 62 44 2f 9d 64 0b 88 e1 2e 31 83 a3 9c 98 c1 51 4e bc d5 0b 7c 3e 9f a9 38 45 a8 5d 80 3e 40 22 50 07 94 e9 42 3b 68 f5 7e 31 da c6 4c ff c9 67 b5 93 75 32 83 15 a1 66 02 53 80 ab 81 21 40 97 13 42 76 02 0b 81 57 75 a1 ad b3 74 e3 18 2d 08 9b c1 8a 50 4f 01 66 03 d3 81 ee 26 53 2d 02 66 e9 42 db 68 Data Ascii: PNGIHDRxx9d6IDATxytKHaJEzwT@z<^.(\|G<KjUXYDQkD `KHC-&7K$dfw\|;FbD/d.1QN\|>8E]>@"PB;h~1Lgu2fS!@BvWut-POf&S-fBh
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 3c b0 97 dd e5 db 29 d9 b1 85 6d c5 1b 65 9a 5e 07 fc 05 78 50 17 5a 95 db 37 73 e5 f0 d9 d3 6c 7d 12 98 66 4f 92 fb d4 d7 d7 b1 b5 70 2d 6b 56 2d 65 77 f9 76 59 32 f6 03 73 80 17 74 a1 d5 bb 75 93 0e 69 f0 f1 14 17 6d 60 d9 92 05 1c 38 a0 cb 92 b0 11 e3 34 c6 72 37 92 77 78 83 c1 68 d1 5f 7c fe 01 da d7 9f 00 d2 6a 82 bd 0f cc d0 85 b6 c3 c9 a4 6e 1f 1f 8d 08 e2 e2 e2 19 73 f1 b5 5c 37 61 1a 9d 3b 77 95 25 e3 2a 8c d9 b0 47 14 a1 26 86 f3 c6 51 6f 70 33 fd ce 18 c8 c4 c9 b3 e8 d6 cd 6c 09 11 c7 e9 0a dc 0b 14 29 42 9d 14 ae d3 18 9e 78 44 57 55 55 b0 6e f5 32 ca 4a 8b 09 d6 d6 90 9e a1 70 e6 80 61 9c 75 ce 08 8c 79 05 e7 28 2f db c6 fc d7 1f 23 18 ac 75 34 af 0d 56 01 77 ea 42 d3 ec 26 88 88 77 f0 ba 35 cb 58 ba e8 2d 1a 1a 5a 76 36 7b f5 ee c7 35 bf 9e Data Ascii: <)me^xPZ7sl}fOp-kV-ewvY2stuim`84r7wxh_\|jns\7a;w%*G&Qop3l)BxDWUUn2Jpauy(/#u4VwB&w5X-Zv6{5
2024-05-27 22:43:44 UTC	1146	IN	Data Raw: ad 76 59 cd 8f 64 7b 73 4e 7a 3f 70 a5 2e b4 bf 5a bd 50 9a c1 55 95 15 a6 63 2b 2b ed 4d 3f da c1 83 ef e1 f9 c0 39 ba d0 3e b2 73 b1 b4 ba c9 56 a6 14 c3 39 c3 e4 a1 16 bc 06 98 a6 0b 2d a4 6f 44 4a 6b c1 56 a6 35 7b f6 32 3f 55 19 2a 99 59 b9 27 fd 8c 7d 18 d8 03 dc 04 8c 08 d5 5c 90 d8 82 b3 73 7a d3 37 ef 4c 4a 76 6e 6d 27 d2 c7 f0 11 63 c3 a2 09 8c 49 93 b4 b4 ec b0 be 16 9a a8 05 1e 07 1e d1 85 76 d8 a9 a4 d2 77 55 b6 37 41 31 72 f4 78 7a e4 e6 85 47 50 13 12 16 ff 3f 04 fc ba d0 ee 75 d2 5c 90 6c 70 4a 6a 26 37 dd 3a 97 bc 53 07 b4 f8 5d b7 6e 89 5c 36 6e 32 23 47 8d 0f bb ae 30 0e 95 36 01 17 e9 42 bb 52 17 9a 2b 15 63 a4 7f 9c 22 25 25 83 1b 26 cd 64 ff be dd 94 95 16 53 57 17 24 35 35 93 bc d3 fc c4 c7 cb 29 22 17 86 16 5c 09 dc 0f bc a8 0b ad Data Ascii: vYd{sNz?p.ZPUc++M?9>sV9-oDJkV5{2?U*Y'}\sz7LJvnm'cIvwU7A1rxzGP?u\lpJj&7:S]n\6n2#G06BR+c"%%&dSW$55)"\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50273	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	554	OUT	GET /9NuRdiRepVI3n1txfg7Ky2wWzB3DvXkWABXeFMSn2tzDYYkv8T_RMA9R17fWi0ziUDIDTVJx0JruCzOev37c4dkK9Wrgkeyam3pM8lI=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4217 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:08 GMT Expires: Tue, 28 May 2024 18:50:08 GMT Cache-Control: public, max-age=86400, no-transform Age: 14016 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 0f c5 49 44 41 54 78 9c ed 9d 7b 74 1c d5 7d c7 3f 77 76 56 2b ad 56 b2 fc c0 96 d7 2f 01 26 3c 8c 01 db 92 0b 38 3c 22 09 48 ca 23 14 b7 66 78 04 17 4a 12 9e e5 10 c5 0d b0 a5 69 1a 4c 7a c2 33 21 e1 38 21 49 69 5e 08 93 21 38 29 27 a7 20 04 b4 10 0a 1e c0 e0 17 10 08 2f 23 64 15 5b c2 92 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx{t}?wvV+V/&<8<"H#fxJiLz3!8!Ii^!8)' /#d[
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: bb 9a 1a 04 e9 a1 be 85 65 a9 9d bc 55 bd 96 53 0f fd 06 bd 81 0a a2 32 a5 cc af 1c fa 3b bc a6 12 5d 13 1e fc 9c 0e e0 3d a0 ae 3d 16 f1 d4 b5 1f b7 e8 0d c0 42 80 44 e0 48 0e ee fd 03 2f ee f8 0a 4b 93 1f d3 21 74 65 4e 53 43 63 cc 7a c0 17 71 21 7d ce 1b bc 76 ea 69 0d ee 6a 6a 38 11 78 76 f4 76 4d 0e e0 c8 6e 6e 3d bc 95 bb ab 96 10 75 dc 7d fd 9a 94 92 ba 48 39 d3 ca cb f2 19 86 54 c5 aa f6 58 e4 8f 5e 39 f3 ba 06 3f 90 69 a3 23 2a 10 da 6c 6e 7e ed 24 be b3 f7 8f 74 04 42 38 2e 39 b4 a5 64 4e 79 59 a9 88 0b 63 5c 03 55 78 26 70 57 53 c3 3f 32 74 6b ce 84 44 c7 09 d4 73 d5 9f ce 62 d3 bb ff 46 a7 a6 33 58 e4 0d c6 91 30 bd 4c 67 4e 24 af 17 08 aa 59 d8 78 4b dc b3 fe b1 27 b7 e8 ae a6 06 0d c8 b9 05 55 66 6f e6 95 99 31 4e 39 f8 5a 10 1a 51 99 7f 7d Data Ascii: eUS2;]==BDH/K!teNSCczq!}vijj8xvvMnn=u}H9TX^9?i#*ln~$tB8.9dNyYc\Ux&pWS?2tkDsbF3X0LgN$YxK'Ufo1N9ZQ}
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 82 b2 5b 50 79 f9 6e 82 f3 f6 20 53 63 be 62 3b a9 50 fb 85 22 9c e0 a1 fb 67 3d 41 32 d2 8a 90 d3 55 b8 e8 51 61 54 95 c0 ef 15 52 48 7e ac 51 71 5e 37 e5 c7 bc 3b b2 c5 9c 91 64 9b 7e 76 41 91 15 40 d3 b7 e4 95 c9 ea 57 18 98 f5 4d 84 a3 2c c3 66 e2 d4 e0 d9 4f 6c ce 7b 8c 58 0e 08 f4 e3 e2 84 4f fa d3 b8 e2 0e e1 5e e6 c5 38 a4 2a df ba 3e dd 62 56 97 3e 65 19 e6 3b 2a ec aa 6c 02 e6 3e 55 30 29 08 2c 4a 50 7d fe b6 6c b7 e5 d1 ac 4a b6 e9 ca 6f d5 a7 dc b1 cd e8 9f 7b fb 61 c8 30 0a 2f 97 b2 69 95 2a 05 ce 2d c3 c2 01 d9 2f a9 be 68 27 04 44 a6 16 73 36 36 16 14 59 1e 0c cc d9 70 bf d4 3b 50 dc 33 73 2d 1b 65 34 2a 05 1e 7f 06 9d 04 06 a1 7a dd 9f d1 2a 13 63 b5 98 b3 51 9b 6c d3 7f 55 48 70 b9 50 ff c0 9a 36 47 ff 20 84 0c aa 72 31 cc 7f a9 32 ac 52 Data Ascii: [Pyn Scb;P"g=A2UQaTRH~Qq^7;d~vA@WM,fOl{XO^8>bV>e;l>U0),JP}lJo{a0/i-/h'Ds66Yp;P3s-e4z*cQlUHpP6G r12R
2024-05-27 22:43:44 UTC	579	IN	Data Raw: 86 b9 cc ef 20 c6 a3 a4 6b f0 30 c1 66 7b 9d 2e ec 2d cf 0d 2e e5 d2 81 b9 a5 20 2e 28 5c a5 dd 4d 4a 27 59 79 1c 4e 8c 73 62 4f ff 61 1f 2e 17 ce 34 bf 63 01 4e b6 0c b3 e0 a5 a2 bc 64 42 d4 60 80 e7 ce 66 20 80 76 6a 09 04 fc 6d cb 30 ff db ef 20 72 a5 74 66 81 e5 40 d7 6f 76 74 46 ff fa a8 38 70 9a 4f 21 bc 60 19 e6 45 3e f9 2e 88 12 a8 10 f9 61 19 e6 6d e4 b0 fe 87 02 92 c0 e7 7d f0 5b 14 13 4e e0 21 4e 06 d7 be 02 9f 2b 67 58 86 59 d0 d2 10 7e 32 21 05 b6 0c d3 01 fe ca 43 97 3f b7 0c f3 49 0f fd b9 c6 84 e8 07 8f 45 7d eb ea 9f 01 97 2a 76 a3 74 91 14 d5 4c c8 1a 3c 8c 65 98 97 01 83 8a dd 7c 41 b1 7d a5 4c 68 81 87 50 d9 a2 fe 57 cb 30 b7 2b b4 af 9c 09 2f b0 65 98 cf 00 2a 96 33 ec 04 6e 52 60 d7 53 26 f4 33 78 24 f5 ad ab 13 e0 ea 7c ee 7a cb 30 Data Ascii: k0f{.-. .(\MJ'YyNsbOa.4cNdB`f vjm0 rtf@ovtF8pO!`E>.am}[N!N+gXY~2!C?IE}vtL<e\|A}LhPW0+/e3nR`S&3x$\|z0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50276	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	783	OUT	GET /UqZcYFgfFclRU46MshhuCQD79idBZ8hyIe5WkQ1VLzG47w-Mgu6yGriGkL_YiYF2qau5jrufzTNwFp84tw7Lm-f9t2vQLkrECfur=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4368 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:17:26 GMT Expires: Tue, 28 May 2024 22:17:26 GMT Cache-Control: public, max-age=86400, no-transform Age: 1578 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 10 c7 49 44 41 54 78 9c ed 9d 7b 74 54 d5 bd 80 bf 7d ce 99 c9 63 48 08 04 12 08 90 90 80 a2 c4 88 0a 0a 68 b5 a2 70 83 a2 17 05 05 7c dc d5 75 f5 56 e9 cb 6a 80 68 5b b5 ab d2 de 5e 51 b8 75 79 5b ab d5 b5 da 65 2b 82 0a 22 d5 2a af e0 6d af 0f c0 a2 ad a8 bc 11 93 18 c2 23 98 f7 cc 79 ec fb c7 64 20 c2 64 32 8f 33 33 67 c2 7c 6b 65 65 ad 59 fb ec b3 67 be f9 ed fd 3b fb ec 7d 06 d2 a4 49 93 26 4d 9a 34 69 d2 a4 49 93 26 4d 9a 34 69 d2 a4 49 93 26 4d 9a f8 22 92 dd 00 87 90 2d a7 4f 9e 02 94 22 18 d4 f5 9a c4 ff f9 04 fe c7 f3 35 90 98 c0 21 a4 fc 50 bc f5 de 16 bb de d8 19 2d 58 ce 9e 3d 80 b6 fa a7 1b Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{tT}cHhp\|uVjh[^Quy[e+"*m#yd d233g\|keeYg;}I&M4iI&M4iI&M"-O"5!P-X=
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 24 54 c1 10 e1 b7 28 51 f7 a1 53 4e b0 a3 ba e5 ee 14 83 51 57 1b 76 f1 86 a3 16 1e 35 8e ed e9 22 a5 04 3b ae 5b ee 86 28 3a 8b f6 35 af 84 5d 7e c3 76 9d b3 dc f1 7f 27 29 23 d8 b1 91 1b c0 93 87 ef 27 3f c3 fc f4 9f bd 16 3d d4 64 51 b5 59 67 80 3b fe cd 4a 09 c1 72 fa c4 fb 9c 1a b9 27 91 64 5c 0a 2b 1e fa 27 3b 42 f4 d4 b5 87 2d 66 fe a6 83 f2 4c 91 90 15 8f 8e 9f c9 92 d3 26 df d7 a8 1b cb 9c 2e d7 ed dd c6 ba 8a 95 7c af f4 46 8e ff a6 95 9f 8f d3 b8 e6 22 8d 11 05 0a aa 22 a8 3b 62 52 f3 0f 83 aa 2d 06 97 65 0b b4 04 85 96 a3 05 cb 55 fd ee 6b 7c dc 58 26 32 71 f0 02 df 2e b9 e5 2b f9 61 e9 0d 5c 64 7a a1 9f 60 ed 4e 93 67 3f 36 38 68 82 25 61 b8 0a 43 5c 82 2b 3c 89 89 dc 00 8e 15 2c df 56 ef 35 cc b6 65 b9 f3 0f d2 bc ac 04 31 50 c6 2e 59 f7 81 Data Ascii: $T(QSNQWv5";[(:5]~v')#'?=dQYg;Jr'd\+';B-fL&.\|F"";bR-eUk\|X&2q.+a\dz`Ng?68h%aC\+<,V5e1P.Y
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: fe 0d d5 62 55 b4 35 d8 f2 91 f8 23 57 c4 77 51 ba 12 7a 95 78 53 a7 7f 7e 39 d1 64 65 10 b7 8d 46 c2 dd ef fe 8d d5 62 49 2c 75 c4 2c b8 2b a1 5a 6a 7b b7 7c 2a 66 e8 dd f0 05 1e 81 91 84 27 8b 5a 71 e9 9e 25 c2 e5 59 b4 71 51 6c 72 21 46 c1 b6 cc 50 85 7b 2e 23 f4 53 68 0a 07 2a f8 e2 3a 16 06 a7 53 c7 e6 95 6d 12 e1 ee 57 bd b1 5a 3c 6e 47 6d 51 0b 96 35 ea ed b6 67 cb 3d 21 80 d6 03 21 8b 8c 2d 56 68 0c 33 84 05 e0 b2 69 67 5f 4b 9b 64 a0 8d 63 bf 70 f5 5b b4 71 91 b0 ed e1 6d 51 5d 26 c9 1a b5 c8 a7 8b e7 95 44 25 35 02 64 f3 76 e0 5b 3d 16 39 a7 58 e3 88 7f 3a 2f e4 92 66 21 fc 97 4a cf fc c5 4b 6f 49 b7 69 49 ca 86 a8 4c bb a8 e7 eb af e6 56 8b 7e f6 64 32 fe 31 77 91 3d 91 1b 20 da eb e0 5f ab ea 89 85 86 f1 47 01 79 fc 09 90 4b 41 04 0f 3d 97 0a Data Ascii: bU5#WwQzxS~9deFbI,u,+Zj{\|f'Zq%YqQlr!FP{.#Sh:SmWZ<nGmQ5g=!!-Vh3ig_Kdcp[qmQ]&D%5dv[=9X:/f!JKoIiILV~d21w= _GyKA=
2024-05-27 22:43:44 UTC	729	IN	Data Raw: 72 21 8e 97 b1 72 23 23 4c b4 3d 80 3b 92 c9 90 68 c6 dc 64 32 74 6e f9 a2 b5 e2 91 84 cf 50 85 4b dc 56 55 89 ab f9 42 15 c6 28 cb c2 08 f7 ee 93 bf 5b 4e 25 b9 63 ef 77 b2 5c 88 f3 f6 51 71 15 b5 2e c3 18 e6 d3 7b 7f b6 a7 a6 18 ac 68 9d c4 9c f6 62 26 a4 8c dc c5 49 9d c4 08 87 b8 af 8b 14 d7 d0 98 25 8d c2 50 91 ac 09 83 15 2d 93 98 d7 5e 1c 74 12 c3 69 f8 bb 65 e7 cb 85 04 4e 25 cb f5 14 59 8a b6 4f 42 46 f7 31 39 d0 2d cf 49 19 b9 63 ab d7 8a c5 0e ff d1 e9 93 24 6c bb 96 98 46 bd 62 1a a3 05 78 03 91 ac 09 83 95 ad 93 99 d3 3e 22 45 e4 96 2f 4a 25 b9 90 84 c7 09 cb b7 28 32 54 f5 80 a6 98 ae 95 2d 93 99 db 3e 3c 85 12 aa d4 e8 96 bb 93 f0 0d 97 a2 92 7a ed 7d b3 68 c5 f1 c9 cc 6d 1f 91 4e a8 e2 4c f2 3e 5b f9 c2 e8 f1 2f bc b4 5b a8 8e 7c a4 cd 09 Data Ascii: r!r##L=;hd2tnPKVUB([N%cw\Qq.{hb&I%P-^tieN%YOBF19-Ic$lFbx>"E/J%(2T-><z}hmNL>[/[\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50277	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	783	OUT	GET /2rDk7D8NJQPiKYEA6Vzy6GvuREL2IgHNQxXW-8eiSp60CAO4V1as9hWXbLfvDP7X3p3OqS1W3kr6JithHTmpNKXryf7NYJssZUXi=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 2245 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:02:11 GMT Expires: Tue, 28 May 2024 19:02:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 13293 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	857	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 06 08 08 08 08 08 06 06 07 08 08 07 08 07 08 06 08 08 08 06 08 07 08 08 08 08 08 06 08 08 08 07 06 08 08 08 08 08 08 08 08 0a 06 08 08 08 09 09 15 08 06 17 0f 0a 08 18 08 08 09 14 01 03 04 04 06 05 06 0a 06 06 08 0f 0e 07 0d 0f 0f 11 0d 14 0d 0d 0b 0f 0f 0e 14 14 08 0d 08 14 11 13 0d 0f 11 0d 0f 0d 0e 0d 0e 0e 0e 0d 0a 12 0f 0d 0f 12 0b 0d 0e 09 10 0f 14 0d 0f 14 10 10 14 ff c0 00 11 08 00 78 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 01 03 04 05 07 08 02 09 ff c4 00 3c 10 00 02 02 01 02 02 04 09 0b 03 05 00 00 00 00 00 01 02 00 03 11 04 12 05 21 06 13 15 31 07 08 41 42 51 54 71 93 d3 14 16 22 23 32 52 61 91 Data Ascii: JFIFxx"<!1ABQTq"#2Ra
2024-05-27 22:43:44 UTC	1388	IN	Data Raw: 85 c9 44 32 b1 12 1b e1 73 a6 d6 70 ad 05 fa 8a 6b 37 ea 00 0b 42 6d 2c bd 63 72 eb 5d 41 52 d5 d4 33 6b a8 20 b0 5c 64 6e cc f2 bf 7e 8b 16 dd db 95 45 0b 96 ff 00 7c 78 5e 6e 0f a3 17 1a bc 9b d4 58 b4 bb f5 34 97 87 2e 39 f0 5e 7e 48 bd d3 bf 0a 9a 0e 0e 01 d6 6a 12 a7 61 9a ea 50 d6 6a 5c 64 0d cb 4d 61 df 60 24 03 69 01 07 95 84 e5 36 f8 e9 70 f0 48 1a 2e 2e ca 09 01 82 68 c6 e1 9c 6f 00 eb 87 23 de 03 6d 6f 48 1d d3 ce 7d 0a e8 66 bb a4 5a c7 5a d9 b5 37 d8 45 da cd 5e a5 8e c4 56 38 eb ad 75 53 cd b1 b2 9d 3d 6a 33 b4 04 54 5a 98 af 7c a3 c4 ae 8e ac 07 e2 1a 93 7e de 6e 94 54 ba 7d f8 ef ea 8b 3d 9b 73 e6 fc a3 27 d2 26 b5 4e 6e 6e 54 d5 8f 42 56 d7 9c 6f ee ff 00 0b 63 b0 dd ec ff 00 67 ba 3a a6 cf 53 c8 aa ac 96 93 6a 9d 70 bf cd 29 b4 bc b5 39 Data Ascii: D2spk7Bm,cr]AR3k \dn~E\|x^nX4.9^~HjaPj\dMa`$i6pH..ho#moH}fZZ7E^V8uS=j3TZ\|~nT}=s'&NnnTBVocg:Sjp)9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50280	172.217.18.2	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	661	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Mon, 27 May 2024 22:43:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50278	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	786	OUT	GET /Q4UDu0hKQgAyUzO0RpJTpTKc2DyaZbU-K96JCJjqKd9_ABetMMpS6LxO6Y7Ypm2CVhCro4n4n9PTF97SlwrSjmJFaHdV-_yDr8MpX1M=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2483 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:09:38 GMT Expires: Tue, 28 May 2024 22:09:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 2046 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 08 ff 49 44 41 54 78 9c ed dd 6b 8c 5c 65 1d c7 f1 ef ff 39 e7 cc cc 5e 7a 59 da 2e a5 50 6e 25 80 a1 48 03 94 84 44 91 b4 0d 81 50 f0 96 98 28 36 24 98 18 83 97 48 d0 5a 25 48 88 c1 80 31 6a 8c 02 31 46 13 7c 23 be 32 48 b4 a5 b4 80 80 05 44 d2 a6 b4 28 2d 14 ba a1 4d bb db b2 ed ee ce ed Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATxk\e9^zY.Pn%HDP(6$HZ%H1j1F\|#2HD(-M
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 44 d2 8b b6 a2 df 85 53 7f 5b 1f 6e 09 55 5c d4 93 73 8e 2b 80 81 ac 62 99 01 17 bf a4 cb fc 3f de 5f de c2 16 b5 ae 2a 03 4c 6e d1 42 c0 b9 25 65 59 56 99 cc 80 5f fa f5 1b 8b 72 23 e9 a0 c5 32 b7 f5 e6 18 fc c3 2b ba 28 eb f3 cc 80 4f 32 5e 08 62 e9 3d 3d cd 32 ad a0 40 24 69 ef 78 89 9e ac 32 35 8e c1 ea 9c 88 0d 89 e6 3c 75 de 67 0f 5d 33 03 16 b4 25 43 2b 73 7a 89 88 d6 ea a6 76 6f ae c3 59 c0 1d 2e ac 5f 64 a6 26 ef 2b 0a 82 88 63 f2 3b d5 dd 3b ff 58 02 52 69 ac 6f 39 f5 04 9a 12 4c 3d ea 32 dd 2d 37 0b 01 2b 22 01 5e 93 52 1a 17 47 45 43 ef a5 5b 9f cb 11 54 c4 cd 4f c6 16 38 8d 7b d3 1a 63 58 01 54 a1 18 e4 19 c9 0d e0 c3 3c 0b 15 0a 69 05 68 3c e8 59 08 18 a0 8f f0 fc d1 cd e1 f0 c0 83 c0 c9 20 e8 ce 43 43 2c f8 bf 7a e6 0d 8f 6c bb ab f8 ee 96 Data Ascii: DS[nU\s+b?_*LnB%eYV_r#2+(O2^b==2@$ix25<ug]3%C+szvoY._d&+c;;XRio9L=2-7+"^RGEC[TO8{cXT<ih<Y CC,zl
2024-05-27 22:43:44 UTC	234	IN	Data Raw: 24 9f 36 76 fb 7c ea 0f 41 a8 a4 fe e4 60 2e dc 8e ca a3 f2 d4 8e 2d d3 6d 4a 33 96 ea f6 f0 46 d0 5b 50 5d 55 aa 70 5e 4f 9e 60 f2 f0 df c5 4e 75 35 0f 5a 82 74 b4 9f ea 5b 8b a8 3e bb 00 2d 87 48 a1 81 9e 3b 55 47 d1 7b df 1f 85 07 e7 47 b9 9d 38 7d 52 36 bf bc 19 78 af 99 26 cd c4 d9 ba 99 95 04 72 11 da 7f 21 6e e1 42 a4 50 80 2e 7e 2d ad 3a a8 38 38 12 c0 ce 1e d8 39 0f 0a 40 21 9d 7a 48 a2 e6 c2 4a 5c ad 50 2a 8d e2 ab 07 48 74 9f ec d8 bb 87 19 8c 7d 5a 18 84 f6 01 7d 40 d4 ba 3a db dc 83 c0 d7 81 de 14 6a bc e5 ec 43 c6 89 79 84 22 1b 65 fc 34 b6 cc 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 4c 13 fe 0d 7c 14 1b ed 8a e5 db 38 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: $6v\|A`.-mJ3F[P]Up^O`Nu5Zt[>-H;UG{G8}R6x&r!nBP.~-:889@!zHJ\P*Ht}Z}@:jCy"e4c1c1c1c1cL\|8IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50279	142.250.185.134	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	639	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:38:12 GMT Expires: Mon, 27 May 2024 22:53:12 GMT Cache-Control: public, max-age=900 Age: 332 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50274	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	795	OUT	GET /iP-z8txDr3nlls3-oUo38PkHRmEyAJ0biVE52VyF_jPV8IYzANODEi8arqixXSn27AspqpmvG-7jbouNAUB1HicnS1dh3LZ4C_WsPKVZ1ik_2CmO=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4883 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:02 GMT Expires: Tue, 28 May 2024 22:42:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 102 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 02 00 00 00 b6 06 a1 85 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 12 60 49 44 41 54 78 9c ed 5d 7b 70 5c d5 79 ff 7d e7 ee 4b ab d5 6b 25 5b 96 64 49 96 91 5f 08 87 f8 51 1c 5e 06 43 5d 98 69 31 84 16 8a 87 e9 a4 a4 79 4c ca a4 d3 69 87 06 4a 07 66 28 33 ed 14 d2 34 a5 4d 48 db 29 d3 66 0a 24 85 29 c1 90 ba 84 f8 15 83 b1 11 8e 63 05 b0 91 b1 25 03 b6 f5 b0 Data Ascii: PNGIHDRxxsBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2`IDATx]{p\y}Kk%[dI_Q^C]i1yLiJf(34MH)f$)c%
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 79 9f 54 fe d9 c8 d9 65 d1 66 e7 19 77 a2 fb 26 06 20 42 2e 97 05 3e 62 1a 87 78 2a 38 7a 5b e8 ec 8a c0 d1 90 40 d1 3a b3 09 8f 11 62 12 27 12 6b 77 c6 1a 1f 8a 57 55 42 ae 20 37 ba 45 e8 dc 44 ff 0c 88 8e 27 e2 4e f9 1e 05 75 b3 78 31 dc 77 47 f9 81 30 25 98 21 a1 a8 b2 f8 bc d8 0d 0c 3f b8 23 d0 75 55 b0 eb 1b 1c da 31 b9 69 fb 54 fd 0a 92 55 76 2f 13 f1 44 dc d5 80 7b 30 64 96 b6 23 9d 2c 6e 57 e2 c3 75 6f fe 7e 64 6f 10 aa ca 3e 0d 3e 2e 42 ad f0 04 83 34 f8 54 f6 85 90 b8 2f b2 77 b8 ee cd db 94 78 27 db 09 74 52 97 82 57 d6 61 61 b0 53 fa 9e 0f 0f fc 63 ed 8e 4a 1a 52 d9 c7 0b fb 01 18 43 a8 ec ab a4 e1 67 6a 77 3c 1f 1e e8 94 b6 09 9d bb f3 e5 a6 ac 53 2a bb 2a 7a b6 57 ec 51 a5 4f ce f9 d1 57 d1 40 42 51 a5 6f 7b c5 9e 5d 15 bd 0e ae 5d 90 83 e8 Data Ascii: yTefw& B.>bx8z[@:b'kwWUB 7ED'Nux1wG0%!?#uU1iTUv/D{0d#,nWuo~do>>.B4T/wx'tRWaaScJRCgjw<S*zWQOW@BQo{]]
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 51 bd fa c4 15 bf 57 21 bf fd f5 89 4f 37 8c 74 b7 9f ef 6c e8 ff af b2 f8 71 55 81 14 ad 52 54 5f e2 39 0c 71 3c 34 7d 74 e7 c6 37 ee 59 7a eb 4d 6a ac ca 7d 62 32 73 8f 66 80 99 09 00 11 bb f5 94 85 59 06 60 17 16 02 83 c1 20 85 38 c2 5a 84 b1 44 aa 0c ec 2e 6f 7a 2d d2 dc d7 bc 75 12 0f df 3f 3d f0 85 b1 93 ab 87 ba 9a fa ff af 7a ec 27 52 40 13 f5 52 d4 b1 28 bb a4 1e 25 28 6a 4f 32 f8 b9 c7 b7 f6 be 14 6e 70 c8 45 5e c8 29 1d 2e 2a 01 23 3c b2 e1 d7 e6 b3 64 aa 62 72 76 98 14 a6 0e 2a 80 f7 83 d5 ef 2e da 38 5c bf a9 6f cd 57 b7 26 c7 6f 1e ef 59 3b 7c ac 65 60 5f fd c0 b3 04 a8 be 88 14 8d 52 54 5c d4 c4 91 43 d3 9d 27 da fe ee 81 ab be 19 62 6e d7 12 b3 b3 92 33 eb 60 3d eb 20 dd 4f 01 7b 78 64 43 43 60 71 44 5d 66 c0 e4 fe cb 3c 02 cc 01 68 d5 9a Data Ascii: QW!O7tlqURT_9q<4}t7YzMj}b2sfY` 8ZD.oz-u?=z'R@R(%(jO2npE^).#<dbrv.8\oW&oY;\|e`_RT\C'bn3`= O{xdCC`qD]f<h
2024-05-27 22:43:44 UTC	1243	IN	Data Raw: 68 f9 cc 86 1d 9a 0f 96 2e 86 9e 78 11 ad df 8e 69 75 ce ee d7 c6 f7 d4 12 bf fd 2c 99 ba 24 23 1e f6 00 08 43 28 32 05 cd 71 d0 3e b1 67 ab 95 c2 60 3e 2e 97 6b 66 68 e1 8f 8c 83 fa a3 6e dd ed d9 fc 6f 9a 44 ca 8c 80 cc 59 6b a6 6c fb c2 c8 e8 8b 5d cd 61 5c c5 a5 ee 2c e0 5a df cb e8 7c 8c 80 fc d6 3a f4 e0 66 d1 6b 47 78 d2 fd 3a 3d f1 73 fa 9d ae 3f 16 1b 16 63 ba 6f 3b 5b 62 1a 13 9c f9 34 7b b8 72 37 67 42 b3 18 c8 ea d1 26 17 4a e7 bd 64 39 98 ca 34 4c 59 9d 59 0f 4c 66 d8 ee 95 46 b2 e2 14 65 36 fa c8 30 64 14 32 df 4b 66 b4 5c 2a c8 d2 16 8f cd 42 82 32 6a c9 66 87 32 05 b6 cc 27 d6 73 0c 8b d0 c2 4e 82 55 9d 4d 74 3b db c7 e9 e7 b7 96 8a 16 15 32 22 e3 a5 c4 33 98 21 3c 5e 8f 75 27 ba 3c 4c 90 99 30 05 d8 c6 38 db c6 7f ba 94 c5 d9 1c 1f ec 43 Data Ascii: h.xiu,$#C(2q>g`>.kfhnoDYkl]a\,Z\|:fkGx:=s?co;[b4{r7gB&Jd94LYYLfFe60d2Kf\*B2jf2'sNUMt;2"3!<^u'<L08C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50275	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	554	OUT	GET /l7AGEV3K2ayj5g1Vb4nsrQs5WyHTr7Bl65GhPxO68pDZDsVurAbsSOTwmXnjK8qMt2gahvRxN9y3nnd1G118dLTtN5k8-j7MLD0qMl4=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:44 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 7323 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:38:38 GMT Expires: Tue, 28 May 2024 22:38:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 306 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:44 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1c 52 49 44 41 54 78 9c ed 9d 7b 90 1c c7 7d df 3f dd f3 d8 d7 ed 3d f0 06 08 52 24 01 90 14 08 90 20 04 91 22 45 33 34 49 9b b2 54 25 3a 51 ca a5 54 8a 55 4c 5c 21 a5 bc 2a 72 24 55 fe b2 ca 7f a5 92 a8 e2 2a fd 61 2a 2c a7 a4 a2 4b 89 a9 28 b6 4b 96 13 90 92 a8 d8 e0 0b 7c 8a 00 28 81 a0 08 80 78 92 c0 dd e1 f6 f6 f6 39 33 dd f9 63 6f 16 b3 b3 33 b3 b3 77 7b 7b 0b 19 df aa c1 dd cd f4 f4 eb db fd eb df a3 a7 01 57 71 15 57 71 15 57 71 15 57 b1 1a 10 ab 5d 81 5b fe c7 73 99 4d d7 6d 5c 97 95 76 ce 90 52 68 94 d0 28 34 2a cd eb 5a 84 9a a0 35 68 45 57 cb 74 ca a6 ea c5 2b 0c 2f 6d 4f 69 81 a7 3c 55 77 9d Data Ascii: PNGIHDRxx9d6sBIT\|dRIDATx{}?=R$ "E34IT%:QTUL\!r$Ua,K(K\|(x93co3w{{WqWqWqW][sMm\vRh(4Z5hEWt+/mOi<Uw
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 27 72 4c 66 4c 44 c2 4b 02 98 b2 4d be 3c 91 65 be 8f 59 3c 8a 33 35 0e ab 42 b0 8e b8 d2 bc 93 94 97 0f 05 20 05 0f 8f 67 98 b2 8c 64 71 af 61 ca 36 f8 9d f1 0c 08 d1 15 81 be d2 d7 5f 18 a1 19 9c 84 7e fa 79 46 c3 67 f3 16 d7 e6 2c 6c 71 f9 5d 29 e0 54 c3 e5 83 86 8b 6f 19 69 20 23 04 1f cb d9 3c 98 b3 98 5b 06 a3 d1 cb c0 ea 8f 90 91 26 b8 d7 ec 8e 7c a6 35 ff a8 98 61 43 c6 24 a8 38 9b 42 f0 fd 99 0a 3f 98 a9 62 06 4c 26 a5 35 1b b2 26 bf 37 9e 4d 5d a7 2b 09 23 4b 70 af 8e 8c 7a 5e 03 76 64 0c 6e 2e d8 14 0d d9 4e 23 80 b2 d2 fc f9 6c 95 ff 39 5b a1 ac 74 47 ec b9 68 48 6e 29 d8 5c 63 99 54 fd fb 57 1a 93 31 18 09 82 fb 5d 93 e3 9e 2f 28 cd 3f 1d b3 d9 92 b3 3a fc cf 86 10 1c 28 d5 39 d6 54 1c 6b 2a 0e 94 6a 18 1d 8e 0f cd 96 9c c5 63 63 76 97 bd 9c Data Ascii: 'rLfLDKM<eY<35B gdqa6_~yFg,lq])Toi #<[&\|5aC$8B?bL&5&7M]+#Kpz^vdn.N#l9[tGhHn)\cTW1]/(?:(9Tk*jccv
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: db b7 6f ff 27 96 65 fd 2b c3 30 3e 69 18 46 af 57 80 96 bd a7 94 6a ff 54 f5 1a 07 77 dd c3 cf af bf 05 2d 64 64 c1 bd 98 9f f5 14 2f de ba 91 3d f9 ce b8 2f 02 5e 9d a9 f2 d0 7b 33 29 5b 15 57 e9 d6 3f 3f d9 b1 8e 3b d7 e6 3b 2a 64 08 c1 6b 0b 75 ee ff c5 47 8c 1b dd 82 2f d5 ec 55 8a dd ef be c5 1d 6f 3c 0f 99 1c 7e 5f 4a 79 39 bf 38 3b d9 bf af 94 02 f8 b9 d6 fa 4f f2 f9 fc d3 df fc e6 37 1b 49 4d 4a 9c c1 5f fd ea 57 ef c9 66 b3 7f ec 38 ce 9d e5 72 b9 2f 23 dd f7 52 29 a5 50 4a 21 1a 35 aa f5 3a fe 21 74 fd 8a ad 92 d6 4c e6 33 ec c9 db 1d e4 4a e0 42 d3 e3 87 f3 0d 30 04 53 09 b3 38 4d 99 73 4a f3 7f e6 1b dc 58 cc b0 21 e0 44 f1 b4 e6 93 63 59 c8 d9 cc 37 5c c6 43 c1 89 b4 e5 d5 5d 97 b9 4b b3 e8 4c 1e 29 25 42 88 f6 15 5b ef 50 01 52 ca 3d 99 4c Data Ascii: o'e+0>iFWjTw-dd/=/^{3)[W??;;*dkuG/Uo<~_Jy98;O7IMJ_Wf8r/#R)PJ!5:!tL3JB0S8MsJX!DcY7\C]KL)%B[PR=L
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: 56 37 b0 8e 47 45 fa 96 1d 0f f6 2b a1 b5 26 97 cb 71 cf 3d f7 b0 7d fb f6 f6 3d ad 35 9e e7 e1 ba 2e ae eb e2 38 0e 27 4f 9e e4 85 03 07 d8 7c fa 57 fc c3 1f 7e 87 97 ef ff 5d 16 36 5e 83 d4 9d 9f 5e 2f 57 d3 eb 87 d8 34 13 25 0d b9 1a 81 12 50 3c 77 8a df dc ff 0c c5 d2 34 ae 90 7c 62 df 3e ae b9 e6 1a 0c c3 68 5f 61 33 e9 d4 a9 53 1c 3d 7a 94 46 a3 91 4a 52 06 c9 8d 4b df 25 b4 fd 18 6e bf d0 5a 33 36 36 c6 e4 e4 64 9b 48 9f d4 45 db ba 9d f6 fa eb af 6f 6d 6e b3 6c c6 e7 67 b9 ef c7 df e7 9a f7 df 41 2b 17 6f d1 1d b9 1c 72 35 7a a0 e4 a6 a9 8f 06 94 10 a0 5c b6 be fb 36 77 ff e8 cf 28 96 67 c1 ce a0 b4 66 cb 96 2d 1d d2 2c 38 e0 fd 3e 2a 16 8b e4 f3 f9 c5 3a f5 d2 13 74 58 0a 68 15 21 05 07 ba a3 23 ca 0f ed 87 c3 b4 d6 48 29 b1 2c ab 43 24 79 42 90 Data Ascii: V7GE+&q=}=5.8'O\|W~]6^^/W4%P<w4\|b>h_a3S=zFJRK%nZ366dHEomnlgA+or5z\6w(gf-,8>*:tXh!#H),C$yB
2024-05-27 22:43:44 UTC	1390	IN	Data Raw: eb 84 4d a1 7c 89 3b 7e fa bf 98 28 3d c8 91 5d fb 90 96 1d bb 2e c7 75 b3 12 02 dd 6c b2 e7 d0 2b 5c fb f2 7e 32 1a 84 6d 77 88 61 bf dc 30 b1 4b 25 37 49 4a f6 49 6e 2c 06 16 0f 0e 57 20 89 f8 a8 4a 47 e5 19 95 4f 50 b1 f1 bf be f0 84 20 eb ba dc f4 ea 73 14 6a 0b 1c b9 ed 4e aa 85 09 24 97 77 fb c4 75 85 66 31 12 54 9e e3 e3 6f bd c4 a6 37 ff 16 d3 b0 c0 bc 6c f2 84 cd 1f bf 6e 49 7d 10 7e 16 74 e6 f8 7f c7 ad df fd 92 db 97 a3 63 39 a2 58 4a c9 ba 75 eb 58 bf 7e 7d 62 ba e9 e9 69 ce 9f 3f 1f e9 e5 f1 e3 ca 9b 36 6d 6a 3b 3b 82 9d e4 5f 8d 46 83 93 27 4f d2 6c b6 0e 3c 13 42 20 a4 e0 da b7 5f 20 b3 30 cf d1 3b 3e cd 87 6b 36 b4 42 75 31 f5 50 b4 3a 71 fd cc 47 6c 7f ed ff b1 fe dd 37 11 99 1c 42 1a ed ba 65 b3 59 36 6f de 8c 65 59 b1 22 b9 d1 68 30 33 Data Ascii: M\|;~(=].ul+\~2mwa0K%7IJIn,W JGOP sjN$wuf1To7lnI}~tc9XJuX~}bi?6mj;;_F'Ol<B _ 0;>k6Bu1P:qGl7BeY6oeY"h03
2024-05-27 22:43:44 UTC	903	IN	Data Raw: 07 ff 5e 0a b9 fe cf d4 fb a2 57 7a 4d 75 1c 87 7b ef bd b7 c3 2e bc 12 d0 68 34 28 97 cb ed 23 16 82 1d 1c 26 21 f8 ac 54 2a 71 f0 e0 41 2c eb f2 b6 83 41 92 bb 64 2d 7a a5 e0 38 0e 3b 76 ec 88 5d db 46 19 6b d7 ae 65 7e 7e 9e 6a b5 0a d0 e1 dc 88 73 3f ae 5d bb 96 17 5e 78 a1 4d f0 4a 90 cb 20 76 55 0e 0a 61 c3 fe 4a 81 1f 67 9e 98 98 40 4a 49 f0 24 fc b0 42 95 d6 e2 48 22 37 78 bf 07 b9 40 f4 61 08 bf 16 e1 c2 95 44 14 51 52 4a c6 c7 c7 b1 2c 8b 4a a5 d2 f6 43 87 d7 e5 a8 bf 83 e8 45 6e 9c 76 de 8f a5 13 fb f9 e8 28 3a 35 86 89 34 5e b4 7c be f5 1f 6b 2c 2c 2c 10 3e 40 7d 10 e4 c6 b9 3f 63 82 1e 4b fb 00 3c ae 82 bf 8e 58 ca 92 91 cd 66 31 0c a3 43 53 8e b3 49 7d 24 29 46 bd c8 ed 17 cb 8a 07 2f b7 f0 51 c1 72 75 01 cb b2 28 16 8b 18 86 41 bd 5e ef 7a Data Ascii: ^WzMu{.h4(#&!T*qA,Ad-z8;v]Fke~~js?]^xMJ vUaJg@JI$BH"7x@aDQRJ,JCEnv(:54^\|k,,,>@}?cK<Xf1CSI}$)F/Qru(A^z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50285	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:45 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:44 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:45 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50283	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:45 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:44 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:45 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50287	172.217.23.118	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	695	OUT	GET /vi/KKfAuQrwzTY/sddefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 25064 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:34:27 GMT Expires: Tue, 28 May 2024 00:34:27 GMT Cache-Control: public, max-age=7200 Age: 557 ETag: "1652115046" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	733	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0d 0a 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 08 0d 0d 0a 0d 08 08 08 08 08 0d 08 0a 08 0d 10 0d 08 08 0e 0a 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 08 0f 15 0f 0f 0f 12 15 12 15 12 12 12 15 15 15 15 12 15 15 15 15 12 15 15 15 15 15 15 15 15 12 15 15 15 15 15 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 e0 02 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 02 04 01 05 06 07 08 ff c4 00 56 10 00 02 01 02 02 05 07 07 06 09 08 09 05 00 03 01 00 01 02 03 11 04 21 05 12 31 41 51 06 61 71 81 91 a1 f0 07 13 22 52 b1 c1 d1 42 62 92 a2 a3 Data Ascii: JFIF"V!1AQaq"RBb
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: f7 13 a5 83 d6 76 bf 77 de 37 41 95 50 36 33 d1 96 f9 5d df 79 bd d1 bc 8c 55 62 a4 ab 5a fb 57 9b bd ac ed eb 93 92 ad 44 67 b3 91 03 b9 5e 4f ff 00 3f f6 5f c4 08 f9 3e be 5e 7f ec bf 88 5d f0 bb 25 c3 01 de 2f 27 7f 9f fb 2f e2 19 fe 8e bf 48 fb 2f e2 0d f0 6c 97 04 07 7f 0f 27 17 ff 00 88 fb 2f e2 11 a7 e4 ee f7 ff 00 48 d8 da ff 00 65 c3 ff 00 90 6f 85 d9 67 04 07 a1 2f 26 9f a4 7d 97 f1 0c af 26 9f a4 7d 97 f1 46 f8 38 ec f3 c0 3d 16 3e 4c 7f 48 fb 1f e2 93 7e 4b bf 49 fb 1f e2 8d f0 71 d9 e6 e0 7a 44 7c 96 fe 93 f6 3f c5 18 bc 95 7e 93 f6 3f c5 1b e0 e3 b3 cc c0 f4 bf e8 ab f4 9f b1 fe 29 25 e4 a3 f4 9f b1 fe 28 df 07 1d 9e 64 07 a6 ff 00 45 1f a4 fd 8f f1 4c ff 00 44 df a4 fd 8f f1 46 f8 38 ec f3 10 3d 3d 79 25 fd 27 ec 7f 8a 67 fa 25 fd 27 ec 7f Data Ascii: vw7AP63]yUbZWDg^O?_>^]%/'/H/l'/Heog/&}&}F8=>LH~KIqzD\|?~?)%(dELDF8==y%'g%'
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 4b cb fc 97 e8 1a 38 88 55 75 69 a9 b8 c9 28 df 5b 24 e3 77 b1 f1 f6 1c 3e 91 a5 ab 3a 89 6c 53 9a 4b 82 8c e4 97 72 47 a9 f9 20 c3 b8 c3 11 16 ac e3 53 55 ae 0e 29 c5 f7 a3 cc f4 ba fc 6d 5f ed 2a 77 54 91 d7 4e d9 d4 b3 9d e3 e4 87 4d ca da 2a b6 0f 0d 88 8a 57 8a f3 73 b7 0d 8a f6 f9 d1 5f 48 67 20 70 ab f0 5c 6c da 4d ea 38 a6 ed ba 9b 6f 6e cc cb 7c 81 4b 13 85 af 86 93 57 b3 71 e6 d6 57 8b 5c ea 49 1b 3d 0d a2 e7 87 d1 b5 f5 d3 8c e5 0a 92 92 7b 57 a2 d2 ee 39 5a f8 8d bf 76 e2 b9 98 b7 d9 e5 36 3d 3b 90 fc 98 c3 2c 3f e1 15 d4 67 ad 17 27 af f9 34 e3 1b ec 5c 72 da 79 9d 8f 5a c3 3b e8 97 fd 84 fb b5 8e be a2 66 22 22 27 bc b1 a3 11 99 cf 84 b0 74 74 5d 69 28 42 14 5c 9e c4 a3 66 f2 dd 7d e7 03 cb dd 03 1c 1d 55 18 36 e1 34 e5 14 ef 78 e7 66 af f2 Data Ascii: K8Uui([$w>:lSKrG SU)m_wTNMWs_Hg p\lM8on\|KWqW\I={W9Zv6=;,?g'4\ryZ;f""'tt]i(B\f}U64xf
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: cd c6 bd 66 71 1d 59 9d 2b 44 66 7a 38 c8 9e d9 c8 9f fd 2d 0f d5 5e d3 c5 12 3d a7 90 99 e1 28 f3 47 d8 d9 cf d4 fb 7e 5a d0 ef 2e 9e 31 07 02 54 f6 19 67 27 a1 63 43 47 d3 5d 0f d8 74 f7 cb a9 7b 73 cd 9c d6 89 fc b5 d6 74 50 9d bc 7c 4f 2e b7 77 b3 43 b1 b4 67 96 d5 1d bd 3b 1f c0 55 1a 8b 2d f6 dc b6 f7 5e c0 a6 df c3 2e 73 32 95 9a c9 6d f7 3d c8 e0 f4 19 4e 77 7c cf 6d c5 46 16 6f e3 7e 06 7c e5 b7 af 0c 5d 69 df 64 92 e8 bd de ed cf 60 c2 e5 39 a8 df 36 d7 66 fb 6c 30 ed ba fb d6 6b 85 fe 24 66 9a 4a f2 79 f5 0b 8d 7b df 6e d7 bf 9b 8a 2a 0a 73 77 cd 64 94 77 6c b5 f7 18 85 44 f9 bb 56 dd 9d e2 5e 29 26 b6 f6 bd e9 58 c3 ab 76 bc 74 03 26 b8 d9 77 77 e5 9a 23 51 5e 3c 2d cc fa 37 89 af 35 b2 ef c3 e0 26 35 3e 77 b3 8b fb 82 65 8a 75 1c 55 bc 6d ed Data Ascii: fqY+Dfz8-^=(G~Z.1Tg'cCG]t{stP\|O.wCg;U-^.s2m=Nw\|mFo~\|]id`96fl0k$fJy{n*swdwlDV^)&Xvt&ww#Q^<-75&5>weuUm
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 37 09 1c d1 5e 82 cd fe b3 fd a6 59 a5 2b 11 a5 0b 2d 8f 6b ef 6d 84 6a e9 d0 53 ab 55 35 7b 24 d7 d1 88 fc 1e 8d 8d 58 26 ef 9e 6e cf 86 5b f9 91 3d 11 0b d5 ac f9 ed 6e 16 56 cf 86 c2 df 26 21 6a 59 b5 93 97 66 bc 86 16 62 1c f5 6d 12 a7 59 d3 82 7a aa da cd bf c9 ba bb e9 67 51 a3 74 3d 3a 4b 28 dd f1 79 be fd 85 7e 4c 25 3f 3b 53 d7 9b ec 59 2e a3 a1 a5 49 5b 31 29 14 88 ec af 15 61 d4 96 4b a3 db 99 8a b1 56 bf 8c f2 43 69 ac 83 50 2a 2b b4 32 11 33 0a 63 12 66 55 15 12 71 81 95 12 6a 20 10 43 a3 11 71 a6 c7 d3 a4 f8 f8 ea 20 cc 22 58 c1 d3 d6 52 be 6b 87 77 b8 84 69 b2 cd 18 28 c5 af 1e 3e 21 a8 2d c3 9e ef ab 2d db b6 74 13 84 4c 4b a3 b0 94 2f b7 57 2e ac fe e0 89 24 4a 4e ca e4 6a d4 b2 fc 97 7e 7b 74 2d 8c 9d 2c 2d ec de 76 4b 6f 1e 82 aa 74 21 Data Ascii: 7^Y+-kmjSU5{$X&n[=nV&!jYfbmYzgQt=:K(y~L%?;SY.I[1)aKVCiP*+23cfUqj Cq "XRkwi(>!--tLK/W.$JNj~{t-,-vKot!
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: ee d3 0a 24 da b9 38 c0 08 28 92 48 64 69 92 8c 49 95 41 44 ca 88 eb 12 54 c8 b8 25 47 c7 f9 19 51 1d 18 92 54 c8 11 aa 2a b5 45 1c df 8b 2b be a0 d2 f8 a5 46 12 9c 9d 92 59 b7 6b 2b 26 ef 9f 8c cf 0b d3 3c bc ac a6 da d6 6a ef 6b f4 5e 7b a3 1b 5e 3c 14 af cf ce 88 ca 4c e1 77 ca 96 94 c6 4e b3 a5 09 c9 52 bb 94 63 49 b5 27 14 a2 9b 9a a7 e9 38 a9 29 2b 49 ed 8c b2 c8 e4 30 d8 9a d8 69 a9 54 75 15 9c 64 9d 45 34 dd 9a 92 f3 6e 5b 6f 6d bc c1 a2 39 43 5e 13 9c e1 f9 55 1d e5 75 7c ae dd 96 b6 c5 76 cd e5 3e 51 62 a7 ac aa 28 d4 8c f5 6f 19 c6 0e 31 d4 77 f4 17 c8 7b 55 d7 13 73 38 e8 cc 46 7a c6 5e dd a1 f4 a5 3a d4 e9 4e 2f fd a5 35 34 b3 6d 27 15 7d 6b 6c b5 d2 36 4a 07 82 72 63 4c cb 0d 52 31 bc a9 46 6f d2 49 b8 c1 b6 da 4d 2b 35 1d a9 ea ec bd f8 9e Data Ascii: $8(HdiIADT%GQT*E+FYk+&<jk^{^<LwNRcI'8)+I0iTudE4n[om9C^Uu\|v>Qb(o1w{Us8Fz^:N/54m'}kl6JrcLR1FoIM+5
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 10 e8 0a 82 1f 4c 8a 9c 73 1d 62 30 b0 d8 91 a4 a9 a1 d0 41 4e 25 88 c1 01 08 a1 a9 91 48 6c 62 04 a0 c6 53 42 f5 7c 67 ee 27 18 e4 41 38 c7 81 62 9c 05 d1 87 c3 dd 91 76 14 b8 05 86 21 12 c5 28 f8 eb df c0 54 29 dd f8 f0 cb b4 e9 db c7 8e 7e c0 31 18 16 69 42 de 3e 1b 05 a8 f3 af 19 e5 cf 6f 68 ea 54 d8 5c 1d 49 16 21 4c 5d 38 16 29 53 32 d2 13 a7 e3 80 46 98 c7 1b 8c 8c 6c 15 05 02 6a 03 23 4c 64 60 40 a5 4e c3 23 01 b1 89 35 02 29 4a 26 75 47 28 92 51 22 92 a9 92 d4 1f 18 13 51 24 ab e7 ef 2c 3a 39 c7 1f 39 7f 59 46 9c 97 0b da 74 bf e9 1c 25 1c 25 be 5c ae b6 ec f6 1e 87 e5 87 06 e3 8b ab e9 49 a7 a9 24 9c a4 d5 3d 78 6b 4a 30 52 fc 88 eb 37 2b 2c bd 23 85 8e 8b bb cd c9 df e7 49 5f b3 71 da b2 e3 6a ba 0e 4e cf 5a 71 a7 74 ef b1 f1 bf de 47 4e a8 53 Data Ascii: Lsb0AN%HlbSB\|g'A8bv!(T)~1iB>ohT\I!L]8)S2Flj#Ld`@N#5)J&uG(Q"Q$,:99YFt%%\I$=xkJ0R7+,#I_qjNZqtGNS
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: a6 fb 22 94 7d b7 39 7a 2b fd 64 ff 00 b4 97 fc a6 77 1c 9c a5 a9 42 9a f9 b7 fa 57 97 bc e2 29 3f f5 93 fe d1 ff 00 c9 37 11 d1 9c e6 65 bd e5 fd 1b d1 8c bd 59 ae c9 a7 1f 6d 8a 3e 4f 71 36 96 af 3b 5f 4a 37 5d f1 3a 0e 52 d0 d7 c3 d5 5f 37 59 74 d3 b4 ff 00 c2 70 fc 94 c4 ea 54 5d 4f e8 bc fb 9b 31 78 eb 96 b4 e7 35 c3 d5 a2 3a 92 15 12 d6 1a 27 47 06 c3 07 1b 17 63 22 a5 21 91 99 87 48 3e 53 21 29 8a 94 85 ca 64 57 84 c4 64 44 c4 6c 0f 73 c2 6d fc 75 97 a7 bf a9 77 36 50 5b ba 57 b4 d8 62 1e 7d fe e2 4a b9 ee 50 e7 56 8a 5c ef bd 7c 0e 9b 09 4f 3b b3 9b c7 bb e2 69 ae 11 f6 b6 fd c7 51 44 8b ec b4 98 da 71 13 01 d1 64 53 e2 3a 88 9a 63 e9 c4 8d 1d 49 5c b1 4e 22 54 87 52 a8 b7 e5 e3 98 8a b1 0a 65 8a 54 fa 17 4f dc 52 78 b8 ad 8e ef 82 b7 50 d5 59 ec Data Ascii: "}9z+dwBW)?7eYm>Oq6;_J7]:R_7YtpT]O1x5:'Gc"!H>S!)dWdDlsmuw6P[Wb}JPV\\|O;iQDqdS:cI\N"TReTORxPY
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 9f 37 b3 de 58 a7 4d 70 31 08 16 29 47 c6 44 ca a1 4e 82 e0 bb b7 f1 e7 b5 cb 10 8a 8a ca 3d 96 cf 9b d9 b4 9d 38 0f a1 4f b7 ab 2e 9e 04 cb 58 2b 0d 0b bb be cb 6d 7b 17 4f dc 5c 92 d9 64 db e9 cb 8f 8b 11 a7 1b ec 71 db 9e de 9c ac b8 16 a3 4f e7 76 29 7c 3c 64 17 03 0f 1e 3d dd ae e5 a8 53 31 46 96 cb 6c b7 de db be f6 5b a3 4c 28 a5 11 f0 87 47 62 33 18 2e 7e d5 f0 2c 52 8f 33 eb 6b e0 06 21 01 d4 e0 32 14 7c 64 35 43 c7 c1 20 15 18 0c 51 27 18 8c 84 00 5c 29 f3 78 e6 1d 08 d8 9a 81 35 00 14 f9 ff 00 cf b0 9c 61 6d af 9f a0 6a 8f 5f 77 65 8f 3c f2 ab ca 6d 47 f8 2d 37 e9 38 eb 56 69 fa 5a ad 5e 10 4f 65 da cd ae 0d 71 66 a9 49 b4 e2 19 b5 a2 b1 99 3f 96 7e 50 21 87 4d 51 5e 71 a7 67 3f 91 17 f2 b5 7d 79 25 7c f6 74 9c c7 28 f5 f1 19 ce a4 dd d5 d7 a5 Data Ascii: 7XMp1)GDN=8O.X+m{O\dqOv)\|<d=S1Fl[L(Gb3.~,R3k!2\|d5C Q'\)x5amj_we<mG-78ViZ^OeqfI?~P!MQ^qg?}y%\|t(
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 4e 1a 22 bc f6 ae b9 4b e3 99 ba d0 7c 96 94 b6 d4 b3 e6 4d d9 a7 c5 b4 cb b7 1d ed fa 6a 2b 69 ed 57 bc d3 a6 32 31 db e3 d8 78 45 6a 72 83 69 d4 ab 74 da ff 00 69 3d dd 64 a3 39 7f 5b 57 ff 00 b2 7f 13 5b 63 cb 39 7b ce 12 9e 4b 9f 3e de 25 d5 0b 9f 3d 59 bf f7 95 7f fb 27 f1 23 f8 3a df 29 be 99 cf e2 36 c7 9f d1 ba 5f 48 d1 56 db aa ba 1d fa 2f 64 5a a5 25 c5 76 a3 e6 5f c0 e1 cf d7 29 7c 41 61 21 c1 fd 29 fc 4b b6 3c fe bf ed 37 cb ea 18 4d 7a d1 5d 2d 0d 55 a1 eb 47 e9 23 e5 c5 85 a7 ea f7 cb e2 32 18 5a 7e af d6 9f c4 6c 83 7c be a6 a7 5e 32 d9 24 fa 1c 6f d7 61 f4 da 67 ca f4 f0 d4 fd 5e f9 7c 76 8f 86 1a 9f 07 f4 a7 f1 1b 23 fd 84 df 2f a9 1d 54 b7 ae d5 ec 64 95 78 fa d1 5c da d0 f7 33 e5 d8 50 a6 f7 3f a5 3f 89 3f c0 e9 fa bf 5a 5f 12 ec 8f f6 Data Ascii: N"K\|Mj+iW21xEjriti=d9[W[c9{K>%=Y'#:)6_HV/dZ%v_)\|Aa!)K<7Mz]-UG#2Z~l\|^2$oag^\|v#/Tdx\3P???Z_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50284	142.250.186.65	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:44 UTC	770	OUT	GET /viNp17XpEF-AwWwOZSj_TvgobO1CGmUUgcTtQoAG40YaYctYMoUqaRup0rTxxxfQvWw3MvhXesw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 2663 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:00:29 GMT Expires: Tue, 28 May 2024 21:00:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 6195 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	848	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0e 09 0a 08 0d 0a 0a 08 08 08 0a 0b 0b 0a 08 08 08 08 0a 0a 08 08 08 08 0a 08 08 0a 0a 08 08 08 0e 08 08 08 08 0c 0a 0a 08 0b 10 0a 08 08 08 15 09 0b 08 09 17 11 0b 08 0d 0b 0b 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 13 0d 0b 0e 0f 0f 10 10 0d 10 0d 11 10 13 0d 11 10 0e 12 10 11 10 10 10 12 0d 10 12 11 10 12 10 0f 0f 10 0d 10 0f 12 0e 10 0e 12 12 0e 10 0d 0e 0f 0f 0e 10 10 0b ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1a 00 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 06 07 08 09 05 03 ff c4 00 3e 10 00 02 01 03 00 07 04 04 0a 0b 01 00 00 00 00 00 01 02 03 00 04 11 05 07 08 12 13 21 31 06 22 51 61 23 32 41 a1 14 33 42 52 62 64 72 81 94 d1 18 43 Data Ascii: JFIFDD>!1"Qa#2A3BRbdrC
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 34 84 cf 6a a7 0c b6 96 e1 4c f8 eb 8b 89 9c 3a 47 9e 86 38 90 91 8f 8d 07 ba 2d 12 b6 1b 9e 2f 47 34 e6 8c fa cf a7 6a c7 2d 8f 68 b0 a0 38 c2 b3 e1 88 87 11 ca 3a b7 7f c5 a2 84 f0 2e 34 3f 26 a6 cd d2 7b 0c 58 b2 11 1b de c2 e7 a4 ab 71 be 41 f1 dc 98 49 1f f7 5a 92 75 85 2c 47 bb 50 77 de 27 ce a1 54 20 fb 45 b5 18 f0 e8 8d 63 87 ca 59 4a f5 b4 83 e2 aa 48 36 1a b9 17 89 1b cf 13 58 7a ef 78 8b bb 27 0d 58 66 21 03 16 dc b8 60 70 1f 7e 45 5c 16 c1 c0 89 a2 45 85 17 95 0d 2e f7 3e 6d 7a 29 bf b4 79 2b bb bd a2 c9 99 33 15 90 c8 8f 90 84 4d 45 48 f8 af 50 55 a0 e2 45 03 8e 0d e7 0d 9b d9 3e c9 c5 67 0c 70 db c6 90 41 18 c2 46 83 03 24 96 66 3e d6 76 62 59 99 b2 5d 89 24 92 49 ab 9c 28 4c 84 d0 c6 0a 01 a2 c1 27 67 63 cf 46 74 c4 cb cb 9e ec c9 ec 03 80 Data Ascii: 4jL:G8-/G4j-h8:.4?&{XqAIZu,GPw'T EcYJH6Xzx'Xf!`p~E\E.>mz)y+3MEHPUE>gpAF$f>vbY]$I(L'gcFt
2024-05-27 22:43:45 UTC	425	IN	Data Raw: c1 28 41 65 cf c9 6c 83 e0 6b 95 ae 2d 35 69 a1 51 30 e2 3e 13 af c3 71 6b b7 82 47 6d 33 1c 0d 47 05 27 bd d7 2d ec 8a 55 ef ef 0a 1e 44 09 77 0e 3e dc 61 1c 7f 95 74 3a 66 2b 85 0b 8f 6a 90 75 a9 3c f0 5a e8 ee 23 a8 78 80 0f 8a 86 8e 44 f8 b1 c9 3d 59 dd 8f 52 7a b3 b1 f6 9c 96 27 da 6b ed 67 cf cc 59 d1 c4 c4 ab ee 3c 6a 35 a9 a9 04 6a 09 cc 1c f3 cd 46 34 dd 35 19 93 d6 49 f3 27 ac 95 a9 f6 63 d9 c9 f8 91 5d de c6 d1 2c 67 7a d2 da 41 87 77 c7 76 69 93 aa 85 ce 52 36 c1 de 00 90 30 b5 b6 4d 6d a4 69 fb 3c 41 e4 b9 38 8e c1 e7 4a 73 31 a8 0e d6 b8 81 86 35 a9 d2 2c 2b 21 e4 b6 6a 65 b7 69 8b 58 75 e7 38 69 c0 1c b3 22 b4 a6 b8 aa 0a d0 12 88 94 44 a2 2f 95 d5 a8 75 2a ca ae 8c 30 ca c0 15 60 7d 84 1c 82 3f 8d 7e 11 5c 0a fc 20 11 43 92 a6 bb 47 b2 1d Data Ascii: (Aelk-5iQ0>qkGm3G'-UDw>at:f+ju<Z#xD=YRz'kgY<j5jF45I'c],gzAwviR60Mmi<A8Js15,+!jeiXu8i"D/u*0`}?~\ CG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50291	64.233.167.157	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	615	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-69658807-1&cid=1670225768.1716849819&jid=124093720&gjid=1729122249&_gid=36880739.1716849821&_u=YADAAAAAAAAAACgBY~&z=1138529095 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Mon, 27 May 2024 22:43:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50289	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	553	OUT	GET /5CsRqfMEP1Rv-PPv9G4962lyEuvb4roSLJHJQWPbmCa51AmvynfoGfoKsKiS87QhX07xQMZAeLp8qoSy7CjVZkXJ1WapQiJkroCeJw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1852 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:51:32 GMT Expires: Tue, 28 May 2024 18:51:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13933 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 06 f3 49 44 41 54 78 9c ed dd 5f 6c 54 65 1a c7 f1 ef 7b a6 d3 7f 50 fe b6 4b cb 16 5a 0a 0c 26 c6 18 c3 b2 71 35 92 b8 08 c3 5e 18 b2 bb 53 88 26 1b 63 24 66 dd c4 44 2f 8c 86 78 b3 46 2f 4c bc 30 d9 0d ab a2 de 48 d4 84 c1 68 a2 b1 07 bc 58 75 d7 b0 37 ae 22 cb 2e a0 2b a2 96 5a a0 68 95 7f d2 39 cf 5e 9c a9 34 48 67 cf 9c 39 e7 bc 67 a6 cf 27 69 48 5b e6 7d 1f e6 d7 f7 3d cf 9c 39 87 82 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 4a 17 63 bb 80 a9 64 2f 37 20 4c d8 ae 23 a4 d3 66 03 47 6c 17 71 b9 26 db 05 4c 1a e9 bd 7e 08 67 5f 9e 92 ed 4a c2 93 3d 9c 04 76 9a 0d dc 6f bb 96 49 8e ed Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx_lTe{PKZ&q5^S&c$fD/xF/L0HhXu7".+Zh9^4Hg9g'iH[}=9RJ)RJ)RJ)RJ)Jcd/7 L#fGlq&L~g_J=voI
2024-05-27 22:43:45 UTC	994	IN	Data Raw: e9 f1 9f c9 54 dd ca e7 d3 80 c3 30 30 01 fc f1 d0 00 f7 1c 5b 00 99 74 ad da a9 52 73 77 61 dd 30 70 a6 04 bf 3f b8 8a 9d e3 2d d0 94 ee 9b aa 34 e0 6a 38 f0 c5 99 59 2c f9 a8 1f 4a 99 54 af dc 49 ba 45 07 95 81 7f 8c 2d 64 c9 fe 65 e0 39 a9 ea 94 2b d1 80 83 70 e0 d5 e1 1e ae 3f d0 0b 98 54 36 53 d3 d1 80 2b 31 fe 69 ae 27 3e 59 c6 af 3f ee 82 6c ba 8f b7 57 a2 c7 e0 e9 18 ff 2c e3 1d ff ca b1 f3 9b 56 ff b4 63 1d d2 80 af c4 81 91 73 ad f4 ec 5f 0e 13 f5 d1 4c 4d 47 b7 e8 cb 65 e0 c0 f8 1c 7a fe b9 d2 7f 87 ab 4e 9a a9 e9 68 c0 53 39 e0 1e ef e1 9a fd fd fe e7 75 d4 4c 4d 47 03 06 ff 59 70 60 fb a7 7d 6c 3c d2 e5 6f c9 0d 10 2e e8 31 18 80 af ce c1 f6 cf 97 f1 c8 89 8e ba 6d a6 a6 a3 01 03 dd df ae 87 89 71 e0 3b 1a 6d 53 6b ac 7f 4d 58 2d 0e f4 ce 87 Data Ascii: T00[tRswa0p?-4j8Y,JTIE-de9+p?T6S+1i'>Y?lW,Vcs_LMGezNhS9uLMGYp`}l<o.1mq;mSkMX-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50290	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	553	OUT	GET /wbRbWxRbQyojtDDUj_ITsoMZNbSAnroic0AYABmbab8qE-sgODk26wLCYUcJrqW11-I50N3GE6iTCY_Sfa7ud4vMa9fig4YdinEa9w=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2820 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:11:40 GMT Expires: Tue, 28 May 2024 21:11:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5525 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0a bb 49 44 41 54 78 9c ed 9d 7b 8c 15 d5 1d 80 bf 79 dd d7 de bb ec ba ec 53 16 82 14 50 6c 45 23 eb ab 52 52 f7 a2 46 a3 a5 12 db b5 8f a4 69 b4 5a 4b ac 35 55 fe 69 6d eb 83 36 9a da 34 6a 83 22 68 9b d6 2a ed 96 6a 15 da 75 20 d0 50 43 64 0b d4 47 10 5c 1f b5 ba b0 77 41 57 17 58 76 67 ee 9c fe 31 77 75 81 05 ee ee de 79 dc 99 f9 36 93 6c 72 e7 9e df ef e6 cb 6f ce 9c 33 67 66 24 22 c8 b5 b6 64 80 2b 81 45 c0 7c a0 e9 a8 5d ba 81 0d c0 ba ba f5 5b 9f 74 39 bd 09 21 79 9d 80 97 e4 5a 5b 9a 81 25 c0 2d 40 a2 c8 af 0d 01 77 01 cb eb d6 6f dd ef 54 6e a5 22 94 82 73 ad 2d 1a b0 10 78 1c a8 1b 67 33 db 81 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{ySPlE#RRFiZK5Uim64j"h*ju PCdG\wAWXvg1wuy6lro3gf$"d+E\|][t9!yZ[%-@woTn"s-xg3
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: b4 4c fc 38 0e f6 95 60 43 57 cf 03 7e 0a b4 02 31 6f b3 19 1d 59 18 98 b2 c2 86 a9 df 61 5d d3 e5 ec 8c 4f a6 52 f8 4f ec 30 be 11 6c e8 6a 16 f8 15 70 26 3e 9d 58 94 c5 20 03 8a c6 33 33 96 f2 4c fd 7c fa d4 4a 92 22 ef c3 ba fd 14 5f 08 36 74 f5 06 e0 6e a0 de eb 5c 8e 87 66 1d e4 bd 44 35 ab 67 ff 9c f5 55 73 b0 94 04 71 e1 db e5 d0 9f e0 b9 60 43 57 1f 01 be 01 a4 bc ce e5 78 c4 cc 1c af 55 ce e4 37 67 3d ca ae f8 29 68 28 28 c2 f2 75 e5 0e e3 99 e0 c2 35 dc 0e e0 12 af 72 38 19 12 82 c4 50 27 6b 9b 97 f2 c4 ac 1f 92 53 12 c4 85 40 2a 0b b5 36 9e 08 36 74 b5 1e d8 08 9c ee 45 fc 62 90 85 81 c8 ef 60 c5 19 bf e5 e9 a6 ab b1 64 8d b8 65 8f 71 cb 47 af 07 82 0d 5d 9d 07 6c 01 14 b7 63 17 87 40 16 87 e9 89 d7 f2 d8 ec 8d 74 54 9f 4b 06 d0 7c 36 81 51 2c Data Ascii: L8`CW~1oYa]ORO0ljp&>X 33L\|J"_6tn\fD5gUsq`CWxU7g=)h((u5r8P'kS@*66tEb`deqG]lc@tTK\|6Q,
2024-05-27 22:43:45 UTC	571	IN	Data Raw: dd 45 aa a1 17 35 b5 87 fe 77 2f c3 32 aa ca b2 5f 0e e7 30 a9 18 44 0c 49 3d 48 bc fa 1f 54 cf 5a 85 96 de 8d 95 8f 95 db 28 29 12 7c 42 84 0c a8 28 a9 57 a8 9a b9 82 54 a3 8e 65 24 f0 e9 cb 51 47 25 12 7c 52 a4 42 35 7f 40 7a ca 6a aa 4f 7f 04 21 06 11 96 82 10 8c ba f9 89 48 70 b1 08 15 49 ca 13 af da cc e4 cf 3e 80 92 78 17 91 f7 e5 3b ac 8f 20 12 3c 26 24 40 43 49 76 51 73 e6 32 52 0d 9b ec 6b cc 47 5d 99 f2 13 91 e0 f1 20 62 48 4a 9e ca 69 8f 52 fd 99 27 91 63 1f fb cf 6c 81 68 98 34 5e 84 0c 24 48 d4 ac 45 8e f7 d0 ff de 55 0c f5 4f b5 97 07 f9 08 7f 65 53 76 48 20 52 c4 33 db 50 a6 ef e1 40 f7 57 19 ea 9f ee 75 52 47 10 09 2e 01 c2 4a a2 c4 f7 51 d9 fc 18 56 5e e3 bf 5e 27 34 82 48 70 a9 10 2a 92 62 a2 a8 fe 7a 65 4f 24 b8 a4 48 be 5b 02 14 9d 45 Data Ascii: E5w/2_0DI=HTZ()\|B(WTe$QG%\|RB5@zjO!HpI>x; <&$@CIvQs2RkG] bHJiR'clh4^$HEUOeSvH R3P@WuRG.JQV^^'4Hp*bzeO$H[E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50292	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	554	OUT	GET /RwVe2Cm1EjeDmYhdTzr179G0ovq_PCxgPzQ92PO-YxTBEFTHWh0L6Ev8FFDWRgRGrE81vwn95tyg9Ey189OO4kllhhpLAMIsGFZ-UKA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2589 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:12 GMT Expires: Tue, 28 May 2024 21:14:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5373 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 09 d4 49 44 41 54 78 9c ed 9d 4d 6c 14 e7 1d c6 7f ff dd 05 a3 ca eb 84 aa 89 39 40 cd 47 a3 e4 80 da 82 3f 42 11 12 60 43 15 5f 90 ba e6 80 23 15 01 e2 50 29 49 95 43 53 a9 f5 9a 8a 90 b4 52 73 49 23 7a 6a f8 10 87 60 10 eb 4a 1c ea 56 de d9 35 11 d0 80 d7 a4 8d 38 a4 0a 01 13 d2 03 50 89 b4 54 01 bc f6 fc 7b b0 a1 84 ac 3f 76 77 66 de 77 96 f9 1d d7 de f7 ff ac 1e cd ee ec 3b cf 33 0b 11 11 11 11 11 11 11 11 11 9e 23 a6 05 04 cd f5 1f ae 5a 21 13 89 7e e0 bb 0f 3d 7c 55 e1 92 c0 88 a0 c3 82 7c fc 2d 67 f8 a2 29 8d 5e f2 d8 19 7c a3 a3 e5 3c 48 eb 2c ff 76 0b b8 04 e4 70 d9 ff 74 7e f8 f3 00 a4 f9 c2 63 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxMl9@G?B`C_#P)ICSRsI#zj`JV58PT{?vwfw;3#Z!~=\|U\|-g)^\|<H,vpt~c
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 98 1a 3e 67 83 c7 9c 78 1b ca 60 39 cf 31 86 32 30 ee 24 6c 09 a0 7f d2 98 2b 18 db 8d 9b bb 59 ca 71 02 d8 da f4 88 3a 54 fb 4d 8b 98 22 67 72 f8 9c 0c 2e 3a 89 5e d3 67 cb e5 a2 48 d3 d4 f7 73 b3 b8 fc de e4 f8 59 0d 1e 1b 8c af 41 79 3d 08 31 3e f0 f2 58 36 61 32 80 9e 31 7d 03 97 d9 8f 60 e1 57 01 e8 f0 8b 05 02 c6 02 e8 aa f2 8e a9 d9 f7 99 d1 e0 b1 c1 d8 7a 41 5e 08 4a 8c 4f ac 1d cb 26 02 0f a0 ab 32 d0 98 33 7f 57 9e 19 0d 16 89 fd 34 28 21 3e 63 22 80 be d7 c0 cc af 31 ad c1 c5 c1 d8 62 c0 78 f5 c2 0b 04 3a 8b 83 89 c0 82 6f aa b2 a7 31 67 c7 cd 59 a6 35 58 91 97 83 14 e2 37 2a ec 0a 64 8e 32 da 98 3b bf 2f 88 59 73 61 5a 83 45 a4 3d 48 21 7e 23 b0 05 98 4c 06 f9 c7 b8 8a 6e f3 75 42 99 94 34 f8 de e0 bc 95 c0 33 01 6b f1 9b 26 fd 27 df 66 c2 b7 Data Ascii: >gx`9120$l+Yq:TM"gr.:^gHsYAy=1>X6a21}`WzA^JO&23W4(!>c"1bx:o1gY5X7*d2;/YsaZE=H!~#LnuB43k&'f
2024-05-27 22:43:45 UTC	340	IN	Data Raw: c1 b3 e8 1a 0d a0 5b 86 b9 9d 2c a9 d9 00 ba 55 98 3b 82 55 6b 31 80 6e 1d e6 0c fe e8 b9 0f a9 bd 00 ba 75 18 33 b8 f0 9b 5f d7 62 00 dd 3a cc 26 3a 88 d5 54 00 dd 46 8c 1a 5c e8 3e 51 33 01 74 5b 31 7f b1 a1 46 02 e8 b6 62 dc e0 42 77 7f 3f 10 ea 00 ba cd 18 37 18 40 35 f4 01 74 6b b1 c2 e0 91 ee cc 30 61 0d a0 5b 8e 15 06 03 14 ba 33 a1 0b a0 87 01 6b 0c 06 50 d5 30 05 d0 43 81 55 06 5f e8 ee bf 80 4a 18 02 e8 a1 c1 2a 83 01 0a dd 27 f2 aa d8 1c 40 0f 15 d6 19 0c 30 d2 9d 39 ac ca 0e 2c 0c a0 87 0d 2b 0d 06 18 e9 ce 1c 41 c5 a6 00 7a 28 b1 d6 60 80 42 f7 89 21 57 31 1e 40 0f 33 56 1b 0c 70 a1 3b 73 6e 64 5b 66 19 b0 c7 b4 96 30 62 bd c1 f7 29 6c cb ec 53 08 2c 80 5e 2b 84 f2 86 e9 ab 8f a6 d6 8b 54 16 40 2f 6c cb 84 f2 35 57 4a a8 5f 6c eb 7b 5b 17 bb Data Ascii: [,U;Uk1nu3_b:&:TF\>Q3t[1FbBw?7@5tk0a[3kP0CU_J*'@09,+Az(`B!W1@3Vp;snd[f0b)lS,^+T@/l5WJ_l{[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50288	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	563	OUT	GET /aTWbsnyhhmgnwKeD6_8X0cdmN12iq1vC2D6dMfw2B36N5Nh73BN1e1IplijPNtzp4IUgiJRRA-4M5e2SLfTIFOfVW09DeezqPYGnXoEfNBliIP4l=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2970 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:12 GMT Expires: Tue, 28 May 2024 21:14:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5373 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 0b 61 49 44 41 54 78 9c ed 9d 7b 70 5c 55 1d c7 3f e7 ee 26 fb 4a b6 e1 d9 a7 8c 30 83 88 da 0a 2d 20 68 1d 47 8a 20 b4 e0 1f d4 69 87 51 18 c1 47 4b 81 56 a0 e0 00 4e d1 36 45 29 0f d1 51 a6 4a e9 14 fd 03 06 1d 04 3a 0a 8a 23 23 03 18 12 82 53 81 a1 ad 94 29 92 4c 88 d9 34 bb 4d d2 64 5f c7 3f 4e 16 96 ed 6e 92 de bd f7 9e 7b 6e f7 f3 67 ee e6 de df ec 77 3e 7b de bb 42 4a 49 83 e0 62 e9 2e a0 81 bb 34 02 0e 38 8d 80 03 4e 23 e0 80 13 b6 fb 8f 67 3f b6 7c b2 cb 6d c0 62 60 29 f0 59 20 5e 76 6d 1c e8 00 fe 06 3c 0f a4 ed d6 e0 37 32 b2 89 93 43 c3 ec 68 7b 9e 99 a1 61 f2 d2 f6 db 7b c4 84 97 e4 aa ff dd 85 67 7d 09 b8 15 38 1f 88 d4 78 cd 39 c0 2a e0 Data Ascii: PNGIHDRxx9d6aIDATx{p\U?&J0- hG iQGKVN6E)QJ:##S)L4Md_?Nn{ngw>{BJIb.48N#g?\|mb`)Y ^vm<72Ch{a{g}8x9*
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: d7 32 2d 34 1d 3e 33 d6 64 50 e7 ae ee 43 05 bd 42 6f 29 53 a3 f1 74 a1 d1 26 83 3a cd f1 28 f0 14 b0 50 73 2d 35 d1 7c 7c d4 68 93 4b 5c 0a bc 0a fc 1a 98 ab b9 96 c3 f0 c1 f9 60 e3 4d 06 40 c0 77 f2 88 ae a1 62 64 5d c1 47 75 fb 20 60 30 dd 64 81 64 4c 5a 64 65 68 d6 f2 e8 be fb 8f 0b 1d ea 2e c8 d0 a4 07 a8 bd c2 27 01 83 a9 26 0b 60 5c 86 48 15 a3 dc 90 78 83 9b 93 af 11 a1 70 66 11 eb 71 d4 b6 a1 33 75 d6 e7 a3 80 c1 34 93 4b e6 0e ca 28 eb 12 6f b0 be f5 35 90 82 9c 0c 21 90 f0 e1 b6 a1 9f 02 27 ea a8 d1 67 01 43 75 93 53 48 6b 0c 3f 85 5c 6e ee f5 89 37 58 9f ec 06 09 39 19 ae 56 e5 2d a8 8e d8 77 3d 2e d3 8f 01 43 a5 c9 b1 f7 af 07 72 60 8d e0 87 92 2b cd bd a5 b5 7b c2 dc 70 c9 dc 6a cc 03 b6 a2 82 be d4 ab 5a f5 bf 5b 35 29 99 9c 27 d6 bf 82 d8 Data Ascii: 2-4>3dPCBo)St&:(Ps-5\|\|hK\`M@wbd]Gu `0ddLZdeh.'&`\Hxpfq3u4K(o5!'gCuSHk?\n7X9V-w=.Cr`+{pjZ[5)'
2024-05-27 22:43:45 UTC	721	IN	Data Raw: 10 f8 21 2e b5 b3 93 d6 e8 e5 c3 a6 cb 60 a4 85 13 c7 d2 b4 77 ad 61 41 aa 83 fe d8 1c 24 c2 57 e1 96 98 86 c9 db 51 c3 9e 4d d8 9c ac a8 07 5f 05 5c 6e ee 3d 1d 57 b3 20 f5 0a fd b1 39 be df 45 f3 11 93 53 11 b5 40 51 74 76 3c 6b bb 36 5d 0f ae 46 b9 b9 f3 53 1d f4 c7 66 fb 3e dc 12 a1 19 59 f2 ef b4 92 d9 76 da 9e c2 ff a2 57 89 78 c1 d1 f1 ac 5d 7c 11 b0 a9 e6 56 90 b6 da b2 b7 e6 de 3c 76 61 ee ed e4 23 22 e1 8f e6 c4 17 73 d1 87 9b 6b 5c b8 5b 81 fb 91 ec 16 f1 3c a2 b9 08 45 dd 25 29 b4 06 2c 90 a4 22 2d cc 1b e9 63 73 d7 1a e6 9b 67 ee 4e 60 33 1e 0d 79 ec a0 35 60 83 cd 7d 0b b8 0b 8f 87 3c 76 d0 12 b0 c1 e6 d6 bd 3e eb 35 5a 02 36 d4 5c 47 d6 67 bd c6 d3 5e b4 a1 bd 65 5f 8c 67 ed e2 a9 c1 86 99 bb 07 68 c7 80 76 76 32 3c 09 d8 b0 36 37 8d ea 19 Data Ascii: !.`waA$WQM_\n=W 9ES@Qtv<k6]FSf>YvWx]\|V<va#"sk\[<E%),"-csgN`3y5`}<v>5Z6\Gg^e_ghvv2<67

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50295	172.217.18.22	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	470	OUT	GET /vi_webp/5amGvnxGO54/maxresdefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	634	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 85454 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:54:16 GMT Expires: Mon, 27 May 2024 23:54:16 GMT Cache-Control: public, max-age=7200 Age: 2969 ETag: "1649424894" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	756	IN	Data Raw: 52 49 46 46 c6 4d 01 00 57 45 42 50 56 50 38 20 ba 4d 01 00 b0 79 06 9d 01 2a 00 05 d0 02 3e 6d 32 95 47 a4 23 2b ac a7 32 ab 89 90 0d 89 65 6e 29 39 9c a1 40 3f 7e 55 cf 3b e7 f8 31 35 ea b8 e4 ab db 4b a7 7e 71 fd e3 c2 1f ec bc 40 bd 4b fd 37 a2 9e a8 47 eb ff 94 5f 34 7f 6c 7a 83 ff df f4 da fd 27 a4 5f fb be 67 fe ce bd f6 dd da 97 77 be 57 98 97 28 f9 ed 19 7f f9 78 af f0 9f f9 bc f4 3d 87 fb 2f 37 9f f9 7d 84 ff 5c f5 2b fe bd e8 c7 ff 77 b2 2f f0 be 8f 7f 75 7d 57 3f f6 7e ee 7c 16 fe c3 ea 55 fc cf fe 0f 5e 3f f8 3f 56 ef dd df 59 9f 5b af eb bf f9 ff 74 bd b0 f3 88 fc 9e fc cb fb 2f fb de 23 fe 6b f7 8f 28 ef e8 b3 c7 ef 5f ee f9 b7 f8 03 3a 7f e4 fe da f9 cb fa df f6 7e 85 f8 f3 df 05 c5 ff ce fd bb f6 2c f8 4f f2 3f b4 3e b4 5f bd e8 5f f1 bf Data Ascii: RIFFMWEBPVP8 My*>m2G#+2en)9@?~U;15K~q@K7G_4lz'_gwW(x=/7}\+w/u}W?~\|U^??VY[t/#k(_:~,O?>__
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: a7 0a d5 24 84 bf d5 15 7a 67 58 ee 87 12 ba 27 be bb bb 2b 9c 0c af 21 cb da da ca bc 3a 03 59 5d ef 03 e9 1d 8a 1b 49 f4 9f e2 05 97 4d 82 90 4b cb 09 22 e3 cf 69 1c b3 ad fb f3 a4 3d 4f 84 f9 da 4d e7 50 ec 72 dd 56 6f d1 59 fe fe 7f bb b1 7d fc bc 27 0d bf e6 53 eb 8d 80 6f 22 45 a7 f3 3f 84 40 a6 17 35 68 1c 8f 12 6f 2b 22 69 3e 91 03 b2 e2 8e 4c e5 cf 2d c5 62 20 74 13 34 1a d1 58 63 e2 81 0e 09 8c 4d 03 6b 6f 93 8b e5 39 f3 ff b2 80 59 f2 1c 72 9a 92 9b fd 3d 81 3a 0a 73 31 41 0d 80 9c 38 30 16 00 96 82 fb db 10 45 fd 3b 28 30 c8 bf be 44 f4 49 c2 4b 5d c6 a6 96 8d c1 e7 dd 10 f9 a4 fe 2f 69 24 e4 23 ee 55 d2 5f 15 df 34 6b 81 54 0b ae 1e 5b 44 02 20 37 ef 5f e6 6c 7f 06 5d ad 89 de d2 5b 18 1b 9d 29 91 4b 4d 02 92 5c c5 0d 71 51 de 8c 31 01 51 a9 Data Ascii: $zgX'+!:Y]IMK"i=OMPrVoY}'So"E?@5ho+"i>L-b t4XcMko9Yr=:s1A80E;(0DIK]/i$#U_4kT[D 7_l][)KM\qQ1Q
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 4d 08 ad 49 82 6d 73 ea f6 c1 c9 6e b8 15 be 28 eb 04 1c 43 d1 de b5 09 a6 c1 be 54 d2 54 29 12 36 87 0a b2 e6 64 de 0c 64 c2 ed 7d ea 98 51 da dc 40 1f ae c2 0a e2 eb 53 36 15 6a 53 47 b8 fa e5 a4 6c b4 ec 6b cf 03 fd f7 75 ff f0 a4 20 34 a3 a9 a5 79 1a 82 0b 35 95 58 9d 6e 5d a5 5e 72 19 77 5b 51 ff ac b9 99 e0 4d 66 ed bf 37 29 07 a4 25 ea e9 3d b2 92 f7 59 6d 69 ca b9 60 09 43 21 ea 22 77 94 10 56 4d 9a 47 88 01 9d 7e 1c b7 96 e4 95 66 38 2b 9b e5 d5 bc 8c bf e3 9c cf 11 0e 3c 12 ea ed 7f 56 55 06 10 1c ac 69 11 80 c2 9f 70 05 ee d2 11 31 52 94 a5 d6 c6 e0 db db ab b5 f5 35 10 45 35 a7 c6 ce 78 fc 9a 1a f2 82 4a da 56 41 77 e7 8d 7e d1 fa 52 3d 8b ee 65 ff 33 41 2c 32 6b fa 96 fe 4f 08 b6 bc 77 7b 0d e8 5e 32 33 ac 41 d6 75 0e c1 40 4c c4 ad 70 a2 55 Data Ascii: MImsn(CTT)6dd}Q@S6jSGlku 4y5Xn]^rw[QMf7)%=Ymi`C!"wVMG~f8+<VUip1R5E5xJVAw~R=e3A,2kOw{^23Au@LpU
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: a0 f8 5b 9d c6 75 39 c4 ff f9 46 1e f3 d6 69 11 e0 25 03 31 46 e2 7c 3e 9a 7b 8e 66 39 db dd 51 ea e4 29 2b 3a 12 89 3b bd 01 ed 37 49 d3 a6 f1 29 6e d1 c2 f3 59 37 78 b6 88 e3 81 87 0f 8c 65 4a 53 c5 ba 61 fd d5 ad 78 73 f8 bc 0e 66 16 4f 24 ea bd ec 25 b3 3d cc 67 7d ad 46 3a ff 6d 4c 11 b9 b4 b1 cc 86 d6 61 c8 15 31 3e 73 22 8d 5d b1 5c 48 7e 79 87 4d 6d 9d 9b 65 91 b4 11 be 35 24 7e 84 bd 51 73 88 e8 a9 3a e2 96 69 76 3b 4c b4 00 43 93 c6 47 91 31 bf 0b d0 2f 9a 8d 84 e8 34 a6 d2 0d b6 b2 eb 89 5d 3d fc d0 85 95 d3 d8 96 74 1d 4c 70 02 cf c2 f8 b1 fa c1 44 57 c0 5a c6 ea 2a 88 df cf af 7e 42 55 3d ba fc a7 3a 6b 18 b3 4d b9 fb 70 bc 39 e0 19 27 d0 e0 ce 7d 5d 62 a5 96 62 e5 84 8f 4e b7 f5 ed de 73 66 b0 90 90 b1 9b 18 1a f5 da be ab 0f 5d 53 4f 90 e2 Data Ascii: [u9Fi%1F\|>{f9Q)+:;7I)nY7xeJSaxsfO$%=g}F:mLa1>s"]\H~yMme5$~Qs:iv;LCG1/4]=tLpDWZ*~BU=:kMp9'}]bbNsf]SO
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 43 83 0a 6b d1 10 d2 46 35 54 34 43 2d 63 11 83 8e dc 6f 8b 21 49 4f ef b0 1b 21 5c 37 96 3d 16 a0 b4 1e be 4e fa b2 79 6d 20 34 dc ed fb 71 6d 1f 64 c5 44 9f a2 10 61 e5 f3 f1 be 7a 16 e7 1f a1 a1 20 d3 18 87 72 28 2f e9 9c 48 0d ef aa b7 c1 1b dd b5 ac 9c 8c 1b ac 57 6e 62 7c f9 91 17 14 23 95 6d ca c9 13 dc 72 29 18 26 b5 4f e4 f5 b6 40 56 fe eb 9a da 2c c3 20 2f 92 42 71 d5 ba b9 84 d1 26 d2 fa 87 7f 03 9e 5a a9 06 ec 77 dd 7e 7f c8 84 7f 6e 7f 84 01 10 f2 be 1e bb f0 f0 17 10 5c a1 ce 5f 9d d4 25 d6 69 03 65 ad ac 87 00 ad 19 80 df 38 88 24 d2 81 75 fc 46 f7 c7 cf 6a 78 85 67 e6 70 11 bc f4 c4 f3 e7 ba 63 ac 66 4d e8 8a f9 42 b0 2d 1c b8 eb bd e8 ec 5a 16 10 74 28 5d d4 b2 ab df 5b 96 a2 5c 2b 51 fc db 13 d0 1e ee 36 c7 3f 83 c9 3e 69 20 b8 b2 42 f5 Data Ascii: CkF5T4C-co!IO!\7=Nym 4qmdDaz r(/HWnb\|#mr)&O@V, /Bq&Zw~n\_%ie8$uFjxgpcfMB-Zt(][\+Q6?>i B
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: eb 13 03 01 7b 14 7f c5 fd 2c d1 64 65 e3 d9 dc f6 cb 24 e3 b9 0c d3 77 5e b1 da cb f6 f2 2f 4c d0 3a 62 1f 49 f2 11 2f 46 a6 d5 db 09 47 c6 14 e3 73 f1 45 83 24 f5 ca 49 bb ec b9 26 88 91 11 64 40 0b 10 c9 d8 94 ef a7 b8 7b b7 f5 63 ff 1b ed 41 c7 2d 35 de b4 38 ec 25 8d bd 8e f1 30 a8 14 51 4f 60 ea 07 52 8c e9 42 63 0a 6c ed ca 5f 28 e7 52 33 62 a7 cf e4 61 74 df 73 5b 93 48 cf 2c b9 bc e5 6f c9 36 4d ef 6a 30 18 15 a7 b2 77 cf 0f 18 fb d7 eb c7 fd e3 71 8d c4 d6 2b 56 7e ae 15 76 72 69 47 9f 62 35 57 c7 51 6b 2b 0b 16 6b 98 03 31 e9 6a 5a 3d 9e 31 97 a1 27 6a 2f 2a f3 85 2d 2e e4 fd cd 20 a8 c4 5f 05 7c f7 69 9f 79 4b 7f b2 3f 02 69 47 17 da 7d c4 fe a7 bb 0a 6e ab bb 4c 1b a6 84 85 ee 14 54 bc 0f 97 e4 b7 78 5d 3f 93 82 0b 99 c2 ec c0 21 34 d3 80 d9 Data Ascii: {,de$w^/L:bI/FGsE$I&d@{cA-58%0QO`RBcl_(R3bats[H,o6Mj0wq+V~vriGb5WQk+k1jZ=1'j/*-. _\|iyK?iG}nLTx]?!4
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 5b 8c 0e 11 07 f1 2c c2 62 17 d8 6d 35 13 0c 0e 83 cf 48 91 a8 18 f3 f9 8a 5d af 80 60 a2 de 5a 56 51 fd 75 6a a5 1e aa 50 dc cb 3c 3d 6f 57 e3 ac 2e ca b9 5e ce 03 95 de 44 1a 45 47 01 bc 5b 9d 8e 4e fd da 1f 27 fb d9 0d 61 9e 93 37 74 7c 72 7f 41 8e 16 81 61 a1 e5 1f 06 9e 4a c5 5d 2e 48 b9 d9 03 d0 58 d0 ee bf 56 d5 28 23 99 1d 8c 12 a9 7c 96 d8 8d 06 2a 46 e2 70 87 c2 1d e0 f0 aa cd a1 7d 2c 70 4e ab 9d 85 83 56 d3 d5 31 36 a0 b5 5f 49 9e 51 0b b4 0e f7 f9 ea 62 0f fc d5 8f 81 85 e3 48 56 4f 06 5b c8 be 8c b4 36 e2 6a d8 3b df 94 d6 fb 07 2d ed 5e cb e2 a4 99 09 04 c4 fa 52 89 c5 0d 87 e4 08 e5 da 7d ff 90 e9 95 a3 60 8d 1d 2b 84 fe df c7 98 79 d1 44 72 8f 63 88 a9 ae 65 80 f3 40 da ef ce ae 47 20 fe 8b e9 83 f2 ed 81 fe 89 3b b5 f8 e0 8d 67 70 71 19 Data Ascii: [,bm5H]`ZVQujP<=oW.^DEG[N'a7t\|rAaJ].HXV(#\|*Fp},pNV16_IQbHVO[6j;-^R}`+yDrce@G ;gpq
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 7e 88 86 f9 d6 b4 bf 5c ca 75 41 59 b9 aa bf 46 a8 2f 5b 01 3f 38 55 b0 2f 99 2d 1b b5 5b d1 db ea e9 9c 7c 97 f4 90 68 58 61 8f a1 38 63 ff 42 83 eb af 57 94 fa d8 10 1f 40 00 33 d5 13 75 98 1e d8 82 27 98 9f b4 cb 81 90 14 f3 87 5c 18 80 b6 0f bd 68 05 4d 68 21 c2 f2 17 02 70 b0 71 8f a1 d6 d3 4b d5 c4 51 f3 94 74 4e 03 0f b2 a9 85 34 1c 6d 9e 6a 61 4b f8 5b 6e ea 63 d0 16 6e 0f 7e f1 bf 29 23 9e 23 37 45 e8 97 b9 67 b1 92 6f c5 47 1c 88 2e 9e 23 1c 4b e8 65 8d 2f e7 1d d9 96 c5 ae 12 33 b1 12 9c 8f b8 01 06 91 66 e2 05 f1 a0 55 48 34 93 1d 6f b0 1f 05 c9 bc 8a 88 f4 4a 79 b9 32 03 f7 d1 12 5c 9c 16 d9 b0 14 5e d3 27 b8 b9 b2 ea bb e4 44 57 94 d2 21 9e 3c 65 92 39 db d6 4a 3a 12 dc 28 29 8a 04 c4 9f 36 94 af 67 81 a8 21 29 b6 83 20 5a be fb f7 f7 f4 bb Data Ascii: ~\uAYF/[?8U/-[\|hXa8cBW@3u'\hMh!pqKQtN4mjaK[ncn~)##7EgoG.#Ke/3fUH4oJy2\^'DW!<e9J:()6g!) Z
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 22 fe 74 6d 4b e2 a0 41 2c 41 df bb 0e f3 d8 a4 f6 2b 98 70 7e d2 98 9b 34 1b d8 70 e1 df 38 15 3f e3 05 7d 9c 46 90 87 35 3e bd 59 10 1e c7 6c 91 8c 18 2e cd 27 23 92 42 ad 61 43 6a 54 75 d6 3b 6b c6 15 44 71 6e 5c c4 e1 d1 e4 88 76 22 74 17 de 19 a3 db 61 07 9d 07 cc 62 55 61 82 77 ea eb 26 62 1b 16 8c d2 ae 3b be 4f d2 81 4f 5c 5a 06 8b 98 c8 65 a0 c6 e9 67 3a e8 b1 ff 12 3b 8f 84 a4 02 5b 23 2b 30 e3 52 c5 e7 f3 45 6c 38 73 ad b2 93 42 34 a3 28 d7 d8 b2 5d a9 4f bd 57 a2 f2 6b 17 09 17 f6 bb 92 f8 7e 44 4b 02 e6 75 c6 06 25 3e b9 d2 21 03 2c 50 2f ce 23 7f 98 5b d0 85 36 6f 60 a5 21 4d 48 c7 7c ed 9f 4e d8 82 4c ad fa 0d ea 1c 34 d3 f3 7b ff 01 ca fb fc 8a 2f 5d 84 ae 9c e8 1a 61 f4 b0 2e f6 bf e0 59 c1 d6 7b 91 e1 1f ca 92 e6 04 e2 d1 63 7a ff 18 1d Data Ascii: "tmKA,A+p~4p8?}F5>Yl.'#BaCjTu;kDqn\v"tabUaw&b;OO\Zeg:;[#+0REl8sB4(]OWk~DKu%>!,P/#[6o`!MH\|NL4{/]a.Y{cz
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 05 85 78 35 32 39 a7 6c ea 22 3c bf 8a a6 63 c4 85 b6 22 8d 70 1f 09 5f 1f 2e 24 1e 03 89 25 df f6 2f 38 d0 1d c5 02 2a 51 03 bf b8 1d 1b 7e 9e 0d 88 3f 07 ca 49 a8 fd fa 35 83 2b 0d 6c 20 63 6b 68 d4 17 1e 74 d3 e0 28 57 47 d9 3a 5a d6 88 6a e2 23 ba d2 17 77 2b 31 03 b2 1f 3c 50 3c 6d 74 b4 cf 66 3b 63 17 98 12 2e d2 56 72 87 b4 6c 4e 24 93 be d9 14 3e 49 3d 30 dc 68 7a f1 5c e3 ab f0 58 97 c4 b6 96 1f 26 2c 64 6b 56 a7 15 68 29 2e c9 d8 60 d0 37 6d ef 4f 53 96 41 e3 e8 10 1d 01 dc 85 19 12 98 55 f3 be 5a 48 b2 83 c2 8c 80 1c 97 39 90 e6 4b fd ac 03 8b ac 9e d2 09 6d 7b 21 a0 d2 44 5c 20 5d a7 66 d2 a1 cc d6 bc f0 a5 6f eb f3 42 aa 92 e0 63 ac 2b 0a df b1 10 0b d5 80 92 61 54 c8 ea 78 19 35 21 30 ae 0d c0 da 3b 08 f1 c5 6c 3d 94 31 4c 78 66 02 d9 ee b6 Data Ascii: x529l"<c"p_.$%/8*Q~?I5+l ckht(WG:Zj#w+1<P<mtf;c.VrlN$>I=0hz\X&,dkVh).`7mOSAUZH9Km{!D\ ]foBc+aTx5!0;l=1Lxf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50296	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	799	OUT	GET /3-xiN81vze40pCNon5Fg7bDiK8tDcEZdzIj5f3vyZ32265N-D-xGDg2tqu6MOfLsnf_Sej0vdNHhaTCL0b3MVtOm0hKy2jaAm_C6dbrCivif65LxVuc9=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5805 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:16:10 GMT Expires: Tue, 28 May 2024 21:16:10 GMT Cache-Control: public, max-age=86400, no-transform Age: 5255 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 64 49 44 41 54 78 9c ed 9d 79 98 15 d5 99 ff 3f ef a9 aa 7b 6f 2f 34 4b b3 2f 82 80 28 8c 60 04 64 13 e4 a7 82 1b 1a 89 cb 38 2e 93 49 c6 38 eb 33 f9 65 fc 25 a2 18 e3 38 6e 41 74 9c 68 1c 27 93 38 4f 36 b3 99 98 c4 b8 a0 a0 71 8b 6c 46 45 d4 44 11 50 44 96 66 ed f5 2e 55 75 de df 1f 0d da b4 dd 74 df ee 5b f7 de c6 fb 79 9e 7e ba 9f ae aa f3 be 55 df 3a a7 ce f2 9e 73 a0 44 89 12 25 4a 14 29 52 68 07 72 88 01 2a f8 dc fc 32 4d 35 24 b0 c4 31 36 86 35 2e c6 ba 20 06 44 b0 80 aa 45 d4 22 26 c4 d8 00 c4 27 b4 e9 9f 9e 3d 2f 75 d9 57 6e 4b 01 8d 40 50 d8 db c9 0d 3d 59 e0 2a 3d 6b 66 7f ac 56 63 a8 06 46 Data Ascii: PNGIHDRxx9d6sBIT\|ddIDATxy?{o/4K/(`d8.I83e%8nAth'8O6qlFEDPDf.Uut[y~U:sD%J)Rhr2M5$165. DE"&'=/uWnK@P=Y=kfVcF
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 6e f7 83 05 9e 94 c4 6d 8d 11 48 86 36 1c 1e 8b 7f 07 db 78 a3 2c 5f b7 3b 12 3b 11 a4 29 7a c6 d4 e9 c4 dd ff de e9 87 25 71 db c1 2a 24 8c 71 6a fc cc e5 38 f1 f3 a2 b2 e3 e6 38 3d d1 79 d3 e7 20 7c 73 57 10 cc 34 d2 73 3b 2d f2 41 0c ea ab 1c f7 3e 59 b6 ea 37 51 d9 c8 65 11 2d 3a 6f e6 1c 1c ee d8 15 04 d3 73 98 ee 11 49 1c ea ab 8c 73 af 2c 5f 75 07 50 1b 95 9d 9c e5 60 3d 63 ea 34 c4 de be 2b b0 25 71 3b c0 83 c6 7c 88 0b 39 fa 06 eb dc a9 c7 81 bb 64 57 10 ce ca 45 7a 47 32 8e 6a aa 8f 31 77 cb f2 55 4b 88 58 5c c8 81 c0 2b fe f9 b8 6a 12 ce 9d 3b 83 60 6e 11 8c 5d 14 35 61 a8 b6 9f e3 2e 91 e5 ab ef 00 ea f2 61 b3 db 45 f4 e9 1b 7a df b5 2d 08 16 c4 8a bc b6 dc fa d5 cb a7 af 07 47 99 86 78 ce 8d b2 7c d5 dd 34 07 f5 e5 85 6e 09 ac 67 cd 58 bc 35 Data Ascii: nmH6x,_;;)z%q*$qj88=y \|sW4s;-A>Y7Qe-:osIs,_uP`=c4+%q;\|9dWEzG2j1wUKX\+j;`n]5a.aEz-Gx\|4ngX5
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: ee dd eb fb f7 77 3d f1 12 d9 f0 89 2e 0a 5d cd 30 7c f3 45 55 19 db ed 3e 2a 6b 70 fb 37 e1 8e d8 87 cd 54 a0 bb 3d 02 ab 8c 7d fe d5 4b 81 7d dd 4d be 44 c7 7c 32 07 37 b9 d5 c9 8c 4c c8 95 01 0d 1c 9c ea 90 ca 33 de 26 31 67 3f 99 aa d4 16 60 63 ae d2 2f 71 78 da ea 8b ae f6 7d 8e 8a e5 72 de a1 15 88 1b 2a 66 6f a2 72 aa f7 6d 22 9b 4b d7 31 f3 97 ea 67 c9 5d 70 5e a1 11 a0 d6 71 78 73 d9 d5 b2 bf ad 13 5a cb e8 00 47 55 94 09 1d b6 7f b3 f6 44 a8 6f 32 54 f5 4a ff 3c b7 29 67 47 98 69 3c 72 da dd 22 a8 0d 3f b0 b1 5e 5f a2 9d 15 7c 5a 17 d1 e5 a0 a3 a3 a8 de 8a 40 dc b5 2f 93 91 48 66 b2 7f 5a b1 36 ac b2 d0 b7 bd e3 ad 04 ae 28 03 46 44 35 87 2c 1e 33 cf cb 7c 2d 0d 28 e4 0a 55 04 ed ed 08 d5 ed 9d 72 88 c0 fa 74 32 81 32 2c 1a 67 00 58 c3 91 f3 fd Data Ascii: w=.]0\|EU>kp7T=}K}MD\|27L3&1g?`c/qx}rform"K1g]p^qxsZGUDo2TJ<)gGi<r"?^_\|Z@/HfZ6(FD5,3\|-(Urt22,gX
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 6c 0a fb f1 ab c6 99 5c d5 30 8a 6a 8d 53 de dd 48 58 05 f5 b5 62 d7 ef 36 fe f3 b9 ba f8 af 3b f2 a9 07 50 7e da 52 fd 9a cd 24 4f 92 48 06 ce 04 55 52 56 f9 23 9d 58 c2 b8 a3 87 19 12 ea b2 72 4f df 15 f1 79 35 3d 86 ff 69 98 c4 9d a9 c1 f4 c3 b4 d9 04 ea 2a 61 63 30 78 d7 e3 9b bf 7e ae 5e 7f 51 ce 12 cd 3f 72 ea 37 f5 2a 03 97 a3 36 1e c9 3c 3b 01 27 5e b9 c5 d4 3d f4 64 27 4f ef 90 98 be 1a ff df df bd 37 e1 f2 5f 06 83 59 1b 96 53 46 34 d9 4c ad e2 f6 89 bf d3 ff ec d1 df 78 4c 6e fd 05 3d 6c 26 e2 69 77 e8 e7 45 b8 45 d3 0d 23 22 09 4d 05 d4 06 38 b1 de bf 59 b1 48 2e a4 13 2b f3 76 46 a7 0c 15 e9 9f de 5f 3e f6 fd d7 6c 05 e5 9d bc a8 2b 88 11 82 da f4 b8 dd 8f 6d fc e6 39 ba f8 0b f4 a0 6f f2 e9 4b f5 72 23 fc 9b 4d d7 47 26 2e 08 4e a2 f7 6e 94 Data Ascii: l\0jSHXb6;P~R$OHURV#XrOy5=iac0x~^Q?r76<;'^=d'O7_YSF4LxLn=l&iwEE#"M8YH.+vF_>l+m9oKr#MG&.Nn
2024-05-27 22:43:45 UTC	776	IN	Data Raw: 47 34 a1 f2 8e 45 c4 85 c6 63 1b 06 0f be f9 e6 57 cf e1 9e ad 48 ce 97 b0 8a 34 7b 5d a9 ff da 77 c3 1b c9 3b 1a 5e db 71 a5 89 b9 b9 df e9 a3 07 23 46 50 b5 7b fa 5f 94 58 bc cc f9 c9 77 89 28 0b e4 a5 fc 3c f9 f7 57 7c 35 b5 ad f1 56 e3 3a b1 82 f5 5d 17 13 02 ea c8 87 c9 f5 f5 5f 7a eb a6 27 97 45 6c 2a 6f 4c 39 e9 77 17 fd 44 1b ec b8 4f 73 5b 59 ad 12 1f 58 f6 c2 4b f3 1e fc 2b 0e 33 ed 33 57 e4 fb 49 3b d3 9f b8 e4 81 b0 21 b8 a4 10 e3 c9 85 46 3c a9 f3 fa 95 fd cf 4b a7 fe e8 6b 79 b3 99 2f 43 ad 58 30 e3 b1 4b ef 09 ea 33 c3 91 ac a6 33 f5 3c 04 b0 1a c4 06 94 fd e9 a5 79 0f 5e 0d e4 a4 03 23 1b f3 85 a2 7c ce ea 2f de 12 d6 fa 17 a6 6a 1a 87 1b cf 98 23 4a 68 01 f5 2d f1 81 15 5b 4c 85 f3 9b 17 4f fe c1 bf d2 c9 50 d7 1c bb 51 58 c6 78 43 a6 8c Data Ascii: G4EcWH4{]w;^q#FP{_Xw(<W\|5V:]_z'El*oL9wDOs[YXK+33WI;!F<Kky/CX0K33<y^#\|/j#Jh-[LOPQXxC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50297	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	785	OUT	GET /j-XIfKqwPWybhyqkxFlF2ArD-XgPk2y41V-bjbf1l7yIm2kh1diwMAFgSFUJCwUob3LkfV_PSlpt0qsLLeVCpBCaiDZ2j5yStmaa-w=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 6058 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:51:38 GMT Expires: Tue, 28 May 2024 18:51:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 13927 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 17 61 49 44 41 54 78 9c ed 9d 79 ac 24 57 75 c6 7f e7 56 75 f7 db 67 79 9e b1 f1 d8 33 01 0f b6 c7 7e c3 d8 96 19 6c 0c 24 01 84 50 82 0c 12 21 40 80 c4 a0 48 21 42 21 20 a1 00 41 0a 8a 94 40 0c 24 ec c4 12 38 08 29 8a 10 59 14 44 40 01 c5 40 c0 0b 31 8b 43 bc 80 81 81 f1 98 59 ec 99 37 9e 79 ef f5 eb ee aa ba f7 e4 8f aa ea ed f5 de 5d fd 66 86 fe a4 7e 4b d5 5d 4e dd af ce b9 e7 de 73 ef 6d 98 60 82 09 26 98 60 82 09 26 98 60 82 09 26 98 60 82 09 26 b8 40 20 83 66 5c 5e 5e 9e 29 97 cb 3e a0 00 ce b9 61 e4 d0 56 f9 45 7a 13 4f 55 51 55 1d 46 00 92 e7 18 14 bd ca da 6f 3b a9 2a f3 f3 f3 76 c7 8e 1d 95 81 Data Ascii: PNGIHDRxx9d6sBIT\|daIDATxy$WuVugy3~l$P!@H!B! A@$8)YD@@1CY7y]f~K]Nsm`&`&`&`&@ f\^^)>aVEzOUQUFo;*v
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 18 86 44 51 d4 93 16 0f a5 c1 a9 6f d2 2d 4d 7f 37 da 24 cf 88 b4 be bc f2 4d 42 bd 8c a9 79 b6 d6 f6 64 aa bb 11 dc 36 77 27 df a0 6b e6 3e f3 8c 82 dc 71 92 36 ec 64 cc 86 dc 75 44 d6 3b 58 ce b9 a1 09 1e 18 1d ab 1d 51 6b 9f 0b e6 39 eb ea ea 15 a9 99 cc 51 68 f0 40 fe ce a0 e4 8e a4 b1 b2 f2 d0 ce 53 d7 7e e0 71 f0 40 89 07 20 b7 dd 0b 3a 8a 61 d7 38 a7 b5 37 ab 5f 1f 62 26 ab 86 9e 84 1f 64 92 6b 13 5a 65 d8 2a cf b5 60 c8 50 04 3b 46 43 6e bf 4d d2 9c 5e 9d 82 24 53 8e cd e8 23 d4 d9 73 85 9d 2f 9f 53 e8 46 f0 f0 ad 33 20 b9 dd 14 c1 39 c5 2a 18 03 39 0f 70 4a a8 60 1d 78 02 46 24 9d 25 88 33 34 11 7d ae 0e 8f 46 2d c3 48 fb e0 7e 73 0f 34 8c 52 25 70 b0 38 0d 97 ce 29 97 2d 0a 8b 0b f1 d4 e9 a9 15 38 7a 0a 8e ae c0 99 8a e2 a5 93 cc 22 48 1b a2 eb Data Ascii: DQo-M7$MByd6w'k>q6duD;XQk9Qh@S~q@ :a87_b&dkZe`P;FCnM^$S#s/SF3 99pJ`xF$%34}F-H~s4R%p8)-8z"H
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 5e 30 48 42 6a 4c ae 41 52 c3 dc 44 6e 7a 51 9d c3 85 15 0c c2 dd 3f 83 6b 4b ca ee 45 43 3e 69 a9 20 8a 35 f7 91 13 96 1e 7c bd 3e 1b 60 b4 da 0b 19 ae e8 18 64 4a b1 13 04 c1 a5 d3 c8 09 79 88 c3 e4 e3 dd 76 61 a9 88 5a 9b f8 4e 29 8d 92 68 ac 41 13 72 ab 5b 98 13 42 45 6b 7f 37 98 eb b0 82 e4 0a 3c 78 14 1e 3e e6 d8 3a 1d a7 3b bb ae 58 47 83 e6 0e f2 bc 7d a7 cf 88 e0 ce 95 b6 f9 7b e0 42 ba 24 51 8d 23 44 a1 82 73 60 9d 60 55 b1 9a c7 1a b0 41 09 e3 22 bc d4 5c 1b c1 d7 c4 2c d7 75 2a 5a b7 40 af 99 dc f4 25 50 67 21 0c f0 73 79 c4 78 ac 94 d2 fb 1b c9 1d f6 f9 7a 41 3f e7 a4 d4 63 68 82 87 92 bf 5b b0 41 15 a7 50 b1 50 b2 8e 85 29 d8 b7 53 d9 b3 55 d8 3e 2d cc 16 94 82 af f8 46 40 a7 08 23 8f 52 39 62 ad 0c cb 45 c7 91 65 cb 23 27 94 d5 32 4c e7 94 Data Ascii: ^0HBjLARDnzQ?kKEC>i 5\|>`dJyvaZN)hAr[BEk7<x>:;XG}{B$Q#Ds``UA"\,u*Z@%Pg!syxzA?ch[APP)SU>-F@#R9bEe#'2L
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 8c 73 b6 ba 54 33 b6 72 4a cd 85 89 fb 38 47 1a e6 ab 37 a1 52 fd d5 b0 6a 23 4d d7 10 ed 89 ff 70 c9 ef 78 e3 7f 5c cb 6c 21 c7 4c 21 f1 98 8d 82 89 67 d6 a8 12 5b 3b bd 3b 5d 09 52 73 c7 6a b2 a4 4d 92 ab 0b 3e 0c d4 4e 23 60 7e f3 9c 2c e2 86 cd e7 7d 9e b6 b8 80 2d e7 b0 95 72 3c d9 bb e1 c9 e2 3e 4d ab ad 9a 90 d8 60 1e d3 bf a5 9a a5 a6 5d 09 84 2a 01 b5 6f 21 a8 76 aa 49 60 c1 54 09 95 64 fd b4 a4 cb 6d eb 0e 73 d1 ea 5a ae ba f8 71 87 8d 6c 9d da a1 bf 1b fd 61 bc 4e 56 fd 3f e9 6a c9 a4 21 bd a9 69 04 62 92 db e4 ab d2 65 92 df 75 d3 88 8d a9 e3 e0 80 d4 35 7e dd 2c 45 cd 62 8b d4 5e 02 81 da d2 5a a9 39 51 d5 95 f5 e7 1f b9 30 0e 27 ab cb 7d 41 50 89 0f 49 31 53 33 60 0c ae 52 49 bb b9 94 ae 38 a5 4a 6d e4 9e b6 7f 6a be e3 92 48 0f 5a 91 7a ed Data Ascii: sT3rJ8G7Rj#Mpx\l!L!g[;;]RsjM>N#`~,}-r<>M`]*o!vI`TdmsZqlaNV?j!ibeu5~,Eb^Z9Q0'}API1S3`RI8JmjHZz
2024-05-27 22:43:45 UTC	1030	IN	Data Raw: f0 c6 62 b4 fb e7 b7 dd 76 5b 47 87 aa 15 32 0b f8 8b 08 85 42 7c cc a0 b5 ad cf bd 57 55 a2 28 3a 15 86 e1 e7 6e ba e9 a6 77 0c 5a d7 26 e0 93 37 bd e5 be 83 6c dd fd 19 7f 76 ee 5a 31 9e c9 82 5c 00 5f 1c af 7a fd 5f 7c 7e 20 29 c9 38 5c 28 22 e4 f3 79 7c df 8f d7 28 27 9f d4 cb b6 d6 fe 5f b1 58 7c d7 8d 37 de 78 3e 91 0b c0 77 3e 79 f3 fd e5 95 a3 b7 46 c5 95 7f d6 28 5a ed 94 36 93 38 72 8f c8 fc 10 16 11 21 97 cb e1 79 5e 95 dc 28 8a 08 c3 f0 4b a5 52 e9 8d 37 dd 74 d3 9d c3 d6 b1 59 b8 ef e3 07 0f 07 c7 7e fa e6 a8 78 f6 76 1b 04 bf d4 16 5f cb 96 49 1c b9 0f 8c 25 e0 5f 4f b2 b5 b6 5c 2e 97 3f 7d e4 c8 91 d7 3c fb d9 cf fe c1 38 ea cf 12 f7 7c f6 85 67 e4 fd 7b fe 26 5c 5d 7d 9b ad 94 7e a0 ae d6 1d 65 12 8d ea 13 63 8d 07 3b e7 7e 52 a9 54 ee b8 Data Ascii: bv[G2B\|WU(:nwZ&7lvZ1\_z_\|~ )8\("y\|('_X\|7x>w>yF(Z68r!y^(KR7tY~xv_I%_O\.?}<8\|g{&\]}~ec;~RT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50298	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	566	OUT	GET /yemTWtzfavZZqaWs0_ijOcSrLtp93cAfiJA4HqGSpJNYBxe13WWQxeqV7xt7Bdf34Nug2nw2z-a4T85pXURHj8tcOPFh1-l7BvYANqrAXd7zHVQ93x0=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 7717 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:09:37 GMT Expires: Tue, 28 May 2024 22:09:37 GMT Cache-Control: public, max-age=86400, no-transform Age: 2048 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 1d d7 49 44 41 54 78 9c ed 9d 79 98 a4 55 7d ef 3f bf f3 be b5 f6 3e d3 dd b3 2f cc c0 88 88 04 94 0b b9 5c 83 cb 8d 9a a8 91 47 82 46 63 f2 b8 3c 46 13 24 ee 4b ae 46 8c 5b a2 b9 62 16 42 2e c6 88 51 94 10 14 c1 0d 1d 34 2e 57 14 45 40 70 00 33 c3 30 03 03 0c b3 4f af 55 5d 55 ef 39 bf fb c7 5b 7b bd d5 5d 5d 55 3d d3 f4 ed ef 3c a7 a7 ea 9c 53 a7 4e d5 f7 fd ad e7 bc a7 44 55 59 c6 d2 85 39 d9 13 58 c6 c2 62 99 e0 25 8e 65 82 97 38 96 09 5e e2 58 26 78 89 63 99 e0 25 8e 65 82 97 38 96 09 5e e2 58 26 78 89 63 99 e0 25 8e 65 82 97 38 96 09 5e e2 f0 a3 2a 9f fb a1 ee 0c 2e 04 48 6c 06 25 86 Data Ascii: PNGIHDRxx9d6pHYsIDATxyU}?>/\GFc<F$KF[bB.Q4.WE@p30OU]U9[{]]U=<SNDUY9Xb%e8^X&xc%e8^X&xc%e8^*.Hl%
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 26 07 05 8f dc f8 26 b2 ee 38 d9 42 40 b6 50 60 a6 90 23 93 d5 17 17 f2 de 1f 3c 09 84 b7 01 0a 7d ce c9 e5 82 ec 12 e4 e5 0b 6d 9b 17 2d c1 00 ce 42 32 7f 06 2b fb 85 15 fd 79 56 0e 14 18 e8 73 78 86 eb 75 b1 e7 08 67 85 22 c2 29 ce 7a 37 d8 c0 fc 48 84 0b 16 ea 5a 5d d4 b9 68 13 87 60 ec 6c c6 f6 6f c2 c9 34 86 24 be 17 7b 3b ea f5 8a b8 93 3d bd b6 e1 04 0a be a1 e0 09 0e 2e 14 e4 27 71 d5 ab 8c e3 f2 04 1c eb 26 d9 27 9a e0 04 e8 25 08 cf 03 7d 2a aa 83 28 be c2 b4 c2 e3 08 3f 43 e5 6b 82 ee 00 50 2f 80 dc 1a bc 60 3d de e0 3d b8 6c ff 48 10 98 2b 3c ef c9 43 6e 98 84 81 e9 a4 61 bc c7 27 1b 33 a4 f2 8e c1 e9 80 c1 e9 80 98 55 ac 11 a6 13 e6 cd c7 7a fd 3f cc a6 fc 2b e2 b8 8f a5 27 82 70 c1 a4 43 45 75 a2 08 4e 82 be 53 e1 52 44 d7 02 65 d3 53 99 bf Data Ascii: &&8B@P`#<}m-B2+yVsxug")z7HZ]h`lo4${;=.'q&'%}*(?CkP/`==lH+<Cna'3Uz?+'pCEuNSRDeS
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 68 63 e7 2a ee db 56 cd 11 08 a4 f0 a9 40 0a e4 9b 24 80 9a c4 31 a6 f5 e2 04 94 cd a0 6f 6e 36 89 48 a7 89 2a f2 aa d4 73 43 5b e9 79 43 b6 ab ea af 7a 98 d4 31 72 87 cf a3 70 e4 42 4c f2 20 0b b9 cb c3 43 d9 6b fb 78 96 1e e2 75 83 0f c2 8b 0b 6c fd 9b bd ac 7d f3 13 98 84 23 bb 37 85 cb 0b e2 69 8d 6a 2e 49 68 a8 9a eb f4 71 89 e9 79 32 2c b0 a5 60 e4 92 1c d1 91 4f 34 c1 c6 b5 58 2c 78 8a f1 e4 c6 b9 26 35 7b 6a b2 22 c7 b5 a4 6b 8d 23 56 ac a9 72 b8 aa fa 4a 80 3a 28 1c 3f 17 69 7d b3 5e 5b 98 c1 c3 21 fc fd c0 cf 01 70 bb 43 45 36 fc fa 23 6c fd fb 3d 8c be f2 10 f6 b8 4f e1 70 02 f1 b4 31 b8 ad b3 b9 e1 45 00 35 be 76 cb db 3e 04 1f f7 41 a3 d1 5a 2b 9a 60 6b e6 2e 2e fc 5f 94 67 23 ee 19 cd 08 ae 09 89 1a 6c 69 14 59 b5 ea b9 66 1c ad ed 5b 79 1a Data Ascii: hcV@$1on6HsC[yCz1rpBL Ckxul}#7ij.Ihqy2,`O4X,x&5{j"k#VrJ:(?i}^[!pCE6#l=Op1E5v>AZ+`k.._g#liYf[y
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 1f 23 ca 87 fa ee 9e 7f 58 14 05 05 52 60 c7 e2 d8 89 38 12 d3 9a 45 87 ce 86 56 04 73 6f 0c ff bf a2 da e7 d8 d1 e1 21 c6 bd 01 b1 a7 b7 6c 7b 23 6c 69 d9 56 96 9e 47 da d2 ca 84 1b 1d b1 ba 70 0a 40 1c 76 66 84 d8 d0 6e d2 9b be 88 cd ae e9 4a 7a d2 47 d9 69 fb 79 53 7a 27 a7 25 26 d1 76 c2 a2 e8 81 c9 ed ea 47 b3 7e 65 09 b1 0b 10 c0 a9 f9 70 c1 c5 22 db 9b d8 e0 02 68 1e 34 88 8b e8 95 f3 7d d3 7a 5b 5a 6b 93 35 ba 6f 8d ea 6d f4 c0 a1 4e cd ab c1 15 0c a9 f5 37 62 12 87 d1 42 7f c4 2b e6 07 01 0e 6b 92 2d fe 14 97 f7 de 1b 69 fb e7 0d 05 d3 0b 7a 10 32 77 ad c4 eb 2b d0 69 6a b2 7a c6 a2 ec f1 6c ee ab 86 4c 64 8f 68 82 93 79 48 16 90 78 fe 3d 60 93 ad 48 2f 54 a9 d5 b2 03 55 df 56 f5 b8 8a d0 06 9b 5c 69 a8 ed 5b b2 e7 e2 b0 99 11 12 ab 7e 41 6a dd Data Ascii: #XR`8EVso!l{#liVGp@vfnJzGiySz'%&vG~ep"h4}z[Zk5omN7bB+k-iz2w+ijzlLdhyHx=`H/TUV\i[~Aj
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: d8 88 97 72 a1 2d a6 4e 35 b7 a1 9e 15 f0 e0 91 b4 e5 5f 0d ed 5d dc 4d 24 58 f6 81 fe e6 5c 6f 5e d2 a9 f5 5f 52 c3 f3 ba 90 69 ce 71 c4 61 33 03 24 d6 6f 27 3e fa 3d 6c 66 73 57 1c 2b 45 38 64 53 7c aa ef 0e c4 a7 3b d2 ab c0 30 8c 7f 66 98 dc ee 3e 52 a7 4e 83 9a aa a4 06 6d 45 47 c5 1d 3e 14 54 fe 74 dc d8 96 5e bf 3a a2 ae 49 98 c4 ee d9 06 6a a6 56 cb 1e 70 95 84 36 53 cf d5 a9 49 ad e9 a1 b8 42 2f 26 9e 27 b1 e1 df 51 9b 06 d7 f9 81 67 1e ca 2e 3b c0 4b 92 fb 78 75 ef 9e ee 6c c3 71 60 46 20 d8 e9 31 7e eb 6a 62 a3 b9 e2 9e ab 72 3c 44 f5 da ef fc 86 56 7c 95 6f e2 bc ef b4 b8 5a 1b 89 66 36 78 d7 5c 2f ac 0d 75 a2 bc e1 3a f5 1c 11 fb 16 6b 6a 5e a8 22 b8 99 34 c9 ad d7 e2 0f dc 8d 9d de da 15 e9 cd aa 87 87 e3 13 7d 77 75 67 1b 0e c5 7c 73 1c 8e Data Ascii: r-N5_]M$X\o^_Riqa3$o'>=lfsW+E8dS\|;0f>RNmEG>Tt^:IjVp6SIB/&'Qg.;Kxulq`F 1~jbr<DV\|oZf6x\/u:kj^"4}wug\|s
2024-05-27 22:43:45 UTC	1298	IN	Data Raw: b6 b6 1e a6 0f 82 5d 1e c7 bf be 06 7f 30 a8 91 ce f2 b9 cf d4 a5 26 5b 80 a2 f8 f0 f3 b4 95 af 96 55 57 97 d1 24 93 d5 e8 7b 89 b3 60 ec 05 4e fc ef a1 fc f7 ca 14 cb b3 2d 4b 6a f1 69 53 d5 5d b2 c9 56 0d 62 60 43 fa 91 72 9f d9 e0 4a 9d 4e f4 6f 70 0c c0 d8 8d c3 37 e6 f6 a7 9f 9d da 92 19 16 15 a4 b2 c5 b9 c2 f7 3c 54 73 f1 6c ab e9 69 97 78 e1 94 1a a4 0b d2 db 7a aa b2 c9 94 44 c8 28 7a 01 2a 77 aa e8 33 2b 2a 37 6a a3 5d d5 f3 26 27 d8 39 3c 92 06 56 25 0e 2c ee 1f 33 73 ec 8a 8d 04 97 68 5a 47 44 b9 0a e1 e5 0d aa 79 9e ea 59 44 09 9c ff c2 9c 26 c6 bb 41 6e 33 cc eb 68 f4 70 1a 82 a8 39 17 95 7f 8a 94 52 2a 7f ea bd e7 6a 0f 4d 15 9c 0a 31 81 b4 37 bd 30 ba b5 5b c8 f0 47 bd db c6 89 8d e4 0e 6b 4e 5e e1 89 f7 3c 11 f9 09 84 92 d8 46 6a f2 11 e0 Data Ascii: ]0&[UW${`N-KjiS]Vb`CrJNop7<TslixzD(zw3+7j]&'9<V%,3shZGDyYD&An3hp9R*jM170[GkN^<Fj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50301	172.217.18.2	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	661	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Mon, 27 May 2024 22:43:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50302	172.217.18.2	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	670	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Mon, 27 May 2024 22:43:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:45 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 31 69 36 63 55 56 72 78 71 4b 35 2d 58 6a 4b 53 79 2d 5f 4f 4a 50 41 65 34 33 43 6c 37 2d 76 74 34 74 72 31 49 46 41 6f 4f 4b 35 54 38 48 76 71 6d 6d 4f 45 50 59 51 61 48 76 42 5f 6e 67 5a 62 61 34 33 63 72 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKq1i6cUVrxqK5-XjKSy-_OJPAe43Cl7-vt4tr1IFAoOK5T8HvqmmOEPYQaHvB_ngZba43cr","type":4}
2024-05-27 22:43:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50307	172.217.18.4	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	868	OUT	GET /js/th/-IE9NVOjDHeKbguIKoMv97ZGvbdnRzECCJkBZGu5IKs.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:45 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 53485 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 07:36:26 GMT Expires: Tue, 27 May 2025 07:36:26 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 14 May 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 54439 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	579	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 46 3d 31 30 2c 4d 3d 4c 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 70 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 4b 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 4b 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 4b 7d 29 2c 61 3d 36 30 3b 65 6c 73 65 7b 69 66 28 61 3d 3d 76 29 72 65 74 75 72 6e 20 4d 3b 61 3d 3d 68 26 26 28 61 3d 4c 26 26 4c 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 65 3a 76 29 7d 7d 7d 63 61 74 63 68 28 4f 29 7b 69 66 28 35 34 3d 3d 46 29 74 68 72 6f 77 20 4f 3b 31 30 3d 3d 46 26 26 28 42 3d 4f 2c 61 3d 38 32 29 7d 7d 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 52 2c 65 29 7b 72 65 74 75 72 6e 28 65 3d 55 28 32 30 2c 37 38 2c 36 2c 39 36 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 2c 6e 75 6c 6c 29 29 26 26 31 3d 3d 3d 52 2e 65 76 61 Data Ascii: F=10,M=L.createPolicy(p,{createHTML:K,createScript:K,createScriptURL:K}),a=60;else{if(a==v)return M;a==h&&(a=L&&L.createPolicy?e:v)}}}catch(O){if(54==F)throw O;10==F&&(B=O,a=82)}};(0,eval)(function(R,e){return(e=U(20,78,6,96,"error","ad",null))&&1===R.eva
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 69 73 41 72 72 61 79 28 76 29 3f 39 31 3a 33 3b 65 6c 73 65 20 69 66 28 38 35 3d 3d 6d 29 6d 3d 46 20 69 6e 20 54 2e 56 26 26 67 28 52 2c 54 2e 56 5b 46 5d 2c 30 2c 36 29 3f 38 33 3a 33 30 3b 65 6c 73 65 20 69 66 28 33 32 3d 3d 6d 29 6b 28 33 34 2c 22 6f 62 6a 65 63 74 22 2c 30 2c 54 2c 46 2c 4d 2c 76 5b 68 5d 2c 42 29 2c 6d 3d 35 3b 65 6c 73 65 20 69 66 28 36 30 3d 3d 6d 29 46 3d 52 2e 74 79 70 65 2c 6d 3d 38 35 3b 65 6c 73 65 20 69 66 28 31 36 3d 3d 6d 29 77 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2c 52 7c 7c 6d 5f 2e 6c 32 28 29 2c 54 29 2c 6d 3d 37 37 3b 65 6c 73 65 20 69 66 28 35 3d 3d 6d 29 68 2b 2b 2c 6d 3d 38 37 3b 65 6c 73 65 7b 69 66 28 32 39 3d 3d 6d 29 72 65 74 75 72 6e 20 4c 3b 33 3d 3d 6d 3f 28 54 3d 4f 33 28 35 35 2c 39 2c 54 29 2c 46 26 26 46 Data Ascii: isArray(v)?91:3;else if(85==m)m=F in T.V&&g(R,T.V[F],0,6)?83:30;else if(32==m)k(34,"object",0,T,F,M,v[h],B),m=5;else if(60==m)F=R.type,m=85;else if(16==m)w.call(this,a,R\|\|m_.l2(),T),m=77;else if(5==m)h++,m=87;else{if(29==m)return L;3==m?(T=O3(55,9,T),F&&F
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 31 3a 65 3b 65 6c 73 65 20 69 66 28 38 35 3d 3d 4c 29 4c 3d 76 3f 38 39 3a 34 35 3b 65 6c 73 65 20 69 66 28 37 39 3d 3d 4c 29 73 33 2e 63 61 6c 6c 28 74 68 69 73 2c 46 29 2c 4c 3d 33 36 3b 65 6c 73 65 20 69 66 28 33 36 3d 3d 4c 29 4c 3d 28 6d 3d 52 29 3f 39 33 3a 39 32 3b 65 6c 73 65 20 69 66 28 36 35 3d 3d 4c 29 4c 3d 35 3e 28 28 54 7c 39 29 26 37 29 26 26 34 3c 3d 28 54 2b 36 26 31 31 29 3f 31 36 3a 32 3b 65 6c 73 65 20 69 66 28 37 32 3d 3d 4c 29 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 52 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 4b 2c 70 29 7b 66 6f 72 28 70 3d 31 39 3b 33 21 3d 70 3b 29 31 39 3d 3d 70 3f 70 3d 61 2e 63 6c 61 73 73 4c 69 73 74 3f 38 38 3a 35 31 3a 35 31 3d 3d 70 3f 70 3d 54 39 28 35 34 2c 31 36 Data Ascii: 1:e;else if(85==L)L=v?89:45;else if(79==L)s3.call(this,F),L=36;else if(36==L)L=(m=R)?93:92;else if(65==L)L=5>((T\|9)&7)&&4<=(T+6&11)?16:2;else if(72==L)Array.prototype.forEach.call(R,function(c,K,p){for(p=19;3!=p;)19==p?p=a.classList?88:51:51==p?p=T9(54,16
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 3d 33 35 3b 65 6c 73 65 20 69 66 28 36 39 3d 3d 4b 29 4b 3d 28 61 5e 31 37 29 3e 3e 34 3f 33 33 3a 32 36 3b 65 6c 73 65 20 69 66 28 38 34 3d 3d 4b 29 4b 3d 33 31 3b 65 6c 73 65 20 69 66 28 35 30 3d 3d 4b 29 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 3d 65 2c 74 68 69 73 2e 70 72 6f 78 79 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 72 63 3d 46 2c 74 68 69 73 2e 74 79 70 65 3d 54 2c 74 68 69 73 2e 63 61 70 74 75 72 65 3d 21 21 4d 2c 74 68 69 73 2e 4f 61 3d 52 2c 74 68 69 73 2e 6b 65 79 3d 2b 2b 78 49 2c 74 68 69 73 2e 47 59 3d 74 68 69 73 2e 71 44 3d 66 61 6c 73 65 2c 4b 3d 31 37 3b 65 6c 73 65 20 69 66 28 31 3d 3d 4b 29 4b 3d 28 61 7c 38 38 29 3d 3d 61 3f 35 30 3a 31 37 3b 65 6c 73 65 20 69 66 28 31 33 3d 3d 4b 29 7b 69 66 28 52 2e 69 32 2b 3d 28 52 2e 50 3d 28 28 4c Data Ascii: =35;else if(69==K)K=(a^17)>>4?33:26;else if(84==K)K=31;else if(50==K)this.listener=e,this.proxy=null,this.src=F,this.type=T,this.capture=!!M,this.Oa=R,this.key=++xI,this.GY=this.qD=false,K=17;else if(1==K)K=(a\|88)==a?50:17;else if(13==K){if(R.i2+=(R.P=((L
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 2e 56 3d 7b 7d 2c 4c 3d 33 37 29 3a 31 35 3d 3d 4c 3f 4c 3d 31 3c 3d 65 2b 34 3e 3e 33 26 26 36 3e 65 3e 3e 31 3f 38 35 3a 33 32 3a 37 33 3d 3d 4c 3f 28 68 3d 6e 53 2c 54 20 69 6e 20 68 3f 46 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 42 2c 68 5b 54 5d 29 3a 46 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 42 29 2c 4c 3d 39 38 29 3a 31 37 3d 3d 4c 3f 4c 3d 31 35 3a 34 33 3d 3d 4c 3f 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 4d 29 26 26 28 4d 3d 4d 2e 6a 6f 69 6e 28 61 29 29 2c 42 3d 52 2b 54 2c 4c 3d 36 33 29 3a 33 32 3d 3d 4c 3f 4c 3d 28 65 26 31 30 38 29 3d 3d 65 3f 34 33 3a 39 38 3a 34 34 3d 3d 4c 3f 4c 3d 28 65 2b 38 5e 32 32 29 3c 65 26 26 28 65 2d 32 5e 38 29 3e 3d 65 3f 38 39 3a 33 37 3a 34 3d 3d 4c 3f 28 46 2e 73 65 74 41 74 74 72 69 62 75 Data Ascii: .V={},L=37):15==L?L=1<=e+4>>3&&6>e>>1?85:32:73==L?(h=nS,T in h?F.setAttribute(B,h[T]):F.removeAttribute(B),L=98):17==L?L=15:43==L?(Array.isArray(M)&&(M=M.join(a)),B=R+T,L=63):32==L?L=(e&108)==e?43:98:44==L?L=(e+8^22)<e&&(e-2^8)>=e?89:37:4==L?(F.setAttribu
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 31 32 38 29 2d 31 2b 7e 28 52 7c 31 32 38 29 2b 28 52 5e 31 32 38 29 26 26 28 52 5e 3d 31 32 38 2c 54 3d 4e 48 28 74 72 75 65 2c 61 2c 36 2c 32 29 2c 52 3d 28 52 3c 3c 32 29 2b 28 54 7c 30 29 29 2c 68 3d 52 29 29 2c 68 7d 2c 4d 48 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 52 2c 54 2c 46 2c 4d 2c 76 29 7b 66 6f 72 28 76 3d 33 39 3b 36 37 21 3d 76 3b 29 69 66 28 38 35 3d 3d 76 29 76 3d 61 2b 35 3e 3e 32 3c 61 26 26 28 61 2d 39 7c 31 34 29 3e 3d 61 3f 35 35 3a 65 3b 65 6c 73 65 20 69 66 28 33 39 3d 3d 76 29 76 3d 38 35 3b 65 6c 73 65 20 69 66 28 38 34 3d 3d 76 29 4d 3d 52 26 26 52 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 52 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 52 29 3a 6e 75 6c 6c 2c 76 3d 33 30 3b 65 6c 73 65 7b 69 66 28 32 3d Data Ascii: 128)-1+~(R\|128)+(R^128)&&(R^=128,T=NH(true,a,6,2),R=(R<<2)+(T\|0)),h=R)),h},MH=function(e,a,R,T,F,M,v){for(v=39;67!=v;)if(85==v)v=a+5>>2<a&&(a-9\|14)>=a?55:e;else if(39==v)v=85;else if(84==v)M=R&&R.parentNode?R.parentNode.removeChild(R):null,v=30;else{if(2=
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 30 29 2a 70 2d 33 33 30 30 2a 76 2a 42 2d 61 2a 76 2a 76 2a 42 2b 54 5b 4c 2b 34 33 26 37 5d 2a 76 2a 70 2d 70 2a 42 2d 20 2d 34 30 37 30 2a 42 2c 54 29 5b 55 5d 2c 76 6f 69 64 20 30 29 2c 54 5b 28 4c 2b 34 35 26 37 29 2b 28 2d 7e 28 46 7c 52 29 2d 28 7e 46 26 52 29 2b 28 7e 46 7c 52 29 29 5d 3d 4b 2c 54 29 5b 4c 2b 28 2d 7e 28 46 26 52 29 2b 28 46 26 2d 33 29 2b 28 7e 46 5e 52 29 2b 28 7e 46 26 52 29 29 5d 3d 36 30 2c 4b 7d 2c 63 3d 6d 29 2c 63 7d 2c 4f 33 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 52 2c 54 2c 46 2c 4d 2c 76 2c 42 2c 68 2c 6d 2c 4c 29 7b 66 6f 72 28 4c 3d 65 3b 38 38 21 3d 4c 3b 29 7b 69 66 28 34 39 3d 3d 4c 29 72 65 74 75 72 6e 20 6d 3b 69 66 28 33 37 3d 3d 4c 29 4c 3d 31 3d 3d 28 61 7c 34 29 3e 3e 33 3f 31 34 3a 34 39 3b 65 6c 73 65 20 Data Ascii: 0)p-3300vB-avvB+T[L+43&7]vp-pB- -4070B,T)[U],void 0),T[(L+45&7)+(-~(F\|R)-(~F&R)+(~F\|R))]=K,T)[L+(-~(F&R)+(F&-3)+(~F^R)+(~F&R))]=60,K},c=m),c},O3=function(e,a,R,T,F,M,v,B,h,m,L){for(L=e;88!=L;){if(49==L)return m;if(37==L)L=1==(a\|4)>>3?14:49;else
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 69 6f 6e 28 65 2c 61 2c 52 2c 54 2c 46 2c 4d 2c 76 2c 42 2c 68 2c 6d 2c 4c 2c 4f 2c 63 2c 4b 2c 70 2c 55 29 7b 66 6f 72 28 70 3d 36 39 3b 32 21 3d 70 3b 29 69 66 28 35 37 3d 3d 70 29 70 3d 33 3d 3d 28 65 3e 3e 32 26 31 35 29 3f 39 38 3a 32 34 3b 65 6c 73 65 20 69 66 28 36 32 3d 3d 70 29 4c 3d 48 28 31 37 2c 52 2c 54 29 3f 21 21 54 2e 63 61 70 74 75 72 65 3a 21 21 54 2c 28 4f 3d 70 53 28 36 31 2c 42 2c 35 29 29 7c 7c 28 42 5b 4b 53 5d 3d 4f 3d 6e 65 77 20 63 66 28 42 29 29 2c 6d 3d 4f 2e 61 64 64 28 68 2c 46 2c 76 2c 4c 2c 4d 29 2c 70 3d 31 30 3b 65 6c 73 65 20 69 66 28 38 36 3d 3d 70 29 6b 28 31 30 2c 74 72 75 65 2c 54 2c 42 2e 55 29 2c 70 3d 35 37 3b 65 6c 73 65 20 69 66 28 35 36 3d 3d 70 29 46 2e 73 72 63 3d 61 2c 42 5b 4b 53 5d 3d 61 2c 70 3d 35 37 3b Data Ascii: ion(e,a,R,T,F,M,v,B,h,m,L,O,c,K,p,U){for(p=69;2!=p;)if(57==p)p=3==(e>>2&15)?98:24;else if(62==p)L=H(17,R,T)?!!T.capture:!!T,(O=pS(61,B,5))\|\|(B[KS]=O=new cf(B)),m=O.add(h,F,v,L,M),p=10;else if(86==p)k(10,true,T,B.U),p=57;else if(56==p)F.src=a,B[KS]=a,p=57;
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 35 38 3a 39 38 3d 3d 70 3f 28 55 3d 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 55 2e 73 72 63 2c 55 2e 6c 69 73 74 65 6e 65 72 2c 7a 29 7d 2c 61 3d 52 73 2c 4b 3d 55 2c 70 3d 32 34 29 3a 31 3d 3d 70 3f 70 3d 46 3f 31 31 3a 33 39 3a 31 37 3d 3d 70 3f 28 63 3d 46 6b 28 31 32 29 2c 6d 2e 70 72 6f 78 79 3d 63 2c 63 2e 73 72 63 3d 42 2c 63 2e 6c 69 73 74 65 6e 65 72 3d 6d 2c 70 3d 36 29 3a 39 34 3d 3d 70 3f 28 42 2e 61 74 74 61 63 68 45 76 65 6e 74 28 62 49 28 36 2c 35 2c 22 6f 6e 22 2c 68 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 63 29 2c 70 3d 34 31 29 3a 35 33 3d 3d 70 3f 70 3d 32 3d 3d 28 28 65 5e 36 35 29 26 32 33 29 3f 31 34 3a 34 36 3a 31 34 3d 3d 70 3f 70 3d 68 3f 36 32 3a 35 3a 33 30 3d 3d 70 3f 28 42 2e 61 64 64 4c 69 Data Ascii: 58:98==p?(U=function(z){return a.call(U.src,U.listener,z)},a=Rs,K=U,p=24):1==p?p=F?11:39:17==p?(c=Fk(12),m.proxy=c,c.src=B,c.listener=m,p=6):94==p?(B.attachEvent(bI(6,5,"on",h.toString()),c),p=41):53==p?p=2==((e^65)&23)?14:46:14==p?p=h?62:5:30==p?(B.addLi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50303	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	783	OUT	GET /9TzWtxtT-9Vrlwa8SXTSKhfl91Ndy4hU-1uLE9-hFsVSHARAOlFEdFExVR4QCegJ-KUBTSlJm3DZY6g31sbVrUT_HfxQvX_7WgLp=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1502 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:12 GMT Expires: Tue, 28 May 2024 21:14:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5373 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 05 95 49 44 41 54 78 9c ed 9d 4d 6c 15 55 14 80 bf 79 7d 2d 3f e2 23 b1 c2 ab 91 2a 2a f5 0f 35 52 7d 26 84 18 ab 24 8d e0 42 5c 98 b0 70 81 11 a3 31 f1 27 ae 5c b9 20 31 86 18 0c d1 0d c6 28 d1 8d 2e 8c c4 8d 92 46 85 98 20 88 20 fe 50 0d 28 02 09 46 f9 6b a5 16 0a ed 9b 77 5d 0c 18 22 bf 6d ef 9d 3b e7 70 be 64 d2 4d 73 ce 79 f3 cd dc 7b e6 be 99 79 60 18 86 61 18 86 61 78 27 09 9d c0 f5 f0 28 f0 3c 30 2f 74 2e ef 24 c0 df 1c e5 17 66 26 2f 73 28 76 39 63 21 98 60 b7 96 6b 28 f1 29 30 3b 54 8e e0 24 c0 61 e0 20 fb 69 e6 b6 e4 69 79 92 83 08 76 6b b9 8e 12 bf 01 a5 10 f1 73 23 01 fa 80 03 40 89 01 ca cc Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxMlUy}-?#**5R}&$B\p1'\ 1(.F P(Fkw]"m;pdMsy{y`aax'(<0/t.$f&/s(v9c!`k()0;T$a iiyvks#@
2024-05-27 22:43:45 UTC	643	IN	Data Raw: 0c 93 ee 16 d5 4d cb 11 0c d0 52 83 a4 25 5e fe a4 05 5a ee 89 97 7f 0c c8 11 ec 80 72 01 5e 3d 55 ae da 19 1c 8c c6 50 ec 0a c0 c9 fa 9a 49 8e e0 04 a8 ef 25 ee 75 4a 0a 23 bd a2 6e 08 90 23 18 e0 f8 07 90 1e 8f 97 3f 3d 01 43 1f c7 cb 3f 06 e4 08 4e 80 21 60 f8 68 bc 1a 86 07 e0 38 76 06 07 a3 04 1c dc 14 2f ff a1 cd d2 f6 98 b0 72 4b c0 be e5 f1 f2 ef 5b 21 6d 8f 09 2b 37 01 fa 37 c0 e0 af f9 e7 3e b6 1b fa be 12 35 3c 83 34 c1 90 2d 15 ee 7c 3b ff bc 3b df 11 b7 4c 09 12 05 97 80 03 af 41 df f7 f9 e5 3c fc 1d fc f9 8a c4 bd 25 b1 64 b2 aa b7 cd 81 74 30 7c ae f4 28 fc 70 6f f6 45 87 40 64 0a 4e c8 ee 5b de f2 24 61 d7 0d 1b b0 65 29 8c 1c 13 37 f7 9e 42 a6 60 c8 2a ef ff 10 36 2f 01 37 ec 3f be 1b 81 6f 97 66 39 e4 ee 25 c9 a5 93 0d 9b 7d ef c3 a6 45 Data Ascii: MR%^Zr^=UPI%uJ#n#?=C?N!`h8v/rK[!m+77>5<4-\|;;LA<%dt0\|(poE@dN[$ae)7B`*6/7?of9%}E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50299	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	798	OUT	GET /T4GMYGBcpiDg5gCEZGSvQWbkwLHRELiaWN-BAAPD8Skd-YAEBhCxSR7_a5HjrHhqhgYDLvk7Ck_Y_R3-uM_UTA4prjTHB2ecsUG9EfjDcMyX7GxSju8=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2222 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:38:04 GMT Expires: Tue, 28 May 2024 21:38:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 3941 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 08 65 49 44 41 54 78 9c ed 9d 5f 8c 5c 55 1d c7 3f 77 77 a7 bb b5 b7 4a 2c 9d b6 6a 62 20 d5 50 79 90 94 99 8a 18 8b bd 33 35 4d 4c 2c 65 82 9d 6d a5 98 40 8c 2f 8a b8 85 2a d7 c4 60 bc 4d ea 5a 84 e8 83 0f 42 22 95 76 5a 5c 68 4d 8c 7f b2 73 1b 68 50 ec 2c 88 21 11 a2 35 c8 4b a1 b3 58 ff dd 76 43 77 76 ae 0f b3 55 5a 76 d9 7b e7 9c 73 ef 9c bb e7 93 f4 65 7b ce ef fb cb f9 ee bd 67 ef f9 0b 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 61 91 62 a5 9d 80 0c 1c 2f 18 06 0e 4a 0e bb c3 77 ed 43 92 63 26 8e f6 06 97 bc 60 75 08 af a9 88 6d c1 9a ba 6b bf ae 22 76 52 f4 a5 9d 80 28 21 Data Ascii: PNGIHDRxx9d6sBIT\|deIDATx_\U?wwJ,jb Py35ML,em@/*`MZB"vZ\hMshP,!5KXvCwvUZv{se{g`0`0`0ab/JwCc&`umk"vR(!
2024-05-27 22:43:45 UTC	1363	IN	Data Raw: 2a 3b 44 87 35 65 f4 c1 f7 c6 28 fb f2 62 35 17 20 57 6e 6d 00 5e 8e 51 25 4e db ce 89 90 c1 ce de 60 39 70 5d d4 f2 21 5c 2f a2 97 11 e2 b4 c1 75 17 c6 07 e2 74 7d 6f 43 ec 09 0e d9 1a a3 f4 c8 71 d7 3e 2f a4 97 01 72 e5 d6 79 60 24 6a 79 8b 58 6d fc 36 44 5f d1 a5 a8 05 7d d7 7e 40 50 2b 33 e4 ca ad 38 6d 11 b9 8d e7 42 d4 e0 f5 11 cb 3d 2c a8 93 45 a2 b6 49 d4 36 9e 13 51 83 d7 46 2c f7 a4 a0 4e 16 89 da 26 51 db 78 4e 44 0d 8e 34 81 1f c2 ef 05 75 b2 87 15 b9 4d 84 16 49 24 b2 aa f2 b8 6b 2f da 31 ea f9 c8 95 5a 89 b4 89 56 cb 66 0d f1 31 06 67 1c 63 70 c6 31 06 67 9c 54 16 be 27 85 e3 05 9f 02 2a c0 27 81 ab 81 65 74 26 58 ce 01 af d2 99 77 7d d2 77 ed 5f a5 95 a3 6a 32 69 b0 e3 05 2e f0 4d 60 68 9e 22 36 70 ed ec bf 2f 3a 5e d0 06 46 7d d7 fe 7a 42 Data Ascii: ;D5e(b5 Wnm^Q%N`9p]!\/ut}oCq>/ry`$jyXm6D_}~@P+38mB=,EI6QF,N&QxND4uMI$k/1ZVf1gcp1gT''et&Xw}w_j2i.M`h"6p/:^F}zB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50300	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	798	OUT	GET /hHWA5otDm9mYUJdAqTjo7wBWj8euY-SdEhCffO7oQzG3zpzxm-YExt1VDB8X6_5gchW_Ye3bfhOJXyOWgcUr94GtgqltKP4IxiH02O-Xzw5A1IHsxiw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3318 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:35 GMT Expires: Tue, 28 May 2024 22:42:35 GMT Cache-Control: public, max-age=86400, no-transform Age: 70 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0c ad 49 44 41 54 78 9c ed 9d 7f 6c 5d e5 79 c7 3f cf 39 e7 de eb df 8e e3 24 4e 8c 92 10 13 7e 43 9a 52 28 75 ba ae ab 40 6d 29 34 36 1d b5 57 4d 6d a3 55 45 5b 55 c4 58 ec aa 12 93 26 75 ff 74 c4 93 ca b4 75 e3 c7 e8 a6 69 15 37 50 b0 0b a5 f4 8f 42 c7 98 1d 5a b1 55 b4 69 42 4b e3 10 02 01 3b 24 b6 e3 24 f6 f5 39 e7 d9 1f f7 3a 76 1c c7 f7 9c 7b cf fd e1 eb f7 23 59 91 6f de f3 3c af df af 9f f7 c7 f3 be e7 35 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 50 58 a4 d4 15 98 47 62 60 48 2f 03 2e 07 d6 29 34 03 55 02 76 a9 2a a4 a0 a2 4c ab 30 26 ca 08 c2 9b aa 1c e8 dc 21 a7 4a 55 a7 b0 94 4c Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxl]y?9$N~CR(u@m)46WMmUE[UX&utui7PBZUiBK;$$9:v{#Yo<5`0`0PXGb`H/.)4Uv*L0&!JUL
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: df bc 86 1b af 6f a1 b5 a5 06 d7 5d 2c aa 15 b1 e4 b2 8e 8f c8 a1 28 ab 12 aa c9 06 86 f4 6e e0 a1 28 bb c4 59 61 4f 8e a7 78 61 df 5b 3c f6 e2 28 d4 d9 10 97 74 df 5c 09 28 30 e3 c3 19 9f ed 1b ab f8 d2 ad 9b b8 a2 ad 09 df 5f 20 b4 f0 5c 67 bb dc 1e a5 eb 70 02 0f ea a8 c2 9a a8 9c 3b 36 4c 4d 7b 3c ff df 6f f2 e8 8b 23 d0 e0 a4 a3 b5 92 f1 15 4e fb 5c d3 12 e7 6b 77 6c 61 cb a6 46 5c 77 76 72 e6 63 3b 56 d3 ce 9b 65 2c 2a 77 81 5b b3 7f 48 3f 2c f0 4a 14 d1 2b 02 31 07 fe 6f ff 28 f7 3f 39 9c 16 35 1e 49 d6 74 f9 e0 2b 4c 78 dc b9 bd 91 2f 7c e6 72 aa ab 6c 3c 0f 44 f8 56 47 bb fc 4d 54 6e 02 b7 aa c0 d7 a2 10 d7 b2 c0 f3 95 ef 26 0f 70 ff de 43 50 63 af 3c 71 21 3d fc ac 72 78 fa 77 93 74 fd dd ab fc f6 d0 09 e2 71 40 b9 27 4a 37 c1 23 78 d0 4f 81 c4 Data Ascii: o],(n(YaOxa[<(t\(0_ \gp;6LM{<o#N\kwlaF\wvrc;Ve,*w[H?,J+1o(?95It+Lx/\|rl<DVGMTn&pCPc<q!=rxwtq@'J7#xO
2024-05-27 22:43:45 UTC	1067	IN	Data Raw: 71 d7 8d 1f a4 a6 ba 3a 6f 71 81 53 4f f4 c8 1b 41 0a 46 26 f0 3d 77 c9 84 ef 73 60 fb 95 97 f3 47 57 b4 a5 45 5e e9 6b 63 05 52 2e db 5b 9a f9 e4 0d 1f c0 71 f2 1a 73 e7 f3 1f 41 0b 46 ba 45 a0 f0 a0 e7 c1 86 75 6b f9 dc 4d 37 b0 b9 b6 3a 23 74 94 5e 96 09 9e 87 63 09 b7 6d bb 9a 6b b6 b6 9d bb f5 2e 22 fe 31 68 c1 c8 d7 36 5d 7b 5c 15 b1 cf dd 58 37 fa fe 49 5e 7c 63 18 77 c6 4d 5f 5f 57 e9 cb 29 2f 7d f9 d5 47 b7 6c 64 63 6b 2b 10 79 47 f6 66 b2 47 2e 0d 5a 38 f2 b7 c3 44 ec 07 81 7b 55 c1 f3 a0 b9 a9 89 cf df dc c4 c8 c8 71 5e 3d 72 94 b1 b3 d3 69 a1 ad 0a da 5f 54 4d 0b 6b 59 b4 6f 6a 65 63 6b 2b b6 25 51 8c b5 17 ba 82 9e 30 e5 0b 11 4e 55 5d 7b dc b3 22 e7 9f b0 9c 8d e8 f1 89 49 de 1e 19 e1 97 23 27 d2 bf 01 b3 b7 8d 2e a7 c8 9e bd 52 36 b3 2c bc Data Ascii: q:oqSOAF&=ws`GWE^kcR.[qsAFEukM7:#t^cmk."1h6]{\X7I^\|cwM__W)/}Gldck+yGfG.Z8D{Uq^=ri_TMkYojeck+%Q0NU]{"I#'.R6,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50306	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	566	OUT	GET /kLMr5zuHxfe-IxhnKdLp_1JkP5sl2ova0svHjQkFnV1q8X7yE6uA9p8AToT_L7xL5s5EIayVVVljNtp7BgoL69PtZ-Mf00qUbpTLfrrqXWv99tatmXI=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2454 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:25:55 GMT Expires: Tue, 28 May 2024 20:25:55 GMT Cache-Control: public, max-age=86400, no-transform Age: 8270 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 09 5d 49 44 41 54 78 9c ed 9d 7d 90 55 65 1d 80 9f 73 ce fd be 77 f7 26 6b 83 59 0e 35 1a d5 8c a3 a6 36 8c 45 35 4e 60 cc f8 07 a5 35 7d 58 53 39 a9 39 59 93 69 53 36 63 29 7d d9 07 e5 18 35 4a 49 0e 4e a2 b0 c2 9a 0a 1b 84 ec 82 c0 82 0a ca 2e 6e 0b d8 c2 82 21 db ee 28 0b 2c 2e b0 f7 f4 c7 ef 5e d8 d9 65 77 ef b9 f7 9c f3 9e 7b ce fb cc dc 19 66 39 f7 bc bf e5 e1 7d df df fb 71 de 63 d8 b6 8d 26 bc 98 aa 03 d0 78 8b 16 1c 72 b4 e0 90 13 73 72 f1 05 d7 fd bd dc 4b e3 c0 fb 80 fa e2 9f 0b c0 db c0 be c3 7d 47 de 9a 7b eb 2c 2e 9f 75 11 03 fd a7 9c 14 ef 1a 86 61 90 cc 58 6c 59 d9 4e 6b e3 56 32 75 29 25 71 b8 c1 fe e5 37 4c f8 f7 8e 04 97 41 3d 30 07 Data Ascii: PNGIHDRxx9d6]IDATx}Uesw&kY56E5N`5}XS99YiS6c)}5JIN.n!(,.^ew{f9}qc&xrsrK}G{,.uaXlYNkV2u)%q7LA=0
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: e4 17 48 f6 ed 1b 5a b0 7f 18 c0 8f 91 6d bd 5f f3 ab 50 2d d8 7f a6 02 8f 20 0f ba 7b fe 94 a6 16 ac 8e 19 c0 06 60 29 72 84 85 27 68 c1 ea f9 3c d0 09 dc 8d 07 db 86 b4 e0 60 90 05 e6 21 89 d8 57 dc bc b1 16 1c 2c de 03 3c 8a 34 dd 57 b8 71 43 2d 38 98 cc 04 5e 44 f6 70 57 b5 2c a9 05 07 9b 1b 91 61 d5 dd 95 de a0 f6 04 db 60 98 06 89 54 8c 28 3c 99 80 6c eb 9d 07 3c 47 05 9b f4 6b 4b b0 0d 86 65 10 8b 59 0c 0d 0e 11 4b 98 44 e8 8d 04 57 03 eb 71 78 00 4d ed 08 b6 c1 8c 99 e4 f2 16 9d 5b f7 b0 78 5e 13 af ef ee 25 df e0 f6 89 c8 81 e6 fd c8 bc 76 d9 c7 68 d4 84 60 db 06 33 66 50 3f c5 a4 7d e3 3e d6 3c ba 91 de 9e 7e 56 3e dc c2 fe 5d fd 22 39 3a 35 79 26 72 42 6f 59 04 5e b0 6d 43 2c 6e 90 cb 5b 6c 5f d7 cd 33 0b d7 32 3c 3c 4c c3 f9 e7 70 b8 ff 28 cb Data Ascii: HZm_P- {`)r'h<`!W,<4WqC-8^DpW,a`T(<l<GkKeYKDWqxM[x^%vh`3fP?}><~V>]"9:5y&rBoY^mC,n[l_32<<Lp(
2024-05-27 22:43:45 UTC	205	IN	Data Raw: 28 88 c6 01 95 8e 83 17 b8 1a c5 d9 19 42 1e d8 fa 10 f0 0f 1f ca 0b 25 95 0a 6e 45 de 62 ed 15 7f 05 de 8b 3c 6a 79 ca c3 72 42 4f 35 33 59 3f 02 5e 71 2b 90 22 9b 90 97 4d dc 84 9a 7e 3e 74 54 23 f8 10 d2 37 3a 3a 79 6d 1c 0e 00 d7 23 db 65 5c 39 5d 46 23 54 3b 17 bd 0f 59 5b fd 57 85 df 3f 0e dc 0b 4c 47 56 7d 34 2e e3 c6 62 c3 21 60 36 70 0b 32 d1 5f 0e a7 80 a5 c8 78 f6 1e 44 b4 c6 03 dc 9c aa 5c 88 1c 09 34 07 69 ba af 02 1a 90 99 2f 13 c9 8a 77 20 e3 d9 46 64 17 a3 c6 63 8c 1a 3b 4e 57 e3 90 30 ae 07 6b 46 a0 05 87 1c 2d 38 e4 68 c1 21 e7 ff 7e ec 67 4d 5a b8 75 39 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: (B%nEb<jyrBO53Y?^q+"M~>tT#7::ym#e\9]F#T;Y[W?LGV}4.b!`6p2_xD\4i/w Fdc;NW0kF-8h!~gMZu9IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50304	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	785	OUT	GET /WdC-o7ZcZL5WALPSmfUC8H4oYhlhqm1DV45CtHqV06DTRR0rE_P9JXi-J2KXLd9CTyHt_t3ehUm1o_AMltgfAGbvQDku8jsZt0kBSA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:45 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5188 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:35 GMT Expires: Tue, 28 May 2024 22:42:35 GMT Cache-Control: public, max-age=86400, no-transform Age: 70 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:45 UTC	861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 13 fb 49 44 41 54 78 9c ed 9d 79 94 54 d5 9d c7 3f bf fb 5e 55 75 75 37 08 34 34 3b b2 89 4b 04 85 6e 88 4d 70 10 34 89 89 46 65 1b 05 cd c4 19 e3 cc 64 72 c6 99 31 89 11 15 93 13 25 c6 85 71 22 71 c6 c4 68 96 89 82 0b a8 89 33 21 b2 39 c6 08 4d 37 b8 60 5c a2 80 6c 0a cd 26 dd 4d 77 55 57 bd fb 9b 3f 5a 3c 34 54 35 55 dd f5 aa aa a1 3e e7 70 0e d4 7b ef fe 7e ef 7d b9 fb bd bf 0b 05 0a 14 28 50 20 4f 91 5c 3b 90 29 76 5c fa 19 13 8a 84 4b 50 c2 16 29 c2 12 c2 d8 a0 5a e3 62 ac 0b c6 00 82 05 03 d6 62 2d 62 3c 11 1b 57 24 66 20 aa 10 41 24 62 e2 72 a8 cf 8b eb e2 b9 7e a7 4c d0 65 05 ae 9b 32 a1 3b 62 7b Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxyT?^Uuu744;KnMp4Fedr1%q"qh3!9M7`\l&MwUW?Z<4T5U>p{~}(P O\;)v\KP)Zbb-b<W$f A$br~Le2;b{
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: ab 70 8f 20 e7 89 14 c4 6d 17 a5 01 65 21 ae b9 a7 7c 45 f5 c7 7e 99 c9 58 2b fa 40 a8 db 04 d0 bb 04 3e 5b d0 f6 38 28 87 3e 15 77 79 f5 41 3f 4d 65 44 8a 3d 53 c7 9f a1 f0 90 8a 4e 2e 14 cb c7 41 89 a0 dc 87 6b ee 2d 5f 5e 5d ef b7 b9 4e ab b1 ff f3 15 65 71 cb af 50 73 49 41 db e3 a0 58 e0 0e 1c b3 a0 7c 79 75 43 36 4c 76 ba 91 15 f7 58 80 48 41 dc e3 a1 00 7c 0f c7 dc 5f be bc fa 50 b6 cc 76 4a e0 ba 0b c7 df 02 7c 2d 43 be f8 88 02 82 2a cd 82 b5 2a 12 14 24 7b 93 1c 0a 20 37 e3 ca 8f cb 5f a8 ce ea aa 8f 0e e7 bb ba 0b 2b aa c0 bc 84 0f 7d e9 ce a0 b0 1b d8 20 aa af 83 6c c6 c8 76 d4 db 0f 26 ae 16 4f f0 d4 1a 31 06 e3 2a da 0d 64 a0 28 c3 41 cf 02 ad 40 64 64 46 07 66 5a c5 9d 47 d0 f9 51 f9 b2 35 59 5f 8a db a1 37 a9 bb 74 72 88 43 4d 6f 63 18 96 Data Ascii: p me!\|E~X+@>[8(>wyA?MeD=SN.Ak-_^]NeqPsIAX\|yuC6LvXHA\|_PvJ\|-C*${ 7_+} lv&O1d(A@ddFfZGQ5Y_7trCMoc
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 45 84 b2 64 d7 db 0a 6c 29 02 1d e8 a3 3b eb 62 26 78 a2 d4 7f 79 82 20 48 d9 39 f3 f6 25 ac 57 db 08 2c 22 21 90 72 3f dc 50 c0 0a 6f 87 a7 36 16 e6 7b 33 8d 52 d6 d3 75 4b 13 5d 6a 9b 83 8d 0d 22 9a 34 bb 77 06 41 1b 04 cf b7 50 05 27 35 42 0f 71 4c 49 a2 4b 6d 5a d1 16 71 05 e9 ee c7 7a 3a 55 d9 a1 f6 84 e9 9e e4 1b dd 91 c4 5b 89 8e aa 83 c5 45 7d da 73 24 ba 17 43 a1 81 e5 0f 25 82 24 d4 ed e8 81 0e df 42 1b 8a 4a bd b4 8e 48 17 c8 38 1a 46 35 e1 8e 93 a3 05 f6 33 10 43 94 82 c0 be a0 48 d0 8a 24 5c 9d 73 a2 05 e1 3e 29 11 70 1d 34 a1 96 47 ff e8 67 17 26 94 c0 5e 81 4c 91 44 b9 a3 b3 b5 6f 45 a8 8a 76 d7 82 c0 7e e1 21 92 50 bb a3 fa c1 1a 47 f0 69 eb a3 f4 21 cf 02 b6 9c 28 28 c4 6d 92 cc 69 da fe 43 e3 d2 7a 96 5f c6 11 d5 41 62 13 b7 f4 0a 74 0e Data Ascii: Edl);b&xy H9%W,"!r?Po6{3RuK]j"4wAP'5BqLIKmZqz:U[E}s$C%$BJH8F53CH$\s>)p4Gg&^LDoEv~!PGi!((miCz_Abt
2024-05-27 22:43:45 UTC	1390	IN	Data Raw: 71 45 d6 4e 7b 49 87 2f dc ac dd 1a 5c f7 2e 11 ee cb 92 b8 4d 8a 3e 91 aa b8 90 46 6e 5c 3f 7b 69 8d 55 9e 21 bb 21 88 42 22 32 4b d4 59 33 76 f1 f4 2b b2 68 f7 b8 54 fd fc 9e d1 91 be b5 bf 17 2d fa 16 22 09 77 d7 67 1a 6b d9 de 54 d4 fc 93 74 9e 49 ab 13 7e de a3 d3 8a e3 45 6c c4 18 ff 22 f1 b4 8b 2e 77 5d 67 f6 da 99 4f e5 f4 f8 9a 8a 45 d3 ef 12 bc 9b c4 f6 36 45 fb 66 13 38 38 09 8c 87 bf 5b bb 88 ab ea b7 56 df d6 ed 81 74 1e 4a 7b 94 a5 72 d1 f4 af 20 f2 24 b9 3a 9c d2 02 a2 8f b8 c4 6f 5d 3b fb b7 59 8b 56 fb 00 2b e4 d7 8b 1f ba d9 a2 77 9a 4f 4b 3e 0f 68 26 58 3f 87 d0 be 2f 23 5e 09 64 66 5c 20 01 f6 cd 55 b7 76 1f 9d ee 53 1d 1a 46 ab 5c 34 fd 57 88 fc 4d 47 9e cd 14 d6 02 e8 22 c7 c8 c3 d1 b0 57 1d 68 92 d8 fa d9 cf 64 ac fa a8 58 3c 2d 20 Data Ascii: qEN{I/\.M>Fn\?{iU!!B"2KY3v+hT-"wgkTtI~El".w]gOE6Ef88[VtJ{r $:o];YV+wOK>h&X?/#^df\ UvSF\4WMG"WhdX<-
2024-05-27 22:43:45 UTC	157	IN	Data Raw: d6 f6 b6 22 bd 04 ca 04 06 29 32 02 74 08 68 7f a0 2f 2a 65 2a 74 37 aa 25 7a c4 60 b8 e5 93 bf 2b 51 11 69 40 39 88 e8 1e a0 0e e4 43 84 6d 78 f2 81 15 dd 85 ea 01 11 0e 88 d8 3d b5 57 3d 9b b7 9b e0 92 d1 65 05 3e 9a aa 67 e7 98 68 34 56 8c da 62 51 1b 42 34 a4 d6 04 31 12 30 d6 3a d6 60 0e ef 48 f8 e4 00 0b c5 e2 19 31 71 94 98 1a 6d 41 89 1a 43 44 8c d3 bc 6e d6 53 cd 39 7e a5 02 05 0a 14 28 70 62 f3 ff 0d ff 95 78 60 27 35 38 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ")2th/et7%z`+Qi@9Cmx=W=e>gh4VbQB410:`H1qmACDnS9~(pbx`'58IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50309	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:46 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:45 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:46 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50311	172.217.18.22	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	460	OUT	GET /vi/KKfAuQrwzTY/sddefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	655	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 25064 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:43:46 GMT Expires: Tue, 28 May 2024 00:43:46 GMT Cache-Control: public, max-age=7200 ETag: "1652115046" Content-Type: image/jpeg Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	735	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0d 0a 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 08 0d 0d 0a 0d 08 08 08 08 08 0d 08 0a 08 0d 10 0d 08 08 0e 0a 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 08 0f 15 0f 0f 0f 12 15 12 15 12 12 12 15 15 15 15 12 15 15 15 15 12 15 15 15 15 15 15 15 15 12 15 15 15 15 15 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 e0 02 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 02 04 01 05 06 07 08 ff c4 00 56 10 00 02 01 02 02 05 07 07 06 09 08 09 05 00 03 01 00 01 02 03 11 04 21 05 12 31 41 51 06 61 71 81 91 a1 f0 07 13 22 52 b1 c1 d1 42 62 92 a2 a3 Data Ascii: JFIF"V!1AQaq"RBb
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: a5 83 d6 76 bf 77 de 37 41 95 50 36 33 d1 96 f9 5d df 79 bd d1 bc 8c 55 62 a4 ab 5a fb 57 9b bd ac ed eb 93 92 ad 44 67 b3 91 03 b9 5e 4f ff 00 3f f6 5f c4 08 f9 3e be 5e 7f ec bf 88 5d f0 bb 25 c3 01 de 2f 27 7f 9f fb 2f e2 19 fe 8e bf 48 fb 2f e2 0d f0 6c 97 04 07 7f 0f 27 17 ff 00 88 fb 2f e2 11 a7 e4 ee f7 ff 00 48 d8 da ff 00 65 c3 ff 00 90 6f 85 d9 67 04 07 a1 2f 26 9f a4 7d 97 f1 0c af 26 9f a4 7d 97 f1 46 f8 38 ec f3 c0 3d 16 3e 4c 7f 48 fb 1f e2 93 7e 4b bf 49 fb 1f e2 8d f0 71 d9 e6 e0 7a 44 7c 96 fe 93 f6 3f c5 18 bc 95 7e 93 f6 3f c5 1b e0 e3 b3 cc c0 f4 bf e8 ab f4 9f b1 fe 29 25 e4 a3 f4 9f b1 fe 28 df 07 1d 9e 64 07 a6 ff 00 45 1f a4 fd 8f f1 4c ff 00 44 df a4 fd 8f f1 46 f8 38 ec f3 10 3d 3d 79 25 fd 27 ec 7f 8a 67 fa 25 fd 27 ec 7f 8a 4d Data Ascii: vw7AP63]yUbZWDg^O?_>^]%/'/H/l'/Heog/&}&}F8=>LH~KIqzD\|?~?)%(dELDF8==y%'g%'M
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: fc 97 e8 1a 38 88 55 75 69 a9 b8 c9 28 df 5b 24 e3 77 b1 f1 f6 1c 3e 91 a5 ab 3a 89 6c 53 9a 4b 82 8c e4 97 72 47 a9 f9 20 c3 b8 c3 11 16 ac e3 53 55 ae 0e 29 c5 f7 a3 cc f4 ba fc 6d 5f ed 2a 77 54 91 d7 4e d9 d4 b3 9d e3 e4 87 4d ca da 2a b6 0f 0d 88 8a 57 8a f3 73 b7 0d 8a f6 f9 d1 5f 48 67 20 70 ab f0 5c 6c da 4d ea 38 a6 ed ba 9b 6f 6e cc cb 7c 81 4b 13 85 af 86 93 57 b3 71 e6 d6 57 8b 5c ea 49 1b 3d 0d a2 e7 87 d1 b5 f5 d3 8c e5 0a 92 92 7b 57 a2 d2 ee 39 5a f8 8d bf 76 e2 b9 98 b7 d9 e5 36 3d 3b 90 fc 98 c3 2c 3f e1 15 d4 67 ad 17 27 af f9 34 e3 1b ec 5c 72 da 79 9d 8f 5a c3 3b e8 97 fd 84 fb b5 8e be a2 66 22 22 27 bc b1 a3 11 99 cf 84 b0 74 74 5d 69 28 42 14 5c 9e c4 a3 66 f2 dd 7d e7 03 cb dd 03 1c 1d 55 18 36 e1 34 e5 14 ef 78 e7 66 af f2 96 79 Data Ascii: 8Uui([$w>:lSKrG SU)m_wTNMWs_Hg p\lM8on\|KWqW\I={W9Zv6=;,?g'4\ryZ;f""'tt]i(B\f}U64xfy
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: bd 66 71 1d 59 9d 2b 44 66 7a 38 c8 9e d9 c8 9f fd 2d 0f d5 5e d3 c5 12 3d a7 90 99 e1 28 f3 47 d8 d9 cf d4 fb 7e 5a d0 ef 2e 9e 31 07 02 54 f6 19 67 27 a1 63 43 47 d3 5d 0f d8 74 f7 cb a9 7b 73 cd 9c d6 89 fc b5 d6 74 50 9d bc 7c 4f 2e b7 77 b3 43 b1 b4 67 96 d5 1d bd 3b 1f c0 55 1a 8b 2d f6 dc b6 f7 5e c0 a6 df c3 2e 73 32 95 9a c9 6d f7 3d c8 e0 f4 19 4e 77 7c cf 6d c5 46 16 6f e3 7e 06 7c e5 b7 af 0c 5d 69 df 64 92 e8 bd de ed cf 60 c2 e5 39 a8 df 36 d7 66 fb 6c 30 ed ba fb d6 6b 85 fe 24 66 9a 4a f2 79 f5 0b 8d 7b df 6e d7 bf 9b 8a 2a 0a 73 77 cd 64 94 77 6c b5 f7 18 85 44 f9 bb 56 dd 9d e2 5e 29 26 b6 f6 bd e9 58 c3 ab 76 bc 74 03 26 b8 d9 77 77 e5 9a 23 51 5e 3c 2d cc fa 37 89 af 35 b2 ef c3 e0 26 35 3e 77 b3 8b fb 82 65 8a 75 1c 55 bc 6d ed 29 d6 Data Ascii: fqY+Dfz8-^=(G~Z.1Tg'cCG]t{stP\|O.wCg;U-^.s2m=Nw\|mFo~\|]id`96fl0k$fJy{n*swdwlDV^)&Xvt&ww#Q^<-75&5>weuUm)
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 1c d1 5e 82 cd fe b3 fd a6 59 a5 2b 11 a5 0b 2d 8f 6b ef 6d 84 6a e9 d0 53 ab 55 35 7b 24 d7 d1 88 fc 1e 8d 8d 58 26 ef 9e 6e cf 86 5b f9 91 3d 11 0b d5 ac f9 ed 6e 16 56 cf 86 c2 df 26 21 6a 59 b5 93 97 66 bc 86 16 62 1c f5 6d 12 a7 59 d3 82 7a aa da cd bf c9 ba bb e9 67 51 a3 74 3d 3a 4b 28 dd f1 79 be fd 85 7e 4c 25 3f 3b 53 d7 9b ec 59 2e a3 a1 a5 49 5b 31 29 14 88 ec af 15 61 d4 96 4b a3 db 99 8a b1 56 bf 8c f2 43 69 ac 83 50 2a 2b b4 32 11 33 0a 63 12 66 55 15 12 71 81 95 12 6a 20 10 43 a3 11 71 a6 c7 d3 a4 f8 f8 ea 20 cc 22 58 c1 d3 d6 52 be 6b 87 77 b8 84 69 b2 cd 18 28 c5 af 1e 3e 21 a8 2d c3 9e ef ab 2d db b6 74 13 84 4c 4b a3 b0 94 2f b7 57 2e ac fe e0 89 24 4a 4e ca e4 6a d4 b2 fc 97 7e 7b 74 2d 8c 9d 2c 2d ec de 76 4b 6f 1e 82 aa 74 21 da f6 Data Ascii: ^Y+-kmjSU5{$X&n[=nV&!jYfbmYzgQt=:K(y~L%?;SY.I[1)aKVCiP*+23cfUqj Cq "XRkwi(>!--tLK/W.$JNj~{t-,-vKot!
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 0a 24 da b9 38 c0 08 28 92 48 64 69 92 8c 49 95 41 44 ca 88 eb 12 54 c8 b8 25 47 c7 f9 19 51 1d 18 92 54 c8 11 aa 2a b5 45 1c df 8b 2b be a0 d2 f8 a5 46 12 9c 9d 92 59 b7 6b 2b 26 ef 9f 8c cf 0b d3 3c bc ac a6 da d6 6a ef 6b f4 5e 7b a3 1b 5e 3c 14 af cf ce 88 ca 4c e1 77 ca 96 94 c6 4e b3 a5 09 c9 52 bb 94 63 49 b5 27 14 a2 9b 9a a7 e9 38 a9 29 2b 49 ed 8c b2 c8 e4 30 d8 9a d8 69 a9 54 75 15 9c 64 9d 45 34 dd 9a 92 f3 6e 5b 6f 6d bc c1 a2 39 43 5e 13 9c e1 f9 55 1d e5 75 7c ae dd 96 b6 c5 76 cd e5 3e 51 62 a7 ac aa 28 d4 8c f5 6f 19 c6 0e 31 d4 77 f4 17 c8 7b 55 d7 13 73 38 e8 cc 46 7a c6 5e dd a1 f4 a5 3a d4 e9 4e 2f fd a5 35 34 b3 6d 27 15 7d 6b 6c b5 d2 36 4a 07 82 72 63 4c cb 0d 52 31 bc a9 46 6f d2 49 b8 c1 b6 da 4d 2b 35 1d a9 ea ec bd f8 9e fd 82 Data Ascii: $8(HdiIADT%GQT*E+FYk+&<jk^{^<LwNRcI'8)+I0iTudE4n[om9C^Uu\|v>Qb(o1w{Us8Fz^:N/54m'}kl6JrcLR1FoIM+5
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 0a 82 1f 4c 8a 9c 73 1d 62 30 b0 d8 91 a4 a9 a1 d0 41 4e 25 88 c1 01 08 a1 a9 91 48 6c 62 04 a0 c6 53 42 f5 7c 67 ee 27 18 e4 41 38 c7 81 62 9c 05 d1 87 c3 dd 91 76 14 b8 05 86 21 12 c5 28 f8 eb df c0 54 29 dd f8 f0 cb b4 e9 db c7 8e 7e c0 31 18 16 69 42 de 3e 1b 05 a8 f3 af 19 e5 cf 6f 68 ea 54 d8 5c 1d 49 16 21 4c 5d 38 16 29 53 32 d2 13 a7 e3 80 46 98 c7 1b 8c 8c 6c 15 05 02 6a 03 23 4c 64 60 40 a5 4e c3 23 01 b1 89 35 02 29 4a 26 75 47 28 92 51 22 92 a9 92 d4 1f 18 13 51 24 ab e7 ef 2c 3a 39 c7 1f 39 7f 59 46 9c 97 0b da 74 bf e9 1c 25 1c 25 be 5c ae b6 ec f6 1e 87 e5 87 06 e3 8b ab e9 49 a7 a9 24 9c a4 d5 3d 78 6b 4a 30 52 fc 88 eb 37 2b 2c bd 23 85 8e 8b bb cd c9 df e7 49 5f b3 71 da b2 e3 6a ba 0e 4e cf 5a 71 a7 74 ef b1 f1 bf de 47 4e a8 53 a9 ab Data Ascii: Lsb0AN%HlbSB\|g'A8bv!(T)~1iB>ohT\I!L]8)S2Flj#Ld`@N#5)J&uG(Q"Q$,:99YFt%%\I$=xkJ0R7+,#I_qjNZqtGNS
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 22 94 7d b7 39 7a 2b fd 64 ff 00 b4 97 fc a6 77 1c 9c a5 a9 42 9a f9 b7 fa 57 97 bc e2 29 3f f5 93 fe d1 ff 00 c9 37 11 d1 9c e6 65 bd e5 fd 1b d1 8c bd 59 ae c9 a7 1f 6d 8a 3e 4f 71 36 96 af 3b 5f 4a 37 5d f1 3a 0e 52 d0 d7 c3 d5 5f 37 59 74 d3 b4 ff 00 c2 70 fc 94 c4 ea 54 5d 4f e8 bc fb 9b 31 78 eb 96 b4 e7 35 c3 d5 a2 3a 92 15 12 d6 1a 27 47 06 c3 07 1b 17 63 22 a5 21 91 99 87 48 3e 53 21 29 8a 94 85 ca 64 57 84 c4 64 44 c4 6c 0f 73 c2 6d fc 75 97 a7 bf a9 77 36 50 5b ba 57 b4 d8 62 1e 7d fe e2 4a b9 ee 50 e7 56 8a 5c ef bd 7c 0e 9b 09 4f 3b b3 9b c7 bb e2 69 ae 11 f6 b6 fd c7 51 44 8b ec b4 98 da 71 13 01 d1 64 53 e2 3a 88 9a 63 e9 c4 8d 1d 49 5c b1 4e 22 54 87 52 a8 b7 e5 e3 98 8a b1 0a 65 8a 54 fa 17 4f dc 52 78 b8 ad 8e ef 82 b7 50 d5 59 ec b7 4e Data Ascii: "}9z+dwBW)?7eYm>Oq6;_J7]:R_7YtpT]O1x5:'Gc"!H>S!)dWdDlsmuw6P[Wb}JPV\\|O;iQDqdS:cI\N"TReTORxPYN
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: b3 de 58 a7 4d 70 31 08 16 29 47 c6 44 ca a1 4e 82 e0 bb b7 f1 e7 b5 cb 10 8a 8a ca 3d 96 cf 9b d9 b4 9d 38 0f a1 4f b7 ab 2e 9e 04 cb 58 2b 0d 0b bb be cb 6d 7b 17 4f dc 5c 92 d9 64 db e9 cb 8f 8b 11 a7 1b ec 71 db 9e de 9c ac b8 16 a3 4f e7 76 29 7c 3c 64 17 03 0f 1e 3d dd ae e5 a8 53 31 46 96 cb 6c b7 de db be f6 5b a3 4c 28 a5 11 f0 87 47 62 33 18 2e 7e d5 f0 2c 52 8f 33 eb 6b e0 06 21 01 d4 e0 32 14 7c 64 35 43 c7 c1 20 15 18 0c 51 27 18 8c 84 00 5c 29 f3 78 e6 1d 08 d8 9a 81 35 00 14 f9 ff 00 cf b0 9c 61 6d af 9f a0 6a 8f 5f 77 65 8f 3c f2 ab ca 6d 47 f8 2d 37 e9 38 eb 56 69 fa 5a ad 5e 10 4f 65 da cd ae 0d 71 66 a9 49 b4 e2 19 b5 a2 b1 99 3f 96 7e 50 21 87 4d 51 5e 71 a7 67 3f 91 17 f2 b5 7d 79 25 7c f6 74 9c c7 28 f5 f1 19 ce a4 dd d5 d7 a5 2d 5c Data Ascii: XMp1)GDN=8O.X+m{O\dqOv)\|<d=S1Fl[L(Gb3.~,R3k!2\|d5C Q'\)x5amj_we<mG-78ViZ^OeqfI?~P!MQ^qg?}y%\|t(-\
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 22 bc f6 ae b9 4b e3 99 ba d0 7c 96 94 b6 d4 b3 e6 4d d9 a7 c5 b4 cb b7 1d ed fa 6a 2b 69 ed 57 bc d3 a6 32 31 db e3 d8 78 45 6a 72 83 69 d4 ab 74 da ff 00 69 3d dd 64 a3 39 7f 5b 57 ff 00 b2 7f 13 5b 63 cb 39 7b ce 12 9e 4b 9f 3e de 25 d5 0b 9f 3d 59 bf f7 95 7f fb 27 f1 23 f8 3a df 29 be 99 cf e2 36 c7 9f d1 ba 5f 48 d1 56 db aa ba 1d fa 2f 64 5a a5 25 c5 76 a3 e6 5f c0 e1 cf d7 29 7c 41 61 21 c1 fd 29 fc 4b b6 3c fe bf ed 37 cb ea 18 4d 7a d1 5d 2d 0d 55 a1 eb 47 e9 23 e5 c5 85 a7 ea f7 cb e2 32 18 5a 7e af d6 9f c4 6c 83 7c be a6 a7 5e 32 d9 24 fa 1c 6f d7 61 f4 da 67 ca f4 f0 d4 fd 5e f9 7c 76 8f 86 1a 9f 07 f4 a7 f1 1b 23 fd 84 df 2f a9 1d 54 b7 ae d5 ec 64 95 78 fa d1 5c da d0 f7 33 e5 d8 50 a6 f7 3f a5 3f 89 3f c0 e9 fa bf 5a 5f 12 ec 8f f6 0d f3 Data Ascii: "K\|Mj+iW21xEjriti=d9[W[c9{K>%=Y'#:)6_HV/dZ%v_)\|Aa!)K<7Mz]-UG#2Z~l\|^2$oag^\|v#/Tdx\3P???Z_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50310	142.250.185.65	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:45 UTC	535	OUT	GET /viNp17XpEF-AwWwOZSj_TvgobO1CGmUUgcTtQoAG40YaYctYMoUqaRup0rTxxxfQvWw3MvhXesw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 2663 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:34:22 GMT Expires: Tue, 28 May 2024 20:34:22 GMT Cache-Control: public, max-age=86400, no-transform Age: 7764 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	848	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0e 09 0a 08 0d 0a 0a 08 08 08 0a 0b 0b 0a 08 08 08 08 0a 0a 08 08 08 08 0a 08 08 0a 0a 08 08 08 0e 08 08 08 08 0c 0a 0a 08 0b 10 0a 08 08 08 15 09 0b 08 09 17 11 0b 08 0d 0b 0b 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 13 0d 0b 0e 0f 0f 10 10 0d 10 0d 11 10 13 0d 11 10 0e 12 10 11 10 10 10 12 0d 10 12 11 10 12 10 0f 0f 10 0d 10 0f 12 0e 10 0e 12 12 0e 10 0d 0e 0f 0f 0e 10 10 0b ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1a 00 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 06 07 08 09 05 03 ff c4 00 3e 10 00 02 01 03 00 07 04 04 0a 0b 01 00 00 00 00 00 01 02 03 00 04 11 05 07 08 12 13 21 31 06 22 51 61 23 32 41 a1 14 33 42 52 62 64 72 81 94 d1 18 43 Data Ascii: JFIFDD>!1"Qa#2A3BRbdrC
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 34 84 cf 6a a7 0c b6 96 e1 4c f8 eb 8b 89 9c 3a 47 9e 86 38 90 91 8f 8d 07 ba 2d 12 b6 1b 9e 2f 47 34 e6 8c fa cf a7 6a c7 2d 8f 68 b0 a0 38 c2 b3 e1 88 87 11 ca 3a b7 7f c5 a2 84 f0 2e 34 3f 26 a6 cd d2 7b 0c 58 b2 11 1b de c2 e7 a4 ab 71 be 41 f1 dc 98 49 1f f7 5a 92 75 85 2c 47 bb 50 77 de 27 ce a1 54 20 fb 45 b5 18 f0 e8 8d 63 87 ca 59 4a f5 b4 83 e2 aa 48 36 1a b9 17 89 1b cf 13 58 7a ef 78 8b bb 27 0d 58 66 21 03 16 dc b8 60 70 1f 7e 45 5c 16 c1 c0 89 a2 45 85 17 95 0d 2e f7 3e 6d 7a 29 bf b4 79 2b bb bd a2 c9 99 33 15 90 c8 8f 90 84 4d 45 48 f8 af 50 55 a0 e2 45 03 8e 0d e7 0d 9b d9 3e c9 c5 67 0c 70 db c6 90 41 18 c2 46 83 03 24 96 66 3e d6 76 62 59 99 b2 5d 89 24 92 49 ab 9c 28 4c 84 d0 c6 0a 01 a2 c1 27 67 63 cf 46 74 c4 cb cb 9e ec c9 ec 03 80 Data Ascii: 4jL:G8-/G4j-h8:.4?&{XqAIZu,GPw'T EcYJH6Xzx'Xf!`p~E\E.>mz)y+3MEHPUE>gpAF$f>vbY]$I(L'gcFt
2024-05-27 22:43:46 UTC	425	IN	Data Raw: c1 28 41 65 cf c9 6c 83 e0 6b 95 ae 2d 35 69 a1 51 30 e2 3e 13 af c3 71 6b b7 82 47 6d 33 1c 0d 47 05 27 bd d7 2d ec 8a 55 ef ef 0a 1e 44 09 77 0e 3e dc 61 1c 7f 95 74 3a 66 2b 85 0b 8f 6a 90 75 a9 3c f0 5a e8 ee 23 a8 78 80 0f 8a 86 8e 44 f8 b1 c9 3d 59 dd 8f 52 7a b3 b1 f6 9c 96 27 da 6b ed 67 cf cc 59 d1 c4 c4 ab ee 3c 6a 35 a9 a9 04 6a 09 cc 1c f3 cd 46 34 dd 35 19 93 d6 49 f3 27 ac 95 a9 f6 63 d9 c9 f8 91 5d de c6 d1 2c 67 7a d2 da 41 87 77 c7 76 69 93 aa 85 ce 52 36 c1 de 00 90 30 b5 b6 4d 6d a4 69 fb 3c 41 e4 b9 38 8e c1 e7 4a 73 31 a8 0e d6 b8 81 86 35 a9 d2 2c 2b 21 e4 b6 6a 65 b7 69 8b 58 75 e7 38 69 c0 1c b3 22 b4 a6 b8 aa 0a d0 12 88 94 44 a2 2f 95 d5 a8 75 2a ca ae 8c 30 ca c0 15 60 7d 84 1c 82 3f 8d 7e 11 5c 0a fc 20 11 43 92 a6 bb 47 b2 1d Data Ascii: (Aelk-5iQ0>qkGm3G'-UDw>at:f+ju<Z#xD=YRz'kgY<j5jF45I'c],gzAwviR60Mmi<A8Js15,+!jeiXu8i"D/u*0`}?~\ CG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50314	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	566	OUT	GET /1bBfkvken8Lqz8NftP9_n8PmC2j6iMPUovX_c-tahFJYXo1tImjmPBU1nv1ATO_XIIh2dHUH6DMp0blUuhL7PZ7JvhZwNQ4QaiYnBsE7sGZcTDP3fLI=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3395 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:12:41 GMT Expires: Tue, 28 May 2024 21:12:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 5465 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 0d 0a 49 44 41 54 78 9c ed 9d 79 74 15 e5 19 87 9f 4b 02 48 c8 be 0e 61 8b 4a c4 8b 0b bb 8c b5 08 45 b1 7a e4 14 77 8b 54 40 a9 7a 3c 9e 5e a4 02 2e 28 7c 9e aa 47 3c ad 4b b5 6a d5 ba 55 11 97 aa b5 58 59 44 51 b4 0c 6b 44 20 60 0c 4b 48 02 43 80 04 02 2d 26 37 4b ff 98 04 91 24 64 66 ee cc fd e6 de dc e7 9c fc 95 77 de f9 e5 fc f2 cd 7c eb 3b be c6 c6 46 62 44 2f 9d 64 0b 88 e1 2e 31 83 a3 9c 98 c1 51 4e bc d5 0b 7c 3e 9f a9 38 45 a8 5d 80 3e 40 22 50 07 94 e9 42 3b 68 f5 7e 31 da c6 4c ff c9 67 b5 93 75 32 83 15 a1 66 02 53 80 ab 81 21 40 97 13 42 76 02 0b 81 57 75 a1 ad b3 74 e3 18 2d 08 9b c1 8a 50 4f 01 66 03 d3 81 ee 26 53 2d 02 66 e9 42 db 68 Data Ascii: PNGIHDRxx9d6IDATxytKHaJEzwT@z<^.(\|G<KjUXYDQkD `KHC-&7K$dfw\|;FbD/d.1QN\|>8E]>@"PB;h~1Lgu2fS!@BvWut-POf&S-fBh
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 3c b0 97 dd e5 db 29 d9 b1 85 6d c5 1b 65 9a 5e 07 fc 05 78 50 17 5a 95 db 37 73 e5 f0 d9 d3 6c 7d 12 98 66 4f 92 fb d4 d7 d7 b1 b5 70 2d 6b 56 2d 65 77 f9 76 59 32 f6 03 73 80 17 74 a1 d5 bb 75 93 0e 69 f0 f1 14 17 6d 60 d9 92 05 1c 38 a0 cb 92 b0 11 e3 34 c6 72 37 92 77 78 83 c1 68 d1 5f 7c fe 01 da d7 9f 00 d2 6a 82 bd 0f cc d0 85 b6 c3 c9 a4 6e 1f 1f 8d 08 e2 e2 e2 19 73 f1 b5 5c 37 61 1a 9d 3b 77 95 25 e3 2a 8c d9 b0 47 14 a1 26 86 f3 c6 51 6f 70 33 fd ce 18 c8 c4 c9 b3 e8 d6 cd 6c 09 11 c7 e9 0a dc 0b 14 29 42 9d 14 ae d3 18 9e 78 44 57 55 55 b0 6e f5 32 ca 4a 8b 09 d6 d6 90 9e a1 70 e6 80 61 9c 75 ce 08 8c 79 05 e7 28 2f db c6 fc d7 1f 23 18 ac 75 34 af 0d 56 01 77 ea 42 d3 ec 26 88 88 77 f0 ba 35 cb 58 ba e8 2d 1a 1a 5a 76 36 7b f5 ee c7 35 bf 9e Data Ascii: <)me^xPZ7sl}fOp-kV-ewvY2stuim`84r7wxh_\|jns\7a;w%*G&Qop3l)BxDWUUn2Jpauy(/#u4VwB&w5X-Zv6{5
2024-05-27 22:43:46 UTC	1146	IN	Data Raw: ad 76 59 cd 8f 64 7b 73 4e 7a 3f 70 a5 2e b4 bf 5a bd 50 9a c1 55 95 15 a6 63 2b 2b ed 4d 3f da c1 83 ef e1 f9 c0 39 ba d0 3e b2 73 b1 b4 ba c9 56 a6 14 c3 39 c3 e4 a1 16 bc 06 98 a6 0b 2d a4 6f 44 4a 6b c1 56 a6 35 7b f6 32 3f 55 19 2a 99 59 b9 27 fd 8c 7d 18 d8 03 dc 04 8c 08 d5 5c 90 d8 82 b3 73 7a d3 37 ef 4c 4a 76 6e 6d 27 d2 c7 f0 11 63 c3 a2 09 8c 49 93 b4 b4 ec b0 be 16 9a a8 05 1e 07 1e d1 85 76 d8 a9 a4 d2 77 55 b6 37 41 31 72 f4 78 7a e4 e6 85 47 50 13 12 16 ff 3f 04 fc ba d0 ee 75 d2 5c 90 6c 70 4a 6a 26 37 dd 3a 97 bc 53 07 b4 f8 5d b7 6e 89 5c 36 6e 32 23 47 8d 0f bb ae 30 0e 95 36 01 17 e9 42 bb 52 17 9a 2b 15 63 a4 7f 9c 22 25 25 83 1b 26 cd 64 ff be dd 94 95 16 53 57 17 24 35 35 93 bc d3 fc c4 c7 cb 29 22 17 86 16 5c 09 dc 0f bc a8 0b ad Data Ascii: vYd{sNz?p.ZPUc++M?9>sV9-oDJkV5{2?U*Y'}\sz7LJvnm'cIvwU7A1rxzGP?u\lpJj&7:S]n\6n2#G06BR+c"%%&dSW$55)"\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50313	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	551	OUT	GET /2rDk7D8NJQPiKYEA6Vzy6GvuREL2IgHNQxXW-8eiSp60CAO4V1as9hWXbLfvDP7X3p3OqS1W3kr6JithHTmpNKXryf7NYJssZUXi=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 2245 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:02:11 GMT Expires: Tue, 28 May 2024 19:02:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 13295 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	857	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 06 08 08 08 08 08 06 06 07 08 08 07 08 07 08 06 08 08 08 06 08 07 08 08 08 08 08 06 08 08 08 07 06 08 08 08 08 08 08 08 08 0a 06 08 08 08 09 09 15 08 06 17 0f 0a 08 18 08 08 09 14 01 03 04 04 06 05 06 0a 06 06 08 0f 0e 07 0d 0f 0f 11 0d 14 0d 0d 0b 0f 0f 0e 14 14 08 0d 08 14 11 13 0d 0f 11 0d 0f 0d 0e 0d 0e 0e 0e 0d 0a 12 0f 0d 0f 12 0b 0d 0e 09 10 0f 14 0d 0f 14 10 10 14 ff c0 00 11 08 00 78 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 01 03 04 05 07 08 02 09 ff c4 00 3c 10 00 02 02 01 02 02 04 09 0b 03 05 00 00 00 00 00 01 02 00 03 11 04 12 05 21 06 13 15 31 07 08 41 42 51 54 71 93 d3 14 16 22 23 32 52 61 91 Data Ascii: JFIFxx"<!1ABQTq"#2Ra
2024-05-27 22:43:46 UTC	1388	IN	Data Raw: 85 c9 44 32 b1 12 1b e1 73 a6 d6 70 ad 05 fa 8a 6b 37 ea 00 0b 42 6d 2c bd 63 72 eb 5d 41 52 d5 d4 33 6b a8 20 b0 5c 64 6e cc f2 bf 7e 8b 16 dd db 95 45 0b 96 ff 00 7c 78 5e 6e 0f a3 17 1a bc 9b d4 58 b4 bb f5 34 97 87 2e 39 f0 5e 7e 48 bd d3 bf 0a 9a 0e 0e 01 d6 6a 12 a7 61 9a ea 50 d6 6a 5c 64 0d cb 4d 61 df 60 24 03 69 01 07 95 84 e5 36 f8 e9 70 f0 48 1a 2e 2e ca 09 01 82 68 c6 e1 9c 6f 00 eb 87 23 de 03 6d 6f 48 1d d3 ce 7d 0a e8 66 bb a4 5a c7 5a d9 b5 37 d8 45 da cd 5e a5 8e c4 56 38 eb ad 75 53 cd b1 b2 9d 3d 6a 33 b4 04 54 5a 98 af 7c a3 c4 ae 8e ac 07 e2 1a 93 7e de 6e 94 54 ba 7d f8 ef ea 8b 3d 9b 73 e6 fc a3 27 d2 26 b5 4e 6e 6e 54 d5 8f 42 56 d7 9c 6f ee ff 00 0b 63 b0 dd ec ff 00 67 ba 3a a6 cf 53 c8 aa ac 96 93 6a 9d 70 bf cd 29 b4 bc b5 39 Data Ascii: D2spk7Bm,cr]AR3k \dn~E\|x^nX4.9^~HjaPj\dMa`$i6pH..ho#moH}fZZ7E^V8uS=j3TZ\|~nT}=s'&NnnTBVocg:Sjp)9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50316	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	551	OUT	GET /UqZcYFgfFclRU46MshhuCQD79idBZ8hyIe5WkQ1VLzG47w-Mgu6yGriGkL_YiYF2qau5jrufzTNwFp84tw7Lm-f9t2vQLkrECfur=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4368 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:17:26 GMT Expires: Tue, 28 May 2024 22:17:26 GMT Cache-Control: public, max-age=86400, no-transform Age: 1580 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 10 c7 49 44 41 54 78 9c ed 9d 7b 74 54 d5 bd 80 bf 7d ce 99 c9 63 48 08 04 12 08 90 90 80 a2 c4 88 0a 0a 68 b5 a2 70 83 a2 17 05 05 7c dc d5 75 f5 56 e9 cb 6a 80 68 5b b5 ab d2 de 5e 51 b8 75 79 5b ab d5 b5 da 65 2b 82 0a 22 d5 2a af e0 6d af 0f c0 a2 ad a8 bc 11 93 18 c2 23 98 f7 cc 79 ec fb c7 64 20 c2 64 32 8f 33 33 67 c2 7c 6b 65 65 ad 59 fb ec b3 67 be f9 ed fd 3b fb ec 7d 06 d2 a4 49 93 26 4d 9a 34 69 d2 a4 49 93 26 4d 9a 34 69 d2 a4 49 93 26 4d 9a f8 22 92 dd 00 87 90 2d a7 4f 9e 02 94 22 18 d4 f5 9a c4 ff f9 04 fe c7 f3 35 90 98 c0 21 a4 fc 50 bc f5 de 16 bb de d8 19 2d 58 ce 9e 3d 80 b6 fa a7 1b Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{tT}cHhp\|uVjh[^Quy[e+"*m#yd d233g\|keeYg;}I&M4iI&M4iI&M"-O"5!P-X=
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 24 54 c1 10 e1 b7 28 51 f7 a1 53 4e b0 a3 ba e5 ee 14 83 51 57 1b 76 f1 86 a3 16 1e 35 8e ed e9 22 a5 04 3b ae 5b ee 86 28 3a 8b f6 35 af 84 5d 7e c3 76 9d b3 dc f1 7f 27 29 23 d8 b1 91 1b c0 93 87 ef 27 3f c3 fc f4 9f bd 16 3d d4 64 51 b5 59 67 80 3b fe cd 4a 09 c1 72 fa c4 fb 9c 1a b9 27 91 64 5c 0a 2b 1e fa 27 3b 42 f4 d4 b5 87 2d 66 fe a6 83 f2 4c 91 90 15 8f 8e 9f c9 92 d3 26 df d7 a8 1b cb 9c 2e d7 ed dd c6 ba 8a 95 7c af f4 46 8e ff a6 95 9f 8f d3 b8 e6 22 8d 11 05 0a aa 22 a8 3b 62 52 f3 0f 83 aa 2d 06 97 65 0b b4 04 85 96 a3 05 cb 55 fd ee 6b 7c dc 58 26 32 71 f0 02 df 2e b9 e5 2b f9 61 e9 0d 5c 64 7a a1 9f 60 ed 4e 93 67 3f 36 38 68 82 25 61 b8 0a 43 5c 82 2b 3c 89 89 dc 00 8e 15 2c df 56 ef 35 cc b6 65 b9 f3 0f d2 bc ac 04 31 50 c6 2e 59 f7 81 Data Ascii: $T(QSNQWv5";[(:5]~v')#'?=dQYg;Jr'd\+';B-fL&.\|F"";bR-eUk\|X&2q.+a\dz`Ng?68h%aC\+<,V5e1P.Y
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: fe 0d d5 62 55 b4 35 d8 f2 91 f8 23 57 c4 77 51 ba 12 7a 95 78 53 a7 7f 7e 39 d1 64 65 10 b7 8d 46 c2 dd ef fe 8d d5 62 49 2c 75 c4 2c b8 2b a1 5a 6a 7b b7 7c 2a 66 e8 dd f0 05 1e 81 91 84 27 8b 5a 71 e9 9e 25 c2 e5 59 b4 71 51 6c 72 21 46 c1 b6 cc 50 85 7b 2e 23 f4 53 68 0a 07 2a f8 e2 3a 16 06 a7 53 c7 e6 95 6d 12 e1 ee 57 bd b1 5a 3c 6e 47 6d 51 0b 96 35 ea ed b6 67 cb 3d 21 80 d6 03 21 8b 8c 2d 56 68 0c 33 84 05 e0 b2 69 67 5f 4b 9b 64 a0 8d 63 bf 70 f5 5b b4 71 91 b0 ed e1 6d 51 5d 26 c9 1a b5 c8 a7 8b e7 95 44 25 35 02 64 f3 76 e0 5b 3d 16 39 a7 58 e3 88 7f 3a 2f e4 92 66 21 fc 97 4a cf fc c5 4b 6f 49 b7 69 49 ca 86 a8 4c bb a8 e7 eb af e6 56 8b 7e f6 64 32 fe 31 77 91 3d 91 1b 20 da eb e0 5f ab ea 89 85 86 f1 47 01 79 fc 09 90 4b 41 04 0f 3d 97 0a Data Ascii: bU5#WwQzxS~9deFbI,u,+Zj{\|f'Zq%YqQlr!FP{.#Sh:SmWZ<nGmQ5g=!!-Vh3ig_Kdcp[qmQ]&D%5dv[=9X:/f!JKoIiILV~d21w= _GyKA=
2024-05-27 22:43:46 UTC	729	IN	Data Raw: 72 21 8e 97 b1 72 23 23 4c b4 3d 80 3b 92 c9 90 68 c6 dc 64 32 74 6e f9 a2 b5 e2 91 84 cf 50 85 4b dc 56 55 89 ab f9 42 15 c6 28 cb c2 08 f7 ee 93 bf 5b 4e 25 b9 63 ef 77 b2 5c 88 f3 f6 51 71 15 b5 2e c3 18 e6 d3 7b 7f b6 a7 a6 18 ac 68 9d c4 9c f6 62 26 a4 8c dc c5 49 9d c4 08 87 b8 af 8b 14 d7 d0 98 25 8d c2 50 91 ac 09 83 15 2d 93 98 d7 5e 1c 74 12 c3 69 f8 bb 65 e7 cb 85 04 4e 25 cb f5 14 59 8a b6 4f 42 46 f7 31 39 d0 2d cf 49 19 b9 63 ab d7 8a c5 0e ff d1 e9 93 24 6c bb 96 98 46 bd 62 1a a3 05 78 03 91 ac 09 83 95 ad 93 99 d3 3e 22 45 e4 96 2f 4a 25 b9 90 84 c7 09 cb b7 28 32 54 f5 80 a6 98 ae 95 2d 93 99 db 3e 3c 85 12 aa d4 e8 96 bb 93 f0 0d 97 a2 92 7a ed 7d b3 68 c5 f1 c9 cc 6d 1f 91 4e a8 e2 4c f2 3e 5b f9 c2 e8 f1 2f bc b4 5b a8 8e 7c a4 cd 09 Data Ascii: r!r##L=;hd2tnPKVUB([N%cw\Qq.{hb&I%P-^tieN%YOBF19-Ic$lFbx>"E/J%(2T-><z}hmNL>[/[\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50315	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	554	OUT	GET /Q4UDu0hKQgAyUzO0RpJTpTKc2DyaZbU-K96JCJjqKd9_ABetMMpS6LxO6Y7Ypm2CVhCro4n4n9PTF97SlwrSjmJFaHdV-_yDr8MpX1M=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2483 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:09:38 GMT Expires: Tue, 28 May 2024 22:09:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 2048 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 08 ff 49 44 41 54 78 9c ed dd 6b 8c 5c 65 1d c7 f1 ef ff 39 e7 cc cc 5e 7a 59 da 2e a5 50 6e 25 80 a1 48 03 94 84 44 91 b4 0d 81 50 f0 96 98 28 36 24 98 18 83 97 48 d0 5a 25 48 88 c1 80 31 6a 8c 02 31 46 13 7c 23 be 32 48 b4 a5 b4 80 80 05 44 d2 a6 b4 28 2d 14 ba a1 4d bb db b2 ed ee ce ed Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATxk\e9^zY.Pn%HDP(6$HZ%H1j1F\|#2HD(-M
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 44 d2 8b b6 a2 df 85 53 7f 5b 1f 6e 09 55 5c d4 93 73 8e 2b 80 81 ac 62 99 01 17 bf a4 cb fc 3f de 5f de c2 16 b5 ae 2a 03 4c 6e d1 42 c0 b9 25 65 59 56 99 cc 80 5f fa f5 1b 8b 72 23 e9 a0 c5 32 b7 f5 e6 18 fc c3 2b ba 28 eb f3 cc 80 4f 32 5e 08 62 e9 3d 3d cd 32 ad a0 40 24 69 ef 78 89 9e ac 32 35 8e c1 ea 9c 88 0d 89 e6 3c 75 de 67 0f 5d 33 03 16 b4 25 43 2b 73 7a 89 88 d6 ea a6 76 6f ae c3 59 c0 1d 2e ac 5f 64 a6 26 ef 2b 0a 82 88 63 f2 3b d5 dd 3b ff 58 02 52 69 ac 6f 39 f5 04 9a 12 4c 3d ea 32 dd 2d 37 0b 01 2b 22 01 5e 93 52 1a 17 47 45 43 ef a5 5b 9f cb 11 54 c4 cd 4f c6 16 38 8d 7b d3 1a 63 58 01 54 a1 18 e4 19 c9 0d e0 c3 3c 0b 15 0a 69 05 68 3c e8 59 08 18 a0 8f f0 fc d1 cd e1 f0 c0 83 c0 c9 20 e8 ce 43 43 2c f8 bf 7a e6 0d 8f 6c bb ab f8 ee 96 Data Ascii: DS[nU\s+b?_*LnB%eYV_r#2+(O2^b==2@$ix25<ug]3%C+szvoY._d&+c;;XRio9L=2-7+"^RGEC[TO8{cXT<ih<Y CC,zl
2024-05-27 22:43:46 UTC	234	IN	Data Raw: 24 9f 36 76 fb 7c ea 0f 41 a8 a4 fe e4 60 2e dc 8e ca a3 f2 d4 8e 2d d3 6d 4a 33 96 ea f6 f0 46 d0 5b 50 5d 55 aa 70 5e 4f 9e 60 f2 f0 df c5 4e 75 35 0f 5a 82 74 b4 9f ea 5b 8b a8 3e bb 00 2d 87 48 a1 81 9e 3b 55 47 d1 7b df 1f 85 07 e7 47 b9 9d 38 7d 52 36 bf bc 19 78 af 99 26 cd c4 d9 ba 99 95 04 72 11 da 7f 21 6e e1 42 a4 50 80 2e 7e 2d ad 3a a8 38 38 12 c0 ce 1e d8 39 0f 0a 40 21 9d 7a 48 a2 e6 c2 4a 5c ad 50 2a 8d e2 ab 07 48 74 9f ec d8 bb 87 19 8c 7d 5a 18 84 f6 01 7d 40 d4 ba 3a db dc 83 c0 d7 81 de 14 6a bc e5 ec 43 c6 89 79 84 22 1b 65 fc 34 b6 cc 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 8c 31 c6 18 63 4c 13 fe 0d 7c 14 1b ed 8a e5 db 38 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: $6v\|A`.-mJ3F[P]Up^O`Nu5Zt[>-H;UG{G8}R6x&r!nBP.~-:889@!zHJ\P*Ht}Z}@:jCy"e4c1c1c1c1cL\|8IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50317	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	785	OUT	GET /kFIMPehGo-EHmdvvpe3j1Vnmg5tLhoqhH-PsMSw83JbPH2BmdEhF1k1tUWYYilK1gHbOEmFPJPRP93QQJ4oztVsYoOhIok78floEPg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3474 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:31:20 GMT Expires: Tue, 28 May 2024 22:31:20 GMT Cache-Control: public, max-age=86400, no-transform Age: 746 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 0d 59 49 44 41 54 78 da ed 9a 79 54 13 e7 1a 87 3f bb 68 d5 aa ad d7 ab ad b6 d7 7a 2e d6 5e b5 bd f5 b8 b0 c8 be b8 b1 04 92 0c 02 62 45 ac 68 51 d9 55 54 a4 23 02 01 02 41 40 40 56 35 26 24 24 ac 12 76 5b ac b5 5a ad b6 d6 56 50 51 ac 5a a4 ad 16 95 c5 02 62 be 3b 09 1e bf 8b a9 4e c8 24 02 3a cf 39 bf 73 44 c0 3f 9e df 9b 77 3e 67 06 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 f4 37 89 65 1b 46 c7 08 43 fd 63 c4 b1 d5 1c e1 81 eb db f9 95 ad 5b f7 7e d5 19 9c 7d f2 be 6f 56 6d f7 ca f4 6b dd cb d2 6e c9 dd 53 5b e0 65 0f 36 ac 5b c5 92 9f 59 c3 be 7f 72 1d bb e3 a8 8f 73 cb 97 7e 4b ff ac 0c 72 b9 56 14 e2 7e 54 f8 b9 5b 52 fa 0e 17 27 1e 0f 1b 0e Data Ascii: PNGIHDR``w8YIDATxyT?hz.^bEhQUT#A@@V5&$$v[ZVPQZb;N$:9sD?w>g7eFCc[~}oVmknS[e6[Yrs~KrV~T[R'
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: a6 2e d6 10 95 02 50 74 52 00 ca 7c 78 74 ad 63 6b 7a 94 eb 0c a0 4d a2 c4 91 6b 14 fb 5e 21 1e 65 e0 14 40 44 f7 05 a0 3c b9 00 9b 9e 9c f2 b0 ed ca 0c c5 6c b5 33 f9 e2 e8 f0 35 e9 4d 90 fd 48 3c 8a 76 d6 d0 f3 54 00 ca 4f 4b 17 c8 d3 71 67 4f 6a 93 2f da b9 6e 4d 7a a3 52 3e 11 d5 12 74 54 80 7d 4c 0b 5c 12 71 13 2e 8c 38 df 65 15 79 ac c9 9c 53 79 d4 24 ba 88 6f 1a 53 18 62 c2 13 33 8c 63 f7 cd b6 8c 15 4e 36 e4 f1 86 6f 48 d4 1b b6 cd df 6e 52 b8 bf cd 9c f8 0d d6 cc 28 6f eb e0 94 d5 96 fc 2c 4f b3 63 62 77 b3 a6 c3 0c d3 ee 33 8b 4c e0 f9 25 a6 64 47 51 2d 15 80 72 d6 65 c1 83 3d a1 2c 7b a0 09 e1 a2 1d 4e 3e 19 0d 90 b8 e0 6a 54 00 b3 8f 05 d8 47 df 86 0b 23 2f 74 59 70 be bc 60 1a 5d 94 60 ce 3b a0 07 b4 84 68 a5 a5 51 a6 87 f9 5e b1 ab e9 95 c3 Data Ascii: .PtR\|xtckzMk^!e@D<l35MH<vTOKqgOj/nMzR>tT}L\q.8eySy$oSb3cN6oHnR(o,Ocbw3L%dGQ-re=,{N>jTG#/tYp`]`;hQ^
2024-05-27 22:43:46 UTC	1224	IN	Data Raw: 2f 60 ad 4f ab 95 47 48 f0 8f 01 45 5c 6b 02 c7 2d 29 5e 7d 49 21 9f 88 56 d6 cf dc fd ac eb fa 89 8b df 01 03 09 bf a4 90 6d cc 98 46 0a f2 55 df 80 db 9c fd 75 57 72 8d f7 eb 40 43 bc 4e 79 bd ca 28 f1 3e 82 e4 93 4e 3f 79 01 7c ac 6d 4e aa e3 3c 30 10 09 4a e5 14 39 70 6f 93 c8 57 ff f5 c3 c8 4c 11 3c 5a 35 b7 0e 68 08 ab 6c fd 3e 93 3c 37 48 32 fd 6a af 9f 79 39 d8 83 b9 e9 2c 67 30 90 09 48 4a ae 27 5e b8 a2 2c df 77 f7 51 d8 5c 3e 1e b6 57 8e 85 95 55 86 07 41 1f c1 ca 7d 83 89 13 4f 2f f9 94 d6 8f 88 c8 1e 56 28 18 0c 78 c7 e7 b6 32 62 35 97 bf 62 57 3d fc b5 64 2a 6c af 18 a5 4c 6b f5 78 58 58 65 16 a6 f6 de 2f 0d 60 59 16 ac e8 56 88 d7 ca fa 11 13 7b 3f 83 29 04 83 85 e0 14 ce 9b 9f c6 d6 dc 27 97 af 5a 00 9b f7 07 fc b9 c8 e8 a1 7c 94 5b 55 ef Data Ascii: /`OGHE\k-)^}I!VmFUuWr@CNy(>N?y\|mN<0J9poWL<Z5hl><7H2jy9,g0HJ'^,wQ\>WUA}O/V(x2b5bW=d*lLkxXXe/`YV{?)'Z\|[U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50318	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	785	OUT	GET /u2XGSr0jis3w5sLeuh8UMqGHgtdqPVPi77xYhPJdMO9C41wYUue3EKPJvwp-ovAlTzt3Ux3R4Mww2HlJ31UKre8vz1Cnno-3MxvWtA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 7094 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:12 GMT Expires: Tue, 28 May 2024 21:14:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5374 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 1b 5b 49 44 41 54 78 9c ed 9d 69 ac 5c 47 76 df 7f a7 ee bd dd fd fa 2d dc 1f 49 71 d1 32 22 25 91 92 28 c9 1a 92 a3 65 34 8e 31 8e e5 19 39 23 27 63 20 31 30 c6 24 f1 04 0e 1c 23 48 10 04 f9 90 2f c9 24 40 90 20 81 e3 41 02 4c ec 4c 12 c3 09 12 18 88 6c d8 99 91 34 1a ed 24 b5 8c 28 89 a4 c8 47 52 e2 22 2e 8f db db 5f 6f f7 de 3a f9 70 bb 1f 7b b9 dd 7d 7b 79 8f 22 d0 7f a0 c9 7e b7 aa 4e d5 ad 7f d5 a9 53 a7 96 86 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 68 06 b9 15 99 fe bd b7 7f 38 5c 28 15 47 Data Ascii: PNGIHDRxx9d6sBIT\|dbKGD[IDATxi\Gv-Iq2"%(e419#'c 10$#H/$@ ALLl4$(GR"._o:p{}{y"~NS``````h8\(G
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 3f 52 e0 fe 32 a9 eb dd 39 b2 b2 08 b6 04 61 f5 ec b9 7e 64 17 d2 a2 dc 93 be c1 e3 de 46 5e 28 7a ac 5d f9 57 ea 3b be 10 04 77 a4 9e 15 c2 50 29 f8 ca d5 c0 b2 da 28 bf 94 f5 f9 ea 68 81 47 86 17 d8 9e 59 60 bd 3b cf 88 2c 60 c8 47 9e 27 0b 37 49 6d 05 c3 36 6f 86 3d a9 05 fe ac 34 8c 55 73 db ab e9 5b 4e 70 1c b9 82 c4 3a 0c fc 00 ae fb 4a 51 2d 7b 53 01 bf bd ba c0 93 63 8b ec cc cc b3 d6 9d 63 c4 2c e0 69 01 08 22 eb b9 2c 2d 39 84 f5 4e 91 07 32 d3 dc 97 5b c7 d9 30 cd d0 6d ae a6 57 76 9a 94 b0 ae aa c9 0d 2d 2c f8 96 1b 81 b2 ce 58 be 3d 56 e4 1b 63 8b 3c 9c 9d 63 93 17 91 9a d2 3c e0 77 49 6a 35 04 11 d8 99 be c1 e3 ce 36 0e 07 29 a6 05 c6 04 86 00 e7 36 e4 fa 96 f7 e0 38 58 a0 10 c0 64 a0 a0 96 5f ce 94 78 76 7d 9e 27 47 e7 b8 37 3d cb b0 cc e2 Data Ascii: ?R29a~dF^(z]W;wP)(hGY`;,`G'7Im6o=4Us[Np:JQ-{Scc,i",-9N2[0mWv-,X=Vc<c<wIj56)68Xd_xv}'G7=
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: b2 fa 61 a6 c3 f1 b8 97 9d 02 49 92 96 37 23 cc bd 7a 1f e1 3b 5b 91 54 b9 d7 75 d1 7b b5 a1 f7 d6 09 50 70 c3 12 ae 55 54 bc 68 46 a1 5a 26 db 01 e3 80 eb fa b8 ee 8c 78 ee a4 b8 de 59 3c 77 42 52 e9 43 92 4a bf be e6 f7 ff f0 7a 4c f1 e3 a1 fa 0a 1c fb c1 38 36 ff 20 b6 b0 8f b0 b0 17 5b dc 85 2d 6e 45 0b 59 d4 2f ab 60 c5 12 70 b1 f8 55 4e 2c 3c cb 42 b0 a1 65 7d f5 13 d1 56 d7 c6 09 4c b3 d8 49 1e c5 e6 21 e0 5f 71 f1 2f 66 10 53 31 9c da 89 6a 9c f1 36 8c df f5 89 04 86 4b d3 ec b8 fc 26 9b 6f 1c 41 6c dd bb 69 d9 f1 59 26 5c 1c 07 1c a7 20 99 cc 39 19 1a fa 8f 32 3c f2 c7 6b ff e0 47 f3 d5 22 63 e7 c1 fa f1 37 37 f1 d1 bf fe 06 b6 f0 75 6c fe 41 c2 c2 16 b4 30 86 fa a6 76 5c 15 20 cf b5 d2 33 bc 30 f9 7b fc 7c fa 61 4a b6 c1 d4 ec 1a 6d fb 72 93 08 Data Ascii: aI7#z;[Tu{PpUThFZ&xY<wBRCJzL86 [-nEY/`pUN,<Be}VLI!_q/fS1j6K&oAliY&\ 92<kG"c77ulA0v\ 30{\|aJmr
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 77 b9 b6 7c 95 2f 16 c8 78 c2 aa ac e0 2e e3 6d 61 5b d7 39 20 41 8f 0e 97 86 48 79 54 27 88 ac e8 96 48 44 b0 ec 3b 31 a7 07 b6 bd 09 e6 39 b0 2d 37 5d 75 32 f4 06 e5 61 ec 6b f7 b9 fc fa 97 5d ee d9 68 12 8d 57 42 d4 5b b3 69 d8 b5 d5 70 cf c6 14 8f 6c 0f f8 df ef 06 9c be 62 71 93 ec f2 a8 18 aa cb 65 f9 57 b2 91 ce a7 92 82 36 ee 00 a9 c5 1c 70 74 fc a5 43 6d f7 4a 27 3f 9b 64 52 6f 11 06 27 80 8e 77 d5 c5 bd 62 60 61 38 0d cf 3f ee f1 dc 63 1e 23 0d 9b 4d 92 23 e3 c1 93 f7 b9 6c 5c 25 fc e8 b5 12 1f 7e 6e 71 ca 2d a5 a5 a5 bc cc e4 46 b8 59 8e 86 75 df 26 63 af 02 7e 79 83 9d 41 d1 86 ed 28 7a 09 38 96 24 f7 e4 ca 69 f4 ae 33 d1 02 04 85 5e 6b c6 6a 44 ca 6f ec f3 f8 f6 de 64 e4 b6 cb b1 50 b2 5c bc 5a e4 ea 74 11 48 b6 64 2e 09 2d f1 5e a0 6a 13 19 Data Ascii: w\|/x.ma[9 AHyT'HD;19-7]u2ak]hWB[iplbqeW6ptCmJ'?dRo'wb`a8?c#M#l\%~nq-FYu&c~yA(z8$i3^kjDodP\ZtHd.-^j
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 3a dd 19 01 d1 e5 e1 61 b9 5d 2d cd 6d cb ff 89 d0 d1 3a 6d af 70 04 1a 36 d2 b5 b1 d8 7d bb 74 d2 f0 bd f1 97 0e 75 fc d3 78 bd dd 74 97 be 76 58 73 ab 0f 8b f0 b5 96 14 0b 84 21 5c 9d b3 e5 4a be c9 94 e3 c0 c6 d5 86 f5 23 86 eb 33 16 e3 34 24 45 10 e6 0b 96 a9 05 45 62 7a b2 08 64 52 86 a1 54 23 5b b9 62 34 fe d6 b8 51 cb 8b 0c 8b 85 90 2b 33 01 9e e9 5e 3b 24 85 01 26 a7 03 8e 5f f0 f1 3a 68 55 16 25 44 0b 29 e5 9d 6e f2 ed 89 60 79 8c d9 c2 01 79 41 31 5f 73 5a cc 82 a3 83 cd 70 fa 4a 48 be 64 19 1d 72 6a c2 36 ae 12 f6 6e 17 fe 7c 26 2a 50 b5 14 23 80 2a ff e5 95 45 7e f8 d3 52 83 4f 31 b0 ca c6 51 e1 bb cf 64 79 62 77 b6 26 75 60 95 eb b3 96 62 50 2b 53 00 14 7e 72 a4 c4 8f 3f 9e 6f be d0 d0 e4 79 33 27 70 6c f4 aa 8b 11 fc d0 20 26 4d ca 6d 9e a0 Data Ascii: :a]-m:mp6}tuxtvXs!\J#34$EEbzdRT#[b4Q+3^;$&_:hU%D)n`yyA1_sZpJHdrj6n\|&P#E~RO1Qdybw&u`bP+S~r?oy3'pl &Mm
2024-05-27 22:43:46 UTC	675	IN	Data Raw: 7a ef b3 80 93 e7 83 da d0 98 c5 8c a4 a8 26 4b 24 3a 7b 3c e5 7b 4d 57 ac 9a 8d ff 0e 70 7d 78 eb c7 0b c3 0f 4d c2 5b 5d 96 26 42 ef 04 77 3b 08 c7 40 00 47 04 c7 89 4c 8c bc 42 ce 27 3a 0a 51 15 49 90 a5 c3 d5 9d 14 ad 1e f9 d0 61 31 30 4d fd c8 49 e5 b4 32 e2 8c 89 d7 2a cd 37 f6 29 2a 86 d3 ab 77 1d ff a3 3d ff 78 91 3f fb cf ed 72 6f 89 fe f7 e0 3e 19 36 4b f3 46 a1 e3 6d 1c 49 8b 20 02 4b 6e 90 26 59 24 22 b7 43 47 49 bb 5d 9b 8a b0 e8 8c e4 3f 71 d7 f4 5c 9b 5f 08 15 dd 0f 74 5a 13 ed a6 47 89 e4 b5 e8 b9 9d e4 1b eb 46 45 65 48 4b 49 4a d1 12 b7 2d c1 fd 18 27 bb 96 dd a5 3a bf 15 db 84 6e 2b 82 7b a9 9f be dd 55 d6 45 af 6d 95 7f d3 74 f5 4b 5f 5d a2 ef 8e 8e 38 24 1d 41 fb dd c0 3b e9 31 b7 a2 d7 b6 24 17 7a 32 58 2b 58 99 5f 1f 5d 89 4c e8 4e Data Ascii: z&K$:{<{MWp}xM[]&Bw;@GLB':QIa10MI27)w=x?ro>6KFmI Kn&Y$"CGI]?q\_tZGFEeHKIJ-':n+{UEmtK_]8$A;1$z2X+X_]LN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50319	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:46 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:46 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:46 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50321	172.217.18.2	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	670	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Mon, 27 May 2024 22:43:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:46 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 4e 53 6a 7a 4b 6c 5f 34 52 36 52 4d 2d 47 37 68 7a 6a 5a 66 5a 6d 6f 5a 2d 6b 67 75 54 7a 4c 34 55 33 4d 6f 39 4a 6c 35 55 44 63 4d 69 66 6f 4c 33 41 76 74 74 59 65 35 59 6d 64 73 77 76 57 43 4e 63 55 42 4b 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpNSjzKl_4R6RM-G7hzjZfZmoZ-kguTzL4U3Mo9Jl5UDcMifoL3AvttYe5YmdswvWCNcUBK","type":4}
2024-05-27 22:43:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50322	142.250.185.162	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	466	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Mon, 27 May 2024 22:43:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:46 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 6f 37 7a 76 75 38 4f 76 52 38 45 6a 43 4e 39 58 6f 61 6a 43 46 57 31 62 64 5a 66 68 36 71 5a 46 56 72 32 63 64 6d 47 6e 54 35 54 51 5a 4f 74 78 67 56 56 61 6a 65 55 7a 73 59 43 31 53 4c 4d 47 32 31 35 4e 68 31 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKo7zvu8OvR8EjCN9XoajCFW1bdZfh6qZFVr2cdmGnT5TQZOtxgVVajeUzsYC1SLMG215Nh1","type":4}
2024-05-27 22:43:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50320	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	563	OUT	GET /iP-z8txDr3nlls3-oUo38PkHRmEyAJ0biVE52VyF_jPV8IYzANODEi8arqixXSn27AspqpmvG-7jbouNAUB1HicnS1dh3LZ4C_WsPKVZ1ik_2CmO=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4883 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:02 GMT Expires: Tue, 28 May 2024 22:42:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 104 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 02 00 00 00 b6 06 a1 85 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 12 60 49 44 41 54 78 9c ed 5d 7b 70 5c d5 79 ff 7d e7 ee 4b ab d5 6b 25 5b 96 64 49 96 91 5f 08 87 f8 51 1c 5e 06 43 5d 98 69 31 84 16 8a 87 e9 a4 a4 79 4c ca a4 d3 69 87 06 4a 07 66 28 33 ed 14 d2 34 a5 4d 48 db 29 d3 66 0a 24 85 29 c1 90 ba 84 f8 15 83 b1 11 8e 63 05 b0 91 b1 25 03 b6 f5 b0 Data Ascii: PNGIHDRxxsBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2`IDATx]{p\y}Kk%[dI_Q^C]i1yLiJf(34MH)f$)c%
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 79 9f 54 fe d9 c8 d9 65 d1 66 e7 19 77 a2 fb 26 06 20 42 2e 97 05 3e 62 1a 87 78 2a 38 7a 5b e8 ec 8a c0 d1 90 40 d1 3a b3 09 8f 11 62 12 27 12 6b 77 c6 1a 1f 8a 57 55 42 ae 20 37 ba 45 e8 dc 44 ff 0c 88 8e 27 e2 4e f9 1e 05 75 b3 78 31 dc 77 47 f9 81 30 25 98 21 a1 a8 b2 f8 bc d8 0d 0c 3f b8 23 d0 75 55 b0 eb 1b 1c da 31 b9 69 fb 54 fd 0a 92 55 76 2f 13 f1 44 dc d5 80 7b 30 64 96 b6 23 9d 2c 6e 57 e2 c3 75 6f fe 7e 64 6f 10 aa ca 3e 0d 3e 2e 42 ad f0 04 83 34 f8 54 f6 85 90 b8 2f b2 77 b8 ee cd db 94 78 27 db 09 74 52 97 82 57 d6 61 61 b0 53 fa 9e 0f 0f fc 63 ed 8e 4a 1a 52 d9 c7 0b fb 01 18 43 a8 ec ab a4 e1 67 6a 77 3c 1f 1e e8 94 b6 09 9d bb f3 e5 a6 ac 53 2a bb 2a 7a b6 57 ec 51 a5 4f ce f9 d1 57 d1 40 42 51 a5 6f 7b c5 9e 5d 15 bd 0e ae 5d 90 83 e8 Data Ascii: yTefw& B.>bx8z[@:b'kwWUB 7ED'Nux1wG0%!?#uU1iTUv/D{0d#,nWuo~do>>.B4T/wx'tRWaaScJRCgjw<S*zWQOW@BQo{]]
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 51 bd fa c4 15 bf 57 21 bf fd f5 89 4f 37 8c 74 b7 9f ef 6c e8 ff af b2 f8 71 55 81 14 ad 52 54 5f e2 39 0c 71 3c 34 7d 74 e7 c6 37 ee 59 7a eb 4d 6a ac ca 7d 62 32 73 8f 66 80 99 09 00 11 bb f5 94 85 59 06 60 17 16 02 83 c1 20 85 38 c2 5a 84 b1 44 aa 0c ec 2e 6f 7a 2d d2 dc d7 bc 75 12 0f df 3f 3d f0 85 b1 93 ab 87 ba 9a fa ff af 7a ec 27 52 40 13 f5 52 d4 b1 28 bb a4 1e 25 28 6a 4f 32 f8 b9 c7 b7 f6 be 14 6e 70 c8 45 5e c8 29 1d 2e 2a 01 23 3c b2 e1 d7 e6 b3 64 aa 62 72 76 98 14 a6 0e 2a 80 f7 83 d5 ef 2e da 38 5c bf a9 6f cd 57 b7 26 c7 6f 1e ef 59 3b 7c ac 65 60 5f fd c0 b3 04 a8 be 88 14 8d 52 54 5c d4 c4 91 43 d3 9d 27 da fe ee 81 ab be 19 62 6e d7 12 b3 b3 92 33 eb 60 3d eb 20 dd 4f 01 7b 78 64 43 43 60 71 44 5d 66 c0 e4 fe cb 3c 02 cc 01 68 d5 9a Data Ascii: QW!O7tlqURT_9q<4}t7YzMj}b2sfY` 8ZD.oz-u?=z'R@R(%(jO2npE^).#<dbrv.8\oW&oY;\|e`_RT\C'bn3`= O{xdCC`qD]f<h
2024-05-27 22:43:46 UTC	1243	IN	Data Raw: 68 f9 cc 86 1d 9a 0f 96 2e 86 9e 78 11 ad df 8e 69 75 ce ee d7 c6 f7 d4 12 bf fd 2c 99 ba 24 23 1e f6 00 08 43 28 32 05 cd 71 d0 3e b1 67 ab 95 c2 60 3e 2e 97 6b 66 68 e1 8f 8c 83 fa a3 6e dd ed d9 fc 6f 9a 44 ca 8c 80 cc 59 6b a6 6c fb c2 c8 e8 8b 5d cd 61 5c c5 a5 ee 2c e0 5a df cb e8 7c 8c 80 fc d6 3a f4 e0 66 d1 6b 47 78 d2 fd 3a 3d f1 73 fa 9d ae 3f 16 1b 16 63 ba 6f 3b 5b 62 1a 13 9c f9 34 7b b8 72 37 67 42 b3 18 c8 ea d1 26 17 4a e7 bd 64 39 98 ca 34 4c 59 9d 59 0f 4c 66 d8 ee 95 46 b2 e2 14 65 36 fa c8 30 64 14 32 df 4b 66 b4 5c 2a c8 d2 16 8f cd 42 82 32 6a c9 66 87 32 05 b6 cc 27 d6 73 0c 8b d0 c2 4e 82 55 9d 4d 74 3b db c7 e9 e7 b7 96 8a 16 15 32 22 e3 a5 c4 33 98 21 3c 5e 8f 75 27 ba 3c 4c 90 99 30 05 d8 c6 38 db c6 7f ba 94 c5 d9 1c 1f ec 43 Data Ascii: h.xiu,$#C(2q>g`>.kfhnoDYkl]a\,Z\|:fkGx:=s?co;[b4{r7gB&Jd94LYYLfFe60d2Kf\*B2jf2'sNUMt;2"3!<^u'<L08C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50325	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	567	OUT	GET /3-xiN81vze40pCNon5Fg7bDiK8tDcEZdzIj5f3vyZ32265N-D-xGDg2tqu6MOfLsnf_Sej0vdNHhaTCL0b3MVtOm0hKy2jaAm_C6dbrCivif65LxVuc9=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5805 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:16:10 GMT Expires: Tue, 28 May 2024 21:16:10 GMT Cache-Control: public, max-age=86400, no-transform Age: 5256 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 64 49 44 41 54 78 9c ed 9d 79 98 15 d5 99 ff 3f ef a9 aa 7b 6f 2f 34 4b b3 2f 82 80 28 8c 60 04 64 13 e4 a7 82 1b 1a 89 cb 38 2e 93 49 c6 38 eb 33 f9 65 fc 25 a2 18 e3 38 6e 41 74 9c 68 1c 27 93 38 4f 36 b3 99 98 c4 b8 a0 a0 71 8b 6c 46 45 d4 44 11 50 44 96 66 ed f5 2e 55 75 de df 1f 0d da b4 dd 74 df ee 5b f7 de c6 fb 79 9e 7e ba 9f ae aa f3 be 55 df 3a a7 ce f2 9e 73 a0 44 89 12 25 4a 14 29 52 68 07 72 88 01 2a f8 dc fc 32 4d 35 24 b0 c4 31 36 86 35 2e c6 ba 20 06 44 b0 80 aa 45 d4 22 26 c4 d8 00 c4 27 b4 e9 9f 9e 3d 2f 75 d9 57 6e 4b 01 8d 40 50 d8 db c9 0d 3d 59 e0 2a 3d 6b 66 7f ac 56 63 a8 06 46 Data Ascii: PNGIHDRxx9d6sBIT\|ddIDATxy?{o/4K/(`d8.I83e%8nAth'8O6qlFEDPDf.Uut[y~U:sD%J)Rhr2M5$165. DE"&'=/uWnK@P=Y=kfVcF
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 6e f7 83 05 9e 94 c4 6d 8d 11 48 86 36 1c 1e 8b 7f 07 db 78 a3 2c 5f b7 3b 12 3b 11 a4 29 7a c6 d4 e9 c4 dd ff de e9 87 25 71 db c1 2a 24 8c 71 6a fc cc e5 38 f1 f3 a2 b2 e3 e6 38 3d d1 79 d3 e7 20 7c 73 57 10 cc 34 d2 73 3b 2d f2 41 0c ea ab 1c f7 3e 59 b6 ea 37 51 d9 c8 65 11 2d 3a 6f e6 1c 1c ee d8 15 04 d3 73 98 ee 11 49 1c ea ab 8c 73 af 2c 5f 75 07 50 1b 95 9d 9c e5 60 3d 63 ea 34 c4 de be 2b b0 25 71 3b c0 83 c6 7c 88 0b 39 fa 06 eb dc a9 c7 81 bb 64 57 10 ce ca 45 7a 47 32 8e 6a aa 8f 31 77 cb f2 55 4b 88 58 5c c8 81 c0 2b fe f9 b8 6a 12 ce 9d 3b 83 60 6e 11 8c 5d 14 35 61 a8 b6 9f e3 2e 91 e5 ab ef 00 ea f2 61 b3 db 45 f4 e9 1b 7a df b5 2d 08 16 c4 8a bc b6 dc fa d5 cb a7 af 07 47 99 86 78 ce 8d b2 7c d5 dd 34 07 f5 e5 85 6e 09 ac 67 cd 58 bc 35 Data Ascii: nmH6x,_;;)z%q*$qj88=y \|sW4s;-A>Y7Qe-:osIs,_uP`=c4+%q;\|9dWEzG2j1wUKX\+j;`n]5a.aEz-Gx\|4ngX5
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: ee dd eb fb f7 77 3d f1 12 d9 f0 89 2e 0a 5d cd 30 7c f3 45 55 19 db ed 3e 2a 6b 70 fb 37 e1 8e d8 87 cd 54 a0 bb 3d 02 ab 8c 7d fe d5 4b 81 7d dd 4d be 44 c7 7c 32 07 37 b9 d5 c9 8c 4c c8 95 01 0d 1c 9c ea 90 ca 33 de 26 31 67 3f 99 aa d4 16 60 63 ae d2 2f 71 78 da ea 8b ae f6 7d 8e 8a e5 72 de a1 15 88 1b 2a 66 6f a2 72 aa f7 6d 22 9b 4b d7 31 f3 97 ea 67 c9 5d 70 5e a1 11 a0 d6 71 78 73 d9 d5 b2 bf ad 13 5a cb e8 00 47 55 94 09 1d b6 7f b3 f6 44 a8 6f 32 54 f5 4a ff 3c b7 29 67 47 98 69 3c 72 da dd 22 a8 0d 3f b0 b1 5e 5f a2 9d 15 7c 5a 17 d1 e5 a0 a3 a3 a8 de 8a 40 dc b5 2f 93 91 48 66 b2 7f 5a b1 36 ac b2 d0 b7 bd e3 ad 04 ae 28 03 46 44 35 87 2c 1e 33 cf cb 7c 2d 0d 28 e4 0a 55 04 ed ed 08 d5 ed 9d 72 88 c0 fa 74 32 81 32 2c 1a 67 00 58 c3 91 f3 fd Data Ascii: w=.]0\|EU>kp7T=}K}MD\|27L3&1g?`c/qx}rform"K1g]p^qxsZGUDo2TJ<)gGi<r"?^_\|Z@/HfZ6(FD5,3\|-(Urt22,gX
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 6c 0a fb f1 ab c6 99 5c d5 30 8a 6a 8d 53 de dd 48 58 05 f5 b5 62 d7 ef 36 fe f3 b9 ba f8 af 3b f2 a9 07 50 7e da 52 fd 9a cd 24 4f 92 48 06 ce 04 55 52 56 f9 23 9d 58 c2 b8 a3 87 19 12 ea b2 72 4f df 15 f1 79 35 3d 86 ff 69 98 c4 9d a9 c1 f4 c3 b4 d9 04 ea 2a 61 63 30 78 d7 e3 9b bf 7e ae 5e 7f 51 ce 12 cd 3f 72 ea 37 f5 2a 03 97 a3 36 1e c9 3c 3b 01 27 5e b9 c5 d4 3d f4 64 27 4f ef 90 98 be 1a ff df df bd 37 e1 f2 5f 06 83 59 1b 96 53 46 34 d9 4c ad e2 f6 89 bf d3 ff ec d1 df 78 4c 6e fd 05 3d 6c 26 e2 69 77 e8 e7 45 b8 45 d3 0d 23 22 09 4d 05 d4 06 38 b1 de bf 59 b1 48 2e a4 13 2b f3 76 46 a7 0c 15 e9 9f de 5f 3e f6 fd d7 6c 05 e5 9d bc a8 2b 88 11 82 da f4 b8 dd 8f 6d fc e6 39 ba f8 0b f4 a0 6f f2 e9 4b f5 72 23 fc 9b 4d d7 47 26 2e 08 4e a2 f7 6e 94 Data Ascii: l\0jSHXb6;P~R$OHURV#XrOy5=iac0x~^Q?r76<;'^=d'O7_YSF4LxLn=l&iwEE#"M8YH.+vF_>l+m9oKr#MG&.Nn
2024-05-27 22:43:46 UTC	776	IN	Data Raw: 47 34 a1 f2 8e 45 c4 85 c6 63 1b 06 0f be f9 e6 57 cf e1 9e ad 48 ce 97 b0 8a 34 7b 5d a9 ff da 77 c3 1b c9 3b 1a 5e db 71 a5 89 b9 b9 df e9 a3 07 23 46 50 b5 7b fa 5f 94 58 bc cc f9 c9 77 89 28 0b e4 a5 fc 3c f9 f7 57 7c 35 b5 ad f1 56 e3 3a b1 82 f5 5d 17 13 02 ea c8 87 c9 f5 f5 5f 7a eb a6 27 97 45 6c 2a 6f 4c 39 e9 77 17 fd 44 1b ec b8 4f 73 5b 59 ad 12 1f 58 f6 c2 4b f3 1e fc 2b 0e 33 ed 33 57 e4 fb 49 3b d3 9f b8 e4 81 b0 21 b8 a4 10 e3 c9 85 46 3c a9 f3 fa 95 fd cf 4b a7 fe e8 6b 79 b3 99 2f 43 ad 58 30 e3 b1 4b ef 09 ea 33 c3 91 ac a6 33 f5 3c 04 b0 1a c4 06 94 fd e9 a5 79 0f 5e 0d e4 a4 03 23 1b f3 85 a2 7c ce ea 2f de 12 d6 fa 17 a6 6a 1a 87 1b cf 98 23 4a 68 01 f5 2d f1 81 15 5b 4c 85 f3 9b 17 4f fe c1 bf d2 c9 50 d7 1c bb 51 58 c6 78 43 a6 8c Data Ascii: G4EcWH4{]w;^q#FP{_Xw(<W\|5V:]_z'El*oL9wDOs[YXK+33WI;!F<Kky/CX0K33<y^#\|/j#Jh-[LOPQXxC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50324	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	786	OUT	GET /kroer1kpwSe3j-lIfPnE7Q3MVaCoJVF8atjdh0VtGDWCz2ulLejVsDh2k6a6VUgpUFQ8qRMHMEX7bsr2jTrLXhZR_ETbqILDf-qfkk0=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5188 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:34:04 GMT Expires: Tue, 28 May 2024 22:34:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 582 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 13 fb 49 44 41 54 78 9c ed 9d 79 94 54 d5 9d c7 3f bf fb 5e 55 75 75 37 08 34 34 3b b2 89 4b 04 85 6e 88 4d 70 10 34 89 89 46 65 1b 05 cd c4 19 e3 cc 64 72 c6 99 31 89 11 15 93 13 25 c6 85 71 22 71 c6 c4 68 96 89 82 0b a8 89 33 21 b2 39 c6 08 4d 37 b8 60 5c a2 80 6c 0a cd 26 dd 4d 77 55 57 bd fb 9b 3f 5a 3c 34 54 35 55 dd f5 aa aa a1 3e e7 70 0e d4 7b ef fe 7e ef 7d b9 fb bd bf 0b 05 0a 14 28 50 20 4f 91 5c 3b 90 29 76 5c fa 19 13 8a 84 4b 50 c2 16 29 c2 12 c2 d8 a0 5a e3 62 ac 0b c6 00 82 05 03 d6 62 2d 62 3c 11 1b 57 24 66 20 aa 10 41 24 62 e2 72 a8 cf 8b eb e2 b9 7e a7 4c d0 65 05 ae 9b 32 a1 3b 62 7b Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxyT?^Uuu744;KnMp4Fedr1%q"qh3!9M7`\l&MwUW?Z<4T5U>p{~}(P O\;)v\KP)Zbb-b<W$f A$br~Le2;b{
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: e7 ab 70 8f 20 e7 89 14 c4 6d 17 a5 01 65 21 ae b9 a7 7c 45 f5 c7 7e 99 c9 58 2b fa 40 a8 db 04 d0 bb 04 3e 5b d0 f6 38 28 87 3e 15 77 79 f5 41 3f 4d 65 44 8a 3d 53 c7 9f a1 f0 90 8a 4e 2e 14 cb c7 41 89 a0 dc 87 6b ee 2d 5f 5e 5d ef b7 b9 4e ab b1 ff f3 15 65 71 cb af 50 73 49 41 db e3 a0 58 e0 0e 1c b3 a0 7c 79 75 43 36 4c 76 ba 91 15 f7 58 80 48 41 dc e3 a1 00 7c 0f c7 dc 5f be bc fa 50 b6 cc 76 4a e0 ba 0b c7 df 02 7c 2d 43 be f8 88 02 82 2a cd 82 b5 2a 12 14 24 7b 93 1c 0a 20 37 e3 ca 8f cb 5f a8 ce ea aa 8f 0e e7 bb ba 0b 2b aa c0 bc 84 0f 7d e9 ce a0 b0 1b d8 20 aa af 83 6c c6 c8 76 d4 db 0f 26 ae 16 4f f0 d4 1a 31 06 e3 2a da 0d 64 a0 28 c3 41 cf 02 ad 40 64 64 46 07 66 5a c5 9d 47 d0 f9 51 f9 b2 35 59 5f 8a db a1 37 a9 bb 74 72 88 43 4d 6f 63 18 Data Ascii: p me!\|E~X+@>[8(>wyA?MeD=SN.Ak-_^]NeqPsIAX\|yuC6LvXHA\|_PvJ\|-C*${ 7_+} lv&O1d(A@ddFfZGQ5Y_7trCMoc
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 3d 45 84 b2 64 d7 db 0a 6c 29 02 1d e8 a3 3b eb 62 26 78 a2 d4 7f 79 82 20 48 d9 39 f3 f6 25 ac 57 db 08 2c 22 21 90 72 3f dc 50 c0 0a 6f 87 a7 36 16 e6 7b 33 8d 52 d6 d3 75 4b 13 5d 6a 9b 83 8d 0d 22 9a 34 bb 77 06 41 1b 04 cf b7 50 05 27 35 42 0f 71 4c 49 a2 4b 6d 5a d1 16 71 05 e9 ee c7 7a 3a 55 d9 a1 f6 84 e9 9e e4 1b dd 91 c4 5b 89 8e aa 83 c5 45 7d da 73 24 ba 17 43 a1 81 e5 0f 25 82 24 d4 ed e8 81 0e df 42 1b 8a 4a bd b4 8e 48 17 c8 38 1a 46 35 e1 8e 93 a3 05 f6 33 10 43 94 82 c0 be a0 48 d0 8a 24 5c 9d 73 a2 05 e1 3e 29 11 70 1d 34 a1 96 47 ff e8 67 17 26 94 c0 5e 81 4c 91 44 b9 a3 b3 b5 6f 45 a8 8a 76 d7 82 c0 7e e1 21 92 50 bb a3 fa c1 1a 47 f0 69 eb a3 f4 21 cf 02 b6 9c 28 28 c4 6d 92 cc 69 da fe 43 e3 d2 7a 96 5f c6 11 d5 41 62 13 b7 f4 0a 74 Data Ascii: =Edl);b&xy H9%W,"!r?Po6{3RuK]j"4wAP'5BqLIKmZqz:U[E}s$C%$BJH8F53CH$\s>)p4Gg&^LDoEv~!PGi!((miCz_Abt
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 3e 71 45 d6 4e 7b 49 87 2f dc ac dd 1a 5c f7 2e 11 ee cb 92 b8 4d 8a 3e 91 aa b8 90 46 6e 5c 3f 7b 69 8d 55 9e 21 bb 21 88 42 22 32 4b d4 59 33 76 f1 f4 2b b2 68 f7 b8 54 fd fc 9e d1 91 be b5 bf 17 2d fa 16 22 09 77 d7 67 1a 6b d9 de 54 d4 fc 93 74 9e 49 ab 13 7e de a3 d3 8a e3 45 6c c4 18 ff 22 f1 b4 8b 2e 77 5d 67 f6 da 99 4f e5 f4 f8 9a 8a 45 d3 ef 12 bc 9b c4 f6 36 45 fb 66 13 38 38 09 8c 87 bf 5b bb 88 ab ea b7 56 df d6 ed 81 74 1e 4a 7b 94 a5 72 d1 f4 af 20 f2 24 b9 3a 9c d2 02 a2 8f b8 c4 6f 5d 3b fb b7 59 8b 56 fb 00 2b e4 d7 8b 1f ba d9 a2 77 9a 4f 4b 3e 0f 68 26 58 3f 87 d0 be 2f 23 5e 09 64 66 5c 20 01 f6 cd 55 b7 76 1f 9d ee 53 1d 1a 46 ab 5c 34 fd 57 88 fc 4d 47 9e cd 14 d6 02 e8 22 c7 c8 c3 d1 b0 57 1d 68 92 d8 fa d9 cf 64 ac fa a8 58 3c 2d Data Ascii: >qEN{I/\.M>Fn\?{iU!!B"2KY3v+hT-"wgkTtI~El".w]gOE6Ef88[VtJ{r $:o];YV+wOK>h&X?/#^df\ UvSF\4WMG"WhdX<-
2024-05-27 22:43:46 UTC	158	IN	Data Raw: a6 d6 f6 b6 22 bd 04 ca 04 06 29 32 02 74 08 68 7f a0 2f 2a 65 2a 74 37 aa 25 7a c4 60 b8 e5 93 bf 2b 51 11 69 40 39 88 e8 1e a0 0e e4 43 84 6d 78 f2 81 15 dd 85 ea 01 11 0e 88 d8 3d b5 57 3d 9b b7 9b e0 92 d1 65 05 3e 9a aa 67 e7 98 68 34 56 8c da 62 51 1b 42 34 a4 d6 04 31 12 30 d6 3a d6 60 0e ef 48 f8 e4 00 0b c5 e2 19 31 71 94 98 1a 6d 41 89 1a 43 44 8c d3 bc 6e d6 53 cd 39 7e a5 02 05 0a 14 28 70 62 f3 ff 0d ff 95 78 60 27 35 38 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ")2th/et7%z`+Qi@9Cmx=W=e>gh4VbQB410:`H1qmACDnS9~(pbx`'58IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50327	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	783	OUT	GET /23ispX_lvsTfMdqVu6ra84IGV85IwhGPQyogx4AOuECIOQYVFewlJ0p4XkFbUoAJXDlc4LwopHv1SNEslf1B4XCDZg0P-85zw3DQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5188 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:18:25 GMT Expires: Tue, 28 May 2024 19:18:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 12321 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 13 fb 49 44 41 54 78 9c ed 9d 79 94 54 d5 9d c7 3f bf fb 5e 55 75 75 37 08 34 34 3b b2 89 4b 04 85 6e 88 4d 70 10 34 89 89 46 65 1b 05 cd c4 19 e3 cc 64 72 c6 99 31 89 11 15 93 13 25 c6 85 71 22 71 c6 c4 68 96 89 82 0b a8 89 33 21 b2 39 c6 08 4d 37 b8 60 5c a2 80 6c 0a cd 26 dd 4d 77 55 57 bd fb 9b 3f 5a 3c 34 54 35 55 dd f5 aa aa a1 3e e7 70 0e d4 7b ef fe 7e ef 7d b9 fb bd bf 0b 05 0a 14 28 50 20 4f 91 5c 3b 90 29 76 5c fa 19 13 8a 84 4b 50 c2 16 29 c2 12 c2 d8 a0 5a e3 62 ac 0b c6 00 82 05 03 d6 62 2d 62 3c 11 1b 57 24 66 20 aa 10 41 24 62 e2 72 a8 cf 8b eb e2 b9 7e a7 4c d0 65 05 ae 9b 32 a1 3b 62 7b Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxyT?^Uuu744;KnMp4Fedr1%q"qh3!9M7`\l&MwUW?Z<4T5U>p{~}(P O\;)v\KP)Zbb-b<W$f A$br~Le2;b{
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: b3 35 e7 ab 70 8f 20 e7 89 14 c4 6d 17 a5 01 65 21 ae b9 a7 7c 45 f5 c7 7e 99 c9 58 2b fa 40 a8 db 04 d0 bb 04 3e 5b d0 f6 38 28 87 3e 15 77 79 f5 41 3f 4d 65 44 8a 3d 53 c7 9f a1 f0 90 8a 4e 2e 14 cb c7 41 89 a0 dc 87 6b ee 2d 5f 5e 5d ef b7 b9 4e ab b1 ff f3 15 65 71 cb af 50 73 49 41 db e3 a0 58 e0 0e 1c b3 a0 7c 79 75 43 36 4c 76 ba 91 15 f7 58 80 48 41 dc e3 a1 00 7c 0f c7 dc 5f be bc fa 50 b6 cc 76 4a e0 ba 0b c7 df 02 7c 2d 43 be f8 88 02 82 2a cd 82 b5 2a 12 14 24 7b 93 1c 0a 20 37 e3 ca 8f cb 5f a8 ce ea aa 8f 0e e7 bb ba 0b 2b aa c0 bc 84 0f 7d e9 ce a0 b0 1b d8 20 aa af 83 6c c6 c8 76 d4 db 0f 26 ae 16 4f f0 d4 1a 31 06 e3 2a da 0d 64 a0 28 c3 41 cf 02 ad 40 64 64 46 07 66 5a c5 9d 47 d0 f9 51 f9 b2 35 59 5f 8a db a1 37 a9 bb 74 72 88 43 4d 6f Data Ascii: 5p me!\|E~X+@>[8(>wyA?MeD=SN.Ak-_^]NeqPsIAX\|yuC6LvXHA\|_PvJ\|-C*${ 7_+} lv&O1d(A@ddFfZGQ5Y_7trCMo
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 41 04 3d 45 84 b2 64 d7 db 0a 6c 29 02 1d e8 a3 3b eb 62 26 78 a2 d4 7f 79 82 20 48 d9 39 f3 f6 25 ac 57 db 08 2c 22 21 90 72 3f dc 50 c0 0a 6f 87 a7 36 16 e6 7b 33 8d 52 d6 d3 75 4b 13 5d 6a 9b 83 8d 0d 22 9a 34 bb 77 06 41 1b 04 cf b7 50 05 27 35 42 0f 71 4c 49 a2 4b 6d 5a d1 16 71 05 e9 ee c7 7a 3a 55 d9 a1 f6 84 e9 9e e4 1b dd 91 c4 5b 89 8e aa 83 c5 45 7d da 73 24 ba 17 43 a1 81 e5 0f 25 82 24 d4 ed e8 81 0e df 42 1b 8a 4a bd b4 8e 48 17 c8 38 1a 46 35 e1 8e 93 a3 05 f6 33 10 43 94 82 c0 be a0 48 d0 8a 24 5c 9d 73 a2 05 e1 3e 29 11 70 1d 34 a1 96 47 ff e8 67 17 26 94 c0 5e 81 4c 91 44 b9 a3 b3 b5 6f 45 a8 8a 76 d7 82 c0 7e e1 21 92 50 bb a3 fa c1 1a 47 f0 69 eb a3 f4 21 cf 02 b6 9c 28 28 c4 6d 92 cc 69 da fe 43 e3 d2 7a 96 5f c6 11 d5 41 62 13 b7 f4 Data Ascii: A=Edl);b&xy H9%W,"!r?Po6{3RuK]j"4wAP'5BqLIKmZqz:U[E}s$C%$BJH8F53CH$\s>)p4Gg&^LDoEv~!PGi!((miCz_Ab
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 2f c7 3e 71 45 d6 4e 7b 49 87 2f dc ac dd 1a 5c f7 2e 11 ee cb 92 b8 4d 8a 3e 91 aa b8 90 46 6e 5c 3f 7b 69 8d 55 9e 21 bb 21 88 42 22 32 4b d4 59 33 76 f1 f4 2b b2 68 f7 b8 54 fd fc 9e d1 91 be b5 bf 17 2d fa 16 22 09 77 d7 67 1a 6b d9 de 54 d4 fc 93 74 9e 49 ab 13 7e de a3 d3 8a e3 45 6c c4 18 ff 22 f1 b4 8b 2e 77 5d 67 f6 da 99 4f e5 f4 f8 9a 8a 45 d3 ef 12 bc 9b c4 f6 36 45 fb 66 13 38 38 09 8c 87 bf 5b bb 88 ab ea b7 56 df d6 ed 81 74 1e 4a 7b 94 a5 72 d1 f4 af 20 f2 24 b9 3a 9c d2 02 a2 8f b8 c4 6f 5d 3b fb b7 59 8b 56 fb 00 2b e4 d7 8b 1f ba d9 a2 77 9a 4f 4b 3e 0f 68 26 58 3f 87 d0 be 2f 23 5e 09 64 66 5c 20 01 f6 cd 55 b7 76 1f 9d ee 53 1d 1a 46 ab 5c 34 fd 57 88 fc 4d 47 9e cd 14 d6 02 e8 22 c7 c8 c3 d1 b0 57 1d 68 92 d8 fa d9 cf 64 ac fa a8 58 Data Ascii: />qEN{I/\.M>Fn\?{iU!!B"2KY3v+hT-"wgkTtI~El".w]gOE6Ef88[VtJ{r $:o];YV+wOK>h&X?/#^df\ UvSF\4WMG"WhdX
2024-05-27 22:43:46 UTC	160	IN	Data Raw: cc ec a6 d6 f6 b6 22 bd 04 ca 04 06 29 32 02 74 08 68 7f a0 2f 2a 65 2a 74 37 aa 25 7a c4 60 b8 e5 93 bf 2b 51 11 69 40 39 88 e8 1e a0 0e e4 43 84 6d 78 f2 81 15 dd 85 ea 01 11 0e 88 d8 3d b5 57 3d 9b b7 9b e0 92 d1 65 05 3e 9a aa 67 e7 98 68 34 56 8c da 62 51 1b 42 34 a4 d6 04 31 12 30 d6 3a d6 60 0e ef 48 f8 e4 00 0b c5 e2 19 31 71 94 98 1a 6d 41 89 1a 43 44 8c d3 bc 6e d6 53 cd 39 7e a5 02 05 0a 14 28 70 62 f3 ff 0d ff 95 78 60 27 35 38 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ")2th/et7%z`+Qi@9Cmx=W=e>gh4VbQB410:`H1qmACDnS9~(pbx`'58IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50323	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	786	OUT	GET /SP5F8XlkxjIfM3uEu47BolKEBwkqWrOfyvwywHut48p0AZgedzyhcoevSaJCEBUJNXvy7dplTwI3s6dizxE1lNXFa-RkpU9nkIAmnSU=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5805 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:29:04 GMT Expires: Tue, 28 May 2024 22:29:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 882 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 64 49 44 41 54 78 9c ed 9d 79 98 15 d5 99 ff 3f ef a9 aa 7b 6f 2f 34 4b b3 2f 82 80 28 8c 60 04 64 13 e4 a7 82 1b 1a 89 cb 38 2e 93 49 c6 38 eb 33 f9 65 fc 25 a2 18 e3 38 6e 41 74 9c 68 1c 27 93 38 4f 36 b3 99 98 c4 b8 a0 a0 71 8b 6c 46 45 d4 44 11 50 44 96 66 ed f5 2e 55 75 de df 1f 0d da b4 dd 74 df ee 5b f7 de c6 fb 79 9e 7e ba 9f ae aa f3 be 55 df 3a a7 ce f2 9e 73 a0 44 89 12 25 4a 14 29 52 68 07 72 88 01 2a f8 dc fc 32 4d 35 24 b0 c4 31 36 86 35 2e c6 ba 20 06 44 b0 80 aa 45 d4 22 26 c4 d8 00 c4 27 b4 e9 9f 9e 3d 2f 75 d9 57 6e 4b 01 8d 40 50 d8 db c9 0d 3d 59 e0 2a 3d 6b 66 7f ac 56 63 a8 06 46 Data Ascii: PNGIHDRxx9d6sBIT\|ddIDATxy?{o/4K/(`d8.I83e%8nAth'8O6qlFEDPDf.Uut[y~U:sD%J)Rhr2M5$165. DE"&'=/uWnK@P=Y=kfVcF
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: f7 83 05 9e 94 c4 6d 8d 11 48 86 36 1c 1e 8b 7f 07 db 78 a3 2c 5f b7 3b 12 3b 11 a4 29 7a c6 d4 e9 c4 dd ff de e9 87 25 71 db c1 2a 24 8c 71 6a fc cc e5 38 f1 f3 a2 b2 e3 e6 38 3d d1 79 d3 e7 20 7c 73 57 10 cc 34 d2 73 3b 2d f2 41 0c ea ab 1c f7 3e 59 b6 ea 37 51 d9 c8 65 11 2d 3a 6f e6 1c 1c ee d8 15 04 d3 73 98 ee 11 49 1c ea ab 8c 73 af 2c 5f 75 07 50 1b 95 9d 9c e5 60 3d 63 ea 34 c4 de be 2b b0 25 71 3b c0 83 c6 7c 88 0b 39 fa 06 eb dc a9 c7 81 bb 64 57 10 ce ca 45 7a 47 32 8e 6a aa 8f 31 77 cb f2 55 4b 88 58 5c c8 81 c0 2b fe f9 b8 6a 12 ce 9d 3b 83 60 6e 11 8c 5d 14 35 61 a8 b6 9f e3 2e 91 e5 ab ef 00 ea f2 61 b3 db 45 f4 e9 1b 7a df b5 2d 08 16 c4 8a bc b6 dc fa d5 cb a7 af 07 47 99 86 78 ce 8d b2 7c d5 dd 34 07 f5 e5 85 6e 09 ac 67 cd 58 bc 35 ed Data Ascii: mH6x,_;;)z%q*$qj88=y \|sW4s;-A>Y7Qe-:osIs,_uP`=c4+%q;\|9dWEzG2j1wUKX\+j;`n]5a.aEz-Gx\|4ngX5
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: dd eb fb f7 77 3d f1 12 d9 f0 89 2e 0a 5d cd 30 7c f3 45 55 19 db ed 3e 2a 6b 70 fb 37 e1 8e d8 87 cd 54 a0 bb 3d 02 ab 8c 7d fe d5 4b 81 7d dd 4d be 44 c7 7c 32 07 37 b9 d5 c9 8c 4c c8 95 01 0d 1c 9c ea 90 ca 33 de 26 31 67 3f 99 aa d4 16 60 63 ae d2 2f 71 78 da ea 8b ae f6 7d 8e 8a e5 72 de a1 15 88 1b 2a 66 6f a2 72 aa f7 6d 22 9b 4b d7 31 f3 97 ea 67 c9 5d 70 5e a1 11 a0 d6 71 78 73 d9 d5 b2 bf ad 13 5a cb e8 00 47 55 94 09 1d b6 7f b3 f6 44 a8 6f 32 54 f5 4a ff 3c b7 29 67 47 98 69 3c 72 da dd 22 a8 0d 3f b0 b1 5e 5f a2 9d 15 7c 5a 17 d1 e5 a0 a3 a3 a8 de 8a 40 dc b5 2f 93 91 48 66 b2 7f 5a b1 36 ac b2 d0 b7 bd e3 ad 04 ae 28 03 46 44 35 87 2c 1e 33 cf cb 7c 2d 0d 28 e4 0a 55 04 ed ed 08 d5 ed 9d 72 88 c0 fa 74 32 81 32 2c 1a 67 00 58 c3 91 f3 fd 2b Data Ascii: w=.]0\|EU>kp7T=}K}MD\|27L3&1g?`c/qx}rform"K1g]p^qxsZGUDo2TJ<)gGi<r"?^_\|Z@/HfZ6(FD5,3\|-(Urt22,gX+
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 0a fb f1 ab c6 99 5c d5 30 8a 6a 8d 53 de dd 48 58 05 f5 b5 62 d7 ef 36 fe f3 b9 ba f8 af 3b f2 a9 07 50 7e da 52 fd 9a cd 24 4f 92 48 06 ce 04 55 52 56 f9 23 9d 58 c2 b8 a3 87 19 12 ea b2 72 4f df 15 f1 79 35 3d 86 ff 69 98 c4 9d a9 c1 f4 c3 b4 d9 04 ea 2a 61 63 30 78 d7 e3 9b bf 7e ae 5e 7f 51 ce 12 cd 3f 72 ea 37 f5 2a 03 97 a3 36 1e c9 3c 3b 01 27 5e b9 c5 d4 3d f4 64 27 4f ef 90 98 be 1a ff df df bd 37 e1 f2 5f 06 83 59 1b 96 53 46 34 d9 4c ad e2 f6 89 bf d3 ff ec d1 df 78 4c 6e fd 05 3d 6c 26 e2 69 77 e8 e7 45 b8 45 d3 0d 23 22 09 4d 05 d4 06 38 b1 de bf 59 b1 48 2e a4 13 2b f3 76 46 a7 0c 15 e9 9f de 5f 3e f6 fd d7 6c 05 e5 9d bc a8 2b 88 11 82 da f4 b8 dd 8f 6d fc e6 39 ba f8 0b f4 a0 6f f2 e9 4b f5 72 23 fc 9b 4d d7 47 26 2e 08 4e a2 f7 6e 94 df Data Ascii: \0jSHXb6;P~R$OHURV#XrOy5=iac0x~^Q?r76<;'^=d'O7_YSF4LxLn=l&iwEE#"M8YH.+vF_>l+m9oKr#MG&.Nn
2024-05-27 22:43:46 UTC	775	IN	Data Raw: 34 a1 f2 8e 45 c4 85 c6 63 1b 06 0f be f9 e6 57 cf e1 9e ad 48 ce 97 b0 8a 34 7b 5d a9 ff da 77 c3 1b c9 3b 1a 5e db 71 a5 89 b9 b9 df e9 a3 07 23 46 50 b5 7b fa 5f 94 58 bc cc f9 c9 77 89 28 0b e4 a5 fc 3c f9 f7 57 7c 35 b5 ad f1 56 e3 3a b1 82 f5 5d 17 13 02 ea c8 87 c9 f5 f5 5f 7a eb a6 27 97 45 6c 2a 6f 4c 39 e9 77 17 fd 44 1b ec b8 4f 73 5b 59 ad 12 1f 58 f6 c2 4b f3 1e fc 2b 0e 33 ed 33 57 e4 fb 49 3b d3 9f b8 e4 81 b0 21 b8 a4 10 e3 c9 85 46 3c a9 f3 fa 95 fd cf 4b a7 fe e8 6b 79 b3 99 2f 43 ad 58 30 e3 b1 4b ef 09 ea 33 c3 91 ac a6 33 f5 3c 04 b0 1a c4 06 94 fd e9 a5 79 0f 5e 0d e4 a4 03 23 1b f3 85 a2 7c ce ea 2f de 12 d6 fa 17 a6 6a 1a 87 1b cf 98 23 4a 68 01 f5 2d f1 81 15 5b 4c 85 f3 9b 17 4f fe c1 bf d2 c9 50 d7 1c bb 51 58 c6 78 43 a6 8c 7c Data Ascii: 4EcWH4{]w;^q#FP{_Xw(<W\|5V:]_z'El*oL9wDOs[YXK+33WI;!F<Kky/CX0K33<y^#\|/j#Jh-[LOPQXxC\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50328	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:46 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:46 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:46 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50326	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	785	OUT	GET /PVDn9Oj6dMbqqydywzGuLAPkbLwDX3Uuv1t6K8MORXFuQAVBLPNAy_yaQBc7bE-qmLHCmWThtcuwCFEwJPR_w6SDj_Um1q0FK7vC0w=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:46 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 3266 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:38:49 GMT Expires: Tue, 28 May 2024 22:38:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 297 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:46 UTC	859	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 07 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 09 09 0a 08 08 0b 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 09 06 06 0a 0e 0d 0a 0d 0d 0e 0e 0f 11 12 10 0e 0f 10 15 12 0e 0d 0e 0d 11 0d 0d 0e 0d 0e 0e 12 10 0d 0e 0d 10 0d 0d 0d 15 0d 0d 11 10 10 0d 0e 0e 0e 10 0f 0e 0d 0e 0d 0f 0d ff c0 00 11 08 00 78 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 01 09 07 08 04 05 06 03 02 ff c4 00 42 10 00 02 01 03 01 04 06 06 07 06 04 07 00 00 00 00 01 02 03 00 04 11 05 08 12 21 31 06 07 13 22 41 51 32 61 71 81 c1 f0 14 15 23 33 42 72 91 Data Ascii: JFIFxx"B!1"AQ2aq#3Br
2024-05-27 22:43:46 UTC	1390	IN	Data Raw: 00 2b 06 d2 94 1c 5b a1 52 e9 aa a6 a6 76 fc 2f 2d 3d 0f cc 71 1e 2a cc 3a 9b da e7 4d d5 9e 3b 7e fd ad e4 9c 16 09 79 48 c0 12 44 52 0e eb f0 04 e3 83 60 72 15 9d 45 53 df 57 5a f1 b5 d4 2c 2e 41 c7 61 79 6d 21 3f d2 26 4d ff 00 71 42 c0 fb 6a e1 2a c2 19 0b c1 ba d9 f6 6b 16 97 10 89 ff 00 1a db ec 23 31 95 c1 19 12 39 e4 74 53 4a 52 a4 ae c5 2a 18 d4 d7 e5 c6 41 f6 50 85 4f 33 5c 97 67 73 cd dd dc fb 5d d9 8f fe cd 7e 29 d8 95 25 4f 35 66 52 3c 88 62 29 54 8b ca 02 f6 cf 55 0e 6b df 74 8b ab 6b dd 2a cf 4d d7 92 18 f5 0d 3a e6 05 37 70 49 1e 56 2e db 83 24 d8 cb 24 6e 3e ee e5 70 63 7c 67 20 90 d8 fe 5e 46 ac b3 67 9d 3a 39 ba 39 a6 c5 2a 2c b1 4b 62 89 24 6e a1 91 d1 c1 0c ac a7 20 a9 07 04 11 83 4f c2 dd e2 42 ed 76 63 0f 65 6c b2 b5 d9 38 36 ed 3c Data Ascii: +[Rv/-=q:M;~yHDR`rESWZ,.Aaym!?&MqBjk#19tSJRAPO3\gs]~)%O5fR<b)TUktkM:7pIV.$$n>pc\|g ^Fg:99*,Kb$n OBvcel86<
2024-05-27 22:43:46 UTC	1017	IN	Data Raw: fb c7 26 a5 22 17 9e e2 46 1d 9d a2 37 17 48 dd fc 49 fb c9 9b 0d 21 f2 18 03 06 f4 1b 5a d1 fa 19 1b cb 70 46 ad d2 49 94 f6 91 42 e1 92 cf 7b bc 63 92 e0 86 11 92 48 32 bf 7e 59 0f 25 c0 18 c1 5d 73 75 fd ab 6b 8d fb e5 c6 e5 be 49 4b 2b 7c c5 6a 83 c3 79 72 5a 66 c7 e3 99 98 f9 04 1c 29 e2 f0 0e f3 b5 e0 3e b8 ae be 6c 52 28 64 f8 f5 5d a9 bb ac 1a 30 75 3a 6f 73 e3 c2 c1 6d 8e d0 5b 77 69 f1 c7 35 8e 9b 0a 6a 4f 22 b4 52 cb 20 fd c9 41 e0 47 9c de c5 c2 f0 f4 87 0a af f1 68 09 c9 50 32 49 c0 1c 01 27 c0 1c e0 0c e0 7a ab 91 0d b0 15 ca 48 a9 87 c8 5d 99 5c 6e 25 8b 4b 5a f0 e9 2d 61 a0 1c 17 c6 38 2b 93 12 63 88 e7 5f 58 e1 af 5d d5 8f 57 52 ea 97 d6 f6 30 83 bd 33 80 ed fe 5c 43 ef 5c f0 38 dd 4c f3 e1 9d df 5d 35 aa a3 68 74 8e 0c 60 b9 26 c0 78 ad Data Ascii: &"F7HI!ZpFIB{cH2~Y%]sukIK+\|jyrZf)>lR(d]0u:osm[wi5jO"R AGhP2I'zH]\n%KZ-a8+c_X]WR03\C\8L]5ht`&x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50330	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:46 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:47 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:46 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:47 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50340	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	553	OUT	GET /j-XIfKqwPWybhyqkxFlF2ArD-XgPk2y41V-bjbf1l7yIm2kh1diwMAFgSFUJCwUob3LkfV_PSlpt0qsLLeVCpBCaiDZ2j5yStmaa-w=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 6058 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:51:38 GMT Expires: Tue, 28 May 2024 18:51:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 13929 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 17 61 49 44 41 54 78 9c ed 9d 79 ac 24 57 75 c6 7f e7 56 75 f7 db 67 79 9e b1 f1 d8 33 01 0f b6 c7 7e c3 d8 96 19 6c 0c 24 01 84 50 82 0c 12 21 40 80 c4 a0 48 21 42 21 20 a1 00 41 0a 8a 94 40 0c 24 ec c4 12 38 08 29 8a 10 59 14 44 40 01 c5 40 c0 0b 31 8b 43 bc 80 81 81 f1 98 59 ec 99 37 9e 79 ef f5 eb ee aa ba f7 e4 8f aa ea ed f5 de 5d fd 66 86 fe a4 7e 4b d5 5d 4e dd af ce b9 e7 de 73 ef 6d 98 60 82 09 26 98 60 82 09 26 98 60 82 09 26 98 60 82 09 26 b8 40 20 83 66 5c 5e 5e 9e 29 97 cb 3e a0 00 ce b9 61 e4 d0 56 f9 45 7a 13 4f 55 51 55 1d 46 00 92 e7 18 14 bd ca da 6f 3b a9 2a f3 f3 f3 76 c7 8e 1d 95 81 Data Ascii: PNGIHDRxx9d6sBIT\|daIDATxy$WuVugy3~l$P!@H!B! A@$8)YD@@1CY7y]f~K]Nsm`&`&`&`&@ f\^^)>aVEzOUQUFo;*v
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: 18 86 44 51 d4 93 16 0f a5 c1 a9 6f d2 2d 4d 7f 37 da 24 cf 88 b4 be bc f2 4d 42 bd 8c a9 79 b6 d6 f6 64 aa bb 11 dc 36 77 27 df a0 6b e6 3e f3 8c 82 dc 71 92 36 ec 64 cc 86 dc 75 44 d6 3b 58 ce b9 a1 09 1e 18 1d ab 1d 51 6b 9f 0b e6 39 eb ea ea 15 a9 99 cc 51 68 f0 40 fe ce a0 e4 8e a4 b1 b2 f2 d0 ce 53 d7 7e e0 71 f0 40 89 07 20 b7 dd 0b 3a 8a 61 d7 38 a7 b5 37 ab 5f 1f 62 26 ab 86 9e 84 1f 64 92 6b 13 5a 65 d8 2a cf b5 60 c8 50 04 3b 46 43 6e bf 4d d2 9c 5e 9d 82 24 53 8e cd e8 23 d4 d9 73 85 9d 2f 9f 53 e8 46 f0 f0 ad 33 20 b9 dd 14 c1 39 c5 2a 18 03 39 0f 70 4a a8 60 1d 78 02 46 24 9d 25 88 33 34 11 7d ae 0e 8f 46 2d c3 48 fb e0 7e 73 0f 34 8c 52 25 70 b0 38 0d 97 ce 29 97 2d 0a 8b 0b f1 d4 e9 a9 15 38 7a 0a 8e ae c0 99 8a e2 a5 93 cc 22 48 1b a2 eb Data Ascii: DQo-M7$MByd6w'k>q6duD;XQk9Qh@S~q@ :a87_b&dkZe`P;FCnM^$S#s/SF3 99pJ`xF$%34}F-H~s4R%p8)-8z"H
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: 5e 30 48 42 6a 4c ae 41 52 c3 dc 44 6e 7a 51 9d c3 85 15 0c c2 dd 3f 83 6b 4b ca ee 45 43 3e 69 a9 20 8a 35 f7 91 13 96 1e 7c bd 3e 1b 60 b4 da 0b 19 ae e8 18 64 4a b1 13 04 c1 a5 d3 c8 09 79 88 c3 e4 e3 dd 76 61 a9 88 5a 9b f8 4e 29 8d 92 68 ac 41 13 72 ab 5b 98 13 42 45 6b 7f 37 98 eb b0 82 e4 0a 3c 78 14 1e 3e e6 d8 3a 1d a7 3b bb ae 58 47 83 e6 0e f2 bc 7d a7 cf 88 e0 ce 95 b6 f9 7b e0 42 ba 24 51 8d 23 44 a1 82 73 60 9d 60 55 b1 9a c7 1a b0 41 09 e3 22 bc d4 5c 1b c1 d7 c4 2c d7 75 2a 5a b7 40 af 99 dc f4 25 50 67 21 0c f0 73 79 c4 78 ac 94 d2 fb 1b c9 1d f6 f9 7a 41 3f e7 a4 d4 63 68 82 87 92 bf 5b b0 41 15 a7 50 b1 50 b2 8e 85 29 d8 b7 53 d9 b3 55 d8 3e 2d cc 16 94 82 af f8 46 40 a7 08 23 8f 52 39 62 ad 0c cb 45 c7 91 65 cb 23 27 94 d5 32 4c e7 94 Data Ascii: ^0HBjLARDnzQ?kKEC>i 5\|>`dJyvaZN)hAr[BEk7<x>:;XG}{B$Q#Ds``UA"\,u*Z@%Pg!syxzA?ch[APP)SU>-F@#R9bEe#'2L
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: 8c 73 b6 ba 54 33 b6 72 4a cd 85 89 fb 38 47 1a e6 ab 37 a1 52 fd d5 b0 6a 23 4d d7 10 ed 89 ff 70 c9 ef 78 e3 7f 5c cb 6c 21 c7 4c 21 f1 98 8d 82 89 67 d6 a8 12 5b 3b bd 3b 5d 09 52 73 c7 6a b2 a4 4d 92 ab 0b 3e 0c d4 4e 23 60 7e f3 9c 2c e2 86 cd e7 7d 9e b6 b8 80 2d e7 b0 95 72 3c d9 bb e1 c9 e2 3e 4d ab ad 9a 90 d8 60 1e d3 bf a5 9a a5 a6 5d 09 84 2a 01 b5 6f 21 a8 76 aa 49 60 c1 54 09 95 64 fd b4 a4 cb 6d eb 0e 73 d1 ea 5a ae ba f8 71 87 8d 6c 9d da a1 bf 1b fd 61 bc 4e 56 fd 3f e9 6a c9 a4 21 bd a9 69 04 62 92 db e4 ab d2 65 92 df 75 d3 88 8d a9 e3 e0 80 d4 35 7e dd 2c 45 cd 62 8b d4 5e 02 81 da d2 5a a9 39 51 d5 95 f5 e7 1f b9 30 0e 27 ab cb 7d 41 50 89 0f 49 31 53 33 60 0c ae 52 49 bb b9 94 ae 38 a5 4a 6d e4 9e b6 7f 6a be e3 92 48 0f 5a 91 7a ed Data Ascii: sT3rJ8G7Rj#Mpx\l!L!g[;;]RsjM>N#`~,}-r<>M`]*o!vI`TdmsZqlaNV?j!ibeu5~,Eb^Z9Q0'}API1S3`RI8JmjHZz
2024-05-27 22:43:47 UTC	1030	IN	Data Raw: f0 c6 62 b4 fb e7 b7 dd 76 5b 47 87 aa 15 32 0b f8 8b 08 85 42 7c cc a0 b5 ad cf bd 57 55 a2 28 3a 15 86 e1 e7 6e ba e9 a6 77 0c 5a d7 26 e0 93 37 bd e5 be 83 6c dd fd 19 7f 76 ee 5a 31 9e c9 82 5c 00 5f 1c af 7a fd 5f 7c 7e 20 29 c9 38 5c 28 22 e4 f3 79 7c df 8f d7 28 27 9f d4 cb b6 d6 fe 5f b1 58 7c d7 8d 37 de 78 3e 91 0b c0 77 3e 79 f3 fd e5 95 a3 b7 46 c5 95 7f d6 28 5a ed 94 36 93 38 72 8f c8 fc 10 16 11 21 97 cb e1 79 5e 95 dc 28 8a 08 c3 f0 4b a5 52 e9 8d 37 dd 74 d3 9d c3 d6 b1 59 b8 ef e3 07 0f 07 c7 7e fa e6 a8 78 f6 76 1b 04 bf d4 16 5f cb 96 49 1c b9 0f 8c 25 e0 5f 4f b2 b5 b6 5c 2e 97 3f 7d e4 c8 91 d7 3c fb d9 cf fe c1 38 ea cf 12 f7 7c f6 85 67 e4 fd 7b fe 26 5c 5d 7d 9b ad 94 7e a0 ae d6 1d 65 12 8d ea 13 63 8d 07 3b e7 7e 52 a9 54 ee b8 Data Ascii: bv[G2B\|WU(:nwZ&7lvZ1\_z_\|~ )8\("y\|('_X\|7x>w>yF(Z68r!y^(KR7tY~xv_I%_O\.?}<8\|g{&\]}~ec;~RT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50341	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	566	OUT	GET /T4GMYGBcpiDg5gCEZGSvQWbkwLHRELiaWN-BAAPD8Skd-YAEBhCxSR7_a5HjrHhqhgYDLvk7Ck_Y_R3-uM_UTA4prjTHB2ecsUG9EfjDcMyX7GxSju8=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2222 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:38:04 GMT Expires: Tue, 28 May 2024 21:38:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 3943 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 08 65 49 44 41 54 78 9c ed 9d 5f 8c 5c 55 1d c7 3f 77 77 a7 bb b5 b7 4a 2c 9d b6 6a 62 20 d5 50 79 90 94 99 8a 18 8b bd 33 35 4d 4c 2c 65 82 9d 6d a5 98 40 8c 2f 8a b8 85 2a d7 c4 60 bc 4d ea 5a 84 e8 83 0f 42 22 95 76 5a 5c 68 4d 8c 7f b2 73 1b 68 50 ec 2c 88 21 11 a2 35 c8 4b a1 b3 58 ff dd 76 43 77 76 ae 0f b3 55 5a 76 d9 7b e7 9c 73 ef 9c bb e7 93 f4 65 7b ce ef fb cb f9 ee bd 67 ef f9 0b 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 61 91 62 a5 9d 80 0c 1c 2f 18 06 0e 4a 0e bb c3 77 ed 43 92 63 26 8e f6 06 97 bc 60 75 08 af a9 88 6d c1 9a ba 6b bf ae 22 76 52 f4 a5 9d 80 28 21 Data Ascii: PNGIHDRxx9d6sBIT\|deIDATx_\U?wwJ,jb Py35ML,em@/*`MZB"vZ\hMshP,!5KXvCwvUZv{se{g`0`0`0ab/JwCc&`umk"vR(!
2024-05-27 22:43:47 UTC	1363	IN	Data Raw: 2a 3b 44 87 35 65 f4 c1 f7 c6 28 fb f2 62 35 17 20 57 6e 6d 00 5e 8e 51 25 4e db ce 89 90 c1 ce de 60 39 70 5d d4 f2 21 5c 2f a2 97 11 e2 b4 c1 75 17 c6 07 e2 74 7d 6f 43 ec 09 0e d9 1a a3 f4 c8 71 d7 3e 2f a4 97 01 72 e5 d6 79 60 24 6a 79 8b 58 6d fc 36 44 5f d1 a5 a8 05 7d d7 7e 40 50 2b 33 e4 ca ad 38 6d 11 b9 8d e7 42 d4 e0 f5 11 cb 3d 2c a8 93 45 a2 b6 49 d4 36 9e 13 51 83 d7 46 2c f7 a4 a0 4e 16 89 da 26 51 db 78 4e 44 0d 8e 34 81 1f c2 ef 05 75 b2 87 15 b9 4d 84 16 49 24 b2 aa f2 b8 6b 2f da 31 ea f9 c8 95 5a 89 b4 89 56 cb 66 0d f1 31 06 67 1c 63 70 c6 31 06 67 9c 54 16 be 27 85 e3 05 9f 02 2a c0 27 81 ab 81 65 74 26 58 ce 01 af d2 99 77 7d d2 77 ed 5f a5 95 a3 6a 32 69 b0 e3 05 2e f0 4d 60 68 9e 22 36 70 ed ec bf 2f 3a 5e d0 06 46 7d d7 fe 7a 42 Data Ascii: ;D5e(b5 Wnm^Q%N`9p]!\/ut}oCq>/ry`$jyXm6D_}~@P+38mB=,EI6QF,N&QxND4uMI$k/1ZVf1gcp1gT''et&Xw}w_j2i.M`h"6p/:^F}zB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50342	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	551	OUT	GET /9TzWtxtT-9Vrlwa8SXTSKhfl91Ndy4hU-1uLE9-hFsVSHARAOlFEdFExVR4QCegJ-KUBTSlJm3DZY6g31sbVrUT_HfxQvX_7WgLp=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1502 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:12 GMT Expires: Tue, 28 May 2024 21:14:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5375 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 05 95 49 44 41 54 78 9c ed 9d 4d 6c 15 55 14 80 bf 79 7d 2d 3f e2 23 b1 c2 ab 91 2a 2a f5 0f 35 52 7d 26 84 18 ab 24 8d e0 42 5c 98 b0 70 81 11 a3 31 f1 27 ae 5c b9 20 31 86 18 0c d1 0d c6 28 d1 8d 2e 8c c4 8d 92 46 85 98 20 88 20 fe 50 0d 28 02 09 46 f9 6b a5 16 0a ed 9b 77 5d 0c 18 22 bf 6d ef 9d 3b e7 70 be 64 d2 4d 73 ce 79 f3 cd dc 7b e6 be 99 79 60 18 86 61 18 86 61 78 27 09 9d c0 f5 f0 28 f0 3c 30 2f 74 2e ef 24 c0 df 1c e5 17 66 26 2f 73 28 76 39 63 21 98 60 b7 96 6b 28 f1 29 30 3b 54 8e e0 24 c0 61 e0 20 fb 69 e6 b6 e4 69 79 92 83 08 76 6b b9 8e 12 bf 01 a5 10 f1 73 23 01 fa 80 03 40 89 01 ca cc Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxMlUy}-?#**5R}&$B\p1'\ 1(.F P(Fkw]"m;pdMsy{y`aax'(<0/t.$f&/s(v9c!`k()0;T$a iiyvks#@
2024-05-27 22:43:47 UTC	643	IN	Data Raw: 0c 93 ee 16 d5 4d cb 11 0c d0 52 83 a4 25 5e fe a4 05 5a ee 89 97 7f 0c c8 11 ec 80 72 01 5e 3d 55 ae da 19 1c 8c c6 50 ec 0a c0 c9 fa 9a 49 8e e0 04 a8 ef 25 ee 75 4a 0a 23 bd a2 6e 08 90 23 18 e0 f8 07 90 1e 8f 97 3f 3d 01 43 1f c7 cb 3f 06 e4 08 4e 80 21 60 f8 68 bc 1a 86 07 e0 38 76 06 07 a3 04 1c dc 14 2f ff a1 cd d2 f6 98 b0 72 4b c0 be e5 f1 f2 ef 5b 21 6d 8f 09 2b 37 01 fa 37 c0 e0 af f9 e7 3e b6 1b fa be 12 35 3c 83 34 c1 90 2d 15 ee 7c 3b ff bc 3b df 11 b7 4c 09 12 05 97 80 03 af 41 df f7 f9 e5 3c fc 1d fc f9 8a c4 bd 25 b1 64 b2 aa b7 cd 81 74 30 7c ae f4 28 fc 70 6f f6 45 87 40 64 0a 4e c8 ee 5b de f2 24 61 d7 0d 1b b0 65 29 8c 1c 13 37 f7 9e 42 a6 60 c8 2a ef ff 10 36 2f 01 37 ec 3f be 1b 81 6f 97 66 39 e4 ee 25 c9 a5 93 0d 9b 7d ef c3 a6 45 Data Ascii: MR%^Zr^=UPI%uJ#n#?=C?N!`h8v/rK[!m+77>5<4-\|;;LA<%dt0\|(poE@dN[$ae)7B`*6/7?of9%}E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50344	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	786	OUT	GET /i7W2EWxINNLwgzMNOveR5SNQHKisftbymepppsfQEA1whmCJV0H0cauacdN-I0RfEc7Kz6PJsLAlw6zR97E1rpdxVRSGP_Y2UtFOGlQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3371 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:30:44 GMT Expires: Tue, 28 May 2024 22:30:44 GMT Cache-Control: public, max-age=86400, no-transform Age: 783 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0c e2 49 44 41 54 78 9c ed 9d 7b 90 1d 55 9d c7 3f bf ee fb 98 b9 33 c9 64 26 13 83 21 0f c3 5b 4b 17 ad 28 9a c0 0d a4 b5 ca 75 17 05 15 b5 2c 2d 77 34 05 ab 56 b1 28 66 c9 13 d9 00 0d 48 14 48 02 26 a2 6e 46 8d ee 96 a0 48 a1 50 88 15 d7 9d 05 65 a4 60 2b ee 0a 49 48 c2 f0 88 79 90 99 cc a4 67 ee bb cf fe d1 7d 97 31 4c 1e 73 a7 fb 9e be 43 7f 2a b7 6a 52 f7 de df f9 9e fb ad 5f 9f d3 e7 d5 10 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 18 96 3d 9c b5 6e 3e 7a b1 6e 1d f5 c4 d0 2d a0 5e 58 b6 73 95 18 c6 a3 43 af 3c fd 48 76 d5 0b 57 eb d6 53 2f de 10 06 5b b6 b3 19 d8 04 34 e3 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{U?3d&![K(u,-w4V(fHH&nFHPe`+IHyg}1LsC*jR_=n>zn-^XsC<HvWS/[4
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: 22 d5 2e 47 22 83 fd 29 be 4f 02 eb 80 ce b0 ca 09 33 83 01 50 0a 23 d9 7c c4 4c 65 be 96 9e 36 fb df 7f bb a6 4d fb d4 a3 f6 0c b6 6c 67 16 de 2c d0 16 42 34 b7 2e 88 e0 96 73 d3 ca f9 a1 ef e7 fb fb d6 2c be 7e df 6c dd 92 b4 1a 6c d9 ce 3b 81 3b 80 35 3a 75 04 8b a0 dc 32 e5 fc e0 ca e2 f0 a1 3b 2f 5a f1 7c 60 93 20 b5 a0 cd 60 cb 76 2e 05 fe 15 f8 94 2e 0d 61 53 c9 0d 5e 51 ce 0f 6d 59 f8 b5 3f 4d 6c 1a 73 02 d4 bd 0d f6 db db cf 01 b7 00 75 9d 8a 0b bd 0d 1e 0b a5 30 92 4d 8e 24 d2 cb a7 cf ff 9b ee 5f 5d 2d 75 6d 97 eb 9a c1 fe 2d d0 cd c0 46 ea 6c ae 36 44 70 cb f9 56 b7 38 bc f1 f0 ee 67 6e 59 b2 f6 d5 33 ea 59 7c dd 0c b6 6c e7 22 bc f1 e4 af 02 75 4c a1 28 20 28 b7 62 54 4a 23 d7 e4 fa fb d6 5f b8 62 d7 25 f5 2a b9 2e 06 5b b6 f3 59 bc c1 0b 6d Data Ascii: ".G")O3P#\|Le6Mlg,B4.s,~ll;;5:u2;/Z\|` `v..aS^QmY?Mlsu0M$_]-um-Fl6DpV8gnY3Y\|l"uL( (bTJ#_b%*.[Ym
2024-05-27 22:43:47 UTC	1121	IN	Data Raw: 40 ea b8 f2 62 db ea d6 07 f1 4e c6 f9 3d 5e a7 78 4c 5c e5 0d 2f ce ee 30 48 a7 a2 6b 2e 80 eb 2a 32 99 16 ce 9c 3f 97 29 2d 4d 27 1f db 16 79 ca 48 a4 3f 54 2f 73 a1 ce 4b 6b b6 ad 6e dd 05 2c 01 7e 0c e4 8f 7d bf 3a 7e 3c af c3 a4 b5 d9 ac cf 6d d0 04 a9 b8 2e 6d 6d 53 39 e7 8c d9 a4 93 09 d4 98 26 4b 11 91 fb cc e6 b6 25 4f 6e 78 4f 20 f7 b7 a7 8a b6 c1 56 cb 76 6e 00 ae e2 98 25 b5 73 3a 4c 4e 6b 37 23 d7 e6 9e 1c 97 17 fb 5e e2 f9 be fd c7 dc 23 cb 01 31 cc ee de bb 17 ae d0 a1 4a db e2 b8 6d ab 5b d7 02 ff 04 3c 03 de a5 79 4a 93 c1 b4 96 48 ae d7 3b 29 22 26 9d 9d d3 e9 98 9a c1 ad b6 2b 22 db c5 4c 2c d3 65 2e 68 5e fd b8 6d 75 eb cf 80 a5 0a 7e 91 30 29 75 b4 1a 64 d2 06 ae 3b 6a da af 41 5e ae ab 98 32 65 2a 33 df d4 41 32 69 ba 4a e4 97 62 26 Data Ascii: @bN=^xL\/0Hk.2?)-M'yH?T/sKkn,~}:~<m.mmS9&K%OnxO Vvn%s:LNk7#^#1Jm[<yJH;)"&+"L,e.h^mu~0)ud;jA^2e3A2iJb&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50343	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	566	OUT	GET /hHWA5otDm9mYUJdAqTjo7wBWj8euY-SdEhCffO7oQzG3zpzxm-YExt1VDB8X6_5gchW_Ye3bfhOJXyOWgcUr94GtgqltKP4IxiH02O-Xzw5A1IHsxiw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3318 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:35 GMT Expires: Tue, 28 May 2024 22:42:35 GMT Cache-Control: public, max-age=86400, no-transform Age: 72 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0c ad 49 44 41 54 78 9c ed 9d 7f 6c 5d e5 79 c7 3f cf 39 e7 de eb df 8e e3 24 4e 8c 92 10 13 7e 43 9a 52 28 75 ba ae ab 40 6d 29 34 36 1d b5 57 4d 6d a3 55 45 5b 55 c4 58 ec aa 12 93 26 75 ff 74 c4 93 ca b4 75 e3 c7 e8 a6 69 15 37 50 b0 0b a5 f4 8f 42 c7 98 1d 5a b1 55 b4 69 42 4b e3 10 02 01 3b 24 b6 e3 24 f6 f5 39 e7 d9 1f f7 3a 76 1c c7 f7 9c 7b cf fd e1 eb f7 23 59 91 6f de f3 3c af df af 9f f7 c7 f3 be e7 35 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 50 58 a4 d4 15 98 47 62 60 48 2f 03 2e 07 d6 29 34 03 55 02 76 a9 2a a4 a0 a2 4c ab 30 26 ca 08 c2 9b aa 1c e8 dc 21 a7 4a 55 a7 b0 94 4c Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxl]y?9$N~CR(u@m)46WMmUE[UX&utui7PBZUiBK;$$9:v{#Yo<5`0`0PXGb`H/.)4Uv*L0&!JUL
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: df bc 86 1b af 6f a1 b5 a5 06 d7 5d 2c aa 15 b1 e4 b2 8e 8f c8 a1 28 ab 12 aa c9 06 86 f4 6e e0 a1 28 bb c4 59 61 4f 8e a7 78 61 df 5b 3c f6 e2 28 d4 d9 10 97 74 df 5c 09 28 30 e3 c3 19 9f ed 1b ab f8 d2 ad 9b b8 a2 ad 09 df 5f 20 b4 f0 5c 67 bb dc 1e a5 eb 70 02 0f ea a8 c2 9a a8 9c 3b 36 4c 4d 7b 3c ff df 6f f2 e8 8b 23 d0 e0 a4 a3 b5 92 f1 15 4e fb 5c d3 12 e7 6b 77 6c 61 cb a6 46 5c 77 76 72 e6 63 3b 56 d3 ce 9b 65 2c 2a 77 81 5b b3 7f 48 3f 2c f0 4a 14 d1 2b 02 31 07 fe 6f ff 28 f7 3f 39 9c 16 35 1e 49 d6 74 f9 e0 2b 4c 78 dc b9 bd 91 2f 7c e6 72 aa ab 6c 3c 0f 44 f8 56 47 bb fc 4d 54 6e 02 b7 aa c0 d7 a2 10 d7 b2 c0 f3 95 ef 26 0f 70 ff de 43 50 63 af 3c 71 21 3d fc ac 72 78 fa 77 93 74 fd dd ab fc f6 d0 09 e2 71 40 b9 27 4a 37 c1 23 78 d0 4f 81 c4 Data Ascii: o],(n(YaOxa[<(t\(0_ \gp;6LM{<o#N\kwlaF\wvrc;Ve,*w[H?,J+1o(?95It+Lx/\|rl<DVGMTn&pCPc<q!=rxwtq@'J7#xO
2024-05-27 22:43:47 UTC	1067	IN	Data Raw: 71 d7 8d 1f a4 a6 ba 3a 6f 71 81 53 4f f4 c8 1b 41 0a 46 26 f0 3d 77 c9 84 ef 73 60 fb 95 97 f3 47 57 b4 a5 45 5e e9 6b 63 05 52 2e db 5b 9a f9 e4 0d 1f c0 71 f2 1a 73 e7 f3 1f 41 0b 46 ba 45 a0 f0 a0 e7 c1 86 75 6b f9 dc 4d 37 b0 b9 b6 3a 23 74 94 5e 96 09 9e 87 63 09 b7 6d bb 9a 6b b6 b6 9d bb f5 2e 22 fe 31 68 c1 c8 d7 36 5d 7b 5c 15 b1 cf dd 58 37 fa fe 49 5e 7c 63 18 77 c6 4d 5f 5f 57 e9 cb 29 2f 7d f9 d5 47 b7 6c 64 63 6b 2b 10 79 47 f6 66 b2 47 2e 0d 5a 38 f2 b7 c3 44 ec 07 81 7b 55 c1 f3 a0 b9 a9 89 cf df dc c4 c8 c8 71 5e 3d 72 94 b1 b3 d3 69 a1 ad 0a da 5f 54 4d 0b 6b 59 b4 6f 6a 65 63 6b 2b b6 25 51 8c b5 17 ba 82 9e 30 e5 0b 11 4e 55 5d 7b dc b3 22 e7 9f b0 9c 8d e8 f1 89 49 de 1e 19 e1 97 23 27 d2 bf 01 b3 b7 8d 2e a7 c8 9e bd 52 36 b3 2c bc Data Ascii: q:oqSOAF&=ws`GWE^kcR.[qsAFEukM7:#t^cmk."1h6]{\X7I^\|cwM__W)/}Gldck+yGfG.Z8D{Uq^=ri_TMkYojeck+%Q0NU]{"I#'.R6,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50346	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	798	OUT	GET /cYinAwcg0UYHuljAGk0_ZbSq_FJb2iMU2TTPM0Y7ORjDNMDPH1ltJbX6573rHuHu6poQ796iQ8t3s-6PmfexI4qRBNs7ruEpWAmVeBLzeJWkFgd0ar0=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5805 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:12 GMT Expires: Tue, 28 May 2024 21:14:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5375 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 64 49 44 41 54 78 9c ed 9d 79 98 15 d5 99 ff 3f ef a9 aa 7b 6f 2f 34 4b b3 2f 82 80 28 8c 60 04 64 13 e4 a7 82 1b 1a 89 cb 38 2e 93 49 c6 38 eb 33 f9 65 fc 25 a2 18 e3 38 6e 41 74 9c 68 1c 27 93 38 4f 36 b3 99 98 c4 b8 a0 a0 71 8b 6c 46 45 d4 44 11 50 44 96 66 ed f5 2e 55 75 de df 1f 0d da b4 dd 74 df ee 5b f7 de c6 fb 79 9e 7e ba 9f ae aa f3 be 55 df 3a a7 ce f2 9e 73 a0 44 89 12 25 4a 14 29 52 68 07 72 88 01 2a f8 dc fc 32 4d 35 24 b0 c4 31 36 86 35 2e c6 ba 20 06 44 b0 80 aa 45 d4 22 26 c4 d8 00 c4 27 b4 e9 9f 9e 3d 2f 75 d9 57 6e 4b 01 8d 40 50 d8 db c9 0d 3d 59 e0 2a 3d 6b 66 7f ac 56 63 a8 06 46 Data Ascii: PNGIHDRxx9d6sBIT\|ddIDATxy?{o/4K/(`d8.I83e%8nAth'8O6qlFEDPDf.Uut[y~U:sD%J)Rhr2M5$165. DE"&'=/uWnK@P=Y=kfVcF
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: 6e f7 83 05 9e 94 c4 6d 8d 11 48 86 36 1c 1e 8b 7f 07 db 78 a3 2c 5f b7 3b 12 3b 11 a4 29 7a c6 d4 e9 c4 dd ff de e9 87 25 71 db c1 2a 24 8c 71 6a fc cc e5 38 f1 f3 a2 b2 e3 e6 38 3d d1 79 d3 e7 20 7c 73 57 10 cc 34 d2 73 3b 2d f2 41 0c ea ab 1c f7 3e 59 b6 ea 37 51 d9 c8 65 11 2d 3a 6f e6 1c 1c ee d8 15 04 d3 73 98 ee 11 49 1c ea ab 8c 73 af 2c 5f 75 07 50 1b 95 9d 9c e5 60 3d 63 ea 34 c4 de be 2b b0 25 71 3b c0 83 c6 7c 88 0b 39 fa 06 eb dc a9 c7 81 bb 64 57 10 ce ca 45 7a 47 32 8e 6a aa 8f 31 77 cb f2 55 4b 88 58 5c c8 81 c0 2b fe f9 b8 6a 12 ce 9d 3b 83 60 6e 11 8c 5d 14 35 61 a8 b6 9f e3 2e 91 e5 ab ef 00 ea f2 61 b3 db 45 f4 e9 1b 7a df b5 2d 08 16 c4 8a bc b6 dc fa d5 cb a7 af 07 47 99 86 78 ce 8d b2 7c d5 dd 34 07 f5 e5 85 6e 09 ac 67 cd 58 bc 35 Data Ascii: nmH6x,_;;)z%q*$qj88=y \|sW4s;-A>Y7Qe-:osIs,_uP`=c4+%q;\|9dWEzG2j1wUKX\+j;`n]5a.aEz-Gx\|4ngX5
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: ee dd eb fb f7 77 3d f1 12 d9 f0 89 2e 0a 5d cd 30 7c f3 45 55 19 db ed 3e 2a 6b 70 fb 37 e1 8e d8 87 cd 54 a0 bb 3d 02 ab 8c 7d fe d5 4b 81 7d dd 4d be 44 c7 7c 32 07 37 b9 d5 c9 8c 4c c8 95 01 0d 1c 9c ea 90 ca 33 de 26 31 67 3f 99 aa d4 16 60 63 ae d2 2f 71 78 da ea 8b ae f6 7d 8e 8a e5 72 de a1 15 88 1b 2a 66 6f a2 72 aa f7 6d 22 9b 4b d7 31 f3 97 ea 67 c9 5d 70 5e a1 11 a0 d6 71 78 73 d9 d5 b2 bf ad 13 5a cb e8 00 47 55 94 09 1d b6 7f b3 f6 44 a8 6f 32 54 f5 4a ff 3c b7 29 67 47 98 69 3c 72 da dd 22 a8 0d 3f b0 b1 5e 5f a2 9d 15 7c 5a 17 d1 e5 a0 a3 a3 a8 de 8a 40 dc b5 2f 93 91 48 66 b2 7f 5a b1 36 ac b2 d0 b7 bd e3 ad 04 ae 28 03 46 44 35 87 2c 1e 33 cf cb 7c 2d 0d 28 e4 0a 55 04 ed ed 08 d5 ed 9d 72 88 c0 fa 74 32 81 32 2c 1a 67 00 58 c3 91 f3 fd Data Ascii: w=.]0\|EU>kp7T=}K}MD\|27L3&1g?`c/qx}rform"K1g]p^qxsZGUDo2TJ<)gGi<r"?^_\|Z@/HfZ6(FD5,3\|-(Urt22,gX
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: 6c 0a fb f1 ab c6 99 5c d5 30 8a 6a 8d 53 de dd 48 58 05 f5 b5 62 d7 ef 36 fe f3 b9 ba f8 af 3b f2 a9 07 50 7e da 52 fd 9a cd 24 4f 92 48 06 ce 04 55 52 56 f9 23 9d 58 c2 b8 a3 87 19 12 ea b2 72 4f df 15 f1 79 35 3d 86 ff 69 98 c4 9d a9 c1 f4 c3 b4 d9 04 ea 2a 61 63 30 78 d7 e3 9b bf 7e ae 5e 7f 51 ce 12 cd 3f 72 ea 37 f5 2a 03 97 a3 36 1e c9 3c 3b 01 27 5e b9 c5 d4 3d f4 64 27 4f ef 90 98 be 1a ff df df bd 37 e1 f2 5f 06 83 59 1b 96 53 46 34 d9 4c ad e2 f6 89 bf d3 ff ec d1 df 78 4c 6e fd 05 3d 6c 26 e2 69 77 e8 e7 45 b8 45 d3 0d 23 22 09 4d 05 d4 06 38 b1 de bf 59 b1 48 2e a4 13 2b f3 76 46 a7 0c 15 e9 9f de 5f 3e f6 fd d7 6c 05 e5 9d bc a8 2b 88 11 82 da f4 b8 dd 8f 6d fc e6 39 ba f8 0b f4 a0 6f f2 e9 4b f5 72 23 fc 9b 4d d7 47 26 2e 08 4e a2 f7 6e 94 Data Ascii: l\0jSHXb6;P~R$OHURV#XrOy5=iac0x~^Q?r76<;'^=d'O7_YSF4LxLn=l&iwEE#"M8YH.+vF_>l+m9oKr#MG&.Nn
2024-05-27 22:43:47 UTC	776	IN	Data Raw: 47 34 a1 f2 8e 45 c4 85 c6 63 1b 06 0f be f9 e6 57 cf e1 9e ad 48 ce 97 b0 8a 34 7b 5d a9 ff da 77 c3 1b c9 3b 1a 5e db 71 a5 89 b9 b9 df e9 a3 07 23 46 50 b5 7b fa 5f 94 58 bc cc f9 c9 77 89 28 0b e4 a5 fc 3c f9 f7 57 7c 35 b5 ad f1 56 e3 3a b1 82 f5 5d 17 13 02 ea c8 87 c9 f5 f5 5f 7a eb a6 27 97 45 6c 2a 6f 4c 39 e9 77 17 fd 44 1b ec b8 4f 73 5b 59 ad 12 1f 58 f6 c2 4b f3 1e fc 2b 0e 33 ed 33 57 e4 fb 49 3b d3 9f b8 e4 81 b0 21 b8 a4 10 e3 c9 85 46 3c a9 f3 fa 95 fd cf 4b a7 fe e8 6b 79 b3 99 2f 43 ad 58 30 e3 b1 4b ef 09 ea 33 c3 91 ac a6 33 f5 3c 04 b0 1a c4 06 94 fd e9 a5 79 0f 5e 0d e4 a4 03 23 1b f3 85 a2 7c ce ea 2f de 12 d6 fa 17 a6 6a 1a 87 1b cf 98 23 4a 68 01 f5 2d f1 81 15 5b 4c 85 f3 9b 17 4f fe c1 bf d2 c9 50 d7 1c bb 51 58 c6 78 43 a6 8c Data Ascii: G4EcWH4{]w;^q#FP{_Xw(<W\|5V:]_z'El*oL9wDOs[YXK+33WI;!F<Kky/CX0K33<y^#\|/j#Jh-[LOPQXxC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50347	142.250.185.162	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	466	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Mon, 27 May 2024 22:43:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-27 22:43:47 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 6d 48 41 79 6e 55 46 55 61 6d 31 42 39 6a 6f 32 30 38 48 46 6e 6c 70 4c 52 30 6b 70 71 71 6c 67 4a 56 46 53 52 5f 55 6d 35 4c 75 4c 65 42 75 48 68 65 30 57 38 2d 79 71 6e 65 34 37 62 61 50 51 71 30 7a 44 69 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKqmHAynUFUam1B9jo208HFnlpLR0kpqqlgJVFSR_Um5LuLeBuHhe0W8-yqne47baPQq0zDi","type":4}
2024-05-27 22:43:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50348	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	553	OUT	GET /WdC-o7ZcZL5WALPSmfUC8H4oYhlhqm1DV45CtHqV06DTRR0rE_P9JXi-J2KXLd9CTyHt_t3ehUm1o_AMltgfAGbvQDku8jsZt0kBSA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5188 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:35 GMT Expires: Tue, 28 May 2024 22:42:35 GMT Cache-Control: public, max-age=86400, no-transform Age: 72 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 13 fb 49 44 41 54 78 9c ed 9d 79 94 54 d5 9d c7 3f bf fb 5e 55 75 75 37 08 34 34 3b b2 89 4b 04 85 6e 88 4d 70 10 34 89 89 46 65 1b 05 cd c4 19 e3 cc 64 72 c6 99 31 89 11 15 93 13 25 c6 85 71 22 71 c6 c4 68 96 89 82 0b a8 89 33 21 b2 39 c6 08 4d 37 b8 60 5c a2 80 6c 0a cd 26 dd 4d 77 55 57 bd fb 9b 3f 5a 3c 34 54 35 55 dd f5 aa aa a1 3e e7 70 0e d4 7b ef fe 7e ef 7d b9 fb bd bf 0b 05 0a 14 28 50 20 4f 91 5c 3b 90 29 76 5c fa 19 13 8a 84 4b 50 c2 16 29 c2 12 c2 d8 a0 5a e3 62 ac 0b c6 00 82 05 03 d6 62 2d 62 3c 11 1b 57 24 66 20 aa 10 41 24 62 e2 72 a8 cf 8b eb e2 b9 7e a7 4c d0 65 05 ae 9b 32 a1 3b 62 7b Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxyT?^Uuu744;KnMp4Fedr1%q"qh3!9M7`\l&MwUW?Z<4T5U>p{~}(P O\;)v\KP)Zbb-b<W$f A$br~Le2;b{
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: ab 70 8f 20 e7 89 14 c4 6d 17 a5 01 65 21 ae b9 a7 7c 45 f5 c7 7e 99 c9 58 2b fa 40 a8 db 04 d0 bb 04 3e 5b d0 f6 38 28 87 3e 15 77 79 f5 41 3f 4d 65 44 8a 3d 53 c7 9f a1 f0 90 8a 4e 2e 14 cb c7 41 89 a0 dc 87 6b ee 2d 5f 5e 5d ef b7 b9 4e ab b1 ff f3 15 65 71 cb af 50 73 49 41 db e3 a0 58 e0 0e 1c b3 a0 7c 79 75 43 36 4c 76 ba 91 15 f7 58 80 48 41 dc e3 a1 00 7c 0f c7 dc 5f be bc fa 50 b6 cc 76 4a e0 ba 0b c7 df 02 7c 2d 43 be f8 88 02 82 2a cd 82 b5 2a 12 14 24 7b 93 1c 0a 20 37 e3 ca 8f cb 5f a8 ce ea aa 8f 0e e7 bb ba 0b 2b aa c0 bc 84 0f 7d e9 ce a0 b0 1b d8 20 aa af 83 6c c6 c8 76 d4 db 0f 26 ae 16 4f f0 d4 1a 31 06 e3 2a da 0d 64 a0 28 c3 41 cf 02 ad 40 64 64 46 07 66 5a c5 9d 47 d0 f9 51 f9 b2 35 59 5f 8a db a1 37 a9 bb 74 72 88 43 4d 6f 63 18 96 Data Ascii: p me!\|E~X+@>[8(>wyA?MeD=SN.Ak-_^]NeqPsIAX\|yuC6LvXHA\|_PvJ\|-C*${ 7_+} lv&O1d(A@ddFfZGQ5Y_7trCMoc
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: 45 84 b2 64 d7 db 0a 6c 29 02 1d e8 a3 3b eb 62 26 78 a2 d4 7f 79 82 20 48 d9 39 f3 f6 25 ac 57 db 08 2c 22 21 90 72 3f dc 50 c0 0a 6f 87 a7 36 16 e6 7b 33 8d 52 d6 d3 75 4b 13 5d 6a 9b 83 8d 0d 22 9a 34 bb 77 06 41 1b 04 cf b7 50 05 27 35 42 0f 71 4c 49 a2 4b 6d 5a d1 16 71 05 e9 ee c7 7a 3a 55 d9 a1 f6 84 e9 9e e4 1b dd 91 c4 5b 89 8e aa 83 c5 45 7d da 73 24 ba 17 43 a1 81 e5 0f 25 82 24 d4 ed e8 81 0e df 42 1b 8a 4a bd b4 8e 48 17 c8 38 1a 46 35 e1 8e 93 a3 05 f6 33 10 43 94 82 c0 be a0 48 d0 8a 24 5c 9d 73 a2 05 e1 3e 29 11 70 1d 34 a1 96 47 ff e8 67 17 26 94 c0 5e 81 4c 91 44 b9 a3 b3 b5 6f 45 a8 8a 76 d7 82 c0 7e e1 21 92 50 bb a3 fa c1 1a 47 f0 69 eb a3 f4 21 cf 02 b6 9c 28 28 c4 6d 92 cc 69 da fe 43 e3 d2 7a 96 5f c6 11 d5 41 62 13 b7 f4 0a 74 0e Data Ascii: Edl);b&xy H9%W,"!r?Po6{3RuK]j"4wAP'5BqLIKmZqz:U[E}s$C%$BJH8F53CH$\s>)p4Gg&^LDoEv~!PGi!((miCz_Abt
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: 71 45 d6 4e 7b 49 87 2f dc ac dd 1a 5c f7 2e 11 ee cb 92 b8 4d 8a 3e 91 aa b8 90 46 6e 5c 3f 7b 69 8d 55 9e 21 bb 21 88 42 22 32 4b d4 59 33 76 f1 f4 2b b2 68 f7 b8 54 fd fc 9e d1 91 be b5 bf 17 2d fa 16 22 09 77 d7 67 1a 6b d9 de 54 d4 fc 93 74 9e 49 ab 13 7e de a3 d3 8a e3 45 6c c4 18 ff 22 f1 b4 8b 2e 77 5d 67 f6 da 99 4f e5 f4 f8 9a 8a 45 d3 ef 12 bc 9b c4 f6 36 45 fb 66 13 38 38 09 8c 87 bf 5b bb 88 ab ea b7 56 df d6 ed 81 74 1e 4a 7b 94 a5 72 d1 f4 af 20 f2 24 b9 3a 9c d2 02 a2 8f b8 c4 6f 5d 3b fb b7 59 8b 56 fb 00 2b e4 d7 8b 1f ba d9 a2 77 9a 4f 4b 3e 0f 68 26 58 3f 87 d0 be 2f 23 5e 09 64 66 5c 20 01 f6 cd 55 b7 76 1f 9d ee 53 1d 1a 46 ab 5c 34 fd 57 88 fc 4d 47 9e cd 14 d6 02 e8 22 c7 c8 c3 d1 b0 57 1d 68 92 d8 fa d9 cf 64 ac fa a8 58 3c 2d 20 Data Ascii: qEN{I/\.M>Fn\?{iU!!B"2KY3v+hT-"wgkTtI~El".w]gOE6Ef88[VtJ{r $:o];YV+wOK>h&X?/#^df\ UvSF\4WMG"WhdX<-
2024-05-27 22:43:47 UTC	157	IN	Data Raw: d6 f6 b6 22 bd 04 ca 04 06 29 32 02 74 08 68 7f a0 2f 2a 65 2a 74 37 aa 25 7a c4 60 b8 e5 93 bf 2b 51 11 69 40 39 88 e8 1e a0 0e e4 43 84 6d 78 f2 81 15 dd 85 ea 01 11 0e 88 d8 3d b5 57 3d 9b b7 9b e0 92 d1 65 05 3e 9a aa 67 e7 98 68 34 56 8c da 62 51 1b 42 34 a4 d6 04 31 12 30 d6 3a d6 60 0e ef 48 f8 e4 00 0b c5 e2 19 31 71 94 98 1a 6d 41 89 1a 43 44 8c d3 bc 6e d6 53 cd 39 7e a5 02 05 0a 14 28 70 62 f3 ff 0d ff 95 78 60 27 35 38 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ")2th/et7%z`+Qi@9Cmx=W=e>gh4VbQB410:`H1qmACDnS9~(pbx`'58IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50349	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	553	OUT	GET /kFIMPehGo-EHmdvvpe3j1Vnmg5tLhoqhH-PsMSw83JbPH2BmdEhF1k1tUWYYilK1gHbOEmFPJPRP93QQJ4oztVsYoOhIok78floEPg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3474 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:31:20 GMT Expires: Tue, 28 May 2024 22:31:20 GMT Cache-Control: public, max-age=86400, no-transform Age: 747 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 0d 59 49 44 41 54 78 da ed 9a 79 54 13 e7 1a 87 3f bb 68 d5 aa ad d7 ab ad b6 d7 7a 2e d6 5e b5 bd f5 b8 b0 c8 be b8 b1 04 92 0c 02 62 45 ac 68 51 d9 55 54 a4 23 02 01 02 41 40 40 56 35 26 24 24 ac 12 76 5b ac b5 5a ad b6 d6 56 50 51 ac 5a a4 ad 16 95 c5 02 62 be 3b 09 1e bf 8b a9 4e c8 24 02 3a cf 39 bf 73 44 c0 3f 9e df 9b 77 3e 67 06 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 f4 37 89 65 1b 46 c7 08 43 fd 63 c4 b1 d5 1c e1 81 eb db f9 95 ad 5b f7 7e d5 19 9c 7d f2 be 6f 56 6d f7 ca f4 6b dd cb d2 6e c9 dd 53 5b e0 65 0f 36 ac 5b c5 92 9f 59 c3 be 7f 72 1d bb e3 a8 8f 73 cb 97 7e 4b ff ac 0c 72 b9 56 14 e2 7e 54 f8 b9 5b 52 fa 0e 17 27 1e 0f 1b 0e Data Ascii: PNGIHDR``w8YIDATxyT?hz.^bEhQUT#A@@V5&$$v[ZVPQZb;N$:9sD?w>g7eFCc[~}oVmknS[e6[Yrs~KrV~T[R'
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: a6 2e d6 10 95 02 50 74 52 00 ca 7c 78 74 ad 63 6b 7a 94 eb 0c a0 4d a2 c4 91 6b 14 fb 5e 21 1e 65 e0 14 40 44 f7 05 a0 3c b9 00 9b 9e 9c f2 b0 ed ca 0c c5 6c b5 33 f9 e2 e8 f0 35 e9 4d 90 fd 48 3c 8a 76 d6 d0 f3 54 00 ca 4f 4b 17 c8 d3 71 67 4f 6a 93 2f da b9 6e 4d 7a a3 52 3e 11 d5 12 74 54 80 7d 4c 0b 5c 12 71 13 2e 8c 38 df 65 15 79 ac c9 9c 53 79 d4 24 ba 88 6f 1a 53 18 62 c2 13 33 8c 63 f7 cd b6 8c 15 4e 36 e4 f1 86 6f 48 d4 1b b6 cd df 6e 52 b8 bf cd 9c f8 0d d6 cc 28 6f eb e0 94 d5 96 fc 2c 4f b3 63 62 77 b3 a6 c3 0c d3 ee 33 8b 4c e0 f9 25 a6 64 47 51 2d 15 80 72 d6 65 c1 83 3d a1 2c 7b a0 09 e1 a2 1d 4e 3e 19 0d 90 b8 e0 6a 54 00 b3 8f 05 d8 47 df 86 0b 23 2f 74 59 70 be bc 60 1a 5d 94 60 ce 3b a0 07 b4 84 68 a5 a5 51 a6 87 f9 5e b1 ab e9 95 c3 Data Ascii: .PtR\|xtckzMk^!e@D<l35MH<vTOKqgOj/nMzR>tT}L\q.8eySy$oSb3cN6oHnR(o,Ocbw3L%dGQ-re=,{N>jTG#/tYp`]`;hQ^
2024-05-27 22:43:47 UTC	1224	IN	Data Raw: 2f 60 ad 4f ab 95 47 48 f0 8f 01 45 5c 6b 02 c7 2d 29 5e 7d 49 21 9f 88 56 d6 cf dc fd ac eb fa 89 8b df 01 03 09 bf a4 90 6d cc 98 46 0a f2 55 df 80 db 9c fd 75 57 72 8d f7 eb 40 43 bc 4e 79 bd ca 28 f1 3e 82 e4 93 4e 3f 79 01 7c ac 6d 4e aa e3 3c 30 10 09 4a e5 14 39 70 6f 93 c8 57 ff f5 c3 c8 4c 11 3c 5a 35 b7 0e 68 08 ab 6c fd 3e 93 3c 37 48 32 fd 6a af 9f 79 39 d8 83 b9 e9 2c 67 30 90 09 48 4a ae 27 5e b8 a2 2c df 77 f7 51 d8 5c 3e 1e b6 57 8e 85 95 55 86 07 41 1f c1 ca 7d 83 89 13 4f 2f f9 94 d6 8f 88 c8 1e 56 28 18 0c 78 c7 e7 b6 32 62 35 97 bf 62 57 3d fc b5 64 2a 6c af 18 a5 4c 6b f5 78 58 58 65 16 a6 f6 de 2f 0d 60 59 16 ac e8 56 88 d7 ca fa 11 13 7b 3f 83 29 04 83 85 e0 14 ce 9b 9f c6 d6 dc 27 97 af 5a 00 9b f7 07 fc b9 c8 e8 a1 7c 94 5b 55 ef Data Ascii: /`OGHE\k-)^}I!VmFUuWr@CNy(>N?y\|mN<0J9poWL<Z5hl><7H2jy9,g0HJ'^,wQ\>WUA}O/V(x2b5bW=d*lLkxXXe/`YV{?)'Z\|[U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50355	216.58.212.174	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	510	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:48 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Mon, 27 May 2024 22:43:47 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-27 22:43:48 UTC	459	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50350	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	786	OUT	GET /tvQvvubDZ2r6Ou8zxkVzkIvddC1snCCq4xD4dhafjAJhHLDsEvHDEUms9RyVH_g-nI_8yTyeahZshZqwMV0NdHxD-K9v-Zbm4DF2vds=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1166 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:58:14 GMT Expires: Tue, 28 May 2024 19:58:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 9933 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 04 45 49 44 41 54 78 9c ed dc cd 6b 5c 55 18 c7 f1 ef bd 99 17 4c 9b 40 6c 43 e8 44 82 29 05 c5 be 2d 04 a1 f1 05 5f a0 41 0b ae 52 ec d6 95 6e d4 85 6e 55 da 55 17 15 8a 0b b1 7f 83 d1 85 8b 4a 15 51 84 2a d4 5d 6c 17 0a b1 36 d4 c4 42 34 48 08 98 66 e6 1e 17 85 20 d8 b4 bd 93 7b ee 39 e7 e9 ef 03 ed 26 cc 33 87 7c 49 ee 93 b9 93 80 88 88 88 88 54 2e f3 fe 0c b3 d3 c7 81 b7 80 27 bd 3f 57 d5 b2 0c 56 d6 d6 f8 71 fe 61 ce 2d 2e 87 3e 4e 3f fc 05 fe f4 e8 04 2e 3b 0f ec f7 f6 1c be 65 19 2c af c2 1f 7f df 80 fc 00 ef cf 25 17 39 f7 32 f5 b3 e9 49 5c 76 95 94 e3 6e ca 00 c6 c8 dd 3c 27 0f 0f 85 3e 4d 59 7e Data Ascii: PNGIHDRxx9d6sBIT\|dEIDATxk\UL@lCD)-_ARnnUUJQ*]l6B4Hf {9&3\|IT.'?WVqa-.>N?.;e,%92I\vn<'>MY~
2024-05-27 22:43:47 UTC	307	IN	Data Raw: 02 eb 76 61 ff 92 08 ac db 85 fd d3 35 d8 38 05 36 4e 81 8d 53 60 e3 14 d8 b8 24 b6 68 dd 2e ec 5f 12 81 75 bb b0 7f 49 04 d6 ed c2 fe e9 1a 6c 9c 02 1b a7 c0 c6 29 b0 71 f1 2c 59 03 1d fe 5a 5b 61 bd 9b c6 8f 1f 5b 69 37 da e5 ef 7a 79 14 4f e0 d6 41 76 7d 7e 20 f4 29 aa d1 3a 18 fa 04 9b e2 09 0c 51 7d 62 ac d0 35 d8 38 05 36 4e 81 8d 53 60 e3 14 d8 38 05 36 4e 81 8d 53 60 e3 14 d8 38 05 36 4e 81 8d 53 60 e3 14 d8 38 05 36 4e 81 8d 53 60 e3 14 d8 38 05 36 4e 81 8d 53 60 e3 14 d8 38 05 36 4e 81 8d f3 11 f8 7b 0f 33 ef 17 3f 54 3d b0 fa c0 8e b3 95 cf bc 5f 38 3e ac 7a 64 d9 bf e2 77 6f 66 a7 af 00 8f 79 99 6d d7 cf cc 5c 78 b4 ea a1 9e ae c1 c5 4b 40 e1 67 b6 49 05 3d f7 a2 8f c1 7e 02 cf 7c 75 8d c2 ed 03 7e f1 32 df 96 2b f4 dc 5e 5e f9 f2 aa 8f e1 7e Data Ascii: va586NS`$h._uIl)q,YZ[a[i7zyOAv}~ ):Q}b586NS`86NS`86NS`86NS`86NS`86N{3?T=_8>zdwofym\xK@gI=~\|u~2+^^~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50356	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:47 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:47 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:47 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50351	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	785	OUT	GET /mjVS_Izc6fGAvuaT0v--gb2so5mZvAbI5EUMUB41cWB7tpy81trBCR8rIlj8NoKgPzDWGN-Hs97NlW0T9W57YJ5z9A8QQWwXUYa_Zg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1651 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:12 GMT Expires: Tue, 28 May 2024 21:14:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5375 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 02 5b 50 4c 54 45 00 00 00 7b 89 cb 6b 78 c6 64 73 c4 84 91 d0 80 bf bf 6d 7a c8 9a a3 d7 68 75 c5 a2 ac d9 78 82 cd a3 aa da 5d 6c c0 9f a6 d7 54 65 be 9b a1 d2 99 9f cf 98 9e cf 98 9e d2 96 9d d1 91 9b cf 8d 95 d0 7d 87 cb 43 54 b6 3f 51 b4 43 55 b5 3e 50 b3 4a 55 b5 41 4d b2 40 51 b1 3a 4e af 00 80 80 41 4f b0 3c 4a af 47 51 b3 3e 4f b0 40 50 b2 3b 4c b0 3a 4b ae 3e 4a b0 63 71 c3 62 71 c2 62 70 c2 61 70 c2 60 6f c2 60 6e c1 5f 6e c1 5e 6d c1 5e 6c c0 57 66 be 52 62 bc 51 61 bc 50 61 bc 50 60 bb 4f 5f bb 4e 5f bb 4d 5e bb 4d 5d ba 4c 5d ba 4c 5d b9 a5 ad dc 53 63 bd 4c 5c ba 54 65 bd 4b 5c b9 53 63 bc 4a 5a b8 a4 ad dc 4b 5b ba a4 ac dc 4b 5c ba a0 Data Ascii: PNGIHDR``F[PLTE{kxdsmzhux]lTe}CT?QCU>PJUAM@Q:NAO<JGQ>O@P;L:K>Jcqbqbpap`o`n_n^m^lWfRbQaPaP`O_N_M^M]L]L]ScL\TeK\ScJZK[K\
2024-05-27 22:43:47 UTC	792	IN	Data Raw: cd ed 1f 1f 2a 9c 40 4d 51 6f 58 68 28 08 ad c2 1a 0a 04 11 22 19 88 c4 b0 58 da 81 44 25 ad 4d 86 b9 e3 a3 83 4d 3a 20 c2 57 d1 06 12 77 2c 36 2f d9 4b 00 ee 58 2a 16 c4 08 5f 25 d3 d2 c3 52 b3 0e c2 f4 d3 1e 39 1f 0e f8 09 9a ed 52 d2 19 bc c0 ec d2 34 20 d7 ea bb 96 cc 16 d5 9c c7 2a 49 3b 02 68 8f 1b 3e 38 50 dc 01 a1 8f c1 f4 e8 63 c9 18 12 be 04 ad 82 d5 9c 16 c7 07 c8 c0 83 cb 65 82 50 fe 60 80 2a e7 b3 f5 fd 0f 9c 75 e6 82 88 60 32 bf 9b c9 79 69 59 78 f7 9f 6d 2f 3d f7 30 16 b5 4c 03 99 f9 53 f4 d6 5a 11 fd 41 03 e2 a7 bc e8 4a 56 bc f2 81 c3 b4 77 9f 3b 1d 31 3a 5c 44 6c 25 44 60 f1 ca cf c0 fc 6a ef e4 b1 2b 22 82 ad 34 94 44 88 c0 d2 09 50 3e 87 e7 4f 56 b9 1b 71 72 0a 60 38 49 c1 79 a0 78 a6 19 e6 30 dd 6b 58 69 b7 03 62 0b 20 05 04 4e 20 78 Data Ascii: @MQoXh("XD%MM: Ww,6/KX_%R9R4 I;h>8PceP`u`2yiYxm/=0LSZAJVw;1:\Dl%D`j+"4DP>OVqr`8Iyx0kXib N x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50352	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	786	OUT	GET /aD5GNhlaU2d70gmSy5ioL1dMSUZN9cHDWPLkIBLhCsJ-BgcGUm-PD6o8XExZcx1i2iZV6PH0P8v3ceg0x7Tzd_OZ5FV0nXs5mX15sgA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 946 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:15:25 GMT Expires: Tue, 28 May 2024 21:15:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 5302 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 03 69 49 44 41 54 78 9c ed dc 3d 8f 8c 51 18 c6 f1 ff 33 6b 25 de b6 b2 56 b1 11 44 42 d0 b3 11 ca 4d e8 25 fb 0d 68 50 e8 15 12 89 82 04 15 df 41 8d 4c 29 41 27 12 8b 10 82 44 e3 5d 08 05 33 73 14 36 d1 88 dd 35 e7 7e ce 99 cb f5 4b a6 bd e7 ec fe 33 f3 dc bb 99 79 c0 cc cc cc cc b2 6b a2 9f 20 75 39 0c 9c 00 f6 45 3f 57 76 0d f0 89 af 3c 62 73 73 8a 77 a5 8f f3 2f c2 02 a7 1b 6c a2 c3 35 60 57 d4 73 84 6b 80 f7 c0 5b 5e 33 ce ee e6 e8 e8 45 0e 09 9c 6e b0 85 0e 4f 81 4e c4 fc d6 34 c0 07 e0 0d d0 e1 33 2b 98 6e 8e f0 a5 f0 a9 96 25 26 40 87 eb 61 b3 cb 99 a0 c7 b3 74 99 a9 d2 07 59 8e ec 11 52 97 39 60 Data Ascii: PNGIHDRxx9d6sBIT\|diIDATx=Q3k%VDBM%hPAL)A'D]3s65~K3yk u9E?Wv<bssw/l5`Wsk[^3EnON43+n%&@atYR9`
2024-05-27 22:43:47 UTC	86	IN	Data Raw: ea 1a 7c 08 9d ef 0a b6 61 40 9f 83 11 83 43 02 37 b3 bc 24 b1 0d 78 12 31 5f cc 43 fa 6c 6d 0e f2 3c 62 78 f8 9d a7 52 97 39 e0 18 30 d3 c6 f3 8d 90 5b c0 85 66 96 ab a5 0f 62 66 66 66 66 cb f4 13 12 c3 c4 cc 9b d7 9a 43 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: \|a@C7$x1_Clm<bxR90[fbffffCIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50353	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:47 UTC	785	OUT	GET /vNgpLTvnDUr6-QM8s4OuuESGDXs_brbGoPR-7vfwdxQI7M4MVFV0CC_Hil4qRDSp4P66ik85fdv09jKn89kDAJVknIbd6wkl0zGQJQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:47 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4657 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:19:31 GMT Expires: Tue, 28 May 2024 21:19:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 5056 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:47 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 11 f8 49 44 41 54 78 01 ed 9d 7b 50 54 57 9e c7 5b 6b 1f fb cf 3c 76 33 b3 b5 b5 b5 7f ec 1f 5b d9 d9 9a cc ac 93 64 92 d9 98 44 46 45 24 46 a3 46 44 05 c4 07 c6 8c 0f a3 31 08 0a 62 23 0f e4 ad 08 4a 34 60 44 45 45 43 22 c6 c4 cc 18 41 41 e4 41 f3 16 23 08 88 22 c8 bb fb 76 93 cc 38 5b f3 db f3 bb e4 37 7b 69 2e 7d fa 5e 4e 47 8c 9c aa 6f 35 34 4d c7 fa 7c ee f9 9d c7 b9 4d 0c e3 b1 4d b4 89 36 d1 26 da 44 9b 68 97 4a a5 a7 5a da 7a 7d 7b 7a 7a e2 fa fa fa 72 d8 63 e9 c0 c0 40 8b c5 62 e9 34 9b cd 16 d6 1e b2 47 cc 00 cb 3d f6 fd 4d 96 52 f6 75 0e 4b b4 24 49 fe ec f1 39 00 98 6c 98 68 fc 96 cb 80 87 9f ed 9f bb e9 88 35 c5 ff a0 f5 fe d2 d4 af 21 31 Data Ascii: PNGIHDR``w8IDATx{PTW[k<v3[dDFE$FFD1b#J4`DEEC"AAA#"v8[7{i.}^NGo54M\|MM6&DhJZz}{zzrc@b4G=MRuK$I9lh5!1
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: c2 27 8f b4 27 bc 9b 35 b0 99 e0 bb 5e 80 7a 19 aa af af a7 32 84 02 b0 14 b9 5a 02 09 a0 d9 d7 07 8f 04 fe 8e ec be c5 8b a9 e6 73 e0 8b 13 40 8b 32 2a 43 f2 a2 4c 59 86 50 00 06 57 cb 28 c1 e5 02 30 56 ab 35 f2 3b 85 bf 2f b7 ff 19 ef fd 83 7f 51 87 ef ba 59 10 66 1e 4b 38 a7 0c a1 00 dc c2 26 09 2e 16 40 e5 68 d9 77 b6 c8 f2 39 30 d8 21 00 be 6e 01 ca 32 64 32 99 d4 ca 10 0a e0 48 10 2a 00 9f 37 e3 62 cd e5 33 9e d5 87 6d 79 0a b8 8e c1 0b 5c 09 2b 05 e0 7b f0 ca 10 09 c0 dc bd 7b 17 25 b8 54 00 06 b7 b6 5d 3a 33 7a 2f bb df 57 1d b4 48 f8 7c 01 ce 94 21 a5 00 1c 94 49 82 0b 05 50 29 4a 76 09 fc ec 7c e9 27 6c d0 fd a3 3e f8 e2 05 50 19 ba 7e fd ba 6a 19 b2 17 80 a1 72 e4 42 01 f8 f3 87 2c bf 12 2e 60 55 ba e5 34 41 e4 83 d7 07 1f c3 87 ef 54 19 52 11 Data Ascii: ''5^z2Zs@2CLYPW(0V5;/QYfK8&.@hw90!n2d2H7b3my\+{{%T]:3z/WH\|!IP)Jv\|'l>P~jrB,.`U4ATR
2024-05-27 22:43:47 UTC	1390	IN	Data Raw: 0c fe 2a d6 13 4c b5 f5 aa 02 a8 17 68 94 d0 c2 15 30 2f d1 72 97 40 68 15 60 6a 1c 59 7e 12 f2 24 87 e0 b7 65 db 20 f3 4b 89 9b 0c 45 56 be 6f 1b 15 fe 6b 71 d8 db 6c 90 75 ae 1c a8 0c d1 6d ec a9 c7 4e 53 2f 90 b3 25 66 3f dc 6a 6c 92 05 94 55 d5 40 c0 ce f8 61 02 b2 3e be 80 d0 1d 0a d0 28 a1 87 2b 60 6e bc f5 1b 25 20 2d 32 5a 3b 46 0a d8 92 45 2b 59 d5 20 5c cd 6b 83 88 b3 d6 51 e1 53 c2 15 65 a8 ba ba 5a 2e 43 37 1a 6e 32 e8 29 38 20 93 04 56 9a 4e 41 13 9b 25 bd 17 9f 36 0c 7e 70 62 3a b4 b4 b6 f2 05 68 93 f0 27 be 80 04 e9 6b 04 a3 27 3d bd 23 61 ad 39 64 13 2e 60 ef 05 ab 43 f8 18 df 34 8b 5c 86 e8 a3 ad 74 54 79 a5 b8 8c 95 22 ea 05 43 03 73 70 52 3a c1 97 13 b0 2b 0e 4a 4d d5 b8 1e 70 46 80 b3 e5 08 d7 10 7f e6 0b 88 b3 b4 ea 13 a0 ad 07 bc 8e Data Ascii: *Lh0/r@h`jY~$e KEVokqlumNS/%f?jlU@a>(+`n% -2Z;FE+Y \kQSeZ.C7n2)8 VNA%6~pb:h'k'=#a9d.`C4\tTy"CspR:+JMpF
2024-05-27 22:43:47 UTC	1018	IN	Data Raw: a4 d9 c6 de 7b 6c 1f 55 75 df fc fb a9 8f 33 78 82 4f 79 0d cb 50 9e f2 a4 4c 2e 43 34 1d 15 2a a0 be a1 21 80 38 8e b1 17 3c a8 73 31 70 0e 78 fd 57 bd 4a a8 0c e1 6c 88 ca 10 09 c0 08 11 70 bb b9 b9 ce 68 34 4e 36 88 68 6e 1b 2e 3c 3f 3b d6 2a 1c b6 78 f0 1c f8 98 18 1b 2c 49 f9 eb ed 8b 54 86 68 3a 2a 44 00 fe cc 54 5d bd d0 20 b2 79 18 6f 67 e9 80 28 1c ba 5e f0 04 1f 83 13 02 2c 43 8a 93 32 ba 8d 5d 84 00 94 59 68 10 dd 66 2c 8f 7e ca 33 c6 fc a7 47 03 9d c0 eb be ea ed 63 5f 86 e8 36 76 1a 07 f4 0a c0 df 79 c8 7a d4 8b 06 57 34 f7 f7 4a 7c 3d f7 58 45 03 17 0f 9e 03 5f a5 0c d1 e6 1c 4a d0 2b 00 1f 71 8b 63 a7 c1 85 6d 92 7b 58 73 ae 6e c8 e3 00 3c c6 9d c5 53 2e 43 15 54 86 70 73 4e b9 28 d3 23 80 fd 7e d3 97 34 f0 ba ac 4d 9d b7 ed 07 b3 22 bb 3b Data Ascii: {lUu3xOyPL.C4!8<s1pxWJlph4N6hn.<?;x,ITh:*DT] yog(^,C2]Yhf,~3Gc_6vyzW4J\|=XE_J+qcm{Xsn<S.CTpsN(#~4M";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50364	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	553	OUT	GET /u2XGSr0jis3w5sLeuh8UMqGHgtdqPVPi77xYhPJdMO9C41wYUue3EKPJvwp-ovAlTzt3Ux3R4Mww2HlJ31UKre8vz1Cnno-3MxvWtA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:48 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 7094 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:12 GMT Expires: Tue, 28 May 2024 21:14:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5376 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 1b 5b 49 44 41 54 78 9c ed 9d 69 ac 5c 47 76 df 7f a7 ee bd dd fd fa 2d dc 1f 49 71 d1 32 22 25 91 92 28 c9 1a 92 a3 65 34 8e 31 8e e5 19 39 23 27 63 20 31 30 c6 24 f1 04 0e 1c 23 48 10 04 f9 90 2f c9 24 40 90 20 81 e3 41 02 4c ec 4c 12 c3 09 12 18 88 6c d8 99 91 34 1a ed 24 b5 8c 28 89 a4 c8 47 52 e2 22 2e 8f db db 5f 6f f7 de 3a f9 70 bb 1f 7b b9 dd 7d 7b 79 8f 22 d0 7f a0 c9 7e b7 aa 4e d5 ad 7f d5 a9 53 a7 96 86 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 18 60 80 01 06 68 06 b9 15 99 fe bd b7 7f 38 5c 28 15 47 Data Ascii: PNGIHDRxx9d6sBIT\|dbKGD[IDATxi\Gv-Iq2"%(e419#'c 10$#H/$@ ALLl4$(GR"._o:p{}{y"~NS``````h8\(G
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 3f 52 e0 fe 32 a9 eb dd 39 b2 b2 08 b6 04 61 f5 ec b9 7e 64 17 d2 a2 dc 93 be c1 e3 de 46 5e 28 7a ac 5d f9 57 ea 3b be 10 04 77 a4 9e 15 c2 50 29 f8 ca d5 c0 b2 da 28 bf 94 f5 f9 ea 68 81 47 86 17 d8 9e 59 60 bd 3b cf 88 2c 60 c8 47 9e 27 0b 37 49 6d 05 c3 36 6f 86 3d a9 05 fe ac 34 8c 55 73 db ab e9 5b 4e 70 1c b9 82 c4 3a 0c fc 00 ae fb 4a 51 2d 7b 53 01 bf bd ba c0 93 63 8b ec cc cc b3 d6 9d 63 c4 2c e0 69 01 08 22 eb b9 2c 2d 39 84 f5 4e 91 07 32 d3 dc 97 5b c7 d9 30 cd d0 6d ae a6 57 76 9a 94 b0 ae aa c9 0d 2d 2c f8 96 1b 81 b2 ce 58 be 3d 56 e4 1b 63 8b 3c 9c 9d 63 93 17 91 9a d2 3c e0 77 49 6a 35 04 11 d8 99 be c1 e3 ce 36 0e 07 29 a6 05 c6 04 86 00 e7 36 e4 fa 96 f7 e0 38 58 a0 10 c0 64 a0 a0 96 5f ce 94 78 76 7d 9e 27 47 e7 b8 37 3d cb b0 cc e2 Data Ascii: ?R29a~dF^(z]W;wP)(hGY`;,`G'7Im6o=4Us[Np:JQ-{Scc,i",-9N2[0mWv-,X=Vc<c<wIj56)68Xd_xv}'G7=
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: b2 fa 61 a6 c3 f1 b8 97 9d 02 49 92 96 37 23 cc bd 7a 1f e1 3b 5b 91 54 b9 d7 75 d1 7b b5 a1 f7 d6 09 50 70 c3 12 ae 55 54 bc 68 46 a1 5a 26 db 01 e3 80 eb fa b8 ee 8c 78 ee a4 b8 de 59 3c 77 42 52 e9 43 92 4a bf be e6 f7 ff f0 7a 4c f1 e3 a1 fa 0a 1c fb c1 38 36 ff 20 b6 b0 8f b0 b0 17 5b dc 85 2d 6e 45 0b 59 d4 2f ab 60 c5 12 70 b1 f8 55 4e 2c 3c cb 42 b0 a1 65 7d f5 13 d1 56 d7 c6 09 4c b3 d8 49 1e c5 e6 21 e0 5f 71 f1 2f 66 10 53 31 9c da 89 6a 9c f1 36 8c df f5 89 04 86 4b d3 ec b8 fc 26 9b 6f 1c 41 6c dd bb 69 d9 f1 59 26 5c 1c 07 1c a7 20 99 cc 39 19 1a fa 8f 32 3c f2 c7 6b ff e0 47 f3 d5 22 63 e7 c1 fa f1 37 37 f1 d1 bf fe 06 b6 f0 75 6c fe 41 c2 c2 16 b4 30 86 fa a6 76 5c 15 20 cf b5 d2 33 bc 30 f9 7b fc 7c fa 61 4a b6 c1 d4 ec 1a 6d fb 72 93 08 Data Ascii: aI7#z;[Tu{PpUThFZ&xY<wBRCJzL86 [-nEY/`pUN,<Be}VLI!_q/fS1j6K&oAliY&\ 92<kG"c77ulA0v\ 30{\|aJmr
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 77 b9 b6 7c 95 2f 16 c8 78 c2 aa ac e0 2e e3 6d 61 5b d7 39 20 41 8f 0e 97 86 48 79 54 27 88 ac e8 96 48 44 b0 ec 3b 31 a7 07 b6 bd 09 e6 39 b0 2d 37 5d 75 32 f4 06 e5 61 ec 6b f7 b9 fc fa 97 5d ee d9 68 12 8d 57 42 d4 5b b3 69 d8 b5 d5 70 cf c6 14 8f 6c 0f f8 df ef 06 9c be 62 71 93 ec f2 a8 18 aa cb 65 f9 57 b2 91 ce a7 92 82 36 ee 00 a9 c5 1c 70 74 fc a5 43 6d f7 4a 27 3f 9b 64 52 6f 11 06 27 80 8e 77 d5 c5 bd 62 60 61 38 0d cf 3f ee f1 dc 63 1e 23 0d 9b 4d 92 23 e3 c1 93 f7 b9 6c 5c 25 fc e8 b5 12 1f 7e 6e 71 ca 2d a5 a5 a5 bc cc e4 46 b8 59 8e 86 75 df 26 63 af 02 7e 79 83 9d 41 d1 86 ed 28 7a 09 38 96 24 f7 e4 ca 69 f4 ae 33 d1 02 04 85 5e 6b c6 6a 44 ca 6f ec f3 f8 f6 de 64 e4 b6 cb b1 50 b2 5c bc 5a e4 ea 74 11 48 b6 64 2e 09 2d f1 5e a0 6a 13 19 Data Ascii: w\|/x.ma[9 AHyT'HD;19-7]u2ak]hWB[iplbqeW6ptCmJ'?dRo'wb`a8?c#M#l\%~nq-FYu&c~yA(z8$i3^kjDodP\ZtHd.-^j
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 3a dd 19 01 d1 e5 e1 61 b9 5d 2d cd 6d cb ff 89 d0 d1 3a 6d af 70 04 1a 36 d2 b5 b1 d8 7d bb 74 d2 f0 bd f1 97 0e 75 fc d3 78 bd dd 74 97 be 76 58 73 ab 0f 8b f0 b5 96 14 0b 84 21 5c 9d b3 e5 4a be c9 94 e3 c0 c6 d5 86 f5 23 86 eb 33 16 e3 34 24 45 10 e6 0b 96 a9 05 45 62 7a b2 08 64 52 86 a1 54 23 5b b9 62 34 fe d6 b8 51 cb 8b 0c 8b 85 90 2b 33 01 9e e9 5e 3b 24 85 01 26 a7 03 8e 5f f0 f1 3a 68 55 16 25 44 0b 29 e5 9d 6e f2 ed 89 60 79 8c d9 c2 01 79 41 31 5f 73 5a cc 82 a3 83 cd 70 fa 4a 48 be 64 19 1d 72 6a c2 36 ae 12 f6 6e 17 fe 7c 26 2a 50 b5 14 23 80 2a ff e5 95 45 7e f8 d3 52 83 4f 31 b0 ca c6 51 e1 bb cf 64 79 62 77 b6 26 75 60 95 eb b3 96 62 50 2b 53 00 14 7e 72 a4 c4 8f 3f 9e 6f be d0 d0 e4 79 33 27 70 6c f4 aa 8b 11 fc d0 20 26 4d ca 6d 9e a0 Data Ascii: :a]-m:mp6}tuxtvXs!\J#34$EEbzdRT#[b4Q+3^;$&_:hU%D)n`yyA1_sZpJHdrj6n\|&P#E~RO1Qdybw&u`bP+S~r?oy3'pl &Mm
2024-05-27 22:43:48 UTC	675	IN	Data Raw: 7a ef b3 80 93 e7 83 da d0 98 c5 8c a4 a8 26 4b 24 3a 7b 3c e5 7b 4d 57 ac 9a 8d ff 0e 70 7d 78 eb c7 0b c3 0f 4d c2 5b 5d 96 26 42 ef 04 77 3b 08 c7 40 00 47 04 c7 89 4c 8c bc 42 ce 27 3a 0a 51 15 49 90 a5 c3 d5 9d 14 ad 1e f9 d0 61 31 30 4d fd c8 49 e5 b4 32 e2 8c 89 d7 2a cd 37 f6 29 2a 86 d3 ab 77 1d ff a3 3d ff 78 91 3f fb cf ed 72 6f 89 fe f7 e0 3e 19 36 4b f3 46 a1 e3 6d 1c 49 8b 20 02 4b 6e 90 26 59 24 22 b7 43 47 49 bb 5d 9b 8a b0 e8 8c e4 3f 71 d7 f4 5c 9b 5f 08 15 dd 0f 74 5a 13 ed a6 47 89 e4 b5 e8 b9 9d e4 1b eb 46 45 65 48 4b 49 4a d1 12 b7 2d c1 fd 18 27 bb 96 dd a5 3a bf 15 db 84 6e 2b 82 7b a9 9f be dd 55 d6 45 af 6d 95 7f d3 74 f5 4b 5f 5d a2 ef 8e 8e 38 24 1d 41 fb dd c0 3b e9 31 b7 a2 d7 b6 24 17 7a 32 58 2b 58 99 5f 1f 5d 89 4c e8 4e Data Ascii: z&K$:{<{MWp}xM[]&Bw;@GLB':QIa10MI27)w=x?ro>6KFmI Kn&Y$"CGI]?q\_tZGFEeHKIJ-':n+{UEmtK_]8$A;1$z2X+X_]LN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50365	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	554	OUT	GET /kroer1kpwSe3j-lIfPnE7Q3MVaCoJVF8atjdh0VtGDWCz2ulLejVsDh2k6a6VUgpUFQ8qRMHMEX7bsr2jTrLXhZR_ETbqILDf-qfkk0=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:48 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5188 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:34:04 GMT Expires: Tue, 28 May 2024 22:34:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 584 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 13 fb 49 44 41 54 78 9c ed 9d 79 94 54 d5 9d c7 3f bf fb 5e 55 75 75 37 08 34 34 3b b2 89 4b 04 85 6e 88 4d 70 10 34 89 89 46 65 1b 05 cd c4 19 e3 cc 64 72 c6 99 31 89 11 15 93 13 25 c6 85 71 22 71 c6 c4 68 96 89 82 0b a8 89 33 21 b2 39 c6 08 4d 37 b8 60 5c a2 80 6c 0a cd 26 dd 4d 77 55 57 bd fb 9b 3f 5a 3c 34 54 35 55 dd f5 aa aa a1 3e e7 70 0e d4 7b ef fe 7e ef 7d b9 fb bd bf 0b 05 0a 14 28 50 20 4f 91 5c 3b 90 29 76 5c fa 19 13 8a 84 4b 50 c2 16 29 c2 12 c2 d8 a0 5a e3 62 ac 0b c6 00 82 05 03 d6 62 2d 62 3c 11 1b 57 24 66 20 aa 10 41 24 62 e2 72 a8 cf 8b eb e2 b9 7e a7 4c d0 65 05 ae 9b 32 a1 3b 62 7b Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxyT?^Uuu744;KnMp4Fedr1%q"qh3!9M7`\l&MwUW?Z<4T5U>p{~}(P O\;)v\KP)Zbb-b<W$f A$br~Le2;b{
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: e7 ab 70 8f 20 e7 89 14 c4 6d 17 a5 01 65 21 ae b9 a7 7c 45 f5 c7 7e 99 c9 58 2b fa 40 a8 db 04 d0 bb 04 3e 5b d0 f6 38 28 87 3e 15 77 79 f5 41 3f 4d 65 44 8a 3d 53 c7 9f a1 f0 90 8a 4e 2e 14 cb c7 41 89 a0 dc 87 6b ee 2d 5f 5e 5d ef b7 b9 4e ab b1 ff f3 15 65 71 cb af 50 73 49 41 db e3 a0 58 e0 0e 1c b3 a0 7c 79 75 43 36 4c 76 ba 91 15 f7 58 80 48 41 dc e3 a1 00 7c 0f c7 dc 5f be bc fa 50 b6 cc 76 4a e0 ba 0b c7 df 02 7c 2d 43 be f8 88 02 82 2a cd 82 b5 2a 12 14 24 7b 93 1c 0a 20 37 e3 ca 8f cb 5f a8 ce ea aa 8f 0e e7 bb ba 0b 2b aa c0 bc 84 0f 7d e9 ce a0 b0 1b d8 20 aa af 83 6c c6 c8 76 d4 db 0f 26 ae 16 4f f0 d4 1a 31 06 e3 2a da 0d 64 a0 28 c3 41 cf 02 ad 40 64 64 46 07 66 5a c5 9d 47 d0 f9 51 f9 b2 35 59 5f 8a db a1 37 a9 bb 74 72 88 43 4d 6f 63 18 Data Ascii: p me!\|E~X+@>[8(>wyA?MeD=SN.Ak-_^]NeqPsIAX\|yuC6LvXHA\|_PvJ\|-C*${ 7_+} lv&O1d(A@ddFfZGQ5Y_7trCMoc
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 3d 45 84 b2 64 d7 db 0a 6c 29 02 1d e8 a3 3b eb 62 26 78 a2 d4 7f 79 82 20 48 d9 39 f3 f6 25 ac 57 db 08 2c 22 21 90 72 3f dc 50 c0 0a 6f 87 a7 36 16 e6 7b 33 8d 52 d6 d3 75 4b 13 5d 6a 9b 83 8d 0d 22 9a 34 bb 77 06 41 1b 04 cf b7 50 05 27 35 42 0f 71 4c 49 a2 4b 6d 5a d1 16 71 05 e9 ee c7 7a 3a 55 d9 a1 f6 84 e9 9e e4 1b dd 91 c4 5b 89 8e aa 83 c5 45 7d da 73 24 ba 17 43 a1 81 e5 0f 25 82 24 d4 ed e8 81 0e df 42 1b 8a 4a bd b4 8e 48 17 c8 38 1a 46 35 e1 8e 93 a3 05 f6 33 10 43 94 82 c0 be a0 48 d0 8a 24 5c 9d 73 a2 05 e1 3e 29 11 70 1d 34 a1 96 47 ff e8 67 17 26 94 c0 5e 81 4c 91 44 b9 a3 b3 b5 6f 45 a8 8a 76 d7 82 c0 7e e1 21 92 50 bb a3 fa c1 1a 47 f0 69 eb a3 f4 21 cf 02 b6 9c 28 28 c4 6d 92 cc 69 da fe 43 e3 d2 7a 96 5f c6 11 d5 41 62 13 b7 f4 0a 74 Data Ascii: =Edl);b&xy H9%W,"!r?Po6{3RuK]j"4wAP'5BqLIKmZqz:U[E}s$C%$BJH8F53CH$\s>)p4Gg&^LDoEv~!PGi!((miCz_Abt
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 3e 71 45 d6 4e 7b 49 87 2f dc ac dd 1a 5c f7 2e 11 ee cb 92 b8 4d 8a 3e 91 aa b8 90 46 6e 5c 3f 7b 69 8d 55 9e 21 bb 21 88 42 22 32 4b d4 59 33 76 f1 f4 2b b2 68 f7 b8 54 fd fc 9e d1 91 be b5 bf 17 2d fa 16 22 09 77 d7 67 1a 6b d9 de 54 d4 fc 93 74 9e 49 ab 13 7e de a3 d3 8a e3 45 6c c4 18 ff 22 f1 b4 8b 2e 77 5d 67 f6 da 99 4f e5 f4 f8 9a 8a 45 d3 ef 12 bc 9b c4 f6 36 45 fb 66 13 38 38 09 8c 87 bf 5b bb 88 ab ea b7 56 df d6 ed 81 74 1e 4a 7b 94 a5 72 d1 f4 af 20 f2 24 b9 3a 9c d2 02 a2 8f b8 c4 6f 5d 3b fb b7 59 8b 56 fb 00 2b e4 d7 8b 1f ba d9 a2 77 9a 4f 4b 3e 0f 68 26 58 3f 87 d0 be 2f 23 5e 09 64 66 5c 20 01 f6 cd 55 b7 76 1f 9d ee 53 1d 1a 46 ab 5c 34 fd 57 88 fc 4d 47 9e cd 14 d6 02 e8 22 c7 c8 c3 d1 b0 57 1d 68 92 d8 fa d9 cf 64 ac fa a8 58 3c 2d Data Ascii: >qEN{I/\.M>Fn\?{iU!!B"2KY3v+hT-"wgkTtI~El".w]gOE6Ef88[VtJ{r $:o];YV+wOK>h&X?/#^df\ UvSF\4WMG"WhdX<-
2024-05-27 22:43:48 UTC	158	IN	Data Raw: a6 d6 f6 b6 22 bd 04 ca 04 06 29 32 02 74 08 68 7f a0 2f 2a 65 2a 74 37 aa 25 7a c4 60 b8 e5 93 bf 2b 51 11 69 40 39 88 e8 1e a0 0e e4 43 84 6d 78 f2 81 15 dd 85 ea 01 11 0e 88 d8 3d b5 57 3d 9b b7 9b e0 92 d1 65 05 3e 9a aa 67 e7 98 68 34 56 8c da 62 51 1b 42 34 a4 d6 04 31 12 30 d6 3a d6 60 0e ef 48 f8 e4 00 0b c5 e2 19 31 71 94 98 1a 6d 41 89 1a 43 44 8c d3 bc 6e d6 53 cd 39 7e a5 02 05 0a 14 28 70 62 f3 ff 0d ff 95 78 60 27 35 38 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ")2th/et7%z`+Qi@9Cmx=W=e>gh4VbQB410:`H1qmACDnS9~(pbx`'58IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50368	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	785	OUT	GET /QsFLnA2p7QlFCy4Rk-TH0XoaWFilCOzzt8FPO58nI_FXh5wQkjWEMpBKMkJxQJMZio9t6kDMpniv3WrWH7Slxe8BrbMvklg-Ht53iw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:48 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2180 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:36:33 GMT Expires: Tue, 28 May 2024 22:36:33 GMT Cache-Control: public, max-age=86400, no-transform Age: 435 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 06 00 00 00 55 ed b3 47 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 08 3e 49 44 41 54 78 01 ed 9c 79 6c 14 55 18 c0 bf 6f 66 0f ba e5 68 ab a0 ad 72 db 6e 40 e5 10 15 21 46 39 15 45 6e 51 d0 a8 18 51 82 06 82 0a 28 f5 5a 94 43 c4 a6 40 50 da 3f 90 3f 8c 51 02 44 41 09 1e 48 20 78 c7 58 2b 08 0a 28 d8 80 18 e8 52 e8 b1 db 6e 3b f3 fc de d2 85 99 e9 9e dd 37 53 34 f3 92 ed cc fb de f5 7d bf 7d ef ed f7 be 9d 2d 80 9d 6c 02 36 01 9b 80 4d c0 26 f0 5f 25 80 56 2a 9e f7 d4 81 1b 40 51 36 30 06 d7 03 b0 14 c7 46 de a0 1c 01 67 9c 28 bd ae dc 2a bd 25 ab 06 0a 8f 13 86 c3 fa a5 0e 87 b7 66 c8 80 0d 50 51 5d 6f a5 ce 96 02 3a 3f 73 d2 33 8f 28 11 60 eb 92 a5 80 5a 37 73 f4 30 68 9d a5 b8 Data Ascii: PNGIHDRHHUGsRGB>IDATxylUofhrn@!F9EnQQ(ZC@P??QDAH xX+(Rn;7S4}}-l6M&_%V@Q60Fg(%fPQ]o:?s3(`Z7s0h
2024-05-27 22:43:48 UTC	1320	IN	Data Raw: f2 63 97 9f cd 5e 1c a8 fa a2 aa 5d e7 41 f1 8c 31 a3 cc 32 40 b4 ef 6c 70 4c 85 ad 46 23 46 2e 0b dc fb 87 3f b0 82 f6 97 5e 7c 6b 0a 27 95 1f d7 b1 69 c4 b2 c0 2a b7 0c ab 83 0a fb 28 d8 06 70 b8 2e 96 ec 41 f4 69 d5 e0 ec 00 f3 cf 5b 7f f1 ef a8 a5 81 39 8c a9 9b 28 12 40 70 8c 89 39 80 a9 f3 1b 14 56 41 b3 ca f2 99 13 d1 c6 12 40 14 cf f9 04 c7 c0 99 c8 a0 fc 3a 7a 69 70 a4 0a ea 1a ad 2c ea 3d 85 51 a2 ca 2d 12 5a 02 48 46 f8 c0 68 8f 82 ea 52 a3 ec 52 cc 5b b2 07 29 0c 0e 6a 8d 1f fd 46 7d be d2 d8 34 58 2b 8b dc 23 48 d3 65 94 7f 8e e4 63 5d 15 6c ec c1 54 d8 11 ab 5c 94 dc 12 40 2e 27 54 68 15 66 aa d2 57 9b d7 de d3 6c 3b fa 79 a1 fb 37 ad 2c da fd c4 62 f6 4f 75 a0 2e 5a 91 50 99 e9 4b 2c ec 35 77 84 a0 56 6b a6 d2 47 79 9a 69 c0 3c a8 4e b3 8b Data Ascii: c^]A12@lpLF#F.?^\|k'i*(p.Ai[9(@p9VA@:zip,=Q-ZHFhRR[)jF}4X+#Hec]lT\@.'ThfWl;y7,bOu.ZPK,5wVkGyi<N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50367	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	551	OUT	GET /23ispX_lvsTfMdqVu6ra84IGV85IwhGPQyogx4AOuECIOQYVFewlJ0p4XkFbUoAJXDlc4LwopHv1SNEslf1B4XCDZg0P-85zw3DQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:48 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5188 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:18:25 GMT Expires: Tue, 28 May 2024 19:18:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 12323 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 13 fb 49 44 41 54 78 9c ed 9d 79 94 54 d5 9d c7 3f bf fb 5e 55 75 75 37 08 34 34 3b b2 89 4b 04 85 6e 88 4d 70 10 34 89 89 46 65 1b 05 cd c4 19 e3 cc 64 72 c6 99 31 89 11 15 93 13 25 c6 85 71 22 71 c6 c4 68 96 89 82 0b a8 89 33 21 b2 39 c6 08 4d 37 b8 60 5c a2 80 6c 0a cd 26 dd 4d 77 55 57 bd fb 9b 3f 5a 3c 34 54 35 55 dd f5 aa aa a1 3e e7 70 0e d4 7b ef fe 7e ef 7d b9 fb bd bf 0b 05 0a 14 28 50 20 4f 91 5c 3b 90 29 76 5c fa 19 13 8a 84 4b 50 c2 16 29 c2 12 c2 d8 a0 5a e3 62 ac 0b c6 00 82 05 03 d6 62 2d 62 3c 11 1b 57 24 66 20 aa 10 41 24 62 e2 72 a8 cf 8b eb e2 b9 7e a7 4c d0 65 05 ae 9b 32 a1 3b 62 7b Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxyT?^Uuu744;KnMp4Fedr1%q"qh3!9M7`\l&MwUW?Z<4T5U>p{~}(P O\;)v\KP)Zbb-b<W$f A$br~Le2;b{
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: b3 35 e7 ab 70 8f 20 e7 89 14 c4 6d 17 a5 01 65 21 ae b9 a7 7c 45 f5 c7 7e 99 c9 58 2b fa 40 a8 db 04 d0 bb 04 3e 5b d0 f6 38 28 87 3e 15 77 79 f5 41 3f 4d 65 44 8a 3d 53 c7 9f a1 f0 90 8a 4e 2e 14 cb c7 41 89 a0 dc 87 6b ee 2d 5f 5e 5d ef b7 b9 4e ab b1 ff f3 15 65 71 cb af 50 73 49 41 db e3 a0 58 e0 0e 1c b3 a0 7c 79 75 43 36 4c 76 ba 91 15 f7 58 80 48 41 dc e3 a1 00 7c 0f c7 dc 5f be bc fa 50 b6 cc 76 4a e0 ba 0b c7 df 02 7c 2d 43 be f8 88 02 82 2a cd 82 b5 2a 12 14 24 7b 93 1c 0a 20 37 e3 ca 8f cb 5f a8 ce ea aa 8f 0e e7 bb ba 0b 2b aa c0 bc 84 0f 7d e9 ce a0 b0 1b d8 20 aa af 83 6c c6 c8 76 d4 db 0f 26 ae 16 4f f0 d4 1a 31 06 e3 2a da 0d 64 a0 28 c3 41 cf 02 ad 40 64 64 46 07 66 5a c5 9d 47 d0 f9 51 f9 b2 35 59 5f 8a db a1 37 a9 bb 74 72 88 43 4d 6f Data Ascii: 5p me!\|E~X+@>[8(>wyA?MeD=SN.Ak-_^]NeqPsIAX\|yuC6LvXHA\|_PvJ\|-C*${ 7_+} lv&O1d(A@ddFfZGQ5Y_7trCMo
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 41 04 3d 45 84 b2 64 d7 db 0a 6c 29 02 1d e8 a3 3b eb 62 26 78 a2 d4 7f 79 82 20 48 d9 39 f3 f6 25 ac 57 db 08 2c 22 21 90 72 3f dc 50 c0 0a 6f 87 a7 36 16 e6 7b 33 8d 52 d6 d3 75 4b 13 5d 6a 9b 83 8d 0d 22 9a 34 bb 77 06 41 1b 04 cf b7 50 05 27 35 42 0f 71 4c 49 a2 4b 6d 5a d1 16 71 05 e9 ee c7 7a 3a 55 d9 a1 f6 84 e9 9e e4 1b dd 91 c4 5b 89 8e aa 83 c5 45 7d da 73 24 ba 17 43 a1 81 e5 0f 25 82 24 d4 ed e8 81 0e df 42 1b 8a 4a bd b4 8e 48 17 c8 38 1a 46 35 e1 8e 93 a3 05 f6 33 10 43 94 82 c0 be a0 48 d0 8a 24 5c 9d 73 a2 05 e1 3e 29 11 70 1d 34 a1 96 47 ff e8 67 17 26 94 c0 5e 81 4c 91 44 b9 a3 b3 b5 6f 45 a8 8a 76 d7 82 c0 7e e1 21 92 50 bb a3 fa c1 1a 47 f0 69 eb a3 f4 21 cf 02 b6 9c 28 28 c4 6d 92 cc 69 da fe 43 e3 d2 7a 96 5f c6 11 d5 41 62 13 b7 f4 Data Ascii: A=Edl);b&xy H9%W,"!r?Po6{3RuK]j"4wAP'5BqLIKmZqz:U[E}s$C%$BJH8F53CH$\s>)p4Gg&^LDoEv~!PGi!((miCz_Ab
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 2f c7 3e 71 45 d6 4e 7b 49 87 2f dc ac dd 1a 5c f7 2e 11 ee cb 92 b8 4d 8a 3e 91 aa b8 90 46 6e 5c 3f 7b 69 8d 55 9e 21 bb 21 88 42 22 32 4b d4 59 33 76 f1 f4 2b b2 68 f7 b8 54 fd fc 9e d1 91 be b5 bf 17 2d fa 16 22 09 77 d7 67 1a 6b d9 de 54 d4 fc 93 74 9e 49 ab 13 7e de a3 d3 8a e3 45 6c c4 18 ff 22 f1 b4 8b 2e 77 5d 67 f6 da 99 4f e5 f4 f8 9a 8a 45 d3 ef 12 bc 9b c4 f6 36 45 fb 66 13 38 38 09 8c 87 bf 5b bb 88 ab ea b7 56 df d6 ed 81 74 1e 4a 7b 94 a5 72 d1 f4 af 20 f2 24 b9 3a 9c d2 02 a2 8f b8 c4 6f 5d 3b fb b7 59 8b 56 fb 00 2b e4 d7 8b 1f ba d9 a2 77 9a 4f 4b 3e 0f 68 26 58 3f 87 d0 be 2f 23 5e 09 64 66 5c 20 01 f6 cd 55 b7 76 1f 9d ee 53 1d 1a 46 ab 5c 34 fd 57 88 fc 4d 47 9e cd 14 d6 02 e8 22 c7 c8 c3 d1 b0 57 1d 68 92 d8 fa d9 cf 64 ac fa a8 58 Data Ascii: />qEN{I/\.M>Fn\?{iU!!B"2KY3v+hT-"wgkTtI~El".w]gOE6Ef88[VtJ{r $:o];YV+wOK>h&X?/#^df\ UvSF\4WMG"WhdX
2024-05-27 22:43:48 UTC	160	IN	Data Raw: cc ec a6 d6 f6 b6 22 bd 04 ca 04 06 29 32 02 74 08 68 7f a0 2f 2a 65 2a 74 37 aa 25 7a c4 60 b8 e5 93 bf 2b 51 11 69 40 39 88 e8 1e a0 0e e4 43 84 6d 78 f2 81 15 dd 85 ea 01 11 0e 88 d8 3d b5 57 3d 9b b7 9b e0 92 d1 65 05 3e 9a aa 67 e7 98 68 34 56 8c da 62 51 1b 42 34 a4 d6 04 31 12 30 d6 3a d6 60 0e ef 48 f8 e4 00 0b c5 e2 19 31 71 94 98 1a 6d 41 89 1a 43 44 8c d3 bc 6e d6 53 cd 39 7e a5 02 05 0a 14 28 70 62 f3 ff 0d ff 95 78 60 27 35 38 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ")2th/et7%z`+Qi@9Cmx=W=e>gh4VbQB410:`H1qmACDnS9~(pbx`'58IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50369	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	554	OUT	GET /SP5F8XlkxjIfM3uEu47BolKEBwkqWrOfyvwywHut48p0AZgedzyhcoevSaJCEBUJNXvy7dplTwI3s6dizxE1lNXFa-RkpU9nkIAmnSU=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:48 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5805 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:29:04 GMT Expires: Tue, 28 May 2024 22:29:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 884 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 64 49 44 41 54 78 9c ed 9d 79 98 15 d5 99 ff 3f ef a9 aa 7b 6f 2f 34 4b b3 2f 82 80 28 8c 60 04 64 13 e4 a7 82 1b 1a 89 cb 38 2e 93 49 c6 38 eb 33 f9 65 fc 25 a2 18 e3 38 6e 41 74 9c 68 1c 27 93 38 4f 36 b3 99 98 c4 b8 a0 a0 71 8b 6c 46 45 d4 44 11 50 44 96 66 ed f5 2e 55 75 de df 1f 0d da b4 dd 74 df ee 5b f7 de c6 fb 79 9e 7e ba 9f ae aa f3 be 55 df 3a a7 ce f2 9e 73 a0 44 89 12 25 4a 14 29 52 68 07 72 88 01 2a f8 dc fc 32 4d 35 24 b0 c4 31 36 86 35 2e c6 ba 20 06 44 b0 80 aa 45 d4 22 26 c4 d8 00 c4 27 b4 e9 9f 9e 3d 2f 75 d9 57 6e 4b 01 8d 40 50 d8 db c9 0d 3d 59 e0 2a 3d 6b 66 7f ac 56 63 a8 06 46 Data Ascii: PNGIHDRxx9d6sBIT\|ddIDATxy?{o/4K/(`d8.I83e%8nAth'8O6qlFEDPDf.Uut[y~U:sD%J)Rhr2M5$165. DE"&'=/uWnK@P=Y=kfVcF
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: f7 83 05 9e 94 c4 6d 8d 11 48 86 36 1c 1e 8b 7f 07 db 78 a3 2c 5f b7 3b 12 3b 11 a4 29 7a c6 d4 e9 c4 dd ff de e9 87 25 71 db c1 2a 24 8c 71 6a fc cc e5 38 f1 f3 a2 b2 e3 e6 38 3d d1 79 d3 e7 20 7c 73 57 10 cc 34 d2 73 3b 2d f2 41 0c ea ab 1c f7 3e 59 b6 ea 37 51 d9 c8 65 11 2d 3a 6f e6 1c 1c ee d8 15 04 d3 73 98 ee 11 49 1c ea ab 8c 73 af 2c 5f 75 07 50 1b 95 9d 9c e5 60 3d 63 ea 34 c4 de be 2b b0 25 71 3b c0 83 c6 7c 88 0b 39 fa 06 eb dc a9 c7 81 bb 64 57 10 ce ca 45 7a 47 32 8e 6a aa 8f 31 77 cb f2 55 4b 88 58 5c c8 81 c0 2b fe f9 b8 6a 12 ce 9d 3b 83 60 6e 11 8c 5d 14 35 61 a8 b6 9f e3 2e 91 e5 ab ef 00 ea f2 61 b3 db 45 f4 e9 1b 7a df b5 2d 08 16 c4 8a bc b6 dc fa d5 cb a7 af 07 47 99 86 78 ce 8d b2 7c d5 dd 34 07 f5 e5 85 6e 09 ac 67 cd 58 bc 35 ed Data Ascii: mH6x,_;;)z%q*$qj88=y \|sW4s;-A>Y7Qe-:osIs,_uP`=c4+%q;\|9dWEzG2j1wUKX\+j;`n]5a.aEz-Gx\|4ngX5
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: dd eb fb f7 77 3d f1 12 d9 f0 89 2e 0a 5d cd 30 7c f3 45 55 19 db ed 3e 2a 6b 70 fb 37 e1 8e d8 87 cd 54 a0 bb 3d 02 ab 8c 7d fe d5 4b 81 7d dd 4d be 44 c7 7c 32 07 37 b9 d5 c9 8c 4c c8 95 01 0d 1c 9c ea 90 ca 33 de 26 31 67 3f 99 aa d4 16 60 63 ae d2 2f 71 78 da ea 8b ae f6 7d 8e 8a e5 72 de a1 15 88 1b 2a 66 6f a2 72 aa f7 6d 22 9b 4b d7 31 f3 97 ea 67 c9 5d 70 5e a1 11 a0 d6 71 78 73 d9 d5 b2 bf ad 13 5a cb e8 00 47 55 94 09 1d b6 7f b3 f6 44 a8 6f 32 54 f5 4a ff 3c b7 29 67 47 98 69 3c 72 da dd 22 a8 0d 3f b0 b1 5e 5f a2 9d 15 7c 5a 17 d1 e5 a0 a3 a3 a8 de 8a 40 dc b5 2f 93 91 48 66 b2 7f 5a b1 36 ac b2 d0 b7 bd e3 ad 04 ae 28 03 46 44 35 87 2c 1e 33 cf cb 7c 2d 0d 28 e4 0a 55 04 ed ed 08 d5 ed 9d 72 88 c0 fa 74 32 81 32 2c 1a 67 00 58 c3 91 f3 fd 2b Data Ascii: w=.]0\|EU>kp7T=}K}MD\|27L3&1g?`c/qx}rform"K1g]p^qxsZGUDo2TJ<)gGi<r"?^_\|Z@/HfZ6(FD5,3\|-(Urt22,gX+
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 0a fb f1 ab c6 99 5c d5 30 8a 6a 8d 53 de dd 48 58 05 f5 b5 62 d7 ef 36 fe f3 b9 ba f8 af 3b f2 a9 07 50 7e da 52 fd 9a cd 24 4f 92 48 06 ce 04 55 52 56 f9 23 9d 58 c2 b8 a3 87 19 12 ea b2 72 4f df 15 f1 79 35 3d 86 ff 69 98 c4 9d a9 c1 f4 c3 b4 d9 04 ea 2a 61 63 30 78 d7 e3 9b bf 7e ae 5e 7f 51 ce 12 cd 3f 72 ea 37 f5 2a 03 97 a3 36 1e c9 3c 3b 01 27 5e b9 c5 d4 3d f4 64 27 4f ef 90 98 be 1a ff df df bd 37 e1 f2 5f 06 83 59 1b 96 53 46 34 d9 4c ad e2 f6 89 bf d3 ff ec d1 df 78 4c 6e fd 05 3d 6c 26 e2 69 77 e8 e7 45 b8 45 d3 0d 23 22 09 4d 05 d4 06 38 b1 de bf 59 b1 48 2e a4 13 2b f3 76 46 a7 0c 15 e9 9f de 5f 3e f6 fd d7 6c 05 e5 9d bc a8 2b 88 11 82 da f4 b8 dd 8f 6d fc e6 39 ba f8 0b f4 a0 6f f2 e9 4b f5 72 23 fc 9b 4d d7 47 26 2e 08 4e a2 f7 6e 94 df Data Ascii: \0jSHXb6;P~R$OHURV#XrOy5=iac0x~^Q?r76<;'^=d'O7_YSF4LxLn=l&iwEE#"M8YH.+vF_>l+m9oKr#MG&.Nn
2024-05-27 22:43:48 UTC	775	IN	Data Raw: 34 a1 f2 8e 45 c4 85 c6 63 1b 06 0f be f9 e6 57 cf e1 9e ad 48 ce 97 b0 8a 34 7b 5d a9 ff da 77 c3 1b c9 3b 1a 5e db 71 a5 89 b9 b9 df e9 a3 07 23 46 50 b5 7b fa 5f 94 58 bc cc f9 c9 77 89 28 0b e4 a5 fc 3c f9 f7 57 7c 35 b5 ad f1 56 e3 3a b1 82 f5 5d 17 13 02 ea c8 87 c9 f5 f5 5f 7a eb a6 27 97 45 6c 2a 6f 4c 39 e9 77 17 fd 44 1b ec b8 4f 73 5b 59 ad 12 1f 58 f6 c2 4b f3 1e fc 2b 0e 33 ed 33 57 e4 fb 49 3b d3 9f b8 e4 81 b0 21 b8 a4 10 e3 c9 85 46 3c a9 f3 fa 95 fd cf 4b a7 fe e8 6b 79 b3 99 2f 43 ad 58 30 e3 b1 4b ef 09 ea 33 c3 91 ac a6 33 f5 3c 04 b0 1a c4 06 94 fd e9 a5 79 0f 5e 0d e4 a4 03 23 1b f3 85 a2 7c ce ea 2f de 12 d6 fa 17 a6 6a 1a 87 1b cf 98 23 4a 68 01 f5 2d f1 81 15 5b 4c 85 f3 9b 17 4f fe c1 bf d2 c9 50 d7 1c bb 51 58 c6 78 43 a6 8c 7c Data Ascii: 4EcWH4{]w;^q#FP{_Xw(<W\|5V:]_z'El*oL9wDOs[YXK+33WI;!F<Kky/CX0K33<y^#\|/j#Jh-[LOPQXxC\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50371	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	786	OUT	GET /sfQ-WzgiZ1asQ0K88_k8UG53n8u4ERdLJsZI-lTyHmL_p2f4ViSo6g10vYrjn34HR6sfjZGvs6xpRncjw4PT9u9iD8tC4CTDBIT4sD4=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:48 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3882 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:02 GMT Expires: Tue, 28 May 2024 22:42:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 106 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0e e1 49 44 41 54 78 9c ed 9d 7b 70 1c c5 9d c7 bf bf 99 95 2c 11 4b 0e 96 ad 97 1f 60 c7 e0 e8 e1 0b 77 8e 29 30 e6 2e 89 81 0b b1 77 85 0d 96 64 d9 b9 00 57 a9 0b 07 07 77 17 8e 1c b1 77 25 b4 32 15 17 55 79 1c 89 f3 b8 1c 49 48 00 49 e6 a9 95 8d 1d 70 41 aa 92 50 24 f6 e5 12 6b e5 97 b0 6c c9 bb 7a 5b d6 c3 e8 b5 3b bf fb 63 25 59 16 d2 6a 77 a6 7b 46 c6 f3 a9 52 95 4a 3b fd eb 9f e6 bb bf ee df 74 f7 74 03 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 06 20 ab 1d 98 0d 6c e4 9d 2b 54 d0 02 0d 34 ac 81 07 f6 91 b7 1b 40 ab d5 7e 89 e0 aa 16 b8 90 4b d3 9b de 6a 78 2f d4 35 b8 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{p,K`w)0.wdWww%2UyIHIpAP$klz[;c%Yjw{FRJ;tt666666666666666666666666 l+T4@~Kjx/5
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: be 2f 33 bb 36 24 30 0f 6b 5f 13 e5 c8 74 48 4c bc 66 c5 44 0b 11 21 f0 e2 d1 77 20 e9 39 d9 90 c0 c1 4a ff 57 44 39 12 0d 49 89 97 f5 11 3c 0a 39 14 ac 7d 7b fb 1f 64 d8 d6 2d 70 01 ef c8 51 92 54 91 be 44 45 74 e2 45 20 22 22 8c fd 58 0a 03 c3 5d 03 2b 0b d8 fd 94 68 d3 ba 05 d6 a0 fe bd a9 31 20 38 f1 ea 40 2f ba cf 77 e3 42 4f 0f fa 2f 5e 44 68 24 04 66 86 a2 28 11 c1 cd d6 9c 81 40 a5 df b3 89 dd 42 27 28 74 cf 07 87 ba 07 6f 17 e9 48 4c 5c 4a bc b4 37 c8 fb 63 23 a6 7e 87 73 8c f6 b1 65 57 a3 df 54 45 c5 bc 39 49 98 3f 37 05 29 73 e7 22 29 69 0e 98 19 1c c7 d8 ba 21 14 42 e7 fb 81 37 00 18 1e 34 1a 37 a9 b7 e0 e9 fd 47 ff 5a 51 a4 cc 36 ce 88 98 c4 4b 21 28 0a 22 3f 6a e4 07 40 cf e0 00 1a 3b da f0 97 c6 06 1c 3d 7d 1a 17 7a 7a cd 6b c6 19 18 38 d3 Data Ascii: /36$0k_tHLfD!w 9JWD9I<9}{d-pQTDEtE ""X]+h1 8@/wBO/^Dh$f(@B'(toHL\J7c#~seWTE9I?7)s")i!B747GZQ6K!("?j@;=}zzk8
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 58 e5 b7 45 d6 89 d8 87 fd af e7 7c 33 6a da 16 6b e4 4e 81 2d b2 3e c4 3f 05 96 e5 85 a1 4e 31 b8 1c 25 a1 8a 19 02 b2 0b 73 cb 6a c8 6b 67 d7 31 22 7e b8 ae 74 d5 03 1f 7d d2 8b b3 59 9e 0e 3b f1 8a 1b f1 02 53 e5 f3 98 a3 5e 5a 88 6e a0 59 9e 12 3b f1 8a 0b 39 03 ee 8f df 18 79 39 5b 54 e4 4e c6 4e bc 62 46 8e c0 54 5d 8b cc c4 c3 8a 43 60 e4 4e 81 2d f2 cc c8 1b 6a 67 dc 78 d3 0b 05 27 12 12 12 e4 ee 71 61 27 5e 51 91 37 27 4a 38 b9 74 db 67 9e 65 c9 f3 ea 56 27 5e 1b f8 c9 1b 36 f3 ce db 1e e3 ff 9e 6f 45 fd 33 21 7d c3 89 9b 5f d9 d2 a5 85 b4 f9 d2 b7 5c 22 20 bb d0 bc 09 8a 8d ec 2e 6e 7b e5 d8 8f 39 cc 91 59 34 0d 48 be 2e f5 c8 27 6e cd de 7c 80 76 35 99 e1 43 2c 48 5f d5 90 b1 79 e5 97 60 70 5a 34 26 4c 4c bc 5c ec 29 6d ad aa 7f 89 43 9c 3a 7e Data Ascii: XE\|3jkN->?N1%sjkg1"~t}Y;S^ZnY;9y9[TNNbFT]C`N-jgx'qa'^Q7'J8tgeV'^6oE3!}_\" .n{9Y4H.'n\|v5C,H_y`pZ4&LL\)mC:~
2024-05-27 22:43:48 UTC	242	IN	Data Raw: e6 3b de a9 46 02 a0 01 19 ce 1b 7e b9 6f ee b7 be 02 49 3b d0 5f 9d 02 5f 22 05 5c f8 00 f6 34 7c 15 5d 23 f9 86 ef 46 2c cd f5 68 1d 49 8b 53 8e a4 ac 5d bc ed 4d aa 38 61 b0 d6 a8 5c ed 02 4f 24 05 5c 54 8c ea a6 2d 38 de b7 1e 44 8a ae bb 33 59 64 c2 78 6c 72 58 c3 c2 bb 96 bf 84 05 c9 65 07 a8 42 d6 59 14 97 61 0b 3c 1d bc 25 0f a0 cf e1 dd f6 db f0 e7 9e 35 e8 0f 2d 45 88 13 11 cb e2 03 2d 8c eb d3 32 b0 30 73 c1 50 e2 fc e4 86 b4 cf 5f 77 88 81 1a 1f 79 0f c9 77 fc 72 6c 81 e3 81 ef cd 00 d4 45 00 2d 06 78 21 40 f3 10 79 ff d7 01 e0 22 c0 7d 00 b5 01 dc 0c aa 6e 02 d0 6e ad c3 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 f2 f9 7f ee a8 c0 7b d9 ce 71 3e 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ;F~oI;__"\4\|]#F,hIS]M8a\O$\T-8D3YdxlrXeBYa<%5-E-20sP_wywrlE-x!@y"}nn6666666666666666666666{q>IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50372	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:48 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:48 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:48 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50373	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	553	OUT	GET /PVDn9Oj6dMbqqydywzGuLAPkbLwDX3Uuv1t6K8MORXFuQAVBLPNAy_yaQBc7bE-qmLHCmWThtcuwCFEwJPR_w6SDj_Um1q0FK7vC0w=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:48 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 3266 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:38:49 GMT Expires: Tue, 28 May 2024 22:38:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 299 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	859	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 07 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 09 09 0a 08 08 0b 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 09 06 06 0a 0e 0d 0a 0d 0d 0e 0e 0f 11 12 10 0e 0f 10 15 12 0e 0d 0e 0d 11 0d 0d 0e 0d 0e 0e 12 10 0d 0e 0d 10 0d 0d 0d 15 0d 0d 11 10 10 0d 0e 0e 0e 10 0f 0e 0d 0e 0d 0f 0d ff c0 00 11 08 00 78 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 01 09 07 08 04 05 06 03 02 ff c4 00 42 10 00 02 01 03 01 04 06 06 07 06 04 07 00 00 00 00 01 02 03 00 04 11 05 08 12 21 31 06 07 13 22 41 51 32 61 71 81 c1 f0 14 15 23 33 42 72 91 Data Ascii: JFIFxx"B!1"AQ2aq#3Br
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 00 2b 06 d2 94 1c 5b a1 52 e9 aa a6 a6 76 fc 2f 2d 3d 0f cc 71 1e 2a cc 3a 9b da e7 4d d5 9e 3b 7e fd ad e4 9c 16 09 79 48 c0 12 44 52 0e eb f0 04 e3 83 60 72 15 9d 45 53 df 57 5a f1 b5 d4 2c 2e 41 c7 61 79 6d 21 3f d2 26 4d ff 00 71 42 c0 fb 6a e1 2a c2 19 0b c1 ba d9 f6 6b 16 97 10 89 ff 00 1a db ec 23 31 95 c1 19 12 39 e4 74 53 4a 52 a4 ae c5 2a 18 d4 d7 e5 c6 41 f6 50 85 4f 33 5c 97 67 73 cd dd dc fb 5d d9 8f fe cd 7e 29 d8 95 25 4f 35 66 52 3c 88 62 29 54 8b ca 02 f6 cf 55 0e 6b df 74 8b ab 6b dd 2a cf 4d d7 92 18 f5 0d 3a e6 05 37 70 49 1e 56 2e db 83 24 d8 cb 24 6e 3e ee e5 70 63 7c 67 20 90 d8 fe 5e 46 ac b3 67 9d 3a 39 ba 39 a6 c5 2a 2c b1 4b 62 89 24 6e a1 91 d1 c1 0c ac a7 20 a9 07 04 11 83 4f c2 dd e2 42 ed 76 63 0f 65 6c b2 b5 d9 38 36 ed 3c Data Ascii: +[Rv/-=q:M;~yHDR`rESWZ,.Aaym!?&MqBjk#19tSJRAPO3\gs]~)%O5fR<b)TUktkM:7pIV.$$n>pc\|g ^Fg:99*,Kb$n OBvcel86<
2024-05-27 22:43:48 UTC	1017	IN	Data Raw: fb c7 26 a5 22 17 9e e2 46 1d 9d a2 37 17 48 dd fc 49 fb c9 9b 0d 21 f2 18 03 06 f4 1b 5a d1 fa 19 1b cb 70 46 ad d2 49 94 f6 91 42 e1 92 cf 7b bc 63 92 e0 86 11 92 48 32 bf 7e 59 0f 25 c0 18 c1 5d 73 75 fd ab 6b 8d fb e5 c6 e5 be 49 4b 2b 7c c5 6a 83 c3 79 72 5a 66 c7 e3 99 98 f9 04 1c 29 e2 f0 0e f3 b5 e0 3e b8 ae be 6c 52 28 64 f8 f5 5d a9 bb ac 1a 30 75 3a 6f 73 e3 c2 c1 6d 8e d0 5b 77 69 f1 c7 35 8e 9b 0a 6a 4f 22 b4 52 cb 20 fd c9 41 e0 47 9c de c5 c2 f0 f4 87 0a af f1 68 09 c9 50 32 49 c0 1c 01 27 c0 1c e0 0c e0 7a ab 91 0d b0 15 ca 48 a9 87 c8 5d 99 5c 6e 25 8b 4b 5a f0 e9 2d 61 a0 1c 17 c6 38 2b 93 12 63 88 e7 5f 58 e1 af 5d d5 8f 57 52 ea 97 d6 f6 30 83 bd 33 80 ed fe 5c 43 ef 5c f0 38 dd 4c f3 e1 9d df 5d 35 aa a3 68 74 8e 0c 60 b9 26 c0 78 ad Data Ascii: &"F7HI!ZpFIB{cH2~Y%]sukIK+\|jyrZf)>lR(d]0u:osm[wi5jO"R AGhP2I'zH]\n%KZ-a8+c_X]WR03\C\8L]5ht`&x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50378	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:48 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:48 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:48 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50374	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	554	OUT	GET /i7W2EWxINNLwgzMNOveR5SNQHKisftbymepppsfQEA1whmCJV0H0cauacdN-I0RfEc7Kz6PJsLAlw6zR97E1rpdxVRSGP_Y2UtFOGlQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:48 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3371 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:30:44 GMT Expires: Tue, 28 May 2024 22:30:44 GMT Cache-Control: public, max-age=86400, no-transform Age: 784 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0c e2 49 44 41 54 78 9c ed 9d 7b 90 1d 55 9d c7 3f bf ee fb 98 b9 33 c9 64 26 13 83 21 0f c3 5b 4b 17 ad 28 9a c0 0d a4 b5 ca 75 17 05 15 b5 2c 2d 77 34 05 ab 56 b1 28 66 c9 13 d9 00 0d 48 14 48 02 26 a2 6e 46 8d ee 96 a0 48 a1 50 88 15 d7 9d 05 65 a4 60 2b ee 0a 49 48 c2 f0 88 79 90 99 cc a4 67 ee bb cf fe d1 7d 97 31 4c 1e 73 a7 fb 9e be 43 7f 2a b7 6a 52 f7 de df f9 9e fb ad 5f 9f d3 e7 d5 10 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 18 96 3d 9c b5 6e 3e 7a b1 6e 1d f5 c4 d0 2d a0 5e 58 b6 73 95 18 c6 a3 43 af 3c fd 48 76 d5 0b 57 eb d6 53 2f de 10 06 5b b6 b3 19 d8 04 34 e3 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{U?3d&![K(u,-w4V(fHH&nFHPe`+IHyg}1LsC*jR_=n>zn-^XsC<HvWS/[4
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 22 d5 2e 47 22 83 fd 29 be 4f 02 eb 80 ce b0 ca 09 33 83 01 50 0a 23 d9 7c c4 4c 65 be 96 9e 36 fb df 7f bb a6 4d fb d4 a3 f6 0c b6 6c 67 16 de 2c d0 16 42 34 b7 2e 88 e0 96 73 d3 ca f9 a1 ef e7 fb fb d6 2c be 7e df 6c dd 92 b4 1a 6c d9 ce 3b 81 3b 80 35 3a 75 04 8b a0 dc 32 e5 fc e0 ca e2 f0 a1 3b 2f 5a f1 7c 60 93 20 b5 a0 cd 60 cb 76 2e 05 fe 15 f8 94 2e 0d 61 53 c9 0d 5e 51 ce 0f 6d 59 f8 b5 3f 4d 6c 1a 73 02 d4 bd 0d f6 db db cf 01 b7 00 75 9d 8a 0b bd 0d 1e 0b a5 30 92 4d 8e 24 d2 cb a7 cf ff 9b ee 5f 5d 2d 75 6d 97 eb 9a c1 fe 2d d0 cd c0 46 ea 6c ae 36 44 70 cb f9 56 b7 38 bc f1 f0 ee 67 6e 59 b2 f6 d5 33 ea 59 7c dd 0c b6 6c e7 22 bc f1 e4 af 02 75 4c a1 28 20 28 b7 62 54 4a 23 d7 e4 fa fb d6 5f b8 62 d7 25 f5 2a b9 2e 06 5b b6 f3 59 bc c1 0b 6d Data Ascii: ".G")O3P#\|Le6Mlg,B4.s,~ll;;5:u2;/Z\|` `v..aS^QmY?Mlsu0M$_]-um-Fl6DpV8gnY3Y\|l"uL( (bTJ#_b%*.[Ym
2024-05-27 22:43:48 UTC	1121	IN	Data Raw: 40 ea b8 f2 62 db ea d6 07 f1 4e c6 f9 3d 5e a7 78 4c 5c e5 0d 2f ce ee 30 48 a7 a2 6b 2e 80 eb 2a 32 99 16 ce 9c 3f 97 29 2d 4d 27 1f db 16 79 ca 48 a4 3f 54 2f 73 a1 ce 4b 6b b6 ad 6e dd 05 2c 01 7e 0c e4 8f 7d bf 3a 7e 3c af c3 a4 b5 d9 ac cf 6d d0 04 a9 b8 2e 6d 6d 53 39 e7 8c d9 a4 93 09 d4 98 26 4b 11 91 fb cc e6 b6 25 4f 6e 78 4f 20 f7 b7 a7 8a b6 c1 56 cb 76 6e 00 ae e2 98 25 b5 73 3a 4c 4e 6b 37 23 d7 e6 9e 1c 97 17 fb 5e e2 f9 be fd c7 dc 23 cb 01 31 cc ee de bb 17 ae d0 a1 4a db e2 b8 6d ab 5b d7 02 ff 04 3c 03 de a5 79 4a 93 c1 b4 96 48 ae d7 3b 29 22 26 9d 9d d3 e9 98 9a c1 ad b6 2b 22 db c5 4c 2c d3 65 2e 68 5e fd b8 6d 75 eb cf 80 a5 0a 7e 91 30 29 75 b4 1a 64 d2 06 ae 3b 6a da af 41 5e ae ab 98 32 65 2a 33 df d4 41 32 69 ba 4a e4 97 62 26 Data Ascii: @bN=^xL\/0Hk.2?)-M'yH?T/sKkn,~}:~<m.mmS9&K%OnxO Vvn%s:LNk7#^#1Jm[<yJH;)"&+"L,e.h^mu~0)ud;jA^2e3A2iJb&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50375	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	785	OUT	GET /ra4Ks1fsGsLSlzWoAU-9Ls2V5vEFCsA9thbtIkCHNFYeLC-ver57N4-GCGFZ-GBGw6uQkYPkvobF7dzM7udYmcTs4wfDTljzskEZAQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:48 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 7450 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:39:26 GMT Expires: Tue, 28 May 2024 22:39:26 GMT Cache-Control: public, max-age=86400, no-transform Age: 262 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1c d1 49 44 41 54 78 9c ed 9d 79 70 1c d7 79 e0 7f dd 73 02 18 1c 03 80 b8 41 1c 04 40 0e 0f 13 a0 64 1e a2 48 89 d6 49 ea 6c c9 8a 22 ca 96 e5 f5 3a 55 7b b8 94 64 cf ca 96 37 59 27 bb 89 76 b3 5b 4e b2 d9 cd b1 15 1d 96 2c 39 8e dd 94 ac 8b b2 44 59 94 2c 52 07 25 52 14 a8 26 71 10 94 48 82 20 00 82 20 38 98 b3 bb f7 8f 9e 1e 03 83 1e 60 00 f4 0c 49 69 7e 55 53 85 6a 74 f7 7b dd 5f bf f7 be f7 bd ef fb 1e e4 c9 93 27 4f 9e 3c 79 f2 e4 c9 93 27 4f 9e 3c 79 f2 e4 c9 73 25 20 5c ea 0a e4 0a 49 92 1c 40 2b d0 01 2c 01 aa 80 0a c0 07 78 01 0f c6 fb 88 26 7e 13 c0 b9 c4 ef 34 f0 19 d0 2f cb f2 85 9c 57 7e 11 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxypysA@dHIl":U{d7Y'v[N,9DY,R%R&qH 8`Ii~USjt{_'O<y'O<ys% \I@+,x&~4/W~
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 97 95 80 25 49 aa 04 7e 1b 63 ac 6a b3 3a 47 d3 34 22 e1 30 0d 8d 8d ac ed ec a4 ad bd 9d f6 f6 76 fc 7e 3f aa aa 66 5d a8 e9 30 85 7d fe fc 79 fa fa fa 38 aa 28 1c 3a 78 90 c1 d3 a7 71 b9 dd b3 8d d3 47 31 74 8b 9f ca b2 3c 6e 77 bd 2e 1b 01 4b 92 d4 01 fc 1e f0 0d 0c f3 e1 34 74 5d 27 12 89 50 e4 f3 b1 6d db 36 56 ac 58 41 5b 5b 1b 45 3e 1f aa aa 66 3c ed c9 36 82 20 e0 70 38 98 98 98 a0 bf af 8f ee ee 6e f6 ee dd cb 64 30 88 c7 e3 49 77 d9 28 f0 ff 80 ff 2d cb f2 49 3b eb 33 6b ff 91 2b 24 49 5a 0f fc 19 f0 00 16 46 8a 78 3c 4e 24 1c e6 da eb ae e3 8e 3b ef 64 c3 c6 8d 34 35 35 e1 48 8c af 97 1b 9a a6 e1 76 bb a9 ad ab a3 a1 b1 91 65 cb 96 11 09 87 e9 ef ef c7 e5 72 59 29 62 85 18 66 d5 ba 40 20 f0 89 a2 28 a3 76 d5 e5 92 0b 58 92 a4 9b 31 ba a8 eb ac Data Ascii: %I~cj:G4"0v~?f]0}y8(:xqG1t<nw.K4t]'Pm6VXA[[E>f<6 p8nd0Iw(-I;3k+$IZFx<N$;d455HverY)bf@ (vX1
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: db 3e 4d 4a 4c 8d fe 19 b0 6a ea f1 f3 63 63 7c fb 3b df b1 5d c0 ba ae 73 fc f8 71 7e f4 c4 13 f4 f6 f6 1a 06 14 b7 1b 97 db f0 fc 39 77 ee 1c c7 8e 1e c5 e9 74 b2 7c c5 8a 05 bf 78 a7 d3 c9 5b 7b f7 f2 cc 8f 7f cc d0 d0 10 82 20 e0 76 bb 93 de 25 67 cf 9e a5 b7 b7 97 ba da 5a 96 2c 59 32 97 37 e5 bc 70 38 1c 78 bd 5e de da bb 17 af 77 5a 1c 9d 00 5c 48 38 07 58 3a ec 65 63 0c 6e c4 e8 a2 93 a8 aa 4a 4b 4b 0b 75 75 75 b6 8e 55 82 20 70 71 62 82 57 5f 79 85 c1 c1 41 3c 1e cf b4 fb 0b 82 90 f4 81 fa c7 9f fc 84 33 67 ce 2c a8 7c 41 10 08 87 c3 3c fe d8 63 c4 63 b1 19 9e 18 a6 b0 2f 8c 8f f3 e2 0b 2f 30 36 36 b6 98 98 26 4b be b2 76 2d c5 25 25 56 ca 69 27 16 ab 73 26 d9 10 70 1d 46 34 42 92 58 2c c6 ba ab ae c2 ed b6 3f e8 6f 32 14 e2 d7 6f bf 3d 9b c7 62 Data Ascii: >MJLjcc\|;]sq~9wt\|x[{ v%gZ,Y27p8x^wZ\H8X:ecnJKKuuuU pqbW_yA<3g,\|A<cc//066&Kv-%%Vi's&pF4BX,?o2o=b
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 66 2c 57 c5 e3 71 ca 2b 2a b2 b2 b2 22 08 02 de 82 82 69 c7 44 51 64 74 78 98 e1 b3 67 89 46 a3 59 17 b2 20 08 9c 1f 1b e3 d0 c1 83 14 4c a9 8b 20 08 59 e9 3d 74 5d 27 14 0a 31 3a 3a 6a f5 6c 43 18 dd f4 34 ec 6a c1 5e 2c 12 a9 00 f8 fd 7e 5c 2e 97 4d c5 fc 06 51 14 59 be 7c 39 91 48 64 da f1 82 c2 42 f6 ef df cf f0 d9 b3 59 15 b0 20 08 a8 aa ca 99 c1 41 0e 1d 3a 34 6d 18 8a c7 e3 ac 59 bb d6 f6 9e 2b 1e 8f 33 78 fa 74 aa 5f 96 c9 e7 18 dd f4 34 ec 14 f0 ea a9 07 34 4d a3 6a c9 92 ac 08 17 8c 17 ec f7 fb e9 58 be 7c 9a 55 c9 e5 72 f1 d1 87 1f d2 d3 d3 63 15 d7 63 2b 83 83 83 bc f0 c2 0b d3 5a 2f 18 6b cf eb d7 af c7 6d e3 b3 9b 4a 65 7f 7f 3f 9e 99 ae 4f 1a 70 4a 96 e5 19 d7 d9 25 e0 42 52 62 90 34 4d a3 be a1 61 56 5f a9 c5 e2 72 b9 d8 b6 6d 1b a1 94 85 Data Ascii: f,Wq+*"iDQdtxgFY L Y=t]'1::jlC4j^,~\.MQY\|9HdBY A:4mY+3xt_44MjX\|Urcc+Z/kmJe?OpJ%BRb4MaV_rm
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 6f f0 de fb ef 33 32 3c 4c 91 cf 87 cb e5 9a e6 0d 62 3e 5b 3c 16 23 38 39 49 59 69 29 eb ae be 9a 8d 1b 37 d2 b5 6e 5d 72 41 df 3c 37 5b 88 a2 c8 d0 99 33 3c ff dc 73 56 63 2f 18 ad f7 c5 b9 ee 63 d5 82 97 90 12 df 0b c6 c3 9c 1f 1b 63 7c 7c dc b0 01 af 58 c1 86 0d 1b d8 b8 69 13 15 15 15 c9 2f f9 72 10 ee 54 cc 6e db e1 70 b0 72 e5 4a 02 81 00 bf 03 8c 8e 8c 70 bc bf 9f 33 67 ce 70 7e 6c 8c 70 24 82 ae eb 14 15 15 51 56 56 46 75 4d 0d 2d cd cd 94 57 54 20 88 e2 34 67 a7 5c 3c a3 c3 e1 e0 c7 cf 3c c3 e4 e4 a4 d5 d4 68 00 f8 91 2c cb 73 8e 0b 56 02 76 92 b2 ae 6b b6 86 ff f6 e8 a3 b4 b5 b5 25 35 4e d3 17 f8 4a c8 75 35 55 28 a2 20 50 55 55 45 75 75 b5 e5 18 3c f5 63 4d fe 72 58 57 a7 d3 c9 0b bf f8 05 87 53 56 a9 12 68 c0 2f 65 59 7e 25 93 7b 59 99 5b 2e Data Ascii: o32<Lb>[<#89IYi)7n]rA<7[3<sVc/cc\|\|Xi/rTnprJp3gp~lp$QVVFuM-WT 4g\<<h,sVvk%5NJu5U( PUUEuu<cMrXWSVh/eY~%{Y[.
2024-05-27 22:43:48 UTC	1030	IN	Data Raw: 44 22 11 96 b5 b5 f1 c8 ef fe ee 8c 0c 76 c9 bf e6 d9 85 9b 1f da 91 ee 6e 9e 7e ea 29 4e 9e 3c b9 a0 d0 1b b3 2e 73 08 f6 1c 86 96 fc c3 79 17 30 0f 6c 0b 7f 53 14 05 45 51 7e 1d 08 04 9e c6 10 70 33 86 cb 8f e5 53 ce c7 17 ca 0a 87 c3 c1 d8 b9 73 84 26 27 59 b5 7a f5 6f 96 f7 cc 14 83 53 52 0d ce e7 37 3c 3c cc cb af bc 42 f7 27 9f a4 8b e2 9b 93 39 9e 2d 0c fc 0a 78 40 96 e5 e7 17 f6 f4 f3 a8 4b b6 6e 2c 49 52 3b f0 fb 18 5b bf d4 30 8b 0b d0 42 31 5b 4a 6d 6d 2d 75 f5 f5 b8 dd 6e 0a 0b 0a 92 41 5f a2 28 e2 76 bb e7 d5 fd 2b 8a c2 91 ee ee 6c 64 25 08 61 78 62 fc b9 2c cb ff 60 f7 cd d3 91 75 e3 b1 24 49 cd c0 03 18 0e f2 2d 18 c2 9e b3 5c b3 15 cc e5 06 34 75 f1 3e 39 c6 9b ca 0f f3 9b 3b 0b 60 ec f7 90 41 d8 a7 f9 d1 64 a8 e4 45 80 3f 02 7e 28 cb 72 Data Ascii: D"vn~)N<.sy0lSEQ~p3Ss&'YzoSR7<<B'9-x@Kn,IR;[0B1[Jmm-unA_(v+ld%axb,`u$I-\4u>9;`AdE?~(r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50382	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:49 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:48 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:49 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50376	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	783	OUT	GET /BAwQk6jAMu2s_7Jh-8-_CsvSwEAaeLsVhL8z82VOoEkoaujxll1kYL3Pz4jkYpLbRpUA2fOZTtIppG2gXpsDoijSo1a1M5uPvke3=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:48 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3042 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:34:04 GMT Expires: Tue, 28 May 2024 22:34:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 584 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 0b 2e 49 44 41 54 78 9c ed 9d 7b ec 1c 55 15 80 bf 5b db d2 e1 5d 20 16 30 28 11 69 53 04 64 a9 18 30 01 fb 83 a9 29 2e a8 11 cd 22 11 79 57 c4 68 40 40 81 41 29 e8 88 08 04 31 11 44 45 8a 04 65 21 36 2a 59 83 61 e8 22 6f 11 d8 84 87 bc 0d 2f 95 ca a3 02 a5 13 10 7a fd 63 76 11 da 99 b9 f3 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2.IDATx{U[] 0(iSd0)."yWh@@A)1DEe!6*Ya"o/zcv
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: eb ef f7 b2 3c 22 20 f3 15 d5 1f bc b2 ee 87 69 06 5e 05 54 8a 3a 95 60 3f c2 78 6b 43 9f db 05 f5 87 82 b2 8d a8 fe e0 0e 01 b1 77 a5 7d b8 be 81 03 6f 0d f0 a4 c0 0d ac 8b e9 47 be 54 50 f7 81 3a a2 cc 9c 5c 82 9b 2d cb bb 22 ed c3 ac 69 d2 95 96 95 a7 71 38 61 9c 17 06 bd 1c 78 49 50 ff 58 bd 18 38 d9 a2 ac d5 aa 3f b8 26 ad 21 cb c0 d6 96 f9 72 98 06 1c 9b d5 a8 7c de 00 7e 2a a8 ff 28 1d 31 53 50 7e 2e aa 3f f8 33 10 59 12 97 39 f5 4c 37 70 92 99 71 b9 25 e5 79 98 c2 a1 81 a0 ee 8d 81 25 82 f2 8d a8 fe 60 11 b0 de c0 a8 24 17 55 5d 4d 3a b7 a6 e2 22 28 c2 38 33 6a 36 cc ca 48 7d f4 58 e2 2c 41 d9 45 d9 99 64 60 5b 85 e5 aa 3f f8 4a 5e 87 6c 03 07 de 03 c0 9f 2a 2a 2e 83 e9 47 b6 19 94 5f 97 d9 3a e2 00 41 f9 46 54 7f f0 94 ea 0f b6 00 ae 2f 79 e9 31 Data Ascii: <" i^T:`?xkCw}oGTP:\-"iq8axIPX8?&!r\|~(1SP~.?3Y9L7pq%y%`$U]M:"(83j6H}X,AEd`[?J^l*.G_:AFT/y1
2024-05-27 22:43:48 UTC	792	IN	Data Raw: 63 da 03 be 26 28 df 0a 92 06 6e e6 11 16 c6 a6 fd 44 cb 04 b5 37 b1 92 56 0b 39 03 07 de e3 c0 1f c5 e4 ff 0f 53 1c fc bb 82 ba 37 d2 51 ed 23 07 44 91 f4 60 68 66 c3 da fb 08 63 3f ab 51 f9 3c 4e 7e dd 8b ba 9c 2a 28 bb 36 b2 06 4e b6 ba 48 65 1d be 1d d3 a0 4e 72 6e fe 21 1d b1 97 a0 fc 5a 48 7b 30 34 f3 9e da dd 10 f8 90 8e b0 4d 44 a5 9e 34 e4 0d 1c 78 bf 42 76 1f d1 88 71 66 7c ec 2f 58 a5 be 16 4d 78 30 c0 c5 0d e8 f8 1c 61 9c b7 cb af 4b f5 8a 72 45 98 84 aa 79 eb d1 8c 81 03 af a9 2f 9f e9 a5 c3 c0 87 e4 d4 ed 68 1d 89 94 ea af 45 53 1e 0c b2 25 90 46 7c d3 d0 fe 7d 41 dd 33 a8 76 be a2 28 4d 1a 78 69 23 5a 92 e3 6f 53 19 6e 58 93 2c ea 36 71 6b c5 cd 19 38 f0 9e c2 5e 7d e4 3c 4c 5e 2c b9 10 32 4b 47 7c 46 50 7e 69 9a f4 60 90 dd 81 30 62 7b c2 Data Ascii: c&(nD7V9S7Q#D`hfc?Q<N~*(6NHeNrn!ZH{04MD4xBvqf\|/XMx0aKrEy/hES%F\|}A3v(Mxi#ZoSnX,6qk8^}<L^,2KG\|FP~i`0b{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50377	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	785	OUT	GET /I95wjYii8vhFSSx-aSYdh2hPAMjgZkA9yjarSQoOd98COwOxkAVn_dulBcTcfbsa7Limy6IKX6G95ep6OB6y2yMLMiX0YEqFx3KQHQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:48 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 18405 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:10:59 GMT Expires: Tue, 28 May 2024 20:10:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 9169 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:48 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3a 00 00 00 3a 08 06 00 00 00 e1 bb 4a 28 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR::J(pHYs.#.#x?vOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 b1 38 2c 09 93 63 cb b1 22 ac 0c ab c6 1a b0 56 ac 03 bb 89 f5 63 cf b1 77 04 12 81 45 c0 09 36 04 77 42 20 61 1e 41 48 58 4c 58 4e d8 48 a8 20 1c 24 34 11 da 09 37 09 03 84 51 c2 27 22 93 a8 4b b4 26 ba 11 f9 c4 18 62 32 31 87 58 48 2c 23 d6 12 8f 13 2f 10 7b 88 43 c4 37 24 12 89 43 32 27 b9 90 02 49 b1 a4 54 d2 12 d2 46 d2 6e 52 23 e9 2c a9 9b 34 48 1a 23 93 c9 da 64 6b b2 07 39 94 2c 20 2b c8 85 e4 9d e4 c3 e4 33 e4 1b e4 21 f2 5b 0a 9d 62 40 71 a4 f8 53 e2 28 52 ca 6a 4a 19 e5 10 e5 34 e5 06 65 98 32 41 55 a3 9a 52 dd a8 a1 54 11 35 8f 5a 42 ad a1 b6 52 af 51 87 a8 13 34 75 9a 39 cd 83 16 49 4b a5 ad a2 95 d3 1a 68 17 68 f7 69 af e8 74 ba 11 dd 95 1e 4e 97 d0 57 d2 cb e9 47 e8 97 e8 03 f4 77 0c 0d 86 15 83 c7 88 67 Data Ascii: 3l0.B8,c"VcwE6wB aAHXLXNH $47Q'"K&b21XH,#/{C7$C2'ITFnR#,4H#dk9, +3![b@qS(RjJ4e2AURT5ZBRQ4u9IKhhitNWGwg
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: a3 bf 3c b8 bc 65 a7 c9 ce cd 3b 3f 54 a4 54 f4 54 fa 54 36 ee d2 dd b5 61 d7 f8 6e d1 ee 1b 7b bc f6 34 ec d5 db 5b bc f7 fd 3e c9 be db 55 01 55 4d d5 66 d5 65 fb 49 fb b3 f7 3f ae 89 aa e9 f8 96 fb 6d 5d ad 4e 6d 71 ed c7 03 d2 03 fd 07 23 0e b6 d7 b9 d4 d5 1d d2 3d 54 52 8f d6 2b eb 47 0e c7 1f be fe 9d ef 77 2d 0d 36 0d 55 8d 9c c6 e2 23 70 44 79 e4 e9 f7 09 df f7 1e 0d 3a da 76 8c 7b ac e1 07 d3 1f 76 1d 67 1d 2f 6a 42 9a f2 9a 46 9b 53 9a fb 5b 62 5b ba 4f cc 3e d1 d6 ea de 7a fc 47 db 1f 0f 9c 34 3c 59 79 4a f3 54 c9 69 da e9 82 d3 93 67 f2 cf 8c 9d 95 9d 7d 7e 2e f9 dc 60 db a2 b6 7b e7 63 ce df 6a 0f 6f ef ba 10 74 e1 d2 45 ff 8b e7 3b bc 3b ce 5c f2 b8 74 f2 b2 db e5 13 57 b8 57 9a af 3a 5f 6d ea 74 ea 3c fe 93 d3 4f c7 bb 9c bb 9a ae b9 5c 6b Data Ascii: <e;?TTTT6an{4[>UUMfeI?m]Nmq#=TR+Gw-6U#pDy:v{vg/jBFS[b[O>zG4<YyJTig}~.`{cjotE;;\tWW:_mt<O\k
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 32 30 31 37 2d 31 31 2d 30 38 54 31 33 3a 30 36 3a 30 38 2d 30 38 3a 30 30 3c 2f 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 64 63 3a 66 6f 72 6d 61 74 3e 69 6d 61 67 65 2f 70 6e 67 3c 2f 64 63 3a 66 6f 72 6d 61 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 33 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3e 78 6d 70 2e 69 69 64 3a 62 66 66 31 32 32 38 38 2d 38 39 64 33 2d 34 38 64 36 2d 61 30 36 35 2d 30 35 62 38 63 30 39 35 65 39 63 64 3c 2f 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 Data Ascii: <xmp:MetadataDate>2017-11-08T13:06:08-08:00</xmp:MetadataDate> <dc:format>image/png</dc:format> <photoshop:ColorMode>3</photoshop:ColorMode> <xmpMM:InstanceID>xmp.iid:bff12288-89d3-48d6-a065-05b8c095e9cd</xmpMM:Instance
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3e 31 3c 2f 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3e 33 30 30 30 30 30 30 2f 31 30 30 30 30 3c 2f 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3e 33 30 30 30 30 30 30 2f 31 30 30 30 30 3c 2f 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 32 3c 2f 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 43 6f Data Ascii: /xmpMM:History> <tiff:Orientation>1</tiff:Orientation> <tiff:XResolution>3000000/10000</tiff:XResolution> <tiff:YResolution>3000000/10000</tiff:YResolution> <tiff:ResolutionUnit>2</tiff:ResolutionUnit> <exif:Co
2024-05-27 22:43:48 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50383	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:49 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:48 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:49 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50379	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	786	OUT	GET /UqqZocZvjGksiGtlRkKb5NsuhpQkMLt3A85lMQ81Pms9tSZ3lLpymbAeinPIe5qUJRdmOKqL9InBBVsh6_gK-1QcNGppeUa7owoKgqo=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:49 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4175 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:34:04 GMT Expires: Tue, 28 May 2024 22:34:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 584 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDR<<:rtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 62 32 66 36 61 30 33 2d 30 35 34 65 2d 31 31 37 62 2d 62 37 38 33 2d 62 62 66 39 35 63 34 32 64 66 39 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 60 48 96 af 00 00 0c 5f 49 44 41 54 78 da ec 5b 7b 70 54 d5 19 ff ce dd f7 6e f6 99 f7 8b b0 60 20 09 94 88 13 1c 1e 63 0b 45 45 14 f0 d1 8a da d6 2a d8 96 b4 68 b5 8c 53 3b cc b4 fe d3 aa d3 87 e2 88 b5 1d b4 da 96 19 2b a0 ad 50 90 c1 07 22 e2 03 04 24 09 b2 10 c8 83 3c 37 24 d9 ec 26 d9 dd ec dd 7b 4e 7f 67 37 80 22 14 84 4d 78 c8 61 4e ee dd 7b 77 ef 3d bf f3 7d df ef fb 7d e7 5e 98 10 82 be 4e 4d Data Ascii: e:docid:photoshop:db2f6a03-054e-117b-b783-bbf95c42df91"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`H_IDATx[{pTn` cEE*hS;+P"$<7$&{Ng7"MxaN{w=}}^NM
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 75 ba b1 30 6e b6 12 d1 b4 b9 76 88 f7 1f 7e 6b 6a 92 ce 0f a7 86 7d ef 2b 2a 12 de b1 63 e9 5e b7 5b bc e2 76 f3 1e a3 91 0f a6 f8 e1 6e c2 0d 85 86 c9 37 03 70 8e 12 8a 46 c7 8d 81 a0 18 7b b8 99 68 d3 3b 29 bb 89 4f af d7 b5 b9 dd ba bf 67 67 d3 9d d1 28 73 c3 9d 6e 44 d5 f3 32 c0 87 4c 26 31 9c e0 3d 00 8c 18 26 45 08 bb 12 8e a9 39 39 90 8b a6 4f 76 a5 f4 26 de e6 66 9e 63 b7 f3 a6 0d 1b c4 aa 97 5e a2 f9 8b 16 b1 77 cb cb c5 f7 54 95 39 c1 17 73 2c 16 b1 2a 3d 5d f4 99 4c 43 6d 79 e6 02 e0 41 ea cd d1 1b 6c 56 ad bf bd 83 f8 fe fd 42 49 14 43 a9 b9 c9 24 cc e8 2b f5 f5 e4 f4 78 e8 f6 f9 f3 19 3a 69 88 a5 b7 de 7e 9b 56 6f d9 42 ff dc bc 99 ad af a9 91 85 01 bb cb e1 10 77 1a 0c e2 86 50 88 19 31 21 a9 46 6c 03 60 25 39 ab 99 54 38 7e dc ce d1 c5 c5 Data Ascii: u0nv~kj}+c^[vn7pF{h;)Ogg(snD2L&1=&E99Ov&fc^wT9s,=]LCmyAlVBIC$+x:i~VoBwP1!Fl`%9T8~
2024-05-27 22:43:49 UTC	535	IN	Data Raw: 6e b5 5e 07 2a a7 b9 c3 fb 54 ff 28 08 86 32 4e c8 c5 08 30 ac 7c 26 c4 20 86 a8 0b 4a a9 07 9f 25 38 6c 75 f2 98 d4 fe b2 c2 6b 31 1a 13 c4 d4 87 ef e4 0f 0c f4 95 47 22 cb 71 8d a5 27 33 da 97 de f1 80 ec 98 d6 64 30 bc 9f 11 8f d3 7e 9f 8f a3 a8 50 86 02 58 1b 06 d7 6a 34 0a 1f 64 a7 4c 85 72 c0 52 0d 49 50 41 9c 0b 02 4c 04 e4 a9 62 2b 6b f5 c4 3e ba 7c e7 50 ae 36 eb 92 ee d9 6b e4 3c 0a 41 11 74 70 5e 6b e2 7c 13 dc 77 0d 6e d0 7c ca 82 e6 4b 6b 6f 44 db 46 c6 62 2b ab 2c 96 1f dc ec f5 b2 ff d6 d5 c9 4a e2 5c 62 5a 48 20 50 3a 62 a7 d5 aa 34 c2 22 32 13 48 80 bd b0 5e 70 10 90 6c 72 a1 0d 40 c2 50 7d 2d 70 c7 20 38 25 64 d6 b4 26 1c 6b 85 80 e9 05 40 a9 88 ba d0 5b 01 2a 40 c9 2e 8f 05 84 7c c3 eb 0c b2 cb a9 5e 5b 32 e0 06 3b f6 5a 2c e5 df ec eb Data Ascii: n^T(2N0\|& J%8luk1G"q'3d0~PXj4dLrRIPALb+k>\|P6k<Atp^k\|wn\|KkoDFb+,J\bZH P:b4"2H^plr@P}-p 8%d&k@[@.\|^[2;Z,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50381	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:49 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:48 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:49 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50384	216.58.212.174	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:48 UTC	510	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:49 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Mon, 27 May 2024 22:43:49 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-27 22:43:49 UTC	459	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50387	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	785	OUT	GET /8bC8ZC9RQ_cJj5lSa8LjCfRClGeSyp4SkN72C0tMSUIqGPVjEpHeUDfAScLNKy82MiXWLBlkpMl4FhJGrGRDhzHxOoXq5v-QSt-rvg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:49 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8028 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:34:04 GMT Expires: Tue, 28 May 2024 22:34:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 585 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 16 69 43 43 50 69 63 63 00 00 48 89 b5 56 79 3c 94 6b 1b 7e de f7 9d 7d b1 cd 90 dd d8 b7 46 96 30 c8 be 93 c8 4e 9b 31 33 18 cb 60 cc a0 d2 26 a9 70 22 49 b6 12 39 15 3a 74 5a 90 d3 22 2d da 8e d2 a6 a2 ce c8 11 aa d3 d1 22 95 ca f7 0e 7f e8 fb 7d e7 cf f3 5d bf df f3 bc d7 7b fd ee fb 7e ee e7 7e ff 78 2f 00 c8 63 00 05 8c ae 14 81 48 18 ec ed c6 88 8c 8a 66 e0 1f 03 04 a8 01 45 a0 07 b4 d8 9c 8c 34 f0 bf 80 e6 e9 c7 87 73 6f f7 98 d2 dd f8 93 e3 b3 d6 77 61 2d d9 6e 5f fe bc b1 d5 8e fa 0f b9 3f 42 8e cb cb e0 a0 e5 3c 50 be 36 16 3d 1c e5 5d 28 a7 c7 86 06 bb a3 fc 3e 00 04 0a 37 85 cb 05 80 28 41 Data Ascii: PNGIHDRxx9d6gAMAaiCCPiccHVy<k~}F0N13`&p"I9:tZ"-"}]{~~x/cHfE4sowa-n_?B<P6=](>7(A
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 9a 2a a2 ee a2 36 52 2f 51 9f 51 3f c9 d0 64 cc 64 7c 65 b8 32 9b 64 aa 65 da 64 ee ca bc 91 25 ca ea cb ba ca ae 96 5d 27 5b 2e 7b 52 f6 b6 ec 6b 39 a2 9c 81 9c bb 1c 5b 6e a3 5c b5 dc 19 b9 7e b9 49 79 9a bc 85 7c a0 7c 8a 7c 91 7c 93 fc 75 f9 31 05 bc 82 81 82 a7 02 57 21 4f e1 90 c2 25 85 61 1a 42 d3 a5 b9 d3 38 b4 ad b4 06 da 15 da 08 1d 47 37 a4 fb d2 13 e9 85 f4 5f e8 bd f4 09 45 05 c5 c5 8a e1 8a d9 8a d5 8a e7 14 25 4a 88 92 81 92 af 52 b2 52 b1 d2 09 a5 87 4a 5f 16 68 2c 70 5d c0 5b b0 73 41 cb 82 bb 0b a6 94 d5 94 5d 94 79 ca 05 ca ad ca 0f 94 bf a8 30 54 3c 55 92 54 76 ab b4 ab 3c 55 c5 a8 9a a8 2e 57 cd 52 3d a0 7a 45 f5 b5 1a 5d cd 41 8d a3 56 a0 76 42 ed 89 3a ac 6e a2 1e ac be 5e fd 90 fa 2d f5 49 0d 4d 0d 6f 8d 34 8d 4a 8d 4b 1a af 35 95 Data Ascii: *6R/QQ?dd\|e2ded%]'[.{Rk9[n\~Iy\|\|\|\|u1W!O%aB8G7_E%JRRJ_h,p][sA]y0T<UTv<U.WR=zE]AVvB:n^-IMo4JK5
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: bf f9 60 d9 83 be 87 61 0f 1f f5 af ec 97 3c e2 3e 1a 7b 9c fc f8 ed 93 cc 27 d3 03 9b 07 b1 83 05 4f e5 9e 96 3f 53 7f 56 ff 87 f1 1f ad 12 1b c9 b9 21 8f a1 5b cf 43 9e 0f 0c 73 86 5f fd 99 f1 e7 d7 91 bc 17 d4 17 e5 a3 5a a3 8d 63 96 63 67 c7 bd c6 ef bc 5c f1 72 e4 55 da ab e9 d7 f9 7f c9 ff 55 f3 c6 e8 cd a9 bf 5d fe be 35 11 39 31 f2 56 f8 76 e6 5d d1 7b 95 f7 47 3e 2c fe d0 3d 19 34 f9 ec 63 ca c7 e9 a9 82 4f 2a 9f 8e 7e 66 7d ee f9 12 f1 65 74 3a eb 2b fe 6b c5 37 e3 6f 9d df fd bf 0f ce a4 cc cc fc e0 4d cc 50 5b c2 98 f7 25 1e bc 38 b6 38 59 c4 90 1a 16 f7 d4 e4 54 b1 90 11 92 c6 e6 f0 18 4c 86 d4 c4 fc df 7c 4a 6c 25 00 ed db 00 50 7e 32 af a1 08 9a 7b cc f9 b6 59 40 e0 9f 01 cf e7 21 4a e8 b2 42 a5 86 79 2d b5 1e 00 d6 24 aa 97 64 f0 e3 67 35 Data Ascii: `a<>{'O?SV![Cs_Zccg\rUU]591Vv]{G>,=4cO*~f}et:+k7oMP[%88YTL\|Jl%P~2{Y@!JBy-$dg5
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: ce 1d 25 57 dc 37 df ec 46 67 e7 0c 03 70 c6 d3 ca 3b 9c 37 6f a8 1c 71 63 62 dc e8 e7 f7 bc 43 a5 6f 3a 3a de 64 74 b4 b2 a3 5e dc b1 c3 ee f9 a7 90 82 f4 f2 3a cb 98 98 76 ca 88 4b 9a 71 c4 88 8d d2 0b fd ac 31 20 60 3f f7 ec d1 ff dc 32 5f 7e f9 1d aa d5 cf e6 6c 90 4c 1a 19 91 e1 e1 6b 48 ea 6f b1 21 c7 8d 0b 67 8b 16 d9 d2 0b fb ac d2 ca aa 80 a3 47 cf d0 8f b8 6b d6 78 d2 c7 e7 98 f4 42 3e eb 74 75 4d e1 d4 a9 01 ba 15 97 34 62 50 d0 86 e7 53 7e 06 40 b5 9a ec d3 67 37 cf 9d b3 d1 9d c0 81 81 e3 e9 e0 90 23 bd 70 cf 29 d8 a4 c9 5d f6 ef bf b0 36 da d5 b8 d5 83 5f 7d e5 89 07 0f fe 07 57 af be d0 f0 aa 22 11 6e 6e 40 f7 ee 82 5e 5e b2 ad 69 18 0a 0a 2c 70 f3 e6 18 4e 9e dc b7 c1 69 b1 5f bf 0f 08 94 49 af b5 b5 65 70 30 f9 f9 e7 64 7c 3c 79 e3 06 59 Data Ascii: %W7Fgp;7oqcbCo::dt^:vKq1 `?2_~lLkHo!gGkxB>tuM4bPS~@g7#p)]6_}W"nn@^^i,pNi_Iep0d\|<yY
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 45 c0 27 9f 28 bb d8 ee fb ef 81 7b f7 c4 bd 8c 56 7c f1 a2 13 52 52 5a 82 ff fd af 1b 81 72 c5 6b 58 42 82 76 da 2d 38 58 3f 2d b8 22 8a 8b c9 7d fb c8 77 de 51 ae 8c d7 af 8b bc af 5f 57 be 05 03 e4 77 df f5 53 23 29 c9 13 32 62 56 76 7b 18 6f e4 c6 0d d1 31 d2 37 1a 35 02 42 42 80 19 33 80 b8 38 60 f2 64 fd e7 99 9a 2a 5c 6d 6b 2b 9e 56 4a 23 31 b1 9d 1a c9 c9 6d 15 cf 38 24 44 2c 70 2b 2b 03 8e 1d 53 36 6f 3b 3b 60 f8 70 60 ee 5c 60 fb 76 60 b0 1e 63 9e ec de 0d 3c 78 20 ee e7 cd d3 5f 3e 55 21 3d bd 8d 1a 19 19 ee 8a 67 ac f9 1c 2a 2b 13 4e 90 01 0f 0f 21 f4 c7 1f 03 1b 36 88 d1 27 5d e3 e3 8f c5 2a 4e 00 e8 27 61 a0 f0 ca 15 17 35 2e 5c 70 55 3c 63 df 87 41 57 cb cb 81 ad 5b 15 cf fe 11 8c 8d 01 6f 6f 60 cc 18 e0 9f ff 14 9d 31 5d 43 f3 b9 d4 fe f1 Data Ascii: E'({V\|RRZrkXBv-8X?-"}wQ_WwS#)2bVv{o175BB38`d\mk+VJ#1m8$D,p++S6o;;`p`\`v`c<x _>U!=g+N!6']*N'a5.\pU<cAW[oo`1]C
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 88 55 31 2a 4a 0c 68 90 e4 83 07 a2 ff 20 3b d4 f0 9c 39 33 79 fc b8 e9 63 02 03 00 c7 8c 71 a7 af ef 09 a9 06 0e 1b 26 62 3f 6a 7a d6 e9 e9 e4 82 05 f2 c5 fc 23 a7 4c d1 b6 dc f2 72 11 28 75 e2 44 b9 36 39 3a e6 70 e6 cc aa 8f 89 67 5c 5c 63 4e 98 f0 ae 74 e7 8d 19 23 62 3f 6a 5a f2 95 2b e4 da b5 f2 45 d5 70 c9 12 ed 3b f7 c1 03 d1 8a df 7c 53 be 5d 63 c6 6c e6 c2 85 d5 9f a7 c4 09 13 02 e8 ec 2c ff f8 ba e1 c3 45 ec 47 4d 68 fd bc 3c d1 b2 fd fc e4 da 15 17 a7 8d 5f 7d ff be 08 2f 2c bb e5 0a 96 70 c2 84 51 24 ab d5 17 5c b1 c2 96 a3 46 7d 69 00 06 93 fe fe 22 b4 be 26 7e 65 79 b9 68 39 9f 7e aa bc 2d 73 e6 88 3e 81 a6 c2 95 94 88 a8 b8 e1 e1 f2 fd 04 90 a1 a1 fb 39 7d 7a eb ea d5 d5 88 1c 1e 3e 92 76 76 b9 d2 8d 06 c4 21 18 8b 17 57 0e 30 96 9b 4b 26 Data Ascii: U1*Jh ;93ycq&b?jz#Lr(uD69:pg\\cNt#b?jZ+Ep;\|S]cl,EGMh<_}/,pQ$\F}i"&~eyh9~-s>9}z>vv!W0K&
2024-05-27 22:43:49 UTC	218	IN	Data Raw: 47 14 17 bf 88 84 84 50 24 24 f4 41 4e 8e 9c 0e 4b e3 c6 05 f0 f7 ff 15 7e 7e fb 60 67 77 04 7b f6 64 62 c9 92 42 95 af 6f 69 cd 3f 96 03 83 16 b8 22 48 aa f1 ca 2b a6 70 75 35 83 97 57 67 9c 3f df 0b 09 09 2f 22 31 b1 23 2e 5e 74 d6 4b a6 f6 f6 39 f0 f2 3a 07 5f df df d0 a1 c3 51 94 95 9d c0 e6 cd 05 58 bd ba 54 e5 ed 2d f7 48 b3 5a e2 89 11 b8 2a 90 54 23 39 b9 25 92 92 3c 90 98 d8 16 69 69 6d 90 95 e5 8a ab 57 ed 51 58 68 8b bc 3c 2b 14 15 99 01 30 85 f6 9c 46 02 28 45 a3 46 c5 b0 b6 2e 84 a5 e5 2d bc f0 c2 35 38 3b 5f 84 87 47 3a da b5 4b 45 87 0e e7 d1 b9 f3 45 43 79 97 d6 17 ff 0f a4 9b 0d e2 ff ff 7a 3e 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: GP$$ANK~~`gw{dbBoi?"H+pu5Wg?/"1#.^tK9:_QXT-HZ*T#9%<iimWQXh<+0F(EF.-58;_G:KEECyz>IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50388	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	566	OUT	GET /cYinAwcg0UYHuljAGk0_ZbSq_FJb2iMU2TTPM0Y7ORjDNMDPH1ltJbX6573rHuHu6poQ796iQ8t3s-6PmfexI4qRBNs7ruEpWAmVeBLzeJWkFgd0ar0=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:49 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5805 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:12 GMT Expires: Tue, 28 May 2024 21:14:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5377 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 64 49 44 41 54 78 9c ed 9d 79 98 15 d5 99 ff 3f ef a9 aa 7b 6f 2f 34 4b b3 2f 82 80 28 8c 60 04 64 13 e4 a7 82 1b 1a 89 cb 38 2e 93 49 c6 38 eb 33 f9 65 fc 25 a2 18 e3 38 6e 41 74 9c 68 1c 27 93 38 4f 36 b3 99 98 c4 b8 a0 a0 71 8b 6c 46 45 d4 44 11 50 44 96 66 ed f5 2e 55 75 de df 1f 0d da b4 dd 74 df ee 5b f7 de c6 fb 79 9e 7e ba 9f ae aa f3 be 55 df 3a a7 ce f2 9e 73 a0 44 89 12 25 4a 14 29 52 68 07 72 88 01 2a f8 dc fc 32 4d 35 24 b0 c4 31 36 86 35 2e c6 ba 20 06 44 b0 80 aa 45 d4 22 26 c4 d8 00 c4 27 b4 e9 9f 9e 3d 2f 75 d9 57 6e 4b 01 8d 40 50 d8 db c9 0d 3d 59 e0 2a 3d 6b 66 7f ac 56 63 a8 06 46 Data Ascii: PNGIHDRxx9d6sBIT\|ddIDATxy?{o/4K/(`d8.I83e%8nAth'8O6qlFEDPDf.Uut[y~U:sD%J)Rhr2M5$165. DE"&'=/uWnK@P=Y=kfVcF
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 6e f7 83 05 9e 94 c4 6d 8d 11 48 86 36 1c 1e 8b 7f 07 db 78 a3 2c 5f b7 3b 12 3b 11 a4 29 7a c6 d4 e9 c4 dd ff de e9 87 25 71 db c1 2a 24 8c 71 6a fc cc e5 38 f1 f3 a2 b2 e3 e6 38 3d d1 79 d3 e7 20 7c 73 57 10 cc 34 d2 73 3b 2d f2 41 0c ea ab 1c f7 3e 59 b6 ea 37 51 d9 c8 65 11 2d 3a 6f e6 1c 1c ee d8 15 04 d3 73 98 ee 11 49 1c ea ab 8c 73 af 2c 5f 75 07 50 1b 95 9d 9c e5 60 3d 63 ea 34 c4 de be 2b b0 25 71 3b c0 83 c6 7c 88 0b 39 fa 06 eb dc a9 c7 81 bb 64 57 10 ce ca 45 7a 47 32 8e 6a aa 8f 31 77 cb f2 55 4b 88 58 5c c8 81 c0 2b fe f9 b8 6a 12 ce 9d 3b 83 60 6e 11 8c 5d 14 35 61 a8 b6 9f e3 2e 91 e5 ab ef 00 ea f2 61 b3 db 45 f4 e9 1b 7a df b5 2d 08 16 c4 8a bc b6 dc fa d5 cb a7 af 07 47 99 86 78 ce 8d b2 7c d5 dd 34 07 f5 e5 85 6e 09 ac 67 cd 58 bc 35 Data Ascii: nmH6x,_;;)z%q*$qj88=y \|sW4s;-A>Y7Qe-:osIs,_uP`=c4+%q;\|9dWEzG2j1wUKX\+j;`n]5a.aEz-Gx\|4ngX5
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: ee dd eb fb f7 77 3d f1 12 d9 f0 89 2e 0a 5d cd 30 7c f3 45 55 19 db ed 3e 2a 6b 70 fb 37 e1 8e d8 87 cd 54 a0 bb 3d 02 ab 8c 7d fe d5 4b 81 7d dd 4d be 44 c7 7c 32 07 37 b9 d5 c9 8c 4c c8 95 01 0d 1c 9c ea 90 ca 33 de 26 31 67 3f 99 aa d4 16 60 63 ae d2 2f 71 78 da ea 8b ae f6 7d 8e 8a e5 72 de a1 15 88 1b 2a 66 6f a2 72 aa f7 6d 22 9b 4b d7 31 f3 97 ea 67 c9 5d 70 5e a1 11 a0 d6 71 78 73 d9 d5 b2 bf ad 13 5a cb e8 00 47 55 94 09 1d b6 7f b3 f6 44 a8 6f 32 54 f5 4a ff 3c b7 29 67 47 98 69 3c 72 da dd 22 a8 0d 3f b0 b1 5e 5f a2 9d 15 7c 5a 17 d1 e5 a0 a3 a3 a8 de 8a 40 dc b5 2f 93 91 48 66 b2 7f 5a b1 36 ac b2 d0 b7 bd e3 ad 04 ae 28 03 46 44 35 87 2c 1e 33 cf cb 7c 2d 0d 28 e4 0a 55 04 ed ed 08 d5 ed 9d 72 88 c0 fa 74 32 81 32 2c 1a 67 00 58 c3 91 f3 fd Data Ascii: w=.]0\|EU>kp7T=}K}MD\|27L3&1g?`c/qx}rform"K1g]p^qxsZGUDo2TJ<)gGi<r"?^_\|Z@/HfZ6(FD5,3\|-(Urt22,gX
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 6c 0a fb f1 ab c6 99 5c d5 30 8a 6a 8d 53 de dd 48 58 05 f5 b5 62 d7 ef 36 fe f3 b9 ba f8 af 3b f2 a9 07 50 7e da 52 fd 9a cd 24 4f 92 48 06 ce 04 55 52 56 f9 23 9d 58 c2 b8 a3 87 19 12 ea b2 72 4f df 15 f1 79 35 3d 86 ff 69 98 c4 9d a9 c1 f4 c3 b4 d9 04 ea 2a 61 63 30 78 d7 e3 9b bf 7e ae 5e 7f 51 ce 12 cd 3f 72 ea 37 f5 2a 03 97 a3 36 1e c9 3c 3b 01 27 5e b9 c5 d4 3d f4 64 27 4f ef 90 98 be 1a ff df df bd 37 e1 f2 5f 06 83 59 1b 96 53 46 34 d9 4c ad e2 f6 89 bf d3 ff ec d1 df 78 4c 6e fd 05 3d 6c 26 e2 69 77 e8 e7 45 b8 45 d3 0d 23 22 09 4d 05 d4 06 38 b1 de bf 59 b1 48 2e a4 13 2b f3 76 46 a7 0c 15 e9 9f de 5f 3e f6 fd d7 6c 05 e5 9d bc a8 2b 88 11 82 da f4 b8 dd 8f 6d fc e6 39 ba f8 0b f4 a0 6f f2 e9 4b f5 72 23 fc 9b 4d d7 47 26 2e 08 4e a2 f7 6e 94 Data Ascii: l\0jSHXb6;P~R$OHURV#XrOy5=iac0x~^Q?r76<;'^=d'O7_YSF4LxLn=l&iwEE#"M8YH.+vF_>l+m9oKr#MG&.Nn
2024-05-27 22:43:49 UTC	776	IN	Data Raw: 47 34 a1 f2 8e 45 c4 85 c6 63 1b 06 0f be f9 e6 57 cf e1 9e ad 48 ce 97 b0 8a 34 7b 5d a9 ff da 77 c3 1b c9 3b 1a 5e db 71 a5 89 b9 b9 df e9 a3 07 23 46 50 b5 7b fa 5f 94 58 bc cc f9 c9 77 89 28 0b e4 a5 fc 3c f9 f7 57 7c 35 b5 ad f1 56 e3 3a b1 82 f5 5d 17 13 02 ea c8 87 c9 f5 f5 5f 7a eb a6 27 97 45 6c 2a 6f 4c 39 e9 77 17 fd 44 1b ec b8 4f 73 5b 59 ad 12 1f 58 f6 c2 4b f3 1e fc 2b 0e 33 ed 33 57 e4 fb 49 3b d3 9f b8 e4 81 b0 21 b8 a4 10 e3 c9 85 46 3c a9 f3 fa 95 fd cf 4b a7 fe e8 6b 79 b3 99 2f 43 ad 58 30 e3 b1 4b ef 09 ea 33 c3 91 ac a6 33 f5 3c 04 b0 1a c4 06 94 fd e9 a5 79 0f 5e 0d e4 a4 03 23 1b f3 85 a2 7c ce ea 2f de 12 d6 fa 17 a6 6a 1a 87 1b cf 98 23 4a 68 01 f5 2d f1 81 15 5b 4c 85 f3 9b 17 4f fe c1 bf d2 c9 50 d7 1c bb 51 58 c6 78 43 a6 8c Data Ascii: G4EcWH4{]w;^q#FP{_Xw(<W\|5V:]_z'El*oL9wDOs[YXK+33WI;!F<Kky/CX0K33<y^#\|/j#Jh-[LOPQXxC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50385	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	554	OUT	GET /tvQvvubDZ2r6Ou8zxkVzkIvddC1snCCq4xD4dhafjAJhHLDsEvHDEUms9RyVH_g-nI_8yTyeahZshZqwMV0NdHxD-K9v-Zbm4DF2vds=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:49 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1166 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:58:14 GMT Expires: Tue, 28 May 2024 19:58:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 9935 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 04 45 49 44 41 54 78 9c ed dc cd 6b 5c 55 18 c7 f1 ef bd 99 17 4c 9b 40 6c 43 e8 44 82 29 05 c5 be 2d 04 a1 f1 05 5f a0 41 0b ae 52 ec d6 95 6e d4 85 6e 55 da 55 17 15 8a 0b b1 7f 83 d1 85 8b 4a 15 51 84 2a d4 5d 6c 17 0a b1 36 d4 c4 42 34 48 08 98 66 e6 1e 17 85 20 d8 b4 bd 93 7b ee 39 e7 e9 ef 03 ed 26 cc 33 87 7c 49 ee 93 b9 93 80 88 88 88 88 54 2e f3 fe 0c b3 d3 c7 81 b7 80 27 bd 3f 57 d5 b2 0c 56 d6 d6 f8 71 fe 61 ce 2d 2e 87 3e 4e 3f fc 05 fe f4 e8 04 2e 3b 0f ec f7 f6 1c be 65 19 2c af c2 1f 7f df 80 fc 00 ef cf 25 17 39 f7 32 f5 b3 e9 49 5c 76 95 94 e3 6e ca 00 c6 c8 dd 3c 27 0f 0f 85 3e 4d 59 7e Data Ascii: PNGIHDRxx9d6sBIT\|dEIDATxk\UL@lCD)-_ARnnUUJQ*]l6B4Hf {9&3\|IT.'?WVqa-.>N?.;e,%92I\vn<'>MY~
2024-05-27 22:43:49 UTC	307	IN	Data Raw: 02 eb 76 61 ff 92 08 ac db 85 fd d3 35 d8 38 05 36 4e 81 8d 53 60 e3 14 d8 b8 24 b6 68 dd 2e ec 5f 12 81 75 bb b0 7f 49 04 d6 ed c2 fe e9 1a 6c 9c 02 1b a7 c0 c6 29 b0 71 f1 2c 59 03 1d fe 5a 5b 61 bd 9b c6 8f 1f 5b 69 37 da e5 ef 7a 79 14 4f e0 d6 41 76 7d 7e 20 f4 29 aa d1 3a 18 fa 04 9b e2 09 0c 51 7d 62 ac d0 35 d8 38 05 36 4e 81 8d 53 60 e3 14 d8 38 05 36 4e 81 8d 53 60 e3 14 d8 38 05 36 4e 81 8d 53 60 e3 14 d8 38 05 36 4e 81 8d 53 60 e3 14 d8 38 05 36 4e 81 8d 53 60 e3 14 d8 38 05 36 4e 81 8d f3 11 f8 7b 0f 33 ef 17 3f 54 3d b0 fa c0 8e b3 95 cf bc 5f 38 3e ac 7a 64 d9 bf e2 77 6f 66 a7 af 00 8f 79 99 6d d7 cf cc 5c 78 b4 ea a1 9e ae c1 c5 4b 40 e1 67 b6 49 05 3d f7 a2 8f c1 7e 02 cf 7c 75 8d c2 ed 03 7e f1 32 df 96 2b f4 dc 5e 5e f9 f2 aa 8f e1 7e Data Ascii: va586NS`$h._uIl)q,YZ[a[i7zyOAv}~ ):Q}b586NS`86NS`86NS`86NS`86NS`86N{3?T=_8>zdwofym\xK@gI=~\|u~2+^^~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50386	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	553	OUT	GET /mjVS_Izc6fGAvuaT0v--gb2so5mZvAbI5EUMUB41cWB7tpy81trBCR8rIlj8NoKgPzDWGN-Hs97NlW0T9W57YJ5z9A8QQWwXUYa_Zg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:49 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1651 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:12 GMT Expires: Tue, 28 May 2024 21:14:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 5377 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 02 5b 50 4c 54 45 00 00 00 7b 89 cb 6b 78 c6 64 73 c4 84 91 d0 80 bf bf 6d 7a c8 9a a3 d7 68 75 c5 a2 ac d9 78 82 cd a3 aa da 5d 6c c0 9f a6 d7 54 65 be 9b a1 d2 99 9f cf 98 9e cf 98 9e d2 96 9d d1 91 9b cf 8d 95 d0 7d 87 cb 43 54 b6 3f 51 b4 43 55 b5 3e 50 b3 4a 55 b5 41 4d b2 40 51 b1 3a 4e af 00 80 80 41 4f b0 3c 4a af 47 51 b3 3e 4f b0 40 50 b2 3b 4c b0 3a 4b ae 3e 4a b0 63 71 c3 62 71 c2 62 70 c2 61 70 c2 60 6f c2 60 6e c1 5f 6e c1 5e 6d c1 5e 6c c0 57 66 be 52 62 bc 51 61 bc 50 61 bc 50 60 bb 4f 5f bb 4e 5f bb 4d 5e bb 4d 5d ba 4c 5d ba 4c 5d b9 a5 ad dc 53 63 bd 4c 5c ba 54 65 bd 4b 5c b9 53 63 bc 4a 5a b8 a4 ad dc 4b 5b ba a4 ac dc 4b 5c ba a0 Data Ascii: PNGIHDR``F[PLTE{kxdsmzhux]lTe}CT?QCU>PJUAM@Q:NAO<JGQ>O@P;L:K>Jcqbqbpap`o`n_n^m^lWfRbQaPaP`O_N_M^M]L]L]ScL\TeK\ScJZK[K\
2024-05-27 22:43:49 UTC	792	IN	Data Raw: cd ed 1f 1f 2a 9c 40 4d 51 6f 58 68 28 08 ad c2 1a 0a 04 11 22 19 88 c4 b0 58 da 81 44 25 ad 4d 86 b9 e3 a3 83 4d 3a 20 c2 57 d1 06 12 77 2c 36 2f d9 4b 00 ee 58 2a 16 c4 08 5f 25 d3 d2 c3 52 b3 0e c2 f4 d3 1e 39 1f 0e f8 09 9a ed 52 d2 19 bc c0 ec d2 34 20 d7 ea bb 96 cc 16 d5 9c c7 2a 49 3b 02 68 8f 1b 3e 38 50 dc 01 a1 8f c1 f4 e8 63 c9 18 12 be 04 ad 82 d5 9c 16 c7 07 c8 c0 83 cb 65 82 50 fe 60 80 2a e7 b3 f5 fd 0f 9c 75 e6 82 88 60 32 bf 9b c9 79 69 59 78 f7 9f 6d 2f 3d f7 30 16 b5 4c 03 99 f9 53 f4 d6 5a 11 fd 41 03 e2 a7 bc e8 4a 56 bc f2 81 c3 b4 77 9f 3b 1d 31 3a 5c 44 6c 25 44 60 f1 ca cf c0 fc 6a ef e4 b1 2b 22 82 ad 34 94 44 88 c0 d2 09 50 3e 87 e7 4f 56 b9 1b 71 72 0a 60 38 49 c1 79 a0 78 a6 19 e6 30 dd 6b 58 69 b7 03 62 0b 20 05 04 4e 20 78 Data Ascii: @MQoXh("XD%MM: Ww,6/KX_%R9R4 I;h>8PceP`u`2yiYxm/=0LSZAJVw;1:\Dl%D`j+"4DP>OVqr`8Iyx0kXib N x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50390	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:49 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:49 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:49 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50389	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	554	OUT	GET /aD5GNhlaU2d70gmSy5ioL1dMSUZN9cHDWPLkIBLhCsJ-BgcGUm-PD6o8XExZcx1i2iZV6PH0P8v3ceg0x7Tzd_OZ5FV0nXs5mX15sgA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:49 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 946 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:15:25 GMT Expires: Tue, 28 May 2024 21:15:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 5304 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 03 69 49 44 41 54 78 9c ed dc 3d 8f 8c 51 18 c6 f1 ff 33 6b 25 de b6 b2 56 b1 11 44 42 d0 b3 11 ca 4d e8 25 fb 0d 68 50 e8 15 12 89 82 04 15 df 41 8d 4c 29 41 27 12 8b 10 82 44 e3 5d 08 05 33 73 14 36 d1 88 dd 35 e7 7e ce 99 cb f5 4b a6 bd e7 ec fe 33 f3 dc bb 99 79 c0 cc cc cc cc b2 6b a2 9f 20 75 39 0c 9c 00 f6 45 3f 57 76 0d f0 89 af 3c 62 73 73 8a 77 a5 8f f3 2f c2 02 a7 1b 6c a2 c3 35 60 57 d4 73 84 6b 80 f7 c0 5b 5e 33 ce ee e6 e8 e8 45 0e 09 9c 6e b0 85 0e 4f 81 4e c4 fc d6 34 c0 07 e0 0d d0 e1 33 2b 98 6e 8e f0 a5 f0 a9 96 25 26 40 87 eb 61 b3 cb 99 a0 c7 b3 74 99 a9 d2 07 59 8e ec 11 52 97 39 60 Data Ascii: PNGIHDRxx9d6sBIT\|diIDATx=Q3k%VDBM%hPAL)A'D]3s65~K3yk u9E?Wv<bssw/l5`Wsk[^3EnON43+n%&@atYR9`
2024-05-27 22:43:49 UTC	86	IN	Data Raw: ea 1a 7c 08 9d ef 0a b6 61 40 9f 83 11 83 43 02 37 b3 bc 24 b1 0d 78 12 31 5f cc 43 fa 6c 6d 0e f2 3c 62 78 f8 9d a7 52 97 39 e0 18 30 d3 c6 f3 8d 90 5b c0 85 66 96 ab a5 0f 62 66 66 66 66 cb f4 13 12 c3 c4 cc 9b d7 9a 43 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: \|a@C7$x1_Clm<bxR90[fbffffCIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50393	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:49 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:49 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:49 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50391	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	785	OUT	GET /KTDOhPuoj2uFXQzWV1UoktTwtuucLM49NAFS07-vtX8dCGhSjpxJwumzTuzI6qZyyqLdmZASs3ARnaI3gIae1MYIjaG57KsmUhit2g=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:49 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1112 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:30 GMT Expires: Tue, 28 May 2024 21:14:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 5359 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 04 0f 49 44 41 54 78 9c ed dd 3f 68 94 77 1c c7 f1 f7 93 36 ad 09 cd e4 22 14 b3 b9 38 24 20 5c 8b 06 07 41 37 15 83 44 0a 0e 9a c1 ad 2a 8e a2 76 88 5b 07 11 47 1d 02 22 5d 2a 81 82 2e 46 17 07 b5 56 d0 74 09 15 29 8a 06 07 1d fc 53 ae 49 5a f3 eb f0 e4 20 da e7 49 2e fa fc ee fb 3c df e7 f3 82 03 31 87 7c f0 9d 7b ee b9 3c b9 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 a4 5c 92 d5 dc 39 c0 1a a0 2f fd a3 18 48 80 b7 09 cc 16 f6 2f 06 e8 0a f0 63 80 d7 01 82 6e a5 b8 bd 5e 6c d2 d5 ce 67 c4 72 71 bf 01 7e 2d ec b3 45 62 f8 36 81 bb 79 1f cc 0d 1c 60 00 98 8a 32 49 8a 36 98 c0 ef 59 1f 58 2e 70 13 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx?hw6"8$ \A7Dv[G"].FVt)SIZ I.<1\|{<DDDDDDDDDDDDDDDD\9/H/cn^lgrq~-Eb6y`2I6YX.p
2024-05-27 22:43:49 UTC	253	IN	Data Raw: ce 29 b0 73 79 81 f5 1b be ab 27 b3 59 5e e0 3f 23 0e 91 38 32 9b e5 05 fe 29 e2 10 89 23 b3 59 de f5 e0 6e 60 3e ea 1c 29 da 17 49 7a 1d ff 3d 99 8f e0 c5 3b ee 89 3e 49 8a b2 27 2b 2e 2c 73 16 9d c0 2f e8 17 45 57 c1 e8 62 ab 4c 99 87 e8 a5 02 7c 0d 8c 03 fe de 99 55 6d 93 a4 71 67 96 bb d3 8a 81 5b 42 fa 68 6f 00 5f a1 97 51 56 12 e0 2f e0 b7 04 16 ac c7 88 88 88 48 be b6 4f b2 62 0a 30 02 fc 40 7a 22 57 f5 13 b8 84 f4 04 68 2c 81 9f ad c7 98 0b 30 14 d2 b7 8c 79 bc 99 bf 97 a6 0c 97 0b 3d bf 0d f0 3b eb 01 65 08 fc 87 f5 80 88 a6 ad 07 94 42 80 1b 25 38 9c 16 7d bb 61 fd ff 0a 25 39 c9 02 08 d0 07 ac c1 c7 49 d6 6c 02 6f ad 87 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 48 19 fd 07 b4 6d 4c d0 79 fa 9f c6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: )sy'Y^?#82)#Yn`>)Iz=;>I'+.,s/EWbL\|Umqg[Bho_QV/HOb0@z"Wh,0y=;eB%8}a%9IloHmLyIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50395	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:49 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:49 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:49 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50394	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	553	OUT	GET /vNgpLTvnDUr6-QM8s4OuuESGDXs_brbGoPR-7vfwdxQI7M4MVFV0CC_Hil4qRDSp4P66ik85fdv09jKn89kDAJVknIbd6wkl0zGQJQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:49 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4657 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:19:31 GMT Expires: Tue, 28 May 2024 21:19:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 5058 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 11 f8 49 44 41 54 78 01 ed 9d 7b 50 54 57 9e c7 5b 6b 1f fb cf 3c 76 33 b3 b5 b5 b5 7f ec 1f 5b d9 d9 9a cc ac 93 64 92 d9 98 44 46 45 24 46 a3 46 44 05 c4 07 c6 8c 0f a3 31 08 0a 62 23 0f e4 ad 08 4a 34 60 44 45 45 43 22 c6 c4 cc 18 41 41 e4 41 f3 16 23 08 88 22 c8 bb fb 76 93 cc 38 5b f3 db f3 bb e4 37 7b 69 2e 7d fa 5e 4e 47 8c 9c aa 6f 35 34 4d c7 fa 7c ee f9 9d c7 b9 4d 0c e3 b1 4d b4 89 36 d1 26 da 44 9b 68 97 4a a5 a7 5a da 7a 7d 7b 7a 7a e2 fa fa fa 72 d8 63 e9 c0 c0 40 8b c5 62 e9 34 9b cd 16 d6 1e b2 47 cc 00 cb 3d f6 fd 4d 96 52 f6 75 0e 4b b4 24 49 fe ec f1 39 00 98 6c 98 68 fc 96 cb 80 87 9f ed 9f bb e9 88 35 c5 ff a0 f5 fe d2 d4 af 21 31 Data Ascii: PNGIHDR``w8IDATx{PTW[k<v3[dDFE$FFD1b#J4`DEEC"AAA#"v8[7{i.}^NGo54M\|MM6&DhJZz}{zzrc@b4G=MRuK$I9lh5!1
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: c2 27 8f b4 27 bc 9b 35 b0 99 e0 bb 5e 80 7a 19 aa af af a7 32 84 02 b0 14 b9 5a 02 09 a0 d9 d7 07 8f 04 fe 8e ec be c5 8b a9 e6 73 e0 8b 13 40 8b 32 2a 43 f2 a2 4c 59 86 50 00 06 57 cb 28 c1 e5 02 30 56 ab 35 f2 3b 85 bf 2f b7 ff 19 ef fd 83 7f 51 87 ef ba 59 10 66 1e 4b 38 a7 0c a1 00 dc c2 26 09 2e 16 40 e5 68 d9 77 b6 c8 f2 39 30 d8 21 00 be 6e 01 ca 32 64 32 99 d4 ca 10 0a e0 48 10 2a 00 9f 37 e3 62 cd e5 33 9e d5 87 6d 79 0a b8 8e c1 0b 5c 09 2b 05 e0 7b f0 ca 10 09 c0 dc bd 7b 17 25 b8 54 00 06 b7 b6 5d 3a 33 7a 2f bb df 57 1d b4 48 f8 7c 01 ce 94 21 a5 00 1c 94 49 82 0b 05 50 29 4a 76 09 fc ec 7c e9 27 6c d0 fd a3 3e f8 e2 05 50 19 ba 7e fd ba 6a 19 b2 17 80 a1 72 e4 42 01 f8 f3 87 2c bf 12 2e 60 55 ba e5 34 41 e4 83 d7 07 1f c3 87 ef 54 19 52 11 Data Ascii: ''5^z2Zs@2CLYPW(0V5;/QYfK8&.@hw90!n2d2H7b3my\+{{%T]:3z/WH\|!IP)Jv\|'l>P~jrB,.`U4ATR
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 0c fe 2a d6 13 4c b5 f5 aa 02 a8 17 68 94 d0 c2 15 30 2f d1 72 97 40 68 15 60 6a 1c 59 7e 12 f2 24 87 e0 b7 65 db 20 f3 4b 89 9b 0c 45 56 be 6f 1b 15 fe 6b 71 d8 db 6c 90 75 ae 1c a8 0c d1 6d ec a9 c7 4e 53 2f 90 b3 25 66 3f dc 6a 6c 92 05 94 55 d5 40 c0 ce f8 61 02 b2 3e be 80 d0 1d 0a d0 28 a1 87 2b 60 6e bc f5 1b 25 20 2d 32 5a 3b 46 0a d8 92 45 2b 59 d5 20 5c cd 6b 83 88 b3 d6 51 e1 53 c2 15 65 a8 ba ba 5a 2e 43 37 1a 6e 32 e8 29 38 20 93 04 56 9a 4e 41 13 9b 25 bd 17 9f 36 0c 7e 70 62 3a b4 b4 b6 f2 05 68 93 f0 27 be 80 04 e9 6b 04 a3 27 3d bd 23 61 ad 39 64 13 2e 60 ef 05 ab 43 f8 18 df 34 8b 5c 86 e8 a3 ad 74 54 79 a5 b8 8c 95 22 ea 05 43 03 73 70 52 3a c1 97 13 b0 2b 0e 4a 4d d5 b8 1e 70 46 80 b3 e5 08 d7 10 7f e6 0b 88 b3 b4 ea 13 a0 ad 07 bc 8e Data Ascii: *Lh0/r@h`jY~$e KEVokqlumNS/%f?jlU@a>(+`n% -2Z;FE+Y \kQSeZ.C7n2)8 VNA%6~pb:h'k'=#a9d.`C4\tTy"CspR:+JMpF
2024-05-27 22:43:49 UTC	1018	IN	Data Raw: a4 d9 c6 de 7b 6c 1f 55 75 df fc fb a9 8f 33 78 82 4f 79 0d cb 50 9e f2 a4 4c 2e 43 34 1d 15 2a a0 be a1 21 80 38 8e b1 17 3c a8 73 31 70 0e 78 fd 57 bd 4a a8 0c e1 6c 88 ca 10 09 c0 08 11 70 bb b9 b9 ce 68 34 4e 36 88 68 6e 1b 2e 3c 3f 3b d6 2a 1c b6 78 f0 1c f8 98 18 1b 2c 49 f9 eb ed 8b 54 86 68 3a 2a 44 00 fe cc 54 5d bd d0 20 b2 79 18 6f 67 e9 80 28 1c ba 5e f0 04 1f 83 13 02 2c 43 8a 93 32 ba 8d 5d 84 00 94 59 68 10 dd 66 2c 8f 7e ca 33 c6 fc a7 47 03 9d c0 eb be ea ed 63 5f 86 e8 36 76 1a 07 f4 0a c0 df 79 c8 7a d4 8b 06 57 34 f7 f7 4a 7c 3d f7 58 45 03 17 0f 9e 03 5f a5 0c d1 e6 1c 4a d0 2b 00 1f 71 8b 63 a7 c1 85 6d 92 7b 58 73 ae 6e c8 e3 00 3c c6 9d c5 53 2e 43 15 54 86 70 73 4e b9 28 d3 23 80 fd 7e d3 97 34 f0 ba ac 4d 9d b7 ed 07 b3 22 bb 3b Data Ascii: {lUu3xOyPL.C4!8<s1pxWJlph4N6hn.<?;x,ITh:*DT] yog(^,C2]Yhf,~3Gc_6vyzW4J\|=XE_J+qcm{Xsn<S.CTpsN(#~4M";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50396	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	553	OUT	GET /QsFLnA2p7QlFCy4Rk-TH0XoaWFilCOzzt8FPO58nI_FXh5wQkjWEMpBKMkJxQJMZio9t6kDMpniv3WrWH7Slxe8BrbMvklg-Ht53iw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:49 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2180 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:36:33 GMT Expires: Tue, 28 May 2024 22:36:33 GMT Cache-Control: public, max-age=86400, no-transform Age: 436 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 06 00 00 00 55 ed b3 47 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 08 3e 49 44 41 54 78 01 ed 9c 79 6c 14 55 18 c0 bf 6f 66 0f ba e5 68 ab a0 ad 72 db 6e 40 e5 10 15 21 46 39 15 45 6e 51 d0 a8 18 51 82 06 82 0a 28 f5 5a 94 43 c4 a6 40 50 da 3f 90 3f 8c 51 02 44 41 09 1e 48 20 78 c7 58 2b 08 0a 28 d8 80 18 e8 52 e8 b1 db 6e 3b f3 fc de d2 85 99 e9 9e dd 37 53 34 f3 92 ed cc fb de f5 7d bf 7d ef ed f7 be 9d 2d 80 9d 6c 02 36 01 9b 80 4d c0 26 f0 5f 25 80 56 2a 9e f7 d4 81 1b 40 51 36 30 06 d7 03 b0 14 c7 46 de a0 1c 01 67 9c 28 bd ae dc 2a bd 25 ab 06 0a 8f 13 86 c3 fa a5 0e 87 b7 66 c8 80 0d 50 51 5d 6f a5 ce 96 02 3a 3f 73 d2 33 8f 28 11 60 eb 92 a5 80 5a 37 73 f4 30 68 9d a5 b8 Data Ascii: PNGIHDRHHUGsRGB>IDATxylUofhrn@!F9EnQQ(ZC@P??QDAH xX+(Rn;7S4}}-l6M&_%V@Q60Fg(%fPQ]o:?s3(`Z7s0h
2024-05-27 22:43:49 UTC	1320	IN	Data Raw: f2 63 97 9f cd 5e 1c a8 fa a2 aa 5d e7 41 f1 8c 31 a3 cc 32 40 b4 ef 6c 70 4c 85 ad 46 23 46 2e 0b dc fb 87 3f b0 82 f6 97 5e 7c 6b 0a 27 95 1f d7 b1 69 c4 b2 c0 2a b7 0c ab 83 0a fb 28 d8 06 70 b8 2e 96 ec 41 f4 69 d5 e0 ec 00 f3 cf 5b 7f f1 ef a8 a5 81 39 8c a9 9b 28 12 40 70 8c 89 39 80 a9 f3 1b 14 56 41 b3 ca f2 99 13 d1 c6 12 40 14 cf f9 04 c7 c0 99 c8 a0 fc 3a 7a 69 70 a4 0a ea 1a ad 2c ea 3d 85 51 a2 ca 2d 12 5a 02 48 46 f8 c0 68 8f 82 ea 52 a3 ec 52 cc 5b b2 07 29 0c 0e 6a 8d 1f fd 46 7d be d2 d8 34 58 2b 8b dc 23 48 d3 65 94 7f 8e e4 63 5d 15 6c ec c1 54 d8 11 ab 5c 94 dc 12 40 2e 27 54 68 15 66 aa d2 57 9b d7 de d3 6c 3b fa 79 a1 fb 37 ad 2c da fd c4 62 f6 4f 75 a0 2e 5a 91 50 99 e9 4b 2c ec 35 77 84 a0 56 6b a6 d2 47 79 9a 69 c0 3c a8 4e b3 8b Data Ascii: c^]A12@lpLF#F.?^\|k'i*(p.Ai[9(@p9VA@:zip,=Q-ZHFhRR[)jF}4X+#Hec]lT\@.'ThfWl;y7,bOu.ZPK,5wVkGyi<N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50401	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:49 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:49 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:49 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50397	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	786	OUT	GET /6cr6PdE9s0J1ovFNm38uf-dwcOP--68QMWey603BCUah-QcO0gL0TvyqmTBYIgNnJfk8AEgISH_xpw_zd8FNao0jA14Q5MQ7p-eeIto=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:49 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4888 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:39:26 GMT Expires: Tue, 28 May 2024 22:39:26 GMT Cache-Control: public, max-age=86400, no-transform Age: 263 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:49 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 12 64 49 44 41 54 78 9c ed 9d 7d 7c 5c 65 95 c7 bf e7 de 79 c9 5b d3 b4 cd a4 94 52 5a 05 c4 05 15 90 76 d2 17 2a d2 4c 5a 5a 28 2e 28 ca 07 45 5d 17 3e eb ea aa 2c f2 51 04 51 57 16 d4 55 56 45 fc 28 8b ac 6f 88 ba 1f f8 ac ae 20 2d 99 b4 85 b6 40 53 40 56 40 c0 ae ad a5 b4 4d 33 d3 24 6d Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2dIDATx}\|\ey[RZv*LZZ(.(E]>,QQWUVE(o -@S@V@M3$m
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: 14 17 bd 13 d5 0b fd f0 e7 09 b6 10 7a 53 2f d5 1f 7d 0e b5 3d d5 e4 45 31 22 97 87 56 f4 f8 d2 9b 8b de 83 d3 0d 8b ce 77 d5 dd 3e a9 c4 05 30 14 a7 2d 8a 7b c4 f4 ba 1b fc 8d 6a 66 93 bd 31 72 b1 a7 56 47 a1 a8 02 a7 12 f1 5b 5d d8 04 cc 28 a6 9f a2 20 a0 7d e0 74 54 83 14 7e 99 1e 82 52 ab 8e fb 3b 3b 19 fa aa 6e 98 53 54 0d 8a 72 3f 48 ad 39 2f 4c a6 ff fb aa 7a 4d 31 ec fb 86 03 6a e5 36 d5 9d 0f 0a 37 db 9a 3e 4b 9b eb 2e 93 86 36 a7 18 3e 3c ff eb e9 b8 b8 71 a6 f6 67 7e af ca e4 16 57 18 18 3d bb 45 be 8b a9 5e e2 68 c7 26 dd 5a 55 56 0c f3 9e 46 df bd 76 59 8d d5 db f9 47 d0 84 97 76 03 41 01 43 91 90 ed 83 2b 3d cf e9 eb db a8 1b 23 27 78 6d db 33 81 bb 56 2f ad ee e9 b1 92 c0 5c af 6c 06 4e 18 a4 a2 a7 e0 e7 e0 5c 50 65 b1 e3 ba 8f ea e3 a6 a7 Data Ascii: zS/}=E1"Vw>0-{jf1rVG[]( }tT~R;;nSTr?H9/LzM1j67>K.6><qg~W=E^h&ZUVFvYGvAC+=#'xm3V/\lN\Pe
2024-05-27 22:43:49 UTC	1390	IN	Data Raw: e7 12 c0 da 22 81 0d b1 64 4b 29 cd 79 e7 8d d9 60 ad 17 f0 fd 36 a3 ca a2 6c c7 87 0a 2c bc d3 97 68 86 21 86 7c 3d 08 bf 45 43 8c 2f 05 e1 d6 de 10 1d 31 6d 39 54 60 d5 b8 6f d1 bc 8e fc 35 64 96 97 e2 fb e6 bc 31 d1 24 b0 d7 6f bf a2 ee 88 0e 3a 4c 60 c9 da cd 8b cc 4f 6a d6 3d 9a 09 c0 6f d1 90 06 eb 00 22 ff e3 b7 5f 17 19 91 85 32 44 60 45 4f f4 2f 1c 00 5c 31 64 a3 cf 3e 7d c1 40 ee f7 db a7 a8 9e 3c 32 8e d7 48 af 5c 3c 07 88 fa 1b 91 74 4e 2c 87 6a 12 11 99 ff 24 30 6e 4a 8d 97 28 5a a7 cd a1 21 a5 20 5e 17 58 d5 99 83 cf 19 85 a2 3c 3d fe 59 93 13 83 1d bd 02 4f fa ec b6 4e a1 7a 68 1c af a1 ae 31 93 09 14 4a f6 04 09 6c 52 a0 e8 c8 72 14 91 e7 7d 76 5b e3 0e 9b 66 7e 5d 60 11 9d 8d 87 35 3b 72 41 84 67 fc f4 e7 3b ca 9f 7c f6 58 ad 2a e5 83 0f Data Ascii: "dK)y`6l,h!\|=EC/1m9T`o5d1$o:L`Oj=o"_2D`EO/\1d>}@<2H\<tN,j$0nJ(Z! ^X<=YONzh1JlRr}v[f~]`5;rAg;\|X*
2024-05-27 22:43:49 UTC	1248	IN	Data Raw: 31 2c 0e 64 4e e4 a6 97 be 43 a7 55 87 31 8a c8 79 95 4d aa 4d 6e 6f 11 c3 08 74 b7 91 22 22 aa fa c3 d6 8b ce f3 ac 66 89 69 c2 dd 7f fd 4f d6 1f 3e 85 1a 0f c4 3d 4a 85 38 b4 74 9f c6 7d bb 7f 81 03 48 96 44 9c bc eb 62 c5 9a b6 dd 2f c2 2d 85 04 58 ca 98 fd 19 4f 72 d3 42 62 f3 c2 a1 b5 7c 6e ff 6a 66 19 de cf bf d4 99 16 77 b6 d5 f3 4c fb cd 18 e2 a1 c0 00 b5 9f 58 f6 25 01 5f 1f 31 fc 42 55 2f 4b 5d 58 7f 76 21 36 42 46 86 1e 07 7e b3 f7 46 ea c3 c5 29 a0 20 28 b3 24 cc f7 76 5f 81 c8 c0 ed 60 30 05 09 2c 97 7d 07 33 5a 73 25 c8 31 f8 e8 84 60 17 b8 bd 90 01 07 7a 3f c5 3d ed 6f a3 22 4b ef f2 8a a8 38 3c d0 f5 56 5e 38 bc 10 73 58 ad a4 82 4b 17 ce fc 7d 53 c6 94 d0 f9 20 7e 17 de 2c 3a aa fa c1 82 0c 84 e1 b1 f6 b3 98 49 24 af 11 f3 44 38 dd b4 78 Data Ascii: 1,dNCU1yMMnot""fiO>=J8t}HDb/-XOrBb\|njfwLX%_1BU/K]Xv!6BF~F) ($v_`0,}3Zs%1`z?=o"K8<V^8sXK}S ~,:I$D8x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50403	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:50 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:49 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:50 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50399	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	785	OUT	GET /kSVhJx6xNAhqot_OjnzSAp8kyKtL9nW65nqObijdjYcNfqDn4bLx-1g_1h4rz0maXRwJp6K4AEDCQi8dOg_tn_Y80R3NjNXbUN6Hag=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:50 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3695 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:18:16 GMT Expires: Tue, 28 May 2024 19:18:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 12333 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0e 26 49 44 41 54 78 9c ed 9d 79 90 5c 45 1d c7 3f 6f e6 bd bd 32 b9 13 8e 84 10 12 c3 51 21 1c 85 8b a1 24 92 f0 18 05 01 8b 63 c5 ac 72 28 5a 8a 68 11 c5 83 c3 91 50 62 8d 81 92 2a 01 05 c5 14 28 28 71 35 ac 80 01 83 71 1c 11 42 2c 60 03 81 00 51 e4 3e 12 8e 10 48 f6 25 7b bc 37 f3 fc a3 27 45 b2 99 9d 99 d7 af df b1 d4 fb 54 6d 6d d5 ce 74 f7 6f e6 bb dd af bb 7f bf fe 35 24 24 24 24 24 24 24 44 81 16 b5 01 41 62 17 f4 16 60 32 a0 0f 79 c9 05 de 03 b6 1a 59 27 74 bb c2 e4 43 27 b0 5d d0 c7 02 b3 81 99 c0 0c e0 08 a0 0d 21 ea 4e ca c0 73 c0 0b c0 f3 c0 73 46 d6 79 25 64 53 43 e1 43 23 b0 5d d0 a7 00 f3 Data Ascii: PNGIHDRxx9d6sBIT\|d&IDATxy\E?o2Q!$cr(ZhPb*((q5qB,`Q>H%{7'ETmmto5$$$$$$$DAb`2yY'tC']!NssFy%dSCC#]
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 98 02 34 03 bd c0 26 e0 6d e0 59 e0 bf 88 5d b3 27 8b b9 8c 2d db 6e 94 02 9f 0d fc 3e aa f6 1b 60 07 f0 59 60 a5 df 33 c4 66 de 3a 15 b1 0c 3c 19 21 6e 23 8f c6 32 f0 24 b0 b2 f2 f3 70 31 97 71 6b 17 d9 93 48 04 ae 1c 1a 7b 06 98 16 45 fb 0d f2 6b e0 52 23 eb bc 2f 5b 81 99 b7 e6 20 66 df 5f 02 fc c4 72 3d 0d dc 0b dc 51 cc 65 9e f6 52 30 aa 49 d6 15 c4 5b dc 17 81 db 7c 8a bb 10 f8 39 70 39 fe c4 05 98 03 5c 06 5c 6f e6 ad d3 bc 14 0c 5d 60 bb a0 1f 84 88 d4 88 33 b7 00 4f c8 16 36 f3 d6 b9 88 a5 df 02 55 06 ed ac 1a b8 b6 52 7f 43 44 d1 83 af 27 3e 11 92 d5 58 0d dc 6b 64 9d 3e 99 c2 95 2f ff 2a 82 8b fc 98 05 5c 65 e6 ad f3 1a 79 73 a8 02 db 05 fd 2c 44 9a 85 b8 d2 0b dc 6e 64 9d a7 64 0a 57 86 cf c5 c0 01 2a 8d aa c2 01 c0 a5 66 de 3a b1 de 1b 43 13 Data Ascii: 4&mY]'-n>`Y`3f:<!n#2$p1qkH{EkR#/[ f_r=QeR0I[\|9p9\\o]`3O6URCD'>Xkd>/\eys,DnddWf:C
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 2c 2e 9b 5c 83 a5 7d 53 b0 5d 38 b9 75 1d 13 e4 44 7e 02 b8 43 66 59 54 49 ab 70 16 70 b8 d7 b2 21 f2 10 1e af f7 69 58 e0 db 56 cc 38 b3 6b c7 ac 33 1f b6 c7 e8 ad a8 4f e2 dc 82 cb 3b ae ce 6f fa 45 84 ed c9 ad eb 18 9f 72 28 37 2e f2 76 e0 4e 1f d9 70 e6 21 f2 64 c6 f5 b2 b0 f7 80 c5 c5 5c a6 e4 a5 50 43 df de 8d 2b a6 ee b5 aa ff a0 0b 1f b6 47 ef 3d 48 70 19 ba 9b 71 d9 ec ea dc d4 37 95 9e 81 39 f4 53 f6 f2 6d af 45 ec 19 7b c6 cc 5b 53 11 41 74 71 5d 16 01 dc 5a cc 65 3c 07 e7 37 24 f0 83 03 b3 bf f3 7a b9 e5 78 1b 2d f0 1d f7 66 5c b6 91 e6 97 fd fb b0 c9 99 49 5a 6b c8 39 ff 16 c2 d7 2b 9b cb d9 44 84 e2 c4 95 cd 88 5d 35 cf d4 d5 eb 5b 77 cd 3d 66 4b a9 f5 a4 ed ae 9e 0e 6b ec 6a c3 65 7d a9 8d 65 7d fb f2 56 69 2c a9 3a b3 73 44 36 9c 3f c8 b4 Data Ascii: ,.\}S]8uD~CfYTIpp!iXV8k3O;oEr(7.vNp!d\PC+G=Hpq79SmE{[SAtq]Ze<7$zx-f\IZk9+D]5[w=fKkje}e}Vi,:sD6?
2024-05-27 22:43:50 UTC	57	IN	Data Raw: 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 44 c3 ff 01 b8 a8 e1 8c 25 1b 39 52 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$D%9RIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50400	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	786	OUT	GET /oLcLMz42MUjK9Iv4M4YSOfBIHcxUh9dck3PN8kT8FR_z9_mUlWzyf4JHqPavPsKHJ7FR2rlGZf51vgEv1k5i0QQai4_J0ffYkIFbaJA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:50 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2002 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:01:22 GMT Expires: Tue, 28 May 2024 19:01:22 GMT Cache-Control: public, max-age=86400, no-transform Age: 13347 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 07 89 49 44 41 54 78 9c ed dd 6b cc 1c 55 19 c0 f1 df 8b d0 45 4a 6b 69 01 b1 30 81 00 81 00 11 a8 62 44 23 44 25 f1 92 18 34 e2 fa c1 a0 91 a8 58 24 c6 5a 07 88 10 54 fc a0 a2 63 a2 12 13 83 1a 63 22 89 b8 60 40 43 50 41 54 50 84 70 11 9a 6a 20 dc 0c d3 42 8a b5 5e a0 d8 45 4a fd 70 16 78 d5 c2 ce ec ce 4c bb a7 e7 9f bc d9 e4 dd 73 79 76 ff 7b ce 9e b9 ec 73 48 24 12 89 44 22 b1 23 98 db d1 01 ec 6a 0c 07 16 60 7f 2c c3 82 79 4f cd e1 71 6c ea f5 6d 68 aa bf 24 b8 23 86 03 0b 71 22 5e 8b e3 70 34 16 63 db a8 c8 6e 28 71 2f 6e c6 1d b8 ab d7 7f ee f9 89 48 82 3b 60 38 70 02 de 8f 77 e3 a0 8a d5 6e c7 8f Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxkUEJki0bD#D%4X$ZTcc"`@CPATPpj B^EJpxLsyv{sH$D"#j`,yOqlmh$#q"^p4cn(q/nH;`8pwn
2024-05-27 22:43:50 UTC	1144	IN	Data Raw: e0 6d d8 ba a3 83 d8 d9 99 65 c1 89 0a 24 c1 91 93 04 47 4e 12 1c 39 49 70 e4 24 c1 91 93 04 47 4e 12 1c 39 49 70 e4 24 c1 91 93 04 47 4e 12 1c 39 49 70 e4 24 c1 91 93 04 47 4e 12 1c 39 49 70 e4 24 c1 91 93 04 47 4e 12 1c 39 49 70 e4 24 c1 91 93 04 47 4e 12 1c 39 49 70 e4 b4 92 65 a7 cc 1d 82 15 d8 df f3 7b cd bf 04 77 e0 f6 59 cf 5c 33 4b 34 26 78 f4 73 ce 55 42 ae 8c 83 85 d9 61 fe 0c 31 47 c8 24 57 e6 ae c6 37 b2 c2 ad 4d f5 9f d8 3e 8d 4c d1 65 ee 03 d8 88 af e2 68 2c c4 4b 85 34 82 cf fe 2d 18 fd 7f a1 90 dc e4 96 32 77 c5 ac 67 b1 d9 d9 99 4a 70 99 5b 5a e6 ae c7 f7 b1 cf 04 4d 9c 86 8d 65 ee c3 d3 c4 91 78 61 26 16 5c e6 f6 c1 fd 38 65 ca 18 e6 f0 cd 32 77 e1 94 ed 24 b6 c3 44 82 47 d9 6d fe 60 b2 51 bb 3d 16 60 75 99 cf 6e b2 93 9d 95 49 47 f0 b7 Data Ascii: me$GN9Ip$GN9Ip$GN9Ip$GN9Ip$GN9Ip$GN9Ipe{wY\3K4&xsUBa1G$W7M>Leh,K4-2wgJp[ZMexa&\8e2w$DGm`Q=`unIG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50402	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:49 UTC	798	OUT	GET /LteTgkerljFQFADjcuSo5-hiLDlUMnxk-QP08xyTBWi-SxZUSDbqeBS-hjK5Gbetam9PLtnpbdMbHBTpR7zBzKxrB6-c-ynRMH6yrcTKaZOVlnLvBc4=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:50 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8005 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:40:49 GMT Expires: Tue, 28 May 2024 21:40:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 3780 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 4e 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 6f c9 23 ba 00 00 1e b2 49 44 41 54 78 9c ed 9d 79 ac 6c d9 55 de 7f 6b ef 73 6a bc 75 c7 37 bf d7 fd ba db 3d d8 71 db 31 10 70 9c 8e b1 b1 49 44 e2 c4 0e 60 14 d1 8e 91 19 62 41 82 25 82 15 90 23 20 09 28 04 0c 0e 8a 44 42 42 24 12 1c 26 29 51 00 4b 24 20 11 3b 80 21 96 0d c6 0c b1 cd d0 4d db c6 ef f5 1b ee 54 f3 39 67 ef bd f2 c7 19 ea 54 dd db dd af af ef 6b 8b 52 7d 4f 47 b7 ea d4 a9 33 7d 7b ad f5 Data Ascii: PNGIHDRxx9d6NeXIfMM*>F(HHo#IDATxylUksju7=q1pID`bA%# (DBB$&)QK$ ;!MT9gTkR}OG3}{
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 67 72 3b c1 da 85 e1 a8 82 0f 11 4f b6 9f f8 e6 db 9b b7 e9 68 0b 54 08 56 d1 30 e5 e6 8d 1b 24 1b d3 57 f7 ce ed fc 03 db 8f 7f ca b7 dc 11 57 26 62 d0 49 06 a1 79 2a a7 fc bc a0 10 a9 41 5a 01 59 18 b8 82 20 59 60 6f f3 e0 e7 f6 dd 1e 83 83 01 21 53 82 53 34 c0 24 9b 70 23 bb 45 3c e4 cd 3d bd fa 1b 99 4c 8f ec de 27 9e d6 d9 1e 72 17 cc f8 d4 4c c2 18 61 3a 49 18 8d 26 c4 0d 3b f7 99 a8 90 7a cb 81 db df f6 cd 14 5a 2d a2 28 46 44 20 04 92 24 61 9c 8c 89 cf 34 fe 43 67 b7 fd b3 4c d4 6b 14 a8 fb 64 45 21 05 1a e6 05 75 d5 62 04 e7 20 d9 0f a8 86 b9 cf 14 88 d3 88 c9 e6 f0 6d fd 66 ff 25 93 c1 94 e0 3d 82 10 d9 18 2f 8e 90 39 d2 e1 84 f1 68 1c b9 96 27 d3 6c e1 00 82 cb 1c c1 83 59 f4 df a7 80 53 21 58 15 10 e8 b5 ba 68 b3 41 dc b4 73 06 28 08 1d e9 f0 Data Ascii: gr;OhTV0$WW&bIy*AZY Y`o!SS4$p#E<=L'rLa:I&;zZ-(FD $a4CgLkdE!ub mf%=/9h'lYS!XhAs(
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 89 aa 1e e7 33 0e 6f 1f f2 8a f8 af bc 6b 6b 6b 67 74 e0 f6 91 68 46 a0 88 e0 33 a5 75 d9 60 5b e0 46 9a 5f d3 5d c2 5d a9 fd 05 0f b6 25 6c 5e 6a 72 fd 89 3e 78 87 d4 2e c2 69 ca 7a b4 ce 7d e3 07 be e9 a3 bb 1f f9 a5 ac 9b 61 ac c5 aa c5 1a 4b 20 57 a2 2e cb 98 74 27 5f 1b e0 dd 9b c3 8d 8f 59 63 51 09 a8 d5 87 c2 9a 7b 5d da 08 af 0d ed e4 95 a1 a1 f7 6b ac f9 d5 18 f2 98 8e e4 93 07 f9 5b 44 aa f4 b9 03 ba a9 70 29 00 aa 69 5e 8a 74 20 0e 4c 6a f6 6c 6a 3e 2a 89 fd 75 3b 35 ef 97 89 fc a6 4c c1 34 0d 0d 84 dd f3 a3 1f 9b b4 13 b2 83 b4 10 96 16 10 bc e6 82 71 30 e9 d3 1b ae df 38 d3 dc fa a1 eb a3 6b b8 50 93 fb 02 6e ec 68 6f 77 58 bb d4 c3 4f ef 9e 6b 2e 71 57 08 16 01 9f 2a 9d ad 06 71 47 e9 df 1a d1 ec c4 94 fe 4f 81 3d 4d b8 64 2e fc cf 6b 93 0b Data Ascii: 3okkkgthF3u`[F_]]%l^jr>x.iz}aK W.t'_YcQ{]k[Dp)i^t Ljlj>u;5L4q08kPnhowXOk.qWqGO=Md.k
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: ff 38 6d a5 58 89 68 da 88 d8 c6 58 1b 11 9b 88 46 e1 8e 05 53 29 5d a5 c8 59 6b 04 87 c2 7e 73 eb a5 46 7c ee b8 4b 68 19 98 a1 12 60 25 cd a6 70 ce 55 fe ac be 96 66 cd 94 79 b9 5d be 8b 3c 46 47 92 f7 67 a5 65 aa 6b 05 51 48 9a 19 fb db 07 ff ba 27 6b 2f 6b f5 5b 6f 91 70 37 ba ad ee 0c a7 4a b0 3c d3 3c bc e4 05 ff 86 8f 98 b6 c7 df 3f 6a 1f bc 2b 89 1d 16 4b a3 24 d7 e4 e4 c6 26 ca 63 1f 52 59 6c 9e c2 e4 74 06 42 41 72 41 6f e9 9a 55 51 a9 59 af 32 eb c0 28 c4 d6 4c 61 17 b3 44 d5 e9 cd 08 15 a8 91 6a 8a 98 2b c5 ba 9c f0 f2 5b 06 21 12 4b 30 c5 f1 54 50 ab f8 10 48 c5 71 b0 79 f0 f8 9a 5d 7b 60 63 b0 fe 37 14 86 77 3e bb 71 7a 38 b5 96 1d 55 aa bc 73 ee 33 c0 22 58 13 93 46 07 ff e9 b0 73 f8 4d de f8 22 77 cd 53 1f 53 15 2c 4c 75 db bd 86 5a 8c 2d Data Ascii: 8mXhXFS)]Yk~sF\|Kh`%pUfy]<FGgekQH'k/k[op7J<<?j+K$&cRYltBArAoUQY2(LaDj+[!K0TPHqy]{`c7w>qz8Us3"XFsM"wSS,LuZ-
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 64 03 67 ce 9f e1 f7 7e ea f7 f8 e0 4f 7e 90 d4 a7 f9 bd 30 96 9d 97 9e e5 0d ef 7c 03 eb db 3d 46 bb 23 54 a8 aa 6a e5 64 88 56 5a 22 3f cc 6d d9 ed 36 43 e3 a7 7b 93 ad 37 3b 4d 8f bf d1 9f 23 4e de 55 69 9b 73 8b 98 16 d8 a6 b9 dd da ff d9 81 8c 8a c2 44 a1 80 2b 79 54 54 a1 0a e1 a4 a2 48 c7 f2 8b 3f f0 8b c8 ef 78 de f2 d5 8f cf 1d e2 63 1f f8 18 1f fc b1 0f b2 7e 66 9d 50 14 ee 35 84 59 ab 4d d0 da cd 9b cd 1c cd 92 ad 82 af b2 c4 99 27 ca b5 ed 99 ff 6e 2d be 97 71 3f 5f 14 ef 03 9b 97 36 f8 d3 5f fd 13 de ff 13 ef af c8 05 f8 ca bf fb 95 bc 6a eb 4b f8 f9 77 fd 0f 0e f7 fb d8 4e 44 f0 7e 46 6a a9 21 8a f3 f0 ea 71 ea 49 34 63 d7 ec 7e b5 9a e4 75 4d 63 b0 26 10 19 ad 96 d3 c0 89 09 76 41 6a 0b 48 88 e9 4b f2 ee 5b 1c f6 72 81 14 66 84 86 d9 0d 0c Data Ascii: dg~O~0\|=F#TjdVZ"?m6C{7;M#NUisD+yTTH?xc~fP5YM'n-q?_6_jKwND~Fj!qI4c~uMc&vAjHK[rf
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 78 e1 fc c0 0d 1e 4b d5 e5 13 06 28 aa b3 b2 a4 68 40 55 08 85 55 18 9d 2f 1b a6 d3 94 38 44 bc f4 4d 8f 72 df ab ef c3 4d 3c ed 8d 16 ad cd 16 93 dd 09 64 4a 14 47 05 89 c5 dc 6b c1 eb b3 a2 24 e5 39 b6 13 65 8e 62 39 62 8f b3 1d 96 d6 6d 63 83 4f 02 e3 5b 43 1e 78 ed fd 5c 79 e5 65 46 b7 47 88 81 b5 f3 eb 90 c0 f8 60 3c 23 57 29 72 f3 c2 72 4b 91 55 c5 94 19 e9 1e 38 74 7d 86 0c bf a6 6b 3a ff fe 39 ae f2 8e 70 f2 18 1c 79 c6 32 7c 53 df 0f 2a b7 93 df ae d2 9d 2e 8c d4 39 f7 34 13 1a 2e 73 4c 6f 4f 68 c5 2d 7a db 5d 4c 10 26 37 27 f9 33 bf b6 36 4b f5 4c 6e 57 e6 fb 99 ab c9 01 99 5b 03 73 4b b9 cb c5 11 f0 2c 23 a2 76 68 63 0d d6 5a a6 bb 13 34 51 7a 3b 3d d6 36 7b b8 be 23 1d 25 f9 64 88 6a 45 66 d5 f1 59 13 6c d4 2c bb 74 dd 21 04 26 7e c2 58 d3 af Data Ascii: xK(h@UU/8DMrM<dJGk$9eb9bmcO[Cx\yeFG`<#W)rrKU8t}k:9py2\|S*.94.sLoOh-z]L&7'36KLnW[sK,#vhcZ4Qz;=6{#%djEfYl,t!&~X
2024-05-27 22:43:50 UTC	196	IN	Data Raw: 1e ac 69 af 6f 83 f4 63 d3 38 88 a5 b9 6f 91 5d 1b db 5b 9d 6e e7 c6 f6 fa e6 f5 5e 7b 7b dc 68 35 98 ba 53 09 c1 c8 11 f1 b1 c2 52 61 f5 ff 26 2d 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 fe 3f 02 63 bc e3 05 dd c3 54 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ioc8o][n^{{h5SRa&-9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9?cTIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50411	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:50 UTC	783	OUT	GET /JtYUq9HfkkOryxudgp34oqI8qFu9a6mmL64OXjcDX7mfEwcX_pxmTdurvxssofY4swTY2c_M1Kk5o1a863CGTiBZkxxuYXfjiNgz=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:50 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5859 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:09:38 GMT Expires: Tue, 28 May 2024 22:09:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 2052 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 9a 49 44 41 54 78 9c ed 9d 6b ac 24 47 75 c7 7f a7 ba 67 e6 3e f6 ee 7b 8d 1f d8 6b af d7 c6 06 1b fc 08 60 6c 63 94 38 c4 3c 82 78 26 88 20 0c 84 10 f1 81 28 ca 97 44 4a 04 8a 2c 81 14 29 11 89 84 90 90 a2 08 5b e2 13 10 1c 20 b1 14 63 1c 9c e0 18 7b 63 cb 06 8c 97 c5 18 bf f0 7a d7 fb be 77 ee dc e9 ee 3a f9 50 fd a8 79 3f ef cc dd dd f9 4b 7d 67 6e 77 55 75 75 fd fb 9c 3a 75 ea 54 0d cc 30 c3 0c 33 cc 30 c3 0c 33 cc 30 c3 0c 33 cc e0 41 06 4c bf a4 f7 bc eb 26 92 53 97 53 af 6d 81 20 00 d4 2b 27 fb ae 6d ee e1 5f f3 d3 4c 28 af 36 a5 51 ef ba 0a da 9c 57 bb df 57 fd eb da e6 be da 98 57 d5 ab 73 4b Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxk$Gug>{k`lc8<x& (DJ,)[ c{czw:Py?K}gnwUuu:uT030303AL&SSm +'m_L(6QWWWsK
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 87 94 b7 42 50 01 13 0c 78 83 04 e2 1a d4 4f 20 cb cf c3 d1 9f 60 9e bd 17 0e dd 0b f6 58 ca e2 66 8c 09 1d a9 d0 10 64 0b 83 aa ee be 2b 36 f6 12 37 64 1f ac 24 a0 87 c1 5c 8a 6e 7e 33 c9 e5 1f 22 b9 e8 36 6c 79 17 6a 2d 6a 53 31 8e 2d c4 ab c3 df c8 6c 81 2d db 90 ed d7 22 97 7d 1c 53 3b 88 3c fb 9f c8 81 7f 87 93 0f 63 93 df 80 6c 43 c4 60 54 73 a2 33 6d dd 18 65 db 0f 39 93 97 e8 0d d5 07 bb c0 c1 2a 2a 21 ba f4 1e 92 cb 3f 42 b2 fb ed d8 70 09 4d 62 88 6a e3 be 23 68 82 c6 09 0a d8 70 07 72 f9 ed 98 4b de 03 4f df 83 fc f2 df 90 e3 77 63 64 89 44 ca 18 51 24 eb 1a bc 7e 5e 32 55 3f a8 51 b7 1e 4e 93 26 6c 18 09 76 e4 1e 46 4b af c3 5e f0 3e e2 2b 3e 4c b2 74 09 6a 2d c4 f5 09 55 c2 a2 f1 1a 89 2c 62 ae fc 28 9c 77 3d f6 89 ab d1 e7 ff 01 b1 55 30 0b Data Ascii: BPxO `Xfd+67d$\n~3"6lyj-jS1-l-"}S;<clC`Ts3me9**!?BpMbj#hprKOwcdDQ$~^2U?QN&lvFK^>+>Ltj-U,b(w=U0
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 20 61 99 95 fa 02 60 98 0b 2d c6 23 6f 7d 02 f7 1a 31 71 82 5b 42 97 06 85 2a 52 d9 c4 39 37 fe 11 ab bb af 25 aa d6 dc 30 89 c6 e1 50 73 db 49 d3 77 4d b7 04 35 a1 21 dc 79 3e c1 96 8b 50 06 dc 7b 53 2d c1 a6 9d 2c 5d f3 07 54 ce bf 16 5d a9 3a 23 5e 40 34 86 95 e7 a8 1f f8 7b 74 e5 d7 54 eb 5b 51 35 cc 97 92 62 48 a7 ed 2c fc 3e 86 53 03 18 a7 53 18 26 8d 69 32 bc b4 89 c5 3d 37 20 22 43 8b 42 36 bd 97 47 6a 0e 51 37 55 0b 95 2d 54 76 bf c9 59 e0 b9 7a b0 e8 da 09 82 f3 5f 4f ed 87 1f 21 59 3e 44 8d 45 14 c3 42 c9 42 a7 e8 cc 31 63 32 12 9c be 71 d2 b5 1f 1a bc 4c 3b b5 98 ad 26 a8 a2 49 dc fa 7a 84 9b 30 17 be 91 d2 35 77 b0 fa 83 4f 91 54 a0 16 39 b3 67 a1 6c 91 be a2 36 46 6b b0 f5 31 b2 b2 ed 79 d5 63 f4 34 9a 30 1a 1b 54 d1 24 a1 b4 f7 36 92 08 12 Data Ascii: a`-#o}1q[B*R97%0PsIwM5!y>P{S-,]T]:#^@4{tT[Q5bH,>SS&i2=7 "CB6GjQ7U-TvYz_O!Y>DEBB1c2qL;&Iz05wOT9gl6Fk1yc40T$6
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 44 77 4c 69 8f 8e 32 22 16 f9 e5 dd 83 ef f5 7c 1a 41 8c a1 fa e4 bf 22 01 08 65 c4 a4 c3 36 6f 92 3f 23 ca ef 77 7b f5 b9 d2 66 f8 d4 09 13 16 9f cc e2 76 af b0 f9 f5 f7 b1 2b 87 ce 4c 29 16 43 bc 7c 90 fa 81 fb 8a 4d 4b 45 53 72 34 77 41 36 f7 a5 0d e4 aa 8e 44 2e ac ab 27 ab f3 50 ca bd b5 9b 29 d5 9e c0 ee bf 1b 06 70 bd 9d 36 50 cb f2 e3 df 24 58 7d 14 31 0b f9 ca c7 86 3e 37 75 9e 37 8f 7b 3b 93 db 4e 2d 77 6f bb 21 45 67 b8 71 71 e3 24 40 88 70 84 f0 99 ef 92 1c 7a 12 82 d2 70 55 d9 88 30 21 b5 97 7e 46 fc 8b ff 00 bb 8c 98 30 dd 47 a4 18 0e b9 05 6a 90 79 b4 fa 23 b7 b9 5d 7b 0b 46 2f 47 47 87 63 14 a8 0b 1d c5 22 b2 95 70 f5 fb e8 4f ee 22 39 f5 e2 99 d1 1f 4b 40 74 e2 05 aa ff 77 27 52 bd 1f 63 36 a5 0b d2 b3 09 11 cd fd e4 85 3b 35 cd 3a 10 b9 Data Ascii: DwLi2"\|A"e6o?#w{fv+L)C\|MKESr4wA6D.'P)p6P$X}1>7u7{;N-wo!Egqq$@pzpU0!~F0Gjy#]{F/GGc"pO"9K@tw'Rc6;5:
2024-05-27 22:43:50 UTC	830	IN	Data Raw: e7 b5 b8 98 18 2b 86 4a 99 a8 66 0d 5f 5c f7 a5 cf 2b ba 7d 7e 3f 79 9e a6 cd 0b d8 86 dc 76 e9 fb 7e e6 11 c9 85 89 1b 59 a3 8e ba da 8f a1 2b a1 b3 a6 eb 49 d6 27 6b 91 29 6b e4 ac cd 73 c9 6d 4f 6c 71 ce 93 5c 68 91 dc 96 3c 1b 90 5c 98 a2 2f ba ff a2 7a 97 95 91 2c 62 f3 fd a6 1a 24 af c1 a0 6a b4 66 fd 32 00 2f 10 bd 1d b9 8d 75 d9 10 e4 8e 36 d9 30 e9 3e 38 bb ed a0 f7 75 16 6c 39 70 3d 71 46 72 a3 5a 6e ed 13 33 b4 84 a7 9e 21 e4 c2 d4 fb e0 14 43 19 73 ed d5 75 39 70 46 55 b1 d7 94 17 66 da 89 5c cf 3a ee b5 3e 37 cf c3 b0 e4 76 79 d6 31 93 0b d3 18 07 8f 6c 99 f7 1e 43 97 43 85 58 dd 7e 53 dd c8 cd 2d ec ec 84 d7 b7 a6 f7 ea ba 56 48 d9 d0 e4 42 2f 82 a5 71 dc 3f 30 c6 36 cc 1a ac 1c 11 a5 52 72 0d 1e 59 e9 4c 2e ad e4 8a 7f ad 1b b9 d0 32 14 ca Data Ascii: +Jf_\+}~?yv~Y+I'k)ksmOlq\h<\/z,b$jf2/u60>8ul9p=qFrZn3!Csu9pFUf\:>7vy1lCCX~S-VHB/q?06RrYL.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50409	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:50 UTC	554	OUT	GET /sfQ-WzgiZ1asQ0K88_k8UG53n8u4ERdLJsZI-lTyHmL_p2f4ViSo6g10vYrjn34HR6sfjZGvs6xpRncjw4PT9u9iD8tC4CTDBIT4sD4=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:50 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3882 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:02 GMT Expires: Tue, 28 May 2024 22:42:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 108 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0e e1 49 44 41 54 78 9c ed 9d 7b 70 1c c5 9d c7 bf bf 99 95 2c 11 4b 0e 96 ad 97 1f 60 c7 e0 e8 e1 0b 77 8e 29 30 e6 2e 89 81 0b b1 77 85 0d 96 64 d9 b9 00 57 a9 0b 07 07 77 17 8e 1c b1 77 25 b4 32 15 17 55 79 1c 89 f3 b8 1c 49 48 00 49 e6 a9 95 8d 1d 70 41 aa 92 50 24 f6 e5 12 6b e5 97 b0 6c c9 bb 7a 5b d6 c3 e8 b5 3b bf fb 63 25 59 16 d2 6a 77 a6 7b 46 c6 f3 a9 52 95 4a 3b fd eb 9f e6 bb bf ee df 74 f7 74 03 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 06 20 ab 1d 98 0d 6c e4 9d 2b 54 d0 02 0d 34 ac 81 07 f6 91 b7 1b 40 ab d5 7e 89 e0 aa 16 b8 90 4b d3 9b de 6a 78 2f d4 35 b8 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{p,K`w)0.wdWww%2UyIHIpAP$klz[;c%Yjw{FRJ;tt666666666666666666666666 l+T4@~Kjx/5
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: be 2f 33 bb 36 24 30 0f 6b 5f 13 e5 c8 74 48 4c bc 66 c5 44 0b 11 21 f0 e2 d1 77 20 e9 39 d9 90 c0 c1 4a ff 57 44 39 12 0d 49 89 97 f5 11 3c 0a 39 14 ac 7d 7b fb 1f 64 d8 d6 2d 70 01 ef c8 51 92 54 91 be 44 45 74 e2 45 20 22 22 8c fd 58 0a 03 c3 5d 03 2b 0b d8 fd 94 68 d3 ba 05 d6 a0 fe bd a9 31 20 38 f1 ea 40 2f ba cf 77 e3 42 4f 0f fa 2f 5e 44 68 24 04 66 86 a2 28 11 c1 cd d6 9c 81 40 a5 df b3 89 dd 42 27 28 74 cf 07 87 ba 07 6f 17 e9 48 4c 5c 4a bc b4 37 c8 fb 63 23 a6 7e 87 73 8c f6 b1 65 57 a3 df 54 45 c5 bc 39 49 98 3f 37 05 29 73 e7 22 29 69 0e 98 19 1c c7 d8 ba 21 14 42 e7 fb 81 37 00 18 1e 34 1a 37 a9 b7 e0 e9 fd 47 ff 5a 51 a4 cc 36 ce 88 98 c4 4b 21 28 0a 22 3f 6a e4 07 40 cf e0 00 1a 3b da f0 97 c6 06 1c 3d 7d 1a 17 7a 7a cd 6b c6 19 18 38 d3 Data Ascii: /36$0k_tHLfD!w 9JWD9I<9}{d-pQTDEtE ""X]+h1 8@/wBO/^Dh$f(@B'(toHL\J7c#~seWTE9I?7)s")i!B747GZQ6K!("?j@;=}zzk8
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 58 e5 b7 45 d6 89 d8 87 fd af e7 7c 33 6a da 16 6b e4 4e 81 2d b2 3e c4 3f 05 96 e5 85 a1 4e 31 b8 1c 25 a1 8a 19 02 b2 0b 73 cb 6a c8 6b 67 d7 31 22 7e b8 ae 74 d5 03 1f 7d d2 8b b3 59 9e 0e 3b f1 8a 1b f1 02 53 e5 f3 98 a3 5e 5a 88 6e a0 59 9e 12 3b f1 8a 0b 39 03 ee 8f df 18 79 39 5b 54 e4 4e c6 4e bc 62 46 8e c0 54 5d 8b cc c4 c3 8a 43 60 e4 4e 81 2d f2 cc c8 1b 6a 67 dc 78 d3 0b 05 27 12 12 12 e4 ee 71 61 27 5e 51 91 37 27 4a 38 b9 74 db 67 9e 65 c9 f3 ea 56 27 5e 1b f8 c9 1b 36 f3 ce db 1e e3 ff 9e 6f 45 fd 33 21 7d c3 89 9b 5f d9 d2 a5 85 b4 f9 d2 b7 5c 22 20 bb d0 bc 09 8a 8d ec 2e 6e 7b e5 d8 8f 39 cc 91 59 34 0d 48 be 2e f5 c8 27 6e cd de 7c 80 76 35 99 e1 43 2c 48 5f d5 90 b1 79 e5 97 60 70 5a 34 26 4c 4c bc 5c ec 29 6d ad aa 7f 89 43 9c 3a 7e Data Ascii: XE\|3jkN->?N1%sjkg1"~t}Y;S^ZnY;9y9[TNNbFT]C`N-jgx'qa'^Q7'J8tgeV'^6oE3!}_\" .n{9Y4H.'n\|v5C,H_y`pZ4&LL\)mC:~
2024-05-27 22:43:50 UTC	242	IN	Data Raw: e6 3b de a9 46 02 a0 01 19 ce 1b 7e b9 6f ee b7 be 02 49 3b d0 5f 9d 02 5f 22 05 5c f8 00 f6 34 7c 15 5d 23 f9 86 ef 46 2c cd f5 68 1d 49 8b 53 8e a4 ac 5d bc ed 4d aa 38 61 b0 d6 a8 5c ed 02 4f 24 05 5c 54 8c ea a6 2d 38 de b7 1e 44 8a ae bb 33 59 64 c2 78 6c 72 58 c3 c2 bb 96 bf 84 05 c9 65 07 a8 42 d6 59 14 97 61 0b 3c 1d bc 25 0f a0 cf e1 dd f6 db f0 e7 9e 35 e8 0f 2d 45 88 13 11 cb e2 03 2d 8c eb d3 32 b0 30 73 c1 50 e2 fc e4 86 b4 cf 5f 77 88 81 1a 1f 79 0f c9 77 fc 72 6c 81 e3 81 ef cd 00 d4 45 00 2d 06 78 21 40 f3 10 79 ff d7 01 e0 22 c0 7d 00 b5 01 dc 0c aa 6e 02 d0 6e ad c3 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 f2 f9 7f ee a8 c0 7b d9 ce 71 3e 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ;F~oI;__"\4\|]#F,hIS]M8a\O$\T-8D3YdxlrXeBYa<%5-E-20sP_wywrlE-x!@y"}nn6666666666666666666666{q>IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50406	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:50 UTC	553	OUT	GET /ra4Ks1fsGsLSlzWoAU-9Ls2V5vEFCsA9thbtIkCHNFYeLC-ver57N4-GCGFZ-GBGw6uQkYPkvobF7dzM7udYmcTs4wfDTljzskEZAQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:50 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 7450 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:39:26 GMT Expires: Tue, 28 May 2024 22:39:26 GMT Cache-Control: public, max-age=86400, no-transform Age: 264 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1c d1 49 44 41 54 78 9c ed 9d 79 70 1c d7 79 e0 7f dd 73 02 18 1c 03 80 b8 41 1c 04 40 0e 0f 13 a0 64 1e a2 48 89 d6 49 ea 6c c9 8a 22 ca 96 e5 f5 3a 55 7b b8 94 64 cf ca 96 37 59 27 bb 89 76 b3 5b 4e b2 d9 cd b1 15 1d 96 2c 39 8e dd 94 ac 8b b2 44 59 94 2c 52 07 25 52 14 a8 26 71 10 94 48 82 20 00 82 20 38 98 b3 bb f7 8f 9e 1e 03 83 1e 60 00 f4 0c 49 69 7e 55 53 85 6a 74 f7 7b dd 5f bf f7 be f7 bd ef fb 1e e4 c9 93 27 4f 9e 3c 79 f2 e4 c9 93 27 4f 9e 3c 79 f2 e4 c9 73 25 20 5c ea 0a e4 0a 49 92 1c 40 2b d0 01 2c 01 aa 80 0a c0 07 78 01 0f c6 fb 88 26 7e 13 c0 b9 c4 ef 34 f0 19 d0 2f cb f2 85 9c 57 7e 11 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxypysA@dHIl":U{d7Y'v[N,9DY,R%R&qH 8`Ii~USjt{_'O<y'O<ys% \I@+,x&~4/W~
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 97 95 80 25 49 aa 04 7e 1b 63 ac 6a b3 3a 47 d3 34 22 e1 30 0d 8d 8d ac ed ec a4 ad bd 9d f6 f6 76 fc 7e 3f aa aa 66 5d a8 e9 30 85 7d fe fc 79 fa fa fa 38 aa 28 1c 3a 78 90 c1 d3 a7 71 b9 dd b3 8d d3 47 31 74 8b 9f ca b2 3c 6e 77 bd 2e 1b 01 4b 92 d4 01 fc 1e f0 0d 0c f3 e1 34 74 5d 27 12 89 50 e4 f3 b1 6d db 36 56 ac 58 41 5b 5b 1b 45 3e 1f aa aa 66 3c ed c9 36 82 20 e0 70 38 98 98 98 a0 bf af 8f ee ee 6e f6 ee dd cb 64 30 88 c7 e3 49 77 d9 28 f0 ff 80 ff 2d cb f2 49 3b eb 33 6b ff 91 2b 24 49 5a 0f fc 19 f0 00 16 46 8a 78 3c 4e 24 1c e6 da eb ae e3 8e 3b ef 64 c3 c6 8d 34 35 35 e1 48 8c af 97 1b 9a a6 e1 76 bb a9 ad ab a3 a1 b1 91 65 cb 96 11 09 87 e9 ef ef c7 e5 72 59 29 62 85 18 66 d5 ba 40 20 f0 89 a2 28 a3 76 d5 e5 92 0b 58 92 a4 9b 31 ba a8 eb ac Data Ascii: %I~cj:G4"0v~?f]0}y8(:xqG1t<nw.K4t]'Pm6VXA[[E>f<6 p8nd0Iw(-I;3k+$IZFx<N$;d455HverY)bf@ (vX1
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: db 3e 4d 4a 4c 8d fe 19 b0 6a ea f1 f3 63 63 7c fb 3b df b1 5d c0 ba ae 73 fc f8 71 7e f4 c4 13 f4 f6 f6 1a 06 14 b7 1b 97 db f0 fc 39 77 ee 1c c7 8e 1e c5 e9 74 b2 7c c5 8a 05 bf 78 a7 d3 c9 5b 7b f7 f2 cc 8f 7f cc d0 d0 10 82 20 e0 76 bb 93 de 25 67 cf 9e a5 b7 b7 97 ba da 5a 96 2c 59 32 97 37 e5 bc 70 38 1c 78 bd 5e de da bb 17 af 77 5a 1c 9d 00 5c 48 38 07 58 3a ec 65 63 0c 6e c4 e8 a2 93 a8 aa 4a 4b 4b 0b 75 75 75 b6 8e 55 82 20 70 71 62 82 57 5f 79 85 c1 c1 41 3c 1e cf b4 fb 0b 82 90 f4 81 fa c7 9f fc 84 33 67 ce 2c a8 7c 41 10 08 87 c3 3c fe d8 63 c4 63 b1 19 9e 18 a6 b0 2f 8c 8f f3 e2 0b 2f 30 36 36 b6 98 98 26 4b be b2 76 2d c5 25 25 56 ca 69 27 16 ab 73 26 d9 10 70 1d 46 34 42 92 58 2c c6 ba ab ae c2 ed b6 3f e8 6f 32 14 e2 d7 6f bf 3d 9b c7 62 Data Ascii: >MJLjcc\|;]sq~9wt\|x[{ v%gZ,Y27p8x^wZ\H8X:ecnJKKuuuU pqbW_yA<3g,\|A<cc//066&Kv-%%Vi's&pF4BX,?o2o=b
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 66 2c 57 c5 e3 71 ca 2b 2a b2 b2 b2 22 08 02 de 82 82 69 c7 44 51 64 74 78 98 e1 b3 67 89 46 a3 59 17 b2 20 08 9c 1f 1b e3 d0 c1 83 14 4c a9 8b 20 08 59 e9 3d 74 5d 27 14 0a 31 3a 3a 6a f5 6c 43 18 dd f4 34 ec 6a c1 5e 2c 12 a9 00 f8 fd 7e 5c 2e 97 4d c5 fc 06 51 14 59 be 7c 39 91 48 64 da f1 82 c2 42 f6 ef df cf f0 d9 b3 59 15 b0 20 08 a8 aa ca 99 c1 41 0e 1d 3a 34 6d 18 8a c7 e3 ac 59 bb d6 f6 9e 2b 1e 8f 33 78 fa 74 aa 5f 96 c9 e7 18 dd f4 34 ec 14 f0 ea a9 07 34 4d a3 6a c9 92 ac 08 17 8c 17 ec f7 fb e9 58 be 7c 9a 55 c9 e5 72 f1 d1 87 1f d2 d3 d3 63 15 d7 63 2b 83 83 83 bc f0 c2 0b d3 5a 2f 18 6b cf eb d7 af c7 6d e3 b3 9b 4a 65 7f 7f 3f 9e 99 ae 4f 1a 70 4a 96 e5 19 d7 d9 25 e0 42 52 62 90 34 4d a3 be a1 61 56 5f a9 c5 e2 72 b9 d8 b6 6d 1b a1 94 85 Data Ascii: f,Wq+*"iDQdtxgFY L Y=t]'1::jlC4j^,~\.MQY\|9HdBY A:4mY+3xt_44MjX\|Urcc+Z/kmJe?OpJ%BRb4MaV_rm
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 6f f0 de fb ef 33 32 3c 4c 91 cf 87 cb e5 9a e6 0d 62 3e 5b 3c 16 23 38 39 49 59 69 29 eb ae be 9a 8d 1b 37 d2 b5 6e 5d 72 41 df 3c 37 5b 88 a2 c8 d0 99 33 3c ff dc 73 56 63 2f 18 ad f7 c5 b9 ee 63 d5 82 97 90 12 df 0b c6 c3 9c 1f 1b 63 7c 7c dc b0 01 af 58 c1 86 0d 1b d8 b8 69 13 15 15 15 c9 2f f9 72 10 ee 54 cc 6e db e1 70 b0 72 e5 4a 02 81 00 bf 03 8c 8e 8c 70 bc bf 9f 33 67 ce 70 7e 6c 8c 70 24 82 ae eb 14 15 15 51 56 56 46 75 4d 0d 2d cd cd 94 57 54 20 88 e2 34 67 a7 5c 3c a3 c3 e1 e0 c7 cf 3c c3 e4 e4 a4 d5 d4 68 00 f8 91 2c cb 73 8e 0b 56 02 76 92 b2 ae 6b b6 86 ff f6 e8 a3 b4 b5 b5 25 35 4e d3 17 f8 4a c8 75 35 55 28 a2 20 50 55 55 45 75 75 b5 e5 18 3c f5 63 4d fe 72 58 57 a7 d3 c9 0b bf f8 05 87 53 56 a9 12 68 c0 2f 65 59 7e 25 93 7b 59 99 5b 2e Data Ascii: o32<Lb>[<#89IYi)7n]rA<7[3<sVc/cc\|\|Xi/rTnprJp3gp~lp$QVVFuM-WT 4g\<<h,sVvk%5NJu5U( PUUEuu<cMrXWSVh/eY~%{Y[.
2024-05-27 22:43:50 UTC	1030	IN	Data Raw: 44 22 11 96 b5 b5 f1 c8 ef fe ee 8c 0c 76 c9 bf e6 d9 85 9b 1f da 91 ee 6e 9e 7e ea 29 4e 9e 3c b9 a0 d0 1b b3 2e 73 08 f6 1c 86 96 fc c3 79 17 30 0f 6c 0b 7f 53 14 05 45 51 7e 1d 08 04 9e c6 10 70 33 86 cb 8f e5 53 ce c7 17 ca 0a 87 c3 c1 d8 b9 73 84 26 27 59 b5 7a f5 6f 96 f7 cc 14 83 53 52 0d ce e7 37 3c 3c cc cb af bc 42 f7 27 9f a4 8b e2 9b 93 39 9e 2d 0c fc 0a 78 40 96 e5 e7 17 f6 f4 f3 a8 4b b6 6e 2c 49 52 3b f0 fb 18 5b bf d4 30 8b 0b d0 42 31 5b 4a 6d 6d 2d 75 f5 f5 b8 dd 6e 0a 0b 0a 92 41 5f a2 28 e2 76 bb e7 d5 fd 2b 8a c2 91 ee ee 6c 64 25 08 61 78 62 fc b9 2c cb ff 60 f7 cd d3 91 75 e3 b1 24 49 cd c0 03 18 0e f2 2d 18 c2 9e b3 5c b3 15 cc e5 06 34 75 f1 3e 39 c6 9b ca 0f f3 9b 3b 0b 60 ec f7 90 41 d8 a7 f9 d1 64 a8 e4 45 80 3f 02 7e 28 cb 72 Data Ascii: D"vn~)N<.sy0lSEQ~p3Ss&'YzoSR7<<B'9-x@Kn,IR;[0B1[Jmm-unA_(v+ld%axb,`u$I-\4u>9;`AdE?~(r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50405	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:50 UTC	551	OUT	GET /BAwQk6jAMu2s_7Jh-8-_CsvSwEAaeLsVhL8z82VOoEkoaujxll1kYL3Pz4jkYpLbRpUA2fOZTtIppG2gXpsDoijSo1a1M5uPvke3=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:50 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3042 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:34:04 GMT Expires: Tue, 28 May 2024 22:34:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 586 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 0b 2e 49 44 41 54 78 9c ed 9d 7b ec 1c 55 15 80 bf 5b db d2 e1 5d 20 16 30 28 11 69 53 04 64 a9 18 30 01 fb 83 a9 29 2e a8 11 cd 22 11 79 57 c4 68 40 40 81 41 29 e8 88 08 04 31 11 44 45 8a 04 65 21 36 2a 59 83 61 e8 22 6f 11 d8 84 87 bc 0d 2f 95 ca a3 02 a5 13 10 7a fd 63 76 11 da 99 b9 f3 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2.IDATx{U[] 0(iSd0)."yWh@@A)1DEe!6*Ya"o/zcv
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: eb ef f7 b2 3c 22 20 f3 15 d5 1f bc b2 ee 87 69 06 5e 05 54 8a 3a 95 60 3f c2 78 6b 43 9f db 05 f5 87 82 b2 8d a8 fe e0 0e 01 b1 77 a5 7d b8 be 81 03 6f 0d f0 a4 c0 0d ac 8b e9 47 be 54 50 f7 81 3a a2 cc 9c 5c 82 9b 2d cb bb 22 ed c3 ac 69 d2 95 96 95 a7 71 38 61 9c 17 06 bd 1c 78 49 50 ff 58 bd 18 38 d9 a2 ac d5 aa 3f b8 26 ad 21 cb c0 d6 96 f9 72 98 06 1c 9b d5 a8 7c de 00 7e 2a a8 ff 28 1d 31 53 50 7e 2e aa 3f f8 33 10 59 12 97 39 f5 4c 37 70 92 99 71 b9 25 e5 79 98 c2 a1 81 a0 ee 8d 81 25 82 f2 8d a8 fe 60 11 b0 de c0 a8 24 17 55 5d 4d 3a b7 a6 e2 22 28 c2 38 33 6a 36 cc ca 48 7d f4 58 e2 2c 41 d9 45 d9 99 64 60 5b 85 e5 aa 3f f8 4a 5e 87 6c 03 07 de 03 c0 9f 2a 2a 2e 83 e9 47 b6 19 94 5f 97 d9 3a e2 00 41 f9 46 54 7f f0 94 ea 0f b6 00 ae 2f 79 e9 31 Data Ascii: <" i^T:`?xkCw}oGTP:\-"iq8axIPX8?&!r\|~(1SP~.?3Y9L7pq%y%`$U]M:"(83j6H}X,AEd`[?J^l*.G_:AFT/y1
2024-05-27 22:43:50 UTC	792	IN	Data Raw: 63 da 03 be 26 28 df 0a 92 06 6e e6 11 16 c6 a6 fd 44 cb 04 b5 37 b1 92 56 0b 39 03 07 de e3 c0 1f c5 e4 ff 0f 53 1c fc bb 82 ba 37 d2 51 ed 23 07 44 91 f4 60 68 66 c3 da fb 08 63 3f ab 51 f9 3c 4e 7e dd 8b ba 9c 2a 28 bb 36 b2 06 4e b6 ba 48 65 1d be 1d d3 a0 4e 72 6e fe 21 1d b1 97 a0 fc 5a 48 7b 30 34 f3 9e da dd 10 f8 90 8e b0 4d 44 a5 9e 34 e4 0d 1c 78 bf 42 76 1f d1 88 71 66 7c ec 2f 58 a5 be 16 4d 78 30 c0 c5 0d e8 f8 1c 61 9c b7 cb af 4b f5 8a 72 45 98 84 aa 79 eb d1 8c 81 03 af a9 2f 9f e9 a5 c3 c0 87 e4 d4 ed 68 1d 89 94 ea af 45 53 1e 0c b2 25 90 46 7c d3 d0 fe 7d 41 dd 33 a8 76 be a2 28 4d 1a 78 69 23 5a 92 e3 6f 53 19 6e 58 93 2c ea 36 71 6b c5 cd 19 38 f0 9e c2 5e 7d e4 3c 4c 5e 2c b9 10 32 4b 47 7c 46 50 7e 69 9a f4 60 90 dd 81 30 62 7b c2 Data Ascii: c&(nD7V9S7Q#D`hfc?Q<N~*(6NHeNrn!ZH{04MD4xBvqf\|/XMx0aKrEy/hES%F\|}A3v(Mxi#ZoSnX,6qk8^}<L^,2KG\|FP~i`0b{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50407	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:50 UTC	798	OUT	GET /dMQ1Q4xlLrl3-KsZvX_9v56emij4OkRxzapLM7RSuZVd7PgqfjPxKR4KY8hVHYXqP2ZkS-_ZueXb9ywW66H2oCyTglApr1ELCy3woOAviTgFP6uyAd0=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:50 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 817 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:02 GMT Expires: Tue, 28 May 2024 22:42:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 108 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	817	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 c6 49 44 41 54 78 01 ed dd 3d 4e 5b 41 14 86 e1 63 48 22 50 10 52 2a a4 90 8e 92 96 14 6c 80 25 78 21 49 96 41 b2 10 96 c0 06 28 42 4b 49 85 8c 44 85 84 40 46 80 00 0f 35 92 67 ee 9d 9f 33 1f ef 23 b9 73 e5 d7 77 6c 8d cf f5 4c 5e 16 0c b2 56 0c d2 08 2c 8e c0 e2 08 2c 8e c0 e2 08 2c 8e c0 e2 08 2c 8e c0 e2 3e 59 a2 93 f3 07 fb 7b 7c 67 67 b3 27 bb b9 7f 36 98 ed ef 7c b1 e9 de 9a 4d 7f ae 9b 37 93 94 ad ca 10 f6 df f1 ad e1 7d bf 0e 36 ec f7 c1 57 f3 24 7a 89 3e fa 3f 27 ee 12 e1 f5 09 2b 9c 27 f1 81 Data Ascii: PNGIHDRxx9d6pHYssRGBgAMAaIDATx=N[AcH"PR*l%x!IA(BKID@F5g3#swlL^V,,,,>Y{\|gg'6\|M7}6W$z>?'+'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50404	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:50 UTC	554	OUT	GET /UqqZocZvjGksiGtlRkKb5NsuhpQkMLt3A85lMQ81Pms9tSZ3lLpymbAeinPIe5qUJRdmOKqL9InBBVsh6_gK-1QcNGppeUa7owoKgqo=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:50 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4175 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:34:04 GMT Expires: Tue, 28 May 2024 22:34:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 586 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDR<<:rtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 62 32 66 36 61 30 33 2d 30 35 34 65 2d 31 31 37 62 2d 62 37 38 33 2d 62 62 66 39 35 63 34 32 64 66 39 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 60 48 96 af 00 00 0c 5f 49 44 41 54 78 da ec 5b 7b 70 54 d5 19 ff ce dd f7 6e f6 99 f7 8b b0 60 20 09 94 88 13 1c 1e 63 0b 45 45 14 f0 d1 8a da d6 2a d8 96 b4 68 b5 8c 53 3b cc b4 fe d3 aa d3 87 e2 88 b5 1d b4 da 96 19 2b a0 ad 50 90 c1 07 22 e2 03 04 24 09 b2 10 c8 83 3c 37 24 d9 ec 26 d9 dd ec dd 7b 4e 7f 67 37 80 22 14 84 4d 78 c8 61 4e ee dd 7b 77 ef 3d bf f3 7d df ef fb 7d e7 5e 98 10 82 be 4e 4d Data Ascii: e:docid:photoshop:db2f6a03-054e-117b-b783-bbf95c42df91"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`H_IDATx[{pTn` cEE*hS;+P"$<7$&{Ng7"MxaN{w=}}^NM
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 75 ba b1 30 6e b6 12 d1 b4 b9 76 88 f7 1f 7e 6b 6a 92 ce 0f a7 86 7d ef 2b 2a 12 de b1 63 e9 5e b7 5b bc e2 76 f3 1e a3 91 0f a6 f8 e1 6e c2 0d 85 86 c9 37 03 70 8e 12 8a 46 c7 8d 81 a0 18 7b b8 99 68 d3 3b 29 bb 89 4f af d7 b5 b9 dd ba bf 67 67 d3 9d d1 28 73 c3 9d 6e 44 d5 f3 32 c0 87 4c 26 31 9c e0 3d 00 8c 18 26 45 08 bb 12 8e a9 39 39 90 8b a6 4f 76 a5 f4 26 de e6 66 9e 63 b7 f3 a6 0d 1b c4 aa 97 5e a2 f9 8b 16 b1 77 cb cb c5 f7 54 95 39 c1 17 73 2c 16 b1 2a 3d 5d f4 99 4c 43 6d 79 e6 02 e0 41 ea cd d1 1b 6c 56 ad bf bd 83 f8 fe fd 42 49 14 43 a9 b9 c9 24 cc e8 2b f5 f5 e4 f4 78 e8 f6 f9 f3 19 3a 69 88 a5 b7 de 7e 9b 56 6f d9 42 ff dc bc 99 ad af a9 91 85 01 bb cb e1 10 77 1a 0c e2 86 50 88 19 31 21 a9 46 6c 03 60 25 39 ab 99 54 38 7e dc ce d1 c5 c5 Data Ascii: u0nv~kj}+c^[vn7pF{h;)Ogg(snD2L&1=&E99Ov&fc^wT9s,=]LCmyAlVBIC$+x:i~VoBwP1!Fl`%9T8~
2024-05-27 22:43:50 UTC	535	IN	Data Raw: 6e b5 5e 07 2a a7 b9 c3 fb 54 ff 28 08 86 32 4e c8 c5 08 30 ac 7c 26 c4 20 86 a8 0b 4a a9 07 9f 25 38 6c 75 f2 98 d4 fe b2 c2 6b 31 1a 13 c4 d4 87 ef e4 0f 0c f4 95 47 22 cb 71 8d a5 27 33 da 97 de f1 80 ec 98 d6 64 30 bc 9f 11 8f d3 7e 9f 8f a3 a8 50 86 02 58 1b 06 d7 6a 34 0a 1f 64 a7 4c 85 72 c0 52 0d 49 50 41 9c 0b 02 4c 04 e4 a9 62 2b 6b f5 c4 3e ba 7c e7 50 ae 36 eb 92 ee d9 6b e4 3c 0a 41 11 74 70 5e 6b e2 7c 13 dc 77 0d 6e d0 7c ca 82 e6 4b 6b 6f 44 db 46 c6 62 2b ab 2c 96 1f dc ec f5 b2 ff d6 d5 c9 4a e2 5c 62 5a 48 20 50 3a 62 a7 d5 aa 34 c2 22 32 13 48 80 bd b0 5e 70 10 90 6c 72 a1 0d 40 c2 50 7d 2d 70 c7 20 38 25 64 d6 b4 26 1c 6b 85 80 e9 05 40 a9 88 ba d0 5b 01 2a 40 c9 2e 8f 05 84 7c c3 eb 0c b2 cb a9 5e 5b 32 e0 06 3b f6 5a 2c e5 df ec eb Data Ascii: n^T(2N0\|& J%8luk1G"q'3d0~PXj4dLrRIPALb+k>\|P6k<Atp^k\|wn\|KkoDFb+,J\bZH P:b4"2H^plr@P}-p 8%d&k@[@.\|^[2;Z,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50416	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:50 UTC	553	OUT	GET /I95wjYii8vhFSSx-aSYdh2hPAMjgZkA9yjarSQoOd98COwOxkAVn_dulBcTcfbsa7Limy6IKX6G95ep6OB6y2yMLMiX0YEqFx3KQHQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:50 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 18405 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:10:59 GMT Expires: Tue, 28 May 2024 20:10:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 9171 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3a 00 00 00 3a 08 06 00 00 00 e1 bb 4a 28 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR::J(pHYs.#.#x?vOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 b1 38 2c 09 93 63 cb b1 22 ac 0c ab c6 1a b0 56 ac 03 bb 89 f5 63 cf b1 77 04 12 81 45 c0 09 36 04 77 42 20 61 1e 41 48 58 4c 58 4e d8 48 a8 20 1c 24 34 11 da 09 37 09 03 84 51 c2 27 22 93 a8 4b b4 26 ba 11 f9 c4 18 62 32 31 87 58 48 2c 23 d6 12 8f 13 2f 10 7b 88 43 c4 37 24 12 89 43 32 27 b9 90 02 49 b1 a4 54 d2 12 d2 46 d2 6e 52 23 e9 2c a9 9b 34 48 1a 23 93 c9 da 64 6b b2 07 39 94 2c 20 2b c8 85 e4 9d e4 c3 e4 33 e4 1b e4 21 f2 5b 0a 9d 62 40 71 a4 f8 53 e2 28 52 ca 6a 4a 19 e5 10 e5 34 e5 06 65 98 32 41 55 a3 9a 52 dd a8 a1 54 11 35 8f 5a 42 ad a1 b6 52 af 51 87 a8 13 34 75 9a 39 cd 83 16 49 4b a5 ad a2 95 d3 1a 68 17 68 f7 69 af e8 74 ba 11 dd 95 1e 4e 97 d0 57 d2 cb e9 47 e8 97 e8 03 f4 77 0c 0d 86 15 83 c7 88 67 Data Ascii: 3l0.B8,c"VcwE6wB aAHXLXNH $47Q'"K&b21XH,#/{C7$C2'ITFnR#,4H#dk9, +3![b@qS(RjJ4e2AURT5ZBRQ4u9IKhhitNWGwg
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: a3 bf 3c b8 bc 65 a7 c9 ce cd 3b 3f 54 a4 54 f4 54 fa 54 36 ee d2 dd b5 61 d7 f8 6e d1 ee 1b 7b bc f6 34 ec d5 db 5b bc f7 fd 3e c9 be db 55 01 55 4d d5 66 d5 65 fb 49 fb b3 f7 3f ae 89 aa e9 f8 96 fb 6d 5d ad 4e 6d 71 ed c7 03 d2 03 fd 07 23 0e b6 d7 b9 d4 d5 1d d2 3d 54 52 8f d6 2b eb 47 0e c7 1f be fe 9d ef 77 2d 0d 36 0d 55 8d 9c c6 e2 23 70 44 79 e4 e9 f7 09 df f7 1e 0d 3a da 76 8c 7b ac e1 07 d3 1f 76 1d 67 1d 2f 6a 42 9a f2 9a 46 9b 53 9a fb 5b 62 5b ba 4f cc 3e d1 d6 ea de 7a fc 47 db 1f 0f 9c 34 3c 59 79 4a f3 54 c9 69 da e9 82 d3 93 67 f2 cf 8c 9d 95 9d 7d 7e 2e f9 dc 60 db a2 b6 7b e7 63 ce df 6a 0f 6f ef ba 10 74 e1 d2 45 ff 8b e7 3b bc 3b ce 5c f2 b8 74 f2 b2 db e5 13 57 b8 57 9a af 3a 5f 6d ea 74 ea 3c fe 93 d3 4f c7 bb 9c bb 9a ae b9 5c 6b Data Ascii: <e;?TTTT6an{4[>UUMfeI?m]Nmq#=TR+Gw-6U#pDy:v{vg/jBFS[b[O>zG4<YyJTig}~.`{cjotE;;\tWW:_mt<O\k
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 32 30 31 37 2d 31 31 2d 30 38 54 31 33 3a 30 36 3a 30 38 2d 30 38 3a 30 30 3c 2f 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 64 63 3a 66 6f 72 6d 61 74 3e 69 6d 61 67 65 2f 70 6e 67 3c 2f 64 63 3a 66 6f 72 6d 61 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 33 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3e 78 6d 70 2e 69 69 64 3a 62 66 66 31 32 32 38 38 2d 38 39 64 33 2d 34 38 64 36 2d 61 30 36 35 2d 30 35 62 38 63 30 39 35 65 39 63 64 3c 2f 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 Data Ascii: <xmp:MetadataDate>2017-11-08T13:06:08-08:00</xmp:MetadataDate> <dc:format>image/png</dc:format> <photoshop:ColorMode>3</photoshop:ColorMode> <xmpMM:InstanceID>xmp.iid:bff12288-89d3-48d6-a065-05b8c095e9cd</xmpMM:Instance
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3e 31 3c 2f 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3e 33 30 30 30 30 30 30 2f 31 30 30 30 30 3c 2f 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3e 33 30 30 30 30 30 30 2f 31 30 30 30 30 3c 2f 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 32 3c 2f 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 43 6f Data Ascii: /xmpMM:History> <tiff:Orientation>1</tiff:Orientation> <tiff:XResolution>3000000/10000</tiff:XResolution> <tiff:YResolution>3000000/10000</tiff:YResolution> <tiff:ResolutionUnit>2</tiff:ResolutionUnit> <exif:Co
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50417	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:50 UTC	553	OUT	GET /8bC8ZC9RQ_cJj5lSa8LjCfRClGeSyp4SkN72C0tMSUIqGPVjEpHeUDfAScLNKy82MiXWLBlkpMl4FhJGrGRDhzHxOoXq5v-QSt-rvg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:50 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8028 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:34:04 GMT Expires: Tue, 28 May 2024 22:34:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 586 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 16 69 43 43 50 69 63 63 00 00 48 89 b5 56 79 3c 94 6b 1b 7e de f7 9d 7d b1 cd 90 dd d8 b7 46 96 30 c8 be 93 c8 4e 9b 31 33 18 cb 60 cc a0 d2 26 a9 70 22 49 b6 12 39 15 3a 74 5a 90 d3 22 2d da 8e d2 a6 a2 ce c8 11 aa d3 d1 22 95 ca f7 0e 7f e8 fb 7d e7 cf f3 5d bf df f3 bc d7 7b fd ee fb 7e ee e7 7e ff 78 2f 00 c8 63 00 05 8c ae 14 81 48 18 ec ed c6 88 8c 8a 66 e0 1f 03 04 a8 01 45 a0 07 b4 d8 9c 8c 34 f0 bf 80 e6 e9 c7 87 73 6f f7 98 d2 dd f8 93 e3 b3 d6 77 61 2d d9 6e 5f fe bc b1 d5 8e fa 0f b9 3f 42 8e cb cb e0 a0 e5 3c 50 be 36 16 3d 1c e5 5d 28 a7 c7 86 06 bb a3 fc 3e 00 04 0a 37 85 cb 05 80 28 41 Data Ascii: PNGIHDRxx9d6gAMAaiCCPiccHVy<k~}F0N13`&p"I9:tZ"-"}]{~~x/cHfE4sowa-n_?B<P6=](>7(A
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 9a 2a a2 ee a2 36 52 2f 51 9f 51 3f c9 d0 64 cc 64 7c 65 b8 32 9b 64 aa 65 da 64 ee ca bc 91 25 ca ea cb ba ca ae 96 5d 27 5b 2e 7b 52 f6 b6 ec 6b 39 a2 9c 81 9c bb 1c 5b 6e a3 5c b5 dc 19 b9 7e b9 49 79 9a bc 85 7c a0 7c 8a 7c 91 7c 93 fc 75 f9 31 05 bc 82 81 82 a7 02 57 21 4f e1 90 c2 25 85 61 1a 42 d3 a5 b9 d3 38 b4 ad b4 06 da 15 da 08 1d 47 37 a4 fb d2 13 e9 85 f4 5f e8 bd f4 09 45 05 c5 c5 8a e1 8a d9 8a d5 8a e7 14 25 4a 88 92 81 92 af 52 b2 52 b1 d2 09 a5 87 4a 5f 16 68 2c 70 5d c0 5b b0 73 41 cb 82 bb 0b a6 94 d5 94 5d 94 79 ca 05 ca ad ca 0f 94 bf a8 30 54 3c 55 92 54 76 ab b4 ab 3c 55 c5 a8 9a a8 2e 57 cd 52 3d a0 7a 45 f5 b5 1a 5d cd 41 8d a3 56 a0 76 42 ed 89 3a ac 6e a2 1e ac be 5e fd 90 fa 2d f5 49 0d 4d 0d 6f 8d 34 8d 4a 8d 4b 1a af 35 95 Data Ascii: *6R/QQ?dd\|e2ded%]'[.{Rk9[n\~Iy\|\|\|\|u1W!O%aB8G7_E%JRRJ_h,p][sA]y0T<UTv<U.WR=zE]AVvB:n^-IMo4JK5
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: bf f9 60 d9 83 be 87 61 0f 1f f5 af ec 97 3c e2 3e 1a 7b 9c fc f8 ed 93 cc 27 d3 03 9b 07 b1 83 05 4f e5 9e 96 3f 53 7f 56 ff 87 f1 1f ad 12 1b c9 b9 21 8f a1 5b cf 43 9e 0f 0c 73 86 5f fd 99 f1 e7 d7 91 bc 17 d4 17 e5 a3 5a a3 8d 63 96 63 67 c7 bd c6 ef bc 5c f1 72 e4 55 da ab e9 d7 f9 7f c9 ff 55 f3 c6 e8 cd a9 bf 5d fe be 35 11 39 31 f2 56 f8 76 e6 5d d1 7b 95 f7 47 3e 2c fe d0 3d 19 34 f9 ec 63 ca c7 e9 a9 82 4f 2a 9f 8e 7e 66 7d ee f9 12 f1 65 74 3a eb 2b fe 6b c5 37 e3 6f 9d df fd bf 0f ce a4 cc cc fc e0 4d cc 50 5b c2 98 f7 25 1e bc 38 b6 38 59 c4 90 1a 16 f7 d4 e4 54 b1 90 11 92 c6 e6 f0 18 4c 86 d4 c4 fc df 7c 4a 6c 25 00 ed db 00 50 7e 32 af a1 08 9a 7b cc f9 b6 59 40 e0 9f 01 cf e7 21 4a e8 b2 42 a5 86 79 2d b5 1e 00 d6 24 aa 97 64 f0 e3 67 35 Data Ascii: `a<>{'O?SV![Cs_Zccg\rUU]591Vv]{G>,=4cO*~f}et:+k7oMP[%88YTL\|Jl%P~2{Y@!JBy-$dg5
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: ce 1d 25 57 dc 37 df ec 46 67 e7 0c 03 70 c6 d3 ca 3b 9c 37 6f a8 1c 71 63 62 dc e8 e7 f7 bc 43 a5 6f 3a 3a de 64 74 b4 b2 a3 5e dc b1 c3 ee f9 a7 90 82 f4 f2 3a cb 98 98 76 ca 88 4b 9a 71 c4 88 8d d2 0b fd ac 31 20 60 3f f7 ec d1 ff dc 32 5f 7e f9 1d aa d5 cf e6 6c 90 4c 1a 19 91 e1 e1 6b 48 ea 6f b1 21 c7 8d 0b 67 8b 16 d9 d2 0b fb ac d2 ca aa 80 a3 47 cf d0 8f b8 6b d6 78 d2 c7 e7 98 f4 42 3e eb 74 75 4d e1 d4 a9 01 ba 15 97 34 62 50 d0 86 e7 53 7e 06 40 b5 9a ec d3 67 37 cf 9d b3 d1 9d c0 81 81 e3 e9 e0 90 23 bd 70 cf 29 d8 a4 c9 5d f6 ef bf b0 36 da d5 b8 d5 83 5f 7d e5 89 07 0f fe 07 57 af be d0 f0 aa 22 11 6e 6e 40 f7 ee 82 5e 5e b2 ad 69 18 0a 0a 2c 70 f3 e6 18 4e 9e dc b7 c1 69 b1 5f bf 0f 08 94 49 af b5 b5 65 70 30 f9 f9 e7 64 7c 3c 79 e3 06 59 Data Ascii: %W7Fgp;7oqcbCo::dt^:vKq1 `?2_~lLkHo!gGkxB>tuM4bPS~@g7#p)]6_}W"nn@^^i,pNi_Iep0d\|<yY
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 45 c0 27 9f 28 bb d8 ee fb ef 81 7b f7 c4 bd 8c 56 7c f1 a2 13 52 52 5a 82 ff fd af 1b 81 72 c5 6b 58 42 82 76 da 2d 38 58 3f 2d b8 22 8a 8b c9 7d fb c8 77 de 51 ae 8c d7 af 8b bc af 5f 57 be 05 03 e4 77 df f5 53 23 29 c9 13 32 62 56 76 7b 18 6f e4 c6 0d d1 31 d2 37 1a 35 02 42 42 80 19 33 80 b8 38 60 f2 64 fd e7 99 9a 2a 5c 6d 6b 2b 9e 56 4a 23 31 b1 9d 1a c9 c9 6d 15 cf 38 24 44 2c 70 2b 2b 03 8e 1d 53 36 6f 3b 3b 60 f8 70 60 ee 5c 60 fb 76 60 b0 1e 63 9e ec de 0d 3c 78 20 ee e7 cd d3 5f 3e 55 21 3d bd 8d 1a 19 19 ee 8a 67 ac f9 1c 2a 2b 13 4e 90 01 0f 0f 21 f4 c7 1f 03 1b 36 88 d1 27 5d e3 e3 8f c5 2a 4e 00 e8 27 61 a0 f0 ca 15 17 35 2e 5c 70 55 3c 63 df 87 41 57 cb cb 81 ad 5b 15 cf fe 11 8c 8d 01 6f 6f 60 cc 18 e0 9f ff 14 9d 31 5d 43 f3 b9 d4 fe f1 Data Ascii: E'({V\|RRZrkXBv-8X?-"}wQ_WwS#)2bVv{o175BB38`d\mk+VJ#1m8$D,p++S6o;;`p`\`v`c<x _>U!=g+N!6']*N'a5.\pU<cAW[oo`1]C
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 88 55 31 2a 4a 0c 68 90 e4 83 07 a2 ff 20 3b d4 f0 9c 39 33 79 fc b8 e9 63 02 03 00 c7 8c 71 a7 af ef 09 a9 06 0e 1b 26 62 3f 6a 7a d6 e9 e9 e4 82 05 f2 c5 fc 23 a7 4c d1 b6 dc f2 72 11 28 75 e2 44 b9 36 39 3a e6 70 e6 cc aa 8f 89 67 5c 5c 63 4e 98 f0 ae 74 e7 8d 19 23 62 3f 6a 5a f2 95 2b e4 da b5 f2 45 d5 70 c9 12 ed 3b f7 c1 03 d1 8a df 7c 53 be 5d 63 c6 6c e6 c2 85 d5 9f a7 c4 09 13 02 e8 ec 2c ff f8 ba e1 c3 45 ec 47 4d 68 fd bc 3c d1 b2 fd fc e4 da 15 17 a7 8d 5f 7d ff be 08 2f 2c bb e5 0a 96 70 c2 84 51 24 ab d5 17 5c b1 c2 96 a3 46 7d 69 00 06 93 fe fe 22 b4 be 26 7e 65 79 b9 68 39 9f 7e aa bc 2d 73 e6 88 3e 81 a6 c2 95 94 88 a8 b8 e1 e1 f2 fd 04 90 a1 a1 fb 39 7d 7a eb ea d5 d5 88 1c 1e 3e 92 76 76 b9 d2 8d 06 c4 21 18 8b 17 57 0e 30 96 9b 4b 26 Data Ascii: U1*Jh ;93ycq&b?jz#Lr(uD69:pg\\cNt#b?jZ+Ep;\|S]cl,EGMh<_}/,pQ$\F}i"&~eyh9~-s>9}z>vv!W0K&
2024-05-27 22:43:50 UTC	218	IN	Data Raw: 47 14 17 bf 88 84 84 50 24 24 f4 41 4e 8e 9c 0e 4b e3 c6 05 f0 f7 ff 15 7e 7e fb 60 67 77 04 7b f6 64 62 c9 92 42 95 af 6f 69 cd 3f 96 03 83 16 b8 22 48 aa f1 ca 2b a6 70 75 35 83 97 57 67 9c 3f df 0b 09 09 2f 22 31 b1 23 2e 5e 74 d6 4b a6 f6 f6 39 f0 f2 3a 07 5f df df d0 a1 c3 51 94 95 9d c0 e6 cd 05 58 bd ba 54 e5 ed 2d f7 48 b3 5a e2 89 11 b8 2a 90 54 23 39 b9 25 92 92 3c 90 98 d8 16 69 69 6d 90 95 e5 8a ab 57 ed 51 58 68 8b bc 3c 2b 14 15 99 01 30 85 f6 9c 46 02 28 45 a3 46 c5 b0 b6 2e 84 a5 e5 2d bc f0 c2 35 38 3b 5f 84 87 47 3a da b5 4b 45 87 0e e7 d1 b9 f3 45 43 79 97 d6 17 ff 0f a4 9b 0d e2 ff ff 7a 3e 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: GP$$ANK~~`gw{dbBoi?"H+pu5Wg?/"1#.^tK9:_QXT-HZ*T#9%<iimWQXh<+0F(EF.-58;_G:KEECyz>IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50420	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:50 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:51 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:50 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:51 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:51 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50419	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:50 UTC	786	OUT	GET /moWtYpo1G3n-1QfF5rNSy7n2IIQs785-H9DStefngR0kWMsmnPkzMu-SKH3eUxHVddekMttIA5olrn_wo3p50z04NyRZYPHYBc2cxvE=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:51 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8054 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:19:02 GMT Expires: Tue, 28 May 2024 21:19:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 5088 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:51 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1f 2d 49 44 41 54 78 9c ed 9d 6b 90 2d 57 75 df 7f 6b f7 e3 9c 33 73 e7 be 74 af a4 8b 90 74 25 14 a1 8a 04 02 81 01 bb 08 0f 23 85 02 1c c5 c2 a9 a4 12 27 95 c4 50 b6 2a 94 fd 29 15 62 27 1f 02 e5 3c 08 b8 02 15 e3 94 83 a1 52 94 71 25 2e a2 38 2e aa 62 01 b1 31 b8 04 12 2a d9 04 81 40 08 24 dd 2b 21 5d dd c7 cc dc 99 f3 ee de 2b 1f fa dd a7 fb 9c ee 33 33 12 1f ce 2a 1d dd 39 dd 7b ef b5 f6 fa ef b5 f6 5a 7b ef ee 03 2b 5a d1 8a 56 b4 a2 15 ad 68 45 2b 5a d1 8a 56 b4 a2 15 ad 68 45 2b 5a d1 8a 56 b4 a2 15 1d 2c c9 be b4 f2 c1 0b 47 ee bd c9 ff 45 cf 37 af f5 c4 59 83 00 11 04 d0 96 d2 c8 a8 3f 0a 2e 9c Data Ascii: PNGIHDRxx9d6sBIT\|d-IDATxk-Wuk3stt%#'P)b'<Rq%.8.b1@$+!]+33*9{Z{+ZVhE+ZVhE+ZV,GE7Y?.
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 9e c7 7f 1e d0 4d c8 f5 3d 5c df 85 2c e5 a9 90 63 0e ff 79 a4 8a 9d 0e 6f 6e 28 4a 4a ad 00 fe e8 1f f7 5f 8e 3a 7e d9 6a 1b bb e1 0a 0b cc 7f d4 86 04 e3 49 7d 14 d6 a2 fd da 32 8b 9a 5a 1a 64 c5 f5 5d 5c df 29 a4 48 7b 05 39 6f c5 3a 0d 7a 77 fd ed cf 5d bd 50 94 1c b5 02 78 6c e5 2e 84 8d bc 30 f3 3a d0 7a 0e 55 8b 9d 04 f5 85 cb 60 cf 03 72 01 df 85 20 57 2a bb be 9e 2a 78 9e 8b e7 39 b3 41 56 8d 7c 4d 05 cb 40 96 43 d2 39 fc f6 9a 9a 95 d4 0a e0 50 ed dd c0 91 3a ab cd 2b b4 6d 50 a1 36 9a 83 c5 86 cd 0c 37 0f f2 42 f7 5c 2d cf 7e 5b b3 e7 19 3c df 69 ec d3 db 82 2c c2 91 10 b9 bb 59 eb 11 35 06 f8 0b 5f 51 63 55 4e 97 95 b2 6c 94 5b a6 30 08 19 ee 8c e7 02 b1 8c d5 15 8a 2c 13 4c b5 00 59 04 5c bf 83 b8 b3 0b 84 b5 58 b6 d1 9b 8a 84 21 37 ff 0b 3e Data Ascii: M=\,cyon(JJ_:~jI}2Zd]\)H{9o:zw]Pxl.0:zU`r W**x9AV\|M@C9P:+mP67B\-~[<i,Y5_QcUNl[0,LY\X!7>
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 08 2b 2e 93 aa d2 d9 d8 98 d9 36 ac 96 67 0f 8c e2 4c c4 06 f6 ba b7 bc f3 33 bd f2 ed 99 fd e0 91 04 27 24 d4 db 64 f1 f4 91 d2 dc 72 b5 0f 3b 47 e7 b0 06 9b 3b 40 88 6a fc 8c 7b 45 f9 aa eb 9a 8c c0 05 bc f2 75 55 43 6c 38 c5 86 e1 6c f6 22 54 a6 34 33 bc 65 0e 9f c2 05 83 eb 1b 94 10 ac 9d 5b 58 2b 2e d6 ea a2 f2 c9 76 50 c2 db e8 6d 9c 00 ce e6 6f cd 00 1c 8c 47 8a 4e 15 0d 2b 5a aa a7 85 83 a1 42 a1 61 a8 8c 46 db a8 1d 60 c3 68 a4 57 75 a0 2e 95 d4 6a 4d 55 d4 8f 6e 58 42 06 bb 9b d1 29 fb 1a 90 ca bc aa 6c ab 5c 2e c1 3c 5f d5 38 86 f1 f0 32 36 d8 25 7a 4a be 5e ce 3a dd 55 1d 10 98 b9 14 7f b7 16 3b 0d 67 9b 9a 01 58 8d d7 17 1b 3c d7 76 26 48 4a b7 4a 0b 04 94 e4 a1 e9 64 f9 b2 42 c9 15 d7 96 11 42 1c 9f c9 14 3a 5e cd db 5d b4 99 5b 9e b7 3c 9c Data Ascii: +.6gL3'$dr;G;@j{EuUCl8l"T43e[X+.vPmoGN+ZBaF`hWu.jMUnXB)l\.<_826%zJ^:U;gX<v&HJJdBB:^][<
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 2d 76 32 c0 0c 77 70 87 3b c8 64 54 bd 3e eb 38 84 de 3a 81 bf 8e 76 7a 38 be 9f 02 98 b4 9d 07 9a e4 e8 6e cc 4b 51 d4 0a 41 18 b0 e6 85 5c 79 dc e5 e4 31 1f bf 33 9b ba a9 55 b6 36 c7 bc 70 69 c2 f9 ed 10 35 0e ae 31 88 91 18 5c 01 22 17 9d 7c 8d 06 74 3c d9 47 a3 2a b2 ea e9 18 2e 5f 40 76 2e 61 26 c3 8a be 29 ea b8 4c fd 0d e4 d0 b1 71 d0 5d fb b5 07 ff f3 6d ff b5 0d 5e ad 5f 27 7c e2 ba ab 47 ce 34 e0 cc f3 17 79 f2 ec 05 3c a3 f8 5d 07 c7 44 ee 6d 3a 09 18 8f 2d 2a 06 af e3 e1 ad ad c7 a3 33 71 90 b1 6b 16 13 f5 36 9e 13 a3 7c 29 5b b7 d5 38 9d 32 dd 43 d8 ce 3a 93 f5 e3 10 04 30 9d 80 0d 50 55 8c 18 42 c7 05 63 10 c7 c5 f5 bc 18 50 c5 26 8d c4 f3 3b 62 48 5f 25 2c 82 a8 c9 86 b7 28 62 c0 73 5c 26 ea 71 e6 7c c8 0f 9f 1d e1 3b 96 4e d7 e0 89 10 aa Data Ascii: -v2wp;dT>8:vz8nKQA\y13U6pi51\"\|t<G._@v.a&)Lq]m^_'\|G4y<]Dm:-3qk6\|)[82C:0PUBcP&;bH_%,(bs\&q\|;N
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 24 0b da 66 e7 36 49 5d 45 c6 2b 6d bc 60 75 73 f8 a4 83 a6 e8 59 4c a9 5c be 0d 55 98 86 30 b1 10 e4 80 f7 4d f4 49 df e8 30 13 4c e6 e5 cd 00 95 bc 7b 92 c4 8f b7 3f 34 b0 97 5f 3e 8b c4 2b 28 38 b3 65 00 c7 f1 a0 07 e1 70 90 2d 86 a4 77 cb 4a 2d 7f cd 97 cd ae 66 1c f2 81 40 b1 4e f4 65 01 2f 9d ad 93 cd b1 32 53 30 bf 15 10 87 84 28 30 09 61 33 10 4e ae c3 1d a7 84 1b 4e 08 47 d7 05 cf 11 86 53 e5 dc 36 3c 76 0e be 72 c6 72 b5 2f 6c 78 e5 61 5d cd ab 30 88 93 eb f2 22 cc c1 d6 da 0a cb ca 0b 13 51 32 48 8d eb 67 20 6b de 9a f2 f5 72 75 28 cd 61 b9 2e 15 7a 57 72 57 a2 65 cb 28 35 5e f1 75 d6 72 cb 02 55 96 42 11 a6 16 76 2d fc cc 69 e1 9e d7 39 dc 7c 4a f0 dc d8 4f c4 ce 22 dd 08 52 18 4c 1c be f8 a8 f2 d9 87 2d 93 21 1c f1 ab 18 97 78 95 fa 18 96 7f Data Ascii: $f6I]E+m`usYL\U0MI0L{?4_>+(8ep-wJ-f@Ne/2S0(0a3NNGS6<vrr/lxa]0"Q2Hg kru(a.zWrWe(5^urUBv-i9\|JO"RL-!x
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: bf d7 31 09 60 38 49 64 63 5f c0 85 65 e6 e0 b2 5f 2a 69 6e df ac 3a 6e c8 38 2e f8 f1 62 48 21 45 02 ca 6b 6a fb 01 6e ee 98 8d 67 a2 cd fa 34 10 d6 a8 4c c7 83 d7 5d 2f ec a2 1c 51 8a 59 85 2a 37 f5 e0 97 ff 9b 9d 59 62 4c b2 a6 f7 de 0e ff f8 6d d9 c2 89 08 6c 0d 60 73 94 9c 29 9c 05 77 59 bd b6 b6 e0 f2 5a ec 52 e6 3b 8f 2a da 32 9e 87 db 59 2b 76 7c ce 1e f0 7e 80 0b d1 2a d4 83 3f 56 2e 0f 67 c5 3c 72 08 ee 7d bd 70 39 28 82 0b 91 6b b7 c9 b4 91 eb 52 a0 70 a2 07 af 3a 5d f4 3a 46 e0 85 2d 78 66 0b 3c 53 6f b9 ae 9a d6 5a 5e fa 05 06 95 98 96 fd ee 22 71 9a 96 57 45 3c 17 c7 ef c5 67 a1 ab c1 2d d3 4c 9e db 02 dc 98 2d 27 5c e1 fe 47 8b 82 59 ab 1c ee c1 bb 6e 17 5e 73 0a c6 96 e2 81 47 91 f4 e1 fe f4 21 ff b8 f1 37 9c 16 ee 38 1d 45 e2 79 7a 61 0b Data Ascii: 1`8Idc_e_in:n8.bH!Ekjng4L]/QY7YbLml`s)wYZR;2Y+v\|~?V.g<r}p9(kRp:]:F-xf<SoZ^"qWE<g-L-'\GYn^sG!78Eyza
2024-05-27 22:43:51 UTC	245	IN	Data Raw: b7 72 0a d8 07 70 15 65 bc bd 7d f6 81 df 3a bd dc ef 48 56 c9 d6 96 fe c6 3f ff d1 bf 72 ba 9d df 70 3a eb 56 8c 71 c5 18 0a 4e 50 2a ff ac ea f7 72 a0 57 4c 05 15 1a 8f e6 e4 70 9a 69 3e 01 36 f7 04 fd ac 40 55 0c 25 7e 43 49 79 19 24 c7 2b bd 5f 4e 21 b2 67 f7 4b 75 92 04 4e d4 5a 55 b5 c1 78 bc 8b 1d f5 7f f3 c1 8f df fa 91 2a 29 9a d2 be d9 d1 db 7f e3 cc 6d 81 72 0b c2 5a 19 28 d1 97 c4 3b 97 48 08 ec d4 91 49 68 6a a4 89 0e 60 c8 fc 85 55 eb ba 15 07 61 e3 7b 36 3f d8 8a bb 4f 8e 3a e5 e5 95 88 a9 0a f1 2b 68 a3 97 cc a2 bb be 31 8f 7d e5 63 d7 7d 77 71 9f 56 b4 a2 15 ad 68 45 2b 5a d1 8a 56 b4 a2 15 ad 68 45 2b 5a d1 8a 56 b4 a2 15 ad 68 45 2b 7a e9 e9 ff 03 b4 05 09 23 b0 37 ce a8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: rpe}:HV?rp:VqNPrWLpi>6@U%~CIy$+_N!gKuNZUx)mrZ(;HIhj`Ua{6?O:+h1}c}wqVhE+ZVhE+ZVhE+z#7IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50418	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:50 UTC	785	OUT	GET /6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mvJvvcvtrNc0MESF98dAx6ivasEsZNxoaUZU-Q=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:50 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 9634 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:19:31 GMT Expires: Tue, 28 May 2024 22:19:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 1459 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:50 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 20 00 49 44 41 54 78 9c ed 9d 79 98 5c 55 9d f7 3f e7 dc 5b 55 bd 64 eb a4 b3 77 12 08 41 16 43 d8 06 24 0c 83 88 c2 08 2e 43 04 81 81 d7 71 78 c7 71 e3 55 10 11 65 7b 1f df 17 64 54 94 19 51 71 c4 19 99 f1 f1 7d 1d 15 90 f1 f5 01 41 90 4c 08 10 45 16 13 05 19 c8 de 4b d2 6b 75 77 75 57 d7 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2 IDATxy\U?[UdwAC$.CqxqUe{dTQq}ALEKkuwuW
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: f9 12 fb 46 06 38 fc 53 29 44 3c 8e bd 68 09 d6 9c 39 b7 77 7d f5 5b b7 56 67 a6 f9 74 c0 01 ee bd f9 53 27 9a 4c e6 11 b7 7f ff 52 3d 31 1e 48 6c 89 82 4d b2 9f cd b1 c3 0d 00 1c 7a de 5a 23 67 cf 21 b6 78 49 9f 68 69 bb a0 eb 2b df f8 6d 75 86 9a 47 55 0c 5d 73 a9 e7 96 eb ae f1 46 93 2f 65 f6 ec 5a aa 27 27 40 5a 1c 22 6e 40 15 6a 90 47 21 c0 b2 d0 13 29 32 bb 76 2c f5 86 07 5f ea fe f4 c7 af 69 2e 6f 55 58 38 10 9d a8 a1 a4 e8 f9 e2 cd 9b d4 d0 c0 59 3a 99 44 58 56 71 a1 9a bc d9 fa eb cc b8 27 5d e6 76 71 df 06 94 87 ec e8 24 d6 b9 68 73 d7 e7 6f 3f 5b 2c 58 52 73 4e a6 51 9a 71 80 f7 fc af cf 2e d5 a3 a3 bf f6 fa 7a ba 70 32 08 69 95 ee b8 19 00 97 b8 76 48 01 0c a0 35 22 d1 42 6c f9 8a 6e 7b ce 9c d3 97 fd dd d7 fa aa 33 d8 38 cd 28 c0 bb 6f b9 ee Data Ascii: F8S)D<h9w}[VgtS'LR=1HlMzZ#g!xIhi+muGU]sF/eZ''@Z"n@jG!)2v,_i.oUX8Y:DXVq']vq$hso?[,XRsNQq.zp2ivH5"Bln{38(o
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: 33 b4 0b 67 a8 9b f4 6b f7 a3 86 7e 8a 1d 9f 8b b4 57 82 6c cd db 73 9f 3d 29 43 fe b5 10 19 21 73 27 69 c2 c9 9d 3b 61 63 72 f7 b2 6d 89 ec df 7e 39 93 bd e6 df 35 7e fb 61 08 29 7c 9d 27 ec 36 62 0b 8f 7c df ac f3 be 57 d3 e6 fa 9a 01 3e e7 a1 1b 5f df 95 1a 3c ca 2a 58 88 1f 8a d9 fc cd 0b 83 9c ba 79 27 76 ab cd 22 4b 12 c3 5f 6f 90 08 a4 10 59 3b 20 23 20 67 e3 e4 28 d0 45 e5 82 b2 e5 fc 0f 63 d0 99 34 a9 81 dd 64 ce be 88 39 ef 78 27 9d 27 9f 4a 6b 47 87 bf c8 a1 75 98 4d 29 12 90 70 42 11 ec 34 41 48 9c c9 24 a9 1d cf 93 7e fd 67 30 70 0f 56 fc 78 84 35 3b 5b 5e 04 7a 53 46 d1 42 67 c7 94 0f 20 c1 24 35 f9 93 a4 70 d2 88 50 3e 83 eb c1 98 a5 f4 fb 91 fe 8c 0f a4 d8 20 d0 88 d6 15 db 5b ce 7b 68 4d 2d b8 d5 04 f0 15 4f dc b5 7e eb c0 f6 67 26 95 5b Data Ascii: 3gk~Wls=)C!s'i;acrm~95~a)\|'6b\|W>_<*Xy'v"K_oY; # g(Ec4d9x''JkGuM)pB4AH$~g0pVx5;[^zSFBg $5pP> [{hM-O~g&[
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: c1 ba 69 a4 4e b4 9d 82 b6 8c 03 ce c0 55 95 30 a9 08 f0 78 66 f2 a2 bc c1 d5 00 f4 5c 4f f1 cf 27 2c 64 78 6e 2b 5a 1b 54 90 8e d4 1a 46 b3 7f 47 b7 ed 14 a6 32 73 cb 8d 93 db 37 d2 f1 95 ef f8 6a b9 00 5c a5 e1 1b 8f 48 6e 7a 4c d2 22 7c 60 9b 45 ed 36 b4 4a b8 e1 e7 92 bb 1f 96 28 5d 0c 72 a2 63 25 99 63 ef 63 2a fd 54 ee e1 87 81 6b d6 06 e5 7b 7a a2 08 50 82 7b e4 40 43 14 d4 a5 b8 7d 11 31 6d 6a f2 a2 4a 63 29 0b f0 fb 9f b8 73 65 da 73 8e 2c a5 c5 b3 b9 e6 12 80 4b a0 cd cb f0 cc 85 c7 e0 8e b9 59 09 d6 41 6e 7a 5c 69 b4 df 48 1e b8 7e c3 b9 76 f4 f0 3e c4 b5 f7 b0 e4 a4 53 f2 6c 6e f8 0c 6e fb 89 e4 a7 af 0a 56 b6 95 b3 75 51 7e 4b 5c 2b 59 30 32 0e 01 47 b4 c1 83 7f 10 7c fe 01 99 7d ee d9 a2 ca 25 b1 f8 24 52 9d f7 a2 55 4f be 74 22 0a 70 0a 3d Data Ascii: iNU0xf\O',dxn+ZTFG2s7j\HnzL"\|`E6J(]rc%cc*Tk{zP{@C}1mjJc)ses,KYAnz\iH~v>SlnnVuQ~K\+Y02G\|}%$RUOt"p=
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: ca eb 53 0a f8 cd 5e 8a d4 73 25 a9 85 e6 c4 c6 d5 c6 de 2e e1 99 5d 82 fc 9f 82 30 88 b6 15 28 93 29 f0 92 45 19 86 1b 7d be 25 ea 69 af c5 38 0f 17 89 42 11 c0 1b 5f dc d8 6a a0 35 9c 67 79 69 c8 06 d9 09 c9 02 26 8c c3 a6 73 8e c2 49 3a 64 8f be 18 85 59 b0 84 58 4b 6b de 83 10 02 b6 0e 08 ec c8 a4 af 06 6c 53 12 1f 35 34 61 4b 78 b1 bf 40 bb 1a 83 b4 e3 28 b1 bc ce 96 6b ed b5 62 99 56 f6 3c d1 5a 78 a7 08 e0 51 67 c2 e8 72 d3 b7 20 e7 5c 8f 94 47 f3 d4 3f ec 6a 65 c7 89 4b d1 19 e5 ab 69 ad 91 f3 bb 90 96 95 3f 1c 01 db 46 73 8b f5 0d 49 6d 85 9b e5 53 9c e5 55 73 48 52 c0 d3 49 8a ed a7 b4 31 62 01 fe 46 a6 6c 83 75 f4 5e 8d ca 39 10 da e0 8d 15 dd 2c 02 d8 9a aa 6d 71 3f af fd 32 c0 97 9a 04 02 58 98 c9 f0 d8 d9 ab 98 70 7c f5 ac 00 a3 b3 cb 0f f9 Data Ascii: S^s%.]0()E}%i8B_j5gyi&sI:dYXKklS54aKx@(kbV<ZxQgr \G?jeKi?FsImSUsHRI1bFlu^9,mq?2Xp\|
2024-05-27 22:43:50 UTC	1390	IN	Data Raw: c0 d5 c5 c7 47 ef 7d 5c f2 dd 6d fe 89 03 59 86 bd 8a 8f ac c2 4d 65 7c 9b fb b7 6b 7d c9 2d 04 d7 b6 6c 5e de fd 2a eb 9c db 89 9b 24 f5 85 46 e5 3a ae 4f 7a 01 26 d2 66 e7 ac b3 36 96 dc 70 47 35 ae 64 46 3f 14 e2 5a db ee c9 52 2c 37 56 4f 22 98 67 cf e3 b4 a7 ee a4 67 62 30 cf 1e 87 92 7c cd 85 9a af 5e 60 70 8c 1f be e4 f7 5b 45 6a 2b d8 db 71 0f 32 06 fe e1 02 cd 35 ef 2a 05 ae c5 f6 be 5e 62 fb ee 26 2e 27 a8 cf b1 6a 1e b8 08 48 a7 f5 43 95 8a 54 04 d8 1e cf dc 57 8f 9a ae 15 bc 5a a9 4d 48 f0 1c de b9 f1 4b 8c 39 93 45 20 67 5c 38 77 ad e1 7b 57 69 fe 7c 0d bc 98 f2 c1 f1 2a 06 c5 a5 2f 2b e3 d7 7d 2e 05 ef 5c 63 f8 fe 55 8a 73 d7 1a 32 6e 31 b8 43 e3 63 fc cb 23 b7 72 e2 52 17 94 c3 f4 97 06 1b 7b 4e ca 83 fe 61 7d 5f a5 32 55 39 5b 71 ef 07 92 Data Ascii: G}\mYMe\|k}-l^$F:Oz&f6pG5dF?ZR,7VO"ggb0\|^`p[Ej+q25^b&.'jHCTWZMHK9E g\8w{Wi\|*/+}.\cUs2n1Cc#rR{Na}_2U9[q
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 44 d9 1a 3a b0 b1 da 20 26 5c bf a4 32 59 d5 ac b5 61 68 c4 e1 f7 ef e9 e2 f8 79 7d a0 ca 85 45 75 3a 54 50 37 b8 00 03 c3 aa 6f d1 79 4f 2d ab a3 62 96 1a f6 96 ec 49 ef 02 2b a3 66 f8 8c 55 7d 92 5a 53 8d 40 72 4d b8 da 10 54 ca ed f5 36 0c b9 9a 6b ba da 38 7e 91 0b 2a cd c1 01 d7 ef 76 7c 42 33 36 ae 2f a8 af 62 8e aa 05 74 65 29 f9 8b 97 f7 cf 3f e7 d8 a4 4a d8 ef 2c bb da 5e 33 4d 3f ee aa b5 05 df 89 f2 81 14 ae 46 28 93 fd 1b ed ab c3 f4 88 c3 cf de bb 8c 36 dd 03 45 07 f6 1a b0 b7 d0 00 b8 06 c7 31 ec 1b 50 d7 ae d9 f0 f4 bf d7 57 39 47 d3 8a 77 76 5f ff e3 af c5 52 99 cd b5 31 6f 2a 7c 1a a3 7a 5a 30 26 0c 7d c8 ae 2e 88 ec a1 64 13 a8 6d 18 9a f2 b8 fb c4 0e 3a 5b 53 fe 51 d0 a2 1e 2b 71 53 b6 f3 1a 38 cc 6f cb 68 18 1c 51 9b 8f ba e8 e9 af d5 Data Ascii: D: &\2Yahy}Eu:TP7oyO-bI+fU}ZS@rMT6k8~v\|B36/bte)?J,^3M?F(6E1PW9Gwv_R1o\|zZ0&}.dm:[SQ+qS8ohQ
2024-05-27 22:43:51 UTC	435	IN	Data Raw: 6f 58 6f a4 f8 82 4e d8 6f 53 2d 16 da 96 95 1d 5d 63 b2 2a 38 b4 bb d9 24 47 b0 cf 2a e9 28 4e 51 f0 fc a5 4b 60 62 3b 60 4d 4f 0d 1b c8 38 86 d4 84 26 35 a9 9f f4 94 b9 f9 50 90 d8 42 3a 24 01 0e a9 eb 8b 1b 96 6b 4b 5c 6d 6c f9 71 1d b7 e6 aa b8 85 8e 49 04 26 0b b6 31 51 30 03 40 8d c9 49 af f2 ed ef e8 b0 c3 d6 0b ba 38 61 5e 4f 8d 67 8b 22 24 72 ff 3a 19 c3 64 da 30 39 a5 47 1d c7 dc e3 7a fa 9b 6f ba f8 99 8a 47 38 0f 26 1d d2 00 47 69 f9 97 36 9c 80 14 57 69 29 2e d2 31 79 a4 8a 5b 18 5b 64 57 84 28 94 5e 15 d8 62 cf 97 de 5b 3b 12 fc ef 73 5a 21 dd 4d c5 35 96 82 84 96 a7 c0 71 0d e9 29 43 7a 4a ef 74 3d f3 90 d6 dc b7 66 c3 e6 92 ef 86 3c d4 e8 0d 03 70 94 96 fd dd 45 2b 91 e2 7c 23 39 c7 08 fe 5c 0b d1 69 24 e8 20 49 a6 05 81 54 fb d2 3b 36 90 Data Ascii: oXoNoS-]c8$G(NQK`b;`MO8&5PB:$kK\mlqI&1Q0@I8a^Og"$r:d09GzoG8&Gi6Wi).1y[[dW(^b[;sZ!M5q)CzJt=f<pE+\|#9\i$ IT;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50422	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:51 UTC	783	OUT	GET /HZ7MIzEUISdwHRUdOnlf9tGLcnTh0s147KiRQCELgTqsg5OdqUGbkZVlk_mCAEdDOboGRQDWQxZNdm_vBM7Oo8lgAaDzjM3wb-KB=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:51 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8166 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:18:20 GMT Expires: Tue, 28 May 2024 19:18:20 GMT Cache-Control: public, max-age=86400, no-transform Age: 12331 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:51 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1f 9d 49 44 41 54 78 9c ed 9d 69 74 64 57 75 ef 7f fb 9c 5b 93 c6 d2 dc a3 ed b6 b1 dd 1e 9a f6 6c e3 01 db 4c b6 31 d8 21 24 4c 49 58 2b 59 2f 8c 8f e1 39 79 81 95 7c 78 c9 62 39 0f 58 0f 02 09 2b 60 1e 79 7c 88 93 05 98 18 70 1c 87 c1 60 0c c6 23 78 a2 3d b5 ed 6e 6c 77 b7 5a 52 4b 55 9a 4b 75 ef 39 fb 7d a8 52 b7 54 aa 92 aa a4 2b a9 9b f4 5f ab ba ab ee 3d d3 3d ff bb f7 d9 67 9f 09 8e e3 38 8e e3 38 8e e3 28 85 ac 77 01 e2 42 3e 9f 4f 86 61 d8 6e 8c c9 18 63 d2 aa 9a 04 ac 31 26 f0 de 8b 73 4e 38 f2 bc 6a 8c 51 6b ad 7a ef 23 c0 89 48 11 28 78 ef a7 ac b5 63 d9 6c b6 b8 6e 0f 13 23 8e 59 82 73 b9 5c Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxitdWu[lL1!$LIX+Y/9y\|xb9X+`y\|p`#x=nlwZRKUKu9}RT+_==g88(wB>Oanc1&sN8jQkz#H(xcln#Ys\
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 61 68 c6 c6 c6 ae 35 c6 7c 05 b8 2c ee f4 7f 0b 71 a5 31 e6 ab b9 5c ee 8d de fb d8 f9 88 55 b4 26 26 26 ac 73 ee 2d de fb 9b 8d 31 67 19 b3 2a 0a e2 98 46 35 49 f5 de e3 bd ff b5 31 e6 af 82 20 b8 ab a5 a5 c5 c5 95 5f 6c 0c 78 ef 4d 99 dc 4f 1f 27 b7 31 18 63 30 c6 ec f0 de 7f 3a 0c c3 eb 26 27 27 63 ab bc 58 12 da bf 7f bf 8c 8e 8e 5e a3 aa 37 1b 63 b6 af 2b b9 22 60 0c 58 3b e7 13 40 50 f1 b1 c1 fc 30 c6 94 e2 ae 13 ca 24 9f a9 aa 37 17 0a 85 d7 dd 71 c7 1d b1 a4 1b cb 13 0d 0f 0f 5f 2c 22 b7 58 6b 77 ae 39 b9 22 47 48 75 0e 26 27 d0 d1 1c 3a 31 81 16 66 a0 58 04 17 a1 5e a1 ac 1e 05 8e bc 04 89 04 a4 52 48 73 13 d2 9e 45 da b2 a5 17 40 15 bc 3f 1c 27 2e 2c 65 4c 79 ef 71 ce fd 2a 08 82 f7 b5 b7 b7 3f ba d2 fc 56 4c 70 a1 50 38 a1 50 28 fc ab 88 5c b6 Data Ascii: ah5\|,q1\U&&&s-1gF5I1 _lxMO'1c0:&''cX^7c+"`X;@P0$7q_,"Xkw9"GHu&':1fX^RHsE@?'.,eLyq?VLpP8P(\
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 59 c8 96 ad 48 73 2b 92 4a 42 22 09 d6 40 d9 bd a8 c5 10 8a 33 e8 e4 14 7a e0 15 74 f7 d3 f8 67 9e 80 c9 31 48 b7 94 7d df 35 ac 67 17 41 32 5d 6a 73 af bd 1e e9 ee 5d 6b 72 01 b6 18 63 de 30 34 34 74 67 4f 4f 4f cd 55 8d 8b 12 1c 45 d1 a5 c6 98 4b 63 93 de 72 bb 1b 7d f7 5b e8 de dd d0 da 51 11 60 11 72 6b 49 af f7 50 98 80 be cd d8 eb df 8e d9 7e 16 d2 d5 8d e9 e8 84 b6 f6 32 51 35 0b 54 7a 31 c6 c7 f0 af b9 1c 1d 1e c6 3f bb 0b f7 d3 1f c0 c0 7e 48 37 2f d4 2e ce 81 0d 08 6e f8 7d ec 35 d7 23 9d 5d 4b 92 bb 1a 13 ea ca 9c 5c 96 48 24 2e 01 ee a9 15 6e 51 82 bd f7 17 8a c8 e9 b1 11 1c 24 70 f7 fd 14 7f f7 7f 40 4b b6 e2 e6 32 c8 2d 16 90 a6 26 cc 0d 7f 82 bd e0 12 a4 a7 07 99 25 75 76 b0 be 1e c9 6a 6d c3 b4 65 e1 c4 6d 98 53 5e 85 bd f0 35 b8 07 ef c3 Data Ascii: YHs+JB"@3ztg1H}5gA2]js]krc044tgOOOUEKcr}[Q`rkIP~2Q5Tz1?~H7/.n}5#]K\H$.nQ$p@K2-&%uvjmemS^5
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: f6 82 a4 ab 07 a9 29 99 13 68 ea 7c 48 b4 b0 1a 33 23 37 05 90 a9 a1 16 ab 93 5b 65 b8 b2 56 e2 4b 6b e6 d2 63 5b 98 0c 61 62 92 58 27 21 97 7b 3f f3 38 9d f7 a8 d6 da 40 a4 16 23 0d c2 45 88 db 5b ca 6f d6 a2 98 fb a9 05 05 4d be 0a 0d da 56 c7 7a 6e 48 72 1b c8 bf c1 a2 46 0e c6 a6 a1 10 c6 c7 b1 88 34 19 63 e6 39 1c e6 11 ec 9c 93 ca c3 2b 96 97 13 25 e3 68 b6 4f db e8 d3 07 1b 50 1b 83 22 a9 86 3a 8b 52 8b dc 7a 9f 64 29 55 6f 80 b1 19 61 b2 40 6c 0c 97 17 8d cf e3 74 de 0f ef bd c4 d5 49 17 af 0b 1b a0 25 51 ca 5b 83 4e 30 19 56 43 45 d7 ce 75 05 e1 ea 50 cd 95 30 02 53 45 98 2e 4a 6c 12 5c de 8e 69 5e 72 95 ad 51 7c 2d 82 d6 1e 44 a8 12 98 c3 81 05 94 b5 db f1 66 ad 54 73 65 92 02 14 1d 84 31 ce fa 29 4b f0 bc 8a 5b a7 2d 7d 8f 0e cf 54 23 e4 ae 58 Data Ascii: )h\|H3#7[eVKkc[abX'!{?8@#E[oMVznHrF4c9+%hOP":Rzd)Uoa@ltI%Q[N0VCEuP0SE.Jl\i^rQ\|-DfTse1)K[-}T#X
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 87 aa 04 1b 63 5e 36 c6 c4 a3 a6 35 42 da 2f 65 77 ea f5 7c 28 7f 03 0f 86 5d 6c 10 bf c4 22 ff 39 be 69 4a 84 5e 9e e8 e5 c6 5f 7d 9a 5f f4 ff aa 44 72 8c ea ba 2e 72 0d e4 a6 e0 83 df 12 36 d6 da dd b8 66 06 a5 ff 22 85 4d cd 70 de c9 da 70 77 6d 09 3c e6 bd 7f b9 da 8d aa f5 3c 35 35 b5 bb 58 2c fe 34 5a e6 b9 04 0b a0 c2 a1 ae eb 08 13 db c8 50 2b cd 8a 41 87 0a 08 c2 15 89 5e ae f9 e5 a7 f8 f1 fe 07 28 ba 10 23 2b b7 52 96 6c 73 cb 54 8e 4c c2 07 be 69 60 46 aa 0e f1 2d 45 ee ec 00 db 99 9b 61 5b b7 c6 66 3d 47 51 44 b1 58 bc b7 bb bb fb f9 6a f7 ab d6 d0 d6 ad 5b 9d b5 f6 69 63 4c 2c 6a da a9 e3 a2 de 33 b9 bc 67 47 79 4a 8e 67 3e a1 f5 3d 6d 49 92 7b b8 e9 f1 2f 72 eb f3 77 90 9f 29 f5 0a 96 23 cd 73 8e 79 ad 09 23 86 19 5f 64 ef a0 72 d3 b7 2c 93 Data Ascii: c^65B/ew\|(]l"9iJ^_}_Dr.r6f"Mppwm<<55X,4ZP+A^(#+RlsTLi`F-Ea[f=GQDXj[icL,j3gGyJg>=mI{/rw)#sy#_dr,
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 97 db 14 45 d1 c3 a9 54 6a 73 dc d3 68 04 41 44 d8 75 68 37 9f 7d ea eb ec 1a ff 0d 9d b6 09 d3 e0 c8 51 5d 2f c1 32 89 ad 75 3f 54 c7 b3 3a c1 17 4f fd 63 ae df 76 35 ad 89 26 fc 2a ac ad 2a 16 8b fb 32 99 cc f9 cd cd cd 0b c6 7d 6b a1 61 96 06 07 07 3f 9a 4a a5 fe 8f 31 0d 76 60 eb 80 6a a9 9f dc 3f 35 c4 bf ee be 83 ef f4 ff 0c ab 72 a4 eb 52 2b 5e bd ad dc 92 42 dd 18 b9 1e a5 a8 11 3d e9 4e 6e da fe 87 5c b6 e9 7c 0c b2 2a e4 7a ef c3 99 99 99 8f f4 f5 f5 dd d2 48 bc 65 89 e1 e0 e0 e0 8f d3 e9 f4 eb 96 eb e4 5f 0a 46 0c 4e 1d f7 ec 7b 90 6f ee f9 4f f6 4c f7 a3 aa 04 62 e7 15 38 2e 62 97 4a ab 1a b1 91 7a 32 36 c9 15 5d e7 f0 9e d3 de ca 69 d9 6d 84 2e 8c d5 a0 3a 9c bf 2a 13 13 13 3f dc bc 79 73 dd 47 da cd 62 59 04 17 0a 85 ce d1 d1 d1 a7 33 99 4c Data Ascii: ETjshADuh7}Q]/2u?T:Ocv5&*2}ka?J1v`j?5rR+^B=Nn\\|zHe_FN{oOLb8.bJz26]im.:*?ysGbY3L
2024-05-27 22:43:51 UTC	358	IN	Data Raw: bd 3b 91 48 7c bf a3 a3 63 c9 15 07 6b 85 a3 8a e0 59 0c 0d 0d 65 bc f7 af f1 de 5f 14 04 c1 15 d6 da 0b bd f7 3d 41 10 b0 de 5d 2c ef 3d 51 14 61 8c 19 74 ce 3d 12 86 e1 7d c6 98 87 80 07 36 6c d8 10 cf 5e db 31 e2 a8 24 78 2e 06 06 06 5e 05 ec 70 ce 6d 4f 26 93 57 01 e7 8a 48 4f 79 fb fa 55 57 e3 73 da 55 80 41 ef fd 63 61 18 fe d4 5a fb ac 88 fc ba b7 b7 f7 c5 55 2d c0 0a 71 d4 13 3c 8b fd fb f7 4b 22 91 38 cd 39 77 42 10 04 9b 45 e4 52 55 3d 57 44 5e 05 64 67 c9 9e fb a9 c4 ec b5 aa c7 d5 95 db d1 39 ed 29 40 5e 55 9f 17 91 47 bd f7 0f 78 ef 0f 00 2f 0f 0d 0d 3d b7 63 c7 8e 55 7d de b8 70 cc 10 5c 89 a1 a1 a1 9e 30 0c 7b 45 24 2b 22 ed d6 da 53 44 e4 d5 c0 49 aa ba 19 e8 52 d5 96 f2 71 6f 73 a5 70 f6 f0 8a d9 df 53 94 76 b9 3f 04 1c 00 f6 02 4f 3a e7 Data Ascii: ;H\|ckYe_=A],=Qat=}6l^1$x.^pmO&WHOyUWsUAcaZU-q<K"89wBERU=WD^dg9)@^UGx/=cU}p\0{E$+"SDIRqospSv?O:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50421	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:51 UTC	797	OUT	GET /hDmpjNjn66Z7hyYvAee18jZfIss2NCbUss41HLkWh3s08AxT6prRWd6iv9CnofK6cXXS42OzQ_0J6UcM44xV1ouv2Tq53nCjI28DDorFDHS4RQrICw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:51 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 7124 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:09:38 GMT Expires: Tue, 28 May 2024 22:09:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 2053 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:51 UTC	858	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 ff e2 0b f8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0b e8 00 00 00 00 02 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d9 00 03 00 1b 00 15 00 24 00 1f 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 29 f8 3d de af f2 55 ae 78 42 fa e4 ca 83 39 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 64 65 73 63 00 00 01 44 00 00 00 79 62 58 59 5a 00 00 01 c0 00 00 00 14 62 54 52 43 00 00 01 d4 00 00 08 0c 64 6d 64 64 00 Data Ascii: JFIFExifII1PicasaICC_PROFILEmntrRGB XYZ $acsp-)=UxB9descDybXYZbTRCdmdd
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 0b f9 0c 12 0c 2a 0c 43 0c 5c 0c 75 0c 8e 0c a7 0c c0 0c d9 0c f3 0d 0d 0d 26 0d 40 0d 5a 0d 74 0d 8e 0d a9 0d c3 0d de 0d f8 0e 13 0e 2e 0e 49 0e 64 0e 7f 0e 9b 0e b6 0e d2 0e ee 0f Data Ascii: +:IXgw'7HYj{+=Oat2FZn%:Ody'=Tj"9Qi*C\u&@Zt.Id
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac d0 ad 44 ad b8 ae 2d ae a1 af 16 af 8b b0 00 b0 75 b0 ea b1 60 b1 d6 b2 4b b2 c2 b3 38 b3 ae b4 25 b4 9c b5 13 b5 8a b6 01 b6 79 b6 f0 b7 68 b7 e0 b8 59 b8 d1 b9 4a b9 c2 ba 3b ba b5 bb 2e bb a7 bc 21 bc 9b bd 15 bd 8f be 0a be 84 be ff bf 7a bf f5 c0 70 c0 ec c1 67 c1 e3 c2 5f c2 db c3 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 c1 d3 44 d3 c6 d4 49 d4 cb d5 4e d5 d1 d6 55 d6 d8 d7 5c d7 e0 d8 64 d8 e8 d9 6c d9 f1 da 76 da fb db 80 dc 05 dc 8a dd 10 dd 96 de 1c de a2 df 29 df af e0 36 e0 bd e1 44 e1 cc e2 53 e2 Data Ascii: 8nR7u\D-u`K8%yhYJ;.!zpg_XQKFA=:8655679<?DINU\dlv)6DS
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 51 b0 51 03 4c 8d bd 77 84 f4 e5 5a 66 69 c2 b5 2c a4 68 12 48 03 d3 5e b9 f8 0c 05 cf d9 bf 69 99 95 f3 56 83 48 60 ed 45 49 a6 a8 50 10 54 94 05 9d 1e 5a 80 89 38 20 2e 0c bb 24 c5 0f 64 94 50 07 b1 f1 e6 1e ad e7 cc 5d 25 a3 9a 55 f7 82 be 8c 2d b9 f1 54 4b 56 1f 22 a4 83 e8 4c 7a 79 1d 69 07 d4 ea 0f 36 24 6b 0c 2e 1c 9f 76 69 85 25 d3 72 82 31 3a 83 95 f7 22 d9 f8 5f 1c 61 08 42 3a 91 6e 84 21 08 20 84 21 08 20 84 21 08 20 84 21 15 7f 69 bd a6 3b 3e f3 46 e8 d9 9f 68 cd 2a ea 90 fd df ce 4c 93 6b 19 e4 5c 3c c1 ee 79 0e f2 e6 4f 52 9d 4e 7a a0 f0 65 91 8e a7 40 37 3d e3 90 c6 21 4e 4e 37 28 d9 71 c3 e0 35 27 61 1a 1b 50 ed 3c 64 6f 34 6e 8c 99 6a 8c d2 b2 ad 0f dd f9 5e 4c 83 6b 19 e4 5c 3c c0 7b 8c d5 7b cb 99 34 9d a4 00 2c 06 42 39 23 2a 34 1d 23 Data Ascii: QQLwZfi,hH^iVH`EIPTZ8 .$dP]%U-TKV"Lzyi6$k.vi%r1:"_aB:n! ! ! !i;>FhLk\<yORNze@7=!NN7(q5'aP<do4nj^Lk\<{{4,B9#4#
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 71 40 5f 00 09 00 78 0d fa e6 62 5a d5 be b2 1e 6b 8a 6a 93 89 da fb 99 b6 00 b9 00 b1 47 0a 02 86 c2 09 56 00 02 05 8f 15 8b c9 71 5a 7d 9f c5 da 29 f0 df 17 68 91 6b 7f 35 2f f9 5a f7 e9 6b c5 f1 d5 86 ac 3c 35 35 2b e4 d2 65 30 fa 4c 98 3f 55 53 f3 3d 04 23 6b 7c 18 a9 ca a3 6d 53 90 12 1c 04 af 0f c2 8b 1b 13 86 40 df 04 8c c8 36 e9 a1 38 1b 89 dd 76 9c e7 f3 ca 2b 2d 28 04 a8 e2 a5 02 2e 01 27 12 45 8d d4 74 22 fb 96 ac 35 61 e1 a9 a9 5f 26 93 29 87 d2 64 c0 7e aa a7 e6 7a 08 97 a1 10 e6 b3 b5 9f 8b 15 35 33 70 e6 b3 a6 a9 f1 79 a2 1f 87 a3 30 f1 72 19 5c b3 84 aa 99 c1 74 cb 7d b9 dc 57 7e 49 1e f3 00 99 ac 4c f7 64 8e fd 63 71 ac 2d 6d b2 b1 93 48 c3 2c a6 4f 16 39 f5 59 77 b8 cb 91 7b 1f e1 e5 8a 23 85 f6 b6 a8 36 2e d3 3f 17 3b ef 5c fe 85 ad 6f Data Ascii: q@_xbZkjGVqZ})hk5/Zk<55+e0L?US=#k\|mS@68v+-(.'Et"5a_&)d~z53py0r\t}W~ILdcq-mH,O9Yw{#6.?;\o
2024-05-27 22:43:51 UTC	706	IN	Data Raw: 07 ef 19 d6 76 b3 f7 98 a9 a9 9b bb cc 4e 9a a7 de 79 a2 1f 83 a3 30 f1 f2 1c 37 2f 17 42 11 86 eb 75 b9 aa c4 c9 99 9a 55 ce 80 64 91 b0 1b 7b 9c ce 30 ed 93 93 6e 51 b0 db 63 c4 ea 4e e6 11 88 cc 4c ba b1 d5 86 0c 35 35 2b de 64 d2 65 30 f7 7e 4e e3 e3 ea aa 7c 1c cf 15 b0 7b f0 ff 00 0f cd 56 e6 44 bc b8 c0 7f 52 8e 49 1b 9e bb 0c c9 e9 72 3e 27 e7 db 93 6f e2 39 e4 35 27 bc ce 90 d5 86 ac 77 78 6a 6a 57 bc e7 26 53 0f 77 e4 ee 3e 3e aa a7 c1 cc f1 5b 04 a7 08 46 ce a2 51 25 68 d2 a9 95 95 4d 80 cc 9c d4 75 24 ef ec 06 03 08 50 ce 4e 39 36 e1 71 c3 e0 34 03 61 08 42 11 df 88 30 84 21 04 10 84 21 04 10 84 21 04 11 52 76 a6 da 16 72 ce 99 a2 a8 5c ca 59 60 2d 74 f5 c9 d9 d8 06 ec f2 9b f7 15 54 8d eb af 13 31 28 0a 60 7c 75 73 b5 be 2c 7b c9 98 fe 3d e3 Data Ascii: vNy07/BuUd{0nQcNL55+de0~N\|{VDRIr>'o95'wxjjW&Sw>>[FQ%hMu$PN96q4aB0!!!Rvr\Y`-tT1(`\|us,{=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50424	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:51 UTC	553	OUT	GET /KTDOhPuoj2uFXQzWV1UoktTwtuucLM49NAFS07-vtX8dCGhSjpxJwumzTuzI6qZyyqLdmZASs3ARnaI3gIae1MYIjaG57KsmUhit2g=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:51 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1112 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:14:30 GMT Expires: Tue, 28 May 2024 21:14:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 5361 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:51 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 04 0f 49 44 41 54 78 9c ed dd 3f 68 94 77 1c c7 f1 f7 93 36 ad 09 cd e4 22 14 b3 b9 38 24 20 5c 8b 06 07 41 37 15 83 44 0a 0e 9a c1 ad 2a 8e a2 76 88 5b 07 11 47 1d 02 22 5d 2a 81 82 2e 46 17 07 b5 56 d0 74 09 15 29 8a 06 07 1d fc 53 ae 49 5a f3 eb f0 e4 20 da e7 49 2e fa fc ee fb 3c df e7 f3 82 03 31 87 7c f0 9d 7b ee b9 3c b9 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 a4 5c 92 d5 dc 39 c0 1a a0 2f fd a3 18 48 80 b7 09 cc 16 f6 2f 06 e8 0a f0 63 80 d7 01 82 6e a5 b8 bd 5e 6c d2 d5 ce 67 c4 72 71 bf 01 7e 2d ec b3 45 62 f8 36 81 bb 79 1f cc 0d 1c 60 00 98 8a 32 49 8a 36 98 c0 ef 59 1f 58 2e 70 13 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx?hw6"8$ \A7Dv[G"].FVt)SIZ I.<1\|{<DDDDDDDDDDDDDDDD\9/H/cn^lgrq~-Eb6y`2I6YX.p
2024-05-27 22:43:51 UTC	253	IN	Data Raw: ce 29 b0 73 79 81 f5 1b be ab 27 b3 59 5e e0 3f 23 0e 91 38 32 9b e5 05 fe 29 e2 10 89 23 b3 59 de f5 e0 6e 60 3e ea 1c 29 da 17 49 7a 1d ff 3d 99 8f e0 c5 3b ee 89 3e 49 8a b2 27 2b 2e 2c 73 16 9d c0 2f e8 17 45 57 c1 e8 62 ab 4c 99 87 e8 a5 02 7c 0d 8c 03 fe de 99 55 6d 93 a4 71 67 96 bb d3 8a 81 5b 42 fa 68 6f 00 5f a1 97 51 56 12 e0 2f e0 b7 04 16 ac c7 88 88 88 48 be b6 4f b2 62 0a 30 02 fc 40 7a 22 57 f5 13 b8 84 f4 04 68 2c 81 9f ad c7 98 0b 30 14 d2 b7 8c 79 bc 99 bf 97 a6 0c 97 0b 3d bf 0d f0 3b eb 01 65 08 fc 87 f5 80 88 a6 ad 07 94 42 80 1b 25 38 9c 16 7d bb 61 fd ff 0a 25 39 c9 02 08 d0 07 ac c1 c7 49 d6 6c 02 6f ad 87 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 48 19 fd 07 b4 6d 4c d0 79 fa 9f c6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: )sy'Y^?#82)#Yn`>)Iz=;>I'+.,s/EWbL\|Umqg[Bho_QV/HOb0@z"Wh,0y=;eB%8}a%9IloHmLyIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50423	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:51 UTC	785	OUT	GET /mXJcrB99dv3D2R3626qv23yNzcp64hKW1n7cx78DQmybiBB-radVYvRguIs-lfQz1oYh72Oq_5Tk51U6fAqzzJb95vww5cyi79Wk0g=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:51 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4437 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:44:48 GMT Expires: Tue, 28 May 2024 18:44:48 GMT Cache-Control: public, max-age=86400, no-transform Age: 14343 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:51 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 10 a1 49 44 41 54 78 9c ed 9d 7b 90 1c c5 7d c7 3f 3d 33 bb 7b 8f d1 49 c7 1d e8 71 27 90 84 08 96 c4 53 48 46 a0 c4 a0 f5 d9 12 05 08 81 14 38 02 38 51 c2 d3 32 29 12 28 0a 58 db 29 62 6f 95 8b a4 80 f0 08 a1 70 84 01 9b 3a 83 4f 18 db 84 d7 b2 c4 0a 10 02 07 26 e2 65 90 00 81 90 10 2f 49 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx{}?=3{Iq'SHF88Q2)(X)bop:O&e/I
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 11 49 81 81 15 c0 52 09 a0 81 19 db 4a 02 2f dc f0 c6 c8 2c 45 d9 1c 39 22 27 b0 9d 31 e6 a1 b2 33 26 4a 29 40 c0 84 f8 66 0c e9 41 74 25 9e 08 9c 9d 4c 5b f3 c2 36 64 38 91 12 d8 ce 18 06 b0 12 58 02 7c 11 b1 9a 5c f7 04 ad 31 b0 65 a4 83 47 4b 80 95 c9 b4 55 2c c1 2f 14 22 25 30 b0 10 e8 dc e7 3f 2e b4 c5 61 66 e3 1f d9 ed 46 5a 60 50 b6 2f 0c db 88 2f 13 19 81 ed 8c d1 0a 5c 88 ea 7a 7c 81 e3 18 d4 25 e0 d0 a6 67 f0 3c 37 ec 38 f4 68 ec ed 36 b5 86 6d c8 5e 22 23 30 b0 00 58 35 fc 9f 52 08 90 b0 a0 f9 36 66 c6 07 18 f4 e2 61 8f 26 8d c6 2a d4 bd 44 82 48 08 6c 67 8c 76 e0 7b 40 d3 f0 63 02 89 b4 05 47 4e 7c 97 c5 2d 4f f3 89 63 44 db 87 d5 3d 7c 2f 99 b6 da c3 36 04 22 20 b0 9d 31 34 54 03 65 59 b1 73 5c a9 81 06 2b da fe 8e 89 9a 45 7f f4 bd 78 19 b0 Data Ascii: IRJ/,E9"'13&J)@fAt%L[6d8X\|\1eGKU,/"%0?.afFZ`P//\z\|%g<78h6m^"#0X5R6fa&*DHlgv{@cGN\|-OcD=\|/6" 14TeYs\+Ex
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: a7 1c d2 95 8c 19 57 e2 c1 6b a8 52 80 dc 67 3e 07 6e ad 5f 9a fb c2 63 1f bd e6 20 07 b8 35 7f 2c ea cc a3 82 f4 9e 31 09 6c 67 8c 99 c0 15 63 ad 34 60 ee 40 6d 8b 33 9c 0d f9 63 e3 81 2b 92 69 6b e6 58 2e 1c ab 07 5f 0b 4c dd fb 87 00 74 e1 61 08 07 43 1b e1 47 b8 e8 22 d0 55 27 ff 00 74 c5 3a 9c fd b6 90 cd 6f 2b db 95 3f 27 ea 4c 45 3d f3 b2 29 7b 90 d9 ce 18 df 02 ce 92 08 34 3c 74 2d 1f fa 93 f0 b9 07 5b bd 66 76 79 26 b6 54 45 0b a0 41 e4 68 d6 f6 d0 a6 59 98 9a 44 d7 3d 90 e0 78 06 92 aa 4d 90 72 81 db 81 b7 46 38 e7 ad fc 39 77 32 e2 12 12 91 e0 ac 64 da 7a 30 9b 32 9f 2c e7 a2 b2 9e ad 93 d1 e3 12 f1 b8 06 27 6b 9a 5a 20 f4 23 07 36 0c cd e0 2d bb 8d 2d 76 13 1f c9 18 3b 64 8c 9c 14 5f bc 1e 26 08 97 66 cd a1 4d 0c d1 1e db c9 9c f8 07 7c 3d b6 Data Ascii: WkRg>n_c 5,1lgc4`@m3c+ikX._LtaCG"U't:o+?'LE=){4<t-[fvy&TEAhYD=xMrF89w2dz02,'kZ #6--v;d_&fM\|=
2024-05-27 22:43:51 UTC	799	IN	Data Raw: 39 34 1c 34 e1 5d 1e b6 4d 40 14 6c 28 44 0e a5 db a8 02 ef 01 b6 04 61 d1 68 78 52 d0 8f c7 a1 46 0e 70 ee a1 9e 6c d8 36 a1 62 d4 f7 84 6d 44 01 b6 a1 06 48 f6 19 48 2f 24 f0 67 c0 6b 41 58 34 1a 0e 1a ed 0c 31 4b cf f5 26 e0 36 71 22 a1 cf 27 ca a6 4c 07 d5 a2 ee 0d db 96 61 bc 06 6c ca a6 cc 7d 02 f7 85 04 de 05 bc 04 04 de 90 f9 32 02 d8 23 75 96 c6 fa d0 c5 d0 2d 5a 5d 34 3e 74 79 5e a3 ba 21 d2 72 e9 07 5e cd a6 cc fe e1 07 f6 13 b8 a7 b3 db 06 9e 07 5e 0e c0 b0 a2 78 40 2f 82 a3 8d dc 2b db e5 fb f7 8a c5 ec 37 3b 21 2c f2 b3 22 7e 06 bc 18 b2 29 7b 79 09 28 98 c9 52 ac 15 bd 89 90 b3 1a 06 a4 c1 31 fa 80 1b c7 bb eb a4 26 3e 08 d3 96 22 6c 01 ee 22 1a a3 4d eb 81 f7 0a 1d 28 28 70 4f 67 77 1f aa 31 b1 b1 8a 46 15 45 a2 da fb 47 e8 fd cf 3a c6 b6 Data Ascii: 944]M@l(DahxRFpl6bmDHH/$gkAX41K&6q"'Lal}2#u-Z]4>ty^!r^^x@/+7;!,"~){y(R1&>"l"M((pOgw1FEG:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50425	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:51 UTC	785	OUT	GET /UnRPa94dWPxyhH3faaGqaEQF5uWqRZ2zSARkm18zlnqntO3-bar_Cffb-W5CZdnE7mPWDo7RTqKFJeuMhjYz3eInIpzwiqF9Yxt3JQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:51 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3834 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:07 GMT Expires: Tue, 28 May 2024 18:50:07 GMT Cache-Control: public, max-age=86400, no-transform Age: 14024 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:51 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0e b1 49 44 41 54 78 9c ed 9d 7b 74 1b d5 9d c7 bf bf 3b 23 3f a4 0d ce cb 40 48 29 6d 81 94 02 05 12 3b 1b 36 21 c1 92 9c 03 2d 9c 05 42 69 0b a7 34 85 f4 01 94 dd 92 d3 6d 17 50 60 93 d4 0a a7 bb ed 16 d8 be 78 34 09 d0 6d 02 7d 9c 96 be 68 63 49 06 0a 04 12 93 04 92 2e 81 26 f4 d0 36 21 b1 f3 b6 64 cb ba 33 bf fd 43 b6 fc 92 65 3d ee 1d c9 ee 7c ce 49 8e 34 9a f9 fe 7e d2 d7 f7 de d1 dc df 5c 01 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 7a a1 72 27 a0 83 bd 80 f0 2d ba 70 ba 61 98 b3 6c 41 53 60 db a7 1b 24 a6 0d 7e b7 96 6d 1f 85 10 7f 31 98 0f 5b 29 b9 57 1e 3e b8 ff b4 5d fb Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{t;#?@H)m;6!-Bi4mP`x4m}hcI.&6!d3Ce=\|I4~\......................zr'-palAS`$~m1[)W>]
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 11 78 3f 03 bb 09 94 02 00 06 9b c4 38 1b 44 a7 00 38 b7 f8 1e a6 f0 6e 39 1b 0c 71 7b 2c e4 fd 4e d1 69 e4 40 9f c1 c1 b9 29 06 4c 5d fa d9 e8 7b 33 5b 00 fc 10 96 f5 db fa b6 57 df ca e7 b8 83 4d b3 cf 10 c2 b8 9c 81 eb 41 74 69 7e 86 db a8 ee 6e c7 77 17 ed c4 ba ba e2 cd 4d 43 e8 4e 89 c9 2f ad ac 3d 56 82 c8 28 ca 1a e8 0c 34 ae b5 89 6e d2 a1 9d 0d 02 12 04 b4 a4 e2 5d df 9c b1 f9 ff 4a ae b0 e8 0c 36 de ce a0 10 03 a7 66 df 23 6d ee b7 17 ed c2 e3 75 67 61 66 49 e6 f6 43 6d d1 90 cf af 40 68 a8 aa 6a c1 83 4d b3 df 47 86 f9 b6 13 27 56 04 58 c4 7c fb f4 e8 56 2d d3 73 1d 81 c6 25 20 7a 94 81 29 03 5b 07 c6 dc c7 ea ce 56 64 2e 00 10 6c d0 a5 6d 21 ef 73 8a 04 01 68 38 c9 22 61 3c ee 84 b9 02 58 5b 1f d9 62 ea 32 17 00 ea a3 5b 7f 56 1f d9 32 55 00 Data Ascii: x?8D8n9q{,Ni@)L]{3[WMAti~nwMCN/=V(4n]J6f#mugafICm@hjMG'VX\|V-s% z)[Vd.lm!sh8"a<X[b2[V2U
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: da 47 60 7b 66 61 0a 79 cc f3 01 5c 06 d0 cd cc a8 2f 58 db e1 6e 79 04 d7 1c a8 9a 7f a1 6f 4a 95 29 ce 23 c2 47 09 7c 13 c0 da 0b 12 6c 16 8d 6d 2b bc ed 83 b7 8d 34 38 62 ae b6 99 ee d1 95 04 01 71 22 5e 66 04 e5 93 f9 ec 2f 5b cd 00 88 d6 31 e3 bd 79 e9 33 df 6c 2e 96 eb 4a cb 52 3d 4d 2d f1 2b 04 e1 11 80 67 e8 8b 42 1b a2 21 df 90 35 40 46 18 2c 23 e6 bb cc 74 8a 96 f0 e0 a7 cc 66 f9 89 62 8e 95 11 33 cc 4c 77 e7 d4 2f 57 b7 5c 00 fe 70 fc 5b 04 be 43 8f 3a 21 1a f2 0d f1 74 c8 18 9c da 64 9c 02 68 32 97 39 5c ac b9 00 60 06 65 88 c0 57 e5 d0 bf b9 d2 cd 05 80 58 c8 b7 9c 21 8a fe 1c 72 c3 f0 87 bb 2f 19 bc 65 88 c1 42 d0 75 ac 61 f0 25 e2 07 cd c5 72 45 a9 3a 66 b3 7c 9a c0 cb 46 e8 33 7f a6 12 bb e5 d1 88 85 bc 4f 31 e8 5f 75 68 13 78 48 11 c6 10 Data Ascii: G`{fay\/XnyoJ)#G\|lm+48bq"^f/[1y3l.JR=M-+gB!5@F,#tfb3Lw/W\p[C:!tdh29\`eWX!r/eBua%rE:f\|F3O1_uhxH
2024-05-27 22:43:51 UTC	196	IN	Data Raw: 6d 30 81 41 6b 93 29 fa 97 17 57 d6 26 d4 a9 ea 81 1a 9e bc f6 ab 60 fc 1b 01 d3 35 c5 28 98 ca 34 98 12 0c ba 3f d1 9d ba ef e5 96 3a a5 37 82 03 0e d4 51 cc d9 78 cd 85 04 fa 2c 88 ae 25 60 46 39 bb f0 ca 30 98 00 e0 30 83 9e 66 c6 ba b6 15 de e7 b4 47 73 8a f3 36 5c 39 b9 9a aa 16 11 68 1e 11 1a 99 f9 0c 22 7a 3f 18 4a ef 4d ce 0e 81 8d d7 51 b7 7b 1b 40 4e 54 75 10 00 48 06 bf 43 10 6f 33 78 1b 40 ed 0c 2b d2 16 9a a4 f6 46 3f 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 97 91 fc 3f db ed 8b a6 77 6d ca 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: m0Ak)W&`5(4?:7Qx,%`F900fGs6\9h"z?JMQ{@NTuHCo3x@+F??wm3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50426	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:51 UTC	554	OUT	GET /6cr6PdE9s0J1ovFNm38uf-dwcOP--68QMWey603BCUah-QcO0gL0TvyqmTBYIgNnJfk8AEgISH_xpw_zd8FNao0jA14Q5MQ7p-eeIto=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:51 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4888 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:39:26 GMT Expires: Tue, 28 May 2024 22:39:26 GMT Cache-Control: public, max-age=86400, no-transform Age: 265 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:51 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 12 64 49 44 41 54 78 9c ed 9d 7d 7c 5c 65 95 c7 bf e7 de 79 c9 5b d3 b4 cd a4 94 52 5a 05 c4 05 15 90 76 d2 17 2a d2 4c 5a 5a 28 2e 28 ca 07 45 5d 17 3e eb ea aa 2c f2 51 04 51 57 16 d4 55 56 45 fc 28 8b ac 6f 88 ba 1f f8 ac ae 20 2d 99 b4 85 b6 40 53 40 56 40 c0 ae ad a5 b4 4d 33 d3 24 6d Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2dIDATx}\|\ey[RZv*LZZ(.(E]>,QQWUVE(o -@S@V@M3$m
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: 14 17 bd 13 d5 0b fd f0 e7 09 b6 10 7a 53 2f d5 1f 7d 0e b5 3d d5 e4 45 31 22 97 87 56 f4 f8 d2 9b 8b de 83 d3 0d 8b ce 77 d5 dd 3e a9 c4 05 30 14 a7 2d 8a 7b c4 f4 ba 1b fc 8d 6a 66 93 bd 31 72 b1 a7 56 47 a1 a8 02 a7 12 f1 5b 5d d8 04 cc 28 a6 9f a2 20 a0 7d e0 74 54 83 14 7e 99 1e 82 52 ab 8e fb 3b 3b 19 fa aa 6e 98 53 54 0d 8a 72 3f 48 ad 39 2f 4c a6 ff fb aa 7a 4d 31 ec fb 86 03 6a e5 36 d5 9d 0f 0a 37 db 9a 3e 4b 9b eb 2e 93 86 36 a7 18 3e 3c ff eb e9 b8 b8 71 a6 f6 67 7e af ca e4 16 57 18 18 3d bb 45 be 8b a9 5e e2 68 c7 26 dd 5a 55 56 0c f3 9e 46 df bd 76 59 8d d5 db f9 47 d0 84 97 76 03 41 01 43 91 90 ed 83 2b 3d cf e9 eb db a8 1b 23 27 78 6d db 33 81 bb 56 2f ad ee e9 b1 92 c0 5c af 6c 06 4e 18 a4 a2 a7 e0 e7 e0 5c 50 65 b1 e3 ba 8f ea e3 a6 a7 Data Ascii: zS/}=E1"Vw>0-{jf1rVG[]( }tT~R;;nSTr?H9/LzM1j67>K.6><qg~W=E^h&ZUVFvYGvAC+=#'xm3V/\lN\Pe
2024-05-27 22:43:51 UTC	1390	IN	Data Raw: e7 12 c0 da 22 81 0d b1 64 4b 29 cd 79 e7 8d d9 60 ad 17 f0 fd 36 a3 ca a2 6c c7 87 0a 2c bc d3 97 68 86 21 86 7c 3d 08 bf 45 43 8c 2f 05 e1 d6 de 10 1d 31 6d 39 54 60 d5 b8 6f d1 bc 8e fc 35 64 96 97 e2 fb e6 bc 31 d1 24 b0 d7 6f bf a2 ee 88 0e 3a 4c 60 c9 da cd 8b cc 4f 6a d6 3d 9a 09 c0 6f d1 90 06 eb 00 22 ff e3 b7 5f 17 19 91 85 32 44 60 45 4f f4 2f 1c 00 5c 31 64 a3 cf 3e 7d c1 40 ee f7 db a7 a8 9e 3c 32 8e d7 48 af 5c 3c 07 88 fa 1b 91 74 4e 2c 87 6a 12 11 99 ff 24 30 6e 4a 8d 97 28 5a a7 cd a1 21 a5 20 5e 17 58 d5 99 83 cf 19 85 a2 3c 3d fe 59 93 13 83 1d bd 02 4f fa ec b6 4e a1 7a 68 1c af a1 ae 31 93 09 14 4a f6 04 09 6c 52 a0 e8 c8 72 14 91 e7 7d 76 5b e3 0e 9b 66 7e 5d 60 11 9d 8d 87 35 3b 72 41 84 67 fc f4 e7 3b ca 9f 7c f6 58 ad 2a e5 83 0f Data Ascii: "dK)y`6l,h!\|=EC/1m9T`o5d1$o:L`Oj=o"_2D`EO/\1d>}@<2H\<tN,j$0nJ(Z! ^X<=YONzh1JlRr}v[f~]`5;rAg;\|X*
2024-05-27 22:43:51 UTC	1248	IN	Data Raw: 31 2c 0e 64 4e e4 a6 97 be 43 a7 55 87 31 8a c8 79 95 4d aa 4d 6e 6f 11 c3 08 74 b7 91 22 22 aa fa c3 d6 8b ce f3 ac 66 89 69 c2 dd 7f fd 4f d6 1f 3e 85 1a 0f c4 3d 4a 85 38 b4 74 9f c6 7d bb 7f 81 03 48 96 44 9c bc eb 62 c5 9a b6 dd 2f c2 2d 85 04 58 ca 98 fd 19 4f 72 d3 42 62 f3 c2 a1 b5 7c 6e ff 6a 66 19 de cf bf d4 99 16 77 b6 d5 f3 4c fb cd 18 e2 a1 c0 00 b5 9f 58 f6 25 01 5f 1f 31 fc 42 55 2f 4b 5d 58 7f 76 21 36 42 46 86 1e 07 7e b3 f7 46 ea c3 c5 29 a0 20 28 b3 24 cc f7 76 5f 81 c8 c0 ed 60 30 05 09 2c 97 7d 07 33 5a 73 25 c8 31 f8 e8 84 60 17 b8 bd 90 01 07 7a 3f c5 3d ed 6f a3 22 4b ef f2 8a a8 38 3c d0 f5 56 5e 38 bc 10 73 58 ad a4 82 4b 17 ce fc 7d 53 c6 94 d0 f9 20 7e 17 de 2c 3a aa fa c1 82 0c 84 e1 b1 f6 b3 98 49 24 af 11 f3 44 38 dd b4 78 Data Ascii: 1,dNCU1yMMnot""fiO>=J8t}HDb/-XOrBb\|njfwLX%_1BU/K]Xv!6BF~F) ($v_`0,}3Zs%1`z?=o"K8<V^8sXK}S ~,:I$D8x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50427	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:51 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:52 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:51 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:52 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50428	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:51 UTC	786	OUT	GET /tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI063JTgu9NvrsvRutrqHOfR5AAWduD51R8zuswV8=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:52 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 13482 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:08 GMT Expires: Tue, 28 May 2024 18:50:08 GMT Cache-Control: public, max-age=86400, no-transform Age: 14023 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 20 00 49 44 41 54 78 9c ed bd 7b 90 6f d9 55 df f7 59 6b ef f3 fb 75 f7 ed be cf 79 4a 33 23 98 d1 7b 46 f3 10 48 3c 84 10 c6 72 4c 81 15 e2 84 b2 93 f2 1f 49 2a 8e 71 9c b8 2a a9 38 ae c4 49 b9 88 9d 00 15 ca 8e ab c0 8a 09 18 53 42 24 4a 08 04 5b 40 79 b0 13 20 98 b8 50 80 38 65 90 40 12 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2 IDATx{oUYkuyJ3#{FH<rLIq8ISB$J[@y P8e@
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: a8 f0 d3 39 a5 9f fa b1 3f d7 7d e2 0b 39 0f 2f 29 01 7f db 7f 7b fd ac 61 0f 26 e5 f5 a5 ca 53 a5 d4 c7 4a e5 95 20 f7 25 e5 9e 2e a3 65 00 11 40 c0 cc a5 d8 25 df bf 94 f8 0e 28 66 21 13 21 ab b1 2e 90 c3 c2 0d 57 82 c1 3c 26 97 ea db 9d dc f5 18 6c 66 88 0a 56 5d 09 ba 4e a8 d5 8f 97 e2 dc 49 e5 aa 0a bf ac c2 7b 77 ba f4 f3 3f f8 ef e6 83 2f c4 9c 7c 59 0b f8 4f fd 8d 83 7c e9 46 79 f5 56 b6 d7 02 4f 0c 95 af 45 79 38 27 4e 1b 9c 1d 06 db 11 dc e5 0a b0 4c 42 6f 95 2c 82 0a f4 05 2a 86 60 24 15 94 70 b9 d6 26 c6 50 15 c4 8c 55 71 a1 82 bb 5d 01 fa 10 60 29 06 a2 9c dc 5d d0 75 8a 00 a2 c6 30 f8 79 54 8c 94 fd 88 59 9b da f8 09 0c fb 94 8a 3c 2d c8 8f 5c fc ee c5 af bf ff 45 96 c8 97 9d 80 bf f5 af df b8 37 09 8f e7 c4 e3 b5 da e3 43 91 27 17 6a 77 23 Data Ascii: 9?}9/){a&SJ %.e@%(f!!.W<&lfV]NI{w?/\|YO\|FyVOEy8'NLBo,*`$p&PUq]`)]u0yTY<-\E7C'jw#
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 7f 3c 87 57 94 2c 84 32 02 b0 1a 95 26 15 34 f0 44 97 fc 78 09 48 d9 ad dd 01 e3 64 f9 4d f9 55 43 f9 42 c1 36 19 1b 09 b8 1f 78 48 e0 7b 17 01 46 fa d0 5c c4 01 43 0a f5 ab b5 55 56 04 51 b7 02 d5 b0 66 11 96 c9 85 30 14 bf 21 d1 a9 2c 07 50 aa 83 af 45 76 ad 3f 0c 17 9d d5 3d c1 10 84 43 2b fa b4 18 eb fb 32 91 11 06 9a 7d bf 21 84 90 71 e1 06 f0 76 1a 12 c2 a2 8c 9c 14 02 f4 28 53 85 c8 42 89 6b 09 a5 93 48 77 cc b0 d9 f1 74 a6 a0 ae f8 01 02 99 e2 78 b5 c9 52 55 5d c8 1e aa 26 25 be dd a1 9f 7b 93 3f 64 67 41 72 32 cf 37 71 37 a5 01 92 3c c7 63 cc f1 ba 34 01 18 67 8f fc e6 bb 70 6b c3 8c e3 c5 98 dd b4 8d 71 da 85 ee 16 97 c2 a7 8a d8 c4 e5 87 4b 6c fb 7b be 39 59 71 97 5d f0 cd 05 27 75 cb 6a 2e 3f 38 e2 d1 75 2e 03 30 39 db 14 f7 ac 04 da b5 23 0c Data Ascii: <W,2&4DxHdMUCB6xH{F\CUVQf0!,PEv?=C+2}!qv(SBkHwtxRU]&%{?dgAr27q7<c4gpkqKl{9Yq]'uj.?8u.09#
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 88 19 cb 85 38 1d 69 ae b0 5d 58 6f 40 0d 16 62 94 10 6c 63 ea 6a 85 45 17 8a 86 90 bb a0 48 07 cf b5 97 d5 36 ce 63 37 b3 60 75 cb 5c f7 46 97 c2 2a ac d1 88 11 53 8b 44 63 9b bb 9c d6 d1 50 cd 5d b9 ca ac 37 49 a6 66 f2 6a 5e 44 28 9e 8d 3a 87 1b 10 dc 04 56 bd b1 4c 8e d8 53 f2 6b 19 7a 9f f8 9c 1c 51 97 b0 9a d6 eb dc f2 f1 2e 81 89 b0 c8 f1 3b 0d cd cb 48 2c 0c c5 c9 fe 24 8e ac bb dc d2 20 57 c2 3c cb f3 aa 79 3a 96 c3 45 0f d1 a0 b7 c8 81 f0 c3 4d 9f d8 9e b0 87 2b a8 31 14 f7 1e a9 f5 69 0d ae 6c 23 af 7d 27 f3 60 8f 35 38 1a c5 e8 b2 df a4 32 69 a5 0a 93 fb 36 a3 5f fb a4 ad 06 9f ec 3e 1a d1 24 e2 6b a9 4e 12 f4 d5 dd 6d e3 6f 55 7d e2 4a 10 f7 3b 5d 14 fd 07 2f 1f 0e bd 8d d5 23 11 c6 5a ae 18 63 b1 7d 11 d7 57 6a 4b ef 1a fa f6 18 8d 84 07 89 Data Ascii: 8i]Xo@blcjEH6c7`u\F*SDcP]7Ifj^D(:VLSkzQ.;H,$ W<y:EM+1il#}'`582i6_>$kNmoU}J;]/#Zc}WjK
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: c7 cf fc a7 5b 57 81 ab c0 ef 3e f0 5f ec 7f a0 db d0 c7 6e 6a c1 07 66 f6 1b 22 f6 09 15 79 b6 56 ce 9b f1 7c ad 3c 67 70 5e 85 8b c0 7e 81 b5 c0 5a 84 75 16 e9 4f 9c 90 fe c7 ff dc 56 bf d9 a5 bf f4 c7 27 bf 6f 67 f5 47 bf 6f b3 63 6c 24 e0 ed 2d f9 d8 60 fc 09 a0 ef 94 7e 6d 0c 7d b1 b2 ea 29 bf f8 57 76 36 ac 83 bc 3c 5e 1e 2f 8f cf 39 36 4c a3 5f 9a e3 ca 5f 82 ad 6f 61 5b 32 3b 28 a7 49 9c 13 38 69 3d 67 49 9c 93 ca 29 33 ce 49 e2 2e 84 33 66 9c 02 4e eb 82 03 c9 fc 3e c6 87 80 0f 21 fc 1e e9 f4 c7 f3 d7 5f b9 79 a7 ee e5 25 27 e0 f5 3f 42 ad 63 81 91 a5 d2 99 90 11 b6 14 4e 54 38 29 85 73 08 7b 54 4e a3 9c 33 38 23 c6 59 cb dc 8d 70 56 2a 27 a9 9c c2 d8 b5 ca 09 8c ad 96 ef b7 96 e0 56 ae 1c 3f af 80 82 2e a3 1e ed 34 78 3c ba c8 55 64 ef 63 a4 7b Data Ascii: [W>_njf"yV\|<gp^~ZuOV'ogGocl$-`~m})Wv6<^/96L__oa[2;(I8i=gI)3I.3fN>!_y%'?BcNT8)s{TN38#YpV*'V?.4x<Udc{
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: cf 7a 19 ec 8a ef 20 ca f8 08 80 76 40 76 97 8e b9 70 4d fc f3 d6 fd b2 59 bd 7f c3 be 68 d1 51 76 47 80 11 b7 70 c7 f3 31 43 d9 c7 dd ec fc 38 4d c0 26 60 79 da a7 ad 2b 40 c1 2d c8 98 d2 a0 66 81 3a 6d 3b 8e d8 67 0c 27 81 73 9a b7 38 ce 68 8d 40 cb 38 4a 41 36 a5 48 f1 b9 4d 9f 8f 73 a0 5b 1e 83 9b 1b 92 93 6e a5 d6 33 26 f0 96 dc ca eb a1 7f 66 65 f6 53 63 4a ee 20 c8 ba 05 46 1a c1 55 4b 39 28 31 d9 31 11 12 2e cd 66 d7 2d 2d fe e9 64 45 26 47 b3 ad 26 1c 9a 01 c0 a4 38 73 b4 cb f4 3b 84 10 83 ec 68 c7 1f 1d 8f 45 fe db 1a dd da fd cc 6f aa 85 85 5b 00 b6 76 cc 5b 82 39 5b fb 7f 6c 26 58 03 62 45 52 59 c6 7c 29 c8 09 26 72 bb 8b 0b 74 97 b4 69 18 de 30 06 fb 75 34 6b 95 ca 98 6b 1e c9 31 cb f4 bf 59 ec 7c 9f 71 7b a6 f8 0b 1c 05 5f 61 a5 c7 41 d7 91 Data Ascii: z v@vpMYhQvGp1C8M&`y+@-f:m;g's8h@8JA6HMs[n3&feScJ FUK9(11.f--dE&G&8s;hEo[v[9[l&XbERY\|)&rti0u4kk1Y\|q{_aA
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: bf f3 16 dc b1 95 f6 b8 82 cd ef 65 8e 1b 46 e0 77 15 58 b9 c0 74 2f e2 ec c0 54 6d 69 bd 4e 51 91 b1 12 f1 b8 21 d7 cd 4c 78 33 14 9d 16 1f 07 be 0b 6f 81 3d 85 b0 6b c6 09 31 4e 49 e1 24 c6 49 13 f6 4c d8 43 38 21 85 3d 29 ec 99 b2 83 e1 c5 d2 16 33 8f 09 f2 48 5b 4d 80 99 b1 7a a3 4c 65 42 a6 9f ad ab b2 1d b7 b9 dd 23 7d d2 f3 39 93 99 9c e7 b1 5e a7 eb 11 7f 45 8b cf 3b cc 5e ea 11 fb cd fb cb e6 b5 81 b9 02 d6 cb a0 f7 fb 85 db ac f0 20 4b 8e da 58 dc 98 95 70 d9 05 d0 dd cf 2d 88 cf 3e 36 12 b0 6e bf e6 c6 f0 4b fc 3c 82 a2 be fe 09 86 9a 91 a4 f8 9a 28 28 09 65 89 b2 63 c6 ae 0c ec 8a b1 03 ec 99 b2 87 b0 87 71 4a 8c 33 e6 3d d5 7b c0 19 93 50 9a ca 29 60 17 63 77 44 b6 61 c5 2f 68 3c 87 5b c7 f6 06 58 9b 40 e7 db cf 62 e7 a8 50 f3 70 31 43 d3 76 Data Ascii: eFwXt/TmiNQ!Lx3o=k1NI$ILC8!=)3H[MzLeB#}9^E;^ KXp->6nK<((ecqJ3={P)`cwDa/h<[X@bPp1Cv
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: ba 42 52 86 1c fd c0 aa 48 2d 7e 2c e2 bd 4b f1 44 98 15 7f f2 5d 44 fd fb a8 fd 79 cb 4d 81 5a 13 a2 bb 60 bb 02 f7 a0 69 e4 a4 a3 c0 60 68 3e 44 65 df ac de 24 a7 7d 49 ba 4f 19 f6 29 76 03 d5 e7 b1 72 d1 d6 37 3f f3 07 df fe 0d 9f 31 78 5e b0 cb 66 72 11 49 d7 ac ae f6 65 6b e7 e0 a1 9f fd 95 cf b9 ac c2 a5 ef fa d6 b3 02 0f 21 f9 35 56 56 6f 56 e4 cd 74 f9 6e 72 be 17 ec 1e 11 2f 0a 8b 26 5f c3 3f bc 9d 89 22 b5 62 25 9a d2 36 1c 1b c6 60 9f 39 7f 29 b2 c5 fb dc 6c 74 cb 86 21 aa 18 1a 1d 8d d9 17 91 5e 6c 61 65 c0 86 01 49 09 33 83 f5 da 85 9b fd 85 1e 68 0a 8d 16 9f 00 15 28 85 f6 aa 5a b1 8a d5 8a e4 14 55 97 b8 a4 ea 6f 9c 32 40 da 3b 6c ac a9 8a 88 a4 b4 8d ea b6 f5 fd 39 c4 43 8b cd 5b 23 4b 5d a1 72 80 a6 15 43 7f 68 65 38 34 e3 40 52 5e 81 3c Data Ascii: BRH-~,KD]DyMZ`i`h>De$}IO)vr7?1x^frIek!5VVoVtnr/&_?"b%6`9)lt!^laeI3h(ZUo2@;l9C[#K]rChe84@R^<
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 94 3f 9a 0b a4 35 5c 4b 58 99 b5 9c b8 a1 d7 68 d6 12 2b 98 b9 bb f5 6c d9 87 d5 12 24 49 f6 f4 86 ea b1 b1 ad b7 94 b2 23 f3 9a 90 34 13 52 ca 1e 73 5b 6e dd 26 a2 bd 86 2d e1 56 ab 82 8a e7 f0 92 72 dc 5b 71 83 49 3e 97 2d 0b d8 64 6c 84 c1 1b b8 70 70 94 dc 0d 69 f2 98 2b 1a 9a bb 40 44 a9 4d 8b db b2 0f 2d 9e 11 6e d2 2a 42 f5 29 16 09 f7 ad 53 3c 1d 4f e8 93 62 9a 7c 52 53 e7 b1 b3 f4 21 4c c1 86 15 b5 5f 3b f3 d5 04 3b ba 53 ef a0 13 f1 73 59 f4 bc 1a 91 2b 63 be 7a d0 d8 cd 6f 71 5c 27 21 c4 04 d1 ec 8d 92 65 70 d0 57 eb 48 ce 48 8a 98 db de 9f db 65 4f e7 ca e0 8a 11 0f 95 79 1f b8 a7 96 36 a6 4c b3 8e 3f 09 16 ef 4e 12 1d 98 6b b5 2b 75 9d 96 64 24 c0 4b 3c 7f 63 91 ea 4c 04 ba 13 17 9e 76 78 4b a5 c7 dd 3c 02 28 4a 4f 6b 72 1e 27 18 81 1c 48 5c Data Ascii: ?5\KXh+l$I#4Rs[n&-Vr[qI>-dlppi+@DM-n*B)S<Ob\|RS!L_;;SsY+czoq\'!epWHHeOy6L?Nk+ud$K<cLvxK<(JOkr'H\
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 9c a2 ca c6 cc 4b 89 8e 96 eb 4a ee 69 a0 03 cd 30 e1 3b 4a 74 fc 21 e3 ae bf ff 4f da 63 a5 e7 e3 ff 6f 3c f7 8e 37 ff 3d d9 d2 d3 64 79 0d f0 cd c0 b7 8a 76 df 60 36 9c 72 37 da 40 16 31 91 2e 84 d1 7a eb 98 c3 04 1d da 5a 5c 82 6a 6c 39 72 08 c8 d4 2d 47 92 a3 65 1b 02 a8 35 72 04 f5 19 08 a2 63 44 d9 f3 11 28 9f 56 f8 00 3c 24 04 08 53 9b 79 07 26 60 24 3a a6 5d 63 b9 32 75 80 61 fd 2a 56 dc 33 77 e5 ea 42 37 89 38 3f 78 b1 a2 7a f8 d9 48 46 5f 30 01 df 6a dc fb 2b bf 55 81 e7 81 5f 8f ff 3f f0 ec 1f ff 9a 2d 35 f9 06 d1 f2 4e d0 b7 1b f6 7a 8c 33 a2 9a 47 d0 34 6f 3e d3 98 bc 12 24 48 8b e5 12 6e 4e c4 9b 0b 24 9a 09 5a 5c 6d 20 28 d6 11 1e cb 99 26 98 45 0d d9 8c 2a 82 94 e2 13 9f bc a4 39 62 08 8b ce 8f 96 63 0f bd bb 5e bc 21 41 73 e7 c7 ab 03 16 Data Ascii: KJi0;Jt!Oco<7=dyv`6r7@1.zZ\jl9r-Ge5rcD(V<$Sy&`$:]c2uaV3wB78?xzHF_0j+U_?-5Nz3G4o>$HnN$Z\m (&E9bc^!As

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50429	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:51 UTC	783	OUT	GET /2qz9gwasYkOhPEumfqd3_x8HiiRu6fIQR1d-1DRAV8qfkqmQx7Rygzohal7DXbB-urTun2B0thBnpY3BRfqXnJOm4b9QQFk3L4VK=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:52 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4217 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:14:05 GMT Expires: Tue, 28 May 2024 19:14:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 12586 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 0f c5 49 44 41 54 78 9c ed 9d 7b 74 1c d5 7d c7 3f 77 76 56 2b ad 56 b2 fc c0 96 d7 2f 01 26 3c 8c 01 db 92 0b 38 3c 22 09 48 ca 23 14 b7 66 78 04 17 4a 12 9e e5 10 c5 0d b0 a5 69 1a 4c 7a c2 33 21 e1 38 21 49 69 5e 08 93 21 38 29 27 a7 20 04 b4 10 0a 1e c0 e0 17 10 08 2f 23 64 15 5b c2 92 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx{t}?wvV+V/&<8<"H#fxJiLz3!8!Ii^!8)' /#d[
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: bb 9a 1a 04 e9 a1 be 85 65 a9 9d bc 55 bd 96 53 0f fd 06 bd 81 0a a2 32 a5 cc af 1c fa 3b bc a6 12 5d 13 1e fc 9c 0e e0 3d a0 ae 3d 16 f1 d4 b5 1f b7 e8 0d c0 42 80 44 e0 48 0e ee fd 03 2f ee f8 0a 4b 93 1f d3 21 74 65 4e 53 43 63 cc 7a c0 17 71 21 7d ce 1b bc 76 ea 69 0d ee 6a 6a 38 11 78 76 f4 76 4d 0e e0 c8 6e 6e 3d bc 95 bb ab 96 10 75 dc 7d fd 9a 94 92 ba 48 39 d3 ca cb f2 19 86 54 c5 aa f6 58 e4 8f 5e 39 f3 ba 06 3f 90 69 a3 23 2a 10 da 6c 6e 7e ed 24 be b3 f7 8f 74 04 42 38 2e 39 b4 a5 64 4e 79 59 a9 88 0b 63 5c 03 55 78 26 70 57 53 c3 3f 32 74 6b ce 84 44 c7 09 d4 73 d5 9f ce 62 d3 bb ff 46 a7 a6 33 58 e4 0d c6 91 30 bd 4c 67 4e 24 af 17 08 aa 59 d8 78 4b dc b3 fe b1 27 b7 e8 ae a6 06 0d c8 b9 05 55 66 6f e6 95 99 31 4e 39 f8 5a 10 1a 51 99 7f 7d Data Ascii: eUS2;]==BDH/K!teNSCczq!}vijj8xvvMnn=u}H9TX^9?i#*ln~$tB8.9dNyYc\Ux&pWS?2tkDsbF3X0LgN$YxK'Ufo1N9ZQ}
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 82 b2 5b 50 79 f9 6e 82 f3 f6 20 53 63 be 62 3b a9 50 fb 85 22 9c e0 a1 fb 67 3d 41 32 d2 8a 90 d3 55 b8 e8 51 61 54 95 c0 ef 15 52 48 7e ac 51 71 5e 37 e5 c7 bc 3b b2 c5 9c 91 64 9b 7e 76 41 91 15 40 d3 b7 e4 95 c9 ea 57 18 98 f5 4d 84 a3 2c c3 66 e2 d4 e0 d9 4f 6c ce 7b 8c 58 0e 08 f4 e3 e2 84 4f fa d3 b8 e2 0e e1 5e e6 c5 38 a4 2a df ba 3e dd 62 56 97 3e 65 19 e6 3b 2a ec aa 6c 02 e6 3e 55 30 29 08 2c 4a 50 7d fe b6 6c b7 e5 d1 ac 4a b6 e9 ca 6f d5 a7 dc b1 cd e8 9f 7b fb 61 c8 30 0a 2f 97 b2 69 95 2a 05 ce 2d c3 c2 01 d9 2f a9 be 68 27 04 44 a6 16 73 36 36 16 14 59 1e 0c cc d9 70 bf d4 3b 50 dc 33 73 2d 1b 65 34 2a 05 1e 7f 06 9d 04 06 a1 7a dd 9f d1 2a 13 63 b5 98 b3 51 9b 6c d3 7f 55 48 70 b9 50 ff c0 9a 36 47 ff 20 84 0c aa 72 31 cc 7f a9 32 ac 52 Data Ascii: [Pyn Scb;P"g=A2UQaTRH~Qq^7;d~vA@WM,fOl{XO^8>bV>e;l>U0),JP}lJo{a0/i-/h'Ds66Yp;P3s-e4z*cQlUHpP6G r12R
2024-05-27 22:43:52 UTC	579	IN	Data Raw: 86 b9 cc ef 20 c6 a3 a4 6b f0 30 c1 66 7b 9d 2e ec 2d cf 0d 2e e5 d2 81 b9 a5 20 2e 28 5c a5 dd 4d 4a 27 59 79 1c 4e 8c 73 62 4f ff 61 1f 2e 17 ce 34 bf 63 01 4e b6 0c b3 e0 a5 a2 bc 64 42 d4 60 80 e7 ce 66 20 80 76 6a 09 04 fc 6d cb 30 ff db ef 20 72 a5 74 66 81 e5 40 d7 6f 76 74 46 ff fa a8 38 70 9a 4f 21 bc 60 19 e6 45 3e f9 2e 88 12 a8 10 f9 61 19 e6 6d e4 b0 fe 87 02 92 c0 e7 7d f0 5b 14 13 4e e0 21 4e 06 d7 be 02 9f 2b 67 58 86 59 d0 d2 10 7e 32 21 05 b6 0c d3 01 fe ca 43 97 3f b7 0c f3 49 0f fd b9 c6 84 e8 07 8f 45 7d eb ea 9f 01 97 2a 76 a3 74 91 14 d5 4c c8 1a 3c 8c 65 98 97 01 83 8a dd 7c 41 b1 7d a5 4c 68 81 87 50 d9 a2 fe 57 cb 30 b7 2b b4 af 9c 09 2f b0 65 98 cf 00 2a 96 33 ec 04 6e 52 60 d7 53 26 f4 33 78 24 f5 ad ab 13 e0 ea 7c ee 7a cb 30 Data Ascii: k0f{.-. .(\MJ'YyNsbOa.4cNdB`f vjm0 rtf@ovtF8pO!`E>.am}[N!N+gXY~2!C?IE}vtL<e\|A}LhPW0+/e3nR`S&3x$\|z0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50431	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	785	OUT	GET /QFmSDvHe7MgYcFlQF_wNttnmAm4s-y-UN24oPZRoPDiOCjX60ol7yhSa_WiN-NwCmXiafElg33YH4J5wFVy_bAqzseZz1oSNtADw_A=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:52 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2868 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:11:50 GMT Expires: Tue, 28 May 2024 20:11:50 GMT Cache-Control: public, max-age=86400, no-transform Age: 9122 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 05 89 00 00 05 89 01 6d 68 9d fa 00 00 0a e6 49 44 41 54 78 9c ed 9d 6d 6c 53 d7 19 c7 ff c7 2f 69 12 bc d8 09 38 c0 ba 62 97 25 a1 44 94 78 85 86 96 a2 c6 25 91 2a 8d 49 8d a6 6a 68 9f e2 49 13 d2 3e 61 56 d6 b5 bc 5e a6 81 80 6d c2 ac db a4 4d 9b 70 3e 75 1f 36 29 68 ad d6 0f 31 73 60 50 25 8c 91 00 83 2a e1 c5 4e a1 21 64 40 ee 62 93 80 af e3 7d b8 d7 e0 38 d7 f6 7d 3b f7 3a 89 7f 52 88 b1 7d 9e 73 f2 fc ef 79 ee b9 e7 3c f7 5c 92 4a a5 50 c2 38 4c 46 37 60 a1 53 12 c0 60 e6 bc 00 6f fd 7c c2 61 74 1b d4 40 8a f5 1c f0 e6 cf 58 37 08 3c 04 f0 00 c4 03 c0 01 c0 43 08 ec fc 37 48 c6 bf e9 17 04 00 58 02 f4 03 18 07 ff bb 1f 40 Data Ascii: PNGIHDR``w8pHYsmhIDATxmlS/i8b%Dx%IjhI>aV^mMp>u6)h1s`P%N!d@b}8};:R}sy<\JP8LF7`S`o\|at@X7<C7HX@
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 01 84 df c2 ff 9f 4e ba 69 36 19 17 25 40 10 20 c1 9e bd 55 11 49 9e 10 d8 7c 30 e6 16 1c e0 43 a6 18 ea 27 e3 44 f9 e8 dc f7 e1 9c ba 9b fd f6 8b ce ee be 48 be 72 52 7a 00 a3 b0 4d 6a 88 02 60 4e ef b5 07 95 1a 10 f2 80 18 00 cc e6 83 31 9f f0 9a 4a af 70 c5 6e 88 39 1f 42 9d be 7c 65 f3 f6 80 d5 ef dd 72 13 90 5b 20 04 3a f5 00 16 04 cc 99 7d 0e 2a 43 dd cd 07 63 7e 10 30 00 b1 6b d9 03 7e 74 ed 08 5a 46 3e cb f5 71 de 5e 50 e8 24 4c 7d 4d 34 83 01 00 1e 5a ce 07 80 53 bb 6d 01 f0 e7 88 01 ad 6c 2e 99 1a cd e7 7c a0 80 0f 0b 09 e0 93 db 20 85 74 02 f0 9e d9 ef 88 d0 ae e8 d4 2e 5b 04 fc 49 ba 53 ad ad 4a 2e 8e 9d 97 f6 14 fa 9a 2f df 87 39 43 d0 aa 1f df f4 99 08 39 91 0e 39 14 43 50 e7 59 a6 3a 6f 23 69 b1 ed 83 0b 7d 37 aa 5e 7a 55 69 f9 02 a1 27 93 Data Ascii: Ni6%@ UI\|0C'DHrRzMj`N1Jpn9B\|er[ :}*Cc~0k~tZF>q^P$L}M4ZSml.\| t.[ISJ./9C99CPY:o#i}7^zUi'
2024-05-27 22:43:52 UTC	619	IN	Data Raw: f1 69 f6 65 b9 45 f3 62 23 09 b4 3c 37 a2 a9 4d 31 ac 0d 2c c8 73 49 1a a6 8f e7 da 8e 20 1f 8a 12 b3 2e 1d f9 86 7f fa fe 6b 9a ed 38 02 00 5b ca bf 84 8d 24 b4 34 29 0a 29 4f a2 6c ad 76 57 f0 02 03 ce ee 3e 45 57 f0 8a 33 e3 a6 d9 35 de d4 c4 2a 4d 62 86 8d 24 f0 c3 ca 2f b4 30 25 89 8a 4d 23 5a f6 02 16 2a f2 88 14 0b 30 70 f8 f9 f1 54 dc d5 94 7a 5c ab fa ac 76 a4 aa 4f 97 a3 3f 0d 29 4f c2 f6 ee 4d 2d 4c 4d 02 68 92 3a e4 14 43 55 6e e8 85 ed db a2 9b 53 c9 0d 2b cc 31 45 22 d8 48 02 7b 6c 17 f1 8a f5 bf 6a 9a a1 08 cb 8a 18 16 6d 51 9e 7b 60 aa 79 3c 5d b6 7a 7c 83 b3 bb 4f 55 02 83 26 4f d0 f8 ed df d6 ba fe 93 a8 1e 38 9f 70 4a be c6 af b7 b0 d8 6b bb 88 7a 0b fd 91 4f 3e 92 a3 15 88 fd 75 25 a6 d9 32 c9 65 2c ae 58 c2 54 c9 ad b3 7f 34 78 59 6d Data Ascii: ieEb#<7M1,sI .k8[$4))OlvW>EW35Mb$/0%M#Z0pTz\vO?)OM-LMh:CUnS+1E"H{ljmQ{`y<]z\|OU&O8pJkzO>u%2e,XT4xYm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50432	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	786	OUT	GET /p2EiNuo4FQe3s8dhYgEiejBxjryT3B46OTWNItLqiwF58V0T62GKHa7VrbOhI7BbnQOBvdkPFu-4YGG0Dg3b0moXWWSc_aB1hw67Kts=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:52 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 6066 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:55:32 GMT Expires: Tue, 28 May 2024 20:55:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 6500 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 17 69 49 44 41 54 78 9c e5 9d 7b 74 1c d5 7d c7 bf f7 ce 8c 76 24 24 59 3c 8b 6d 09 24 cb b2 c1 60 4b 96 1d 88 e3 72 7a 9a 1e 5a 72 68 4a 42 08 86 04 19 08 60 9b e0 a4 40 6c 92 60 1c 1e a5 1c 9b 04 3f 68 92 f2 4a 42 21 90 07 8d f3 28 25 27 cd e9 23 34 01 93 90 40 c0 09 c5 86 9e c4 50 c0 d2 ea bd 8f d9 99 b9 f7 f6 8f d9 59 8d 56 33 b3 f3 da 5d c9 7c 39 62 d7 33 f7 b5 f3 d9 df 7d fc 7e 77 66 09 ca b4 fd f1 91 c5 99 82 74 8d c6 e9 df 08 42 bb 08 21 29 fb 9c 10 e5 a9 fd e5 96 de b3 88 10 69 9d c7 19 58 41 11 78 29 45 cd 7f 6a 34 d2 df b9 7b 53 4f 3a 5c 2b 8f 6e 11 fb cd 67 1e 1e 9b af 31 ec 9c 34 e5 81 5c 9e Data Ascii: PNGIHDRxx9d6sBIT\|diIDATx{t}v$$Y<m$`KrzZrhJB`@l`?hJB!(%'#4@PYV3]\|9b3}~wftB!)iXAx)Ej4{SO:\+ng14\
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 67 15 f5 c4 f7 26 05 17 08 b9 b1 c0 e3 a4 00 a0 48 1c 29 a2 ed 6a cc be 7c fb c3 b7 bc 7f c2 af 88 b9 a2 68 cb 24 58 63 ae 60 da e4 82 97 de f7 a1 30 f9 4e fc d5 e6 0f 72 ae d7 ef e2 f9 90 d7 19 45 41 a8 37 e6 8f 59 7e cb e5 77 3d db 56 bb 46 55 4f 91 00 db d7 88 4f bc f1 b5 07 bf f7 d6 91 30 79 1f fe fe 93 69 68 83 0f ba 4e ba 22 f4 25 49 ce d0 09 4a 90 b7 6a 8d 8b 3f 3f 70 e7 b3 73 3e 9e 1c 0a 70 f9 9c 4b fa c3 ae 3d 51 2a 3d 51 7f 66 57 18 9a 61 19 c6 61 ee 80 7c 53 e1 98 ee 6d 1f bb ed a7 73 3a d4 58 11 b0 b7 fb 52 60 df 23 8f fc 31 4a a5 5f bb e3 ca b7 5c 2b 0a a9 d0 d6 1b 30 bd 0d 59 e7 ea 56 73 5e ef 6d 97 dd b8 77 ce 86 1a 3d 7d d1 71 82 0d a1 15 c1 f5 59 ed ea 09 80 02 93 50 e0 ea 8d 7a c7 a5 3b 37 ce d1 25 54 e4 49 56 bd 55 2d eb 75 8a 40 58 dd Data Ascii: g&H)j\|h$Xc`0NrEA7Y~w=VFUOO0yihN"%IJj??ps>pK=Q*=QfWaa\|Sms:XR`#1J_\+0YVs^mw=}qYPz;7%TIVU-u@X
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: c4 0b 35 d2 55 1d 79 64 74 16 a7 0c 00 31 d7 d0 09 ae 93 63 ad 75 ab 60 b9 91 f2 11 0b 72 8e a5 36 bf fd a5 78 77 35 d2 15 0b 4d 9c dc 38 06 83 87 b7 e2 d8 0e 91 10 dd 71 90 3a 6a 3d e6 4e d5 1b 21 5f 85 42 09 01 74 93 22 c3 d4 ab 3f ba 67 28 72 a8 91 36 ab 14 9f 58 9d 03 67 63 be 5d 75 a2 5e ae a4 dc 64 ce 22 e3 c2 8d 3a 71 4c fa 73 38 de db 8f 42 ce ea ea 86 8b f7 44 f3 5d 53 80 a0 eb 4f 80 6b cf 1a 83 61 8e c2 14 a4 2a 2e 4b 20 5a 61 35 b1 dc 5a 77 cd 21 0a b5 36 d7 13 4c 16 d4 2b 2e da 1d fe 86 37 4a 29 85 44 09 96 cc 07 36 ad 1e 83 69 8e 26 3f e9 8a 08 36 c8 78 5b 4f b8 49 3f e0 dc 2f 9f c1 08 cd 16 d4 81 75 5f 0a 17 6a a4 00 40 08 85 22 49 58 32 1f d8 b0 6a 14 2c 29 c8 55 02 0b 04 9b 4c d5 03 6e 45 45 71 0c 15 f3 18 9c 4a 13 ac 69 fd 45 7b 46 02 ef Data Ascii: 5Uydt1cu`r6xw5M8q:j=N!_Bt"?g(r6Xgc]u^d":qLs8BD]SOka*.K Za5Zw!6L+.7J)D6i&?6x[OI?/u_j@"IX2j,)ULnEEqJiE{F
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 2f 3f c5 00 13 69 fc cb 41 82 51 a3 05 52 d0 b9 57 84 6f 43 b0 75 b2 28 4d a6 6c b8 2b da 65 f4 f5 34 5a 6c a6 92 b9 ca da 90 2e b0 78 61 0b 04 04 7e f1 bb 31 14 18 83 04 05 84 5a bd 02 81 64 75 df 40 b1 bb a6 a5 ee da d1 8c 78 9f a3 42 3e 61 6a 5a 2e fd f2 fa e7 be fa e1 17 80 98 bb e6 cb 21 4b d2 f4 cd 05 7d 9d 06 04 d2 78 ea 20 30 6c 34 43 8a e1 01 8a 95 a5 1c ae b0 e0 ae ec 69 b4 56 3c 53 c9 2a 8a 71 a0 7b 41 2b 20 04 f6 bf 32 8a 9c 21 20 cb c5 71 db fa 3d 6c eb 51 bb e0 33 20 57 3b 70 21 cc fc 58 7e f4 f5 eb 9e fb 87 3f 7f c2 3e 16 fb 09 6c 7e 13 2f 00 58 d9 69 00 22 8d a7 0e 01 c3 6e 96 1c f1 6b 1b 34 9b e0 45 ff 53 11 ae e0 1c bd a7 28 e8 eb 51 4b 70 c3 4c 7e ed a4 8b 8a 90 7f 75 70 1c 13 05 1d b2 24 ac 19 16 15 20 1c 00 95 30 0d 72 9c 1f c8 ae f8 Data Ascii: /?iAQRWoCu(Ml+e4Zl.xa~1Zdu@xB>ajZ.!K}x 0l4CiV<S*q{A+ 2! q=lQ3 W;p!X~?>l~/Xi"nk4ES(QKpL~up$ 0r
2024-05-27 22:43:52 UTC	1037	IN	Data Raw: 5a d0 06 21 08 9e 79 65 14 39 dd 80 6c ff 92 27 08 38 37 01 6e 8c 69 63 af 7f f2 b9 af 9c fb cf 49 34 a7 6e 80 81 ca a1 c6 be 4e 03 42 a4 f1 e4 41 20 ad b7 80 92 a2 27 47 70 ac 6c 57 b0 32 01 cb 4d 0c 6c 80 c2 ec af a6 1d 85 7a ee d5 71 4c 68 06 64 99 80 50 02 c1 b4 c1 42 e6 cd 2d cf ee 3d e7 bb 49 35 a9 ae 80 81 ca a1 c6 be 2e 03 40 1a 3f 7a 55 20 5d 68 01 08 70 d6 a9 0a 7a 17 59 f1 5c 90 68 91 56 9b 45 62 cf 13 12 fe 85 39 d9 13 4a d0 b5 60 1e 08 a1 78 fe d0 24 46 f3 0c 94 17 de 32 f3 e9 6d bf de bd f6 db 08 b1 ce ad a4 ba 03 06 82 41 26 24 8d 27 7e 27 70 52 6b 03 ba 4f 4e 61 72 32 eb 61 30 01 cc a8 72 2a d7 34 04 3e ce ec 60 d5 96 44 09 70 7c 0b c7 d2 f9 c0 81 c3 b9 37 47 c7 c7 6e 1d fb cd da c7 f5 80 1e aa a0 9a 15 80 81 00 90 3b 4d 28 74 04 a0 1c 66 Data Ascii: Z!ye9l'87nicI4nNBA 'GplW2MlzqLhdPB-=I5.@?zU ]hpzY\hVEb9J`x$F2mA&$'~'pRkONar2a0r*4>`Dp\|7Gn;M(tf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50440	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	554	OUT	GET /oLcLMz42MUjK9Iv4M4YSOfBIHcxUh9dck3PN8kT8FR_z9_mUlWzyf4JHqPavPsKHJ7FR2rlGZf51vgEv1k5i0QQai4_J0ffYkIFbaJA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:52 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2002 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:01:22 GMT Expires: Tue, 28 May 2024 19:01:22 GMT Cache-Control: public, max-age=86400, no-transform Age: 13350 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 07 89 49 44 41 54 78 9c ed dd 6b cc 1c 55 19 c0 f1 df 8b d0 45 4a 6b 69 01 b1 30 81 00 81 00 11 a8 62 44 23 44 25 f1 92 18 34 e2 fa c1 a0 91 a8 58 24 c6 5a 07 88 10 54 fc a0 a2 63 a2 12 13 83 1a 63 22 89 b8 60 40 43 50 41 54 50 84 70 11 9a 6a 20 dc 0c d3 42 8a b5 5e a0 d8 45 4a fd 70 16 78 d5 c2 ce ec ce 4c bb a7 e7 9f bc d9 e4 dd 73 79 76 ff 7b ce 9e b9 ec 73 48 24 12 89 44 22 b1 23 98 db d1 01 ec 6a 0c 07 16 60 7f 2c c3 82 79 4f cd e1 71 6c ea f5 6d 68 aa bf 24 b8 23 86 03 0b 71 22 5e 8b e3 70 34 16 63 db a8 c8 6e 28 71 2f 6e c6 1d b8 ab d7 7f ee f9 89 48 82 3b 60 38 70 02 de 8f 77 e3 a0 8a d5 6e c7 8f Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxkUEJki0bD#D%4X$ZTcc"`@CPATPpj B^EJpxLsyv{sH$D"#j`,yOqlmh$#q"^p4cn(q/nH;`8pwn
2024-05-27 22:43:52 UTC	1144	IN	Data Raw: e0 6d d8 ba a3 83 d8 d9 99 65 c1 89 0a 24 c1 91 93 04 47 4e 12 1c 39 49 70 e4 24 c1 91 93 04 47 4e 12 1c 39 49 70 e4 24 c1 91 93 04 47 4e 12 1c 39 49 70 e4 24 c1 91 93 04 47 4e 12 1c 39 49 70 e4 24 c1 91 93 04 47 4e 12 1c 39 49 70 e4 24 c1 91 93 04 47 4e 12 1c 39 49 70 e4 b4 92 65 a7 cc 1d 82 15 d8 df f3 7b cd bf 04 77 e0 f6 59 cf 5c 33 4b 34 26 78 f4 73 ce 55 42 ae 8c 83 85 d9 61 fe 0c 31 47 c8 24 57 e6 ae c6 37 b2 c2 ad 4d f5 9f d8 3e 8d 4c d1 65 ee 03 d8 88 af e2 68 2c c4 4b 85 34 82 cf fe 2d 18 fd 7f a1 90 dc e4 96 32 77 c5 ac 67 b1 d9 d9 99 4a 70 99 5b 5a e6 ae c7 f7 b1 cf 04 4d 9c 86 8d 65 ee c3 d3 c4 91 78 61 26 16 5c e6 f6 c1 fd 38 65 ca 18 e6 f0 cd 32 77 e1 94 ed 24 b6 c3 44 82 47 d9 6d fe 60 b2 51 bb 3d 16 60 75 99 cf 6e b2 93 9d 95 49 47 f0 b7 Data Ascii: me$GN9Ip$GN9Ip$GN9Ip$GN9Ip$GN9Ip$GN9Ipe{wY\3K4&xsUBa1G$W7M>Leh,K4-2wgJp[ZMexa&\8e2w$DGm`Q=`unIG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50435	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	785	OUT	GET /YT2zmWq_pcZPZpRn6l0i6CuvT07S0DAiBMXWbmW0HQRO47aTDzvAA_pOvYAXPxuJkm8wKcskSkY7Mcw0x0lT1ZBpKLadvSt3ClEq1Q=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:52 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4934 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:59 GMT Expires: Tue, 28 May 2024 18:50:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 13973 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 12 92 49 44 41 54 78 9c ed 5d 5b ac 25 c7 55 5d bb aa fb bc ee 9d b9 e3 b1 1d 63 6c e3 08 3f 62 3b 09 58 a0 c8 28 38 b6 7f 70 84 10 f9 48 40 24 86 0f 64 4b 48 fc 12 09 89 8f 48 91 c0 90 08 87 d8 20 84 79 c8 a0 7c 04 23 07 cc 23 52 b0 c5 87 df 21 83 44 e4 38 38 48 31 c4 06 33 f6 58 f6 bd f7 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx][%U]cl?b;X(8pH@$dKHH y\|##R!D88H13X
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: d8 4c cd d0 03 de 70 b1 60 30 00 10 67 52 fb 02 b8 b6 4f a8 4a 92 28 06 fe 7b 06 cc 54 32 5f b7 4c 88 5e d3 05 f6 ec e4 b9 e6 b1 c9 a0 ce 5a 43 f4 2a 8d 68 ca 7a 87 1e f0 d9 3b 7c dc 7d ab 0f 3f 48 77 3e 11 30 75 14 ee fd 33 0f ca 3e 05 e2 e8 64 06 8a 81 7e 87 f1 dc 7d 2e 06 9d 7c 1b 2c 09 fc f3 bf 79 f8 c2 d3 5d 9c ed 5b 88 49 36 4e 13 6e 01 55 f5 36 4b 70 c3 e4 56 39 6e 5e 00 38 1e c1 0f d2 97 88 c2 f3 ce f8 10 6c 07 e8 ee ee c5 57 72 6a 14 33 5c 0f 90 94 6f 47 a0 08 ae e7 63 7e 34 01 77 2f 05 09 a9 d5 71 92 b1 be 17 cd 89 5f 85 58 23 88 15 51 49 6a 2b 12 e4 c0 81 3b 1e c2 9b 1c a5 2c 38 bd e3 a2 a2 65 ca 87 f2 1d b8 a3 43 b0 52 e5 b2 ba 76 1e 33 56 23 d8 90 d4 a4 78 e1 b5 55 bd 6c 83 ba 39 f0 00 28 78 d3 09 fc e9 04 a4 19 a6 ab 9f cc 00 cc 3e a0 02 78 Data Ascii: Lp`0gROJ({T2_L^ZC*hz;\|}?Hw>0u3>d~}.\|,y][I6NnU6KpV9n^8lWrj3\oGc~4w/q_X#QIj+;,8eCRv3V#xUl9(x>x
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: b6 d7 c5 45 d3 d6 86 0f 47 aa bd 69 a7 be a0 4c 24 ca d9 33 21 02 cf cd af 93 1b 76 a9 37 ba 27 ab 4c a5 91 2c a7 0f ec c1 2e ec fe 00 60 06 53 75 66 2e 6d 9c 59 72 cd d8 2d 5e 65 17 c8 6a 2f e5 4f c6 7a 95 ef 55 06 43 d6 e9 f2 8d 47 b2 62 d4 25 56 1b ce 63 86 35 d8 85 ec 0f a0 6a 45 0c c2 b9 b7 2e b9 3a 35 61 43 74 97 34 3a 35 7b ad b5 1b f0 0d 48 ce c2 f4 f6 37 9b 0f 5e a5 0c 03 4e 00 cc 55 74 90 e9 0f 06 03 f6 00 17 64 80 20 28 e9 14 06 f6 1d c6 4c 31 ba 4a 85 89 7a e2 85 f3 06 84 f9 e4 41 a7 7c 6f 48 a0 18 ff 31 63 58 1d 06 05 6a 49 24 a5 7c 7e 0c 2c a0 67 15 7b cf da bd 9c 09 b2 95 ef 41 48 3b e7 78 ad 3b 62 37 4a f0 3a 8d 89 9f 48 47 01 77 5c ab f0 e1 ab 15 82 82 30 24 03 50 aa 87 eb de e7 e9 2d 99 01 db 22 fc d6 cf 5d 0a 86 05 90 05 44 01 88 2c 84 Data Ascii: EGiL$3!v7'L,.`Suf.mYr-^ej/OzUCGb%Vc5jE.:5aCt4:5{H7^NUtd (L1JzA\|oH1cXjI$\|~,g{AH;x;b7J:HGw\0$P-"]D,
2024-05-27 22:43:52 UTC	1296	IN	Data Raw: e6 48 21 40 9a 7d 4e 49 ab 16 42 20 e8 5f 02 56 1e 48 05 20 5e be 69 18 0e d3 02 44 36 10 bd d1 90 b5 dc ba e4 e6 e4 96 77 93 3f a6 a2 eb e6 38 71 9b ee 52 e5 2b b2 1d 44 04 29 6d 88 53 67 c2 60 c8 e2 c2 42 20 0a 6e 84 6b d7 dc 70 1d 1d 0a 08 90 e8 00 a4 d2 e5 11 0d 8d 24 16 cb ad 58 6f 78 2d d5 98 64 a1 42 72 ab fb a4 7c 68 ce 59 ef 3a 81 8e 2a 6c 62 8a ae f3 bf 99 70 14 4d 22 69 a3 73 ea 0c bc d9 34 d5 aa e5 e6 f8 44 27 64 fa 83 a3 b7 d1 88 18 a9 f0 1f 87 fa 97 ee 99 21 b9 a8 20 b7 c9 a1 d9 c0 d1 3a fe 48 56 5c 57 cd dc 64 82 c6 e8 2f 82 d5 df 41 30 9b 66 05 52 62 cb f2 59 6b 4e 1e 27 42 a2 49 05 ba a9 2f 4b 6e 01 61 66 e4 d6 18 9a 0d bd e8 e3 89 64 45 60 e6 c5 cf b8 0c 8a 1f 3c 22 82 d5 1f 20 d5 51 a9 15 52 78 c0 59 8b ce 5e e7 ec 69 0d b9 9a 1d 09 4d Data Ascii: H!@}NIB _VH ^iD6w?8qR+D)mSg`B nkp$Xox-dBr\|hY:*lbpM"is4D'd! :HV\Wd/A0fRbYkN'BI/KnafdE`<" QRxY^iM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50439	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	553	OUT	GET /kSVhJx6xNAhqot_OjnzSAp8kyKtL9nW65nqObijdjYcNfqDn4bLx-1g_1h4rz0maXRwJp6K4AEDCQi8dOg_tn_Y80R3NjNXbUN6Hag=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:52 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3695 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:18:16 GMT Expires: Tue, 28 May 2024 19:18:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 12336 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0e 26 49 44 41 54 78 9c ed 9d 79 90 5c 45 1d c7 3f 6f e6 bd bd 32 b9 13 8e 84 10 12 c3 51 21 1c 85 8b a1 24 92 f0 18 05 01 8b 63 c5 ac 72 28 5a 8a 68 11 c5 83 c3 91 50 62 8d 81 92 2a 01 05 c5 14 28 28 71 35 ac 80 01 83 71 1c 11 42 2c 60 03 81 00 51 e4 3e 12 8e 10 48 f6 25 7b bc 37 f3 fc a3 27 45 b2 99 9d 99 d7 af df b1 d4 fb 54 6d 6d d5 ce 74 f7 6f e6 bb dd af bb 7f bf fe 35 24 24 24 24 24 24 24 44 81 16 b5 01 41 62 17 f4 16 60 32 a0 0f 79 c9 05 de 03 b6 1a 59 27 74 bb c2 e4 43 27 b0 5d d0 c7 02 b3 81 99 c0 0c e0 08 a0 0d 21 ea 4e ca c0 73 c0 0b c0 f3 c0 73 46 d6 79 25 64 53 43 e1 43 23 b0 5d d0 a7 00 f3 Data Ascii: PNGIHDRxx9d6sBIT\|d&IDATxy\E?o2Q!$cr(ZhPb*((q5qB,`Q>H%{7'ETmmto5$$$$$$$DAb`2yY'tC']!NssFy%dSCC#]
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 98 02 34 03 bd c0 26 e0 6d e0 59 e0 bf 88 5d b3 27 8b b9 8c 2d db 6e 94 02 9f 0d fc 3e aa f6 1b 60 07 f0 59 60 a5 df 33 c4 66 de 3a 15 b1 0c 3c 19 21 6e 23 8f c6 32 f0 24 b0 b2 f2 f3 70 31 97 71 6b 17 d9 93 48 04 ae 1c 1a 7b 06 98 16 45 fb 0d f2 6b e0 52 23 eb bc 2f 5b 81 99 b7 e6 20 66 df 5f 02 fc c4 72 3d 0d dc 0b dc 51 cc 65 9e f6 52 30 aa 49 d6 15 c4 5b dc 17 81 db 7c 8a bb 10 f8 39 70 39 fe c4 05 98 03 5c 06 5c 6f e6 ad d3 bc 14 0c 5d 60 bb a0 1f 84 88 d4 88 33 b7 00 4f c8 16 36 f3 d6 b9 88 a5 df 02 55 06 ed ac 1a b8 b6 52 7f 43 44 d1 83 af 27 3e 11 92 d5 58 0d dc 6b 64 9d 3e 99 c2 95 2f ff 2a 82 8b fc 98 05 5c 65 e6 ad f3 1a 79 73 a8 02 db 05 fd 2c 44 9a 85 b8 d2 0b dc 6e 64 9d a7 64 0a 57 86 cf c5 c0 01 2a 8d aa c2 01 c0 a5 66 de 3a b1 de 1b 43 13 Data Ascii: 4&mY]'-n>`Y`3f:<!n#2$p1qkH{EkR#/[ f_r=QeR0I[\|9p9\\o]`3O6URCD'>Xkd>/\eys,DnddWf:C
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 2c 2e 9b 5c 83 a5 7d 53 b0 5d 38 b9 75 1d 13 e4 44 7e 02 b8 43 66 59 54 49 ab 70 16 70 b8 d7 b2 21 f2 10 1e af f7 69 58 e0 db 56 cc 38 b3 6b c7 ac 33 1f b6 c7 e8 ad a8 4f e2 dc 82 cb 3b ae ce 6f fa 45 84 ed c9 ad eb 18 9f 72 28 37 2e f2 76 e0 4e 1f d9 70 e6 21 f2 64 c6 f5 b2 b0 f7 80 c5 c5 5c a6 e4 a5 50 43 df de 8d 2b a6 ee b5 aa ff a0 0b 1f b6 47 ef 3d 48 70 19 ba 9b 71 d9 ec ea dc d4 37 95 9e 81 39 f4 53 f6 f2 6d af 45 ec 19 7b c6 cc 5b 53 11 41 74 71 5d 16 01 dc 5a cc 65 3c 07 e7 37 24 f0 83 03 b3 bf f3 7a b9 e5 78 1b 2d f0 1d f7 66 5c b6 91 e6 97 fd fb b0 c9 99 49 5a 6b c8 39 ff 16 c2 d7 2b 9b cb d9 44 84 e2 c4 95 cd 88 5d 35 cf d4 d5 eb 5b 77 cd 3d 66 4b a9 f5 a4 ed ae 9e 0e 6b ec 6a c3 65 7d a9 8d 65 7d fb f2 56 69 2c a9 3a b3 73 44 36 9c 3f c8 b4 Data Ascii: ,.\}S]8uD~CfYTIpp!iXV8k3O;oEr(7.vNp!d\PC+G=Hpq79SmE{[SAtq]Ze<7$zx-f\IZk9+D]5[w=fKkje}e}Vi,:sD6?
2024-05-27 22:43:52 UTC	57	IN	Data Raw: 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 44 c3 ff 01 b8 a8 e1 8c 25 1b 39 52 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$D%9RIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50438	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	566	OUT	GET /LteTgkerljFQFADjcuSo5-hiLDlUMnxk-QP08xyTBWi-SxZUSDbqeBS-hjK5Gbetam9PLtnpbdMbHBTpR7zBzKxrB6-c-ynRMH6yrcTKaZOVlnLvBc4=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:52 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8005 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:40:49 GMT Expires: Tue, 28 May 2024 21:40:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 3783 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 4e 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 6f c9 23 ba 00 00 1e b2 49 44 41 54 78 9c ed 9d 79 ac 6c d9 55 de 7f 6b ef 73 6a bc 75 c7 37 bf d7 fd ba db 3d d8 71 db 31 10 70 9c 8e b1 b1 49 44 e2 c4 0e 60 14 d1 8e 91 19 62 41 82 25 82 15 90 23 20 09 28 04 0c 0e 8a 44 42 42 24 12 1c 26 29 51 00 4b 24 20 11 3b 80 21 96 0d c6 0c b1 cd d0 4d db c6 ef f5 1b ee 54 f3 39 67 ef bd f2 c7 19 ea 54 dd db dd af af ef 6b 8b 52 7d 4f 47 b7 ea d4 a9 33 7d 7b ad f5 Data Ascii: PNGIHDRxx9d6NeXIfMM*>F(HHo#IDATxylUksju7=q1pID`bA%# (DBB$&)QK$ ;!MT9gTkR}OG3}{
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 67 72 3b c1 da 85 e1 a8 82 0f 11 4f b6 9f f8 e6 db 9b b7 e9 68 0b 54 08 56 d1 30 e5 e6 8d 1b 24 1b d3 57 f7 ce ed fc 03 db 8f 7f ca b7 dc 11 57 26 62 d0 49 06 a1 79 2a a7 fc bc a0 10 a9 41 5a 01 59 18 b8 82 20 59 60 6f f3 e0 e7 f6 dd 1e 83 83 01 21 53 82 53 34 c0 24 9b 70 23 bb 45 3c e4 cd 3d bd fa 1b 99 4c 8f ec de 27 9e d6 d9 1e 72 17 cc f8 d4 4c c2 18 61 3a 49 18 8d 26 c4 0d 3b f7 99 a8 90 7a cb 81 db df f6 cd 14 5a 2d a2 28 46 44 20 04 92 24 61 9c 8c 89 cf 34 fe 43 67 b7 fd b3 4c d4 6b 14 a8 fb 64 45 21 05 1a e6 05 75 d5 62 04 e7 20 d9 0f a8 86 b9 cf 14 88 d3 88 c9 e6 f0 6d fd 66 ff 25 93 c1 94 e0 3d 82 10 d9 18 2f 8e 90 39 d2 e1 84 f1 68 1c b9 96 27 d3 6c e1 00 82 cb 1c c1 83 59 f4 df a7 80 53 21 58 15 10 e8 b5 ba 68 b3 41 dc b4 73 06 28 08 1d e9 f0 Data Ascii: gr;OhTV0$WW&bIy*AZY Y`o!SS4$p#E<=L'rLa:I&;zZ-(FD $a4CgLkdE!ub mf%=/9h'lYS!XhAs(
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 89 aa 1e e7 33 0e 6f 1f f2 8a f8 af bc 6b 6b 6b 67 74 e0 f6 91 68 46 a0 88 e0 33 a5 75 d9 60 5b e0 46 9a 5f d3 5d c2 5d a9 fd 05 0f b6 25 6c 5e 6a 72 fd 89 3e 78 87 d4 2e c2 69 ca 7a b4 ce 7d e3 07 be e9 a3 bb 1f f9 a5 ac 9b 61 ac c5 aa c5 1a 4b 20 57 a2 2e cb 98 74 27 5f 1b e0 dd 9b c3 8d 8f 59 63 51 09 a8 d5 87 c2 9a 7b 5d da 08 af 0d ed e4 95 a1 a1 f7 6b ac f9 d5 18 f2 98 8e e4 93 07 f9 5b 44 aa f4 b9 03 ba a9 70 29 00 aa 69 5e 8a 74 20 0e 4c 6a f6 6c 6a 3e 2a 89 fd 75 3b 35 ef 97 89 fc a6 4c c1 34 0d 0d 84 dd f3 a3 1f 9b b4 13 b2 83 b4 10 96 16 10 bc e6 82 71 30 e9 d3 1b ae df 38 d3 dc fa a1 eb a3 6b b8 50 93 fb 02 6e ec 68 6f 77 58 bb d4 c3 4f ef 9e 6b 2e 71 57 08 16 01 9f 2a 9d ad 06 71 47 e9 df 1a d1 ec c4 94 fe 4f 81 3d 4d b8 64 2e fc cf 6b 93 0b Data Ascii: 3okkkgthF3u`[F_]]%l^jr>x.iz}aK W.t'_YcQ{]k[Dp)i^t Ljlj>u;5L4q08kPnhowXOk.qWqGO=Md.k
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: ff 38 6d a5 58 89 68 da 88 d8 c6 58 1b 11 9b 88 46 e1 8e 05 53 29 5d a5 c8 59 6b 04 87 c2 7e 73 eb a5 46 7c ee b8 4b 68 19 98 a1 12 60 25 cd a6 70 ce 55 fe ac be 96 66 cd 94 79 b9 5d be 8b 3c 46 47 92 f7 67 a5 65 aa 6b 05 51 48 9a 19 fb db 07 ff ba 27 6b 2f 6b f5 5b 6f 91 70 37 ba ad ee 0c a7 4a b0 3c d3 3c bc e4 05 ff 86 8f 98 b6 c7 df 3f 6a 1f bc 2b 89 1d 16 4b a3 24 d7 e4 e4 c6 26 ca 63 1f 52 59 6c 9e c2 e4 74 06 42 41 72 41 6f e9 9a 55 51 a9 59 af 32 eb c0 28 c4 d6 4c 61 17 b3 44 d5 e9 cd 08 15 a8 91 6a 8a 98 2b c5 ba 9c f0 f2 5b 06 21 12 4b 30 c5 f1 54 50 ab f8 10 48 c5 71 b0 79 f0 f8 9a 5d 7b 60 63 b0 fe 37 14 86 77 3e bb 71 7a 38 b5 96 1d 55 aa bc 73 ee 33 c0 22 58 13 93 46 07 ff e9 b0 73 f8 4d de f8 22 77 cd 53 1f 53 15 2c 4c 75 db bd 86 5a 8c 2d Data Ascii: 8mXhXFS)]Yk~sF\|Kh`%pUfy]<FGgekQH'k/k[op7J<<?j+K$&cRYltBArAoUQY2(LaDj+[!K0TPHqy]{`c7w>qz8Us3"XFsM"wSS,LuZ-
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 64 03 67 ce 9f e1 f7 7e ea f7 f8 e0 4f 7e 90 d4 a7 f9 bd 30 96 9d 97 9e e5 0d ef 7c 03 eb db 3d 46 bb 23 54 a8 aa 6a e5 64 88 56 5a 22 3f cc 6d d9 ed 36 43 e3 a7 7b 93 ad 37 3b 4d 8f bf d1 9f 23 4e de 55 69 9b 73 8b 98 16 d8 a6 b9 dd da ff d9 81 8c 8a c2 44 a1 80 2b 79 54 54 a1 0a e1 a4 a2 48 c7 f2 8b 3f f0 8b c8 ef 78 de f2 d5 8f cf 1d e2 63 1f f8 18 1f fc b1 0f b2 7e 66 9d 50 14 ee 35 84 59 ab 4d d0 da cd 9b cd 1c cd 92 ad 82 af b2 c4 99 27 ca b5 ed 99 ff 6e 2d be 97 71 3f 5f 14 ef 03 9b 97 36 f8 d3 5f fd 13 de ff 13 ef af c8 05 f8 ca bf fb 95 bc 6a eb 4b f8 f9 77 fd 0f 0e f7 fb d8 4e 44 f0 7e 46 6a a9 21 8a f3 f0 ea 71 ea 49 34 63 d7 ec 7e b5 9a e4 75 4d 63 b0 26 10 19 ad 96 d3 c0 89 09 76 41 6a 0b 48 88 e9 4b f2 ee 5b 1c f6 72 81 14 66 84 86 d9 0d 0c Data Ascii: dg~O~0\|=F#TjdVZ"?m6C{7;M#NUisD+yTTH?xc~fP5YM'n-q?_6_jKwND~Fj!qI4c~uMc&vAjHK[rf
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 78 e1 fc c0 0d 1e 4b d5 e5 13 06 28 aa b3 b2 a4 68 40 55 08 85 55 18 9d 2f 1b a6 d3 94 38 44 bc f4 4d 8f 72 df ab ef c3 4d 3c ed 8d 16 ad cd 16 93 dd 09 64 4a 14 47 05 89 c5 dc 6b c1 eb b3 a2 24 e5 39 b6 13 65 8e 62 39 62 8f b3 1d 96 d6 6d 63 83 4f 02 e3 5b 43 1e 78 ed fd 5c 79 e5 65 46 b7 47 88 81 b5 f3 eb 90 c0 f8 60 3c 23 57 29 72 f3 c2 72 4b 91 55 c5 94 19 e9 1e 38 74 7d 86 0c bf a6 6b 3a ff fe 39 ae f2 8e 70 f2 18 1c 79 c6 32 7c 53 df 0f 2a b7 93 df ae d2 9d 2e 8c d4 39 f7 34 13 1a 2e 73 4c 6f 4f 68 c5 2d 7a db 5d 4c 10 26 37 27 f9 33 bf b6 36 4b f5 4c 6e 57 e6 fb 99 ab c9 01 99 5b 03 73 4b b9 cb c5 11 f0 2c 23 a2 76 68 63 0d d6 5a a6 bb 13 34 51 7a 3b 3d d6 36 7b b8 be 23 1d 25 f9 64 88 6a 45 66 d5 f1 59 13 6c d4 2c bb 74 dd 21 04 26 7e c2 58 d3 af Data Ascii: xK(h@UU/8DMrM<dJGk$9eb9bmcO[Cx\yeFG`<#W)rrKU8t}k:9py2\|S*.94.sLoOh-z]L&7'36KLnW[sK,#vhcZ4Qz;=6{#%djEfYl,t!&~X
2024-05-27 22:43:52 UTC	196	IN	Data Raw: 1e ac 69 af 6f 83 f4 63 d3 38 88 a5 b9 6f 91 5d 1b db 5b 9d 6e e7 c6 f6 fa e6 f5 5e 7b 7b dc 68 35 98 ba 53 09 c1 c8 11 f1 b1 c2 52 61 f5 ff 26 2d 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 56 04 2f 39 fe 3f 02 63 bc e3 05 dd c3 54 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ioc8o][n^{{h5SRa&-9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9V/9?cTIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50436	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	566	OUT	GET /dMQ1Q4xlLrl3-KsZvX_9v56emij4OkRxzapLM7RSuZVd7PgqfjPxKR4KY8hVHYXqP2ZkS-_ZueXb9ywW66H2oCyTglApr1ELCy3woOAviTgFP6uyAd0=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:52 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 817 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:42:02 GMT Expires: Tue, 28 May 2024 22:42:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 110 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	817	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 c6 49 44 41 54 78 01 ed dd 3d 4e 5b 41 14 86 e1 63 48 22 50 10 52 2a a4 90 8e 92 96 14 6c 80 25 78 21 49 96 41 b2 10 96 c0 06 28 42 4b 49 85 8c 44 85 84 40 46 80 00 0f 35 92 67 ee 9d 9f 33 1f ef 23 b9 73 e5 d7 77 6c 8d cf f5 4c 5e 16 0c b2 56 0c d2 08 2c 8e c0 e2 08 2c 8e c0 e2 08 2c 8e c0 e2 08 2c 8e c0 e2 3e 59 a2 93 f3 07 fb 7b 7c 67 67 b3 27 bb b9 7f 36 98 ed ef 7c b1 e9 de 9a 4d 7f ae 9b 37 93 94 ad ca 10 f6 df f1 ad e1 7d bf 0e 36 ec f7 c1 57 f3 24 7a 89 3e fa 3f 27 ee 12 e1 f5 09 2b 9c 27 f1 81 Data Ascii: PNGIHDRxx9d6pHYssRGBgAMAaIDATx=N[AcH"PR*l%x!IA(BKID@F5g3#swlL^V,,,,>Y{\|gg'6\|M7}6W$z>?'+'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50437	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	551	OUT	GET /JtYUq9HfkkOryxudgp34oqI8qFu9a6mmL64OXjcDX7mfEwcX_pxmTdurvxssofY4swTY2c_M1Kk5o1a863CGTiBZkxxuYXfjiNgz=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:52 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5859 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:09:38 GMT Expires: Tue, 28 May 2024 22:09:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 2054 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 9a 49 44 41 54 78 9c ed 9d 6b ac 24 47 75 c7 7f a7 ba 67 e6 3e f6 ee 7b 8d 1f d8 6b af d7 c6 06 1b fc 08 60 6c 63 94 38 c4 3c 82 78 26 88 20 0c 84 10 f1 81 28 ca 97 44 4a 04 8a 2c 81 14 29 11 89 84 90 90 a2 08 5b e2 13 10 1c 20 b1 14 63 1c 9c e0 18 7b 63 cb 06 8c 97 c5 18 bf f0 7a d7 fb be 77 ee dc e9 ee 3a f9 50 fd a8 79 3f ef cc dd dd f9 4b 7d 67 6e 77 55 75 75 fd fb 9c 3a 75 ea 54 0d cc 30 c3 0c 33 cc 30 c3 0c 33 cc 30 c3 0c 33 cc e0 41 06 4c bf a4 f7 bc eb 26 92 53 97 53 af 6d 81 20 00 d4 2b 27 fb ae 6d ee e1 5f f3 d3 4c 28 af 36 a5 51 ef ba 0a da 9c 57 bb df 57 fd eb da e6 be da 98 57 d5 ab 73 4b Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxk$Gug>{k`lc8<x& (DJ,)[ c{czw:Py?K}gnwUuu:uT030303AL&SSm +'m_L(6QWWWsK
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 87 94 b7 42 50 01 13 0c 78 83 04 e2 1a d4 4f 20 cb cf c3 d1 9f 60 9e bd 17 0e dd 0b f6 58 ca e2 66 8c 09 1d a9 d0 10 64 0b 83 aa ee be 2b 36 f6 12 37 64 1f ac 24 a0 87 c1 5c 8a 6e 7e 33 c9 e5 1f 22 b9 e8 36 6c 79 17 6a 2d 6a 53 31 8e 2d c4 ab c3 df c8 6c 81 2d db 90 ed d7 22 97 7d 1c 53 3b 88 3c fb 9f c8 81 7f 87 93 0f 63 93 df 80 6c 43 c4 60 54 73 a2 33 6d dd 18 65 db 0f 39 93 97 e8 0d d5 07 bb c0 c1 2a 2a 21 ba f4 1e 92 cb 3f 42 b2 fb ed d8 70 09 4d 62 88 6a e3 be 23 68 82 c6 09 0a d8 70 07 72 f9 ed 98 4b de 03 4f df 83 fc f2 df 90 e3 77 63 64 89 44 ca 18 51 24 eb 1a bc 7e 5e 32 55 3f a8 51 b7 1e 4e 93 26 6c 18 09 76 e4 1e 46 4b af c3 5e f0 3e e2 2b 3e 4c b2 74 09 6a 2d c4 f5 09 55 c2 a2 f1 1a 89 2c 62 ae fc 28 9c 77 3d f6 89 ab d1 e7 ff 01 b1 55 30 0b Data Ascii: BPxO `Xfd+67d$\n~3"6lyj-jS1-l-"}S;<clC`Ts3me9**!?BpMbj#hprKOwcdDQ$~^2U?QN&lvFK^>+>Ltj-U,b(w=U0
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 20 61 99 95 fa 02 60 98 0b 2d c6 23 6f 7d 02 f7 1a 31 71 82 5b 42 97 06 85 2a 52 d9 c4 39 37 fe 11 ab bb af 25 aa d6 dc 30 89 c6 e1 50 73 db 49 d3 77 4d b7 04 35 a1 21 dc 79 3e c1 96 8b 50 06 dc 7b 53 2d c1 a6 9d 2c 5d f3 07 54 ce bf 16 5d a9 3a 23 5e 40 34 86 95 e7 a8 1f f8 7b 74 e5 d7 54 eb 5b 51 35 cc 97 92 62 48 a7 ed 2c fc 3e 86 53 03 18 a7 53 18 26 8d 69 32 bc b4 89 c5 3d 37 20 22 43 8b 42 36 bd 97 47 6a 0e 51 37 55 0b 95 2d 54 76 bf c9 59 e0 b9 7a b0 e8 da 09 82 f3 5f 4f ed 87 1f 21 59 3e 44 8d 45 14 c3 42 c9 42 a7 e8 cc 31 63 32 12 9c be 71 d2 b5 1f 1a bc 4c 3b b5 98 ad 26 a8 a2 49 dc fa 7a 84 9b 30 17 be 91 d2 35 77 b0 fa 83 4f 91 54 a0 16 39 b3 67 a1 6c 91 be a2 36 46 6b b0 f5 31 b2 b2 ed 79 d5 63 f4 34 9a 30 1a 1b 54 d1 24 a1 b4 f7 36 92 08 12 Data Ascii: a`-#o}1q[B*R97%0PsIwM5!y>P{S-,]T]:#^@4{tT[Q5bH,>SS&i2=7 "CB6GjQ7U-TvYz_O!Y>DEBB1c2qL;&Iz05wOT9gl6Fk1yc40T$6
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 44 77 4c 69 8f 8e 32 22 16 f9 e5 dd 83 ef f5 7c 1a 41 8c a1 fa e4 bf 22 01 08 65 c4 a4 c3 36 6f 92 3f 23 ca ef 77 7b f5 b9 d2 66 f8 d4 09 13 16 9f cc e2 76 af b0 f9 f5 f7 b1 2b 87 ce 4c 29 16 43 bc 7c 90 fa 81 fb 8a 4d 4b 45 53 72 34 77 41 36 f7 a5 0d e4 aa 8e 44 2e ac ab 27 ab f3 50 ca bd b5 9b 29 d5 9e c0 ee bf 1b 06 70 bd 9d 36 50 cb f2 e3 df 24 58 7d 14 31 0b f9 ca c7 86 3e 37 75 9e 37 8f 7b 3b 93 db 4e 2d 77 6f bb 21 45 67 b8 71 71 e3 24 40 88 70 84 f0 99 ef 92 1c 7a 12 82 d2 70 55 d9 88 30 21 b5 97 7e 46 fc 8b ff 00 bb 8c 98 30 dd 47 a4 18 0e b9 05 6a 90 79 b4 fa 23 b7 b9 5d 7b 0b 46 2f 47 47 87 63 14 a8 0b 1d c5 22 b2 95 70 f5 fb e8 4f ee 22 39 f5 e2 99 d1 1f 4b 40 74 e2 05 aa ff 77 27 52 bd 1f 63 36 a5 0b d2 b3 09 11 cd fd e4 85 3b 35 cd 3a 10 b9 Data Ascii: DwLi2"\|A"e6o?#w{fv+L)C\|MKESr4wA6D.'P)p6P$X}1>7u7{;N-wo!Egqq$@pzpU0!~F0Gjy#]{F/GGc"pO"9K@tw'Rc6;5:
2024-05-27 22:43:52 UTC	830	IN	Data Raw: e7 b5 b8 98 18 2b 86 4a 99 a8 66 0d 5f 5c f7 a5 cf 2b ba 7d 7e 3f 79 9e a6 cd 0b d8 86 dc 76 e9 fb 7e e6 11 c9 85 89 1b 59 a3 8e ba da 8f a1 2b a1 b3 a6 eb 49 d6 27 6b 91 29 6b e4 ac cd 73 c9 6d 4f 6c 71 ce 93 5c 68 91 dc 96 3c 1b 90 5c 98 a2 2f ba ff a2 7a 97 95 91 2c 62 f3 fd a6 1a 24 af c1 a0 6a b4 66 fd 32 00 2f 10 bd 1d b9 8d 75 d9 10 e4 8e 36 d9 30 e9 3e 38 bb ed a0 f7 75 16 6c 39 70 3d 71 46 72 a3 5a 6e ed 13 33 b4 84 a7 9e 21 e4 c2 d4 fb e0 14 43 19 73 ed d5 75 39 70 46 55 b1 d7 94 17 66 da 89 5c cf 3a ee b5 3e 37 cf c3 b0 e4 76 79 d6 31 93 0b d3 18 07 8f 6c 99 f7 1e 43 97 43 85 58 dd 7e 53 dd c8 cd 2d ec ec 84 d7 b7 a6 f7 ea ba 56 48 d9 d0 e4 42 2f 82 a5 71 dc 3f 30 c6 36 cc 1a ac 1c 11 a5 52 72 0d 1e 59 e9 4c 2e ad e4 8a 7f ad 1b b9 d0 32 14 ca Data Ascii: +Jf_\+}~?yv~Y+I'k)ksmOlq\h<\/z,b$jf2/u60>8ul9p=qFrZn3!Csu9pFUf\:>7vy1lCCX~S-VHB/q?06RrYL.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50441	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	786	OUT	GET /DQ8lLDfcUJCtsTiDw6PlvD8GaNTYzhlS8sZL4_TMTOvkH3bgh0CvoxaKCEU-uvqoCUiE0Yp6nQWTeiNqYuW0v18_XRejSBRyqn2LA-c=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:52 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3860 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:43:02 GMT Expires: Tue, 28 May 2024 22:43:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 50 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0e cb 49 44 41 54 78 9c ed 9d 7b 90 1c c5 7d c7 3f 3d 33 7b a7 bb 43 1a bd 40 12 4b 04 b2 cc c1 20 63 63 6f 41 51 24 d8 b2 cd ad 8d 47 26 29 6f 19 17 0e 09 29 97 43 82 ed c4 09 a9 3c b6 ca 55 c4 21 f8 1c bf e2 94 71 19 e2 07 c1 60 8c 2b 3e 07 27 59 19 6e 4d 0c 06 87 c4 70 98 44 46 8b 37 80 50 ec 11 92 0c 88 95 74 a7 bb 7d 4c e7 8f 9e 93 0e 71 af 9d ed 79 dc 65 3f 55 a3 91 54 37 dd bf db ef 76 4f f7 af 7f fd 6b e8 d2 a5 4b 97 2e 5d ba 24 81 48 da 80 24 29 14 cb fd c0 00 d0 07 f4 02 16 90 01 7c 60 cf c8 f0 d0 78 82 e6 69 c1 4a da 80 b8 28 14 cb 2b 81 4d c0 46 60 5d 70 df 04 6c 00 d6 03 ab 81 69 c1 0f 03 1f Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{}?=3{C@K ccoAQ$G&)o)C<U!q`+>'YnMpDF7Pt}Lqye?UT7vOkK.]$H$)\|`xiJ(+MF`]pli
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: fe 22 a9 fa 17 4b bf 61 46 55 f4 a9 c0 9f a3 44 5e 19 55 25 89 08 5c 28 96 d7 03 5f 42 05 bb a5 16 09 f4 59 46 94 fe dc 35 c0 f5 c0 ef 47 d5 5d 27 d5 82 ef 00 4e 4b a8 ee 45 21 81 8c 21 c8 e8 ef 9e 4f 66 35 aa 25 bf bf 9a cf 69 af 2c 76 81 0b c5 f2 87 81 77 c6 5d 6f bb 48 09 7d a6 11 d7 07 b4 0e f8 38 70 99 ee 82 63 15 b8 50 2c 67 81 1b e2 ac b3 13 56 18 06 22 fa 16 3c cd 19 c0 4d d5 7c ee 1c 9d 85 c6 dd 82 3f 8f 1a 5c a4 1f 01 bd a6 19 f7 07 74 21 f0 61 9d 23 eb d8 ec 2f 14 cb 57 00 43 71 d5 d7 09 12 e8 33 04 06 89 c4 ce fe 01 70 79 35 9f d3 52 58 9c 5f d0 eb 51 ab 2d a9 c7 07 d1 6f 08 11 c1 fc 77 b1 7c 0a 38 4b 47 41 b1 08 5c 28 96 af 01 5e 17 47 5d 1d 22 81 a6 84 a9 15 86 98 32 04 ad 84 ec d8 8c ea aa 3b 0e 28 8c 7c c1 3f 88 a7 ba 0a 35 52 4c 1b 53 c0 Data Ascii: "KaFUD^U%\(_BYF5G]'NKE!!Of5%i,vw]oH}8pcP,gV"<M\|?\t!a#/WCq3py5RX_Q-ow\|8KGA\(^G]"2;(\|?5RLS
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: c0 75 42 b7 be 48 e8 05 11 b7 e7 6c 41 2a 95 ca d9 c0 a2 f6 9f a8 b1 85 01 f0 13 e0 a0 4e 3b c2 38 3a 5e 22 5d e9 ee 07 80 d7 24 6d c4 2c fc 09 ea d0 8f 76 78 c2 71 1c 9d 2b 50 a1 04 7e 11 cd 03 81 0e 39 05 75 d0 46 6a a8 54 2a db 81 77 d1 5e 0f b9 1f d8 ab db 96 30 02 1f 20 5d 02 9b c0 b6 5a 29 9b 8a 74 10 95 4a e5 34 54 42 b7 76 57 d4 1e 46 ed b6 d0 4a 18 81 7f 0e 89 6d ca 9a 8b 0d a8 bd b5 89 52 a9 54 56 03 5f 40 a5 4a 6a 97 87 1d c7 f9 5f cd 26 85 12 78 2f e9 6a c1 a0 22 48 de 96 a4 01 95 4a 65 33 2a 89 ea 95 21 1e ff 6f e0 31 bd 16 29 c2 08 fc 0c e9 6b c1 fd c0 25 b5 52 36 f6 1d 8c 95 4a a5 bf 52 a9 bc 0d f8 1a e1 93 a8 8e 12 91 c0 6d 4f 93 6c d7 3b 54 2b 65 6b 40 a4 09 bc 42 b0 0d b5 47 e8 ce 38 2a db bd 7b f7 c6 46 a3 b1 15 e5 f4 f9 5d c2 c7 a0 3d Data Ascii: uBHlAN;8:^"]$m,vxq+P~9uFjTw^0 ]Z)tJ4TBvWFJmRTV_@Jj_&x/j"HJe3!o1)k%R6JRmOl;T+ek@BG8{F]=
2024-05-27 22:43:52 UTC	219	IN	Data Raw: f7 02 d4 66 b1 85 4e 7a 09 cb 43 b6 eb 45 92 92 29 6a 96 b4 c0 d3 d4 4a d9 b7 a2 72 54 5e 08 9c 8b ca c9 a1 93 ae c0 69 a0 56 ca be 06 95 18 fc 42 e0 75 a8 74 0d 6d 1f e8 38 0b 5d 81 d3 44 ad 94 cd a0 46 de 6f 0c ee 0e aa 65 87 3d 9d 65 c9 0a bc 9c 76 e4 1f c7 76 bd 06 f0 04 f0 44 ad 94 35 81 2d c0 56 54 8e eb b3 83 6b 33 ea bd bd 98 ee 7c d6 f3 5e 97 02 cb 52 e0 99 04 2b 56 4f 07 17 c1 e9 2c 1b 81 b5 c0 ba e0 7e 6a f0 7f a7 02 6b 80 95 a8 c3 98 4d 54 66 fb d4 1e 5f bb 10 cb b2 8b 6e 97 5a 29 2b 50 07 6c f5 a1 8e a2 eb 09 2e 03 35 32 3f 6a bb de d3 c9 59 d8 a5 4b 97 2e 5d ba 74 59 6a fc 1f dd 16 f5 a3 1b 4b 14 72 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: fNzCE)jJrT^iVButm8]DFoe=evvD5-VTk3\|^R+VO,~jkMTf_nZ)+Pl.52?jYK.]tYjKrIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50442	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	553	OUT	GET /6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mvJvvcvtrNc0MESF98dAx6ivasEsZNxoaUZU-Q=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:52 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 9634 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:19:31 GMT Expires: Tue, 28 May 2024 22:19:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 1461 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 20 00 49 44 41 54 78 9c ed 9d 79 98 5c 55 9d f7 3f e7 dc 5b 55 bd 64 eb a4 b3 77 12 08 41 16 43 d8 06 24 0c 83 88 c2 08 2e 43 04 81 81 d7 71 78 c7 71 e3 55 10 11 65 7b 1f df 17 64 54 94 19 51 71 c4 19 99 f1 f1 7d 1d 15 90 f1 f5 01 41 90 4c 08 10 45 16 13 05 19 c8 de 4b d2 6b 75 77 75 57 d7 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2 IDATxy\U?[UdwAC$.CqxqUe{dTQq}ALEKkuwuW
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: f9 12 fb 46 06 38 fc 53 29 44 3c 8e bd 68 09 d6 9c 39 b7 77 7d f5 5b b7 56 67 a6 f9 74 c0 01 ee bd f9 53 27 9a 4c e6 11 b7 7f ff 52 3d 31 1e 48 6c 89 82 4d b2 9f cd b1 c3 0d 00 1c 7a de 5a 23 67 cf 21 b6 78 49 9f 68 69 bb a0 eb 2b df f8 6d 75 86 9a 47 55 0c 5d 73 a9 e7 96 eb ae f1 46 93 2f 65 f6 ec 5a aa 27 27 40 5a 1c 22 6e 40 15 6a 90 47 21 c0 b2 d0 13 29 32 bb 76 2c f5 86 07 5f ea fe f4 c7 af 69 2e 6f 55 58 38 10 9d a8 a1 a4 e8 f9 e2 cd 9b d4 d0 c0 59 3a 99 44 58 56 71 a1 9a bc d9 fa eb cc b8 27 5d e6 76 71 df 06 94 87 ec e8 24 d6 b9 68 73 d7 e7 6f 3f 5b 2c 58 52 73 4e a6 51 9a 71 80 f7 fc af cf 2e d5 a3 a3 bf f6 fa 7a ba 70 32 08 69 95 ee b8 19 00 97 b8 76 48 01 0c a0 35 22 d1 42 6c f9 8a 6e 7b ce 9c d3 97 fd dd d7 fa aa 33 d8 38 cd 28 c0 bb 6f b9 ee Data Ascii: F8S)D<h9w}[VgtS'LR=1HlMzZ#g!xIhi+muGU]sF/eZ''@Z"n@jG!)2v,_i.oUX8Y:DXVq']vq$hso?[,XRsNQq.zp2ivH5"Bln{38(o
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 33 b4 0b 67 a8 9b f4 6b f7 a3 86 7e 8a 1d 9f 8b b4 57 82 6c cd db 73 9f 3d 29 43 fe b5 10 19 21 73 27 69 c2 c9 9d 3b 61 63 72 f7 b2 6d 89 ec df 7e 39 93 bd e6 df 35 7e fb 61 08 29 7c 9d 27 ec 36 62 0b 8f 7c df ac f3 be 57 d3 e6 fa 9a 01 3e e7 a1 1b 5f df 95 1a 3c ca 2a 58 88 1f 8a d9 fc cd 0b 83 9c ba 79 27 76 ab cd 22 4b 12 c3 5f 6f 90 08 a4 10 59 3b 20 23 20 67 e3 e4 28 d0 45 e5 82 b2 e5 fc 0f 63 d0 99 34 a9 81 dd 64 ce be 88 39 ef 78 27 9d 27 9f 4a 6b 47 87 bf c8 a1 75 98 4d 29 12 90 70 42 11 ec 34 41 48 9c c9 24 a9 1d cf 93 7e fd 67 30 70 0f 56 fc 78 84 35 3b 5b 5e 04 7a 53 46 d1 42 67 c7 94 0f 20 c1 24 35 f9 93 a4 70 d2 88 50 3e 83 eb c1 98 a5 f4 fb 91 fe 8c 0f a4 d8 20 d0 88 d6 15 db 5b ce 7b 68 4d 2d b8 d5 04 f0 15 4f dc b5 7e eb c0 f6 67 26 95 5b Data Ascii: 3gk~Wls=)C!s'i;acrm~95~a)\|'6b\|W>_<*Xy'v"K_oY; # g(Ec4d9x''JkGuM)pB4AH$~g0pVx5;[^zSFBg $5pP> [{hM-O~g&[
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: c1 ba 69 a4 4e b4 9d 82 b6 8c 03 ce c0 55 95 30 a9 08 f0 78 66 f2 a2 bc c1 d5 00 f4 5c 4f f1 cf 27 2c 64 78 6e 2b 5a 1b 54 90 8e d4 1a 46 b3 7f 47 b7 ed 14 a6 32 73 cb 8d 93 db 37 d2 f1 95 ef f8 6a b9 00 5c a5 e1 1b 8f 48 6e 7a 4c d2 22 7c 60 9b 45 ed 36 b4 4a b8 e1 e7 92 bb 1f 96 28 5d 0c 72 a2 63 25 99 63 ef 63 2a fd 54 ee e1 87 81 6b d6 06 e5 7b 7a a2 08 50 82 7b e4 40 43 14 d4 a5 b8 7d 11 31 6d 6a f2 a2 4a 63 29 0b f0 fb 9f b8 73 65 da 73 8e 2c a5 c5 b3 b9 e6 12 80 4b a0 cd cb f0 cc 85 c7 e0 8e b9 59 09 d6 41 6e 7a 5c 69 b4 df 48 1e b8 7e c3 b9 76 f4 f0 3e c4 b5 f7 b0 e4 a4 53 f2 6c 6e f8 0c 6e fb 89 e4 a7 af 0a 56 b6 95 b3 75 51 7e 4b 5c 2b 59 30 32 0e 01 47 b4 c1 83 7f 10 7c fe 01 99 7d ee d9 a2 ca 25 b1 f8 24 52 9d f7 a2 55 4f be 74 22 0a 70 0a 3d Data Ascii: iNU0xf\O',dxn+ZTFG2s7j\HnzL"\|`E6J(]rc%cc*Tk{zP{@C}1mjJc)ses,KYAnz\iH~v>SlnnVuQ~K\+Y02G\|}%$RUOt"p=
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: ca eb 53 0a f8 cd 5e 8a d4 73 25 a9 85 e6 c4 c6 d5 c6 de 2e e1 99 5d 82 fc 9f 82 30 88 b6 15 28 93 29 f0 92 45 19 86 1b 7d be 25 ea 69 af c5 38 0f 17 89 42 11 c0 1b 5f dc d8 6a a0 35 9c 67 79 69 c8 06 d9 09 c9 02 26 8c c3 a6 73 8e c2 49 3a 64 8f be 18 85 59 b0 84 58 4b 6b de 83 10 02 b6 0e 08 ec c8 a4 af 06 6c 53 12 1f 35 34 61 4b 78 b1 bf 40 bb 1a 83 b4 e3 28 b1 bc ce 96 6b ed b5 62 99 56 f6 3c d1 5a 78 a7 08 e0 51 67 c2 e8 72 d3 b7 20 e7 5c 8f 94 47 f3 d4 3f ec 6a 65 c7 89 4b d1 19 e5 ab 69 ad 91 f3 bb 90 96 95 3f 1c 01 db 46 73 8b f5 0d 49 6d 85 9b e5 53 9c e5 55 73 48 52 c0 d3 49 8a ed a7 b4 31 62 01 fe 46 a6 6c 83 75 f4 5e 8d ca 39 10 da e0 8d 15 dd 2c 02 d8 9a aa 6d 71 3f af fd 32 c0 97 9a 04 02 58 98 c9 f0 d8 d9 ab 98 70 7c f5 ac 00 a3 b3 cb 0f f9 Data Ascii: S^s%.]0()E}%i8B_j5gyi&sI:dYXKklS54aKx@(kbV<ZxQgr \G?jeKi?FsImSUsHRI1bFlu^9,mq?2Xp\|
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: c0 d5 c5 c7 47 ef 7d 5c f2 dd 6d fe 89 03 59 86 bd 8a 8f ac c2 4d 65 7c 9b fb b7 6b 7d c9 2d 04 d7 b6 6c 5e de fd 2a eb 9c db 89 9b 24 f5 85 46 e5 3a ae 4f 7a 01 26 d2 66 e7 ac b3 36 96 dc 70 47 35 ae 64 46 3f 14 e2 5a db ee c9 52 2c 37 56 4f 22 98 67 cf e3 b4 a7 ee a4 67 62 30 cf 1e 87 92 7c cd 85 9a af 5e 60 70 8c 1f be e4 f7 5b 45 6a 2b d8 db 71 0f 32 06 fe e1 02 cd 35 ef 2a 05 ae c5 f6 be 5e 62 fb ee 26 2e 27 a8 cf b1 6a 1e b8 08 48 a7 f5 43 95 8a 54 04 d8 1e cf dc 57 8f 9a ae 15 bc 5a a9 4d 48 f0 1c de b9 f1 4b 8c 39 93 45 20 67 5c 38 77 ad e1 7b 57 69 fe 7c 0d bc 98 f2 c1 f1 2a 06 c5 a5 2f 2b e3 d7 7d 2e 05 ef 5c 63 f8 fe 55 8a 73 d7 1a 32 6e 31 b8 43 e3 63 fc cb 23 b7 72 e2 52 17 94 c3 f4 97 06 1b 7b 4e ca 83 fe 61 7d 5f a5 32 55 39 5b 71 ef 07 92 Data Ascii: G}\mYMe\|k}-l^$F:Oz&f6pG5dF?ZR,7VO"ggb0\|^`p[Ej+q25^b&.'jHCTWZMHK9E g\8w{Wi\|*/+}.\cUs2n1Cc#rR{Na}_2U9[q
2024-05-27 22:43:52 UTC	1390	IN	Data Raw: 44 d9 1a 3a b0 b1 da 20 26 5c bf a4 32 59 d5 ac b5 61 68 c4 e1 f7 ef e9 e2 f8 79 7d a0 ca 85 45 75 3a 54 50 37 b8 00 03 c3 aa 6f d1 79 4f 2d ab a3 62 96 1a f6 96 ec 49 ef 02 2b a3 66 f8 8c 55 7d 92 5a 53 8d 40 72 4d b8 da 10 54 ca ed f5 36 0c b9 9a 6b ba da 38 7e 91 0b 2a cd c1 01 d7 ef 76 7c 42 33 36 ae 2f a8 af 62 8e aa 05 74 65 29 f9 8b 97 f7 cf 3f e7 d8 a4 4a d8 ef 2c bb da 5e 33 4d 3f ee aa b5 05 df 89 f2 81 14 ae 46 28 93 fd 1b ed ab c3 f4 88 c3 cf de bb 8c 36 dd 03 45 07 f6 1a b0 b7 d0 00 b8 06 c7 31 ec 1b 50 d7 ae d9 f0 f4 bf d7 57 39 47 d3 8a 77 76 5f ff e3 af c5 52 99 cd b5 31 6f 2a 7c 1a a3 7a 5a 30 26 0c 7d c8 ae 2e 88 ec a1 64 13 a8 6d 18 9a f2 b8 fb c4 0e 3a 5b 53 fe 51 d0 a2 1e 2b 71 53 b6 f3 1a 38 cc 6f cb 68 18 1c 51 9b 8f ba e8 e9 af d5 Data Ascii: D: &\2Yahy}Eu:TP7oyO-bI+fU}ZS@rMT6k8~v\|B36/bte)?J,^3M?F(6E1PW9Gwv_R1o\|zZ0&}.dm:[SQ+qS8ohQ
2024-05-27 22:43:52 UTC	435	IN	Data Raw: 6f 58 6f a4 f8 82 4e d8 6f 53 2d 16 da 96 95 1d 5d 63 b2 2a 38 b4 bb d9 24 47 b0 cf 2a e9 28 4e 51 f0 fc a5 4b 60 62 3b 60 4d 4f 0d 1b c8 38 86 d4 84 26 35 a9 9f f4 94 b9 f9 50 90 d8 42 3a 24 01 0e a9 eb 8b 1b 96 6b 4b 5c 6d 6c f9 71 1d b7 e6 aa b8 85 8e 49 04 26 0b b6 31 51 30 03 40 8d c9 49 af f2 ed ef e8 b0 c3 d6 0b ba 38 61 5e 4f 8d 67 8b 22 24 72 ff 3a 19 c3 64 da 30 39 a5 47 1d c7 dc e3 7a fa 9b 6f ba f8 99 8a 47 38 0f 26 1d d2 00 47 69 f9 97 36 9c 80 14 57 69 29 2e d2 31 79 a4 8a 5b 18 5b 64 57 84 28 94 5e 15 d8 62 cf 97 de 5b 3b 12 fc ef 73 5a 21 dd 4d c5 35 96 82 84 96 a7 c0 71 0d e9 29 43 7a 4a ef 74 3d f3 90 d6 dc b7 66 c3 e6 92 ef 86 3c d4 e8 0d 03 70 94 96 fd dd 45 2b 91 e2 7c 23 39 c7 08 fe 5c 0b d1 69 24 e8 20 49 a6 05 81 54 fb d2 3b 36 90 Data Ascii: oXoNoS-]c8$G(NQK`b;`MO8&5PB:$kK\mlqI&1Q0@I8a^Og"$r:d09GzoG8&Gi6Wi).1y[[dW(^b[;sZ!M5q)CzJt=f<pE+\|#9\i$ IT;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50443	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:52 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:52 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:52 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:52 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50444	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	785	OUT	GET /PP8KjNgc-EqOm5a6yZ1w6mqbFzoyzLfCZcjhmRvWn6imgVjCiPj9j_MKz6jJuggsroU3293OtM1dIFgqushuz-Wrq-0-_z4AnqLkgw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:53 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5262 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:18:20 GMT Expires: Tue, 28 May 2024 19:18:20 GMT Cache-Control: public, max-age=86400, no-transform Age: 12333 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:53 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 13 da 49 44 41 54 78 9c ed 5d 6b ac 24 c5 75 fe 4e f5 74 cf cc 7d ef bd 7b 77 ef 03 b0 d9 cd 2e 6f 16 ef b2 2c d8 86 80 d6 84 58 60 63 09 e2 1f 36 26 c1 89 09 86 80 23 39 91 a5 28 3f f2 27 91 a2 c4 7f e2 04 12 39 26 0a 12 91 42 a2 24 2b 59 11 46 cb 0a 30 52 88 91 88 93 10 8c c8 3a 6b b2 3c Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx]k$uNt}{w.o,X`c6&#9(?'9&B$+YF0R:k<
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: 9f a4 a4 e9 da 08 69 36 03 d0 4d 53 cb 2a 97 9d 60 a3 f7 20 46 6f d3 0f 80 0c 06 e9 32 f4 67 79 9f a1 4b d4 4d 13 5b a6 38 f2 4f 5f 3e b2 9a 54 8f 7f bc ef c8 ea 86 41 47 c6 0c 0b 68 05 f3 43 4b 82 7c d7 60 f0 d0 fd 0b 93 ad cc 19 67 1e 83 d3 20 2b b9 a9 f3 35 18 33 6c b4 84 c5 cf b5 0c fa 59 bb bc f6 bf ce 27 1a ab 48 a9 29 7c a2 5b 9e 13 b0 4e e8 96 fc 13 98 42 90 47 21 d9 cf e0 fb 56 55 f1 31 8b e8 8e b3 a8 54 a9 52 8c 6a 67 6d 8b 3c a5 e6 22 98 1d 0a c9 29 b2 57 53 9c 46 5a 32 30 cf fa 5b 75 4b ff fd f9 a9 d6 0f 2f 9a 5b 79 cf b2 04 da 8f dd 36 46 cc 84 ba 46 f2 e6 4f bc 68 dc fd d5 ce f9 fe ee 97 8f bd f5 d2 8f ae fe ad ad 26 8b c0 cc 80 c8 c9 9b a1 28 c0 c9 d3 53 4b 2b 6b 95 9b 2b 42 fe ce 8a ac 5e 26 72 4d 30 07 8f 9e 34 38 2b b1 59 7a 2c 07 35 12 Data Ascii: i6MS*` Fo2gyKM[8O_>TAGhCK\|`g +53lY'H)\|[NBG!VU1TRjgm<")WSFZ20[uK/[y6FFOh&(SK+k+B^&rM048+Yz,5
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: 10 a9 80 a4 c8 20 66 49 13 55 31 85 6b e6 3f 87 7d 0b b7 a1 56 99 82 6e 36 a1 88 0a 26 2b db a1 5a 73 68 c9 33 a0 4a c5 1e 3a 86 fc 02 db 70 43 95 1e ba 93 2b 61 8f 71 60 03 d7 ce 7f 11 07 96 6e c7 98 3a 0b 53 ea ed 64 cc 90 96 04 5b 36 a9 4c 6d e7 47 32 43 b2 01 4d 8c e1 ba 1d bf 84 7d 8b b7 42 53 26 60 b1 e9 15 c2 0c b0 24 b0 b4 e5 21 82 4e b5 29 75 4c a9 4b d8 bf 70 0f ae d8 71 13 04 a9 f6 18 ee 7b 06 7d 8b d0 00 63 6c 82 21 9c d6 0d 0f 13 e9 9b a5 77 25 1a 32 c1 5d a6 3f 9e 97 cb b0 a4 8e aa 32 8e 4f cc 7f 05 fb 96 3e 03 85 34 5f e3 fa 65 18 52 22 40 12 c0 30 ad 26 a6 ab 3b 71 70 e9 3e 5c 36 7f 08 c4 4a 54 9e ed b1 55 4a 38 e6 95 21 25 81 08 d0 ad 75 2c 4d ec c3 f5 8b f7 62 d7 ec 75 90 52 82 59 46 e4 99 19 7a 83 a1 08 89 da b8 00 a5 6a e1 fe 8d d3 03 Data Ascii: fIU1k?}Vn6&+Zsh3J:pC+aq`n:Sd[6LmG2CM}BS&`$!N)uLKpq{}cl!w%2]?2O>4_eR"@0&;qp>\6JTUJ8!%u,MbuRYFzj
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: 96 c7 93 9b 37 b2 35 42 5e 74 bb 3d 2e 54 72 5d b8 a7 db 71 07 72 c3 5f 93 cc 32 00 6f 7f b6 50 b2 9b cd 91 22 f8 23 01 7f 78 32 f0 3d f2 25 86 dc 98 4d 08 29 37 30 24 a1 24 b8 70 f8 fc 93 02 c8 ed 15 25 c1 fd 42 41 e4 ba da 4b 94 6f bb 74 49 70 3f 90 da a1 0a a7 45 20 ad 9f dc 40 1e 19 30 52 04 5f d8 ae 55 1c da e4 fa 0f 1a 0f 47 b7 02 12 61 65 a7 e4 7b 69 30 94 69 92 ff 91 ec b5 92 e0 7f 1f 0d f8 96 1d 18 9e 2a a5 25 97 c1 11 ad 8f 08 a4 40 9f 8f f4 4f b1 7d b5 9f 15 18 1a 28 b8 90 94 51 73 13 c8 45 9e 51 b8 ef a7 cd fe 7f 44 34 d8 51 08 b9 b9 9a 7c a4 c6 60 22 8a bc db 73 21 81 10 5a ee 2b 90 dc 0b 3e 92 45 20 48 36 ec 73 a7 86 5d 99 5c 20 58 52 42 b2 19 e8 a4 e9 1d aa 24 72 fd 5e 75 76 0c 97 e0 f6 eb f8 00 80 2d fd 2c 36 5a 1b c5 cc f0 07 0e c6 46 63 Data Ascii: 75B^t=.Tr]qr_2oP"#x2=%M)70$$p%BAKotIp?E @0R_UGae{i0i*%@O}(QsEQD4Q\|`"s!Z+>E H6s]\ XRB$r^uv-,6ZFc
2024-05-27 22:43:53 UTC	234	IN	Data Raw: b7 9e fe ec 72 a5 22 be 57 1d a7 9b d5 3a 51 45 25 41 5e 30 37 27 0a 72 d0 2d cb 3e e8 53 5a dd c8 0d 8e 9f 9d c8 0d cf 7d a3 11 32 8e 5e 0f e7 e7 27 37 5c 8e fd 63 20 6c 99 2c f5 06 73 6b 93 7f b8 b9 26 bf f6 67 5f 3f 7a 72 ef fe 1b 05 00 7e eb b5 57 32 35 50 4f 04 bb f8 d6 d3 77 2e 90 90 87 a4 c5 3b 09 a8 fa 1e 63 60 b0 0d ab fd c3 84 6e c3 99 06 14 a3 29 2b 2c 41 81 c0 bf c3 aa 8f 13 e7 7a 3b 6a e2 ae 6e 79 b7 dc f3 c5 fd f9 b4 fb 86 ef 58 71 7f 31 e1 28 0c 1c ad a5 e0 49 67 f6 10 cc b0 bb 50 8b 14 3a a5 37 e4 8f be f3 e0 d1 f7 01 c0 d5 dc ac e4 96 28 51 a2 44 89 12 25 4a 94 28 51 a2 44 89 12 25 4a 94 28 51 a2 44 89 12 83 c0 ff 01 87 ed c2 7c c0 24 19 bf 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: r"W:QE%A^07'r->SZ}2^'7\c l,sk&g_?zr~W25POw.;c`n)+,Az;jnyXq1(IgP:7(QD%J(QD%J(QD\|$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50445	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:52 UTC	786	OUT	GET /d6Gf-uIYDXxTIV8n0ljiTCt1v1mU3CRmHsAyA4QUtQTYv5RvPAzPbYoa5VyfpZS4vvNOh_vYAXNnoLpHU31c8NTJZIHdUnxQyNI5F_U=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:53 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5381 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:08 GMT Expires: Tue, 28 May 2024 18:50:08 GMT Cache-Control: public, max-age=86400, no-transform Age: 14025 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:53 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 14 bc 49 44 41 54 78 9c ed 5d 6b b0 1c c5 75 fe 4e f7 cc ec ea de ab b7 40 22 18 49 91 4c 11 23 61 43 78 04 8c 91 89 85 43 2a 15 3b b1 5d fc 32 e1 19 82 53 95 4a 25 a1 92 94 9d 54 25 c4 ae 14 65 c0 29 14 e7 01 15 aa b0 12 bb 00 db 84 b7 78 89 92 91 00 83 05 21 b6 79 c8 80 78 18 08 48 f7 a5 ab bb 7b f7 31 dd 27 3f e6 b1 af 99 dd e9 99 d9 dd 4b d5 7e d4 45 77 67 bb 7b 4e f7 d7 e7 f4 39 a7 7b e6 02 23 8c 30 c2 08 23 8c 30 c2 08 23 8c 30 c2 08 23 8c 30 c2 08 23 8c 30 c2 08 23 8c d0 5f 50 1e 8d 7c e5 fa 83 67 2c b1 f9 a2 02 e9 e3 a4 60 07 20 e6 a4 95 19 50 11 d7 48 83 d3 48 c7 00 b4 79 35 10 03 60 ea 10 5b 21 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx]kuN@"IL#aCxC*;]2SJ%T%e)x!yxH{1'?K~Ewg{N9{#0#0#0#0#0#_P\|g,` PHHy5`[!
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: a6 a0 83 9a 71 1d 33 cb 76 71 c3 08 41 43 4b db 3e 5e 41 fe 9e c5 ee 32 6a f3 30 93 86 57 49 90 67 5b 40 46 82 7b 21 4f 72 c1 40 5d da cf d4 61 7f ab b8 66 dd ee 87 6e 38 71 2a 8b 6c 01 76 df 76 fe eb 00 be da ab dc 6f fd e9 4b 6b aa d3 53 0f 12 e8 1a 4b d7 cf 18 a4 63 96 85 f2 be 10 9c 56 a0 6e e6 d9 95 36 d7 9c e2 35 8f df 7c f6 93 69 e5 ca 82 47 76 9c 3c 09 e0 f6 ed 57 3c f5 2e 2b f1 04 d5 6b b1 65 17 93 21 4f 97 e8 88 40 e2 24 42 8c f6 76 57 6a 06 5b 85 67 2d 51 7c 2e 95 70 39 82 97 4f fc 44 15 0a fb 8d ad d0 90 58 4f a5 c1 a9 65 35 1c 14 6e fa 85 6c f9 01 8a ce f0 03 56 16 04 92 87 87 2d 46 52 e4 a6 c1 5d d1 c3 cd 4e c2 7b 41 f0 59 d6 fc 7c 9a 9d c0 5c f1 de db d3 5a 28 f7 cc 3c da 1a 84 53 de 7f 82 7b f4 22 59 62 84 20 ab a5 75 cb 8e 19 ff b3 bc c4 Data Ascii: q3vqACK>^A2j0WIg[@F{!Or@]afn8q*lvvoKkSKcVn65\|iGv<W<.+ke!O@$BvWj[g-Q\|.p9ODXOe5nlV-FR]N{AY\|\Z(<S{"Yb u
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: f6 77 80 c0 5b cb b7 6c f0 48 de ba ce 23 99 83 f5 a7 8d 64 e3 84 46 9f b4 31 cd b2 64 be 9b 14 9c 92 eb f5 93 0a 8d bd 48 66 60 f9 18 61 fb 69 45 9c b5 51 82 1d c2 af 1d 6f e3 9a 0b 97 40 a9 ec 23 c8 0c 48 01 9c bc 5e e2 92 f3 3a 35 39 ca f1 ea 94 d6 e0 7e 5d e4 c8 52 b6 17 d2 1d 9b cd 19 e1 bc 68 6b 9b 08 f8 d8 09 16 fe 62 cd 38 5c 97 21 25 61 c5 84 80 ca e9 11 b4 66 92 ff e0 3c c6 77 9e 50 1d 6b b2 0e 0e 82 b7 bf a1 ae 5b 67 0c ee 9f b8 7a ca 71 37 37 d1 39 3a 59 bd 94 9d 19 b0 25 b0 6a a9 c0 da 95 12 ab 97 89 d4 61 52 b7 7b 08 62 6c dd 20 71 c9 36 89 93 d6 00 e5 ba a7 c9 ac d1 a4 c9 ad 72 1b dd 23 37 69 cd 31 50 27 2b 8d 15 0f 34 5b 73 7f 3c 4d 66 6f 59 10 00 3e b1 51 e2 b2 4f 4b 6c 5e 19 c4 c9 ed e6 3a 81 b0 bd 2f f9 f7 4d 5e 36 cb 0c e9 2b c1 b9 2c Data Ascii: w[lH#dF1dHf`aiEQo@#H^:59~]Rhkb8\!%af<wPk[gzq779:Y%jaR{bl q6r#7i1P'+4[s<MfoY>QOKl^:/M^6+,
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: 72 40 e2 07 7b cb 78 7f aa ff 24 07 93 fb c9 17 66 da c8 15 20 08 90 10 5e 21 6a 10 1d bc 61 80 40 d0 f5 56 92 8d e3 e3 14 a4 0f 8c e0 66 02 9b 89 64 18 64 a7 08 be c4 c2 d3 64 21 a0 85 8d 87 5f 11 b8 fb c9 32 de 9f aa f5 95 64 29 09 7b f6 4f e3 86 bb a6 30 5d ee 4d 2e 07 4f a2 a2 a1 cd ca ad 43 55 2b 5d cd 75 ec 2e 54 0a 82 cd df 55 a9 07 9f 2e 6c b9 1b 11 48 30 a0 3d 73 2d 25 a0 60 e3 a1 57 5c 00 0b f8 fd 73 09 eb 56 db b9 3c a0 d6 8c 62 41 e2 81 bd 87 70 d3 3d d3 98 ab 49 14 0b 96 b7 de 76 21 97 98 1a ef 9f f0 ff 21 10 54 bd 06 0d 40 16 8a 20 6a d5 b1 6e 5b 8c 69 a6 6e 8a bf ba 32 44 72 03 f8 24 33 13 08 02 52 12 5c 05 ec 7a 19 d0 5c c6 97 ce 1b c3 da 55 f9 91 5c 2c 48 ec da 77 08 37 dc 35 8d 8a 92 28 3a b6 4f 66 04 b9 de db 3e 62 c9 0d 1f ce 74 bd 3f Data Ascii: r@{x$f ^!ja@Vfddd!_2d){O0]M.OCU+]u.TU.lH0=s-%`W\sV<bAp=Iv!!T@ jn[in2Dr$3R\z\U\,Hw75(:Of>bt?
2024-05-27 22:43:53 UTC	353	IN	Data Raw: d3 0b e5 99 fd 57 7f 3e ac 98 1c a9 08 be ff da f5 d3 ce 42 e9 a4 ca 91 b9 ca 20 8e 68 65 4a 5b 1b 54 6a 2f 26 1c 07 d6 d8 78 98 7b f6 0a b5 93 db 38 68 47 7e 23 26 e4 fa eb 6b 18 0a b5 98 65 02 ca b3 93 15 e7 97 af 6f 7d ee d6 2f 4e 2d bb f8 82 fe 7b d1 01 1e bd 71 d3 5b e7 5f f7 f6 af 54 26 a7 6e b3 c7 8b 17 08 db 21 12 52 10 19 cb 10 89 4c f3 c6 a0 72 d7 a2 cc 20 cb 86 2c 8e 41 2d cc 07 1b bf 68 fc db a6 52 fe be 40 30 01 c2 70 2c dc c4 f7 13 2e fe b5 e0 de 44 41 5d f6 2e 6b a5 55 b5 a4 dd 6a ed 91 fa d1 17 af fa f1 9d 5f 98 3a e7 9c cb ec 6a b5 ac 92 f7 cc 6f db b4 42 14 2e fc 93 97 56 95 2d 75 0e 5c 1c a7 a1 1d 18 f3 c3 c8 c5 31 d7 04 66 91 ab 4d 21 00 5a 30 54 ad ec b8 ae b2 00 40 b2 f6 73 25 0c 22 c9 44 02 9a c1 ca 33 d3 a1 5f 2e 28 90 45 03 4a 00 Data Ascii: W>B heJ[Tj/&x{8hG~#&keo}/N-{q[_T&n!RLr ,A-hR@0p,.DA].kUj_:joB.V-u\1fM!Z0T@s%"D3_.(EJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50447	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	783	OUT	GET /TlJWqgqxCA0it6tZ-n8OCkn-Om5nIEy19gQd-5UXCSpECGKSBNksOSSRa-fU6-DTcvHwnqzlnKc4A5k882qcSW15NTY2PHyNJz7b=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:53 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5768 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:42:26 GMT Expires: Tue, 28 May 2024 19:42:26 GMT Cache-Control: public, max-age=86400, no-transform Age: 10887 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:53 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 3f 49 44 41 54 78 9c ed 9d 79 78 55 f5 99 c7 bf ef fb 3b e7 de ac 90 10 09 61 47 2c 8a 20 94 c5 05 44 8b da aa 75 05 ad 5a b7 2e b6 5a a7 1d 9d 19 3b 53 c7 67 aa 82 bb 9d 2e 56 ed 33 5d d4 3a 52 10 b5 55 16 b5 ea 68 45 71 69 ad 2c 82 8a a8 65 07 13 c2 16 b2 df 7b ce ef 7d e7 8f 9b 60 80 7b c9 bd c9 39 37 21 dc cf f3 24 4f 92 f3 3b ef fb 9e fb cd 6f 5f 0e 90 23 47 8e 1c 39 ba 29 d4 d5 01 04 8a ce c0 f6 91 0f 1d e5 e7 b9 03 94 23 7d c8 d5 de a2 a6 88 0d f2 54 39 22 44 86 05 ca 50 eb 43 3c 52 34 83 6c 03 01 b5 dc 14 df a9 9e 6e fd f5 47 1b 3f b8 8d 7a ce c7 72 10 3f 89 e2 b3 b1 47 9c 44 79 ee 31 70 22 c3 Data Ascii: PNGIHDRxx9d6sBIT\|d?IDATxyxU;aG, DuZ.Z;Sg.V3]:RUhEqi,e{}`{97!$O;o_#G9)#}T9"DPC<R4lnG?zr?GDy1p"
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: c5 05 f7 82 79 12 81 0e b9 22 b9 3d 5a 5a da cd b0 f2 a2 bf e3 b3 3b 07 bc 5f b9 34 14 3f 61 18 ad 9c 3c ea 62 29 2e bc 9f d9 e4 c4 4d 81 a8 c2 10 e5 81 69 aa 53 72 d8 e5 61 f9 09 3c 07 57 4e 1a fd 2d ce 8f fe c8 31 66 b4 cd 29 9b 12 02 00 41 a3 5a bb b0 7c f1 d2 cb c2 2a 4c 9d 20 8d 55 4f 1e fb 4d 8d ba 37 ba c6 8c f2 73 f5 6d 4a f6 16 77 59 68 e2 02 01 0a 5c 39 79 d4 c5 9a e7 e4 c4 6d 87 16 71 9b d4 b7 0b ca df 58 16 5a d1 dc 4a 20 75 f0 b6 63 47 4e e5 bc fc 1f 3b c6 8c ce 89 9b 1a 02 a0 aa 31 b5 f6 e9 6c 88 db ea b3 53 54 9e 34 ae af 71 79 21 b3 99 24 41 44 d4 43 49 88 0b 5f 7d 7f 76 bf c5 d9 1b cd ea 74 0e 36 86 1e 55 e6 49 dd 3d df b6 5d 8e 93 ed f1 d9 16 71 01 df 3e 92 4d 71 81 4e d6 c1 5b 4f 99 78 0f 19 3e 63 cf 30 5c 37 a0 75 d5 45 eb d8 01 81 10 Data Ascii: y"=ZZ;_4?a<b).MiSra<WN-1f)AZ\|*L UOM7smJwYh\9ymqXZJ ucGN;1lST4qy!$ADCI_}vt6UI=]q>MqN[Ox>c0\7uE
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: b8 63 4e 4a 73 b1 54 8e ce b2 9f c0 96 f8 18 55 0c 3d c0 aa 94 8c 50 df c0 94 59 14 9d f1 31 f2 4f ae 81 57 d2 b4 a6 f4 fe fb 6b 82 b1 9e a3 3d f6 1b c9 62 e8 30 80 32 6c 60 b5 83 10 10 65 14 4e 5d 0b 73 78 fe 6c fc 29 40 db 19 32 65 66 fd af 15 14 ef ba 08 82 83 00 f6 05 9b b7 d5 e8 f3 6b 1f 28 fa 20 59 9a fd 05 36 dc cb 44 e0 f8 5e d0 c1 10 7c 8f 3d b7 7f c3 9b c1 5a ce 8c c2 a2 c2 7f 12 bf 47 e8 0b 90 81 f5 9b d7 57 94 71 ed 5a 20 3d 81 15 28 08 63 9b 02 33 20 9e 2c 93 ed a8 0c de 7a fa 88 b5 10 1b f0 7f 6f 57 41 3e 54 d1 4b d5 0e 4f 95 64 af 3a 58 9f c5 48 40 4b c2 10 98 08 00 9b a5 91 cb f1 61 f0 d6 0f 51 54 41 a4 a5 86 30 30 55 92 bd 04 b6 8c fe 44 54 1a 4a 30 04 a8 e8 86 50 6c 1f c2 b0 89 90 61 2a 4c 79 7d af df 08 65 00 f5 09 63 d1 a4 b5 80 15 bf Data Ascii: cNJsTU=PY1OWk=b02l`eN]sxl)@2efk( Y6D^\|=ZGWqZ =(c3 ,zoWA>TKOd:XH@KaQTA00UDTJ0Pla*Ly}ec
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: be 75 5b f2 c1 8d b6 1c 50 e0 bc 33 f1 82 5a 5d 6b 6d 62 6c da 21 0f 6b 6d 1f 3c dd 30 19 d7 d4 0f 43 99 46 51 d0 51 71 f7 44 ab 00 21 df b0 b9 78 ec 9c f3 fe bb 73 c6 ba 07 6a ea ee 67 a5 91 20 0e be f6 25 82 aa 34 5a d1 55 e9 24 6f b7 f8 50 1f 0b 98 a4 8a c9 c3 f2 d8 11 f8 5d fd 58 fc ac b9 02 7d c0 49 bb 40 1d 42 01 62 2e 75 8d 7b e5 98 59 e7 1c d4 e7 77 4c 99 51 ff 3f 6c f8 74 62 8e 84 91 7b 09 04 02 76 91 a3 8f a6 97 3e 0d 36 bf 14 79 e3 fd f8 e8 13 e7 36 57 f0 bb b6 00 f9 08 6f 41 b5 a8 6c 89 7b de a3 1f 7c f3 b9 5b 42 72 11 1a 53 66 ee fe 89 eb f0 55 4c dc 37 c4 97 fd 89 08 96 be 76 4b d1 f1 e9 24 4e 4b a7 55 b1 7e b3 ef 6b 1c bc fd 3d 29 44 41 ba 37 75 10 26 1e 18 71 dc 6b c6 cc 3e f7 ee 10 dd 04 ce 94 99 b5 77 b9 0e 7f 83 89 c2 13 97 18 00 d5 8a Data Ascii: u[P3Z]kmbl!km<0CFQQqD!xsjg %4ZU$oP]X}I@Bb.u{YwLQ?ltb{v>6y6WoAl{\|[BrSfUL7vK$NKU~k=)DA7u&qk>w
2024-05-27 22:43:53 UTC	740	IN	Data Raw: 39 e2 3f 2b 97 e7 6f 0d da 53 a8 1f fc 71 8f 4d 2f f3 1c 7a d8 18 3e 9b 99 22 1d 1a 3c e8 a1 90 21 a8 b5 db e3 52 ff e0 ca cb 5f be 3d 34 3f 61 19 6e cb f8 39 d3 66 1a e3 dc 48 86 f2 bb 6c ec ba 1b 41 86 e0 7b 7e 95 ef f0 b5 ef 5f f2 cc c2 50 7d 85 69 bc 2d 0a c5 84 c7 a7 af 37 ec 0c 6d 99 c8 3f f4 20 00 aa 2a 56 56 2c bb 62 fe f8 6c b8 cc da 69 b3 04 c2 f2 cb 17 0c 53 f5 fe a8 8a 58 cb cb 4a 0f 0d 5a 9f 55 b4 41 ac fc 2e 5b e2 b6 ba ce 3a 93 5f b9 74 7c ac ba f9 05 36 a6 84 88 a2 3d b9 6e 26 26 a8 68 5c c5 af ca eb 53 72 f6 5b 5f 7d 2c ab af 15 ea d2 3c 34 61 ee b4 47 88 9c e9 04 2d 26 66 b7 27 09 4d 4c 50 55 1f 8a dd 96 ec b3 cb bf 3e ff aa 2e 89 a3 2b 9c b6 65 cc ec b3 26 39 26 72 07 93 19 43 44 65 44 e4 1c cc 42 13 13 44 44 00 6c 53 c5 c7 0e e9 bf fc Data Ascii: 9?+oSqM/z>"<!R_=4?an9fHlA{~_P}i-7m? *VV,bliSXJZUA.[:_t\|6=n&&h\Sr[_},<4aG-&f'MLPU>.+e&9&rCDeDBDDlS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50448	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	786	OUT	GET /xDakliA_6hjirY-kSiTQFdrVRcRxYDMDdVWFOQtp97xidbk-At7EwGfV7YQqzSgbpfmpBw6etaT20SIzenYlyyretLrgN1PbR7_OTos=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:53 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3565 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:12:52 GMT Expires: Tue, 28 May 2024 21:12:52 GMT Cache-Control: public, max-age=86400, no-transform Age: 5461 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:53 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0d a4 49 44 41 54 78 9c ed 9d 69 6c 1c d7 61 80 bf f7 66 76 97 cb c3 12 0f c9 24 1d 49 56 c4 a8 82 21 eb a8 09 1b 95 55 fe 48 5c 1b 45 15 c3 88 81 14 28 dc 24 6e e2 f4 4a 8a da 68 90 54 6b 01 01 6c fd 33 50 c0 76 5b d4 8a 61 14 0e 40 b4 46 a8 16 06 6c 44 89 ac b8 4c 50 55 47 29 4a e2 46 b0 44 b1 24 b5 e2 92 14 0f 99 d4 92 dc 39 5e 7f 0c 57 e2 cd 9d e5 ec ec 8a 3b 1f 20 40 cb 9d 79 ef ed 7c f3 ee 37 6f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 60 3d 22 0a 9d 80 5c 38 72 e4 48 cd 95 2b 57 08 85 42 be c4 67 18 06 bb 76 ed e2 b5 d7 5e 1b f5 25 42 0f b9 ef 04 c7 62 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxilafv$IV!UH\E($nJhTkl3Pv[a@FlDLPUG)JFD$9^W; @y\|7o `="\8rH+WBgv^%Bb
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: 5a a5 bc 0b 7c 93 60 4c 3b 1f e8 4a a9 ef 86 cb ca 23 c0 9f e5 1a 48 ce 62 e2 f1 f8 31 e0 c5 b5 84 51 4c 14 59 ee cd 20 81 17 cf 9d 3b 77 6c 2d 01 b8 26 1e 8f bf 8b 23 b7 e0 78 55 3c 17 39 2f 9e 3b 77 2e a7 15 2c ae eb e0 59 b9 df 24 cb 05 7b 52 80 94 0a 29 bc cf 1d ce 10 e5 da 05 2b 05 4a f9 7b a3 d8 4a 60 db 72 c5 06 a2 69 a4 e7 7e b4 80 7f 6d 6e 6e fe b6 9b 78 5c 09 8e c7 e3 ef 00 df 26 cb 9c af 6b 8a a1 cf 75 7e d1 bd 91 b3 c9 0a 0c 4b e0 d7 04 91 b2 8b 73 0e 4f 01 21 a1 d8 bf 69 82 af 7c 69 94 fa 4a 13 d3 5e fa a2 2c 10 0c 60 03 ef 36 37 37 7f 37 db f8 dc 36 b2 7e 97 2c e5 6a 52 71 71 a0 82 9f 76 d5 70 2b a5 13 95 0a 44 fe 2f ba 00 6c db c9 95 c5 fa 60 8e 61 0b 3e 1d d8 c8 b5 db 51 be fe c8 30 bb 36 a5 b0 54 56 89 95 38 0e b2 c6 ad e0 ac 16 97 09 01 Data Ascii: Z\|`L;J#Hb1QLY ;wl-&#xU<9/;w.,Y${R)+J{J`ri~mnnx\&ku~KsO!i\|iJ^,`67776~,jRqqvp+D/l`a>Q06TV8
2024-05-27 22:43:53 UTC	1316	IN	Data Raw: 06 72 2a 6e a3 d1 28 27 4e 9c a0 a3 a3 a3 60 f5 71 49 09 3e 71 e2 e7 a4 d3 69 d7 5d 18 21 04 c9 64 d2 b5 64 21 04 e1 70 98 5f fd ea 14 e7 cf 9f 77 d5 68 f3 8a 92 12 7c f2 97 bf a4 aa aa 2a a7 73 a5 94 0c 0e 0e ba 96 1c 0e 87 e9 ec ec 64 7a 7a 9a 33 67 ce f8 2e b9 64 04 0f 0d 0d d1 db db bb a6 77 2d 09 21 5c 4b 16 42 90 4a a5 e8 e9 e9 61 6a 6a 8a b3 67 cf fa 2a b9 64 04 5f be 7c 19 a5 d4 9a 47 d1 72 29 ae 75 5d 27 91 48 a0 69 1a 93 93 93 9c 39 73 86 74 7a d1 a3 a1 79 a1 64 04 27 93 49 cf c2 ca 14 d7 99 d6 f5 6a 37 8d a6 69 0c 0f 0f 23 84 40 4a c9 e4 e4 e4 dd 62 db 09 c0 b3 a4 2d 4e 6b fe 82 2e 2e 12 89 04 e0 dd 16 c5 99 d6 75 77 77 37 96 65 ad 58 f4 0b 21 e6 e5 58 4d d3 18 1f 1f a7 ab ab eb 9e e4 3c 51 32 82 b3 69 39 db b6 ed aa 18 17 42 90 48 24 b8 74 e9 Data Ascii: rn('N`qI>qi]!dd!p_wh\|sdzz3g.dw-!\KBJajjg*d_\|Gr)u]'Hi9stzyd'Ij7i#@Jb-Nk..uww7eX!XM<Q2i9BH$t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50449	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	554	OUT	GET /moWtYpo1G3n-1QfF5rNSy7n2IIQs785-H9DStefngR0kWMsmnPkzMu-SKH3eUxHVddekMttIA5olrn_wo3p50z04NyRZYPHYBc2cxvE=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:53 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8054 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:19:02 GMT Expires: Tue, 28 May 2024 21:19:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 5091 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:53 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1f 2d 49 44 41 54 78 9c ed 9d 6b 90 2d 57 75 df 7f 6b f7 e3 9c 33 73 e7 be 74 af a4 8b 90 74 25 14 a1 8a 04 02 81 01 bb 08 0f 23 85 02 1c c5 c2 a9 a4 12 27 95 c4 50 b6 2a 94 fd 29 15 62 27 1f 02 e5 3c 08 b8 02 15 e3 94 83 a1 52 94 71 25 2e a2 38 2e aa 62 01 b1 31 b8 04 12 2a d9 04 81 40 08 24 dd 2b 21 5d dd c7 cc dc 99 f3 ee de 2b 1f fa dd a7 fb 9c ee 33 33 12 1f ce 2a 1d dd 39 dd 7b ef b5 f6 fa ef b5 f6 5a 7b ef ee 03 2b 5a d1 8a 56 b4 a2 15 ad 68 45 2b 5a d1 8a 56 b4 a2 15 ad 68 45 2b 5a d1 8a 56 b4 a2 15 1d 2c c9 be b4 f2 c1 0b 47 ee bd c9 ff 45 cf 37 af f5 c4 59 83 00 11 04 d0 96 d2 c8 a8 3f 0a 2e 9c Data Ascii: PNGIHDRxx9d6sBIT\|d-IDATxk-Wuk3stt%#'P)b'<Rq%.8.b1@$+!]+33*9{Z{+ZVhE+ZVhE+ZV,GE7Y?.
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: 9e c7 7f 1e d0 4d c8 f5 3d 5c df 85 2c e5 a9 90 63 0e ff 79 a4 8a 9d 0e 6f 6e 28 4a 4a ad 00 fe e8 1f f7 5f 8e 3a 7e d9 6a 1b bb e1 0a 0b cc 7f d4 86 04 e3 49 7d 14 d6 a2 fd da 32 8b 9a 5a 1a 64 c5 f5 5d 5c df 29 a4 48 7b 05 39 6f c5 3a 0d 7a 77 fd ed cf 5d bd 50 94 1c b5 02 78 6c e5 2e 84 8d bc 30 f3 3a d0 7a 0e 55 8b 9d 04 f5 85 cb 60 cf 03 72 01 df 85 20 57 2a bb be 9e 2a 78 9e 8b e7 39 b3 41 56 8d 7c 4d 05 cb 40 96 43 d2 39 fc f6 9a 9a 95 d4 0a e0 50 ed dd c0 91 3a ab cd 2b b4 6d 50 a1 36 9a 83 c5 86 cd 0c 37 0f f2 42 f7 5c 2d cf 7e 5b b3 e7 19 3c df 69 ec d3 db 82 2c c2 91 10 b9 bb 59 eb 11 35 06 f8 0b 5f 51 63 55 4e 97 95 b2 6c 94 5b a6 30 08 19 ee 8c e7 02 b1 8c d5 15 8a 2c 13 4c b5 00 59 04 5c bf 83 b8 b3 0b 84 b5 58 b6 d1 9b 8a 84 21 37 ff 0b 3e Data Ascii: M=\,cyon(JJ_:~jI}2Zd]\)H{9o:zw]Pxl.0:zU`r W**x9AV\|M@C9P:+mP67B\-~[<i,Y5_QcUNl[0,LY\X!7>
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: 08 2b 2e 93 aa d2 d9 d8 98 d9 36 ac 96 67 0f 8c e2 4c c4 06 f6 ba b7 bc f3 33 bd f2 ed 99 fd e0 91 04 27 24 d4 db 64 f1 f4 91 d2 dc 72 b5 0f 3b 47 e7 b0 06 9b 3b 40 88 6a fc 8c 7b 45 f9 aa eb 9a 8c c0 05 bc f2 75 55 43 6c 38 c5 86 e1 6c f6 22 54 a6 34 33 bc 65 0e 9f c2 05 83 eb 1b 94 10 ac 9d 5b 58 2b 2e d6 ea a2 f2 c9 76 50 c2 db e8 6d 9c 00 ce e6 6f cd 00 1c 8c 47 8a 4e 15 0d 2b 5a aa a7 85 83 a1 42 a1 61 a8 8c 46 db a8 1d 60 c3 68 a4 57 75 a0 2e 95 d4 6a 4d 55 d4 8f 6e 58 42 06 bb 9b d1 29 fb 1a 90 ca bc aa 6c ab 5c 2e c1 3c 5f d5 38 86 f1 f0 32 36 d8 25 7a 4a be 5e ce 3a dd 55 1d 10 98 b9 14 7f b7 16 3b 0d 67 9b 9a 01 58 8d d7 17 1b 3c d7 76 26 48 4a b7 4a 0b 04 94 e4 a1 e9 64 f9 b2 42 c9 15 d7 96 11 42 1c 9f c9 14 3a 5e cd db 5d b4 99 5b 9e b7 3c 9c Data Ascii: +.6gL3'$dr;G;@j{EuUCl8l"T43e[X+.vPmoGN+ZBaF`hWu.jMUnXB)l\.<_826%zJ^:U;gX<v&HJJdBB:^][<
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: 2d 76 32 c0 0c 77 70 87 3b c8 64 54 bd 3e eb 38 84 de 3a 81 bf 8e 76 7a 38 be 9f 02 98 b4 9d 07 9a e4 e8 6e cc 4b 51 d4 0a 41 18 b0 e6 85 5c 79 dc e5 e4 31 1f bf 33 9b ba a9 55 b6 36 c7 bc 70 69 c2 f9 ed 10 35 0e ae 31 88 91 18 5c 01 22 17 9d 7c 8d 06 74 3c d9 47 a3 2a b2 ea e9 18 2e 5f 40 76 2e 61 26 c3 8a be 29 ea b8 4c fd 0d e4 d0 b1 71 d0 5d fb b5 07 ff f3 6d ff b5 0d 5e ad 5f 27 7c e2 ba ab 47 ce 34 e0 cc f3 17 79 f2 ec 05 3c a3 f8 5d 07 c7 44 ee 6d 3a 09 18 8f 2d 2a 06 af e3 e1 ad ad c7 a3 33 71 90 b1 6b 16 13 f5 36 9e 13 a3 7c 29 5b b7 d5 38 9d 32 dd 43 d8 ce 3a 93 f5 e3 10 04 30 9d 80 0d 50 55 8c 18 42 c7 05 63 10 c7 c5 f5 bc 18 50 c5 26 8d c4 f3 3b 62 48 5f 25 2c 82 a8 c9 86 b7 28 62 c0 73 5c 26 ea 71 e6 7c c8 0f 9f 1d e1 3b 96 4e d7 e0 89 10 aa Data Ascii: -v2wp;dT>8:vz8nKQA\y13U6pi51\"\|t<G._@v.a&)Lq]m^_'\|G4y<]Dm:-3qk6\|)[82C:0PUBcP&;bH_%,(bs\&q\|;N
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: 24 0b da 66 e7 36 49 5d 45 c6 2b 6d bc 60 75 73 f8 a4 83 a6 e8 59 4c a9 5c be 0d 55 98 86 30 b1 10 e4 80 f7 4d f4 49 df e8 30 13 4c e6 e5 cd 00 95 bc 7b 92 c4 8f b7 3f 34 b0 97 5f 3e 8b c4 2b 28 38 b3 65 00 c7 f1 a0 07 e1 70 90 2d 86 a4 77 cb 4a 2d 7f cd 97 cd ae 66 1c f2 81 40 b1 4e f4 65 01 2f 9d ad 93 cd b1 32 53 30 bf 15 10 87 84 28 30 09 61 33 10 4e ae c3 1d a7 84 1b 4e 08 47 d7 05 cf 11 86 53 e5 dc 36 3c 76 0e be 72 c6 72 b5 2f 6c 78 e5 61 5d cd ab 30 88 93 eb f2 22 cc c1 d6 da 0a cb ca 0b 13 51 32 48 8d eb 67 20 6b de 9a f2 f5 72 75 28 cd 61 b9 2e 15 7a 57 72 57 a2 65 cb 28 35 5e f1 75 d6 72 cb 02 55 96 42 11 a6 16 76 2d fc cc 69 e1 9e d7 39 dc 7c 4a f0 dc d8 4f c4 ce 22 dd 08 52 18 4c 1c be f8 a8 f2 d9 87 2d 93 21 1c f1 ab 18 97 78 95 fa 18 96 7f Data Ascii: $f6I]E+m`usYL\U0MI0L{?4_>+(8ep-wJ-f@Ne/2S0(0a3NNGS6<vrr/lxa]0"Q2Hg kru(a.zWrWe(5^urUBv-i9\|JO"RL-!x
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: bf d7 31 09 60 38 49 64 63 5f c0 85 65 e6 e0 b2 5f 2a 69 6e df ac 3a 6e c8 38 2e f8 f1 62 48 21 45 02 ca 6b 6a fb 01 6e ee 98 8d 67 a2 cd fa 34 10 d6 a8 4c c7 83 d7 5d 2f ec a2 1c 51 8a 59 85 2a 37 f5 e0 97 ff 9b 9d 59 62 4c b2 a6 f7 de 0e ff f8 6d d9 c2 89 08 6c 0d 60 73 94 9c 29 9c 05 77 59 bd b6 b6 e0 f2 5a ec 52 e6 3b 8f 2a da 32 9e 87 db 59 2b 76 7c ce 1e f0 7e 80 0b d1 2a d4 83 3f 56 2e 0f 67 c5 3c 72 08 ee 7d bd 70 39 28 82 0b 91 6b b7 c9 b4 91 eb 52 a0 70 a2 07 af 3a 5d f4 3a 46 e0 85 2d 78 66 0b 3c 53 6f b9 ae 9a d6 5a 5e fa 05 06 95 98 96 fd ee 22 71 9a 96 57 45 3c 17 c7 ef c5 67 a1 ab c1 2d d3 4c 9e db 02 dc 98 2d 27 5c e1 fe 47 8b 82 59 ab 1c ee c1 bb 6e 17 5e 73 0a c6 96 e2 81 47 91 f4 e1 fe f4 21 ff b8 f1 37 9c 16 ee 38 1d 45 e2 79 7a 61 0b Data Ascii: 1`8Idc_e_in:n8.bH!Ekjng4L]/QY7YbLml`s)wYZR;2Y+v\|~?V.g<r}p9(kRp:]:F-xf<SoZ^"qWE<g-L-'\GYn^sG!78Eyza
2024-05-27 22:43:53 UTC	245	IN	Data Raw: b7 72 0a d8 07 70 15 65 bc bd 7d f6 81 df 3a bd dc ef 48 56 c9 d6 96 fe c6 3f ff d1 bf 72 ba 9d df 70 3a eb 56 8c 71 c5 18 0a 4e 50 2a ff ac ea f7 72 a0 57 4c 05 15 1a 8f e6 e4 70 9a 69 3e 01 36 f7 04 fd ac 40 55 0c 25 7e 43 49 79 19 24 c7 2b bd 5f 4e 21 b2 67 f7 4b 75 92 04 4e d4 5a 55 b5 c1 78 bc 8b 1d f5 7f f3 c1 8f df fa 91 2a 29 9a d2 be d9 d1 db 7f e3 cc 6d 81 72 0b c2 5a 19 28 d1 97 c4 3b 97 48 08 ec d4 91 49 68 6a a4 89 0e 60 c8 fc 85 55 eb ba 15 07 61 e3 7b 36 3f d8 8a bb 4f 8e 3a e5 e5 95 88 a9 0a f1 2b 68 a3 97 cc a2 bb be 31 8f 7d e5 63 d7 7d 77 71 9f 56 b4 a2 15 ad 68 45 2b 5a d1 8a 56 b4 a2 15 ad 68 45 2b 5a d1 8a 56 b4 a2 15 ad 68 45 2b 7a e9 e9 ff 03 b4 05 09 23 b0 37 ce a8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: rpe}:HV?rp:VqNPrWLpi>6@U%~CIy$+_N!gKuNZUx)mrZ(;HIhj`Ua{6?O:+h1}c}wqVhE+ZVhE+ZVhE+z#7IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50450	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	786	OUT	GET /aMTzdOYbB8kBrLq-k5PesENOhnr-7qtytONnM1GOl-drEs9jvyhYJDNaN9-n_Am7rZLxE-uQnNKC0tW6w7Ea9QX5ZsgMy5mn1Il33QY=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:53 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3963 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:23:42 GMT Expires: Tue, 28 May 2024 20:23:42 GMT Cache-Control: public, max-age=86400, no-transform Age: 8411 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:53 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0f 32 49 44 41 54 78 9c ed 9d 7b 6c 5c e5 99 c6 9f f7 5c e7 62 c7 c4 c6 26 09 c4 36 26 21 37 68 52 48 4a 48 13 0f ec 42 bb 6d 62 1b 2a a2 d5 8a 8d c4 4a a0 55 69 ab 55 49 a8 40 55 53 5a a9 bb a1 d9 40 cb b6 45 cb a5 2d 97 76 45 48 a1 1e 63 02 24 a5 9e b1 c9 85 7a 53 2e 49 f0 86 c4 a9 9d 0b 31 8e e3 5b 66 e6 cc cc 39 df bb 7f 8c ad 86 d0 80 63 e6 3b 67 66 32 3f 69 fe 88 ec bc cf 3b df e3 f7 5c be f3 7d ef 01 8a 14 29 52 a4 48 91 22 5e 40 5e 27 20 09 05 40 29 50 11 e4 d5 d7 f8 90 4c 9a 00 e9 50 14 05 00 20 84 00 38 0d d3 4c d2 f3 7b 2c 60 20 06 60 14 80 f0 32 69 19 14 8a c1 06 be 72 e3 4c d6 79 3a 98 2f 01 Data Ascii: PNGIHDRxx9d6sBIT\|d2IDATx{l\\b&6&!7hRHJHBmb*JUiUI@USZ@E-vEHc$zS.I1[f9c;gf2?i;\})RH"^@^' @)PLP 8L{,` `2irLy:/
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: a9 b4 bd f8 a2 d2 2f 50 73 e4 cf ae eb bb 2d 08 a0 ea d0 e9 c4 d3 15 86 51 f0 e6 02 80 60 a0 c2 30 b4 43 a7 13 4f 03 a8 72 5b df 6d 83 89 1b eb 37 80 e8 2a 87 2f 00 77 c7 70 98 01 a2 ab b8 b1 7e 03 5c 3e 6a ba 6a 30 37 2d 5f d3 1d 4f de 7e e1 58 fb 57 18 40 77 3c 79 3b 37 2d 5f e3 a6 ae 9b 06 d7 8c a4 79 5d be 4c 3f ca c0 01 8c 91 34 af 03 50 e3 96 a6 6b 06 73 43 e8 9e fe 94 3d cf eb 1b 6f 2f 21 00 fd 29 7b 1e 37 84 ee 71 4b d3 25 83 b5 eb 86 1c 7b e5 f8 9a a8 0b 19 06 b4 21 c7 5e 09 68 d7 b9 a1 e7 8a c1 dc b8 ec ce fe 54 ba d6 0d ad 7c a0 3f 95 ae e5 c6 65 77 ba a1 e5 86 c1 4b 13 0e 2f 23 90 ea 82 56 5e 40 20 35 e1 f0 32 00 4b 65 6b 49 37 98 6f 09 dd d6 63 59 73 bc 3e f7 2a 00 14 a2 cc c7 e3 5c 08 40 8f 65 cd e1 5b 42 b7 c9 d6 92 7d 4e bc 1c 8c 25 3a 29 Data Ascii: /Ps-Q`0COr[m7/wp~\>jj07-_O~XW@w<y;7-_y]L?4PksC=o/!){7qK%{!^hT\|?ewK/#V^@ 52KekI7ocYs>\@e[B}N%:)
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: ce 3f e1 e3 7f 6c 75 d1 1b 16 2f 59 31 25 f8 25 c1 b8 fe 70 c2 aa 76 18 41 c5 a5 96 4e 04 c0 16 9c 40 66 99 ef a7 2d d0 9f 34 72 9f fa 68 ea 9e 4a 53 ef 1d 4c db 73 a4 ea 9c 85 60 04 bb 13 d6 3c 06 66 5f 61 e8 b7 0e af 5c 1e 0f a8 6a 4a 23 72 00 c0 66 56 e3 8e 63 9c 4e 3b 81 f7 e3 56 29 01 9a 17 9b e3 2a 4d bd 17 9a ba 47 a6 86 ec ef 35 85 9b 42 cf 1d 8a 59 ff 70 21 f6 e5 f8 24 08 c0 15 41 df 2b d4 1c f9 47 00 23 b2 74 64 ef a4 1c 01 a3 33 cd 22 e9 f5 f6 d1 5c 22 d3 05 4f 24 c1 e8 84 44 73 01 17 f6 07 53 78 f7 b6 19 a6 d9 23 5b 27 df 98 61 9a 3d 14 de 2d bd 53 bc 0b 7b a1 ad e8 14 5d 3d 54 70 6f 9c fa 0c 08 00 53 74 f5 10 60 45 65 6b b9 b3 d9 9d f1 b2 4e 18 2a 1e a6 33 87 67 9d 30 04 c6 cb 6e e8 b9 62 30 85 23 cd d5 01 df 91 e2 85 56 e6 76 ae 3a e0 3b 42 Data Ascii: ?lu/Y1%%pvAN@f-4rhJSLs`<f_a\jJ#rfVcN;V)MG5BYp!$A+G#td3"\"O$DsSx#['a=-S{]=TpoSt`EekN3g0nb0#Vv:;B
2024-05-27 22:43:53 UTC	324	IN	Data Raw: 61 6e 89 7f 33 85 23 8f 41 62 0f 67 37 29 14 83 01 e0 38 75 0f fc a8 ca 50 77 4c c6 62 02 50 65 a8 3b a8 7b e0 47 00 8e 67 39 37 cf 28 24 83 81 bd 7b df 29 d1 f4 07 35 c2 79 ef 2a d0 08 bd 25 9a fe 20 f6 ee 7d 47 46 6a 5e 51 58 06 03 a0 e6 b6 70 8d df 7c 48 21 4c f8 f9 b1 42 18 ae f1 9b 0f 51 73 5b 58 66 6e 5e 50 70 06 03 00 85 a3 8f d6 f9 7c 4f 2a fc e9 f7 af 0a 23 55 e7 f3 3d 49 e1 e8 a3 6e e4 e6 36 05 69 30 80 14 b5 44 36 d4 05 cd 17 c0 7c ee c9 2e 66 51 17 34 5f a0 96 c8 06 e4 f1 64 c6 27 91 8f 4f 93 ce 87 b9 dc 18 7a f4 fd b8 75 c3 d9 5f 94 01 cc 0e f8 da 28 1c f9 3a 00 4f 77 e1 cb a4 50 2b 78 9c 2e 18 c6 f7 ca 54 f5 bd b3 7f 50 a6 aa ef c1 30 be 87 02 36 17 28 7c 83 41 5b b6 75 54 19 fa 77 09 18 18 5b cb 0c 02 06 aa 0c fd bb b4 65 5b 87 d7 f9 15 c9 Data Ascii: an3#Abg7)8uPwLbPe;{Gg97(${)5y% }GFj^QXp\|H!LBQs[Xfn^Pp\|O#U=In6i0D6\|.fQ4_d'Ozu_(:OwP+x.TP06(\|A[uTw[e[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50451	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	565	OUT	GET /hDmpjNjn66Z7hyYvAee18jZfIss2NCbUss41HLkWh3s08AxT6prRWd6iv9CnofK6cXXS42OzQ_0J6UcM44xV1ouv2Tq53nCjI28DDorFDHS4RQrICw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:53 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 7124 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:09:38 GMT Expires: Tue, 28 May 2024 22:09:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 2055 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:53 UTC	858	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 ff e2 0b f8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0b e8 00 00 00 00 02 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d9 00 03 00 1b 00 15 00 24 00 1f 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 29 f8 3d de af f2 55 ae 78 42 fa e4 ca 83 39 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 64 65 73 63 00 00 01 44 00 00 00 79 62 58 59 5a 00 00 01 c0 00 00 00 14 62 54 52 43 00 00 01 d4 00 00 08 0c 64 6d 64 64 00 Data Ascii: JFIFExifII1PicasaICC_PROFILEmntrRGB XYZ $acsp-)=UxB9descDybXYZbTRCdmdd
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 0b f9 0c 12 0c 2a 0c 43 0c 5c 0c 75 0c 8e 0c a7 0c c0 0c d9 0c f3 0d 0d 0d 26 0d 40 0d 5a 0d 74 0d 8e 0d a9 0d c3 0d de 0d f8 0e 13 0e 2e 0e 49 0e 64 0e 7f 0e 9b 0e b6 0e d2 0e ee 0f Data Ascii: +:IXgw'7HYj{+=Oat2FZn%:Ody'=Tj"9Qi*C\u&@Zt.Id
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac d0 ad 44 ad b8 ae 2d ae a1 af 16 af 8b b0 00 b0 75 b0 ea b1 60 b1 d6 b2 4b b2 c2 b3 38 b3 ae b4 25 b4 9c b5 13 b5 8a b6 01 b6 79 b6 f0 b7 68 b7 e0 b8 59 b8 d1 b9 4a b9 c2 ba 3b ba b5 bb 2e bb a7 bc 21 bc 9b bd 15 bd 8f be 0a be 84 be ff bf 7a bf f5 c0 70 c0 ec c1 67 c1 e3 c2 5f c2 db c3 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 c1 d3 44 d3 c6 d4 49 d4 cb d5 4e d5 d1 d6 55 d6 d8 d7 5c d7 e0 d8 64 d8 e8 d9 6c d9 f1 da 76 da fb db 80 dc 05 dc 8a dd 10 dd 96 de 1c de a2 df 29 df af e0 36 e0 bd e1 44 e1 cc e2 53 e2 Data Ascii: 8nR7u\D-u`K8%yhYJ;.!zpg_XQKFA=:8655679<?DINU\dlv)6DS
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: 51 b0 51 03 4c 8d bd 77 84 f4 e5 5a 66 69 c2 b5 2c a4 68 12 48 03 d3 5e b9 f8 0c 05 cf d9 bf 69 99 95 f3 56 83 48 60 ed 45 49 a6 a8 50 10 54 94 05 9d 1e 5a 80 89 38 20 2e 0c bb 24 c5 0f 64 94 50 07 b1 f1 e6 1e ad e7 cc 5d 25 a3 9a 55 f7 82 be 8c 2d b9 f1 54 4b 56 1f 22 a4 83 e8 4c 7a 79 1d 69 07 d4 ea 0f 36 24 6b 0c 2e 1c 9f 76 69 85 25 d3 72 82 31 3a 83 95 f7 22 d9 f8 5f 1c 61 08 42 3a 91 6e 84 21 08 20 84 21 08 20 84 21 08 20 84 21 15 7f 69 bd a6 3b 3e f3 46 e8 d9 9f 68 cd 2a ea 90 fd df ce 4c 93 6b 19 e4 5c 3c c1 ee 79 0e f2 e6 4f 52 9d 4e 7a a0 f0 65 91 8e a7 40 37 3d e3 90 c6 21 4e 4e 37 28 d9 71 c3 e0 35 27 61 1a 1b 50 ed 3c 64 6f 34 6e 8c 99 6a 8c d2 b2 ad 0f dd f9 5e 4c 83 6b 19 e4 5c 3c c0 7b 8c d5 7b cb 99 34 9d a4 00 2c 06 42 39 23 2a 34 1d 23 Data Ascii: QQLwZfi,hH^iVH`EIPTZ8 .$dP]%U-TKV"Lzyi6$k.vi%r1:"_aB:n! ! ! !i;>FhLk\<yORNze@7=!NN7(q5'aP<do4nj^Lk\<{{4,B9#4#
2024-05-27 22:43:53 UTC	1390	IN	Data Raw: 71 40 5f 00 09 00 78 0d fa e6 62 5a d5 be b2 1e 6b 8a 6a 93 89 da fb 99 b6 00 b9 00 b1 47 0a 02 86 c2 09 56 00 02 05 8f 15 8b c9 71 5a 7d 9f c5 da 29 f0 df 17 68 91 6b 7f 35 2f f9 5a f7 e9 6b c5 f1 d5 86 ac 3c 35 35 2b e4 d2 65 30 fa 4c 98 3f 55 53 f3 3d 04 23 6b 7c 18 a9 ca a3 6d 53 90 12 1c 04 af 0f c2 8b 1b 13 86 40 df 04 8c c8 36 e9 a1 38 1b 89 dd 76 9c e7 f3 ca 2b 2d 28 04 a8 e2 a5 02 2e 01 27 12 45 8d d4 74 22 fb 96 ac 35 61 e1 a9 a9 5f 26 93 29 87 d2 64 c0 7e aa a7 e6 7a 08 97 a1 10 e6 b3 b5 9f 8b 15 35 33 70 e6 b3 a6 a9 f1 79 a2 1f 87 a3 30 f1 72 19 5c b3 84 aa 99 c1 74 cb 7d b9 dc 57 7e 49 1e f3 00 99 ac 4c f7 64 8e fd 63 71 ac 2d 6d b2 b1 93 48 c3 2c a6 4f 16 39 f5 59 77 b8 cb 91 7b 1f e1 e5 8a 23 85 f6 b6 a8 36 2e d3 3f 17 3b ef 5c fe 85 ad 6f Data Ascii: q@_xbZkjGVqZ})hk5/Zk<55+e0L?US=#k\|mS@68v+-(.'Et"5a_&)d~z53py0r\t}W~ILdcq-mH,O9Yw{#6.?;\o
2024-05-27 22:43:53 UTC	706	IN	Data Raw: 07 ef 19 d6 76 b3 f7 98 a9 a9 9b bb cc 4e 9a a7 de 79 a2 1f 83 a3 30 f1 f2 1c 37 2f 17 42 11 86 eb 75 b9 aa c4 c9 99 9a 55 ce 80 64 91 b0 1b 7b 9c ce 30 ed 93 93 6e 51 b0 db 63 c4 ea 4e e6 11 88 cc 4c ba b1 d5 86 0c 35 35 2b de 64 d2 65 30 f7 7e 4e e3 e3 ea aa 7c 1c cf 15 b0 7b f0 ff 00 0f cd 56 e6 44 bc b8 c0 7f 52 8e 49 1b 9e bb 0c c9 e9 72 3e 27 e7 db 93 6f e2 39 e4 35 27 bc ce 90 d5 86 ac 77 78 6a 6a 57 bc e7 26 53 0f 77 e4 ee 3e 3e aa a7 c1 cc f1 5b 04 a7 08 46 ce a2 51 25 68 d2 a9 95 95 4d 80 cc 9c d4 75 24 ef ec 06 03 08 50 ce 4e 39 36 e1 71 c3 e0 34 03 61 08 42 11 df 88 30 84 21 04 10 84 21 04 10 84 21 04 11 52 76 a6 da 16 72 ce 99 a2 a8 5c ca 59 60 2d 74 f5 c9 d9 d8 06 ec f2 9b f7 15 54 8d eb af 13 31 28 0a 60 7c 75 73 b5 be 2c 7b c9 98 fe 3d e3 Data Ascii: vNy07/BuUd{0nQcNL55+de0~N\|{VDRIr>'o95'wxjjW&Sw>>[FQ%hMu$PN96q4aB0!!!Rvr\Y`-tT1(`\|us,{=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50455	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	783	OUT	GET /uXQAnb9kkOOscMDg_kwY2RSfnmvhEwiXPcoSYS2EV9KP7nCfwvACXo8fEuUK5AJh7Qyyr-M3CpB-51s01C0ALvx647CfjDH9xrQs=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:54 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3655 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:08 GMT Expires: Tue, 28 May 2024 18:50:08 GMT Cache-Control: public, max-age=86400, no-transform Age: 14025 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:54 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0d fe 49 44 41 54 78 9c ed 9d 79 6c 1c d5 1d c7 bf bf f7 66 76 d7 39 38 13 9a 40 70 b0 0d 2d 47 45 a1 1c 01 51 68 b0 9d f8 02 b5 91 68 15 d4 56 6a 51 55 a9 45 2d c1 57 12 68 25 2a 2a e7 b0 73 a0 b6 48 fd a3 a5 52 25 aa 5e 2a 2d 8d 13 62 3b e1 12 57 a1 05 b5 1c 2d b9 69 80 50 48 20 84 f5 ee ce cc fb f5 8f f5 a6 cb da bb de 63 de cc 5b 6b 3f ff 79 76 e7 bd df fa a3 f7 7e ef 98 03 a8 51 a3 46 8d 1a 35 6a d4 a8 51 a3 46 8d 1a 59 50 d8 01 04 c1 d0 0e b7 91 40 ad cc ea 02 66 2c 22 40 81 70 88 84 78 cd 73 d5 48 7f 97 fd 66 d8 31 ea 62 c6 0a de b0 8b a5 4c ba 3f 60 c5 dd 00 cf 65 e6 29 bf 47 44 00 e8 08 11 6d ec Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxylfv98@p-GEQhhVjQUE-Wh%*sHR%^-b;W-iPH c[k?yv~QF5jQFYP@f,"@pxsHf1bL?`e)GDm
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 18 d8 6f 0f a2 e5 e6 62 7a 4b 26 21 9f e9 eb b4 af d5 5a 87 ce c2 33 84 21 37 43 15 48 d6 9a 93 b5 77 d1 41 75 cb f9 30 bd bb d6 bd d5 a8 55 f0 74 5b 7e 41 71 52 f2 cb ae 79 86 a1 77 ab 51 9b 60 bf e7 b9 95 22 05 70 3c 09 3c f9 2a 1f b5 2c 91 0c 3b 9e 5c 74 6d 35 6a 11 1c 66 ce 2d 84 25 65 ea 4f 8f c4 ce b1 a3 f6 45 64 da ee 04 4e 4a f6 75 ab d1 77 c1 61 e7 dc 7c 10 c9 71 b2 63 67 61 84 12 df bd 91 f6 0b 2b d2 64 a8 64 5f b7 1a 7d fd 85 a6 b6 5c 22 39 0e 2b 76 f6 58 3f bd 9f 7d 7c cb 28 37 ba c9 d4 de 7c 8f 77 08 13 21 e4 33 bd 3e 4c a1 7c 13 6c ca 80 2a 17 22 99 22 2b 76 d6 68 3f 7d 30 d5 e7 9b 77 72 93 e7 a6 f6 70 10 37 38 95 08 09 f9 6c 5f a7 7d 4d 45 65 f8 11 88 b9 2d 57 24 29 5a 37 6f b4 87 4e 14 fa de 96 11 6e 70 53 a9 7d 86 b6 e4 17 7a 3b ed 2b cb Data Ascii: obzK&!Z3!7CHwAu0Ut[~AqRywQ`"p<<,;\tm5jf-%eOEdNJuwa\|qcga+dd_}\"9+vX?}\|(7\|w!3>L\|l""+vh?}0wrp78l_}MEe-W$)Z7oNnpS}z;+
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: f6 94 a1 ed de f5 6c a0 5c 10 01 42 de 5c 8e 5c c0 a7 3b fc 8d ed ae 49 80 44 a4 61 6c 8d 75 a0 d0 d7 36 ed 50 37 28 cf 79 cc c4 eb 9d 85 90 37 f5 74 58 db ca 2d c3 97 5b da c7 d6 c6 06 cd 9c 27 2b b0 4a ed 6f dd e0 e6 7d 76 c8 e6 47 d4 f5 06 cb bd b9 12 b9 80 cf 4f d9 49 b7 64 6f a3 69 39 99 48 00 22 52 3f b6 c6 7a 23 fb f8 a6 47 d4 b5 ca 75 9e 32 52 ae b4 ba 7a da 65 c5 6b ed be 2f 32 9b 3a f0 22 12 20 2b 76 f6 68 bf 78 0b 00 86 76 78 d7 b0 e7 3e 6d a4 5c cb 6a ef 69 93 8f f8 52 9e 1f 85 e4 62 6a 4e 26 12 18 fb a0 ee 8c 1f 2f 53 e7 27 92 ee 73 46 ca 95 56 7b 4f bb 3f 72 01 8d 8f e6 34 75 c5 cb 51 e2 c3 ae cb e4 1c 29 98 4c f2 4b 44 90 96 d5 d1 dd 26 77 f8 5a ae 9f 85 e5 62 a2 64 66 c0 96 40 f3 25 16 a4 84 11 b3 a2 74 b7 6c 2f ef 69 13 23 be 97 ed 77 81 Data Ascii: l\B\\;IDalu6P7(y7tX-['+Jo}vGOIdoi9H"R?z#Gu2Rzek/2:" +vhxvx>m\jiRbjN&/S'sFV{O?r4uQ)LKD&wZbdf@%tl/i#w
2024-05-27 22:43:54 UTC	17	IN	Data Raw: e4 8f 60 2f 6b 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: `/kIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50452	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	551	OUT	GET /HZ7MIzEUISdwHRUdOnlf9tGLcnTh0s147KiRQCELgTqsg5OdqUGbkZVlk_mCAEdDOboGRQDWQxZNdm_vBM7Oo8lgAaDzjM3wb-KB=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:54 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8166 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:18:20 GMT Expires: Tue, 28 May 2024 19:18:20 GMT Cache-Control: public, max-age=86400, no-transform Age: 12333 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:54 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1f 9d 49 44 41 54 78 9c ed 9d 69 74 64 57 75 ef 7f fb 9c 5b 93 c6 d2 dc a3 ed b6 b1 dd 1e 9a f6 6c e3 01 db 4c b6 31 d8 21 24 4c 49 58 2b 59 2f 8c 8f e1 39 79 81 95 7c 78 c9 62 39 0f 58 0f 02 09 2b 60 1e 79 7c 88 93 05 98 18 70 1c 87 c1 60 0c c6 23 78 a2 3d b5 ed 6e 6c 77 b7 5a 52 4b 55 9a 4b 75 ef 39 fb 7d a8 52 b7 54 aa 92 aa a4 2b a9 9b f4 5f ab ba ab ee 3d d3 3d ff bb f7 d9 67 9f 09 8e e3 38 8e e3 38 8e e3 28 85 ac 77 01 e2 42 3e 9f 4f 86 61 d8 6e 8c c9 18 63 d2 aa 9a 04 ac 31 26 f0 de 8b 73 4e 38 f2 bc 6a 8c 51 6b ad 7a ef 23 c0 89 48 11 28 78 ef a7 ac b5 63 d9 6c b6 b8 6e 0f 13 23 8e 59 82 73 b9 5c Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxitdWu[lL1!$LIX+Y/9y\|xb9X+`y\|p`#x=nlwZRKUKu9}RT+_==g88(wB>Oanc1&sN8jQkz#H(xcln#Ys\
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 61 68 c6 c6 c6 ae 35 c6 7c 05 b8 2c ee f4 7f 0b 71 a5 31 e6 ab b9 5c ee 8d de fb d8 f9 88 55 b4 26 26 26 ac 73 ee 2d de fb 9b 8d 31 67 19 b3 2a 0a e2 98 46 35 49 f5 de e3 bd ff b5 31 e6 af 82 20 b8 ab a5 a5 c5 c5 95 5f 6c 0c 78 ef 4d 99 dc 4f 1f 27 b7 31 18 63 30 c6 ec f0 de 7f 3a 0c c3 eb 26 27 27 63 ab bc 58 12 da bf 7f bf 8c 8e 8e 5e a3 aa 37 1b 63 b6 af 2b b9 22 60 0c 58 3b e7 13 40 50 f1 b1 c1 fc 30 c6 94 e2 ae 13 ca 24 9f a9 aa 37 17 0a 85 d7 dd 71 c7 1d b1 a4 1b cb 13 0d 0f 0f 5f 2c 22 b7 58 6b 77 ae 39 b9 22 47 48 75 0e 26 27 d0 d1 1c 3a 31 81 16 66 a0 58 04 17 a1 5e a1 ac 1e 05 8e bc 04 89 04 a4 52 48 73 13 d2 9e 45 da b2 a5 17 40 15 bc 3f 1c 27 2e 2c 65 4c 79 ef 71 ce fd 2a 08 82 f7 b5 b7 b7 3f ba d2 fc 56 4c 70 a1 50 38 a1 50 28 fc ab 88 5c b6 Data Ascii: ah5\|,q1\U&&&s-1gF5I1 _lxMO'1c0:&''cX^7c+"`X;@P0$7q_,"Xkw9"GHu&':1fX^RHsE@?'.,eLyq?VLpP8P(\
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 59 c8 96 ad 48 73 2b 92 4a 42 22 09 d6 40 d9 bd a8 c5 10 8a 33 e8 e4 14 7a e0 15 74 f7 d3 f8 67 9e 80 c9 31 48 b7 94 7d df 35 ac 67 17 41 32 5d 6a 73 af bd 1e e9 ee 5d 6b 72 01 b6 18 63 de 30 34 34 74 67 4f 4f 4f cd 55 8d 8b 12 1c 45 d1 a5 c6 98 4b 63 93 de 72 bb 1b 7d f7 5b e8 de dd d0 da 51 11 60 11 72 6b 49 af f7 50 98 80 be cd d8 eb df 8e d9 7e 16 d2 d5 8d e9 e8 84 b6 f6 32 51 35 0b 54 7a 31 c6 c7 f0 af b9 1c 1d 1e c6 3f bb 0b f7 d3 1f c0 c0 7e 48 37 2f d4 2e ce 81 0d 08 6e f8 7d ec 35 d7 23 9d 5d 4b 92 bb 1a 13 ea ca 9c 5c 96 48 24 2e 01 ee a9 15 6e 51 82 bd f7 17 8a c8 e9 b1 11 1c 24 70 f7 fd 14 7f f7 7f 40 4b b6 e2 e6 32 c8 2d 16 90 a6 26 cc 0d 7f 82 bd e0 12 a4 a7 07 99 25 75 76 b0 be 1e c9 6a 6d c3 b4 65 e1 c4 6d 98 53 5e 85 bd f0 35 b8 07 ef c3 Data Ascii: YHs+JB"@3ztg1H}5gA2]js]krc044tgOOOUEKcr}[Q`rkIP~2Q5Tz1?~H7/.n}5#]K\H$.nQ$p@K2-&%uvjmemS^5
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: f6 82 a4 ab 07 a9 29 99 13 68 ea 7c 48 b4 b0 1a 33 23 37 05 90 a9 a1 16 ab 93 5b 65 b8 b2 56 e2 4b 6b e6 d2 63 5b 98 0c 61 62 92 58 27 21 97 7b 3f f3 38 9d f7 a8 d6 da 40 a4 16 23 0d c2 45 88 db 5b ca 6f d6 a2 98 fb a9 05 05 4d be 0a 0d da 56 c7 7a 6e 48 72 1b c8 bf c1 a2 46 0e c6 a6 a1 10 c6 c7 b1 88 34 19 63 e6 39 1c e6 11 ec 9c 93 ca c3 2b 96 97 13 25 e3 68 b6 4f db e8 d3 07 1b 50 1b 83 22 a9 86 3a 8b 52 8b dc 7a 9f 64 29 55 6f 80 b1 19 61 b2 40 6c 0c 97 17 8d cf e3 74 de 0f ef bd c4 d5 49 17 af 0b 1b a0 25 51 ca 5b 83 4e 30 19 56 43 45 d7 ce 75 05 e1 ea 50 cd 95 30 02 53 45 98 2e 4a 6c 12 5c de 8e 69 5e 72 95 ad 51 7c 2d 82 d6 1e 44 a8 12 98 c3 81 05 94 b5 db f1 66 ad 54 73 65 92 02 14 1d 84 31 ce fa 29 4b f0 bc 8a 5b a7 2d 7d 8f 0e cf 54 23 e4 ae 58 Data Ascii: )h\|H3#7[eVKkc[abX'!{?8@#E[oMVznHrF4c9+%hOP":Rzd)Uoa@ltI%Q[N0VCEuP0SE.Jl\i^rQ\|-DfTse1)K[-}T#X
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 87 aa 04 1b 63 5e 36 c6 c4 a3 a6 35 42 da 2f 65 77 ea f5 7c 28 7f 03 0f 86 5d 6c 10 bf c4 22 ff 39 be 69 4a 84 5e 9e e8 e5 c6 5f 7d 9a 5f f4 ff aa 44 72 8c ea ba 2e 72 0d e4 a6 e0 83 df 12 36 d6 da dd b8 66 06 a5 ff 22 85 4d cd 70 de c9 da 70 77 6d 09 3c e6 bd 7f b9 da 8d aa f5 3c 35 35 b5 bb 58 2c fe 34 5a e6 b9 04 0b a0 c2 a1 ae eb 08 13 db c8 50 2b cd 8a 41 87 0a 08 c2 15 89 5e ae f9 e5 a7 f8 f1 fe 07 28 ba 10 23 2b b7 52 96 6c 73 cb 54 8e 4c c2 07 be 69 60 46 aa 0e f1 2d 45 ee ec 00 db 99 9b 61 5b b7 c6 66 3d 47 51 44 b1 58 bc b7 bb bb fb f9 6a f7 ab d6 d0 d6 ad 5b 9d b5 f6 69 63 4c 2c 6a da a9 e3 a2 de 33 b9 bc 67 47 79 4a 8e 67 3e a1 f5 3d 6d 49 92 7b b8 e9 f1 2f 72 eb f3 77 90 9f 29 f5 0a 96 23 cd 73 8e 79 ad 09 23 86 19 5f 64 ef a0 72 d3 b7 2c 93 Data Ascii: c^65B/ew\|(]l"9iJ^_}_Dr.r6f"Mppwm<<55X,4ZP+A^(#+RlsTLi`F-Ea[f=GQDXj[icL,j3gGyJg>=mI{/rw)#sy#_dr,
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 97 db 14 45 d1 c3 a9 54 6a 73 dc d3 68 04 41 44 d8 75 68 37 9f 7d ea eb ec 1a ff 0d 9d b6 09 d3 e0 c8 51 5d 2f c1 32 89 ad 75 3f 54 c7 b3 3a c1 17 4f fd 63 ae df 76 35 ad 89 26 fc 2a ac ad 2a 16 8b fb 32 99 cc f9 cd cd cd 0b c6 7d 6b a1 61 96 06 07 07 3f 9a 4a a5 fe 8f 31 0d 76 60 eb 80 6a a9 9f dc 3f 35 c4 bf ee be 83 ef f4 ff 0c ab 72 a4 eb 52 2b 5e bd ad dc 92 42 dd 18 b9 1e a5 a8 11 3d e9 4e 6e da fe 87 5c b6 e9 7c 0c b2 2a e4 7a ef c3 99 99 99 8f f4 f5 f5 dd d2 48 bc 65 89 e1 e0 e0 e0 8f d3 e9 f4 eb 96 eb e4 5f 0a 46 0c 4e 1d f7 ec 7b 90 6f ee f9 4f f6 4c f7 a3 aa 04 62 e7 15 38 2e 62 97 4a ab 1a b1 91 7a 32 36 c9 15 5d e7 f0 9e d3 de ca 69 d9 6d 84 2e 8c d5 a0 3a 9c bf 2a 13 13 13 3f dc bc 79 73 dd 47 da cd 62 59 04 17 0a 85 ce d1 d1 d1 a7 33 99 4c Data Ascii: ETjshADuh7}Q]/2u?T:Ocv5&*2}ka?J1v`j?5rR+^B=Nn\\|zHe_FN{oOLb8.bJz26]im.:*?ysGbY3L
2024-05-27 22:43:54 UTC	358	IN	Data Raw: bd 3b 91 48 7c bf a3 a3 63 c9 15 07 6b 85 a3 8a e0 59 0c 0d 0d 65 bc f7 af f1 de 5f 14 04 c1 15 d6 da 0b bd f7 3d 41 10 b0 de 5d 2c ef 3d 51 14 61 8c 19 74 ce 3d 12 86 e1 7d c6 98 87 80 07 36 6c d8 10 cf 5e db 31 e2 a8 24 78 2e 06 06 06 5e 05 ec 70 ce 6d 4f 26 93 57 01 e7 8a 48 4f 79 fb fa 55 57 e3 73 da 55 80 41 ef fd 63 61 18 fe d4 5a fb ac 88 fc ba b7 b7 f7 c5 55 2d c0 0a 71 d4 13 3c 8b fd fb f7 4b 22 91 38 cd 39 77 42 10 04 9b 45 e4 52 55 3d 57 44 5e 05 64 67 c9 9e fb a9 c4 ec b5 aa c7 d5 95 db d1 39 ed 29 40 5e 55 9f 17 91 47 bd f7 0f 78 ef 0f 00 2f 0f 0d 0d 3d b7 63 c7 8e 55 7d de b8 70 cc 10 5c 89 a1 a1 a1 9e 30 0c 7b 45 24 2b 22 ed d6 da 53 44 e4 d5 c0 49 aa ba 19 e8 52 d5 96 f2 71 6f 73 a5 70 f6 f0 8a d9 df 53 94 76 b9 3f 04 1c 00 f6 02 4f 3a e7 Data Ascii: ;H\|ckYe_=A],=Qat=}6l^1$x.^pmO&WHOyUWsUAcaZU-q<K"89wBERU=WD^dg9)@^UGx/=cU}p\0{E$+"SDIRqospSv?O:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50458	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:54 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:53 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:54 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:54 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50453	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	553	OUT	GET /mXJcrB99dv3D2R3626qv23yNzcp64hKW1n7cx78DQmybiBB-radVYvRguIs-lfQz1oYh72Oq_5Tk51U6fAqzzJb95vww5cyi79Wk0g=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:54 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4437 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:44:48 GMT Expires: Tue, 28 May 2024 18:44:48 GMT Cache-Control: public, max-age=86400, no-transform Age: 14345 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:54 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 10 a1 49 44 41 54 78 9c ed 9d 7b 90 1c c5 7d c7 3f 3d 33 bb 7b 8f d1 49 c7 1d e8 71 27 90 84 08 96 c4 53 48 46 a0 c4 a0 f5 d9 12 05 08 81 14 38 02 38 51 c2 d3 32 29 12 28 0a 58 db 29 62 6f 95 8b a4 80 f0 08 a1 70 84 01 9b 3a 83 4f 18 db 84 d7 b2 c4 0a 10 02 07 26 e2 65 90 00 81 90 10 2f 49 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx{}?=3{Iq'SHF88Q2)(X)bop:O&e/I
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 11 49 81 81 15 c0 52 09 a0 81 19 db 4a 02 2f dc f0 c6 c8 2c 45 d9 1c 39 22 27 b0 9d 31 e6 a1 b2 33 26 4a 29 40 c0 84 f8 66 0c e9 41 74 25 9e 08 9c 9d 4c 5b f3 c2 36 64 38 91 12 d8 ce 18 06 b0 12 58 02 7c 11 b1 9a 5c f7 04 ad 31 b0 65 a4 83 47 4b 80 95 c9 b4 55 2c c1 2f 14 22 25 30 b0 10 e8 dc e7 3f 2e b4 c5 61 66 e3 1f d9 ed 46 5a 60 50 b6 2f 0c db 88 2f 13 19 81 ed 8c d1 0a 5c 88 ea 7a 7c 81 e3 18 d4 25 e0 d0 a6 67 f0 3c 37 ec 38 f4 68 ec ed 36 b5 86 6d c8 5e 22 23 30 b0 00 58 35 fc 9f 52 08 90 b0 a0 f9 36 66 c6 07 18 f4 e2 61 8f 26 8d c6 2a d4 bd 44 82 48 08 6c 67 8c 76 e0 7b 40 d3 f0 63 02 89 b4 05 47 4e 7c 97 c5 2d 4f f3 89 63 44 db 87 d5 3d 7c 2f 99 b6 da c3 36 04 22 20 b0 9d 31 34 54 03 65 59 b1 73 5c a9 81 06 2b da fe 8e 89 9a 45 7f f4 bd 78 19 b0 Data Ascii: IRJ/,E9"'13&J)@fAt%L[6d8X\|\1eGKU,/"%0?.afFZ`P//\z\|%g<78h6m^"#0X5R6fa&*DHlgv{@cGN\|-OcD=\|/6" 14TeYs\+Ex
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: a7 1c d2 95 8c 19 57 e2 c1 6b a8 52 80 dc 67 3e 07 6e ad 5f 9a fb c2 63 1f bd e6 20 07 b8 35 7f 2c ea cc a3 82 f4 9e 31 09 6c 67 8c 99 c0 15 63 ad 34 60 ee 40 6d 8b 33 9c 0d f9 63 e3 81 2b 92 69 6b e6 58 2e 1c ab 07 5f 0b 4c dd fb 87 00 74 e1 61 08 07 43 1b e1 47 b8 e8 22 d0 55 27 ff 00 74 c5 3a 9c fd b6 90 cd 6f 2b db 95 3f 27 ea 4c 45 3d f3 b2 29 7b 90 d9 ce 18 df 02 ce 92 08 34 3c 74 2d 1f fa 93 f0 b9 07 5b bd 66 76 79 26 b6 54 45 0b a0 41 e4 68 d6 f6 d0 a6 59 98 9a 44 d7 3d 90 e0 78 06 92 aa 4d 90 72 81 db 81 b7 46 38 e7 ad fc 39 77 32 e2 12 12 91 e0 ac 64 da 7a 30 9b 32 9f 2c e7 a2 b2 9e ad 93 d1 e3 12 f1 b8 06 27 6b 9a 5a 20 f4 23 07 36 0c cd e0 2d bb 8d 2d 76 13 1f c9 18 3b 64 8c 9c 14 5f bc 1e 26 08 97 66 cd a1 4d 0c d1 1e db c9 9c f8 07 7c 3d b6 Data Ascii: WkRg>n_c 5,1lgc4`@m3c+ikX._LtaCG"U't:o+?'LE=){4<t-[fvy&TEAhYD=xMrF89w2dz02,'kZ #6--v;d_&fM\|=
2024-05-27 22:43:54 UTC	799	IN	Data Raw: 39 34 1c 34 e1 5d 1e b6 4d 40 14 6c 28 44 0e a5 db a8 02 ef 01 b6 04 61 d1 68 78 52 d0 8f c7 a1 46 0e 70 ee a1 9e 6c d8 36 a1 62 d4 f7 84 6d 44 01 b6 a1 06 48 f6 19 48 2f 24 f0 67 c0 6b 41 58 34 1a 0e 1a ed 0c 31 4b cf f5 26 e0 36 71 22 a1 cf 27 ca a6 4c 07 d5 a2 ee 0d db 96 61 bc 06 6c ca a6 cc 7d 02 f7 85 04 de 05 bc 04 04 de 90 f9 32 02 d8 23 75 96 c6 fa d0 c5 d0 2d 5a 5d 34 3e 74 79 5e a3 ba 21 d2 72 e9 07 5e cd a6 cc fe e1 07 f6 13 b8 a7 b3 db 06 9e 07 5e 0e c0 b0 a2 78 40 2f 82 a3 8d dc 2b db e5 fb f7 8a c5 ec 37 3b 21 2c f2 b3 22 7e 06 bc 18 b2 29 7b 79 09 28 98 c9 52 ac 15 bd 89 90 b3 1a 06 a4 c1 31 fa 80 1b c7 bb eb a4 26 3e 08 d3 96 22 6c 01 ee 22 1a a3 4d eb 81 f7 0a 1d 28 28 70 4f 67 77 1f aa 31 b1 b1 8a 46 15 45 a2 da fb 47 e8 fd cf 3a c6 b6 Data Ascii: 944]M@l(DahxRFpl6bmDHH/$gkAX41K&6q"'Lal}2#u-Z]4>ty^!r^^x@/+7;!,"~){y(R1&>"l"M((pOgw1FEG:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50454	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	553	OUT	GET /UnRPa94dWPxyhH3faaGqaEQF5uWqRZ2zSARkm18zlnqntO3-bar_Cffb-W5CZdnE7mPWDo7RTqKFJeuMhjYz3eInIpzwiqF9Yxt3JQ=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:54 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3834 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:07 GMT Expires: Tue, 28 May 2024 18:50:07 GMT Cache-Control: public, max-age=86400, no-transform Age: 14026 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:54 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0e b1 49 44 41 54 78 9c ed 9d 7b 74 1b d5 9d c7 bf bf 3b 23 3f a4 0d ce cb 40 48 29 6d 81 94 02 05 12 3b 1b 36 21 c1 92 9c 03 2d 9c 05 42 69 0b a7 34 85 f4 01 94 dd 92 d3 6d 17 50 60 93 d4 0a a7 bb ed 16 d8 be 78 34 09 d0 6d 02 7d 9c 96 be 68 63 49 06 0a 04 12 93 04 92 2e 81 26 f4 d0 36 21 b1 f3 b6 64 cb ba 33 bf fd 43 b6 fc 92 65 3d ee 1d c9 ee 7c ce 49 8e 34 9a f9 fe 7e d2 d7 f7 de d1 dc df 5c 01 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 7a a1 72 27 a0 83 bd 80 f0 2d ba 70 ba 61 98 b3 6c 41 53 60 db a7 1b 24 a6 0d 7e b7 96 6d 1f 85 10 7f 31 98 0f 5b 29 b9 57 1e 3e b8 ff b4 5d fb Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{t;#?@H)m;6!-Bi4mP`x4m}hcI.&6!d3Ce=\|I4~\......................zr'-palAS`$~m1[)W>]
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 11 78 3f 03 bb 09 94 02 00 06 9b c4 38 1b 44 a7 00 38 b7 f8 1e a6 f0 6e 39 1b 0c 71 7b 2c e4 fd 4e d1 69 e4 40 9f c1 c1 b9 29 06 4c 5d fa d9 e8 7b 33 5b 00 fc 10 96 f5 db fa b6 57 df ca e7 b8 83 4d b3 cf 10 c2 b8 9c 81 eb 41 74 69 7e 86 db a8 ee 6e c7 77 17 ed c4 ba ba e2 cd 4d 43 e8 4e 89 c9 2f ad ac 3d 56 82 c8 28 ca 1a e8 0c 34 ae b5 89 6e d2 a1 9d 0d 02 12 04 b4 a4 e2 5d df 9c b1 f9 ff 4a ae b0 e8 0c 36 de ce a0 10 03 a7 66 df 23 6d ee b7 17 ed c2 e3 75 67 61 66 49 e6 f6 43 6d d1 90 cf af 40 68 a8 aa 6a c1 83 4d b3 df 47 86 f9 b6 13 27 56 04 58 c4 7c fb f4 e8 56 2d d3 73 1d 81 c6 25 20 7a 94 81 29 03 5b 07 c6 dc c7 ea ce 56 64 2e 00 10 6c d0 a5 6d 21 ef 73 8a 04 01 68 38 c9 22 61 3c ee 84 b9 02 58 5b 1f d9 62 ea 32 17 00 ea a3 5b 7f 56 1f d9 32 55 00 Data Ascii: x?8D8n9q{,Ni@)L]{3[WMAti~nwMCN/=V(4n]J6f#mugafICm@hjMG'VX\|V-s% z)[Vd.lm!sh8"a<X[b2[V2U
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: da 47 60 7b 66 61 0a 79 cc f3 01 5c 06 d0 cd cc a8 2f 58 db e1 6e 79 04 d7 1c a8 9a 7f a1 6f 4a 95 29 ce 23 c2 47 09 7c 13 c0 da 0b 12 6c 16 8d 6d 2b bc ed 83 b7 8d 34 38 62 ae b6 99 ee d1 95 04 01 71 22 5e 66 04 e5 93 f9 ec 2f 5b cd 00 88 d6 31 e3 bd 79 e9 33 df 6c 2e 96 eb 4a cb 52 3d 4d 2d f1 2b 04 e1 11 80 67 e8 8b 42 1b a2 21 df 90 35 40 46 18 2c 23 e6 bb cc 74 8a 96 f0 e0 a7 cc 66 f9 89 62 8e 95 11 33 cc 4c 77 e7 d4 2f 57 b7 5c 00 fe 70 fc 5b 04 be 43 8f 3a 21 1a f2 0d f1 74 c8 18 9c da 64 9c 02 68 32 97 39 5c ac b9 00 60 06 65 88 c0 57 e5 d0 bf b9 d2 cd 05 80 58 c8 b7 9c 21 8a fe 1c 72 c3 f0 87 bb 2f 19 bc 65 88 c1 42 d0 75 ac 61 f0 25 e2 07 cd c5 72 45 a9 3a 66 b3 7c 9a c0 cb 46 e8 33 7f a6 12 bb e5 d1 88 85 bc 4f 31 e8 5f 75 68 13 78 48 11 c6 10 Data Ascii: G`{fay\/XnyoJ)#G\|lm+48bq"^f/[1y3l.JR=M-+gB!5@F,#tfb3Lw/W\p[C:!tdh29\`eWX!r/eBua%rE:f\|F3O1_uhxH
2024-05-27 22:43:54 UTC	196	IN	Data Raw: 6d 30 81 41 6b 93 29 fa 97 17 57 d6 26 d4 a9 ea 81 1a 9e bc f6 ab 60 fc 1b 01 d3 35 c5 28 98 ca 34 98 12 0c ba 3f d1 9d ba ef e5 96 3a a5 37 82 03 0e d4 51 cc d9 78 cd 85 04 fa 2c 88 ae 25 60 46 39 bb f0 ca 30 98 00 e0 30 83 9e 66 c6 ba b6 15 de e7 b4 47 73 8a f3 36 5c 39 b9 9a aa 16 11 68 1e 11 1a 99 f9 0c 22 7a 3f 18 4a ef 4d ce 0e 81 8d d7 51 b7 7b 1b 40 4e 54 75 10 00 48 06 bf 43 10 6f 33 78 1b 40 ed 0c 2b d2 16 9a a4 f6 46 3f 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 97 91 fc 3f db ed 8b a6 77 6d ca 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: m0Ak)W&`5(4?:7Qx,%`F900fGs6\9h"z?JMQ{@NTuHCo3x@+F??wm3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50456	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	554	OUT	GET /tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI063JTgu9NvrsvRutrqHOfR5AAWduD51R8zuswV8=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:54 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 13482 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:08 GMT Expires: Tue, 28 May 2024 18:50:08 GMT Cache-Control: public, max-age=86400, no-transform Age: 14025 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:54 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 20 00 49 44 41 54 78 9c ed bd 7b 90 6f d9 55 df f7 59 6b ef f3 fb 75 f7 ed be cf 79 4a 33 23 98 d1 7b 46 f3 10 48 3c 84 10 c6 72 4c 81 15 e2 84 b2 93 f2 1f 49 2a 8e 71 9c b8 2a a9 38 ae c4 49 b9 88 9d 00 15 ca 8e ab c0 8a 09 18 53 42 24 4a 08 04 5b 40 79 b0 13 20 98 b8 50 80 38 65 90 40 12 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2 IDATx{oUYkuyJ3#{FH<rLIq8ISB$J[@y P8e@
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: a8 f0 d3 39 a5 9f fa b1 3f d7 7d e2 0b 39 0f 2f 29 01 7f db 7f 7b fd ac 61 0f 26 e5 f5 a5 ca 53 a5 d4 c7 4a e5 95 20 f7 25 e5 9e 2e a3 65 00 11 40 c0 cc a5 d8 25 df bf 94 f8 0e 28 66 21 13 21 ab b1 2e 90 c3 c2 0d 57 82 c1 3c 26 97 ea db 9d dc f5 18 6c 66 88 0a 56 5d 09 ba 4e a8 d5 8f 97 e2 dc 49 e5 aa 0a bf ac c2 7b 77 ba f4 f3 3f f8 ef e6 83 2f c4 9c 7c 59 0b f8 4f fd 8d 83 7c e9 46 79 f5 56 b6 d7 02 4f 0c 95 af 45 79 38 27 4e 1b 9c 1d 06 db 11 dc e5 0a b0 4c 42 6f 95 2c 82 0a f4 05 2a 86 60 24 15 94 70 b9 d6 26 c6 50 15 c4 8c 55 71 a1 82 bb 5d 01 fa 10 60 29 06 a2 9c dc 5d d0 75 8a 00 a2 c6 30 f8 79 54 8c 94 fd 88 59 9b da f8 09 0c fb 94 8a 3c 2d c8 8f 5c fc ee c5 af bf ff 45 96 c8 97 9d 80 bf f5 af df b8 37 09 8f e7 c4 e3 b5 da e3 43 91 27 17 6a 77 23 Data Ascii: 9?}9/){a&SJ %.e@%(f!!.W<&lfV]NI{w?/\|YO\|FyVOEy8'NLBo,*`$p&PUq]`)]u0yTY<-\E7C'jw#
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 7f 3c 87 57 94 2c 84 32 02 b0 1a 95 26 15 34 f0 44 97 fc 78 09 48 d9 ad dd 01 e3 64 f9 4d f9 55 43 f9 42 c1 36 19 1b 09 b8 1f 78 48 e0 7b 17 01 46 fa d0 5c c4 01 43 0a f5 ab b5 55 56 04 51 b7 02 d5 b0 66 11 96 c9 85 30 14 bf 21 d1 a9 2c 07 50 aa 83 af 45 76 ad 3f 0c 17 9d d5 3d c1 10 84 43 2b fa b4 18 eb fb 32 91 11 06 9a 7d bf 21 84 90 71 e1 06 f0 76 1a 12 c2 a2 8c 9c 14 02 f4 28 53 85 c8 42 89 6b 09 a5 93 48 77 cc b0 d9 f1 74 a6 a0 ae f8 01 02 99 e2 78 b5 c9 52 55 5d c8 1e aa 26 25 be dd a1 9f 7b 93 3f 64 67 41 72 32 cf 37 71 37 a5 01 92 3c c7 63 cc f1 ba 34 01 18 67 8f fc e6 bb 70 6b c3 8c e3 c5 98 dd b4 8d 71 da 85 ee 16 97 c2 a7 8a d8 c4 e5 87 4b 6c fb 7b be 39 59 71 97 5d f0 cd 05 27 75 cb 6a 2e 3f 38 e2 d1 75 2e 03 30 39 db 14 f7 ac 04 da b5 23 0c Data Ascii: <W,2&4DxHdMUCB6xH{F\CUVQf0!,PEv?=C+2}!qv(SBkHwtxRU]&%{?dgAr27q7<c4gpkqKl{9Yq]'uj.?8u.09#
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 88 19 cb 85 38 1d 69 ae b0 5d 58 6f 40 0d 16 62 94 10 6c 63 ea 6a 85 45 17 8a 86 90 bb a0 48 07 cf b5 97 d5 36 ce 63 37 b3 60 75 cb 5c f7 46 97 c2 2a ac d1 88 11 53 8b 44 63 9b bb 9c d6 d1 50 cd 5d b9 ca ac 37 49 a6 66 f2 6a 5e 44 28 9e 8d 3a 87 1b 10 dc 04 56 bd b1 4c 8e d8 53 f2 6b 19 7a 9f f8 9c 1c 51 97 b0 9a d6 eb dc f2 f1 2e 81 89 b0 c8 f1 3b 0d cd cb 48 2c 0c c5 c9 fe 24 8e ac bb dc d2 20 57 c2 3c cb f3 aa 79 3a 96 c3 45 0f d1 a0 b7 c8 81 f0 c3 4d 9f d8 9e b0 87 2b a8 31 14 f7 1e a9 f5 69 0d ae 6c 23 af 7d 27 f3 60 8f 35 38 1a c5 e8 b2 df a4 32 69 a5 0a 93 fb 36 a3 5f fb a4 ad 06 9f ec 3e 1a d1 24 e2 6b a9 4e 12 f4 d5 dd 6d e3 6f 55 7d e2 4a 10 f7 3b 5d 14 fd 07 2f 1f 0e bd 8d d5 23 11 c6 5a ae 18 63 b1 7d 11 d7 57 6a 4b ef 1a fa f6 18 8d 84 07 89 Data Ascii: 8i]Xo@blcjEH6c7`u\F*SDcP]7Ifj^D(:VLSkzQ.;H,$ W<y:EM+1il#}'`582i6_>$kNmoU}J;]/#Zc}WjK
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: c7 cf fc a7 5b 57 81 ab c0 ef 3e f0 5f ec 7f a0 db d0 c7 6e 6a c1 07 66 f6 1b 22 f6 09 15 79 b6 56 ce 9b f1 7c ad 3c 67 70 5e 85 8b c0 7e 81 b5 c0 5a 84 75 16 e9 4f 9c 90 fe c7 ff dc 56 bf d9 a5 bf f4 c7 27 bf 6f 67 f5 47 bf 6f b3 63 6c 24 e0 ed 2d f9 d8 60 fc 09 a0 ef 94 7e 6d 0c 7d b1 b2 ea 29 bf f8 57 76 36 ac 83 bc 3c 5e 1e 2f 8f cf 39 36 4c a3 5f 9a e3 ca 5f 82 ad 6f 61 5b 32 3b 28 a7 49 9c 13 38 69 3d 67 49 9c 93 ca 29 33 ce 49 e2 2e 84 33 66 9c 02 4e eb 82 03 c9 fc 3e c6 87 80 0f 21 fc 1e e9 f4 c7 f3 d7 5f b9 79 a7 ee e5 25 27 e0 f5 3f 42 ad 63 81 91 a5 d2 99 90 11 b6 14 4e 54 38 29 85 73 08 7b 54 4e a3 9c 33 38 23 c6 59 cb dc 8d 70 56 2a 27 a9 9c c2 d8 b5 ca 09 8c ad 96 ef b7 96 e0 56 ae 1c 3f af 80 82 2e a3 1e ed 34 78 3c ba c8 55 64 ef 63 a4 7b Data Ascii: [W>_njf"yV\|<gp^~ZuOV'ogGocl$-`~m})Wv6<^/96L__oa[2;(I8i=gI)3I.3fN>!_y%'?BcNT8)s{TN38#YpV*'V?.4x<Udc{
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: cf 7a 19 ec 8a ef 20 ca f8 08 80 76 40 76 97 8e b9 70 4d fc f3 d6 fd b2 59 bd 7f c3 be 68 d1 51 76 47 80 11 b7 70 c7 f3 31 43 d9 c7 dd ec fc 38 4d c0 26 60 79 da a7 ad 2b 40 c1 2d c8 98 d2 a0 66 81 3a 6d 3b 8e d8 67 0c 27 81 73 9a b7 38 ce 68 8d 40 cb 38 4a 41 36 a5 48 f1 b9 4d 9f 8f 73 a0 5b 1e 83 9b 1b 92 93 6e a5 d6 33 26 f0 96 dc ca eb a1 7f 66 65 f6 53 63 4a ee 20 c8 ba 05 46 1a c1 55 4b 39 28 31 d9 31 11 12 2e cd 66 d7 2d 2d fe e9 64 45 26 47 b3 ad 26 1c 9a 01 c0 a4 38 73 b4 cb f4 3b 84 10 83 ec 68 c7 1f 1d 8f 45 fe db 1a dd da fd cc 6f aa 85 85 5b 00 b6 76 cc 5b 82 39 5b fb 7f 6c 26 58 03 62 45 52 59 c6 7c 29 c8 09 26 72 bb 8b 0b 74 97 b4 69 18 de 30 06 fb 75 34 6b 95 ca 98 6b 1e c9 31 cb f4 bf 59 ec 7c 9f 71 7b a6 f8 0b 1c 05 5f 61 a5 c7 41 d7 91 Data Ascii: z v@vpMYhQvGp1C8M&`y+@-f:m;g's8h@8JA6HMs[n3&feScJ FUK9(11.f--dE&G&8s;hEo[v[9[l&XbERY\|)&rti0u4kk1Y\|q{_aA
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: bf f3 16 dc b1 95 f6 b8 82 cd ef 65 8e 1b 46 e0 77 15 58 b9 c0 74 2f e2 ec c0 54 6d 69 bd 4e 51 91 b1 12 f1 b8 21 d7 cd 4c 78 33 14 9d 16 1f 07 be 0b 6f 81 3d 85 b0 6b c6 09 31 4e 49 e1 24 c6 49 13 f6 4c d8 43 38 21 85 3d 29 ec 99 b2 83 e1 c5 d2 16 33 8f 09 f2 48 5b 4d 80 99 b1 7a a3 4c 65 42 a6 9f ad ab b2 1d b7 b9 dd 23 7d d2 f3 39 93 99 9c e7 b1 5e a7 eb 11 7f 45 8b cf 3b cc 5e ea 11 fb cd fb cb e6 b5 81 b9 02 d6 cb a0 f7 fb 85 db ac f0 20 4b 8e da 58 dc 98 95 70 d9 05 d0 dd cf 2d 88 cf 3e 36 12 b0 6e bf e6 c6 f0 4b fc 3c 82 a2 be fe 09 86 9a 91 a4 f8 9a 28 28 09 65 89 b2 63 c6 ae 0c ec 8a b1 03 ec 99 b2 87 b0 87 71 4a 8c 33 e6 3d d5 7b c0 19 93 50 9a ca 29 60 17 63 77 44 b6 61 c5 2f 68 3c 87 5b c7 f6 06 58 9b 40 e7 db cf 62 e7 a8 50 f3 70 31 43 d3 76 Data Ascii: eFwXt/TmiNQ!Lx3o=k1NI$ILC8!=)3H[MzLeB#}9^E;^ KXp->6nK<((ecqJ3={P)`cwDa/h<[X@bPp1Cv
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: ba 42 52 86 1c fd c0 aa 48 2d 7e 2c e2 bd 4b f1 44 98 15 7f f2 5d 44 fd fb a8 fd 79 cb 4d 81 5a 13 a2 bb 60 bb 02 f7 a0 69 e4 a4 a3 c0 60 68 3e 44 65 df ac de 24 a7 7d 49 ba 4f 19 f6 29 76 03 d5 e7 b1 72 d1 d6 37 3f f3 07 df fe 0d 9f 31 78 5e b0 cb 66 72 11 49 d7 ac ae f6 65 6b e7 e0 a1 9f fd 95 cf b9 ac c2 a5 ef fa d6 b3 02 0f 21 f9 35 56 56 6f 56 e4 cd 74 f9 6e 72 be 17 ec 1e 11 2f 0a 8b 26 5f c3 3f bc 9d 89 22 b5 62 25 9a d2 36 1c 1b c6 60 9f 39 7f 29 b2 c5 fb dc 6c 74 cb 86 21 aa 18 1a 1d 8d d9 17 91 5e 6c 61 65 c0 86 01 49 09 33 83 f5 da 85 9b fd 85 1e 68 0a 8d 16 9f 00 15 28 85 f6 aa 5a b1 8a d5 8a e4 14 55 97 b8 a4 ea 6f 9c 32 40 da 3b 6c ac a9 8a 88 a4 b4 8d ea b6 f5 fd 39 c4 43 8b cd 5b 23 4b 5d a1 72 80 a6 15 43 7f 68 65 38 34 e3 40 52 5e 81 3c Data Ascii: BRH-~,KD]DyMZ`i`h>De$}IO)vr7?1x^frIek!5VVoVtnr/&_?"b%6`9)lt!^laeI3h(ZUo2@;l9C[#K]rChe84@R^<
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 94 3f 9a 0b a4 35 5c 4b 58 99 b5 9c b8 a1 d7 68 d6 12 2b 98 b9 bb f5 6c d9 87 d5 12 24 49 f6 f4 86 ea b1 b1 ad b7 94 b2 23 f3 9a 90 34 13 52 ca 1e 73 5b 6e dd 26 a2 bd 86 2d e1 56 ab 82 8a e7 f0 92 72 dc 5b 71 83 49 3e 97 2d 0b d8 64 6c 84 c1 1b b8 70 70 94 dc 0d 69 f2 98 2b 1a 9a bb 40 44 a9 4d 8b db b2 0f 2d 9e 11 6e d2 2a 42 f5 29 16 09 f7 ad 53 3c 1d 4f e8 93 62 9a 7c 52 53 e7 b1 b3 f4 21 4c c1 86 15 b5 5f 3b f3 d5 04 3b ba 53 ef a0 13 f1 73 59 f4 bc 1a 91 2b 63 be 7a d0 d8 cd 6f 71 5c 27 21 c4 04 d1 ec 8d 92 65 70 d0 57 eb 48 ce 48 8a 98 db de 9f db 65 4f e7 ca e0 8a 11 0f 95 79 1f b8 a7 96 36 a6 4c b3 8e 3f 09 16 ef 4e 12 1d 98 6b b5 2b 75 9d 96 64 24 c0 4b 3c 7f 63 91 ea 4c 04 ba 13 17 9e 76 78 4b a5 c7 dd 3c 02 28 4a 4f 6b 72 1e 27 18 81 1c 48 5c Data Ascii: ?5\KXh+l$I#4Rs[n&-Vr[qI>-dlppi+@DM-n*B)S<Ob\|RS!L_;;SsY+czoq\'!epWHHeOy6L?Nk+ud$K<cLvxK<(JOkr'H\
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 9c a2 ca c6 cc 4b 89 8e 96 eb 4a ee 69 a0 03 cd 30 e1 3b 4a 74 fc 21 e3 ae bf ff 4f da 63 a5 e7 e3 ff 6f 3c f7 8e 37 ff 3d d9 d2 d3 64 79 0d f0 cd c0 b7 8a 76 df 60 36 9c 72 37 da 40 16 31 91 2e 84 d1 7a eb 98 c3 04 1d da 5a 5c 82 6a 6c 39 72 08 c8 d4 2d 47 92 a3 65 1b 02 a8 35 72 04 f5 19 08 a2 63 44 d9 f3 11 28 9f 56 f8 00 3c 24 04 08 53 9b 79 07 26 60 24 3a a6 5d 63 b9 32 75 80 61 fd 2a 56 dc 33 77 e5 ea 42 37 89 38 3f 78 b1 a2 7a f8 d9 48 46 5f 30 01 df 6a dc fb 2b bf 55 81 e7 81 5f 8f ff 3f f0 ec 1f ff 9a 2d 35 f9 06 d1 f2 4e d0 b7 1b f6 7a 8c 33 a2 9a 47 d0 34 6f 3e d3 98 bc 12 24 48 8b e5 12 6e 4e c4 9b 0b 24 9a 09 5a 5c 6d 20 28 d6 11 1e cb 99 26 98 45 0d d9 8c 2a 82 94 e2 13 9f bc a4 39 62 08 8b ce 8f 96 63 0f bd bb 5e bc 21 41 73 e7 c7 ab 03 16 Data Ascii: KJi0;Jt!Oco<7=dyv`6r7@1.zZ\jl9r-Ge5rcD(V<$Sy&`$:]c2uaV3wB78?xzHF_0j+U_?-5Nz3G4o>$HnN$Z\m (&E9bc^!As

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50459	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	785	OUT	GET /hzvgfKA6vD6zG7BEkFYBynAz6J_l5mz8BdTD6I8KGhgpZ9UTrM26PZ569Ml1GhEpNtZ9hmiMEgdEM7UaEL-FPTrSHJ_RvqyHiiB7VA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:54 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8080 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:08 GMT Expires: Tue, 28 May 2024 18:50:08 GMT Cache-Control: public, max-age=86400, no-transform Age: 14026 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:54 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1f 47 49 44 41 54 78 9c ed 7d 79 70 1b d7 99 e7 ef bd 6e 80 04 0f 90 04 ef 9b 12 2f 50 b2 65 eb a2 6d d9 89 6c d9 96 ac 88 17 64 cb 89 3d 49 36 13 cf 4e ed 64 77 6b b3 9b 54 66 6a 92 cc 1e 53 93 d9 9d ca 64 6a b3 a9 49 36 35 9b 64 12 5f 89 6d 11 90 a5 28 92 2c 8f 6f c9 63 f9 d0 61 12 3c 24 91 ba 78 93 12 25 92 00 ba fb 7d fb 07 bb 61 10 00 c1 ab 41 4a 36 7e 55 28 a9 9a dd ef 7d dd bf fe be f7 bd ef fb de 6b 20 81 04 12 48 20 81 04 12 48 20 81 04 12 48 20 81 04 12 48 20 81 04 6e 05 b0 95 16 60 39 d1 d0 d0 50 66 b5 5a 37 12 51 11 11 15 01 c8 03 60 07 60 63 8c 25 13 11 03 10 60 8c f9 18 63 e3 00 06 85 10 c3 Data Ascii: PNGIHDRxx9d6sBIT\|dGIDATx}ypn/Pemld=I6NdwkTfjSdjI65d_m(,oca<$x%}aAJ6~U(}k H H H H n`9PfZ7Q``c%`c
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: e7 cc d6 86 10 62 50 08 f1 13 21 84 27 de 73 eb 9b 8e e0 3d 7b f6 d8 14 45 69 64 8c fd 29 80 fb 19 63 52 34 2d 13 3a 61 d9 d9 d9 28 2f 2f 47 65 55 15 6e bb ed 36 94 94 94 40 92 65 cc 67 7c 5e 2a 8c 71 56 08 81 2b 57 ae e0 cc 99 33 e8 ea ec c4 85 de 5e 8c 8c 8c cc 4a b4 ee 7d 6b 44 74 94 88 7e e6 f1 78 5a e3 25 e3 4d 45 70 53 53 53 95 24 49 5f 01 f0 65 ce f9 ea 68 04 11 11 14 45 41 41 41 01 9c 4e 27 9c 6b d6 60 4d 5d 1d b2 1c 0e a8 aa 1a 77 52 67 03 e7 1c 92 24 e1 ea d5 ab f0 7a bd 68 3b 73 06 ed ed ed 18 1c 1c 84 2c cb 51 4d 37 63 0c 42 88 6e c6 d8 3f 09 21 9e f5 78 3c 17 cd 96 eb a6 21 78 f7 ee dd 77 0b 21 be c9 18 7b 84 31 96 11 4d 6b 03 81 00 d2 ed 76 6c de bc 19 b7 df 7e 3b 9c 4e 27 52 d3 d2 a0 aa 6a 5c e7 bb 0b 01 63 0c b2 2c e3 fa f5 eb f0 7a bd 38 Data Ascii: bP!'s={Eid)cR4-:a(//GeUn6@eg\|^*qV+W3^J}kDt~xZ%MEpSSS$I_ehEAAAN'k`M]wRg$zh;s,QM7cBn?!x<!xw!{1Mkvl~;N'Rj\c,z8
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: a1 24 49 c2 1f 3f f5 14 d2 d3 e7 b4 2c 0b 82 51 f9 d8 df d7 87 77 8f 1f c7 7b ef bd 87 93 27 4f a2 e7 fc 79 68 7a dd d6 52 0b d9 8d 7e 24 49 42 cf f9 f3 38 f6 ce 3b 38 f1 de 7b 38 7d fa 34 2e 5e bc 08 49 92 90 91 91 61 3a d1 b2 2c 23 2b 2b 0b af fd cb bf c0 6a b5 ce 90 85 88 50 57 57 37 e8 f5 7a db 66 bd de 54 69 3e c1 06 c6 58 65 a8 f6 aa aa 8a bb ee be 1b b9 b9 b9 a6 76 c4 18 83 a2 28 38 73 fa 34 5e 39 72 04 97 2e 5d c2 c4 c4 04 84 10 48 4e 4e 46 6e 5e 1e d6 af 5f 8f 86 c6 46 c8 b2 bc 24 af 9d 73 8e c3 87 0e e1 f8 b1 63 18 e8 ef c7 c4 e4 24 18 63 48 49 49 41 41 41 01 ee fb fc e7 51 5f 5f 0f 9b cd 66 da ec 40 d3 34 d4 3a 9d a8 a9 a9 09 be 48 40 30 f8 51 05 60 1b 80 17 66 bb de 74 0d 76 b9 5c 75 00 be 18 9e c4 9f 9a 9c c4 93 5f fe 32 f2 f3 f3 4d ed 8f 88 Data Ascii: $I?,Qw{'OyhzR~$IB8;8{8}4.^Ia:,#++jPWW7zfTi>Xev(8s4^9r.]HNNFn^_F$sc$cHIIAAAQ__f@4:H@0Q`ftv\u_2M
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 10 54 55 5d 31 6b 21 e9 fb 71 19 15 25 f1 7a d9 0c 3f 23 ca 71 3f 80 88 e2 72 d3 9e bc ee c1 65 87 0b 93 9a 9a 3a af 20 fd 22 fa 0b 66 88 8e 1c 3e 0c 45 51 90 9f 9f 8f 9d bb 76 45 94 b8 c4 1b 44 84 0f df 7f 1f af 1e 3d 8a 1b 37 6e a0 aa ba 1a bb 1a 1a 96 14 58 89 06 7d d3 16 4c 4d 4d 45 5b 53 3c a5 69 5a c4 be 5b a6 11 4c 44 76 c6 58 7e d8 31 a4 db ed 71 0b 53 5e ba 74 09 ff fc ab 5f 05 db ee ef ef 87 c5 62 41 7a 7a 3a 0a 0b 0b 97 a5 24 57 92 24 9c 39 7d 1a cf 3c fd 74 70 5e dc db db 0b 4d d3 f0 e8 63 8f 99 5a dd 01 00 42 d3 70 7d 7c 3c 22 1f 2d 84 98 00 30 19 7e be 99 26 3a 95 73 9e 11 6e a2 53 53 53 e3 62 a2 35 4d c3 99 d3 a7 e1 f7 fb 83 15 1c 92 24 a1 b3 b3 13 43 43 43 71 29 82 0b 07 63 0c 93 13 13 d3 39 e0 c1 c1 a0 0c 9c 73 bc f9 c6 1b f0 f9 7c a6 9b Data Ascii: TU]1k!q%z?#q?re: "f>EQvED=7nX}LMME[S<iZ[LDvX~1qS^t_bAzz:$W$9}<tp^McZBp}\|<"-0~&:snSSSb5M$CCCq)c9s\|
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 8d 2a ca ca ca 4a 34 34 36 a2 d6 e9 84 cd 66 8b cb fd ca b2 8c 63 ef bc 83 fe be be 19 43 83 ae 3c 67 35 4d 3b 1a eb fa a8 6e e5 13 4f 3c 91 af aa ea 5f 01 78 8a 31 96 cb 18 b3 01 90 59 0c cf 44 55 55 64 66 66 a2 b1 a9 09 77 ae 5f bf 2c b1 e0 68 e0 9c 23 3d 3d 1d d5 55 55 28 2a 29 41 df 95 2b 18 1d 1d 9d 35 5f 6c ac 2d 0e ff 45 03 11 21 10 08 20 29 29 09 bb 1a 1a d0 b2 7b 37 ca 2b 2a e2 b6 a7 a6 61 01 ff e1 47 3f 9a ae 14 9d 29 17 31 c6 de f6 78 3c 3f 88 d5 46 54 0d f6 f9 7c 5f 21 a2 af 72 ce 93 e6 12 dc b8 69 87 c3 81 2f 7e e9 4b d8 b0 71 23 a4 15 2c d1 31 fa 4d 4b 4f c7 a6 4d 9b 50 e7 74 e2 fd f7 df c7 1f 0e 1e c4 95 2b 57 90 94 94 34 eb 37 14 66 6b 4f d3 34 f8 fd 7e a4 a6 a4 60 e7 17 be 80 ad 5b b7 22 33 2b 0b 49 7a 20 23 5e f7 6a b1 58 f0 fb 03 07 30 Data Ascii: J446fcC<g5M;nO<_x1YDUUdffw_,h#==UU()A+5_l-E! )){7+*aG?)1x<?FT\|_!ri/~Kq#,1MKOMPt+W47fkO4~`["3+Iz #^jX0
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 0f 52 42 08 e1 03 f0 b3 a9 a9 a9 bf 3b 74 e8 50 1f 4c c0 a2 dd de a6 a6 a6 07 24 49 fa b9 24 49 55 b3 ad e4 33 ca 55 d3 d2 d2 50 5c 52 82 cd f5 f5 a8 af af 47 5a 5a 5a f0 41 30 c6 d0 d9 d9 89 57 5f 79 05 bd bd bd f0 f9 7c f0 07 02 c1 0d c3 39 e7 b0 5a ad 48 b6 d9 50 90 9f 8f fb b7 6d 43 7d 7d 7d 30 39 10 4f 18 fb 8a bc f5 e6 9b 78 fb ad b7 30 3a 3a 0a 9f be 93 0f 09 01 e8 9b 90 5a 93 92 90 96 96 06 67 6d 2d b6 3d f4 10 0a 0b 0b a7 c7 5a 21 f0 ce 5b 6f e1 d5 a3 47 71 f9 ca 15 28 81 40 d4 00 06 e7 1c 42 88 01 22 fa 89 df ef ff f1 c1 83 07 c7 a3 88 b3 28 2c 69 5e d3 d2 d2 52 09 e0 2f 64 59 fe 93 58 71 5b e3 8d b6 5a ad b0 d9 6c 58 b7 6e 1d 3e b7 75 2b 4a 4b 4b f1 db e7 9f c7 b1 77 de 41 20 10 80 10 22 68 8e 43 d3 77 a1 ff 5a 2c 16 ac 5f bf 1e 5f fb fa d7 a7 Data Ascii: RB;tPL$I$IU3UP\RGZZZA0W_y\|9ZHPmC}}}09Ox0::Zgm-=Z![oGq(@B"(,i^R/dYXq[ZlXn>u+JKKwA "hCwZ,__
2024-05-27 22:43:54 UTC	272	IN	Data Raw: f4 57 42 88 0b 0b 0d 9e 18 e7 0b 21 7e 6e b1 58 fe 36 1e f2 2d 04 2b be 14 c1 e5 72 3d 0d a0 19 40 aa 91 65 8a 36 b6 85 84 2f 6f 00 78 ab b5 b5 75 67 bc 65 6b 6a 6a da c4 39 ff 39 80 1a ce 79 6a 2c d9 f4 bf a9 44 74 15 c0 4f dc 6e f7 7f 8f b7 7c f3 c1 8a 13 0c 00 2e 97 6b 37 11 fd 27 c6 58 25 80 14 4c 7f e0 c3 02 00 8c 31 05 c0 14 a6 77 33 ef 17 42 fc bd c7 e3 79 76 39 e5 6b 69 69 f9 0e 63 ec 29 9a de d5 3e 95 88 92 31 1d 25 13 00 14 00 13 44 34 09 e0 3d ce f9 0f f7 ee dd 7b 7c 39 e5 8b 85 9b 82 60 03 2e 97 6b 03 80 ed 44 b4 16 d3 2b 29 88 31 36 4c 44 5e 00 47 dd 6e f7 b1 95 94 af b1 b1 b1 c1 62 b1 7c 8e 88 aa 00 a4 03 f0 01 e8 67 8c 7d a4 69 da ef 3d 1e 4f cf 4a ca 97 40 02 09 24 90 40 02 09 24 90 40 02 09 24 90 40 02 09 24 90 40 02 b7 2e fe 3f d1 ba 52 Data Ascii: WB!~nX6-+r=@e6/oxugekjj99yj,DtOn\|.k7'X%L1w3Byv9kiic)>1%D4={\|9`.kD+)16LD^Gnb\|g}i=OJ@$@$@$@$@.?R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50460	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:53 UTC	786	OUT	GET /SLlieQVJNLw2RKmgpg3mMQKeaM5lTZWbOoF_dV_syPle9U7KBs-1PB--OdorbPJYFVRy5178CRGUeITtRpSRyoMyPFGjxlerox1nm5k=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:54 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 676 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:52:37 GMT Expires: Tue, 28 May 2024 18:52:37 GMT Cache-Control: public, max-age=86400, no-transform Age: 13877 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:54 UTC	676	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 02 6b 49 44 41 54 78 01 ed da 3b ab 13 51 14 c5 f1 b9 69 35 11 c1 af 20 88 22 d8 25 69 ac 6c 84 db 19 c1 d2 42 6b 1b 97 d1 f8 88 c1 24 7e 01 1b b1 f1 75 7d 06 c1 2e f9 00 e6 06 41 b0 16 c4 2e 56 86 c4 da 30 c2 66 1a 65 24 39 d9 eb ec 0c b2 67 d5 67 e6 ff 03 11 3c 26 f1 c7 1f 7f c2 1e 94 70 06 7d ec 61 20 7b 2b 7b 23 7b 9d ed 95 ec a5 ec 45 b6 3d d9 73 d9 b3 6c 4f 65 4f 64 8f f1 10 2d d4 90 84 2e f4 c0 59 7c 41 1a 71 9f 71 3a 26 e0 3a d2 e8 5b e2 4a 2c c0 45 a4 46 bb 10 03 70 04 73 33 c0 0c 87 f9 80 16 52 c3 35 f9 80 89 29 e0 03 1f f0 d3 14 b0 e0 03 52 e3 39 c0 01 0e 70 80 03 8a 0d 68 90 67 0e 48 c8 73 80 03 1c e0 80 ff 1c d0 f8 6b 8c 68 c2 fb 13 14 74 Data Ascii: PNGIHDR``HkIDATx;Qi5 "%ilBk$~u}.A.V0fe$9gg<&p}a {+{#{E=slOeOd-.Y\|Aqq:&:[J,EFps3R5)R9phgHskht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50461	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	799	OUT	GET /RQdvv8_ORarepoEntWwvuh3M0wpyhNwlGEXbXAYv4iejDJpzh-Soq_sWCW6gS-DtGhoKCtxN3_sURCDjyOR4Cpz1dD9a1KPQLD1bBLjmoZolhyeJcr9s=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:54 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 817 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:32:47 GMT Expires: Tue, 28 May 2024 22:32:47 GMT Cache-Control: public, max-age=86400, no-transform Age: 667 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:54 UTC	817	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 c6 49 44 41 54 78 01 ed dd 3d 4e 5b 41 14 86 e1 63 48 22 50 10 52 2a a4 90 8e 92 96 14 6c 80 25 78 21 49 96 41 b2 10 96 c0 06 28 42 4b 49 85 8c 44 85 84 40 46 80 00 0f 35 92 67 ee 9d 9f 33 1f ef 23 b9 73 e5 d7 77 6c 8d cf f5 4c 5e 16 0c b2 56 0c d2 08 2c 8e c0 e2 08 2c 8e c0 e2 08 2c 8e c0 e2 08 2c 8e c0 e2 3e 59 a2 93 f3 07 fb 7b 7c 67 67 b3 27 bb b9 7f 36 98 ed ef 7c b1 e9 de 9a 4d 7f ae 9b 37 93 94 ad ca 10 f6 df f1 ad e1 7d bf 0e 36 ec f7 c1 57 f3 24 7a 89 3e fa 3f 27 ee 12 e1 f5 09 2b 9c 27 f1 81 Data Ascii: PNGIHDRxx9d6pHYssRGBgAMAaIDATx=N[AcH"PR*l%x!IA(BKID@F5g3#swlL^V,,,,>Y{\|gg'6\|M7}6W$z>?'+'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50462	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	786	OUT	GET /HUcJ2yilLdMblMI04h5DE1tf_0iCxgOmiu-7mpulXRJTol_vVsnrlQcs4esQq1ygtHQ4jxShVi02_aGhjOLSflnb1fMgpefkyfQbFMI=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:54 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 325 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:50:53 GMT Expires: Tue, 28 May 2024 20:50:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 6781 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:54 UTC	325	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 01 0c 49 44 41 54 78 da ed da 41 0e c1 40 14 87 f1 d9 a9 c3 88 38 dc ff 24 ad 74 16 ce 22 e2 10 15 3d 89 6e a6 16 12 52 3b fa de 43 7c df 2c 45 bd 9f b4 c4 68 4a 44 44 44 44 34 3b 8d d3 f5 ea e3 00 00 00 00 00 e0 37 00 da 28 ab d7 f0 3c d0 ec 35 e8 ac 56 6b df e1 97 da 99 0f 3e 5d 45 59 95 df f8 47 e7 f1 6f eb e0 44 70 7f f7 1f ab f5 39 f7 c7 b0 55 1c ae 05 e5 40 c0 a8 ad 3d a0 0f 05 9c ec 01 43 28 e0 12 fe 45 f5 ed c7 07 00 00 00 00 00 f3 0e f8 ea 0f 16 eb e7 03 00 00 00 00 80 58 80 f5 c6 d5 c7 37 be 00 00 00 00 00 00 df c4 00 00 00 00 00 80 9d 39 00 00 00 00 00 f0 de 0b fc fc 1f dd e7 50 40 67 0f 68 43 01 b5 3d 60 ad 12 78 bb cd 2a d9 17 78 c3 4d 93 Data Ascii: PNGIHDR``HIDATxA@8$t"=nR;C\|,EhJDDDD4;7(<5Vk>]EYGoDp9U@=C(EX79P@ghC=`x*xM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50466	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	551	OUT	GET /2qz9gwasYkOhPEumfqd3_x8HiiRu6fIQR1d-1DRAV8qfkqmQx7Rygzohal7DXbB-urTun2B0thBnpY3BRfqXnJOm4b9QQFk3L4VK=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:54 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4217 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:14:05 GMT Expires: Tue, 28 May 2024 19:14:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 12589 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:54 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 0f c5 49 44 41 54 78 9c ed 9d 7b 74 1c d5 7d c7 3f 77 76 56 2b ad 56 b2 fc c0 96 d7 2f 01 26 3c 8c 01 db 92 0b 38 3c 22 09 48 ca 23 14 b7 66 78 04 17 4a 12 9e e5 10 c5 0d b0 a5 69 1a 4c 7a c2 33 21 e1 38 21 49 69 5e 08 93 21 38 29 27 a7 20 04 b4 10 0a 1e c0 e0 17 10 08 2f 23 64 15 5b c2 92 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx{t}?wvV+V/&<8<"H#fxJiLz3!8!Ii^!8)' /#d[
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: bb 9a 1a 04 e9 a1 be 85 65 a9 9d bc 55 bd 96 53 0f fd 06 bd 81 0a a2 32 a5 cc af 1c fa 3b bc a6 12 5d 13 1e fc 9c 0e e0 3d a0 ae 3d 16 f1 d4 b5 1f b7 e8 0d c0 42 80 44 e0 48 0e ee fd 03 2f ee f8 0a 4b 93 1f d3 21 74 65 4e 53 43 63 cc 7a c0 17 71 21 7d ce 1b bc 76 ea 69 0d ee 6a 6a 38 11 78 76 f4 76 4d 0e e0 c8 6e 6e 3d bc 95 bb ab 96 10 75 dc 7d fd 9a 94 92 ba 48 39 d3 ca cb f2 19 86 54 c5 aa f6 58 e4 8f 5e 39 f3 ba 06 3f 90 69 a3 23 2a 10 da 6c 6e 7e ed 24 be b3 f7 8f 74 04 42 38 2e 39 b4 a5 64 4e 79 59 a9 88 0b 63 5c 03 55 78 26 70 57 53 c3 3f 32 74 6b ce 84 44 c7 09 d4 73 d5 9f ce 62 d3 bb ff 46 a7 a6 33 58 e4 0d c6 91 30 bd 4c 67 4e 24 af 17 08 aa 59 d8 78 4b dc b3 fe b1 27 b7 e8 ae a6 06 0d c8 b9 05 55 66 6f e6 95 99 31 4e 39 f8 5a 10 1a 51 99 7f 7d Data Ascii: eUS2;]==BDH/K!teNSCczq!}vijj8xvvMnn=u}H9TX^9?i#*ln~$tB8.9dNyYc\Ux&pWS?2tkDsbF3X0LgN$YxK'Ufo1N9ZQ}
2024-05-27 22:43:54 UTC	1390	IN	Data Raw: 82 b2 5b 50 79 f9 6e 82 f3 f6 20 53 63 be 62 3b a9 50 fb 85 22 9c e0 a1 fb 67 3d 41 32 d2 8a 90 d3 55 b8 e8 51 61 54 95 c0 ef 15 52 48 7e ac 51 71 5e 37 e5 c7 bc 3b b2 c5 9c 91 64 9b 7e 76 41 91 15 40 d3 b7 e4 95 c9 ea 57 18 98 f5 4d 84 a3 2c c3 66 e2 d4 e0 d9 4f 6c ce 7b 8c 58 0e 08 f4 e3 e2 84 4f fa d3 b8 e2 0e e1 5e e6 c5 38 a4 2a df ba 3e dd 62 56 97 3e 65 19 e6 3b 2a ec aa 6c 02 e6 3e 55 30 29 08 2c 4a 50 7d fe b6 6c b7 e5 d1 ac 4a b6 e9 ca 6f d5 a7 dc b1 cd e8 9f 7b fb 61 c8 30 0a 2f 97 b2 69 95 2a 05 ce 2d c3 c2 01 d9 2f a9 be 68 27 04 44 a6 16 73 36 36 16 14 59 1e 0c cc d9 70 bf d4 3b 50 dc 33 73 2d 1b 65 34 2a 05 1e 7f 06 9d 04 06 a1 7a dd 9f d1 2a 13 63 b5 98 b3 51 9b 6c d3 7f 55 48 70 b9 50 ff c0 9a 36 47 ff 20 84 0c aa 72 31 cc 7f a9 32 ac 52 Data Ascii: [Pyn Scb;P"g=A2UQaTRH~Qq^7;d~vA@WM,fOl{XO^8>bV>e;l>U0),JP}lJo{a0/i-/h'Ds66Yp;P3s-e4z*cQlUHpP6G r12R
2024-05-27 22:43:54 UTC	579	IN	Data Raw: 86 b9 cc ef 20 c6 a3 a4 6b f0 30 c1 66 7b 9d 2e ec 2d cf 0d 2e e5 d2 81 b9 a5 20 2e 28 5c a5 dd 4d 4a 27 59 79 1c 4e 8c 73 62 4f ff 61 1f 2e 17 ce 34 bf 63 01 4e b6 0c b3 e0 a5 a2 bc 64 42 d4 60 80 e7 ce 66 20 80 76 6a 09 04 fc 6d cb 30 ff db ef 20 72 a5 74 66 81 e5 40 d7 6f 76 74 46 ff fa a8 38 70 9a 4f 21 bc 60 19 e6 45 3e f9 2e 88 12 a8 10 f9 61 19 e6 6d e4 b0 fe 87 02 92 c0 e7 7d f0 5b 14 13 4e e0 21 4e 06 d7 be 02 9f 2b 67 58 86 59 d0 d2 10 7e 32 21 05 b6 0c d3 01 fe ca 43 97 3f b7 0c f3 49 0f fd b9 c6 84 e8 07 8f 45 7d eb ea 9f 01 97 2a 76 a3 74 91 14 d5 4c c8 1a 3c 8c 65 98 97 01 83 8a dd 7c 41 b1 7d a5 4c 68 81 87 50 d9 a2 fe 57 cb 30 b7 2b b4 af 9c 09 2f b0 65 98 cf 00 2a 96 33 ec 04 6e 52 60 d7 53 26 f4 33 78 24 f5 ad ab 13 e0 ea 7c ee 7a cb 30 Data Ascii: k0f{.-. .(\MJ'YyNsbOa.4cNdB`f vjm0 rtf@ovtF8pO!`E>.am}[N!N+gXY~2!C?IE}vtL<e\|A}LhPW0+/e3nR`S&3x$\|z0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50472	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	553	OUT	GET /QFmSDvHe7MgYcFlQF_wNttnmAm4s-y-UN24oPZRoPDiOCjX60ol7yhSa_WiN-NwCmXiafElg33YH4J5wFVy_bAqzseZz1oSNtADw_A=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:55 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 2868 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:11:50 GMT Expires: Tue, 28 May 2024 20:11:50 GMT Cache-Control: public, max-age=86400, no-transform Age: 9124 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 05 89 00 00 05 89 01 6d 68 9d fa 00 00 0a e6 49 44 41 54 78 9c ed 9d 6d 6c 53 d7 19 c7 ff c7 2f 69 12 bc d8 09 38 c0 ba 62 97 25 a1 44 94 78 85 86 96 a2 c6 25 91 2a 8d 49 8d a6 6a 68 9f e2 49 13 d2 3e 61 56 d6 b5 bc 5e a6 81 80 6d c2 ac db a4 4d 9b 70 3e 75 1f 36 29 68 ad d6 0f 31 73 60 50 25 8c 91 00 83 2a e1 c5 4e a1 21 64 40 ee 62 93 80 af e3 7d b8 d7 e0 38 d7 f6 7d 3b f7 3a 89 7f 52 88 b1 7d 9e 73 f2 fc ef 79 ee b9 e7 3c f7 5c 92 4a a5 50 c2 38 4c 46 37 60 a1 53 12 c0 60 e6 bc 00 6f fd 7c c2 61 74 1b d4 40 8a f5 1c f0 e6 cf 58 37 08 3c 04 f0 00 c4 03 c0 01 c0 43 08 ec fc 37 48 c6 bf e9 17 04 00 58 02 f4 03 18 07 ff bb 1f 40 Data Ascii: PNGIHDR``w8pHYsmhIDATxmlS/i8b%Dx%IjhI>aV^mMp>u6)h1s`P%N!d@b}8};:R}sy<\JP8LF7`S`o\|at@X7<C7HX@
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: 01 84 df c2 ff 9f 4e ba 69 36 19 17 25 40 10 20 c1 9e bd 55 11 49 9e 10 d8 7c 30 e6 16 1c e0 43 a6 18 ea 27 e3 44 f9 e8 dc f7 e1 9c ba 9b fd f6 8b ce ee be 48 be 72 52 7a 00 a3 b0 4d 6a 88 02 60 4e ef b5 07 95 1a 10 f2 80 18 00 cc e6 83 31 9f f0 9a 4a af 70 c5 6e 88 39 1f 42 9d be 7c 65 f3 f6 80 d5 ef dd 72 13 90 5b 20 04 3a f5 00 16 04 cc 99 7d 0e 2a 43 dd cd 07 63 7e 10 30 00 b1 6b d9 03 7e 74 ed 08 5a 46 3e cb f5 71 de 5e 50 e8 24 4c 7d 4d 34 83 01 00 1e 5a ce 07 80 53 bb 6d 01 f0 e7 88 01 ad 6c 2e 99 1a cd e7 7c a0 80 0f 0b 09 e0 93 db 20 85 74 02 f0 9e d9 ef 88 d0 ae e8 d4 2e 5b 04 fc 49 ba 53 ad ad 4a 2e 8e 9d 97 f6 14 fa 9a 2f df 87 39 43 d0 aa 1f df f4 99 08 39 91 0e 39 14 43 50 e7 59 a6 3a 6f 23 69 b1 ed 83 0b 7d 37 aa 5e 7a 55 69 f9 02 a1 27 93 Data Ascii: Ni6%@ UI\|0C'DHrRzMj`N1Jpn9B\|er[ :}*Cc~0k~tZF>q^P$L}M4ZSml.\| t.[ISJ./9C99CPY:o#i}7^zUi'
2024-05-27 22:43:55 UTC	619	IN	Data Raw: f1 69 f6 65 b9 45 f3 62 23 09 b4 3c 37 a2 a9 4d 31 ac 0d 2c c8 73 49 1a a6 8f e7 da 8e 20 1f 8a 12 b3 2e 1d f9 86 7f fa fe 6b 9a ed 38 02 00 5b ca bf 84 8d 24 b4 34 29 0a 29 4f a2 6c ad 76 57 f0 02 03 ce ee 3e 45 57 f0 8a 33 e3 a6 d9 35 de d4 c4 2a 4d 62 86 8d 24 f0 c3 ca 2f b4 30 25 89 8a 4d 23 5a f6 02 16 2a f2 88 14 0b 30 70 f8 f9 f1 54 dc d5 94 7a 5c ab fa ac 76 a4 aa 4f 97 a3 3f 0d 29 4f c2 f6 ee 4d 2d 4c 4d 02 68 92 3a e4 14 43 55 6e e8 85 ed db a2 9b 53 c9 0d 2b cc 31 45 22 d8 48 02 7b 6c 17 f1 8a f5 bf 6a 9a a1 08 cb 8a 18 16 6d 51 9e 7b 60 aa 79 3c 5d b6 7a 7c 83 b3 bb 4f 55 02 83 26 4f d0 f8 ed df d6 ba fe 93 a8 1e 38 9f 70 4a be c6 af b7 b0 d8 6b bb 88 7a 0b fd 91 4f 3e 92 a3 15 88 fd 75 25 a6 d9 32 c9 65 2c ae 58 c2 54 c9 ad b3 7f 34 78 59 6d Data Ascii: ieEb#<7M1,sI .k8[$4))OlvW>EW35Mb$/0%M#Z0pTz\vO?)OM-LMh:CUnS+1E"H{ljmQ{`y<]z\|OU&O8pJkzO>u%2e,XT4xYm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50468	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	786	OUT	GET /R7Wr9OkT5zk4gY2F3-tLiMwhFaMfO_hCU5LpTxztUaTOi8kU7_0QUIvOTlhHLyMol8kvHhVvdWUtjmAZ6cqiwGhwZzdg0fvc-UXtojU=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:55 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 287 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:55:33 GMT Expires: Tue, 28 May 2024 20:55:33 GMT Cache-Control: public, max-age=86400, no-transform Age: 6501 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	287	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 00 e6 49 44 41 54 78 01 ed da bd 8d 02 41 10 06 d1 71 09 04 ad 30 09 ae 72 c1 20 06 10 84 70 61 10 c4 81 b4 60 60 f5 e9 cc fb 71 a0 8d de 96 ea 2b 7b 34 7a 7e 0f e7 9c 73 ce 39 e7 9c fb 3d b6 ec b8 f0 24 16 d6 f8 d9 e0 bf 56 ec 89 7c 55 80 15 1f 44 67 c0 9e e8 0c d8 12 bd 01 bb ee 80 4b 77 c0 b3 3b e0 ef 83 45 27 40 80 00 01 02 da 03 36 9c 79 10 2f 76 e7 c4 b4 04 c0 86 1b f1 66 57 a6 7a c0 99 48 74 ac 07 3c 52 80 b9 1e 10 b9 7a 02 04 08 48 fc 27 40 00 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 f2 09 a8 3e d6 20 12 09 10 20 a0 3f 40 80 80 3b 91 68 ae 07 9c 88 44 87 7a c0 c4 95 78 b3 4f d6 f5 80 6f c2 91 99 78 b1 99 03 6b c6 a0 75 02 12 09 Data Ascii: PNGIHDR``HIDATxAq0r pa``q+{4z~s9=$V\|UDgKw;E'@6y/vfWzHt<RzH'@ @ @> ?@;hDzxOoxku

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50469	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	554	OUT	GET /p2EiNuo4FQe3s8dhYgEiejBxjryT3B46OTWNItLqiwF58V0T62GKHa7VrbOhI7BbnQOBvdkPFu-4YGG0Dg3b0moXWWSc_aB1hw67Kts=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:55 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 6066 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:55:32 GMT Expires: Tue, 28 May 2024 20:55:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 6502 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 17 69 49 44 41 54 78 9c e5 9d 7b 74 1c d5 7d c7 bf f7 ce 8c 76 24 24 59 3c 8b 6d 09 24 cb b2 c1 60 4b 96 1d 88 e3 72 7a 9a 1e 5a 72 68 4a 42 08 86 04 19 08 60 9b e0 a4 40 6c 92 60 1c 1e a5 1c 9b 04 3f 68 92 f2 4a 42 21 90 07 8d f3 28 25 27 cd e9 23 34 01 93 90 40 c0 09 c5 86 9e c4 50 c0 d2 ea bd 8f d9 99 b9 f7 f6 8f d9 59 8d 56 33 b3 f3 da 5d c9 7c 39 62 d7 33 f7 b5 f3 d9 df 7d fc 7e 77 66 09 ca b4 fd f1 91 c5 99 82 74 8d c6 e9 df 08 42 bb 08 21 29 fb 9c 10 e5 a9 fd e5 96 de b3 88 10 69 9d c7 19 58 41 11 78 29 45 cd 7f 6a 34 d2 df b9 7b 53 4f 3a 5c 2b 8f 6e 11 fb cd 67 1e 1e 9b af 31 ec 9c 34 e5 81 5c 9e Data Ascii: PNGIHDRxx9d6sBIT\|diIDATx{t}v$$Y<m$`KrzZrhJB`@l`?hJB!(%'#4@PYV3]\|9b3}~wftB!)iXAx)Ej4{SO:\+ng14\
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: 67 15 f5 c4 f7 26 05 17 08 b9 b1 c0 e3 a4 00 a0 48 1c 29 a2 ed 6a cc be 7c fb c3 b7 bc 7f c2 af 88 b9 a2 68 cb 24 58 63 ae 60 da e4 82 97 de f7 a1 30 f9 4e fc d5 e6 0f 72 ae d7 ef e2 f9 90 d7 19 45 41 a8 37 e6 8f 59 7e cb e5 77 3d db 56 bb 46 55 4f 91 00 db d7 88 4f bc f1 b5 07 bf f7 d6 91 30 79 1f fe fe 93 69 68 83 0f ba 4e ba 22 f4 25 49 ce d0 09 4a 90 b7 6a 8d 8b 3f 3f 70 e7 b3 73 3e 9e 1c 0a 70 f9 9c 4b fa c3 ae 3d 51 2a 3d 51 7f 66 57 18 9a 61 19 c6 61 ee 80 7c 53 e1 98 ee 6d 1f bb ed a7 73 3a d4 58 11 b0 b7 fb 52 60 df 23 8f fc 31 4a a5 5f bb e3 ca b7 5c 2b 0a a9 d0 d6 1b 30 bd 0d 59 e7 ea 56 73 5e ef 6d 97 dd b8 77 ce 86 1a 3d 7d d1 71 82 0d a1 15 c1 f5 59 ed ea 09 80 02 93 50 e0 ea 8d 7a c7 a5 3b 37 ce d1 25 54 e4 49 56 bd 55 2d eb 75 8a 40 58 dd Data Ascii: g&H)j\|h$Xc`0NrEA7Y~w=VFUOO0yihN"%IJj??ps>pK=Q*=QfWaa\|Sms:XR`#1J_\+0YVs^mw=}qYPz;7%TIVU-u@X
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: c4 0b 35 d2 55 1d 79 64 74 16 a7 0c 00 31 d7 d0 09 ae 93 63 ad 75 ab 60 b9 91 f2 11 0b 72 8e a5 36 bf fd a5 78 77 35 d2 15 0b 4d 9c dc 38 06 83 87 b7 e2 d8 0e 91 10 dd 71 90 3a 6a 3d e6 4e d5 1b 21 5f 85 42 09 01 74 93 22 c3 d4 ab 3f ba 67 28 72 a8 91 36 ab 14 9f 58 9d 03 67 63 be 5d 75 a2 5e ae a4 dc 64 ce 22 e3 c2 8d 3a 71 4c fa 73 38 de db 8f 42 ce ea ea 86 8b f7 44 f3 5d 53 80 a0 eb 4f 80 6b cf 1a 83 61 8e c2 14 a4 2a 2e 4b 20 5a 61 35 b1 dc 5a 77 cd 21 0a b5 36 d7 13 4c 16 d4 2b 2e da 1d fe 86 37 4a 29 85 44 09 96 cc 07 36 ad 1e 83 69 8e 26 3f e9 8a 08 36 c8 78 5b 4f b8 49 3f e0 dc 2f 9f c1 08 cd 16 d4 81 75 5f 0a 17 6a a4 00 40 08 85 22 49 58 32 1f d8 b0 6a 14 2c 29 c8 55 02 0b 04 9b 4c d5 03 6e 45 45 71 0c 15 f3 18 9c 4a 13 ac 69 fd 45 7b 46 02 ef Data Ascii: 5Uydt1cu`r6xw5M8q:j=N!_Bt"?g(r6Xgc]u^d":qLs8BD]SOka*.K Za5Zw!6L+.7J)D6i&?6x[OI?/u_j@"IX2j,)ULnEEqJiE{F
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: 2f 3f c5 00 13 69 fc cb 41 82 51 a3 05 52 d0 b9 57 84 6f 43 b0 75 b2 28 4d a6 6c b8 2b da 65 f4 f5 34 5a 6c a6 92 b9 ca da 90 2e b0 78 61 0b 04 04 7e f1 bb 31 14 18 83 04 05 84 5a bd 02 81 64 75 df 40 b1 bb a6 a5 ee da d1 8c 78 9f a3 42 3e 61 6a 5a 2e fd f2 fa e7 be fa e1 17 80 98 bb e6 cb 21 4b d2 f4 cd 05 7d 9d 06 04 d2 78 ea 20 30 6c 34 43 8a e1 01 8a 95 a5 1c ae b0 e0 ae ec 69 b4 56 3c 53 c9 2a 8a 71 a0 7b 41 2b 20 04 f6 bf 32 8a 9c 21 20 cb c5 71 db fa 3d 6c eb 51 bb e0 33 20 57 3b 70 21 cc fc 58 7e f4 f5 eb 9e fb 87 3f 7f c2 3e 16 fb 09 6c 7e 13 2f 00 58 d9 69 00 22 8d a7 0e 01 c3 6e 96 1c f1 6b 1b 34 9b e0 45 ff 53 11 ae e0 1c bd a7 28 e8 eb 51 4b 70 c3 4c 7e ed a4 8b 8a 90 7f 75 70 1c 13 05 1d b2 24 ac 19 16 15 20 1c 00 95 30 0d 72 9c 1f c8 ae f8 Data Ascii: /?iAQRWoCu(Ml+e4Zl.xa~1Zdu@xB>ajZ.!K}x 0l4CiV<S*q{A+ 2! q=lQ3 W;p!X~?>l~/Xi"nk4ES(QKpL~up$ 0r
2024-05-27 22:43:55 UTC	1037	IN	Data Raw: 5a d0 06 21 08 9e 79 65 14 39 dd 80 6c ff 92 27 08 38 37 01 6e 8c 69 63 af 7f f2 b9 af 9c fb cf 49 34 a7 6e 80 81 ca a1 c6 be 4e 03 42 a4 f1 e4 41 20 ad b7 80 92 a2 27 47 70 ac 6c 57 b0 32 01 cb 4d 0c 6c 80 c2 ec af a6 1d 85 7a ee d5 71 4c 68 06 64 99 80 50 02 c1 b4 c1 42 e6 cd 2d cf ee 3d e7 bb 49 35 a9 ae 80 81 ca a1 c6 be 2e 03 40 1a 3f 7a 55 20 5d 68 01 08 70 d6 a9 0a 7a 17 59 f1 5c 90 68 91 56 9b 45 62 cf 13 12 fe 85 39 d9 13 4a d0 b5 60 1e 08 a1 78 fe d0 24 46 f3 0c 94 17 de 32 f3 e9 6d bf de bd f6 db 08 b1 ce ad a4 ba 03 06 82 41 26 24 8d 27 7e 27 70 52 6b 03 ba 4f 4e 61 72 32 eb 61 30 01 cc a8 72 2a d7 34 04 3e ce ec 60 d5 96 44 09 70 7c 0b c7 d2 f9 c0 81 c3 b9 37 47 c7 c7 6e 1d fb cd da c7 f5 80 1e aa a0 9a 15 80 81 00 90 3b 4d 28 74 04 a0 1c 66 Data Ascii: Z!ye9l'87nicI4nNBA 'GplW2MlzqLhdPB-=I5.@?zU ]hpzY\hVEb9J`x$F2mA&$'~'pRkONar2a0r*4>`Dp\|7Gn;M(tf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50475	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:55 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:54 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:55 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50471	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	786	OUT	GET /5WLz7CvnjBuQDDrFDsJW0EMrL-r6a-b0YUhF48zk7l4lK3yLzhBzeG3I01KIycLfE-UzXuB3MrXRCjPEE-CeWZ281MGTq-FA2BGoba8=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:55 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 808 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:55:32 GMT Expires: Tue, 28 May 2024 20:55:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 6502 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	808	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 02 ef 49 44 41 54 78 01 ed d5 35 74 04 55 14 87 f1 1b 9d 5d dc dd a1 82 9e 1a 97 12 77 69 d0 b8 7c d0 17 d4 b8 bb 6b 9b 8e 32 ee ee ee 9e 54 9c e8 79 d8 6b f6 31 f1 09 6f ee 39 f3 fd bb 59 7b bf cd ee 46 92 92 92 92 92 92 92 92 92 a2 8b 1b 29 e0 07 da 59 61 eb af ad d0 c6 0f bc ca 0d 12 ff c8 e1 29 ea 31 84 af 96 27 c9 91 f8 c6 fd 0c 61 d8 7f fd dc 23 71 8c 33 f8 02 73 c8 7d 4a 5a e2 15 97 d2 8a 39 c2 9a b9 24 5e c7 1f c4 1c 71 fd 5c 1c 9f 0f 4f 2b e6 18 6b 22 15 0f c0 17 98 63 ee e3 78 fc f2 98 90 6d f0 35 0f 72 0d 79 7f ed 1a 1e e4 5b 36 30 21 bb cb fb ef 7e e8 0f e7 8f 5c 21 4e 5c c9 2f 18 dc f5 91 e3 17 f0 14 c6 d9 2e 2f 8b 84 47 01 bb 18 67 8f 8b Data Ascii: PNGIHDR``HIDATx5tU]wi\|k2Tyk1o9Y{F)Ya)1'a#q3s}JZ9$^q\O+k"cxm5ry[60!~\!N\/./Gg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50470	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	553	OUT	GET /YT2zmWq_pcZPZpRn6l0i6CuvT07S0DAiBMXWbmW0HQRO47aTDzvAA_pOvYAXPxuJkm8wKcskSkY7Mcw0x0lT1ZBpKLadvSt3ClEq1Q=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:55 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 4934 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:59 GMT Expires: Tue, 28 May 2024 18:50:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 13975 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 12 92 49 44 41 54 78 9c ed 5d 5b ac 25 c7 55 5d bb aa fb bc ee 9d b9 e3 b1 1d 63 6c e3 08 3f 62 3b 09 58 a0 c8 28 38 b6 7f 70 84 10 f9 48 40 24 86 0f 64 4b 48 fc 12 09 89 8f 48 91 c0 90 08 87 d8 20 84 79 c8 a0 7c 04 23 07 cc 23 52 b0 c5 87 df 21 83 44 e4 38 38 48 31 c4 06 33 f6 58 f6 bd f7 Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx][%U]cl?b;X(8pH@$dKHH y\|##R!D88H13X
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: d8 4c cd d0 03 de 70 b1 60 30 00 10 67 52 fb 02 b8 b6 4f a8 4a 92 28 06 fe 7b 06 cc 54 32 5f b7 4c 88 5e d3 05 f6 ec e4 b9 e6 b1 c9 a0 ce 5a 43 f4 2a 8d 68 ca 7a 87 1e f0 d9 3b 7c dc 7d ab 0f 3f 48 77 3e 11 30 75 14 ee fd 33 0f ca 3e 05 e2 e8 64 06 8a 81 7e 87 f1 dc 7d 2e 06 9d 7c 1b 2c 09 fc f3 bf 79 f8 c2 d3 5d 9c ed 5b 88 49 36 4e 13 6e 01 55 f5 36 4b 70 c3 e4 56 39 6e 5e 00 38 1e c1 0f d2 97 88 c2 f3 ce f8 10 6c 07 e8 ee ee c5 57 72 6a 14 33 5c 0f 90 94 6f 47 a0 08 ae e7 63 7e 34 01 77 2f 05 09 a9 d5 71 92 b1 be 17 cd 89 5f 85 58 23 88 15 51 49 6a 2b 12 e4 c0 81 3b 1e c2 9b 1c a5 2c 38 bd e3 a2 a2 65 ca 87 f2 1d b8 a3 43 b0 52 e5 b2 ba 76 1e 33 56 23 d8 90 d4 a4 78 e1 b5 55 bd 6c 83 ba 39 f0 00 28 78 d3 09 fc e9 04 a4 19 a6 ab 9f cc 00 cc 3e a0 02 78 Data Ascii: Lp`0gROJ({T2_L^ZC*hz;\|}?Hw>0u3>d~}.\|,y][I6NnU6KpV9n^8lWrj3\oGc~4w/q_X#QIj+;,8eCRv3V#xUl9(x>x
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: b6 d7 c5 45 d3 d6 86 0f 47 aa bd 69 a7 be a0 4c 24 ca d9 33 21 02 cf cd af 93 1b 76 a9 37 ba 27 ab 4c a5 91 2c a7 0f ec c1 2e ec fe 00 60 06 53 75 66 2e 6d 9c 59 72 cd d8 2d 5e 65 17 c8 6a 2f e5 4f c6 7a 95 ef 55 06 43 d6 e9 f2 8d 47 b2 62 d4 25 56 1b ce 63 86 35 d8 85 ec 0f a0 6a 45 0c c2 b9 b7 2e b9 3a 35 61 43 74 97 34 3a 35 7b ad b5 1b f0 0d 48 ce c2 f4 f6 37 9b 0f 5e a5 0c 03 4e 00 cc 55 74 90 e9 0f 06 03 f6 00 17 64 80 20 28 e9 14 06 f6 1d c6 4c 31 ba 4a 85 89 7a e2 85 f3 06 84 f9 e4 41 a7 7c 6f 48 a0 18 ff 31 63 58 1d 06 05 6a 49 24 a5 7c 7e 0c 2c a0 67 15 7b cf da bd 9c 09 b2 95 ef 41 48 3b e7 78 ad 3b 62 37 4a f0 3a 8d 89 9f 48 47 01 77 5c ab f0 e1 ab 15 82 82 30 24 03 50 aa 87 eb de e7 e9 2d 99 01 db 22 fc d6 cf 5d 0a 86 05 90 05 44 01 88 2c 84 Data Ascii: EGiL$3!v7'L,.`Suf.mYr-^ej/OzUCGb%Vc5jE.:5aCt4:5{H7^NUtd (L1JzA\|oH1cXjI$\|~,g{AH;x;b7J:HGw\0$P-"]D,
2024-05-27 22:43:55 UTC	1296	IN	Data Raw: e6 48 21 40 9a 7d 4e 49 ab 16 42 20 e8 5f 02 56 1e 48 05 20 5e be 69 18 0e d3 02 44 36 10 bd d1 90 b5 dc ba e4 e6 e4 96 77 93 3f a6 a2 eb e6 38 71 9b ee 52 e5 2b b2 1d 44 04 29 6d 88 53 67 c2 60 c8 e2 c2 42 20 0a 6e 84 6b d7 dc 70 1d 1d 0a 08 90 e8 00 a4 d2 e5 11 0d 8d 24 16 cb ad 58 6f 78 2d d5 98 64 a1 42 72 ab fb a4 7c 68 ce 59 ef 3a 81 8e 2a 6c 62 8a ae f3 bf 99 70 14 4d 22 69 a3 73 ea 0c bc d9 34 d5 aa e5 e6 f8 44 27 64 fa 83 a3 b7 d1 88 18 a9 f0 1f 87 fa 97 ee 99 21 b9 a8 20 b7 c9 a1 d9 c0 d1 3a fe 48 56 5c 57 cd dc 64 82 c6 e8 2f 82 d5 df 41 30 9b 66 05 52 62 cb f2 59 6b 4e 1e 27 42 a2 49 05 ba a9 2f 4b 6e 01 61 66 e4 d6 18 9a 0d bd e8 e3 89 64 45 60 e6 c5 cf b8 0c 8a 1f 3c 22 82 d5 1f 20 d5 51 a9 15 52 78 c0 59 8b ce 5e e7 ec 69 0d b9 9a 1d 09 4d Data Ascii: H!@}NIB _VH ^iD6w?8qR+D)mSg`B nkp$Xox-dBr\|hY:*lbpM"is4D'd! :HV\Wd/A0fRbYkN'BI/KnafdE`<" QRxY^iM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50477	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	785	OUT	GET /RBo2txwfXqma-s-_9f0bqyfM5pd4RpZDMCnB8xbtENo5F2tEJGnCwhaKmg3YAGrbGCnuC4BG-zHrzuU0az-lP9kNOYfdXGeblLv34A=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:55 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 260 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:56:10 GMT Expires: Tue, 28 May 2024 18:56:10 GMT Cache-Control: public, max-age=86400, no-transform Age: 13665 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	260	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 02 03 00 00 00 9f f6 9f ab 00 00 00 0c 50 4c 54 45 00 00 00 75 75 75 75 75 75 75 75 75 c3 1c d0 ac 00 00 00 03 74 52 4e 53 00 00 80 17 ce 47 fe 00 00 00 a4 49 44 41 54 78 5e ed d3 b1 0d 83 30 18 05 61 96 4c 1a 0f c1 34 99 c7 d3 78 08 1a 13 1d 28 44 e8 2c bd 3a 91 ff 2a ca 27 f9 c0 d8 cb df cd 7e cc e3 33 cb f5 eb 82 09 13 2a d0 07 b0 02 db 00 0a d0 06 f0 04 5e 06 22 24 0c 44 b6 1b ec 67 95 48 83 99 2f 74 22 24 ea 1d ce ff 0e bd c3 b9 0a eb 09 88 80 02 22 24 04 44 48 18 1a 50 0c 44 48 18 3a 50 0d 44 48 18 88 94 08 5e 2a c5 fd b8 f1 05 bd 25 79 13 bd ed f9 43 f9 d3 e6 c3 e0 e3 e3 03 97 8e a8 0f 75 be 06 be 38 f9 aa e5 5b 3b 61 82 e6 27 e1 0d 9c e3 78 c0 59 46 f5 7e 00 00 00 00 49 45 4e Data Ascii: PNGIHDR``PLTEuuuuuuuuutRNSGIDATx^0aL4x(D,:'~3^"$DgH/t"$"$DHPDH:PDH^*%yCu8[;a'xYF~IEN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50473	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	554	OUT	GET /DQ8lLDfcUJCtsTiDw6PlvD8GaNTYzhlS8sZL4_TMTOvkH3bgh0CvoxaKCEU-uvqoCUiE0Yp6nQWTeiNqYuW0v18_XRejSBRyqn2LA-c=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:55 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3860 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:43:02 GMT Expires: Tue, 28 May 2024 22:43:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 53 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0e cb 49 44 41 54 78 9c ed 9d 7b 90 1c c5 7d c7 3f 3d 33 7b a7 bb 43 1a bd 40 12 4b 04 b2 cc c1 20 63 63 6f 41 51 24 d8 b2 cd ad 8d 47 26 29 6f 19 17 0e 09 29 97 43 82 ed c4 09 a9 3c b6 ca 55 c4 21 f8 1c bf e2 94 71 19 e2 07 c1 60 8c 2b 3e 07 27 59 19 6e 4d 0c 06 87 c4 70 98 44 46 8b 37 80 50 ec 11 92 0c 88 95 74 a7 bb 7d 4c e7 8f 9e 93 0e 71 af 9d ed 79 dc 65 3f 55 a3 91 54 37 dd bf db ef 76 4f f7 af 7f fd 6b e8 d2 a5 4b 97 2e 5d ba 24 81 48 da 80 24 29 14 cb fd c0 00 d0 07 f4 02 16 90 01 7c 60 cf c8 f0 d0 78 82 e6 69 c1 4a da 80 b8 28 14 cb 2b 81 4d c0 46 60 5d 70 df 04 6c 00 d6 03 ab 81 69 c1 0f 03 1f Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx{}?=3{C@K ccoAQ$G&)o)C<U!q`+>'YnMpDF7Pt}Lqye?UT7vOkK.]$H$)\|`xiJ(+MF`]pli
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: fe 22 a9 fa 17 4b bf 61 46 55 f4 a9 c0 9f a3 44 5e 19 55 25 89 08 5c 28 96 d7 03 5f 42 05 bb a5 16 09 f4 59 46 94 fe dc 35 c0 f5 c0 ef 47 d5 5d 27 d5 82 ef 00 4e 4b a8 ee 45 21 81 8c 21 c8 e8 ef 9e 4f 66 35 aa 25 bf bf 9a cf 69 af 2c 76 81 0b c5 f2 87 81 77 c6 5d 6f bb 48 09 7d a6 11 d7 07 b4 0e f8 38 70 99 ee 82 63 15 b8 50 2c 67 81 1b e2 ac b3 13 56 18 06 22 fa 16 3c cd 19 c0 4d d5 7c ee 1c 9d 85 c6 dd 82 3f 8f 1a 5c a4 1f 01 bd a6 19 f7 07 74 21 f0 61 9d 23 eb d8 ec 2f 14 cb 57 00 43 71 d5 d7 09 12 e8 33 04 06 89 c4 ce fe 01 70 79 35 9f d3 52 58 9c 5f d0 eb 51 ab 2d a9 c7 07 d1 6f 08 11 c1 fc 77 b1 7c 0a 38 4b 47 41 b1 08 5c 28 96 af 01 5e 17 47 5d 1d 22 81 a6 84 a9 15 86 98 32 04 ad 84 ec d8 8c ea aa 3b 0e 28 8c 7c c1 3f 88 a7 ba 0a 35 52 4c 1b 53 c0 Data Ascii: "KaFUD^U%\(_BYF5G]'NKE!!Of5%i,vw]oH}8pcP,gV"<M\|?\t!a#/WCq3py5RX_Q-ow\|8KGA\(^G]"2;(\|?5RLS
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: c0 75 42 b7 be 48 e8 05 11 b7 e7 6c 41 2a 95 ca d9 c0 a2 f6 9f a8 b1 85 01 f0 13 e0 a0 4e 3b c2 38 3a 5e 22 5d e9 ee 07 80 d7 24 6d c4 2c fc 09 ea d0 8f 76 78 c2 71 1c 9d 2b 50 a1 04 7e 11 cd 03 81 0e 39 05 75 d0 46 6a a8 54 2a db 81 77 d1 5e 0f b9 1f d8 ab db 96 30 02 1f 20 5d 02 9b c0 b6 5a 29 9b 8a 74 10 95 4a e5 34 54 42 b7 76 57 d4 1e 46 ed b6 d0 4a 18 81 7f 0e 89 6d ca 9a 8b 0d a8 bd b5 89 52 a9 54 56 03 5f 40 a5 4a 6a 97 87 1d c7 f9 5f cd 26 85 12 78 2f e9 6a c1 a0 22 48 de 96 a4 01 95 4a 65 33 2a 89 ea 95 21 1e ff 6f e0 31 bd 16 29 c2 08 fc 0c e9 6b c1 fd c0 25 b5 52 36 f6 1d 8c 95 4a a5 bf 52 a9 bc 0d f8 1a e1 93 a8 8e 12 91 c0 6d 4f 93 6c d7 3b 54 2b 65 6b 40 a4 09 bc 42 b0 0d b5 47 e8 ce 38 2a db bd 7b f7 c6 46 a3 b1 15 e5 f4 f9 5d c2 c7 a0 3d Data Ascii: uBHlAN;8:^"]$m,vxq+P~9uFjTw^0 ]Z)tJ4TBvWFJmRTV_@Jj_&x/j"HJe3!o1)k%R6JRmOl;T+ek@BG8{F]=
2024-05-27 22:43:55 UTC	219	IN	Data Raw: f7 02 d4 66 b1 85 4e 7a 09 cb 43 b6 eb 45 92 92 29 6a 96 b4 c0 d3 d4 4a d9 b7 a2 72 54 5e 08 9c 8b ca c9 a1 93 ae c0 69 a0 56 ca be 06 95 18 fc 42 e0 75 a8 74 0d 6d 1f e8 38 0b 5d 81 d3 44 ad 94 cd a0 46 de 6f 0c ee 0e aa 65 87 3d 9d 65 c9 0a bc 9c 76 e4 1f c7 76 bd 06 f0 04 f0 44 ad 94 35 81 2d c0 56 54 8e eb b3 83 6b 33 ea bd bd 98 ee 7c d6 f3 5e 97 02 cb 52 e0 99 04 2b 56 4f 07 17 c1 e9 2c 1b 81 b5 c0 ba e0 7e 6a f0 7f a7 02 6b 80 95 a8 c3 98 4d 54 66 fb d4 1e 5f bb 10 cb b2 8b 6e 97 5a 29 2b 50 07 6c f5 a1 8e a2 eb 09 2e 03 35 32 3f 6a bb de d3 c9 59 d8 a5 4b 97 2e 5d ba 74 59 6a fc 1f dd 16 f5 a3 1b 4b 14 72 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: fNzCE)jJrT^iVButm8]DFoe=evvD5-VTk3\|^R+VO,~jkMTf_nZ)+Pl.52?jYK.]tYjKrIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50474	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	553	OUT	GET /PP8KjNgc-EqOm5a6yZ1w6mqbFzoyzLfCZcjhmRvWn6imgVjCiPj9j_MKz6jJuggsroU3293OtM1dIFgqushuz-Wrq-0-_z4AnqLkgw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:55 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5262 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:18:20 GMT Expires: Tue, 28 May 2024 19:18:20 GMT Cache-Control: public, max-age=86400, no-transform Age: 12335 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 1a 98 59 9a 19 9b 19 9a 03 31 88 cf 05 00 48 b6 14 c9 3a d4 43 32 00 00 13 da 49 44 41 54 78 9c ed 5d 6b ac 24 c5 75 fe 4e f5 74 cf cc 7d ef bd 7b 77 ef 03 b0 d9 cd 2e 6f 16 ef b2 2c d8 86 80 d6 84 58 60 63 09 e2 1f 36 26 c1 89 09 86 80 23 39 91 a5 28 3f f2 27 91 a2 c4 7f e2 04 12 39 26 0a 12 91 42 a2 24 2b 59 11 46 cb 0a 30 52 88 91 88 93 10 8c c8 3a 6b b2 3c Data Ascii: PNGIHDRxx9d6sBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y1H:C2IDATx]k$uNt}{w.o,X`c6&#9(?'9&B$+YF0R:k<
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: 9f a4 a4 e9 da 08 69 36 03 d0 4d 53 cb 2a 97 9d 60 a3 f7 20 46 6f d3 0f 80 0c 06 e9 32 f4 67 79 9f a1 4b d4 4d 13 5b a6 38 f2 4f 5f 3e b2 9a 54 8f 7f bc ef c8 ea 86 41 47 c6 0c 0b 68 05 f3 43 4b 82 7c d7 60 f0 d0 fd 0b 93 ad cc 19 67 1e 83 d3 20 2b b9 a9 f3 35 18 33 6c b4 84 c5 cf b5 0c fa 59 bb bc f6 bf ce 27 1a ab 48 a9 29 7c a2 5b 9e 13 b0 4e e8 96 fc 13 98 42 90 47 21 d9 cf e0 fb 56 55 f1 31 8b e8 8e b3 a8 54 a9 52 8c 6a 67 6d 8b 3c a5 e6 22 98 1d 0a c9 29 b2 57 53 9c 46 5a 32 30 cf fa 5b 75 4b ff fd f9 a9 d6 0f 2f 9a 5b 79 cf b2 04 da 8f dd 36 46 cc 84 ba 46 f2 e6 4f bc 68 dc fd d5 ce f9 fe ee 97 8f bd f5 d2 8f ae fe ad ad 26 8b c0 cc 80 c8 c9 9b a1 28 c0 c9 d3 53 4b 2b 6b 95 9b 2b 42 fe ce 8a ac 5e 26 72 4d 30 07 8f 9e 34 38 2b b1 59 7a 2c 07 35 12 Data Ascii: i6MS*` Fo2gyKM[8O_>TAGhCK\|`g +53lY'H)\|[NBG!VU1TRjgm<")WSFZ20[uK/[y6FFOh&(SK+k+B^&rM048+Yz,5
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: 10 a9 80 a4 c8 20 66 49 13 55 31 85 6b e6 3f 87 7d 0b b7 a1 56 99 82 6e 36 a1 88 0a 26 2b db a1 5a 73 68 c9 33 a0 4a c5 1e 3a 86 fc 02 db 70 43 95 1e ba 93 2b 61 8f 71 60 03 d7 ce 7f 11 07 96 6e c7 98 3a 0b 53 ea ed 64 cc 90 96 04 5b 36 a9 4c 6d e7 47 32 43 b2 01 4d 8c e1 ba 1d bf 84 7d 8b b7 42 53 26 60 b1 e9 15 c2 0c b0 24 b0 b4 e5 21 82 4e b5 29 75 4c a9 4b d8 bf 70 0f ae d8 71 13 04 a9 f6 18 ee 7b 06 7d 8b d0 00 63 6c 82 21 9c d6 0d 0f 13 e9 9b a5 77 25 1a 32 c1 5d a6 3f 9e 97 cb b0 a4 8e aa 32 8e 4f cc 7f 05 fb 96 3e 03 85 34 5f e3 fa 65 18 52 22 40 12 c0 30 ad 26 a6 ab 3b 71 70 e9 3e 5c 36 7f 08 c4 4a 54 9e ed b1 55 4a 38 e6 95 21 25 81 08 d0 ad 75 2c 4d ec c3 f5 8b f7 62 d7 ec 75 90 52 82 59 46 e4 99 19 7a 83 a1 08 89 da b8 00 a5 6a e1 fe 8d d3 03 Data Ascii: fIU1k?}Vn6&+Zsh3J:pC+aq`n:Sd[6LmG2CM}BS&`$!N)uLKpq{}cl!w%2]?2O>4_eR"@0&;qp>\6JTUJ8!%u,MbuRYFzj
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: 96 c7 93 9b 37 b2 35 42 5e 74 bb 3d 2e 54 72 5d b8 a7 db 71 07 72 c3 5f 93 cc 32 00 6f 7f b6 50 b2 9b cd 91 22 f8 23 01 7f 78 32 f0 3d f2 25 86 dc 98 4d 08 29 37 30 24 a1 24 b8 70 f8 fc 93 02 c8 ed 15 25 c1 fd 42 41 e4 ba da 4b 94 6f bb 74 49 70 3f 90 da a1 0a a7 45 20 ad 9f dc 40 1e 19 30 52 04 5f d8 ae 55 1c da e4 fa 0f 1a 0f 47 b7 02 12 61 65 a7 e4 7b 69 30 94 69 92 ff 91 ec b5 92 e0 7f 1f 0d f8 96 1d 18 9e 2a a5 25 97 c1 11 ad 8f 08 a4 40 9f 8f f4 4f b1 7d b5 9f 15 18 1a 28 b8 90 94 51 73 13 c8 45 9e 51 b8 ef a7 cd fe 7f 44 34 d8 51 08 b9 b9 9a 7c a4 c6 60 22 8a bc db 73 21 81 10 5a ee 2b 90 dc 0b 3e 92 45 20 48 36 ec 73 a7 86 5d 99 5c 20 58 52 42 b2 19 e8 a4 e9 1d aa 24 72 fd 5e 75 76 0c 97 e0 f6 eb f8 00 80 2d fd 2c 36 5a 1b c5 cc f0 07 0e c6 46 63 Data Ascii: 75B^t=.Tr]qr_2oP"#x2=%M)70$$p%BAKotIp?E @0R_UGae{i0i*%@O}(QsEQD4Q\|`"s!Z+>E H6s]\ XRB$r^uv-,6ZFc
2024-05-27 22:43:55 UTC	234	IN	Data Raw: b7 9e fe ec 72 a5 22 be 57 1d a7 9b d5 3a 51 45 25 41 5e 30 37 27 0a 72 d0 2d cb 3e e8 53 5a dd c8 0d 8e 9f 9d c8 0d cf 7d a3 11 32 8e 5e 0f e7 e7 27 37 5c 8e fd 63 20 6c 99 2c f5 06 73 6b 93 7f b8 b9 26 bf f6 67 5f 3f 7a 72 ef fe 1b 05 00 7e eb b5 57 32 35 50 4f 04 bb f8 d6 d3 77 2e 90 90 87 a4 c5 3b 09 a8 fa 1e 63 60 b0 0d ab fd c3 84 6e c3 99 06 14 a3 29 2b 2c 41 81 c0 bf c3 aa 8f 13 e7 7a 3b 6a e2 ae 6e 79 b7 dc f3 c5 fd f9 b4 fb 86 ef 58 71 7f 31 e1 28 0c 1c ad a5 e0 49 67 f6 10 cc b0 bb 50 8b 14 3a a5 37 e4 8f be f3 e0 d1 f7 01 c0 d5 dc ac e4 96 28 51 a2 44 89 12 25 4a 94 28 51 a2 44 89 12 25 4a 94 28 51 a2 44 89 12 83 c0 ff 01 87 ed c2 7c c0 24 19 bf 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: r"W:QE%A^07'r->SZ}2^'7\c l,sk&g_?zr~W25POw.;c`n)+,Az;jnyXq1(IgP:7(QD%J(QD%J(QD\|$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50476	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:54 UTC	785	OUT	GET /7_L1xfZLxnsy0kmXFl439RwH0gIAVlj_oCQYZj4NUD0PpxU23s8TDNtLGZxMAaBT1sryYuRpw-e9mo5q5nsCjeIpm_w0ep-6gbdiGw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:55 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 317 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:03:02 GMT Expires: Tue, 28 May 2024 19:03:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 13253 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	317	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 01 04 49 44 41 54 78 da ed da 31 0e 82 40 10 85 61 3a f1 30 86 78 b8 77 12 20 50 78 16 43 3c 04 44 4e 02 0d 58 98 68 34 b1 d8 21 b0 63 f8 df 94 04 98 6f b3 bb 14 6c 92 10 42 08 21 84 90 9f d1 59 b5 7a 8d 9a 37 ae 51 77 55 ca 96 35 7f d4 65 f3 c6 3f 6b 52 ad d4 de fe 2d 72 fb cf 6a 8c 84 e8 a3 ff ae ca 36 f7 67 37 35 19 d6 82 6a 47 80 59 65 38 a0 77 05 e8 c2 01 a3 2b c0 10 0e f8 7a c4 e6 df 9f a5 ef 07 00 00 00 00 00 51 01 b1 ef 07 00 00 00 00 00 00 00 00 58 13 b0 f4 3a 00 00 00 00 00 00 00 00 c0 9e 01 6b 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 0d 00 00 00 00 00 8c 80 bf 3f f8 7a 77 05 68 c3 01 95 2b 40 1e 0e c8 34 39 3a 7e 7f b2 2c 23 3f 07 f0 Data Ascii: PNGIHDR``HIDATx1@a:0xw PxC<DNXh4!colB!Yz7QwU5e?kR-rj6g75jGYe8w+zQX:k?zwh+@49:~,#?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50479	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	783	OUT	GET /XuX--BV0zkkLgxF4L5fJ0A1zg1yqjZ5TRyjEyaKMg873pOoy04PFwpUeUNw9kDpeocu5Dq7LRpOU3tkXF-yg9bgjyBvHjRJ2Dl91=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:55 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 970 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:50:53 GMT Expires: Tue, 28 May 2024 20:50:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 6782 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 03 91 49 44 41 54 78 01 ed da c1 6b 1c 65 18 c7 f1 c7 74 b3 bb 8d 9e b4 05 b3 09 21 bd 94 1e 3c b5 e2 1e a4 b4 78 2c 52 9a a5 f5 e4 c5 5e 54 4a db a4 f5 7b d0 9b 94 40 29 08 2a a2 54 72 69 1b 52 0c cd 59 44 08 d2 78 09 52 ac 0a 22 a8 4d 42 54 aa 31 48 6c 22 c9 96 cd cf 1c 65 69 33 6f 93 f7 99 19 61 9e cf 1f 90 7c e1 1d 9e d9 e1 b5 62 8a 29 a6 98 62 8a 89 39 ec a0 ce 79 46 98 62 96 45 9a 1b 16 99 65 8a 11 ce 51 67 07 16 97 11 4f 99 06 13 2c a1 4d 2c 71 83 63 94 f3 17 b0 8b 61 16 51 a0 3f b9 c0 53 f9 09 78 9c 8b ac a0 47 b4 cc 30 5d 79 08 18 60 1e 6d d1 1c 47 b3 0d a8 f2 31 da a6 0f a9 64 15 d0 cb 6d 14 c1 2d 6a 59 04 ec 63 0e 45 32 c3 de b4 03 f6 f1 07 Data Ascii: PNGIHDR``HIDATxket!<x,R^TJ{@)*TriRYDxR"MBT1Hl"ei3oa\|b)b9yFbEeQgO,M,qcaQ?SxG0]y`mG1dm-jYcE2
2024-05-27 22:43:55 UTC	110	IN	Data Raw: a2 87 b8 4b 37 96 f7 00 e3 10 f7 d1 03 dc e7 10 e6 10 e0 60 30 fc 1a 59 3e 03 8c ab a8 cd 55 ec ff 14 50 6d fb ec 32 4d d5 2b c0 4b ed 3f 5f 50 7f a1 1b f3 61 f8 39 c0 0a 42 ac b0 1f f3 62 78 1a a0 b5 e1 18 e6 c7 f0 35 c4 20 e6 c9 f0 57 04 14 01 45 40 11 50 04 e4 d7 bf 0c 12 9d 3f 2e 75 80 fd 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: K7`0Y>UPm2M+K?_Pa9Bbx5 WE@P?.uIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50480	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	785	OUT	GET /j0mZxqPUZ28oopliF6vSV0okYdXUPZH__5C5_4zuI1eNoLd-JFgAFWu4oPFvxTguMH_lihh76znHXocGuTuDGVtlaryO0cLZSNPVMA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:55 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 520 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:00:25 GMT Expires: Tue, 28 May 2024 19:00:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 13410 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	520	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 01 cf 49 44 41 54 78 01 ed d4 25 b4 54 71 18 04 70 3c 2f 11 77 d2 f6 b3 19 87 de 20 e1 56 90 69 b8 c4 4d 68 af 58 c3 e5 b9 bf f6 f0 ce b6 8d eb bb 1f ee f7 2e 76 e7 2f 9c 99 79 ae f3 bb 36 4d 51 14 45 51 94 ff 31 98 8e bd 98 44 fd 5d 27 df 7d 34 3d b6 f9 0b d0 03 fb a6 4f 30 3f aa a3 ff 79 fe 77 84 e9 f1 00 f6 c2 12 ba 37 1e c0 64 22 60 32 1e 40 3d 11 50 8f 07 60 c9 15 c0 4d b0 38 0d 80 c5 a1 4f 5f 84 c3 18 41 27 15 d0 c1 08 0e 63 51 98 e3 57 e0 7a c2 f4 64 c6 75 ac 08 6b 7c 0e c5 94 27 4f 5a eb 28 22 17 ca fc 02 4a b0 bf 68 09 85 10 e6 6f 43 0d f6 97 ad 61 ab ef f9 67 60 ff d8 33 3e e7 1f 84 65 d0 03 be e6 af 43 33 13 40 13 6b fd 3c 36 cb b0 8c 5a f6 Data Ascii: PNGIHDR``HIDATx%Tqp</w ViMhX.v/y6MQEQ1D]'}4=O0?yw7d"`2@=P`M8O_A'cQWzduk\|'OZ("JhoCag`3>eC3@k<6Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50481	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	554	OUT	GET /d6Gf-uIYDXxTIV8n0ljiTCt1v1mU3CRmHsAyA4QUtQTYv5RvPAzPbYoa5VyfpZS4vvNOh_vYAXNnoLpHU31c8NTJZIHdUnxQyNI5F_U=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:55 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5381 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:08 GMT Expires: Tue, 28 May 2024 18:50:08 GMT Cache-Control: public, max-age=86400, no-transform Age: 14027 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:55 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 14 bc 49 44 41 54 78 9c ed 5d 6b b0 1c c5 75 fe 4e f7 cc ec ea de ab b7 40 22 18 49 91 4c 11 23 61 43 78 04 8c 91 89 85 43 2a 15 3b b1 5d fc 32 e1 19 82 53 95 4a 25 a1 92 94 9d 54 25 c4 ae 14 65 c0 29 14 e7 01 15 aa b0 12 bb 00 db 84 b7 78 89 92 91 00 83 05 21 b6 79 c8 80 78 18 08 48 f7 a5 ab bb 7b f7 31 dd 27 3f e6 b1 af 99 dd e9 99 d9 dd 4b d5 7e d4 45 77 67 bb 7b 4e f7 d7 e7 f4 39 a7 7b e6 02 23 8c 30 c2 08 23 8c 30 c2 08 23 8c 30 c2 08 23 8c 30 c2 08 23 8c 30 c2 08 23 8c d0 5f 50 1e 8d 7c e5 fa 83 67 2c b1 f9 a2 02 e9 e3 a4 60 07 20 e6 a4 95 19 50 11 d7 48 83 d3 48 c7 00 b4 79 35 10 03 60 ea 10 5b 21 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATx]kuN@"IL#aCxC*;]2SJ%T%e)x!yxH{1'?K~Ewg{N9{#0#0#0#0#0#_P\|g,` PHHy5`[!
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: a6 a0 83 9a 71 1d 33 cb 76 71 c3 08 41 43 4b db 3e 5e 41 fe 9e c5 ee 32 6a f3 30 93 86 57 49 90 67 5b 40 46 82 7b 21 4f 72 c1 40 5d da cf d4 61 7f ab b8 66 dd ee 87 6e 38 71 2a 8b 6c 01 76 df 76 fe eb 00 be da ab dc 6f fd e9 4b 6b aa d3 53 0f 12 e8 1a 4b d7 cf 18 a4 63 96 85 f2 be 10 9c 56 a0 6e e6 d9 95 36 d7 9c e2 35 8f df 7c f6 93 69 e5 ca 82 47 76 9c 3c 09 e0 f6 ed 57 3c f5 2e 2b f1 04 d5 6b b1 65 17 93 21 4f 97 e8 88 40 e2 24 42 8c f6 76 57 6a 06 5b 85 67 2d 51 7c 2e 95 70 39 82 97 4f fc 44 15 0a fb 8d ad d0 90 58 4f a5 c1 a9 65 35 1c 14 6e fa 85 6c f9 01 8a ce f0 03 56 16 04 92 87 87 2d 46 52 e4 a6 c1 5d d1 c3 cd 4e c2 7b 41 f0 59 d6 fc 7c 9a 9d c0 5c f1 de db d3 5a 28 f7 cc 3c da 1a 84 53 de 7f 82 7b f4 22 59 62 84 20 ab a5 75 cb 8e 19 ff b3 bc c4 Data Ascii: q3vqACK>^A2j0WIg[@F{!Or@]afn8q*lvvoKkSKcVn65\|iGv<W<.+ke!O@$BvWj[g-Q\|.p9ODXOe5nlV-FR]N{AY\|\Z(<S{"Yb u
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: f6 77 80 c0 5b cb b7 6c f0 48 de ba ce 23 99 83 f5 a7 8d 64 e3 84 46 9f b4 31 cd b2 64 be 9b 14 9c 92 eb f5 93 0a 8d bd 48 66 60 f9 18 61 fb 69 45 9c b5 51 82 1d c2 af 1d 6f e3 9a 0b 97 40 a9 ec 23 c8 0c 48 01 9c bc 5e e2 92 f3 3a 35 39 ca f1 ea 94 d6 e0 7e 5d e4 c8 52 b6 17 d2 1d 9b cd 19 e1 bc 68 6b 9b 08 f8 d8 09 16 fe 62 cd 38 5c 97 21 25 61 c5 84 80 ca e9 11 b4 66 92 ff e0 3c c6 77 9e 50 1d 6b b2 0e 0e 82 b7 bf a1 ae 5b 67 0c ee 9f b8 7a ca 71 37 37 d1 39 3a 59 bd 94 9d 19 b0 25 b0 6a a9 c0 da 95 12 ab 97 89 d4 61 52 b7 7b 08 62 6c dd 20 71 c9 36 89 93 d6 00 e5 ba a7 c9 ac d1 a4 c9 ad 72 1b dd 23 37 69 cd 31 50 27 2b 8d 15 0f 34 5b 73 7f 3c 4d 66 6f 59 10 00 3e b1 51 e2 b2 4f 4b 6c 5e 19 c4 c9 ed e6 3a 81 b0 bd 2f f9 f7 4d 5e 36 cb 0c e9 2b c1 b9 2c Data Ascii: w[lH#dF1dHf`aiEQo@#H^:59~]Rhkb8\!%af<wPk[gzq779:Y%jaR{bl q6r#7i1P'+4[s<MfoY>QOKl^:/M^6+,
2024-05-27 22:43:55 UTC	1390	IN	Data Raw: 72 40 e2 07 7b cb 78 7f aa ff 24 07 93 fb c9 17 66 da c8 15 20 08 90 10 5e 21 6a 10 1d bc 61 80 40 d0 f5 56 92 8d e3 e3 14 a4 0f 8c e0 66 02 9b 89 64 18 64 a7 08 be c4 c2 d3 64 21 a0 85 8d 87 5f 11 b8 fb c9 32 de 9f aa f5 95 64 29 09 7b f6 4f e3 86 bb a6 30 5d ee 4d 2e 07 4f a2 a2 a1 cd ca ad 43 55 2b 5d cd 75 ec 2e 54 0a 82 cd df 55 a9 07 9f 2e 6c b9 1b 11 48 30 a0 3d 73 2d 25 a0 60 e3 a1 57 5c 00 0b f8 fd 73 09 eb 56 db b9 3c a0 d6 8c 62 41 e2 81 bd 87 70 d3 3d d3 98 ab 49 14 0b 96 b7 de 76 21 97 98 1a ef 9f f0 ff 21 10 54 bd 06 0d 40 16 8a 20 6a d5 b1 6e 5b 8c 69 a6 6e 8a bf ba 32 44 72 03 f8 24 33 13 08 02 52 12 5c 05 ec 7a 19 d0 5c c6 97 ce 1b c3 da 55 f9 91 5c 2c 48 ec da 77 08 37 dc 35 8d 8a 92 28 3a b6 4f 66 04 b9 de db 3e 62 c9 0d 1f ce 74 bd 3f Data Ascii: r@{x$f ^!ja@Vfddd!_2d){O0]M.OCU+]u.TU.lH0=s-%`W\sV<bAp=Iv!!T@ jn[in2Dr$3R\z\U\,Hw75(:Of>bt?
2024-05-27 22:43:55 UTC	353	IN	Data Raw: d3 0b e5 99 fd 57 7f 3e ac 98 1c a9 08 be ff da f5 d3 ce 42 e9 a4 ca 91 b9 ca 20 8e 68 65 4a 5b 1b 54 6a 2f 26 1c 07 d6 d8 78 98 7b f6 0a b5 93 db 38 68 47 7e 23 26 e4 fa eb 6b 18 0a b5 98 65 02 ca b3 93 15 e7 97 af 6f 7d ee d6 2f 4e 2d bb f8 82 fe 7b d1 01 1e bd 71 d3 5b e7 5f f7 f6 af 54 26 a7 6e b3 c7 8b 17 08 db 21 12 52 10 19 cb 10 89 4c f3 c6 a0 72 d7 a2 cc 20 cb 86 2c 8e 41 2d cc 07 1b bf 68 fc db a6 52 fe be 40 30 01 c2 70 2c dc c4 f7 13 2e fe b5 e0 de 44 41 5d f6 2e 6b a5 55 b5 a4 dd 6a ed 91 fa d1 17 af fa f1 9d 5f 98 3a e7 9c cb ec 6a b5 ac 92 f7 cc 6f db b4 42 14 2e fc 93 97 56 95 2d 75 0e 5c 1c a7 a1 1d 18 f3 c3 c8 c5 31 d7 04 66 91 ab 4d 21 00 5a 30 54 ad ec b8 ae b2 00 40 b2 f6 73 25 0c 22 c9 44 02 9a c1 ca 33 d3 a1 5f 2e 28 90 45 03 4a 00 Data Ascii: W>B heJ[Tj/&x{8hG~#&keo}/N-{q[_T&n!RLr ,A-hR@0p,.DA].kUj_:joB.V-u\1fM!Z0T@s%"D3_.(EJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50486	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:56 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:55 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:56 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50484	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	551	OUT	GET /TlJWqgqxCA0it6tZ-n8OCkn-Om5nIEy19gQd-5UXCSpECGKSBNksOSSRa-fU6-DTcvHwnqzlnKc4A5k882qcSW15NTY2PHyNJz7b=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:56 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 5768 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:42:26 GMT Expires: Tue, 28 May 2024 19:42:26 GMT Cache-Control: public, max-age=86400, no-transform Age: 10889 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 16 3f 49 44 41 54 78 9c ed 9d 79 78 55 f5 99 c7 bf ef fb 3b e7 de ac 90 10 09 61 47 2c 8a 20 94 c5 05 44 8b da aa 75 05 ad 5a b7 2e b6 5a a7 1d 9d 19 3b 53 c7 67 aa 82 bb 9d 2e 56 ed 33 5d d4 3a 52 10 b5 55 16 b5 ea 68 45 71 69 ad 2c 82 8a a8 65 07 13 c2 16 b2 df 7b ce ef 7d e7 8f 9b 60 80 7b c9 bd c9 39 37 21 dc cf f3 24 4f 92 f3 3b ef fb 9e fb cd 6f 5f 0e 90 23 47 8e 1c 39 ba 29 d4 d5 01 04 8a ce c0 f6 91 0f 1d e5 e7 b9 03 94 23 7d c8 d5 de a2 a6 88 0d f2 54 39 22 44 86 05 ca 50 eb 43 3c 52 34 83 6c 03 01 b5 dc 14 df a9 9e 6e fd f5 47 1b 3f b8 8d 7a ce c7 72 10 3f 89 e2 b3 b1 47 9c 44 79 ee 31 70 22 c3 Data Ascii: PNGIHDRxx9d6sBIT\|d?IDATxyxU;aG, DuZ.Z;Sg.V3]:RUhEqi,e{}`{97!$O;o_#G9)#}T9"DPC<R4lnG?zr?GDy1p"
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: c5 05 f7 82 79 12 81 0e b9 22 b9 3d 5a 5a da cd b0 f2 a2 bf e3 b3 3b 07 bc 5f b9 34 14 3f 61 18 ad 9c 3c ea 62 29 2e bc 9f d9 e4 c4 4d 81 a8 c2 10 e5 81 69 aa 53 72 d8 e5 61 f9 09 3c 07 57 4e 1a fd 2d ce 8f fe c8 31 66 b4 cd 29 9b 12 02 00 41 a3 5a bb b0 7c f1 d2 cb c2 2a 4c 9d 20 8d 55 4f 1e fb 4d 8d ba 37 ba c6 8c f2 73 f5 6d 4a f6 16 77 59 68 e2 02 01 0a 5c 39 79 d4 c5 9a e7 e4 c4 6d 87 16 71 9b d4 b7 0b ca df 58 16 5a d1 dc 4a 20 75 f0 b6 63 47 4e e5 bc fc 1f 3b c6 8c ce 89 9b 1a 02 a0 aa 31 b5 f6 e9 6c 88 db ea b3 53 54 9e 34 ae af 71 79 21 b3 99 24 41 44 d4 43 49 88 0b 5f 7d 7f 76 bf c5 d9 1b cd ea 74 0e 36 86 1e 55 e6 49 dd 3d df b6 5d 8e 93 ed f1 d9 16 71 01 df 3e 92 4d 71 81 4e d6 c1 5b 4f 99 78 0f 19 3e 63 cf 30 5c 37 a0 75 d5 45 eb d8 01 81 10 Data Ascii: y"=ZZ;_4?a<b).MiSra<WN-1f)AZ\|*L UOM7smJwYh\9ymqXZJ ucGN;1lST4qy!$ADCI_}vt6UI=]q>MqN[Ox>c0\7uE
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: b8 63 4e 4a 73 b1 54 8e ce b2 9f c0 96 f8 18 55 0c 3d c0 aa 94 8c 50 df c0 94 59 14 9d f1 31 f2 4f ae 81 57 d2 b4 a6 f4 fe fb 6b 82 b1 9e a3 3d f6 1b c9 62 e8 30 80 32 6c 60 b5 83 10 10 65 14 4e 5d 0b 73 78 fe 6c fc 29 40 db 19 32 65 66 fd af 15 14 ef ba 08 82 83 00 f6 05 9b b7 d5 e8 f3 6b 1f 28 fa 20 59 9a fd 05 36 dc cb 44 e0 f8 5e d0 c1 10 7c 8f 3d b7 7f c3 9b c1 5a ce 8c c2 a2 c2 7f 12 bf 47 e8 0b 90 81 f5 9b d7 57 94 71 ed 5a 20 3d 81 15 28 08 63 9b 02 33 20 9e 2c 93 ed a8 0c de 7a fa 88 b5 10 1b f0 7f 6f 57 41 3e 54 d1 4b d5 0e 4f 95 64 af 3a 58 9f c5 48 40 4b c2 10 98 08 00 9b a5 91 cb f1 61 f0 d6 0f 51 54 41 a4 a5 86 30 30 55 92 bd 04 b6 8c fe 44 54 1a 4a 30 04 a8 e8 86 50 6c 1f c2 b0 89 90 61 2a 4c 79 7d af df 08 65 00 f5 09 63 d1 a4 b5 80 15 bf Data Ascii: cNJsTU=PY1OWk=b02l`eN]sxl)@2efk( Y6D^\|=ZGWqZ =(c3 ,zoWA>TKOd:XH@KaQTA00UDTJ0Pla*Ly}ec
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: be 75 5b f2 c1 8d b6 1c 50 e0 bc 33 f1 82 5a 5d 6b 6d 62 6c da 21 0f 6b 6d 1f 3c dd 30 19 d7 d4 0f 43 99 46 51 d0 51 71 f7 44 ab 00 21 df b0 b9 78 ec 9c f3 fe bb 73 c6 ba 07 6a ea ee 67 a5 91 20 0e be f6 25 82 aa 34 5a d1 55 e9 24 6f b7 f8 50 1f 0b 98 a4 8a c9 c3 f2 d8 11 f8 5d fd 58 fc ac b9 02 7d c0 49 bb 40 1d 42 01 62 2e 75 8d 7b e5 98 59 e7 1c d4 e7 77 4c 99 51 ff 3f 6c f8 74 62 8e 84 91 7b 09 04 02 76 91 a3 8f a6 97 3e 0d 36 bf 14 79 e3 fd f8 e8 13 e7 36 57 f0 bb b6 00 f9 08 6f 41 b5 a8 6c 89 7b de a3 1f 7c f3 b9 5b 42 72 11 1a 53 66 ee fe 89 eb f0 55 4c dc 37 c4 97 fd 89 08 96 be 76 4b d1 f1 e9 24 4e 4b a7 55 b1 7e b3 ef 6b 1c bc fd 3d 29 44 41 ba 37 75 10 26 1e 18 71 dc 6b c6 cc 3e f7 ee 10 dd 04 ce 94 99 b5 77 b9 0e 7f 83 89 c2 13 97 18 00 d5 8a Data Ascii: u[P3Z]kmbl!km<0CFQQqD!xsjg %4ZU$oP]X}I@Bb.u{YwLQ?ltb{v>6y6WoAl{\|[BrSfUL7vK$NKU~k=)DA7u&qk>w
2024-05-27 22:43:56 UTC	740	IN	Data Raw: 39 e2 3f 2b 97 e7 6f 0d da 53 a8 1f fc 71 8f 4d 2f f3 1c 7a d8 18 3e 9b 99 22 1d 1a 3c e8 a1 90 21 a8 b5 db e3 52 ff e0 ca cb 5f be 3d 34 3f 61 19 6e cb f8 39 d3 66 1a e3 dc 48 86 f2 bb 6c ec ba 1b 41 86 e0 7b 7e 95 ef f0 b5 ef 5f f2 cc c2 50 7d 85 69 bc 2d 0a c5 84 c7 a7 af 37 ec 0c 6d 99 c8 3f f4 20 00 aa 2a 56 56 2c bb 62 fe f8 6c b8 cc da 69 b3 04 c2 f2 cb 17 0c 53 f5 fe a8 8a 58 cb cb 4a 0f 0d 5a 9f 55 b4 41 ac fc 2e 5b e2 b6 ba ce 3a 93 5f b9 74 7c ac ba f9 05 36 a6 84 88 a2 3d b9 6e 26 26 a8 68 5c c5 af ca eb 53 72 f6 5b 5f 7d 2c ab af 15 ea d2 3c 34 61 ee b4 47 88 9c e9 04 2d 26 66 b7 27 09 4d 4c 50 55 1f 8a dd 96 ec b3 cb bf 3e ff aa 2e 89 a3 2b 9c b6 65 cc ec b3 26 39 26 72 07 93 19 43 44 65 44 e4 1c cc 42 13 13 44 44 00 6c 53 c5 c7 0e e9 bf fc Data Ascii: 9?+oSqM/z>"<!R_=4?an9fHlA{~_P}i-7m? *VV,bliSXJZUA.[:_t\|6=n&&h\Sr[_},<4aG-&f'MLPU>.+e&9&rCDeDBDDlS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50483	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	786	OUT	GET /Pk8YenR3VOTvN9iNHAGWp3pWYZiaYMXXWUkfAjt_LMrf222t9zn815V-GfMRJ1Hjgq7l2k1KiQmxCw5d687WTfIPgwjVfGvoHaSwRDI=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:56 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 412 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:50:53 GMT Expires: Tue, 28 May 2024 20:50:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 6782 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	412	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 01 63 49 44 41 54 78 01 ed da 4f 4e c2 50 14 85 f1 ce ec 46 4c 43 0c a9 9b 3b 0b 31 80 6d 5c 04 04 16 a0 ac c1 01 84 4d 88 a6 90 b4 fe e9 75 fe 42 bc 6f 44 cf b3 e7 7c e3 67 fa 9b a8 83 9b 69 9a a6 69 9a a6 69 9a a6 85 c3 3d 2a 1c d0 c1 06 ae c3 01 15 4a 64 97 cb 70 a9 1c 4f e8 61 44 f5 a8 91 c7 02 72 bc c0 08 db 22 8f 03 3c c2 48 ab 62 00 77 e8 69 01 3d 4a 1f f0 00 23 6e e1 03 5e a9 01 7b 1f f0 41 0d 68 7d 40 1b 3c c9 06 2e 20 f8 80 8e 03 20 80 00 16 34 1a 80 00 9f e3 05 4c b0 c1 19 16 17 1f 60 82 f7 e0 65 62 80 0d 2c 6d c0 39 75 80 b1 00 be 38 00 02 08 e0 bf 10 e0 9f 02 be 05 f8 bb 13 d6 28 e8 01 4e 47 14 69 03 0c ab d4 01 0d 1f e0 c4 f2 87 ec 27 7c Data Ascii: PNGIHDR``HcIDATxONPFLC;1m\MuBoD\|giii=*JdpOaDr"<Hbwi=J#n^{Ah}@<. 4L`eb,m9u8(NGi'\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50482	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	554	OUT	GET /xDakliA_6hjirY-kSiTQFdrVRcRxYDMDdVWFOQtp97xidbk-At7EwGfV7YQqzSgbpfmpBw6etaT20SIzenYlyyretLrgN1PbR7_OTos=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:56 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3565 X-XSS-Protection: 0 Date: Mon, 27 May 2024 21:12:52 GMT Expires: Tue, 28 May 2024 21:12:52 GMT Cache-Control: public, max-age=86400, no-transform Age: 5463 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0d a4 49 44 41 54 78 9c ed 9d 69 6c 1c d7 61 80 bf f7 66 76 97 cb c3 12 0f c9 24 1d 49 56 c4 a8 82 21 eb a8 09 1b 95 55 fe 48 5c 1b 45 15 c3 88 81 14 28 dc 24 6e e2 f4 4a 8a da 68 90 54 6b 01 01 6c fd 33 50 c0 76 5b d4 8a 61 14 0e 40 b4 46 a8 16 06 6c 44 89 ac b8 4c 50 55 47 29 4a e2 46 b0 44 b1 24 b5 e2 92 14 0f 99 d4 92 dc 39 5e 7f 0c 57 e2 cd 9d e5 ec ec 8a 3b 1f 20 40 cb 9d 79 ef ed 7c f3 ee 37 6f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 60 3d 22 0a 9d 80 5c 38 72 e4 48 cd 95 2b 57 08 85 42 be c4 67 18 06 bb 76 ed e2 b5 d7 5e 1b f5 25 42 0f b9 ef 04 c7 62 Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxilafv$IV!UH\E($nJhTkl3Pv[a@FlDLPUG)JFD$9^W; @y\|7o `="\8rH+WBgv^%Bb
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: 5a a5 bc 0b 7c 93 60 4c 3b 1f e8 4a a9 ef 86 cb ca 23 c0 9f e5 1a 48 ce 62 e2 f1 f8 31 e0 c5 b5 84 51 4c 14 59 ee cd 20 81 17 cf 9d 3b 77 6c 2d 01 b8 26 1e 8f bf 8b 23 b7 e0 78 55 3c 17 39 2f 9e 3b 77 2e a7 15 2c ae eb e0 59 b9 df 24 cb 05 7b 52 80 94 0a 29 bc cf 1d ce 10 e5 da 05 2b 05 4a f9 7b a3 d8 4a 60 db 72 c5 06 a2 69 a4 e7 7e b4 80 7f 6d 6e 6e fe b6 9b 78 5c 09 8e c7 e3 ef 00 df 26 cb 9c af 6b 8a a1 cf 75 7e d1 bd 91 b3 c9 0a 0c 4b e0 d7 04 91 b2 8b 73 0e 4f 01 21 a1 d8 bf 69 82 af 7c 69 94 fa 4a 13 d3 5e fa a2 2c 10 0c 60 03 ef 36 37 37 7f 37 db f8 dc 36 b2 7e 97 2c e5 6a 52 71 71 a0 82 9f 76 d5 70 2b a5 13 95 0a 44 fe 2f ba 00 6c db c9 95 c5 fa 60 8e 61 0b 3e 1d d8 c8 b5 db 51 be fe c8 30 bb 36 a5 b0 54 56 89 95 38 0e b2 c6 ad e0 ac 16 97 09 01 Data Ascii: Z\|`L;J#Hb1QLY ;wl-&#xU<9/;w.,Y${R)+J{J`ri~mnnx\&ku~KsO!i\|iJ^,`67776~,jRqqvp+D/l`a>Q06TV8
2024-05-27 22:43:56 UTC	1316	IN	Data Raw: 06 72 2a 6e a3 d1 28 27 4e 9c a0 a3 a3 a3 60 f5 71 49 09 3e 71 e2 e7 a4 d3 69 d7 5d 18 21 04 c9 64 d2 b5 64 21 04 e1 70 98 5f fd ea 14 e7 cf 9f 77 d5 68 f3 8a 92 12 7c f2 97 bf a4 aa aa 2a a7 73 a5 94 0c 0e 0e ba 96 1c 0e 87 e9 ec ec 64 7a 7a 9a 33 67 ce f8 2e b9 64 04 0f 0d 0d d1 db db bb a6 77 2d 09 21 5c 4b 16 42 90 4a a5 e8 e9 e9 61 6a 6a 8a b3 67 cf fa 2a b9 64 04 5f be 7c 19 a5 d4 9a 47 d1 72 29 ae 75 5d 27 91 48 a0 69 1a 93 93 93 9c 39 73 86 74 7a d1 a3 a1 79 a1 64 04 27 93 49 cf c2 ca 14 d7 99 d6 f5 6a 37 8d a6 69 0c 0f 0f 23 84 40 4a c9 e4 e4 e4 dd 62 db 09 c0 b3 a4 2d 4e 6b fe 82 2e 2e 12 89 04 e0 dd 16 c5 99 d6 75 77 77 37 96 65 ad 58 f4 0b 21 e6 e5 58 4d d3 18 1f 1f a7 ab ab eb 9e e4 3c 51 32 82 b3 69 39 db b6 ed aa 18 17 42 90 48 24 b8 74 e9 Data Ascii: rn('N`qI>qi]!dd!p_wh\|sdzz3g.dw-!\KBJajjg*d_\|Gr)u]'Hi9stzyd'Ij7i#@Jb-Nk..uww7eX!XM<Q2i9BH$t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50487	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	785	OUT	GET /74XPOHU13QOcbSmQ1FLoo3-PVADcFd7VvpkxBIMoJLqL0BZcjIx4bq8dULTExjuoh6vhLDgxmBiZU9UCSIGt08XMkl8HAE23jNa4jg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:56 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 842 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:44:14 GMT Expires: Tue, 28 May 2024 18:44:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 14382 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	842	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 03 11 49 44 41 54 78 01 ed 98 d1 4a 54 51 18 85 3f 77 e1 80 97 39 3e 80 48 75 51 94 58 3a 34 0a f5 10 bd 8a 0f d5 5d 8f e0 85 83 ce 99 c9 9a b0 32 a3 22 2a b4 2b 45 49 13 cb e9 2a 10 17 3f 9d e1 3f c7 ed 86 bd f6 dd c1 b9 f8 66 af 75 5c 6b 02 89 2b 03 c4 53 06 c8 00 19 20 03 64 80 0c 90 01 96 5b cb c3 0b e7 de 32 97 79 82 ef e3 b4 84 69 21 2d 0b c5 05 c8 00 4d 66 e4 d9 1d 26 d2 01 58 40 75 9d b9 74 00 5a 36 56 22 37 10 15 20 03 dc e4 06 2a 98 a6 99 06 40 0b 4b f3 c9 01 44 30 51 06 68 70 3f 6d 0b cd 32 8e a5 29 a6 e3 01 f8 0d 64 99 28 03 64 00 e9 a1 b6 e6 b8 16 01 c0 51 22 7e 70 c2 79 4d 70 37 2d 80 35 06 71 5e a5 a1 a2 04 74 29 04 31 a9 1b 48 0b 40 7a Data Ascii: PNGIHDR``HIDATxJTQ?w9>HuQX:4]2"+EI??fu\k+S d[2yi!-Mf&X@utZ6V"7 *@KD0Qhp?m2)d(dQ"~pyMp7-5q^t)1H@z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50488	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	786	OUT	GET /kM_wE3H68SPU_s7ClGAbOFWwY6UN82x0QF1LFEDlKvWVK82KEzX9b-UQfPorWw9iML0LkzZy3KEJRyj-BPL9MhMfq9kU4qHtPbADuS0=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:56 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 329 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:00:25 GMT Expires: Tue, 28 May 2024 19:00:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 13411 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	329	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 01 10 49 44 41 54 78 01 ed da 4f 4a c3 40 18 86 f1 ec cc 5d a4 c4 cb bd 07 91 b4 26 78 18 ed 19 5c b4 e4 18 ee 12 ff cc b8 1f 0a df 20 c2 bc 91 e7 7d 76 81 40 7e 9b 42 e1 eb 18 63 8c 31 c6 18 63 ac 9c 1e 34 69 d1 a6 dc b8 4d 8b 26 0d ea 6e 77 fb 71 af 67 25 65 a3 92 66 f5 b5 80 5e af ca 86 9d d5 d7 01 9e 94 4d 9b 6a 00 f7 4a b6 80 a4 21 06 3c 2a 1b 77 8a 01 6f d6 80 6b 0c 78 b7 06 ac 31 60 2d 5e e9 1a 57 12 42 c0 06 00 00 00 00 4d 01 1f ff 00 60 1d 00 00 41 00 3e 01 00 00 d0 34 00 5f 00 00 00 d8 39 60 ef 7f 68 be 01 00 00 00 a0 29 20 35 05 00 00 00 00 40 06 f0 fb 00 00 00 00 00 00 00 00 db de 0f 9e 16 6b c0 25 06 4c d6 80 31 06 0c d6 67 97 87 18 d0 69 Data Ascii: PNGIHDR``HIDATxOJ@]&x\ }v@~Bc1c4iM&nwqg%ef^MjJ!<*wokx1`-^WBM`A>4_9`h) 5@k%L1gi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50491	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	554	OUT	GET /aMTzdOYbB8kBrLq-k5PesENOhnr-7qtytONnM1GOl-drEs9jvyhYJDNaN9-n_Am7rZLxE-uQnNKC0tW6w7Ea9QX5ZsgMy5mn1Il33QY=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:56 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3963 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:23:42 GMT Expires: Tue, 28 May 2024 20:23:42 GMT Cache-Control: public, max-age=86400, no-transform Age: 8414 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0f 32 49 44 41 54 78 9c ed 9d 7b 6c 5c e5 99 c6 9f f7 5c e7 62 c7 c4 c6 26 09 c4 36 26 21 37 68 52 48 4a 48 13 0f ec 42 bb 6d 62 1b 2a a2 d5 8a 8d c4 4a a0 55 69 ab 55 49 a8 40 55 53 5a a9 bb a1 d9 40 cb b6 45 cb a5 2d 97 76 45 48 a1 1e 63 02 24 a5 9e b1 c9 85 7a 53 2e 49 f0 86 c4 a9 9d 0b 31 8e e3 5b 66 e6 cc cc 39 df bb 7f 8c ad 86 d0 80 63 e6 3b 67 66 32 3f 69 fe 88 ec bc cf 3b df e3 f7 5c be f3 7d ef 01 8a 14 29 52 a4 48 91 22 5e 40 5e 27 20 09 05 40 29 50 11 e4 d5 d7 f8 90 4c 9a 00 e9 50 14 05 00 20 84 00 38 0d d3 4c d2 f3 7b 2c 60 20 06 60 14 80 f0 32 69 19 14 8a c1 06 be 72 e3 4c d6 79 3a 98 2f 01 Data Ascii: PNGIHDRxx9d6sBIT\|d2IDATx{l\\b&6&!7hRHJHBmb*JUiUI@USZ@E-vEHc$zS.I1[f9c;gf2?i;\})RH"^@^' @)PLP 8L{,` `2irLy:/
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: a9 b4 bd f8 a2 d2 2f 50 73 e4 cf ae eb bb 2d 08 a0 ea d0 e9 c4 d3 15 86 51 f0 e6 02 80 60 a0 c2 30 b4 43 a7 13 4f 03 a8 72 5b df 6d 83 89 1b eb 37 80 e8 2a 87 2f 00 77 c7 70 98 01 a2 ab b8 b1 7e 03 5c 3e 6a ba 6a 30 37 2d 5f d3 1d 4f de 7e e1 58 fb 57 18 40 77 3c 79 3b 37 2d 5f e3 a6 ae 9b 06 d7 8c a4 79 5d be 4c 3f ca c0 01 8c 91 34 af 03 50 e3 96 a6 6b 06 73 43 e8 9e fe 94 3d cf eb 1b 6f 2f 21 00 fd 29 7b 1e 37 84 ee 71 4b d3 25 83 b5 eb 86 1c 7b e5 f8 9a a8 0b 19 06 b4 21 c7 5e 09 68 d7 b9 a1 e7 8a c1 dc b8 ec ce fe 54 ba d6 0d ad 7c a0 3f 95 ae e5 c6 65 77 ba a1 e5 86 c1 4b 13 0e 2f 23 90 ea 82 56 5e 40 20 35 e1 f0 32 00 4b 65 6b 49 37 98 6f 09 dd d6 63 59 73 bc 3e f7 2a 00 14 a2 cc c7 e3 5c 08 40 8f 65 cd e1 5b 42 b7 c9 d6 92 7d 4e bc 1c 8c 25 3a 29 Data Ascii: /Ps-Q`0COr[m7/wp~\>jj07-_O~XW@w<y;7-_y]L?4PksC=o/!){7qK%{!^hT\|?ewK/#V^@ 52KekI7ocYs>\@e[B}N%:)
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: ce 3f e1 e3 7f 6c 75 d1 1b 16 2f 59 31 25 f8 25 c1 b8 fe 70 c2 aa 76 18 41 c5 a5 96 4e 04 c0 16 9c 40 66 99 ef a7 2d d0 9f 34 72 9f fa 68 ea 9e 4a 53 ef 1d 4c db 73 a4 ea 9c 85 60 04 bb 13 d6 3c 06 66 5f 61 e8 b7 0e af 5c 1e 0f a8 6a 4a 23 72 00 c0 66 56 e3 8e 63 9c 4e 3b 81 f7 e3 56 29 01 9a 17 9b e3 2a 4d bd 17 9a ba 47 a6 86 ec ef 35 85 9b 42 cf 1d 8a 59 ff 70 21 f6 e5 f8 24 08 c0 15 41 df 2b d4 1c f9 47 00 23 b2 74 64 ef a4 1c 01 a3 33 cd 22 e9 f5 f6 d1 5c 22 d3 05 4f 24 c1 e8 84 44 73 01 17 f6 07 53 78 f7 b6 19 a6 d9 23 5b 27 df 98 61 9a 3d 14 de 2d bd 53 bc 0b 7b a1 ad e8 14 5d 3d 54 70 6f 9c fa 0c 08 00 53 74 f5 10 60 45 65 6b b9 b3 d9 9d f1 b2 4e 18 2a 1e a6 33 87 67 9d 30 04 c6 cb 6e e8 b9 62 30 85 23 cd d5 01 df 91 e2 85 56 e6 76 ae 3a e0 3b 42 Data Ascii: ?lu/Y1%%pvAN@f-4rhJSLs`<f_a\jJ#rfVcN;V)MG5BYp!$A+G#td3"\"O$DsSx#['a=-S{]=TpoSt`EekN3g0nb0#Vv:;B
2024-05-27 22:43:56 UTC	324	IN	Data Raw: 61 6e 89 7f 33 85 23 8f 41 62 0f 67 37 29 14 83 01 e0 38 75 0f fc a8 ca 50 77 4c c6 62 02 50 65 a8 3b a8 7b e0 47 00 8e 67 39 37 cf 28 24 83 81 bd 7b df 29 d1 f4 07 35 c2 79 ef 2a d0 08 bd 25 9a fe 20 f6 ee 7d 47 46 6a 5e 51 58 06 03 a0 e6 b6 70 8d df 7c 48 21 4c f8 f9 b1 42 18 ae f1 9b 0f 51 73 5b 58 66 6e 5e 50 70 06 03 00 85 a3 8f d6 f9 7c 4f 2a fc e9 f7 af 0a 23 55 e7 f3 3d 49 e1 e8 a3 6e e4 e6 36 05 69 30 80 14 b5 44 36 d4 05 cd 17 c0 7c ee c9 2e 66 51 17 34 5f a0 96 c8 06 e4 f1 64 c6 27 91 8f 4f 93 ce 87 b9 dc 18 7a f4 fd b8 75 c3 d9 5f 94 01 cc 0e f8 da 28 1c f9 3a 00 4f 77 e1 cb a4 50 2b 78 9c 2e 18 c6 f7 ca 54 f5 bd b3 7f 50 a6 aa ef c1 30 be 87 02 36 17 28 7c 83 41 5b b6 75 54 19 fa 77 09 18 18 5b cb 0c 02 06 aa 0c fd bb b4 65 5b 87 d7 f9 15 c9 Data Ascii: an3#Abg7)8uPwLbPe;{Gg97(${)5y% }GFj^QXp\|H!LBQs[Xfn^Pp\|O#U=In6i0D6\|.fQ4_d'Ozu_(:OwP+x.TP06(\|A[uTw[e[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50490	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	551	OUT	GET /uXQAnb9kkOOscMDg_kwY2RSfnmvhEwiXPcoSYS2EV9KP7nCfwvACXo8fEuUK5AJh7Qyyr-M3CpB-51s01C0ALvx647CfjDH9xrQs=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:56 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3655 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:08 GMT Expires: Tue, 28 May 2024 18:50:08 GMT Cache-Control: public, max-age=86400, no-transform Age: 14028 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0d fe 49 44 41 54 78 9c ed 9d 79 6c 1c d5 1d c7 bf bf f7 66 76 d7 39 38 13 9a 40 70 b0 0d 2d 47 45 a1 1c 01 51 68 b0 9d f8 02 b5 91 68 15 d4 56 6a 51 55 a9 45 2d c1 57 12 68 25 2a 2a e7 b0 73 a0 b6 48 fd a3 a5 52 25 aa 5e 2a 2d 8d 13 62 3b e1 12 57 a1 05 b5 1c 2d b9 69 80 50 48 20 84 f5 ee ce cc fb f5 8f f5 a6 cb da bb de 63 de cc 5b 6b 3f ff 79 76 e7 bd df fa a3 f7 7e ef 98 03 a8 51 a3 46 8d 1a 35 6a d4 a8 51 a3 46 8d 1a 59 50 d8 01 04 c1 d0 0e b7 91 40 ad cc ea 02 66 2c 22 40 81 70 88 84 78 cd 73 d5 48 7f 97 fd 66 d8 31 ea 62 c6 0a de b0 8b a5 4c ba 3f 60 c5 dd 00 cf 65 e6 29 bf 47 44 00 e8 08 11 6d ec Data Ascii: PNGIHDRxx9d6sBIT\|dIDATxylfv98@p-GEQhhVjQUE-Wh%*sHR%^-b;W-iPH c[k?yv~QF5jQFYP@f,"@pxsHf1bL?`e)GDm
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: 18 d8 6f 0f a2 e5 e6 62 7a 4b 26 21 9f e9 eb b4 af d5 5a 87 ce c2 33 84 21 37 43 15 48 d6 9a 93 b5 77 d1 41 75 cb f9 30 bd bb d6 bd d5 a8 55 f0 74 5b 7e 41 71 52 f2 cb ae 79 86 a1 77 ab 51 9b 60 bf e7 b9 95 22 05 70 3c 09 3c f9 2a 1f b5 2c 91 0c 3b 9e 5c 74 6d 35 6a 11 1c 66 ce 2d 84 25 65 ea 4f 8f c4 ce b1 a3 f6 45 64 da ee 04 4e 4a f6 75 ab d1 77 c1 61 e7 dc 7c 10 c9 71 b2 63 67 61 84 12 df bd 91 f6 0b 2b d2 64 a8 64 5f b7 1a 7d fd 85 a6 b6 5c 22 39 0e 2b 76 f6 58 3f bd 9f 7d 7c cb 28 37 ba c9 d4 de 7c 8f 77 08 13 21 e4 33 bd 3e 4c a1 7c 13 6c ca 80 2a 17 22 99 22 2b 76 d6 68 3f 7d 30 d5 e7 9b 77 72 93 e7 a6 f6 70 10 37 38 95 08 09 f9 6c 5f a7 7d 4d 45 65 f8 11 88 b9 2d 57 24 29 5a 37 6f b4 87 4e 14 fa de 96 11 6e 70 53 a9 7d 86 b6 e4 17 7a 3b ed 2b cb Data Ascii: obzK&!Z3!7CHwAu0Ut[~AqRywQ`"p<<,;\tm5jf-%eOEdNJuwa\|qcga+dd_}\"9+vX?}\|(7\|w!3>L\|l""+vh?}0wrp78l_}MEe-W$)Z7oNnpS}z;+
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: f6 94 a1 ed de f5 6c a0 5c 10 01 42 de 5c 8e 5c c0 a7 3b fc 8d ed ae 49 80 44 a4 61 6c 8d 75 a0 d0 d7 36 ed 50 37 28 cf 79 cc c4 eb 9d 85 90 37 f5 74 58 db ca 2d c3 97 5b da c7 d6 c6 06 cd 9c 27 2b b0 4a ed 6f dd e0 e6 7d 76 c8 e6 47 d4 f5 06 cb bd b9 12 b9 80 cf 4f d9 49 b7 64 6f a3 69 39 99 48 00 22 52 3f b6 c6 7a 23 fb f8 a6 47 d4 b5 ca 75 9e 32 52 ae b4 ba 7a da 65 c5 6b ed be 2f 32 9b 3a f0 22 12 20 2b 76 f6 68 bf 78 0b 00 86 76 78 d7 b0 e7 3e 6d a4 5c cb 6a ef 69 93 8f f8 52 9e 1f 85 e4 62 6a 4e 26 12 18 fb a0 ee 8c 1f 2f 53 e7 27 92 ee 73 46 ca 95 56 7b 4f bb 3f 72 01 8d 8f e6 34 75 c5 cb 51 e2 c3 ae cb e4 1c 29 98 4c f2 4b 44 90 96 d5 d1 dd 26 77 f8 5a ae 9f 85 e5 62 a2 64 66 c0 96 40 f3 25 16 a4 84 11 b3 a2 74 b7 6c 2f ef 69 13 23 be 97 ed 77 81 Data Ascii: l\B\\;IDalu6P7(y7tX-['+Jo}vGOIdoi9H"R?z#Gu2Rzek/2:" +vhxvx>m\jiRbjN&/S'sFV{O?r4uQ)LKD&wZbdf@%tl/i#w
2024-05-27 22:43:56 UTC	17	IN	Data Raw: e4 8f 60 2f 6b 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: `/kIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50489	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	553	OUT	GET /hzvgfKA6vD6zG7BEkFYBynAz6J_l5mz8BdTD6I8KGhgpZ9UTrM26PZ569Ml1GhEpNtZ9hmiMEgdEM7UaEL-FPTrSHJ_RvqyHiiB7VA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:56 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 8080 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:50:08 GMT Expires: Tue, 28 May 2024 18:50:08 GMT Cache-Control: public, max-age=86400, no-transform Age: 14028 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 1f 47 49 44 41 54 78 9c ed 7d 79 70 1b d7 99 e7 ef bd 6e 80 04 0f 90 04 ef 9b 12 2f 50 b2 65 eb a2 6d d9 89 6c d9 96 ac 88 17 64 cb 89 3d 49 36 13 cf 4e ed 64 77 6b b3 9b 54 66 6a 92 cc 1e 53 93 d9 9d ca 64 6a b3 a9 49 36 35 9b 64 12 5f 89 6d 11 90 a5 28 92 2c 8f 6f c9 63 f9 d0 61 12 3c 24 91 ba 78 93 12 25 92 00 ba fb 7d fb 07 bb 61 10 00 c1 ab 41 4a 36 7e 55 28 a9 9a dd ef 7d dd bf fe be f7 bd ef fb de 6b 20 81 04 12 48 20 81 04 12 48 20 81 04 12 48 20 81 04 12 48 20 81 04 6e 05 b0 95 16 60 39 d1 d0 d0 50 66 b5 5a 37 12 51 11 11 15 01 c8 03 60 07 60 63 8c 25 13 11 03 10 60 8c f9 18 63 e3 00 06 85 10 c3 Data Ascii: PNGIHDRxx9d6sBIT\|dGIDATx}ypn/Pemld=I6NdwkTfjSdjI65d_m(,oca<$x%}aAJ6~U(}k H H H H n`9PfZ7Q``c%`c
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: e7 cc d6 86 10 62 50 08 f1 13 21 84 27 de 73 eb 9b 8e e0 3d 7b f6 d8 14 45 69 64 8c fd 29 80 fb 19 63 52 34 2d 13 3a 61 d9 d9 d9 28 2f 2f 47 65 55 15 6e bb ed 36 94 94 94 40 92 65 cc 67 7c 5e 2a 8c 71 56 08 81 2b 57 ae e0 cc 99 33 e8 ea ec c4 85 de 5e 8c 8c 8c cc 4a b4 ee 7d 6b 44 74 94 88 7e e6 f1 78 5a e3 25 e3 4d 45 70 53 53 53 95 24 49 5f 01 f0 65 ce f9 ea 68 04 11 11 14 45 41 41 41 01 9c 4e 27 9c 6b d6 60 4d 5d 1d b2 1c 0e a8 aa 1a 77 52 67 03 e7 1c 92 24 e1 ea d5 ab f0 7a bd 68 3b 73 06 ed ed ed 18 1c 1c 84 2c cb 51 4d 37 63 0c 42 88 6e c6 d8 3f 09 21 9e f5 78 3c 17 cd 96 eb a6 21 78 f7 ee dd 77 0b 21 be c9 18 7b 84 31 96 11 4d 6b 03 81 00 d2 ed 76 6c de bc 19 b7 df 7e 3b 9c 4e 27 52 d3 d2 a0 aa 6a 5c e7 bb 0b 01 63 0c b2 2c e3 fa f5 eb f0 7a bd 38 Data Ascii: bP!'s={Eid)cR4-:a(//GeUn6@eg\|^*qV+W3^J}kDt~xZ%MEpSSS$I_ehEAAAN'k`M]wRg$zh;s,QM7cBn?!x<!xw!{1Mkvl~;N'Rj\c,z8
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: a1 24 49 c2 1f 3f f5 14 d2 d3 e7 b4 2c 0b 82 51 f9 d8 df d7 87 77 8f 1f c7 7b ef bd 87 93 27 4f a2 e7 fc 79 68 7a dd d6 52 0b d9 8d 7e 24 49 42 cf f9 f3 38 f6 ce 3b 38 f1 de 7b 38 7d fa 34 2e 5e bc 08 49 92 90 91 91 61 3a d1 b2 2c 23 2b 2b 0b af fd cb bf c0 6a b5 ce 90 85 88 50 57 57 37 e8 f5 7a db 66 bd de 54 69 3e c1 06 c6 58 65 a8 f6 aa aa 8a bb ee be 1b b9 b9 b9 a6 76 c4 18 83 a2 28 38 73 fa 34 5e 39 72 04 97 2e 5d c2 c4 c4 04 84 10 48 4e 4e 46 6e 5e 1e d6 af 5f 8f 86 c6 46 c8 b2 bc 24 af 9d 73 8e c3 87 0e e1 f8 b1 63 18 e8 ef c7 c4 e4 24 18 63 48 49 49 41 41 41 01 ee fb fc e7 51 5f 5f 0f 9b cd 66 da ec 40 d3 34 d4 3a 9d a8 a9 a9 09 be 48 40 30 f8 51 05 60 1b 80 17 66 bb de 74 0d 76 b9 5c 75 00 be 18 9e c4 9f 9a 9c c4 93 5f fe 32 f2 f3 f3 4d ed 8f 88 Data Ascii: $I?,Qw{'OyhzR~$IB8;8{8}4.^Ia:,#++jPWW7zfTi>Xev(8s4^9r.]HNNFn^_F$sc$cHIIAAAQ__f@4:H@0Q`ftv\u_2M
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: 10 54 55 5d 31 6b 21 e9 fb 71 19 15 25 f1 7a d9 0c 3f 23 ca 71 3f 80 88 e2 72 d3 9e bc ee c1 65 87 0b 93 9a 9a 3a af 20 fd 22 fa 0b 66 88 8e 1c 3e 0c 45 51 90 9f 9f 8f 9d bb 76 45 94 b8 c4 1b 44 84 0f df 7f 1f af 1e 3d 8a 1b 37 6e a0 aa ba 1a bb 1a 1a 96 14 58 89 06 7d d3 16 4c 4d 4d 45 5b 53 3c a5 69 5a c4 be 5b a6 11 4c 44 76 c6 58 7e d8 31 a4 db ed 71 0b 53 5e ba 74 09 ff fc ab 5f 05 db ee ef ef 87 c5 62 41 7a 7a 3a 0a 0b 0b 97 a5 24 57 92 24 9c 39 7d 1a cf 3c fd 74 70 5e dc db db 0b 4d d3 f0 e8 63 8f 99 5a dd 01 00 42 d3 70 7d 7c 3c 22 1f 2d 84 98 00 30 19 7e be 99 26 3a 95 73 9e 11 6e a2 53 53 53 e3 62 a2 35 4d c3 99 d3 a7 e1 f7 fb 83 15 1c 92 24 a1 b3 b3 13 43 43 43 71 29 82 0b 07 63 0c 93 13 13 d3 39 e0 c1 c1 a0 0c 9c 73 bc f9 c6 1b f0 f9 7c a6 9b Data Ascii: TU]1k!q%z?#q?re: "f>EQvED=7nX}LMME[S<iZ[LDvX~1qS^t_bAzz:$W$9}<tp^McZBp}\|<"-0~&:snSSSb5M$CCCq)c9s\|
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: 8d 2a ca ca ca 4a 34 34 36 a2 d6 e9 84 cd 66 8b cb fd ca b2 8c 63 ef bc 83 fe be be 19 43 83 ae 3c 67 35 4d 3b 1a eb fa a8 6e e5 13 4f 3c 91 af aa ea 5f 01 78 8a 31 96 cb 18 b3 01 90 59 0c cf 44 55 55 64 66 66 a2 b1 a9 09 77 ae 5f bf 2c b1 e0 68 e0 9c 23 3d 3d 1d d5 55 55 28 2a 29 41 df 95 2b 18 1d 1d 9d 35 5f 6c ac 2d 0e ff 45 03 11 21 10 08 20 29 29 09 bb 1a 1a d0 b2 7b 37 ca 2b 2a e2 b6 a7 a6 61 01 ff e1 47 3f 9a ae 14 9d 29 17 31 c6 de f6 78 3c 3f 88 d5 46 54 0d f6 f9 7c 5f 21 a2 af 72 ce 93 e6 12 dc b8 69 87 c3 81 2f 7e e9 4b d8 b0 71 23 a4 15 2c d1 31 fa 4d 4b 4f c7 a6 4d 9b 50 e7 74 e2 fd f7 df c7 1f 0e 1e c4 95 2b 57 90 94 94 34 eb 37 14 66 6b 4f d3 34 f8 fd 7e a4 a6 a4 60 e7 17 be 80 ad 5b b7 22 33 2b 0b 49 7a 20 23 5e f7 6a b1 58 f0 fb 03 07 30 Data Ascii: J446fcC<g5M;nO<_x1YDUUdffw_,h#==UU()A+5_l-E! )){7+*aG?)1x<?FT\|_!ri/~Kq#,1MKOMPt+W47fkO4~`["3+Iz #^jX0
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: 0f 52 42 08 e1 03 f0 b3 a9 a9 a9 bf 3b 74 e8 50 1f 4c c0 a2 dd de a6 a6 a6 07 24 49 fa b9 24 49 55 b3 ad e4 33 ca 55 d3 d2 d2 50 5c 52 82 cd f5 f5 a8 af af 47 5a 5a 5a f0 41 30 c6 d0 d9 d9 89 57 5f 79 05 bd bd bd f0 f9 7c f0 07 02 c1 0d c3 39 e7 b0 5a ad 48 b6 d9 50 90 9f 8f fb b7 6d 43 7d 7d 7d 30 39 10 4f 18 fb 8a bc f5 e6 9b 78 fb ad b7 30 3a 3a 0a 9f be 93 0f 09 01 e8 9b 90 5a 93 92 90 96 96 06 67 6d 2d b6 3d f4 10 0a 0b 0b a7 c7 5a 21 f0 ce 5b 6f e1 d5 a3 47 71 f9 ca 15 28 81 40 d4 00 06 e7 1c 42 88 01 22 fa 89 df ef ff f1 c1 83 07 c7 a3 88 b3 28 2c 69 5e d3 d2 d2 52 09 e0 2f 64 59 fe 93 58 71 5b e3 8d b6 5a ad b0 d9 6c 58 b7 6e 1d 3e b7 75 2b 4a 4b 4b f1 db e7 9f c7 b1 77 de 41 20 10 80 10 22 68 8e 43 d3 77 a1 ff 5a 2c 16 ac 5f bf 1e 5f fb fa d7 a7 Data Ascii: RB;tPL$I$IU3UP\RGZZZA0W_y\|9ZHPmC}}}09Ox0::Zgm-=Z![oGq(@B"(,i^R/dYXq[ZlXn>u+JKKwA "hCwZ,__
2024-05-27 22:43:56 UTC	272	IN	Data Raw: f4 57 42 88 0b 0b 0d 9e 18 e7 0b 21 7e 6e b1 58 fe 36 1e f2 2d 04 2b be 14 c1 e5 72 3d 0d a0 19 40 aa 91 65 8a 36 b6 85 84 2f 6f 00 78 ab b5 b5 75 67 bc 65 6b 6a 6a da c4 39 ff 39 80 1a ce 79 6a 2c d9 f4 bf a9 44 74 15 c0 4f dc 6e f7 7f 8f b7 7c f3 c1 8a 13 0c 00 2e 97 6b 37 11 fd 27 c6 58 25 80 14 4c 7f e0 c3 02 00 8c 31 05 c0 14 a6 77 33 ef 17 42 fc bd c7 e3 79 76 39 e5 6b 69 69 f9 0e 63 ec 29 9a de d5 3e 95 88 92 31 1d 25 13 00 14 00 13 44 34 09 e0 3d ce f9 0f f7 ee dd 7b 7c 39 e5 8b 85 9b 82 60 03 2e 97 6b 03 80 ed 44 b4 16 d3 2b 29 88 31 36 4c 44 5e 00 47 dd 6e f7 b1 95 94 af b1 b1 b1 c1 62 b1 7c 8e 88 aa 00 a4 03 f0 01 e8 67 8c 7d a4 69 da ef 3d 1e 4f cf 4a ca 97 40 02 09 24 90 40 02 09 24 90 40 02 09 24 90 40 02 09 24 90 40 02 b7 2e fe 3f d1 ba 52 Data Ascii: WB!~nX6-+r=@e6/oxugekjj99yj,DtOn\|.k7'X%L1w3Byv9kiic)>1%D4={\|9`.kD+)16LD^Gnb\|g}i=OJ@$@$@$@$@.?R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50492	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:55 UTC	785	OUT	GET /Amr8tRBfd1Uk8zYm779hnSCwMzArp3LGD1LUhcgPdCOIk0UJczmdKLa42Apx-wzQdrUnsATBiFsyHT5pVit9Al6PwfVewM09FnlwAA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:56 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 619 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:03:02 GMT Expires: Tue, 28 May 2024 19:03:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 13254 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	619	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 02 32 49 44 41 54 78 01 ed 9a 25 90 1d 41 10 86 8f 51 3f 19 8e 39 f0 f5 62 2f 3e e4 f5 a1 0a 7c e1 23 2f 43 eb 2b ec 5d 68 e3 5d d6 1c a8 70 ec 31 df e4 d9 59 a6 ec cc a6 ba 7f bb dd f5 7f 55 3d 54 db 6d 12 e5 87 84 04 e7 b8 c1 4b 5c 56 d8 68 69 05 97 97 dc e0 6c 1d ac 37 58 c4 43 45 c8 63 91 86 bd e6 07 99 63 1d 95 a0 75 e6 18 b4 d1 fe 35 fe a0 52 ea 37 57 ed 32 df ce 3c c7 a8 0c 3a 6e 65 b4 db 62 bf 9f b7 a8 1c 7a 4b bf 1d 00 6f 51 39 f5 c6 06 fb b3 91 f6 be e1 f2 a2 25 97 6f 91 df 3c 34 6d ff 72 68 ef ff e2 3e c3 da 77 c3 dc e7 57 e8 5a b8 6c 76 e3 0c 9a da 65 96 81 d0 af 07 98 65 37 04 76 c0 a6 f6 f9 4d 33 36 e3 02 bf ad 69 23 1a ac 07 ec 9f 4c cc Data Ascii: PNGIHDR``H2IDATx%AQ?9b/>\|#/C+]h]p1YU=TmK\Vhil7XCEccu5R7W2<:nebzKoQ9%o<4mrh>wWZlvee7vM36i#L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50493	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:56 UTC	785	OUT	GET /yVza5ypuHARE9HM428UC5saP-tI464PBXi6dLU_i81n57apWG6zIj2GHBnAGalxjdNDDD1Pd9EkoVyu-Uh1zdsfd5LcOYIb4ZKB-Ag=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:56 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 117 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:50:53 GMT Expires: Tue, 28 May 2024 20:50:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 6783 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	117	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 01 03 00 00 00 d8 56 e5 7b 00 00 00 06 50 4c 54 45 00 00 00 75 75 75 85 7a 1b 74 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 1d 49 44 41 54 78 01 63 a0 23 18 05 fc 1f f8 ff 83 c1 07 5a 72 20 60 d4 3f a3 fe 19 05 00 b0 07 bf 41 90 9a 27 1f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR``V{PLTEuuuzttRNS@fIDATxc#Zr `?A'IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50495	142.250.184.225	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:56 UTC	820	OUT	GET /viBN3SXlX2ACEJsf7pd1Ud4Y2-YcsXer3nwbHVaJ9u8L7-R3x0BJWyQuDN22YPj9Bcv18a7qf_qU6-ciR-DE2eYv6_UHGzTi7OgWlLBs-wYATVRAar6p=w1440-l80-sg-rj-c0xffffff HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:56 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 44240 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:33:02 GMT Expires: Tue, 28 May 2024 19:33:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 11454 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	856	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 04 05 08 08 08 08 08 08 08 08 08 08 08 08 08 07 07 07 07 08 08 07 07 07 07 0d 08 0d 0d 0d 08 0a 0a 0e 11 19 13 0e 0f 17 10 0a 0a 15 20 15 17 1a 1b 1d 1e 1d 0d 13 21 25 21 1d 25 19 1d 1d 1d 01 07 07 07 0a 09 0a 0d 0a 0a 0f 1d 0e 0d 0e 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 28 1d 1d 1d 28 28 28 28 1d 1d 28 1d 1d 28 1d 28 1d 28 ff c0 00 11 08 03 27 05 a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 03 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 3e 10 00 02 02 01 02 03 06 03 07 04 01 03 04 02 03 00 00 01 02 11 03 04 21 05 12 31 06 13 41 51 61 71 22 32 b1 07 14 52 72 81 91 a1 15 23 42 b2 c1 Data Ascii: JFIF !%!%((((((((('">!1AQaq"2Rr#B
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: f5 25 23 4c 6b 75 ee be a0 7f 3b e5 f9 a5 f9 9f d4 92 f2 fc d2 fc d2 fa 90 46 c0 05 00 0a c0 00 07 13 68 2b 32 46 f8 c5 1a 41 1d 7a 17 59 21 ee 8e 68 9b 60 75 38 3f 54 65 5f 59 3f 90 f9 ee 26 ba 9f 41 1d f1 a7 e8 be 87 87 c5 23 b3 2e c7 cc 67 ea 73 48 ec d4 f5 39 26 45 64 c4 53 24 32 00 00 00 00 00 00 00 00 4c 62 60 20 00 28 00 00 00 00 00 00 00 04 03 00 10 0c 00 40 30 01 00 30 20 00 00 00 00 00 00 10 c0 43 06 00 00 00 50 00 00 00 00 00 00 00 00 00 00 00 0d 00 00 c0 80 00 00 00 00 00 00 a0 48 06 3a 18 c2 90 c0 01 00 00 00 00 00 00 00 50 00 d0 21 80 ca 88 91 48 0f a1 e0 79 37 48 fd 07 84 3b 48 fc d7 81 ba 94 4f d1 f8 1b b4 8b 12 be bb 41 d0 f6 71 74 47 89 a0 67 b7 83 a1 59 69 45 50 d2 2a 80 8a 0a 2a 87 41 12 d1 2d 1a 50 9a 03 16 88 68 dd a3 36 82 b2 68 96 Data Ascii: %#Lku;Fh+2FAzY!h`u8?Te_Y?&A#.gsH9&EdS$2Lb` (@00 CPH:P!Hy7H;HOAqtGgYiEP**A-Ph6h
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 01 01 03 01 00 0c 40 00 00 00 00 00 00 00 00 00 86 08 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 08 00 00 01 a1 82 00 b0 50 98 c0 04 08 06 90 45 0d 08 a4 14 0c 06 15 20 30 01 0c 60 04 8d 0c 69 00 24 30 1d 00 8a 88 a8 69 81 e9 f0 79 7c 68 fd 1f 81 bf 85 7a 9f 9a f0 a7 f1 9f a3 f0 07 f0 a2 a5 7d b7 0c 5b 2f 73 de c0 b6 47 85 c3 7a 1e f6 0e 88 ac 56 e9 01 40 56 76 49 0e 86 00 89 a2 64 8d 28 4d 04 63 24 62 d1 d1 24 63 24 1a 8c 24 8c a5 13 a6 48 ca 48 8a e5 9c 4e 7c 91 3b 64 8c 26 80 e0 9c 4c 9c 4e c9 c4 cb 90 a8 c7 94 d6 11 29 40 d2 11 f4 08 70 89 d3 08 93 8e 07 44 22 14 e3 13 68 c4 22 bc cf 2f 8d 76 87 47 a0 83 96 5c b1 e6 ad a0 9a 72 6f d8 86 d5 da 68 de 8b 3d fe 06 7f 36 6b 95 e4 9a ff 00 ba 5b fe a7 Data Ascii: @(PE 0`i$0iy\|hz}[/sGzV@VvId(Mc$b$c$$HHN\|;d&LN)@pD"h"/vG\roh=6k[
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: 00 00 14 87 42 45 20 80 60 01 a0 00 34 10 86 80 6b 76 80 f7 f8 16 3b 92 3f 45 e1 10 da 27 c0 76 7a 3f 12 3f 47 e0 f0 b4 8b 19 af a9 e1 91 d9 1e de 15 b1 e5 70 e8 d2 3d 8c 4b 63 4c 56 88 68 12 28 8c 90 c2 86 02 0a 18 c0 86 88 68 d6 84 d1 46 0d 19 ca 27 43 44 b8 85 72 ca 24 72 9d 2e 04 b8 83 6e 67 02 5c 0e 87 11 72 85 db 9d c0 e3 e3 3c 43 1e 8b 04 b3 4d a4 92 75 eb 2f 24 7a 4e 34 ad ec 92 b7 7e 47 e3 df 68 fc 6f ef 59 fe ef 8d ff 00 6f 13 69 d7 46 c8 cd af 9c ed 27 16 c9 ae cf 2c 93 93 e5 72 7c 91 bd 94 6c f2 9a 4d 14 e2 db af 1a 2f 1e 37 b6 dd 5d 0b 59 72 38 5c 8d 27 81 72 b7 e4 77 e3 d1 39 5b ad d1 d7 83 87 4a 58 df c3 b5 f9 1c ae 5a 6e 63 b7 87 dc bd af a1 e8 f0 4d 2f 36 aa 11 e5 6e 3b b7 b7 85 1e ca e0 d2 a8 7c 3e 5e 07 a9 c3 f8 5b 8e 5e 64 ab e1 7f 42 Data Ascii: BE `4kv;?E'vz??Gp=KcLVh(hF'CDr$r.ng\r<CMu/$zN4~GhoYoiF',r\|lM/7]Yr8\'rw9[JXZncM/6n;\|>^[^dB
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: 04 3a 01 00 e8 60 09 14 90 91 68 04 3a 01 80 d2 04 81 14 50 21 a1 22 80 68 62 43 08 07 42 18 05 15 0e ab dd 7d 44 54 3a af 75 f5 0a fe 64 cb f3 4b f3 3f a9 05 e5 f9 a5 f9 9f d4 82 b4 00 00 00 00 00 0a 44 8d 12 8d f0 bd 8e a8 b3 97 17 43 a2 24 6a 37 c0 fe 25 ee 8f ac c5 bc 17 95 1f 20 8f aa d0 3b c5 1f 60 b5 e7 f1 53 e6 35 5d 5a 3e ab 8a 46 ec f9 7d 62 f8 83 0e 19 19 48 da 48 c6 41 59 b0 1b 10 40 00 00 26 21 b1 14 00 00 00 21 88 00 00 08 00 00 00 00 00 00 00 00 04 03 40 00 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 08 68 06 00 04 00 00 00 00 00 0d 00 00 00 00 00 00 00 14 86 24 30 aa 43 42 43 40 03 40 8a 0a 00 00 20 1a 11 49 06 8c a4 84 91 48 06 00 3d 80 54 03 d8 40 0c d3 4f d5 19 9d 3a 38 27 25 b8 47 da f6 6e 2d 28 9f a1 f0 94 f6 3e 23 b3 b8 7e Data Ascii: :`h:P!"hbCB}DT:udK?DC$j7% ;`S5]Z>F}bHHAY@&!!@Ph$0CBC@@ IH=T@O:8'%Gn-(>#~
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: 00 04 01 40 30 01 50 21 80 00 50 e8 0a 0a 01 a4 3a 01 58 d0 24 55 00 8b 88 92 29 04 d1 a1 d0 86 82 e8 d0 c1 0e 8a 10 d0 0c 06 90 c1 02 00 1c 7a af 75 f5 12 2a 0b 75 ee be a0 7f 2f cf e7 97 e6 97 fb 08 32 7c f2 fc d2 fa 82 65 50 03 10 00 00 00 0d 08 2c 0d f1 9d 98 51 c1 06 7a 9a 18 74 b3 35 ac 66 db 42 16 7b fc 02 3f 03 5e a7 9b 1c 6a ba 1e b7 04 db 9b dc 9b 6a c7 46 bb 16 cc f9 9e 25 8a af f5 3e af 5a 7c df 12 5b bf d4 ac be 5f 2a dd 9c f3 47 66 a5 6e ce 39 84 64 d1 2c b6 43 08 40 0c 00 04 31 30 10 00 14 00 00 00 00 00 26 03 62 20 00 00 00 00 00 06 21 94 00 00 00 00 00 00 00 00 00 00 05 08 64 00 00 00 00 00 00 d0 0d 05 81 88 60 0d 10 31 80 34 40 30 60 d1 00 00 40 00 00 03 88 8a 40 30 01 a0 a6 8a 12 18 50 38 82 18 01 48 92 d0 0e 25 13 11 85 52 01 0d 01 48 Data Ascii: @0P!P:X$U)zuu/2\|eP,Qzt5fB{?^jjF%>Z\|[_Gfn9d,C@10&b !d`14@0`@@0P8H%RH
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: 59 31 68 34 b1 a5 c8 9a 5e 2d 1e 27 11 e2 b8 37 e5 6b f7 41 2e 3a 7c 9e ad 65 c3 b4 ee 4b cd 9c 91 a9 1e 8e bb 58 b2 5a d9 9e 76 38 af 03 d1 8b cd 9f b6 3a a8 7c 2c f9 cc ea 9b 3e af 34 6e 2f d8 f9 7d 62 a9 3f d4 ef 8d 70 cf 17 3e 3f 99 1f 6f d9 fe 3b 93 44 b1 ae f1 f2 b6 b9 95 de c7 c5 e9 97 c4 77 62 c7 29 4d 75 eb b7 a1 bb 93 9c c5 fd 03 a0 d6 2c f8 61 91 74 92 46 ce 67 ce 76 33 2b 7a 48 c6 5b b4 a8 f7 5c 83 2d b9 86 a4 73 f3 0e 32 03 a5 48 39 8c 94 87 64 1a d9 69 98 a6 5a 61 5a 94 42 2d 00 d2 06 86 80 08 64 b2 d9 24 12 00 c0 04 c0 6c 90 01 a4 03 45 09 a2 5a 2c 4c 0c d8 91 4c 40 4b 13 45 01 04 d0 51 48 40 2a 0a 18 15 08 06 14 02 00 00 a0 40 00 26 14 3a 04 8a 85 43 a1 8c 04 90 d0 00 00 c0 60 24 34 24 34 05 22 a8 94 50 05 0c 06 8a 01 a0 48 60 03 42 18 43 Data Ascii: Y1h4^-'7kA.:\|eKXZv8:\|,>4n/}b?p>?o;Dwb)Mu,atFgv3+zH[\-s2H9diZaZB-d$lEZ,LL@KEQH@*@&:C`$4$4"PH`BC
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: 30 1a 2d 13 12 d0 45 c5 0c 10 c3 40 00 40 4b 06 0c 4c 2a 64 22 99 24 68 ca 89 25 44 95 b8 da 27 4e 2f 03 9a 27 46 36 73 ae 91 db 8c e8 81 86 23 a2 24 6a 83 db e0 3f 32 3c 5a 3d be 06 aa 48 47 3c df a1 f0 3e 8b f4 3e c3 42 7c 7f 04 f0 f6 47 d8 e8 7c 0e d8 3c 99 bd 7c 5d 0b 32 c4 fe a6 a6 9c 80 00 00 c1 85 81 40 98 ec 90 20 00 00 0a b1 58 84 ca 2a c9 72 13 64 36 03 94 8f 91 ed d6 8b 26 a3 0a 78 ef 9a 2f a2 d8 fa 99 c8 e1 d6 fc 50 68 e3 cb 3f e2 f4 7c 7c b5 93 f0 fe 39 c1 f5 18 5c 72 64 83 df ab 8e e8 fa ce c3 4a e0 bd 3f f9 3e bb 8a e9 31 e5 c5 53 85 ae 57 7b 74 d8 f9 2e c9 c1 62 d4 e7 c4 93 51 53 7c a9 f9 1e 49 9e e6 ab df 70 9b dc 7d ac 71 c9 c7 6f 13 c1 e2 fc 37 2c ed be 6d ae 92 ba 3e af 44 95 53 3b b2 69 e3 35 55 d4 e1 63 d3 23 f2 6f fa 4f 3e a2 77 93 Data Ascii: 0-E@@KLd"$h%D'N/'F6s#$j?2<Z=HG<>>B\|G\|<\|]2@ Xrd6&x/Ph?\|\|9\rdJ?>1SW{t.bQS\|Ip}qo7,m>DS;i5Uc#oO>w
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: 17 06 15 d7 06 74 41 9c 71 91 bc 66 45 75 c6 46 8a 47 34 26 6b 16 06 a9 95 66 69 95 60 5a 63 b2 13 1d 81 56 84 2b 00 10 0e 80 04 21 83 28 86 22 98 80 40 00 c0 90 00 08 00 00 00 00 68 09 62 29 8a 82 a4 07 43 a2 09 18 01 40 00 01 0c 62 a1 80 00 50 e8 04 8a 12 43 01 8c 48 65 0c 68 43 40 58 02 15 81 43 10 01 43 10 ca 02 a1 d5 7b a1 0e 1d 57 ba fa 96 25 7f 2d 65 f9 a5 f9 a5 f5 24 ac bf 34 bf 34 be a4 11 a0 02 00 18 31 01 00 00 00 6b 86 54 fd 0f 53 4e cf 22 0f 73 bf 4f 33 37 cb a7 1d d5 7b 58 19 d9 88 f3 34 f2 3d 0c 12 3c b9 4f 2f 76 37 6e d8 46 d1 86 58 d5 9d 7a 45 cd b1 1a bc 6d 1c f4 eb ed e5 ce 27 1e 74 77 c8 e3 ce 8e f8 57 0c e3 ce cc 8e 49 23 bb 34 4e 49 a3 bc 78 f2 9a ae 69 a3 29 23 79 a3 29 22 b9 b2 64 33 49 10 c0 91 0c 18 08 00 00 09 28 92 80 00 00 00 Data Ascii: tAqfEuFG4&kfi`ZcV+!("@hb)C@bPCHehC@XCC{W%-e$441kTSN"sO37{X4=<O/v7nFXzEm'twWI#4NIxi)#y)"d3I(
2024-05-27 22:43:56 UTC	1390	IN	Data Raw: f9 5d ae 6e a4 73 01 9c b1 db 58 e5 a6 cf 2f 7b 91 ca 94 6e a9 2e 88 e7 d4 a6 6b 85 d4 91 be 4c 77 d4 f9 fc b8 ea be af 06 7b 91 f3 5c 43 9e 99 f1 9c 5e 52 e6 8e 3f 19 4a b7 f7 3f 50 c9 a3 53 f0 3e 43 b4 7c 25 ad 5e 0d b6 e6 38 bd 93 27 d1 f6 4b 4d 8f 4d 86 3b ae 69 24 db f1 b3 e8 65 aa 84 b6 72 4f c0 fc df b4 5a dd 4e 86 31 50 4d 2a de 7b ec 8f 0b 49 da 0d 5c e5 6a 6d bf 2f 33 5d 77 19 ff 00 6f d6 f5 7c 33 4b aa 49 4d 2b f3 3c de 21 d8 e8 4a 0f ba e4 e9 e2 78 9c 3f 5d af 58 7b f9 61 94 b1 a7 ca e5 1b 6d 3f 54 6f 3e 3f a8 4e 2a 58 f2 c5 4b e5 da 49 32 e8 dc fe bc 1e 23 d8 7c f6 db c9 08 c7 7b 38 61 d9 ec 18 76 94 b9 e5 e6 8f a5 d7 f1 3c c9 54 b1 65 4d ec ad 3d cf 1b 59 c3 b8 8e 58 b9 e3 c5 35 1e bb ec cd e3 58 ca e3 fb 71 e5 cf 83 4e 9e c9 3f e7 6f fe cf Data Ascii: ]nsX/{n.kLw{\C^R?J?PS>C\|%^8'KMM;i$erOZN1PM{I\jm/3]wo\|3KIM+<!Jx?]X{am?To>?NXKI2#\|{8av<TeM=YX5XqN?o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50502	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:56 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:56 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:56 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:56 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50501	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:56 UTC	554	OUT	GET /SLlieQVJNLw2RKmgpg3mMQKeaM5lTZWbOoF_dV_syPle9U7KBs-1PB--OdorbPJYFVRy5178CRGUeITtRpSRyoMyPFGjxlerox1nm5k=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:56 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 676 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:52:37 GMT Expires: Tue, 28 May 2024 18:52:37 GMT Cache-Control: public, max-age=86400, no-transform Age: 13879 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:56 UTC	676	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 02 6b 49 44 41 54 78 01 ed da 3b ab 13 51 14 c5 f1 b9 69 35 11 c1 af 20 88 22 d8 25 69 ac 6c 84 db 19 c1 d2 42 6b 1b 97 d1 f8 88 c1 24 7e 01 1b b1 f1 75 7d 06 c1 2e f9 00 e6 06 41 b0 16 c4 2e 56 86 c4 da 30 c2 66 1a 65 24 39 d9 eb ec 0c b2 67 d5 67 e6 ff 03 11 3c 26 f1 c7 1f 7f c2 1e 94 70 06 7d ec 61 20 7b 2b 7b 23 7b 9d ed 95 ec a5 ec 45 b6 3d d9 73 d9 b3 6c 4f 65 4f 64 8f f1 10 2d d4 90 84 2e f4 c0 59 7c 41 1a 71 9f 71 3a 26 e0 3a d2 e8 5b e2 4a 2c c0 45 a4 46 bb 10 03 70 04 73 33 c0 0c 87 f9 80 16 52 c3 35 f9 80 89 29 e0 03 1f f0 d3 14 b0 e0 03 52 e3 39 c0 01 0e 70 80 03 8a 0d 68 90 67 0e 48 c8 73 80 03 1c e0 80 ff 1c d0 f8 6b 8c 68 c2 fb 13 14 74 Data Ascii: PNGIHDR``HkIDATx;Qi5 "%ilBk$~u}.A.V0fe$9gg<&p}a {+{#{E=slOeOd-.Y\|Aqq:&:[J,EFps3R5)R9phgHskht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50503	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:56 UTC	567	OUT	GET /RQdvv8_ORarepoEntWwvuh3M0wpyhNwlGEXbXAYv4iejDJpzh-Soq_sWCW6gS-DtGhoKCtxN3_sURCDjyOR4Cpz1dD9a1KPQLD1bBLjmoZolhyeJcr9s=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:57 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 817 X-XSS-Protection: 0 Date: Mon, 27 May 2024 22:32:47 GMT Expires: Tue, 28 May 2024 22:32:47 GMT Cache-Control: public, max-age=86400, no-transform Age: 669 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:57 UTC	817	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 c6 49 44 41 54 78 01 ed dd 3d 4e 5b 41 14 86 e1 63 48 22 50 10 52 2a a4 90 8e 92 96 14 6c 80 25 78 21 49 96 41 b2 10 96 c0 06 28 42 4b 49 85 8c 44 85 84 40 46 80 00 0f 35 92 67 ee 9d 9f 33 1f ef 23 b9 73 e5 d7 77 6c 8d cf f5 4c 5e 16 0c b2 56 0c d2 08 2c 8e c0 e2 08 2c 8e c0 e2 08 2c 8e c0 e2 08 2c 8e c0 e2 3e 59 a2 93 f3 07 fb 7b 7c 67 67 b3 27 bb b9 7f 36 98 ed ef 7c b1 e9 de 9a 4d 7f ae 9b 37 93 94 ad ca 10 f6 df f1 ad e1 7d bf 0e 36 ec f7 c1 57 f3 24 7a 89 3e fa 3f 27 ee 12 e1 f5 09 2b 9c 27 f1 81 Data Ascii: PNGIHDRxx9d6pHYssRGBgAMAaIDATx=N[AcH"PR*l%x!IA(BKID@F5g3#swlL^V,,,,>Y{\|gg'6\|M7}6W$z>?'+'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50506	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:56 UTC	554	OUT	GET /HUcJ2yilLdMblMI04h5DE1tf_0iCxgOmiu-7mpulXRJTol_vVsnrlQcs4esQq1ygtHQ4jxShVi02_aGhjOLSflnb1fMgpefkyfQbFMI=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:57 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 325 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:50:53 GMT Expires: Tue, 28 May 2024 20:50:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 6783 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:57 UTC	325	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 01 0c 49 44 41 54 78 da ed da 41 0e c1 40 14 87 f1 d9 a9 c3 88 38 dc ff 24 ad 74 16 ce 22 e2 10 15 3d 89 6e a6 16 12 52 3b fa de 43 7c df 2c 45 bd 9f b4 c4 68 4a 44 44 44 44 34 3b 8d d3 f5 ea e3 00 00 00 00 00 e0 37 00 da 28 ab d7 f0 3c d0 ec 35 e8 ac 56 6b df e1 97 da 99 0f 3e 5d 45 59 95 df f8 47 e7 f1 6f eb e0 44 70 7f f7 1f ab f5 39 f7 c7 b0 55 1c ae 05 e5 40 c0 a8 ad 3d a0 0f 05 9c ec 01 43 28 e0 12 fe 45 f5 ed c7 07 00 00 00 00 00 f3 0e f8 ea 0f 16 eb e7 03 00 00 00 00 80 58 80 f5 c6 d5 c7 37 be 00 00 00 00 00 00 df c4 00 00 00 00 00 80 9d 39 00 00 00 00 00 f0 de 0b fc fc 1f dd e7 50 40 67 0f 68 43 01 b5 3d 60 ad 12 78 bb cd 2a d9 17 78 c3 4d 93 Data Ascii: PNGIHDR``HIDATxA@8$t"=nR;C\|,EhJDDDD4;7(<5Vk>]EYGoDp9U@=C(EX79P@ghC=`x*xM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50505	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:56 UTC	554	OUT	GET /R7Wr9OkT5zk4gY2F3-tLiMwhFaMfO_hCU5LpTxztUaTOi8kU7_0QUIvOTlhHLyMol8kvHhVvdWUtjmAZ6cqiwGhwZzdg0fvc-UXtojU=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:57 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 287 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:55:33 GMT Expires: Tue, 28 May 2024 20:55:33 GMT Cache-Control: public, max-age=86400, no-transform Age: 6503 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:57 UTC	287	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 00 e6 49 44 41 54 78 01 ed da bd 8d 02 41 10 06 d1 71 09 04 ad 30 09 ae 72 c1 20 06 10 84 70 61 10 c4 81 b4 60 60 f5 e9 cc fb 71 a0 8d de 96 ea 2b 7b 34 7a 7e 0f e7 9c 73 ce 39 e7 9c fb 3d b6 ec b8 f0 24 16 d6 f8 d9 e0 bf 56 ec 89 7c 55 80 15 1f 44 67 c0 9e e8 0c d8 12 bd 01 bb ee 80 4b 77 c0 b3 3b e0 ef 83 45 27 40 80 00 01 02 da 03 36 9c 79 10 2f 76 e7 c4 b4 04 c0 86 1b f1 66 57 a6 7a c0 99 48 74 ac 07 3c 52 80 b9 1e 10 b9 7a 02 04 08 48 fc 27 40 00 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 f2 09 a8 3e d6 20 12 09 10 20 a0 3f 40 80 80 3b 91 68 ae 07 9c 88 44 87 7a c0 c4 95 78 b3 4f d6 f5 80 6f c2 91 99 78 b1 99 03 6b c6 a0 75 02 12 09 Data Ascii: PNGIHDR``HIDATxAq0r pa``q+{4z~s9=$V\|UDgKw;E'@6y/vfWzHt<RzH'@ @ @> ?@;hDzxOoxku

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50507	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:56 UTC	554	OUT	GET /5WLz7CvnjBuQDDrFDsJW0EMrL-r6a-b0YUhF48zk7l4lK3yLzhBzeG3I01KIycLfE-UzXuB3MrXRCjPEE-CeWZ281MGTq-FA2BGoba8=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:57 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 808 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:55:32 GMT Expires: Tue, 28 May 2024 20:55:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 6504 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:57 UTC	808	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 02 ef 49 44 41 54 78 01 ed d5 35 74 04 55 14 87 f1 1b 9d 5d dc dd a1 82 9e 1a 97 12 77 69 d0 b8 7c d0 17 d4 b8 bb 6b 9b 8e 32 ee ee ee 9e 54 9c e8 79 d8 6b f6 31 f1 09 6f ee 39 f3 fd bb 59 7b bf cd ee 46 92 92 92 92 92 92 92 92 92 a2 8b 1b 29 e0 07 da 59 61 eb af ad d0 c6 0f bc ca 0d 12 ff c8 e1 29 ea 31 84 af 96 27 c9 91 f8 c6 fd 0c 61 d8 7f fd dc 23 71 8c 33 f8 02 73 c8 7d 4a 5a e2 15 97 d2 8a 39 c2 9a b9 24 5e c7 1f c4 1c 71 fd 5c 1c 9f 0f 4f 2b e6 18 6b 22 15 0f c0 17 98 63 ee e3 78 fc f2 98 90 6d f0 35 0f 72 0d 79 7f ed 1a 1e e4 5b 36 30 21 bb cb fb ef 7e e8 0f e7 8f 5c 21 4e 5c c9 2f 18 dc f5 91 e3 17 f0 14 c6 d9 2e 2f 8b 84 47 01 bb 18 67 8f 8b Data Ascii: PNGIHDR``HIDATx5tU]wi\|k2Tyk1o9Y{F)Ya)1'a#q3s}JZ9$^q\O+k"cxm5ry[60!~\!N\/./Gg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50508	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:56 UTC	553	OUT	GET /RBo2txwfXqma-s-_9f0bqyfM5pd4RpZDMCnB8xbtENo5F2tEJGnCwhaKmg3YAGrbGCnuC4BG-zHrzuU0az-lP9kNOYfdXGeblLv34A=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:57 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 260 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:56:10 GMT Expires: Tue, 28 May 2024 18:56:10 GMT Cache-Control: public, max-age=86400, no-transform Age: 13667 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:57 UTC	260	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 02 03 00 00 00 9f f6 9f ab 00 00 00 0c 50 4c 54 45 00 00 00 75 75 75 75 75 75 75 75 75 c3 1c d0 ac 00 00 00 03 74 52 4e 53 00 00 80 17 ce 47 fe 00 00 00 a4 49 44 41 54 78 5e ed d3 b1 0d 83 30 18 05 61 96 4c 1a 0f c1 34 99 c7 d3 78 08 1a 13 1d 28 44 e8 2c bd 3a 91 ff 2a ca 27 f9 c0 d8 cb df cd 7e cc e3 33 cb f5 eb 82 09 13 2a d0 07 b0 02 db 00 0a d0 06 f0 04 5e 06 22 24 0c 44 b6 1b ec 67 95 48 83 99 2f 74 22 24 ea 1d ce ff 0e bd c3 b9 0a eb 09 88 80 02 22 24 04 44 48 18 1a 50 0c 44 48 18 3a 50 0d 44 48 18 88 94 08 5e 2a c5 fd b8 f1 05 bd 25 79 13 bd ed f9 43 f9 d3 e6 c3 e0 e3 e3 03 97 8e a8 0f 75 be 06 be 38 f9 aa e5 5b 3b 61 82 e6 27 e1 0d 9c e3 78 c0 59 46 f5 7e 00 00 00 00 49 45 4e Data Ascii: PNGIHDR``PLTEuuuuuuuuutRNSGIDATx^0aL4x(D,:'~3^"$DgH/t"$"$DHPDH:PDH^*%yCu8[;a'xYF~IEN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50518	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:57 UTC	767	OUT	GET /favicon.ico HTTP/1.1 Host: about.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.google/products/?tab=uh Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1670225768.1716849819; _gid=GA1.2.36880739.1716849821; _gat_UA-69658807-1=1; _gat_UA-69658807-2=1; _ga_YGRLMNPG7B=GS1.1.1716849819.1.1.1716849824.0.0.0
2024-05-27 22:43:57 UTC	864	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/x-icon Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 5430 Date: Mon, 27 May 2024 22:43:57 GMT Expires: Mon, 27 May 2024 22:43:57 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:57 UTC	526	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-05-27 22:43:57 UTC	1390	IN	Data Raw: fd fd fd fa ff ff ff ff 0a bd fb ff 05 bc fb ff b5 eb fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd Data Ascii: BBBBBuBBBBB{5k7R8F
2024-05-27 22:43:57 UTC	1390	IN	Data Raw: 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 Data Ascii: 4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S4V7S4S4S4S4S4S4S4S4S4S
2024-05-27 22:43:57 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c5 a5 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd ed ff ff ff ff ff ff ff ff ff ff ff ff 1c c2 fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 59 d3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBYBBBBBBBBBBBF!
2024-05-27 22:43:57 UTC	734	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff e4 e6 fc ff 9e a5 f5 ff 6a 74 f0 ff 48 55 ec ff 38 46 ea ff 37 45 ea ff 46 53 ec ff 68 72 ef ff 9a a1 f5 ff e2 e4 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea ff ff ff 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd Data Ascii: jtHU8F7EFShr0&$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50515	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:57 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:57 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:57 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:57 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:57 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50516	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:57 UTC	553	OUT	GET /7_L1xfZLxnsy0kmXFl439RwH0gIAVlj_oCQYZj4NUD0PpxU23s8TDNtLGZxMAaBT1sryYuRpw-e9mo5q5nsCjeIpm_w0ep-6gbdiGw=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:58 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 317 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:03:02 GMT Expires: Tue, 28 May 2024 19:03:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 13255 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:58 UTC	317	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 01 04 49 44 41 54 78 da ed da 31 0e 82 40 10 85 61 3a f1 30 86 78 b8 77 12 20 50 78 16 43 3c 04 44 4e 02 0d 58 98 68 34 b1 d8 21 b0 63 f8 df 94 04 98 6f b3 bb 14 6c 92 10 42 08 21 84 90 9f d1 59 b5 7a 8d 9a 37 ae 51 77 55 ca 96 35 7f d4 65 f3 c6 3f 6b 52 ad d4 de fe 2d 72 fb cf 6a 8c 84 e8 a3 ff ae ca 36 f7 67 37 35 19 d6 82 6a 47 80 59 65 38 a0 77 05 e8 c2 01 a3 2b c0 10 0e f8 7a c4 e6 df 9f a5 ef 07 00 00 00 00 00 51 01 b1 ef 07 00 00 00 00 00 00 00 00 58 13 b0 f4 3a 00 00 00 00 00 00 00 00 c0 9e 01 6b 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 0d 00 00 00 00 00 8c 80 bf 3f f8 7a 77 05 68 c3 01 95 2b 40 1e 0e c8 34 39 3a 7e 7f b2 2c 23 3f 07 f0 Data Ascii: PNGIHDR``HIDATx1@a:0xw PxC<DNXh4!colB!Yz7QwU5e?kR-rj6g75jGYe8w+zQX:k?zwh+@49:~,#?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50519	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:57 UTC	551	OUT	GET /XuX--BV0zkkLgxF4L5fJ0A1zg1yqjZ5TRyjEyaKMg873pOoy04PFwpUeUNw9kDpeocu5Dq7LRpOU3tkXF-yg9bgjyBvHjRJ2Dl91=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:58 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 970 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:50:53 GMT Expires: Tue, 28 May 2024 20:50:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 6784 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:58 UTC	860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 03 91 49 44 41 54 78 01 ed da c1 6b 1c 65 18 c7 f1 c7 74 b3 bb 8d 9e b4 05 b3 09 21 bd 94 1e 3c b5 e2 1e a4 b4 78 2c 52 9a a5 f5 e4 c5 5e 54 4a db a4 f5 7b d0 9b 94 40 29 08 2a a2 54 72 69 1b 52 0c cd 59 44 08 d2 78 09 52 ac 0a 22 a8 4d 42 54 aa 31 48 6c 22 c9 96 cd cf 1c 65 69 33 6f 93 f7 99 19 61 9e cf 1f 90 7c e1 1d 9e d9 e1 b5 62 8a 29 a6 98 62 8a 89 39 ec a0 ce 79 46 98 62 96 45 9a 1b 16 99 65 8a 11 ce 51 67 07 16 97 11 4f 99 06 13 2c a1 4d 2c 71 83 63 94 f3 17 b0 8b 61 16 51 a0 3f b9 c0 53 f9 09 78 9c 8b ac a0 47 b4 cc 30 5d 79 08 18 60 1e 6d d1 1c 47 b3 0d a8 f2 31 da a6 0f a9 64 15 d0 cb 6d 14 c1 2d 6a 59 04 ec 63 0e 45 32 c3 de b4 03 f6 f1 07 Data Ascii: PNGIHDR``HIDATxket!<x,R^TJ{@)*TriRYDxR"MBT1Hl"ei3oa\|b)b9yFbEeQgO,M,qcaQ?SxG0]y`mG1dm-jYcE2
2024-05-27 22:43:58 UTC	110	IN	Data Raw: a2 87 b8 4b 37 96 f7 00 e3 10 f7 d1 03 dc e7 10 e6 10 e0 60 30 fc 1a 59 3e 03 8c ab a8 cd 55 ec ff 14 50 6d fb ec 32 4d d5 2b c0 4b ed 3f 5f 50 7f a1 1b f3 61 f8 39 c0 0a 42 ac b0 1f f3 62 78 1a a0 b5 e1 18 e6 c7 f0 35 c4 20 e6 c9 f0 57 04 14 01 45 40 11 50 04 e4 d7 bf 0c 12 9d 3f 2e 75 80 fd 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: K7`0Y>UPm2M+K?_Pa9Bbx5 WE@P?.uIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50520	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:57 UTC	553	OUT	GET /j0mZxqPUZ28oopliF6vSV0okYdXUPZH__5C5_4zuI1eNoLd-JFgAFWu4oPFvxTguMH_lihh76znHXocGuTuDGVtlaryO0cLZSNPVMA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:58 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 520 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:00:25 GMT Expires: Tue, 28 May 2024 19:00:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 13412 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:58 UTC	520	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 01 cf 49 44 41 54 78 01 ed d4 25 b4 54 71 18 04 70 3c 2f 11 77 d2 f6 b3 19 87 de 20 e1 56 90 69 b8 c4 4d 68 af 58 c3 e5 b9 bf f6 f0 ce b6 8d eb bb 1f ee f7 2e 76 e7 2f 9c 99 79 ae f3 bb 36 4d 51 14 45 51 94 ff 31 98 8e bd 98 44 fd 5d 27 df 7d 34 3d b6 f9 0b d0 03 fb a6 4f 30 3f aa a3 ff 79 fe 77 84 e9 f1 00 f6 c2 12 ba 37 1e c0 64 22 60 32 1e 40 3d 11 50 8f 07 60 c9 15 c0 4d b0 38 0d 80 c5 a1 4f 5f 84 c3 18 41 27 15 d0 c1 08 0e 63 51 98 e3 57 e0 7a c2 f4 64 c6 75 ac 08 6b 7c 0e c5 94 27 4f 5a eb 28 22 17 ca fc 02 4a b0 bf 68 09 85 10 e6 6f 43 0d f6 97 ad 61 ab ef f9 67 60 ff d8 33 3e e7 1f 84 65 d0 03 be e6 af 43 33 13 40 13 6b fd 3c 36 cb b0 8c 5a f6 Data Ascii: PNGIHDR``HIDATx%Tqp</w ViMhX.v/y6MQEQ1D]'}4=O0?yw7d"`2@=P`M8O_A'cQWzduk\|'OZ("JhoCag`3>eC3@k<6Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50525	216.58.212.174	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:57 UTC	510	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:58 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Mon, 27 May 2024 22:43:58 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:58 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-27 22:43:58 UTC	459	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50521	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:57 UTC	554	OUT	GET /Pk8YenR3VOTvN9iNHAGWp3pWYZiaYMXXWUkfAjt_LMrf222t9zn815V-GfMRJ1Hjgq7l2k1KiQmxCw5d687WTfIPgwjVfGvoHaSwRDI=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:58 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 412 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:50:53 GMT Expires: Tue, 28 May 2024 20:50:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 6785 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:58 UTC	412	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 01 63 49 44 41 54 78 01 ed da 4f 4e c2 50 14 85 f1 ce ec 46 4c 43 0c a9 9b 3b 0b 31 80 6d 5c 04 04 16 a0 ac c1 01 84 4d 88 a6 90 b4 fe e9 75 fe 42 bc 6f 44 cf b3 e7 7c e3 67 fa 9b a8 83 9b 69 9a a6 69 9a a6 69 9a a6 85 c3 3d 2a 1c d0 c1 06 ae c3 01 15 4a 64 97 cb 70 a9 1c 4f e8 61 44 f5 a8 91 c7 02 72 bc c0 08 db 22 8f 03 3c c2 48 ab 62 00 77 e8 69 01 3d 4a 1f f0 00 23 6e e1 03 5e a9 01 7b 1f f0 41 0d 68 7d 40 1b 3c c9 06 2e 20 f8 80 8e 03 20 80 00 16 34 1a 80 00 9f e3 05 4c b0 c1 19 16 17 1f 60 82 f7 e0 65 62 80 0d 2c 6d c0 39 75 80 b1 00 be 38 00 02 08 e0 bf 10 e0 9f 02 be 05 f8 bb 13 d6 28 e8 01 4e 47 14 69 03 0c ab d4 01 0d 1f e0 c4 f2 87 ec 27 7c Data Ascii: PNGIHDR``HcIDATxONPFLC;1m\MuBoD\|giii=*JdpOaDr"<Hbwi=J#n^{Ah}@<. 4L`eb,m9u8(NGi'\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50522	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:57 UTC	553	OUT	GET /74XPOHU13QOcbSmQ1FLoo3-PVADcFd7VvpkxBIMoJLqL0BZcjIx4bq8dULTExjuoh6vhLDgxmBiZU9UCSIGt08XMkl8HAE23jNa4jg=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:58 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 842 X-XSS-Protection: 0 Date: Mon, 27 May 2024 18:44:14 GMT Expires: Tue, 28 May 2024 18:44:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 14384 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:58 UTC	842	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 03 11 49 44 41 54 78 01 ed 98 d1 4a 54 51 18 85 3f 77 e1 80 97 39 3e 80 48 75 51 94 58 3a 34 0a f5 10 bd 8a 0f d5 5d 8f e0 85 83 ce 99 c9 9a b0 32 a3 22 2a b4 2b 45 49 13 cb e9 2a 10 17 3f 9d e1 3f c7 ed 86 bd f6 dd c1 b9 f8 66 af 75 5c 6b 02 89 2b 03 c4 53 06 c8 00 19 20 03 64 80 0c 90 01 96 5b cb c3 0b e7 de 32 97 79 82 ef e3 b4 84 69 21 2d 0b c5 05 c8 00 4d 66 e4 d9 1d 26 d2 01 58 40 75 9d b9 74 00 5a 36 56 22 37 10 15 20 03 dc e4 06 2a 98 a6 99 06 40 0b 4b f3 c9 01 44 30 51 06 68 70 3f 6d 0b cd 32 8e a5 29 a6 e3 01 f8 0d 64 99 28 03 64 00 e9 a1 b6 e6 b8 16 01 c0 51 22 7e 70 c2 79 4d 70 37 2d 80 35 06 71 5e a5 a1 a2 04 74 29 04 31 a9 1b 48 0b 40 7a Data Ascii: PNGIHDR``HIDATxJTQ?w9>HuQX:4]2"+EI??fu\k+S d[2yi!-Mf&X@utZ6V"7 *@KD0Qhp?m2)d(dQ"~pyMp7-5q^t)1H@z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50523	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:57 UTC	554	OUT	GET /kM_wE3H68SPU_s7ClGAbOFWwY6UN82x0QF1LFEDlKvWVK82KEzX9b-UQfPorWw9iML0LkzZy3KEJRyj-BPL9MhMfq9kU4qHtPbADuS0=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:58 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 329 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:00:25 GMT Expires: Tue, 28 May 2024 19:00:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 13413 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:58 UTC	329	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 01 10 49 44 41 54 78 01 ed da 4f 4a c3 40 18 86 f1 ec cc 5d a4 c4 cb bd 07 91 b4 26 78 18 ed 19 5c b4 e4 18 ee 12 ff cc b8 1f 0a df 20 c2 bc 91 e7 7d 76 81 40 7e 9b 42 e1 eb 18 63 8c 31 c6 18 63 ac 9c 1e 34 69 d1 a6 dc b8 4d 8b 26 0d ea 6e 77 fb 71 af 67 25 65 a3 92 66 f5 b5 80 5e af ca 86 9d d5 d7 01 9e 94 4d 9b 6a 00 f7 4a b6 80 a4 21 06 3c 2a 1b 77 8a 01 6f d6 80 6b 0c 78 b7 06 ac 31 60 2d 5e e9 1a 57 12 42 c0 06 00 00 00 00 4d 01 1f ff 00 60 1d 00 00 41 00 3e 01 00 00 d0 34 00 5f 00 00 00 d8 39 60 ef 7f 68 be 01 00 00 00 a0 29 20 35 05 00 00 00 00 40 06 f0 fb 00 00 00 00 00 00 00 00 db de 0f 9e 16 6b c0 25 06 4c d6 80 31 06 0c d6 67 97 87 18 d0 69 Data Ascii: PNGIHDR``HIDATxOJ@]&x\ }v@~Bc1c4iM&nwqg%ef^MjJ!<*wokx1`-^WBM`A>4_9`h) 5@k%L1gi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50527	216.239.32.29	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:58 UTC	518	OUT	GET /favicon.ico HTTP/1.1 Host: about.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1670225768.1716849819; _gid=GA1.2.36880739.1716849821; _gat_UA-69658807-1=1; _gat_UA-69658807-2=1; _ga_YGRLMNPG7B=GS1.1.1716849819.1.1.1716849824.0.0.0
2024-05-27 22:43:58 UTC	864	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/x-icon Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/about_google" Report-To: {"group":"uxe-owners-acl/about_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/about_google"}]} Content-Length: 5430 Date: Mon, 27 May 2024 22:43:58 GMT Expires: Mon, 27 May 2024 22:43:58 GMT Cache-Control: private, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:58 UTC	526	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-05-27 22:43:58 UTC	1390	IN	Data Raw: fd fd fd fa ff ff ff ff 0a bd fb ff 05 bc fb ff b5 eb fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd Data Ascii: BBBBBuBBBBB{5k7R8F
2024-05-27 22:43:58 UTC	1390	IN	Data Raw: 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 Data Ascii: 4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S4V7S4S4S4S4S4S4S4S4S4S
2024-05-27 22:43:58 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c5 a5 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd ed ff ff ff ff ff ff ff ff ff ff ff ff 1c c2 fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 59 d3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBYBBBBBBBBBBBF!
2024-05-27 22:43:58 UTC	734	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff e4 e6 fc ff 9e a5 f5 ff 6a 74 f0 ff 48 55 ec ff 38 46 ea ff 37 45 ea ff 46 53 ec ff 68 72 ef ff 9a a1 f5 ff e2 e4 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea ff ff ff 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd Data Ascii: jtHU8F7EFShr0&$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50528	142.250.185.142	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:58 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:43:58 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:43:58 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:58 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:43:58 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50529	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:58 UTC	553	OUT	GET /Amr8tRBfd1Uk8zYm779hnSCwMzArp3LGD1LUhcgPdCOIk0UJczmdKLa42Apx-wzQdrUnsATBiFsyHT5pVit9Al6PwfVewM09FnlwAA=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:59 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 619 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:03:02 GMT Expires: Tue, 28 May 2024 19:03:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 13256 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:59 UTC	619	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 04 00 00 00 48 91 bf b3 00 00 02 32 49 44 41 54 78 01 ed 9a 25 90 1d 41 10 86 8f 51 3f 19 8e 39 f0 f5 62 2f 3e e4 f5 a1 0a 7c e1 23 2f 43 eb 2b ec 5d 68 e3 5d d6 1c a8 70 ec 31 df e4 d9 59 a6 ec cc a6 ba 7f bb dd f5 7f 55 3d 54 db 6d 12 e5 87 84 04 e7 b8 c1 4b 5c 56 d8 68 69 05 97 97 dc e0 6c 1d ac 37 58 c4 43 45 c8 63 91 86 bd e6 07 99 63 1d 95 a0 75 e6 18 b4 d1 fe 35 fe a0 52 ea 37 57 ed 32 df ce 3c c7 a8 0c 3a 6e 65 b4 db 62 bf 9f b7 a8 1c 7a 4b bf 1d 00 6f 51 39 f5 c6 06 fb b3 91 f6 be e1 f2 a2 25 97 6f 91 df 3c 34 6d ff 72 68 ef ff e2 3e c3 da 77 c3 dc e7 57 e8 5a b8 6c 76 e3 0c 9a da 65 96 81 d0 af 07 98 65 37 04 76 c0 a6 f6 f9 4d 33 36 e3 02 bf ad 69 23 1a ac 07 ec 9f 4c cc Data Ascii: PNGIHDR``H2IDATx%AQ?9b/>\|#/C+]h]p1YU=TmK\Vhil7XCEccu5R7W2<:nebzKoQ9%o<4mrh>wWZlvee7vM36i#L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50530	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:58 UTC	553	OUT	GET /yVza5ypuHARE9HM428UC5saP-tI464PBXi6dLU_i81n57apWG6zIj2GHBnAGalxjdNDDD1Pd9EkoVyu-Uh1zdsfd5LcOYIb4ZKB-Ag=h120 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:59 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 117 X-XSS-Protection: 0 Date: Mon, 27 May 2024 20:50:53 GMT Expires: Tue, 28 May 2024 20:50:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 6786 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:59 UTC	117	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 01 03 00 00 00 d8 56 e5 7b 00 00 00 06 50 4c 54 45 00 00 00 75 75 75 85 7a 1b 74 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 1d 49 44 41 54 78 01 63 a0 23 18 05 fc 1f f8 ff 83 c1 07 5a 72 20 60 d4 3f a3 fe 19 05 00 b0 07 bf 41 90 9a 27 1f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR``V{PLTEuuuzttRNS@fIDATxc#Zr `?A'IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50532	216.58.212.174	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:58 UTC	510	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:59 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Mon, 27 May 2024 22:43:59 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:59 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-27 22:43:59 UTC	459	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50531	142.250.186.161	443	5316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:43:58 UTC	588	OUT	GET /viBN3SXlX2ACEJsf7pd1Ud4Y2-YcsXer3nwbHVaJ9u8L7-R3x0BJWyQuDN22YPj9Bcv18a7qf_qU6-ciR-DE2eYv6_UHGzTi7OgWlLBs-wYATVRAar6p=w1440-l80-sg-rj-c0xffffff HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:43:59 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 44240 X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:33:02 GMT Expires: Tue, 28 May 2024 19:33:02 GMT Cache-Control: public, max-age=86400, no-transform Age: 11457 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:43:59 UTC	856	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 04 05 08 08 08 08 08 08 08 08 08 08 08 08 08 07 07 07 07 08 08 07 07 07 07 0d 08 0d 0d 0d 08 0a 0a 0e 11 19 13 0e 0f 17 10 0a 0a 15 20 15 17 1a 1b 1d 1e 1d 0d 13 21 25 21 1d 25 19 1d 1d 1d 01 07 07 07 0a 09 0a 0d 0a 0a 0f 1d 0e 0d 0e 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 28 1d 1d 1d 28 28 28 28 1d 1d 28 1d 1d 28 1d 28 1d 28 ff c0 00 11 08 03 27 05 a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 03 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 3e 10 00 02 02 01 02 03 06 03 07 04 01 03 04 02 03 00 00 01 02 11 03 04 21 05 12 31 06 13 41 51 61 71 22 32 b1 07 14 52 72 81 91 a1 15 23 42 b2 c1 Data Ascii: JFIF !%!%((((((((('">!1AQaq"2Rr#B
2024-05-27 22:43:59 UTC	1390	IN	Data Raw: f5 25 23 4c 6b 75 ee be a0 7f 3b e5 f9 a5 f9 9f d4 92 f2 fc d2 fc d2 fa 90 46 c0 05 00 0a c0 00 07 13 68 2b 32 46 f8 c5 1a 41 1d 7a 17 59 21 ee 8e 68 9b 60 75 38 3f 54 65 5f 59 3f 90 f9 ee 26 ba 9f 41 1d f1 a7 e8 be 87 87 c5 23 b3 2e c7 cc 67 ea 73 48 ec d4 f5 39 26 45 64 c4 53 24 32 00 00 00 00 00 00 00 00 4c 62 60 20 00 28 00 00 00 00 00 00 00 04 03 00 10 0c 00 40 30 01 00 30 20 00 00 00 00 00 00 10 c0 43 06 00 00 00 50 00 00 00 00 00 00 00 00 00 00 00 0d 00 00 c0 80 00 00 00 00 00 00 a0 48 06 3a 18 c2 90 c0 01 00 00 00 00 00 00 00 50 00 d0 21 80 ca 88 91 48 0f a1 e0 79 37 48 fd 07 84 3b 48 fc d7 81 ba 94 4f d1 f8 1b b4 8b 12 be bb 41 d0 f6 71 74 47 89 a0 67 b7 83 a1 59 69 45 50 d2 2a 80 8a 0a 2a 87 41 12 d1 2d 1a 50 9a 03 16 88 68 dd a3 36 82 b2 68 96 Data Ascii: %#Lku;Fh+2FAzY!h`u8?Te_Y?&A#.gsH9&EdS$2Lb` (@00 CPH:P!Hy7H;HOAqtGgYiEP**A-Ph6h
2024-05-27 22:43:59 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 01 01 03 01 00 0c 40 00 00 00 00 00 00 00 00 00 86 08 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 08 00 00 01 a1 82 00 b0 50 98 c0 04 08 06 90 45 0d 08 a4 14 0c 06 15 20 30 01 0c 60 04 8d 0c 69 00 24 30 1d 00 8a 88 a8 69 81 e9 f0 79 7c 68 fd 1f 81 bf 85 7a 9f 9a f0 a7 f1 9f a3 f0 07 f0 a2 a5 7d b7 0c 5b 2f 73 de c0 b6 47 85 c3 7a 1e f6 0e 88 ac 56 e9 01 40 56 76 49 0e 86 00 89 a2 64 8d 28 4d 04 63 24 62 d1 d1 24 63 24 1a 8c 24 8c a5 13 a6 48 ca 48 8a e5 9c 4e 7c 91 3b 64 8c 26 80 e0 9c 4c 9c 4e c9 c4 cb 90 a8 c7 94 d6 11 29 40 d2 11 f4 08 70 89 d3 08 93 8e 07 44 22 14 e3 13 68 c4 22 bc cf 2f 8d 76 87 47 a0 83 96 5c b1 e6 ad a0 9a 72 6f d8 86 d5 da 68 de 8b 3d fe 06 7f 36 6b 95 e4 9a ff 00 ba 5b fe a7 Data Ascii: @(PE 0`i$0iy\|hz}[/sGzV@VvId(Mc$b$c$$HHN\|;d&LN)@pD"h"/vG\roh=6k[
2024-05-27 22:43:59 UTC	1390	IN	Data Raw: 00 00 14 87 42 45 20 80 60 01 a0 00 34 10 86 80 6b 76 80 f7 f8 16 3b 92 3f 45 e1 10 da 27 c0 76 7a 3f 12 3f 47 e0 f0 b4 8b 19 af a9 e1 91 d9 1e de 15 b1 e5 70 e8 d2 3d 8c 4b 63 4c 56 88 68 12 28 8c 90 c2 86 02 0a 18 c0 86 88 68 d6 84 d1 46 0d 19 ca 27 43 44 b8 85 72 ca 24 72 9d 2e 04 b8 83 6e 67 02 5c 0e 87 11 72 85 db 9d c0 e3 e3 3c 43 1e 8b 04 b3 4d a4 92 75 eb 2f 24 7a 4e 34 ad ec 92 b7 7e 47 e3 df 68 fc 6f ef 59 fe ef 8d ff 00 6f 13 69 d7 46 c8 cd af 9c ed 27 16 c9 ae cf 2c 93 93 e5 72 7c 91 bd 94 6c f2 9a 4d 14 e2 db af 1a 2f 1e 37 b6 dd 5d 0b 59 72 38 5c 8d 27 81 72 b7 e4 77 e3 d1 39 5b ad d1 d7 83 87 4a 58 df c3 b5 f9 1c ae 5a 6e 63 b7 87 dc bd af a1 e8 f0 4d 2f 36 aa 11 e5 6e 3b b7 b7 85 1e ca e0 d2 a8 7c 3e 5e 07 a9 c3 f8 5b 8e 5e 64 ab e1 7f 42 Data Ascii: BE `4kv;?E'vz??Gp=KcLVh(hF'CDr$r.ng\r<CMu/$zN4~GhoYoiF',r\|lM/7]Yr8\'rw9[JXZncM/6n;\|>^[^dB
2024-05-27 22:43:59 UTC	1390	IN	Data Raw: 04 3a 01 00 e8 60 09 14 90 91 68 04 3a 01 80 d2 04 81 14 50 21 a1 22 80 68 62 43 08 07 42 18 05 15 0e ab dd 7d 44 54 3a af 75 f5 0a fe 64 cb f3 4b f3 3f a9 05 e5 f9 a5 f9 9f d4 82 b4 00 00 00 00 00 0a 44 8d 12 8d f0 bd 8e a8 b3 97 17 43 a2 24 6a 37 c0 fe 25 ee 8f ac c5 bc 17 95 1f 20 8f aa d0 3b c5 1f 60 b5 e7 f1 53 e6 35 5d 5a 3e ab 8a 46 ec f9 7d 62 f8 83 0e 19 19 48 da 48 c6 41 59 b0 1b 10 40 00 00 26 21 b1 14 00 00 00 21 88 00 00 08 00 00 00 00 00 00 00 00 04 03 40 00 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 08 68 06 00 04 00 00 00 00 00 0d 00 00 00 00 00 00 00 14 86 24 30 aa 43 42 43 40 03 40 8a 0a 00 00 20 1a 11 49 06 8c a4 84 91 48 06 00 3d 80 54 03 d8 40 0c d3 4f d5 19 9d 3a 38 27 25 b8 47 da f6 6e 2d 28 9f a1 f0 94 f6 3e 23 b3 b8 7e Data Ascii: :`h:P!"hbCB}DT:udK?DC$j7% ;`S5]Z>F}bHHAY@&!!@Ph$0CBC@@ IH=T@O:8'%Gn-(>#~
2024-05-27 22:43:59 UTC	1390	IN	Data Raw: 00 04 01 40 30 01 50 21 80 00 50 e8 0a 0a 01 a4 3a 01 58 d0 24 55 00 8b 88 92 29 04 d1 a1 d0 86 82 e8 d0 c1 0e 8a 10 d0 0c 06 90 c1 02 00 1c 7a af 75 f5 12 2a 0b 75 ee be a0 7f 2f cf e7 97 e6 97 fb 08 32 7c f2 fc d2 fa 82 65 50 03 10 00 00 00 0d 08 2c 0d f1 9d 98 51 c1 06 7a 9a 18 74 b3 35 ac 66 db 42 16 7b fc 02 3f 03 5e a7 9b 1c 6a ba 1e b7 04 db 9b dc 9b 6a c7 46 bb 16 cc f9 9e 25 8a af f5 3e af 5a 7c df 12 5b bf d4 ac be 5f 2a dd 9c f3 47 66 a5 6e ce 39 84 64 d1 2c b6 43 08 40 0c 00 04 31 30 10 00 14 00 00 00 00 00 26 03 62 20 00 00 00 00 00 06 21 94 00 00 00 00 00 00 00 00 00 00 05 08 64 00 00 00 00 00 00 d0 0d 05 81 88 60 0d 10 31 80 34 40 30 60 d1 00 00 40 00 00 03 88 8a 40 30 01 a0 a6 8a 12 18 50 38 82 18 01 48 92 d0 0e 25 13 11 85 52 01 0d 01 48 Data Ascii: @0P!P:X$U)zuu/2\|eP,Qzt5fB{?^jjF%>Z\|[_Gfn9d,C@10&b !d`14@0`@@0P8H%RH
2024-05-27 22:43:59 UTC	1390	IN	Data Raw: 59 31 68 34 b1 a5 c8 9a 5e 2d 1e 27 11 e2 b8 37 e5 6b f7 41 2e 3a 7c 9e ad 65 c3 b4 ee 4b cd 9c 91 a9 1e 8e bb 58 b2 5a d9 9e 76 38 af 03 d1 8b cd 9f b6 3a a8 7c 2c f9 cc ea 9b 3e af 34 6e 2f d8 f9 7d 62 a9 3f d4 ef 8d 70 cf 17 3e 3f 99 1f 6f d9 fe 3b 93 44 b1 ae f1 f2 b6 b9 95 de c7 c5 e9 97 c4 77 62 c7 29 4d 75 eb b7 a1 bb 93 9c c5 fd 03 a0 d6 2c f8 61 91 74 92 46 ce 67 ce 76 33 2b 7a 48 c6 5b b4 a8 f7 5c 83 2d b9 86 a4 73 f3 0e 32 03 a5 48 39 8c 94 87 64 1a d9 69 98 a6 5a 61 5a 94 42 2d 00 d2 06 86 80 08 64 b2 d9 24 12 00 c0 04 c0 6c 90 01 a4 03 45 09 a2 5a 2c 4c 0c d8 91 4c 40 4b 13 45 01 04 d0 51 48 40 2a 0a 18 15 08 06 14 02 00 00 a0 40 00 26 14 3a 04 8a 85 43 a1 8c 04 90 d0 00 00 c0 60 24 34 24 34 05 22 a8 94 50 05 0c 06 8a 01 a0 48 60 03 42 18 43 Data Ascii: Y1h4^-'7kA.:\|eKXZv8:\|,>4n/}b?p>?o;Dwb)Mu,atFgv3+zH[\-s2H9diZaZB-d$lEZ,LL@KEQH@*@&:C`$4$4"PH`BC
2024-05-27 22:43:59 UTC	1390	IN	Data Raw: 30 1a 2d 13 12 d0 45 c5 0c 10 c3 40 00 40 4b 06 0c 4c 2a 64 22 99 24 68 ca 89 25 44 95 b8 da 27 4e 2f 03 9a 27 46 36 73 ae 91 db 8c e8 81 86 23 a2 24 6a 83 db e0 3f 32 3c 5a 3d be 06 aa 48 47 3c df a1 f0 3e 8b f4 3e c3 42 7c 7f 04 f0 f6 47 d8 e8 7c 0e d8 3c 99 bd 7c 5d 0b 32 c4 fe a6 a6 9c 80 00 00 c1 85 81 40 98 ec 90 20 00 00 0a b1 58 84 ca 2a c9 72 13 64 36 03 94 8f 91 ed d6 8b 26 a3 0a 78 ef 9a 2f a2 d8 fa 99 c8 e1 d6 fc 50 68 e3 cb 3f e2 f4 7c 7c b5 93 f0 fe 39 c1 f5 18 5c 72 64 83 df ab 8e e8 fa ce c3 4a e0 bd 3f f9 3e bb 8a e9 31 e5 c5 53 85 ae 57 7b 74 d8 f9 2e c9 c1 62 d4 e7 c4 93 51 53 7c a9 f9 1e 49 9e e6 ab df 70 9b dc 7d ac 71 c9 c7 6f 13 c1 e2 fc 37 2c ed be 6d ae 92 ba 3e af 44 95 53 3b b2 69 e3 35 55 d4 e1 63 d3 23 f2 6f fa 4f 3e a2 77 93 Data Ascii: 0-E@@KLd"$h%D'N/'F6s#$j?2<Z=HG<>>B\|G\|<\|]2@ Xrd6&x/Ph?\|\|9\rdJ?>1SW{t.bQS\|Ip}qo7,m>DS;i5Uc#oO>w
2024-05-27 22:43:59 UTC	1390	IN	Data Raw: 17 06 15 d7 06 74 41 9c 71 91 bc 66 45 75 c6 46 8a 47 34 26 6b 16 06 a9 95 66 69 95 60 5a 63 b2 13 1d 81 56 84 2b 00 10 0e 80 04 21 83 28 86 22 98 80 40 00 c0 90 00 08 00 00 00 00 68 09 62 29 8a 82 a4 07 43 a2 09 18 01 40 00 01 0c 62 a1 80 00 50 e8 04 8a 12 43 01 8c 48 65 0c 68 43 40 58 02 15 81 43 10 01 43 10 ca 02 a1 d5 7b a1 0e 1d 57 ba fa 96 25 7f 2d 65 f9 a5 f9 a5 f5 24 ac bf 34 bf 34 be a4 11 a0 02 00 18 31 01 00 00 00 6b 86 54 fd 0f 53 4e cf 22 0f 73 bf 4f 33 37 cb a7 1d d5 7b 58 19 d9 88 f3 34 f2 3d 0c 12 3c b9 4f 2f 76 37 6e d8 46 d1 86 58 d5 9d 7a 45 cd b1 1a bc 6d 1c f4 eb ed e5 ce 27 1e 74 77 c8 e3 ce 8e f8 57 0c e3 ce cc 8e 49 23 bb 34 4e 49 a3 bc 78 f2 9a ae 69 a3 29 23 79 a3 29 22 b9 b2 64 33 49 10 c0 91 0c 18 08 00 00 09 28 92 80 00 00 00 Data Ascii: tAqfEuFG4&kfi`ZcV+!("@hb)C@bPCHehC@XCC{W%-e$441kTSN"sO37{X4=<O/v7nFXzEm'twWI#4NIxi)#y)"d3I(
2024-05-27 22:43:59 UTC	1390	IN	Data Raw: f9 5d ae 6e a4 73 01 9c b1 db 58 e5 a6 cf 2f 7b 91 ca 94 6e a9 2e 88 e7 d4 a6 6b 85 d4 91 be 4c 77 d4 f9 fc b8 ea be af 06 7b 91 f3 5c 43 9e 99 f1 9c 5e 52 e6 8e 3f 19 4a b7 f7 3f 50 c9 a3 53 f0 3e 43 b4 7c 25 ad 5e 0d b6 e6 38 bd 93 27 d1 f6 4b 4d 8f 4d 86 3b ae 69 24 db f1 b3 e8 65 aa 84 b6 72 4f c0 fc df b4 5a dd 4e 86 31 50 4d 2a de 7b ec 8f 0b 49 da 0d 5c e5 6a 6d bf 2f 33 5d 77 19 ff 00 6f d6 f5 7c 33 4b aa 49 4d 2b f3 3c de 21 d8 e8 4a 0f ba e4 e9 e2 78 9c 3f 5d af 58 7b f9 61 94 b1 a7 ca e5 1b 6d 3f 54 6f 3e 3f a8 4e 2a 58 f2 c5 4b e5 da 49 32 e8 dc fe bc 1e 23 d8 7c f6 db c9 08 c7 7b 38 61 d9 ec 18 76 94 b9 e5 e6 8f a5 d7 f1 3c c9 54 b1 65 4d ec ad 3d cf 1b 59 c3 b8 8e 58 b9 e3 c5 35 1e bb ec cd e3 58 ca e3 fb 71 e5 cf 83 4e 9e c9 3f e7 6f fe cf Data Ascii: ]nsX/{n.kLw{\C^R?J?PS>C\|%^8'KMM;i$erOZN1PM{I\jm/3]wo\|3KIM+<!Jx?]X{am?To>?NXKI2#\|{8av<TeM=YX5XqN?o

Session ID	Source IP	Source Port	Destination IP	Destination Port
534	192.168.2.4	50535	142.250.185.142	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:44:01 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=a2X1Mma4HjtUd4Z1o9Wem_4aj7jg5ZWZO728VQJBMhkl35Ar2plnAxwxgzXVmIBeRdJw1rO4J62jrLEKNsLecsmBu4EgcX4qzQ1oifrWGO9HJ2TfigzOBToFXR74_No7haQDSlFF_zB6ac6QVvKhRELAcj5vdk9uxMHTLpIZcToQ7uZbnbzuLCCYPHgd
2024-05-27 22:44:02 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 27 May 2024 22:44:02 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 22:44:02 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-27 22:44:02 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Target ID:	0
Start time:	18:42:12
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:42:15
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:42:17
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	18:42:47
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5720 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	18:42:47
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5928 --field-trial-handle=2300,i,16207574730024584653,379537384193625431,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Windows Analysis Report
http://login-vip.replit.app/vip/36c63962-0335-4720-9855-3e324d0acc58