Edit tour

Windows Analysis Report
https://691tx8z8.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink

Overview

General Information

Sample URL:	https://691tx8z8.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%252525
Analysis ID:	1456195
Infos:

Detection

Score:	21
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Very long command line found

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://691tx8z8.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink.me%2525252FoRT7%2525253F%2525252526c%252525253DPartnerize%2525252526af_siteid%252525253D1100l998%2525252526is_retargeting%252525253Dtrue%2525252526af_reengagement_window%252525253D30d%2525252526af_click_lookback%252525253D7d%2525252526af_media_type%252525253Dweb%2525252526clickid%252525253D%2525252526af_r%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.ln-cc.com%25252525252Fen%25252525252Fspecial-25%25252525252Fvintage-check-belt-bag-in-yellow-bur0137022bei.html%25252525253Fcgid%25252525253Dspecial-25%252525252526app_clickref%25252525253D%252525252526utm_source%25252525253DPZ%252525252526utm_medium%25252525253Daffiliate%252525252526utm_campaign%25252525253Decentime-nl%2525252526af_web_dp%252525253Dhttps%2525253A%2525252F%2525252Fu45053809.ct.sendgrid.net%25252525252Fls%25252525252Fclick%25252525253Fupn%25252525253Du001.H95mKvhWqpGdhokI6nNItidg1txkeoFEgxGKXlI44onsabikbCnyliJzb0vBxy0DfiVxxsKvbhSWesGw07IKKBHi7hAxjb-2BcdKAUwQVIabDkIyNUwRjJEDputJkdWEI-2BxZVIVZYTJA9asey4acxfz2i-2ByrqSAxgA82UN0-2BTCac20AJxFy1lyKC6TQIGjGrX-2BbdGXZUfzbJvrAr-2FOgTKQuAwazCfU8qFpi-2BuPngVf53o-3DWgIo_OgB8xwcw4MS8-2FaRsyv2i3s7PXuQKTt36zz-2FUlIfqOL1lOv-2Bm67D-2FZb97F8PzjBM-2BA3LRKR0I6ycPTMIk86EsfI4jdVMqvYuh0irneEo5umFvmZ5m3Urmq4rXahJS9PjP7iLSxkmtWGQjX8kaXnD7-2F17-2FQfzGjVXpuF-2FRf0CCdsVbOeOKM-2FC5wCJ57IT4Pd0L4UjNimWc-2BJJPoREjxZCPmr8nwbvKwWzrXKNz0gRgcmnJCuN0NpnFtHSD-2B-2FNly7LDxcWYLmDS3yjcAMLGwjyClzlpNgTSd20lURDh-2FCHUNNFvOxTpX93a7Qw5b4R-2Fjn19SJz-2FRm12hNEx37BaqmWT-2FvU6AShGShz7vBYl6JkTlBcE3S1JayqJauv-2FVZsbHDJQm-2FnTokvXgrqZXmT-2F7OExZc0Yw-2B9Bk-2FVlZgGUV5unvYZNzPbXCdXWJvRSnKFJ73g7%25252526c%2525253DE%2525252C1%2525252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MC MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1688,i,106507902797914291,16263077713809333994,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 943sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded;charset=UTF-8Accept: */*Origin: chrome-untrusted://new-tab-pageX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_65.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_68.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_68.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_68.1.dr, chromecache_65.1.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_68.1.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_68.1.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_68.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_68.1.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_65.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_65.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_65.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_65.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_65.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_68.1.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_68.1.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_68.1.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_68.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_68.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_65.1.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_65.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_65.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.133:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.33.206:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.15.253:443 -> 192.168.2.16:49733 version: TLS 1.2

System Summary

Very long command line found

Source: unknown

Process created: Commandline size = 2094

Source: classification engine

Classification label: sus21.win@22/26@12/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://691tx8z8.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink.me%2525252FoRT7%2525253F%2525252526c%252525253DPartnerize%2525252526af_siteid%252525253D1100l998%2525252526is_retargeting%252525253Dtrue%2525252526af_reengagement_window%252525253D30d%2525252526af_click_lookback%252525253D7d%2525252526af_media_type%252525253Dweb%2525252526clickid%252525253D%2525252526af_r%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.ln-cc.com%25252525252Fen%25252525252Fspecial-25%25252525252Fvintage-check-belt-bag-in-yellow-bur0137022bei.html%25252525253Fcgid%25252525253Dspecial-25%252525252526app_clickref%25252525253D%252525252526utm_source%25252525253DPZ%252525252526utm_medium%25252525253Daffiliate%252525252526utm_campaign%25252525253Decentime-nl%2525252526af_web_dp%252525253Dhttps%2525253A%2525252F%2525252Fu45053809.ct.sendgrid.net%25252525252Fls%25252525252Fclick%25252525253Fupn%25252525253Du001.H95mKvhWqpGdhokI6nNItidg1txkeoFEgxGKXlI44onsabikbCnyliJzb0vBxy0DfiVxxsKvbhSWesGw07IKKBHi7hAxjb-2BcdKAUwQVIabDkIyNUwRjJEDputJkdWEI-2BxZVIVZYTJA9asey4acxfz2i-2ByrqSAxgA82UN0-2BTCac20AJxFy1lyKC6TQIGjGrX-2BbdGXZUfzbJvrAr-2FOgTKQuAwazCfU8qFpi-2BuPngVf53o-3DWgIo_OgB8xwcw4MS8-2FaRsyv2i3s7PXuQKTt36zz-2FUlIfqOL1lOv-2Bm67D-2FZb97F8PzjBM-2BA3LRKR0I6ycPTMIk86EsfI4jdVMqvYuh0irneEo5umFvmZ5m3Urmq4rXahJS9PjP7iLSxkmtWGQjX8kaXnD7-2F17-2FQfzGjVXpuF-2FRf0CCdsVbOeOKM-2FC5wCJ57IT4Pd0L4UjNimWc-2BJJPoREjxZCPmr8nwbvKwWzrXKNz0gRgcmnJCuN0NpnFtHSD-2B-2FNly7LDxcWYLmDS3yjcAMLGwjyClzlpNgTSd20lURDh-2FCHUNNFvOxTpX93a7Qw5b4R-2Fjn19SJz-2FRm12hNEx37BaqmWT-2FvU6AShGShz7vBYl6JkTlBcE3S1JayqJauv-2FVZsbHDJQm-2FnTokvXgrqZXmT-2F7OExZc0Yw-2B9Bk-2FVlZgGUV5unvYZNzPbXCdXWJvRSnKFJ73g7%25252526c%2525253DE%2525252C1%2525252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MC
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1688,i,106507902797914291,16263077713809333994,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1688,i,106507902797914291,16263077713809333994,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://691tx8z8.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink.me%2525252FoRT7%2525253F%2525252526c%252525253DPartnerize%2525252526af_siteid%252525253D1100l998%2525252526is_retargeting%252525253Dtrue%2525252526af_reengagement_window%252525253D30d%2525252526af_click_lookback%252525253D7d%2525252526af_media_type%252525253Dweb%2525252526clickid%252525253D%2525252526af_r%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.ln-cc.com%25252525252Fen%25252525252Fspecial-25%25252525252Fvintage-check-belt-bag-in-yellow-bur0137022bei.html%25252525253Fcgid%25252525253Dspecial-25%252525252526app_clickref%25252525253D%252525252526utm_source%25252525253DPZ%252525252526utm_medium%25252525253Daffiliate%252525252526utm_campaign%25252525253Decentime-nl%2525252526af_web_dp%252525253Dhttps%2525253A%2525252F%2525252Fu45053809.ct.sendgrid.net%25252525252Fls%25252525252Fclick%25252525253Fupn%25252525253Du001.H95mKvhWqpGdhokI6nNItidg1txkeoFEgxGKXlI44onsabikbCnyliJzb0vBxy0DfiVxxsKvbhSWesGw07IKKBHi7hAxjb-2BcdKAUwQVIabDkIyNUwRjJEDputJkdWEI-2BxZVIVZYTJA9asey4acxfz2i-2ByrqSAxgA82UN0-2BTCac20AJxFy1lyKC6TQIGjGrX-2BbdGXZUfzbJvrAr-2FOgTKQuAwazCfU8qFpi-2BuPngVf53o-3DWgIo_OgB8xwcw4MS8-2FaRsyv2i3s7PXuQKTt36zz-2FUlIfqOL1lOv-2Bm67D-2FZb97F8PzjBM-2BA3LRKR0I6ycPTMIk86EsfI4jdVMqvYuh0irneEo5umFvmZ5m3Urmq4rXahJS9PjP7iLSxkmtWGQjX8kaXnD7-2F17-2FQfzGjVXpuF-2FRf0CCdsVbOeOKM-2FC5wCJ57IT4Pd0L4UjNimWc-2BJJPoREjxZCPmr8nwbvKwWzrXKNz0gRgcmnJCuN0NpnFtHSD-2B-2FNly7LDxcWYLmDS3yjcAMLGwjyClzlpNgTSd20lURDh-2FCHUNNFvOxTpX93a7Qw5b4R-2Fjn19SJz-2FRm12hNEx37BaqmWT-2FvU6AShGShz7vBYl6JkTlBcE3S1JayqJauv-2FVZsbHDJQm-2FnTokvXgrqZXmT-2F7OExZc0Yw-2B9Bk-2FVlZgGUV5unvYZNzPbXCdXWJvRSnKFJ73g7%25252526c%2525253DE%2525252C1%2525252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MC	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://www.broofa.com	0%	URL Reputation	safe
https://ipinfo.io/	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	0%	Avira URL Cloud	safe
https://www.google.com/async/ddljson?async=ntp:2	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	0%	Avira URL Cloud	safe
https://csp.withgoogle.com/csp/lcreport/	0%	Avira URL Cloud	safe
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.JHoMBbBABZg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo_6Zf8M75AJqSyaaLg_vD7Vr9kevQ/cb=gapi.loaded_0	0%	Avira URL Cloud	safe
https://www.google.com/async/newtab_promos	0%	Avira URL Cloud	safe
https://plus.google.com	0%	Avira URL Cloud	safe
https://clients6.google.com	0%	Avira URL Cloud	safe
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	0%	Avira URL Cloud	safe
https://domains.google.com/suggest/flow	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
plus.l.google.com	142.250.185.142	true	false	unknown
play.google.com	142.250.185.206	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
baconredirects-elb-1w79jy7i6g0wf-1154668140.us-east-1.elb.amazonaws.com	54.146.166.145	true	false	unknown
691tx8z8.r.us-east-1.awstrack.me	unknown	unknown	true	unknown
apis.google.com	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/async/ddljson?async=ntp:2	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/	false	URL Reputation: safe	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.JHoMBbBABZg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo_6Zf8M75AJqSyaaLg_vD7Vr9kevQ/cb=gapi.loaded_0	false	Avira URL Cloud: safe	unknown
https://www.google.com/async/newtab_promos	false	Avira URL Cloud: safe	unknown
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.broofa.com	chromecache_65.1.dr	false	URL Reputation: safe	unknown
https://csp.withgoogle.com/csp/lcreport/	chromecache_68.1.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com	chromecache_68.1.dr, chromecache_65.1.dr	false	URL Reputation: safe	unknown
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_68.1.dr	false	Avira URL Cloud: safe	unknown
https://domains.google.com/suggest/flow	chromecache_68.1.dr	false	Avira URL Cloud: safe	unknown
https://clients6.google.com	chromecache_68.1.dr	false	Avira URL Cloud: safe	unknown
https://plus.google.com	chromecache_68.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.206	play.google.com	United States	15169	GOOGLEUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.142	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
54.146.166.145	baconredirects-elb-1w79jy7i6g0wf-1154668140.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.16
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1456195
Start date and time:	2024-06-12 21:04:46 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://691tx8z8.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink.me%2525252FoRT7%2525253F%2525252526c%252525253DPartnerize%2525252526af_siteid%252525253D1100l998%2525252526is_retargeting%252525253Dtrue%2525252526af_reengagement_window%252525253D30d%2525252526af_click_lookback%252525253D7d%2525252526af_media_type%252525253Dweb%2525252526clickid%252525253D%2525252526af_r%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.ln-cc.com%25252525252Fen%25252525252Fspecial-25%25252525252Fvintage-check-belt-bag-in-yellow-bur0137022bei.html%25252525253Fcgid%25252525253Dspecial-25%252525252526app_clickref%25252525253D%252525252526utm_source%25252525253DPZ%252525252526utm_medium%25252525253Daffiliate%252525252526utm_campaign%25252525253Decentime-nl%2525252526af_web_dp%252525253Dhttps%2525253A%2525252F%2525252Fu45053809.ct.sendgrid.net%25252525252Fls%25252525252Fclick%25252525253Fupn%25252525253Du001.H95mKvhWqpGdhokI6nNItidg1txkeoFEgxGKXlI44onsabikbCnyliJzb0vBxy0DfiVxxsKvbhSWesGw07IKKBHi7hAxjb-2BcdKAUwQVIabDkIyNUwRjJEDputJkdWEI-2BxZVIVZYTJA9asey4acxfz2i-2ByrqSAxgA82UN0-2BTCac20AJxFy1lyKC6TQIGjGrX-2BbdGXZUfzbJvrAr-2FOgTKQuAwazCfU8qFpi-2BuPngVf53o-3DWgIo_OgB8xwcw4MS8-2FaRsyv2i3s7PXuQKTt36zz-2FUlIfqOL1lOv-2Bm67D-2FZb97F8PzjBM-2BA3LRKR0I6ycPTMIk86EsfI4jdVMqvYuh0irneEo5umFvmZ5m3Urmq4rXahJS9PjP7iLSxkmtWGQjX8kaXnD7-2F17-2FQfzGjVXpuF-2FRf0CCdsVbOeOKM-2FC5wCJ57IT4Pd0L4UjNimWc-2BJJPoREjxZCPmr8nwbvKwWzrXKNz0gRgcmnJCuN0NpnFtHSD-2B-2FNly7LDxcWYLmDS3yjcAMLGwjyClzlpNgTSd20lURDh-2FCHUNNFvOxTpX93a7Qw5b4R-2Fjn19SJz-2FRm12hNEx37BaqmWT-2FvU6AShGShz7vBYl6JkTlBcE3S1JayqJauv-2FVZsbHDJQm-2FnTokvXgrqZXmT-2F7OExZc0Yw-2B9Bk-2FVlZgGUV5unvYZNzPbXCdXWJvRSnKFJ73g7%25252526c%2525253DE%2525252C1%2525252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MC
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus21.win@22/26@12/8

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 216.58.212.142, 142.251.168.84, 34.104.35.123, 93.184.221.240, 142.250.185.163, 142.250.181.227, 142.250.186.142
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://691tx8z8.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink.me%2525252FoRT7%2525253F%2525252526c%252525253DPartnerize%2525252526af_siteid%252525253D1100l998%2525252526is_retargeting%252525253Dtrue%2525252526af_reengagement_window%252525253D30d%2525252526af_click_lookback%252525253D7d%2525252526af_media_type%252525253Dweb%2525252526clickid%252525253D%2525252526af_r%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.ln-cc.com%25252525252Fen%25252525252Fspecial-25%25252525252Fvintage-check-belt-bag-in-yellow-bur0137022bei.html%25252525253Fcgid%25252525253Dspecial-25%252525252526app_clickref%25252525253D%252525252526utm_source%25252525253DPZ%252525252526utm_medium%25252525253Daffiliate%252525252526utm_campaign%25252525253Decentime-nl%2525252526af

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jun 12 18:05:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.991268854688272
Encrypted:	false
SSDEEP:	48:82drTzT+H3idAKZdA1FehwiZUklqehXy+3:8ebmoy
MD5:	22616EAC54E8DA34DB9E7F883AB12814
SHA1:	AEAA296831FC846F7C56E686764899486F875992
SHA-256:	578712BF9E9E36D76E33388460CDCD55B934FCA715846F888FE7BBE35DE3DDD2
SHA-512:	2562781EDBC6FEB997B4F7A1A8C56425C5FACD127758546E4E322B92826AB870E6216FC28E55279ACA9E5609551493576A6986A08E585997FAA6DB2AC5C7C550
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....%.v....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............0......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jun 12 18:05:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.0068835864789145
Encrypted:	false
SSDEEP:	48:8kdrTzT+H3idAKZdA1seh/iZUkAQkqehYy+2:80bg9QNy
MD5:	3A6021FAA823CD23322142814B31D814
SHA1:	C9F1E4C2CFE1D04E67D99AB62E8CF653B453D412
SHA-256:	D8AAC28E7E2E711229B967203B14BBB3BD7B08668C3182139974AFCD359EAA0D
SHA-512:	C37D6F6963D082CF2DD64F5661CC53B0D5350118260F686B048120FF5C7347C3BBF44510D1D764B9AA6DDABB1215E2AA95C14763A79CF57E7052DE19FDDF25D2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......wv....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............0......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.012604362244201
Encrypted:	false
SSDEEP:	48:8cdrTzTAH3idAKZdA14meh7sFiZUkmgqeh7sWy+BX:88bin8y
MD5:	F6D97D0C9EC6C8A930EC109B83CB482B
SHA1:	6FAC25CF17E5BB586E07506281B111C92633DBDF
SHA-256:	2BA9F2560EC8BBCA29CDF8E004B9990916E620E2C6862F6EEEAD238D64EDD0C3
SHA-512:	DA749EA22AA983AAA39CAFFE94C8CD51BDB31C1106872A20EB14140FA9BA7596698794F8E247885AB9EB08C324423820DE13A0A51A220461FB91DEE8DF82FA67
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............0......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jun 12 18:05:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.002207412406363
Encrypted:	false
SSDEEP:	48:8ddrTzT+H3idAKZdA1TehDiZUkwqehky+R:87b7ey
MD5:	6ADB9C8CE80C256F6190C9C8F1611776
SHA1:	9D97C41253F3C63DE4DD2908A684BDEB26A55B61
SHA-256:	91D5CDF1405CB8FBDB0E2926CF05300D351BD0F871E285F3ED26CAF5DA5D104A
SHA-512:	A986FDCF9E2C08A9F81283295B7856AE59EC3AD8D53BD0833503B3141CD6825196D26ACF65010F40C7A7162C341352109C14ECE46751C0E0634C393F1F470DC8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....apv....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............0......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jun 12 18:05:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9942611463810263
Encrypted:	false
SSDEEP:	48:8RdrTzT+H3idAKZdA1dehBiZUk1W1qeh6y+C:8Xb79ay
MD5:	27DE72E76BACC7E40623AC741D985AE5
SHA1:	FD4924EA86142A37932D585899CF1ECAA150ED11
SHA-256:	724367E99C2BC8601C489F2626E64CAA2ECC2976255F5EB93E32E8DA1BDC6CBA
SHA-512:	67284E697AA04679137DC6C8BABE798463B3AD7C862808B4C4E45FFFDAB59F8C1BA39F7D68D9313E200993C51D47F06FCE4CC7FDE855D4C6A184CE84355BCE59
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......~v....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............0......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jun 12 18:05:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.0042302371636245
Encrypted:	false
SSDEEP:	48:8xdrTzT+H3idAKZdA1duTeehOuTbbiZUk5OjqehOuTb8y+yT+:83bfTfTbxWOvTb8y7T
MD5:	3089ABFFF264B13CC6BB5E4F53EEB173
SHA1:	86E04287C4053D0A7DA9FFCE0F0EDCBA1E7993DF
SHA-256:	81320A317A7F1D9FF9C4FAA4671150A28C5394B2CA6074A8E826425A909548EF
SHA-512:	BE4F65DE3C18DAB223FD4886CF0B05CB46309BD898B88BE810C26BA5EE85BC4377E5F6EDCCEE2A5C60D335BD528945F31EE9CCE8911E4EE1F98AD47DC15891F6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....#hv....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............0......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14594)
Category:	downloaded
Size (bytes):	14599
Entropy (8bit):	5.715871629416031
Encrypted:	false
SSDEEP:	384:EIR6666607IGwuiHEKIUnAV3u6666lrQvIH6666MU66666q2GozTHPX:LhwAV30QV/
MD5:	AEF4097391AA40C13DF370E6DFB5445C
SHA1:	8C2794A0940B01A432625BB32CED2B75C083806B
SHA-256:	96B278F1C5864F89E8250F2E1793E0A44338C03893F58FAAD8001DCA19A53FFF
SHA-512:	7F5542D028EA193D82DF62D9BE0F5E80FF77881D646E84C510D62368B7B856D924D79C214220CCEC2DEBD4853FAD9537806564534B3E41AB7D2A56ED70BB40BA
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["nicole kidman practical magic","jesus christ childhood","amari cooper contract","cod","cod","cod","userfornia minimum wage hike","pope francis"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"google:entityinfo":"CggvbS8wbTl0dxIdUHJhY3RpY2FsIE1hZ2ljIOKAlCAxOTk4IGZpbG0yrxZkYXRhOmltYWdlL2pwZWc7YmFzZTY0LC85ai80QUFRU2taSlJnQUJBUUFBQVFBQkFBRC8yd0NFQUFrR0J3Z0hCZ2tJQndnS0Nna0xEUllQRFF3TURSc1VGUkFXSUIwaUlpQWRIeDhrS0RRc0pDWXhKeDhmTFQwdE1UVTNPam82SXlzL1JEODRRelE1T2pjQkNnb0tEUXdOR2c4UEdqY2xIeVUzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM04vL0FBQkVJQUVBQVFBTUJFUUFDRVFFREVRSC94QUFiQUFBQkJRRUJBQUFBQUFBQUFBQUFBQUFHQWdNRUJRY0lBZi9FQURZUUFBSUJBd01DQkFNRkJ3VUFBQUFBQUFFQ0F3UUZFUUFTSVFZeEUwRlJZUWNVSWpKQ2NZR1JGU01rVW5LaHNUTmkwZUh3LzhRQUdRRUFBZ01CQUFBQUFBQUFBQUFBQUFBQUFnTUFBUVFGLzhRQUp4RUFBZ0lCQkFJQkJBTUJBQUFBQUFBQUFRSUFFUU1FRWlFeElrRlJFek

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (813)
Category:	downloaded
Size (bytes):	818
Entropy (8bit):	5.157109088286641
Encrypted:	false
SSDEEP:	24:F6lfG2i8bIwGBHslgT9lCuABuoB7HHHHHHHYqmffffffo:F6ljiU4KlgZ01BuSEqmffffffo
MD5:	721A033F402C698DCADCC97F83710B74
SHA1:	5EB49CD7D0F10AEA174290B2882BF2C63617E1A4
SHA-256:	5DD98709C3C07FEC984DBF4CC62590EE204511D6C70F684BE56543B29313094B
SHA-512:	8301FF63A9F8587611D253C08053A423735F4605CE095B013A36F20E5C8926122DD1CB2FBCCBB8B15FD70865167EF4C9CFE6B9BEEA9C831B6905FED1C622FB6E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["oracle stock earnings","treyarch has revealed the length of the black ops 6 campaign","destiny exotic class items","teton pass highway collapse","jalen hurts nick sirianni eagles","roblox gym league codes","starbucks menu pairings","james beard chef awards"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4021), with no line terminators
Category:	downloaded
Size (bytes):	4021
Entropy (8bit):	5.1452485373514545
Encrypted:	false
SSDEEP:	96:zJY2co3zY8q6gbOKTEzNx8BSIMw591g8IOl8u8i8DF+Ks:e78q6gbxlg8Ig8u78D2
MD5:	C3E1EF75C8324812A33504931076DF63
SHA1:	28365931E4C38CA4273390E5368728F850A3621C
SHA-256:	FDA7964FBEAA2B110F6D1FDB22588F50BF21C8568A92421E26E443A155AB87BE
SHA-512:	2F57352853C4B10569F0306DCACFF1B1AEC9B6065AF600AA3DF19F686C647DA8FB8BB3DA89AC3FFDCF3B4EC45B988C3572929A9C1E8BBF9D2A0027EB3648A910
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.0zhx-kg7174.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTsFPCAfY7WVNwPZg_szF81wTTLGRg"
Preview:	.gb_q{display:none!important}.gb_3e{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_Hc{text-align:left}.gb_Hc>*{color:#bdc1c6;line-height:16px}.gb_Hc div:first-child{color:white}.gb_pa{background:none;border:1px solid transparent;-webkit-border-radius:50%;border-radius:50%;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;height:40px;margin:8px;outline:none;padding:1px;position:absolute;right:0;top:0;width:40px}.gb_pa:hover{background-color:rgba(68,71,70,.08)}.gb_pa:focus,.gb_pa:active{background-color:rgba(68,71,70,.12)}.gb_pa:focus-visible{border-color:#0b57d0;outline:1px solid transparent;outline-offset:-1px}.gb_i .gb_pa:hover,.gb_i .gb_pa:focus,.gb_i .gb_pa:active{background-color:rgba(227,227,227,.08)}.gb_i .gb_pa:focus-visible{border-col

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2294)
Category:	downloaded
Size (bytes):	164027
Entropy (8bit):	5.54311612429429
Encrypted:	false
SSDEEP:	3072:dusBF9fa3+P3A2llmwtZJBHTZPL9c6atPytQ/1mEbzmcgytgjBIY7IpMnbk:dushfpQ2llmwtZJBHTZPL9c6atPN1mqz
MD5:	FA28C08215054BE6E86951644F81F064
SHA1:	4575E198F41107C350A832D997B6379E3EADCE9D
SHA-256:	7F9C99D89AAD39243C71C41C1ADE4A36FF7035D1EFF7A686D95C4E4088610F05
SHA-512:	E92FF1D1A278FEDCFA749C6ED1DDC33FEDA5E66199BC61854EFE8CF1C0AC4295434B0262DA7CEE3B55D056BC9B8937438F7D35ED0E9C09972FB45772D425A16F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.dUz9ljb6RwQ.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTv477gdKFnkTt-FIW6Qaq4dxNOp2Q"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.cj=function(a){if(a!=null&&typeof a!=="number")throw Error("q`"+typeof a+"`"+a);return a};.}catch(e){_._DumpException(e)}.try{._.dj=function(a,b,c){return c?a\|b:a&~b};_.ej=function(a,b,c,d){a=_.ib(a,b,c,d);return Array.isArray(a)?a:_.jc};_.fj=function(a,b){a=_.dj(a,2,!!(2&b));a=_.dj(a,32,!0);return a=_.dj(a,2048,!1)};_.gj=function(a,b){a===0&&(a=_.fj(a,b));return a=_.dj(a,1,!0)};_.hj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.ij=function(a,b,c){32&b&&c\|\|(a=_.dj(a,32,!1));return a};._.jj=function(a,b,c,d,e,f){var g=!!(2&b);const h=g?1:2;e=!!e;f&&(f=!g);g=_.ej(a,b,d);var k=g[_.v]\|0;const l=!!(4&k);if(!l){k=_.gj(k,b);var n=g,p=b;const t=!!(2&k);t&&(p=_.dj(p,2,!0));let q=!t,B=!0,ba=0,I=0;for(;ba<n.length;ba++){const D=_.Sa(n[ba],c,p);if(D instanceof c){if(!t){const Y=!!((D.na[_.v]\|0)&2);q&&(q=!Y);B&&(B=Y)}n[I++]=D}}I<ba&&(n.length=I);k=_.dj(k,4,!0);k=_.dj(k,16,B);k=_.dj(k,8,q);_.xa(n,k);t&&Object.freeze(n)}if(f&&!(8&k\|\|!

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	137340
Entropy (8bit):	5.439950135445753
Encrypted:	false
SSDEEP:	1536:/jqSgyoHywPOnWbfWDMpGVW0jSqyMf9VcFFKZPUG+zFQaqVuvaBXktD9k0YOMkvq:lyHIDMJ0j6MfPOaHsFEKD9k0YOfi
MD5:	DE48741A84BE7EA6899DD11E5ADECDCF
SHA1:	F6D76E041401A8C64BA05E7B060A145102B6CFE0
SHA-256:	209C2BA848DB49F83A4738EFFC4AB96AAA4A4C48D64341B09D2F3EA69DF94476
SHA-512:	A1D161F07B0CF4FDFC611938390A13B562040CEB1CC983BE9C541D7277BDDEE6834B9E58EB432CB21FD407532F142CBCC06BB7CA0A64CC9DD7EE7FF32396DD46
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_qa gb_ib gb_Ud gb_od\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Jd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_sd gb_ld gb_zd gb_yd\"\u003e\u003cdiv class\u003d\"gb_rd gb_hd\"\u003e\u003cdiv class\u003d\"gb_Pc gb_q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Pc gb_Sc gb_q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2140)
Category:	downloaded
Size (bytes):	123951
Entropy (8bit):	5.501253783365937
Encrypted:	false
SSDEEP:	3072:fGcyvTTz/TQrpxeYj3FYFMFWZoD77QjMb:+cyr/TkwF277QjMb
MD5:	F36443AFF59269C1F830294760230795
SHA1:	F3CDA9EBBC1E8CBC873386A305BDA4A883EA75A9
SHA-256:	EE74A56BAFE09978B8744A71246CB5C9D77EE849E300DC2D48AF8BD3067F82EC
SHA-512:	3DF2E8703F863AF5DCFBEA411CF9689D996BA70E7B8DFDDF429B4FE35E53C3280431A4D00C1D90A393FD8C57F7BFB0AC00E4F98AA3D8C00D3CEA1D6690652752
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.JHoMBbBABZg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo_6Zf8M75AJqSyaaLg_vD7Vr9kevQ/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x100000, ]);.var ba,fa,ha,ma,na,va,wa,Ca;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&fa(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)r

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.6818808028034042
Encrypted:	false
SSDEEP:	3:VQRWN:VQRWN
MD5:	9FAE2B6737B98261777262B14B586F28
SHA1:	79C894898B2CED39335EB0003C18B27AA8C6DDCD
SHA-256:	F55F6B26E77DF6647E544AE5B45892DCEA380B7A6D2BFAA1E023EA112CE81E73
SHA-512:	29CB8E5462B15488B0C6D5FC1673E273FB47841E9C76A4AA5415CA93CEA31B87052BBA511680F2BC9E6543A29F1BBFBA9D06FCC08F5C65BEB115EE7A9E5EFF36
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/ddljson?async=ntp:2
Preview:	)]}'.{"ddljson":{}}

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2965)
Category:	downloaded
Size (bytes):	2970
Entropy (8bit):	5.837197219815594
Encrypted:	false
SSDEEP:	48:BfhqKlgZ01It74aa9ld66666e0Vz9CDhwXZUkZ5MUJeDAZHfsN60bNwlr9VrhD25:BzliWFd66666rVzYDeZUkr/Jb0bWr9Vu
MD5:	E2051292C7BC1ED3405ED2BF95E773AF
SHA1:	447D4F40D72EBF720E8BD2D04EDA41FC0C849F30
SHA-256:	91CCE72A99CB0B7BCDFF796653DA3314F7ACF646C705733C4FC8FADCB0B1F427
SHA-512:	A4F5C67AA09264A6D94DF71FD1338914F959AF3D9358EB229FD835483B17CAB09E6126384DC1DE4C3AB28D079C31083DFFB8DF2037EA2CD9BA091A4227C849B6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["florida weather tropical storm","light phone 3","fortnite nick eh 30 icon skin","solomon choi 16 handles","jalen hurts nick sirianni eagles","woman swallowed by quicksand beach","brats documentary andrew mccarthy","roblox gym league codes"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"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

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 12, 2024 21:05:15.924396992 CEST	49697	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:15.924452066 CEST	443	49697	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:15.924515009 CEST	49697	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:15.925194025 CEST	49697	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:15.925208092 CEST	443	49697	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:16.832777023 CEST	443	49697	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:16.833029985 CEST	49697	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:16.833096027 CEST	443	49697	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:16.834111929 CEST	443	49697	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:16.834182024 CEST	49697	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:16.835213900 CEST	49697	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:16.835283995 CEST	443	49697	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:16.835508108 CEST	49697	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:16.835529089 CEST	443	49697	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:16.877007961 CEST	49697	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:16.999847889 CEST	443	49697	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:16.999916077 CEST	443	49697	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:17.000026941 CEST	49697	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:17.009463072 CEST	49697	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:17.009514093 CEST	443	49697	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:18.567349911 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 12, 2024 21:05:18.870184898 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 12, 2024 21:05:19.476109028 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 12, 2024 21:05:20.682025909 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 12, 2024 21:05:20.698307991 CEST	49704	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:05:20.698348045 CEST	443	49704	172.217.18.4	192.168.2.16
Jun 12, 2024 21:05:20.698417902 CEST	49704	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:05:20.698707104 CEST	49704	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:05:20.698725939 CEST	443	49704	172.217.18.4	192.168.2.16
Jun 12, 2024 21:05:21.243108034 CEST	49688	443	192.168.2.16	2.23.209.185
Jun 12, 2024 21:05:21.552352905 CEST	443	49704	172.217.18.4	192.168.2.16
Jun 12, 2024 21:05:21.552697897 CEST	49704	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:05:21.552726984 CEST	443	49704	172.217.18.4	192.168.2.16
Jun 12, 2024 21:05:21.553689003 CEST	443	49704	172.217.18.4	192.168.2.16
Jun 12, 2024 21:05:21.553761005 CEST	49704	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:05:21.555223942 CEST	49704	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:05:21.555294991 CEST	443	49704	172.217.18.4	192.168.2.16
Jun 12, 2024 21:05:21.608014107 CEST	49704	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:05:21.608025074 CEST	443	49704	172.217.18.4	192.168.2.16
Jun 12, 2024 21:05:21.655996084 CEST	49704	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:05:23.094008923 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 12, 2024 21:05:24.780433893 CEST	49707	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:24.780464888 CEST	443	49707	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:24.780564070 CEST	49707	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:24.782164097 CEST	49707	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:24.782179117 CEST	443	49707	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:25.664640903 CEST	443	49707	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:25.664712906 CEST	49707	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:25.669456005 CEST	49707	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:25.669475079 CEST	443	49707	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:25.669773102 CEST	443	49707	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:25.710504055 CEST	49707	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:25.752501011 CEST	443	49707	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:25.987613916 CEST	443	49707	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:25.987694025 CEST	443	49707	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:25.987894058 CEST	49707	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:25.988066912 CEST	49707	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:25.988066912 CEST	49707	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:25.988115072 CEST	443	49707	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:25.988151073 CEST	443	49707	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:26.027050972 CEST	49708	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:26.027105093 CEST	443	49708	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:26.027225018 CEST	49708	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:26.027463913 CEST	49708	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:26.027481079 CEST	443	49708	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:26.730530977 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 12, 2024 21:05:26.883546114 CEST	443	49708	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:26.883678913 CEST	49708	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:26.885252953 CEST	49708	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:26.885267019 CEST	443	49708	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:26.885514021 CEST	443	49708	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:26.887052059 CEST	49708	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:26.932502031 CEST	443	49708	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:27.031014919 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 12, 2024 21:05:27.128355980 CEST	443	49708	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:27.128422022 CEST	443	49708	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:27.128500938 CEST	49708	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:27.129307985 CEST	49708	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:27.129363060 CEST	443	49708	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:27.129431963 CEST	49708	443	192.168.2.16	184.28.90.27
Jun 12, 2024 21:05:27.129450083 CEST	443	49708	184.28.90.27	192.168.2.16
Jun 12, 2024 21:05:27.438853025 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:27.438946009 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:27.439050913 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:27.440665007 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:27.440705061 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:27.636070013 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 12, 2024 21:05:27.907028913 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 12, 2024 21:05:28.354988098 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.355065107 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:28.357394934 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:28.357414007 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.357610941 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.403028011 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:28.410845995 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:28.456500053 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.709280968 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.709355116 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.709362030 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.709431887 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.709470034 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.709511042 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:28.709511042 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:28.709511042 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:28.709546089 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.709605932 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:28.711570024 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.711638927 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.711642981 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:28.711690903 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:28.718841076 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:28.718878984 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.718898058 CEST	49709	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:05:28.718908072 CEST	443	49709	20.114.59.183	192.168.2.16
Jun 12, 2024 21:05:28.851028919 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 12, 2024 21:05:29.867558002 CEST	49710	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:29.867609978 CEST	443	49710	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:29.867913008 CEST	49711	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:29.867948055 CEST	443	49711	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:29.867953062 CEST	49710	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:29.868010998 CEST	49711	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:29.868344069 CEST	49711	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:29.868360996 CEST	443	49711	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:29.868514061 CEST	49710	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:29.868544102 CEST	443	49710	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.523235083 CEST	443	49711	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.523706913 CEST	49711	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:30.523773909 CEST	443	49711	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.525263071 CEST	443	49711	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.525681019 CEST	49711	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:30.525876045 CEST	443	49711	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.526041031 CEST	49711	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:30.526108027 CEST	443	49711	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.532373905 CEST	443	49710	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.541831970 CEST	49710	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:30.541902065 CEST	443	49710	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.543045044 CEST	443	49710	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.543467999 CEST	49710	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:30.543653011 CEST	443	49710	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.587023973 CEST	49710	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:30.686367035 CEST	443	49711	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.686640978 CEST	443	49711	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.686709881 CEST	49711	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:30.687182903 CEST	49711	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:30.687226057 CEST	443	49711	54.146.166.145	192.168.2.16
Jun 12, 2024 21:05:30.687254906 CEST	49711	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:30.687298059 CEST	49711	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:05:31.189269066 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 12, 2024 21:05:31.253093958 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 12, 2024 21:05:31.493042946 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 12, 2024 21:05:31.547010899 CEST	443	49704	172.217.18.4	192.168.2.16
Jun 12, 2024 21:05:31.547157049 CEST	443	49704	172.217.18.4	192.168.2.16
Jun 12, 2024 21:05:31.547228098 CEST	49704	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:05:32.100016117 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 12, 2024 21:05:32.101815939 CEST	49704	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:05:32.101865053 CEST	443	49704	172.217.18.4	192.168.2.16
Jun 12, 2024 21:05:33.314223051 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 12, 2024 21:05:35.728631973 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 12, 2024 21:05:36.061084032 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 12, 2024 21:05:37.513161898 CEST	49673	443	192.168.2.16	204.79.197.203
Jun 12, 2024 21:05:40.538237095 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 12, 2024 21:05:45.672070026 CEST	49678	443	192.168.2.16	20.189.173.10
Jun 12, 2024 21:05:50.142252922 CEST	49680	80	192.168.2.16	192.229.211.108
Jun 12, 2024 21:06:00.830467939 CEST	443	49710	54.146.166.145	192.168.2.16
Jun 12, 2024 21:06:00.830674887 CEST	443	49710	54.146.166.145	192.168.2.16
Jun 12, 2024 21:06:00.830847025 CEST	49710	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:06:02.100810051 CEST	49710	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:06:02.100883007 CEST	443	49710	54.146.166.145	192.168.2.16
Jun 12, 2024 21:06:05.046380997 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:05.046432972 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:05.046540976 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:05.047010899 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:05.047033072 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:05.958137035 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:05.958256006 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:05.959469080 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:05.959490061 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:05.959849119 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:05.961775064 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:06.004504919 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:06.261918068 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:06.261981010 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:06.262023926 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:06.262095928 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:06.262132883 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:06.262156963 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:06.262181997 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:06.264960051 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:06.265034914 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:06.265069008 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:06.265075922 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:06.265120029 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:06.269397974 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:06.269418001 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:06.269432068 CEST	49712	443	192.168.2.16	20.114.59.183
Jun 12, 2024 21:06:06.269439936 CEST	443	49712	20.114.59.183	192.168.2.16
Jun 12, 2024 21:06:14.363296986 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:14.363354921 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:14.363440037 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:14.363746881 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:14.363765001 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:14.813262939 CEST	49714	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:14.813308954 CEST	443	49714	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:14.813401937 CEST	49714	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:14.813676119 CEST	49714	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:14.813694954 CEST	443	49714	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:14.925318003 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:14.925412893 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:14.925503016 CEST	49716	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:14.925582886 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:14.925590992 CEST	443	49716	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:14.925674915 CEST	49716	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:14.925885916 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:14.925926924 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:14.926031113 CEST	49716	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:14.926067114 CEST	443	49716	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.213313103 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.213717937 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.213745117 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.214205980 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.214517117 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.214596033 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.214677095 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.256513119 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.494421959 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.494560003 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.494625092 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.494648933 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.495034933 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.495086908 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.495091915 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.496557951 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.496622086 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.496627092 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.498313904 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.498374939 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.498379946 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.506769896 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.506833076 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.506839037 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.561089039 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.611392975 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.645215988 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.645312071 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.645503044 CEST	49713	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.645519972 CEST	443	49713	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.666387081 CEST	443	49714	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.666816950 CEST	49714	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.666827917 CEST	443	49714	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.667283058 CEST	443	49714	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.667591095 CEST	49714	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.667671919 CEST	443	49714	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.667711020 CEST	49714	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.712512016 CEST	443	49714	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.720166922 CEST	49714	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.772896051 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.773189068 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.773222923 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.774652004 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.774744987 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.775034904 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.775120974 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.775228024 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.795064926 CEST	443	49716	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.795249939 CEST	49716	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.795262098 CEST	443	49716	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.796122074 CEST	443	49716	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.796204090 CEST	49716	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.796405077 CEST	49716	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.796471119 CEST	49716	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.796472073 CEST	443	49716	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.815155029 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.815181017 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.840496063 CEST	443	49716	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.847110987 CEST	49716	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.847121954 CEST	443	49716	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.863121033 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.865510941 CEST	49718	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.865545034 CEST	443	49718	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.865619898 CEST	49718	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.865808964 CEST	49718	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.865827084 CEST	443	49718	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.897522926 CEST	49716	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.940824032 CEST	443	49714	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.990149975 CEST	49714	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.990160942 CEST	443	49714	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.991595030 CEST	49714	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:15.991697073 CEST	443	49714	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:15.991786003 CEST	49714	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.064781904 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.065311909 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.065381050 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.065414906 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.065449953 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.065510035 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.066078901 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.066643953 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.066705942 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.066720009 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.073009968 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.073101044 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.073132038 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.082849026 CEST	443	49716	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.118196011 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.118232012 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.134221077 CEST	49716	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.134248018 CEST	443	49716	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.135034084 CEST	49716	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.135113001 CEST	443	49716	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.135179996 CEST	49716	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.159130096 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.180318117 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.180552006 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.180620909 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.180655003 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.181133032 CEST	49719	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.181180000 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.181255102 CEST	49719	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.181456089 CEST	49719	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.181471109 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.184705973 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.184784889 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.184813976 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.188554049 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.188640118 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.188672066 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.197132111 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.197226048 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.197258949 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.206469059 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.206569910 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.206597090 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.215295076 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.215373993 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.215400934 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.222929955 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.223040104 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.223072052 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.234060049 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.234142065 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.234152079 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.234180927 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.234236002 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.241790056 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.293260098 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.293291092 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.295666933 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.295736074 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.295746088 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.300580978 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.300659895 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.300678015 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.300705910 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.300769091 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.300792933 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.300937891 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.301017046 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.301050901 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.301074982 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.301131010 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.303750992 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.307028055 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.307109118 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.307132959 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.314632893 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.314713001 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.314717054 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.314740896 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.314794064 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.321382999 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.327661991 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.327691078 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.327789068 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.327806950 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.327907085 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.331167936 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.331525087 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.331604004 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.331625938 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.339559078 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.339582920 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.339682102 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.339718103 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.339858055 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.345344067 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.351366997 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.351475954 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.351488113 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.351531982 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.351620913 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.356981039 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.362657070 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.362766027 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.362777948 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.362797022 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.362867117 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.368475914 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.374654055 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.374782085 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.374793053 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.377062082 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.377132893 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.377141953 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.383533001 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.383610010 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.383626938 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.411421061 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.411503077 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.411519051 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.412038088 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.412107944 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.412117004 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.412662029 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.412723064 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.412730932 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.413592100 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.413656950 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.413665056 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.414429903 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.414501905 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.414510012 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.417805910 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.417871952 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.417881012 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.422997952 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.423136950 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.423177004 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.427850008 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.427918911 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.427930117 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.432950974 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.433017015 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.433027029 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.438400030 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.438466072 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.438478947 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.441201925 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.441265106 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.441286087 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.442933083 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.442996025 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.443010092 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.446069956 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.446130037 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.446141005 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.449454069 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.449520111 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.449528933 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.452109098 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.452172995 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.452181101 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.454890013 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.454951048 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.454962015 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.458045006 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.458120108 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.458127975 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.499145985 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.499181032 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.499430895 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.499524117 CEST	443	49715	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.499592066 CEST	49715	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.719944000 CEST	443	49718	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.720249891 CEST	49718	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.720289946 CEST	443	49718	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.721757889 CEST	443	49718	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.721843958 CEST	49718	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.722206116 CEST	49718	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.722292900 CEST	443	49718	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.722354889 CEST	49718	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.722367048 CEST	443	49718	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:16.768126965 CEST	49718	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:16.993911982 CEST	443	49718	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.031042099 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.031347990 CEST	49719	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:17.031363964 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.032833099 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.032910109 CEST	49719	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:17.033302069 CEST	49719	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:17.033385992 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.033471107 CEST	49719	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:17.033479929 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.036107063 CEST	49718	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:17.036140919 CEST	443	49718	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.037084103 CEST	49718	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:17.037277937 CEST	443	49718	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.037352085 CEST	49718	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:17.084098101 CEST	49719	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:17.309897900 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.310019016 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.310092926 CEST	49719	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:17.310112000 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.311358929 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.311422110 CEST	49719	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:17.311429977 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.311580896 CEST	49719	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:17.311660051 CEST	443	49719	172.217.18.4	192.168.2.16
Jun 12, 2024 21:06:17.311721087 CEST	49719	443	192.168.2.16	172.217.18.4
Jun 12, 2024 21:06:18.162702084 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:18.162751913 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:18.162832022 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:18.163090944 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:18.163110018 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.039836884 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.040359974 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.040399075 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.041378975 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.041459084 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.042671919 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.042742968 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.042882919 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.042901039 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.097158909 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.173881054 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:19.173943043 CEST	443	49724	142.250.185.206	192.168.2.16
Jun 12, 2024 21:06:19.174034119 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:19.174294949 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:19.174315929 CEST	443	49724	142.250.185.206	192.168.2.16
Jun 12, 2024 21:06:19.298424959 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.298787117 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.298814058 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.298860073 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.298898935 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.298955917 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.299480915 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.300112963 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.300163984 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.300173044 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.307563066 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.307622910 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.307630062 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.352144003 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.352168083 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.400194883 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.416126966 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.416734934 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.416809082 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.416877031 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.429497004 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.429549932 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.429569006 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.434076071 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.434154034 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.434168100 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.443625927 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.443692923 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.443706036 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.452497005 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.452565908 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.452579975 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.466263056 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.466347933 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.466362953 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.475349903 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.475419044 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.475433111 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.484466076 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.484535933 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.484565973 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.493105888 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.493177891 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.493194103 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.533080101 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.533194065 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.533592939 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.533705950 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.534310102 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.535106897 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.536801100 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.536838055 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.536865950 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.536890984 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.546489000 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.547099113 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.547163010 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.547184944 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.561065912 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.561146021 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.561167955 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.564277887 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.564346075 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.564367056 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.571206093 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.571273088 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.571293116 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.577872038 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.577936888 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.577956915 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.586893082 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.586977005 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.586997986 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.593336105 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.593401909 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.593426943 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.599523067 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.599581957 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.599591017 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.605918884 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.605984926 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.605990887 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.612226009 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.612277031 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.612283945 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.618561029 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.618607044 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.618613958 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.624941111 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.625019073 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.625036955 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.628237009 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.628403902 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.628437996 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.634593010 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.634661913 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.634675026 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.640940905 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.641014099 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.641021967 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.647222042 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.647289038 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.647295952 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.653542995 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.653604031 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.653611898 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.659929991 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.659997940 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.660007000 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.668915033 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.668992043 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.668998957 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.675040007 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.675136089 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.675146103 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.680787086 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.680850983 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.680860996 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.686290026 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.686355114 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.686383963 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.692179918 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.692245960 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.692311049 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.692329884 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.692377090 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.697566986 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.703361034 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.703427076 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.703435898 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.705096006 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.705151081 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.705157995 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.708517075 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.708585978 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.708591938 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.711785078 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.711848021 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.711853981 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.712109089 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:19.712142944 CEST	443	49723	142.250.185.142	192.168.2.16
Jun 12, 2024 21:06:19.712193012 CEST	49723	443	192.168.2.16	142.250.185.142
Jun 12, 2024 21:06:20.035434961 CEST	443	49724	142.250.185.206	192.168.2.16
Jun 12, 2024 21:06:20.035892010 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:20.035913944 CEST	443	49724	142.250.185.206	192.168.2.16
Jun 12, 2024 21:06:20.037137985 CEST	443	49724	142.250.185.206	192.168.2.16
Jun 12, 2024 21:06:20.037250042 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:20.039554119 CEST	443	49724	142.250.185.206	192.168.2.16
Jun 12, 2024 21:06:20.039623022 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:20.041028976 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:20.041112900 CEST	443	49724	142.250.185.206	192.168.2.16
Jun 12, 2024 21:06:20.041299105 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:20.041311026 CEST	443	49724	142.250.185.206	192.168.2.16
Jun 12, 2024 21:06:20.041332960 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:20.086165905 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:20.086188078 CEST	443	49724	142.250.185.206	192.168.2.16
Jun 12, 2024 21:06:20.302114010 CEST	443	49724	142.250.185.206	192.168.2.16
Jun 12, 2024 21:06:20.356133938 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:20.356158018 CEST	443	49724	142.250.185.206	192.168.2.16
Jun 12, 2024 21:06:20.357382059 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:20.357501984 CEST	443	49724	142.250.185.206	192.168.2.16
Jun 12, 2024 21:06:20.357595921 CEST	49724	443	192.168.2.16	142.250.185.206
Jun 12, 2024 21:06:20.749146938 CEST	49725	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:20.749185085 CEST	443	49725	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:20.749304056 CEST	49725	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:20.749689102 CEST	49725	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:20.749707937 CEST	443	49725	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:21.609005928 CEST	443	49725	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:21.609303951 CEST	49725	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:21.609318972 CEST	443	49725	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:21.610341072 CEST	443	49725	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:21.610410929 CEST	49725	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:21.610687017 CEST	49725	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:21.610749006 CEST	443	49725	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:21.651104927 CEST	49725	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:21.651115894 CEST	443	49725	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:21.699264050 CEST	49725	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:31.623564959 CEST	443	49725	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:31.623645067 CEST	443	49725	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:31.623703003 CEST	49725	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:32.105839014 CEST	49725	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:32.105870008 CEST	443	49725	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:47.745877981 CEST	49727	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:47.745927095 CEST	443	49727	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:47.746031046 CEST	49727	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:47.746334076 CEST	49727	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:47.746377945 CEST	443	49727	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:48.594671011 CEST	443	49727	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:48.595144987 CEST	49727	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:48.595185041 CEST	443	49727	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:48.595664978 CEST	443	49727	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:48.596081018 CEST	49727	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:48.596175909 CEST	443	49727	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:48.596250057 CEST	49727	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:48.636506081 CEST	443	49727	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:48.866880894 CEST	443	49727	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:48.906207085 CEST	49727	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:48.906244040 CEST	443	49727	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:48.907402992 CEST	49727	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:06:48.907500029 CEST	443	49727	142.250.181.228	192.168.2.16
Jun 12, 2024 21:06:48.907578945 CEST	49727	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:07:13.213335037 CEST	49728	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:13.213367939 CEST	443	49728	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:13.213466883 CEST	49728	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:13.213696003 CEST	49729	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:13.213735104 CEST	443	49729	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:13.213794947 CEST	49729	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:13.214184999 CEST	49728	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:13.214205027 CEST	443	49728	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:13.214483023 CEST	49729	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:13.214507103 CEST	443	49729	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:13.983680010 CEST	443	49729	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:13.984158039 CEST	49729	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:13.984194994 CEST	443	49729	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:13.984585047 CEST	443	49729	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:13.984920025 CEST	49729	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:13.984980106 CEST	443	49729	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:13.985099077 CEST	49729	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:13.985124111 CEST	443	49729	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:14.036992073 CEST	443	49728	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:14.037378073 CEST	49728	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:14.037415981 CEST	443	49728	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:14.037904024 CEST	443	49728	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:14.038218975 CEST	49728	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:14.038304090 CEST	443	49728	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:14.084258080 CEST	49728	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:14.201297045 CEST	443	49729	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:14.201389074 CEST	443	49729	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:14.201575041 CEST	49729	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:14.202004910 CEST	49729	443	192.168.2.16	54.146.166.145
Jun 12, 2024 21:07:14.202024937 CEST	443	49729	54.146.166.145	192.168.2.16
Jun 12, 2024 21:07:16.631495953 CEST	49674	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:16.631562948 CEST	49675	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:16.631628990 CEST	49677	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:16.631903887 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:16.631972075 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:16.632066965 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:16.632349014 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:16.632384062 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:16.941224098 CEST	49675	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:16.942281008 CEST	49677	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:16.942280054 CEST	49674	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.050771952 CEST	49731	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:17.050803900 CEST	443	49731	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:17.050880909 CEST	49731	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:17.051775932 CEST	49731	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:17.051795006 CEST	443	49731	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:17.390569925 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:17.390647888 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.391664982 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:17.391771078 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.410994053 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.411010027 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:17.411158085 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.411169052 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:17.411398888 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:17.411463022 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.547224998 CEST	49674	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.547252893 CEST	49675	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.547254086 CEST	49677	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.586078882 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:17.586117983 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:17.586155891 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.586179018 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:17.586206913 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.586261034 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.589287996 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:17.589355946 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.589363098 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:17.589411974 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.589447021 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.589489937 CEST	443	49730	204.79.197.200	192.168.2.16
Jun 12, 2024 21:07:17.589553118 CEST	49730	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:17.595223904 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:17.595273972 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:17.595468044 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:17.595654964 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:17.595680952 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:17.644347906 CEST	49681	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:17.644687891 CEST	49733	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:17.644732952 CEST	443	49733	51.104.15.253	192.168.2.16
Jun 12, 2024 21:07:17.644815922 CEST	49733	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:17.644974947 CEST	49733	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:17.644988060 CEST	443	49733	51.104.15.253	192.168.2.16
Jun 12, 2024 21:07:18.009229898 CEST	49681	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:18.165898085 CEST	443	49731	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:18.166004896 CEST	49731	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:18.198726892 CEST	49731	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:18.198745966 CEST	443	49731	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:18.199712038 CEST	443	49731	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:18.200854063 CEST	49731	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:18.200896978 CEST	49731	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:18.200927019 CEST	443	49731	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:18.230982065 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.231225967 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.235850096 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.235865116 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.236152887 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.236160994 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.236392021 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.236511946 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.482173920 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.482209921 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.482228994 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.482244015 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.482263088 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.482294083 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.482355118 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.492646933 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.492727041 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.492731094 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.492782116 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.492791891 CEST	443	49732	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.492819071 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.492865086 CEST	49732	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.495809078 CEST	49734	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.495846033 CEST	443	49734	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.496141911 CEST	49734	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.496141911 CEST	49734	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:18.496186018 CEST	443	49734	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:18.577928066 CEST	443	49731	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:18.577997923 CEST	443	49731	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:18.578059912 CEST	443	49731	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:18.578089952 CEST	49731	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:18.578104019 CEST	443	49731	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:18.578157902 CEST	49731	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:18.578591108 CEST	49731	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:18.578608990 CEST	49731	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:18.578938961 CEST	443	49731	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:18.579016924 CEST	443	49731	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:18.579103947 CEST	49731	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:18.690032005 CEST	49735	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:18.690149069 CEST	443	49735	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:18.690299988 CEST	49735	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:18.690469027 CEST	49735	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:18.690499067 CEST	443	49735	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:18.727241993 CEST	49681	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:18.750633001 CEST	443	49733	51.104.15.253	192.168.2.16
Jun 12, 2024 21:07:18.750718117 CEST	49733	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:18.753778934 CEST	49733	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:18.753803968 CEST	443	49733	51.104.15.253	192.168.2.16
Jun 12, 2024 21:07:18.754230022 CEST	443	49733	51.104.15.253	192.168.2.16
Jun 12, 2024 21:07:18.754293919 CEST	49733	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:18.754690886 CEST	49733	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:18.754796982 CEST	49733	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:18.754810095 CEST	443	49733	51.104.15.253	192.168.2.16
Jun 12, 2024 21:07:18.758259058 CEST	49674	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:18.758275032 CEST	49675	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:18.758430004 CEST	49677	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:19.142250061 CEST	443	49734	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:19.142517090 CEST	49734	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.143044949 CEST	49734	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.143052101 CEST	443	49734	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:19.143125057 CEST	49734	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.143131018 CEST	443	49734	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:19.218883991 CEST	443	49733	51.104.15.253	192.168.2.16
Jun 12, 2024 21:07:19.218960047 CEST	49733	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:19.219054937 CEST	49733	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:19.219140053 CEST	443	49733	51.104.15.253	192.168.2.16
Jun 12, 2024 21:07:19.219214916 CEST	49733	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:19.312558889 CEST	443	49734	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:19.312594891 CEST	443	49734	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:19.312640905 CEST	49734	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.312654972 CEST	443	49734	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:19.312669992 CEST	443	49734	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:19.312674999 CEST	49734	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.312819958 CEST	49734	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.312819958 CEST	49734	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.313508987 CEST	49734	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.313530922 CEST	443	49734	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:19.315304995 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.315342903 CEST	443	49736	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:19.315465927 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.315659046 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.315675974 CEST	443	49736	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:19.792589903 CEST	443	49735	40.126.32.133	192.168.2.16
Jun 12, 2024 21:07:19.844203949 CEST	49735	443	192.168.2.16	40.126.32.133
Jun 12, 2024 21:07:19.951282024 CEST	443	49736	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:19.951483965 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.951836109 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.951859951 CEST	443	49736	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:19.952018976 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:19.952034950 CEST	443	49736	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:20.161235094 CEST	49681	443	192.168.2.16	51.104.15.253
Jun 12, 2024 21:07:20.216134071 CEST	443	49736	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:20.216165066 CEST	443	49736	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:20.216185093 CEST	443	49736	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:20.216255903 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.216255903 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.216285944 CEST	443	49736	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:20.216392994 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.217434883 CEST	443	49736	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:20.217514992 CEST	443	49736	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:20.217547894 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.217547894 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.217561007 CEST	443	49736	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:20.217607975 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.217639923 CEST	49736	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.219475031 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.219527006 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:20.219628096 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.219919920 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.219945908 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:20.798192978 CEST	49738	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:07:20.798233032 CEST	443	49738	142.250.181.228	192.168.2.16
Jun 12, 2024 21:07:20.798471928 CEST	49738	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:07:20.798701048 CEST	49738	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:07:20.798716068 CEST	443	49738	142.250.181.228	192.168.2.16
Jun 12, 2024 21:07:20.854695082 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:20.855359077 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.855359077 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.855389118 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:20.855587006 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:20.855596066 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.107707977 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.107750893 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.107779980 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.107878923 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.107878923 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.107878923 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.107907057 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.107964039 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.108009100 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.108066082 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.108081102 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.108095884 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.108172894 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.108172894 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.109041929 CEST	49737	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.109057903 CEST	443	49737	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.110439062 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.110491991 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.110640049 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.110811949 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.110830069 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.164000034 CEST	49675	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:21.164038897 CEST	49677	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:21.165337086 CEST	49674	443	192.168.2.16	204.79.197.200
Jun 12, 2024 21:07:21.654623985 CEST	443	49738	142.250.181.228	192.168.2.16
Jun 12, 2024 21:07:21.708213091 CEST	49738	443	192.168.2.16	142.250.181.228
Jun 12, 2024 21:07:21.763389111 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.763487101 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.763921976 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.763931036 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:21.764117002 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:21.764121056 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.037451982 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.037502050 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.037520885 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.037527084 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.037542105 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.037558079 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.037597895 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.039716005 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.039828062 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.039836884 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.039896011 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.152504921 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.152545929 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.152621031 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.152628899 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.152642965 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.152940989 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.153223038 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.153306007 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.153311968 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.153357029 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.155762911 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.155788898 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.155852079 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.155857086 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.155890942 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.155911922 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.157973051 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.157999039 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.158056974 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.158063889 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.158072948 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.158215046 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.160553932 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.160579920 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.160615921 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.160620928 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.160657883 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.160679102 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.274679899 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.274797916 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.274818897 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.274883032 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.277335882 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.277368069 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.277403116 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.277420044 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.277434111 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.277463913 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.278218031 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.278285027 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.278296947 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.278332949 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.280088902 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.280114889 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.280152082 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.280168056 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.280195951 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.280213118 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.280941010 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.281004906 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.281016111 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.281055927 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.282533884 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.282558918 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.282618999 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.282634974 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.282685041 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.283447981 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.283576012 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.283586025 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.283689022 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.285418034 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.285439968 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.285486937 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.285499096 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.285528898 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.285564899 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.286359072 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.286442041 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.286451101 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.286503077 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.393481970 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.393518925 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.393573046 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.393590927 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.393624067 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.393654108 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.393959045 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.394030094 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.394037008 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.394087076 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.396152020 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.396178007 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.396262884 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.396270990 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.396337986 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.397128105 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.397244930 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.397250891 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.397336960 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.398824930 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.398847103 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.398895979 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.398902893 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.398927927 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.398956060 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.399722099 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.399792910 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.399799109 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.399877071 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.401376009 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.401400089 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.401452065 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.401457071 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.401468992 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.401492119 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.401527882 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.401534081 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.401588917 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.403301954 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.403322935 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.403373957 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.403378963 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.403413057 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.403440952 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.404202938 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.404292107 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.404299021 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.404349089 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.405059099 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.405091047 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.405134916 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.405142069 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.405205965 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.405239105 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.405956984 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.406050920 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.406056881 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.406121969 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.407748938 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.407777071 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.407823086 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.407829046 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.407844067 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.407864094 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.407907963 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.407913923 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.407958984 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.409521103 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.409543991 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.409595013 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.409600973 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.409637928 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.409662008 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.409895897 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.409960032 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.409965992 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.410008907 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.410881996 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.410908937 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.410959005 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.410964966 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.411014080 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.411056042 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.411792040 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.411870003 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.411875963 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.411916971 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.437541008 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.437575102 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.437657118 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.437664986 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.437737942 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.514354944 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.514471054 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.514489889 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.514540911 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.514561892 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.514617920 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.514625072 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.514664888 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.514683962 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.514717102 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.514723063 CEST	443	49739	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.514772892 CEST	49739	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.517498016 CEST	49740	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.517548084 CEST	443	49740	23.1.33.206	192.168.2.16
Jun 12, 2024 21:07:22.518028021 CEST	49740	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.518182039 CEST	49740	443	192.168.2.16	23.1.33.206
Jun 12, 2024 21:07:22.518217087 CEST	443	49740	23.1.33.206	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 12, 2024 21:05:15.875293016 CEST	63870	53	192.168.2.16	1.1.1.1
Jun 12, 2024 21:05:15.875478029 CEST	63545	53	192.168.2.16	1.1.1.1
Jun 12, 2024 21:05:15.883718967 CEST	53	63284	1.1.1.1	192.168.2.16
Jun 12, 2024 21:05:15.904169083 CEST	53	63545	1.1.1.1	192.168.2.16
Jun 12, 2024 21:05:15.923618078 CEST	53	63870	1.1.1.1	192.168.2.16
Jun 12, 2024 21:05:15.947143078 CEST	53	53977	1.1.1.1	192.168.2.16
Jun 12, 2024 21:05:17.175291061 CEST	53	54694	1.1.1.1	192.168.2.16
Jun 12, 2024 21:05:20.683084965 CEST	51290	53	192.168.2.16	1.1.1.1
Jun 12, 2024 21:05:20.683240891 CEST	61663	53	192.168.2.16	1.1.1.1
Jun 12, 2024 21:05:20.696450949 CEST	53	51290	1.1.1.1	192.168.2.16
Jun 12, 2024 21:05:20.697560072 CEST	53	61663	1.1.1.1	192.168.2.16
Jun 12, 2024 21:05:34.168385029 CEST	53	53803	1.1.1.1	192.168.2.16
Jun 12, 2024 21:05:53.204166889 CEST	53	58840	1.1.1.1	192.168.2.16
Jun 12, 2024 21:06:15.728374004 CEST	53	62255	1.1.1.1	192.168.2.16
Jun 12, 2024 21:06:15.858256102 CEST	53	59918	1.1.1.1	192.168.2.16
Jun 12, 2024 21:06:16.596039057 CEST	53	59716	1.1.1.1	192.168.2.16
Jun 12, 2024 21:06:18.153043985 CEST	59434	53	192.168.2.16	1.1.1.1
Jun 12, 2024 21:06:18.153357983 CEST	60687	53	192.168.2.16	1.1.1.1
Jun 12, 2024 21:06:18.160301924 CEST	53	59434	1.1.1.1	192.168.2.16
Jun 12, 2024 21:06:18.162206888 CEST	53	60687	1.1.1.1	192.168.2.16
Jun 12, 2024 21:06:19.165926933 CEST	56870	53	192.168.2.16	1.1.1.1
Jun 12, 2024 21:06:19.166045904 CEST	54136	53	192.168.2.16	1.1.1.1
Jun 12, 2024 21:06:19.173062086 CEST	53	56870	1.1.1.1	192.168.2.16
Jun 12, 2024 21:06:19.173243999 CEST	53	54136	1.1.1.1	192.168.2.16
Jun 12, 2024 21:06:20.736006975 CEST	57376	53	192.168.2.16	1.1.1.1
Jun 12, 2024 21:06:20.736148119 CEST	60840	53	192.168.2.16	1.1.1.1
Jun 12, 2024 21:06:20.745456934 CEST	53	57376	1.1.1.1	192.168.2.16
Jun 12, 2024 21:06:20.745474100 CEST	53	60840	1.1.1.1	192.168.2.16
Jun 12, 2024 21:06:22.903498888 CEST	138	138	192.168.2.16	192.168.2.255
Jun 12, 2024 21:06:45.170852900 CEST	53	52137	1.1.1.1	192.168.2.16
Jun 12, 2024 21:07:13.173708916 CEST	62233	53	192.168.2.16	1.1.1.1
Jun 12, 2024 21:07:13.173918962 CEST	51859	53	192.168.2.16	1.1.1.1
Jun 12, 2024 21:07:13.204277992 CEST	53	62233	1.1.1.1	192.168.2.16
Jun 12, 2024 21:07:13.212672949 CEST	53	51859	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jun 12, 2024 21:05:15.875293016 CEST	192.168.2.16	1.1.1.1	0x73f2	Standard query (0)	691tx8z8.r.us-east-1.awstrack.me	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:05:15.875478029 CEST	192.168.2.16	1.1.1.1	0x2f98	Standard query (0)	691tx8z8.r.us-east-1.awstrack.me	65	IN (0x0001)	false
Jun 12, 2024 21:05:20.683084965 CEST	192.168.2.16	1.1.1.1	0x4e52	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:05:20.683240891 CEST	192.168.2.16	1.1.1.1	0xc0ec	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jun 12, 2024 21:06:18.153043985 CEST	192.168.2.16	1.1.1.1	0xd88	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:06:18.153357983 CEST	192.168.2.16	1.1.1.1	0x6ad1	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Jun 12, 2024 21:06:19.165926933 CEST	192.168.2.16	1.1.1.1	0x92be	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:06:19.166045904 CEST	192.168.2.16	1.1.1.1	0x3382	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jun 12, 2024 21:06:20.736006975 CEST	192.168.2.16	1.1.1.1	0x4051	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:06:20.736148119 CEST	192.168.2.16	1.1.1.1	0x908b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jun 12, 2024 21:07:13.173708916 CEST	192.168.2.16	1.1.1.1	0xe600	Standard query (0)	691tx8z8.r.us-east-1.awstrack.me	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:07:13.173918962 CEST	192.168.2.16	1.1.1.1	0x4c15	Standard query (0)	691tx8z8.r.us-east-1.awstrack.me	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jun 12, 2024 21:05:15.904169083 CEST	1.1.1.1	192.168.2.16	0x2f98	No error (0)	691tx8z8.r.us-east-1.awstrack.me	r.us-east-1.awstrack.me		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:05:15.904169083 CEST	1.1.1.1	192.168.2.16	0x2f98	No error (0)	r.us-east-1.awstrack.me	r.delegate.us-east-1.awstrack.me		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:05:15.904169083 CEST	1.1.1.1	192.168.2.16	0x2f98	No error (0)	r.delegate.us-east-1.awstrack.me	baconredirects-elb-1w79jy7i6g0wf-1154668140.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:05:15.923618078 CEST	1.1.1.1	192.168.2.16	0x73f2	No error (0)	691tx8z8.r.us-east-1.awstrack.me	r.us-east-1.awstrack.me		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:05:15.923618078 CEST	1.1.1.1	192.168.2.16	0x73f2	No error (0)	r.us-east-1.awstrack.me	r.delegate.us-east-1.awstrack.me		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:05:15.923618078 CEST	1.1.1.1	192.168.2.16	0x73f2	No error (0)	r.delegate.us-east-1.awstrack.me	baconredirects-elb-1w79jy7i6g0wf-1154668140.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:05:15.923618078 CEST	1.1.1.1	192.168.2.16	0x73f2	No error (0)	baconredirects-elb-1w79jy7i6g0wf-1154668140.us-east-1.elb.amazonaws.com		54.146.166.145	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:05:15.923618078 CEST	1.1.1.1	192.168.2.16	0x73f2	No error (0)	baconredirects-elb-1w79jy7i6g0wf-1154668140.us-east-1.elb.amazonaws.com		34.206.237.27	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:05:15.923618078 CEST	1.1.1.1	192.168.2.16	0x73f2	No error (0)	baconredirects-elb-1w79jy7i6g0wf-1154668140.us-east-1.elb.amazonaws.com		52.206.152.20	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:05:20.696450949 CEST	1.1.1.1	192.168.2.16	0x4e52	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:05:20.697560072 CEST	1.1.1.1	192.168.2.16	0xc0ec	No error (0)	www.google.com			65	IN (0x0001)	false
Jun 12, 2024 21:06:18.160301924 CEST	1.1.1.1	192.168.2.16	0xd88	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:06:18.160301924 CEST	1.1.1.1	192.168.2.16	0xd88	No error (0)	plus.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:06:18.162206888 CEST	1.1.1.1	192.168.2.16	0x6ad1	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:06:19.173062086 CEST	1.1.1.1	192.168.2.16	0x92be	No error (0)	play.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:06:20.745456934 CEST	1.1.1.1	192.168.2.16	0x4051	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:06:20.745474100 CEST	1.1.1.1	192.168.2.16	0x908b	No error (0)	www.google.com			65	IN (0x0001)	false
Jun 12, 2024 21:07:13.204277992 CEST	1.1.1.1	192.168.2.16	0xe600	No error (0)	691tx8z8.r.us-east-1.awstrack.me	r.us-east-1.awstrack.me		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:07:13.204277992 CEST	1.1.1.1	192.168.2.16	0xe600	No error (0)	r.us-east-1.awstrack.me	r.delegate.us-east-1.awstrack.me		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:07:13.204277992 CEST	1.1.1.1	192.168.2.16	0xe600	No error (0)	r.delegate.us-east-1.awstrack.me	baconredirects-elb-1w79jy7i6g0wf-1154668140.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:07:13.204277992 CEST	1.1.1.1	192.168.2.16	0xe600	No error (0)	baconredirects-elb-1w79jy7i6g0wf-1154668140.us-east-1.elb.amazonaws.com		54.146.166.145	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:07:13.204277992 CEST	1.1.1.1	192.168.2.16	0xe600	No error (0)	baconredirects-elb-1w79jy7i6g0wf-1154668140.us-east-1.elb.amazonaws.com		52.206.152.20	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:07:13.204277992 CEST	1.1.1.1	192.168.2.16	0xe600	No error (0)	baconredirects-elb-1w79jy7i6g0wf-1154668140.us-east-1.elb.amazonaws.com		34.206.237.27	A (IP address)	IN (0x0001)	false
Jun 12, 2024 21:07:13.212672949 CEST	1.1.1.1	192.168.2.16	0x4c15	No error (0)	691tx8z8.r.us-east-1.awstrack.me	r.us-east-1.awstrack.me		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:07:13.212672949 CEST	1.1.1.1	192.168.2.16	0x4c15	No error (0)	r.us-east-1.awstrack.me	r.delegate.us-east-1.awstrack.me		CNAME (Canonical name)	IN (0x0001)	false
Jun 12, 2024 21:07:13.212672949 CEST	1.1.1.1	192.168.2.16	0x4c15	No error (0)	r.delegate.us-east-1.awstrack.me	baconredirects-elb-1w79jy7i6g0wf-1154668140.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

ipinfo.io

691tx8z8.r.us-east-1.awstrack.me

fs.microsoft.com

slscr.update.microsoft.com

www.google.com

apis.google.com

play.google.com

https:

www.bing.com

r.bing.com

browser.pipe.aria.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.16	49695	34.117.186.192	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:05:08 UTC	59	OUT	GET / HTTP/1.1 Host: ipinfo.io Connection: Keep-Alive
2024-06-12 19:05:08 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Wed, 12 Jun 2024 19:05:08 GMT content-type: application/json; charset=utf-8 Content-Length: 314 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-12 19:05:08 UTC	314	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 31 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 31 2e 73 74 61 74 69 63 2e 71 75 61 64 72 61 6e 65 74 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 44 61 6c 6c 61 73 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 54 65 78 61 73 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 33 32 2e 38 31 35 32 2c 2d 39 36 2e 38 37 30 33 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 38 31 30 30 20 51 75 61 64 72 61 4e 65 74 20 45 6e 74 65 72 70 72 69 73 65 73 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 37 35 32 34 37 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d 65 72 Data Ascii: { "ip": "173.254.250.91", "hostname": "173.254.250.91.static.quadranet.com", "city": "Dallas", "region": "Texas", "country": "US", "loc": "32.8152,-96.8703", "org": "AS8100 QuadraNet Enterprises LLC", "postal": "75247", "timezone": "Amer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49697	54.146.166.145	443	6224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:05:16 UTC	2634	OUT	GET /L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink.me%2525252FoRT7%2525253F%2525252526c%252525253DPartnerize%2525252526af_siteid%252525253D1100l998%2525252526is_retargeting%252525253Dtrue%2525252526af_reengagement_window%252525253D30d%2525252526af_click_lookback%252525253D7d%2525252526af_media_type%252525253Dweb%2525252526clickid%252525253D%2525252526af_r%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.ln-cc.com%25252525252Fen%25252525252Fspecial-25%25252525252Fvintage-check-belt-bag-in-yellow-bur0137022bei.html%25252525253Fcgid%25252525253Dspecial-25%252525252526app_clickref%25252525253D%252525252526utm_source%25252525253DPZ%252525252526utm_medium%25252525253Daffiliate%252525252526utm_campaign%25252525253Decentime-nl%2525252526af_web_dp%252525253Dhttps%2525253A%2525252F%2525252Fu45053809. [TRUNCATED] Host: 691tx8z8.r.us-east-1.awstrack.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-12 19:05:16 UTC	103	IN	HTTP/1.1 400 Bad Request Date: Wed, 12 Jun 2024 19:05:16 GMT Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49707	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:05:25 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-06-12 19:05:25 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=75844 Date: Wed, 12 Jun 2024 19:05:25 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49708	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:05:26 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-06-12 19:05:27 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=75936 Date: Wed, 12 Jun 2024 19:05:27 GMT Content-Length: 55 Connection: close X-CID: 2
2024-06-12 19:05:27 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49709	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:05:28 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RmDGoAed9OKOYYw&MD=4KHRZ5fs HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-06-12 19:05:28 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 16012cd2-5ee7-4c6f-a4a2-b83ac66423b5 MS-RequestId: 9e502b7b-1160-47b7-991b-610b81530e26 MS-CV: EmLBvh2c7UenNYFf.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 12 Jun 2024 19:05:27 GMT Connection: close Content-Length: 24490
2024-06-12 19:05:28 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-06-12 19:05:28 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49711	54.146.166.145	443	6224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:05:30 UTC	2666	OUT	GET /L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink.me%2525252FoRT7%2525253F%2525252526c%252525253DPartnerize%2525252526af_siteid%252525253D1100l998%2525252526is_retargeting%252525253Dtrue%2525252526af_reengagement_window%252525253D30d%2525252526af_click_lookback%252525253D7d%2525252526af_media_type%252525253Dweb%2525252526clickid%252525253D%2525252526af_r%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.ln-cc.com%25252525252Fen%25252525252Fspecial-25%25252525252Fvintage-check-belt-bag-in-yellow-bur0137022bei.html%25252525253Fcgid%25252525253Dspecial-25%252525252526app_clickref%25252525253D%252525252526utm_source%25252525253DPZ%252525252526utm_medium%25252525253Daffiliate%252525252526utm_campaign%25252525253Decentime-nl%2525252526af_web_dp%252525253Dhttps%2525253A%2525252F%2525252Fu45053809. [TRUNCATED] Host: 691tx8z8.r.us-east-1.awstrack.me Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-12 19:05:30 UTC	103	IN	HTTP/1.1 400 Bad Request Date: Wed, 12 Jun 2024 19:05:29 GMT Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49712	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:06:05 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RmDGoAed9OKOYYw&MD=4KHRZ5fs HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-06-12 19:06:06 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_1440" MS-CorrelationId: f1dae9da-3953-4d9c-9055-8cac9810289f MS-RequestId: 0ad1225d-be04-4402-b185-6c85c42f0492 MS-CV: 7CYxdrVxlEypGaBL.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 12 Jun 2024 19:06:06 GMT Connection: close Content-Length: 25457
2024-06-12 19:06:06 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-06-12 19:06:06 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49713	172.217.18.4	443	6224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:06:15 UTC	627	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-12 19:06:15 UTC	1191	IN	HTTP/1.1 200 OK Date: Wed, 12 Jun 2024 19:06:15 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-fRO7l9z0wMvoJD0um6Oalw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-06-12 19:06:15 UTC	187	IN	Data Raw: 64 66 66 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 69 63 6f 6c 65 20 6b 69 64 6d 61 6e 20 70 72 61 63 74 69 63 61 6c 20 6d 61 67 69 63 22 2c 22 6a 65 73 75 73 20 63 68 72 69 73 74 20 63 68 69 6c 64 68 6f 6f 64 22 2c 22 61 6d 61 72 69 20 63 6f 6f 70 65 72 20 63 6f 6e 74 72 61 63 74 22 2c 22 63 6f 64 22 2c 22 63 6f 64 22 2c 22 63 6f 64 22 2c 22 63 61 6c 69 66 6f 72 6e 69 61 20 6d 69 6e 69 6d 75 6d 20 77 61 67 65 20 68 69 6b 65 22 2c 22 70 6f 70 65 20 66 72 61 6e 63 69 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c Data Ascii: dff)]}'["",["nicole kidman practical magic","jesus christ childhood","amari cooper contract","cod","cod","cod","userfornia minimum wage hike","pope francis"],["","","","","","","",""],
2024-06-12 19:06:15 UTC	1378	IN	Data Raw: 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 30 30 33 64 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 22 67 6f 6f 67 6c 65 3a 65 6e 74 69 74 79 69 6e 66 6f 22 3a 22 43 67 67 76 62 53 38 77 62 54 6c 30 64 78 49 64 55 48 4a 68 59 33 52 70 59 32 46 73 49 45 31 68 5a 32 6c 6a 49 4f 4b 41 6c 43 41 78 4f 54 6b 34 49 47 5a 70 62 47 30 79 72 78 5a 6b 59 58 52 68 4f 6d 6c 74 59 57 64 6c 4c 32 70 77 5a 57 63 37 59 6d 46 7a 5a 54 59 30 4c 43 38 35 61 69 38 Data Ascii: [],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"google:entityinfo":"CggvbS8wbTl0dxIdUHJhY3RpY2FsIE1hZ2ljIOKAlCAxOTk4IGZpbG0yrxZkYXRhOmltYWdlL2pwZWc7YmFzZTY0LC85ai8
2024-06-12 19:06:15 UTC	1378	IN	Data Raw: 4e 76 5a 54 5a 75 53 47 4e 6c 4d 6e 42 52 55 47 4e 4d 61 32 52 53 54 55 5a 59 56 33 46 4a 57 55 74 68 63 47 35 52 53 6b 31 4b 53 57 78 54 55 58 46 46 62 44 52 42 57 57 56 71 5a 48 56 6d 59 6c 56 4a 53 47 4e 48 65 6a 46 4f 54 58 4a 4c 64 54 4e 57 62 44 42 79 63 58 6c 4c 63 46 55 78 4d 57 4a 52 56 6d 78 32 51 30 64 59 4c 31 4a 68 53 6b 70 51 63 6b 49 34 64 6b 56 42 61 58 67 32 62 44 56 4f 57 69 74 52 51 6a 68 55 55 56 4a 61 54 56 6c 30 64 48 64 6e 62 30 78 56 61 30 4e 59 59 56 70 4c 65 57 31 76 4e 58 4a 6d 53 54 42 73 55 32 52 72 56 54 68 7a 5a 54 5a 4b 65 48 70 6e 53 33 42 46 61 32 55 33 5a 30 74 6b 63 44 6b 35 57 44 4a 69 63 55 52 61 51 57 39 48 55 57 56 73 4e 32 5a 6a 4e 6c 46 53 56 6a 46 33 64 57 4a 77 4e 46 4d 78 52 6b 78 47 55 31 42 50 52 30 46 59 4e Data Ascii: NvZTZuSGNlMnBRUGNMa2RSTUZYV3FJWUthcG5RSk1KSWxTUXFFbDRBWWVqZHVmYlVJSGNHejFOTXJLdTNWbDBycXlLcFUxMWJRVmx2Q0dYL1JhSkpQckI4dkVBaXg2bDVOWitRQjhUUVJaTVl0dHdnb0xVa0NYYVpLeW1vNXJmSTBsU2RrVThzZTZKeHpnS3BFa2U3Z0tkcDk5WDJicURaQW9HUWVsN2ZjNlFSVjF3dWJwNFMxRkxGU1BPR0FYN
2024-06-12 19:06:15 UTC	647	IN	Data Raw: 4d 32 52 52 5a 33 68 4c 53 58 64 4a 4e 6d 35 31 61 6b 51 7a 55 47 74 6b 59 33 52 72 4d 33 4e 55 61 6d 35 52 4d 6a 42 43 59 30 39 4b 65 46 4a 59 61 54 4e 4f 53 6c 52 57 4e 45 46 6b 54 30 70 46 62 6d 4e 4d 61 6a 68 47 57 55 52 57 51 54 64 61 55 32 74 78 4d 31 5a 35 55 6a 42 61 59 6a 42 76 54 46 51 30 51 57 78 4e 63 6a 63 79 57 58 56 36 52 57 78 31 5a 53 39 4b 53 6e 68 71 52 32 70 57 64 44 4e 4e 52 46 56 4f 59 6c 68 56 62 33 5a 70 54 44 46 4d 59 32 56 75 63 55 64 5a 64 33 64 4b 53 45 56 33 64 30 74 77 53 6c 46 48 57 46 41 72 4d 47 63 34 4c 7a 55 77 55 32 64 4e 4d 6a 4a 46 63 54 51 76 63 44 64 35 5a 57 5a 70 59 7a 6c 59 51 7a 5a 54 57 45 74 6c 56 33 42 78 52 79 74 76 61 6b 4e 71 4d 69 39 33 52 46 6f 78 64 46 4a 42 62 32 39 55 53 79 74 55 5a 56 4e 55 53 57 4e Data Ascii: M2RRZ3hLSXdJNm51akQzUGtkY3RrM3NUam5RMjBCY09KeFJYaTNOSlRWNEFkT0pFbmNMajhGWURWQTdaU2txM1Z5UjBaYjBvTFQ0QWxNcjcyWXV6RWx1ZS9KSnhqR2pWdDNNRFVOYlhVb3ZpTDFMY2VucUdZd3dKSEV3d0twSlFHWFArMGc4LzUwU2dNMjJFcTQvcDd5ZWZpYzlYQzZTWEtlV3BxRytvakNqMi93RFoxdFJBb29USytUZVNUSWN
2024-06-12 19:06:15 UTC	1378	IN	Data Raw: 32 62 30 38 0d 0a 58 5a 72 59 54 52 4e 54 58 42 43 51 69 73 35 54 48 4a 35 59 32 70 69 62 6b 6c 33 51 32 59 34 51 55 39 75 54 47 74 53 62 44 4e 42 4f 46 4a 4b 56 57 63 78 54 48 6b 79 4c 30 52 4d 63 55 74 6c 4e 30 64 6f 63 6d 46 53 4e 6c 5a 4a 4e 47 38 31 63 46 70 58 53 44 4e 58 51 55 39 46 65 6d 64 4e 64 33 70 6e 61 6b 39 42 55 6e 6c 6b 53 33 6b 32 63 45 56 58 4c 32 4e 4f 59 31 70 5a 64 33 63 72 52 32 52 49 56 6d 52 4e 56 6a 45 33 63 48 46 77 4d 44 4e 35 55 6a 41 33 62 7a 42 69 57 6b 52 4d 62 56 56 6d 62 44 55 32 4e 56 64 32 4d 55 6c 35 62 32 6f 30 4c 33 6f 72 63 48 56 33 57 55 4e 79 54 58 4a 6d 4e 33 56 6c 4d 7a 64 76 4d 6a 63 35 56 6d 52 61 61 54 56 52 65 48 64 6d 53 55 78 46 61 58 55 34 4f 47 39 56 55 48 52 43 65 55 46 50 56 44 64 6b 64 6c 42 55 5a 45 Data Ascii: 2b08XZrYTRNTXBCQis5THJ5Y2pibkl3Q2Y4QU9uTGtSbDNBOFJKVWcxTHkyL0RMcUtlN0docmFSNlZJNG81cFpXSDNXQU9FemdNd3pnak9BUnlkS3k2cEVXL2NOY1pZd3crR2RIVmRNVjE3cHFwMDN5UjA3bzBiWkRMbVVmbDU2NVd2MUl5b2o0L3orcHV3WUNyTXJmN3VlMzdvMjc5VmRaaTVReHdmSUxFaXU4OG9VUHRCeUFPVDdkdlBUZE
2024-06-12 19:06:15 UTC	1378	IN	Data Raw: 38 76 54 6a 6c 52 56 6b 30 78 61 6c 52 61 53 43 38 78 56 6e 70 73 62 47 31 58 53 56 70 75 62 55 68 6c 55 58 46 50 64 56 42 43 65 6b 56 53 63 57 4e 68 57 57 5a 78 53 7a 4a 46 53 6c 70 76 53 32 39 54 5a 30 31 43 62 32 68 69 52 44 52 51 53 6b 6b 78 55 6c 6b 79 53 47 31 79 61 6b 46 5a 61 46 70 4c 62 55 64 68 63 6b 64 36 52 6c 4a 35 52 30 4d 78 57 6d 4a 34 55 32 78 36 52 57 5a 35 54 54 42 6b 51 54 4e 50 57 6b 74 4e 4f 54 68 78 57 6d 6c 49 61 6b 39 6f 64 56 70 61 4c 33 63 32 56 33 42 74 62 6c 63 76 65 45 4a 4b 65 6a 52 35 4d 53 38 33 62 33 70 52 57 6e 64 71 63 48 64 49 64 45 4e 6c 55 58 4e 33 5a 33 64 56 4d 57 74 33 4f 54 4a 58 53 32 70 69 56 6d 31 6b 62 31 4a 55 56 58 64 4a 65 53 39 73 61 46 64 69 64 6d 46 42 4e 44 42 6b 5a 47 56 46 51 57 78 74 54 58 4e 4f 56 Data Ascii: 8vTjlRVk0xalRaSC8xVnpsbG1XSVpubUhlUXFPdVBCekVScWNhWWZxSzJFSlpvS29TZ01Cb2hiRDRQSkkxUlkySG1yakFZaFpLbUdhckd6RlJ5R0MxWmJ4U2x6RWZ5TTBkQTNPWktNOThxWmlIak9odVpaL3c2V3BtblcveEJKejR5MS83b3pRWndqcHdIdENlUXN3Z3dVMWt3OTJXS2piVm1kb1JUVXdJeS9saFdidmFBNDBkZGVFQWxtTXNOV
2024-06-12 19:06:15 UTC	1378	IN	Data Raw: 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 69 38 76 51 55 46 43 52 55 6c 42 52 55 46 42 54 57 64 4e 51 6b 6c 6e 51 55 4e 46 55 55 56 45 52 56 46 49 4c 33 68 42 51 57 4a 42 51 55 46 44 51 58 64 46 51 6b 46 52 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 55 5a 43 5a 30 46 45 51 6b 46 4a 51 6b 49 76 4c 30 56 42 52 46 56 52 51 55 46 4a 51 6b 46 6e 55 55 52 43 64 30 56 48 51 6e 64 46 51 55 46 42 51 55 46 42 51 55 56 44 51 58 64 52 55 6b 46 42 56 56 4e 4a 55 6b 31 70 54 56 46 5a 56 55 31 72 52 6c 4a 5a 57 45 64 53 54 54 46 4c 61 48 64 6b 53 48 64 47 55 30 39 43 61 7a 64 49 61 44 68 54 56 43 39 34 51 55 46 59 51 56 46 46 51 6b 46 52 52 55 Data Ascii: OemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTi8vQUFCRUlBRUFBTWdNQklnQUNFUUVERVFIL3hBQWJBQUFDQXdFQkFRQUFBQUFBQUFBQUFBQUZCZ0FEQkFJQkIvL0VBRFVRQUFJQkFnUURCd0VHQndFQUFBQUFBQUVDQXdRUkFBVVNJUk1pTVFZVU1rRlJZWEdSTTFLaHdkSHdGU09CazdIaDhTVC94QUFYQVFFQkFRRU
2024-06-12 19:06:15 UTC	1378	IN	Data Raw: 32 67 35 56 57 70 79 53 6b 6f 35 64 45 55 30 4d 44 4d 79 4f 44 45 34 64 48 4e 51 52 31 68 42 59 32 38 34 62 6b 70 36 59 7a 4d 31 5a 54 6c 42 5a 56 45 33 4d 47 59 77 65 44 64 71 56 56 56 70 59 32 77 79 63 45 5a 31 4d 6a 55 79 52 30 70 71 59 31 67 30 52 7a 45 32 57 58 4e 78 54 6b 35 47 56 58 51 7a 62 30 63 35 61 55 5a 32 4d 45 49 35 65 44 55 30 54 6e 67 31 62 6d 31 55 4d 55 31 78 59 30 59 31 51 32 6c 4f 64 30 70 5a 62 45 78 6a 52 57 78 54 51 56 5a 4f 63 6d 70 79 5a 31 70 49 62 47 6c 4d 63 57 73 78 51 6e 64 43 59 32 46 6f 4b 7a 63 30 63 31 68 4e 5a 55 4a 48 56 55 4d 79 64 44 42 47 4b 32 31 50 62 46 64 78 57 55 38 33 55 6d 4d 35 57 6d 35 57 56 6e 64 47 62 47 35 74 61 6d 46 48 4e 55 4a 51 53 57 4a 75 4d 54 6c 6c 62 55 73 31 53 30 6c 77 54 6b 46 5a 4d 6d 74 47 Data Ascii: 2g5VWpySko5dEU0MDMyODE4dHNQR1hBY284bkp6YzM1ZTlBZVE3MGYweDdqVVVpY2wycEZ1MjUyR0pqY1g0RzE2WXNxTk5GVXQzb0c5aUZ2MEI5eDU0Tng1bm1UMU1xY0Y1Q2lOd0pZbExjRWxTQVZOcmpyZ1pIbGlMcWsxQndCY2FoKzc0c1hNZUJHVUMydDBGK21PbFdxWU83UmM5Wm5WVndGbG5tamFHNUJQSWJuMTllbUs1S0lwTkFZMmtG
2024-06-12 19:06:15 UTC	1378	IN	Data Raw: 46 46 33 54 6b 64 6e 4f 46 42 48 61 6d 4e 73 53 48 6c 56 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 4c 79 39 42 51 55 4a 46 53 55 46 46 51 55 46 52 51 55 31 43 53 57 64 42 51 30 56 52 52 55 52 46 55 55 67 76 65 45 46 42 59 6b 46 42 51 55 4e 42 5a 30 31 43 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 52 45 4a 52 55 55 64 42 55 55 6c 49 51 56 41 76 52 55 46 45 56 56 46 42 51 55 56 46 51 55 46 52 52 55 46 33 57 55 5a 43 51 55 31 42 51 55 46 42 51 55 46 42 52 55 4e 42 64 31 46 53 51 55 46 56 55 30 6c 52 57 56 52 4e 56 55 5a 53 Data Ascii: FF3TkdnOFBHamNsSHlVM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOLy9BQUJFSUFFQUFRQU1CSWdBQ0VRRURFUUgveEFBYkFBQUNBZ01CQUFBQUFBQUFBQUFBQUFBREJRUUdBUUlIQVAvRUFEVVFBQUVFQUFRRUF3WUZCQU1BQUFBQUFBRUNBd1FSQUFVU0lRWVRNVUZS
2024-06-12 19:06:15 UTC	1378	IN	Data Raw: 30 53 31 56 57 5a 57 35 5a 4e 7a 6c 53 57 48 4a 70 4e 7a 56 47 53 47 4e 45 53 47 68 35 54 6e 4e 70 56 58 5a 4d 54 58 68 70 53 32 6c 4a 57 57 73 32 52 6d 35 31 54 6b 35 57 4f 44 5a 79 52 48 56 5a 61 47 6c 51 51 57 4e 6a 56 32 68 7a 4e 6c 4a 68 56 33 6c 55 59 57 6f 79 52 69 74 6c 53 31 70 33 4d 6a 64 73 56 56 6c 6a 4e 30 35 47 65 55 56 31 61 7a 5a 56 5a 33 46 4a 55 55 55 77 55 56 4e 78 4c 32 78 6f 4d 33 68 47 65 44 64 33 4e 55 34 30 57 6c 70 6e 54 56 4a 61 61 54 68 36 59 57 46 52 63 45 56 77 52 33 6c 42 4e 6b 4a 53 4d 57 46 71 59 57 64 4d 4e 6b 56 69 4c 30 73 34 57 54 4a 5a 65 6a 41 77 62 30 4e 51 57 6e 56 57 65 46 68 50 52 31 70 48 59 6c 46 75 4d 6b 64 48 62 57 64 44 64 57 74 75 62 54 4e 5a 51 31 56 42 52 57 52 54 55 30 55 33 5a 6e 52 6f 54 43 39 34 4d 55 Data Ascii: 0S1VWZW5ZNzlSWHJpNzVGSGNESGh5TnNpVXZMTXhpS2lJWWs2Rm51Tk5WODZyRHVZaGlQQWNjV2hzNlJhV3lUYWoyRitlS1p3MjdsVVljN05GeUV1azZVZ3FJUUUwUVNxL2xoM3hGeDd3NU40WlpnTVJaaTh6YWFRcEVwR3lBNkJSMWFqYWdMNkViL0s4WTJZejAwb0NQWnVWeFhPR1pHYlFuMkdHbWdDdWtubTNZQ1VBRWRTU0U3ZnRoTC94MU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49714	172.217.18.4	443	6224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:06:15 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-12 19:06:15 UTC	1059	IN	HTTP/1.1 200 OK Version: 641807779 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Viewport-Width Accept-CH: Sec-CH-Viewport-Height Accept-CH: Sec-CH-DPR Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 12 Jun 2024 19:06:15 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-06-12 19:06:15 UTC	25	IN	Data Raw: 31 33 0d 0a 29 5d 7d 27 0a 7b 22 64 64 6c 6a 73 6f 6e 22 3a 7b 7d 7d 0d 0a Data Ascii: 13)]}'{"ddljson":{}}
2024-06-12 19:06:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49715	172.217.18.4	443	6224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:06:15 UTC	530	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-12 19:06:16 UTC	967	IN	HTTP/1.1 200 OK Version: 641807779 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 12 Jun 2024 19:06:15 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-06-12 19:06:16 UTC	411	IN	Data Raw: 32 31 63 30 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 71 61 20 67 62 5f 69 62 20 67 62 5f 55 64 20 67 62 5f 6f 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 21c0)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_qa gb_ib gb_Ud gb_od\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2024-06-12 19:06:16 UTC	1378	IN	Data Raw: 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 50 63 20 67 62 5f 71 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 33 64 5c 22 30 20 30 20 32 34 20 32 34 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 33 20 31 38 68 31 38 76 2d 32 48 33 76 32 7a 6d 30 2d 35 68 31 38 76 2d 32 48 33 76 32 7a 6d 30 2d Data Ascii: iv class\u003d\"gb_Pc gb_q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-
2024-06-12 19:06:16 UTC	1378	IN	Data Raw: 20 67 62 5f 66 64 20 67 62 5f 67 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 6a 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 72 64 20 67 62 5f 43 64 20 67 62 5f 79 64 20 67 62 5f 48 65 20 67 62 5f 5a 65 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 Data Ascii: gb_fd gb_gd\"\u003e\u003cspan class\u003d\"gb_jd\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_rd gb_Cd gb_yd gb_He gb_Ze\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"g
2024-06-12 19:06:16 UTC	1378	IN	Data Raw: 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 71 30 2d 31 33 20 38 2e 35 2d 32 31 2e 35 54 33 35 30 2d 38 34 30 68 32 36 30 71 31 33 20 30 20 32 31 2e 35 20 38 2e 35 54 36 34 30 2d 38 31 30 71 30 20 31 33 2d 38 2e 35 20 32 31 2e 35 54 36 31 30 2d 37 38 30 68 2d 32 30 Data Ascii: ox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810q0-13 8.5-21.5T350-840h260q13 0 21.5 8.5T640-810q0 13-8.5 21.5T610-780h-20
2024-06-12 19:06:16 UTC	1378	IN	Data Raw: 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 32 30 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 70 Data Ascii: 6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,20c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2z\"\u003e\u003c\/p
2024-06-12 19:06:16 UTC	1378	IN	Data Raw: 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 31 33 30 30 31 30 32 2c 33 37 30 30 33 33 38 2c 33 37 30 30 39 34 39 2c 33 37 30 31 33 31 30 2c 33 37 30 31 33 38 31 2c 33 37 30 31 33 38 37 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 5f 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 5c 75 30 30 33 64 74 68 69 73 3b 5c 6e 74 72 79 7b 5c 6e 5f 2e Data Ascii: xperiment_id":[1300102,3700338,3700949,3701310,3701381,3701387],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar_\|\|{};(function(_){var window\u003dthis;\ntry{\n_.
2024-06-12 19:06:16 UTC	1347	IN	Data Raw: 61 2e 69 29 72 65 74 75 72 6e 20 61 2e 69 5b 62 5d 3b 74 68 72 6f 77 20 6e 65 77 20 6d 64 3b 7d 3b 5f 2e 6f 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 6e 64 28 5f 2e 53 63 2e 69 28 29 2c 61 29 7d 3b 5c 6e 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 5c 6e 74 72 79 7b 5c 6e 2f 2a 5c 6e 5c 6e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 5c 6e 2a 2f 5c 6e 76 61 72 20 75 64 2c 44 64 2c 46 64 3b 5f 2e 70 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 5c 75 30 30 33 64 5c 75 30 30 33 64 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 5c 75 30 30 33 64 5c 75 30 30 33 Data Ascii: a.i)return a.i[b];throw new md;};_.od\u003dfunction(a){return _.nd(_.Sc.i(),a)};\n}catch(e){_._DumpException(e)}\ntry{\n/\n\n SPDX-License-Identifier: Apache-2.0\n/\nvar ud,Dd,Fd;_.pd\u003dfunction(a){if(a\u003d\u003dnull)return a;if(typeof a\u003d\u003
2024-06-12 19:06:16 UTC	395	IN	Data Raw: 31 38 34 0d 0a 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 28 61 29 3f 61 7c 30 3a 76 6f 69 64 20 30 7d 3b 5f 2e 53 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 5c 75 30 30 33 64 30 29 7b 72 65 74 75 72 6e 20 5f 2e 6b 62 28 5f 2e 43 64 28 61 2c 62 29 2c 63 29 7d 3b 44 64 5c 75 30 30 33 64 30 3b 5f 2e 45 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 5f 2e 78 62 29 5c 75 30 30 32 36 5c 75 30 30 32 36 61 5b 5f 2e 78 62 5d 7c 7c 28 61 5b 5f 2e 78 62 5d 5c 75 30 30 33 64 2b 2b 44 64 29 7d 3b 46 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 47 64 5c 75 Data Ascii: 184Number.isFinite(a)?a\|0:void 0};_.S\u003dfunction(a,b,c\u003d0){return _.kb(_.Cd(a,b),c)};Dd\u003d0;_.Ed\u003dfunction(a){return Object.prototype.hasOwnProperty.call(a,_.xb)\u0026\u0026a[_.xb]\|\|(a[_.xb]\u003d++Dd)};Fd\u003dfunction(a){return a};_.Gd\u
2024-06-12 19:06:16 UTC	1378	IN	Data Raw: 38 30 30 30 0d 0a 63 72 69 70 74 3a 46 64 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 46 64 7d 29 7d 63 61 74 63 68 28 64 29 7b 5f 2e 72 2e 63 6f 6e 73 6f 6c 65 5c 75 30 30 32 36 5c 75 30 30 32 36 5f 2e 72 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 64 2e 6d 65 73 73 61 67 65 29 7d 72 65 74 75 72 6e 20 62 7d 3b 5c 6e 5f 2e 48 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 62 2c 30 29 5c 75 30 30 33 64 5c 75 30 30 33 64 30 7d 3b 5f 2e 49 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 6d 65 2e 63 61 6c 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3b 74 72 79 7b 28 6e 65 77 20 73 65 6c Data Ascii: 8000cript:Fd,createScriptURL:Fd})}catch(d){_.r.console\u0026\u0026_.r.console.error(d.message)}return b};\n_.Hd\u003dfunction(a,b){return a.lastIndexOf(b,0)\u003d\u003d0};_.Id\u003dfunction(a,b){return Array.prototype.some.call(a,b,void 0)};try{(new sel
2024-06-12 19:06:16 UTC	1378	IN	Data Raw: 7e 5d 2a 5c 75 30 30 32 37 7c 5c 5c 5c 22 5b 20 21 23 2d 5c 5c 5c 5c 5b 5c 5c 5c 5c 5d 2d 7e 5d 2a 5c 5c 5c 22 7c 5b 21 23 2d 5c 75 30 30 32 36 2a 2d 5c 5c 5c 5c 5b 5c 5c 5c 5c 5d 2d 7e 5d 2a 29 28 5b 20 5c 5c 74 5c 5c 6e 5d 2a 5c 5c 5c 5c 29 29 5c 22 2c 5c 22 67 5c 22 29 3b 5f 2e 56 64 5c 75 30 30 33 64 52 65 67 45 78 70 28 5c 22 5c 5c 5c 5c 62 28 63 61 6c 63 7c 63 75 62 69 63 2d 62 65 7a 69 65 72 7c 66 69 74 2d 63 6f 6e 74 65 6e 74 7c 68 73 6c 7c 68 73 6c 61 7c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 7c 6d 61 74 72 69 78 7c 6d 69 6e 6d 61 78 7c 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 7c 72 65 70 65 61 74 7c 72 67 62 7c 72 67 62 61 7c 28 72 6f 74 61 74 65 7c 73 63 61 6c 65 7c 74 72 61 6e 73 6c 61 74 65 29 28 58 7c 59 7c 5a 7c 33 64 29 3f 7c 73 Data Ascii: ~]\u0027\|\\\"[ !#-\\\\[\\\\]-~]\\\"\|[!#-\u0026-\\\\[\\\\]-~])([ \\t\\n]*\\\\))\",\"g\");_.Vd\u003dRegExp(\"\\\\b(calc\|cubic-bezier\|fit-content\|hsl\|hsla\|linear-gradient\|matrix\|minmax\|radial-gradient\|repeat\|rgb\|rgba\|(rotate\|scale\|translate)(X\|Y\|Z\|3d)?\|s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49716	172.217.18.4	443	6224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:06:15 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-12 19:06:16 UTC	922	IN	HTTP/1.1 200 OK Version: 641807779 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 12 Jun 2024 19:06:15 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-06-12 19:06:16 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-06-12 19:06:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49718	172.217.18.4	443	6224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:06:16 UTC	613	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-12 19:06:16 UTC	1191	IN	HTTP/1.1 200 OK Date: Wed, 12 Jun 2024 19:06:16 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-wfpnF0GjPOCGjwmJLcbU1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-06-12 19:06:16 UTC	187	IN	Data Raw: 34 31 65 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 63 69 6e 63 69 6e 6e 61 74 69 20 72 65 64 73 20 66 61 6e 20 74 61 73 65 64 22 2c 22 62 72 69 64 67 65 72 74 6f 6e 20 73 65 61 73 6f 6e 20 33 20 72 65 6c 65 61 73 65 20 64 61 74 65 20 6e 65 74 66 6c 69 78 22 2c 22 72 6f 62 6c 6f 78 20 67 79 6d 20 6c 65 61 67 75 65 20 63 6f 64 65 73 22 2c 22 6d 61 6c 61 77 69 20 76 69 63 65 20 70 72 65 73 69 64 65 6e 74 20 70 6c 61 6e 65 20 63 72 61 73 68 22 2c 22 61 6d 61 7a 6f 6e 20 70 72 69 6d 65 20 64 61 79 20 64 65 61 6c 73 22 2c 22 6a 61 6d 65 73 20 62 65 61 72 64 20 63 Data Ascii: 41e)]}'["",["cincinnati reds fan tased","bridgerton season 3 release date netflix","roblox gym league codes","malawi vice president plane crash","amazon prime day deals","james beard c
2024-06-12 19:06:16 UTC	874	IN	Data Raw: 68 65 66 20 61 77 61 72 64 73 22 2c 22 73 65 61 74 74 6c 65 20 6d 61 72 69 6e 65 72 73 20 62 72 79 61 6e 20 77 6f 6f 22 2c 22 6c 61 6b 65 20 63 68 61 6d 70 6c 61 69 6e 20 70 6c 61 6e 65 20 63 72 61 73 68 20 31 39 37 31 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 30 30 33 64 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 Data Ascii: hef awards","seattle mariners bryan woo","lake champlain plane crash 1971"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"
2024-06-12 19:06:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49719	172.217.18.4	443	6224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:06:17 UTC	626	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-12 19:06:17 UTC	1191	IN	HTTP/1.1 200 OK Date: Wed, 12 Jun 2024 19:06:17 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-D9BACMkGUR-eQUVxFK8SIA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-06-12 19:06:17 UTC	187	IN	Data Raw: 62 39 61 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 66 6c 6f 72 69 64 61 20 77 65 61 74 68 65 72 20 74 72 6f 70 69 63 61 6c 20 73 74 6f 72 6d 22 2c 22 6c 69 67 68 74 20 70 68 6f 6e 65 20 33 22 2c 22 66 6f 72 74 6e 69 74 65 20 6e 69 63 6b 20 65 68 20 33 30 20 69 63 6f 6e 20 73 6b 69 6e 22 2c 22 73 6f 6c 6f 6d 6f 6e 20 63 68 6f 69 20 31 36 20 68 61 6e 64 6c 65 73 22 2c 22 6a 61 6c 65 6e 20 68 75 72 74 73 20 6e 69 63 6b 20 73 69 72 69 61 6e 6e 69 20 65 61 67 6c 65 73 22 2c 22 77 6f 6d 61 6e 20 73 77 61 6c 6c 6f 77 65 64 20 62 79 20 71 75 69 63 6b 73 61 6e 64 20 Data Ascii: b9a)]}'["",["florida weather tropical storm","light phone 3","fortnite nick eh 30 icon skin","solomon choi 16 handles","jalen hurts nick sirianni eagles","woman swallowed by quicksand
2024-06-12 19:06:17 UTC	1378	IN	Data Raw: 62 65 61 63 68 22 2c 22 62 72 61 74 73 20 64 6f 63 75 6d 65 6e 74 61 72 79 20 61 6e 64 72 65 77 20 6d 63 63 61 72 74 68 79 22 2c 22 72 6f 62 6c 6f 78 20 67 79 6d 20 6c 65 61 67 75 65 20 63 6f 64 65 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 30 30 33 64 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 Data Ascii: beach","brats documentary andrew mccarthy","roblox gym league codes"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10
2024-06-12 19:06:17 UTC	1378	IN	Data Raw: 56 54 6a 52 76 65 6d 68 58 65 44 59 32 52 57 52 68 5a 46 70 30 56 44 68 50 54 6e 46 4e 59 32 5a 77 61 69 74 68 4d 30 67 77 57 45 74 32 62 6d 56 35 55 47 31 32 56 6e 6c 32 56 6a 42 75 52 31 4a 43 56 47 64 77 51 58 45 77 4d 45 68 52 4f 56 4d 30 5a 33 5a 51 64 57 31 72 4d 6e 4a 55 55 30 51 34 59 6d 52 46 61 6b 68 74 65 6d 52 32 4d 7a 68 6e 59 55 46 4d 56 47 64 78 53 7a 5a 68 4e 32 31 31 53 54 56 58 55 33 70 30 55 58 49 7a 51 58 6c 6b 63 6d 4a 7a 63 58 56 6d 61 6c 64 6e 61 55 56 35 65 58 42 4d 51 54 56 53 56 6b 49 7a 53 56 41 33 4f 43 74 6d 5a 6d 78 53 54 48 64 53 64 31 52 69 4f 46 42 68 54 47 4d 79 56 6e 70 4c 64 44 56 4d 5a 55 68 4f 65 54 49 7a 51 7a 6c 4e 51 6c 49 32 61 48 6f 31 4b 31 70 76 5a 44 52 71 4d 43 73 30 4d 47 6b 35 5a 45 6c 61 61 57 30 30 59 6d Data Ascii: VTjRvemhXeDY2RWRhZFp0VDhPTnFNY2ZwaithM0gwWEt2bmV5UG12Vnl2VjBuR1JCVGdwQXEwMEhROVM0Z3ZQdW1rMnJUU0Q4YmRFakhtemR2MzhnYUFMVGdxSzZhN211STVXU3p0UXIzQXlkcmJzcXVmaldnaUV5eXBMQTVSVkIzSVA3OCtmZmxSTHdSd1RiOFBhTGMyVnpLdDVMZUhOeTIzQzlNQlI2aHo1K1pvZDRqMCs0MGk5ZElaaW00Ym
2024-06-12 19:06:17 UTC	34	IN	Data Raw: 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 7d 5d 0d 0a Data Ascii: UERY","QUERY","QUERY","QUERY"]}]
2024-06-12 19:06:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49723	142.250.185.142	443	6224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:06:19 UTC	737	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.JHoMBbBABZg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo_6Zf8M75AJqSyaaLg_vD7Vr9kevQ/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-12 19:06:19 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 123951 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 11 Jun 2024 11:13:12 GMT Expires: Wed, 11 Jun 2025 11:13:12 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 06 May 2024 15:16:46 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 114787 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-12 19:06:19 UTC	462	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 31 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 66 61 2c 68 61 2c 6d 61 2c 6e 61 2c 76 61 2c 77 61 2c 43 61 3b 62 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x100000, ]);var ba,fa,ha,ma,na,va,wa,Ca;ba=fun
2024-06-12 19:06:19 UTC	1378	IN	Data Raw: 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 Data Ascii: ototype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)ret
2024-06-12 19:06:19 UTC	1378	IN	Data Raw: 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 77 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error("b`"+String(a));};va=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};wa="function"==typ
2024-06-12 19:06:19 UTC	1378	IN	Data Raw: 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 5f 2e 47 61 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 28 30 2c 5f 2e 47 61 29 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 6d 61 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 50 66 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 68 29 7b 72 65 74 75 72 6e 20 68 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 68 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 28 68 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: t.setPrototypeOf",function(a){return a?a:_.Ga?function(b,c){try{return(0,_.Ga)(b,c),!0}catch(d){return!1}}:null});ma("Promise",function(a){function b(){this.Pf=null}function c(h){return h instanceof e?h:new e(function(k){k(h)})}if(a)return a;b.prototype.
2024-06-12 19:06:19 UTC	1378	IN	Data Raw: 6e 28 68 29 7b 74 68 69 73 2e 41 5f 28 31 2c 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 41 5f 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 47 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 63 60 22 2b 68 2b 22 60 22 2b 6b 2b 22 60 22 2b 74 68 69 73 2e 47 61 29 3b 74 68 69 73 2e 47 61 3d 68 3b 74 68 69 73 2e 47 66 3d 6b 3b 32 3d 3d 3d 74 68 69 73 2e 47 61 26 26 74 68 69 73 2e 53 65 61 28 29 3b 74 68 69 73 2e 65 38 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 53 65 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 68 2e 4b 63 61 28 29 29 7b 76 61 72 20 6b 3d 5f 2e 6c 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 Data Ascii: n(h){this.A_(1,h)};e.prototype.A_=function(h,k){if(0!=this.Ga)throw Error("c`"+h+"`"+k+"`"+this.Ga);this.Ga=h;this.Gf=k;2===this.Ga&&this.Sea();this.e8()};e.prototype.Sea=function(){var h=this;d(function(){if(h.Kca()){var k=_.la.console;"undefined"!==type
2024-06-12 19:06:19 UTC	1378	IN	Data Raw: 6e 75 6c 6c 3d 3d 74 68 69 73 2e 63 73 3f 66 2e 42 50 28 6c 29 3a 74 68 69 73 2e 63 73 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 4a 56 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6c 28 68 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 5f 2e 72 61 28 68 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6d 2e 6e 65 78 74 28 29 29 63 28 6e 2e 76 61 6c 75 65 29 2e 41 79 28 6b 2c 6c 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 Data Ascii: null==this.cs?f.BP(l):this.cs.push(l);this.JV=!0};e.resolve=c;e.reject=function(h){return new e(function(k,l){l(h)})};e.race=function(h){return new e(function(k,l){for(var m=_.ra(h),n=m.next();!n.done;n=m.next())c(n.value).Ay(k,l)})};e.all=function(h){var
2024-06-12 19:06:19 UTC	1378	IN	Data Raw: 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6d 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 48 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f Data Ascii: (2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set(m,4);return!n.has(l)&&4==n.get(m)}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");e("preventExtensions");e("seal");var h=0,k=function(l){this.Ha=(h+=Math.random()+1).to
2024-06-12 19:06:19 UTC	1378	IN	Data Raw: 28 6d 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6d 2e 69 64 5d 3d 5b 5d 29 3b 6d 2e 74 66 3f 6d 2e 74 66 2e 76 61 6c 75 65 3d 6c 3a 28 6d 2e 74 66 3d 7b 6e 65 78 74 3a 74 68 69 73 5b 31 5d 2c 6e 6c 3a 74 68 69 73 5b 31 5d 2e 6e 6c 2c 68 65 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 6b 2c 76 61 6c 75 65 3a 6c 7d 2c 6d 2e 6c 69 73 74 2e 70 75 73 68 28 6d 2e 74 66 29 2c 74 68 69 73 5b 31 5d 2e 6e 6c 2e 6e 65 78 74 3d 6d 2e 74 66 2c 74 68 69 73 5b 31 5d 2e 6e 6c 3d 6d 2e 74 66 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 74 66 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 Data Ascii: (m.list=this[0][m.id]=[]);m.tf?m.tf.value=l:(m.tf={next:this[1],nl:this[1].nl,head:this[1],key:k,value:l},m.list.push(m.tf),this[1].nl.next=m.tf,this[1].nl=m.tf,this.size++);return this};c.prototype.delete=function(k){k=d(this,k);return k.tf&&k.list?(k.li
2024-06-12 19:06:19 UTC	1378	IN	Data Raw: 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6c 28 6d 29 7d 3b 6d 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6b 3d 7b 7d 3b 72 65 74 75 72 6e 20 6b 2e 6e 6c 3d 6b 2e 6e 65 78 74 3d 6b 2e 68 65 61 64 3d 6b 7d 2c 68 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 6d 61 28 22 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 5f 2e 47 61 7d 29 3b 6d 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 Data Ascii: xt,{done:!1,value:l(m)};m=null}return{done:!0,value:void 0}})},f=function(){var k={};return k.nl=k.next=k.head=k},h=0;return c});ma("Object.setPrototypeOf",function(a){return a\|\|_.Ga});ma("String.prototype.endsWith",function(a){return a?a:function(b,c){va
2024-06-12 19:06:19 UTC	1378	IN	Data Raw: 73 2e 41 61 2e 73 65 74 28 63 2c 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 41 61 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 74 68 69 73 2e 41 61 2e 64 65 6c 65 74 65 28 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 41 61 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 63 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 41 61 2e 63 6c 65 61 72 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 41 61 2e 68 61 73 28 63 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: s.Aa.set(c,c);this.size=this.Aa.size;return this};b.prototype.delete=function(c){c=this.Aa.delete(c);this.size=this.Aa.size;return c};b.prototype.clear=function(){this.Aa.clear();this.size=0};b.prototype.has=function(c){return this.Aa.has(c)};b.prototype.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49724	142.250.185.206	443	6224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:06:20 UTC	722	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 943 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: chrome-untrusted://new-tab-page X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-12 19:06:20 UTC	943	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 31 38 32 31 39 31 37 37 30 36 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1718219177066",null,null,null,
2024-06-12 19:06:20 UTC	929	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: chrome-untrusted://new-tab-page Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=JYv6CX2ef_6CKoE1JAp_FFKN4CRwKue4-O9W6er9mPURRf590uwVauSWaXSY87hpnKdHG-DgaQuNCj8QhpR9QeuFKRFHqxiuuKMpjnExf2zKCpEu4xhggN_3o9odbgmbOBeZZY-AgkOnBDmTnvErk3M5N4c_joNreZoaSbkL9Y0; expires=Thu, 12-Dec-2024 19:06:20 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 12 Jun 2024 19:06:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 12 Jun 2024 19:06:20 GMT Connection: close Transfer-Encoding: chunked
2024-06-12 19:06:20 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-06-12 19:06:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49727	142.250.181.228	443	6224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:06:48 UTC	802	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=JYv6CX2ef_6CKoE1JAp_FFKN4CRwKue4-O9W6er9mPURRf590uwVauSWaXSY87hpnKdHG-DgaQuNCj8QhpR9QeuFKRFHqxiuuKMpjnExf2zKCpEu4xhggN_3o9odbgmbOBeZZY-AgkOnBDmTnvErk3M5N4c_joNreZoaSbkL9Y0
2024-06-12 19:06:48 UTC	1283	IN	HTTP/1.1 200 OK Date: Wed, 12 Jun 2024 19:06:48 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-KRTQKWGCKXoybt3LdRw6ww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Viewport-Width Accept-CH: Sec-CH-Viewport-Height Accept-CH: Sec-CH-DPR Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-06-12 19:06:48 UTC	95	IN	Data Raw: 33 33 32 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6f 72 61 63 6c 65 20 73 74 6f 63 6b 20 65 61 72 6e 69 6e 67 73 22 2c 22 74 72 65 79 61 72 63 68 20 68 61 73 20 72 65 76 65 61 6c 65 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 62 6c 61 63 6b 20 6f 70 73 20 36 20 63 61 6d Data Ascii: 332)]}'["",["oracle stock earnings","treyarch has revealed the length of the black ops 6 cam
2024-06-12 19:06:48 UTC	730	IN	Data Raw: 70 61 69 67 6e 22 2c 22 64 65 73 74 69 6e 79 20 65 78 6f 74 69 63 20 63 6c 61 73 73 20 69 74 65 6d 73 22 2c 22 74 65 74 6f 6e 20 70 61 73 73 20 68 69 67 68 77 61 79 20 63 6f 6c 6c 61 70 73 65 22 2c 22 6a 61 6c 65 6e 20 68 75 72 74 73 20 6e 69 63 6b 20 73 69 72 69 61 6e 6e 69 20 65 61 67 6c 65 73 22 2c 22 72 6f 62 6c 6f 78 20 67 79 6d 20 6c 65 61 67 75 65 20 63 6f 64 65 73 22 2c 22 73 74 61 72 62 75 63 6b 73 20 6d 65 6e 75 20 70 61 69 72 69 6e 67 73 22 2c 22 6a 61 6d 65 73 20 62 65 61 72 64 20 63 68 65 66 20 61 77 61 72 64 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d Data Ascii: paign","destiny exotic class items","teton pass highway collapse","jalen hurts nick sirianni eagles","roblox gym league codes","starbucks menu pairings","james beard chef awards"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false}
2024-06-12 19:06:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49729	54.146.166.145	443	6224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:07:13 UTC	2660	OUT	GET /L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink.me%2525252FoRT7%2525253F%2525252526c%252525253DPartnerize%2525252526af_siteid%252525253D1100l998%2525252526is_retargeting%252525253Dtrue%2525252526af_reengagement_window%252525253D30d%2525252526af_click_lookback%252525253D7d%2525252526af_media_type%252525253Dweb%2525252526clickid%252525253D%2525252526af_r%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.ln-cc.com%25252525252Fen%25252525252Fspecial-25%25252525252Fvintage-check-belt-bag-in-yellow-bur0137022bei.html%25252525253Fcgid%25252525253Dspecial-25%252525252526app_clickref%25252525253D%252525252526utm_source%25252525253DPZ%252525252526utm_medium%25252525253Daffiliate%252525252526utm_campaign%25252525253Decentime-nl%2525252526af_web_dp%252525253Dhttps%2525253A%2525252F%2525252Fu45053809. [TRUNCATED] Host: 691tx8z8.r.us-east-1.awstrack.me Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-12 19:07:14 UTC	103	IN	HTTP/1.1 400 Bad Request Date: Wed, 12 Jun 2024 19:07:13 GMT Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.16	49730	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:07:17 UTC	812	OUT	GET /manifest/threshold.appcache HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Origin: https://www.bing.com Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en&HV=1707317784&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-06-12 19:07:17 UTC	1372	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3262 Content-Type: text/cache-manifest; charset=utf-8 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: MUIDB=5047E5942BB2460EA35B53CCF78DDB3D; expires=Mon, 07-Jul-2025 19:07:17 GMT; path=/; HttpOnly Set-Cookie: SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133; domain=.bing.com; expires=Mon, 07-Jul-2025 19:07:17 GMT; path=/; secure; SameSite=None Set-Cookie: SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133; domain=.bing.com; expires=Mon, 07-Jul-2025 19:07:17 GMT; path=/; secure; SameSite=None X-EventID: 6669f1e5c99e49498a48bc3645e88371 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 47F908A3EF06470CB6CB02756D29BEA6 Ref B: DFW30EDGE1822 Ref C: 2024-06-12T19:07:17Z Date: Wed, 12 Jun 2024 19:07:16 GMT Connection: close
2024-06-12 19:07:17 UTC	1818	IN	Data Raw: 43 41 43 48 45 20 4d 41 4e 49 46 45 53 54 0d 0a 23 20 56 65 72 73 69 6f 6e 3a 65 37 62 36 66 35 32 66 0d 0a 43 41 43 48 45 3a 0d 0a 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 0d 0a 2f 72 70 2f 68 53 74 72 67 39 46 5f 73 38 5f 4e 50 74 6d 6c 48 4a 6a 4d 6e 59 6f 72 72 47 30 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 62 2f 31 37 2f 6a 6e 63 2c 6e 6a 2f 36 68 55 5f 4c 6e 65 61 66 49 5f 4e 46 4c 65 44 76 4d 33 36 37 65 62 46 61 4b 51 2e 6a 73 3f 62 75 3d 44 79 67 78 64 6f 49 42 68 51 47 49 41 58 39 35 66 4c 73 42 76 67 45 78 72 67 45 78 77 51 45 26 6f 72 3d 77 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 62 2f 31 61 2f 63 69 72 33 2c 6f 72 74 6c 2c Data Ascii: CACHE MANIFEST# Version:e7b6f52fCACHE:/AS/API/WindowsCortanaPane/V2/Init/rp/hStrg9F_s8_NPtmlHJjMnYorrG0.jshttps://r.bing.com/rb/17/jnc,nj/6hU_LneafI_NFLeDvM367ebFaKQ.js?bu=DygxdoIBhQGIAX95fLsBvgExrgExwQE&or=whttps://r.bing.com/rb/1a/cir3,ortl,
2024-06-12 19:07:17 UTC	1102	IN	Data Raw: 44 55 36 37 62 65 4a 79 30 73 2d 4d 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 70 2f 4b 68 30 4c 58 33 51 34 62 71 6f 43 32 32 4b 70 54 5a 66 30 50 39 5a 74 4f 54 67 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 70 2f 4c 6f 76 70 5a 74 6f 52 54 50 33 4e 4c 77 69 79 57 64 6c 32 4b 56 59 6e 59 4a 77 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 70 2f 4e 57 6f 5a 4b 33 6b 54 73 45 78 55 56 30 30 59 77 6f 31 47 35 6a 6c 55 4b 4b 73 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 70 2f 4f 79 4e 41 2d 59 6e 75 4c 37 38 71 51 6f 75 4d 77 47 6b 75 43 42 41 31 66 46 34 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 70 2f Data Ascii: DU67beJy0s-M.jshttps://r.bing.com/rp/Kh0LX3Q4bqoC22KpTZf0P9ZtOTg.jshttps://r.bing.com/rp/LovpZtoRTP3NLwiyWdl2KVYnYJw.jshttps://r.bing.com/rp/NWoZK3kTsExUV00Ywo1G5jlUKKs.jshttps://r.bing.com/rp/OyNA-YnuL78qQouMwGkuCBA1fF4.jshttps://r.bing.com/rp/
2024-06-12 19:07:17 UTC	342	IN	Data Raw: 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 70 2f 7a 4a 75 78 64 67 37 42 5f 49 53 5f 35 6d 4c 79 52 44 33 4c 71 6a 48 68 56 4b 63 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 70 2f 7a 6e 64 50 42 56 79 64 79 51 36 65 52 4b 61 69 43 5f 42 56 5a 4c 58 6e 41 49 55 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 73 2f 32 6b 2f 33 6d 2f 63 69 72 33 2c 6f 72 74 6c 2c 63 63 2c 6e 63 2f 39 65 4e 49 33 79 6b 6f 78 55 42 63 66 4e 52 67 44 4a 61 46 2d 67 30 61 5f 30 63 2e 63 73 73 3f 6f 72 3d 77 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 73 2f 36 33 2f 31 57 69 2f 6f 72 74 6c 2c 63 63 2c 6e 63 2f 6f 6e 72 61 37 50 51 6c 39 6f 35 62 59 54 32 6c 41 53 49 31 42 45 34 44 44 45 73 2e 63 73 Data Ascii: ://r.bing.com/rp/zJuxdg7B_IS_5mLyRD3LqjHhVKc.jshttps://r.bing.com/rp/zndPBVydyQ6eRKaiC_BVZLXnAIU.jshttps://r.bing.com/rs/2k/3m/cir3,ortl,cc,nc/9eNI3ykoxUBcfNRgDJaF-g0a_0c.css?or=whttps://r.bing.com/rs/63/1Wi/ortl,cc,nc/onra7PQl9o5bYT2lASI1BE4DDEs.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49731	40.126.32.133	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:07:18 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-06-12 19:07:18 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-06-12 19:07:18 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 12 Jun 2024 19:06:18 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BL2 x-ms-request-id: f52d94e7-7903-4d87-bd90-840bae5bd665 PPServer: PPV: 30 H: BL02EPF0001DA50 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 12 Jun 2024 19:07:17 GMT Connection: close Content-Length: 11393
2024-06-12 19:07:18 UTC	11393	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.16	49732	23.1.33.206	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:07:18 UTC	796	OUT	GET /rb/17/jnc,nj/6hU_LneafI_NFLeDvM367ebFaKQ.js?bu=DygxdoIBhQGIAX95fLsBvgExrgExwQE&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133
2024-06-12 19:07:18 UTC	1226	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Fri, 07 Jun 2024 16:45:42 GMT X-EventID: 666469c856ba47e490c66dc79b7a66eb UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: BNZEEAP00016B01 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=69409 Expires: Thu, 13 Jun 2024 14:24:07 GMT Date: Wed, 12 Jun 2024 19:07:18 GMT Content-Length: 21849 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.8e200117.1718219238.3a457fd1 Timing-Allow-Origin: *
2024-06-12 19:07:18 UTC	15158	IN	Data Raw: 2f 2a 21 44 69 73 61 62 6c 65 4a 61 76 61 73 63 72 69 70 74 50 72 6f 66 69 6c 65 72 2a 2f 0a 76 61 72 20 42 4d 3d 42 4d 7c 7c 7b 7d 3b 42 4d 2e 63 6f 6e 66 69 67 3d 7b 42 3a 7b 74 69 6d 65 6f 75 74 3a 31 65 33 2c 64 65 6c 61 79 3a 37 35 30 2c 6d 61 78 55 72 6c 4c 65 6e 67 74 68 3a 33 30 30 2c 73 65 6e 64 6c 69 6d 69 74 3a 32 30 2c 6d 61 78 50 61 79 6c 6f 61 64 53 69 7a 65 3a 37 65 33 7d 2c 56 3a 7b 64 69 73 74 61 6e 63 65 3a 32 30 7d 2c 4e 3a 7b 6d 61 78 55 72 6c 4c 65 6e 67 74 68 3a 33 30 30 7d 2c 45 3a 7b 62 75 66 66 65 72 3a 33 30 2c 74 69 6d 65 6f 75 74 3a 35 65 33 2c 6d 61 78 55 72 6c 4c 65 6e 67 74 68 3a 33 30 30 7d 2c 43 3a 7b 64 69 73 74 61 6e 63 65 3a 35 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 76 74 28 29 7b 69 Data Ascii: /!DisableJavascriptProfiler/var BM=BM\|\|{};BM.config={B:{timeout:1e3,delay:750,maxUrlLength:300,sendlimit:20,maxPayloadSize:7e3},V:{distance:20},N:{maxUrlLength:300},E:{buffer:30,timeout:5e3,maxUrlLength:300},C:{distance:50}},function(n){function vt(){i
2024-06-12 19:07:18 UTC	6691	IN	Data Raw: 6e 64 2c 69 29 2c 70 74 3d 74 28 6f 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 69 29 2c 77 74 3d 74 28 6f 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2c 69 29 2c 62 74 3d 74 28 6f 2e 72 65 73 70 6f 6e 73 65 45 6e 64 2c 69 29 2c 6f 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 2e 6c 61 79 6f 75 74 28 29 3b 66 6f 72 28 74 74 3d 30 3b 74 74 3c 73 74 2e 6c 65 6e 67 74 68 3b 74 74 2b 2b 29 7b 76 61 72 20 62 3d 73 74 5b 74 74 5d 2c 64 74 3d 62 2e 5f 65 2c 68 74 3d 62 2e 5f 73 3b 69 66 28 68 74 26 26 67 3d 3d 3d 68 74 29 7b 6f 74 3d 62 2e 69 3b 62 2e 78 3c 68 2e 77 26 26 62 2e 79 3c 68 2e 68 26 26 28 66 3d 65 74 29 3b 62 72 65 61 6b 7d 7d 72 74 3d 7b 5f 72 3a 6f 2c 74 3a 65 74 2c 69 3a 70 2e 6c 65 6e 67 74 68 2c 6c 3a 6f 74 2c 68 3a 77 5b 31 5d 2c 70 3a 77 5b 32 5d 2e 6c 65 6e Data Ascii: nd,i),pt=t(o.requestStart,i),wt=t(o.responseStart,i),bt=t(o.responseEnd,i),ot=null,st=n.layout();for(tt=0;tt<st.length;tt++){var b=st[tt],dt=b._e,ht=b._s;if(ht&&g===ht){ot=b.i;b.x<h.w&&b.y<h.h&&(f=et);break}}rt={_r:o,t:et,i:p.length,l:ot,h:w[1],p:w[2].len

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.16	49733	51.104.15.253	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:07:18 UTC	684	OUT	POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-CJS-1.2.0&x-apikey=33d70a864599496b982a39f036f71122-2064703e-3a9d-4d90-8362-eec08dffe8e8-7176 HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: browser.pipe.aria.microsoft.com Content-Length: 987 Connection: Keep-Alive Cache-Control: no-cache
2024-06-12 19:07:18 UTC	987	OUT	Data Raw: 6d 09 0b 01 4a 33 33 64 37 30 61 38 36 34 35 39 39 34 39 36 62 39 38 32 61 33 39 66 30 33 36 66 37 31 31 32 32 2d 32 30 36 34 37 30 33 65 2d 33 61 39 64 2d 34 64 39 30 2d 38 33 36 32 2d 65 65 63 30 38 64 66 66 65 38 65 38 2d 37 31 37 36 0a 01 49 12 61 63 74 5f 64 65 66 61 75 6c 74 5f 73 6f 75 72 63 65 a9 24 38 38 63 34 32 33 65 63 2d 66 31 35 33 2d 34 34 34 35 2d 61 36 63 34 2d 62 35 65 62 32 39 63 61 62 36 31 33 d1 06 aa 93 c7 dd 81 64 cb 08 0a 01 29 24 32 36 35 37 36 30 34 38 2d 61 30 61 34 2d 34 35 33 34 2d 39 61 36 34 2d 35 31 65 37 61 33 31 39 30 34 39 63 71 cc 83 c7 dd 81 64 a9 14 63 75 73 74 6f 6d 2e 43 6c 69 65 6e 74 5f 45 76 65 6e 74 73 c9 06 0e 76 61 72 69 61 6e 74 5f 65 76 65 6e 74 73 cd 0d 09 09 19 0a 64 65 76 69 63 65 54 79 70 65 07 44 45 53 Data Ascii: mJ33d70a864599496b982a39f036f71122-2064703e-3a9d-4d90-8362-eec08dffe8e8-7176Iact_default_source$88c423ec-f153-4445-a6c4-b5eb29cab613d)$26576048-a0a4-4534-9a64-51e7a319049cqdcustom.Client_Eventsvariant_eventsdeviceTypeDES
2024-06-12 19:07:19 UTC	462	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 time-delta-millis: 2519 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis Date: Wed, 12 Jun 2024 19:07:18 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.16	49734	23.1.33.206	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:07:19 UTC	791	OUT	GET /rb/1a/cir3,ortl,cc,nc/oT6Um3bDKq3bSDJ4e0e-YJ5MXCI.css?bu=B68CP54ChwFZWbkC&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133
2024-06-12 19:07:19 UTC	1209	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Wed, 21 Feb 2024 02:23:59 GMT X-EventID: 664ce52fc50445b2929e8a071706cd04 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: BNZEEAP00016AA1 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=83494 Expires: Thu, 13 Jun 2024 18:18:53 GMT Date: Wed, 12 Jun 2024 19:07:19 GMT Content-Length: 6022 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.8e200117.1718219239.3a458805 Timing-Allow-Origin: *
2024-06-12 19:07:19 UTC	6022	IN	Data Raw: 2e 62 5f 73 65 61 72 63 68 62 6f 78 53 75 62 6d 69 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 72 70 2f 34 69 5a 49 7a 5f 6f 41 4c 31 79 70 37 64 69 5f 36 44 39 65 32 65 6e 58 69 4d 4d 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 34 32 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 33 32 30 70 78 20 33 38 70 78 7d 2e 62 5f 6c 6f 67 6f 7b 77 69 64 74 68 3a 32 32 70 78 3b 68 65 69 67 68 74 3a 33 37 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 62 5f 6c 6f 67 6f 3a 61 66 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 64 Data Ascii: .b_searchboxSubmit{background:url(/rp/4iZIz_oAL1yp7di_6D9e2enXiMM.png) no-repeat -42px 0;background-size:320px 38px}.b_logo{width:22px;height:37px;position:relative;display:inline-block;overflow:hidden;direction:ltr}.b_logo:after{position:absolute;top:0;d

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.16	49736	23.1.33.206	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:07:19 UTC	801	OUT	GET /rb/1a/cir3,ortl,cc,nc/uANxnX_BheDjd2-cdR8N9DEWlds.css?bu=C8oIhQP7A6IJiwj1B6oGWVlZWQ&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133
2024-06-12 19:07:20 UTC	1211	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Fri, 18 Nov 2022 01:56:15 GMT X-EventID: 66622dcafb824f26bf69a21cee34d269 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: BNZEEAP00016A7D X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=311873 Expires: Sun, 16 Jun 2024 09:45:13 GMT Date: Wed, 12 Jun 2024 19:07:20 GMT Content-Length: 20421 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.8e200117.1718219240.3a45904b Timing-Allow-Origin: *
2024-06-12 19:07:20 UTC	15173	IN	Data Raw: 2e 73 77 5f 70 6c 75 73 2c 2e 73 77 5f 75 70 2c 2e 73 77 5f 64 6f 77 6e 2c 2e 73 77 5f 73 74 2c 2e 73 77 5f 73 74 68 2c 2e 73 77 5f 73 74 65 2c 2e 73 77 5f 74 70 63 62 6b 2c 2e 73 77 5f 70 6c 61 79 2c 2e 73 77 5f 70 6c 61 79 64 2c 2e 73 77 5f 70 6c 61 79 61 2c 2e 73 77 5f 70 6c 61 79 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 4d 44 4c 32 20 41 73 73 65 74 73 22 7d 2e 73 77 5f 70 6c 75 73 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 ee 9c 90 22 7d 2e 73 77 5f 70 6c 61 79 3a 61 66 74 65 72 2c 2e 73 77 5f 70 6c 61 79 61 3a 61 66 74 65 72 2c 2e 73 77 5f 70 6c 61 79 64 3a 61 66 74 65 72 2c 2e 73 77 5f 70 6c 61 79 70 3a 61 66 74 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 63 6f Data Ascii: .sw_plus,.sw_up,.sw_down,.sw_st,.sw_sth,.sw_ste,.sw_tpcbk,.sw_play,.sw_playd,.sw_playa,.sw_playp{font-family:"Segoe MDL2 Assets"}.sw_plus:after{content:""}.sw_play:after,.sw_playa:after,.sw_playd:after,.sw_playp:after{font-size:16px;line-height:16px;co
2024-06-12 19:07:20 UTC	5248	IN	Data Raw: 69 70 74 2b 73 63 72 69 70 74 2b 2e 62 5f 61 6c 67 6f 2c 62 6f 64 79 5b 64 69 72 5d 20 23 62 5f 72 65 73 75 6c 74 73 3e 2e 62 5f 61 6e 73 2b 73 63 72 69 70 74 2b 73 63 72 69 70 74 2b 2e 62 5f 61 6e 73 2c 62 6f 64 79 5b 64 69 72 5d 20 23 62 5f 72 65 73 75 6c 74 73 3e 2e 62 5f 61 6c 67 6f 2b 73 63 72 69 70 74 2b 73 63 72 69 70 74 2b 2e 62 5f 61 6e 73 2c 62 6f 64 79 5b 64 69 72 5d 20 23 62 5f 72 65 73 75 6c 74 73 3e 2e 62 5f 6e 61 76 2b 73 63 72 69 70 74 2b 73 63 72 69 70 74 2b 2e 62 5f 61 6c 67 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 7d 62 6f 64 79 5b 64 69 72 5d 20 23 62 5f 72 65 73 75 6c 74 73 3e 6c 69 3e 2a 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 62 6f 64 79 5b 64 69 72 5d 20 2e 62 5f 63 61 70 74 69 6f 6e 3e 2a 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 62 Data Ascii: ipt+script+.b_algo,body[dir] #b_results>.b_ans+script+script+.b_ans,body[dir] #b_results>.b_algo+script+script+.b_ans,body[dir] #b_results>.b_nav+script+script+.b_algo{margin-top:4px}body[dir] #b_results>li>:last-child,body[dir] .b_caption>:last-child,b

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.16	49737	23.1.33.206	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:07:20 UTC	780	OUT	GET /rb/3J/ortl,cc,nc/4-xJy3tX6bM2BGl5zKioiEcQ1TU.css?bu=A4gCjAKPAg&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133
2024-06-12 19:07:21 UTC	1211	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Thu, 07 Dec 2023 22:46:03 GMT X-EventID: 664ce52ffd5d48b786bb15f656eab732 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: BNZEEAP00016B00 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=405485 Expires: Mon, 17 Jun 2024 11:45:25 GMT Date: Wed, 12 Jun 2024 19:07:20 GMT Content-Length: 15967 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.8e200117.1718219240.3a4599e7 Timing-Allow-Origin: *
2024-06-12 19:07:21 UTC	15173	IN	Data Raw: 68 74 6d 6c 7b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 62 6f 64 79 5b 64 69 72 5d 20 74 61 62 6c 65 2c 62 6f 64 79 5b 64 69 72 5d 20 74 64 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 62 6f 64 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 53 61 6e 73 2d 53 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 30 30 30 7d 62 6f 64 79 5b 64 69 72 5d 7b 6d 61 72 67 69 6e 3a 30 7d 62 6f 64 79 20 2e 74 61 6c 6c 55 78 7b Data Ascii: html{-ms-user-select:none;overflow-y:hidden;overflow-x:hidden;cursor:default}body[dir] table,body[dir] td{margin:0;padding:0}body{font-size:15px;line-height:20px;font-family:"Segoe UI",Arial,Helvetica,Sans-Serif;color:#000}body[dir]{margin:0}body .tallUx{
2024-06-12 19:07:21 UTC	794	IN	Data Raw: 6f 74 28 2e 73 65 63 6f 6e 64 61 72 79 49 63 6f 6e 29 3a 6e 6f 74 28 2e 63 6f 72 74 61 6e 61 49 63 6f 6e 29 20 2e 69 63 6f 6e 20 69 6d 67 7b 77 69 64 74 68 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 31 33 70 78 7d 2e 61 73 50 61 64 64 69 6e 67 20 2e 64 6f 75 62 6c 65 4c 69 6e 65 20 2e 73 65 63 6f 6e 64 61 72 79 49 63 6f 6e 3e 2e 69 63 6f 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 34 34 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 34 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 34 34 70 78 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 61 73 50 61 64 64 69 6e 67 20 2e 64 6f 75 62 6c 65 4c 69 6e 65 20 2e 73 65 63 6f 6e 64 61 72 79 49 63 6f 6e 3e 2e 69 63 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 7d 2e 61 73 50 61 64 64 69 6e 67 20 2e 6e 6f 72 6d 61 6c 69 7a 65 64 42 69 Data Ascii: ot(.secondaryIcon):not(.cortanaIcon) .icon img{width:13px;height:13px}.asPadding .doubleLine .secondaryIcon>.icon{min-width:44px;min-height:44px;max-height:44px}body[dir] .asPadding .doubleLine .secondaryIcon>.icon{padding-top:6px}.asPadding .normalizedBi

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.16	49739	23.1.33.206	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:07:21 UTC	907	OUT	GET /rb/6q/cir3,ortl,cc,nc/9O7wsbk7fnvq75SUj-7m9vqGpmw.css?bu=MbwKtgrCCrYKpgu2CqwLtgq0C7YKuwu2CsELtgrHC7YKzQu2CtQKtgraCrYKzgq2CrYKnQu2CukKtgrvCrYK4wq2CrYK_wqCC7YKtgqaC4gLtgqOC5ELtgr2C7YK0wu2CqQM&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133
2024-06-12 19:07:22 UTC	1248	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Wed, 05 Jun 2024 04:16:27 GMT X-EventID: 66699bf26cd3426cb06ebeee7d6fd97a UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: BNZEEAP00016A50 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=410054 Expires: Mon, 17 Jun 2024 13:01:35 GMT Date: Wed, 12 Jun 2024 19:07:21 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.8e200117.1718219241.3a45a3b3 Timing-Allow-Origin: *
2024-06-12 19:07:22 UTC	15136	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 61 6c 67 6f 50 6c 61 63 65 68 6f 6c 64 65 72 53 68 69 6d 6d 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 6f 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a Data Ascii: 00006000@keyframes algoPlaceholderShimmer{0%{transform:translateX(-100%)}100%{transform:translateX(100%)}}@keyframes fadein{0%{opacity:0}100%{opacity:1}}@-moz-keyframes fadein{0%{opacity:0}100%{opacity:1}}@-o-keyframes fadein{0%{opacity:0;}100%{opacity:
2024-06-12 19:07:22 UTC	9452	IN	Data Raw: 6d 65 6e 75 2d 69 74 65 6d 5f 64 65 74 61 69 6c 73 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 38 70 78 7d 62 6f 64 79 5b 64 69 72 3d 27 72 74 6c 27 5d 20 2e 63 6f 6e 74 65 78 74 4d 65 6e 75 20 2e 6d 65 6e 75 2d 69 74 65 6d 5f 64 65 74 61 69 6c 73 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 38 70 78 7d 2e 63 6f 6e 74 65 78 74 4d 65 6e 75 20 2e 64 69 76 69 64 65 72 7b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 63 6f 6e 74 65 78 74 4d 65 6e 75 20 2e 64 69 76 69 64 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 34 70 78 20 31 32 70 78 7d 2e 64 61 72 6b 54 68 65 6d 65 20 2e 63 6f 6e 74 65 78 74 4d 65 6e 75 20 2e 64 69 Data Ascii: menu-item_details{padding-left:28px}body[dir='rtl'] .contextMenu .menu-item_details{padding-right:28px}.contextMenu .divider{border:0;border-top:1px solid rgba(0,0,0,.2)}body[dir] .contextMenu .divider{padding:0;margin:4px 12px}.darkTheme .contextMenu .di
2024-06-12 19:07:22 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6f 6e 2d 78 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 79 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 39 30 25 20 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 33 66 32 66 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 32 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 Data Ascii: 00006000on-x:0;background-position-y:0;background-size:90% 100%;background-repeat:no-repeat;background-color:#f3f2f1;transform:translateX(-100%);animation-duration:2s;animation-timing-function:ease-in-out;animation-direction:normal;animation-iteration-c
2024-06-12 19:07:22 UTC	8204	IN	Data Raw: 65 69 67 68 74 3a 32 30 70 78 7d 2e 74 6f 70 52 65 73 75 6c 74 54 65 6d 70 6c 61 74 65 49 6e 47 72 6f 75 70 73 20 2e 70 65 6f 70 6c 65 49 63 6f 6e 20 2e 69 63 6f 6e 43 6f 6e 74 65 6e 74 2c 2e 74 6f 70 52 65 73 75 6c 74 73 20 2e 70 65 6f 70 6c 65 49 63 6f 6e 20 2e 69 63 6f 6e 43 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 74 6f 70 52 65 73 75 6c 74 73 20 2e 73 75 67 67 44 65 74 61 69 6c 73 43 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 36 70 78 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 74 6f 70 52 65 73 75 6c 74 73 20 2e 73 75 67 67 44 65 74 61 69 6c 73 43 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 3a 39 70 78 20 31 31 70 78 7d 2e 74 6f 70 52 65 73 75 6c 74 73 Data Ascii: eight:20px}.topResultTemplateInGroups .peopleIcon .iconContent,.topResults .peopleIcon .iconContent{font-size:12px}.topResults .suggDetailsContainer{position:relative;min-height:56px}body[dir] .topResults .suggDetailsContainer{padding:9px 11px}.topResults
2024-06-12 19:07:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 70 61 64 64 69 6e 67 3a 30 7d 2e 67 72 69 64 4c 61 79 6f 75 74 20 2e 73 75 67 67 73 4c 69 73 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 67 72 69 64 4c 61 79 6f 75 74 20 2e 73 75 67 67 73 4c 69 73 74 7b 70 61 64 64 69 6e 67 3a 31 70 78 20 35 70 78 7d 2e 67 72 69 64 4c 61 79 6f 75 74 20 2e 73 75 67 67 65 73 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 67 72 69 64 4c 61 79 6f 75 74 20 2e 73 75 67 67 65 73 Data Ascii: 00004000padding:0}.gridLayout .suggsList{display:flex;flex-direction:row;flex-wrap:wrap}body[dir] .gridLayout .suggsList{padding:1px 5px}.gridLayout .suggestion{display:inline-flex;border:1px solid rgba(0,0,0,.1) !important}body[dir] .gridLayout .sugges
2024-06-12 19:07:22 UTC	12	IN	Data Raw: 2e 62 75 74 74 6f 6e 4c 69 73 0d 0a Data Ascii: .buttonLis
2024-06-12 19:07:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 20 61 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 36 29 7d 2e 70 6f 70 6f 76 65 72 20 2e 62 75 74 74 6f 6e 4c 69 73 74 20 61 2e 73 61 5f 68 76 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 70 6f 70 6f 76 65 72 20 2e 62 75 74 74 6f 6e 4c 69 73 74 20 2e 70 6f 70 6f 76 65 72 44 69 76 69 64 65 72 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 36 29 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 70 6f 70 6f 76 65 72 20 2e 62 75 74 74 6f 6e 4c 69 73 74 20 2e 70 6f 70 6f 76 65 72 44 69 76 69 64 65 72 7b 6d 61 72 67 69 6e 3a 30 20 38 70 78 7d 2e 70 6f 70 6f 76 65 72 20 Data Ascii: 00004000t a:hover{background-color:transparent;color:rgba(0,0,0,.6)}.popover .buttonList a.sa_hv{background-color:transparent}.popover .buttonList .popoverDivider{color:rgba(0,0,0,.6)}body[dir] .popover .buttonList .popoverDivider{margin:0 8px}.popover
2024-06-12 19:07:22 UTC	12	IN	Data Raw: 74 61 62 6c 65 2e 73 75 67 67 0d 0a Data Ascii: table.sugg
2024-06-12 19:07:22 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 65 73 74 69 6f 6e 2e 77 69 74 68 4f 70 65 6e 50 72 65 76 69 65 77 50 61 6e 65 42 74 6e 3a 6e 6f 74 28 2e 66 6f 63 75 73 61 62 6c 65 29 3a 6e 6f 74 28 2e 70 72 65 76 69 65 77 50 61 6e 65 4f 70 65 6e 65 64 29 20 2e 6f 70 65 6e 50 72 65 76 69 65 77 50 61 6e 65 42 74 6e 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 23 72 6f 6f 74 2e 64 61 72 6b 54 68 65 6d 65 3a 6e 6f 74 28 2e 77 69 6e 31 31 29 3a 6e 6f 74 28 2e 66 69 6c 65 45 78 70 6c 6f 72 65 72 29 3a 6e 6f 74 28 2e 7a 65 72 6f 49 6e 70 75 74 31 39 48 31 29 20 2e 67 72 6f 75 70 43 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 61 62 6c 65 2e 73 75 67 67 65 73 74 69 6f 6e 2e 61 72 72 6f 77 4f 72 54 61 62 41 63 74 69 6f 6e 2e 73 61 Data Ascii: 00006000estion.withOpenPreviewPaneBtn:not(.focusable):not(.previewPaneOpened) .openPreviewPaneBtn:hover{border-right-color:#000}#root.darkTheme:not(.win11):not(.fileExplorer):not(.zeroInput19H1) .groupContainer .selectable.suggestion.arrowOrTabAction.sa
2024-06-12 19:07:22 UTC	8204	IN	Data Raw: 35 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 39 34 39 34 39 7d 2e 65 78 70 61 6e 64 65 72 43 69 72 63 6c 65 20 2e 69 63 6f 6e 43 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6f 6c 6f 72 3a 23 33 32 33 31 33 30 7d 2e 64 61 72 6b 54 68 65 6d 65 20 2e 65 78 70 61 6e 64 65 72 43 69 72 63 6c 65 20 2e 69 63 6f 6e 43 6f 6e 74 61 69 6e 65 72 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 36 29 7d 2e 65 78 70 61 6e 64 65 72 4f 70 65 6e 65 64 20 2e 65 78 70 61 6e 64 65 72 43 69 72 63 6c 65 20 2e 69 63 6f 6e 43 6f 6e 74 65 6e 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 32 73 Data Ascii: 50%;background-color:#494949}.expanderCircle .iconContainer{position:relative;color:#323130}.darkTheme .expanderCircle .iconContainer{color:rgba(255,255,255,.6)}.expanderOpened .expanderCircle .iconContent{transform:rotate(180deg);transition:transform .2s

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.16	49740	23.1.33.206	443

Timestamp	Bytes transferred	Direction	Data
2024-06-12 19:07:23 UTC	796	OUT	GET /rb/6q/ortl,cc,nc/G6CsCraoYcD6qY8uGndwq5zbkCc.css?bu=CZEMtgqWDLYKmgy2CrYKtgq2Cg&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133
2024-06-12 19:07:23 UTC	1248	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Fri, 31 May 2024 19:14:20 GMT X-EventID: 666986c15a734bf0965c4e259370b718 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: BNZEEAP00016AD8 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=404610 Expires: Mon, 17 Jun 2024 11:30:53 GMT Date: Wed, 12 Jun 2024 19:07:23 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.8e200117.1718219243.3a45b245 Timing-Allow-Origin: *
2024-06-12 19:07:23 UTC	15136	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 23 74 6f 70 52 65 73 75 6c 74 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 2e 6d 73 62 2d 70 65 6f 70 6c 65 20 2e 69 63 6f 6e 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 74 6f 70 52 65 73 75 6c 74 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 2e 6d 73 62 2d 70 65 6f 70 6c 65 20 2e 69 63 6f 6e 3e 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 67 72 6f 75 70 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 2e 6d 73 62 2d 70 65 6f 70 6c 65 20 2e 69 63 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 23 67 72 6f 75 70 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 2e 6d 73 62 2d 70 65 6f 70 6c 65 20 2e 69 63 6f 6e 3e 69 6d 67 7b Data Ascii: 00006000#topResults .suggestion.msb-people .icon{vertical-align:middle}#topResults .suggestion.msb-people .icon>img{border-radius:50%;height:100%;width:100%}#groups .suggestion.msb-people .icon{border-radius:50%}#groups .suggestion.msb-people .icon>img{
2024-06-12 19:07:23 UTC	9452	IN	Data Raw: 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 38 29 7d 2e 64 61 72 6b 54 68 65 6d 65 20 2e 70 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 2e 6d 73 62 50 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 20 23 62 5f 62 66 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 36 36 36 7d 2e 64 61 72 6b 54 68 65 6d 65 20 2e 70 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 2e 6d 73 62 50 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 20 23 62 5f 62 66 62 20 23 62 66 62 5f 63 6f 6e 74 65 6e 74 20 2e 6d 73 2d 73 65 61 72 63 68 2d 74 65 78 74 2d 68 31 7b 63 6f 6c 6f 72 3a 23 66 61 66 39 66 38 7d 2e 64 61 72 6b 54 68 65 6d 65 20 2e 70 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 2e 6d 73 62 50 72 65 76 69 65 77 43 Data Ascii: (255,255,255,.8)}.darkTheme .previewContainer.msbPreviewContainer #b_bfb{background-color:transparent;color:#666}.darkTheme .previewContainer.msbPreviewContainer #b_bfb #bfb_content .ms-search-text-h1{color:#faf9f8}.darkTheme .previewContainer.msbPreviewC
2024-06-12 19:07:23 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 22 5d 20 5b 63 6c 61 73 73 2a 3d 22 6f 72 67 43 68 61 72 74 22 5d 20 5b 63 6c 61 73 73 2a 3d 22 65 78 70 61 6e 73 69 6f 6e 42 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 22 5d 3e 2e 6d 73 2d 73 65 61 72 63 68 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 61 63 63 65 6e 74 31 32 29 7d 2e 64 61 72 6b 54 68 65 6d 65 20 23 6d 73 62 50 61 6e 65 2e 70 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 2e 6d 73 62 50 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 20 23 62 5f 62 66 62 20 2e 6d 73 2d 73 65 61 72 63 68 2d 72 69 62 62 6f 6e 20 23 62 66 62 5f 63 6f 6e 74 65 6e 74 20 5b 63 6c Data Ascii: 00006000tentContainer"] [class="orgChart"] [class="expansionButtonContainer"]>.ms-search-text{background:rgba(0,0,0,.3);border:1px solid var(--accent12)}.darkTheme #msbPane.previewContainer.msbPreviewContainer #b_bfb .ms-search-ribbon #bfb_content [cl
2024-06-12 19:07:23 UTC	8204	IN	Data Raw: 6f 75 74 4d 73 62 44 73 62 43 6f 6e 74 61 69 6e 65 72 53 63 72 6f 6c 6c 53 6d 61 6c 6c 20 2e 66 72 65 45 78 61 6d 70 6c 65 43 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 30 70 78 7d 2e 6d 73 62 46 72 65 43 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 33 34 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 5b 64 69 72 3d 27 6c 74 72 27 5d 20 2e 6d 73 62 46 72 65 43 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 3a 36 30 70 78 20 30 20 30 20 32 34 70 78 7d 62 6f 64 79 5b 64 69 72 3d 27 72 74 6c 27 5d 20 2e 6d 73 62 46 72 65 43 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 3a 36 30 70 78 20 32 34 70 78 20 30 20 30 7d 2e 6d 73 62 46 72 65 43 6f 6e 74 61 69 6e 65 72 20 2e 66 72 65 50 72 6f 66 69 6c 65 53 65 63 74 Data Ascii: outMsbDsbContainerScrollSmall .freExampleContainer{margin-top:100px}.msbFreContainer{max-width:340px;height:100%}body[dir='ltr'] .msbFreContainer{padding:60px 0 0 24px}body[dir='rtl'] .msbFreContainer{padding:60px 24px 0 0}.msbFreContainer .freProfileSect
2024-06-12 19:07:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 61 62 6c 65 2e 77 68 6f 6c 65 70 61 67 65 74 61 62 73 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 20 36 70 78 20 30 20 30 7d 2e 64 73 62 2d 68 65 72 6f 20 2e 64 73 62 2d 68 65 72 6f 5f 5f 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 65 73 63 72 69 70 74 69 76 65 2d 68 6f 76 65 72 2d 63 61 72 64 5f 5f 62 69 6e 67 2d 6c 6f 67 6f 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 64 73 62 2d 68 65 72 6f 20 2e 64 73 62 2d 68 65 72 6f 5f 5f 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 65 73 63 72 69 70 74 69 76 65 2d 68 6f 76 65 72 2d 63 61 72 64 5f 5f 62 69 Data Ascii: 00004000sable.wholepagetabs__container{border-radius:6px 6px 0 0}.dsb-hero .dsb-hero__content-container .descriptive-hover-card__bing-logo{align-self:flex-end;position:absolute}body[dir] .dsb-hero .dsb-hero__content-container .descriptive-hover-card__bi
2024-06-12 19:07:23 UTC	12	IN	Data Raw: 69 72 74 68 64 61 79 2d 63 61 0d 0a Data Ascii: irthday-ca
2024-06-12 19:07:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 72 64 2d 68 65 72 6f 2d 63 6c 61 69 6d 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 2e 38 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 73 62 2d 68 65 72 6f 2e 64 73 62 2d 62 69 72 74 68 64 61 79 2d 63 61 72 64 2d 68 65 72 6f 20 2e 62 69 72 74 68 64 61 79 2d 63 61 72 64 2d 66 6f 6f 74 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 33 70 78 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 62 69 72 74 68 64 61 79 2d 72 65 76 65 61 6c 20 6c 69 6e 65 61 72 Data Ascii: 00004000rd-hero-claim-button:hover{opacity:.8 !important}.dsb-hero.dsb-birthday-card-hero .birthday-card-footer{font-size:11px;color:#000;height:30px;display:flex;align-items:flex-end;opacity:0;transform:translateY(-3px);animation:birthday-reveal linear
2024-06-12 19:07:23 UTC	12	IN	Data Raw: 6d 73 62 64 73 62 5f 70 65 6f 0d 0a Data Ascii: msbdsb_peo
2024-06-12 19:07:23 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 70 6c 65 5f 65 78 70 6c 61 6e 61 74 69 6f 6e 73 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 62 6f 64 79 5b 64 69 72 3d 27 72 74 6c 27 5d 20 23 6d 73 62 5f 64 73 62 5f 72 6f 6f 74 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 63 6f 6e 74 65 6e 74 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 70 70 6c 2e 6d 73 62 64 73 62 5f 70 65 6f 70 6c 65 5f 65 78 70 6c 61 6e 61 74 69 6f 6e 73 2c 62 6f 64 79 5b 64 69 72 3d 27 72 74 6c 27 5d 20 23 6d 73 62 5f 64 73 62 5f 62 72 74 6f 70 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 63 6f 6e 74 65 6e 74 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 70 70 6c 2e 6d 73 62 64 73 62 5f 70 65 6f 70 6c 65 5f 65 78 70 6c 61 6e 61 74 69 6f 6e 73 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a Data Ascii: 00006000ple_explanations{padding-left:0;padding-right:0}body[dir='rtl'] #msb_dsb_root .msbdsb-mp-content .msbdsb-mp-ppl.msbdsb_people_explanations,body[dir='rtl'] #msb_dsb_brtop .msbdsb-mp-content .msbdsb-mp-ppl.msbdsb_people_explanations{padding-right:
2024-06-12 19:07:23 UTC	8204	IN	Data Raw: 6d 73 62 5f 64 73 62 5f 62 72 74 6f 70 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 63 6f 6e 74 65 6e 74 20 2e 6d 73 62 5f 64 73 62 5f 73 63 6f 70 65 5f 65 6e 74 72 79 5f 62 75 74 74 6f 6e 5f 64 6f 63 75 6d 65 6e 74 73 20 2e 6d 73 62 5f 64 73 62 5f 73 63 6f 70 65 5f 65 6e 74 72 79 5f 62 75 74 74 6f 6e 5f 74 65 78 74 7b 6c 65 66 74 3a 36 30 70 78 7d 62 6f 64 79 5b 64 69 72 3d 27 72 74 6c 27 5d 20 23 6d 73 62 5f 64 73 62 5f 72 6f 6f 74 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 63 6f 6e 74 65 6e 74 20 2e 6d 73 62 5f 64 73 62 5f 73 63 6f 70 65 5f 65 6e 74 72 79 5f 62 75 74 74 6f 6e 5f 64 6f 63 75 6d 65 6e 74 73 20 2e 6d 73 62 5f 64 73 62 5f 73 63 6f 70 65 5f 65 6e 74 72 79 5f 62 75 74 74 6f 6e 5f 74 65 78 74 2c 62 6f 64 79 5b 64 69 72 3d 27 72 74 6c 27 5d 20 23 6d 73 62 5f Data Ascii: msb_dsb_brtop .msbdsb-mp-content .msb_dsb_scope_entry_button_documents .msb_dsb_scope_entry_button_text{left:60px}body[dir='rtl'] #msb_dsb_root .msbdsb-mp-content .msb_dsb_scope_entry_button_documents .msb_dsb_scope_entry_button_text,body[dir='rtl'] #msb_

Target ID:	0
Start time:	15:05:13
Start date:	12/06/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://691tx8z8.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink.me%2525252FoRT7%2525253F%2525252526c%252525253DPartnerize%2525252526af_siteid%252525253D1100l998%2525252526is_retargeting%252525253Dtrue%2525252526af_reengagement_window%252525253D30d%2525252526af_click_lookback%252525253D7d%2525252526af_media_type%252525253Dweb%2525252526clickid%252525253D%2525252526af_r%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.ln-cc.com%25252525252Fen%25252525252Fspecial-25%25252525252Fvintage-check-belt-bag-in-yellow-bur0137022bei.html%25252525253Fcgid%25252525253Dspecial-25%252525252526app_clickref%25252525253D%252525252526utm_source%25252525253DPZ%252525252526utm_medium%25252525253Daffiliate%252525252526utm_campaign%25252525253Decentime-nl%2525252526af_web_dp%252525253Dhttps%2525253A%2525252F%2525252Fu45053809.ct.sendgrid.net%25252525252Fls%25252525252Fclick%25252525253Fupn%25252525253Du001.H95mKvhWqpGdhokI6nNItidg1txkeoFEgxGKXlI44onsabikbCnyliJzb0vBxy0DfiVxxsKvbhSWesGw07IKKBHi7hAxjb-2BcdKAUwQVIabDkIyNUwRjJEDputJkdWEI-2BxZVIVZYTJA9asey4acxfz2i-2ByrqSAxgA82UN0-2BTCac20AJxFy1lyKC6TQIGjGrX-2BbdGXZUfzbJvrAr-2FOgTKQuAwazCfU8qFpi-2BuPngVf53o-3DWgIo_OgB8xwcw4MS8-2FaRsyv2i3s7PXuQKTt36zz-2FUlIfqOL1lOv-2Bm67D-2FZb97F8PzjBM-2BA3LRKR0I6ycPTMIk86EsfI4jdVMqvYuh0irneEo5umFvmZ5m3Urmq4rXahJS9PjP7iLSxkmtWGQjX8kaXnD7-2F17-2FQfzGjVXpuF-2FRf0CCdsVbOeOKM-2FC5wCJ57IT4Pd0L4UjNimWc-2BJJPoREjxZCPmr8nwbvKwWzrXKNz0gRgcmnJCuN0NpnFtHSD-2B-2FNly7LDxcWYLmDS3yjcAMLGwjyClzlpNgTSd20lURDh-2FCHUNNFvOxTpX93a7Qw5b4R-2Fjn19SJz-2FRm12hNEx37BaqmWT-2FvU6AShGShz7vBYl6JkTlBcE3S1JayqJauv-2FVZsbHDJQm-2FnTokvXgrqZXmT-2F7OExZc0Yw-2B9Bk-2FVlZgGUV5unvYZNzPbXCdXWJvRSnKFJ73g7%25252526c%2525253DE%2525252C1%2525252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MC
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	15:05:14
Start date:	12/06/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1688,i,106507902797914291,16263077713809333994,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink.me%2525252FoRT7%2525253F%2525252526c%252525253DPartnerize%2525252526af_siteid%252525253D1100l998%2525252526is_retargeting%252525253Dtrue%2525252526af_reengagement_window%252525253D30d%2525252526af_click_lookback%252525253D7d%2525252526af_media_type%252525253Dweb%2525252526clickid%252525253D%2525252526af_r%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.ln-cc.com%25252525252Fen%25252525252Fspecial-25%25252525252Fvintage-check-belt-bag-in-yellow-bur0137022bei.html%25252525253Fcgid%25252525253Dspecial-25%252525252526app_clickref%25252525253D%252525252526utm_source%25252525253DPZ%252525252526utm_medium%25252525253Daffiliate%252525252526utm_campaign%25252525253Decentime-nl%2525252526af_web_dp%252525253Dhttps%2525253A%2525252F%2525252Fu45053809.ct.sendgrid.net%25252525252Fls%25252525252Fclick%25252525253Fupn%25252525253Du001.H95mKvhWqpGdhokI6nNItidg1txkeoFEgxGKXlI44onsabikbCnyliJzb0vBxy0DfiVxxsKvbhSWesGw07IKKBHi7hAxjb-2BcdKAUwQVIabDkIyNUwRjJEDputJkdWEI-2BxZVIVZYTJA9asey4acxfz2i-2ByrqSAxgA82UN0-2BTCac20AJxFy1lyKC6TQIGjGrX-2BbdGXZUfzbJvrAr-2FOgTKQuAwazCfU8qFpi-2BuPngVf53o-3DWgIo_OgB8xwcw4MS8-2FaRsyv2i3s7PXuQKTt36zz-2FUlIfqOL1lOv-2Bm67D-2FZb97F8PzjBM-2BA3LRKR0I6ycPTMIk86EsfI4jdVMqvYuh0irneEo5umFvmZ5m3Urmq4rXahJS9PjP7iLSxkmtWGQjX8kaXnD7-2F17-2FQfzGjVXpuF-2FRf0CCdsVbOeOKM-2FC5wCJ57IT4Pd0L4UjNimWc-2BJJPoREjxZCPmr8nwbvKwWzrXKNz0gRgcmnJCuN0NpnFtHSD-2B-2FNly7LDxcWYLmDS3yjcAMLGwjyClzlpNgTSd20lURDh-2FCHUNNFvOxTpX93a7Qw5b4R-2Fjn19SJz-2FRm12hNEx37BaqmWT-2FvU6AShGShz7vBYl6JkTlBcE3S1JayqJauv-2FVZsbHDJQm-2FnTokvXgrqZXmT-2F7OExZc0Yw-2B9Bk-2FVlZgGUV5unvYZNzPbXCdXWJvRSnKFJ73g7%25252526c%2525253DE%2525252C1%2525252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MC HTTP/1.1Host: 691tx8z8.r.us-east-1.awstrack.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RmDGoAed9OKOYYw&MD=4KHRZ5fs HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink.me%2525252FoRT7%2525253F%2525252526c%252525253DPartnerize%2525252526af_siteid%252525253D1100l998%2525252526is_retargeting%252525253Dtrue%2525252526af_reengagement_window%252525253D30d%2525252526af_click_lookback%252525253D7d%2525252526af_media_type%252525253Dweb%2525252526clickid%252525253D%2525252526af_r%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.ln-cc.com%25252525252Fen%25252525252Fspecial-25%25252525252Fvintage-check-belt-bag-in-yellow-bur0137022bei.html%25252525253Fcgid%25252525253Dspecial-25%252525252526app_clickref%25252525253D%252525252526utm_source%25252525253DPZ%252525252526utm_medium%25252525253Daffiliate%252525252526utm_campaign%25252525253Decentime-nl%2525252526af_web_dp%252525253Dhttps%2525253A%2525252F%2525252Fu45053809.ct.sendgrid.net%25252525252Fls%25252525252Fclick%25252525253Fupn%25252525253Du001.H95mKvhWqpGdhokI6nNItidg1txkeoFEgxGKXlI44onsabikbCnyliJzb0vBxy0DfiVxxsKvbhSWesGw07IKKBHi7hAxjb-2BcdKAUwQVIabDkIyNUwRjJEDputJkdWEI-2BxZVIVZYTJA9asey4acxfz2i-2ByrqSAxgA82UN0-2BTCac20AJxFy1lyKC6TQIGjGrX-2BbdGXZUfzbJvrAr-2FOgTKQuAwazCfU8qFpi-2BuPngVf53o-3DWgIo_OgB8xwcw4MS8-2FaRsyv2i3s7PXuQKTt36zz-2FUlIfqOL1lOv-2Bm67D-2FZb97F8PzjBM-2BA3LRKR0I6ycPTMIk86EsfI4jdVMqvYuh0irneEo5umFvmZ5m3Urmq4rXahJS9PjP7iLSxkmtWGQjX8kaXnD7-2F17-2FQfzGjVXpuF-2FRf0CCdsVbOeOKM-2FC5wCJ57IT4Pd0L4UjNimWc-2BJJPoREjxZCPmr8nwbvKwWzrXKNz0gRgcmnJCuN0NpnFtHSD-2B-2FNly7LDxcWYLmDS3yjcAMLGwjyClzlpNgTSd20lURDh-2FCHUNNFvOxTpX93a7Qw5b4R-2Fjn19SJz-2FRm12hNEx37BaqmWT-2FvU6AShGShz7vBYl6JkTlBcE3S1JayqJauv-2FVZsbHDJQm-2FnTokvXgrqZXmT-2F7OExZc0Yw-2B9Bk-2FVlZgGUV5unvYZNzPbXCdXWJvRSnKFJ73g7%25252526c%2525253DE%2525252C1%2525252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MC HTTP/1.1Host: 691tx8z8.r.us-east-1.awstrack.meConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RmDGoAed9OKOYYw&MD=4KHRZ5fs HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.JHoMBbBABZg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo_6Zf8M75AJqSyaaLg_vD7Vr9kevQ/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=JYv6CX2ef_6CKoE1JAp_FFKN4CRwKue4-O9W6er9mPURRf590uwVauSWaXSY87hpnKdHG-DgaQuNCj8QhpR9QeuFKRFHqxiuuKMpjnExf2zKCpEu4xhggN_3o9odbgmbOBeZZY-AgkOnBDmTnvErk3M5N4c_joNreZoaSbkL9Y0
Source: global traffic	HTTP traffic detected: GET /L0/https:%2F%2Fwww.google.fr%2Famp%2Fs%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Flncc.onelink.me%2525252FoRT7%2525253F%2525252526c%252525253DPartnerize%2525252526af_siteid%252525253D1100l998%2525252526is_retargeting%252525253Dtrue%2525252526af_reengagement_window%252525253D30d%2525252526af_click_lookback%252525253D7d%2525252526af_media_type%252525253Dweb%2525252526clickid%252525253D%2525252526af_r%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.ln-cc.com%25252525252Fen%25252525252Fspecial-25%25252525252Fvintage-check-belt-bag-in-yellow-bur0137022bei.html%25252525253Fcgid%25252525253Dspecial-25%252525252526app_clickref%25252525253D%252525252526utm_source%25252525253DPZ%252525252526utm_medium%25252525253Daffiliate%252525252526utm_campaign%25252525253Decentime-nl%2525252526af_web_dp%252525253Dhttps%2525253A%2525252F%2525252Fu45053809.ct.sendgrid.net%25252525252Fls%25252525252Fclick%25252525253Fupn%25252525253Du001.H95mKvhWqpGdhokI6nNItidg1txkeoFEgxGKXlI44onsabikbCnyliJzb0vBxy0DfiVxxsKvbhSWesGw07IKKBHi7hAxjb-2BcdKAUwQVIabDkIyNUwRjJEDputJkdWEI-2BxZVIVZYTJA9asey4acxfz2i-2ByrqSAxgA82UN0-2BTCac20AJxFy1lyKC6TQIGjGrX-2BbdGXZUfzbJvrAr-2FOgTKQuAwazCfU8qFpi-2BuPngVf53o-3DWgIo_OgB8xwcw4MS8-2FaRsyv2i3s7PXuQKTt36zz-2FUlIfqOL1lOv-2Bm67D-2FZb97F8PzjBM-2BA3LRKR0I6ycPTMIk86EsfI4jdVMqvYuh0irneEo5umFvmZ5m3Urmq4rXahJS9PjP7iLSxkmtWGQjX8kaXnD7-2F17-2FQfzGjVXpuF-2FRf0CCdsVbOeOKM-2FC5wCJ57IT4Pd0L4UjNimWc-2BJJPoREjxZCPmr8nwbvKwWzrXKNz0gRgcmnJCuN0NpnFtHSD-2B-2FNly7LDxcWYLmDS3yjcAMLGwjyClzlpNgTSd20lURDh-2FCHUNNFvOxTpX93a7Qw5b4R-2Fjn19SJz-2FRm12hNEx37BaqmWT-2FvU6AShGShz7vBYl6JkTlBcE3S1JayqJauv-2FVZsbHDJQm-2FnTokvXgrqZXmT-2F7OExZc0Yw-2B9Bk-2FVlZgGUV5unvYZNzPbXCdXWJvRSnKFJ73g7%25252526c%2525253DE%2525252C1%2525252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MC HTTP/1.1Host: 691tx8z8.r.us-east-1.awstrack.meConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest/threshold.appcache HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitOrigin: https://www.bing.comAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en&HV=1707317784&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /rb/17/jnc,nj/6hU_LneafI_NFLeDvM367ebFaKQ.js?bu=DygxdoIBhQGIAX95fLsBvgExrgExwQE&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133
Source: global traffic	HTTP traffic detected: GET /rb/1a/cir3,ortl,cc,nc/oT6Um3bDKq3bSDJ4e0e-YJ5MXCI.css?bu=B68CP54ChwFZWbkC&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133
Source: global traffic	HTTP traffic detected: GET /rb/1a/cir3,ortl,cc,nc/uANxnX_BheDjd2-cdR8N9DEWlds.css?bu=C8oIhQP7A6IJiwj1B6oGWVlZWQ&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133
Source: global traffic	HTTP traffic detected: GET /rb/3J/ortl,cc,nc/4-xJy3tX6bM2BGl5zKioiEcQ1TU.css?bu=A4gCjAKPAg&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133
Source: global traffic	HTTP traffic detected: GET /rb/6q/cir3,ortl,cc,nc/9O7wsbk7fnvq75SUj-7m9vqGpmw.css?bu=MbwKtgrCCrYKpgu2CqwLtgq0C7YKuwu2CsELtgrHC7YKzQu2CtQKtgraCrYKzgq2CrYKnQu2CukKtgrvCrYK4wq2CrYK_wqCC7YKtgqaC4gLtgqOC5ELtgr2C7YK0wu2CqQM&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133
Source: global traffic	HTTP traffic detected: GET /rb/6q/ortl,cc,nc/G6CsCraoYcD6qY8uGndwq5zbkCc.css?bu=CZEMtgqWDLYKmgy2CrYKtgq2Cg&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=e7b6f52f&IPMID=1707317782133

Source: global traffic	DNS traffic detected: DNS query: 691tx8z8.r.us-east-1.awstrack.me
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.185
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior