Edit tour

Windows Analysis Report
https://online.systems.com.pk/

Overview

General Information

Sample URL:	https://online.systems.com.pk/
Analysis ID:	1448256
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://online.systems.com.pk/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6256 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1932,i,11302382915843023677,13515464872013767238,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /gen_204?s=webhp&t=cap&atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&rt=wsrt.5175,cbt.92,hst.91&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"Content-Type: text/plain;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.google.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY

Source: chromecache_85.1.dr	String found in binary or memory: http://schema.org/WebPage
Source: chromecache_101.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_106.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_106.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_75.1.dr	String found in binary or memory: https://accounts.google.com/signin/v2/identifier%3Fec%3Dfutura_hpp_co_si_001_p%26continue%3Dhttps%25
Source: chromecache_106.1.dr, chromecache_101.1.dr, chromecache_85.1.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_88.1.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_106.1.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_96.1.dr	String found in binary or memory: https://content-push.googleapis.com/upload/
Source: chromecache_106.1.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_106.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_106.1.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_96.1.dr	String found in binary or memory: https://embeddedassistant-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAssistant/A
Source: chromecache_101.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_101.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_101.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_101.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_104.1.dr	String found in binary or memory: https://lens.google.com
Source: chromecache_96.1.dr	String found in binary or memory: https://lens.google.com/gen204
Source: chromecache_75.1.dr	String found in binary or memory: https://ogs.google.com/
Source: chromecache_85.1.dr	String found in binary or memory: https://ogs.google.com/widget/app/so?awwd=1
Source: chromecache_75.1.dr	String found in binary or memory: https://ogs.google.com/widget/callout
Source: chromecache_85.1.dr	String found in binary or memory: https://ogs.google.com/widget/callout?prid=19037050
Source: chromecache_101.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_106.1.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_106.1.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_96.1.dr	String found in binary or memory: https://push.clients6.google.com/upload/
Source: chromecache_75.1.dr	String found in binary or memory: https://ssl.gstatic.com
Source: chromecache_100.1.dr, chromecache_82.1.dr	String found in binary or memory: https://ssl.gstatic.com/images/icons/material/system/1x/done_black_16dp.png)
Source: chromecache_100.1.dr, chromecache_82.1.dr	String found in binary or memory: https://ssl.gstatic.com/ui/v1/menu/checkmark2.png)
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_104.1.dr	String found in binary or memory: https://support.google.com/websearch/answer/106230
Source: chromecache_104.1.dr, chromecache_88.1.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_106.1.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_75.1.dr, chromecache_101.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_75.1.dr	String found in binary or memory: https://www.google.com"
Source: chromecache_85.1.dr	String found in binary or memory: https://www.google.com/_/og/promos/
Source: chromecache_75.1.dr	String found in binary or memory: https://www.google.com/images/hpp/ic_wahlberg_product_core_48.png8.png
Source: chromecache_85.1.dr	String found in binary or memory: https://www.google.com/intl/en/about/products
Source: chromecache_104.1.dr, chromecache_88.1.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_96.1.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_75.1.dr	String found in binary or memory: https://www.google.com/url?q
Source: chromecache_85.1.dr	String found in binary or memory: https://www.google.com/url?q=https://accounts.google.com/signin/v2/identifier%3Fec%3Dfutura_hpp_co_s
Source: chromecache_106.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_106.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_75.1.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_75.1.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.X28eeWTCBCg.
Source: chromecache_101.1.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_101.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_101.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_101.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_101.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_85.1.dr	String found in binary or memory: https://www.gstatic.com/og/_/js/k=og.qtm.en_US.s-_8OiN4zAs.2019.O/rt=j/m=qabr
Source: chromecache_85.1.dr	String found in binary or memory: https://www.gstatic.com/og/_/ss/k=og.qtm._yk4Kx1DLwg.L.W.O/m=qcwid/excm=qaaw
Source: chromecache_96.1.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49769 version: TLS 1.2

Source: classification engine

Classification label: mal64.win@15/64@20/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://online.systems.com.pk/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1932,i,11302382915843023677,13515464872013767238,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1932,i,11302382915843023677,13515464872013767238,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://online.systems.com.pk/	0%	Avira URL Cloud	safe
https://online.systems.com.pk/	7%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	0%	URL Reputation	safe
https://ogs.google.com/	0%	URL Reputation	safe
https://ogs.google.com/	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
https://ogs.google.com/widget/app/so?awwd=1	0%	URL Reputation	safe
https://lens.google.com	0%	URL Reputation	safe
https://ogs.google.com/widget/callout	0%	URL Reputation	safe
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	0%	URL Reputation	safe
http://schema.org/WebPage	0%	URL Reputation	safe
https://lens.google.com/gen204	0%	URL Reputation	safe
https://support.google.com/	0%	URL Reputation	safe
https://csp.withgoogle.com/csp/lcreport/	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
https://www.google.com/gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=jsa&jsi=hd,st.24086,tni.0,atni.1,et.click,n.vZr2rb,cn.2,ie.0,vi.1&zx=1716870978798&opi=89978449	0%	Avira URL Cloud	safe
https://domains.google.com/suggest/flow	0%	URL Reputation	safe
https://be-isabel-6-eu-online.com/	100%	Avira URL Cloud	phishing
https://support.google.com/websearch/answer/106230	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://www.google.com/client_204?atyp=i&biw=1280&bih=907&ei=MF9VZorPINzq7_UPwf2YoA4&opi=89978449	0%	Avira URL Cloud	safe
https://plus.google.com	0%	URL Reputation	safe
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	0%	URL Reputation	safe
https://www.google.com/intl/en/about/products	0%	Avira URL Cloud	safe
https://ogs.google.com/widget/callout?prid=19037050	0%	URL Reputation	safe
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0	0%	URL Reputation	safe
https://www.google.com/xjs/_/js/md=3/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=kMFpHd,sy8x,bm51tf?xjs=s3	0%	Avira URL Cloud	safe
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=MF9VZorPINzq7_UPwf2YoA4.1716870962202&dpr=1&nolsbt=1	0%	Avira URL Cloud	safe
https://www.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://www.google.com/intl/en/about/products	0%	Virustotal		Browse
https://www.google.com/images/hpp/ic_wahlberg_product_core_48.png8.png	0%	Avira URL Cloud	safe
https://www.google.com	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?s=webhp&t=cap&atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&rt=wsrt.5175,cbt.92,hst.91&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png	0%	Virustotal		Browse
https://www.google.com/url?q	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=csi&ei=Nl9VZviTJduA9u8PxbKskAQ&s=async&astyp=hpba&ima=0&imn=0&mem=ujhs.6,tjhs.10,jhsl.2173,dm.8&nv=ne.1,feid.6192e56c-22dd-43d1-a29a-aec2417b2275&hp=&rt=ttfb.1874,st.1875,bs.27,aaft.1876,acrt.1877,art.1877&zx=1716870965929&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=i&ei=MF9VZorPINzq7_UPwf2YoA4&dt19=2&zx=1716870964057&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/async/hpba?vet=10ahUKEwiKp-ndwq-GAxVc9bsIHcE-BuQQj-0KCBU..i&ei=MF9VZorPINzq7_UPwf2YoA4&opi=89978449&yv=3&cs=0&async=isImageHp:false,eventId:MF9VZorPINzq7_UPwf2YoA4,_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA%2Fbr%3D1%2Frs%3DACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fck%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKQA-gkHQAGwIQgAAEAAAAAAIQAAAgAQgPcEQAigAAQCAGAAiCAAD2UCAAQyAQEQQASQBAI5CABABGMYgFQAYAAAAAACJAAAABxAwAACAyIAAh5CAAABOkEAFgAAEsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHImSEwQ9-p7fjPGqD0ykhIDf0pzg,_fmt:prog,_id:a3JU5b	0%	Avira URL Cloud	safe
https://www.google.com/log?format=json&hasfast=true	0%	Virustotal		Browse
https://www.google.com/url?q	0%	Virustotal		Browse
https://www.google.com	0%	Virustotal		Browse
https://be-isabel-6-eu-online.com/	10%	Virustotal		Browse
https://www.google.com/gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=jsa&jsi=hd,st.23579,t.0,at.1,et.click,n.vZr2rb,cn.1,ie.0,vi.1&zx=1716870978292&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/images/hpp/ic_wahlberg_product_core_48.png8.png	0%	Virustotal		Browse
https://www.google.com/xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=sy1c7,P10Owf,sypl,sy1at,sy1av,gSZvdb,syva,syvb,WlNQGd,syvo,syvq,nabPbb,sypk,sypm,sypn,sypq,DPreE,syk9,syv3,syv5,CnSW2d,kQvlef,syvp,fXO0xe?xjs=s3	0%	Avira URL Cloud	safe
https://www.google.com/tools/feedback	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/ss/k=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/d=0/br=1/rs=ACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw/m=syk9?xjs=s3	0%	Avira URL Cloud	safe
https://www.google.com/client_204?cs=1&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/_/og/promos/	0%	Avira URL Cloud	safe
https://www.google.com/favicon.ico	0%	Avira URL Cloud	safe
https://google.com/	0%	Avira URL Cloud	safe
https://www.google.com/tools/feedback	1%	Virustotal		Browse
https://google.com/	1%	Virustotal		Browse
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=MF9VZorPINzq7_UPwf2YoA4&zx=1716870967073&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=syf9,aLUfP?xjs=s3	0%	Avira URL Cloud	safe
https://www.google.com/favicon.ico	0%	Virustotal		Browse
https://www.google.com/gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=webhp&nt=navigate&t=fi&st=23478&fid=1&zx=1716870978293&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/client_204?cs=1&opi=89978449	1%	Virustotal		Browse
https://www.google.com/images/hpp/us-flag.png	0%	Avira URL Cloud	safe
https://www.google.com/_/og/promos/	0%	Virustotal		Browse
https://www.google.com/gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=promo&rt=hpbas.4166,hpbarr.1878&zx=1716870965930&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com"	0%	Avira URL Cloud	safe
https://push.clients6.google.com/upload/	0%	Avira URL Cloud	safe
https://www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/ss/k=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/d=1/ed=1/br=1/rs=ACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true	0%	Virustotal		Browse
https://www.google.com/gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=promo&rt=hpbas.4166&zx=1716870964052&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&rt=wsrt.5175,aft.2163,afti.2163,cbt.92,hst.91,prt.1158&imn=12&ima=2&imad=0&imac=1&wh=907&aft=1&aftp=907&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=webhp&t=all&imn=12&ima=2&imad=0&imac=1&wh=907&aft=1&aftp=907&adh=&ime=2&imeae=0&imeap=0&imex=2&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&imeeb=0&scp=0&mem=ujhs.6,tjhs.10,jhsl.2173,dm.8&nv=ne.1,feid.6192e56c-22dd-43d1-a29a-aec2417b2275&net=dl.1500,ect.3g,rtt.300&hp=&sys=hc.4&p=bs.true&rt=hst.91,cbt.92,prt.1158,afti.2163,aft.2163,aftqf.2164,xjses.2238,xjsee.2282,xjs.2282,lcp.1410,fcp.1162,wsrt.5175,cst.658,dnst.8,rqst.695,rspt.350,sslt.657,rqstt.4830,unt.4162,cstt.4172,dit.6344&zx=1716870962174&opi=89978449	0%	Avira URL Cloud	safe
https://clients6.google.com	0%	Avira URL Cloud	safe
https://www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp	0%	Virustotal		Browse
https://clients6.google.com	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	172.217.16.206	true	false	unknown
online.systems.com.pk	37.27.57.153	true	false	unknown
www3.l.google.com	216.58.206.78	true	false	unknown
plus.l.google.com	216.58.206.78	true	false	unknown
play.google.com	216.58.206.46	true	false	unknown
be-isabel-6-eu-online.com	91.215.85.79	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
ogs.google.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=jsa&jsi=hd,st.24086,tni.0,atni.1,et.click,n.vZr2rb,cn.2,ie.0,vi.1&zx=1716870978798&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/client_204?atyp=i&biw=1280&bih=907&ei=MF9VZorPINzq7_UPwf2YoA4&opi=89978449	false	Avira URL Cloud: safe	unknown
https://be-isabel-6-eu-online.com/	true	10%, Virustotal, Browse Avira URL Cloud: phishing	unknown
https://www.google.com/xjs/_/js/md=3/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=kMFpHd,sy8x,bm51tf?xjs=s3	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=MF9VZorPINzq7_UPwf2YoA4.1716870962202&dpr=1&nolsbt=1	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/hpp/ic_wahlberg_product_core_48.png8.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://online.systems.com.pk/	true		unknown
https://www.google.com/gen_204?s=webhp&t=cap&atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&rt=wsrt.5175,cbt.92,hst.91&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ei=MF9VZorPINzq7_UPwf2YoA4&dt19=2&zx=1716870964057&opi=89978449	false	Avira URL Cloud: safe	unknown
https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	false	URL Reputation: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=Nl9VZviTJduA9u8PxbKskAQ&s=async&astyp=hpba&ima=0&imn=0&mem=ujhs.6,tjhs.10,jhsl.2173,dm.8&nv=ne.1,feid.6192e56c-22dd-43d1-a29a-aec2417b2275&hp=&rt=ttfb.1874,st.1875,bs.27,aaft.1876,acrt.1877,art.1877&zx=1716870965929&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/async/hpba?vet=10ahUKEwiKp-ndwq-GAxVc9bsIHcE-BuQQj-0KCBU..i&ei=MF9VZorPINzq7_UPwf2YoA4&opi=89978449&yv=3&cs=0&async=isImageHp:false,eventId:MF9VZorPINzq7_UPwf2YoA4,_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA%2Fbr%3D1%2Frs%3DACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fck%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKQA-gkHQAGwIQgAAEAAAAAAIQAAAgAQgPcEQAigAAQCAGAAiCAAD2UCAAQyAQEQQASQBAI5CABABGMYgFQAYAAAAAACJAAAABxAwAACAyIAAh5CAAABOkEAFgAAEsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHImSEwQ9-p7fjPGqD0ykhIDf0pzg,_fmt:prog,_id:a3JU5b	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=jsa&jsi=hd,st.23579,t.0,at.1,et.click,n.vZr2rb,cn.1,ie.0,vi.1&zx=1716870978292&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=sy1c7,P10Owf,sypl,sy1at,sy1av,gSZvdb,syva,syvb,WlNQGd,syvo,syvq,nabPbb,sypk,sypm,sypn,sypq,DPreE,syk9,syv3,syv5,CnSW2d,kQvlef,syvp,fXO0xe?xjs=s3	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/ss/k=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/d=0/br=1/rs=ACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw/m=syk9?xjs=s3	false	Avira URL Cloud: safe	unknown
https://www.google.com/client_204?cs=1&opi=89978449	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://google.com/	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=MF9VZorPINzq7_UPwf2YoA4&zx=1716870967073&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=syf9,aLUfP?xjs=s3	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=webhp&nt=navigate&t=fi&st=23478&fid=1&zx=1716870978293&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/hpp/us-flag.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=promo&rt=hpbas.4166,hpbarr.1878&zx=1716870965930&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0	false	URL Reputation: safe	unknown
https://www.google.com/xjs/_/ss/k=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/d=1/ed=1/br=1/rs=ACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=promo&rt=hpbas.4166&zx=1716870964052&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&rt=wsrt.5175,aft.2163,afti.2163,cbt.92,hst.91,prt.1158&imn=12&ima=2&imad=0&imac=1&wh=907&aft=1&aftp=907&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/	false		unknown
https://www.google.com/gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=webhp&t=all&imn=12&ima=2&imad=0&imac=1&wh=907&aft=1&aftp=907&adh=&ime=2&imeae=0&imeap=0&imex=2&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&imeeb=0&scp=0&mem=ujhs.6,tjhs.10,jhsl.2173,dm.8&nv=ne.1,feid.6192e56c-22dd-43d1-a29a-aec2417b2275&net=dl.1500,ect.3g,rtt.300&hp=&sys=hc.4&p=bs.true&rt=hst.91,cbt.92,prt.1158,afti.2163,aft.2163,aftqf.2164,xjses.2238,xjsee.2282,xjs.2282,lcp.1410,fcp.1162,wsrt.5175,cst.658,dnst.8,rqst.695,rspt.350,sslt.657,rqstt.4830,unt.4162,cstt.4172,dit.6344&zx=1716870962174&opi=89978449	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ogs.google.com/	chromecache_75.1.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://www.broofa.com	chromecache_101.1.dr	false	URL Reputation: safe	unknown
https://ogs.google.com/widget/app/so?awwd=1	chromecache_85.1.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/en/about/products	chromecache_85.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com/log?format=json&hasfast=true	chromecache_104.1.dr, chromecache_88.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://lens.google.com	chromecache_104.1.dr	false	URL Reputation: safe	unknown
https://ogs.google.com/widget/callout	chromecache_75.1.dr	false	URL Reputation: safe	unknown
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_106.1.dr	false	URL Reputation: safe	unknown
http://schema.org/WebPage	chromecache_85.1.dr	false	URL Reputation: safe	unknown
https://lens.google.com/gen204	chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/	chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_75.1.dr, chromecache_101.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com/url?q	chromecache_75.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://csp.withgoogle.com/csp/lcreport/	chromecache_106.1.dr	false	URL Reputation: safe	unknown
https://apis.google.com	chromecache_106.1.dr, chromecache_101.1.dr, chromecache_85.1.dr	false	URL Reputation: safe	unknown
https://domains.google.com/suggest/flow	chromecache_106.1.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback	chromecache_96.1.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/websearch/answer/106230	chromecache_104.1.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/api.js	chromecache_88.1.dr	false	URL Reputation: safe	unknown
https://www.google.com/_/og/promos/	chromecache_85.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://plus.google.com	chromecache_106.1.dr	false	URL Reputation: safe	unknown
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_104.1.dr, chromecache_88.1.dr	false	URL Reputation: safe	unknown
https://ogs.google.com/widget/callout?prid=19037050	chromecache_85.1.dr	false	URL Reputation: safe	unknown
https://push.clients6.google.com/upload/	chromecache_96.1.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com"	chromecache_75.1.dr	false	Avira URL Cloud: safe	unknown
https://clients6.google.com	chromecache_106.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
37.27.57.153	online.systems.com.pk	Iran (ISLAMIC Republic Of)	39232	UNINETAZ	false
172.217.16.206	google.com	United States	15169	GOOGLEUS	false
216.58.206.78	www3.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
216.58.206.46	play.google.com	United States	15169	GOOGLEUS	false
91.215.85.79	be-isabel-6-eu-online.com	Russian Federation	34665	PINDC-ASRU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1448256
Start date and time:	2024-05-28 06:35:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://online.systems.com.pk/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.win@15/64@20/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 172.217.16.142, 74.125.206.84, 34.104.35.123, 142.250.185.67, 142.250.186.42, 172.217.18.106, 142.250.185.106, 142.250.186.138, 142.250.186.170, 142.250.185.234, 142.250.186.74, 216.58.212.138, 142.250.185.138, 216.58.206.42, 142.250.181.234, 142.250.185.74, 142.250.185.170, 142.250.184.234, 142.250.186.106, 142.250.185.202, 172.217.18.3, 172.217.18.99, 93.184.221.240, 142.250.184.195, 142.250.185.110
Excluded domains from analysis (whitelisted): clients1.google.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Input	Output
URL: https://www.google.com/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be part of Google's XJS library, which is used for loading various resources like JavaScript and CSS files. There are no indications of malicious activity in the code snippet provided." }
(function(){google.xjs={basecomb:'/xjs/_/js/k\x3dxjs.hd.en.n-jycPV9838.O/ck\x3dxjs.hd.p0rTci6WNV8.L.B1.O/am\x3dAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKQA-gkHQAGwIQgAAEAAAAAAIQAAAgAQgPcEQAigAAQCAGAAiCAAD2UCAAQyAQEQQASQBAI5CABABGMYgFQAYAAAAAACJAAAABxAwAACAyIAAh5CAAABOkEAFgAAEsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d\x3d1/ed\x3d1/dg\x3d0/br\x3d1/ujg\x3d1/rs\x3dACT90oHImSEwQ9-p7fjPGqD0ykhIDf0pzg',basecss:'/xjs/_/ss/k\x3dxjs.hd.p0rTci6WNV8.L.B1.O/am\x3dAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/br\x3d1/rs\x3dACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw',basejs:'/xjs/_/js/k\x3dxjs.hd.en.n-jycPV9838.O/am\x3dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/dg\x3d0/br\x3d1/rs\x3dACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ',excm:[]};})();
URL: https://www.google.com/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to Google's functionality, including handling image loading, scroll events, and user interactions. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code includes some tracking functionality, which is considered no risk as per the given instructions." }
(function(){google.caft=function(a){if(null===google.aftq)try{a()}catch(b){google.ml(b,!1)}else google.aftq=google.aftq\|\|[],google.aftq.push(a)};window.google=window.google\|\|{};google.c.iim=google.c.iim\|\|{};(function(){var a=Date.now();google.tick("load","prt",a);google.c.e("load","imn",String(document.getElementsByTagName("img").length));google.c.ub();google.c.cae\|\|google.c.maft(a,null);google.c.miml(a);google.rll(window,!1,function(){google.tick("load","old")})})();}).call(this);(function(){window.google=window.google\|\|{};window.google.ishk=[];function a(){return window.scrollY+window.document.documentElement.clientHeight>=Math.max(document.body.scrollHeight,document.body.offsetHeight)}function b(){a()&&0===window.google.ishk.length&&(window.google.bs=!0,window.removeEventListener("scroll",b))}a()?window.google.bs=!0:(window.google.bs=!1,window.addEventListener("scroll",b));}).call(this);(function(){google.jl={bfl:0,dw:false,ine:false,ubm:false,uwp:true,vs:false};})();(function(){var pmc='{\x22aa\x22:{},\x22abd\x22:{\x22abd\x22:false,\x22deb\x22:false,\x22det\x22:false},\x22async\x22:{},\x22cdos\x22:{\x22cdobsel\x22:false},\x22csi\x22:{},\x22d\x22:{},\x22gf\x22:{\x22pid\x22:196},\x22hsm\x22:{},\x22ifl\x22:{\x22lsf_is_launched\x22:true,\x22opts\x22:[{\x22href\x22:\x22/search?q\x3dkeming\\u0026csf\x3db\x22,\x22id\x22:\x22curious\x22,\x22msg\x22:\x22I\x27m Feeling Curious\x22},{\x22href\x22:\x22/search?q\x3ddinner+recipes\x22,\x22id\x22:\x22hungry\x22,\x22msg\x22:\x22I\x27m Feeling Hungry\x22},{\x22href\x22:\x22/search?q\x3dbat+signal\\u0026csf\x3db\x22,\x22id\x22:\x22adventurous\x22,\x22msg\x22:\x22I\x27m Feeling Adventurous\x22},{\x22href\x22:\x22/search?q\x3dpacman\\u0026csf\x3db\x22,\x22id\x22:\x22playful\x22,\x22msg\x22:\x22I\x27m Feeling Playful\x22},{\x22href\x22:\x22/url?url\x3dhttps://www.google.com/search?q%3Dnebulae%26um%3D1%26ie%3DUTF-8%26tbm%3Disch%26csf%3Db\x22,\x22id\x22:\x22stellar\x22,\x22msg\x22:\x22I\x27m Feeling Stellar\x22},{\x22href\x22:\x22/url?url\x3d/doodles\x22,\x22id\x22:\x22doodley\x22,\x22msg\x22:\x22I\x27m Feeling Doodley\x22},{\x22href\x22:\x22/url?url\x3dhttps://trends.google.com/hottrends\\u0026sa\x3dt\\u0026usg\x3dAOvVaw0hXgzDMTx66unZaN8ANJHA\x22,\x22id\x22:\x22trendy\x22,\x22msg\x22:\x22I\x27m Feeling Trendy\x22},{\x22href\x22:\x22/url?url\x3dhttps://artsandculture.google.com/partner/musee-de-lorangerie\\u0026sa\x3dt\\u0026usg\x3dAOvVaw3qy6PDEO8_tC9QBLYaFGFZ\x22,\x22id\x22:\x22artistic\x22,\x22msg\x22:\x22I\x27m Feeling Artistic\x22},{\x22href\x22:\x22/url?url\x3dhttps://www.google.com/search?q%3Dfunny%2Bcat%2Bmemes%26um%3D1%26ie%3DUTF-8%26tbm%3Disch%26csf%3Db\x22,\x22id\x22:\x22funny\x22,\x22msg\x22:\x22I\x27m Feeling Funny\x22}]},\x22jsa\x22:{\x22csi\x22:true,\x22csir\x22:100},\x22mb4ZUb\x22:{},\x22pHXghd\x22:{},\x22sb_wiz\x22:{\x22rfs\x22:[],\x22scq\x22:\x22\x22,\x22stok\x22:\x2240mtRBoPY2WT9kN-a7gxuynViy0\x22},\x22sf\x22:{},\x22sonic\x22:{},\x22spch\x22:{\x22ae\x22:\x22Please check your microphone. \\u003Ca
URL: https://www.google.com/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The JavaScript code appears to be part of Google's error reporting and logging mechanism. It includes functionality for capturing and reporting errors, which is common in legitimate web applications for debugging and monitoring purposes. There are no obvious signs of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access. However, error reporting can sometimes expose sensitive information if not handled properly, hence a low risk score is assigned." }
(function(){window.google.erd={jsr:1,bv:2014,sd:true,de:true};})();(function(){var sdo=false;var mei=10; var h=this\|\|self;var k,l=null!=(k=h.mei)?k:1,n,p=null!=(n=h.sdo)?n:!0,q=0,r,t=google.erd,v=t.jsr;google.ml=function(a,b,d,m,e){e=void 0===e?2:e;b&&(r=a&&a.message);void 0===d&&(d={});d.cad="ple_"+google.ple+".aple_"+google.aple;if(google.dl)return google.dl(a,e,d,!0),null;b=d;if(0>v){window.console&&console.error(a,b);if(-2===v)throw a;b=!1}else b=!a\|\|!a.message\|\|"Error loading script"===a.message\|\|q>=l&&!m?!1:!0;if(!b)return null;q++;d=d\|\|{};b=encodeURIComponent;var c="/gen_204?atyp=i&ei="+b(google.kEI);google.kEXPI&&(c+="&jexpid="+b(google.kEXPI));c+="&srcpg="+b(google.sn)+"&jsr="+b(t.jsr)+ "&bver="+b(t.bv);var f=a.lineNumber;void 0!==f&&(c+="&line="+f);var g=a.fileName;g&&(0<g.indexOf("-extension:/")&&(e=3),c+="&script="+b(g),f&&g===window.location.href&&(f=document.documentElement.outerHTML.split("\n")[f],c+="&cad="+b(f?f.substring(0,300):"No script found.")));google.ple&&1===google.ple&&(e=2);c+="&jsel="+e;for(var u in d)c+="&",c+=b(u),c+="=",c+=b(d[u]);c=c+"&emsg="+b(a.name+": "+a.message);c=c+"&jsst="+b(a.stack\|\|"N/A");12288<=c.length&&(c=c.substr(0,12288));a=c;m\|\|google.log(0,"",a);return a};window.onerror=function(a,b,d,m,e){r!==a&&(a=e instanceof Error?e:Error(a),void 0===d\|\|"lineNumber"in a\|\|(a.lineNumber=d),void 0===b\|\|"fileName"in a\|\|(a.fileName=b),google.ml(a,!1,void 0,!1,"SyntaxError"===a.name\|\|"SyntaxError"===a.message.substring(0,11)\|\|-1!==a.message.indexOf("Script error")?3:0));r=null;p&&q>=l&&(window.onerror=null)};})();;this.gbar_={CONFIG:[[[0,"www.gstatic.com","og.qtm.en_US.s-_8OiN4zAs.2019.O","com","en","538",0,[4,2,"","","","635413608","0"],null,"MF9VZsjFIfGyi-gP-bmdCA",null,0,"og.qtm._yk4Kx1DLwg.L.W.O","AA2YrTstZieUcIRJsHgW4g1D6WRCneCt9Q","AA2YrTs74be_nloI4pEoaS7eJYnNYpJ4fQ","",2,1,200,"USA",null,null,"1","538",1,null,null,89978449,0],null,[1,0.1000000014901161,2,1],null,[0,0,0,null,"","","","",0,0,0],[0,0,"",1,0,0,0,0,0,0,null,0,0,null,0,0,null,null,0,0,0,"","","","","","",null,0,0,0,0,0,null,null,null,"rgba(32,33,36,1)","rgba(255,255,255,1)",0,0,1,null,null,1,0,0],null,null,["1","gci_91f30755d6a6b787dcc2a4062e6e9824.js","googleapis.client:gapi.iframes","","en"],null,null,null,null,["m;/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/am=AAAC/d=1/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/m=__features__","https://apis.google.com","","","","",null,1,"es_plusone_gc_20240331.0_p2","en",null,0],[0.009999999776482582,"com","538",[["19037050","19037049","7",1,5,2592000,"","AN2NJM6HDI1dlpBNmmEgW7YwNVrJeYJK5w:1716870960552",0,1,2,"https://www.google.com/_/og/promos/",0],"n","",["","",""],1,2592000,null,null,"https://www.google.com/url?q=https://accounts.google.com/signin/v2/identifier%3Fec%3Dfutura_hpp_co_si_001_p%26continue%3Dhttps%253A%252F%252Fwww.google.com%252F%253Fptid%253D19027681%2526ptt%253D8%2526fpts%253D0\u0026source=hpp\u0026id=19037050\u0026ct=7\u0026usg=AOvVaw17nhtj2bG975y5iQrI1sgf",null,null,null,null,null,1,null,0
URL: https://www.google.com/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be from a legitimate site, likely Google, based on the presence of 'google.kEXPI' and other Google-related identifiers. The code primarily includes configuration settings, exception handling, and script loading mechanisms. There are no obvious signs of malicious activity such as data exfiltration, credential stealing, or unauthorized access attempts. The long hexadecimal strings and tracking functionalities are considered no risk as per the given instructions." }
(function(){google.kEXPI='0,3700298,651,361,711872,29265,94383,50403,82365,78141,56292,51088,63785,8174,13449,44940,5224756,8831937,53229812,26317,66643,88884,16539,2097,16923,2805,1073,20026,4425,2932,1350,4720,1341,794,513,2377,3426,5334,2145,995,286,52,1218,2414,1010,1985,251,4220,1527,60,9,9,12,9,6,9,9,9,12,11,6,9,9,9,12,9,9,9,9,6,9,12,9,6,12,6,12,6,9,9,9,9,12,9,9,6,9,9,9,12,6,9,12,6,12,9,6,12,9,6,12,6,9,9,12,9,9,9,6,9,12,6,9,9,12,6,12,6,12,9,9,6,9,12,9,6,12,9,6,12,9,9,9,9,9,6,9,9,9,9,12,9,9,6,9,12,9,9,9,9,6,9,9,9,12,9,6,9,12,9,9,9,9,9,6,9,12,6,9,9,9,9,12,9,6,12,6,9,12,9,6,9,9,12,6,9,12,9,9,6,12,6,12,6,9,9,12,6,12,1577,1242,2887,963,98,394,73,3259,2897,2864,2768,156,1556,1340,335,95,2381,630,1866,623,865,18,102,1989,79,3073,1891,953,496,2072,847,471,147,241,2231,1352,65,1345,228,269,713,2123,1418,85,1644,899,959,356,764,855,830,611,770,41,21220451,385894,844,409,525,817';})();window._ = window._ \|\| {};window._DumpException = _._DumpException = function(e){throw e;};window._s = window._s \|\| {};_s._DumpException = _._DumpException;window._qs = window._qs \|\| {};_qs._DumpException = _._DumpException;(function(){var t=[83456,0,24576,0,0,0,268435712,0,977314816,83893287,8526592,1048608,553648128,134742024,259522836,704844353,132110,36717024,642838530,209780736,537952513,135938065,54160,102285584,536958080,33,134365216,268894209,50462912,940048520,268436513,271601280,301991958,34341760,65536,253755392,460032,267395,0,0,4194304,97259592,17846290,4,0,0,977944576,443108];window._F_toggles = window._xjs_toggles = t;})();function _F_installCss(c){} (function(){window.google.xjsu='/xjs/_/js/k\x3dxjs.hd.en.n-jycPV9838.O/am\x3dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d\x3d1/ed\x3d1/dg\x3d2/br\x3d1/rs\x3dACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/ee\x3dALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7
URL: https://www.google.com/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be part of a legitimate web application, likely from a well-known service like Google. It includes functionality for logging, event handling, and other typical web application behaviors. There are no obvious signs of malicious activity such as data exfiltration, credential harvesting, or unauthorized access attempts. The presence of tracking and advertisement functionality is noted but considered no risk as per the given instructions." }
(function(){var _g={kEI:'MF9VZorPINzq7_UPwf2YoA4',kEXPI:'31',kBL:'RxPw',kOPI:89978449};(function(){var a;(null==(a=window.google)?0:a.stvsc)?google.kEI=_g.kEI:window.google=_g;}).call(this);})();(function(){google.sn='webhp';google.kHL='en';})();(function(){ var h=this\|\|self;function l(){return void 0!==window.google&&void 0!==window.google.kOPI&&0!==window.google.kOPI?window.google.kOPI:null};var m,n=[];function p(a){for(var b;a&&(!a.getAttribute\|\|!(b=a.getAttribute("eid")));)a=a.parentNode;return b\|\|m}function q(a){for(var b=null;a&&(!a.getAttribute\|\|!(b=a.getAttribute("leid")));)a=a.parentNode;return b}function r(a){/^http:/i.test(a)&&"https:"===window.location.protocol&&(google.ml&&google.ml(Error("a"),!1,{src:a,glmm:1}),a="");return a} function t(a,b,c,d,k){var e="";-1===b.search("&ei=")&&(e="&ei="+p(d),-1===b.search("&lei=")&&(d=q(d))&&(e+="&lei="+d));d="";var g=-1===b.search("&cshid=")&&"slh"!==a,f=[];f.push(["zx",Date.now().toString()]);h._cshid&&g&&f.push(["cshid",h._cshid]);c=c();null!=c&&f.push(["opi",c.toString()]);for(c=0;c<f.length;c++){if(0===c\|\|0<c)d+="&";d+=f[c][0]+"="+f[c][1]}return"/"+(k\|\|"gen_204")+"?atyp=i&ct="+String(a)+"&cad="+(b+e+d)};m=google.kEI;google.getEI=p;google.getLEI=q;google.ml=function(){return null};google.log=function(a,b,c,d,k,e){e=void 0===e?l:e;c\|\|(c=t(a,b,e,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload=a.onabort=function(){delete n[g]};a.src=c}};google.logUrl=function(a,b){b=void 0===b?l:b;return t("",a,b)};}).call(this);(function(){google.y={};google.sy=[];google.x=function(a,b){if(a)var c=a.id;else{do c=Math.random();while(google.y[c])}google.y[c]=[a,b];return!1};google.sx=function(a){google.sy.push(a)};google.lm=[];google.plm=function(a){google.lm.push.apply(google.lm,a)};google.lq=[];google.load=function(a,b,c){google.lq.push([[a],b,c])};google.loadAll=function(a,b){google.lq.push([a,b])};google.bx=!1;google.lx=function(){};var d=[];google.fce=function(a,b,c,e){d.push([a,b,c,e])};google.qce=d;}).call(this);google.f={};(function(){ document.documentElement.addEventListener("submit",function(b){var a;if(a=b.target){var c=a.getAttribute("data-submitfalse");a="1"===c\|\|"q"===c&&!a.elements.q.value?!0:!1}else a=!1;a&&(b.preventDefault(),b.stopPropagation())},!0);document.documentElement.addEventListener("click",function(b){var a;a:{for(a=b.target;a&&a!==document.documentElement;a=a.parentElement)if("A"===a.tagName){a="1"===a.getAttribute("data-nohref");break a}a=!1}a&&b.preventDefault()},!0);}).call(this);(function(){google.hs={h:true,nhs:false,sie:false};})();(function(){google.c={btfi:false,c4t:true,caf:false,cap:2000,cfr:false,cgpbc:false,cvb:true,di:false,fla:false,fli:false,frvt:true,gl:true,idt:16,inpp:98,inpsr:0.01,irsf:false,lfdt:50,lfsr:0.0,lhc:false,linp:true,llt:false,lsb:true,lsbsr:0.01,mais:false,marb:true,mcc:false,raf:false,si:true,sidt:200,sisr:0.01,sxs:false,taf:true,timl:false,tprc:false,vis:true,wh0:false,whu:false};})();(function(){ var p=this\|\|self;window.google=w
URL: https://www.google.com/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided JavaScript code appears to be part of a legitimate web application, likely from Google Inc., as indicated by the comment. The code includes event listeners, object property definitions, and utility functions, which are common in web applications. There are no obvious signs of malicious activity such as data exfiltration, credential harvesting, or unauthorized access. The presence of error handling and the Apache-2.0 license comment further suggest that this is legitimate code. However, without full context or additional code, a small risk remains." }
this.gbar_=this.gbar_\|\|{};(function(_){var window=this; try{ _.fd=function(a,b,c){if(!a.j)if(c instanceof Array)for(var d of c)_.fd(a,b,d);else{d=(0,_.y)(a.C,a,b);const e=a.v+c;a.v++;b.dataset.eqid=e;a.B[e]=d;b&&b.addEventListener?b.addEventListener(c,d,!1):b&&b.attachEvent?b.attachEvent("on"+c,d):a.o.log(Error("z`"+b))}}; }catch(e){_._DumpException(e)} try{ _.gd=function(){if(!_.r.addEventListener\|\|!Object.defineProperty)return!1;var a=!1,b=Object.defineProperty({},"passive",{get:function(){a=!0}});try{const c=()=>{};_.r.addEventListener("test",c,b);_.r.removeEventListener("test",c,b)}catch(c){}return a}(); }catch(e){_._DumpException(e)} try{ var hd=document.querySelector(".gb_k .gb_d"),id=document.querySelector("#gb.gb_Xc");hd&&!id&&_.fd(_.Qc,hd,"click"); }catch(e){_._DumpException(e)} try{ _.jh=function(a){const b=[];let c=0;for(const d in a)b[c++]=a[d];return b};_.kh=function(a){if(a.v)return a.v;for(const b in a.i)if(a.i[b].qa()&&a.i[b].B())return a.i[b];return null};_.lh=function(a,b){a.i[b.K()]=b};var mh=new class extends _.P{constructor(){var a=_.Ac;super();this.B=a;this.v=null;this.o={};this.C={};this.i={};this.j=null}A(a){this.i[a]&&(_.kh(this)&&_.kh(this).K()==a\|\|this.i[a].P(!0))}Xa(a){this.j=a;for(const b in this.i)this.i[b].qa()&&this.i[b].Xa(a)}qc(a){return a in this.i?this.i[a]:null}};_.Tc("dd",mh); }catch(e){_._DumpException(e)} try{ _.Ei=function(a,b){return _.K(a,36,b)}; }catch(e){_._DumpException(e)} try{ var Fi=document.querySelector(".gb_b .gb_d"),Gi=document.querySelector("#gb.gb_Xc");Fi&&!Gi&&_.fd(_.Qc,Fi,"click"); }catch(e){_._DumpException(e)} })(this.gbar_); // Google Inc. this.gbar_=this.gbar_\|\|{};(function(_){var window=this; try{ var md;_.jd=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b};_.kd=function(a,b){if(void 0!==a.i\|\|void 0!==a.j)throw Error("B");a.j=b;_.Hc(a)};_.ld=class extends _.O{constructor(a){super(a)}};md=class extends _.Uc{};_.nd=function(a,b){if(b in a.i)return a.i[b];throw new md;};_.od=function(a){return _.nd(_.Rc.i(),a)}; }catch(e){_._DumpException(e)} try{ /* SPDX-License-Identifier: Apache-2.0 */ var ud,Dd,Fd;_.pd=function(a){if(null==a)return a;if("string"===typeof a){if(!a)return;a=+a}if("number"===typeof a)return Number.isFinite(a)?a\|0:void 0};_.qd=function(a){const b=a.length;if(0<b){const c=Array(b);for(let d=0;d<b;d++)c[d]=a[d];return c}return[]};_.sd=function(a){if(a instanceof _.rd)return a.i;throw Error("D");};ud=function(a){return new td(b=>b.substr(0,a.length+1).toLowerCase()===a+":")}; _.wd=function(a,b=_.vd){if(a instanceof _.rd)return a;for(let c=0;c<b.length;++c){const d=b[c];if(d instanceof td&&d.eh(a))return new _.rd(a)}};_.yd=function(a){if(xd.test(a))return a};_.zd=function(a){return a instanceof _.rd?_.sd(a):_.yd(a)};_.Ad=function(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var d=c.slice();d.push.apply(d,arguments);return a.apply(this,d)}};_.Bd=function(a,b,c){return void 0!==_.jb(a,b,c,!1)};_.Cd=function(a,b){return _.pd(_.oc(a,
URL: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code does not exhibit any malicious behavior. It initializes some data keys and service requests, and sets up callback functions for handling data chunks. The URL included is a legitimate Google URL. There are no signs of phishing or harmful activities." }
var AF_initDataKeys = ["ds:0"]; var AF_dataServiceRequests = {'ds:0' : {id:'a9HB7c',request:[null,19037050,19037049,"9ceb59a7585b55bd","https://www.google.com"]}}; var AF_initDataChunkQueue = []; var AF_initDataCallback; var AF_initDataInitializeCallback; if (AF_initDataInitializeCallback) {AF_initDataInitializeCallback(AF_initDataKeys, AF_initDataChunkQueue, AF_dataServiceRequests);}if (!AF_initDataCallback) {AF_initDataCallback = function(chunk) {AF_initDataChunkQueue.push(chunk);};}
URL: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code primarily deals with performance tracking, lazy loading of images, and visibility checks. There are no obvious signs of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access. The code appears to be part of a legitimate performance monitoring or optimization script. The presence of a long random hexadecimal string is noted but considered no risk." }
(function(){'use strict';var a=window,d=a.performance,l=k();a.cc_latency_start_time=d&&d.now?0:d&&d.timing&&d.timing.navigationStart?d.timing.navigationStart:l;function k(){return d&&d.now?d.now():(new Date).getTime()}function n(e){if(d&&d.now&&d.mark){var g=d.mark(e);if(g)return g.startTime;if(d.getEntriesByName&&(e=d.getEntriesByName(e).pop()))return e.startTime}return k()}a.onaft=function(){n("aft")};a._isLazyImage=function(e){return e.hasAttribute("data-src")\|\|e.hasAttribute("data-ils")\|\|"lazy"===e.getAttribute("loading")}; a.l=function(e){function g(b){var c={};c[b]=k();a.cc_latency.push(c)}function m(b){var c=n("iml");b.setAttribute("data-iml",c);return c}a.cc_aid=e;a.iml_start=a.cc_latency_start_time;a.css_size=0;a.cc_latency=[];a.ccTick=g;a.onJsLoad=function(){g("jsl")};a.onCssLoad=function(){g("cssl")};a._isVisible=function(b,c){if(!c\|\|"none"==c.style.display)return!1;var f=b.defaultView;if(f&&f.getComputedStyle&&(f=f.getComputedStyle(c),"0px"==f.height\|\|"0px"==f.width\|\|"hidden"==f.visibility))return!1;if(!c.getBoundingClientRect)return!0; var h=c.getBoundingClientRect();c=h.left+a.pageXOffset;f=h.top+a.pageYOffset;if(0>f+h.height\|\|0>c+h.width\|\|0>=h.height\|\|0>=h.width)return!1;b=b.documentElement;return f<=(a.innerHeight\|\|b.clientHeight)&&c<=(a.innerWidth\|\|b.clientWidth)};a._recordImlEl=m;document.documentElement.addEventListener("load",function(b){b=b.target;var c;"IMG"!=b.tagName\|\|b.hasAttribute("data-iid")\|\|a._isLazyImage(b)\|\|b.hasAttribute("data-noaft")\|\|(c=m(b));if(a.aft_counter&&(b=a.aft_counter.indexOf(b),-1!==b&&(b=1===a.aft_counter.splice(b, 1).length,0===a.aft_counter.length&&b&&c)))a.onaft(c)},!0);a.prt=-1;a.wiz_tick=function(){var b=n("prt");a.prt=b}};}).call(this); l('HgvS1c')
URL: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be part of a legitimate library, possibly related to Google's Closure Library, and includes standard event handling and utility functions. There are no obvious signs of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access attempts. The presence of SPDX license identifiers further suggests that this is legitimate code." }
(function(){'use strict';function l(){var b=m,a=0;return function(){return a<b.length?{done:!1,value:b[a++]}:{done:!0}}};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var n=this\|\|self;/ Copyright 2024 Google, Inc SPDX-License-Identifier: MIT / function q(b,a){if(null===a)return!1;if("contains"in b&&1===a.nodeType)return b.contains(a);if("compareDocumentPosition"in b)return b===a\|\|!!(b.compareDocumentPosition(a)&16);for(;a&&b!==a;)a=a.parentNode;return a===b};var r=["focus","blur","error","load","toggle"];function t(b){return"mouseenter"===b?"mouseover":"mouseleave"===b?"mouseout":"pointerenter"===b?"pointerover":"pointerleave"===b?"pointerout":b}function v(b){b=b.target;!b.getAttribute&&b.parentNode&&(b=b.parentNode);return b} var z="undefined"!==typeof navigator&&/Macintosh/.test(navigator.userAgent),A="undefined"!==typeof navigator&&!/Opera/.test(navigator.userAgent)&&/WebKit/.test(navigator.userAgent),B={A:1,INPUT:1,TEXTAREA:1,SELECT:1,BUTTON:1},C={Enter:13," ":32},D={A:13,BUTTON:0,CHECKBOX:32,COMBOBOX:13,FILE:0,GRIDCELL:13,LINK:13,LISTBOX:13,MENU:0,MENUBAR:0,MENUITEM:0,MENUITEMCHECKBOX:0,MENUITEMRADIO:0,OPTION:0,RADIO:32,RADIOGROUP:32,RESET:0,SUBMIT:0,SWITCH:32,TAB:0,TREE:13,TREEITEM:13},E={CHECKBOX:!0,FILE:!0,OPTION:!0, RADIO:!0},F={COLOR:!0,DATE:!0,DATETIME:!0,"DATETIME-LOCAL":!0,EMAIL:!0,MONTH:!0,NUMBER:!0,PASSWORD:!0,RANGE:!0,SEARCH:!0,TEL:!0,TEXT:!0,TEXTAREA:!0,TIME:!0,URL:!0,WEEK:!0},I={A:!0,AREA:!0,BUTTON:!0,DIALOG:!0,IMG:!0,INPUT:!0,LINK:!0,MENU:!0,OPTGROUP:!0,OPTION:!0,PROGRESS:!0,SELECT:!0,TEXTAREA:!0};function J(b){var a=b.event;var c=a.which\|\|a.keyCode;!c&&a.key&&(c=C[a.key]);A&&3===c&&(c=13);if(13!==c&&32!==c)c=!1;else{var d=v(a);(a="keydown"!==a.type\|\|!!(!("getAttribute"in d)\|\|(d.getAttribute("type")\|\|d.tagName).toUpperCase()in F\|\|"BUTTON"===d.tagName.toUpperCase()\|\|d.type&&"FILE"===d.type.toUpperCase()\|\|d.isContentEditable)\|\|a.ctrlKey\|\|a.shiftKey\|\|a.altKey\|\|a.metaKey\|\|(d.getAttribute("type")\|\|d.tagName).toUpperCase()in E&&32===c)\|\|((a=d.tagName in B)\|\|(a=d.getAttributeNode("tabindex"),a=null!= a&&a.specified),a=!(a&&!d.disabled));if(a)c=!1;else{a=(d.getAttribute("role")\|\|d.type\|\|d.tagName).toUpperCase();var f=!(a in D)&&13===c;d="INPUT"!==d.tagName.toUpperCase()\|\|!!d.type;c=(0===D[a]%c\|\|f)&&d}}c&&(b.eiack=!0,b.eventType="click")} function K(b){var a;if(a=b.eiack){a=b.event;var c=v(a);c=(c.type\|\|c.tagName).toUpperCase();if(!(a=32===(a.which\|\|a.keyCode)&&"CHECKBOX"!==c)){a=v(b.event);c=a.tagName.toUpperCase();var d=(a.getAttribute("role")\|\|"").toUpperCase();a="BUTTON"===c\|\|"BUTTON"===d?!0:!(a.tagName.toUpperCase()in I)\|\|"A"===c\|\|"SELECT"===c\|\|(a.getAttribute("type")\|\|a.tagName).toUpperCase()in E\|\|(a.getAttribute("type")\|\|a.tagName).toUpperCase()in F?!1:!0}}a&&(b=b.event,b.preventDefault?b.preventDefault():b.returnValue=!1)} function L(b,a,c){a.eia\|\|"click"!==a.eventType\|\|a.eiack\|\|void 0===c.clickonly\|\|(a.eventType="clickonly",a.eia=[c.clickonly,b])};var M={};var N={},O=/\s;\s*/;function
URL: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be configuration data for a legitimate service, likely related to a Google widget or service. There are no obvious signs of malicious behavior, such as obfuscated code, suspicious network requests, or attempts to steal user data. The hexadecimal strings and other values seem to be identifiers or configuration parameters. Therefore, the risk is minimal." }
window.WIZ_global_data = {"DpimGf":false,"EP1ykd":["/_/*"],"FdrFJe":"5985426262578794151","Im6cmf":"/_/OneGoogleWidgetUi","LVIXXb":1,"LoQv7e":true,"MT7f9b":[],"NrSucd":false,"OwAJ6e":false,"QrtxK":"","S06Grb":"","S6lZl":128566913,"TSDtV":"%.@.[[null,[[45459555,null,false,null,null,null,\"Imeoqb\"]],\"CAMSFB0V99WlENysuBIKgPnaBgqR7QQK\"]]]","Vvafkd":false,"Yllh3e":"%.@.1716870964058170,151692765,16836546]","ZwjLXe":538,"cfb2h":"boq_onegooglehttpserver_20240524.07_p0","eptZe":"/_/OneGoogleWidgetUi/","fPDxwd":[48802160,93880154,97517168,97579925],"gGcLoe":false,"iCzhFc":false,"nQyAE":{},"qwAQke":"OneGoogleWidgetUi","rtQCxc":240,"uoqGRe":"WnksUc","w2btAe":"%.@.null,null,\"\",true,null,null,true,false]","xn5OId":false,"y2FhP":"prod","zChJod":"%.@.]"};
URL: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be related to image loading and visibility tracking, which is generally benign. It does not exhibit any obvious malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code is primarily concerned with determining if images are above the fold and handling image loading events. Therefore, it poses minimal risk." }
(function(){'use strict';var c=window,d=[];c.aft_counter=d;var e=[],f=0;function _recordIsAboveFold(a){if(!c._isLazyImage(a)&&!a.hasAttribute("data-noaft")&&a.src){var b=(c._isVisible\|\|function(){})(c.document,a);a.setAttribute("data-atf",b);b&&(-1!==e.indexOf(a)\|\|-1!==d.indexOf(a)\|\|a.complete\|\|d.push(a),a.hasAttribute("data-iml")&&(a=Number(a.getAttribute("data-iml")),a>f&&(f=a)))}} c.initAft=function(){f=0;e=Array.prototype.slice.call(document.getElementsByTagName("img")).filter(function(a){return!!a.getAttribute("data-iml")});[].forEach.call(document.getElementsByTagName("img"),function(a){try{_recordIsAboveFold(a)}catch(b){throw b.message=a.hasAttribute("data-iid")?b.message+"\nrecordIsAboveFold error for defer inlined image":b.message+("\nrecordIsAboveFold error for img element with <src: "+a.src+">"),b;}});if(0===d.length)c.onaft(f)};}).call(this); initAft()
URL: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code appears to be part of a legitimate Google service, with URLs pointing to well-known Google domains such as google.com and accounts.google.com. There are no obvious signs of malicious behavior. The presence of tracking or advertisement functionality is noted but considered no risk." }
window.IJ_values = [[null,null,"",true,null,null,true,false],'0','https:\/\/ogs.google.com\/', null ,'boq_onegooglehttpserver_20240524.07_p0','ogs.google.com', 0.0 ,'','qkffNd2DXVBdB60hOSJWFw','gYI7-jn-GUMEsgxqEQNiNQ','DEFAULT','', 2024.0 ,'https:\/\/ogs.google.com\/widget\/callout', null ,'ltr', false ,'https:\/\/accounts.google.com\/AccountChooser?continue\x3dhttps:\/\/ogs.google.com\/widget\/callout?prid%3D19037050%26pgid%3D19037049%26puid%3D9ceb59a7585b55bd%26cce%3D1%26dc%3D1%26origin%3Dhttps:\/\/www.google.com%26cn%3Dcallout%26pid%3D1%26spid%3D538%26hl%3Den\x26hl\x3den','https:\/\/accounts.google.com\/ServiceLogin?hl\x3den\x26continue\x3dhttps:\/\/ogs.google.com\/widget\/callout?prid%3D19037050%26pgid%3D19037049%26puid%3D9ceb59a7585b55bd%26cce%3D1%26dc%3D1%26origin%3Dhttps:\/\/www.google.com%26cn%3Dcallout%26pid%3D1%26spid%3D538%26hl%3Den','https:\/\/accounts.google.com\/SignOutOptions?continue\x3dhttps:\/\/ogs.google.com\/widget\/callout?prid%3D19037050%26pgid%3D19037049%26puid%3D9ceb59a7585b55bd%26cce%3D1%26dc%3D1%26origin%3Dhttps:\/\/www.google.com%26cn%3Dcallout%26pid%3D1%26spid%3D538%26hl%3Den','https:\/\/www.google.com', false , false , false , false , false ,'en','en','en','https:\/\/goto2.corp.google.com\/mdtredirect?data_id_filter\x3dogs.google.com\x26system_name\x3done-google-http-server', null , null ,'https:\/\/myaccount.google.com\/privacypolicy?hl\x3den', false , null , false , true ,'https:\/\/myaccount.google.com\/termsofservice?hl\x3den', 0.0 ,'en', null , false , null ,]; window.IJ_valuesCb && window.IJ_valuesCb();
URL: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code appears to be part of a legitimate library, possibly related to Google's Closure Library, and handles UI interactions and messaging. There are no obvious signs of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access. The use of event listeners and message channels is typical for interactive web applications. However, the code does interact with the DOM and sends messages, which could potentially be exploited if not properly secured. Therefore, a low risk score is assigned." }
'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / function h(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b};function k(a,b){a&&(a=a.parentNode);for(var d=0;a;){if(b(a))return a;a=a.parentNode;d++}return null};function n(a){var b=document.querySelector('[data-ogmv] > [role="dialog"]');return b?b.hasAttribute("data-"+a):!1}function p(a){return h(a)&&1==a.nodeType&&a.hasAttribute("data-dismiss")?a:(a=k(a,function(b){return h(b)&&1==b.nodeType&&b.hasAttribute("data-dismiss")}))?a:null};function q(a){this.data=a};function r(a){this.h=a}function t(a,b){u(a,b);return new r(a)}function w(a){var b=new MessageChannel;u(b.port1,a);return b}function u(a,b){b&&(a.onmessage=function(d){var c=d.data;t(d.ports[0]);b(new q(c))})};var x=/#\|$/;function y(a){var b=z,d=b.search(x);a:{var c=0;for(var e=a.length;0<=(c=b.indexOf(a,c))&&c<d;){var f=b.charCodeAt(c-1);if(38==f\|\|63==f)if(f=b.charCodeAt(c+e),!f\|\|61==f\|\|38==f\|\|35==f)break a;c+=e+1}c=-1}if(0>c)return null;e=b.indexOf("&",c);if(0>e\|\|e>d)e=d;c+=a.length+1;return decodeURIComponent(b.slice(c,-1!==e?e:0).replace(/\+/g," "))};var z=window.location.href,A="ogi_"+(y("cn")\|\|""),B; function C(a,b){b=void 0===b?{}:b;if(!B){var d=y("origin")\|\|"",c={destination:window.parent,origin:d,g:A,onMessage:void 0};d=c.destination;var e=c.origin,f=void 0===c.i?void 0:c.i,g=void 0===c.g?"ZNWN1d":c.g;c=void 0===c.onMessage?void 0:c.onMessage;if(""===e)throw Error("Sending to wildcard origin not allowed.");var v=w(c),l={};f=f?(l.n=g,l.t=f,l):g;d.postMessage(f,e,[v.port2]);B=t(v.port1,c)}a={event:a,data:b};b=B;var m=void 0===m?[]:m;d=w();b.h.postMessage(a,[d.port2].concat(m))};C("_startuploaded",{wt:"c"}); (function(a,b){a.addEventListener("click",function(d){if(d.target){var c;if(c=p(d.target)){var e=c.getAttribute("data-dismiss");var f=c.getAttribute("data-cmd");var g=c.hasAttribute("data-nd");c=parseInt(c.getAttribute("data-aei"),10);e&&e.match(/^[A-Za-z]{1,3}$/)&&(g&&!f?b(e,c,g):f?b(e,c,g,f,{middleButton:1===d.button,altKey:d.altKey,ctrlKey:d.ctrlKey,metaKey:d.metaKey,shiftKey:d.shiftKey}):b(e,c))}}})})(document,function(a,b,d,c,e){d?C("dismiss",{type:a,nd:d,cmd:c,clickInfo:e,aei:b}):C("dismiss", {type:a,cmd:c,clickInfo:e,aei:b})}); (function(a){"loading"===document.readyState?document.addEventListener("DOMContentLoaded",function(){a()}):a()})(function(){window.setTimeout(function(){var a,b=document.querySelector('[data-ogmv] > [role="dialog"]');if(a=b?{width:Math.min(Math.max(b.scrollWidth+10,370),500),height:Math.min(Math.max(b.scrollHeight+10,180),500)}:null){b=a.height+"px";a=a.width+"px";var d=n("icss"),c=n("dc");b=void 0===b?"":b;a=void 0===a?"":a;d=void 0===d?!1:d;c=void 0===c?!1:c;var e={wt:"c"};if(null!=document.querySelector("[data-ogmv]")){var f= window.performance&&window.performance.timing;e.ttf=f&&f.responseEnd&&f.fetchStart?f.responseEnd-f.fetchStart:null;b&&(e.height=b);a&&(e.width=a);e.icss=d;e.dc=c;C("_renderstart",e)}else C("_renderfailed",e)}},100)});

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 28 03:35:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9937062643330385
Encrypted:	false
SSDEEP:	48:8JwdbTDzW/H+idAKZdA1FehwiZUklqehjy+3:8Jorjoy
MD5:	F90D27EB2B18900DEAE9DFF1A2C10B8B
SHA1:	1F78457D0CAC9D39A2D2C1983F05F6F08A4ED8EB
SHA-256:	E8DB9B3E8109F8975B7794EEDD00835C4B46E8D890121B648297377166A38D8E
SHA-512:	2F2983C7C248C8CC51438AB8B8510EBD263A77EFB0FAA871E1D0A7BFC699F6BB592FA35F9C5F5F3D80F585D5C277930B110BB4C4BCB7E1AA46B72CA8D502A508
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xu$....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X\|$....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X\|$....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X\|$..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X}$...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 28 03:35:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.009365137520735
Encrypted:	false
SSDEEP:	48:8/dbTDzW/H+idAKZdA1seh/iZUkAQkqehYy+2:8lrt9Qpy
MD5:	CDD8135E270F056D92B1E0D3F904613C
SHA1:	21742220FFF987DD909C1D4383D9F166F6034877
SHA-256:	4C781AB4BB5B044BE0FA26186F481084DE77113DA2474CCFE55807DACC8E1978
SHA-512:	36C01CF26650B03B7BA1291CDE204D6ED10A45AC29E54F7C271CA035C909FE295CE7B72ED4953A4D240CBFCEA1C60D81E4E2531A73D2DFA2C765DEC1A630117D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....O.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xu$....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X\|$....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X\|$....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X\|$..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X}$...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.012905348510568
Encrypted:	false
SSDEEP:	48:8BdbTDzAH+idAKZdA14meh7sFiZUkmgqeh7s2y+BX:8nr/n0y
MD5:	52C64CC32F34F267707CE40F52854DA7
SHA1:	1DDBC5C070E6146AB7C7DEA579DD798EF0FCD083
SHA-256:	67747FBE59AAA9DA635472AD8D6314DB469C84EB38B44040DFA8B9B87DA90A09
SHA-512:	5B2C7FBFDED06BF76674A8CD60EF331FA497FC48AEE4C90BDF986D2B00F71CD75413418BE7DF4F094E1795CAC7DC98CE526AB71C84FE365F844CFBEDB814F050
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xu$....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X\|$....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X\|$....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X\|$..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 28 03:35:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.006941306903281
Encrypted:	false
SSDEEP:	48:8mdbTDzW/H+idAKZdA1TehDiZUkwqehMy+R:8+reuy
MD5:	D5D1647E15173C5F5628D87B51C5F477
SHA1:	C1CF32771B02B7EBFC46345FDC77830528C311A3
SHA-256:	95D4EE5F4633B184917D40238145881727E08243F939D0EC9F5E6EBA7937FC86
SHA-512:	0B43BF68CED7EFFA45732C9FCF420C43815AC4299B77265BB106899C21E40101059E6BC8F8D5CC4DF49DFB2C588AE2DF8128AD92253D5EB26DF4702FD2C7AC11
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....i{.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xu$....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X\|$....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X\|$....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X\|$..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X}$...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 28 03:35:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9952044400513986
Encrypted:	false
SSDEEP:	48:8BdbTDzW/H+idAKZdA1dehBiZUk1W1qehCy+C:8nrO9iy
MD5:	D03FE4F694D09E656E80B883D9CA4FC6
SHA1:	A14EB1BD1F42D6B157BB279431C0FB204790A3B4
SHA-256:	EEC3538FFEC0C07953B451FF91221ED5A0A91A0FD730FB32D08F5EB4D51C707E
SHA-512:	6728217126D9ACACBFEA1EB9872E27D455139113471BBDF370FFC0B0DC58EEDF91E51D04D3965A0256A053663B66D3FE8ECB7212EF3BACFAE5835DC985EA816B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xu$....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X\|$....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X\|$....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X\|$..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X}$...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 28 03:35:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.004068969307851
Encrypted:	false
SSDEEP:	48:88dbTDzW/H+idAKZdA1duTeehOuTbbiZUk5OjqehOuTb0y+yT+:8srkTfTbxWOvTb0y7T
MD5:	FC669DEA7FC5E6C9A50A86EDC60F8BAA
SHA1:	C5EC5E6644E944C5768359E1F5DC1DB2E4308400
SHA-256:	F4A5F16BE02426F4D96E94F3C069A002C295A0281790CA414EA741EECC78F3E3
SHA-512:	BBF913C9EA6025A529D42F86A4CD847971769D6DAB973B0334AE1EEBE20B3FC0B64D2C26284F0D540561C3C58B79214B7EFCA8D3839FB850FF7C4D85586A06F1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....ir.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xu$....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X\|$....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X\|$....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X\|$..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X}$...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (833), with no line terminators
Category:	dropped
Size (bytes):	833
Entropy (8bit):	5.329958267795506
Encrypted:	false
SSDEEP:	12:M4RjFATLdO1NeFx193L9Pdorw9ZMRbIHl2gYdzdT5eIEvzrVl63V5eIEMElvZ9HR:McGMMp1XMRbwJ+5JUzBl63V5JvghXf
MD5:	4119C48CB407B0B6CEA237526E3DFF10
SHA1:	8961A0008A191D84A15EA2AD48DF8646566122F8
SHA-256:	219FEF17DFAF6289CB75957510D48253B2C021585D6056ADD2B617F73929CAA4
SHA-512:	F8617F8ED57807F013D2140916042F5F419A86EDDDBC5AD1D9C9BAFEC7175C9692AE68FBA110C5E308B8781454CE991EFDDEC5981692AA3C4B4DE79EDB787E3E
Malicious:	false
Reputation:	low
Preview:	.EpPYLd{display:block;position:relative}.YpcDnf{padding:0 16px;vertical-align:middle}.YpcDnf.HG1dvd{padding:0}.HG1dvd>*{padding:0 16px}.WtV5nd .YpcDnf{padding-left:28px}.Zt0a5e .YpcDnf{line-height:48px}.GZnQqe .YpcDnf{line-height:23px}.EpPYLd:hover{cursor:pointer}.EpPYLd,.CB8nDe:hover{cursor:default}.LGiluc,.EpPYLd[disabled]{pointer-events:none;cursor:default}.LGiluc{border-top:1px solid;height:0;margin:5px 0}.Zt0a5e.CB8nDe{background:no-repeat left 8px center}.Zt0a5e.CB8nDe{background-image:url(https://ssl.gstatic.com/images/icons/material/system/1x/done_black_16dp.png)}.GZnQqe.CB8nDe{background:no-repeat left center}.GZnQqe.CB8nDe{background-image:url(https://ssl.gstatic.com/ui/v1/menu/checkmark2.png)}.GZnQqe.LGiluc,.GZnQqe.EpPYLd[disabled]{color:#dadce0!important}.GZnQqe.LGiluc{border-top-color:var(--gS5jXb)}sentinel{}

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2294)
Category:	downloaded
Size (bytes):	216293
Entropy (8bit):	5.518665794107557
Encrypted:	false
SSDEEP:	6144:sZKTYgBNnjLyYRkr7+lBCwiZUHGUjHD2TPIsQyDtAp4Y4Fp8R2NZ:aYYgBNjLyYRkP+lBCwiZUmUjHD2TPIsH
MD5:	25AFEA707584CADCA44A8B06EC78D5EB
SHA1:	01384720879E339B22C39FD06333FE88BCEFB93C
SHA-256:	B94B8ED69955F6732D885B8EFA87CF06BC241E2B1EAE20E9638009E510DBA25A
SHA-512:	70B805F98C4634B433F923F9E09C04DDD96D6EDC0A09A36CB91C2AC71E8E1229A4F026EDB2C2A408652D8106E8B764DF20D01AC5DAE7B6361AC0426C7D147F6E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.s-_8OiN4zAs.2019.O/rt=j/m=qabr,q_d,qcwid,qapid,qald,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTstZieUcIRJsHgW4g1D6WRCneCt9Q"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.ie=function(a){return _.jd(a)&&1==a.nodeType};_.je=function(a,b){if("textContent"in a)a.textContent=b;else if(3==a.nodeType)a.data=String(b);else if(a.firstChild&&3==a.firstChild.nodeType){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.ge(a),a.appendChild(_.he(a).createTextNode(String(b)))};var ke;_.le=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;""===c\|\|void 0==c?(ke\|\|(ke={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=ke,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var pe;_.oe=function(a,b,c,d,e,f){if(_.Mb&&e)return _.me(a);if(e&&!d)return!1;if(!_.Kb){"number"===typeof b&&(b=_.ne(b));var g=17==b\|\|18==b\|\|_.Mb&&91==b;if((!c\|\|_.Mb)&&g\|\|_.Mb&&1

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22308, version 1.0
Category:	downloaded
Size (bytes):	22308
Entropy (8bit):	7.991797344190553
Encrypted:	true
SSDEEP:	384:6y/VUj3uc3L/mXGG4sOAzBBp6ojL2R8brJw4eKSquOAAiwQ9SIaZtUCzZ6UqBfU4:H/VUj3d3L/0jO8BFkoJwZtqCVwQ9SIcS
MD5:	16ED7FFDC347C24C8275E6907B508257
SHA1:	EEA712285E89D88243C29F8A5B306A4B565A89BD
SHA-256:	D7F62CCD6D9784466FB9B92202B71A63182DE790D0575E13641E027B39E0590E
SHA-512:	F906D22EA8354DB0826210F6A94C4F654600BCA2255FB8689CDD2BFF13F33E578E95B46E6CA93A60A5793E62F1E2DDB1EAF67A8E4A01953301F7D5D7E5557F0D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJllpyk.woff2
Preview:	wOF2......W$.......`..V...........................X.....4.`?STATx..J.....t..u..Z..6.$.... ..F..K.......m........U...Q.}(..fX..E.j.8.x.f..g$.c....U.tI.6B..jK..P..=.\.H..%.7z..B...D..Q.....Q.p9'&Y2X<.Nz.T@...TC..c.w.f@%.s.6.......n..}..Fq7..t.....<$,...8.\<.:.w..lH.....]g..P.=.......>I#.{.$}.x..@u.'..yoK6.J. @.K....%....5.b.VP.O..s..w.Z.u.+*.........4.......X.F........6M.6.T.Z`....`0.F.y..R.?.....B=.~..=k...gJ..Pa......\|.F.....p0r..n..=.....x....R"}.W..t..oo...V[D.....+}.G.YU.J..BD.\....n.......7....F..s?....PQ;......T.i..NN......\Z?^N.y.9s....B...."z....i.u..j.3^.r.X......2.&.f..r..Z...H.I.Iy.....w./B.R.R...0.O.7D...!...5+...i...f..$...9.!...LU<....w....Pr....pu.U@v..",.. .JG...2@%`Q..tIEE...t.......%....Wwe^.^./.4....>b.1..Z.\|.P..{.....Q.U.{......e...7... ..&Bj..3..d..?.~e..>...B7?.U..e.7.....7/....@..&.....X..5zI...z.^...et3r.....03&UU...W..........G......\|....s./(~..J...<n..d..... C. AD...}......Mi~Z....."""..""..Qc....HQ5..c.....c....s

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (549)
Category:	downloaded
Size (bytes):	883026
Entropy (8bit):	5.595635470406811
Encrypted:	false
SSDEEP:	24576:FZrqjiWu+AO7ro9sYRXWJBSDnZG58nFCG1V:FZmjiWu+AbWJBSDnZG58nFCG1V
MD5:	658EB1D80E1427D32873B5EF475C7FE5
SHA1:	271393E20930A34B9773B8A02D809293AA2D0D48
SHA-256:	1BC213D537804AA65393BE1312E14122A69BB0A37F70D44594E1D9D3807A04BC
SHA-512:	E571C0E4D1034B389B0063A5E6E96089F573C8A56BA66D96CDECEAA31AC887B1AF7B9EDCBB315D5514A7541E6589AE9E8DBC8EE844BF463AF79E1BD64D68C0E1
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=1/ed=1/dg=2/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aZ61od:arTwJ;af0EJf:ghinId;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;sZmdvc:rdGEfc;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl"
Preview:	this._hd=this._hd\|\|{};(function(_){var window=this;.try{./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,caa,laa,naa,Aaa,Caa,Iaa,Saa,gba,pba,rba,vba,wba,Aba,Bba,Fba,Gba,Jba,Iba,Dba,Qa,Mba,Qba,Rba,Vba,Xba,Zba,aca,bca,cca,fca,hca,ica,lca,nca,oca,pca,qca,vca,xca,Eca,Fca,Gca,Bca,Hca,Aca,Ica,zca,Jca,Kca,Rca,Tca,Uca,Wca,$ca,ada,bda,eda,fda,gda,hda,ida,lda,mda,pda,nda,tda,uda,Ada,Bda,Dda,Cda,Fda,Hda,Gda,Jda,Ida,Mda,Lda,Oda,Sda,Tda,ob,Wda,Yda,Zda,aea,cea,kea,lea,Xda,$da,oea,pea,xea,yea,Hea,Dea,Jea,Kea,Aea,Nea,Lea,Sea,Tea,Uea,Xea,Yea,Bea,Wea,$ea,bfa,ffa,gfa,nfa,qfa,sfa,Bfa,Dfa,Ffa,Gfa,Nfa,Pfa,Sfa,Ufa,.Vfa,Xfa,Zfa,cga,dga,fga,hga,iga,jga,kga,gga,pga,Nga,Oga,Qga,Wga,fha,dha,eha,iha,mha,rha,vha,wha,xha,yha,Aha,Iha,Oha,Qha,T

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2429), with no line terminators
Category:	downloaded
Size (bytes):	2429
Entropy (8bit):	5.50752123360415
Encrypted:	false
SSDEEP:	48:2KNBgIOafN8fNDzFMqwWgNUIu9ThExKAo7:2Wnd4tzFlwLNU9xh0i
MD5:	19DEAED2152D2C417B2BBB3E19407C7B
SHA1:	B1B5C1DB2EB103262EDEAB28AA5F1BC2BD545598
SHA-256:	DB3FD74A70D02B222FBA7602081C79A796BA2CEBE5CC9E432D3E1B8F02717757
SHA-512:	016BB4D9888217F08AF7D410A7BCA48673D57FA49ADC5F1BC0AB2E5F66D197C7126FD40BD35364DF660BDC8BE478D8E90F1D8C834B696B16725B9FA92BC78009
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/ss/k=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/d=1/ed=1/br=1/rs=ACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl"
Preview:	:root{--COEmY:#202124;--xhUGwc:#fff}:root{--gS5jXb:#dadce0;--Aqn7xd:#d2d2d2;--EpFNW:#fff;--IXoxUe:#70757a;--bbQxAb:#4d5156;--YLNNHc:#202124;--TMYS9:#1a73e8;--JKqx2:#1a0dab;--rrJJUc:#1a73e8;--mXZkqc:#dadce0;--Nsm0ce:#4285f4;--XKMDxc:#f7f8f9;--aYn2S:#ecedee;--Lm570b:#ecedee}.zJUuqf{margin-bottom:4px}.AB4Wff{margin-left:16px}.v0rrvd{padding-bottom:16px}.wHYlTd{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:22px}.yUTMj{font-family:Roboto,arial,sans-serif;font-weight:400}.VDgVie{text-align:center}.TUOsUe{text-align:left}@keyframes g-snackbar-show{from{pointer-events:none;transform:translateY(0)}to{transform:translateY(-100%)}}@keyframes g-snackbar-hide{from{transform:translateY(-100%)}to{transform:translateY(0)}}@keyframes g-snackbar-show-content{from{opacity:0}}@keyframes g-snackbar-hide-content{to{opacity:0}}.LH3wG,.jhZvod{bottom:0;height:0;position:fixed;z-index:999}.Ox8Cyd{height:0;position:fixed;z-index:999}.E7Hdgb{box-sizing:border-box;visibility:hidden;display:inline-

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	121628
Entropy (8bit):	5.506662476672723
Encrypted:	false
SSDEEP:	3072:QI9yvwslCsrCF9f/U2Dj3Fkk7rEehA5L1kx:l9ygsrieDkVaL1kx
MD5:	F46ACD807A10216E6EEE8EA51E0F14D6
SHA1:	4702F47070F7046689432DCF605F11364BC0FBED
SHA-256:	D6B84873D27E7E83CF5184AAEF778F1CCB896467576CD8AF2CAD09B31B3C6086
SHA-512:	811263DC85C8DAA3A6E5D8A002CCCB953CD01E6A77797109835FE8B07CABE0DEE7EB126274E84266229880A90782B3B016BA034E31F0E3B259BF9E66CA797028
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	5.220845660946521
Encrypted:	false
SSDEEP:	3:VG4dXQ2+WOlJHX+Ra+XAEJElJWdHW0:VpdXQTZ+Ra+QEJkWdHW0
MD5:	FEE5BC1CCB2DB1BECE4BD02DA6954109
SHA1:	543E9134A9E1B9526DBDE67CC012246A29CF74A7
SHA-256:	D8B1B91122852120017C68F0D931972270D5D64F4664D6C6695A7DAB7D11E165
SHA-512:	739535C8E95C43A876D7C43FBD3E4B8C5B8331A08DC39D767B6A1936EB1FF88069463F9DF1CEA11B0147A320B101A2C5A02F9078CEB3A97A2831D79F8930DBBD
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/async/hpba?vet=10ahUKEwiKp-ndwq-GAxVc9bsIHcE-BuQQj-0KCBU..i&ei=MF9VZorPINzq7_UPwf2YoA4&opi=89978449&yv=3&cs=0&async=isImageHp:false,eventId:MF9VZorPINzq7_UPwf2YoA4,_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA%2Fbr%3D1%2Frs%3DACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fck%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKQA-gkHQAGwIQgAAEAAAAAAIQAAAgAQgPcEQAigAAQCAGAAiCAAD2UCAAQyAQEQQASQBAI5CABABGMYgFQAYAAAAAACJAAAABxAwAACAyIAAh5CAAABOkEAFgAAEsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHImSEwQ9-p7fjPGqD0ykhIDf0pzg,_fmt:prog,_id:a3JU5b"
Preview:	)]}'.22;["Nl9VZviTJduA9u8PxbKskAQ","2014"]3;[2]1b;<div jsname="Nll0ne"></div>3;[9]0;

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8010)
Category:	downloaded
Size (bytes):	8015
Entropy (8bit):	6.103102335904319
Encrypted:	false
SSDEEP:	192:jKzDuF8OPjWAE+Bf3RwM5xln8iW/WaHN8E:jKOOOPyAE8P58iW/WaHNh
MD5:	C4ED544FA23E9B744EB9A8850046DF4A
SHA1:	E2F02C7898575E2E148ADD20D84C08B4242E743B
SHA-256:	04DAA0537F896333148A0A74C4758B4266652CA5A40D3538B7E2A2DB42D5DC84
SHA-512:	FAA49486B54EE0DBE89090950BFEF73D84B8D09612B4450A7B1F7C49574843AE25B276F59BEA0ABF1B2E50C614C929E6A85B15D1D0871E3B6B51DEE5F1A5B201
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=MF9VZorPINzq7_UPwf2YoA4.1716870962202&dpr=1&nolsbt=1
Preview:	)]}'.[[["jr bacon cheeseburgers 1 cent",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["qatar airways flight turbulence",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["kim mulkey",46,[3,357,362,396,143],{"lm":[],"zf":33,"zh":"Kim Mulkey","zi":"American basketball coach","zl":8,"zp":{"gs_ssp":"eJzj4tTP1TcwLTAtqTBg9OLKzsxVyC3NyU6tBABQfgdS"},"zs":"data:image/jpeg;base64,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

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17209)
Category:	downloaded
Size (bytes):	37568
Entropy (8bit):	5.868710605172543
Encrypted:	false
SSDEEP:	768:quEghhvpui9s1OX5uu662aFe04omzifcEe4rGRIDJnavWaMx/i2QzFJ/N4bxm:k1OX5Tjmmg411aMx/iV1mxm
MD5:	9D0A09E06408F60C607424D900785B07
SHA1:	FA4BF5FDF87C46FFDE16ACA77C488266D6588334
SHA-256:	D696C7A6820501DA3F0ABD8149B6C1CA6E555144390172EDC093E4D00FE04CDF
SHA-512:	5B98D78F0977C70811291E6AD26F1A787ACD6C47EA8B189E9F152D66D3288665D1BE83B4535830F12FCF1C41FAE73A135AA1033D5799D7FE53CB44D955C30BD6
Malicious:	false
Reputation:	low
URL:	https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en
Preview:	<!doctype html><html lang="en" dir="ltr"><head><base href="https://ogs.google.com/"><link ref="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><link rel="canonical" href="https://ogs.google.com/widget/callout"><link rel="preconnect" href="https://www.gstatic.com"><link rel="preconnect" href="https://ssl.gstatic.com"><script data-id="_gd" nonce="qkffNd2DXVBdB60hOSJWFw">window.WIZ_global_data = {"DpimGf":false,"EP1ykd":["/_/*"],"FdrFJe":"5985426262578794151","Im6cmf":"/_/OneGoogleWidgetUi","LVIXXb":1,"LoQv7e":true,"MT7f9b":[],"NrSucd":false,"OwAJ6e":false,"QrtxK":"","S06Grb":"","S6lZl":128566913,"TSDtV":"%.@.[[null,[[45459555,null,false,null,null,null,\"Imeoqb\"]],\"CAMSFB0V99WlENysuBIKgPnaBgqR7QQK\"]]]","Vvafkd":false,"Yllh3e":"%.@.1716870964058170,151692765,16836546]","ZwjLXe":538,"cfb2h":"boq_onegooglehttpserver_20240524.07_p0","eptZe":"/_/OneGoogleWidgetUi/","fPDxwd":[48802160,93880154,97517168,97579925],"gGcLoe":false,"iCzhFc":false,"nQyAE":{},"qwAQke":"O

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (593)
Category:	downloaded
Size (bytes):	1670
Entropy (8bit):	5.329347118866178
Encrypted:	false
SSDEEP:	48:XrNfmKy++jfxJIikIvTtNmqyDPGbJA7GbZY8TdZr/:xfSEi1vzKCAkY8T7/
MD5:	AF33342B5E1C0CA3A366C640879BC842
SHA1:	793AAC0C671967E38B4CD36A6168057D11F01D36
SHA-256:	F1348830ED6098A014D52C3B1002F2C623688FB5C52596DD88E41B92892438A0
SHA-512:	5CE9843EB28CD26AC3BBB2998DD96C333692A2B778379A350F1DF085C28B92A97FEC5E86E110669F0E7553F73BE48FE215D171C8F6936B50A33C4800B0CC82E8
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=kMFpHd,sy8x,bm51tf?xjs=s3"
Preview:	this._hd=this._hd\|\|{};(function(_){var window=this;.try{._.y("kMFpHd");._.Fab=new _.Ed(_.zKa);._.z();.}catch(e){_._DumpException(e)}.try{.var Oab;_.Pab=function(a,b,c,d,e){this.cEa=a;this.Xqd=b;this.Ckb=c;this.Twd=d;this.hJd=e;this.Sab=0;this.Bkb=Oab(this)};Oab=function(a){return Math.random()Math.min(a.XqdMath.pow(a.Ckb,a.Sab),a.Twd)};_.Pab.prototype.T1b=function(){return this.Sab};_.Pab.prototype.yja=function(a){return this.Sab>=this.cEa?!1:null!=a?!!this.hJd[a]:!0};_.Qab=function(a){if(!a.yja())throw Error("ie`"+a.cEa);++a.Sab;a.Bkb=Oab(a)};.}catch(e){_._DumpException(e)}.try{._.y("bm51tf");.var Rab=function(a){var b={};_.Ga(a.Trb(),function(e){b[e]=!0});var c=a.Oqb(),d=a.grb();return new _.Pab(a.frb(),1E3c.ka(),a.khb(),1E3d.ka(),b)},Sab=!!(_.Og[23]&32);var Uab=function(a){_.Bn.call(this,a.Ma);this.Eg=null;this.ta=a.service.SCb;this.Ca=a.service.metadata;a=a.service.Egd;this.ka=a.fetch.bind(a)};_.B(Uab,_.Bn);Uab.Va=_.Bn.Va;Uab.Ia=function(){return{service:{SCb:_.Jab,metadata:_.F

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	168766
Entropy (8bit):	5.15623447529086
Encrypted:	false
SSDEEP:	3072:kFVMbzjKY5HWmKBmrWINjs8dYREGJ6XzYG4:wGnX5HpKBw/j9YRE66DYH
MD5:	3444DF8E80D407BAB1BF47AF8E2611A7
SHA1:	B5D65CDEEF29B09CE84F22DEE7F883A4A264A7AB
SHA-256:	E77C143FC69A92AC2FA298BF8FAF2F059581376411E63657266B6565AE219F62
SHA-512:	F3725CB2C11D2052390C7D013A60DC3F6722C92BAD080CAF42A1C74A763DBEA50A7CA7DC7AFBE1D140B66F1D925FF7D5F87AE6BD6ED28F94C5A32EA0CD696092
Malicious:	false
Reputation:	low
Preview:	{"chunkTypes":"1000011111110011110001000010110100000011111111111111111111111111111110110111111111110101111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111101110111111111310110111111111111011111111111111011111111111111110001110111111111111111111111111111111010100222222222121221212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212122212121212121212122212122122121112212221212122222121212121212122212222222222122121212221212121212121212112111212121212121211212121212121212122222222213323333333333333333321112222112221121212121221212121212121211212121212121212121112121212222122212212212212221221221221221221221221221221221221221221221221221221221221221221221221221221221221221221221212212122222221221212121212212133311111111111111111111111

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	191644
Entropy (8bit):	5.1920607929147184
Encrypted:	false
SSDEEP:	3072:kFVMbzjKY5HWmKBmrWINjs8dYREGJ6XzYGdP2y:wGnX5HpKBw/j9YRE66DY2P2y
MD5:	2E2579B05F855CAF7D291978920EC65B
SHA1:	51CFC20763313CA80ABAC2CC56332138348515F0
SHA-256:	4E478F141817E458BBBBFB90B3445CF496308BA15F38E38A436E371D50CB509F
SHA-512:	5D6F109E1C4E734711C48C297FA9E081DBFB670227D61679B7CBA80D8DCBD49216935A0B9AB1CC55C4B93913AF4F97DA3C4E8BB9E6FD0D5613FB05BF7D26C0BB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/xjs/_/js/md=3/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ
Preview:	{"chunkTypes":"1000011111110011110001000010110100000011111111111111111111111111111110110111111111110101111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111101110111111111310110111111111111011111111111111011111111111111110001110111111111111111111111111111111010100222222222121221212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212122212121212121212122212122122121112212221212122222121212121212122212222222222122121212221212121212121212112111212121212121211212121212121212122222222213323333333333333333321112222112221121212121221212121212121211212121212121212121112121212222122212212212212221221221221221221221221221221221221221221221221221221221221221221221221221221221221221221221212212122222221221212121212212133311111111111111111111111

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8010)
Category:	dropped
Size (bytes):	8015
Entropy (8bit):	6.103102335904319
Encrypted:	false
SSDEEP:	192:jKzDuF8OPjWAE+Bf3RwM5xln8iW/WaHN8E:jKOOOPyAE8P58iW/WaHNh
MD5:	C4ED544FA23E9B744EB9A8850046DF4A
SHA1:	E2F02C7898575E2E148ADD20D84C08B4242E743B
SHA-256:	04DAA0537F896333148A0A74C4758B4266652CA5A40D3538B7E2A2DB42D5DC84
SHA-512:	FAA49486B54EE0DBE89090950BFEF73D84B8D09612B4450A7B1F7C49574843AE25B276F59BEA0ABF1B2E50C614C929E6A85B15D1D0871E3B6B51DEE5F1A5B201
Malicious:	false
Reputation:	low
Preview:	)]}'.[[["jr bacon cheeseburgers 1 cent",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["qatar airways flight turbulence",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["kim mulkey",46,[3,357,362,396,143],{"lm":[],"zf":33,"zh":"Kim Mulkey","zi":"American basketball coach","zl":8,"zp":{"gs_ssp":"eJzj4tTP1TcwLTAtqTBg9OLKzsxVyC3NyU6tBABQfgdS"},"zs":"data:image/jpeg;base64,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

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5969
Entropy (8bit):	7.949719859611916
Encrypted:	false
SSDEEP:	96:30VjFRx06o9fWBVE+/hVaf6hQrDTq2W4jnjhwKItTD97TPJn/SHbICKV6A4TT8D+:30XRx0QPE+5VBx2W4/WtTRnBnobpQDHe
MD5:	8F9327DB2597FA57D2F42B4A6C5A9855
SHA1:	1737D3DFB411C07B86ED8BD30F5987A4DC397CC1
SHA-256:	5776CD87617EACEC3BC00EBCF530D1924026033EDA852F706C1A675A98915826
SHA-512:	B807694ED1EF6DFA6CB5D35B46526FF9584D9AAD66CE4DC93CDEB7B8B103A7C78369D1141D53F092EDDEA0441E982D3A16DF6E98959A5557C288B580CF5191E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......\............IDATx..]...U..:.................].{.A.A.(......\....1........A@6.......$...(.CXX\|..d...IUu..dz...g..u.....sO.1..g..W.....~..fv..+.TL.z.q.c..e..;..{..._"...`V...NwUwg....L.{6...y...]....2yo.x}^\|.....)....444.....r7.f&.<...t.!.l'8.s..LCCcl...t........ ......;..,a..0.xju........\|.. D%.l._..........]Y.. ...&N.r.~$g...&...Z}.w.3q......RKwm.ihh.I.pL.n..7j.W..%..Ld...@......q7x)..A.x.0..M .H..Wq.g.h..k.\|P..-Q.}.Ca...@.A.....D....x.....vOp.....+.z...N...T..o.?...?.%e....&..#..3.....P..Np9...$m.Ne. ..3y?......]....l.).z...g.^.v.!....-...&..M .Eg..w.K. ..;..@.qiP4yhh.....U.l7X-.u...-.tP..X..D.i......p'.T>Y.\o.TM.....xx&...&..M ..{.MQ...@.......C.ihh...]].ws..L.<.1...M ..>/yl...yhh.Yh..y..n...H.iW!..4444.p'8G.<...4444. .!.$'.._`....&....h=@8..........T.Ao..4444..#..i.q.'t.u........T..+j.ASyjT...u..(f.y.uw...-e.B...5.W........m~..5-\|_">.j....c[o..m+....K.v.Tak_.".\.....<........u.....},..02..'.h.v.^.....s..A..Ctw

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (833), with no line terminators
Category:	downloaded
Size (bytes):	833
Entropy (8bit):	5.329958267795506
Encrypted:	false
SSDEEP:	12:M4RjFATLdO1NeFx193L9Pdorw9ZMRbIHl2gYdzdT5eIEvzrVl63V5eIEMElvZ9HR:McGMMp1XMRbwJ+5JUzBl63V5JvghXf
MD5:	4119C48CB407B0B6CEA237526E3DFF10
SHA1:	8961A0008A191D84A15EA2AD48DF8646566122F8
SHA-256:	219FEF17DFAF6289CB75957510D48253B2C021585D6056ADD2B617F73929CAA4
SHA-512:	F8617F8ED57807F013D2140916042F5F419A86EDDDBC5AD1D9C9BAFEC7175C9692AE68FBA110C5E308B8781454CE991EFDDEC5981692AA3C4B4DE79EDB787E3E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/xjs/_/ss/k=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/d=0/br=1/rs=ACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw/m=syk9?xjs=s3
Preview:	.EpPYLd{display:block;position:relative}.YpcDnf{padding:0 16px;vertical-align:middle}.YpcDnf.HG1dvd{padding:0}.HG1dvd>*{padding:0 16px}.WtV5nd .YpcDnf{padding-left:28px}.Zt0a5e .YpcDnf{line-height:48px}.GZnQqe .YpcDnf{line-height:23px}.EpPYLd:hover{cursor:pointer}.EpPYLd,.CB8nDe:hover{cursor:default}.LGiluc,.EpPYLd[disabled]{pointer-events:none;cursor:default}.LGiluc{border-top:1px solid;height:0;margin:5px 0}.Zt0a5e.CB8nDe{background:no-repeat left 8px center}.Zt0a5e.CB8nDe{background-image:url(https://ssl.gstatic.com/images/icons/material/system/1x/done_black_16dp.png)}.GZnQqe.CB8nDe{background:no-repeat left center}.GZnQqe.CB8nDe{background-image:url(https://ssl.gstatic.com/ui/v1/menu/checkmark2.png)}.GZnQqe.LGiluc,.GZnQqe.EpPYLd[disabled]{color:#dadce0!important}.GZnQqe.LGiluc{border-top-color:var(--gS5jXb)}sentinel{}

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	84
Entropy (8bit):	5.30126098835323
Encrypted:	false
SSDEEP:	3:VG4CtSk41j3I0opHea+XAEJElJWdHW0:VpS4Oma+QEJkWdHW0
MD5:	45028A309FD9D0811508B8B46710CF2F
SHA1:	26C176EC5718F1F694DB5A149C78F10810A3CB7F
SHA-256:	1A58987ED41D5228331E5A30384BB28101175327ECA36BB2851FAF5FC65920E8
SHA-512:	FA4E547E7E6E2D7F94AC19D0BF3CB4305C08076DE4C0D6F7ABCABA29175D6606E58F2DFB9F77D2A2FD0E402A725D9F82DEFEF5DCCF7DEF61B96E9D7639B3EFC2
Malicious:	false
Reputation:	low
Preview:	)]}'.22;["N19VZuH7Hq6ni-gP_-WA-QM","2014"]3;[2]1b;<div jsname="Nll0ne"></div>3;[9]0;

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	7.8938748179764
Encrypted:	false
SSDEEP:	48:aGmurFSJs329qIqvZO7N4+lRSm+3gdfI8hV92jPH9b45MloqbSHTrpG:4QUvKI7943UJhn2jP3pUG
MD5:	6282A05D151E7D0446C655D1892475E2
SHA1:	B2B05F319DA0E73250200AE9BB518A318D6B4C5D
SHA-256:	4CAB9CF78FD7C85AE2236CDD47B905FA4173F664946DFAB008591B3CFE4280B7
SHA-512:	DF0C4C01555430BD2AFAD409E40A422F5EFB0ED9B6E86168874B46312FFC0BA7CA2B5503E49858035056C342A83CBC42721AA89077BD2E1F698692AF4277BAB5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx........m.tm.86.m.m...m.Xo..._~..Mm.&..x....v.....?... .~^.TV....z.wK.....-.`..w.............4....."...z6Z."....`;@....!...S.Q..E...L$..`01..S(.v...vn._...H.......H.fs.8).....q....\....9B>...)>#2...A....z..8.#+A.V-..hh....3.......c.......F. 3.......~.^Q......c.....a.1...gZ....y....wU..2...].-.0b].......[......w...&K..$..K..\.t..QoY..O?....u.Sa.-...na.Z..}..._s..~[.Ue.M.!#Y.....%.t.7y....J......Q.0fC.Fo..@..&...B.....&..}.ld....O.#+...<.z..,."?vC....Y.....<d..."b.D.(sX..c..5.z,..!...oV.. .....>O.#..pHG..y.j.7.-@.K.s..,...&.%6.. O=dj....S..;.O..ylc.O.~....Tn.F.\|.Y..X..@........e..O.Z......}(H...vp.... ...y..&..:.......8y...{n..R^...:.q.......>....C.....^P..C..%..<. 6...9..,.$0x.M.=.`\..MI..\|.........^...W-"...@..J........K.m...h...x.H.>.c.>.w!......:X.b%.v....)..[R..-..>.+!..?...?.....Q.G:F...k..A.)`*.^N$...{9.<.PD...7`).3.d........h.k..{]&.;^.h.s>BREP.X.O.~P\|[....R].m,.......Z..Pk.g0.yl...Z.qp..

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13904)
Category:	downloaded
Size (bytes):	203957
Entropy (8bit):	5.854553395640634
Encrypted:	false
SSDEEP:	3072:grHIzp1Atl2jgIeoJcbQx2Ihg5mt0+0x/j3KD:grHIzpGtl20IeMcbQwIh4aD
MD5:	CCA234233E4AF149185EDD34658E155D
SHA1:	A07FC5AE9CE85F15FF9DACBA68DCB11EA8F7E8CF
SHA-256:	DE5D40ADC93CDEAAE32C016CDDA00C7F7CA66888E62E4C822244BF3A2111C9D4
SHA-512:	5DB9055C828EDA42819DADDAEEFBE9B3024407A3069D29084081732D9B4F3C6E115D3E8E219FFE794F458DA8461AABBF538B00BC9A4BBCDC3EE7BF7A6D9CDE32
Malicious:	false
Reputation:	low
URL:	https://www.google.com/
Preview:	<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="tovPfVEmSdU4gqBHW2p2gw">(function(){var _g={kEI:'MF9VZorPINzq7_UPwf2YoA4',kEXPI:'31',kBL:'RxPw',kOPI:89978449};(function(){var a;(null==(a=window.google)?0:a.stvsc)?google.kEI=_g.kEI:window.google=_g;}).call(this);})();(function(){google.sn='webhp';google.kHL='en';})();(function(){.var h=this\|\|self;function l(){return void 0!==window.google&&void 0!==window.google.kOPI&&0!==window.google.kOPI?window.google.kOPI:null};var m,n=[];function p(a){for(var b;a&&(!a.getAttribute\|\|!(b=a.getAttribute("eid")));)a=a.parentNode;return b\|\|m}function q(a){for(var b=null;a&&(!a.getAttribute\|\|!(b=a.getAttribute("leid")));)a=a.parentNode;return b}function r(a){/^http:/i.test(a)&&"https:"===window.location.protocol&&(google.ml&&goo

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2091
Entropy (8bit):	7.8938748179764
Encrypted:	false
SSDEEP:	48:aGmurFSJs329qIqvZO7N4+lRSm+3gdfI8hV92jPH9b45MloqbSHTrpG:4QUvKI7943UJhn2jP3pUG
MD5:	6282A05D151E7D0446C655D1892475E2
SHA1:	B2B05F319DA0E73250200AE9BB518A318D6B4C5D
SHA-256:	4CAB9CF78FD7C85AE2236CDD47B905FA4173F664946DFAB008591B3CFE4280B7
SHA-512:	DF0C4C01555430BD2AFAD409E40A422F5EFB0ED9B6E86168874B46312FFC0BA7CA2B5503E49858035056C342A83CBC42721AA89077BD2E1F698692AF4277BAB5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/hpp/ic_wahlberg_product_core_48.png8.png
Preview:	.PNG........IHDR...0...0.....W.......IDATx........m.tm.86.m.m...m.Xo..._~..Mm.&..x....v.....?... .~^.TV....z.wK.....-.`..w.............4....."...z6Z."....`;@....!...S.Q..E...L$..`01..S(.v...vn._...H.......H.fs.8).....q....\....9B>...)>#2...A....z..8.#+A.V-..hh....3.......c.......F. 3.......~.^Q......c.....a.1...gZ....y....wU..2...].-.0b].......[......w...&K..$..K..\.t..QoY..O?....u.Sa.-...na.Z..}..._s..~[.Ue.M.!#Y.....%.t.7y....J......Q.0fC.Fo..@..&...B.....&..}.ld....O.#+...<.z..,."?vC....Y.....<d..."b.D.(sX..c..5.z,..!...oV.. .....>O.#..pHG..y.j.7.-@.K.s..,...&.%6.. O=dj....S..;.O..ylc.O.~....Tn.F.\|.Y..X..@........e..O.Z......}(H...vp.... ...y..&..:.......8y...{n..R^...:.q.......>....C.....^P..C..%..<. 6...9..,.$0x.M.=.`\..MI..\|.........^...W-"...@..J........K.m...h...x.H.>.c.>.w!......:X.b%.v....)..[R..-..>.+!..?...?.....Q.G:F...k..A.)`*.^N$...{9.<.PD...7`).3.d........h.k..{]&.;^.h.s>BREP.X.O.~P\|[....R].m,.......Z..Pk.g0.yl...Z.qp..

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2200)
Category:	downloaded
Size (bytes):	139412
Entropy (8bit):	5.467305231274634
Encrypted:	false
SSDEEP:	3072:P9ZWhiTdKjGFFcOPzCKyv8RSfvOf4PBAWkm:ShiwYcEzCKy/+4PeWb
MD5:	98042AB376B1FECB70DD7BFAEAAE261F
SHA1:	E90238B0B60AEF6B15A1616F755305CC0B4820EB
SHA-256:	FDA76556970F51268183DE848D9CB8FC310C7FE9FC87050197F49EE0383A0667
SHA-512:	3893BF8CCF0C1DD5311415F0A444C572D5768F60F1969C9955C1DB68E55FC99CBA20FD4FB4EF2ED3F937B19888AC760AC1D5F07C188D2196AAF6C281390A252A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.X28eeWTCBCg.es5.O/am=kMCgYwM/d=1/excm=_b,_tp,calloutview/ed=1/dg=0/wt=2/ujg=1/rs=AM-SdHsjJ8xgiKgWF7lmDEfBe8NdkMqHKg/m=_b,_tp"
Preview:	"use strict";this.default_OneGoogleWidgetUi=this.default_OneGoogleWidgetUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x23a0c090, 0xd, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var ia,aaa,Ha,caa,Qa,Sa,Ta,Ua,Va,Wa,Xa,$a,daa,eaa,bb,db,tb,xb,Mb,Qb,Tb,Vb,Wb,gaa,ac,cc,ec,kc,rc,uc,wc,oc,jaa,Fc,Gc,kaa,Oc,laa,Rc,Tc,cd,dd,hd,jd,kd,qd,id,nd,Sc,Dd,Bd,Ed,y,Id,Ld,raa,saa,taa,uaa,vaa,waa,xaa,yaa,ye,Ce,Eaa,Caa,Re,Ze,Haa,Iaa,af,pf,Maa,Naa,vf,Oaa,Paa,Qaa,Raa,Lf,Mf,Nf,Saa,Taa,Uaa,Vaa,Waa,Wf,Xf,$aa,bba,cba,dba,eba,fba,gba,iba,jba,aa,ng,og,kba,qg,rg,ug,lba,zg,Ag,Bg,oba,pba,Hg,Ig,qba,rba;_.ba=function(a){return function(){return aa[a].apply(this,arguments

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5969
Entropy (8bit):	7.949719859611916
Encrypted:	false
SSDEEP:	96:30VjFRx06o9fWBVE+/hVaf6hQrDTq2W4jnjhwKItTD97TPJn/SHbICKV6A4TT8D+:30XRx0QPE+5VBx2W4/WtTRnBnobpQDHe
MD5:	8F9327DB2597FA57D2F42B4A6C5A9855
SHA1:	1737D3DFB411C07B86ED8BD30F5987A4DC397CC1
SHA-256:	5776CD87617EACEC3BC00EBCF530D1924026033EDA852F706C1A675A98915826
SHA-512:	B807694ED1EF6DFA6CB5D35B46526FF9584D9AAD66CE4DC93CDEB7B8B103A7C78369D1141D53F092EDDEA0441E982D3A16DF6E98959A5557C288B580CF5191E6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png
Preview:	.PNG........IHDR.......\............IDATx..]...U..:.................].{.A.A.(......\....1........A@6.......$...(.CXX\|..d...IUu..dz...g..u.....sO.1..g..W.....~..fv..+.TL.z.q.c..e..;..{..._"...`V...NwUwg....L.{6...y...]....2yo.x}^\|.....)....444.....r7.f&.<...t.!.l'8.s..LCCcl...t........ ......;..,a..0.xju........\|.. D%.l._..........]Y.. ...&N.r.~$g...&...Z}.w.3q......RKwm.ihh.I.pL.n..7j.W..%..Ld...@......q7x)..A.x.0..M .H..Wq.g.h..k.\|P..-Q.}.Ca...@.A.....D....x.....vOp.....+.z...N...T..o.?...?.%e....&..#..3.....P..Np9...$m.Ne. ..3y?......]....l.).z...g.^.v.!....-...&..M .Eg..w.K. ..;..@.qiP4yhh.....U.l7X-.u...-.tP..X..D.i......p'.T>Y.\o.TM.....xx&...&..M ..{.MQ...@.......C.ihh...]].ws..L.<.1...M ..>/yl...yhh.Yh..y..n...H.iW!..4444.p'8G.<...4444. .!.$'.._`....&....h=@8..........T.Ao..4444..#..i.q.'t.u........T..+j.ASyjT...u..(f.y.uw...-e.B...5.W........m~..5-\|_">.j....c[o..m+....K.v.Tak_.".\.....<........u.....},..02..'.h.v.^.....s..A..Ctw

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hnhn:Bn
MD5:	BEEDCB4EB0A559E6CE2D1E20D38CB330
SHA1:	A04EE9801770C0E81B170D7992EC3735E878AA58
SHA-256:	6E9D99B87595B07B10676B68EBE9AA8B63DF7D9A74F59CC91EED60EA1FBDC6EF
SHA-512:	BD101CDF7FDF1210127D83CE76E3F6F6F1378259F0A55C112E39C49A9131B8636FB020E07E985B8427A35B62A544F2F7C5F75B11AD69EF2C4AE67A41BD5898B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAn11VQ7sgCk8RIFDWlIR0c=?alt=proto
Preview:	CgkKBw1pSEdHGgA=

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 142, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1458
Entropy (8bit):	7.681034830025498
Encrypted:	false
SSDEEP:	24:T+WEGLjWGmmZSUFkBGuiwS/kie2nhCjxeu28Zqv5BtLTWvCOUJcXqM:3EApu9BR5S/kieOWeu25v3tnWvTUJcaM
MD5:	3F2748894BBC365BAB38F4B1A7E2D86D
SHA1:	61184EA8E369BB0A845FCAD043E7B014418FF7C1
SHA-256:	F4CDE92AA0C8E0FD44EB168B5C20C2EF446CB98FEDA8AEED287270F378BCA24B
SHA-512:	18E1A164030FDCEC6DCB886B12CA5B6D4AF681C521E50EE81ECC21CA304A56281917C05FE7910148818CF92A0914A4F6159B091F307F0B6C7A5DCFD41323F963
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............PP.)....sBIT.....O.....PLTE..........................5.#~....<<......................................................~...oq.s.pv..UUbh..VgSZ..EF.H_EL.7?......5(1..#~.0....1tRNS.3DDf............................................e.M\....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS6.....QIDATx..k..&...k.^..Np/...J.-....\f.e}...@9.h........~. .. .. .. .. ...8..n^}u._t..../.....8.......\|R.....}.k z..T..<..7....)....$.X.n....d9...{cL..GqM.....&.X K...s[43...S.u9...6%s.....E[..W.)........w/.=.Z....w....J..DaP...ze....J....P.9.[!..o..^4(Ng..;.'.7..b...g.....g.J./..u.....6Q...n.0..e0.K<R._.....@...9. .s....b.P..N...].....g.b...~.......s..~......UT9.9.Q.l .[_D...Y.a.......w...Mb.O.8....r......cX..8.....^.c....`....@..UV.....l... ......?.p...0`,FU.4..W.).3.$_d..+.0..[...zK..@i.p.TP...0<.0.......B..UG..\.b .<.S....T.5...^.......5..$........+...@.u....y...<..E.&r....\m....}.`..B`..b..8..d..&`.&.l...SqAq...i.^.\|-....S1

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1684), with no line terminators
Category:	downloaded
Size (bytes):	1684
Entropy (8bit):	5.196533883391509
Encrypted:	false
SSDEEP:	24:vZ9Zq3+q5OWx3VHqLIpTQ8ujZBMc5KHnykCepZUvGqRUvGAL7u5ZrqHgkxiZZVOW:vZUJVKLICJEconBdpZUvGCUvGULHg7OW
MD5:	6EC989DE62DF88DA46CB04D4EF164D06
SHA1:	39F40C99E5091984F414E38A217C90554BA809A3
SHA-256:	95BAC848DFBC30C1452DEB69F05891AED70C7C9042428826CC7D85F53F2DA702
SHA-512:	53F085E353F1EA003FF4C52B740B4C582CD7B0418BF489373D512C6DB58B11656A7532C9215445F17BEA91F8A05B8E13F561B6053A590638B68B7078283556F5
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm._yk4Kx1DLwg.L.W.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTs74be_nloI4pEoaS7eJYnNYpJ4fQ"
Preview:	.gb_2e{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_Fc{text-align:left}.gb_Fc>*{color:#bdc1c6;line-height:16px}.gb_Fc div:first-child{color:white}.gb_pa{background:none;border:1px solid transparent;-webkit-border-radius:50%;border-radius:50%;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;height:40px;margin:8px;outline:none;padding:1px;position:absolute;right:0;top:0;width:40px}.gb_pa:hover{background-color:rgba(68,71,70,.08)}.gb_pa:focus,.gb_pa:active{background-color:rgba(68,71,70,.12)}.gb_pa:focus-visible{border-color:#0b57d0;outline:1px solid transparent;outline-offset:-1px}.gb_i .gb_pa:hover,.gb_i .gb_pa:focus,.gb_i .gb_pa:active{background-color:rgba(227,227,227,.08)}.gb_i .gb_pa:focus-visible{border-color:#a8c7fa}.gb_qa{-webkit-box

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	660
Entropy (8bit):	7.7436458678149815
Encrypted:	false
SSDEEP:	12:CPgCZ+X6xCDzNAs1dVc1rhVbo50xCmGjkm9vgZAO2YCGoOg/t+YcJNw:KZ+iC134tFoOxC3/vO2YCpR8YcJNw
MD5:	C3DFF0D9F30EC0BCF4DEC9524505916B
SHA1:	4B378403ACBEBC3747E08C69B5FD7770A850C9EB
SHA-256:	73D788F86BE22112BB53762545989C0F1BBDB7343161130952C9BA3834FF81E3
SHA-512:	677EA304D00D176ACF61FF68BF23BD5F77AD2928D7DE9F4B842292BC9D3FB7029FE9F578B62F142DCE689230F392E828098EED3484FE2DBEE6E1A7AA5378E2C6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp
Preview:	RIFF....WEBPVP8L..../'....Hv.=n.......Q...a..(Rv.o..U.....l..m........0l.6l..f.......A?B.C.A...2h..Ag0....G8.n#)R.j.x..P.F..I;.Ox......7-...bX./..]...3..T....5...x...G.C....%.u.....u/._.=....<!q.\...9.....\....p:..P.4.aS.N).>.>.."..9..Vh ....no....l.1..#6p\c..2..>..=8...........FP.^....+/.~......hs..D.Jm..9...r....t*.H..~T^\|.....l..l......he..}f....d.."....K...&1..................pl.Pf.%6...2X..I...eXQ(.K..1%c..w.s._..._K`K.1}..D.E=...<..ytM..>.q'.e.L.~$...b..;k.M.....t\O..m.I._..F....'........z.]..u?~..P.zJM.. k...p~9..D....".Zl$?f..+...\.Pg..%...;.[R>N.#.W.e..@q...(....]&......K.......?.\|.z..(...:&m.V.C.'...D^.R....

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 142, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1458
Entropy (8bit):	7.681034830025498
Encrypted:	false
SSDEEP:	24:T+WEGLjWGmmZSUFkBGuiwS/kie2nhCjxeu28Zqv5BtLTWvCOUJcXqM:3EApu9BR5S/kieOWeu25v3tnWvTUJcaM
MD5:	3F2748894BBC365BAB38F4B1A7E2D86D
SHA1:	61184EA8E369BB0A845FCAD043E7B014418FF7C1
SHA-256:	F4CDE92AA0C8E0FD44EB168B5C20C2EF446CB98FEDA8AEED287270F378BCA24B
SHA-512:	18E1A164030FDCEC6DCB886B12CA5B6D4AF681C521E50EE81ECC21CA304A56281917C05FE7910148818CF92A0914A4F6159B091F307F0B6C7A5DCFD41323F963
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/hpp/us-flag.png
Preview:	.PNG........IHDR.............PP.)....sBIT.....O.....PLTE..........................5.#~....<<......................................................~...oq.s.pv..UUbh..VgSZ..EF.H_EL.7?......5(1..#~.0....1tRNS.3DDf............................................e.M\....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS6.....QIDATx..k..&...k.^..Np/...J.-....\f.e}...@9.h........~. .. .. .. .. ...8..n^}u._t..../.....8.......\|R.....}.k z..T..<..7....)....$.X.n....d9...{cL..GqM.....&.X K...s[43...S.u9...6%s.....E[..W.)........w/.=.Z....w....J..DaP...ze....J....P.9.[!..o..^4(Ng..;.'.7..b...g.....g.J./..u.....6Q...n.0..e0.K<R._.....@...9. .s....b.P..N...].....g.b...~.......s..~......UT9.9.Q.l .[_D...Y.a.......w...Mb.O.8....r......cX..8.....^.c....`....@..UV.....l... ......?.p...0`,FU.4..W.).3.$_d..+.0..[...zK..@i.p.TP...0<.0.......B..UG..\.b .<.S....T.5...^.......5..$........+...@.u....y...<..E.&r....\m....}.`..B`..b..8..d..&`.&.l...SqAq...i.^.\|-....S1

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7408)
Category:	downloaded
Size (bytes):	498123
Entropy (8bit):	5.606836456834719
Encrypted:	false
SSDEEP:	6144:EhCVA/DGMazl7NPe7UPoJ6l6d3B3ZobrxTxBU15ogau:EhCMKMazFM+jlUwk
MD5:	279D852E9C07006402D95C695CD2B909
SHA1:	2078502CCA6E6A19C394352CC2FBE9FA821CCD8C
SHA-256:	3B413614CC61A92AEC60C8D7B1DCD42DD290B71DE10922DB5CB107A435ADB13E
SHA-512:	A158E62217B88CD3FDF520341228C8B84FE44FBB480D0820C1AD54EE733D9411853103AA2D97C5270E21EC21E3D02E423B48208B62B63A5D22053BF100A96AD6
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/ck=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKQA-gkHQAGwIQgAAEAAAAAAIQAAAgAQgPcEQAigAAQCAGAAiCAAD2UCAAQyAQEQQASQBAI5CABABGMYgFQAYAAAAAACJAAAABxAwAACAyIAAh5CAAABOkEAFgAAEsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=1/exm=SNUn3,cEt90b,cdos,csi,d,dtl0hd,eHDfl,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/ed=1/dg=0/br=1/ujg=1/rs=ACT90oHImSEwQ9-p7fjPGqD0ykhIDf0pzg/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aZ61od:arTwJ;af0EJf:ghinId;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;sZmdvc:rdGEfc;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=B2qlPe,DhPYme,GU4Gab,MpJwZc,NzU6V,UUJqVe,Wo3n8,aa,abd,async,epYOx,ifl,ms4mZb,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch?xjs=s1"
Preview:	_F_installCss(".jbBItf{display:block;position:relative}.DU0NJ{bottom:0;left:0;position:absolute;right:0;top:0}.lP3Jof{display:inline-block;position:relative}.nNMuOd{animation:qli-container-rotate 1568.2352941176ms linear infinite}@keyframes qli-container-rotate{from{transform:rotate(0)}to{transform:rotate(1turn)}}.RoKmhb{height:100%;opacity:0;position:absolute;width:100%}.nNMuOd .VQdeab{animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-blue-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.nNMuOd .IEqiAf{animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-red-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.nNMuOd .smocse{animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-yellow-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.nNMuOd .FlKbCe{animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-green-fade-in-out 5332ms cubic-be

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (519)
Category:	downloaded
Size (bytes):	23397
Entropy (8bit):	5.409777792007739
Encrypted:	false
SSDEEP:	384:huHFH4Z/4syWamtw12L6E1FMDF/rSVz99xlUy6rQkdnVH9/hn1AS8T44tgumR9nw:hulYZ/4syFmc2eE1FMDF/rsz99xmy6rI
MD5:	9DEADC578FBE801CF831A5D83EFF0D46
SHA1:	525A7197380BB79059B057C0AD144CA332CED8B4
SHA-256:	7D9D36A5F8213367EDCFAD2C77502409B28F7B89F117C79881110AF03BFC8803
SHA-512:	480EF310C52FE36FB9E54C4554BE359E8C8E7A289B6EB862050C9B22DB0E3CB8D5A26ADBB069EBE309A7AFB88BCDB8B33D7273BE2AAC1006F0341ABCE312BD73
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=sy1c7,P10Owf,sypl,sy1at,sy1av,gSZvdb,syva,syvb,WlNQGd,syvo,syvq,nabPbb,sypk,sypm,sypn,sypq,DPreE,syk9,syv3,syv5,CnSW2d,kQvlef,syvp,fXO0xe?xjs=s3"
Preview:	this._hd=this._hd\|\|{};(function(_){var window=this;.try{._.z0c=_.Ad("P10Owf",[_.cq]);.}catch(e){_._DumpException(e)}.try{._.y("P10Owf");.var A0c=function(a){_.A.call(this,a.Ma);this.Qb=a.service.Qb;this.data=a.Zd.wda};_.B(A0c,_.A);A0c.Ia=function(){return{service:{Qb:_.vt},Zd:{wda:_.qB}}};A0c.prototype.oa=function(){this.Qb.ka().oa(this.getRoot().el(),1).log(!0)};A0c.prototype.ka=function(a){var b,c;(null==(b=a.data)?0:_.Ee(b,4))&&(null==(c=this.data)?0:_.Ee(c,4))&&_.Ee(a.data,4)!==_.Ee(this.data,4)\|\|this.Qb.ka().oa(this.getRoot().el(),2).log(!0)};A0c.prototype.Ca=function(a){this.Qb.ka().ka(a.rb.el()).log(!0);_.cf(document,_.jic)};.A0c.prototype.ta=function(a){this.Qb.ka().ka(a.rb.el()).log(!0);_.cf(document,_.iic,this.data)};_.G(A0c.prototype,"kEOk4d",function(){return this.ta});_.G(A0c.prototype,"fT3Ybb",function(){return this.Ca});_.G(A0c.prototype,"hRwSgb",function(){return this.ka});_.G(A0c.prototype,"MlP2je",function(){return this.oa});_.hr(_.z0c,A0c);._.z();.}catch(e){_._DumpEx

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1573
Entropy (8bit):	5.103719262384019
Encrypted:	false
SSDEEP:	24:XrNp1Vmq2eHH/kCNymwQmMbKMHNhIZyUr/gLHslT+OG1I6aL1qWc5sRrd7RyuZxw:XrNwVSrymV7bKcNhehjgrN9aRqAhAuZ+
MD5:	B9A8D83F163C5E528B6CF68F78572894
SHA1:	D1893BAA923BD90B95948D4C2CA37632207EBB99
SHA-256:	B126B103B1F6AA52F8DCB8D8E92AAA1D953C72351A833CB06387C542D9393950
SHA-512:	7833166F7BCAC64C13D30A92D0EFB637F3602C91F1FEBCC281DA4689C91BD1AD85B19CB39DC99D6641E2B08A36068630EEA0ACA1DB2E34BC314BCAD1DC52FAEE
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=syf9,aLUfP?xjs=s3"
Preview:	this._hd=this._hd\|\|{};(function(_){var window=this;.try{._.dqb=function(a){this.Ht=a};.}catch(e){_._DumpException(e)}.try{._.y("aLUfP");.var eqb=function(a){_.Bn.call(this,a.Ma);var b=this;this.window=a.service.window.get();this.ta=this.Ht();this.oa=window.orientation;this.ka=function(){var c=b.Ht(),d=b.WWa()&&90===Math.abs(window.orientation)&&b.oa===-1window.orientation;b.oa=window.orientation;if(c!==b.ta\|\|d){b.ta=c;d=_.Oa(b.Qd);for(var e=d.next();!e.done;e=d.next()){e=e.value;var f=new _.dqb(c);try{e(f)}catch(g){_.ca(g)}}}};this.Qd=new Set;this.window.addEventListener("resize",this.ka);this.WWa()&&this.window.addEventListener("orientationchange",.this.ka)};_.B(eqb,_.Bn);eqb.Va=_.Bn.Va;eqb.Ia=function(){return{service:{window:_.En}}};_.m=eqb.prototype;_.m.addListener=function(a){this.Qd.add(a)};_.m.removeListener=function(a){this.Qd.delete(a)};._.m.Ht=function(){if(_.la()&&_.ja()&&!navigator.userAgent.includes("GSA")){var a=_.ol(this.window);a=new _.$k(a.width,Math.round(a.widththi

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	660
Entropy (8bit):	7.7436458678149815
Encrypted:	false
SSDEEP:	12:CPgCZ+X6xCDzNAs1dVc1rhVbo50xCmGjkm9vgZAO2YCGoOg/t+YcJNw:KZ+iC134tFoOxC3/vO2YCpR8YcJNw
MD5:	C3DFF0D9F30EC0BCF4DEC9524505916B
SHA1:	4B378403ACBEBC3747E08C69B5FD7770A850C9EB
SHA-256:	73D788F86BE22112BB53762545989C0F1BBDB7343161130952C9BA3834FF81E3
SHA-512:	677EA304D00D176ACF61FF68BF23BD5F77AD2928D7DE9F4B842292BC9D3FB7029FE9F578B62F142DCE689230F392E828098EED3484FE2DBEE6E1A7AA5378E2C6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../'....Hv.=n.......Q...a..(Rv.o..U.....l..m........0l.6l..f.......A?B.C.A...2h..Ag0....G8.n#)R.j.x..P.F..I;.Ox......7-...bX./..]...3..T....5...x...G.C....%.u.....u/._.=....<!q.\...9.....\....p:..P.4.aS.N).>.>.."..9..Vh ....no....l.1..#6p\c..2..>..=8...........FP.^....+/.~......hs..D.Jm..9...r....t*.H..~T^\|.....l..l......he..}f....d.."....K...&1..................pl.Pf.%6...2X..I...eXQ(.K..1%c..w.s._..._K`K.1}..D.E=...<..ytM..>.q'.e.L.~$...b..;k.M.....t\O..m.I._..F....'........z.]..u?~..P.zJM.. k...p~9..D....".Zl$?f..+...\.Pg..%...;.[R>N.#.W.e..@q...(....]&......K.......?.\|.z..(...:&m.V.C.'...D^.R....

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 28, 2024 06:35:55.885524988 CEST	49700	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:55.885550976 CEST	443	49700	37.27.57.153	192.168.2.16
May 28, 2024 06:35:55.885646105 CEST	49700	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:55.885965109 CEST	49700	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:55.885982037 CEST	443	49700	37.27.57.153	192.168.2.16
May 28, 2024 06:35:55.886317015 CEST	49701	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:55.886323929 CEST	443	49701	37.27.57.153	192.168.2.16
May 28, 2024 06:35:55.886395931 CEST	49701	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:55.886603117 CEST	49701	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:55.886619091 CEST	443	49701	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.579651117 CEST	443	49700	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.580039978 CEST	49700	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:56.580066919 CEST	443	49700	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.581146955 CEST	443	49700	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.581208944 CEST	49700	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:56.582262039 CEST	49700	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:56.582335949 CEST	443	49700	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.582401037 CEST	49700	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:56.582412004 CEST	443	49700	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.593597889 CEST	443	49701	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.593816996 CEST	49701	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:56.593832016 CEST	443	49701	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.594916105 CEST	443	49701	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.595055103 CEST	49701	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:56.595303059 CEST	49701	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:56.595380068 CEST	443	49701	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.626173973 CEST	49700	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:56.641169071 CEST	49701	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:56.641196012 CEST	443	49701	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.688150883 CEST	49701	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:56.928196907 CEST	443	49700	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.928271055 CEST	443	49700	37.27.57.153	192.168.2.16
May 28, 2024 06:35:56.928389072 CEST	49700	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:56.928734064 CEST	49700	443	192.168.2.16	37.27.57.153
May 28, 2024 06:35:56.928749084 CEST	443	49700	37.27.57.153	192.168.2.16
May 28, 2024 06:35:57.054351091 CEST	49702	443	192.168.2.16	91.215.85.79
May 28, 2024 06:35:57.054383039 CEST	443	49702	91.215.85.79	192.168.2.16
May 28, 2024 06:35:57.054507971 CEST	49702	443	192.168.2.16	91.215.85.79
May 28, 2024 06:35:57.054794073 CEST	49702	443	192.168.2.16	91.215.85.79
May 28, 2024 06:35:57.054812908 CEST	443	49702	91.215.85.79	192.168.2.16
May 28, 2024 06:35:57.855750084 CEST	443	49702	91.215.85.79	192.168.2.16
May 28, 2024 06:35:57.856079102 CEST	49702	443	192.168.2.16	91.215.85.79
May 28, 2024 06:35:57.856100082 CEST	443	49702	91.215.85.79	192.168.2.16
May 28, 2024 06:35:57.857573986 CEST	443	49702	91.215.85.79	192.168.2.16
May 28, 2024 06:35:57.857645035 CEST	49702	443	192.168.2.16	91.215.85.79
May 28, 2024 06:35:57.858766079 CEST	49702	443	192.168.2.16	91.215.85.79
May 28, 2024 06:35:57.858884096 CEST	443	49702	91.215.85.79	192.168.2.16
May 28, 2024 06:35:57.859062910 CEST	49702	443	192.168.2.16	91.215.85.79
May 28, 2024 06:35:57.859070063 CEST	443	49702	91.215.85.79	192.168.2.16
May 28, 2024 06:35:57.900337934 CEST	49702	443	192.168.2.16	91.215.85.79
May 28, 2024 06:35:58.736357927 CEST	443	49702	91.215.85.79	192.168.2.16
May 28, 2024 06:35:58.736658096 CEST	443	49702	91.215.85.79	192.168.2.16
May 28, 2024 06:35:58.736726046 CEST	49702	443	192.168.2.16	91.215.85.79
May 28, 2024 06:35:58.737916946 CEST	49702	443	192.168.2.16	91.215.85.79
May 28, 2024 06:35:58.737932920 CEST	443	49702	91.215.85.79	192.168.2.16
May 28, 2024 06:35:58.737947941 CEST	49702	443	192.168.2.16	91.215.85.79
May 28, 2024 06:35:58.737982988 CEST	49702	443	192.168.2.16	91.215.85.79
May 28, 2024 06:35:58.746273994 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:58.746301889 CEST	443	49704	172.217.16.206	192.168.2.16
May 28, 2024 06:35:58.746387005 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:58.748136997 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:58.748147964 CEST	443	49704	172.217.16.206	192.168.2.16
May 28, 2024 06:35:59.397135973 CEST	443	49704	172.217.16.206	192.168.2.16
May 28, 2024 06:35:59.397413969 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:59.397428989 CEST	443	49704	172.217.16.206	192.168.2.16
May 28, 2024 06:35:59.397980928 CEST	443	49704	172.217.16.206	192.168.2.16
May 28, 2024 06:35:59.398046970 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:59.399005890 CEST	443	49704	172.217.16.206	192.168.2.16
May 28, 2024 06:35:59.399072886 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:59.400069952 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:59.400168896 CEST	443	49704	172.217.16.206	192.168.2.16
May 28, 2024 06:35:59.400248051 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:59.400254011 CEST	443	49704	172.217.16.206	192.168.2.16
May 28, 2024 06:35:59.445616961 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:59.690567970 CEST	443	49704	172.217.16.206	192.168.2.16
May 28, 2024 06:35:59.690668106 CEST	443	49704	172.217.16.206	192.168.2.16
May 28, 2024 06:35:59.690735102 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:59.691034079 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:59.691051960 CEST	443	49704	172.217.16.206	192.168.2.16
May 28, 2024 06:35:59.691061974 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:59.691098928 CEST	49704	443	192.168.2.16	172.217.16.206
May 28, 2024 06:35:59.701709032 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:35:59.701797962 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:35:59.701911926 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:35:59.702094078 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:35:59.702133894 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.355813980 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.356096029 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.356157064 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.357872009 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.357969046 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.358915091 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.359033108 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.359075069 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.399104118 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.399144888 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.447122097 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.704170942 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.704243898 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.704278946 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.704315901 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.704324007 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.704355001 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.704389095 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.708066940 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.708162069 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.708179951 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.714065075 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.714101076 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.714159012 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.714175940 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.714231968 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.790896893 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.790947914 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.791027069 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.791042089 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.793565035 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.793642998 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.793657064 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.798074961 CEST	49706	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.798130989 CEST	443	49706	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.798239946 CEST	49706	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.798445940 CEST	49706	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.798475027 CEST	443	49706	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.799547911 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.799617052 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.799634933 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.805668116 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.805741072 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.805757046 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.812025070 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.812163115 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.812181950 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.817572117 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.817661047 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.817676067 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.823254108 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.823335886 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.823344946 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.828952074 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.829009056 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.829025030 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.834671021 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.834742069 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.834750891 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.840267897 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.840325117 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.840333939 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.845918894 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.845993996 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.846007109 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.880347013 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.880388975 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.880419016 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.880444050 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.880461931 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.880496979 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.881210089 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.881244898 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.881274939 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.881289959 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.881350040 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.883033037 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.885369062 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.885432959 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.885447979 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.891050100 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.891146898 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.891160965 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.896883965 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.897057056 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.897066116 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.902343988 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.902421951 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.902436018 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.908195972 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.908262014 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.908276081 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.913430929 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.913502932 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.913516998 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.918900013 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.918963909 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.918978930 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.924388885 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.924465895 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.924479961 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.929538965 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.929605961 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.929620028 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.934098959 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.934161901 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.934175968 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.938661098 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.938699961 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.938740015 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.938755989 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.938813925 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.942724943 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.946743965 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.946770906 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.946809053 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.946841955 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.946897984 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.950617075 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.954530954 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.954560041 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.954600096 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.954617023 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.954674959 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.958167076 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.962543964 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.962578058 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.963123083 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.963139057 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.963210106 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.965552092 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.969182968 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.969222069 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.969252110 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.969266891 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.969321012 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.972956896 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.975130081 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.975198984 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.975212097 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.977390051 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.977472067 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.977485895 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.979686975 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.979717970 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.979758978 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.979775906 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.979845047 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.982009888 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.984143972 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.984175920 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.984209061 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.984227896 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.984289885 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.986583948 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.988588095 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.988840103 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.988909006 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.988924026 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.988982916 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.991949081 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.993052959 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.993124962 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.993139982 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.997730970 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.997766018 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.997802019 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.997817039 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.997889996 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.997951984 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:00.997966051 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:00.998028994 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.003170967 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.003227949 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.003262997 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.003284931 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.003300905 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.006234884 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.008347034 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.008651018 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.008680105 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.008711100 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.008724928 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.008793116 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.014020920 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.014086008 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.014122963 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.014153004 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.014179945 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.014197111 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.014225006 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.019453049 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.019498110 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.019531012 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.019560099 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.019577026 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.019603968 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.023803949 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.023850918 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.023866892 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.023889065 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.024302006 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.024316072 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.028096914 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.028132915 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.028160095 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.028173923 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.028387070 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.028402090 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.032416105 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.032457113 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.032476902 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.032490969 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.032691002 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.032704115 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.036478043 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.036518097 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.036555052 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.036608934 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.036624908 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.036674976 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.040200949 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.040235043 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.040301085 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.040317059 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.040389061 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.040401936 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.044464111 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.044500113 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.044527054 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.044542074 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.044600010 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.044611931 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.047646999 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.047708035 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.047720909 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.047774076 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.048084021 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.048096895 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.053332090 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.053361893 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.053441048 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.053455114 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.053512096 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.053524971 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.053545952 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.053698063 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.053720951 CEST	443	49705	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.053742886 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.053742886 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.053806067 CEST	49705	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.113565922 CEST	49707	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.113605976 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.113718987 CEST	49707	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.114052057 CEST	49707	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.114082098 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.129513979 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.129600048 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.129703045 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.130884886 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.130924940 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.287602901 CEST	49709	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.287686110 CEST	443	49709	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.287782907 CEST	49709	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.288028002 CEST	49709	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.288053036 CEST	443	49709	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.464129925 CEST	443	49706	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.467600107 CEST	49706	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.467633963 CEST	443	49706	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.468291998 CEST	443	49706	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.474750996 CEST	49706	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.474930048 CEST	49706	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.474972010 CEST	443	49706	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.525203943 CEST	49706	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.820211887 CEST	443	49706	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.820343018 CEST	443	49706	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.820667982 CEST	443	49706	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.820770025 CEST	49706	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.821628094 CEST	49706	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.821675062 CEST	443	49706	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.823353052 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.823632956 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.823954105 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.824018002 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.824235916 CEST	49707	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.824274063 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.824862003 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.825485945 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.825577021 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.825900078 CEST	49707	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.826083899 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.826344013 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.826431036 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.826545954 CEST	49707	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.826692104 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.826725006 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.870537043 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.877142906 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.936467886 CEST	443	49709	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.936753035 CEST	49709	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.936774015 CEST	443	49709	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.940298080 CEST	443	49709	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.940376997 CEST	49709	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.940757036 CEST	49709	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.940934896 CEST	443	49709	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.941198111 CEST	49712	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.941226006 CEST	443	49712	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.941298008 CEST	49712	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.941452980 CEST	49713	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.941458941 CEST	443	49713	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.941545010 CEST	49709	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.941553116 CEST	443	49709	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.941576958 CEST	49713	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.942523003 CEST	49712	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.942523956 CEST	49713	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:01.942540884 CEST	443	49712	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.942572117 CEST	443	49713	142.250.186.68	192.168.2.16
May 28, 2024 06:36:01.988168001 CEST	49709	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.105747938 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.105797052 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.105823994 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.105917931 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.105937958 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.105966091 CEST	49707	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.106040001 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.106081963 CEST	49707	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.106112957 CEST	49707	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.106129885 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.106156111 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.106220007 CEST	49707	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.106868982 CEST	49707	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.106899977 CEST	443	49707	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.107261896 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.107327938 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.107371092 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.107386112 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.107433081 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.107492924 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.107510090 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.107896090 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.107949972 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.107961893 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.113141060 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.113174915 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.113225937 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.113239050 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.113293886 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.118304014 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.118340015 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:02.118419886 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.118650913 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.118669033 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:02.119266987 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.162153959 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.162214994 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.193640947 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.193758965 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.193779945 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.196893930 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.196937084 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.196969986 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.196988106 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.197046041 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.203263998 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.208641052 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.208683014 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.208708048 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.208719969 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.208772898 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.214562893 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.218802929 CEST	443	49709	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.219032049 CEST	443	49709	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.219113111 CEST	49709	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.219544888 CEST	49709	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.219578981 CEST	443	49709	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.219605923 CEST	49709	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.219649076 CEST	49709	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.220737934 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.220808983 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.220823050 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.226589918 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.226630926 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.226660013 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.226672888 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.226727962 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.232245922 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.238519907 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.238558054 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.238600016 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.238619089 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.238689899 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.243819952 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.249583960 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.249627113 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.249654055 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.249665976 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.249725103 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.249737024 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.283129930 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.283278942 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.283309937 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.283324003 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.283337116 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.283389091 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.286250114 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.286302090 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.286338091 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.286341906 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.286354065 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.286406040 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.286423922 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.286498070 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.288692951 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.294545889 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.294595957 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.294615030 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.294629097 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.294682026 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.300206900 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.305196047 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.305252075 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.305285931 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.305299044 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.305356979 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.310276985 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.315458059 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.315505028 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.315550089 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.315562963 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.315617085 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.320533037 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.325706959 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.325790882 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.325803041 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.325854063 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.325906038 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.325917959 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.330826044 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.330893993 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.330905914 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.335465908 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.335536003 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.335547924 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.339781046 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.339865923 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.339912891 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.343946934 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.344022036 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.344065905 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.348208904 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.348261118 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.348278999 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.348303080 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.348356009 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.352108955 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.355918884 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.355981112 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.356004000 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.356017113 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.356065035 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.359533072 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.363248110 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.363297939 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.363312960 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.363343954 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.363401890 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.366947889 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.370403051 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.370456934 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.370465994 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.370477915 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.370563984 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.374058962 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.376463890 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.376508951 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.376532078 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.376545906 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.376606941 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.376620054 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.378736973 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.378814936 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.378828049 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.381093025 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.381161928 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.381175041 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.383194923 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.383250952 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.383263111 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.385528088 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.385593891 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.385607004 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.387640953 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.387705088 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.387717962 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.389883995 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.389945984 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.389957905 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.392107964 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.392174006 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.392187119 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.394737005 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.394800901 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.394813061 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.396641016 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.396706104 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.396718025 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.399794102 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.399836063 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.399862051 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.399878979 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.399931908 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.400975943 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.404797077 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.404861927 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.404875040 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.405409098 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.405468941 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.405472994 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.405484915 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.405535936 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.409928083 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.410171986 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.410235882 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.410242081 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.410254955 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.410305977 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.415446043 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.415535927 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.415575027 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.415592909 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.415606976 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.415667057 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.420150995 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.420309067 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.420352936 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.420370102 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.420382977 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.420434952 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.424839020 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.425245047 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.425297022 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.425301075 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.425313950 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.425364017 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.429286957 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.429375887 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.429421902 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.429431915 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.429445028 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.429505110 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.433648109 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.433722019 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.433765888 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.433780909 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.433794022 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.433846951 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.437706947 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.437789917 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.437830925 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.437848091 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.437860012 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.437916994 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.437993050 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.442137957 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.442184925 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.442205906 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.442218065 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.442271948 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.442282915 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.450330019 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.450387001 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.450433016 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.450433969 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.450453997 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.450498104 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.451035023 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.451092005 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.451112986 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.451126099 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.451186895 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.451198101 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.453564882 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.453615904 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.453634024 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.453644991 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.453706026 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.453716993 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.456465960 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.456571102 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.456582069 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.456638098 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.456686020 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.456697941 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.456708908 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.456758976 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.460408926 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.460517883 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.460562944 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.460597992 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.460609913 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.460670948 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.463660955 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.463747978 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.463799953 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.463800907 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.463815928 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.463866949 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.466705084 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.466869116 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.466913939 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.466924906 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.466937065 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.466989994 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.468584061 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.469676018 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.469731092 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.469738960 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.469750881 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.469809055 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.471112967 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.471215010 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.471266985 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.471278906 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.472626925 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.472692966 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.472703934 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.473987103 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.474051952 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.474062920 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.475651979 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.475718975 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.475732088 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.476880074 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.476944923 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.476957083 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.478177071 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.478250980 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.478261948 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.479649067 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.479696035 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.479718924 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.479732990 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.479789972 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.480917931 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.482168913 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.482214928 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.482234001 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.482245922 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.482297897 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.484124899 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.486001015 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.486073017 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.486084938 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.486148119 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.486196041 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.486198902 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.486208916 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.486258030 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.490555048 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.490701914 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.490753889 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.490766048 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.490833998 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.490873098 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.490880966 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.490892887 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.490943909 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.499654055 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.499773026 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.499815941 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.499835968 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.499849081 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.499895096 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.499911070 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.499922991 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.499974966 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.504712105 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.504812002 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.504858017 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.504868031 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.504880905 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.504937887 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.504949093 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.514714003 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.514758110 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.514780998 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.514795065 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.514854908 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.514866114 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.514967918 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.515017033 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.515028000 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.518666983 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.518722057 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.518735886 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.518748045 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.518805027 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.518807888 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.518831015 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.518894911 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.518906116 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.527232885 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.527292967 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.527304888 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.527317047 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.527380943 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.527390957 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.527450085 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.527506113 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.527517080 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.531497002 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.531539917 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.531558037 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.531570911 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.531631947 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.531644106 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.531657934 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.531719923 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.531732082 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.534877062 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.534914970 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.534953117 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.534966946 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.535029888 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.535059929 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.542814016 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.542875051 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.542876959 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.542891026 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.542944908 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.542956114 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.543020010 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.543064117 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.543093920 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.543106079 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.543158054 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.545855999 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.546027899 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.546072006 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.546094894 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.546107054 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.546154022 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.546163082 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.546174049 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.546227932 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.553245068 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.553359985 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.553404093 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.553433895 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.553447008 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.553459883 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.553499937 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.556422949 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.556473017 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.556499004 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.556518078 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.556530952 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.556572914 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.556624889 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.556669950 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.556670904 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.556683064 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.556730032 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.560513973 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.560615063 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.560673952 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.560710907 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.560786963 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.560832024 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.560844898 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.565490007 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.565548897 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.565563917 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.565578938 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.565629959 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.565634966 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.565643072 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.565702915 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.565709114 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.569078922 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.569127083 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.569139957 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.569145918 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.569188118 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.569243908 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.569338083 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.569380999 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.569387913 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.573904991 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.573959112 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.573967934 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.573972940 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.574038029 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.574043036 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.574090958 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.574152946 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.574158907 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.580274105 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.580348015 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.580358982 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.580471992 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.580517054 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.580527067 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.580538988 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.580590010 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.580600977 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.583944082 CEST	443	49713	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.584203959 CEST	49713	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.584218025 CEST	443	49713	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.584841013 CEST	443	49713	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.585216999 CEST	49713	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.585361004 CEST	49713	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.585366964 CEST	443	49713	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.585382938 CEST	443	49713	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.589209080 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.589257956 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.589272976 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.589284897 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.589342117 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.589351892 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.591206074 CEST	443	49712	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.591428995 CEST	49712	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.591437101 CEST	443	49712	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.591766119 CEST	443	49712	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.592118979 CEST	49712	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.592181921 CEST	443	49712	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.592238903 CEST	49712	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.594324112 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.594381094 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.594384909 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.594397068 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.594455957 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.594463110 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.594475985 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.594546080 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.594558954 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.606828928 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.606895924 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.606909037 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.607336998 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.607378960 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.607394934 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.607405901 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.607455015 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.607461929 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.607472897 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.607539892 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.610363960 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.610446930 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.610497952 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.610505104 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.610516071 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.610573053 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.610577106 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.610586882 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.610646963 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.616950035 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.617044926 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.617100000 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.617113113 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.617125034 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.617177010 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.617187023 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.620990038 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.621058941 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.621069908 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.621192932 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.621239901 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.621243954 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.621256113 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.621309996 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.621320009 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.625125885 CEST	49713	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.632416964 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.632479906 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.632502079 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.632514954 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.632580996 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.632594109 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.632605076 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.632658005 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.632735968 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.632831097 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.632878065 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.632879019 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.632891893 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.632941961 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.632951975 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.633582115 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.633647919 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.633658886 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.634511948 CEST	443	49712	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.635615110 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.635668993 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.635685921 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.635704041 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.635765076 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.635891914 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.635992050 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.636039972 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.636050940 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.643055916 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.643117905 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.643130064 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.643141985 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.643204927 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.643208981 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.643223047 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.643286943 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.643333912 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.646125078 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.646174908 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.646193027 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.646204948 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.646255016 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.646265030 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.646275997 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.646325111 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.650279045 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.650384903 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.650429964 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.650437117 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.650448084 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.650504112 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.650513887 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.662312984 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.662395000 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.662399054 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.662410021 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.662465096 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.662475109 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.662545919 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.662595987 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.662606955 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.662769079 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.662822962 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.662832975 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.662909985 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.662954092 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.662959099 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.662971020 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.663017988 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.663028002 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.663382053 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.663436890 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.663444042 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.663455009 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.663500071 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.663510084 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.664000034 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.664050102 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.664083004 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.664093971 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.664153099 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.669673920 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.669789076 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.669840097 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.669850111 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.669899940 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.669949055 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.669960022 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.678905964 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.678976059 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.678980112 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.678992033 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.679048061 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.679058075 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.679110050 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.679207087 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.679218054 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.693871975 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.693922043 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.693952084 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.693964005 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.694027901 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.694037914 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.694240093 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.694281101 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.694291115 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.694302082 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.694354057 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.694598913 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.694684982 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.694730997 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.694737911 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.694749117 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.694799900 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.694811106 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.698029041 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.698069096 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.698110104 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.698111057 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.698124886 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.698204041 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.698205948 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.698257923 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.698271990 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.706434011 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.706516981 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.706561089 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.706602097 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.706640959 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.706640959 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.706640959 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.706707001 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.706760883 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.710650921 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.710707903 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.710738897 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.710752964 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.710814953 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.710894108 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.722800970 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.722883940 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.722894907 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.722908020 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.722990036 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.722995043 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.723017931 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.723104000 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.723105907 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.723114967 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.723181009 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.723193884 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.723247051 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.723293066 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.723297119 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.723309040 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.723364115 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.723375082 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.725382090 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.725445032 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.725461006 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.725472927 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.725524902 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.725536108 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.725634098 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.725673914 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.725683928 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.725696087 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.725744963 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.732409000 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.732505083 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.732561111 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.732572079 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.732662916 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.732712030 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.732712984 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.732722044 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.732773066 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.735501051 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.735598087 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.735646009 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.735652924 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.735663891 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.735716105 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.735727072 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.739743948 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.739811897 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.739811897 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.739825010 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.739873886 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.739883900 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.739962101 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.740010023 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.740020990 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.744332075 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.744390011 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.744402885 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.744415045 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.744467974 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.744469881 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.744482040 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.744545937 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.744556904 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.748226881 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.748291969 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.748300076 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.748311043 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.748368025 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.748378038 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.748433113 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.748483896 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.748495102 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.752898932 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.752952099 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.752979994 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.752993107 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.753051043 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.753055096 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.753070116 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.753127098 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.753139019 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.759366989 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.759438038 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.759462118 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.759474039 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.759527922 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.759532928 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.759543896 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.759604931 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.768246889 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.768362045 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.768403053 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.768416882 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.768429041 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.768486977 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.768488884 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.768501043 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.768560886 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.778186083 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:02.778517962 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.778537035 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:02.779548883 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:02.779623032 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.779999971 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.780064106 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:02.780167103 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.780177116 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:02.783358097 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.783457041 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.783503056 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.783513069 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.783524990 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.783579111 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.783588886 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.783699989 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.783747911 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.783754110 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.783766985 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.783816099 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.783826113 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.783902884 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.783951044 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.783951998 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.783962965 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.784014940 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.787545919 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.787631989 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.787676096 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.787693024 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.787704945 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.787755966 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.787758112 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.787770033 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.787827015 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.795906067 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.795996904 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.796046019 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.796077013 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.796088934 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.796145916 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.796156883 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.800209999 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.800263882 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.800283909 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.800296068 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.800345898 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.800349951 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.800360918 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.800419092 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.800430059 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.811662912 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.811718941 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.811758995 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.811765909 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.811779976 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.811821938 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.811851978 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.811907053 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.811909914 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.811922073 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.811975956 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.811985970 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.812032938 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.812076092 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.812097073 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.812108040 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.812164068 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.812175035 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.818311930 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.818366051 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.818411112 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.818417072 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.818438053 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.818466902 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.818519115 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.818578959 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.818589926 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.825416088 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.825468063 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.825510979 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.825525999 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.825539112 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.825589895 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.825608969 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.825668097 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.827373981 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.827464104 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.827507019 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.827523947 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.827538013 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.827583075 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.827593088 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.827604055 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.827656984 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.829297066 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.829381943 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.829425097 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.829442978 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.829454899 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.829508066 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.829508066 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.829523087 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.829586983 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.830144882 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.833854914 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.833956003 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.833996058 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.834019899 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.834038019 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.834124088 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.834126949 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.834139109 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.834206104 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.837997913 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.838108063 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.838151932 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.838160992 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.838172913 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.838227034 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.838227987 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.838238001 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.838298082 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.847467899 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.847551107 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.847593069 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.847608089 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.847620964 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.847672939 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.847683907 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.852341890 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.852391958 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.852417946 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.852431059 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.852494001 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.852504969 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.852555037 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.852607012 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.852618933 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.859735012 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.859783888 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.859812021 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.859823942 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.859874964 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.859888077 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.859899044 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.859961033 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.859972000 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.865447044 CEST	443	49713	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.865514994 CEST	443	49713	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.865582943 CEST	443	49713	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.865654945 CEST	49713	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.865654945 CEST	49713	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.866489887 CEST	49713	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.866508961 CEST	443	49713	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.869242907 CEST	49715	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.869263887 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.869352102 CEST	49715	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.869762897 CEST	49715	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.869780064 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.870115042 CEST	49716	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.870125055 CEST	443	49716	142.250.185.100	192.168.2.16
May 28, 2024 06:36:02.870184898 CEST	49716	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.870435953 CEST	49716	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.870452881 CEST	443	49716	142.250.185.100	192.168.2.16
May 28, 2024 06:36:02.875401974 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.875446081 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.875490904 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.875493050 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.875505924 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.875557899 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.875561953 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.875610113 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.875616074 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.875627041 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.875678062 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.875690937 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.875766039 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.875799894 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.875817060 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.875828981 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.875881910 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.875893116 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.875890017 CEST	443	49712	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.876094103 CEST	443	49712	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.876152992 CEST	49712	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.876884937 CEST	49712	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.876892090 CEST	443	49712	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.877233982 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.877274990 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.877295971 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.877307892 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.877347946 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.877362967 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.877373934 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.877438068 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.881513119 CEST	49717	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.881526947 CEST	443	49717	142.250.185.100	192.168.2.16
May 28, 2024 06:36:02.881602049 CEST	49717	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.881854057 CEST	49717	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:02.881864071 CEST	443	49717	142.250.185.100	192.168.2.16
May 28, 2024 06:36:02.885323048 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.885438919 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.885481119 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.885519981 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.885524035 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.885535955 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.885570049 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.889738083 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.889789104 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.889826059 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.889831066 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.889842987 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.889899969 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.889914036 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.889950037 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.889961004 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.889972925 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.890021086 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.904445887 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.904592037 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.904649973 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.904687881 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.904690981 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.904704094 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.904747963 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.905042887 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.905081987 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.905118942 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.905181885 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.905181885 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.905198097 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.905515909 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.905550003 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.905591965 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.905605078 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.905661106 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.914602041 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.914717913 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.914757967 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.914794922 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.914808035 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.914856911 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.915052891 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.915127039 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.915179014 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.915184975 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.915198088 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.915261030 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.915786028 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.915855885 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.915913105 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.915924072 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.918029070 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.918104887 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.918121099 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.918133020 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.918186903 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.918186903 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.918200016 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.918307066 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.918384075 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.918457031 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.918529987 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.918530941 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.918530941 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:02.918550968 CEST	443	49708	142.250.186.68	192.168.2.16
May 28, 2024 06:36:02.918633938 CEST	49708	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.065634012 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.065677881 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.065704107 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.065727949 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.065747023 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.065746069 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.065776110 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.065788984 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.065820932 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.065857887 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.065906048 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.065957069 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.067167997 CEST	49714	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.067183971 CEST	443	49714	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.216223955 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:03.216264963 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:03.216361046 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:03.216633081 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:03.216645956 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:03.308492899 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.308533907 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.308598042 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.308917046 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.308928013 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.340636015 CEST	49721	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.340656042 CEST	443	49721	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.340735912 CEST	49721	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.340981960 CEST	49722	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.340989113 CEST	443	49722	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.341034889 CEST	49722	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.341080904 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.341087103 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.341130018 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.341402054 CEST	49721	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.341413021 CEST	443	49721	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.341617107 CEST	49722	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.341629982 CEST	443	49722	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.341787100 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.341797113 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.516096115 CEST	443	49716	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.516295910 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.516453028 CEST	49716	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.516469002 CEST	443	49716	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.516561985 CEST	49715	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.516570091 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.517033100 CEST	443	49716	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.517034054 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.517324924 CEST	49715	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.517400026 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.517535925 CEST	49716	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.517635107 CEST	443	49716	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.517671108 CEST	49715	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.517723083 CEST	49716	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.529813051 CEST	49673	443	192.168.2.16	204.79.197.203
May 28, 2024 06:36:03.535924911 CEST	443	49717	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.536386013 CEST	49717	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.536398888 CEST	443	49717	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.536709070 CEST	443	49717	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.537372112 CEST	49717	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.537431955 CEST	443	49717	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.537599087 CEST	49717	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.558510065 CEST	443	49716	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.558531046 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.578507900 CEST	443	49717	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.794874907 CEST	443	49716	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.794958115 CEST	443	49716	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.795031071 CEST	49716	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.795047045 CEST	443	49716	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.795061111 CEST	443	49716	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.795109034 CEST	49716	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.795790911 CEST	49716	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.795802116 CEST	443	49716	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.827639103 CEST	443	49717	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.829368114 CEST	443	49717	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.829452038 CEST	49717	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.829834938 CEST	49717	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.829843044 CEST	443	49717	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.830122948 CEST	49673	443	192.168.2.16	204.79.197.203
May 28, 2024 06:36:03.854476929 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.854561090 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.854625940 CEST	49715	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.854639053 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.854670048 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.854723930 CEST	49715	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.854729891 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.857703924 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.857773066 CEST	49715	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.857786894 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.859105110 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:03.859354019 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:03.859380007 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:03.859707117 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:03.859775066 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:03.860312939 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:03.860369921 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:03.861280918 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:03.861340046 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:03.861418962 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:03.861428976 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:03.865330935 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.865408897 CEST	49715	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.865590096 CEST	49715	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.865605116 CEST	443	49715	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.868561029 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.868603945 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.868700981 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.869061947 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:03.869077921 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:03.876265049 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:03.876312017 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:03.876393080 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:03.876641989 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:03.876662970 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:03.908113003 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:03.976783991 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.977103949 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.977133036 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.977596045 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.977891922 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.977972984 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.978072882 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.978102922 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.989867926 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.990084887 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.990120888 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.991105080 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.991174936 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.991394997 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.991458893 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.991530895 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.991549969 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.991549015 CEST	443	49721	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.991692066 CEST	49721	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.991699934 CEST	443	49721	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.992567062 CEST	443	49721	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.992621899 CEST	49721	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.992820024 CEST	49721	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.992872000 CEST	443	49721	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.993158102 CEST	49726	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.993194103 CEST	443	49726	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.993243933 CEST	49721	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.993249893 CEST	49726	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.993257999 CEST	443	49721	142.250.186.68	192.168.2.16
May 28, 2024 06:36:03.993406057 CEST	49726	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:03.993418932 CEST	443	49726	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.033756018 CEST	443	49722	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.034148932 CEST	49722	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.034182072 CEST	443	49722	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.035954952 CEST	443	49722	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.036039114 CEST	49722	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.036118031 CEST	49721	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.036118984 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.036385059 CEST	49722	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.036458015 CEST	443	49722	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.036602974 CEST	49722	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.036617041 CEST	443	49722	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.084167957 CEST	49722	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.182897091 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.182945013 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.183022976 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.183057070 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.183128119 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.183161020 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.183207989 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.184060097 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.184205055 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.184252977 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.184278011 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.184499979 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.184549093 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.184556961 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.192523956 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.192620039 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.192640066 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.192665100 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.192703962 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.193084955 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.193090916 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.193149090 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.193156958 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.193187952 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.193203926 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.193231106 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.193238974 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.193733931 CEST	443	49721	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.193887949 CEST	443	49721	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.193933010 CEST	49721	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.194197893 CEST	49721	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.194216967 CEST	443	49721	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.194227934 CEST	49721	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.194256067 CEST	49721	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.195466995 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.195525885 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.195538998 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.197211027 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.197267056 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.197274923 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.197295904 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.197334051 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.204721928 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.204787970 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.207353115 CEST	49729	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:04.207380056 CEST	443	49729	216.58.206.46	192.168.2.16
May 28, 2024 06:36:04.207463980 CEST	49729	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:04.207628012 CEST	49729	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:04.207638025 CEST	443	49729	216.58.206.46	192.168.2.16
May 28, 2024 06:36:04.243156910 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.268692017 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.268811941 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.271538973 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.271595001 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.271600962 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.271627903 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.271667957 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.273428917 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.273504019 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.273571968 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.273596048 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.277568102 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.277635098 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.278127909 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.278182983 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.278191090 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.278234959 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.278250933 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.278273106 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.278317928 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.285414934 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.285476923 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.285532951 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.290729046 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.290730000 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.290771961 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.290847063 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.290852070 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.290877104 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.290911913 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.294329882 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.294547081 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.294612885 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.294636011 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.297579050 CEST	49730	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.297614098 CEST	443	49730	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.297698021 CEST	49730	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.297899961 CEST	49730	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.297915936 CEST	443	49730	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.306344032 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.306354046 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.306375027 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.306384087 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.306396008 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.306411028 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.306437016 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.306461096 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.306494951 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.306498051 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.306498051 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.306514025 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.306514978 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.306535959 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.306550026 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.306564093 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.306586981 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.306590080 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.306618929 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.306655884 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.306663990 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.306674957 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.306700945 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.306907892 CEST	49719	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.306924105 CEST	443	49719	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.309539080 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.309566021 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.309585094 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.309592009 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.309629917 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.309637070 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.310615063 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.315042019 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.315123081 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.315130949 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.315695047 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.315731049 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.315740108 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.315746069 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.315779924 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.321882010 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.321938992 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.321959019 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.322024107 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.326009035 CEST	443	49722	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.326246023 CEST	443	49722	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.326298952 CEST	49722	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.326673031 CEST	49722	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.326689959 CEST	443	49722	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.326698065 CEST	49722	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.326750994 CEST	49722	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.327934980 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.327975035 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.327990055 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.327997923 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.328035116 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.328039885 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.360976934 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.361011982 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.361057043 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.361124039 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.361190081 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.361207008 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.362077951 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.362144947 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.362166882 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.362241983 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.362287045 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.362299919 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.366796970 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.366847992 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.366868019 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.371107101 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.372534990 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.372595072 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.372613907 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.378050089 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.378117085 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.378139019 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.383697987 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.383780003 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.383783102 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.383805990 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.383837938 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.389312983 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.394736052 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.394898891 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.394957066 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.394978046 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.394979954 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.395001888 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.395004988 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.395018101 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.395026922 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.395035982 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.395066977 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.398716927 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.400502920 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.404704094 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.404731035 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.404762030 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.404788017 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.404838085 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.405924082 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.405982971 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.406002045 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.410747051 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.410851955 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.410909891 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.410933971 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.415410042 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.415482044 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.415489912 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.415517092 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.415555954 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.416719913 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.416776896 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.416794062 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.419886112 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.422837973 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.422894001 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.422904015 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.422924995 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.422971010 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.424006939 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.424066067 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.424078941 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.427886963 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.427956104 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.427973986 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.428478956 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.431684971 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.431754112 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.431767941 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.431788921 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.431827068 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.434079885 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.434155941 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.434154987 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.434170961 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.434206009 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.435156107 CEST	49673	443	192.168.2.16	204.79.197.203
May 28, 2024 06:36:04.435432911 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.439306974 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.439388037 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.439402103 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.439421892 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.439465046 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.439655066 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.443094015 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.445377111 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.445405006 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.445429087 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.445447922 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.445494890 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.447021008 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.447103024 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.447118044 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.449223995 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.449281931 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.449295044 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.449364901 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.449410915 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.449414968 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.451062918 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.451107979 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.451148033 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.451162100 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.451545000 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.451594114 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.451601028 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.454303026 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.454370022 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.454380989 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.455997944 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.456059933 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.456073999 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.458223104 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.458281040 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.458293915 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.460515976 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.460571051 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.460582018 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.462719917 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.462774038 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.462785959 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.464937925 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.464993954 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.465004921 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.467144012 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.467199087 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.467211008 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.469337940 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.469409943 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.469423056 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.471549034 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.471611023 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.471627951 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.474093914 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.474162102 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.474184036 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.474210024 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.474270105 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.476010084 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.479758024 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.479809046 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.479830027 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.480470896 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.480521917 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.480532885 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.480554104 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.480607033 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.483629942 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.483671904 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.483699083 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.483720064 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.483732939 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.483752012 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.483788013 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.483802080 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.483807087 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.484523058 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.484575033 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.484585047 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.485357046 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.485604048 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.485651970 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.485661983 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.489993095 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.490052938 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.490082026 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.490974903 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.491045952 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.491058111 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.491265059 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.491312027 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.491319895 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.495028019 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.495110989 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.495125055 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.496292114 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.496361971 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.496371984 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.496493101 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.496534109 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.496539116 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.496643066 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.496685982 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.496690035 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.501074076 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.501167059 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.501192093 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.501415014 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.501458883 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.501468897 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.501579046 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.501620054 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.501626968 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.506138086 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.506196022 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.506220102 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.506896019 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.506953001 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.506963968 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.507055998 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.507097960 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.507103920 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.510432959 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.510493040 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.510512114 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.510562897 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.510607004 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.510615110 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.511487007 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.511543036 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.511552095 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.514559031 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.514606953 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.514616013 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.515645027 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.515707016 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.515717983 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.518316031 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.518378973 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.518394947 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.518620968 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.518668890 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.518809080 CEST	49720	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.518826008 CEST	443	49720	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.520693064 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.520759106 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.520782948 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.522325039 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.522361040 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.522429943 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.522682905 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.522696972 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.525794983 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.525856018 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.525881052 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.527411938 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.527657986 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.527668953 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.528136969 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.528501987 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.528579950 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.528584003 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.528594017 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.530545950 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.530608892 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.530623913 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.534904003 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.534986973 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.534996033 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.539212942 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.539278030 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.539297104 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.543724060 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.543787003 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.543806076 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.551666975 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.551748037 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.551773071 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.552973986 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.553030968 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.553039074 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.554797888 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.554862022 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.554876089 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.558413982 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.558511972 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.558526993 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.562261105 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.562325001 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.562339067 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.566524982 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.566595078 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.566657066 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.566680908 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.566843033 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.566879034 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.568473101 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.568547010 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.569392920 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.569478035 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.569559097 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.569572926 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.570209026 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.570271969 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.570317984 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.574115038 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.574182034 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.574234962 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.575416088 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.575464010 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.575479984 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.578123093 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.578743935 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.578794956 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.578811884 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.580147982 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.580195904 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.580209970 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.582242012 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.582289934 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.582303047 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.585441113 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.585468054 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.585500002 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.585520983 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.585566044 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.587516069 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.587579012 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.587629080 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.587641954 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.589683056 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.589736938 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.589749098 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.592051983 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.592123985 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.592133999 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.594310999 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.594366074 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.594377995 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.596659899 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.596735001 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.596748114 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.598715067 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.598771095 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.598782063 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.601036072 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.601100922 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.601114035 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.602056980 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.602108955 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.602122068 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.604377985 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.604438066 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.604454041 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.608620882 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.608674049 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.608681917 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.610269070 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.610639095 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.610692024 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.610708952 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.611886978 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.611942053 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.611949921 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.615634918 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.615695953 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.615712881 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.616085052 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.616143942 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.616158009 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.620563030 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.620590925 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.620620012 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.620625973 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.620640993 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.620671034 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.624777079 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.624824047 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.624841928 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.624850035 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.624886036 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.625046968 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.629208088 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.629237890 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.629261971 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.629282951 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.629291058 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.629301071 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.633785963 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.633851051 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.633866072 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.633969069 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.634013891 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.634027958 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.641601086 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.641664982 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.641674995 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.641762018 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.641784906 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.641802073 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.641809940 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.641849995 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.642098904 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.642134905 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.642177105 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.642184019 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.644967079 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.645021915 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.645029068 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.646146059 CEST	443	49726	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.646367073 CEST	49726	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.646395922 CEST	443	49726	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.646435022 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.646483898 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.646490097 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.646877050 CEST	443	49726	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.647152901 CEST	49726	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.647241116 CEST	443	49726	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.647264957 CEST	49726	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.648545027 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.648571014 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.648596048 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.648602962 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.648646116 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.648865938 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.652280092 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.652329922 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.652337074 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.652595997 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.652652979 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.652658939 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.661648035 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.661667109 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.661693096 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.661731958 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.661752939 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.661776066 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.661792040 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.661838055 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.661850929 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.662133932 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.662157059 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.662189960 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.662204981 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.662261009 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.663184881 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.663780928 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.663804054 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.663836002 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.663851023 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.663909912 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.665585041 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.666975975 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.667002916 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.667035103 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.667052031 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.667115927 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.667140007 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.668674946 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.668732882 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.668746948 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.670537949 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.670593023 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.670607090 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.671730042 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.671787024 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.671812057 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.673418045 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.673480034 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.673508883 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.673959970 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.674015045 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.674034119 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.674732924 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.674786091 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.674814939 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.676079988 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.676141977 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.676170111 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.677405119 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.677457094 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.677489042 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.678621054 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.678675890 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.678699017 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.679883957 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.679943085 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.679982901 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.681986094 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.682044029 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.682082891 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.684434891 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.684494019 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.684529066 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.684617996 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.684663057 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.684680939 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.688133001 CEST	49726	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.688158035 CEST	443	49726	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.688637972 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.688684940 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.688698053 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.688865900 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.688891888 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.688901901 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.688910007 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.688941956 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.688947916 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.695172071 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.695229053 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.695249081 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.695336103 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.695368052 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.695385933 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.695393085 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.695429087 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.695435047 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.703526974 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.703557968 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.703583956 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.703599930 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.703610897 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.703649998 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.703665018 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.703707933 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.703715086 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.712656975 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.712687016 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.712709904 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.712762117 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.712789059 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.712802887 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.716941118 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.716964960 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.716995955 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.717020035 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.717065096 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.717186928 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.717231989 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.717259884 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.717262030 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.717274904 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.717312098 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.723268032 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.723309040 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.723366976 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.723388910 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.723418951 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.723453999 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.723463058 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.731017113 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.731045961 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.731097937 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.731100082 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.731112957 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.731126070 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.731147051 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.731164932 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.731188059 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.732872009 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.732922077 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.732924938 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.732944965 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.732986927 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.732995987 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.733263016 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.733293056 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.733308077 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.733314991 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.733355045 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.737327099 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.737366915 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.737397909 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.737418890 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.737426996 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.737462997 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.737469912 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.744401932 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.744456053 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.744462013 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.744472980 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.744515896 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.744517088 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.744527102 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.744561911 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.744575977 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.748135090 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.748169899 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.748183966 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.748193026 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.748250961 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.748258114 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.748688936 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.748739004 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.748745918 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.755080938 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.755111933 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.755146027 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.755146027 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.755162954 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.755203009 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.755203009 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.755254030 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.755269051 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.758138895 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.758197069 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.758202076 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.758225918 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.758270025 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.758280993 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.758296013 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.758343935 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.758357048 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.762080908 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.762118101 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.762141943 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.762156010 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.762217045 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.762229919 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.766213894 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.766280890 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.766295910 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.766381979 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.766417980 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.766428947 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.766442060 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.766503096 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.766503096 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.766516924 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.766575098 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.772289038 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.772352934 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.772387028 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.772406101 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.772420883 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.772460938 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.772475004 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.772488117 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.772538900 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.778610945 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.778661013 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.778711081 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.778724909 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.778940916 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.778969049 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.778997898 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.779012918 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.779061079 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.785109043 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.785310030 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.785337925 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.785360098 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.785375118 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.785429955 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.785442114 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.792319059 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.792349100 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.792378902 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.792399883 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.792457104 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.792510033 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.792555094 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.792598963 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.792613029 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.801625967 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.801676989 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.801706076 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.801723003 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.801778078 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.801778078 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.801790953 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.801842928 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.801856995 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.806108952 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.806154013 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.806165934 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.806180954 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.806230068 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.806242943 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.806281090 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.806323051 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.806335926 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.814416885 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.814444065 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.814466000 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.814481974 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.814502954 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.814538002 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.814538956 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.814579010 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.814591885 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.822187901 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.822222948 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.822251081 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.822267056 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.822283030 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.822345018 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.822361946 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.822407961 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.822423935 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.825232983 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.825262070 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.825289011 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.825292110 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.825306892 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.825336933 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.829338074 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.829369068 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.829392910 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.829400063 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.829423904 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.829447031 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.829452038 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.829483986 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.829487085 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.829497099 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.829540014 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.836766005 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.836950064 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.836977005 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.837002039 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.837002993 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.837019920 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.837049961 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.840428114 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.840459108 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.840481043 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.840488911 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.840517998 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.840526104 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.840532064 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.840568066 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.840575933 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.840581894 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.840622902 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.841605902 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.841739893 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.841828108 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.841892004 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.841934919 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.841981888 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.841994047 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.845766068 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.845902920 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.845952034 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.845968962 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.846110106 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.846158028 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.846415043 CEST	49723	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.846429110 CEST	443	49723	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.846860886 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.846915960 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.846925020 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.847053051 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.847126007 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.847135067 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.851028919 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.851161957 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.851171970 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.855901957 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.855973959 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.855983019 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.860074043 CEST	443	49729	216.58.206.46	192.168.2.16
May 28, 2024 06:36:04.860241890 CEST	49729	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:04.860255003 CEST	443	49729	216.58.206.46	192.168.2.16
May 28, 2024 06:36:04.860615015 CEST	443	49729	216.58.206.46	192.168.2.16
May 28, 2024 06:36:04.860677958 CEST	49729	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:04.861299992 CEST	443	49729	216.58.206.46	192.168.2.16
May 28, 2024 06:36:04.861355066 CEST	49729	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:04.862150908 CEST	49729	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:04.862209082 CEST	443	49729	216.58.206.46	192.168.2.16
May 28, 2024 06:36:04.862406969 CEST	49729	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:04.862413883 CEST	443	49729	216.58.206.46	192.168.2.16
May 28, 2024 06:36:04.862436056 CEST	49729	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:04.862472057 CEST	443	49729	216.58.206.46	192.168.2.16
May 28, 2024 06:36:04.865598917 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.865628958 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.865705967 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.865892887 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.865906954 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.872689962 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.872843027 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.872905970 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.872915983 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.873003006 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.873051882 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.873058081 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.873152971 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.873199940 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.873204947 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.879012108 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.879113913 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.879127026 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.879293919 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.879354000 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.879384995 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.879404068 CEST	443	49724	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.879425049 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.879456997 CEST	49724	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.911128044 CEST	49729	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:04.911235094 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.927721977 CEST	443	49726	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.927798986 CEST	443	49726	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.927850962 CEST	49726	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.927869081 CEST	443	49726	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.927885056 CEST	443	49726	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.927932978 CEST	49726	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.928592920 CEST	49726	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.928611994 CEST	443	49726	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.930015087 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.930186033 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.930253029 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.930318117 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.931714058 CEST	49735	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.931747913 CEST	443	49735	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.931817055 CEST	49735	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.932049990 CEST	49735	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:04.932065010 CEST	443	49735	142.250.185.100	192.168.2.16
May 28, 2024 06:36:04.932827950 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.932904005 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.932921886 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.939100027 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.939171076 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.939172983 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.939199924 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.939254999 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.945451975 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.951811075 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.951874971 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.951879978 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.951899052 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.951956987 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.953172922 CEST	443	49730	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.953381062 CEST	49730	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.953391075 CEST	443	49730	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.953902960 CEST	443	49730	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.954193115 CEST	49730	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.954272985 CEST	443	49730	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.954498053 CEST	49736	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.954525948 CEST	443	49736	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.954588890 CEST	49736	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.954679966 CEST	49737	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.954689026 CEST	443	49737	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.954735994 CEST	49737	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.954827070 CEST	49738	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.954835892 CEST	443	49738	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.954883099 CEST	49738	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.954952002 CEST	49730	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.954978943 CEST	443	49730	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.955123901 CEST	49736	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.955138922 CEST	443	49736	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.955256939 CEST	49737	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.955270052 CEST	443	49737	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.955377102 CEST	49738	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:04.955389023 CEST	443	49738	142.250.186.68	192.168.2.16
May 28, 2024 06:36:04.957820892 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.963783979 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.963819981 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.963846922 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.963865042 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.963924885 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.970233917 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.975672007 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.975749016 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.975770950 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.975785971 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.975858927 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.981606960 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.987490892 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.987579107 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.987689018 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.987756014 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:04.987835884 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:04.993309975 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.022730112 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.022778988 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.022806883 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.022874117 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.022923946 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.022938967 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.022958994 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.023006916 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.023022890 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.026371956 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.026401043 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.026429892 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.026444912 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.026506901 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.029586077 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.029628038 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.029679060 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.029694080 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.035789013 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.035854101 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.035868883 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.038825989 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.038896084 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.038909912 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.043318987 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.043385029 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.043397903 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.048211098 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.048276901 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.048290968 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.050340891 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.050407887 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.050421000 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.054987907 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.055067062 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.055082083 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.059631109 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.059698105 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.059712887 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.064230919 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.064294100 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.064308882 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.068913937 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.068980932 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.068994999 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.073565960 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.073648930 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.073662996 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.081290007 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.081377029 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.081394911 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.082118034 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.082182884 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.082196951 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.086291075 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.086364031 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.086378098 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.090238094 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.090302944 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.090323925 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.094067097 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.094130993 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.094145060 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.097982883 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.098047972 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.098062038 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.101840019 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.101906061 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.101918936 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.115511894 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.115660906 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.115691900 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.115760088 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.115832090 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.115911961 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.116309881 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.116373062 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.116374016 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.116401911 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.116450071 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.116549015 CEST	443	49725	216.58.206.78	192.168.2.16
May 28, 2024 06:36:05.116676092 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.116710901 CEST	49725	443	192.168.2.16	216.58.206.78
May 28, 2024 06:36:05.148489952 CEST	443	49730	142.250.186.68	192.168.2.16
May 28, 2024 06:36:05.148648977 CEST	443	49730	142.250.186.68	192.168.2.16
May 28, 2024 06:36:05.148698092 CEST	49730	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:05.149116039 CEST	49730	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:05.149132013 CEST	443	49730	142.250.186.68	192.168.2.16
May 28, 2024 06:36:05.151823997 CEST	49740	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:05.151870012 CEST	443	49740	142.250.185.100	192.168.2.16
May 28, 2024 06:36:05.151952028 CEST	49740	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:05.152134895 CEST	49740	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:05.152152061 CEST	443	49740	142.250.185.100	192.168.2.16
May 28, 2024 06:36:05.158082008 CEST	443	49729	216.58.206.46	192.168.2.16
May 28, 2024 06:36:05.158186913 CEST	443	49729	216.58.206.46	192.168.2.16
May 28, 2024 06:36:05.158241034 CEST	49729	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:05.158610106 CEST	49729	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:05.158620119 CEST	443	49729	216.58.206.46	192.168.2.16
May 28, 2024 06:36:05.171917915 CEST	49741	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:05.171973944 CEST	443	49741	216.58.206.46	192.168.2.16
May 28, 2024 06:36:05.172061920 CEST	49741	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:05.172239065 CEST	49741	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:05.172271967 CEST	443	49741	216.58.206.46	192.168.2.16
May 28, 2024 06:36:05.176340103 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:05.176558971 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:05.176575899 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:05.176915884 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:05.177206993 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:05.177274942 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:05.177316904 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:05.218522072 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:05.227123022 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:05.637139082 CEST	49673	443	192.168.2.16	204.79.197.203
May 28, 2024 06:36:05.996742010 CEST	49688	443	192.168.2.16	104.126.37.178
May 28, 2024 06:36:06.166887999 CEST	49745	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:06.166922092 CEST	443	49745	216.58.206.46	192.168.2.16
May 28, 2024 06:36:06.167002916 CEST	49745	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:06.167438030 CEST	49745	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:06.167454004 CEST	443	49745	216.58.206.46	192.168.2.16
May 28, 2024 06:36:06.411520958 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.411644936 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.411715984 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.411736965 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.411854982 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.411907911 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.411916018 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.412008047 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.412054062 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.412060976 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.412153959 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.412204981 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.412211895 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.416682959 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.416750908 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.416781902 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.416790962 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.416830063 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.416837931 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.416923046 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.416970968 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.416977882 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.417071104 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.417119980 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.417126894 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.417463064 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.417515039 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.417521954 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.417630911 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.417679071 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.417685986 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.418327093 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.418380022 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.418386936 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.418474913 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.418525934 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.418535948 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.418649912 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.418701887 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.418709993 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.419095039 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.419329882 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.419339895 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.419811964 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.419850111 CEST	443	49735	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.420387983 CEST	443	49738	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.420412064 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.420500040 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.420583010 CEST	49735	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.420591116 CEST	443	49735	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.420640945 CEST	443	49737	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.420739889 CEST	49738	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.420742989 CEST	443	49741	216.58.206.46	192.168.2.16
May 28, 2024 06:36:06.420758963 CEST	443	49738	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.420828104 CEST	443	49736	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.420852900 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.420876980 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.420938015 CEST	443	49735	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.421170950 CEST	49737	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.421180964 CEST	443	49737	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.421437025 CEST	49741	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:06.421454906 CEST	443	49741	216.58.206.46	192.168.2.16
May 28, 2024 06:36:06.421494961 CEST	443	49737	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.421647072 CEST	49736	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.421655893 CEST	443	49736	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.421727896 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.421741009 CEST	443	49738	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.421785116 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.421792984 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.421828032 CEST	49738	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.421842098 CEST	443	49741	216.58.206.46	192.168.2.16
May 28, 2024 06:36:06.421880960 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.421907902 CEST	49741	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:06.421936989 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.421942949 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.422103882 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.422157049 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.422163963 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.422283888 CEST	49735	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.422353029 CEST	443	49735	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.422403097 CEST	443	49740	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.422455072 CEST	443	49736	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.422538996 CEST	443	49741	216.58.206.46	192.168.2.16
May 28, 2024 06:36:06.422548056 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.422591925 CEST	49741	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:06.422629118 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.422669888 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.422679901 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.422728062 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.422734022 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.422889948 CEST	49737	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.422950983 CEST	443	49737	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.423350096 CEST	49738	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.423372030 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.423405886 CEST	443	49738	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.423422098 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.423429966 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.423722029 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.423773050 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.423779964 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.423873901 CEST	49741	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:06.423943043 CEST	443	49741	216.58.206.46	192.168.2.16
May 28, 2024 06:36:06.423995972 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.424046993 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.424053907 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.424153090 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.424221039 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.424227953 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.424664021 CEST	49740	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.424671888 CEST	443	49740	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.424880028 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.424942970 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.424949884 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.425215006 CEST	49736	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.425283909 CEST	443	49736	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.425789118 CEST	49735	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.425906897 CEST	49737	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.425975084 CEST	49738	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.425982952 CEST	443	49738	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.426081896 CEST	49741	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:06.426098108 CEST	443	49741	216.58.206.46	192.168.2.16
May 28, 2024 06:36:06.426177025 CEST	49736	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.426203966 CEST	443	49736	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.426393986 CEST	443	49740	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.426464081 CEST	49740	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.427189112 CEST	49740	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.427268982 CEST	443	49740	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.427351952 CEST	49740	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.427360058 CEST	443	49740	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.427454948 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.427514076 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.427520990 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.427606106 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.427654982 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.427833080 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.427925110 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.427979946 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.427985907 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.428128958 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.428181887 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.428188086 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.428534031 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.428587914 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.428595066 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.428817987 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.428873062 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.428879976 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.429300070 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.429358959 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.429364920 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.429454088 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.429507971 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.429514885 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.429621935 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.429676056 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.429682970 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.429770947 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.429819107 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.429830074 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.429945946 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.429997921 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.430005074 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.430223942 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.430278063 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.430284977 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.430376053 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.430428982 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.430435896 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.430553913 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.430607080 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.430613995 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.430706024 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.430757999 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.430764914 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.430855036 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.430907011 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.430915117 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.430998087 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.431046009 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.431051970 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.431248903 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.431305885 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.431312084 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.431401968 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.431452990 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.431459904 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.432637930 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.432702065 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.432710886 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.432822943 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.432876110 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.432882071 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.432975054 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.433027029 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.433032990 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.433115959 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.433162928 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.433171034 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.434555054 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.434626102 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.434632063 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.434748888 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.434808016 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.434814930 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.434906006 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.434961081 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.434967041 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.435055971 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.435116053 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.435122013 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.435261965 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.435312986 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.435318947 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.435408115 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.435460091 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.435467005 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.435594082 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.435651064 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.435657978 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.435750008 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.435801029 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.435806990 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.435899973 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.435952902 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.435959101 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.436047077 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.436131954 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.436136961 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.436163902 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.436218023 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.436250925 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.436398983 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.436450958 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.436459064 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.436963081 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.437020063 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.437026024 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.437115908 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.437170029 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.437176943 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.437635899 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.437699080 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.437705040 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.438062906 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.438179970 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.438186884 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.440860987 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.440921068 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.440927982 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.441186905 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.441251993 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.441421032 CEST	49733	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.441435099 CEST	443	49733	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.466505051 CEST	443	49735	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.467164993 CEST	49741	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:06.467185974 CEST	49738	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.470475912 CEST	49740	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.470498085 CEST	443	49737	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.615395069 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.615462065 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.615493059 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.615561962 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.615571976 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.615613937 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.615900993 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.621241093 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.621308088 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.621308088 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.621319056 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.621362925 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.621706009 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.624308109 CEST	443	49736	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.624417067 CEST	443	49736	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.624494076 CEST	49736	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.624726057 CEST	49736	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.624738932 CEST	443	49736	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.624756098 CEST	49736	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.624783993 CEST	49736	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.627151012 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.627209902 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.627216101 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.633239031 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.633304119 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.633317947 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.687119961 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.701495886 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.702351093 CEST	443	49741	216.58.206.46	192.168.2.16
May 28, 2024 06:36:06.702393055 CEST	443	49741	216.58.206.46	192.168.2.16
May 28, 2024 06:36:06.702456951 CEST	49741	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:06.702502966 CEST	443	49741	216.58.206.46	192.168.2.16
May 28, 2024 06:36:06.702631950 CEST	443	49735	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.702706099 CEST	443	49735	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.702770948 CEST	49735	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.702780962 CEST	443	49735	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.702832937 CEST	49735	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.704034090 CEST	49741	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:06.704087019 CEST	443	49741	216.58.206.46	192.168.2.16
May 28, 2024 06:36:06.704173088 CEST	49741	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:06.704324007 CEST	49735	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.704340935 CEST	443	49735	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.705389977 CEST	443	49740	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.705879927 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.705918074 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.705940962 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.705956936 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.706160069 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.706758976 CEST	443	49740	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.706837893 CEST	49740	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.706948042 CEST	49740	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.706965923 CEST	443	49740	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.708852053 CEST	443	49737	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.709002018 CEST	443	49737	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.709054947 CEST	49737	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.709666014 CEST	49737	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.709673882 CEST	443	49737	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.709685087 CEST	49737	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.709750891 CEST	49737	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.710385084 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.716955900 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.717022896 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.717034101 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.717173100 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.717222929 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.717358112 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.717366934 CEST	443	49734	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.717377901 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.717417002 CEST	49734	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.718302011 CEST	49748	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.718328953 CEST	443	49748	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.718396902 CEST	49748	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.718785048 CEST	49748	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.718799114 CEST	443	49748	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.724828959 CEST	443	49738	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.743448973 CEST	443	49738	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.743529081 CEST	49738	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.744265079 CEST	49738	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:06.744277000 CEST	443	49738	142.250.186.68	192.168.2.16
May 28, 2024 06:36:06.746872902 CEST	49749	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.746896029 CEST	443	49749	142.250.185.100	192.168.2.16
May 28, 2024 06:36:06.747019053 CEST	49749	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.747276068 CEST	49749	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:06.747289896 CEST	443	49749	142.250.185.100	192.168.2.16
May 28, 2024 06:36:07.021600962 CEST	49751	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.021648884 CEST	443	49751	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.021718979 CEST	49751	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.021945000 CEST	49752	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.022011042 CEST	443	49752	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.022084951 CEST	49752	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.022193909 CEST	49751	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.022207975 CEST	443	49751	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.022294998 CEST	49752	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.022329092 CEST	443	49752	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.078032970 CEST	443	49745	216.58.206.46	192.168.2.16
May 28, 2024 06:36:07.078352928 CEST	49745	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:07.078370094 CEST	443	49745	216.58.206.46	192.168.2.16
May 28, 2024 06:36:07.079704046 CEST	443	49745	216.58.206.46	192.168.2.16
May 28, 2024 06:36:07.080104113 CEST	49745	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:07.080276966 CEST	49745	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:07.080302000 CEST	443	49745	216.58.206.46	192.168.2.16
May 28, 2024 06:36:07.080332041 CEST	49745	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:07.080455065 CEST	443	49745	216.58.206.46	192.168.2.16
May 28, 2024 06:36:07.133394003 CEST	49745	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:07.360651970 CEST	443	49745	216.58.206.46	192.168.2.16
May 28, 2024 06:36:07.361063004 CEST	443	49745	216.58.206.46	192.168.2.16
May 28, 2024 06:36:07.361131907 CEST	49745	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:07.361279964 CEST	49745	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:07.361296892 CEST	443	49745	216.58.206.46	192.168.2.16
May 28, 2024 06:36:07.365377903 CEST	49753	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:07.365463018 CEST	443	49753	216.58.206.46	192.168.2.16
May 28, 2024 06:36:07.365617037 CEST	49753	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:07.365827084 CEST	49753	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:07.365861893 CEST	443	49753	216.58.206.46	192.168.2.16
May 28, 2024 06:36:07.374244928 CEST	443	49748	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.374551058 CEST	49748	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.374569893 CEST	443	49748	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.375058889 CEST	443	49748	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.375535011 CEST	49748	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.375617027 CEST	443	49748	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.375788927 CEST	49748	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.375818014 CEST	443	49748	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.406567097 CEST	443	49749	142.250.185.100	192.168.2.16
May 28, 2024 06:36:07.406845093 CEST	49749	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:07.406866074 CEST	443	49749	142.250.185.100	192.168.2.16
May 28, 2024 06:36:07.407176971 CEST	443	49749	142.250.185.100	192.168.2.16
May 28, 2024 06:36:07.407610893 CEST	49749	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:07.407675028 CEST	443	49749	142.250.185.100	192.168.2.16
May 28, 2024 06:36:07.407864094 CEST	49749	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:07.407892942 CEST	443	49749	142.250.185.100	192.168.2.16
May 28, 2024 06:36:07.507694960 CEST	443	49701	37.27.57.153	192.168.2.16
May 28, 2024 06:36:07.507877111 CEST	443	49701	37.27.57.153	192.168.2.16
May 28, 2024 06:36:07.507956982 CEST	49701	443	192.168.2.16	37.27.57.153
May 28, 2024 06:36:07.569051027 CEST	443	49748	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.569363117 CEST	443	49748	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.569458961 CEST	49748	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.569482088 CEST	443	49748	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.569540024 CEST	443	49748	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.569601059 CEST	49748	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.570157051 CEST	49748	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.570172071 CEST	443	49748	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.621606112 CEST	443	49749	142.250.185.100	192.168.2.16
May 28, 2024 06:36:07.628854990 CEST	443	49749	142.250.185.100	192.168.2.16
May 28, 2024 06:36:07.628940105 CEST	49749	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:07.629905939 CEST	49749	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:07.629926920 CEST	443	49749	142.250.185.100	192.168.2.16
May 28, 2024 06:36:07.664633989 CEST	443	49751	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.664979935 CEST	49751	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.665011883 CEST	443	49751	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.665040016 CEST	49701	443	192.168.2.16	37.27.57.153
May 28, 2024 06:36:07.665060997 CEST	443	49701	37.27.57.153	192.168.2.16
May 28, 2024 06:36:07.665381908 CEST	443	49751	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.665461063 CEST	49755	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.665508986 CEST	443	49755	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.665587902 CEST	49755	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.665712118 CEST	49756	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.665796995 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.665877104 CEST	49756	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.666028023 CEST	49751	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.666111946 CEST	443	49751	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.666269064 CEST	49755	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.666296005 CEST	443	49755	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.666455030 CEST	49756	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.666508913 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.666755915 CEST	49757	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.666779995 CEST	443	49757	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.666848898 CEST	49757	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.666868925 CEST	49751	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.667064905 CEST	49757	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.667088032 CEST	443	49757	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.687302113 CEST	443	49752	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.687599897 CEST	49752	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.687654972 CEST	443	49752	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.689102888 CEST	443	49752	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.689217091 CEST	49752	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.689553022 CEST	49752	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.689645052 CEST	443	49752	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.689748049 CEST	49752	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.689773083 CEST	443	49752	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.710501909 CEST	443	49751	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.740216017 CEST	49752	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.886033058 CEST	443	49752	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.886130095 CEST	443	49752	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.886204004 CEST	443	49752	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.886221886 CEST	49752	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.886291027 CEST	49752	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.887206078 CEST	49752	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.887245893 CEST	443	49752	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.898859978 CEST	49758	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.898895979 CEST	443	49758	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.899003029 CEST	49758	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.899214029 CEST	49758	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.899230003 CEST	443	49758	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.946139097 CEST	443	49751	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.946352959 CEST	443	49751	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.946451902 CEST	49751	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.946765900 CEST	49751	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.946780920 CEST	443	49751	142.250.186.68	192.168.2.16
May 28, 2024 06:36:07.946794033 CEST	49751	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:07.946836948 CEST	49751	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.011790037 CEST	443	49753	216.58.206.46	192.168.2.16
May 28, 2024 06:36:08.012062073 CEST	49753	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:08.012085915 CEST	443	49753	216.58.206.46	192.168.2.16
May 28, 2024 06:36:08.012598991 CEST	443	49753	216.58.206.46	192.168.2.16
May 28, 2024 06:36:08.012674093 CEST	49753	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:08.013601065 CEST	443	49753	216.58.206.46	192.168.2.16
May 28, 2024 06:36:08.013669014 CEST	49753	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:08.013806105 CEST	49753	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:08.013881922 CEST	443	49753	216.58.206.46	192.168.2.16
May 28, 2024 06:36:08.013952971 CEST	49753	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:08.013959885 CEST	443	49753	216.58.206.46	192.168.2.16
May 28, 2024 06:36:08.044150114 CEST	49673	443	192.168.2.16	204.79.197.203
May 28, 2024 06:36:08.060148001 CEST	49753	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:08.204533100 CEST	49759	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.204629898 CEST	443	49759	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.204736948 CEST	49759	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.206403017 CEST	49759	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.206440926 CEST	443	49759	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.290982962 CEST	443	49753	216.58.206.46	192.168.2.16
May 28, 2024 06:36:08.291038990 CEST	443	49753	216.58.206.46	192.168.2.16
May 28, 2024 06:36:08.291140079 CEST	49753	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:08.291192055 CEST	443	49753	216.58.206.46	192.168.2.16
May 28, 2024 06:36:08.292063951 CEST	49753	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:08.292124033 CEST	443	49753	216.58.206.46	192.168.2.16
May 28, 2024 06:36:08.292202950 CEST	49753	443	192.168.2.16	216.58.206.46
May 28, 2024 06:36:08.306354046 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.306653023 CEST	49756	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.306687117 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.307745934 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.307831049 CEST	49756	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.308155060 CEST	49756	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.308226109 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.308290005 CEST	49756	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.308307886 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.312239885 CEST	443	49757	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.312453032 CEST	49757	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.312484026 CEST	443	49757	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.313595057 CEST	443	49757	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.313870907 CEST	49757	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.313966990 CEST	49757	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.313978910 CEST	443	49757	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.314064980 CEST	443	49757	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.334449053 CEST	443	49755	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.334681034 CEST	49755	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.334731102 CEST	443	49755	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.335045099 CEST	443	49755	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.335342884 CEST	49755	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.335407972 CEST	443	49755	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.335427046 CEST	49755	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.362157106 CEST	49757	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.362229109 CEST	49756	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.378160000 CEST	49755	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.378181934 CEST	443	49755	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.561542034 CEST	443	49758	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.561810970 CEST	49758	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.561836958 CEST	443	49758	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.562308073 CEST	443	49758	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.562613010 CEST	49758	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.562732935 CEST	443	49758	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.562757015 CEST	49758	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.562781096 CEST	443	49758	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.578732014 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.578772068 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.578800917 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.578830957 CEST	49756	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.578855038 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.578912973 CEST	49756	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.579008102 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.579130888 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.579205036 CEST	49756	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.579598904 CEST	49756	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.579626083 CEST	443	49756	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.582364082 CEST	49760	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:08.582423925 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:08.582530975 CEST	49760	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:08.582720041 CEST	49760	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:08.582755089 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:08.594350100 CEST	443	49757	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.594544888 CEST	443	49757	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.594611883 CEST	49757	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.594980955 CEST	49757	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.594981909 CEST	49757	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.595002890 CEST	443	49757	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.595066071 CEST	49757	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.617136955 CEST	49758	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.621232033 CEST	443	49755	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.621335030 CEST	443	49755	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.621396065 CEST	49755	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.621644020 CEST	49755	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.621644020 CEST	49755	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.621679068 CEST	443	49755	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.621742010 CEST	49755	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.761949062 CEST	443	49758	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.762116909 CEST	443	49758	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.762291908 CEST	49758	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.762526035 CEST	49758	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.762526035 CEST	49758	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.762559891 CEST	443	49758	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.762639999 CEST	49758	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.864228010 CEST	443	49759	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.864522934 CEST	49759	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.864584923 CEST	443	49759	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.864893913 CEST	443	49759	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.865210056 CEST	49759	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.865276098 CEST	443	49759	142.250.186.68	192.168.2.16
May 28, 2024 06:36:08.865360975 CEST	49759	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:08.906503916 CEST	443	49759	142.250.186.68	192.168.2.16
May 28, 2024 06:36:09.159703016 CEST	443	49759	142.250.186.68	192.168.2.16
May 28, 2024 06:36:09.159794092 CEST	443	49759	142.250.186.68	192.168.2.16
May 28, 2024 06:36:09.159946918 CEST	49759	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:09.160249949 CEST	49759	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:09.160265923 CEST	443	49759	142.250.186.68	192.168.2.16
May 28, 2024 06:36:09.160275936 CEST	49759	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:09.160311937 CEST	49759	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:09.231524944 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:09.231818914 CEST	49760	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:09.231837988 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:09.232919931 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:09.233222961 CEST	49760	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:09.233359098 CEST	49760	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:09.233364105 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:09.233388901 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:09.288234949 CEST	49760	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:09.503956079 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:09.504129887 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:09.504208088 CEST	49760	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:09.504225969 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:09.504255056 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:09.504302979 CEST	49760	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:09.504343033 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:09.504638910 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:09.504705906 CEST	49760	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:09.505300999 CEST	49760	443	192.168.2.16	142.250.185.100
May 28, 2024 06:36:09.505319118 CEST	443	49760	142.250.185.100	192.168.2.16
May 28, 2024 06:36:09.733953953 CEST	49761	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:09.734000921 CEST	443	49761	184.28.90.27	192.168.2.16
May 28, 2024 06:36:09.734131098 CEST	49761	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:09.735833883 CEST	49761	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:09.735872984 CEST	443	49761	184.28.90.27	192.168.2.16
May 28, 2024 06:36:10.153495073 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:10.153593063 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:10.153697014 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:10.154650927 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:10.154704094 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:10.399379969 CEST	443	49761	184.28.90.27	192.168.2.16
May 28, 2024 06:36:10.399468899 CEST	49761	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:10.404866934 CEST	49761	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:10.404897928 CEST	443	49761	184.28.90.27	192.168.2.16
May 28, 2024 06:36:10.405412912 CEST	443	49761	184.28.90.27	192.168.2.16
May 28, 2024 06:36:10.444715023 CEST	49761	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:10.486521959 CEST	443	49761	184.28.90.27	192.168.2.16
May 28, 2024 06:36:10.665261984 CEST	443	49761	184.28.90.27	192.168.2.16
May 28, 2024 06:36:10.665504932 CEST	443	49761	184.28.90.27	192.168.2.16
May 28, 2024 06:36:10.665584087 CEST	49761	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:10.665618896 CEST	49761	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:10.665637970 CEST	443	49761	184.28.90.27	192.168.2.16
May 28, 2024 06:36:10.665652990 CEST	49761	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:10.665658951 CEST	443	49761	184.28.90.27	192.168.2.16
May 28, 2024 06:36:10.697588921 CEST	49763	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:10.697633982 CEST	443	49763	184.28.90.27	192.168.2.16
May 28, 2024 06:36:10.697714090 CEST	49763	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:10.697981119 CEST	49763	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:10.698000908 CEST	443	49763	184.28.90.27	192.168.2.16
May 28, 2024 06:36:10.974772930 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:10.974908113 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:10.977550983 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:10.977572918 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:10.977866888 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.026200056 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:11.048768997 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:11.090517998 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.319719076 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.319750071 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.319760084 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.319776058 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.319807053 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.319968939 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:11.319968939 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:11.320018053 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.320039034 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.320087910 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:11.320293903 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.320364952 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.320415974 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:11.337393045 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:11.337435961 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.337460995 CEST	49762	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:11.337472916 CEST	443	49762	40.68.123.157	192.168.2.16
May 28, 2024 06:36:11.351412058 CEST	443	49763	184.28.90.27	192.168.2.16
May 28, 2024 06:36:11.351496935 CEST	49763	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:11.352637053 CEST	49763	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:11.352657080 CEST	443	49763	184.28.90.27	192.168.2.16
May 28, 2024 06:36:11.352910042 CEST	443	49763	184.28.90.27	192.168.2.16
May 28, 2024 06:36:11.354268074 CEST	49763	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:11.394510031 CEST	443	49763	184.28.90.27	192.168.2.16
May 28, 2024 06:36:11.640784025 CEST	443	49763	184.28.90.27	192.168.2.16
May 28, 2024 06:36:11.640851021 CEST	443	49763	184.28.90.27	192.168.2.16
May 28, 2024 06:36:11.640911102 CEST	49763	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:11.641824007 CEST	49763	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:11.641855001 CEST	443	49763	184.28.90.27	192.168.2.16
May 28, 2024 06:36:11.641881943 CEST	49763	443	192.168.2.16	184.28.90.27
May 28, 2024 06:36:11.641891003 CEST	443	49763	184.28.90.27	192.168.2.16
May 28, 2024 06:36:11.694751024 CEST	49678	443	192.168.2.16	20.189.173.10
May 28, 2024 06:36:11.997191906 CEST	49678	443	192.168.2.16	20.189.173.10
May 28, 2024 06:36:12.601514101 CEST	49678	443	192.168.2.16	20.189.173.10
May 28, 2024 06:36:12.852180958 CEST	49673	443	192.168.2.16	204.79.197.203
May 28, 2024 06:36:13.807282925 CEST	49678	443	192.168.2.16	20.189.173.10
May 28, 2024 06:36:16.167495966 CEST	49680	80	192.168.2.16	192.229.211.108
May 28, 2024 06:36:16.214226961 CEST	49678	443	192.168.2.16	20.189.173.10
May 28, 2024 06:36:16.470189095 CEST	49680	80	192.168.2.16	192.229.211.108
May 28, 2024 06:36:17.076222897 CEST	49680	80	192.168.2.16	192.229.211.108
May 28, 2024 06:36:18.288218975 CEST	49680	80	192.168.2.16	192.229.211.108
May 28, 2024 06:36:19.111253977 CEST	49764	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.111291885 CEST	443	49764	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.111383915 CEST	49764	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.111639977 CEST	49764	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.111651897 CEST	443	49764	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.418555021 CEST	49765	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.418601036 CEST	443	49765	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.418694973 CEST	49765	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.418720961 CEST	49766	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.418729067 CEST	443	49766	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.418790102 CEST	49766	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.418917894 CEST	49765	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.418931961 CEST	443	49765	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.419053078 CEST	49766	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.419063091 CEST	443	49766	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.750513077 CEST	443	49764	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.750849962 CEST	49764	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.750878096 CEST	443	49764	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.751173019 CEST	443	49764	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.751574993 CEST	49764	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.751635075 CEST	443	49764	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.752029896 CEST	49767	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.752062082 CEST	443	49767	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.752136946 CEST	49767	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.752336025 CEST	49768	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.752378941 CEST	443	49768	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.752438068 CEST	49768	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.752468109 CEST	49764	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.752485037 CEST	443	49764	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.752675056 CEST	49767	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.752690077 CEST	443	49767	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.752815008 CEST	49768	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.752835989 CEST	443	49768	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.946630955 CEST	443	49764	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.946715117 CEST	443	49764	142.250.186.68	192.168.2.16
May 28, 2024 06:36:19.946896076 CEST	49764	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.947530031 CEST	49764	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:19.947573900 CEST	443	49764	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.060365915 CEST	443	49765	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.060720921 CEST	49765	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.060754061 CEST	443	49765	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.061230898 CEST	443	49765	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.061717987 CEST	49765	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.061799049 CEST	49765	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.061800957 CEST	443	49765	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.061852932 CEST	443	49765	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.066591024 CEST	443	49766	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.066811085 CEST	49766	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.066831112 CEST	443	49766	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.067825079 CEST	443	49766	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.067899942 CEST	49766	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.068239927 CEST	49766	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.068308115 CEST	443	49766	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.068362951 CEST	49766	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.102226973 CEST	49765	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.110539913 CEST	443	49766	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.118215084 CEST	49766	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.118236065 CEST	443	49766	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.166290998 CEST	49766	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.258371115 CEST	443	49765	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.258450031 CEST	443	49765	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.258546114 CEST	49765	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.259059906 CEST	49765	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.259079933 CEST	443	49765	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.499986887 CEST	443	49766	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.500087023 CEST	443	49766	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.500161886 CEST	49766	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.500653028 CEST	49766	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.500683069 CEST	443	49766	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.503758907 CEST	443	49768	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.503998995 CEST	49768	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.504013062 CEST	443	49768	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.504324913 CEST	443	49767	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.504539013 CEST	49767	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.504565954 CEST	443	49767	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.505034924 CEST	443	49767	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.505080938 CEST	443	49768	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.505194902 CEST	49768	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.505332947 CEST	49767	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.505417109 CEST	443	49767	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.505606890 CEST	49768	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.505675077 CEST	443	49768	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.505764961 CEST	49767	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.505780935 CEST	443	49767	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.505904913 CEST	49768	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.505913019 CEST	443	49768	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.549237013 CEST	49768	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.693228006 CEST	49680	80	192.168.2.16	192.229.211.108
May 28, 2024 06:36:20.702121019 CEST	443	49767	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.702219009 CEST	443	49767	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.702294111 CEST	49767	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.702797890 CEST	49767	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.702826977 CEST	443	49767	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.704576969 CEST	443	49768	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.705039024 CEST	49768	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:20.705112934 CEST	443	49768	142.250.186.68	192.168.2.16
May 28, 2024 06:36:20.705194950 CEST	49768	443	192.168.2.16	142.250.186.68
May 28, 2024 06:36:21.029192924 CEST	49678	443	192.168.2.16	20.189.173.10
May 28, 2024 06:36:22.466260910 CEST	49673	443	192.168.2.16	204.79.197.203
May 28, 2024 06:36:25.508436918 CEST	49680	80	192.168.2.16	192.229.211.108
May 28, 2024 06:36:30.632277012 CEST	49678	443	192.168.2.16	20.189.173.10
May 28, 2024 06:36:35.115298033 CEST	49680	80	192.168.2.16	192.229.211.108
May 28, 2024 06:36:47.986681938 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:47.986741066 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:47.986849070 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:47.987315893 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:47.987334013 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:48.794358969 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:48.794502974 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:48.796912909 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:48.796926022 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:48.797456026 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:48.799649954 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:48.842511892 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:49.135862112 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:49.135904074 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:49.136023045 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:49.136059999 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:49.136101007 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:49.136143923 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:49.136169910 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:49.136389971 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:49.136557102 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:49.136570930 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:49.136579990 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:49.136637926 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:49.139476061 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:49.139520884 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:36:49.139579058 CEST	49769	443	192.168.2.16	40.68.123.157
May 28, 2024 06:36:49.139592886 CEST	443	49769	40.68.123.157	192.168.2.16
May 28, 2024 06:37:00.538688898 CEST	49771	443	192.168.2.16	142.250.185.132
May 28, 2024 06:37:00.538734913 CEST	443	49771	142.250.185.132	192.168.2.16
May 28, 2024 06:37:00.538821936 CEST	49771	443	192.168.2.16	142.250.185.132
May 28, 2024 06:37:00.539108038 CEST	49771	443	192.168.2.16	142.250.185.132
May 28, 2024 06:37:00.539124012 CEST	443	49771	142.250.185.132	192.168.2.16
May 28, 2024 06:37:01.178056002 CEST	443	49771	142.250.185.132	192.168.2.16
May 28, 2024 06:37:01.178695917 CEST	49771	443	192.168.2.16	142.250.185.132
May 28, 2024 06:37:01.178715944 CEST	443	49771	142.250.185.132	192.168.2.16
May 28, 2024 06:37:01.179204941 CEST	443	49771	142.250.185.132	192.168.2.16
May 28, 2024 06:37:01.179647923 CEST	49771	443	192.168.2.16	142.250.185.132
May 28, 2024 06:37:01.179744959 CEST	443	49771	142.250.185.132	192.168.2.16
May 28, 2024 06:37:01.228601933 CEST	49771	443	192.168.2.16	142.250.185.132
May 28, 2024 06:37:11.087515116 CEST	443	49771	142.250.185.132	192.168.2.16
May 28, 2024 06:37:11.087599039 CEST	443	49771	142.250.185.132	192.168.2.16
May 28, 2024 06:37:11.087769985 CEST	49771	443	192.168.2.16	142.250.185.132
May 28, 2024 06:37:11.865659952 CEST	49771	443	192.168.2.16	142.250.185.132
May 28, 2024 06:37:11.865681887 CEST	443	49771	142.250.185.132	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 28, 2024 06:35:55.661551952 CEST	52140	53	192.168.2.16	1.1.1.1
May 28, 2024 06:35:55.662250042 CEST	59006	53	192.168.2.16	1.1.1.1
May 28, 2024 06:35:55.668109894 CEST	53	55022	1.1.1.1	192.168.2.16
May 28, 2024 06:35:55.701263905 CEST	53	65435	1.1.1.1	192.168.2.16
May 28, 2024 06:35:55.723407030 CEST	53	59006	1.1.1.1	192.168.2.16
May 28, 2024 06:35:55.884917021 CEST	53	52140	1.1.1.1	192.168.2.16
May 28, 2024 06:35:56.704700947 CEST	53	60311	1.1.1.1	192.168.2.16
May 28, 2024 06:35:56.930610895 CEST	51569	53	192.168.2.16	1.1.1.1
May 28, 2024 06:35:56.930793047 CEST	61657	53	192.168.2.16	1.1.1.1
May 28, 2024 06:35:57.040273905 CEST	53	51569	1.1.1.1	192.168.2.16
May 28, 2024 06:35:57.053270102 CEST	53	61657	1.1.1.1	192.168.2.16
May 28, 2024 06:35:58.738805056 CEST	51526	53	192.168.2.16	1.1.1.1
May 28, 2024 06:35:58.739006996 CEST	51865	53	192.168.2.16	1.1.1.1
May 28, 2024 06:35:58.745524883 CEST	53	51526	1.1.1.1	192.168.2.16
May 28, 2024 06:35:58.745621920 CEST	53	51865	1.1.1.1	192.168.2.16
May 28, 2024 06:35:59.693528891 CEST	60563	53	192.168.2.16	1.1.1.1
May 28, 2024 06:35:59.693662882 CEST	60645	53	192.168.2.16	1.1.1.1
May 28, 2024 06:35:59.700560093 CEST	53	60645	1.1.1.1	192.168.2.16
May 28, 2024 06:35:59.701217890 CEST	53	60563	1.1.1.1	192.168.2.16
May 28, 2024 06:36:01.868331909 CEST	53	54493	1.1.1.1	192.168.2.16
May 28, 2024 06:36:02.110728979 CEST	50122	53	192.168.2.16	1.1.1.1
May 28, 2024 06:36:02.110858917 CEST	65419	53	192.168.2.16	1.1.1.1
May 28, 2024 06:36:02.117666960 CEST	53	50122	1.1.1.1	192.168.2.16
May 28, 2024 06:36:02.117897987 CEST	53	65419	1.1.1.1	192.168.2.16
May 28, 2024 06:36:03.009342909 CEST	53	57610	1.1.1.1	192.168.2.16
May 28, 2024 06:36:03.205876112 CEST	63912	53	192.168.2.16	1.1.1.1
May 28, 2024 06:36:03.206037998 CEST	62344	53	192.168.2.16	1.1.1.1
May 28, 2024 06:36:03.214893103 CEST	53	63912	1.1.1.1	192.168.2.16
May 28, 2024 06:36:03.215797901 CEST	53	62344	1.1.1.1	192.168.2.16
May 28, 2024 06:36:03.867477894 CEST	63820	53	192.168.2.16	1.1.1.1
May 28, 2024 06:36:03.867614985 CEST	60194	53	192.168.2.16	1.1.1.1
May 28, 2024 06:36:03.874373913 CEST	53	63820	1.1.1.1	192.168.2.16
May 28, 2024 06:36:03.875716925 CEST	53	60194	1.1.1.1	192.168.2.16
May 28, 2024 06:36:04.196635008 CEST	63849	53	192.168.2.16	1.1.1.1
May 28, 2024 06:36:04.196768045 CEST	49271	53	192.168.2.16	1.1.1.1
May 28, 2024 06:36:04.204804897 CEST	53	64811	1.1.1.1	192.168.2.16
May 28, 2024 06:36:04.206866026 CEST	53	49271	1.1.1.1	192.168.2.16
May 28, 2024 06:36:04.206878901 CEST	53	63849	1.1.1.1	192.168.2.16
May 28, 2024 06:36:04.310934067 CEST	53	52185	1.1.1.1	192.168.2.16
May 28, 2024 06:36:05.161031961 CEST	50506	53	192.168.2.16	1.1.1.1
May 28, 2024 06:36:05.161214113 CEST	55222	53	192.168.2.16	1.1.1.1
May 28, 2024 06:36:05.169640064 CEST	53	50506	1.1.1.1	192.168.2.16
May 28, 2024 06:36:05.171576977 CEST	53	55222	1.1.1.1	192.168.2.16
May 28, 2024 06:36:13.592099905 CEST	53	54022	1.1.1.1	192.168.2.16
May 28, 2024 06:36:32.346422911 CEST	53	62542	1.1.1.1	192.168.2.16
May 28, 2024 06:36:55.090590000 CEST	53	53991	1.1.1.1	192.168.2.16
May 28, 2024 06:36:55.619590044 CEST	53	65315	1.1.1.1	192.168.2.16
May 28, 2024 06:37:00.528693914 CEST	64596	53	192.168.2.16	1.1.1.1
May 28, 2024 06:37:00.528873920 CEST	64175	53	192.168.2.16	1.1.1.1
May 28, 2024 06:37:00.537312984 CEST	53	64175	1.1.1.1	192.168.2.16
May 28, 2024 06:37:00.537352085 CEST	53	64596	1.1.1.1	192.168.2.16
May 28, 2024 06:37:07.865292072 CEST	138	138	192.168.2.16	192.168.2.255
May 28, 2024 06:37:24.649203062 CEST	53	57724	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 28, 2024 06:35:55.661551952 CEST	192.168.2.16	1.1.1.1	0xd74a	Standard query (0)	online.systems.com.pk	A (IP address)	IN (0x0001)	false
May 28, 2024 06:35:55.662250042 CEST	192.168.2.16	1.1.1.1	0xada1	Standard query (0)	online.systems.com.pk	65	IN (0x0001)	false
May 28, 2024 06:35:56.930610895 CEST	192.168.2.16	1.1.1.1	0xb1fc	Standard query (0)	be-isabel-6-eu-online.com	A (IP address)	IN (0x0001)	false
May 28, 2024 06:35:56.930793047 CEST	192.168.2.16	1.1.1.1	0x77de	Standard query (0)	be-isabel-6-eu-online.com	65	IN (0x0001)	false
May 28, 2024 06:35:58.738805056 CEST	192.168.2.16	1.1.1.1	0xe122	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 06:35:58.739006996 CEST	192.168.2.16	1.1.1.1	0x4f2	Standard query (0)	google.com	65	IN (0x0001)	false
May 28, 2024 06:35:59.693528891 CEST	192.168.2.16	1.1.1.1	0x5a98	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 06:35:59.693662882 CEST	192.168.2.16	1.1.1.1	0xe497	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 28, 2024 06:36:02.110728979 CEST	192.168.2.16	1.1.1.1	0x43fc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 06:36:02.110858917 CEST	192.168.2.16	1.1.1.1	0x5a4d	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 28, 2024 06:36:03.205876112 CEST	192.168.2.16	1.1.1.1	0x35fa	Standard query (0)	ogs.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 06:36:03.206037998 CEST	192.168.2.16	1.1.1.1	0xbbd4	Standard query (0)	ogs.google.com	65	IN (0x0001)	false
May 28, 2024 06:36:03.867477894 CEST	192.168.2.16	1.1.1.1	0xe0a9	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 06:36:03.867614985 CEST	192.168.2.16	1.1.1.1	0x972e	Standard query (0)	apis.google.com	65	IN (0x0001)	false
May 28, 2024 06:36:04.196635008 CEST	192.168.2.16	1.1.1.1	0x2d34	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 06:36:04.196768045 CEST	192.168.2.16	1.1.1.1	0x351b	Standard query (0)	play.google.com	65	IN (0x0001)	false
May 28, 2024 06:36:05.161031961 CEST	192.168.2.16	1.1.1.1	0xa9bd	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 06:36:05.161214113 CEST	192.168.2.16	1.1.1.1	0xa8f	Standard query (0)	play.google.com	65	IN (0x0001)	false
May 28, 2024 06:37:00.528693914 CEST	192.168.2.16	1.1.1.1	0x7e61	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 06:37:00.528873920 CEST	192.168.2.16	1.1.1.1	0xa2ba	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 28, 2024 06:35:55.884917021 CEST	1.1.1.1	192.168.2.16	0xd74a	No error (0)	online.systems.com.pk		37.27.57.153	A (IP address)	IN (0x0001)	false
May 28, 2024 06:35:57.040273905 CEST	1.1.1.1	192.168.2.16	0xb1fc	No error (0)	be-isabel-6-eu-online.com		91.215.85.79	A (IP address)	IN (0x0001)	false
May 28, 2024 06:35:58.745524883 CEST	1.1.1.1	192.168.2.16	0xe122	No error (0)	google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
May 28, 2024 06:35:58.745621920 CEST	1.1.1.1	192.168.2.16	0x4f2	No error (0)	google.com			65	IN (0x0001)	false
May 28, 2024 06:35:59.700560093 CEST	1.1.1.1	192.168.2.16	0xe497	No error (0)	www.google.com			65	IN (0x0001)	false
May 28, 2024 06:35:59.701217890 CEST	1.1.1.1	192.168.2.16	0x5a98	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
May 28, 2024 06:36:02.117666960 CEST	1.1.1.1	192.168.2.16	0x43fc	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
May 28, 2024 06:36:02.117897987 CEST	1.1.1.1	192.168.2.16	0x5a4d	No error (0)	www.google.com			65	IN (0x0001)	false
May 28, 2024 06:36:03.214893103 CEST	1.1.1.1	192.168.2.16	0x35fa	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 06:36:03.214893103 CEST	1.1.1.1	192.168.2.16	0x35fa	No error (0)	www3.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
May 28, 2024 06:36:03.215797901 CEST	1.1.1.1	192.168.2.16	0xbbd4	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 06:36:03.874373913 CEST	1.1.1.1	192.168.2.16	0xe0a9	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 06:36:03.874373913 CEST	1.1.1.1	192.168.2.16	0xe0a9	No error (0)	plus.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
May 28, 2024 06:36:03.875716925 CEST	1.1.1.1	192.168.2.16	0x972e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 06:36:04.206878901 CEST	1.1.1.1	192.168.2.16	0x2d34	No error (0)	play.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
May 28, 2024 06:36:05.169640064 CEST	1.1.1.1	192.168.2.16	0xa9bd	No error (0)	play.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
May 28, 2024 06:37:00.537312984 CEST	1.1.1.1	192.168.2.16	0xa2ba	No error (0)	www.google.com			65	IN (0x0001)	false
May 28, 2024 06:37:00.537352085 CEST	1.1.1.1	192.168.2.16	0x7e61	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

online.systems.com.pk

be-isabel-6-eu-online.com

google.com

www.google.com

https:

ogs.google.com

apis.google.com

play.google.com

slscr.update.microsoft.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49700	37.27.57.153	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:35:56 UTC	664	OUT	GET / HTTP/1.1 Host: online.systems.com.pk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 04:35:56 UTC	360	IN	HTTP/1.1 301 Moved Permanently Connection: close content-type: text/html content-length: 707 date: Tue, 28 May 2024 04:35:56 GMT location: https://be-isabel-6-eu-online.com/ alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-05-28 04:35:56 UTC	707	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49702	91.215.85.79	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:35:57 UTC	668	OUT	GET / HTTP/1.1 Host: be-isabel-6-eu-online.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 04:35:58 UTC	382	IN	HTTP/1.1 301 Moved Permanently Connection: close cache-control: no-store location: https://google.com content-type: text/html; charset=UTF-8 content-length: 0 date: Tue, 28 May 2024 04:35:58 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49704	172.217.16.206	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:35:59 UTC	653	OUT	GET / HTTP/1.1 Host: google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 04:35:59 UTC	854	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/ Content-Type: text/html; charset=UTF-8 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-ZwZ4UYmfCWVhSOXzztQ-cw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:35:59 GMT Expires: Thu, 27 Jun 2024 04:35:59 GMT Cache-Control: public, max-age=2592000 Server: gws Content-Length: 220 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:35:59 UTC	220	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49705	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:00 UTC	657	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-28 04:36:00 UTC	1663	IN	HTTP/1.1 200 OK Date: Tue, 28 May 2024 04:36:00 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-tovPfVEmSdU4gqBHW2p2gw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; expires=Sun, 24-Nov-2024 04:36:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; expires=Wed, 27-Nov-2024 04:36:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-28 04:36:00 UTC	1663	IN	Data Raw: 31 37 64 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 17d1<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2024-05-28 04:36:00 UTC	1663	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 61 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 6e 5b 67 5d 7d 3b 61 2e 73 72 63 3d 63 7d 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 6c 3a 62 3b 72 65 74 75 72 6e 20 74 28 22 22 2c 61 2c 62 29 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 79 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 79 3d 5b 5d 3b 67 6f 6f 67 6c 65 2e 78 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 29 76 61 72 20 63 3d 61 2e 69 64 3b 65 6c 73 65 7b 64 6f 20 63 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b Data Ascii: .length;n[g]=a;a.onerror=a.onload=a.onabort=function(){delete n[g]};a.src=c}};google.logUrl=function(a,b){b=void 0===b?l:b;return t("",a,b)};}).call(this);(function(){google.y={};google.sy=[];google.x=function(a,b){if(a)var c=a.id;else{do c=Math.random();
2024-05-28 04:36:00 UTC	1663	IN	Data Raw: 61 72 20 71 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 26 26 22 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2c 61 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 6e 73 2c 72 3d 71 3f 61 61 7c 7c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3a 76 6f 69 64 20 30 2c 62 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 72 73 2c 74 3d 71 3f 62 61 7c 7c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e Data Ascii: ar q=window.performance&&window.performance.timing&&"navigationStart"in window.performance.timing,aa=google.stvsc&&google.stvsc.ns,r=q?aa\|\|window.performance.timing.navigationStart:void 0,ba=google.stvsc&&google.stvsc.rs,t=q?ba\|\|window.performance.timing.
2024-05-28 04:36:00 UTC	1116	IN	Data Raw: 74 65 6e 65 72 22 69 6e 20 61 3f 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 64 7c 7c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 3b 76 61 72 20 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 76 3d 5b 5d 3b 74 68 69 73 2e 42 3d 74 68 69 73 2e 67 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 61 66 74 22 29 3b 74 68 69 73 2e 6a 3d 21 21 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 29 3b 76 61 72 20 64 3b 69 66 28 64 3d 21 74 68 69 73 2e 6a 29 61 3a 7b 66 6f 72 28 64 3d 30 3b 64 3c 44 2e 6c 65 6e 67 74 68 3b 2b Data Ascii: tener"in a?a.removeEventListener(b,c,d\|\|!1):a.attachEvent&&a.detachEvent("on"+b,c)};var ja=function(a,b,c){this.g=a;this.v=[];this.B=this.g.hasAttribute("data-noaft");this.j=!!this.g.getAttribute("data-deferred");var d;if(d=!this.j)a:{for(d=0;d<D.length;+
2024-05-28 04:36:00 UTC	280	IN	Data Raw: 31 31 31 0d 0a 3d 3d 3d 61 2e 44 7c 7c 22 31 22 3d 3d 3d 61 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 29 29 78 7c 7c 45 28 61 29 3b 65 6c 73 65 20 69 66 28 21 61 2e 69 29 7b 61 2e 6a 26 26 61 2e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 2c 22 33 22 29 3b 61 2e 69 3d 62 3b 62 3d 61 2e 69 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 76 2e 6c 65 6e 67 74 68 3b 2b 2b 63 29 61 2e 76 5b 63 5d 28 62 29 3b 61 2e 76 2e 6c 65 6e 67 74 68 3d 30 7d 7d 2c 44 3d 22 73 72 63 20 62 73 72 63 20 75 72 6c 20 6c 6c 20 69 6d 61 67 65 20 69 6d 67 2d 75 72 6c 20 6c 69 6f 69 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 66 6f 72 28 3b 61 3b Data Ascii: 111===a.D\|\|"1"===a.g.getAttribute("data-deferred"))x\|\|E(a);else if(!a.i){a.j&&a.g.setAttribute("data-deferred","3");a.i=b;b=a.i;for(var c=0;c<a.v.length;++c)a.v[c](b);a.v.length=0}},D="src bsrc url ll image img-url lioi".split(" ");function H(a){for(;a;
2024-05-28 04:36:00 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 2d 53 43 52 4f 4c 4c 49 4e 47 2d 43 41 52 4f 55 53 45 4c 22 3d 3d 3d 61 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 20 61 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 67 6f 6f 67 6c 65 2e 63 2e 69 69 6d 3d 67 6f 6f 67 6c 65 2e 63 2e 69 69 6d 7c 7c 7b 7d 3b 76 61 72 20 49 3d 67 6f 6f 67 6c 65 2e 63 2e 69 69 6d 2c 6b 61 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 53 74 72 69 6e 67 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 73 69 69 64 22 29 7c 7c 2b 2b 6b 61 29 3b 49 5b 65 5d 7c 7c 28 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 73 69 69 64 22 2c 65 29 2c 49 5b 65 5d 3d 62 3f 62 28 61 29 3a 6e 65 77 20 6a 61 28 61 2c 63 2c 64 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: 8000-SCROLLING-CAROUSEL"===a.tagName)return a;return null}google.c.iim=google.c.iim\|\|{};var I=google.c.iim,ka=0;function J(a,b,c,d){var e=String(a.getAttribute("data-csiid")\|\|++ka);I[e]\|\|(a.setAttribute("data-csiid",e),I[e]=b?b(a):new ja(a,c,d));return
2024-05-28 04:36:00 UTC	1390	IN	Data Raw: 74 65 2e 6e 6f 77 28 29 29 29 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 28 22 6c 6f 61 64 22 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 68 73 74 22 29 3b 76 61 72 20 4d 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 3b 69 66 28 21 67 6f 6f 67 6c 65 2e 73 74 76 73 63 7c 7c 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 73 77 29 7b 76 61 72 20 4e 3d 4d 2e 74 3b 75 26 26 28 72 26 26 74 26 26 74 3e 72 26 26 74 3c 3d 4e 2e 73 74 61 72 74 3f 28 4e 2e 73 74 61 72 74 3d 74 2c 4d 2e 77 73 72 74 3d 74 2d 72 29 3a 75 2e 6e 6f 77 26 26 28 4d 2e 77 73 72 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 75 2e 6e 6f 77 28 29 29 29 29 7d 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 78 65 22 2c 22 6c 6f 61 64 22 29 3b 76 61 72 20 4f 3b 69 66 28 6e 75 6c Data Ascii: te.now()))};google.startTick("load");google.tick("load","hst");var M=google.timers.load;if(!google.stvsc\|\|google.stvsc.sw){var N=M.t;u&&(r&&t&&t>r&&t<=N.start?(N.start=t,M.wsrt=t-r):u.now&&(M.wsrt=Math.floor(u.now())))}google.c.b("xe","load");var O;if(nul
2024-05-28 04:36:00 UTC	1390	IN	Data Raw: 73 20 63 62 74 20 66 68 74 20 66 72 74 73 20 66 72 76 74 20 68 63 74 20 68 73 74 20 70 72 74 20 73 63 74 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 6e 61 2e 73 65 61 72 63 68 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 61 2b 22 3d 28 5c 5c 64 2b 29 22 29 29 29 3f 4e 75 6d 62 65 72 28 61 5b 31 5d 29 3a 2d 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 55 28 61 29 7b 76 61 72 20 62 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2c 63 3d 62 2e 6d 3b 69 66 28 21 63 7c 7c 21 63 2e 70 72 73 29 7b 76 61 72 20 64 3d 53 28 29 3f 30 3a 54 28 22 71 73 75 62 74 73 22 29 3b 30 3c 64 26 26 28 63 3d 54 28 22 66 62 74 73 22 29 2c 30 3c 63 26 26 28 62 2e 74 2e 73 74 61 72 74 3d Data Ascii: s cbt fht frts frvt hct hst prt sct".split(" ");function T(a){return(a=na.search.match(new RegExp("[?&]"+a+"=(\\d+)")))?Number(a[1]):-1}function U(a){var b=google.timers.load,c=b.m;if(!c\|\|!c.prs){var d=S()?0:T("qsubts");0<d&&(c=T("fbts"),0<c&&(b.t.start=
2024-05-28 04:36:00 UTC	1390	IN	Data Raw: 7d 3b 76 61 72 20 57 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 66 75 6e 63 74 69 6f 6e 20 73 61 28 29 7b 69 66 28 67 6f 6f 67 6c 65 2e 63 2e 63 34 74 26 26 57 26 26 57 2e 6d 61 72 6b 26 26 57 2e 74 69 6d 69 6e 67 29 7b 76 61 72 20 61 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2c 62 3d 61 2e 77 73 72 74 3b 61 3d 61 2e 74 2e 61 66 74 3b 62 26 26 30 3c 62 26 26 61 26 26 30 3c 61 26 26 28 61 2d 3d 57 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 30 3c 61 26 26 28 57 2e 6d 61 72 6b 28 22 53 65 61 72 63 68 41 46 54 53 74 61 72 74 22 2c 7b 73 74 61 72 74 54 69 6d 65 3a 62 7d 29 2c 57 2e 6d 61 72 6b 28 22 74 72 69 67 67 65 72 3a 53 65 61 72 63 68 41 46 54 45 6e 64 22 2c 7b 73 74 61 72 74 54 69 6d 65 3a 61 Data Ascii: };var W=window.performance;function sa(){if(google.c.c4t&&W&&W.mark&&W.timing){var a=google.timers.load,b=a.wsrt;a=a.t.aft;b&&0<b&&a&&0<a&&(a-=W.timing.navigationStart,0<a&&(W.mark("SearchAFTStart",{startTime:b}),W.mark("trigger:SearchAFTEnd",{startTime:a
2024-05-28 04:36:00 UTC	1390	IN	Data Raw: 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 74 66 22 2c 53 74 72 69 6e 67 28 65 29 29 3b 72 65 74 75 72 6e 20 79 26 26 21 64 2e 42 26 26 28 21 64 2e 6c 7c 7c 64 2e 46 7c 7c 21 21 28 46 28 64 29 26 31 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 79 26 26 7a 28 22 69 6d 6c 22 2c 64 7c 7c 61 29 3b 67 6f 6f 67 6c 65 2e 63 2e 75 28 22 69 6d 6c 22 29 7d 76 61 7c 7c 28 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 69 6d 6c 22 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 61 28 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 63 29 7d 28 30 29 2c 76 61 3d 21 30 29 7d 3b 67 6f 6f 67 6c 65 2e 63 2e 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 78 7c 7c 77 29 67 6f 6f 67 6c 65 2e 63 2e 73 65 74 75 70 3d 77 61 3b 7d 29 2e 63 61 6c 6c 28 74 68 Data Ascii: g.setAttribute("data-atf",String(e));return y&&!d.B&&(!d.l\|\|d.F\|\|!!(F(d)&1))}function c(d){y&&z("iml",d\|\|a);google.c.u("iml")}va\|\|(google.c.b("iml"),function(){ra(b,function(){},c)}(0),va=!0)};google.c.ub=function(){};if(!x\|\|w)google.c.setup=wa;}).call(th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49706	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:01 UTC	1620	OUT	GET /xjs/_/ss/k=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/d=1/ed=1/br=1/rs=ACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:01 UTC	809	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 2429 Date: Tue, 28 May 2024 04:36:01 GMT Expires: Wed, 28 May 2025 04:36:01 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 24 May 2024 10:40:04 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:01 UTC	581	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 43 4f 45 6d 59 3a 23 32 30 32 31 32 34 3b 2d 2d 78 68 55 47 77 63 3a 23 66 66 66 7d 3a 72 6f 6f 74 7b 2d 2d 67 53 35 6a 58 62 3a 23 64 61 64 63 65 30 3b 2d 2d 41 71 6e 37 78 64 3a 23 64 32 64 32 64 32 3b 2d 2d 45 70 46 4e 57 3a 23 66 66 66 3b 2d 2d 49 58 6f 78 55 65 3a 23 37 30 37 35 37 61 3b 2d 2d 62 62 51 78 41 62 3a 23 34 64 35 31 35 36 3b 2d 2d 59 4c 4e 4e 48 63 3a 23 32 30 32 31 32 34 3b 2d 2d 54 4d 59 53 39 3a 23 31 61 37 33 65 38 3b 2d 2d 4a 4b 71 78 32 3a 23 31 61 30 64 61 62 3b 2d 2d 72 72 4a 4a 55 63 3a 23 31 61 37 33 65 38 3b 2d 2d 6d 58 5a 6b 71 63 3a 23 64 61 64 63 65 30 3b 2d 2d 4e 73 6d 30 63 65 3a 23 34 32 38 35 66 34 3b 2d 2d 58 4b 4d 44 78 63 3a 23 66 37 66 38 66 39 3b 2d 2d 61 59 6e 32 53 3a 23 65 63 65 64 65 65 Data Ascii: :root{--COEmY:#202124;--xhUGwc:#fff}:root{--gS5jXb:#dadce0;--Aqn7xd:#d2d2d2;--EpFNW:#fff;--IXoxUe:#70757a;--bbQxAb:#4d5156;--YLNNHc:#202124;--TMYS9:#1a73e8;--JKqx2:#1a0dab;--rrJJUc:#1a73e8;--mXZkqc:#dadce0;--Nsm0ce:#4285f4;--XKMDxc:#f7f8f9;--aYn2S:#ecedee
2024-05-28 04:36:01 UTC	1390	IN	Data Raw: 74 73 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 2d 63 6f 6e 74 65 6e 74 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 2d 63 6f 6e 74 65 6e 74 7b 74 6f 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 2e 4c 48 Data Ascii: ts:none;transform:translateY(0)}to{transform:translateY(-100%)}}@keyframes g-snackbar-hide{from{transform:translateY(-100%)}to{transform:translateY(0)}}@keyframes g-snackbar-show-content{from{opacity:0}}@keyframes g-snackbar-hide-content{to{opacity:0}}.LH
2024-05-28 04:36:01 UTC	77	IN	Data Raw: 2d 6c 65 66 74 3a 30 7d 2e 6a 68 5a 76 6f 64 7b 6c 65 66 74 3a 31 36 70 78 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 4c 48 33 77 47 2c 2e 4f 78 38 43 79 64 7b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 7d 2e 79 4b 36 6a 71 65 2c 2e 57 Data Ascii: -left:0}.jhZvod{left:16px;right:auto}.LH3wG,.Ox8Cyd{left:0;right:0}.yK6jqe,.W
2024-05-28 04:36:01 UTC	381	IN	Data Raw: 75 30 76 39 62 2c 2e 45 37 48 64 67 62 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 47 39 6a 6f 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 34 70 78 3b 62 6f 74 74 6f 6d 3a 2d 32 34 70 78 3b 6c 65 66 74 3a 2d 32 34 70 78 3b 72 69 67 68 74 3a 2d 32 34 70 78 7d 2e 41 42 4d 46 5a 2e 42 30 35 52 42 62 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 31 30 30 6d 73 2c 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 30 73 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 36 29 7d 2e 41 42 4d 46 5a 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: u0v9b,.E7Hdgb{position:relative}.G9jore{position:absolute;top:-24px;bottom:-24px;left:-24px;right:-24px}.ABMFZ.B05RBb{transition:background-color 100ms,visibility 0s 0s;visibility:inherit;background-color:rgba(0,0,0,0.6)}.ABMFZ{transition:background-color

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49707	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:01 UTC	1331	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:02 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5969 Date: Tue, 28 May 2024 04:36:02 GMT Expires: Tue, 28 May 2024 04:36:02 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:02 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2024-05-28 04:36:02 UTC	1390	IN	Data Raw: 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 34 34 81 a0 23 96 da 69 9b 71 fd 27 74 d5 a5 75 a0 a1 09 a4 da c5 de 8d c5 54 01 e2 2b 6a f4 41 53 79 6a 54 d3 e9 f6 75 dc e8 28 66 cd 79 c5 ac 75 77 81 1b bf 2d 65 8d 42 c9 b6 2a 85 ac 35 84 57 fc 1d ff 2e fe ff ae a2 6d 7e bd 9c 35 2d 7c 5f 22 3e ff 6a d6 be ad af bd 63 5b 6f fb bc 6d 2b da ef 1e ec 4b fd 76 eb 8a 54 61 6b 5f aa 22 fe 5c 15 7f 1e 14 ab 3c d8 db f6 8c f8 ba 1f 89 75 b1 f8 da e3 f1 7d 2c 01 c0 Data Ascii: Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo4444#iq'tuT+jASyjTu(fyuw-eB*5W.m~5-\|_">jc[om+KvTak_"\<u},
2024-05-28 04:36:02 UTC	1390	IN	Data Raw: 43 0f b1 f7 8a 23 ce 72 99 ca cc 96 87 c6 1d 31 aa d5 c4 4e b1 23 71 fd 11 92 83 b0 09 5a 54 77 92 40 20 90 a4 4b 44 a3 cf 23 ca 0d 59 51 5c 48 8c 42 9e c5 91 aa 36 2c bc 92 96 44 f5 1e 1c f3 11 88 13 5c 3c cc 85 5c 2a 71 21 ef ad 1a 46 8a 35 80 ea ec a3 c6 15 b3 d6 4f 24 7e e6 6d 6c 04 88 68 62 89 c4 b1 e2 9e 46 fb 59 aa 4f b2 94 78 9f fb 24 a2 9d 11 f3 6b 19 c7 3b 55 86 3c a6 3b c1 fe ac 01 80 7c 32 6e f0 56 d3 09 a4 f6 98 91 b5 7c 62 14 fa 5f 88 56 1a e9 db c2 51 9b f2 b3 10 55 d7 3a b0 cf 25 26 51 5f 1e eb 04 62 77 07 5f 67 35 28 e7 26 7e 90 aa f7 28 64 cd 27 11 16 32 02 68 6a 43 e3 19 a2 c8 6c 10 99 fa ba 11 c1 83 6c 7f b2 de 63 45 ea 09 91 93 d8 8d 45 80 a1 5f b3 f1 22 2f f2 3b 6a 14 32 b4 62 fc b0 ee 76 f0 9f 21 b6 5a 78 c8 75 b0 08 20 f6 c2 8c 38 Data Ascii: C#r1N#qZTw@ KD#YQ\HB6,D\<\*q!F5O$~mlhbFYOx$k;U<;\|2nV\|b_VQU:%&Q_bw_g5(&~(d'2hjCllcEE_"/;j2bv!Zxu 8
2024-05-28 04:36:02 UTC	1390	IN	Data Raw: 0d 7f e3 9a a7 13 2f d6 0f 98 42 60 68 10 d1 bf f2 33 ec 6d d8 de 97 3a 9d 56 3e 6d bb 45 71 19 f7 0e ca e7 c0 e7 dd c5 81 2c bf f9 10 e2 3e 7c 89 29 42 6e be 77 64 93 85 64 d8 77 3d 0d 3a f8 3f 02 43 21 9a cc 5d 01 30 40 4a 72 86 c6 d2 d9 cb aa 6d 2c 01 80 7a 51 90 da 6f c9 47 31 a7 72 f2 b0 12 e0 f4 e4 83 89 5d b8 eb c3 74 e1 52 65 c8 d4 b6 ee da 27 cd e6 d5 bb 1d 4c ac 7e bc 25 5a f8 95 7c 7e e4 57 44 72 d4 a3 7c 8e cd cb 77 3b a4 f6 e9 4f 95 17 a0 08 c0 14 00 1a 93 a6 2b 51 73 e6 29 21 88 c3 2f 71 eb 7b 30 5f 8e ff 26 5c 18 7c 40 90 c8 7a c9 6e d6 65 18 f2 c3 62 c4 cc ae 75 7b 71 37 78 44 22 7a 7a 7a b4 06 2c 6a b7 62 39 6b 7e 49 51 33 dd bf 12 37 d0 1f ea 3b b0 b7 bd 42 24 91 73 14 4d bc fb 2a e5 e7 e3 73 d6 73 3f e3 f9 e0 4e 62 1e eb 56 05 f3 75 db Data Ascii: /B`h3m:V>mEq,>\|)Bnwddw=:?C!]0@Jrm,zQoG1r]tRe'L~%Z\|~WDr\|w;O+Qs)!/q{0_&\\|@znebu{q7xD"zzz,jb9k~IQ37;B$sM*ss?NbVu
2024-05-28 04:36:02 UTC	1080	IN	Data Raw: 35 71 cf fd be 90 35 3f c2 54 03 c2 2c 54 56 70 03 c7 73 5c 81 fd bf b7 04 19 75 d6 44 94 b2 1d 27 29 0e 2d 51 3e 5b 8b 11 13 4c 01 44 27 ee 49 22 09 da af 92 38 f0 fe 98 f4 af 46 4c 58 b1 60 2b a1 60 3f 55 60 54 04 55 75 92 08 04 78 79 e6 84 dd f0 30 41 45 44 2d 79 98 37 10 12 a6 d1 13 09 ca a5 b6 eb bd d6 ac 88 03 ea 43 94 7e 59 93 51 33 08 79 11 ca aa 51 db ce 95 b2 e6 95 aa 1b a5 44 3e 62 2f 11 1d 2c c2 78 cb 48 89 03 ef 87 a8 03 93 fe 15 02 33 61 6c d7 ff 56 54 0f af bf 54 1a fd 63 98 00 85 40 90 a8 57 42 20 84 36 8b 02 b7 1e 8e 9a 38 10 e1 14 73 c6 34 16 27 a0 04 84 f0 cb 76 fc 5b b8 1b 94 23 26 8d 6d f0 21 e1 4e 70 4e 6e c1 7a 85 9b 53 be 09 a9 c4 ad 6e 44 24 8d 46 1c c5 ac e9 d4 cc e2 50 0e e8 3d c4 8d df dd 68 44 b2 b3 81 ae 07 fa 90 66 77 91 43 Data Ascii: 5q5?T,TVps\uD')-Q>[LD'I"8FLX`+`?U`TUuxy0AED-y7C~YQ3yQD>b/,xH3alVTTc@WB 68s4'v[#&m!NpNnzSnD$FP=hDfwC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49708	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:01 UTC	3793	OUT	GET /xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=1/ed=1/dg=2/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q1Ow [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:02 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 883026 Date: Tue, 28 May 2024 04:36:02 GMT Expires: Wed, 28 May 2025 04:36:02 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 24 May 2024 19:07:04 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:02 UTC	572	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 4d 49 54 0a 2a 2f 0a 2f 2a 0a 20 53 Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// Copyright 2024 Google, Inc SPDX-License-Identifier: MIT// S
2024-05-28 04:36:02 UTC	1390	IN	Data Raw: 63 61 2c 4b 63 61 2c 52 63 61 2c 54 63 61 2c 55 63 61 2c 57 63 61 2c 24 63 61 2c 61 64 61 2c 62 64 61 2c 65 64 61 2c 66 64 61 2c 67 64 61 2c 68 64 61 2c 69 64 61 2c 6c 64 61 2c 6d 64 61 2c 70 64 61 2c 6e 64 61 2c 74 64 61 2c 75 64 61 2c 41 64 61 2c 42 64 61 2c 44 64 61 2c 43 64 61 2c 46 64 61 2c 48 64 61 2c 47 64 61 2c 4a 64 61 2c 49 64 61 2c 4d 64 61 2c 4c 64 61 2c 4f 64 61 2c 53 64 61 2c 54 64 61 2c 6f 62 2c 57 64 61 2c 59 64 61 2c 5a 64 61 2c 61 65 61 2c 63 65 61 2c 6b 65 61 2c 6c 65 61 2c 58 64 61 2c 24 64 61 2c 6f 65 61 2c 70 65 61 2c 78 65 61 2c 79 65 61 2c 48 65 61 2c 44 65 61 2c 4a 65 61 2c 4b 65 61 2c 41 65 61 2c 4e 65 61 2c 4c 65 61 2c 53 65 61 2c 54 65 61 2c 55 65 61 2c 58 65 61 2c 59 65 61 2c 42 65 61 2c 57 65 61 2c 24 65 61 2c 62 66 61 2c 66 Data Ascii: ca,Kca,Rca,Tca,Uca,Wca,$ca,ada,bda,eda,fda,gda,hda,ida,lda,mda,pda,nda,tda,uda,Ada,Bda,Dda,Cda,Fda,Hda,Gda,Jda,Ida,Mda,Lda,Oda,Sda,Tda,ob,Wda,Yda,Zda,aea,cea,kea,lea,Xda,$da,oea,pea,xea,yea,Hea,Dea,Jea,Kea,Aea,Nea,Lea,Sea,Tea,Uea,Xea,Yea,Bea,Wea,$ea,bfa,f
2024-05-28 04:36:02 UTC	1390	IN	Data Raw: 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 63 2b 3d 61 5b 65 5d 2b 28 65 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 65 5d 3a 22 25 73 22 29 3b 5f 2e 61 61 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2b 61 5b 64 5d 29 7d 3b 62 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 22 29 3b 62 2e 70 75 73 68 28 36 35 35 33 33 29 7d 3b 63 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 62 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 62 3a 61 2b 62 7d 3b 0a 5f 2e 64 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 63 3d 62 Data Ascii: ");for(var c="",d=a.length-1,e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");_.aa.call(this,c+a[d])};baa=function(a,b){if(a)throw Error("B");b.push(65533)};caa=function(a,b){b=String.fromCharCode.apply(null,b);return null==a?b:a+b};_.daa=function(a,b,c,d){c=b
2024-05-28 04:36:02 UTC	1390	IN	Data Raw: 68 72 6f 77 20 45 72 72 6f 72 28 22 43 22 29 3b 61 3d 28 6b 61 61 7c 7c 28 6b 61 61 3d 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 29 2e 65 6e 63 6f 64 65 28 61 29 7d 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 33 2a 61 2e 6c 65 6e 67 74 68 29 2c 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3b 69 66 28 31 32 38 3e 66 29 64 5b 63 2b 2b 5d 3d 66 3b 65 6c 73 65 7b 69 66 28 32 30 34 38 3e 66 29 64 5b 63 2b 2b 5d 3d 66 3e 3e 36 7c 31 39 32 3b 65 6c 73 65 7b 69 66 28 35 35 32 39 36 3c 3d 66 26 26 35 37 33 34 33 3e 3d 66 29 7b 69 66 28 35 36 33 31 39 3e 3d 66 26 26 65 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 67 3d 61 2e Data Ascii: hrow Error("C");a=(kaa\|\|(kaa=new TextEncoder)).encode(a)}else{for(var c=0,d=new Uint8Array(3*a.length),e=0;e<a.length;e++){var f=a.charCodeAt(e);if(128>f)d[c++]=f;else{if(2048>f)d[c++]=f>>6\|192;else{if(55296<=f&&57343>=f){if(56319>=f&&e<a.length){var g=a.
2024-05-28 04:36:02 UTC	161	IN	Data Raw: 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 53 61 66 61 72 69 22 29 26 26 21 28 5f 2e 69 61 28 29 7c 7c 28 5f 2e 71 61 61 28 29 3f 30 3a 5f 2e 68 61 28 22 43 6f 61 73 74 22 29 29 7c 7c 5f 2e 72 61 61 28 29 7c 7c 5f 2e 74 61 61 28 29 7c 7c 5f 2e 75 61 61 28 29 7c 7c 28 5f 2e 71 61 61 28 29 3f 6e 61 61 28 22 4f 70 65 72 61 22 29 3a 5f 2e 68 61 28 22 4f 50 52 22 29 29 7c 7c 5f 2e 76 61 61 28 29 7c 7c 5f 2e 77 61 61 28 29 7c 7c 5f 2e 68 61 28 22 41 6e 64 72 6f 69 64 22 29 29 7d 3b 5f 2e Data Ascii: return _.ha("Safari")&&!(_.ia()\|\|(_.qaa()?0:_.ha("Coast"))\|\|_.raa()\|\|_.taa()\|\|_.uaa()\|\|(_.qaa()?naa("Opera"):_.ha("OPR"))\|\|_.vaa()\|\|_.waa()\|\|_.ha("Android"))};_.
2024-05-28 04:36:02 UTC	1390	IN	Data Raw: 69 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 71 61 61 28 29 3f 6e 61 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 5f 2e 68 61 28 22 43 68 72 6f 6d 65 22 29 7c 7c 5f 2e 68 61 28 22 43 72 69 4f 53 22 29 29 26 26 21 5f 2e 74 61 61 28 29 7c 7c 5f 2e 77 61 61 28 29 7d 3b 5f 2e 78 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 41 6e 64 72 6f 69 64 22 29 26 26 21 28 5f 2e 69 61 28 29 7c 7c 5f 2e 76 61 61 28 29 7c 7c 5f 2e 72 61 61 28 29 7c 7c 5f 2e 77 61 61 28 29 29 7d 3b 5f 2e 77 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 53 69 6c 6b 22 29 7d 3b 0a 5f 2e 79 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 7d 3b 61 2e 66 6f 72 45 61 63 68 28 66 75 6e Data Ascii: ia=function(){return _.qaa()?naa("Chromium"):(_.ha("Chrome")\|\|_.ha("CriOS"))&&!_.taa()\|\|_.waa()};_.xaa=function(){return _.ha("Android")&&!(_.ia()\|\|_.vaa()\|\|_.raa()\|\|_.waa())};_.waa=function(){return _.ha("Silk")};_.yaa=function(a){var b={};a.forEach(fun
2024-05-28 04:36:02 UTC	1390	IN	Data Raw: 65 74 75 72 6e 20 30 3d 3d 3d 62 2e 6c 65 6e 67 74 68 3f 4e 61 4e 3a 4e 75 6d 62 65 72 28 62 5b 30 5d 29 7d 3b 43 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 61 61 3f 21 21 5f 2e 65 61 26 26 21 21 5f 2e 65 61 2e 70 6c 61 74 66 6f 72 6d 3a 21 31 7d 3b 5f 2e 44 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 61 61 28 29 3f 22 41 6e 64 72 6f 69 64 22 3d 3d 3d 5f 2e 65 61 2e 70 6c 61 74 66 6f 72 6d 3a 5f 2e 68 61 28 22 41 6e 64 72 6f 69 64 22 29 7d 3b 5f 2e 45 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 69 50 68 6f 6e 65 22 29 26 26 21 5f 2e 68 61 28 22 69 50 6f 64 22 29 26 26 21 5f 2e 68 61 28 22 69 50 61 64 22 29 7d 3b 5f 2e 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: eturn 0===b.length?NaN:Number(b[0])};Caa=function(){return _.maa?!!_.ea&&!!_.ea.platform:!1};_.Daa=function(){return Caa()?"Android"===_.ea.platform:_.ha("Android")};_.Eaa=function(){return _.ha("iPhone")&&!_.ha("iPod")&&!_.ha("iPad")};_.la=function(){ret
2024-05-28 04:36:02 UTC	1390	IN	Data Raw: 74 68 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 69 66 28 66 20 69 6e 20 65 26 26 62 2e 63 61 6c 6c 28 63 2c 65 5b 66 5d 2c 66 2c 61 29 29 72 65 74 75 72 6e 20 66 3b 72 65 74 75 72 6e 2d 31 7d 3b 0a 5f 2e 4e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 5f 2e 4d 61 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 30 3e 62 3f 6e 75 6c 6c 3a 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 63 68 61 72 41 74 28 62 29 3a 61 5b 62 5d 7d 3b 5f 2e 4d 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 Data Ascii: th,e="string"===typeof a?a.split(""):a,f=0;f<d;f++)if(f in e&&b.call(c,e[f],f,a))return f;return-1};_.Naa=function(a,b,c){b=_.Maa(a,b,c);return 0>b?null:"string"===typeof a?a.charAt(b):a[b]};_.Maa=function(a,b,c){for(var d="string"===typeof a?a.split("")
2024-05-28 04:36:02 UTC	1390	IN	Data Raw: 20 63 3d 30 2c 64 3d 30 2c 65 3d 7b 7d 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 66 3d 61 5b 64 2b 2b 5d 2c 67 3d 5f 2e 44 61 28 66 29 3f 22 6f 22 2b 5f 2e 45 61 28 66 29 3a 28 74 79 70 65 6f 66 20 66 29 2e 63 68 61 72 41 74 28 30 29 2b 66 3b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 67 29 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 59 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 5f 2e 57 61 61 28 61 2c 63 7c 7c 5f 2e 58 61 61 2c 21 31 2c 62 29 7d 3b 5f 2e 57 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 66 3d 61 2e 6c 65 6e Data Ascii: c=0,d=0,e={};d<a.length;){var f=a[d++],g=_.Da(f)?"o"+_.Ea(f):(typeof f).charAt(0)+f;Object.prototype.hasOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};_.Yaa=function(a,b,c){return _.Waa(a,c\|\|_.Xaa,!1,b)};_.Waa=function(a,b,c,d){for(var e=0,f=a.len
2024-05-28 04:36:02 UTC	1390	IN	Data Raw: 62 61 28 29 26 26 21 28 5f 2e 68 61 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 5f 2e 68 61 28 22 4d 53 49 45 22 29 29 26 26 21 5f 2e 68 61 28 22 45 64 67 65 22 29 7d 3b 5f 2e 6e 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 6d 62 61 29 72 65 74 75 72 6e 20 5f 2e 49 61 28 61 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 30 32 34 30 3b 63 3c 64 3b 29 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 3d 31 30 32 34 30 29 29 3b 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 72 65 74 75 72 6e 20 62 74 Data Ascii: ba()&&!(_.ha("Trident")\|\|_.ha("MSIE"))&&!_.ha("Edge")};_.nba=function(a){if(!mba)return _.Ia(a);for(var b="",c=0,d=a.length-10240;c<d;)b+=String.fromCharCode.apply(null,a.subarray(c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);return bt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49709	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:01 UTC	1400	OUT	POST /gen_204?s=webhp&t=cap&atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&rt=wsrt.5175,cbt.92,hst.91&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:02 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-83MMaf3RPCxGUeEAa9hXKA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:02 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49713	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:02 UTC	1294	OUT	GET /images/hpp/us-flag.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:02 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 1458 Date: Tue, 28 May 2024 04:36:02 GMT Expires: Tue, 28 May 2024 04:36:02 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:02 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 8e 08 03 00 00 00 50 50 f7 29 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 93 50 4c 54 45 ff ff ff b0 be c5 b0 be c5 b7 1c 1c ff ff ff b7 1c 1c ff ff ff b0 be c5 b7 1c 1c 90 1e 35 1a 23 7e b2 8c 91 c1 3c 3c c0 cb d1 ff ff ff f1 f1 f7 eb ef f1 e2 e4 ef d4 d6 e7 ed c6 c6 c6 c8 df de c4 c6 b0 be c5 b7 ba d7 a9 ad cf d5 9e 9f d0 9a 9b b8 9d b4 b1 a0 a5 9b 9f c7 db 8e 8e b2 96 9b 8d 91 bf 7e 83 b6 c3 6f 71 ab 73 8a 70 76 ae c9 55 55 62 68 a6 ac 56 67 53 5a 9e b5 45 46 9d 48 5f 45 4c 96 37 3f 8e b7 1c 1c 90 1e 35 28 31 86 1a 23 7e c4 a3 30 0d 00 00 00 31 74 52 4e 53 00 33 44 44 66 88 bb bb bb bb bb cc dd ee ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRPP)sBITOPLTE5#~<<~oqspvUUbhVgSZEFH_EL7?5(1#~01tRNS3DDf
2024-05-28 04:36:02 UTC	739	IN	Data Raw: a5 5b 5f 44 df c4 bd fe 59 d4 61 2e 03 8d 0d db e3 8e 03 77 b7 c7 f6 4d 62 f3 4f 87 38 99 01 c7 b1 10 72 86 b7 f4 89 0b 83 dd 8f 63 58 08 87 38 9d 81 dd 1e ad 5e b2 63 0e b0 f3 1c 60 c7 1c 98 c8 40 cc d1 55 56 95 f4 2e 06 9c 6c b9 ee b4 d5 20 ba 0d c4 d5 83 b8 ef 3f ff 70 09 af ef 30 60 2c 46 55 c0 34 de a3 c4 57 ff 29 ce 33 07 24 5f 64 9b 03 2b 13 30 07 04 5b eb c2 c3 7a 4b e4 ab 9f c8 40 69 f5 70 a6 54 50 ab b9 d9 30 3c 0f 30 86 e7 01 1c 12 89 d7 42 9e c7 80 55 2a 47 bb ac 5c 9a 62 20 07 3c 0a 53 8a b5 1c 0e 54 e9 af 35 fd cd da 5e c5 d5 a8 a9 0c a4 fa 03 35 9c 9f 24 be f2 06 9f b6 aa 14 8f 2b be 9a c8 40 cd 75 bd ac a6 ed 79 14 d3 ed 3c a0 d7 45 87 26 72 09 e2 06 e2 5c 6d b4 a0 19 9c 7d 93 60 b2 15 42 60 cc 1c 62 c4 da 38 da d3 64 06 d4 26 60 d3 26 14 Data Ascii: [_DYa.wMbO8rcX8^c`@UV.l ?p0`,FU4W)3$_d+0[zK@ipTP0<0BU*G\b <ST5^5$+@uy<E&r\m}`B`b8d&`&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49712	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:02 UTC	1325	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:02 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 660 Date: Tue, 28 May 2024 04:36:02 GMT Expires: Tue, 28 May 2024 04:36:02 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 22 Apr 2020 22:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:02 UTC	660	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49714	142.250.185.100	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:02 UTC	743	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:03 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5969 Date: Tue, 28 May 2024 04:36:02 GMT Expires: Tue, 28 May 2024 04:36:02 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:03 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2024-05-28 04:36:03 UTC	1390	IN	Data Raw: 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 34 34 81 a0 23 96 da 69 9b 71 fd 27 74 d5 a5 75 a0 a1 09 a4 da c5 de 8d c5 54 01 e2 2b 6a f4 41 53 79 6a 54 d3 e9 f6 75 dc e8 28 66 cd 79 c5 ac 75 77 81 1b bf 2d 65 8d 42 c9 b6 2a 85 ac 35 84 57 fc 1d ff 2e fe ff ae a2 6d 7e bd 9c 35 2d 7c 5f 22 3e ff 6a d6 be ad af bd 63 5b 6f fb bc 6d 2b da ef 1e ec 4b fd 76 eb 8a 54 61 6b 5f aa 22 fe 5c 15 7f 1e 14 ab 3c d8 db f6 8c f8 ba 1f 89 75 b1 f8 da e3 f1 7d 2c 01 c0 Data Ascii: Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo4444#iq'tuT+jASyjTu(fyuw-eB*5W.m~5-\|_">jc[om+KvTak_"\<u},
2024-05-28 04:36:03 UTC	1390	IN	Data Raw: 43 0f b1 f7 8a 23 ce 72 99 ca cc 96 87 c6 1d 31 aa d5 c4 4e b1 23 71 fd 11 92 83 b0 09 5a 54 77 92 40 20 90 a4 4b 44 a3 cf 23 ca 0d 59 51 5c 48 8c 42 9e c5 91 aa 36 2c bc 92 96 44 f5 1e 1c f3 11 88 13 5c 3c cc 85 5c 2a 71 21 ef ad 1a 46 8a 35 80 ea ec a3 c6 15 b3 d6 4f 24 7e e6 6d 6c 04 88 68 62 89 c4 b1 e2 9e 46 fb 59 aa 4f b2 94 78 9f fb 24 a2 9d 11 f3 6b 19 c7 3b 55 86 3c a6 3b c1 fe ac 01 80 7c 32 6e f0 56 d3 09 a4 f6 98 91 b5 7c 62 14 fa 5f 88 56 1a e9 db c2 51 9b f2 b3 10 55 d7 3a b0 cf 25 26 51 5f 1e eb 04 62 77 07 5f 67 35 28 e7 26 7e 90 aa f7 28 64 cd 27 11 16 32 02 68 6a 43 e3 19 a2 c8 6c 10 99 fa ba 11 c1 83 6c 7f b2 de 63 45 ea 09 91 93 d8 8d 45 80 a1 5f b3 f1 22 2f f2 3b 6a 14 32 b4 62 fc b0 ee 76 f0 9f 21 b6 5a 78 c8 75 b0 08 20 f6 c2 8c 38 Data Ascii: C#r1N#qZTw@ KD#YQ\HB6,D\<\*q!F5O$~mlhbFYOx$k;U<;\|2nV\|b_VQU:%&Q_bw_g5(&~(d'2hjCllcEE_"/;j2bv!Zxu 8
2024-05-28 04:36:03 UTC	1390	IN	Data Raw: 0d 7f e3 9a a7 13 2f d6 0f 98 42 60 68 10 d1 bf f2 33 ec 6d d8 de 97 3a 9d 56 3e 6d bb 45 71 19 f7 0e ca e7 c0 e7 dd c5 81 2c bf f9 10 e2 3e 7c 89 29 42 6e be 77 64 93 85 64 d8 77 3d 0d 3a f8 3f 02 43 21 9a cc 5d 01 30 40 4a 72 86 c6 d2 d9 cb aa 6d 2c 01 80 7a 51 90 da 6f c9 47 31 a7 72 f2 b0 12 e0 f4 e4 83 89 5d b8 eb c3 74 e1 52 65 c8 d4 b6 ee da 27 cd e6 d5 bb 1d 4c ac 7e bc 25 5a f8 95 7c 7e e4 57 44 72 d4 a3 7c 8e cd cb 77 3b a4 f6 e9 4f 95 17 a0 08 c0 14 00 1a 93 a6 2b 51 73 e6 29 21 88 c3 2f 71 eb 7b 30 5f 8e ff 26 5c 18 7c 40 90 c8 7a c9 6e d6 65 18 f2 c3 62 c4 cc ae 75 7b 71 37 78 44 22 7a 7a 7a b4 06 2c 6a b7 62 39 6b 7e 49 51 33 dd bf 12 37 d0 1f ea 3b b0 b7 bd 42 24 91 73 14 4d bc fb 2a e5 e7 e3 73 d6 73 3f e3 f9 e0 4e 62 1e eb 56 05 f3 75 db Data Ascii: /B`h3m:V>mEq,>\|)Bnwddw=:?C!]0@Jrm,zQoG1r]tRe'L~%Z\|~WDr\|w;O+Qs)!/q{0_&\\|@znebu{q7xD"zzz,jb9k~IQ37;B$sM*ss?NbVu
2024-05-28 04:36:03 UTC	1080	IN	Data Raw: 35 71 cf fd be 90 35 3f c2 54 03 c2 2c 54 56 70 03 c7 73 5c 81 fd bf b7 04 19 75 d6 44 94 b2 1d 27 29 0e 2d 51 3e 5b 8b 11 13 4c 01 44 27 ee 49 22 09 da af 92 38 f0 fe 98 f4 af 46 4c 58 b1 60 2b a1 60 3f 55 60 54 04 55 75 92 08 04 78 79 e6 84 dd f0 30 41 45 44 2d 79 98 37 10 12 a6 d1 13 09 ca a5 b6 eb bd d6 ac 88 03 ea 43 94 7e 59 93 51 33 08 79 11 ca aa 51 db ce 95 b2 e6 95 aa 1b a5 44 3e 62 2f 11 1d 2c c2 78 cb 48 89 03 ef 87 a8 03 93 fe 15 02 33 61 6c d7 ff 56 54 0f af bf 54 1a fd 63 98 00 85 40 90 a8 57 42 20 84 36 8b 02 b7 1e 8e 9a 38 10 e1 14 73 c6 34 16 27 a0 04 84 f0 cb 76 fc 5b b8 1b 94 23 26 8d 6d f0 21 e1 4e 70 4e 6e c1 7a 85 9b 53 be 09 a9 c4 ad 6e 44 24 8d 46 1c c5 ac e9 d4 cc e2 50 0e e8 3d c4 8d df dd 68 44 b2 b3 81 ae 07 fa 90 66 77 91 43 Data Ascii: 5q5?T,TVps\uD')-Q>[LD'I"8FLX`+`?U`TUuxy0AED-y7C~YQ3yQD>b/,xH3alVTTc@WB 68s4'v[#&m!NpNnzSnD$FP=hDfwC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49715	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:03 UTC	1336	OUT	GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=MF9VZorPINzq7_UPwf2YoA4.1716870962202&dpr=1&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:03 UTC	1230	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Date: Tue, 28 May 2024 04:36:03 GMT Expires: Tue, 28 May 2024 04:36:03 GMT Cache-Control: private, max-age=3600 Content-Type: application/json; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-eJsIC9rnDNCP0KBjey0NHw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-28 04:36:03 UTC	160	IN	Data Raw: 39 31 32 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 6a 72 20 62 61 63 6f 6e 20 63 68 65 65 73 65 62 75 72 67 65 72 73 20 31 20 63 65 6e 74 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 71 61 74 61 72 20 61 69 72 77 61 79 73 20 66 6c 69 67 68 74 20 74 75 72 62 75 6c 65 6e 63 65 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d Data Ascii: 912)]}'[[["jr bacon cheeseburgers 1 cent",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["qatar airways flight turbulence",0,[3,357,362,396,143]
2024-05-28 04:36:03 UTC	1390	IN	Data Raw: 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 6b 69 6d 20 6d 75 6c 6b 65 79 22 2c 34 36 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 6c 6d 22 3a 5b 5d 2c 22 7a 66 22 3a 33 33 2c 22 7a 68 22 3a 22 4b 69 6d 20 4d 75 6c 6b 65 79 22 2c 22 7a 69 22 3a 22 41 6d 65 72 69 63 61 6e 20 62 61 73 6b 65 74 62 61 6c 6c 20 63 6f 61 63 68 22 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 70 22 3a 22 65 4a 7a 6a 34 74 54 50 31 54 63 77 4c 54 41 74 71 54 42 67 39 4f 4c 4b 7a 73 78 56 79 43 33 4e 79 55 36 74 42 41 42 51 66 67 64 53 22 7d 2c 22 7a 73 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 6a 70 65 67 3b 62 61 73 65 36 34 2c 2f 39 6a 2f 34 41 41 51 53 6b 5a 4a 52 Data Ascii: ,{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["kim mulkey",46,[3,357,362,396,143],{"lm":[],"zf":33,"zh":"Kim Mulkey","zi":"American basketball coach","zl":8,"zp":{"gs_ssp":"eJzj4tTP1TcwLTAtqTBg9OLKzsxVyC3NyU6tBABQfgdS"},"zs":"data:image/jpeg;base64,/9j/4AAQSkZJR
2024-05-28 04:36:03 UTC	779	IN	Data Raw: 58 4a 4c 36 59 74 73 54 76 56 4b 37 74 38 61 76 4c 79 35 35 56 64 67 4d 2b 4f 44 58 4c 6d 51 6f 79 48 63 68 61 39 4e 6d 66 51 45 6e 56 52 32 59 4c 30 79 4b 4e 70 54 7a 30 66 53 30 54 42 50 35 61 57 34 77 38 55 2b 43 43 43 44 54 78 77 37 77 31 72 33 45 71 42 4e 49 73 79 59 65 6a 58 55 78 35 49 56 2f 35 65 50 30 55 45 31 72 64 45 54 45 62 45 5a 2f 68 78 77 36 6b 6b 5a 31 57 35 59 39 6a 47 54 32 55 53 74 6a 74 44 36 2b 51 33 36 30 30 58 74 7a 44 50 64 51 78 75 79 74 4e 7a 35 77 4e 6c 52 56 42 49 55 55 53 34 51 34 49 6d 30 4c 52 78 61 58 75 71 64 74 4c 7a 46 75 61 47 50 41 58 50 35 63 6b 37 6a 32 46 65 4e 53 34 63 69 74 35 6b 75 6f 33 64 6e 55 4d 47 37 32 52 75 4d 5a 71 48 79 46 79 4d 39 2f 71 4f 68 55 52 47 34 65 75 68 50 61 79 78 79 42 68 47 74 77 2b 48 62 Data Ascii: XJL6YtsTvVK7t8avLy55VdgM+ODXLmQoyHcha9NmfQEnVR2YL0yKNpTz0fS0TBP5aW4w8U+CCCDTxw7w1r3EqBNIsyYejXUx5IV/5eP0UE1rdETEbEZ/hxw6kkZ1W5Y9jGT2UStjtD6+Q3600XtzDPdQxuytNz5wNlRVBIUUS4Q4Im0LRxaXuqdtLzFuaGPAXP5ck7j2FeNS4cit5kuo3dnUMG72RuMZqHyFyM9/qOhURG4euhPayxyBhGtw+Hb
2024-05-28 04:36:03 UTC	88	IN	Data Raw: 35 32 0d 0a 6e 4c 4b 78 79 6f 7a 35 55 6d 2f 46 53 47 2f 30 76 55 59 78 6e 74 4c 43 37 6a 4b 51 75 42 6a 6b 41 47 38 5a 2f 58 4f 66 45 66 51 31 71 37 50 61 36 65 34 6a 63 6c 65 62 75 71 51 70 4f 34 38 4e 71 54 76 69 32 73 4e 35 77 74 45 59 35 46 37 53 47 37 0d 0a Data Ascii: 52nLKxyoz5Um/FSG/0vUYxntLC7jKQuBjkAG8Z/XOfEfQ1q7Pa6e4jclebuqQpO48NqTvi2sN5wtEY5F7SG7
2024-05-28 04:36:03 UTC	1390	IN	Data Raw: 31 35 65 62 0d 0a 52 6c 38 38 6c 58 47 50 30 7a 2b 6c 55 34 6c 52 47 36 33 4a 79 7a 4e 4d 78 56 59 5a 4c 4c 6c 49 42 6b 49 71 35 6f 7a 6a 54 34 77 48 41 4e 4c 6b 44 53 46 67 7a 45 71 41 63 56 63 6b 65 57 59 64 63 42 66 76 56 74 30 49 43 62 4d 33 55 4c 38 33 4f 49 78 2f 44 54 38 52 71 54 56 4c 70 59 49 42 45 67 77 53 4d 42 52 34 43 70 59 2b 7a 74 49 2b 55 6e 62 78 39 61 68 35 45 65 55 7a 4d 6e 4d 54 55 6e 79 4c 46 62 69 44 56 48 73 4e 49 74 55 74 70 6c 53 61 34 6d 63 73 56 49 4c 4a 67 59 32 38 6a 75 4f 76 6e 39 4b 39 66 44 37 57 4c 2b 35 31 67 51 58 4e 78 63 54 52 4d 70 49 35 35 57 59 41 6a 33 38 73 2f 61 6d 43 2f 74 4c 57 38 57 52 72 69 32 42 59 4a 6e 74 4f 54 76 44 41 50 37 6d 70 75 47 4e 47 74 59 72 66 35 68 34 77 38 72 4e 33 57 36 63 71 67 34 47 43 4d Data Ascii: 15ebRl88lXGP0z+lU4lRG63JyzNMxVYZLLlIBkIq5ozjT4wHANLkDSFgzEqAcVckeWYdcBfvVt0ICbM3UL83OIx/DT8RqTVLpYIBEgwSMBR4CpY+ztI+Unbx9ah5EeUzMnMTUnyLFbiDVHsNItUtplSa4mcsVILJgY28juOvn9K9fD7WL+51gQXNxcTRMpI55WYAj38s/amC/tLW8WRri2BYJntOTvDAP7mpuGNGtYrf5h4w8rN3W6cqg4GCM
2024-05-28 04:36:03 UTC	1390	IN	Data Raw: 42 74 77 65 49 42 43 54 6c 38 67 4d 55 6f 61 53 58 49 64 55 58 78 52 57 32 6c 6e 63 48 6e 69 34 2b 4d 41 41 43 5a 6a 62 58 79 71 72 37 61 31 75 4c 65 4d 6b 35 31 39 78 68 32 61 6f 4b 6b 41 41 41 73 41 45 30 46 36 67 6f 2b 34 76 63 4d 2f 61 43 77 4a 4a 6b 34 4c 4c 6c 6b 41 41 44 73 6a 51 54 6c 52 68 43 39 58 6a 53 6f 35 59 54 49 30 57 54 59 66 4f 7a 30 58 4d 44 35 66 6d 43 6f 41 41 45 49 52 4b 6a 35 6e 70 69 59 70 53 54 63 77 56 44 6c 35 72 66 43 5a 41 41 41 4c 45 6b 6c 45 51 56 52 59 68 61 56 5a 43 35 75 69 4f 42 59 6c 30 59 53 51 45 41 77 43 42 59 67 67 59 41 47 4b 6c 70 62 74 74 48 5a 50 7a 30 7a 50 62 75 2f 4d 37 50 2f 2f 52 58 73 44 57 46 5a 56 31 36 4e 6e 4e 74 39 58 44 78 55 4f 39 33 48 75 75 54 66 52 4d 4e 35 64 36 54 59 49 67 69 53 42 58 39 76 30 Data Ascii: BtweIBCTl8gMUoaSXIdUXxRW2lncHni4+MAACZjbXyqr7a1uLeMk519xh2aoKkAAAsAE0F6go+4vcM/aCwJJk4LLlkAADsjQTlRhC9XjSo5YTI0WTYfOz0XMD5fmCoAAEIRKj5npiYpSTcwVDl5rfCZAAALEklEQVRYhaVZC5uiOBYl0YSQEAwCBYggYAGKlpbttHZPz0zPbu/M7P//RXsDWFZV16NnNt9XDxUO93HuuTfRMN5d6TYIgiSBX9v0
2024-05-28 04:36:03 UTC	1390	IN	Data Raw: 65 47 61 6a 31 69 64 33 73 74 71 46 56 71 6c 5a 6d 4f 76 43 7a 42 66 6e 6a 32 34 63 50 48 33 37 37 44 2b 70 54 6f 64 65 63 43 41 6e 6c 32 79 43 34 59 4c 77 6b 6a 59 6f 70 59 66 4b 6d 53 67 30 58 37 72 7a 57 53 44 47 5a 75 43 41 6c 4e 47 51 6d 50 42 54 4e 2b 6e 54 4d 2b 42 38 41 2b 4f 48 62 78 2f 6d 51 6a 76 48 53 62 50 30 71 62 76 50 49 31 4a 51 61 5a 37 52 56 44 61 4f 6e 31 4b 69 32 42 31 4d 38 52 46 48 6c 77 6b 76 53 41 33 63 52 6f 68 76 4d 4f 79 5a 33 2b 66 6a 34 35 37 63 2f 76 76 7a 31 36 53 75 64 39 39 78 65 30 6c 4a 68 70 61 42 56 46 32 77 4b 4e 4a 69 78 45 4c 44 46 38 52 54 73 67 6e 31 6f 31 65 70 53 64 4b 33 4e 77 6c 31 71 37 47 33 57 71 4a 59 76 78 35 72 48 79 2f 6d 53 2f 66 4c 66 4c 2f 50 56 34 6d 66 62 63 65 5a 64 47 6b 69 44 2b 78 58 48 31 69 Data Ascii: eGaj1id3stqFVqlZmOvCzBfnj24cPH377D+pTodecCAnl2yC4YLwkjYopYfKmSg0X7rzWSDGZuCAlNGQmPBTN+nTM+B8A+OHbx/mQjvHSbP0qbvPI1JQaZ7RVDaOn1Ki2B1M8RFHlwkvSA3cRohvMOyZ3+fj457c/vvz16Sud99xe0lJhpaBVF2wKNJixELDF8RTsgn1o1epSdK3Nwl1q7G3WqJYvx5rHy/mS/fLfL/PV4mfbceZdGkiD+xXH1i
2024-05-28 04:36:03 UTC	1390	IN	Data Raw: 64 48 6d 4a 4c 55 34 51 4d 2b 54 79 4c 72 64 6e 6d 38 6e 6b 4f 5a 51 5a 77 56 6f 69 42 34 4d 42 48 56 37 41 71 68 69 55 4e 65 46 5a 6c 55 2f 6c 69 30 31 61 32 43 38 76 33 56 33 4a 65 2f 6b 53 77 73 73 37 42 4f 53 72 70 67 62 4b 4a 47 4f 30 4e 33 69 47 2b 57 58 59 66 50 55 77 45 36 44 65 79 6e 73 53 68 6b 45 6c 76 41 6a 78 4a 56 4d 65 6f 47 46 46 73 42 62 49 7a 6a 47 45 46 4d 2f 70 73 74 4f 45 50 6f 46 58 5a 39 59 6a 36 53 2f 71 78 4d 59 4d 6e 6f 78 37 30 78 63 45 39 30 43 6b 4c 44 36 43 41 56 39 6b 79 4c 4e 6a 51 76 6a 71 70 5a 73 69 61 35 34 71 49 6c 68 34 4a 30 38 41 64 51 65 44 2f 6f 50 55 59 54 5a 52 45 43 72 5a 32 48 6f 65 64 42 49 61 54 38 5a 39 35 4e 4e 46 7a 4f 6b 57 6d 76 59 48 54 50 39 54 50 33 7a 44 4c 43 47 39 6a 4e 49 43 49 6a 6d 75 75 76 30 Data Ascii: dHmJLU4QM+TyLrdnm8nkOZQZwVoiB4MBHV7AqhiUNeFZlU/li01a2C8v3V3Je/kSwss7BOSrpgbKJGO0N3iG+WXYfPUwE6DeynsShkElvAjxJVMeoGFFsBbIzjGEFM/pstOEPoFXZ9Yj6S/qxMYMnox70xcE90CkLD6CAV9kyLNjQvjqpZsia54qIlh4J08AdQeD/oPUYTZRECrZ2HoedBIaT8Z95NNFzOkWmvYHTP9TP3zDLCG9jNICIjmuuv0
2024-05-28 04:36:03 UTC	59	IN	Data Raw: 54 72 65 6e 64 69 6e 67 20 73 65 61 72 63 68 65 73 22 5d 7d 7d 2c 22 71 22 3a 22 34 30 6d 74 52 42 6f 50 59 32 57 54 39 6b 4e 2d 61 37 67 78 75 79 6e 56 69 79 30 22 7d 5d 0d 0a Data Ascii: Trending searches"]}},"q":"40mtRBoPY2WT9kN-a7gxuynViy0"}]
2024-05-28 04:36:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49716	142.250.185.100	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:03 UTC	706	OUT	GET /images/hpp/us-flag.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:03 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 1458 Date: Tue, 28 May 2024 04:36:03 GMT Expires: Tue, 28 May 2024 04:36:03 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:03 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 8e 08 03 00 00 00 50 50 f7 29 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 93 50 4c 54 45 ff ff ff b0 be c5 b0 be c5 b7 1c 1c ff ff ff b7 1c 1c ff ff ff b0 be c5 b7 1c 1c 90 1e 35 1a 23 7e b2 8c 91 c1 3c 3c c0 cb d1 ff ff ff f1 f1 f7 eb ef f1 e2 e4 ef d4 d6 e7 ed c6 c6 c6 c8 df de c4 c6 b0 be c5 b7 ba d7 a9 ad cf d5 9e 9f d0 9a 9b b8 9d b4 b1 a0 a5 9b 9f c7 db 8e 8e b2 96 9b 8d 91 bf 7e 83 b6 c3 6f 71 ab 73 8a 70 76 ae c9 55 55 62 68 a6 ac 56 67 53 5a 9e b5 45 46 9d 48 5f 45 4c 96 37 3f 8e b7 1c 1c 90 1e 35 28 31 86 1a 23 7e c4 a3 30 0d 00 00 00 31 74 52 4e 53 00 33 44 44 66 88 bb bb bb bb bb cc dd ee ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRPP)sBITOPLTE5#~<<~oqspvUUbhVgSZEFH_EL7?5(1#~01tRNS3DDf
2024-05-28 04:36:03 UTC	739	IN	Data Raw: a5 5b 5f 44 df c4 bd fe 59 d4 61 2e 03 8d 0d db e3 8e 03 77 b7 c7 f6 4d 62 f3 4f 87 38 99 01 c7 b1 10 72 86 b7 f4 89 0b 83 dd 8f 63 58 08 87 38 9d 81 dd 1e ad 5e b2 63 0e b0 f3 1c 60 c7 1c 98 c8 40 cc d1 55 56 95 f4 2e 06 9c 6c b9 ee b4 d5 20 ba 0d c4 d5 83 b8 ef 3f ff 70 09 af ef 30 60 2c 46 55 c0 34 de a3 c4 57 ff 29 ce 33 07 24 5f 64 9b 03 2b 13 30 07 04 5b eb c2 c3 7a 4b e4 ab 9f c8 40 69 f5 70 a6 54 50 ab b9 d9 30 3c 0f 30 86 e7 01 1c 12 89 d7 42 9e c7 80 55 2a 47 bb ac 5c 9a 62 20 07 3c 0a 53 8a b5 1c 0e 54 e9 af 35 fd cd da 5e c5 d5 a8 a9 0c a4 fa 03 35 9c 9f 24 be f2 06 9f b6 aa 14 8f 2b be 9a c8 40 cd 75 bd ac a6 ed 79 14 d3 ed 3c a0 d7 45 87 26 72 09 e2 06 e2 5c 6d b4 a0 19 9c 7d 93 60 b2 15 42 60 cc 1c 62 c4 da 38 da d3 64 06 d4 26 60 d3 26 14 Data Ascii: [_DYa.wMbO8rcX8^c`@UV.l ?p0`,FU4W)3$_d+0[zK@ipTP0<0BU*G\b <ST5^5$+@uy<E&r\m}`B`b8d&`&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49717	142.250.185.100	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:03 UTC	737	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:03 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 660 Date: Tue, 28 May 2024 04:36:03 GMT Expires: Tue, 28 May 2024 04:36:03 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 22 Apr 2020 22:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:03 UTC	660	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49719	216.58.206.78	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:03 UTC	1223	OUT	GET /widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en HTTP/1.1 Host: ogs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:04 UTC	2142	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://www.google.com Content-Security-Policy: frame-ancestors https://www.google.com Content-Security-Policy: script-src 'report-sample' 'nonce-qkffNd2DXVBdB60hOSJWFw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/OneGoogleWidgetUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/OneGoogleWidgetUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/OneGoogleWidgetUi/cspreport x-ua-compatible: IE=edge Expires: Tue, 28 May 2024 04:36:04 GMT Date: Tue, 28 May 2024 04:36:04 GMT Cache-Control: private, max-age=3600 Strict-Transport-Security: max-age=31536000 Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="CoepOneGoogleWidgetUi" Report-To: {"group":"CoepOneGoogleWidgetUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/OneGoogleWidgetUi"}]} Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/OneGoogleWidgetUi/web-reports?context=eJzjstHikmLw15BiKFj5gkni60smNSB2Sp_BGgDEPvUzWKOAuPXmOdbJQJz07zxrARC3f77AOhWIhbg5tuy7uolN4MDrP6pKakn5hfH5eanp-fnpOakZJSUFxalFZalF8UYGRiYGpkYmegbm8QUGAGOnLbY" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-28 04:36:04 UTC	2142	IN	Data Raw: 37 62 61 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 67 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 66 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 67 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 63 61 6c 6c 6f 75 74 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 Data Ascii: 7ba6<!doctype html><html lang="en" dir="ltr"><head><base href="https://ogs.google.com/"><link ref="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><link rel="canonical" href="https://ogs.google.com/widget/callout"><link rel="
2024-05-28 04:36:04 UTC	2142	IN	Data Raw: 26 26 28 66 3d 66 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 63 29 2c 22 30 70 78 22 3d 3d 66 2e 68 65 69 67 68 74 7c 7c 22 30 70 78 22 3d 3d 66 2e 77 69 64 74 68 7c 7c 22 68 69 64 64 65 6e 22 3d 3d 66 2e 76 69 73 69 62 69 6c 69 74 79 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 63 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 72 65 74 75 72 6e 21 30 3b 0a 76 61 72 20 68 3d 63 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 63 3d 68 2e 6c 65 66 74 2b 61 2e 70 61 67 65 58 4f 66 66 73 65 74 3b 66 3d 68 2e 74 6f 70 2b 61 2e 70 61 67 65 59 4f 66 66 73 65 74 3b 69 66 28 30 3e 66 2b 68 2e 68 65 69 67 68 74 7c 7c 30 3e 63 2b 68 2e 77 69 64 74 68 7c 7c 30 3e 3d 68 2e 68 65 69 67 68 74 7c 7c 30 3e 3d 68 Data Ascii: &&(f=f.getComputedStyle(c),"0px"==f.height\|\|"0px"==f.width\|\|"hidden"==f.visibility))return!1;if(!c.getBoundingClientRect)return!0;var h=c.getBoundingClientRect();c=h.left+a.pageXOffset;f=h.top+a.pageYOffset;if(0>f+h.height\|\|0>c+h.width\|\|0>=h.height\|\|0>=h
2024-05-28 04:36:04 UTC	2142	IN	Data Raw: 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 36 70 78 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 7d 2e 56 55 6f 4b 5a 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 33 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 31 7d 2e 54 52 48 4c 41 63 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 32 35 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 38 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 30 29 7d 2e 54 52 48 4c 41 63 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 Data Ascii: 0px;position:absolute;right:16px;top:0;z-index:9999}.VUoKZ{display:none;position:absolute;top:0;left:0;right:0;height:3px;z-index:1001}.TRHLAc{position:absolute;top:0;left:0;width:25%;height:100%;background:#68e;transform:scaleX(0)}.TRHLAc{transform-origi
2024-05-28 04:36:04 UTC	2142	IN	Data Raw: 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 28 32 33 32 2c 32 33 34 2c 32 33 37 29 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 69 64 74 68 3a 37 32 70 78 7d 2e 77 48 4f 63 73 63 7b 68 65 69 67 68 74 3a 34 38 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 34 38 70 78 7d 2e 51 6c 79 42 66 62 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 32 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 70 61 Data Ascii: ight:1px solid rgb(232,234,237);display:table-cell;padding-left:16px;vertical-align:middle;width:72px}.wHOcsc{height:48px;padding-left:4px;padding-right:20px;width:48px}.QlyBfb{display:flex;justify-content:flex-end;letter-spacing:.25px;line-height:16px;pa
2024-05-28 04:36:04 UTC	2142	IN	Data Raw: 70 61 72 65 6e 74 7d 7d 2e 51 73 58 4a 4a 2e 76 51 34 33 49 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 32 2c 32 33 32 2c 32 33 30 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 28 32 34 36 2c 31 37 34 2c 31 36 39 29 7d 2e 51 73 58 4a 4a 20 2e 62 6d 50 43 4c 62 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 28 32 34 36 2c 31 37 34 2c 31 36 39 29 7d 2e 51 73 58 4a 4a 20 2e 79 5a 71 4e 6c 2c 2e 61 6d 45 30 4d 64 20 2e 79 5a 71 4e 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 31 37 2c 34 38 2c 33 37 29 7d 2e 51 73 58 4a 4a 20 2e 79 5a 71 4e 6c 3a 68 6f 76 65 72 2c 2e 61 6d 45 30 4d 64 20 2e 79 5a 71 4e 6c 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 Data Ascii: parent}}.QsXJJ.vQ43Ie{background-color:rgb(252,232,230);border:1px solid rgb(246,174,169)}.QsXJJ .bmPCLb{border-right:1px solid rgb(246,174,169)}.QsXJJ .yZqNl,.amE0Md .yZqNl{background-color:rgb(217,48,37)}.QsXJJ .yZqNl:hover,.amE0Md .yZqNl:hover{backgrou
2024-05-28 04:36:04 UTC	2142	IN	Data Raw: 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 6f 69 71 6d 6e 63 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 72 61 63 6b 2c 2e 6f 69 71 6d 6e 63 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 72 61 63 6b 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 73 65 6e 74 69 6e 65 6c 7b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 71 6b 66 66 4e 64 32 44 58 56 42 64 42 36 30 68 4f 53 4a 57 46 77 22 3e 6f 6e 43 73 73 4c 6f 61 64 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 67 59 49 37 2d 6a 6e 2d 47 55 4d 45 73 67 78 71 45 51 4e 69 4e 51 22 3e 40 66 6f 6e 74 2d 66 61 Data Ascii: der-radius:8px;box-shadow:none}.oiqmnc::-webkit-scrollbar-track,.oiqmnc::-webkit-scrollbar-track:hover{background:none;border:none}sentinel{}</style><script nonce="qkffNd2DXVBdB60hOSJWFw">onCssLoad();</script><style nonce="gYI7-jn-GUMEsgxqEQNiNQ">@font-fa
2024-05-28 04:36:04 UTC	2142	IN	Data Raw: 75 63 74 73 61 6e 73 2f 76 39 2f 70 78 69 44 79 70 51 6b 6f 74 31 54 6e 46 68 73 46 4d 4f 66 47 53 68 56 47 64 65 4f 63 45 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 72 6f 64 75 63 74 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b Data Ascii: uctsans/v9/pxiDypQkot1TnFhsFMOfGShVGdeOcEg.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-family:'Product Sans';font-style:normal;
2024-05-28 04:36:04 UTC	2142	IN	Data Raw: 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 35 38 2f 34 55 61 5f 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4a 66 43 36 6c 5f 32 34 72 6c 43 4b 31 59 6f 5f 49 71 63 73 69 68 33 53 41 79 48 36 63 41 77 68 58 39 52 46 44 34 38 54 45 36 33 4f 4f 59 4b 74 72 77 32 49 4a 6c 30 70 79 6e 53 45 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 32 30 30 2d 31 33 39 39 2c 55 2b 32 44 38 30 2d 32 44 44 45 2c 55 2b 41 Data Ascii: ace{font-family:'Google Sans';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJl0pynSEg.woff2)format('woff2');unicode-range:U+1200-1399,U+2D80-2DDE,U+A
2024-05-28 04:36:04 UTC	2142	IN	Data Raw: 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 35 38 2f 34 55 61 5f 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4a 66 43 36 6c 5f 32 34 72 6c 43 4b 31 59 6f 5f 49 71 63 73 69 68 33 53 41 79 48 36 63 41 77 68 58 39 52 46 44 34 38 54 45 36 33 4f 4f 59 4b 74 72 77 32 49 4a 6c 73 70 79 6e 53 45 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 45 38 31 2d 30 45 44 46 2c 55 2b 32 30 30 43 2d 32 30 30 44 2c 55 2b 32 35 43 43 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a Data Ascii: ';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJlspynSEg.woff2)format('woff2');unicode-range:U+0E81-0EDF,U+200C-200D,U+25CC;}@font-face{font-family:
2024-05-28 04:36:04 UTC	2142	IN	Data Raw: 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 35 38 2f 34 55 61 5f 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4a 66 43 36 6c 5f 32 34 72 6c 43 4b 31 59 6f 5f 49 71 63 73 69 68 33 53 41 79 48 36 63 41 77 68 58 39 52 46 44 34 38 54 45 36 33 4f 4f 59 4b 74 72 77 32 49 4a 6c 72 70 79 6e 53 45 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d Data Ascii: ght:500;src:url(//fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJlrpynSEg.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49720	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:03 UTC	1528	OUT	GET /xjs/_/js/md=3/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:04 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 191644 Date: Tue, 28 May 2024 04:36:04 GMT Expires: Wed, 28 May 2025 04:36:04 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 24 May 2024 19:07:04 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:04 UTC	572	IN	Data Raw: 7b 22 63 68 75 6e 6b 54 79 70 65 73 22 3a 22 31 30 30 30 30 31 31 31 31 31 31 31 30 30 31 31 31 31 30 30 30 31 30 30 30 30 31 30 31 31 30 31 30 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 30 31 31 31 31 31 31 31 31 31 31 31 30 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: {"chunkTypes":"100001111111001111000100001011010000001111111111111111111111111111111011011111111111010111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 31 32 32 31 32 32 31 32 31 31 31 32 32 31 32 32 32 31 32 31 32 31 32 32 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 32 32 32 32 32 32 32 32 32 31 32 32 31 32 31 32 31 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 32 32 32 32 32 32 31 33 33 32 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 32 31 31 31 32 32 32 32 31 31 32 32 32 31 31 32 31 32 31 32 31 32 31 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 31 32 31 Data Ascii: 121212121212121212121222121212121212121222121221221211122122212121222221212121212121222122222222221221212122212121212121212121121112121212121212112121212121212121222222222133233333333333333333211122221122211212121212212121212121212112121212121212121211121
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111112111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 33 32 31 33 33 33 33 31 32 32 33 32 33 31 31 32 33 33 33 32 31 31 33 31 32 33 31 33 33 33 31 32 31 32 31 33 33 32 31 33 33 33 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 32 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 Data Ascii: 111111111111111111111111111111111111111111332133331223231123332113123133312121332133321111111111111111111111111111111111111111111111111111111111111111111111111112111111111111111111111111111111111111111113211111111111111111111111111131112131111111111111113
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 31 31 31 31 31 31 31 31 31 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111122222221111222222222222222222221111111111331111111111111111111111111110111011111111111111111111111
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 32 31 32 31 32 31 32 31 31 32 31 32 31 31 32 31 33 33 31 31 31 31 31 31 31 31 33 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 31 32 32 31 32 32 32 32 31 31 31 32 31 32 32 31 31 31 31 31 31 32 31 31 32 31 31 31 31 31 31 32 31 31 31 31 32 32 32 32 32 32 32 32 32 31 32 32 31 32 Data Ascii: 212121211212112133111111113212121212121212121212121212121212121212121212112121111111111111122211111111111111111111111111111111111111111111111111111111111111111111111111221111111111111111111111111111111222212212222111212211111121121111112111122222222212212
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 33 33 33 33 33 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 33 33 33 32 31 32 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 32 31 31 33 33 31 33 31 31 31 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 33 33 33 31 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 32 31 33 33 32 31 32 31 32 32 32 32 32 31 33 31 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 33 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111113333333311111111111111111111111333321211131111111111111111111111111112121133131111121212121212121213331331111111111111111111111111112112133212122222131331111111111111111111111111111111111111111123111111131111111111111111111
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 31 33 32 32 32 31 33 31 33 33 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 32 33 32 32 32 33 32 33 33 32 33 31 33 33 30 30 32 30 30 30 30 30 30 30 30 30 30 31 31 31 31 31 33 32 32 33 33 32 33 31 30 30 30 30 30 31 31 31 31 31 31 32 32 32 32 33 32 32 33 32 32 33 33 32 32 33 33 33 31 30 30 30 30 32 30 30 30 30 32 30 30 30 32 30 32 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 33 31 31 31 31 31 33 31 32 33 32 32 31 32 32 33 30 30 30 30 30 31 31 31 31 31 31 33 31 32 33 30 31 32 33 30 30 32 33 30 32 33 30 30 32 33 30 30 33 31 33 31 31 31 31 32 32 33 32 33 33 31 33 31 Data Ascii: 000000000000000000000000000000000000000000000000000000002132221313300000111111111112322232332313300200000000001111132233231000001111112222322322332233310000200002000202000000000000000000000013111113123221223000001111113123012300230230023003131111223233131
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 30 31 32 33 31 31 31 30 32 32 33 30 30 30 30 32 33 30 32 32 32 33 33 30 30 30 31 32 32 33 31 31 32 31 32 32 32 32 32 32 32 32 32 33 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 32 32 32 32 32 33 31 31 33 31 31 30 30 30 30 30 30 30 30 30 30 30 32 32 33 31 31 31 30 30 30 33 33 31 33 31 33 31 31 33 33 33 32 32 32 32 33 31 31 32 32 33 31 32 32 33 31 31 30 30 30 30 30 30 31 33 31 31 31 31 31 33 22 2c 22 6d 6f 64 75 6c 65 47 72 61 70 68 22 3a 22 71 75 61 6e 74 75 6d 2f 74 37 78 67 49 65 2f 77 73 39 54 6c 63 2f 63 45 74 39 30 62 2f 71 64 64 67 4b 65 2f 79 78 54 63 68 66 2f 73 79 37 6b 2f 73 79 37 6c 3a 36 2f 73 79 37 6d 2f 78 51 74 5a 62 3a 35 2c 37 2c 38 2f 73 79 37 6e 2f 52 39 59 48 4a 63 3a 37 2c 61 2f 4b 55 4d 37 5a 2f 77 72 7a 45 Data Ascii: 01231110223000023022233000122311212222222223000000000000000000000002222223113110000000000022311100033131311333222231122312231100000013111113","moduleGraph":"quantum/t7xgIe/ws9Tlc/cEt90b/qddgKe/yxTchf/sy7k/sy7l:6/sy7m/xQtZb:5,7,8/sy7n/R9YHJc:7,a/KUM7Z/wrzE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49723	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:03 UTC	3937	OUT	GET /xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/ck=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKQA-gkHQAGwIQgAAEAAAAAAIQAAAgAQgPcEQAigAAQCAGAAiCAAD2UCAAQyAQEQQASQBAI5CABABGMYgFQAYAAAAAACJAAAABxAwAACAyIAAh5CAAABOkEAFgAAEsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=1/exm=SNUn3,cEt90b,cdos,csi,d,dtl0hd,eHDfl,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/ed=1/dg=0/br=1/ujg=1/rs=ACT90oHImSEwQ9-p7fjPGqD0ykhIDf0pzg/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8 [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:04 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 498123 Date: Tue, 28 May 2024 04:36:04 GMT Expires: Wed, 28 May 2025 04:36:04 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 24 May 2024 10:40:04 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:04 UTC	572	IN	Data Raw: 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 2e 6a 62 42 49 74 66 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 44 55 30 4e 4a 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 6c 50 33 4a 6f 66 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6e 4e 4d 75 4f 64 7b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 6f 74 61 74 65 20 31 35 36 38 2e 32 33 35 32 39 34 31 31 37 36 6d 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 6c 69 2d 63 6f 6e 74 61 69 6e 65 72 2d Data Ascii: _F_installCss(".jbBItf{display:block;position:relative}.DU0NJ{bottom:0;left:0;position:absolute;right:0;top:0}.lP3Jof{display:inline-block;position:relative}.nNMuOd{animation:qli-container-rotate 1568.2352941176ms linear infinite}@keyframes qli-container-
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 2c 71 6c 69 2d 72 65 64 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 7d 2e 6e 4e 4d 75 4f 64 20 2e 73 6d 6f 63 73 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 66 69 6c 6c 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 2c 71 6c 69 2d 79 65 6c 6c 6f 77 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 Data Ascii: -unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-red-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.nNMuOd .smocse{animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-yellow-fade-in-out 5332ms
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 35 30 25 7d 2e 46 63 58 66 69 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 34 35 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 25 7d 2e 53 50 4b 46 6d 63 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 3a 33 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 40 6d 65 64 69 61 20 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 61 63 74 69 76 65 29 2c 28 70 72 65 66 65 72 73 2d 63 6f 6e 74 72 61 73 74 3a 6d 6f 72 65 29 7b Data Ascii: tion:relative;width:50%}.FcXfi{box-sizing:border-box;height:100%;left:45%;overflow:hidden;position:absolute;top:0;width:10%}.SPKFmc{border-radius:50%;border:3px solid transparent;box-sizing:border-box}@media (forced-colors:active),(prefers-contrast:more){
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 72 6f 74 61 74 65 28 31 33 30 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 33 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 6c 69 2d 72 69 67 68 74 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 7d 7d 63 2d 77 69 7a 7b 63 6f 6e 74 61 69 6e 3a 73 74 79 6c 65 7d 63 2d 77 69 7a 3e 63 2d 64 61 74 61 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 72 45 54 53 44 7b 63 6f 6e 74 61 69 6e 3a 6e Data Ascii: rotate(130deg)}50%{transform:rotate(-5deg)}100%{transform:rotate(130deg)}}@keyframes qli-right-spin{0%{transform:rotate(-130deg)}50%{transform:rotate(5deg)}100%{transform:rotate(-130deg)}}c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.rETSD{contain:n
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 30 25 7d 2e 5a 65 56 42 74 63 7b 63 6f 6c 6f 72 3a 72 67 62 28 39 35 2c 39 39 2c 31 30 34 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 47 6f 6f 67 6c 65 20 53 61 6e 73 5c 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 61 6c 54 42 51 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 32 2c 32 33 32 2c 32 33 30 29 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 38 70 78 3b 6a 75 73 74 69 66 79 Data Ascii: 0%}.ZeVBtc{color:rgb(95,99,104);font-family:\"Google Sans\",Roboto,Arial,sans-serif;font-size:16px;line-height:25px;max-width:300px}.alTBQe{align-items:center;background-color:rgb(252,232,230);border-top-left-radius:8px;border-top-right-radius:8px;justify
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 50 58 54 36 63 64 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 34 70 78 7d 2e 63 42 39 4d 37 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 28 32 31 38 2c 32 32 30 2c 32 32 34 29 3b 63 6f 6c 6f 72 3a 72 67 62 28 36 30 2c 36 34 2c 36 37 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 36 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 66 61 Data Ascii: ,sans-serif;font-size:14px;margin-left:20px;margin-right:20px}.PXT6cd{display:flex;margin-top:14px}.cB9M7{background-color:#fff;border:1px solid rgb(218,220,224);color:rgb(60,64,67);border-radius:36px;display:inline-flex;flex-grow:1;font-size:14px;font-fa
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 74 72 79 7b 0a 5f 2e 79 28 22 42 32 71 6c 50 65 22 29 3b 0a 76 61 72 20 5a 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 41 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4d 61 29 7d 3b 5f 2e 42 28 5a 73 62 2c 5f 2e 41 29 3b 5a 73 62 2e 49 61 3d 5f 2e 41 2e 49 61 3b 5a 73 62 2e 70 72 6f 74 6f 74 79 70 65 2e 71 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 5f 2e 56 64 28 22 73 22 2c 5f 2e 65 46 61 29 2c 62 3d 5f 2e 4f 61 28 61 29 2c 63 3d 62 2e 6e 65 78 74 28 29 3b 21 63 2e 64 6f 6e 65 3b 63 3d 62 2e 6e 65 78 74 28 29 29 63 3d 63 2e 76 61 6c 75 65 2c 63 2e 6b 65 79 2e 69 6e 63 6c 75 64 65 73 28 22 54 77 64 49 46 43 22 29 26 26 21 63 2e 6b 65 79 2e 69 6e 63 6c 75 64 65 73 28 28 30 2c 5f 2e 6c 6d 2e 48 41 29 28 29 29 26 26 61 2e 72 65 6d Data Ascii: try{_.y("B2qlPe");var Zsb=function(a){_.A.call(this,a.Ma)};_.B(Zsb,_.A);Zsb.Ia=_.A.Ia;Zsb.prototype.qf=function(){for(var a=_.Vd("s",_.eFa),b=_.Oa(a),c=b.next();!c.done;c=b.next())c=c.value,c.key.includes("TwdIFC")&&!c.key.includes((0,_.lm.HA)())&&a.rem
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 61 26 26 74 68 69 73 2e 6f 61 26 26 74 68 69 73 2e 59 61 2e 70 75 73 68 28 74 68 69 73 2e 6f 61 2e 6c 69 73 74 65 6e 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 3d 3d 3d 64 3f 21 31 3a 64 2c 65 29 29 7d 3b 5f 2e 6d 57 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 6f 61 26 26 61 2e 79 62 2e 70 75 73 68 28 6c 57 62 28 62 2c 63 29 29 7d 3b 5f 2e 6e 57 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 21 31 3a 65 3b 69 66 28 61 2e 4e 61 5b 64 5d 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 28 65 3d 61 2e 4e 61 5b 64 5d 29 26 26 5f 2e 62 61 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 61 2e 4e 61 5b 64 5d 3d 6c 57 62 28 62 2c Data Ascii: r=function(a,b,c,d,e){a&&this.oa&&this.Ya.push(this.oa.listen(a,b,c,void 0===d?!1:d,e))};_.mWb=function(a,b,c){a.oa&&a.yb.push(lWb(b,c))};_.nWb=function(a,b,c,d,e){e=void 0===e?!1:e;if(a.Na[d]){if(!e)return;(e=a.Na[d])&&_.ba.clearTimeout(e)}a.Na[d]=lWb(b,
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 75 6c 6c 3b 63 2e 68 61 6e 64 6c 65 72 26 26 28 65 3d 63 2e 68 61 6e 64 6c 65 72 29 3b 64 2e 63 61 6c 6c 28 65 2c 6e 65 77 20 5f 2e 47 6b 28 62 29 29 7d 29 7d 3b 5f 2e 73 57 62 2e 70 72 6f 74 6f 74 79 70 65 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 77 69 74 63 68 28 5f 2e 6b 64 28 29 2e 67 65 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 28 29 29 7b 63 61 73 65 20 22 75 6e 6c 6f 61 64 65 64 22 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 75 6e 6c 6f 61 64 26 26 74 57 62 28 74 68 69 73 2c 22 61 74 74 6e 2d 69 76 69 73 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 68 69 64 64 65 6e 22 3a 74 57 62 28 74 68 69 73 2c 22 61 74 74 6e 2d 69 76 69 73 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 76 69 73 69 62 6c 65 22 3a 74 57 62 28 74 68 69 73 2c 22 61 74 74 Data Ascii: ull;c.handler&&(e=c.handler);d.call(e,new _.Gk(b))})};_.sWb.prototype.Ca=function(){switch(_.kd().getVisibilityState()){case "unloaded":this.options.unload&&tWb(this,"attn-ivis");break;case "hidden":tWb(this,"attn-ivis");break;case "visible":tWb(this,"att
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 4f 63 28 22 53 30 36 47 72 62 22 29 2c 22 22 29 3f 22 6c 22 3a 22 73 22 3b 72 65 74 75 72 6e 20 5f 2e 56 64 28 62 2c 61 2e 74 61 29 7d 3b 76 61 72 20 76 57 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 6e 78 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 7d 3b 5f 2e 42 28 76 57 62 2c 5f 2e 6e 78 29 3b 76 57 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 77 57 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 79 3d 74 68 69 73 2e 78 3d 74 68 69 73 2e 6b 61 3d 30 7d 3b 5f 2e 6f 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 65 76 65 6e 74 54 79 70 65 3d 22 22 3b 74 68 69 73 2e 6b 61 3d 30 7d 3b 5f 2e 6f 78 2e 70 72 6f 74 6f 74 79 70 65 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e Data Ascii: Oc("S06Grb"),"")?"l":"s";return _.Vd(b,a.ta)};var vWb=function(a){_.nx.call(this,a)};_.B(vWb,_.nx);vWb.prototype.ka=function(){};var wWb=function(){this.y=this.x=this.ka=0};_.ox=function(){this.eventType="";this.ka=0};_.ox.prototype.Ca=function(){return n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49721	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:03 UTC	1477	OUT	POST /gen_204?s=webhp&t=aft&atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&rt=wsrt.5175,aft.2163,afti.2163,cbt.92,hst.91,prt.1158&imn=12&ima=2&imad=0&imac=1&wh=907&aft=1&aftp=907&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:04 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-tSQ9f5udVmAUkzbPZ_2i2A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:04 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49722	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:04 UTC	1346	OUT	GET /client_204?atyp=i&biw=1280&bih=907&ei=MF9VZorPINzq7_UPwf2YoA4&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:04 UTC	758	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Kkt4-A-94PX3I8SJmLARJg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:04 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49724	142.250.185.100	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:04 UTC	812	OUT	GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=MF9VZorPINzq7_UPwf2YoA4.1716870962202&dpr=1&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:04 UTC	1230	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Date: Tue, 28 May 2024 04:36:04 GMT Expires: Tue, 28 May 2024 04:36:04 GMT Cache-Control: private, max-age=3600 Content-Type: application/json; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-pFkwRY5ooC6OKyUan84CeA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-28 04:36:04 UTC	160	IN	Data Raw: 39 31 30 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 6a 72 20 62 61 63 6f 6e 20 63 68 65 65 73 65 62 75 72 67 65 72 73 20 31 20 63 65 6e 74 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 71 61 74 61 72 20 61 69 72 77 61 79 73 20 66 6c 69 67 68 74 20 74 75 72 62 75 6c 65 6e 63 65 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d Data Ascii: 910)]}'[[["jr bacon cheeseburgers 1 cent",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["qatar airways flight turbulence",0,[3,357,362,396,143]
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 6b 69 6d 20 6d 75 6c 6b 65 79 22 2c 34 36 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 6c 6d 22 3a 5b 5d 2c 22 7a 66 22 3a 33 33 2c 22 7a 68 22 3a 22 4b 69 6d 20 4d 75 6c 6b 65 79 22 2c 22 7a 69 22 3a 22 41 6d 65 72 69 63 61 6e 20 62 61 73 6b 65 74 62 61 6c 6c 20 63 6f 61 63 68 22 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 70 22 3a 22 65 4a 7a 6a 34 74 54 50 31 54 63 77 4c 54 41 74 71 54 42 67 39 4f 4c 4b 7a 73 78 56 79 43 33 4e 79 55 36 74 42 41 42 51 66 67 64 53 22 7d 2c 22 7a 73 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 6a 70 65 67 3b 62 61 73 65 36 34 2c 2f 39 6a 2f 34 41 41 51 53 6b 5a 4a 52 Data Ascii: ,{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["kim mulkey",46,[3,357,362,396,143],{"lm":[],"zf":33,"zh":"Kim Mulkey","zi":"American basketball coach","zl":8,"zp":{"gs_ssp":"eJzj4tTP1TcwLTAtqTBg9OLKzsxVyC3NyU6tBABQfgdS"},"zs":"data:image/jpeg;base64,/9j/4AAQSkZJR
2024-05-28 04:36:04 UTC	777	IN	Data Raw: 58 4a 4c 36 59 74 73 54 76 56 4b 37 74 38 61 76 4c 79 35 35 56 64 67 4d 2b 4f 44 58 4c 6d 51 6f 79 48 63 68 61 39 4e 6d 66 51 45 6e 56 52 32 59 4c 30 79 4b 4e 70 54 7a 30 66 53 30 54 42 50 35 61 57 34 77 38 55 2b 43 43 43 44 54 78 77 37 77 31 72 33 45 71 42 4e 49 73 79 59 65 6a 58 55 78 35 49 56 2f 35 65 50 30 55 45 31 72 64 45 54 45 62 45 5a 2f 68 78 77 36 6b 6b 5a 31 57 35 59 39 6a 47 54 32 55 53 74 6a 74 44 36 2b 51 33 36 30 30 58 74 7a 44 50 64 51 78 75 79 74 4e 7a 35 77 4e 6c 52 56 42 49 55 55 53 34 51 34 49 6d 30 4c 52 78 61 58 75 71 64 74 4c 7a 46 75 61 47 50 41 58 50 35 63 6b 37 6a 32 46 65 4e 53 34 63 69 74 35 6b 75 6f 33 64 6e 55 4d 47 37 32 52 75 4d 5a 71 48 79 46 79 4d 39 2f 71 4f 68 55 52 47 34 65 75 68 50 61 79 78 79 42 68 47 74 77 2b 48 62 Data Ascii: XJL6YtsTvVK7t8avLy55VdgM+ODXLmQoyHcha9NmfQEnVR2YL0yKNpTz0fS0TBP5aW4w8U+CCCDTxw7w1r3EqBNIsyYejXUx5IV/5eP0UE1rdETEbEZ/hxw6kkZ1W5Y9jGT2UStjtD6+Q3600XtzDPdQxuytNz5wNlRVBIUUS4Q4Im0LRxaXuqdtLzFuaGPAXP5ck7j2FeNS4cit5kuo3dnUMG72RuMZqHyFyM9/qOhURG4euhPayxyBhGtw+Hb
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 31 36 33 66 0d 0a 30 62 6e 4c 4b 78 79 6f 7a 35 55 6d 2f 46 53 47 2f 30 76 55 59 78 6e 74 4c 43 37 6a 4b 51 75 42 6a 6b 41 47 38 5a 2f 58 4f 66 45 66 51 31 71 37 50 61 36 65 34 6a 63 6c 65 62 75 71 51 70 4f 34 38 4e 71 54 76 69 32 73 4e 35 77 74 45 59 35 46 37 53 47 37 52 6c 38 38 6c 58 47 50 30 7a 2b 6c 55 34 6c 52 47 36 33 4a 79 7a 4e 4d 78 56 59 5a 4c 4c 6c 49 42 6b 49 71 35 6f 7a 6a 54 34 77 48 41 4e 4c 6b 44 53 46 67 7a 45 71 41 63 56 63 6b 65 57 59 64 63 42 66 76 56 74 30 49 43 62 4d 33 55 4c 38 33 4f 49 78 2f 44 54 38 52 71 54 56 4c 70 59 49 42 45 67 77 53 4d 42 52 34 43 70 59 2b 7a 74 49 2b 55 6e 62 78 39 61 68 35 45 65 55 7a 4d 6e 4d 54 55 6e 79 4c 46 62 69 44 56 48 73 4e 49 74 55 74 70 6c 53 61 34 6d 63 73 56 49 4c 4a 67 59 32 38 6a 75 4f 76 6e Data Ascii: 163f0bnLKxyoz5Um/FSG/0vUYxntLC7jKQuBjkAG8Z/XOfEfQ1q7Pa6e4jclebuqQpO48NqTvi2sN5wtEY5F7SG7Rl88lXGP0z+lU4lRG63JyzNMxVYZLLlIBkIq5ozjT4wHANLkDSFgzEqAcVckeWYdcBfvVt0ICbM3UL83OIx/DT8RqTVLpYIBEgwSMBR4CpY+ztI+Unbx9ah5EeUzMnMTUnyLFbiDVHsNItUtplSa4mcsVILJgY28juOvn
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 7a 32 6b 71 4b 63 41 41 43 30 49 47 54 51 41 41 44 43 55 6d 5a 76 51 30 74 49 41 41 43 6f 41 44 6a 61 4c 6b 5a 52 66 61 48 4d 68 58 49 76 46 78 38 63 52 4d 56 4c 75 37 2b 38 50 4b 30 6f 59 51 32 6c 37 67 6f 67 6e 4e 30 34 36 52 31 6f 55 4f 46 73 41 41 42 74 77 65 49 42 43 54 6c 38 67 4d 55 6f 61 53 58 49 64 55 58 78 52 57 32 6c 6e 63 48 6e 69 34 2b 4d 41 41 43 5a 6a 62 58 79 71 72 37 61 31 75 4c 65 4d 6b 35 31 39 78 68 32 61 6f 4b 6b 41 41 41 73 41 45 30 46 36 67 6f 2b 34 76 63 4d 2f 61 43 77 4a 4a 6b 34 4c 4c 6c 6b 41 41 44 73 6a 51 54 6c 52 68 43 39 58 6a 53 6f 35 59 54 49 30 57 54 59 66 4f 7a 30 58 4d 44 35 66 6d 43 6f 41 41 45 49 52 4b 6a 35 6e 70 69 59 70 53 54 63 77 56 44 6c 35 72 66 43 5a 41 41 41 4c 45 6b 6c 45 51 56 52 59 68 61 56 5a 43 35 75 69 Data Ascii: z2kqKcAAC0IGTQAADCUmZvQ0tIAACoADjaLkZRfaHMhXIvFx8cRMVLu7+8PK0oYQ2l7gognN046R1oUOFsAABtweIBCTl8gMUoaSXIdUXxRW2lncHni4+MAACZjbXyqr7a1uLeMk519xh2aoKkAAAsAE0F6go+4vcM/aCwJJk4LLlkAADsjQTlRhC9XjSo5YTI0WTYfOz0XMD5fmCoAAEIRKj5npiYpSTcwVDl5rfCZAAALEklEQVRYhaVZC5ui
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 70 6a 4a 32 75 68 6f 6c 56 34 73 63 47 4e 67 77 52 39 32 79 6b 5a 78 64 73 42 32 48 49 45 43 54 55 2f 76 54 72 70 39 2b 2f 66 66 67 58 41 58 66 58 71 77 55 51 45 64 37 39 4e 2f 38 49 7a 4a 79 42 32 77 76 48 39 6e 4d 68 32 34 49 78 47 5a 61 54 4d 45 38 65 47 61 6a 31 69 64 33 73 74 71 46 56 71 6c 5a 6d 4f 76 43 7a 42 66 6e 6a 32 34 63 50 48 33 37 37 44 2b 70 54 6f 64 65 63 43 41 6e 6c 32 79 43 34 59 4c 77 6b 6a 59 6f 70 59 66 4b 6d 53 67 30 58 37 72 7a 57 53 44 47 5a 75 43 41 6c 4e 47 51 6d 50 42 54 4e 2b 6e 54 4d 2b 42 38 41 2b 4f 48 62 78 2f 6d 51 6a 76 48 53 62 50 30 71 62 76 50 49 31 4a 51 61 5a 37 52 56 44 61 4f 6e 31 4b 69 32 42 31 4d 38 52 46 48 6c 77 6b 76 53 41 33 63 52 6f 68 76 4d 4f 79 5a 33 2b 66 6a 34 35 37 63 2f 76 76 7a 31 36 53 75 64 39 39 Data Ascii: pjJ2uholV4scGNgwR92ykZxdsB2HIECTU/vTrp9+/ffgXAXfXqwUQEd79N/8IzJyB2wvH9nMh24IxGZaTME8eGaj1id3stqFVqlZmOvCzBfnj24cPH377D+pTodecCAnl2yC4YLwkjYopYfKmSg0X7rzWSDGZuCAlNGQmPBTN+nTM+B8A+OHbx/mQjvHSbP0qbvPI1JQaZ7RVDaOn1Ki2B1M8RFHlwkvSA3cRohvMOyZ3+fj457c/vvz16Sud99
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 6c 74 33 72 48 45 47 50 46 5a 38 6a 36 63 32 70 6c 61 51 35 54 42 45 67 53 61 71 51 75 36 53 51 2b 6e 43 2f 4b 79 62 41 4b 67 50 73 61 43 32 50 63 43 76 70 43 62 30 6b 46 2f 74 63 4b 66 52 2f 6c 4e 45 38 45 2f 37 69 37 49 2b 50 4b 54 47 6b 33 43 2f 68 64 48 6d 4a 4c 55 34 51 4d 2b 54 79 4c 72 64 6e 6d 38 6e 6b 4f 5a 51 5a 77 56 6f 69 42 34 4d 42 48 56 37 41 71 68 69 55 4e 65 46 5a 6c 55 2f 6c 69 30 31 61 32 43 38 76 33 56 33 4a 65 2f 6b 53 77 73 73 37 42 4f 53 72 70 67 62 4b 4a 47 4f 30 4e 33 69 47 2b 57 58 59 66 50 55 77 45 36 44 65 79 6e 73 53 68 6b 45 6c 76 41 6a 78 4a 56 4d 65 6f 47 46 46 73 42 62 49 7a 6a 47 45 46 4d 2f 70 73 74 4f 45 50 6f 46 58 5a 39 59 6a 36 53 2f 71 78 4d 59 4d 6e 6f 78 37 30 78 63 45 39 30 43 6b 4c 44 36 43 41 56 39 6b 79 4c 4e Data Ascii: lt3rHEGPFZ8j6c2plaQ5TBEgSaqQu6SQ+nC/KybAKgPsaC2PcCvpCb0kF/tcKfR/lNE8E/7i7I+PKTGk3C/hdHmJLU4QM+TyLrdnm8nkOZQZwVoiB4MBHV7AqhiUNeFZlU/li01a2C8v3V3Je/kSwss7BOSrpgbKJGO0N3iG+WXYfPUwE6DeynsShkElvAjxJVMeoGFFsBbIzjGEFM/pstOEPoFXZ9Yj6S/qxMYMnox70xcE90CkLD6CAV9kyLN
2024-05-28 04:36:04 UTC	143	IN	Data Raw: 61 6e 74 73 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 5d 2c 7b 22 61 67 22 3a 7b 22 61 22 3a 7b 22 38 22 3a 5b 22 54 72 65 6e 64 69 6e 67 20 73 65 61 72 63 68 65 73 22 5d 7d 7d 2c 22 71 22 3a 22 34 30 6d 74 52 42 6f 50 59 32 57 54 39 6b 4e 2d 61 37 67 78 75 79 6e 56 69 79 30 22 7d 5d 0d 0a Data Ascii: ants",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}]],{"ag":{"a":{"8":["Trending searches"]}},"q":"40mtRBoPY2WT9kN-a7gxuynViy0"}]
2024-05-28 04:36:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49725	216.58.206.78	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:04 UTC	1083	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:04 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 121628 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 10:15:31 GMT Expires: Tue, 27 May 2025 10:15:31 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 17:34:54 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 66033 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:04 UTC	475	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 Data Ascii: a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Er
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 77 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 Data Ascii: Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error("b`"+String(a));};va=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};wa="function"==typeof Object.assign?Object.a
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 74 68 69 73 2e 6c 73 3d 5b 5d 3b 74 68 69 73 2e 73 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 44 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 59 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 6a 4b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 59 64 61 3d 66 75 6e 63 74 69 6f Data Ascii: this.ls=[];this.sV=!1;var k=this.DF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.DF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Yda),reject:h(this.jK)}};e.prototype.Yda=functio
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 6c 73 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 6c 73 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 73 50 28 74 68 69 73 2e 6c 73 5b 68 5d 29 3b 0a 74 68 69 73 2e 6c 73 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 41 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 44 46 28 29 3b 68 2e 42 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 44 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 2c Data Ascii: otype.G7=function(){if(null!=this.ls){for(var h=0;h<this.ls.length;++h)f.sP(this.ls[h]);this.ls=null}};var f=new b;e.prototype.Afa=function(h){var k=this.DF();h.By(k.resolve,k.reject)};e.prototype.Bfa=function(h,k){var l=this.DF();try{h.call(k,l.resolve,
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 49 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d 7d 29 3b Data Ascii: ular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ia(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}});
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 5f 2e 75 61 28 5b 5b 6b 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6c 2e 67 65 74 28 6b 29 7c 7c 31 21 3d 6c 2e 73 69 7a 65 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 32 21 3d 6c 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d Data Ascii: ion(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var k=Object.seal({x:4}),l=new a(_.ua([[k,"s"]]));if("s"!=l.get(k)\|\|1!=l.size\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|2!=l.size)return!1;var m=
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 0a 6e 3b 21 28 6e 3d 6d 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6e 3d 6e 2e 76 61 6c 75 65 2c 6b 2e 63 61 6c 6c 28 6c 2c 6e 5b 31 5d 2c 6e 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b Data Ascii: otype.values=function(){return e(this,function(k){return k.value})};c.prototype.forEach=function(k,l){for(var m=this.entries(),n;!(n=m.next()).done;)n=n.value,k.call(l,n[1],n[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(k,l){
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 75 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 32 21 3d 64 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e Data Ascii: tries\|\|"function"!=typeof Object.seal)return!1;try{var c=Object.seal({x:4}),d=new a(_.ua([c]));if(!d.has(c)\|\|1!=d.size\|\|d.add(c)!=d\|\|1!=d.size\|\|d.add({x:4})!=d\|\|2!=d.size)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return
2024-05-28 04:36:04 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 7d 29 3b 0a 6e 61 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 6e 75 6c 6c 21 3d 63 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 Data Ascii: function(){return Ka(this,function(b,c){return c})}});na("Array.from",function(a){return a?a:function(b,c,d){c=null!=c?c:function(k){return k};var e=[],f="undefined"!=typeof Symbol&&Symbol.iterator&&b[Symbol.iterator];if("function"==typeof f){b=f.call(b)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49726	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:04 UTC	1024	OUT	GET /images/hpp/ic_wahlberg_product_core_48.png8.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ogs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:04 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 2091 Date: Tue, 28 May 2024 04:36:04 GMT Expires: Tue, 28 May 2024 04:36:04 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:04 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 07 f2 49 44 41 54 78 01 c5 9a 03 f0 ec ea 12 c4 9f 6d a3 74 6d db 38 36 af 6d db b6 6d 9b 87 d7 b6 6d db 58 6f b0 f8 b3 5f 7e b5 e7 4d 6d e5 26 df e6 78 ab ba b2 15 76 cf f4 cc f7 05 3f 9a 13 bf 20 08 7e 5e a9 54 56 2e 97 cb fb 7a 9e 77 4b 84 97 ab d5 aa 1f 2d eb 60 c6 ff 77 a3 e5 1d 11 8e 8f f6 1b e0 fb fe 1f 7f 34 bf 7f 11 89 e5 22 1c 13 91 7a 36 5a e6 22 92 8a 96 a9 60 3b 40 d0 0c 91 e7 21 86 00 cc 53 e2 51 b4 c7 45 04 ee 8b d0 4c 24 eb 10 60 30 31 9e 10 53 28 14 76 8a c4 fc 76 6e 13 5f 19 e2 ee 48 bb 05 b8 10 9d ff cd 48 c4 66 73 9c 38 29 c6 2a f8 d9 08 cd 71 01 96 11 84 5c 1f ed ff f7 39 42 3e f2 e9 7f 29 3e 23 32 17 05 c4 b3 41 8d cd 16 f9 7a bd Data Ascii: PNGIHDR00WIDATxmtm86mmmXo_~Mm&xv? ~^TV.zwK-`w4"z6Z"`;@!SQEL$`01S(vvn_HHfs8)*q\9B>)>#2Az
2024-05-28 04:36:04 UTC	1372	IN	Data Raw: eb dc e4 dd b8 cf fa 3e f3 f9 b4 e8 43 a8 eb e5 a1 0a 8e 5e 50 b9 01 43 db db 25 91 87 3c 84 20 36 e3 18 cf 39 07 82 2c e7 24 30 78 de 4d de 3d cd 60 5c f8 ff 4d 49 2e 91 7c d8 a3 b0 f0 8a fa 1e ff b5 fa 5e fe 83 ea 57 2d 22 88 e7 87 0c 40 04 85 4a fb b3 1e 9e 92 c5 b9 06 ee 4b 98 6d ee 91 1c fd 68 a7 ba d4 78 ef 48 f5 3e f4 63 f5 3e f1 77 21 a2 eb 9e ff aa b4 c5 3a 58 8a 62 25 92 76 cc bc 16 c0 ed 29 93 b6 5b 52 09 84 2d fb f4 3e f2 2b 21 a0 e7 b1 3f ab f7 b9 3f 8a ff 95 9d 16 51 e5 91 47 3a 46 bf a7 e1 a9 b7 6b d6 d0 ac 41 d2 29 60 2a 02 5e 4e 24 1f d4 e5 7b 39 f5 3c bb 50 44 fc 8f 90 37 60 29 d6 33 eb 64 bf d4 0c 06 9e 8e 9d 12 68 af 6b 03 ed 7b 5d 26 d8 be 3b 5e 1e 68 ca 73 3e 42 52 45 50 bb 58 c8 4f 8b 7e 50 7c 5b 10 8e 0b c0 52 5d af 6d 2c bf a1 b4 Data Ascii: >C^PC%< 69,$0xM=`\MI.\|^W-"@JKmhxH>c>w!:Xb%v)[R->+!??QG:FkA)`*^N${9<PD7`)3dhk{]&;^hs>BREPXO~P\|[R]m,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49729	216.58.206.46	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:04 UTC	1060	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1957 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:04 UTC	1957	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 31 36 38 37 30 39 36 32 33 36 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1716870962369",null,null,null,
2024-05-28 04:36:05 UTC	928	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=eG8DTn4uCklpq3CtcePntlYlKv6ykPglRm_3LCjvA0Pg5NTrfky4aQwW5wNCPdZzxmWRkHBIWVudWvr_jhZgV2s9xhvVWi78foDmmglUk6bqLSe9BCzAONe3vpWJmGaqgMzqOcPBKXc5G-pX03F-dHdOArdw9CxgyiMAUoOKK2Lin3GJ-j8; expires=Wed, 27-Nov-2024 04:36:05 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 28 May 2024 04:36:05 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 28 May 2024 04:36:05 GMT Connection: close Transfer-Encoding: chunked
2024-05-28 04:36:05 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-28 04:36:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49730	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:04 UTC	1561	OUT	GET /xjs/_/ss/k=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/d=0/br=1/rs=ACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw/m=syk9?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
2024-05-28 04:36:05 UTC	808	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 833 Date: Tue, 28 May 2024 04:36:05 GMT Expires: Wed, 28 May 2025 04:36:05 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 24 May 2024 10:40:04 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:05 UTC	582	IN	Data Raw: 2e 45 70 50 59 4c 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 59 70 63 44 6e 66 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 59 70 63 44 6e 66 2e 48 47 31 64 76 64 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 48 47 31 64 76 64 3e 2a 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 7d 2e 57 74 56 35 6e 64 20 2e 59 70 63 44 6e 66 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 38 70 78 7d 2e 5a 74 30 61 35 65 20 2e 59 70 63 44 6e 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 38 70 78 7d 2e 47 5a 6e 51 71 65 20 2e 59 70 63 44 6e 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 33 70 78 7d 2e 45 70 50 59 4c 64 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 Data Ascii: .EpPYLd{display:block;position:relative}.YpcDnf{padding:0 16px;vertical-align:middle}.YpcDnf.HG1dvd{padding:0}.HG1dvd>*{padding:0 16px}.WtV5nd .YpcDnf{padding-left:28px}.Zt0a5e .YpcDnf{line-height:48px}.GZnQqe .YpcDnf{line-height:23px}.EpPYLd:hover{cursor
2024-05-28 04:36:05 UTC	251	IN	Data Raw: 51 71 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 20 63 65 6e 74 65 72 7d 2e 47 5a 6e 51 71 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 75 69 2f 76 31 2f 6d 65 6e 75 2f 63 68 65 63 6b 6d 61 72 6b 32 2e 70 6e 67 29 7d 2e 47 5a 6e 51 71 65 2e 4c 47 69 6c 75 63 2c 2e 47 5a 6e 51 71 65 2e 45 70 50 59 4c 64 5b 64 69 73 61 62 6c 65 64 5d 7b 63 6f 6c 6f 72 3a 23 64 61 64 63 65 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 47 5a 6e 51 71 65 2e 4c 47 69 6c 75 63 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 67 53 35 6a 58 62 29 7d 73 65 6e 74 69 6e 65 6c 7b 7d Data Ascii: Qqe.CB8nDe{background:no-repeat left center}.GZnQqe.CB8nDe{background-image:url(https://ssl.gstatic.com/ui/v1/menu/checkmark2.png)}.GZnQqe.LGiluc,.GZnQqe.EpPYLd[disabled]{color:#dadce0!important}.GZnQqe.LGiluc{border-top-color:var(--gS5jXb)}sentinel{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49733	142.250.185.100	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:05 UTC	1022	OUT	GET /xjs/_/js/md=3/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
2024-05-28 04:36:06 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 191644 Date: Tue, 28 May 2024 04:36:05 GMT Expires: Wed, 28 May 2025 04:36:05 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 24 May 2024 19:07:04 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:06 UTC	572	IN	Data Raw: 7b 22 63 68 75 6e 6b 54 79 70 65 73 22 3a 22 31 30 30 30 30 31 31 31 31 31 31 31 30 30 31 31 31 31 30 30 30 31 30 30 30 30 31 30 31 31 30 31 30 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 30 31 31 31 31 31 31 31 31 31 31 31 30 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: {"chunkTypes":"100001111111001111000100001011010000001111111111111111111111111111111011011111111111010111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 31 32 32 31 32 32 31 32 31 31 31 32 32 31 32 32 32 31 32 31 32 31 32 32 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 32 32 32 32 32 32 32 32 32 31 32 32 31 32 31 32 31 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 32 32 32 32 32 32 31 33 33 32 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 32 31 31 31 32 32 32 32 31 31 32 32 32 31 31 32 31 32 31 32 31 32 31 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 31 32 31 Data Ascii: 121212121212121212121222121212121212121222121221221211122122212121222221212121212121222122222222221221212122212121212121212121121112121212121212112121212121212121222222222133233333333333333333211122221122211212121212212121212121212112121212121212121211121
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111112111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 33 32 31 33 33 33 33 31 32 32 33 32 33 31 31 32 33 33 33 32 31 31 33 31 32 33 31 33 33 33 31 32 31 32 31 33 33 32 31 33 33 33 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 32 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 Data Ascii: 111111111111111111111111111111111111111111332133331223231123332113123133312121332133321111111111111111111111111111111111111111111111111111111111111111111111111112111111111111111111111111111111111111111113211111111111111111111111111131112131111111111111113
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 31 31 31 31 31 31 31 31 31 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111122222221111222222222222222222221111111111331111111111111111111111111110111011111111111111111111111
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 32 31 32 31 32 31 32 31 31 32 31 32 31 31 32 31 33 33 31 31 31 31 31 31 31 31 33 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 31 32 32 31 32 32 32 32 31 31 31 32 31 32 32 31 31 31 31 31 31 32 31 31 32 31 31 31 31 31 31 32 31 31 31 31 32 32 32 32 32 32 32 32 32 31 32 32 31 32 Data Ascii: 212121211212112133111111113212121212121212121212121212121212121212121212112121111111111111122211111111111111111111111111111111111111111111111111111111111111111111111111221111111111111111111111111111111222212212222111212211111121121111112111122222222212212
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 33 33 33 33 33 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 33 33 33 32 31 32 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 32 31 31 33 33 31 33 31 31 31 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 33 33 33 31 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 32 31 33 33 32 31 32 31 32 32 32 32 32 31 33 31 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 33 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111113333333311111111111111111111111333321211131111111111111111111111111112121133131111121212121212121213331331111111111111111111111111112112133212122222131331111111111111111111111111111111111111111123111111131111111111111111111
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 31 33 32 32 32 31 33 31 33 33 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 32 33 32 32 32 33 32 33 33 32 33 31 33 33 30 30 32 30 30 30 30 30 30 30 30 30 30 31 31 31 31 31 33 32 32 33 33 32 33 31 30 30 30 30 30 31 31 31 31 31 31 32 32 32 32 33 32 32 33 32 32 33 33 32 32 33 33 33 31 30 30 30 30 32 30 30 30 30 32 30 30 30 32 30 32 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 33 31 31 31 31 31 33 31 32 33 32 32 31 32 32 33 30 30 30 30 30 31 31 31 31 31 31 33 31 32 33 30 31 32 33 30 30 32 33 30 32 33 30 30 32 33 30 30 33 31 33 31 31 31 31 32 32 33 32 33 33 31 33 31 Data Ascii: 000000000000000000000000000000000000000000000000000000002132221313300000111111111112322232332313300200000000001111132233231000001111112222322322332233310000200002000202000000000000000000000013111113123221223000001111113123012300230230023003131111223233131
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 30 31 32 33 31 31 31 30 32 32 33 30 30 30 30 32 33 30 32 32 32 33 33 30 30 30 31 32 32 33 31 31 32 31 32 32 32 32 32 32 32 32 32 33 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 32 32 32 32 32 33 31 31 33 31 31 30 30 30 30 30 30 30 30 30 30 30 32 32 33 31 31 31 30 30 30 33 33 31 33 31 33 31 31 33 33 33 32 32 32 32 33 31 31 32 32 33 31 32 32 33 31 31 30 30 30 30 30 30 31 33 31 31 31 31 31 33 22 2c 22 6d 6f 64 75 6c 65 47 72 61 70 68 22 3a 22 71 75 61 6e 74 75 6d 2f 74 37 78 67 49 65 2f 77 73 39 54 6c 63 2f 63 45 74 39 30 62 2f 71 64 64 67 4b 65 2f 79 78 54 63 68 66 2f 73 79 37 6b 2f 73 79 37 6c 3a 36 2f 73 79 37 6d 2f 78 51 74 5a 62 3a 35 2c 37 2c 38 2f 73 79 37 6e 2f 52 39 59 48 4a 63 3a 37 2c 61 2f 4b 55 4d 37 5a 2f 77 72 7a 45 Data Ascii: 01231110223000023022233000122311212222222223000000000000000000000002222223113110000000000022311100033131311333222231122312231100000013111113","moduleGraph":"quantum/t7xgIe/ws9Tlc/cEt90b/qddgKe/yxTchf/sy7k/sy7l:6/sy7m/xQtZb:5,7,8/sy7n/R9YHJc:7,a/KUM7Z/wrzE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49734	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:06 UTC	1706	OUT	GET /xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=sy1c7,P10Owf,sypl,sy1at,sy1av,gSZvdb,syva,syvb,WlNQGd,syvo,syvq,nabPbb,sypk,sypm,sypn,sypq,DPreE,syk9,syv3,syv5,CnSW2d,kQvlef,syvp,fXO0xe?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
2024-05-28 04:36:06 UTC	817	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 23397 Date: Tue, 28 May 2024 04:36:06 GMT Expires: Wed, 28 May 2025 04:36:06 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 24 May 2024 19:07:04 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:06 UTC	573	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 7a 30 63 3d 5f 2e 41 64 28 22 50 31 30 4f 77 66 22 2c 5b 5f 2e 63 71 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 79 28 22 50 31 30 4f 77 66 22 29 3b 0a 76 61 72 20 41 30 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 41 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4d 61 29 3b 74 68 69 73 2e 51 62 3d 61 2e 73 65 72 76 69 63 65 2e 51 62 3b 74 68 69 73 2e 64 61 74 61 3d 61 2e 5a 64 2e 77 64 61 7d 3b 5f 2e 42 28 41 30 63 2c 5f 2e 41 29 3b 41 30 63 2e 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{_.z0c=_.Ad("P10Owf",[_.cq]);}catch(e){_._DumpException(e)}try{_.y("P10Owf");var A0c=function(a){_.A.call(this,a.Ma);this.Qb=a.service.Qb;this.data=a.Zd.wda};_.B(A0c,_.A);A0c.Ia=function(){return
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 51 62 2e 6b 61 28 29 2e 6b 61 28 61 2e 72 62 2e 65 6c 28 29 29 2e 6c 6f 67 28 21 30 29 3b 5f 2e 63 66 28 64 6f 63 75 6d 65 6e 74 2c 5f 2e 6a 69 63 29 7d 3b 0a 41 30 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 51 62 2e 6b 61 28 29 2e 6b 61 28 61 2e 72 62 2e 65 6c 28 29 29 2e 6c 6f 67 28 21 30 29 3b 5f 2e 63 66 28 64 6f 63 75 6d 65 6e 74 2c 5f 2e 69 69 63 2c 74 68 69 73 2e 64 61 74 61 29 7d 3b 5f 2e 47 28 41 30 63 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6b 45 4f 6b 34 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 61 7d 29 3b 5f 2e 47 28 41 30 63 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 54 33 59 62 62 22 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: nction(a){this.Qb.ka().ka(a.rb.el()).log(!0);_.cf(document,_.jic)};A0c.prototype.ta=function(a){this.Qb.ka().ka(a.rb.el()).log(!0);_.cf(document,_.iic,this.data)};_.G(A0c.prototype,"kEOk4d",function(){return this.ta});_.G(A0c.prototype,"fT3Ybb",function(
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 43 61 7d 29 3b 5f 2e 47 28 56 56 63 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 35 4b 43 55 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6b 61 7d 29 3b 5f 2e 68 72 28 5f 2e 55 56 63 2c 56 56 63 29 3b 0a 5f 2e 7a 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 59 32 62 3d 5f 2e 54 6e 28 22 6d 4d 66 36 31 65 22 29 3b 5f 2e 5a 32 62 3d 5f 2e 54 6e 28 22 4c 79 57 4e 45 66 22 29 3b 5f 2e 24 32 62 3d 5f 2e 54 6e 28 22 4f 56 59 31 6b 64 22 29 3b 5f 2e 61 33 62 3d 5f 2e 54 6e 28 22 6e 75 6e 58 5a 22 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e Data Ascii: e",function(){return this.Ca});_.G(VVc.prototype,"i5KCU",function(){return this.ka});_.hr(_.UVc,VVc);_.z();}catch(e){_._DumpException(e)}try{_.Y2b=_.Tn("mMf61e");_.Z2b=_.Tn("LyWNEf");_.$2b=_.Tn("OVY1kd");_.a3b=_.Tn("nunXZ");}catch(e){_._DumpException
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 7d 3b 0a 43 78 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 53 65 6c 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 5f 2e 4f 61 28 74 68 69 73 2e 74 61 28 29 29 2c 62 3d 61 2e 6e 65 78 74 28 29 3b 21 62 2e 64 6f 6e 65 3b 62 3d 61 2e 6e 65 78 74 28 29 29 7b 62 3d 74 68 69 73 2e 6b 61 28 62 2e 76 61 6c 75 65 29 3b 69 66 28 62 2e 69 73 53 65 6c 65 63 74 65 64 28 29 26 26 62 2e 69 73 45 6e 61 62 6c 65 64 28 29 29 73 77 69 74 63 68 28 62 2e 67 65 74 54 79 70 65 28 29 29 7b 63 61 73 65 20 32 3a 65 33 62 28 74 68 69 73 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 74 68 69 73 2e 4b 61 2e 70 6f 70 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 63 61 73 65 20 37 3a 63 61 73 65 20 36 3a 63 61 73 65 20 34 3a 63 61 73 65 20 35 Data Ascii: };Cx.prototype.clearSelection=function(){for(var a=_.Oa(this.ta()),b=a.next();!b.done;b=a.next()){b=this.ka(b.value);if(b.isSelected()&&b.isEnabled())switch(b.getType()){case 2:e3b(this);break;case 3:this.Ka.pop();break;case 1:case 7:case 6:case 4:case 5
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 61 7d 3b 0a 5f 2e 6d 2e 4d 32 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 6b 61 28 61 29 3b 69 66 28 36 21 3d 3d 62 2e 67 65 74 54 79 70 65 28 29 26 26 31 30 21 3d 3d 62 2e 67 65 74 54 79 70 65 28 29 29 72 65 74 75 72 6e 20 61 3b 62 3d 28 6e 65 77 20 5f 2e 59 66 28 5b 61 5d 29 29 2e 66 69 6e 64 28 22 2a 22 29 2e 74 6f 41 72 72 61 79 28 29 3b 72 65 74 75 72 6e 28 61 3d 5b 61 5d 2e 63 6f 6e 63 61 74 28 62 29 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 5f 2e 67 65 28 63 29 26 26 5f 2e 70 6d 2e 47 68 28 63 29 26 26 28 22 6d 65 6e 75 69 74 65 6d 22 3d 3d 3d 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 29 26 26 63 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 Data Ascii: a};_.m.M2=function(a){var b=this.ka(a);if(6!==b.getType()&&10!==b.getType())return a;b=(new _.Yf([a])).find("*").toArray();return(a=[a].concat(b).find(function(c){return _.ge(c)&&_.pm.Gh(c)&&("menuitem"===c.getAttribute("role")&&c.hasAttribute("tabindex"
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 69 66 28 34 30 3d 3d 3d 63 7c 7c 33 38 3d 3d 3d 63 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 61 2c 66 3d 74 68 69 73 2e 74 61 28 29 3b 65 3d 33 38 3d 3d 3d 63 3f 65 3d 3d 3d 66 5b 30 5d 3a 65 3d 3d 3d 66 2e 70 6f 70 28 29 3b 69 66 28 21 74 68 69 73 2e 50 61 7c 7c 21 65 29 7b 63 3d 34 30 3d 3d 3d 63 3b 65 3d 6b 33 62 28 74 68 69 73 2c 63 29 3b 76 61 72 20 67 3b 63 3d 6e 75 6c 6c 21 3d 28 67 3d 63 3f 65 2e 73 68 69 66 74 28 29 3a 65 2e 70 6f 70 28 29 29 3f 67 3a 6e 75 6c 6c 3b 66 33 62 28 74 68 69 73 2c 63 29 3b 74 68 69 73 2e 4e 61 28 74 68 69 73 2e 6f 61 29 7d 7d 65 6c 73 65 20 69 66 28 31 33 3d 3d 3d 63 7c 7c 33 32 3d 3d 3d 63 26 26 21 74 68 69 73 2e 70 72 65 66 69 78 29 74 68 69 73 2e 6f 61 26 26 28 64 3d 36 3d 3d 3d 74 68 69 73 2e 6b 61 28 74 68 69 73 Data Ascii: if(40===c\|\|38===c){var e=this.oa,f=this.ta();e=38===c?e===f[0]:e===f.pop();if(!this.Pa\|\|!e){c=40===c;e=k3b(this,c);var g;c=null!=(g=c?e.shift():e.pop())?g:null;f3b(this,c);this.Na(this.oa)}}else if(13===c\|\|32===c&&!this.prefix)this.oa&&(d=6===this.ka(this
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 69 67 68 74 2b 66 29 3b 62 26 26 28 74 68 69 73 2e 6d 65 6e 75 2e 73 63 72 6f 6c 6c 54 6f 70 2b 3d 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 2d 74 68 69 73 2e 6d 65 6e 75 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 2d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 63 2e 68 65 69 67 68 74 2d 65 2e 68 65 69 67 68 74 29 2f 32 29 29 7d 7d 7d 3b 5f 2e 47 28 43 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 75 59 54 32 56 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5a 6d 7d 29 3b 0a 5f 2e 47 28 43 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 49 67 4a 6c 39 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4c 6a 64 7d 29 3b 5f 2e 47 28 43 78 Data Ascii: ight+f);b&&(this.menu.scrollTop+=a.getBoundingClientRect().top-this.menu.getBoundingClientRect().top-Math.floor((c.height-e.height)/2))}}};_.G(Cx.prototype,"uYT2Vb",function(){return this.Zm});_.G(Cx.prototype,"IgJl9c",function(){return this.Ljd});_.G(Cx
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 6e 74 72 6f 6c 6c 65 72 2e 71 6c 2c 22 4c 67 62 73 53 65 22 29 3b 74 68 69 73 2e 70 6f 70 75 70 3d 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 2e 71 6c 3b 74 68 69 73 2e 6f 61 3d 5f 2e 48 66 28 74 68 69 73 2e 67 65 74 44 61 74 61 28 22 66 66 70 22 29 2c 21 31 29 7d 3b 5f 2e 42 28 45 34 62 2c 5f 2e 41 29 3b 45 34 62 2e 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 63 6f 6e 74 72 6f 6c 6c 65 72 3a 7b 71 6c 3a 22 56 36 38 62 64 65 22 7d 7d 7d 3b 0a 45 34 62 2e 70 72 6f 74 6f 74 79 70 65 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2c 63 3d 5b 5d 3b 5f 2e 53 63 28 74 68 69 73 2e 6b 61 29 26 26 63 2e 70 75 73 68 28 6e 65 77 20 5f 2e 6a 6e 28 74 68 69 73 2e 6b 61 2c 22 73 68 6f 77 22 29 29 3b 76 61 72 20 64 3d 61 2e 64 Data Ascii: ntroller.ql,"LgbsSe");this.popup=a.controller.ql;this.oa=_.Hf(this.getData("ffp"),!1)};_.B(E4b,_.A);E4b.Ia=function(){return{controller:{ql:"V68bde"}}};E4b.prototype.Ca=function(a){var b=this,c=[];_.Sc(this.ka)&&c.push(new _.jn(this.ka,"show"));var d=a.d
2024-05-28 04:36:06 UTC	1390	IN	Data Raw: 65 74 75 72 6e 20 74 68 69 73 2e 46 61 7d 29 3b 5f 2e 47 28 45 34 62 2e 70 72 6f 74 6f 74 79 70 65 2c 22 67 44 6b 66 34 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 61 7d 29 3b 0a 5f 2e 47 28 45 34 62 2e 70 72 6f 74 6f 74 79 70 65 2c 22 59 30 79 34 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 43 61 7d 29 3b 5f 2e 68 72 28 5f 2e 44 34 62 2c 45 34 62 29 3b 0a 5f 2e 7a 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 7a 75 3d 5f 2e 54 6e 28 22 42 55 59 77 56 62 22 29 3b 5f 2e 79 77 62 3d 5f 2e 54 6e 28 22 4c 73 4c 47 48 66 22 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 Data Ascii: eturn this.Fa});_.G(E4b.prototype,"gDkf4c",function(){return this.ta});_.G(E4b.prototype,"Y0y4c",function(){return this.Ca});_.hr(_.D4b,E4b);_.z();}catch(e){_._DumpException(e)}try{_.zu=_.Tn("BUYwVb");_.ywb=_.Tn("LsLGHf");}catch(e){_._DumpException(
2024-05-28 04:36:06 UTC	421	IN	Data Raw: 21 3d 5f 2e 70 6d 2e 50 62 61 28 61 29 29 7b 76 61 72 20 63 3d 5f 2e 70 6d 2e 63 49 28 61 29 3b 62 7c 7c 28 63 3d 5f 2e 42 79 61 28 63 2c 6e 65 77 20 5f 2e 58 6b 28 5f 2e 70 6d 2e 73 6a 2e 56 78 28 61 29 2c 61 2e 73 63 72 6f 6c 6c 54 6f 70 29 29 29 7d 7d 72 65 74 75 72 6e 20 63 7c 7c 6e 65 77 20 5f 2e 58 6b 7d 3b 5f 2e 54 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 61 3d 61 2e 63 6c 6f 6e 65 28 29 3b 76 61 72 20 68 3d 5f 2e 53 77 62 28 62 2c 63 29 3b 63 3d 5f 2e 70 6d 2e 67 65 74 53 69 7a 65 28 62 29 3b 67 3d 67 3f 67 2e 63 6c 6f 6e 65 28 29 3a 63 2e 63 6c 6f 6e 65 28 29 3b 61 3d 5f 2e 55 77 62 28 61 2c 67 2c 68 2c 64 2c 65 2c 66 29 3b 69 66 28 61 2e 73 74 61 74 75 73 26 34 39 36 29 72 65 74 75 72 6e 20 61 2e 73 74 61 Data Ascii: !=_.pm.Pba(a)){var c=_.pm.cI(a);b\|\|(c=_.Bya(c,new _.Xk(_.pm.sj.Vx(a),a.scrollTop)))}}return c\|\|new _.Xk};_.Twb=function(a,b,c,d,e,f,g){a=a.clone();var h=_.Swb(b,c);c=_.pm.getSize(b);g=g?g.clone():c.clone();a=_.Uwb(a,g,h,d,e,f);if(a.status&496)return a.sta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49735	142.250.185.100	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:06 UTC	749	OUT	GET /images/hpp/ic_wahlberg_product_core_48.png8.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
2024-05-28 04:36:06 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 2091 Date: Tue, 28 May 2024 04:36:06 GMT Expires: Tue, 28 May 2024 04:36:06 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:06 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 07 f2 49 44 41 54 78 01 c5 9a 03 f0 ec ea 12 c4 9f 6d a3 74 6d db 38 36 af 6d db b6 6d 9b 87 d7 b6 6d db 58 6f b0 f8 b3 5f 7e b5 e7 4d 6d e5 26 df e6 78 ab ba b2 15 76 cf f4 cc f7 05 3f 9a 13 bf 20 08 7e 5e a9 54 56 2e 97 cb fb 7a 9e 77 4b 84 97 ab d5 aa 1f 2d eb 60 c6 ff 77 a3 e5 1d 11 8e 8f f6 1b e0 fb fe 1f 7f 34 bf 7f 11 89 e5 22 1c 13 91 7a 36 5a e6 22 92 8a 96 a9 60 3b 40 d0 0c 91 e7 21 86 00 cc 53 e2 51 b4 c7 45 04 ee 8b d0 4c 24 eb 10 60 30 31 9e 10 53 28 14 76 8a c4 fc 76 6e 13 5f 19 e2 ee 48 bb 05 b8 10 9d ff cd 48 c4 66 73 9c 38 29 c6 2a f8 d9 08 cd 71 01 96 11 84 5c 1f ed ff f7 39 42 3e f2 e9 7f 29 3e 23 32 17 05 c4 b3 41 8d cd 16 f9 7a bd Data Ascii: PNGIHDR00WIDATxmtm86mmmXo_~Mm&xv? ~^TV.zwK-`w4"z6Z"`;@!SQEL$`01S(vvn_HHfs8)*q\9B>)>#2Az
2024-05-28 04:36:06 UTC	1372	IN	Data Raw: eb dc e4 dd b8 cf fa 3e f3 f9 b4 e8 43 a8 eb e5 a1 0a 8e 5e 50 b9 01 43 db db 25 91 87 3c 84 20 36 e3 18 cf 39 07 82 2c e7 24 30 78 de 4d de 3d cd 60 5c f8 ff 4d 49 2e 91 7c d8 a3 b0 f0 8a fa 1e ff b5 fa 5e fe 83 ea 57 2d 22 88 e7 87 0c 40 04 85 4a fb b3 1e 9e 92 c5 b9 06 ee 4b 98 6d ee 91 1c fd 68 a7 ba d4 78 ef 48 f5 3e f4 63 f5 3e f1 77 21 a2 eb 9e ff aa b4 c5 3a 58 8a 62 25 92 76 cc bc 16 c0 ed 29 93 b6 5b 52 09 84 2d fb f4 3e f2 2b 21 a0 e7 b1 3f ab f7 b9 3f 8a ff 95 9d 16 51 e5 91 47 3a 46 bf a7 e1 a9 b7 6b d6 d0 ac 41 d2 29 60 2a 02 5e 4e 24 1f d4 e5 7b 39 f5 3c bb 50 44 fc 8f 90 37 60 29 d6 33 eb 64 bf d4 0c 06 9e 8e 9d 12 68 af 6b 03 ed 7b 5d 26 d8 be 3b 5e 1e 68 ca 73 3e 42 52 45 50 bb 58 c8 4f 8b 7e 50 7c 5b 10 8e 0b c0 52 5d af 6d 2c bf a1 b4 Data Ascii: >C^PC%< 69,$0xM=`\MI.\|^W-"@JKmhxH>c>w!:Xb%v)[R->+!??QG:FkA)`*^N${9<PD7`)3dhk{]&;^hs>BREPXO~P\|[R]m,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49737	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:06 UTC	1254	OUT	GET /client_204?cs=1&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
2024-05-28 04:36:06 UTC	1131	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-QiSpimI8g_QTGVRgU2jk_A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Tue, 28 May 2024 04:36:06 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA; expires=Wed, 27-Nov-2024 04:36:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49738	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:06 UTC	2544	OUT	GET /async/hpba?vet=10ahUKEwiKp-ndwq-GAxVc9bsIHcE-BuQQj-0KCBU..i&ei=MF9VZorPINzq7_UPwf2YoA4&opi=89978449&yv=3&cs=0&async=isImageHp:false,eventId:MF9VZorPINzq7_UPwf2YoA4,_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA%2Fbr%3D1%2Frs%3DACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fck%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKQA-gkH [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
2024-05-28 04:36:06 UTC	961	IN	HTTP/1.1 200 OK Version: 636065462 X-Content-Type-Options: nosniff Content-Type: text/plain; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:06 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-28 04:36:06 UTC	48	IN	Data Raw: 32 61 0d 0a 29 5d 7d 27 0a 32 32 3b 5b 22 4e 6c 39 56 5a 76 69 54 4a 64 75 41 39 75 38 50 78 62 4b 73 6b 41 51 22 2c 22 32 30 31 34 22 5d 0d 0a Data Ascii: 2a)]}'22;["Nl9VZviTJduA9u8PxbKskAQ","2014"]
2024-05-28 04:36:06 UTC	41	IN	Data Raw: 32 33 0d 0a 33 3b 5b 32 5d 31 62 3b 3c 64 69 76 20 6a 73 6e 61 6d 65 3d 22 4e 6c 6c 30 6e 65 22 3e 3c 2f 64 69 76 3e 0d 0a Data Ascii: 233;[2]1b;<div jsname="Nll0ne"></div>
2024-05-28 04:36:06 UTC	12	IN	Data Raw: 37 0d 0a 33 3b 5b 39 5d 30 3b 0d 0a Data Ascii: 73;[9]0;
2024-05-28 04:36:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49741	216.58.206.46	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:06 UTC	739	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=eG8DTn4uCklpq3CtcePntlYlKv6ykPglRm_3LCjvA0Pg5NTrfky4aQwW5wNCPdZzxmWRkHBIWVudWvr_jhZgV2s9xhvVWi78foDmmglUk6bqLSe9BCzAONe3vpWJmGaqgMzqOcPBKXc5G-pX03F-dHdOArdw9CxgyiMAUoOKK2Lin3GJ-j8
2024-05-28 04:36:06 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 28 May 2024 04:36:06 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:06 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-28 04:36:06 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49736	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:06 UTC	1828	OUT	POST /gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=webhp&t=all&imn=12&ima=2&imad=0&imac=1&wh=907&aft=1&aftp=907&adh=&ime=2&imeae=0&imeap=0&imex=2&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&imeeb=0&scp=0&mem=ujhs.6,tjhs.10,jhsl.2173,dm.8&nv=ne.1,feid.6192e56c-22dd-43d1-a29a-aec2417b2275&net=dl.1500,ect.3g,rtt.300&hp=&sys=hc.4&p=bs.true&rt=hst.91,cbt.92,prt.1158,afti.2163,aft.2163,aftqf.2164,xjses.2238,xjsee.2282,xjs.2282,lcp.1410,fcp.1162,wsrt.5175,cst.658,dnst.8,rqst.695,rspt.350,sslt.657,rqstt.4830,unt.4162,cstt.4172,dit.6344&zx=1716870962174&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
2024-05-28 04:36:06 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-XwVEJMdGSUDEL46D2TYDlQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:06 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49740	142.250.185.100	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:06 UTC	1037	OUT	GET /xjs/_/ss/k=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/d=0/br=1/rs=ACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw/m=syk9?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
2024-05-28 04:36:06 UTC	808	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 833 Date: Tue, 28 May 2024 04:36:06 GMT Expires: Wed, 28 May 2025 04:36:06 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 24 May 2024 10:40:04 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:06 UTC	582	IN	Data Raw: 2e 45 70 50 59 4c 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 59 70 63 44 6e 66 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 59 70 63 44 6e 66 2e 48 47 31 64 76 64 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 48 47 31 64 76 64 3e 2a 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 7d 2e 57 74 56 35 6e 64 20 2e 59 70 63 44 6e 66 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 38 70 78 7d 2e 5a 74 30 61 35 65 20 2e 59 70 63 44 6e 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 38 70 78 7d 2e 47 5a 6e 51 71 65 20 2e 59 70 63 44 6e 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 33 70 78 7d 2e 45 70 50 59 4c 64 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 Data Ascii: .EpPYLd{display:block;position:relative}.YpcDnf{padding:0 16px;vertical-align:middle}.YpcDnf.HG1dvd{padding:0}.HG1dvd>*{padding:0 16px}.WtV5nd .YpcDnf{padding-left:28px}.Zt0a5e .YpcDnf{line-height:48px}.GZnQqe .YpcDnf{line-height:23px}.EpPYLd:hover{cursor
2024-05-28 04:36:06 UTC	251	IN	Data Raw: 51 71 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 20 63 65 6e 74 65 72 7d 2e 47 5a 6e 51 71 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 75 69 2f 76 31 2f 6d 65 6e 75 2f 63 68 65 63 6b 6d 61 72 6b 32 2e 70 6e 67 29 7d 2e 47 5a 6e 51 71 65 2e 4c 47 69 6c 75 63 2c 2e 47 5a 6e 51 71 65 2e 45 70 50 59 4c 64 5b 64 69 73 61 62 6c 65 64 5d 7b 63 6f 6c 6f 72 3a 23 64 61 64 63 65 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 47 5a 6e 51 71 65 2e 4c 47 69 6c 75 63 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 67 53 35 6a 58 62 29 7d 73 65 6e 74 69 6e 65 6c 7b 7d Data Ascii: Qqe.CB8nDe{background:no-repeat left center}.GZnQqe.CB8nDe{background-image:url(https://ssl.gstatic.com/ui/v1/menu/checkmark2.png)}.GZnQqe.LGiluc,.GZnQqe.EpPYLd[disabled]{color:#dadce0!important}.GZnQqe.LGiluc{border-top-color:var(--gS5jXb)}sentinel{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49745	216.58.206.46	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:07 UTC	1086	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1447 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=eG8DTn4uCklpq3CtcePntlYlKv6ykPglRm_3LCjvA0Pg5NTrfky4aQwW5wNCPdZzxmWRkHBIWVudWvr_jhZgV2s9xhvVWi78foDmmglUk6bqLSe9BCzAONe3vpWJmGaqgMzqOcPBKXc5G-pX03F-dHdOArdw9CxgyiMAUoOKK2Lin3GJ-j8
2024-05-28 04:36:07 UTC	1447	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 31 36 38 37 30 39 36 33 35 39 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1716870963594",null,null,null,
2024-05-28 04:36:07 UTC	518	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 28 May 2024 04:36:07 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-28 04:36:07 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-28 04:36:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49748	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:07 UTC	1590	OUT	GET /xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=syf9,aLUfP?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
2024-05-28 04:36:07 UTC	816	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1573 Date: Tue, 28 May 2024 04:36:07 GMT Expires: Wed, 28 May 2025 04:36:07 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 24 May 2024 19:07:04 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:07 UTC	574	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 64 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 48 74 3d 61 7d 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 79 28 22 61 4c 55 66 50 22 29 3b 0a 76 61 72 20 65 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 42 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4d 61 29 3b 76 61 72 20 62 3d 74 68 69 73 3b 74 68 69 73 2e 77 69 6e 64 6f 77 3d 61 2e 73 65 72 76 69 63 65 2e 77 69 6e 64 6f 77 2e 67 65 74 28 29 3b 74 68 69 73 2e 74 61 3d 74 68 69 73 2e 48 74 28 29 3b 74 68 69 73 2e 6f 61 3d 77 69 6e 64 6f Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{_.dqb=function(a){this.Ht=a};}catch(e){_._DumpException(e)}try{_.y("aLUfP");var eqb=function(a){_.Bn.call(this,a.Ma);var b=this;this.window=a.service.window.get();this.ta=this.Ht();this.oa=windo
2024-05-28 04:36:07 UTC	450	IN	Data Raw: 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 74 68 69 73 2e 6b 61 29 3b 74 68 69 73 2e 57 57 61 28 29 26 26 74 68 69 73 2e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 0a 74 68 69 73 2e 6b 61 29 7d 3b 5f 2e 42 28 65 71 62 2c 5f 2e 42 6e 29 3b 65 71 62 2e 56 61 3d 5f 2e 42 6e 2e 56 61 3b 65 71 62 2e 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 73 65 72 76 69 63 65 3a 7b 77 69 6e 64 6f 77 3a 5f 2e 45 6e 7d 7d 7d 3b 5f 2e 6d 3d 65 71 62 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 6d 2e 61 64 64 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 51 64 2e 61 64 64 28 61 29 7d 3b 5f 2e 6d 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 66 Data Ascii: ener("resize",this.ka);this.WWa()&&this.window.addEventListener("orientationchange",this.ka)};_.B(eqb,_.Bn);eqb.Va=_.Bn.Va;eqb.Ia=function(){return{service:{window:_.En}}};_.m=eqb.prototype;_.m.addListener=function(a){this.Qd.add(a)};_.m.removeListener=f
2024-05-28 04:36:07 UTC	549	IN	Data Raw: 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 29 29 7d 65 6c 73 65 20 61 3d 74 68 69 73 2e 49 63 28 29 7c 7c 28 5f 2e 6c 61 28 29 3f 5f 2e 6c 61 28 29 26 26 5f 2e 6a 61 28 29 26 26 21 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 63 6c 75 64 65 73 28 22 47 53 41 22 29 3a 74 68 69 73 2e 77 69 6e 64 6f 77 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 29 3f 5f 2e 6f 6c 28 74 68 69 73 2e 77 69 6e 64 6f 77 29 3a 6e 65 77 20 5f 2e 24 6b 28 74 68 69 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2c 74 68 69 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 3b 72 65 74 75 72 6e 20 61 2e 68 65 69 67 68 74 3c 61 2e 77 69 64 74 68 7d 3b 0a 5f 2e 6d 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 Data Ascii: s.window.innerWidth))}else a=this.Ic()\|\|(_.la()?_.la()&&_.ja()&&!navigator.userAgent.includes("GSA"):this.window.visualViewport)?_.ol(this.window):new _.$k(this.window.innerWidth,this.window.innerHeight);return a.height<a.width};_.m.destroy=function(){th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49749	142.250.185.100	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:07 UTC	2031	OUT	GET /async/hpba?vet=10ahUKEwiKp-ndwq-GAxVc9bsIHcE-BuQQj-0KCBU..i&ei=MF9VZorPINzq7_UPwf2YoA4&opi=89978449&yv=3&cs=0&async=isImageHp:false,eventId:MF9VZorPINzq7_UPwf2YoA4,_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA%2Fbr%3D1%2Frs%3DACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fck%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKQA-gkH [TRUNCATED] Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
2024-05-28 04:36:07 UTC	961	IN	HTTP/1.1 200 OK Version: 636065462 X-Content-Type-Options: nosniff Content-Type: text/plain; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:07 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-28 04:36:07 UTC	48	IN	Data Raw: 32 61 0d 0a 29 5d 7d 27 0a 32 32 3b 5b 22 4e 31 39 56 5a 75 48 37 48 71 36 6e 69 2d 67 50 5f 2d 57 41 2d 51 4d 22 2c 22 32 30 31 34 22 5d 0d 0a Data Ascii: 2a)]}'22;["N19VZuH7Hq6ni-gP_-WA-QM","2014"]
2024-05-28 04:36:07 UTC	41	IN	Data Raw: 32 33 0d 0a 33 3b 5b 32 5d 31 62 3b 3c 64 69 76 20 6a 73 6e 61 6d 65 3d 22 4e 6c 6c 30 6e 65 22 3e 3c 2f 64 69 76 3e 0d 0a Data Ascii: 233;[2]1b;<div jsname="Nll0ne"></div>
2024-05-28 04:36:07 UTC	12	IN	Data Raw: 37 0d 0a 33 3b 5b 39 5d 30 3b 0d 0a Data Ascii: 73;[9]0;
2024-05-28 04:36:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49751	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:07 UTC	1387	OUT	POST /gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=promo&rt=hpbas.4166&zx=1716870964052&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
2024-05-28 04:36:07 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-AKWW2xvIoOm_HxVFHFN_Pg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:07 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49752	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:07 UTC	1598	OUT	GET /xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=kMFpHd,sy8x,bm51tf?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
2024-05-28 04:36:07 UTC	816	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1670 Date: Tue, 28 May 2024 04:36:07 GMT Expires: Wed, 28 May 2025 04:36:07 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 24 May 2024 19:07:04 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:07 UTC	574	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 79 28 22 6b 4d 46 70 48 64 22 29 3b 0a 5f 2e 46 61 62 3d 6e 65 77 20 5f 2e 45 64 28 5f 2e 7a 4b 61 29 3b 0a 5f 2e 7a 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 76 61 72 20 4f 61 62 3b 5f 2e 50 61 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 74 68 69 73 2e 63 45 61 3d 61 3b 74 68 69 73 2e 58 71 64 3d 62 3b 74 68 69 73 2e 43 6b 62 3d 63 3b 74 68 69 73 2e 54 77 64 3d 64 3b 74 68 69 73 2e 68 4a 64 3d 65 3b 74 68 69 73 2e 53 61 62 3d 30 3b 74 68 69 73 2e 42 6b 62 3d 4f 61 62 28 74 68 69 73 Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{_.y("kMFpHd");_.Fab=new _.Ed(_.zKa);_.z();}catch(e){_._DumpException(e)}try{var Oab;_.Pab=function(a,b,c,d,e){this.cEa=a;this.Xqd=b;this.Ckb=c;this.Twd=d;this.hJd=e;this.Sab=0;this.Bkb=Oab(this
2024-05-28 04:36:07 UTC	450	IN	Data Raw: 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 79 28 22 62 6d 35 31 74 66 22 29 3b 0a 76 61 72 20 52 61 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 7d 3b 5f 2e 47 61 28 61 2e 54 72 62 28 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 62 5b 65 5d 3d 21 30 7d 29 3b 76 61 72 20 63 3d 61 2e 4f 71 62 28 29 2c 64 3d 61 2e 67 72 62 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 50 61 62 28 61 2e 66 72 62 28 29 2c 31 45 33 2a 63 2e 6b 61 28 29 2c 61 2e 6b 68 62 28 29 2c 31 45 33 2a 64 2e 6b 61 28 29 2c 62 29 7d 2c 53 61 62 3d 21 21 28 5f 2e 4f 67 5b 32 33 5d 26 33 32 29 3b 76 61 72 20 55 61 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 42 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4d 61 29 3b 74 68 69 73 2e 45 67 3d 6e 75 6c 6c 3b 74 68 69 73 Data Ascii: ption(e)}try{_.y("bm51tf");var Rab=function(a){var b={};_.Ga(a.Trb(),function(e){b[e]=!0});var c=a.Oqb(),d=a.grb();return new _.Pab(a.frb(),1E3c.ka(),a.khb(),1E3d.ka(),b)},Sab=!!(_.Og[23]&32);var Uab=function(a){_.Bn.call(this,a.Ma);this.Eg=null;this
2024-05-28 04:36:07 UTC	646	IN	Data Raw: 6f 74 79 70 65 2e 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 31 21 3d 74 68 69 73 2e 43 61 2e 67 65 74 54 79 70 65 28 61 2e 4b 6c 28 29 29 29 72 65 74 75 72 6e 20 5f 2e 6a 61 62 28 61 29 3b 76 61 72 20 63 3d 74 68 69 73 2e 74 61 2e 6b 61 3b 28 63 3d 63 3f 52 61 62 28 63 29 3a 6e 75 6c 6c 29 26 26 63 2e 79 6a 61 28 29 3f 28 62 3d 56 61 62 28 74 68 69 73 2c 61 2c 62 2c 63 29 2c 61 3d 6e 65 77 20 5f 2e 66 61 62 28 61 2c 62 2c 32 29 29 3a 61 3d 5f 2e 6a 61 62 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 76 61 72 20 56 61 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 63 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 53 61 62 29 Data Ascii: otype.oa=function(a,b){if(1!=this.Ca.getType(a.Kl()))return _.jab(a);var c=this.ta.ka;(c=c?Rab(c):null)&&c.yja()?(b=Vab(this,a,b,c),a=new _.fab(a,b,2)):a=_.jab(a);return a};var Vab=function(a,b,c,d){return c.then(function(e){return e},function(e){if(Sab)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49753	216.58.206.46	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:08 UTC	742	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
2024-05-28 04:36:08 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 28 May 2024 04:36:08 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:08 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-28 04:36:08 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49756	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:08 UTC	1312	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
2024-05-28 04:36:08 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 23:54:54 GMT Expires: Tue, 04 Jun 2024 23:54:54 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 16874 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:08 UTC	684	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-05-28 04:36:08 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<
2024-05-28 04:36:08 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-05-28 04:36:08 UTC	1390	IN	Data Raw: 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBF!4I
2024-05-28 04:36:08 UTC	576	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49757	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:08 UTC	1397	OUT	GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=MF9VZorPINzq7_UPwf2YoA4&zx=1716870967073&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
2024-05-28 04:36:08 UTC	839	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-_63RSVSK1QKQikwlTvGYgw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:08 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-05-28-04; expires=Thu, 27-Jun-2024 04:36:08 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49755	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:08 UTC	1370	OUT	POST /gen_204?atyp=i&ei=MF9VZorPINzq7_UPwf2YoA4&dt19=2&zx=1716870964057&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
2024-05-28 04:36:08 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-y0jDGGpgDT8sJ7qbESHVSQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:08 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49758	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:08 UTC	1540	OUT	POST /gen_204?atyp=csi&ei=Nl9VZviTJduA9u8PxbKskAQ&s=async&astyp=hpba&ima=0&imn=0&mem=ujhs.6,tjhs.10,jhsl.2173,dm.8&nv=ne.1,feid.6192e56c-22dd-43d1-a29a-aec2417b2275&hp=&rt=ttfb.1874,st.1875,bs.27,aaft.1876,acrt.1877,art.1877&zx=1716870965929&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
2024-05-28 04:36:08 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-P8T28Fjnoc5WVss0lTP-5A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:08 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49759	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:08 UTC	1399	OUT	POST /gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=promo&rt=hpbas.4166,hpbarr.1878&zx=1716870965930&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
2024-05-28 04:36:09 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-dTGQCx3fjPJfTq_bUt9xJg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:09 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49760	142.250.185.100	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:09 UTC	724	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
2024-05-28 04:36:09 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 27 May 2024 19:48:33 GMT Expires: Tue, 04 Jun 2024 19:48:33 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 31656 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-28 04:36:09 UTC	684	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-05-28 04:36:09 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<
2024-05-28 04:36:09 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-05-28 04:36:09 UTC	1390	IN	Data Raw: 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBF!4I
2024-05-28 04:36:09 UTC	576	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49761	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:10 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-28 04:36:10 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=127984 Date: Tue, 28 May 2024 04:36:10 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49762	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:11 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1t2AmCUVP2FNfrk&MD=sMBkGfba HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-28 04:36:11 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: ada6b5c2-92e5-4d9c-8116-3732200a0b86 MS-RequestId: 448b2008-6413-411f-9eff-348b7cee8ff7 MS-CV: M26ucYmXQk2SyaRJ.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 28 May 2024 04:36:10 GMT Connection: close Content-Length: 24490
2024-05-28 04:36:11 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-05-28 04:36:11 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49763	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:11 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-28 04:36:11 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=128066 Date: Tue, 28 May 2024 04:36:11 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-28 04:36:11 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49764	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:19 UTC	1451	OUT	POST /gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=jsa&jsi=hd,st.23579,t.0,at.1,et.click,n.vZr2rb,cn.1,ie.0,vi.1&zx=1716870978292&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA; 1P_JAR=2024-05-28-04
2024-05-28 04:36:19 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-iNvBddFXZIT-UXLxwWTLsQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:19 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49765	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:20 UTC	1446	OUT	POST /gen_204?atyp=i&ei=MF9VZorPINzq7_UPwf2YoA4&ved=0ahUKEwiKp-ndwq-GAxVc9bsIHcE-BuQQ39UDCAY&bl=RxPw&s=webhp&zx=1716870978292&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA; 1P_JAR=2024-05-28-04
2024-05-28 04:36:20 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-BhO45I9MWaP6pAG4wDybzw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:20 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49766	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:20 UTC	1427	OUT	POST /gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=webhp&nt=navigate&t=fi&st=23478&fid=1&zx=1716870978293&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA; 1P_JAR=2024-05-28-04
2024-05-28 04:36:20 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-jbCO10g2QlV2DXYv0I0lEQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:20 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49767	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:20 UTC	1455	OUT	POST /gen_204?atyp=csi&ei=MF9VZorPINzq7_UPwf2YoA4&s=jsa&jsi=hd,st.24086,tni.0,atni.1,et.click,n.vZr2rb,cn.2,ie.0,vi.1&zx=1716870978798&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA; 1P_JAR=2024-05-28-04
2024-05-28 04:36:20 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-9ZGAtuHOLCkweR384lb9Ew' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:20 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49768	142.250.186.68	443	6256	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:20 UTC	1446	OUT	POST /gen_204?atyp=i&ei=MF9VZorPINzq7_UPwf2YoA4&ved=0ahUKEwiKp-ndwq-GAxVc9bsIHcE-BuQQ39UDCAY&bl=RxPw&s=webhp&zx=1716870978799&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA; 1P_JAR=2024-05-28-04
2024-05-28 04:36:20 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Zrw1NhZSXUmBmbeyFcYmMg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Tue, 28 May 2024 04:36:20 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49769	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-05-28 04:36:48 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1t2AmCUVP2FNfrk&MD=sMBkGfba HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-28 04:36:49 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_1440" MS-CorrelationId: d06494db-15c3-4c53-9ce7-844d8a079bda MS-RequestId: c24911a1-14f0-44bf-a164-d99dc7dac08e MS-CV: onlp9Oi6Fk25sX9I.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 28 May 2024 04:36:48 GMT Connection: close Content-Length: 25457
2024-05-28 04:36:49 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-05-28 04:36:49 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	00:35:53
Start date:	28/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://online.systems.com.pk/
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	00:35:54
Start date:	28/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1932,i,11302382915843023677,13515464872013767238,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: online.systems.com.pkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: be-isabel-6-eu-online.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/d=1/ed=1/br=1/rs=ACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=1/ed=1/dg=2/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aZ61od:arTwJ;af0EJf:ghinId;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;sZmdvc:rdGEfc;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "
Source: global traffic	HTTP traffic detected: GET /images/hpp/us-flag.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=MF9VZorPINzq7_UPwf2YoA4.1716870962202&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /images/hpp/us-flag.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en HTTP/1.1Host: ogs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=3/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/ck=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKQA-gkHQAGwIQgAAEAAAAAAIQAAAgAQgPcEQAigAAQCAGAAiCAAD2UCAAQyAQEQQASQBAI5CABABGMYgFQAYAAAAAACJAAAABxAwAACAyIAAh5CAAABOkEAFgAAEsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=1/exm=SNUn3,cEt90b,cdos,csi,d,dtl0hd,eHDfl,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/ed=1/dg=0/br=1/ujg=1/rs=ACT90oHImSEwQ9-p7fjPGqD0ykhIDf0pzg/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aZ61od:arTwJ;af0EJf:ghinId;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;sZmdvc:rdGEfc;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=B2qlPe,DhPYme,GU4Gab,MpJwZc,NzU6V,UUJqVe,Wo3n8,aa,abd,async,epYOx,ifl,ms4mZb,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch?xjs=s1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safa
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1280&bih=907&ei=MF9VZorPINzq7_UPwf2YoA4&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=MF9VZorPINzq7_UPwf2YoA4.1716870962202&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /images/hpp/ic_wahlberg_product_core_48.png8.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ogs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/d=0/br=1/rs=ACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw/m=syk9?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=3/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=sy1c7,P10Owf,sypl,sy1at,sy1av,gSZvdb,syva,syvb,WlNQGd,syvo,syvq,nabPbb,sypk,sypm,sypn,sypq,DPreE,syk9,syv3,syv5,CnSW2d,kQvlef,syvp,fXO0xe?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /images/hpp/ic_wahlberg_product_core_48.png8.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /client_204?cs=1&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /async/hpba?vet=10ahUKEwiKp-ndwq-GAxVc9bsIHcE-BuQQj-0KCBU..i&ei=MF9VZorPINzq7_UPwf2YoA4&opi=89978449&yv=3&cs=0&async=isImageHp:false,eventId:MF9VZorPINzq7_UPwf2YoA4,_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA%2Fbr%3D1%2Frs%3DACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fck%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKQA-gkHQAGwIQgAAEAAAAAAIQAAAgAQgPcEQAigAAQCAGAAiCAAD2UCAAQyAQEQQASQBAI5CABABGMYgFQAYAAAAAACJAAAABxAwAACAyIAAh5CAAABOkEAFgAAEsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHImSEwQ9-p7fjPGqD0ykhIDf0pzg,_fmt:prog,_id:a3JU5b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=eG8DTn4uCklpq3CtcePntlYlKv6ykPglRm_3LCjvA0Pg5NTrfky4aQwW5wNCPdZzxmWRkHBIWVudWvr_jhZgV2s9xhvVWi78foDmmglUk6bqLSe9BCzAONe3vpWJmGaqgMzqOcPBKXc5G-pX03F-dHdOArdw9CxgyiMAUoOKK2Lin3GJ-j8
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.hd.p0rTci6WNV8.L.B1.O/am=AEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA/d=0/br=1/rs=ACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw/m=syk9?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; NID=514=rMMA5LtHTsU4tLY76jrNaaGeNbg7StMkvV-ekhuUo2GTqdd87nRYg3NlKL6bBCKrseIgefYrbf0VYfv9B6SuKpc6HrlAp_WZSKc_m892rbQP7x78qlkOsdQrIP7aKJLTeU0HmoyzUD0xWrGN8iloUkON2wclidItMm-9Dv4yNNY; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=syf9,aLUfP?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
Source: global traffic	HTTP traffic detected: GET /async/hpba?vet=10ahUKEwiKp-ndwq-GAxVc9bsIHcE-BuQQj-0KCBU..i&ei=MF9VZorPINzq7_UPwf2YoA4&opi=89978449&yv=3&cs=0&async=isImageHp:false,eventId:MF9VZorPINzq7_UPwf2YoA4,_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKAA8AkHQACwIQAAAEAAAAAAAAAAAgAAAOMEAACAAAQCAGAAACAAAAAAAAQCAAEQQASQBAIZCABABGMYgFQAYAAAAAACJAAAAABAQAACAyIAAh5CAAABOkEAEgAAEMAAgwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABQAAAAAAAAAAAAAAAAAAgA%2Fbr%3D1%2Frs%3DACT90oGE-pNkmUMzklMXqlDm_p6pMIqxLw,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.n-jycPV9838.O%2Fck%3Dxjs.hd.p0rTci6WNV8.L.B1.O%2Fam%3DAEYBAAAAAAAABgAAAAAAAAAAAAAAAAAQAAABAAAAAKQA-gkHQAGwIQgAAEAAAAAAIQAAAgAQgPcEQAigAAQCAGAAiCAAD2UCAAQyAQEQQASQBAI5CABABGMYgFQAYAAAAAACJAAAABxAwAACAyIAAh5CAAABOkEAFgAAEsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHImSEwQ9-p7fjPGqD0ykhIDf0pzg,_fmt:prog,_id:a3JU5b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.n-jycPV9838.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAIQACgAAQAEAAAgAAAAAAAAAIQAAAgAQgPcAQAggAAQCAGAAiCAAD2UCAAQwAQAAAAQABAIgCAAABAAAAFAAAAAAAAAAAAAAABxAgAAAAAAAAAAAAAAAOgEABAAAAsAAgwAAEAAAAIA8AAQHwCAFAQAAAAAAAAAAAABAABIEcyEBBREQAAAAAAAAAAAAAAAApKQTCxs/d=0/dg=0/br=1/rs=ACT90oEYfXmAmlb35bMIgcRlfCgBc-nLQQ/m=kMFpHd,sy8x,bm51tf?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=MF9VZorPINzq7_UPwf2YoA4&zx=1716870967073&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwT5sKdrkZp4z8gp1JJoK4gWGi1v5objnrc2H3AbsCo785wmCjpAg; OGPC=19037049-1:; NID=514=uAn9SE-UwzUueBwCl2D2LDIBmw609covjS9bwB9eKucQJGgJC-tz1ECPFN4MXbrnBfKinwTkBAq6AMRnO-7Q9D2uWOA_LTOw50U-qc2uzpuopyhj-8SR1w6Ti4BAe4QZKHNSDo5t2DvrezgYn1xVUWsAbSlnYYWTfAsY12Qaow5rDu7CmWk-QA
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1t2AmCUVP2FNfrk&MD=sMBkGfba HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1t2AmCUVP2FNfrk&MD=sMBkGfba HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: online.systems.com.pk
Source: global traffic	DNS traffic detected: DNS query: be-isabel-6-eu-online.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ogs.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.178
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://online.systems.com.pk/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Windows Analysis Report
https://online.systems.com.pk/