Edit tour

Windows Analysis Report
http://www.spectrl.com/

Overview

General Information

Sample URL:	http://www.spectrl.com/
Analysis ID:	1541621
Tags:	urlscan
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4208 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1960,i,5111452318922476772,17145274851938049569,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.spectrl.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 1468sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://play.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA

Source: chromecache_381.2.dr, chromecache_153.2.dr	String found in binary or memory: http://127.0.0.1:$
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_156.2.dr, chromecache_172.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_311.2.dr, chromecache_171.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_293.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_144.2.dr, chromecache_293.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_180.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_236.2.dr, chromecache_342.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_177.2.dr, chromecache_360.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_295.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_295.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_286.2.dr, chromecache_144.2.dr, chromecache_293.2.dr, chromecache_180.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_151.2.dr, chromecache_250.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_151.2.dr, chromecache_250.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_151.2.dr, chromecache_250.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_151.2.dr, chromecache_250.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_151.2.dr, chromecache_250.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_295.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_293.2.dr	String found in binary or memory: https://google.com
Source: chromecache_293.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_295.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_346.2.dr, chromecache_195.2.dr	String found in binary or memory: https://myaccount.google.com/termsofservice
Source: chromecache_180.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_286.2.dr, chromecache_144.2.dr, chromecache_293.2.dr, chromecache_180.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_381.2.dr, chromecache_153.2.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js?rk=1
Source: chromecache_381.2.dr, chromecache_153.2.dr	String found in binary or memory: https://payments.sandbox.google.com/payments/v4/js/integrator.js?rk=1
Source: chromecache_156.2.dr, chromecache_172.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_283.2.dr, chromecache_335.2.dr	String found in binary or memory: https://play.google.com/
Source: chromecache_358.2.dr, chromecache_348.2.dr	String found in binary or memory: https://play.google.com/about/comment-posting-policy?hl=
Source: chromecache_358.2.dr, chromecache_311.2.dr, chromecache_171.2.dr, chromecache_348.2.dr	String found in binary or memory: https://play.google.com/about/play-terms/index.html
Source: chromecache_348.2.dr	String found in binary or memory: https://play.google.com/about/play-terms/index.html;target;_blank;class;cOP9Jc
Source: chromecache_358.2.dr, chromecache_348.2.dr	String found in binary or memory: https://play.google.com/googleplaygames
Source: chromecache_348.2.dr	String found in binary or memory: https://play.google.com/googleplaygames;target;_blank;class;cOP9Jc
Source: chromecache_348.2.dr	String found in binary or memory: https://play.google.com/intl/all_
Source: chromecache_378.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_348.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_358.2.dr, chromecache_311.2.dr, chromecache_171.2.dr, chromecache_348.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_348.2.dr	String found in binary or memory: https://policies.google.com/terms;target;_blank;class;cOP9Jc
Source: chromecache_250.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_348.2.dr	String found in binary or memory: https://schema.org/Offer
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_330.2.dr, chromecache_181.2.dr	String found in binary or memory: https://ssl.gstatic.com/support/realtime/operator/
Source: chromecache_273.2.dr, chromecache_310.2.dr	String found in binary or memory: https://ssl.gstatic.com/support/realtime/operator/1729584116185/operatordeferred_bin_base.js
Source: chromecache_295.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_286.2.dr, chromecache_180.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_342.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_156.2.dr, chromecache_172.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_295.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_381.2.dr, chromecache_153.2.dr	String found in binary or memory: https://support.google.com/googleplay/?p=remote_install_error
Source: chromecache_348.2.dr	String found in binary or memory: https://support.google.com/googleplay/answer/10066529
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_250.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_151.2.dr, chromecache_250.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_151.2.dr, chromecache_250.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_151.2.dr, chromecache_250.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_236.2.dr, chromecache_342.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_286.2.dr, chromecache_144.2.dr, chromecache_293.2.dr, chromecache_180.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_381.2.dr, chromecache_153.2.dr	String found in binary or memory: https://tokenized.play.google.com
Source: chromecache_177.2.dr, chromecache_360.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_202.2.dr, chromecache_242.2.dr	String found in binary or memory: https://www.ftc.go.kr/selectBizOvrCommPop.do?apvPermMgtNo=2022%EA%B3%B5%EC%A0%950001
Source: chromecache_156.2.dr, chromecache_172.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_236.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_236.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_236.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_180.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_236.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_177.2.dr, chromecache_360.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_156.2.dr, chromecache_172.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&render=$
Source: chromecache_151.2.dr, chromecache_241.2.dr, chromecache_373.2.dr, chromecache_250.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_295.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_295.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_293.2.dr, chromecache_180.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_180.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_144.2.dr, chromecache_293.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_144.2.dr, chromecache_293.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_236.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_156.2.dr, chromecache_172.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=$
Source: chromecache_144.2.dr, chromecache_293.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_151.2.dr, chromecache_250.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__.
Source: chromecache_311.2.dr, chromecache_171.2.dr	String found in binary or memory: https://www.gstatic.com/android/market_images/web/battlestar_signed_up-275d9e87.png
Source: chromecache_156.2.dr, chromecache_172.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_307.2.dr, chromecache_241.2.dr, chromecache_373.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Source: chromecache_295.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_295.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_286.2.dr, chromecache_180.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_283.2.dr, chromecache_335.2.dr	String found in binary or memory: https://www.youtube.com/embed/$
Source: chromecache_144.2.dr, chromecache_293.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:50150 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@18/364@22/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1960,i,5111452318922476772,17145274851938049569,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.spectrl.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1960,i,5111452318922476772,17145274851938049569,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/annotator.css	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://sandbox.google.com/inapp/%	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://feedback2-test.corp.google.com/tools/feedback/%	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.de/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.com/inapp/	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/render_frame2.html	0%	URL Reputation	safe
https://sandbox.google.com/tools/feedback/%	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://support.google.com/inapp/%	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://support.google.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://feedback2-test.corp.google.com/inapp/%	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://feedback2-test.corp.googleusercontent.com/inapp/%	0%	URL Reputation	safe
https://www.google.cn/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.de/inapp/	0%	URL Reputation	safe
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	0%	URL Reputation	safe
https://sandbox.google.com/inapp/	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
https://sandbox.google.com/tools/feedback/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
play.google.com	172.217.23.110	true	false	unknown
i.ytimg.com	142.250.186.86	true	false	unknown
play-lh.googleusercontent.com	172.217.18.118	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
www.spectrl.com	104.21.39.31	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://play.google.com/_/PlayStoreUi/browserinfo?f.sid=-4647688482496319979&bl=boq_playuiserver_20241022.06_p1&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=67810&rt=j	false	unknown
https://play-lh.googleusercontent.com/ZU2MdVVbKvKLuFlTCuJ0b6-HiyyZmqPcpnwA6iDJCa6CAR32U0xfcVWef1nRf9X4J6A=s256-rw	false	unknown
https://i.ytimg.com/vi/on0ng3OGqMA/hqdefault.jpg	false	unknown
https://play-lh.googleusercontent.com/jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw	false	unknown
https://play-lh.googleusercontent.com/7ychYovQPtJoIVWiH4osNrweQE-KEzVqry_PxYGqr9984sOjfaK9KZmeLBAfN6kvoO3WBcxECQM=w648-h364-rw	false	unknown
https://play-lh.googleusercontent.com/fqEcPOtm9aSOTmCcH5ebeKerdIz8x5oo-cAi9HTlRBAsg-TEwlf3UQpplmbywU4k6uM=w648-h364-rw	false	unknown
https://play-lh.googleusercontent.com/M03pLkIu8Rp_jxkdSXjkoeW0p-TlH493P9GaK9YkY_uVm5tnkjsarW1vcZ9XDsr_-G8=s256-rw	false	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR	false	unknown
https://www.google.com/js/bg/9J_OlxnAizjMJN_fZ8JRYj0PV4Me2EAx1CVcnywh2Sk.js	false	unknown
https://play-lh.googleusercontent.com/kMofEFLjobZy_bCuaiDogzBcUT-dz3BBbOrIEjJ-hqOabjK8ieuevGe6wlTD15QzOqw=s256-rw	false	unknown
https://play-lh.googleusercontent.com/mw_NfsvKM8m6RPv8Fz2GQawCOsqWv010saMnc7zbWalMxuaA9IY8h7E0VMieLxSxAFB98NFeYqbFrXXq=s16-rw	false	unknown
https://play-lh.googleusercontent.com/vIMymGDzl2arE2styucCrIO35Qv6yX7iJJYZGmIUMXXV_mT5OyR5MjpkfHFB3tc8bA=s64-rw	false	unknown
https://play-lh.googleusercontent.com/tMIgKazDGX4JzzaF3TUPPdZvRTlpGOFKIqwwb0f9lThr-Rlj572zCYCycF_la8NEjumIj9OiUA=w648-h364-rw	false	unknown
https://play-lh.googleusercontent.com/NW2ASwJ4qtxfThhVIpm4641sR4o-yGv80yqaJnOnpC4lEmdxEcNTFcF6-TlZYtmdaA=s256-rw	false	unknown
https://play-lh.googleusercontent.com/BmUViDVOKNJe0GYJe22hsr7juFndRVbvr1fGmHGXqHfJjNAXjd26bfuGRQpVrpJ6YbA=s256-rw	false	unknown
https://play-lh.googleusercontent.com/FpCCoNLOt6LRIY_3NM5Rk_LDN-kFNz0yxdFjm-CYM4XavRQfoQlXxOtgC7abfexIDOE=s256-rw	false	unknown
https://play-lh.googleusercontent.com/ebs6ftYUkOKlDY0M174OpvargwbDyHUVAnO_G5aE0dL5GBQKCtfh3adN5H3ZMThXogDi=s256-rw	false	unknown
https://play-lh.googleusercontent.com/QLQzL-MXtxKEDlbhrQCDw-REiDsA9glUH4m16syfar_KVLRXlzOhN7tmAceiPerv4Jg=s256-rw	false	unknown
https://play-lh.googleusercontent.com/RKt7FfLHYfXyEJkY2imqAe1BP96wjAHtm7tH_rZZmBBX2QkC_2luYj6jXlPqoRhX5HmB=s64-rw	false	unknown
https://play-lh.googleusercontent.com/X5t_FHWLUo0xFsu1FhjgcZ8qWWSrDVHdus0OtKW4HRFLyUbsbg95dv5dsPk9PW5WTWudRdY4Pw=w648-h364-rw	false	unknown
https://play-lh.googleusercontent.com/Nz4AvRKB-2Ei330Du2EiuF6D3nAi5o_jARnmHnrtZ8C2IruknKUWrvKGuWzv1ol5ZfCgh0yBclU=w648-h364-rw	false	unknown
https://play-lh.googleusercontent.com/-gmI1L0dHJnjIFqmSJZDeo-bTUx_eQV-64_s-9fsZ8KsK-k-3fV5kvh5_uGqqiBWtEk=s256-rw	false	unknown
https://play-lh.googleusercontent.com/9AZOTXU_CpreTFAXUPAmJNkm8VGCb1C90fjJ9pHGcVmpGMDSTq3cUbaQJdBT9Tdp9A=s256-rw	false	unknown
https://play.google.com/_/PlayStoreUi/data/batchexecute?rpcids=eIpeLd%2Cw3QCWb%2Cw37aie&source-path=%2Fstore%2Fapps&f.sid=-4647688482496319979&bl=boq_playuiserver_20241022.06_p1&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=167810&rt=c	false	unknown
https://play-lh.googleusercontent.com/NetAUUeOatNbtzGAvZfgrxVvUajTyf2G3BRpTJMZ1Hnaxa_wcBscJO4eGrp-LvJOIgaGBz_IHteN=w648-h364-rw	false	unknown
https://play-lh.googleusercontent.com/PybCNhe-jjLeSh7EWh_cyzw4kqxsN1dB6zuDhVAEyomlQfcauwghs0hrjR6pUWrBLdLeu45uPiY=w648-h364-rw	false	unknown
https://play-lh.googleusercontent.com/FVQXdzxDphpLdMRqIc5kG4C_Dc4AEO7-9uKHPt85v5_6Sp3J4mTV1S6P3ipLEoK6lDer=s64-rw	false	unknown
https://play-lh.googleusercontent.com/_sJ-ST-crO8lxIzTv44xv_hiZvA6X7X2-8jSjhha2RfYcGSgACRod38yA6dfmcJHy_M=s256-rw	false	unknown
https://play-lh.googleusercontent.com/gAc6Do2rlEFGZEbG9HrLCHNBZW_jqtAP-8PKHSXEPRcA51Qw7t9OhO8cQSUPHL1yk9I=w648-h364-rw	false	unknown
https://i.ytimg.com/vi/PqMlpEa_N0A/hqdefault.jpg	false	unknown
https://play-lh.googleusercontent.com/ksQztMpwCo1I4qacMnW96bzIrnfeQh5xyId11qZ405X5LFdtGUxoralRZkAWBI9SGbf_=w648-h364-rw	false	unknown
https://play-lh.googleusercontent.com/qjlLBqevxOQjDqB5abhHHesrkYzum2QNV89LzngZivcOoL_ie2TY1_1mxY50otwRtxw=s64-rw	false	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=invisible&cb=99qpeju3sn34	false	unknown
https://i.ytimg.com/vi/k6pS5_C1zPg/hqdefault.jpg	false	unknown
https://play.google.com/_/PlayStoreUi/cspreport/fine-allowlist	false	unknown
https://play-lh.googleusercontent.com/u9DetvmIAh9OuL485cvYerLGPUfRtjx70huaquRLozRz5npaqFnX6EupWUwXMY3z-yk=w648-h364-rw	false	unknown
https://www.google.com/tools/feedback/chat_load.js	false	unknown
https://play-lh.googleusercontent.com/R9vMA0btLstD6t9Q8S8Unwdahep2m9P4RWri0lCiAKoLjcEs-MwMnShCS3SO_6XR_Hc=w648-h364-rw	false	unknown
https://play-lh.googleusercontent.com/aD_yV7NdU8txkDPV1NU557BjnvZf-D6Ip8Cn7xhdieHgMLGt1FTQXlBBgH1jTNhhnw1v=s256-rw	false	unknown
https://play-lh.googleusercontent.com/VRMWkE5p3CkWhJs6nv-9ZsLAs1QOg5ob1_3qg-rckwYW7yp1fMrYZqnEFpk0IoVP4LM=s256-rw	false	unknown
https://play.google.com/_/PlayStoreUi/data/batchexecute?rpcids=eIpeLd%2Cdi6f4%2Cw37aie&source-path=%2Fstore%2Fgames&f.sid=-4647688482496319979&bl=boq_playuiserver_20241022.06_p1&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=267810&rt=c	false	unknown
https://play-lh.googleusercontent.com/NpvhVORMiao4cXfxSz4j4gq_F_IMkFTTAImQdHkRL11IMlaAGVMOEbVSuO_DDMZM4IUEUi-M3OQ=w648-h364-rw	false	unknown
https://play-lh.googleusercontent.com/sj8PUk54GEgDfm4Ya37Zg_Br0jG0jEU-4p2mw5-vwGM63a384TPHAO-3mzlOSYEQcEp1=w648-h364-rw	false	unknown
https://i.ytimg.com/vi/dSg_iqQpKYA/hqdefault.jpg	false	unknown
https://play-lh.googleusercontent.com/A-Rnrh0J7iKmABskTonqFAANRLGTGUg_nuE4PEMYwJavL3nPt5uWsU2WO_DSgV_mOOM=s256-rw	false	unknown
https://play-lh.googleusercontent.com/pQqL4JTm_4PS4UGdvVNnv4f0AYXeRwItrhlAhu84_jtUO-xslQmRaHgrJouYh82OPps=s64-rw	false	unknown
https://play-lh.googleusercontent.com/yZsmiNjmji3ZoOuLthoVvptLB9cZ0vCmitcky4OUXNcEFV3IEQkrBD2uu5kuWRF5_ERA=s256-rw	false	unknown
https://play-lh.googleusercontent.com/U202Yto9o6IT1ZA8bgigA5q4nIzvu0S9ztl2d0WQSj6Iw0hIw5W7SIAnH0U2-Kk3nao=s256-rw	false	unknown
https://play.google.com/log?hasfast=true&authuser=0&format=json	false	unknown
https://i.ytimg.com/vi/3mkmZHd6xK8/hqdefault.jpg	false	unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0	false	unknown
https://play-lh.googleusercontent.com/IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=s16-rw	false	unknown
https://play-lh.googleusercontent.com/zi6QgTtIiAnGqQMizfoj2LnE85kzHyZlgTruSzJ7Zw_79NAmB3fhxuDegwxby7P0yw=s256-rw	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_286.2.dr, chromecache_180.2.dr	false	URL Reputation: safe	unknown
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_151.2.dr, chromecache_250.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/client.js	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://support.google.com	chromecache_156.2.dr, chromecache_172.2.dr	false	URL Reputation: safe	unknown
http://localhost.proxy.googlers.com/inapp/	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_236.2.dr, chromecache_342.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_151.2.dr, chromecache_250.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms;target;_blank;class;cOP9Jc	chromecache_348.2.dr	false		unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_342.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha	chromecache_250.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback	chromecache_295.2.dr	false		unknown
https://sandbox.google.com/inapp/%	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/api.js	chromecache_177.2.dr, chromecache_360.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback/	chromecache_285.2.dr, chromecache_295.2.dr	false		unknown
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_151.2.dr, chromecache_250.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/tools/feedback/%	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy	chromecache_348.2.dr	false	URL Reputation: safe	unknown
https://www.ftc.go.kr/selectBizOvrCommPop.do?apvPermMgtNo=2022%EA%B3%B5%EC%A0%950001	chromecache_202.2.dr, chromecache_242.2.dr	false		unknown
https://payments.sandbox.google.com/payments/v4/js/integrator.js?rk=1	chromecache_381.2.dr, chromecache_153.2.dr	false		unknown
https://play.google.com	chromecache_156.2.dr, chromecache_172.2.dr	false		unknown
https://www.google.com/log?format=json&hasfast=true	chromecache_177.2.dr, chromecache_360.2.dr	false		unknown
https://support.google.com/inapp/%	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/contact	chromecache_151.2.dr, chromecache_250.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/inapp/	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_151.2.dr, chromecache_241.2.dr, chromecache_373.2.dr, chromecache_250.2.dr	false		unknown
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.google.com/inapp/%	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://schema.org/Offer	chromecache_348.2.dr	false		unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_151.2.dr, chromecache_250.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.googleusercontent.com/inapp/%	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://googleads.g.doubleclick.net	chromecache_293.2.dr	false		unknown
https://play.google.com/googleplaygames	chromecache_358.2.dr, chromecache_348.2.dr	false		unknown
https://www.google.cn/tools/feedback/	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.de/inapp/	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_177.2.dr, chromecache_360.2.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/inapp/	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_151.2.dr, chromecache_250.2.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/tools/feedback/	chromecache_285.2.dr, chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://td.doubleclick.net	chromecache_286.2.dr, chromecache_144.2.dr, chromecache_293.2.dr, chromecache_180.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
216.58.206.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.246	unknown	United States	15169	GOOGLEUS	false
172.217.23.110	play.google.com	United States	15169	GOOGLEUS	false
142.250.181.238	unknown	United States	15169	GOOGLEUS	false
172.217.18.118	play-lh.googleusercontent.com	United States	15169	GOOGLEUS	false
104.21.39.31	www.spectrl.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.86	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.86	i.ytimg.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541621
Start date and time:	2024-10-25 00:48:55 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.spectrl.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@18/364@22/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 74.125.206.84, 142.250.186.46, 34.104.35.123, 142.250.185.195, 142.250.186.35, 172.217.16.131, 142.250.185.67, 172.217.23.99, 216.58.206.46, 142.250.185.232, 172.217.18.10, 216.58.206.42, 142.250.185.170, 142.250.185.106, 142.250.186.106, 142.250.184.202, 142.250.185.74, 172.217.16.202, 142.250.184.234, 142.250.185.138, 142.250.181.234, 142.250.74.202, 216.58.206.74, 142.250.185.234, 142.250.186.170, 142.250.185.202, 20.109.210.53, 142.250.186.40, 199.232.210.172, 192.229.221.95, 13.95.31.18, 40.69.42.241, 13.85.23.206, 172.217.18.3
Excluded domains from analysis (whitelisted): ssl.gstatic.com, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.spectrl.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	90462
Entropy (8bit):	7.976966393333891
Encrypted:	false
SSDEEP:	1536:05GnkNveINsxitIW2ld1S3b71IQb3xRvc45JlNE2nskaunTsX:05oasxitIdd4lbhZrJY2nPaKTe
MD5:	9242E084DEEAAEEE9A7DFC679B51E9CD
SHA1:	891D6A2F63AD389C0BE6B690F27FC8BEC7ED251D
SHA-256:	F528C0546EFA7DC973F8878D23F8975984C2673D9ACD8FAF141A846623F8273B
SHA-512:	477C7851CEE450ADE6FE833C9B3EBBCF427203B56A80A432B86EBEEDB0B62F743A7007C656303C9DAA7F28CEF533F7BC9B302EF32A183ADE7EE0C2847623EDC3
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/npHAHmtZRgiMVEVg5pcncTIyqMW5MX--niR0L9PSzc5l8nuXS4GbU4w0yumQTururnc=s256-rw
Preview:	RIFFVa..WEBPVP8X..............VP8L.a../..?.MHl.H.....;..?....".?.$.@.If.b.6I.i.:...X.. ..8.x.Qg ...u.\|U.....fZ..W?.5.........2K..~}/.T.....v~.m..e).+.o]...Q.......O.xB.Z.-?.?.m..~.j....$.../...K.........[.$........\|..j...[.!.<7.'..+.[.......]..K(...U.2...s(6..^.....p?o[...8.....u..G......I../.$.......I.".....5....s.w/.k ........hl.}aI..h....k.P.".dn0..V].I6-Py.[..$...P..T.n$I......bz...EP..i.........l..I..x.....F.<..9....&..:.4.H#B..t(@...5....Z9.t...$Q2(..._..6J.x.......G....nT....:uB..i...a..!..N...}`7.s....h(;'.....T4..6.6X..!...(.FS.;.s{..3..;.....*.s..q..WC.~.{u;<._./...B..~...%.......l.q...~._...Q....i.\|.P.....`...H.t..c!.a/.G.G<)....4.3.N..j&u.&........6.{.......N....z..u&.Ssrj'.4.7.....b.Zp...`aa.....~.....Y7..b.G;.c...+Oy.......h........Y.I[.OTJ..P.Q.....,...c..F_.....x.L..>..k.y(U.q...=...-..r....:..5...T....I...8.l.M.O...<.rQ.q. ...;&]....N...1....}i.....)@Qc`..d.9.........,....w..N.....y)....9p...G..j.p.>...qy.d.U..`=s!nO.....p

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6990
Entropy (8bit):	7.962002082701178
Encrypted:	false
SSDEEP:	96:lZmLANRKrN2fFHX4C9UPlVv/saAe8Aa8LdgWxrWTWEd53fsJXBaifvtYilwI6eBM:lZmENQ4tHNQUlBu5mj5KaoceB9Ea50
MD5:	F86EC9D0715A5A9F155AFD1C576C89B9
SHA1:	C837ADDD814D2A81B51330DBB705E2FACC74A6B6
SHA-256:	703F4A604336DADC5831EEE7B1492F3809C85EB98B3C02D5C4DF861E7C901AE5
SHA-512:	DF0AA64C54D828AC8C2E396854BC8FF641BBF2068277F84E591F3385D68F79D0F312C9473E4233AFC89B46A5BF88E51AAC28FBCA6F652C6BD7F656B8C1EB4197
Malicious:	false
Reputation:	low
Preview:	RIFFF...WEBPVP8L9.../..?.U..$I.?.gf.......^..^.W..#0..s.....+..k4.m..3.....f......V..7..$U..P...f...r...L.......................?...qI.qQq..F..N.U.qQ..R@T....c..O.`....._5.L%.>.ma.J..@..."....#..n..q#...V...m`jXT.F..-.}...?n\|....w.H..jGM..j..'X..].....m...'`.Y...D..QD.G......m%.T......Q..X...{4k....6.$.{...lf.m..@..7....2...........>....LU......./........{..[..).....RB.@.C...st....=x.!....#....R.".@...;.tl.....b's...F,.CD.kx..d."}H]#'.v`a...S.LC...Fo.DS...^."\W.P.ddN......q......E.t.=t./..v..m.m.....m.....6.ji.vi...[g.m.m.m.?..v.m.......soa..-.!....X_...v3-.18.S....K.ji...e2..$.DY8...[Fb1..t.........S...`t.......,..k1..._..`8..k...^'YU..2.S..X..q...!..1..#.$dH...........P.f.f........'.V.........J....h$D]).I.0n..V0g..X&...M.z...$...:j{.]$.B...H..Lu.f;%.....h.&..}.S.Q?'w.\y.[!..H..2....,..08..2.B.......(......v.C.y:.0E........)..{..88c....[.".:......s......r.k;Tz...frhF.K.=.7.J.TL... .t.,?Y..1...r.j....C.&.G93....m.;

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	14486
Entropy (8bit):	7.982749743060294
Encrypted:	false
SSDEEP:	384:95yjUQ/mSPxCQ+4cdACXMbZ75zQ5NKCccSs:95yjUWC/fSCXKk50Vc
MD5:	48BDA408F1B1556B05A4A52D0B497C5A
SHA1:	6F6BD6943442344E4D78E1FE4C5D75C6742AB7F8
SHA-256:	8671747B1E05C216FBADCFFC4EADF710AE3B6D9CCC168C6CFEBA948805D56B56
SHA-512:	5C46C8DB71207FBD4A73DB1AC383816B4C519E93C5DA52CBE2AA3E5FC90EDE8CE5C3CBB3C00F6FBE2AA1E5E20BF224F975E43F4413BEB7D53EA2AA807E277929
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/FpCCoNLOt6LRIY_3NM5Rk_LDN-kFNz0yxdFjm-CYM4XavRQfoQlXxOtgC7abfexIDOE=s256-rw
Preview:	RIFF.8..WEBPVP8L.8../..?..Hn#9....6...p.....O........... .5u.(..:Z.jZo...!x5.>......8.o.}&iz...W.q..j.>...M}.1.[.>..F..".^..u.c..F..tEd.A\+.Yfr33..cd../....-WU.5.....W.(...vU......$I.$_...........cl>T.F..Hy...,o..F1...n$.V.....r)2......^.'..O...%..P.&...~K_.GY.....l...2...b....i.4...QPs...w..K..j..n.....c.{YFV.A..`..4J4...4.1.+...@..4h.P0.v.M`....m.(..vg{..v.{].v...^........y..C...8.gB..dd.G 9.=.7. ../.`.EuF.....b6.D..GU..$I..f.=3..._.?.G^...f.~...`..d.r..bD.3...+.&.6..<W.5^.A.]..!.g...-.~....}......n........]G.q?gw....w.>-.w{w.Z.y....V.Z.....k...I.'..!e..g....yp...^....N8.P..F..C...S....).JO.py.."...i.+..qVH....!...70...q:}&\!D....wAX.NWX8....CN.u........B...Jq...X.....t.............F..\.hk;&I:..}.X.9m.6.6.l.m..m.5..SJ+."2......m..h....y.w.n.I.f....m.c.m.m....4yj....{..u.GL..j....9....{..R...A. ,11%...x....Z...1........a..........G....^<..@9(..j8..n..@..8&......@P.,z.:...<..U....L.?l.M.~T.t..@y..N.M.,.1(.a. .Ptu...I@

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12046)
Category:	dropped
Size (bytes):	331460
Entropy (8bit):	5.563087935734906
Encrypted:	false
SSDEEP:	6144:IT0dmGBRo3k489CvviuXx5sgqXk9ns1wdWZ:Z2kLgvK+xQX
MD5:	8660E9F2B17EF2597DE72284845EAB0A
SHA1:	3C87BAFD74F463D7BA96EBE75F5492447E9E5382
SHA-256:	5A037082CFD79A7713986D902C88807A2DB455D0DAF676C1B9E9C440ABF5D9D7
SHA-512:	D524C7F4B998420A006D8E6F197DE3247B508F3CCF3C0F70F6624C308DE236D1D5824BA3BFD0A878B31F625FD81AE110A0F144D98A822AAD458D8FBE99E2B809
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__j","vtp_name":"navigator.userAgent"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":["macro",3],"vtp_name":"originalLocation"},{"function":"__u","convert_case_to":1,"vtp_component":"QUERY","vtp_queryKey":"utm_source","vtp_customUrlSource":["macro",4],"vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":["template",["macro",2],":",["macro",5]]},{"function":"__dbg"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":"G-LL

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2080
Entropy (8bit):	7.8925402678716035
Encrypted:	false
SSDEEP:	48:5NE6viM5rUu+mHfgJYeAlomnu8q1xiNNL+Ze8yU3wETDVLh4XLhcqQB:5KXcIu+mHfg1Aru80WyhyU3PTs1a
MD5:	D729E082FCA10E8B0EFEC7A14F8D9014
SHA1:	5DFE2A6D0DD3169F53490583DE4B60D9F8A3A649
SHA-256:	99756AB0085E6C82E96A948E912F4C31D36F65CC561A1E587C2F3970D56986B8
SHA-512:	432FEC08DA5FC9D0D22224D6D406E03783ED3219F62E088F84CE6195C3286597768303485A886A424771E24EAA9B274F101268483437834DFB975D3E905092A1
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?......=...+\....x.wX....bec..r.#.....u..&f,v..X^B.2...B..R.... .&X.C.......F...vr....(...M.8.U..p."f.Y.\|...C.b.P!M-.ns....: ...1E..*..G.....hR..c4...Z.E.$..@....t...m...m.6.m......6gt...m.m.m.Im.m....'z.w=..a.....EO.C.C..7.....p[\|........MOT.!.......<..}.Zi...............)...h.)......mf..XS.n..#x.....@b....h.h\)l...0..i}.b..Yd..q{..J=.'.!.T..p.d.q_..~.76n.O.A.).....t.@.=..y&.....G.........3....u.....P..6v...G"..r..H.....O$0..$..p.5..{.}D.....Yy.G..u..@m.7iA.T.5w...!......P.Z...7..B...........p.l...}.q..~.um\|...L..(.L0..."+..}.>/.;i.(2......a.y....S..j5.!.V.......#.c.D..\|..F..u.CC........%rU.+I.sA}.\5(.Y.+,N."....r..0dRK.).lS\|.H.?...{2.....?....gkj.x.....o;.B.3r..v..E.f.{_I8.C0E..q..sa.9XC..R..3..A"...t..u.c..q3\2.P..r]....y..4Ba..w..W]-P..W.il...v..nT.g....\..RER(V.PE(wR&).DJ.WRp...U.H2....k.').7...eg.go..Bc..\..".d2u( .;!...y#E...p.I.b:...;.`........g~.$..p.'....K/.....wC...j(o:..~...BI..A.&..%.w.Cmc...

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	76696
Entropy (8bit):	7.987965450903897
Encrypted:	false
SSDEEP:	1536:CV6zX6Qc/xX24vIUs3fybZhqbkwg3Mb2/roYkOBN8/eMWKFfRv5wkiiDd6FbzT:CsQ/xG4gFPkpwgc6joDwjhKFfvRSbf
MD5:	54044E9E42F03C55D758C401E8BF5413
SHA1:	087CAF3CC700C3B82BD5FCC52EE03235BD89280E
SHA-256:	908A44907039EAA8E6CDE570E4496101C622B2EE431D4EDB8E9BEE0B13EB2F07
SHA-512:	B4D59F4F9C34BBE8424703A0108931614D6B00E8CFD65F469C6068805A5E1BE962CAFA0DE9F2B69733B42F0ADCDC054626A331D6C5981213F732B9FEFE302C2E
Malicious:	false
Reputation:	low
Preview:	RIFF.+..WEBPVP8L.+../..Z..0l...\R.......'.......H. _I=...6.@N....:f&yu.>Iz..9u....@zP.T........ .o$..I@'i....z.F.c. .6.m.i...:u..>....\E.B.l......%.....a... .....N.<+...&..A.d....3I^...N..I}..i........`......?...jG...=.Y.oN..>../..p.?...Uko#.`.Y..B.'.f5..8...`.. ...l.n3.c>f......0<r.KW.}A..........Dy...<<..j.}.g.R....@".."Q..l...t...`.z......>i..>B...'..G....gd;#4.5.....A.....m.N...D...X$.1....~.;l.6......V...._...!..ar.H,.!......8].^...6Uj?/k?kx...V........i...D.dMT.x.k=.l..(.......BY&....V..D._3......e...G=(..}h[.6...o.9Y....z.h"....A..g...?..#`T....q%.k-#uBb....IQ4B`C...c..u...j....Y....i..D..~....Ec..I.'..Q....@&.X.....:..m....dE.(..IQt..lz...\|...p._.H'1..i.9........=dp....Q%..i<.x..G.G..jzS.~..Xgr-c9....u;.=.._gE#..-O...h...>h=4.2.C.r~.g.~..m....[uX.^...%.{n.V..%..}.G....?.......=.LM.=..I..;d.$.......C....h.+..L4..........`...\|......\7.....fq)M..`T$...s...Q"q.`..ga8.^.a.....\|y..S.A.L...f..e............X..D..z.p.........%#W...s..x

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	170
Entropy (8bit):	6.676048050841229
Encrypted:	false
SSDEEP:	3:0Zrwlp8NJrXNwje/UwbgXwYIlGKZqvqJAy7ZrUilBCkzX/BfTA1D31n:0ZklpUXNwjecwb7lGurFUihBLiDF
MD5:	461204FBB9CB6D19F763B8EAECDC01D6
SHA1:	95354D81968469C5A9EE2DDEF3C84B9F788802D0
SHA-256:	FD29716389D0077F1D88C7ACA6A408FDB9E27A9D33FBD74B265CFF2F6A2E3786
SHA-512:	B7BA5AB186109447B9C6317F7E9EC8BCBAEF65B1A0EC96FB12334A3C0DF97430B142B2C3C7011C0B7D09C425C8E673CEA79F4EF126FB01BB0D8E23409A177BEE
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../........G...C-....13+N.8....3.q.G..M..G....~.4.2IP_..)......Z:.}.....$...... O.....,......QU....T...$.?%.....z);I2Z9...=$...{./u..2p.cj.\...%m..

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 233240, version 1.0
Category:	downloaded
Size (bytes):	233240
Entropy (8bit):	7.998929579369334
Encrypted:	true
SSDEEP:	6144:RFtUp8TP0YyjsuhShhu0bAlZYs/UAkHgX4gf1G:RXUBNshhu0bA7YscgX4gfU
MD5:	86A24C421A052D323E49A952D88805B5
SHA1:	814A9DAF46A34AD6BC4F5BC0DE4940B166A85870
SHA-256:	A359121948E08165E21894786EE4E4E3C3F1AA55BB44DBAAD470D4ADF1B7DB9B
SHA-512:	0993B3670D42D9032831122D0E43D1843DA2361D8781B0CD75AA080A57F9DA273AC8A54414F8598EE12B2878787245B564A07F7E401C0282A47B5A0F57A825B3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlematerialicons/v142/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2
Preview:	wOF2OTTO..............................................X.`..`.6.$..d....~. [......<.....* .d..K..A...&@..\....n..!.N...(.G.../.v.y.....................n..n...l%.H.U..r.xp..Q....z.A..G.Q...4R.@NZ7...5..^.RE.MjY.l.....v.{#.T.J...J........2.h"&.l.+Se.UI..J(A......9j.4.j.hjaq.\|i.1`.p,..S.W..,..:F.k..w.H.t............ ...(........t{5...r.5#"....].>..Z.}...l5"".XDH.5T..M....;9sw.c.!....Q.}.........8d1....QH......I .%72..s.......fQ.V;.SH...V.W...q..2-...Y#+.6..m..D@..?.g!5TSZ...R....D 7=...v.K6..p.." ...v..j....F4...?.....<.s..Z...._rw.......4.B..... u&4.'4l........@~..E@X..,y..].$..]f-..$i.o...\9..2.`.6.#...W.j...7".o..V....%3..........!..?U.J.V...V..Mvz.....>...A........Z.D..3..s...!W].TUR.nUed.B.[.IK7.`.5...*..DJ.<.ME.\X.h.wJ..\0s....z+.EAF..4..hr....;...zE......9..d.Z.I["2...2c.'..:.v..3%C..2.S.9.s..h.m..Qk..J.....'c...Y.G.........&m..........v.R..].z~..4.ZC.s.......0]`[......./..O.)Ri..f.H...d.I....<#\|...C.../.Y.~e.vN.u....Sl.\|

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	16248
Entropy (8bit):	7.98482221372096
Encrypted:	false
SSDEEP:	384:lBRHy8G+Cm5PKBO5Oe17yo6iSjK3MZzbmDeaf57W952zK9s7:lBRHy8G/m5GqO0yohSjKSz6DH57852W2
MD5:	CFFEF1A03C9D15F18DEA729534A5C39C
SHA1:	8B7F5B2DFDE9E57F72E95A194C6A517FD8C99AD4
SHA-256:	C43DD9DDFA011C7322F742574D5E5A8F1D0C33ED4B391BAA759BB6F0A6ADFE9C
SHA-512:	34254F41028DF431A4ACCC45F1EE69DB6C76F4E42745A9C925F006476BFE9AC2028BFD73A5D0C18854F971CECF2412A2C8AC2B498BDA06881FDFCE5EF85DFCA5
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/X5t_FHWLUo0xFsu1FhjgcZ8qWWSrDVHdus0OtKW4HRFLyUbsbg95dv5dsPk9PW5WTWudRdY4Pw=w648-h364-rw
Preview:	RIFFp?..WEBPVP8 d?..0......l.>=..D.!..J,. ...p...KO..Y7..S.......Ia~....o./._...v..........G..........'........7./..?.\|_z........_....{......W....._...\|..U.....K.{.............?.........._..._.?........;././._..........S......`...q~....k...~..o.u._....E........5......z.~A.../...=..../..c...G...<..K.............._..._......!.........m.......k.....W..?...................l....~......#....~I...........G%A.....$..J...'..H%...'8N'.J9.Np.O. .rT...8..A(...Cr7...;..#.r.J0h....(2.\...........4c.ix.........">.}.Z[E../].X.R.h..O.n$.@[...~I................A..n..V....q0.['....]..nN..q.2..o.'8N'.J9.Np.`.....l...6..^..(..H%..[I....IC,.^.2-eA.....$.i......u.c~..l!.\|....'.9I..`!.. .rT...8..A(.&9N7t.J..V.8...u........I...k.Np.O. .rR.G.5...NQ.C.P..2e~".}...=.....Bs..~I........&....\.S.v.=.\.n~.].)......O.2-eA.....$..G.,KJ......<)Y.O..U.~..=;z..TW..H%...'8N'...hB.'...D..-[f..<U.z.E1k.7.....9L.K...0<....\|~...\...'..H%....c..g?.5F.....n........@.,k....zh..a..k.d..m.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	22078
Entropy (8bit):	7.988867065623458
Encrypted:	false
SSDEEP:	384:r0ilpVj0DtNZwScbR0KpkvPGoD0xwhdnS0uQcJMRmhyn872sVjtygo7d:T76ncd0KmvPGooxwh5S01Deyn8qsmL
MD5:	787C16D2400E178DF35F9FFB150A40B9
SHA1:	FC85EB6A5D78A14952ECE375A44FC0629234515C
SHA-256:	24B362BA568532E6732E989E44AD173CFEF5E2A07390940CC187A2334782B7EE
SHA-512:	570EF24EA93ABAF9C563D87B46F0F9F404FAA74C84848D671637BAB548511A6DD983B163C0707ABF8BBD9F5C317C263AA3CBB628A2408A36321C7B6C7140DE7A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ALpMwxHBKMzUmS1C3o8cbHAgxPxVNIUvuQwf55fBNvUioarIUgoxZZSbIQYHd7Nm_bHjsrOTzcL1=w648-h364-rw
Preview:	RIFF6V..WEBPVP8X...........k..VP8 .U..P2.....l.>=..D.!..... ...~)....ni.i.8........_........~q...H....._..{3..b.m...g............_.../.......?........?.W.......y...x.e.1......?..\|..[...#...S.'....W....?.. .S._.../......?.?>.@=.?.z.z..s..._.~..g.?,.......:...+.W./..............^....k./._...~.........P.m.....W........................g.....?..".............~......'..._.?p.......g.W..O.................?.^.?r..{.......(.....~."....D...#.r2..K.>..c...........@/_...!.......FP...^Fy.....@/_......'......Y.u......_..Q...W......W...\|....~k.\v.......?M.(].Y.?.\..V.l....+.......2.S..{I.,.^...!.l.....6....CM...&...b..X....;......F.P.Z~Kv.n6.v_7..c....;i.YV...G.. 6!...l...~.H..EW...........U.K..1..<.`...J..:...."h...{.......dL.N.....Y..i..S.M...(. .q.....L#..{.*.]h...~."..../..l...<0K..g.0a...)....Z>{.'b...q...z.....x.-E.~n...d...P.$......r.......c...w.......D\...G(y>]H.^.@m....rK.f...:.m.?.\...2......J#(g+B1....H.0..9...y.@......l#.....S~Q.5.`M...

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	11010
Entropy (8bit):	7.847908168465599
Encrypted:	false
SSDEEP:	192:SAt0XvYpn0529J+8GO8bIMJbDgZt3rbGTEmMQE/dBW3NMUtbF0:f+8G938ZRYI3KiEJ0
MD5:	D80B3ED07283321397DE506D79E0EFCF
SHA1:	3A09C0AA0C0AB693203D587EAEAEF2062C0212AC
SHA-256:	EA7F2A0DABC5A5ADAF7043D385DC4EE6C64E64256307CEF4EF5FCCDC26E7F713
SHA-512:	7022C5593CDBE82F73A9F1DDA5CFB4C51F03A5F30EDEE92B9F1F881A93C028AB28EC43A8D71913CEF2F0700A95DB292EBE8F0419278BCA4F7DE16705460F5233
Malicious:	false
Reputation:	low
Preview:	......JFIF....................................%.....'10-'--5=PB58K9--DaEKSV[][2AemdXlPY[W......./..0W=56WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW]......h....".......................................B........................!1.AQ.aq...."R..2B..b..r.S...#%345DT..................................).......................!1..AQ"2.a..q...............?............................................................................................................................................................}c....O.{.B.(...}c....\|.....Z....O.{.@.\|.../Z.k ...}c....O.{.Bj.k(...>........w.5N...K.>.....\|....ju..j....w...>.....e.O..{.A...X.~..Q...x=G.......W........:....$.....[...-.k.....51.....N.{.A}.}c......t........=...{8.~...5c...\|....%{_....5Z.9.M.r_.K...g.q..?..M..E.J_.Jq...4.......Y..TN.\@4{......X...]3...g.=..........`4.....'.'.=..4.....=...u.8.~.T.a...ju.w.......z.`...*}P.....:...i...C..>.w~....T;.A..x...S.;.B>.S.;.A.. m.]N.........i.....{.@.l....i.....j}P

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2200)
Category:	dropped
Size (bytes):	37846
Entropy (8bit):	5.60196584633895
Encrypted:	false
SSDEEP:	768:ISIUjbd0dI3wiyrclD62d242s5X8RSQYfLrdxu20MGMO09pCyrS7kL7Pl9kr8vw3:CSUMNpCyrS7kLnPsGuHhcLQdf
MD5:	112F585E196C824C46685651C3434483
SHA1:	E76A0B85F4CD5913129C926ED51FBAD9DBF6E6F4
SHA-256:	6B009CA44234FA3A35606B870A2AE908E90982A844FCF4A1C01AB16E5C3F60A4
SHA-512:	87227C55DC9E2CB08D5991A240E90937C1439DABCC4353302EFEA86D7FA38210CA7DC5E9D0F802173D2739F7360DB1E42F17C826F9EE9170150D1477E84F81EE
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".H1RBrd{max-width:500px}.UIeOBe{margin-top:30px;min-height:120px}.k2cXo{margin:0}.qlYO9b{left:0;padding:12px;position:fixed;text-align:center;top:6px;width:100%;z-index:20003}.Gq7XXc{border-radius:3px;box-shadow:0 2px 40px rgba(0,0,0,.4);background-color:#fe8;border:1px solid #ba5;font-weight:500;padding:7px 14px}@media screen and (max-width:600px){.qlYO9b{box-shadow:0 2px 40px rgba(0,0,0,.4);background-color:#fe8;top:48px;width:auto}.Gq7XXc{box-shadow:none;border:0;font-size:16px;font-weight:300;padding:0}}.XWz5yd{margin-left:160px;padding:0 20px 20px}@media screen and (max-width:480px){.XWz5yd{margin-left:0;padding-left:0}}.iCVHHc{height:215px;text-align:center;width:160px}.FOYkDe{max-height:215px;max-width:160px}.Dtwbxf{font-size:28px}.Hv8szf{text-align:right}.rYrxJf,.rYrxJf:visited{color:#00838f;padding-left:3px}.F9JOfb{margin-right:3px}sentinel{}");.this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("YYmHzb");.v

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	4.639719888612948
Encrypted:	false
SSDEEP:	96:EdAdhzUooooRoooT0oooooHooooooovqxoooooooooA:EkLL
MD5:	A217F758EFDFFF14053678DBE58FA4D0
SHA1:	6E0EB512C2F386D645712D7ECBE339EA85CFCA68
SHA-256:	F343B3015D0545A7D5B719A434135BCAE2AC766ED459AEEA671E3688B79D1875
SHA-512:	9BCF90FED875FFAF3170EF3425949642EB23B4E750CD42BA546D30E1A58C4FEE1A14CCDBD31455A6A442D09372CCB3873BD7477A59853608BC87660FB578119F
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .................................................................................................................................................................5C..5C..5C.]5C.5C.5C.`5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l.................................................. <../A.8D..5C..5C..5C..5C..5C.:5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................TN.(?..'>..8D..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l....................................................2..l...8..&>..8D..5C..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................../... ..m...8..&>..8D..5C..5C..5C..5C..5C..5C..5C.g5C..5C..5C..5C..5C..=/..$l...................................................E...>......m...8..%>..8D..5C..5C..5C..5C..5C..5C..5C..5C.?5C..5C..5C..=/..$l...................................................B..C...>......m...8..$=..8D..5C

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	51938
Entropy (8bit):	7.996921682198692
Encrypted:	true
SSDEEP:	768:Az8PmM0+NA7KBZscRU+FeUTAyk+c7IExDBMjxCptVBj0W8l0c1xAeztj7OXJ2dg:M8e9+NXBZBYUzE7eGBj0pl0c1x/ztnBe
MD5:	53D851F83276928FEBCE24D55E32655C
SHA1:	CF31F7BC145B049105C2FD3ABA38DBD72A054CD6
SHA-256:	23A3E9A91FA897E413EE48BF7A6CF59B3147DBB353EA710D99A3B2CD2ABDF2EF
SHA-512:	BCFF7C954C59ABB6F5BA42388E6ED0CF368526CF55C345157C2D44641E54C8E69D910DA8508B7430C82DBB2785B42304FC7D5E89C8F38DA725AB94AF42765F80
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ZVQE0WXIo3XOeHvZcpC7qn560xGEF8FDCQtV2fWFTWXXjLh6uXpOzw90mau7jXNUrQ=w648-h364-rw
Preview:	RIFF....WEBPVP8 ...........l.>e.E$"../......fn1...;<..........Y...]>.........v...]]-................u.........?B_....._............O.w........~..............o...w.....?^....?-....~...................4.........._.o.........]F..........k...O..0...G........_............._......W............7.G....~......s..;_............g....uO........s68+?..6T..g....8FK....`/..+./k?D.O..,xnY..+6b..5.Z.s=_".t....T.}...w..}.Q.NU_.?.{....if..Z.p...B.c.q....f.b...0..q.EwN..64..5..H..iv^.{....(.w.x.;`.ieQ.....8......X..w.....l\|....7.c...\|..W@`].^E.hui...X......".Q.}.g4..&...)..f8T9....H...A...T.\F.`.......B.\|...A.2d:wb...L.et..z..$-......2.,.rI.".....4.[V=`!v1..fT.7..T?.$...\|<..G.t..G #.....!GE....P..L.W..3.~.m......O9z.N.{X....(...$G..$\|..SCH.....=C..mo.1.Ty...H..W.QI..-W.w..F..B/.%?.k.....N.c.`.P.W....b...V0.s..e..t.Z....l...[;&@........t.6l;h....L..Ti.?"....7.n........Z..ZfS..Z.....d.;?.Di..\._.{2.d..kF......m..U......3.....h...9c8....4...".\|.#.#AQ./9..O.....t

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3881)
Category:	downloaded
Size (bytes):	196418
Entropy (8bit):	5.7657254895456145
Encrypted:	false
SSDEEP:	3072:mTyAJv6jJdPhq8SYmf/KgP/iFFdQA4+94dOabimJjV6t8WwylZYEnKy3m8mFsRY6:ayAJvYJdPhEfigP/EFKDJwt8WwylZYEb
MD5:	98C067EB71D8B4A9B73BB12402BFFFE2
SHA1:	B16C2573D80767EA940726E01728023E1AC1D179
SHA-256:	0E6D068D19C33289C985E98920BF697C63D94F33989A102656020481E1F42106
SHA-512:	B17065BAAA5672B4441FC273FFC4292DF8B2C41CDF653836A15A94C45E44FFD0810BCD660B78B97550CF0528B3C5CEDE0B338A3093EF262DF2564E07692D6D07
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,BBI74,BVgquf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Z5uLle,ZDZcre,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,ebZ3mb,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,ovKuLd,pYCIec,pjICDe,pw70Gc,s39S4,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ArluEf,IcVnM,fPcQoe,t8OL6d,LCkxpb,kr6Nlf"
Preview:	"use strict";_F_installCss(".EmVfjc{display:inline-block;position:relative;width:28px;height:28px}.Cg7hO{position:absolute;width:0;height:0;overflow:hidden}.xu46lf{width:100%;height:100%}.EmVfjc.qs41qe .xu46lf{animation:spinner-container-rotate 1568ms linear infinite}.ir3uv{position:absolute;width:100%;height:100%;opacity:0}.uWlRce{border-color:#4285f4}.GFoASc{border-color:#db4437}.WpeOqd{border-color:#f4b400}.rHV3jf{border-color:#0f9d58}.EmVfjc.qs41qe .ir3uv.uWlRce{animation:spinner-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,spinner-blue-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.EmVfjc.qs41qe .ir3uv.GFoASc{animation:spinner-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,spinner-red-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.EmVfjc.qs41qe .ir3uv.WpeOqd{animation:spinner-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,spinner-yellow-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.E

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	15400
Entropy (8bit):	7.983373069517256
Encrypted:	false
SSDEEP:	384:zxnKuhIZFkt4sQKUtom1vVH6mpuCrptikIZDbyimlWfCL2uE:5Kuvt4/tlvVH6ArnpSbyimlI
MD5:	E1208B7FB2AEC116022BBE125F05E036
SHA1:	2D87FA3BA5F8F59E7637A2F9B37EB1B3C38CAE5B
SHA-256:	28D1DA0CB5A6904F3A75612BA333B532A887B5C4DE61C9B0370D0E2B8D3B1AE9
SHA-512:	0FB1DF10D35F0826CA5882C441667C77215D38A4DF6C10467F07B7D05EEF55C1A9C9EA2F516277227231B4488C3C53415C9D9BBD01F4794B3D0CFC34E44354B8
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ZU2MdVVbKvKLuFlTCuJ0b6-HiyyZmqPcpnwA6iDJCa6CAR32U0xfcVWef1nRf9X4J6A=s256-rw
Preview:	RIFF <..WEBPVP8L.<../..?..H.$.........a.#.?..WJ../i...m......YLU.y"I50..7N8.O..<..&6...EB. km.F.U.A...F=S.{..R<.B.....R....J.\..N`..i......%...[.m..l........d&`.9.).....&I..H...N..lf2..g....p.Gr$.....-k.......ZU.I.."I.$.H..i.di.....a...c.v.,..?...?.d...%XB.'.\|.?......YL...I..V.W.i$..tv.)..H(r]..;......D.CYS.......H.V.N#+.+....sf..lT..t:.............+.......Z~'..H.p{.}v.d.i..........q......~.....:l...I5N.......O..r.p....,(..@..k..p.i..><.g..Vs.....H.`.....,......5...".cD..-.MC..1...g...]...&..$.`.)....H..<...a(....X]V.!.t.t.U....4ijY."...+?....jU.....4k....$.M...-.JQ.J.Ziy&..!7U.H......,]>.J.M6...Q.$..USC......!oRd.I.(.EB....,...4..U.U$I...\....$K..uR...Y..1..9."*x..C.`.T......U.......$.v\.Q.,fid7e,d.kQ;.(.F...Hg.9.V....>.Y.&.cr.o....r...=..l..,.6.'.v8.Bw7L...X........z...2......L2F2.X:.<.d..s._.]fL.9=._.Q..3....]x.)..q.tN.....<en/yN].;sqiN..T.-..Qsg(..v.../W+Iw.I2..m...m.m.m.3q.Q....p.m..Rj.c.5#...m.+.#..........d..l......{....k..V....'...".2 .

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (785)
Category:	downloaded
Size (bytes):	1371
Entropy (8bit):	5.301223695635806
Encrypted:	false
SSDEEP:	24:kzijJWvPfRFbtG1B/CKFQXIk9ns6GbSk1Gb7v9s+b5bEtpStARQy78rl:kiUvPbJGngns6Gb51Gb7K+VEpjudrl
MD5:	28C1399143660DCE57528288E362B723
SHA1:	30BBA1FA00AFF614E7197A221DEE422927F971CC
SHA-256:	E3EEA52F5DBAC83915ABEEB93381EE0EEB283A7A4043EB00E4010312810068E2
SHA-512:	6E8BD6CC792F69F1CC4D691E91253847D4679A26522E6456890DD9E0DB72A9FD81028F9E5DDCD6A82160772753A729462E7BEA93E9F0D1B7A1145506C97D7749
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Z5uLle,ZDZcre,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,ebZ3mb,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t8OL6d,tBvKNb,tKHFxf,vNKqzc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=P6sQOc"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("P6sQOc");.var rab=!!(_.Jf[3]&4);var tab=function(a){const b={};_.xa(a.ua(),e=>{b[e]=!0});const c=a.O(),d=a.oa();return new sab(a.W(),_.wh(c,1)1E3,a.H(),_.wh(d,1)1E3,b)},uab=function(a){return Math.random()Math.min(a.oaMath.pow(a.ma,a.H),a.ua)},fL=function(a,b){return a.H>=a.W?!1:b!=null?!!a.Aa[b]:!0},sab=class{constructor(a,b,c,d,e){this.W=a;this.oa=b;this.ma=c;this.ua=d;this.Aa=e;this.H=0;this.O=uab(this)}};var vab=function(a,b,c,d){return c.then(e=>e,e=>{if(rab)if(e instanceof _.ee){if(!e.status\|\|!fL(d,e.status.H()))throw e;}else{if("function"==typeof _.pq&&e instanceof _.pq&&e.O!==103&&e.O!==7)throw e;}else if(!e.status\|\|!fL(d,e.status.H()))throw e;return _.$d(d.O).then(()=>{if(!fL(d))throw Error("Ec`"+d.W);++d.H;d.O=uab(d);b=_.qj(b,_.Via,d.H);return vab(a,b,a.fetch(b),d)})})};._.Oq(_.MLa,class extends _.Nq{static Ja(){return{service:{AO:_.pab,metadata:_.qab,M0:_.oab}}}cons

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	54736
Entropy (8bit):	7.996413898708276
Encrypted:	true
SSDEEP:	1536:VUiEXCYr9H2PaBNdUvqkOiG5oDtAad0ku4/57wUD5Q2la3:V0nr7zUvTfG5oDtDtdZ4
MD5:	E7F8B129B4F71EDA5604859BC080B6BD
SHA1:	CFE0C1F355F049A2A539CD0D9FF4623FF2EA0424
SHA-256:	3E1A5A8182EA0C8CF9D8B6C6C53A094D3E09A065AF41D0CE4605C68496D27C5B
SHA-512:	68BE0A7BE10147AAAC18A75B48D6DA18C6753EAFF8740288CC14725C5264DB4E3FAE8347E540B6AB7955D0735590D262210E48DA4488CE63E0D328F6668B140E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/XWuUR0YIVu6BgTCw6n1uqLKnUJefKSrWusPMWux4k_R9f2eJeKBdEGFITcCNRU8Grk0=w648-h364-rw
Preview:	RIFF....WEBPVP8 ...........l.>](.F#.!.)t..p..ek.....Z.0&{.i.+........'\}\H.&.e.l.w..k.I.M...?Q_..=y..R........O....^...?.....zw~..E.h...e.S..%?E.s.g...}...lA...^c..O..}.........W.G....W...>..........o.../.?..............>....................(.Z..C..?....q.7..;.b..&......\|Jvt..h.....<...)c..c...Z.B....jZ..#.o]...}.{...-.._.....\|=//).[..b..s}UX.k(.n0n....l.~.BK#....vm..w.....TU...'g.....z_...q.....&......~.~..._..PI....7A....N-..y.dA9..A.\G..U.~.jQ..kC.K.&P- ..{<..J..38c.7..B.z.W..<.x#....s.w...9o........l..OC>>.zz.!.]$...m$........;..a.....V.B.u"..!$^.M..iR?.mo.1r....-.....=<i1...k..j.Mv...@...>b.g..L.....fYU..\!..9._R.{J\|....f....xy.v.... ..o...q..=._...p...r.....z84...2.EP..r.w).......'.\|=i_........D...:N..C~..L.&...#.im..DI..\|,.Z..O.yj@ .I..<.....O..huC...)..>...D...7....3P.........l.G...H.t...d..0Q..m.....V....{.b. O....2f.U......O.(.r....}....?.G.L`..1.0....<.U..t.h..0q....~...l1.zc..L7.8."_J.%..N.T.Ct.........l;....U-..q<Xv...C.T.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	602
Entropy (8bit):	7.560703505640411
Encrypted:	false
SSDEEP:	12:6EYUFsvZ2w+7XTXlA4x6gSoEjyNZUQYu8kS/bfSmPcqSpV0:EpvZ23jVbx6gSoNZURbbS4cq1
MD5:	5164F0787A126A9B88937AD605FA7C55
SHA1:	554E78E9B77AA10BCEC5C842A36816113E897F95
SHA-256:	E195473D95C9F500152483F8A181B3237E41C32D652ADC37A2E34C14FA4EF74E
SHA-512:	D998757F62D6749D14BBEF69FAE710580289D314DB9D92D94B36A7E0589DEF83B4BE285FF6BBD5DDF688683396D348F9EB7499C5F1272DCACF657F3876C3C6DF
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/KSZawu-1vhqACZzOqNl4izY5-XLtxxT8J2b5yXaiyyciXpNGmhA6qR1fjsuQuc9oGg=s64-rw
Preview:	RIFFR...WEBPVP8LF.../?.....$Gj.t...v.%....{...0l.6.._..\,.?..Us..fI2I&IJ.d.Az... I.ZI.....).)E..D.L.D0I..p..sC2.....+IJ...Zm.`r....B:....}V......fc...L..W.j..W.i.$'.......,.j..QW....E....Q~@..$.c..m..Y...Vj.....RR.s...Fn#)r..m...v.(.T....u).o....".`..d.<D.-..O!..Z7.Q.....0........./.ULw6..z.l..;y$,Hk;.I@4...;{(.G.W}10.3.L-....IO....l.~.5...t.......a..yl.7.1.T/.P.k..r"=...B.,(...a.U......A..<.R.\|./..O..;Y..S9...pC..A...6dX..w[\........;e.g..}^}Y...}.s}o............b.\|...?E.z.0..k...\yo...<..O....]k/..............T....}PH.4[3..}.......sy...... V.R~<_[CN.[.a.s..y_)..

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	203748
Entropy (8bit):	7.921301831314266
Encrypted:	false
SSDEEP:	3072:uIn/qtghsE/TxkSIowwBAI8NwjFneNKRrCb1X6ubjs2UQAROxvqr9tXAhEf9Ly2e:5daSh7GI8NGFRSKu35joOxg9tZFL/o9
MD5:	750BDCF5C88DB2440899A17E4EE314FE
SHA1:	EF0D6983C45ADA6478B440D972AD61C65FDA6AF1
SHA-256:	92406C47309657BCD1F11E595F7466559A35DF286C6E753B8772494B15ECAAF2
SHA-512:	13790BB33B13106651841D2A024172A493AA6A2D9FBA02BF2F09B80525A69A30373A5C90A1E971EEB77DE243CBEE8C2B6B6E4B9601FADEFB64FB69EA0A14B7DA
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/TlxMMd6qkRy3sdtiCUzlVNjC8zLkbG-Qeqy_Wynv9CkXZ00VMvaJslQRdhncBgCJ0qg=w648-h364-rw
Preview:	RIFF....WEBPVP8X...........k..VP8L..../..Z..@l.F..g7........o!...P.o....(.......K....}.~......k...n..".z..n.G.E....cit]%.N..)......u.U..Y..Kz.K{..I....%i.m....+.@{fl[G..."I/#ZH3......@R..E7.=..h.H.m..W.A.F;J.......cv(%.d....$)...p......v..d...`.K.@...RI.....y..1.R.K.Hb.x. H...m.7....@... ..3....$.....^.g.p..?...8.....\|~9vw...mku..4...6:...i....}...~M/.!...i..lA.#....^.]...!...L..3h}.....$.v...q...........g.m.+.......(..0....84.C.@....Rdo..z.j......?&.Bl.PDQ.({F...+.H...llBT.7..;.......e?0.l..".,f..2....8....Y.'.c....t.@.....CP$....f!.:......TFF.j4.X#..$.....[(..uZ.mPhL.)EQ..6!.....(.cj5'e)....FcrZit..6.).B.Y}..''S.9...........I..2.?.:.<....Z..?..).?5......;.6....e0..?\|$..~..IY..?.......52..X`.....m...8....^.....Lj.....C.Y.-.\|.m.=.nzR.32.......0..C.m..ckH.!....)]....rjd..9m.....<.'#..[!d..?..K...N{).........u.{].RL&0.l.v=[.T....".XH.k.W.P...5;su.3hK8..g..[....f#.7...t.u.;.z..'~<..BH..C*...I...x..4]...~...Z...z...k/...M..8.-.0..9..W.R..%4= ....

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1580
Entropy (8bit):	7.854615390864796
Encrypted:	false
SSDEEP:	48:rbsIqxSi2dXXzeeQC4L5job28Tim4criuH/oLv+CSHBI:/pQSi2CesG28l4crc+JBI
MD5:	2B3DAE5CC32A92D8FCF8F249E3EB6C98
SHA1:	8DC6C8DF68C37C642D456C2E32CFC3AC36D1AA56
SHA-256:	E5F750DC0DA75C8BD3ED659305B8779182A1CAF478EF07BBD05EF3A0FB874FF7
SHA-512:	B360076D0950A2D51D0F04C48A7250B0EA833316939967FEA0F51CBAE801F6A062783AC15C254409F18B63C557E7757DEA3FD51D19292765563209979464DAF8
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/DC9EifITAPkp5J1kq8-dx1IPLqjdZwVoVYsgelm1AwE_IAwBCMuPZg7OTQD5OW_lEwqp=s64-rw
Preview:	RIFF$...WEBPVP8L..../?....Em.IJ.....{Q.....+....k...Q..y...m%'...].'!.1.1......,.d.q.P.F.T.H@..%....wvj.qt.HIB.M/@D....D..X...........J..(..'s..ff.........tN.$....H.mm..7...._.m.lwf.1...m..$W_.>I.$)..V=p.......X..$Ij.&8!yA.7\|.~...).KCCv.Npa..q.N..N.....@..L...P..L`v$H..(..R.H.\..N.d.%..v.n..\|.....'.$x"..-m......{..R..E....-.4n..TU..Iu6....d.....O....jx..2H.2^../....[f.fB..ec.u.....I......a...u.R..X...`.j.p".]2YY...=.SX.h..mA...>...9]!0.6tR9r.....EB..$GS.p..Y..t.R........{.e.e...Oi.....XBF..s...4...my.28...5......y3p1.B../\|...#.....v.....{..qL.M{...8...F...V...T..>J..Y.....v}7..Y.d...-...G......wp.......[rWa..3.........X....?..kZ.L.g.S?\|..-{.@ks...<.[d..........w......2...3}'.]..f\|..5q.-...!......e.G.8.{`Aj......._.q..3..!X[4g....M.A'.T..B.....&..9..p1..o.....~../.o...._.&.2.R3q.._.6#..V.![&\.2 ......... ..........G.2i.....;}...q...C...Ua'/.)....z.N.....Zdz.....L.{B.l......M.....3......,.*.>.wL........w../8...=....d3.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	16157
Entropy (8bit):	7.932926875832688
Encrypted:	false
SSDEEP:	192:r5upNQivITZNsbPTJ949bKll0Dl2cRhShvYKkkrMidnDI/guG/8bEwqcUM3GlLhx:rY3vWcTz49bOluShHtrUSw3x3G/x
MD5:	044092FBA99A51DA431A8A79888A316A
SHA1:	4D83A9B18A7FDC12B932638A215575721A2F6187
SHA-256:	652844DA329612F397FD4753D6C41D8048D3B8A32D9A7A3125EC1D3CC42B274D
SHA-512:	EB4BAA2635C51D912927003F746DACE42B5E5364B11F8C0E5CE724E8BF1736DD05F393479EC97CD919431CDEC10EF917F6AC28F23EB2B090C409224D4D0998B2
Malicious:	false
Reputation:	low
Preview:	......JFIF............................."%% "".(%% %.'10-'--5=PB58K9--EaEKSV[][2AemdXlPY[W......./..0W=5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................H........................!1.AQaq.."2....BR.....S.....#Cbr..3......s...$....................................................!.1AQ.."2aq..B................?............................................................................................................................................................................................n.7y(.F..T...k.]V:...n..O.......^.U5MV"...R.......R..........}...^...4z.j>..y..j.y./L=..}..y........=....O........?.R....,...E.<....^.>...?.]........Dy./Z....3.g...(..........O(....W6...............<....\.~....G......}..". ..?W.................{....l...E....l...D.A...<...Y....#.?............].>....\?...l...Ev.y$/T.@-c...y..S.....P....^i....Z}.>.U...O.G.w.........}.>.U/.W.Q...k.!zo.{W.P....B-_iG.....!z.z!h..

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2042
Entropy (8bit):	7.893202627206632
Encrypted:	false
SSDEEP:	48:vxZ37NhRPOOIh+vVgGhDtwOD+cEc6mubyd+Q+JvTbrJk0BJMgMB:5Z3puNgV9wO1Ec6mUTQeXrJXMrB
MD5:	A708F11B160D0B4F22F6A4A3825FD23A
SHA1:	A792D8344847BDBA699985D7B68232CC50902558
SHA-256:	7BDA762AA4CE569B542BF3B9E2673D7E0B02C0E25D92E20071D57E4235C040B5
SHA-512:	6E2A9FEC9BFE6D020E8A7BF0AC6D260F2922342637733B35093970C07B9DAC840831FC05A55C9C805DFED335E7A2701EA14F37B589F6F36FD30F4C0122E58BC7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?...5.A......!"&.?.r.+m."Y.l\n."&%ww..Y......w.._..w.(r.;`"d....m.{..l.d.M.V2`2....pI...^.N.fd..o..fX.tm\|\"..R.+..\.....V....p8..i..I...`.U..m.m.t......=.....T.m.=.m.v./9{.v.Zs.N.v.m.m...h<.6[...m.IR={.{.o....:...Crwwww.j.. ...hn.........=\|tf./@.5.7.....~......&..7.i$.Q.'t.l~(..o3#..lk.`)A.,.I...H.......Hh......V.........4..X.pp.W.:B...i.e..9.<.ZU.Yz.:F..f.S......;.t......y....i..,..UJ.D.....b......JC...[L.qM7.2...A@.g..w..+c..,..R$...!^).D.'.3HX.....H.'X..L.!..(#A...1..)x...@......4.(b..&T...a..3I.T..#.p...U...........4.!....PY.....e.F0...I!....B.zA...FM.{i.W%.R.E\...#. .E( .=..b.qA.p.....Wwz}..k`b......E..U........a....CU..t...fD$.M ....ng.......F..../.....h...f.....,.....~go$A.....'..{L.....`j......o......00S...G..i...?K...\.@. ..9.3#.!5....a(Z.0#P..1X...in..lP...I..`w....>..........,.#......./.t.t.~eP....4W.t..[.AA.!..h\.E.}..E..q......r<..C<.0..4.sz...+...P....c ..@.......%....N..(.5...pi..^...x}..:. .#..D~w....r.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	47924
Entropy (8bit):	7.995943409923895
Encrypted:	true
SSDEEP:	768:F0hKwQGvYasD/PDYr20eI2uEb3J8SdTHbW7sIEJwGHoup1eVaQQdu7td/uaMbfyn:F8Yau/dISN8Sdm4q8oup1eAQf7dcyVhz
MD5:	BCD49D0E74E5C338468FDF14246DABC3
SHA1:	8214CD1EF2BF6FFF2E8B22B149E05E0234168978
SHA-256:	20B29DCD9DA7DF6043002D497596245E2D62407F18B21FD92FDD9EDED0274152
SHA-512:	3794EF68166BF495D4FF0BB98BEA1C3244BA7588BA88495BD651DDC6412F44746E2BE8E74090918D77B5F509C9D3C5842FCE67CB5AAA26822C6622034B26AA87
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/fqEcPOtm9aSOTmCcH5ebeKerdIz8x5oo-cAi9HTlRBAsg-TEwlf3UQpplmbywU4k6uM=w648-h364-rw
Preview:	RIFF,...WEBPVP8 ..........l.>Q$.E..!"....p..ei..o6......_k....>F~......N.?./`.....k[li....5E..7W...7m.....~.....=h.R....3....R..=M^..r.._....Y........O$.R...._v...?........._....u.[....y.J...?...z..E.#...>.\|.w.._.....{I.?........K.q...=.............?...................c...../....R....._...G.w.........k............}....s.'......_.o..?...Q.... nE...9K..ENV._...=...)Ot.../.jM.._W ..x......p.l5B.....r.....L..n..v.^.. ..o.x..rl=.....f.g.... ........../.....F T.L%w.L.{..l.h3u....^y.....-X.l.}8'....)U.W..........h3..J.X!._.[.}..!..2\...Q..#.B.:[2oM.y.:y.s..E.uRX]OJ...1..).~$...wW..3....%../..WV....f.-....d.......].v!R.vwv.'.....w?-yTw....Q8......TK".(......_.'.q...F1H.Z.........u.......5.+..}...B..3.$B<.E...Y.....Y....l..g..dHKIE.....i..o\......3..A.7...6...ATR}.,..K ...9.4.{.#^...Ua..y[...Dki7.mX...O...P...\|.@..._Z...{....P.Ae....t.@.b;/...ZA.....$....0VQ..jj.".....f....T.U!.....xQ......g.b......!.....E..o._..#d.&H.-.....#._..\|.....?.C.Q.?t. Vb..

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3818)
Category:	dropped
Size (bytes):	17931
Entropy (8bit):	5.4312171233645925
Encrypted:	false
SSDEEP:	384:Nq1PsLZZUK/btMUWXcO22eDEhQ/T7NpNm/1MANeBMf6fIXpa064QO1D:N7UK/btMUWXfyEhQ/lpNmdMANeBMyfIX
MD5:	7DC177DCB0DD01AC550F283D579E44D2
SHA1:	F3A35FA25C3E8DF7D0D77B38DBFA60BB3375F168
SHA-256:	C7538A727DD3CDD34E1F77A269F7872104243EAB81F6B831B88CD5253AB70122
SHA-512:	35B2543E09502967A8787282B38DEF86CB14753EF57D03553497FF3ED9151CA1A23B3ADD01FEFA415F84E8233BE4F8607704944AA1A1C02F5CDEE2B69A8DF278
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.qL=class{constructor(a,b,c){this.key=a;this.defaultValue=b;this.flagName=c;this.flagNameForDebugging=void 0}ctor(a){return typeof a==="boolean"?a:this.defaultValue}};.var mbb;_.obb=function(){const a=mbb(_.Ed("xwAfE"),()=>_.Ed("UUFaWc")),b=mbb(_.Ed("xnI9P"),()=>_.Ed("u4g7r"));return nbb??(nbb=Object.freeze({isEnabled:c=>c===-1\|\|_.Ed("iCzhFc").H(!1)?!1:a.enabled\|\|b.enabled,environment:_.qi(_.Ed("y2FhP"))??void 0,oR:_.qi(_.Ed("MUE6Ne"))??void 0,fr:_.qi(_.Ed("cfb2h"))??void 0,Jl:_.ri(_.Ed("yFnxrf"),-1),UR:_.ti(_.Ed("fPDxwd")).map(c=>_.ri(c,0)).filter(c=>c>0),eW:a,nja:b}))};mbb=function(a,b){a=a.H(!1);return{enabled:a,DO:a?_.Ec(_.si(b(),_.pbb)):qbb()}};_.pbb=class extends _.z{constructor(a){super(a)}};var qbb=_.Tca(_.pbb);var nbb;._.u("RqjULd");.var jcb=function(a){if(_.aa&&_.aa.performance&&_.aa.performance.memory){var b=_.aa.performance.memory;if(b){const c=new icb;isNaN(b.jsHeapSizeLi

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 36, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	185
Entropy (8bit):	5.9780303893393345
Encrypted:	false
SSDEEP:	3:yionv//thPlSYLl+1IHCRsHrXLRa+dn/23rIIGU5thNnkncm3w4qtmkW7PXl0VMa:6v/lhP0YLkyymvVGtjnUnRq0kW7N0xVp
MD5:	07505E9DAC6DD922116F038EB58C9B88
SHA1:	4DAB9005E4603F76A6FAD92FE78FB9C92D05B62F
SHA-256:	C4DB75F643BB4DD47E39A9601FCC0A14621B588D5E4EBE987EE4828120BDE791
SHA-512:	5A94B97148037E9A25AF768AF67A1AD5D4959E5D5C216DC5353FB159630302A74A990CCA20F787C024C6B7229A12920B287A88A4063514FBA534E7D1DB094C11
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...$.....=k.9....PLTE"u.#t."s..OO.PP.OO.........o.......tRNSJ....J..J.j.\...DIDATx.c`T..ec$.. .].A...1..Z..!..%p.A....H...0......*.....]...Qp...al.....IEND.B`.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3226
Entropy (8bit):	7.9053543064992535
Encrypted:	false
SSDEEP:	48:ECbUntgSGlAsqZCHiVEsf7m2HcATh9DeWhJzzhYfFjjTGwWTA3jjZoY+1HSEldTp:TUntgSGNgQsC28A7YBjTGdTOx+1H9lVp
MD5:	B3FE0FA904BD862EB0784A03FBBA1A19
SHA1:	42C3B5B6D3536B20E4CD660A12B4610CBAE60E55
SHA-256:	6C39BD4B61B394BF49CDA5DF1C1D7483B95327563572FCC16D3EC5FCEABFCDFA
SHA-512:	15A6E492F294CB7917D9F9BABA9D9E7C033ED792DDD6C80768C6524227768DC83469F18B24C18966F714ACADB723B948587C998E96DDCDA0ACCAA5A304D14E07
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.+.......f8\|..._.f....133333333333333S....../..C.m..%#.B....\b+....3...d..C..."C...x,.2,...h.B<.P.a.....ra,.....n&...w\V.p.Qq%;.W.<..2.uHF.B.I.vU..qW...]QT...L!...}./CC..#8..........b...d..5.7.\|.[.k.s.m.m.m..G..I......<....v.A. ...%.N..H.m..m+.m.m..M..A....h.`6.i.....dp......\\.....L,cbj~V..c..{O"'..a....:.x....x..(x../2<'..r..rO....q..d....JC9...S.S.\....v..W.;......!.N..)+...$.lny...QW.H..]n..vS\.gx...+D/.h.....]......y9...5.....3d......o..G..L..cp.N..>..1.L.U.........Ph3...;.....p7BXL......."g."...e.5.1.3. T&...,`\~ZE......T.R..L.B.... ...J.-.Pj1.Y.D....B..V-...8.5.~..g......4S.I.p.L...F.....r.y..p...;.B...M.iBp....pyK..8..^cF..!9.,..%.MB..,9....,Bs..#^.V...cJ..Q.0.&...n.I..y....d....>R...[ft]3^.c...&P:DA....4V..t...1F.l...~..h..s[.AP.........}{..n...*0.w...9...a....6NI..?..f......Y...C.8......).#.p9.m$f........V+.`.T..c.F.p....FP....cd7B.~.q4.aN.g......~.3..4h`.k~&.o..j....6....h.x^.....[....b.W.o.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	43154
Entropy (8bit):	7.995866272293357
Encrypted:	true
SSDEEP:	768:ElN7DtKhc4Sc4y0o6T0h2/EmDAd2IfPQMiEsATbbiwLi7Mz+:4DU9SS/6Tb/k1fzsATq8ih
MD5:	FF756D379749E915D9EB860B9E092C45
SHA1:	0A6AE2682668DB8CB5A64B86968F2375591CC8B3
SHA-256:	42041082A8FB1C5D823C48A728294A1878A15B4B318D5564DB6232B8F576EAB1
SHA-512:	27D572D8ECDDFB28EA61B803F7C2E697D230E984FBF9E7858D8EFF5025FB020AEB8015148BC1773C01173DC5960E6B695FF599247FBAF12CADE70084252D3DE7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ~...0......l.>=..E"!.!#5..@..id...?..[.....j.....K..7.................f.O..q....c.....a.p..t.$.....?...K~c.../ c.A........M.y...7k.............S._z..x..i.o.........'..W..}.........[..x".S.....?.?.?..Q.K..}..V.....?p..................[......?....p.h..5...C.\|8f.x.......7?.....A...o..!..f.a.x...2]....var.WP.x;T..&.P..X...#.!Rr.~.........,.J..IF..e[..Q.....E.._T..H@. ...E...Uzi?>.DY."..n.U...uZ..).PL.&.........dU.......7..&.....e...... Q.o..>#..EGZ.2_o.%..R.b.Z.:.I...rg..M..~..M.Q............p. .a.c.-P...V...0W+.....Q...d.....,.....Aq..6....0.~hoK...~.k...hL..F..........kj..E"...3..L..X...!....\..h.#..A6~..x1.....1...E..E..s_. .Y`...+.\|g"..;.@..W....@\...+.H(.Qv8s..C./>.....V.+......../..Z..............I..f...t....<......V,5-.{......E...O....T-8.k..t..G.40.....{..EW.ep.#.p..-..;.........Hj........G.B3..J.Q../.@....OB...e.)[ ....?..o..2.)}"}......9.;Jc..;...]^......b8X;..:.(.U...P./..>G....lk......6...........sYX}G.KhZ.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1881)
Category:	downloaded
Size (bytes):	42769
Entropy (8bit):	5.438756368647044
Encrypted:	false
SSDEEP:	768:s/1nkMc3Za0w2rEoFSltgXWwrBI8ch96T5OJPqSt5yvxRkFe6Aov8ZBp3dKdn1mO:zMA0RtgX9POJ50v406akd1oM+l1tw8Q9
MD5:	2D58E45E7D2254A45BA33DEF7B1FD2CB
SHA1:	33D5DBB9B8AAD00F039718F7606787218FBCF2B6
SHA-256:	2922C4D5DFB10F016A7D05F20B8EF7286AC97C506FAD43A61F8EA5280A0BE0F4
SHA-512:	26523458DEFDBFC1304F22A65ECDAEA8C1672DBC0A505105D520F4AF822044315FE25373830CFFAE9CCBE6D26C4C843D1D8A8ABE6126AA9FACBACAC1639A75EF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=_b,_tp/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Lqa=function(a){let b=0;for(const c in a)b++;return b};_.Mqa=function(a,b){for(const c in a)if(a[c]==b)return!0;return!1};_.Nqa=function(a){return a.mh&&typeof a.mh=="function"?a.mh():_.da(a)\|\|typeof a==="string"?a.length:_.Lqa(a)};._.bo=function(a){if(a.Bi&&typeof a.Bi=="function")return a.Bi();if(typeof Map!=="undefined"&&a instanceof Map\|\|typeof Set!=="undefined"&&a instanceof Set)return Array.from(a.values());if(typeof a==="string")return a.split("");if(_.da(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.Va(a)};._.Oqa=function(a){if(a.un&&typeof a.un=="function")return a.un();if(!a.Bi\|\|typeof a.Bi!="function"){if(typeof Map!=="undefined"&&a instanceof Map)return Array.from(a.keys());if(!(typeof Set!=="undefined"&&a instanceof Set)){if(_.da(a)\|\|typeof a==="string"){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.Wa(a)}}};.var Pqa,Qqa,Rqa

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3456)
Category:	dropped
Size (bytes):	13885
Entropy (8bit):	5.68563299125544
Encrypted:	false
SSDEEP:	384:5a+/ULxjbyFj4Q/gxTrjha5P0tjmvuQOu6BrYGkph:5FsLxjbyFj4gmrFa5P0tjmmQGrJKh
MD5:	D155A6751AB7C385E15A8D16C24417E6
SHA1:	70E6E511CC92E7FA77C88A62ACA8E208BF945664
SHA-256:	9894A0B58E423167C748F4488152F6E6F9A01BE4A74640550B0AE846D6D215D3
SHA-512:	4A858FF5527909C7814C3A263615BF04EC683B16524B63DE507165DFE8127AB710B81444E20782A6D02EFD47DF87FCAA38DB109BA382AE5F6C436662053C03C2
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".x1OGnc{align-items:center;background:#123a2b;border-radius:2px;color:#28feaf;display:flex;flex-flow:row nowrap;font-size:.5rem;height:16px;justify-content:center;margin-left:.5rem;text-transform:uppercase;width:30px}.ZYIb7d .VfPpkd-P5QLlc{min-width:720px}@media (max-height:360px){.ZYIb7d .VfPpkd-P5QLlc{max-height:100%}}@media (min-height:360px){.ZYIb7d .VfPpkd-P5QLlc{max-height:360px}}@media (-ms-high-contrast:active) and (min-height:360px),(-ms-high-contrast:none) and (min-height:360px){.ZYIb7d .VfPpkd-wzTsW{align-items:stretch;height:auto}}.ZYIb7d .VfPpkd-cnG4Wd{padding:0 0 0 0}.IsssNc{position:relative}.AcxtQe,.TRaZhc{color:#8d8d8d;cursor:pointer;position:absolute;right:8px;top:8px}.YG3b9e,.adTxc{background-color:#2a2b2e;font-family:\"Google Sans\",Helvetica,Arial,sans-serif;padding:40px}.YG3b9e:not(:disabled),.adTxc:not(:disabled){background-color:#2a2b2e}.inFyWc{align-items:center;display:flex}.jmkV3e{color:white;display:flex;margin-top:10px}.KCiMwd{mi

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3881)
Category:	dropped
Size (bytes):	196418
Entropy (8bit):	5.7657254895456145
Encrypted:	false
SSDEEP:	3072:mTyAJv6jJdPhq8SYmf/KgP/iFFdQA4+94dOabimJjV6t8WwylZYEnKy3m8mFsRY6:ayAJvYJdPhEfigP/EFKDJwt8WwylZYEb
MD5:	98C067EB71D8B4A9B73BB12402BFFFE2
SHA1:	B16C2573D80767EA940726E01728023E1AC1D179
SHA-256:	0E6D068D19C33289C985E98920BF697C63D94F33989A102656020481E1F42106
SHA-512:	B17065BAAA5672B4441FC273FFC4292DF8B2C41CDF653836A15A94C45E44FFD0810BCD660B78B97550CF0528B3C5CEDE0B338A3093EF262DF2564E07692D6D07
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".EmVfjc{display:inline-block;position:relative;width:28px;height:28px}.Cg7hO{position:absolute;width:0;height:0;overflow:hidden}.xu46lf{width:100%;height:100%}.EmVfjc.qs41qe .xu46lf{animation:spinner-container-rotate 1568ms linear infinite}.ir3uv{position:absolute;width:100%;height:100%;opacity:0}.uWlRce{border-color:#4285f4}.GFoASc{border-color:#db4437}.WpeOqd{border-color:#f4b400}.rHV3jf{border-color:#0f9d58}.EmVfjc.qs41qe .ir3uv.uWlRce{animation:spinner-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,spinner-blue-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.EmVfjc.qs41qe .ir3uv.GFoASc{animation:spinner-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,spinner-red-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.EmVfjc.qs41qe .ir3uv.WpeOqd{animation:spinner-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,spinner-yellow-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.E

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	203748
Entropy (8bit):	7.921301831314266
Encrypted:	false
SSDEEP:	3072:uIn/qtghsE/TxkSIowwBAI8NwjFneNKRrCb1X6ubjs2UQAROxvqr9tXAhEf9Ly2e:5daSh7GI8NGFRSKu35joOxg9tZFL/o9
MD5:	750BDCF5C88DB2440899A17E4EE314FE
SHA1:	EF0D6983C45ADA6478B440D972AD61C65FDA6AF1
SHA-256:	92406C47309657BCD1F11E595F7466559A35DF286C6E753B8772494B15ECAAF2
SHA-512:	13790BB33B13106651841D2A024172A493AA6A2D9FBA02BF2F09B80525A69A30373A5C90A1E971EEB77DE243CBEE8C2B6B6E4B9601FADEFB64FB69EA0A14B7DA
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X...........k..VP8L..../..Z..@l.F..g7........o!...P.o....(.......K....}.~......k...n..".z..n.G.E....cit]%.N..)......u.U..Y..Kz.K{..I....%i.m....+.@{fl[G..."I/#ZH3......@R..E7.=..h.H.m..W.A.F;J.......cv(%.d....$)...p......v..d...`.K.@...RI.....y..1.R.K.Hb.x. H...m.7....@... ..3....$.....^.g.p..?...8.....\|~9vw...mku..4...6:...i....}...~M/.!...i..lA.#....^.]...!...L..3h}.....$.v...q...........g.m.+.......(..0....84.C.@....Rdo..z.j......?&.Bl.PDQ.({F...+.H...llBT.7..;.......e?0.l..".,f..2....8....Y.'.c....t.@.....CP$....f!.:......TFF.j4.X#..$.....[(..uZ.mPhL.)EQ..6!.....(.cj5'e)....FcrZit..6.).B.Y}..''S.9...........I..2.?.:.<....Z..?..).?5......;.6....e0..?\|$..~..IY..?.......52..X`.....m...8....^.....Lj.....C.Y.-.\|.m.=.nzR.32.......0..C.m..ckH.!....)]....rjd..9m.....<.'#..[!d..?..K...N{).........u.{].RL&0.l.v=[.T....".XH.k.W.P...5;su.3hK8..g..[....f#.7...t.u.;.z..'~<..BH..C*...I...x..4]...~...Z...z...k/...M..8.-.0..9..W.R..%4= ....

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	4204
Entropy (8bit):	7.9410406645652545
Encrypted:	false
SSDEEP:	96:xVol0QZkPgINkrlwx7VUYSeJzRZV+oenov87/0UgxN7:x+a9PNAwx7YeRVhk287/ax
MD5:	C98F44F16F361608BB09263E75BCDE75
SHA1:	4947A587B834A97501E159B6E82051C4C42EBAEC
SHA-256:	14B2050B31C86C8DCA1331B98E110A63BCA965C65E4DD55DD82C56897B49974C
SHA-512:	A60DBE61D9C22903193786CFBD80D23C31F0A18942E87C9CE5A0C07304CFC8DEF779A19D1760E35F05B6CB277F5024F93EDDF960BB818FABA126EC1319FA7742
Malicious:	false
Reputation:	low
Preview:	RIFFd...WEBPVP8 X....p.....l.>=..E"!...4< ...q.BYhw..\|........'..~..?i?.....l.u?):$.O8.$................7._..........`...W.....G.......^..?........m.{..................R.L?........}N.p......a.....i..y..}V.?J.B.........._......f.. .eR.2z..A..R.OU>(9.}5J@....6...H.=T......).'.....>.. d.S...T....\|Ps`.j....O...4>.. d.S...T....:E.....T.`..A........_.`.j....O..l.L.;..q.$...VZ....E..-T......).'.P.P K.......xw.... .R.OU>(9.}5-V.../.u..(.mq.%hx$G..)-"J....R.OU>(9..3...b.:X..2..@..Bn0.N.4.v`.[........\....T....+()y&...8....p...t.B.O:.P....).%`..P=2....W.....`..\.q....j....&c2.m46+.`Y.ZI.&.......m..%..~..vby^\..........MR.2z.....6E"\|..L....=r..n......"z.^.Xo.F.C.4.d.S.....G.....h.C.f..L.}..Z1..R....6...H.=5.Ww....b ..~$D..=4...D.2i.24g.i..H.=T.....xX.....>*....i.....T........>.. d.S...T....\|Ps`.j....O..l.MR.2z..A..R.OU>(9.}5J@....6...H.=T......).'.....>.. d.S...T....\| .......W@..........-..zf..n.Yw..%..........%}........%.Y.?1........a..S

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	112596
Entropy (8bit):	7.980311286510738
Encrypted:	false
SSDEEP:	1536:JzNoPfR617MqHJb2sLvLRlHyPvmXzlIZuLUsw0sTc/ogBAPN0UjN/I0KQsI:J6fg3HF1PHy8lIZuL9NjiPNLJ6I
MD5:	E20C81F9233980D56416AA7A68B1A3EE
SHA1:	EAD8623E87C74A80A3D21ED67F21BEE871EA4A69
SHA-256:	CF01ADCDAEC3174430E10571EA9B169C681EBF7FB1327646C2E10CA677E166EC
SHA-512:	D46A828447168883140B351E320024634CC9CDC610C4B93615F8595744B95B7B767165DD704AD032FD3DE892331190369F4D7F0B17E1B56F640368E8084A526F
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8L..../..Z...m.H.dy?......^.......@,_..A+X..o!...D._ZJ..?.J.`+>.G.kL.F....]i.K.6...&}.+...I.....EB..\.cE.....mz6I..M..p..o....... &N.m..`..2.z.&..C.<.+...M..s=.-o.........t......+.<h..q...L..:t..>..<..$....+...&.c....j0.......):..E.4.@.$I..F)^&.@....g.U..^...$GR......q2h.....-x#..,I.S7't.1Hu.I2..?c.a...2.\|._a...t.O...`._W..@....e....wl.z[u...J...E.^...z....e..J?.U..2...[BB.Ke..&V1..F...PYj...x....}T..j..9&..."t.\9.{..F..P..-.,.sPS..W..K.-\.4...FT...SI..PR..}......2..R.."..L..G......_...p..]..u..wHc..d.rZ.1.@.~A.58..r$.1...........y]?.`H.....;U....N%<44...C./.>.w.`.U.q.....;...@-.o..m.6~..jIu,..+...Ym...?..%~..D...^[..(.f7.7.h...~..[.h...q^.+.[.5..L3#..E..{....d...._k..[..A....>.ul..k.p..[...N......Z..m$i.?...D...~N.v.^..\m.4Iv.n..6..Y.Z....Ov.E.. G..r..>......... .j.....cT@...4.....N......._...UA...N.T......../.-.Y.....\_...j.e.D'...p.q.1..&....u......]Q.{.2..\].BQvU..:8..0.-.[...P.B.?..N[L.C....pl...A...@...yy.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	43764
Entropy (8bit):	7.9886137330089
Encrypted:	false
SSDEEP:	768:2tsNR+1i+RCWHT4FJG2ODx/f83DsMEsRUHYZ7NBlBa9lInKrkNlLv3pkChiJj:2t+R+1i45zYgxM3DsSWHYZHz+mnKrkL4
MD5:	5641C6F62D35B3511847BCB0D713B9FE
SHA1:	ADD194A9701D2FDD120651E560D0D5A3991B46F1
SHA-256:	0E44A67A0DA4275E6C2E4FFD1A93C042CED14A39E1D9F4CCCD41089547FF3CBB
SHA-512:	142D5A4F94B49D74506ED729839986CFFBFBCF04FE426CCB3BFA8264CF0EB47B2D00CE85F707B5D61B5CF65CA029291072F9EF4ED8210A5CEC7BF6F482188F29
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/7ychYovQPtJoIVWiH4osNrweQE-KEzVqry_PxYGqr9984sOjfaK9KZmeLBAfN6kvoO3WBcxECQM=w648-h364-rw
Preview:	RIFF...WEBPVP8L.../..Z..8l.F....A../x..5....x.....I.}ZAM,..q.'IH.c.vM..c7.{1......I..Z..'...of.o$...."3"j...}"....Lu... ...K.F_..ql.3.~......-;.....,..N...Z....o..C.i...@i..r/.._-...v.f.N...R4.\|.....{r.B...E.\W G..Hr!V.._.}.1.13s.' .R.F..h#.ZR..-(..UhY3...].cy..n....@...tk/..&?J..]..q.....m.z.......t)]J.1...b.j1....JI...J.WM.....Z.>..~.~.5xT.]J..u).z...n...i....M.g.J.R!...bY.c:..}.W.>...?.`A..2p...s..._..0..T...s.w%)I(C.Z.U....W...B.Z..UkP7...7i...V.y.Z-0..5.c...Y.m..A....q......_..p.o.q.o..j..#....8A.........jP.x..x.1...........YR..e+$<..d".........@..["..~.....B...S......B...$../".Y.#./1..8..8..........k.q.O......./.=8.{0.C..1\..z.I.......+.lo.+.B5..(.L.+VZ..JR.xA...$...I.]......$I.?.9'...Z..g...}..`o.K}...w.+.uwwgle\|...,+.9..bz.{{..zN!..5q).-#....I\z.w...B."...p.....Y...wo.]I.pN.+....;..Q.;....J.Rl"w...[..U.P..}.Lt..N.....Bx...\|.......Q.6..eM={;.c:..m.m...1......Ee.I...oX.........gf..bUi.S..m.m.yo..v.....'.4.....b.x...Z.%.y.....

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2284)
Category:	dropped
Size (bytes):	208230
Entropy (8bit):	5.509862385528734
Encrypted:	false
SSDEEP:	6144:BkpbK9ASyGcE3CviFApY59mqvdedgo9Bkl9r+CRKON8IVjPmYtI8W3qX6no:BkpbK9ASyGcE3CviFApY5xvsdgo9Bkl7
MD5:	DF6A6F3F705D060700FE30404EB71D6F
SHA1:	2386D604B09E5F93DA264C1D0D0722F6B12DBC77
SHA-256:	281AC8104FD050330CAE800150BB15DB8135FBD4C981A1CE7E1FA53BCD1E471F
SHA-512:	F7C117F1F36FCD9ECFF180A6715F7D932B1DB5497C7FF82BA920397E6C3C3E750261F2E6396B941FCF24C98007DE0EACA9C414FA4868244CFEC06C50E3F6A47F
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x431b747, 0x20efae8c, 0x3f806049, 0x2c60e3c1, 0x0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,iaa,kaa,Ia,saa,Aaa,Caa,Eaa,db,gb,Gaa,Haa,Iaa,Jaa,lb,nb,Laa,Naa,Paa,Taa,Uaa,Xaa,Zaa,aba,bba,fba,iba,cba,hba,gba,eba,dba,jba,oba,pba,Qb,Rb,tba,wba,Bba,Cba,fc,xba,dc,yba,zba,Eba,nc,Iba,Jba,Lba,Kba,Nba,Oba,Pba,Rba,Qba,Uba,Vba,Wba,Xba,yc,Zba,$ba,Bc,bca,dca,eca,Oc,gca,hca,Lc,nca,oca,Rc,Kc,Mc,rca,xca,zca,yca,ed,gd,Fca,Hca,Ica,Zca,cda,Fd,eda,Gd,ida,kda,Kd,Bda,Eda,Dda,Fda,Gda,Hda,Ida,Jda,Lda,Mda,Qda,Sda,Wda,Xda,ee

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	16157
Entropy (8bit):	7.932926875832688
Encrypted:	false
SSDEEP:	192:r5upNQivITZNsbPTJ949bKll0Dl2cRhShvYKkkrMidnDI/guG/8bEwqcUM3GlLhx:rY3vWcTz49bOluShHtrUSw3x3G/x
MD5:	044092FBA99A51DA431A8A79888A316A
SHA1:	4D83A9B18A7FDC12B932638A215575721A2F6187
SHA-256:	652844DA329612F397FD4753D6C41D8048D3B8A32D9A7A3125EC1D3CC42B274D
SHA-512:	EB4BAA2635C51D912927003F746DACE42B5E5364B11F8C0E5CE724E8BF1736DD05F393479EC97CD919431CDEC10EF917F6AC28F23EB2B090C409224D4D0998B2
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/PqMlpEa_N0A/hqdefault.jpg
Preview:	......JFIF............................."%% "".(%% %.'10-'--5=PB58K9--EaEKSV[][2AemdXlPY[W......./..0W=5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................H........................!1.AQaq.."2....BR.....S.....#Cbr..3......s...$....................................................!.1AQ.."2aq..B................?............................................................................................................................................................................................n.7y(.F..T...k.]V:...n..O.......^.U5MV"...R.......R..........}...^...4z.j>..y..j.y./L=..}..y........=....O........?.R....,...E.<....^.>...?.]........Dy./Z....3.g...(..........O(....W6...............<....\.~....G......}..". ..?W.................{....l...E....l...D.A...<...Y....#.?............].>....\?...l...Ev.y$/T.@-c...y..S.....P....^i....Z}.>.U...O.G.w.........}.>.U/.W.Q...k.!zo.{W.P....B-_iG.....!z.z!h..

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8420
Entropy (8bit):	7.954213328290604
Encrypted:	false
SSDEEP:	192:sCXT2XNyTPBGnWS8Uvb/tmatLZbrkmjXroVd/zdVZdHTy:zmYPs/vbIatZbdyd/xJm
MD5:	A0BEEA592D2E8A6AE7964CEAB1B24131
SHA1:	EDFCD1719CBA65C1C81FFA13F4BE17AF37E27D77
SHA-256:	FC026B102F5D8262011BFE6BFBC9C58E0F70E5668AFCAFC078A0B98C25766F6C
SHA-512:	CB23229857D9755ACC8037F285BA3A0F1664D3848A3FFB02DE6FAA8D8F5FE2B0257367691D83C3B23AC68AEA00E0A170058C2B9CC66ED17C9CD49FE6AAD7E5B1
Malicious:	false
Reputation:	low
Preview:	RIFF. ..WEBPVP8X..............VP8L. ../..?...m$)R-.u.....3.....,..Q.tL..t. ..S.@.z....b...D.y$Fh.D.U+..;H.G......i:nz...6..I.($.......3.\|....$9J.&&... ...Po. ................>...:n...B.Wp.......]...U.5.@,E..D.M..[.:.l..6sc..0....$....-.`.%W..l.......\K.......Q....x1...Y.i.".0....2..\..c...X.'I.t....@#.j./..@.l.4T. G..B.a!@.=.....DCCh..........]...Q...@.e..X.?.,+K_g...J.'..\.BD{.O..?../...n.....]....6r$._........j.....{M.+j..B.L/...].r.$g.az...L..A...N.ot....U...C..%...jMK...t..n.>=..n........Z...>P?"...o.m....H (...eU........K ......K..8...Y.....F. ...4h....G...C..^.m....%Sr ..!..>r.{.%..$IR.b...e.GE......m.$KYU}Jm.c.m.m.m.....=...>msZ....~.....n..q.]1Qk...g......V...... I6m[..m...m.m~..g....m..%l.....~.UuU.{b..b{g.m.v.Yf..l'+.N.=.......$IQ...#.62......S.;p..;...)).$.8...{......].. CIR...J...'0.I.\#(....E..a.........s...!..d&.s....W6.......k,.$..N%\$..Y.s...@...!H\.&.A.=....^..e!......y....pI..h.w..t..v.E.H.{./...S.yI.P......h`.H)..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	274436
Entropy (8bit):	5.586332349529199
Encrypted:	false
SSDEEP:	6144:KtdRo3k4aozVBvif2s3qXk9np+rWBBNy2U3P:id2kro5BKfW/
MD5:	3FA548ED81AD86DBA0CD7C7B5C553255
SHA1:	65A7A40F61B86A069D0CA5F0EFAE7BC5ADF4C290
SHA-256:	A337BB6ED7D45AB5F51FFDD5C9A5E0A543A6BCF84C440E319565BB2CC5743636
SHA-512:	68FBD4E88EFDD2FEE53CCA50C196DF5318472EC7831BD26D4A05F3CAA74CD6D1AEECBEB4DA6816195E5E0274336ADFD32B93847383A17795DC167928FBD97F20
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-6VGGZHMLM2&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":16,"vtp_rules":["list","play\\.google\\.com"],"tag_id":10},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","play\\.google\\.com"],"tag_id":12},{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":13},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2725)
Category:	dropped
Size (bytes):	69247
Entropy (8bit):	5.427434387210052
Encrypted:	false
SSDEEP:	768:8Fx5xxd7wzX9lngoLzYmFAMKPsHWxwkyaer1gAn3m4JxBSJLT/K8xupscx4H:831d7ajgo5AX0HCW3mosLT/5l62
MD5:	288F16F77F0EA72D84B578EA5B4F3ACB
SHA1:	570BED647FD3679FBF5B54638F620EF404912D9A
SHA-256:	5A87617C61ACBCE1CC86B392009E4AABE7C8A22DD8FB57C13556195C864B0D0B
SHA-512:	6DF261DFAFCCCDD796070AC36B7A55E2ED8DB4A4E6087DB198E01883D17260E5F322FBB1B267A32A04F6586B33AEED5D55CE345B7E81270DB19C26FF659295B4
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ca(this);function t(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(h){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(h\|\|"")+"_"+e++,h)}function c(h,f){this.g=h;ba(this,"description",{configurable:!0,writable:!0,value:f

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3818)
Category:	downloaded
Size (bytes):	17931
Entropy (8bit):	5.4312171233645925
Encrypted:	false
SSDEEP:	384:Nq1PsLZZUK/btMUWXcO22eDEhQ/T7NpNm/1MANeBMf6fIXpa064QO1D:N7UK/btMUWXfyEhQ/lpNmdMANeBMyfIX
MD5:	7DC177DCB0DD01AC550F283D579E44D2
SHA1:	F3A35FA25C3E8DF7D0D77B38DBFA60BB3375F168
SHA-256:	C7538A727DD3CDD34E1F77A269F7872104243EAB81F6B831B88CD5253AB70122
SHA-512:	35B2543E09502967A8787282B38DEF86CB14753EF57D03553497FF3ED9151CA1A23B3ADD01FEFA415F84E8233BE4F8607704944AA1A1C02F5CDEE2B69A8DF278
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Z5uLle,ZDZcre,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,ebZ3mb,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t8OL6d,tBvKNb,tKHFxf,vNKqzc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.qL=class{constructor(a,b,c){this.key=a;this.defaultValue=b;this.flagName=c;this.flagNameForDebugging=void 0}ctor(a){return typeof a==="boolean"?a:this.defaultValue}};.var mbb;_.obb=function(){const a=mbb(_.Ed("xwAfE"),()=>_.Ed("UUFaWc")),b=mbb(_.Ed("xnI9P"),()=>_.Ed("u4g7r"));return nbb??(nbb=Object.freeze({isEnabled:c=>c===-1\|\|_.Ed("iCzhFc").H(!1)?!1:a.enabled\|\|b.enabled,environment:_.qi(_.Ed("y2FhP"))??void 0,oR:_.qi(_.Ed("MUE6Ne"))??void 0,fr:_.qi(_.Ed("cfb2h"))??void 0,Jl:_.ri(_.Ed("yFnxrf"),-1),UR:_.ti(_.Ed("fPDxwd")).map(c=>_.ri(c,0)).filter(c=>c>0),eW:a,nja:b}))};mbb=function(a,b){a=a.H(!1);return{enabled:a,DO:a?_.Ec(_.si(b(),_.pbb)):qbb()}};_.pbb=class extends _.z{constructor(a){super(a)}};var qbb=_.Tca(_.pbb);var nbb;._.u("RqjULd");.var jcb=function(a){if(_.aa&&_.aa.performance&&_.aa.performance.memory){var b=_.aa.performance.memory;if(b){const c=new icb;isNaN(b.jsHeapSizeLi

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	51542
Entropy (8bit):	7.9920172980393955
Encrypted:	true
SSDEEP:	768:Ml3S2R7aE99aAkzItLOhBJmDTa+PsQU8+P9JDS:ASg2EGAAItLOh+DZPW8abG
MD5:	C41D50A3494852F27CEC1AEC3575C664
SHA1:	1D855775AD19961AAD06D56E83C319A249F660DB
SHA-256:	BCAB4198AD8148E384313FF169BA75B21952BD780320DBA26B2C475898F297ED
SHA-512:	D628CDBD8AC90B70E64A2567DCBF6E3F0F3031A60675184A8FD28244D82F1C2B5EA4315A28554F821422DF4F9A4967D8C84687435CE22CEC9BCAE9DBCA20ADC4
Malicious:	false
Reputation:	low
Preview:	RIFFN...WEBPVP8LA.../..?.MH.$I.$..j.X.%n...".?.\|=..=...;~..\|k.}....a.mG...\..+..m7.;.....'2s.m'.(G.K.j.H.:!.v0-.4.Z..U.s..c.2.Y....Y.....Lp.MI@...;B....=3V......33#...........[u..U..Ll..~..l.k...u...v.H...j.Aq..F..6.u3....k{].7...F..I.%.9y.....'.G....`iWf. I.$I...q.......$..G.$.....:th\|.u.=...+....Cww'...m#E.2.-..H.6.!`...E...cD.......#"REDDG4...j4.e.V.jE.VD.b..L.)nH.T.gZ......+JDd2x.V5....a.H...W..\.aww^../...8......!Z4j'o......B..2\...>....... :d..>.-.....0.w.q.~'BLL.......g....\|...D...is\|..L.&..:8.F."2..50(..U...iBP...pC.#X.Q...Y..V.Jx}Nmq..c..BV.]BPgE.P.........0e.0...P]ET..........[.\|..^..)..%P..+...g...).)...".."..\&....s..$..d...Y!...q&..P`............;N..........ZO........=+aj.!.....Zm..<.f[.a..Y...a.....j?B..n....p.[k}..T...jE!...V..j.n.o.@..._..e..pgB.....g2..Z.g...n.5....}....I.o..Z.5;.....}.\|d...JLj.Jh.^....;...}.[.n-...T&G..g.}...,,..Y\|../...r.....M=...u.N........dpt...w...6......B/:uh.C.V5..d0.Tj..u9..L.\..KH=..+U......

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2080
Entropy (8bit):	7.8925402678716035
Encrypted:	false
SSDEEP:	48:5NE6viM5rUu+mHfgJYeAlomnu8q1xiNNL+Ze8yU3wETDVLh4XLhcqQB:5KXcIu+mHfg1Aru80WyhyU3PTs1a
MD5:	D729E082FCA10E8B0EFEC7A14F8D9014
SHA1:	5DFE2A6D0DD3169F53490583DE4B60D9F8A3A649
SHA-256:	99756AB0085E6C82E96A948E912F4C31D36F65CC561A1E587C2F3970D56986B8
SHA-512:	432FEC08DA5FC9D0D22224D6D406E03783ED3219F62E088F84CE6195C3286597768303485A886A424771E24EAA9B274F101268483437834DFB975D3E905092A1
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/RpY2HMoj2ZfD2CIy4-atnMUUU0gPk6afkefze7kC-XDgJqJW7fQc70yGdl8KOcxYSA=s64-rw
Preview:	RIFF....WEBPVP8L..../?......=...+\....x.wX....bec..r.#.....u..&f,v..X^B.2...B..R.... .&X.C.......F...vr....(...M.8.U..p."f.Y.\|...C.b.P!M-.ns....: ...1E..*..G.....hR..c4...Z.E.$..@....t...m...m.6.m......6gt...m.m.m.Im.m....'z.w=..a.....EO.C.C..7.....p[\|........MOT.!.......<..}.Zi...............)...h.)......mf..XS.n..#x.....@b....h.h\)l...0..i}.b..Yd..q{..J=.'.!.T..p.d.q_..~.76n.O.A.).....t.@.=..y&.....G.........3....u.....P..6v...G"..r..H.....O$0..$..p.5..{.}D.....Yy.G..u..@m.7iA.T.5w...!......P.Z...7..B...........p.l...}.q..~.um\|...L..(.L0..."+..}.>/.;i.(2......a.y....S..j5.!.V.......#.c.D..\|..F..u.CC........%rU.+I.sA}.\5(.Y.+,N."....r..0dRK.).lS\|.H.?...{2.....?....gkj.x.....o;.B.3r..v..E.f.{_I8.C0E..q..sa.9XC..R..3..A"...t..u.c..q3\2.P..r]....y..4Ba..w..W]-P..W.il...v..nT.g....\..RER(V.PE(wR&).DJ.WRp...U.H2....k.').7...eg.go..Bc..\..".d2u( .;!...y#E...p.I.b:...;.`........g~.$..p.'....K/.....wC...j(o:..~...BI..A.&..%.w.Cmc...

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1008
Entropy (8bit):	7.728465169020496
Encrypted:	false
SSDEEP:	24:LoCrRq7G9aj2fgnVZTsEX2zfAjnuafsVfZvgmOY2rkr:LoiRKAmjVRBGzfAdsv4m2y
MD5:	427DCE1A7E2562C6B2B50398B549E851
SHA1:	C4CF15E9F6BDB25CA9C4BC4BBA734436D4A9AB06
SHA-256:	A72E7D3EAD2FCE6354203C052D498207F11C9C9373AE79FDEFED0BD725A74870
SHA-512:	1203635517F072E46EEAE668939756CEBEF59F8808BCA175C01DCDD2E606EDB5736A0DDDD2796D42C4272B09DD2AE0F1BEA1CA87187666286AA89DB03E08C928
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.w...$I..!.k.....`..2p..$.3....F........I.$.@@B.@.P...Z).....2`.e..Y8....bH6T......`H.!..I........#...H.8.....B.Qf..^....@..U.Hn.}...~.....$#..aNH....B..u...y...........q.....uQQ.......X0.....Gh.P8Ba...~./l.........i.....v..m.][.m.m.2o.l4V._.7m.O.D...H..)..(......W.\.r......to.Q..._z.....i...M.0-;...^\;.6o.f.....J$l..PA.y. i....w..n...O.&.(..b:..;....h.Q+(...I....w$.u.=.....J5u-...E.f...B....x.v......I...t.....V...G.n.d.B7.m..n.+.B7..G.......(v.%..&.b7=A.k....J.....w..oT..w..oT..w......._..A...l..wN..Q..7.B...^....H..W:..v..[..z.....W\|s..[.......i.iP...S...E3...?.p..#.{\|......>C._..X[..>..>A1-J].>.Bp...$Ar...z.@.OfNxD....{.....5{...y.2.?&`............A3.bL_.G..Xh...5..d..^.-e..'$..,<..l....g+.....LU...g.L.7.y.t...cJ..H-[.*.2...+@.,./.?.t..x...._.Q..$...z.t..ucu......C..9..u..Z'..g...g....^...?DO.....3..xS.u..x.=}.z.T..=.......=e.zf.z.a.%..W.'.@O_..=..pO.8....EO....I...=.....z....~y{.cJ[...w"^..-....Zy..)....

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1854
Entropy (8bit):	7.860594273249272
Encrypted:	false
SSDEEP:	48:K73PdLjWpiWSj/xqBpynVk1rzLUURy/yi0c65JP:2dLypg5HMrzLUU4AN
MD5:	A165DED0BE016DD4D3D3DDD3ECBD6DFD
SHA1:	F2C994E64D1330D0062880E85982B177EB7B3353
SHA-256:	990B7B9F8D6DE559E11F65A0941EB2D6A8ACA1E6E1BA96A1C441F5F40D63C6F6
SHA-512:	E13B89BA2600F378D0510A0441D5998C52FC92ACD268385352806BA54B6876D39EDF1CD9349061398BB6A38B2095D5F8D3109248C6A08D33AEA3FD7611F01040
Malicious:	false
Reputation:	low
Preview:	RIFF6...WEBPVP8L.../?....Em#9....'\|.BD.'@?..\.K.../........W..;..m#..N7....m$.Z.{...?.S.'...c.q.....x....1zA..d.Dt.._d'......U.......n.;m.BE...{.P..;.....0sK.ts.'6X._./...#..SQ..-q.AZ.......'...M..k_\|...m3.m..C.m...^rn.6.g.s..b.........m.e..R.w.....l.~..3...0.N.J.. ...#..l.2......lMb..Y\D.....-<.<x`..@.aJ.S3:+d...J.......0.P`..^.D..G...K..S.(...+a....<.C..s+..E]...%...y.).......Uy.p`.~x..Z52.O/".kdm..."........f.B..RI.<...e.....\...R....F25.JM..BfS.X}.....1..D.e^.pP..,..K....E............H...=....wuQ.2W.6........\:.:.....-...^...f...m.).i.4.....ws..O...l...R..o.Xi.LE..6l.N.......}.k..D../.(0h...2. ...YK....t>y.........(.\...2.y2t.w.c....k...C}.q....8....0...T.<...H..m....#...J....`.G...2p5...E.Moc..%.@..&UB..lBd...CE.5...B.3..p.i..1.L.fY.G.0K...n/..}H"l...x..,.]......K.x."....".3R...$.C..t.4[.'......x.x5...e.A..Z.Yv.F.]b.]....A..E.0G...&.F.p.}......fQ..k...cq"i...QY.JSV.XiT!...lLL.)k.)....W\..7..p...H..EvZ.F...A.g.z5..P...Qq.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4296
Entropy (8bit):	7.946896111680172
Encrypted:	false
SSDEEP:	96:kqtuDcuoGHC33iBjEtumxFvvpXXOSRKTzkYHZ9yitnAY2:FuoH4jbmXv8HyitA/
MD5:	93C0A060B7EE8251FB29C3FF01371BAE
SHA1:	3A57394327FC9072FA8F2A706F1544AB6959CBE7
SHA-256:	21472F95C1BA45F13DCC8F2D3EFA6609C7D104F7CC2434B65C3D9A04A24C6F9B
SHA-512:	5F175A0D596FC6DBBA4C00EFD26429A20A2BB57C588998FEBD319B94D6B098E4E70D73CE44761D7D5A4A3C0CB3FB63D914E0459EE6023AB488C8F3C6D5F39B36
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/9v08ai07I8aoFLj5M-90nzWPpvyNzOVgA2ZWF9avdW7oS8L9YqF9trVI44SUn2qGTA0=s256-rw
Preview:	RIFF....WEBPVP8L..../..?......%...4..L.....0C.a>9...}..I..Y.^...>..#.8...c2..T..c...\22.ed....vU..i....#{..].B..B..V\lV./..SQ..72......I...l7.8q.(RK..-...I.@...!56U;..2]...Z...3v\.-dn .vU..Q..FM.k..(.......;(.r.36.v...$.m.....m.m...m.m.>g....pE,.."./..".......,....XV....!y...qaXj.E..$..\|.Mh...0.B]q....og...D.%.v.wO.'.yr..h.2D.<.l.S......l....#\.Agg.....K.B8...e!n.....#.q.o.k..\....Py..ery$F.!".V5#..B\..M8O.'........zD.P7.;K6O3_K....3......>...q% .>....=..Y.1...lT.).I.............u..=d>...d.G.)...8.. i;k...`X7..Y..........i...DM.K.x\|.........tO.ev.C....=p'.Up..u......P.!)y..7.....O..l...._...5....9./>..9<.5...cW.O.&lr.)'...g.L$.Un[j.}........Q...&........f.eG.........O.C...Vm-\|.....^...Rr.[F.[.....k..z{=]...MlF...2u42.=..t....HT.R..n(.....\}..T1.Y.K@Rx.!..2....]:...?a3:.8N2.hz.9^...T[...(.c..`.......;..[.\|n..4.U'".{W..b&...d.m.\|.9.....7....BwHK.(.v..z..5.s.`.Dv...n.4......z.i.'.....)%..~<H.O.I....et".L...q...a{../A:v6.7.U

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	52048
Entropy (8bit):	7.932854653786267
Encrypted:	false
SSDEEP:	768:3uZAymcJGwrD2sPnuEj+T6LKfPBaRr64FeqVCn1mYY/CQEbPMQEBJv4iJk:jcJvDl+T6LKfpnqVCwYYdEbPrEBJvLS
MD5:	7FA328C422128500DF949E409D2E5F41
SHA1:	FDEAE7E611F9577101685632CFC17F9BF059FA00
SHA-256:	0E4EA7E19ED1D9093BF33B23213264DFB6216F42158F84205C503B662CE82AA2
SHA-512:	B619CC102443BEFB1361354810E63D399319B501B5895969C1767D3B2B8EB69E7C50749110E46951EB05A1BA991EEC7FC0DCA341D5E1C5767CD3BE6D66AE69D5
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ebs6ftYUkOKlDY0M174OpvargwbDyHUVAnO_G5aE0dL5GBQKCtfh3adN5H3ZMThXogDi=s256-rw
Preview:	RIFFH...WEBPVP8L<.../..?.MH.$)...]@...'............z.~....x#......fFD...l;"`D......K.y........&.+I..E4`H.:sy..O....`Z....S.%.YY..a-c.,..0x.....=......S.&b.x..E...t.....%.!..E....`.8..qe..K....a.y#.[. g1@......k..I=....<.o..'.Y.$)..f...k....e..R)....3@R#I........&.."..m.v2...m...5 .^V6;.....wp.g.?....%.....`...cdC.&....8.06.g.(08..)..8.....1T..M.b..Z..`......8....`B.......F........j.4.lX[E...H.....u.s.F;...K$.-.`.......;....(p..S?...D..6..zs^...566..;..W....Y....{.].)./...1./.O..`\K.......aBt.F.a.<.Yi..V.]...........'.....+..".&/..1..d89_.P......\|%..1..%Q.......T..w.MY...C......K[LIn..[E-L.......;q.....).....).....N..1.....{..:.I.m...f......J[.c.-B.......o!b.T..D.E..I.r.l...X..T..\q.Fn..".%...U..W.!..^..@.N.&....<KNcB.....'Q.R{.w.v.]..f.ywD.aE..W"=.+.tQmB...?...;......v.).~.P...O..m.Yo.f..o......u.\|..\./E....s..N3......yO.......H~.,.R1.I+.........~..DO..R.K..((.....q.....0&5).............t].t.R. .P\|.F...].....M ......MZj...tUMT...B.I(..@.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	14521
Entropy (8bit):	7.8525415109461765
Encrypted:	false
SSDEEP:	384:6aLLNbRieKueQDm9Eep0faWdHwBgjXJwRy:6aLHiLueQ5Wg7Jwy
MD5:	AF3B657F0E50DE0A91216E8D29BBA192
SHA1:	451933DF586C8616D80A7E5DF423EAF173011F3B
SHA-256:	C7824F47A12CEDDF63A07314DDFDD56C0DF16FF0728A53AFE4FF4B0194B70DF8
SHA-512:	0232C6831D29829052F9BEEE896743B1AAF58E8C3E90E076C0AC17533CDFB4612A05620E23966ABA24772A22BC23C3635522656B81CD91650B7B991D11F24748
Malicious:	false
Reputation:	low
Preview:	......JFIF............................. %. .!% %%..(10-(-+5=PB58K9.-EaEKSV[\[2AemdXlPY[W......./..0WB7=WWWWXWW_WWWW_]WWWWXWWWWWWW]WWWWWW_]W]WWWWWWWWWW]WW......h....".......................................>........................!1AQ..."Raq....2..#B.....Sbr..$3...C...............................2..........................!Q1Aa"q..2....#B.3Rb..............?..........................................................................................................................................:.C..W.>.W.....B.FZ..9......._..._4:...S..O.............hu..B.Dk.....hu...U\|.....N..>.X:.A..Y\|....S./..S..O.....j......._5>....:...9`......Y\|..V.S./.4*t5..r....o5>...@..._.B.C^.g(._.......}....Y\|....z}..u~.[.O....+y..........W.......}....Y\|....z}..u~.[.O....+y..........W.......}..._.B.C^.g(._.......}..._.B.C^.g(._.......}..._.B.C^.g(._.......}..._.B.C^.g(._.......}..._.B.C^.g(._.......}..._.B.C^.g(._...............hT.k....~...Y\|........h..k....~...Y\|.......h..k....z...

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	48942
Entropy (8bit):	7.954348475963941
Encrypted:	false
SSDEEP:	768:K9B355aXZ5MwmgnM1S33X+xmcE75Wrqvl/X/fpRUcHPKMdosbGH4cGeUKrinHPjy:Kd4ZubT6H/ce51XnUcvhdbbGYnG2H7vq
MD5:	05821970737886CCA9EC6D9F640FDC4E
SHA1:	62DFF2BCD60FDA2E97B1D309A431EAE621976D76
SHA-256:	2F6C9820F9C7429ABDAF184352A73BCF16B85D5AC960552A6C0ABAB33C2B64FB
SHA-512:	478FF7EB9CCC3592290070779E347C664EA67E24BC13278F64E10373D9A7561A7B2CFA18079FFC0B0DB4CD67C7FAC28F8727A21E8AE78AFA8D266991ED761A90
Malicious:	false
Reputation:	low
Preview:	RIFF&...WEBPVP8L..../..Z...m... '..%....s.-D...@......PU...7....vU.O....W+(.^)@U...}..Mgl.%..me;-..+..T..8.GlK.m..._jw...J..T..%..........'..Ju....V.../ _.b.l....4..oI?..H.....u.l.QHb{.3S.((..R2s .?.....G...BCbW...+.m.y.k...cWQ.......-....h'i.......6.4...p.`/...o.L.(=3G..PP.M7H...s....t....`..9R2..a.t.'"s...9i.>...13S.m......o....m.v2K...2+.......S.....p..v.L.#....]m...+..)..B.$...H.gfEV.Gn................~...w..........>..!.P...\|...xH.j...j....Y..........d...N..........d/o.(..LE.s.....fmj..9.(]...,.n...H......_.......P...t...I.<m.5.......g..g..'.f..m..N.'..(.........l....F....P..,R.4Z.h.@..U1.W...K...-.......S..............".)..b..{6.r0..,........i.wO.+..........@......P.`%@`....^....n.d. ..l.,.3.......qW.....t.@.....F0..\|?.G/.f.$.&...%.j..b[.>.-P.xJK?.......<.rp.O..$....t.p....b....l.F.@.2...08....&c....@.T.C....T..6.~......`...&..bv.Z..m#(.?...S...@...R..a/....N.]...s.T*.K....g........J.=..j.i;9]...J@.-..l...'T.{..e....w......#.t.J...j.

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2192
Entropy (8bit):	7.902885558861517
Encrypted:	false
SSDEEP:	48:UEv/3YCV75otukXiyV/Q6QElCV3ucHj3+SLnmLfcCu6Nroa:R/ogDA/QgW+cHjOSDmLfcCJrJ
MD5:	8D56135121FE8A8C530E5416F649F283
SHA1:	3DF57B6F89047E6320F25A81F52223F89C15FC0A
SHA-256:	342DD87911632EF5234582A185F6EEC9D6A297F549ABE6BC1399D6544514E48F
SHA-512:	FAB9D23CD2C1A9CD52219421FE3F60A8162EBCF8DCC3C102C0E30CA1FB8AB7ED57EE07F43E514103FBAED133E8834A170953795DAB97DB20BA86943F71199769
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L{.../..?..P..#..yz.....MNS.6 ..6a.N.n"....s./....e...DD.r..k@..p..........m..M.z..1$I.....S9gq2.k.V.d..^..s.!o....V..O&.....$.r...ffffffff.effff..u.....V.a.Mf.+....J.+XK}......e.q6.;rT.O........{.I-..Cc..........f...F....7r<I......lVe/y..m4.z...m.t..`...S\...l...O..G...:.......1".... .)3.].".......YM...t......3...f.)E.F..=&m`..)..G...f..........S\|..^..A.......b..{....\|.,I..=..C[.4.......c`...$".....$@.e....s...,S.5....^6.....P.....U.....E.....z..qw...(..M.PW..wN]N....t...HDR(h-S..r.8n:.ma.Q..8...x.....?..b.8.d...`...JG.x~...o@._..{./.\.D..-.1...n..I....@.....Qw..Qk....X.N.3.t...+.F...&...)...>....'..^...)Q.C.8..v>.p2.$.........L.H$.gH..;...]...#.F.@U;3H.:..0..l0^C...c...R....K..{..:.%....#r....k7a$.\|..;..u....t.....Y,..55.)...C......y'??.)Q..81..;..0kh.SpB...~....s)R...t9.@....X....`....)^....!t..`..2.q.....-........G_9......9]N.O'..)v..Dn.=.rP...*..RU......;....]b..vF.......A(.mi..>.\.9(^..F....&!kK...V.CoU

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	205300
Entropy (8bit):	7.9913705835653115
Encrypted:	true
SSDEEP:	6144:7y5zefD3RNudOU5Lz82zR/sD8vlEbYtqJy+v:7szeTRoOUFlzCD1bYtqJyu
MD5:	E46D4912A0C35A1EF16B51F4130BF49D
SHA1:	08303D8A84F30758EED030D8182904CB6CD45E97
SHA-256:	5B120BE6E2173B648E98B920399E3E3CA72FE680C1E276DC81A37AA97FD9997D
SHA-512:	555C25AD32BE8806438314B8820460E3C8BC49D4E53D2063F0214DCA72A44FDD904F1E01A29EE54DE71E0634CEA9172D9EEE1914DBD765A62CD30A1262F0573A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/h-gMHawK62d70rmr4BgsG-397OTjhB_FQ6nkaLc7pgl4FglkgIWHljPbNT0qKmvac6U=w648-h364-rw
Preview:	RIFF.!..WEBPVP8L.!../..Z..@.$7l3....O._....O....u...H./I..t...y..F4..7!)1!.__wc..d...0..k..`@..B)....m.`k....%......s&"v.9.$~..-..D....3?...."..$..(H.n..\lphkCU......[.......L..P..Gz~..RUduwI.X.G....v=.....y..Q....L.[.U.lU?U......0..` .V\....qb.j3.slW....rUK6.\|#...\.........h..p.H.. .f......`....''''.F.Rh...5..N..Dl..{.uh.x.....s....<....T(.......d.t.yc......).4..vK..Z.m.........q..9....w..{..!.."Dr.B...2.9.Z.m.$...M(^....{.}CkF..7...~.V........l.m.i....TM...U..=9..[...XE.e.Mg.....m.1......Z.U.W=.q.[8..8.....Y.hb..-j...@...d.,.....p. ...T.X.Z.&.. ..D.x.....}r..Pu.`a...N.,^...<G...R..}....s...........[..]............g. 4p.yy.S.I.^..u.. .!.)U.....M......v...w?o..lm...M.w.......Vq.:.:...\|.YgmQ[...1.A`...-S`..2Y.ZZ..q....7...U.......G......j... ..... .....V...EJ......../K.c.>..U.du.!....... ......5.PC.B...Xx..";XB...'.D.....t[+\|.i.V.....0.^.s.'....Q...7r.}...n-.,...i..j.....&G...........Tk.<.)..Ppn\|^....Z..mk..m{....'...-K>Y....z.p.w....s.Y....j@.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	147652
Entropy (8bit):	7.992337332751458
Encrypted:	true
SSDEEP:	3072:6R2O7BseegiyhmVfCFmBGKE9CDKHybhTgxe0jeCfhYSk4Sn8MYluP:jO7BXWyhaxj4CH9ThchYL4Sn1YgP
MD5:	A042EFE7D75A7733C49D22B5BABB9E14
SHA1:	E8DD4CA5C24065ABCD6AF10E15CB7928FCA7C323
SHA-256:	98D291889B06C886AFDB105216656F4682CB7D89D7CE51383AFB934A79BBFA43
SHA-512:	70089D5580F8C281F4C70F0A6F8B8AD19657017486EECD79DB3EA4D99DDF9AE6DA595C3353BEB463801DDC696159A9EAB45024138C1D790B47353E3FC84A83CB
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/pnMJbfLpo7Gu1tCedtt77BsWvlqtL0YE5QLYIffL8ti8Y0PX2GY2ICR3Ng7KOrRbZocDPcXzqg=w648-h364-rw
Preview:	RIFF.@..WEBPVP8L.@../..Z..8.$)nj.....?`=..D....o^..o...6,..i-^IR..$.o.c"u.I].7ri..!......#I...=.E..ES9.6...D..y....p\|.<.#e..j.D8..oi...>J..b..%.!"m..9...@w.9.O.....I&...p../.....EM.b6}.`...._tGR..P=.._n7$..E.%.K.... .mh].[Z...M$9....A....^M...If...!..A..t.)...."I. ...hwY....Y../ow..$.d..FG?)ff.^....c....h..G.....dZ......?. k..,#]m.......o..@.7..'.~Z....d.@.z0.J.E$...v'.........$.S..e.~;\|>.0....V....U....0-.!-"......;..Y2.+9.................A...=..y.D....T.........c.......W..a..q.0....E.cg.QL.~........u<...<.8&..U.....#.F.S..jp..d].u\|....S9..:d.Rk...,.$..q....Y..UG.V{......i1S7...].~j.PG..+h..3.a..`..g..V.B..8.u....!...\..Zu.E....L..9.Zkx..z...%R.[.S.4&...$.N.+h...u'..<+.V.$.....P.B.u...1u,..f..Q'%.T.N.....t.......F.....=k...Q.5j.=.k@A.u...\|-."....0..2@.7.._{.+f.L......\&...B....H.Cu,q..-z2$..g.....!..f7......[.NHo.d....3N.H.p.S.L.Fg:??.......z........;.B.....h...xW.\|.+./V..........fU>.w.......M...Z....l..UD&.I.........6..3Z..B.P1Te.q...)._%+

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	84576
Entropy (8bit):	7.992013870667903
Encrypted:	true
SSDEEP:	1536:EuWY3oT4C/N6AewZvVrtNRZF+WWbNGU4rjVoJO0fxBSkg3OFsxdvt:Eu1GncA9vVrtNLjOGU4rBonfSWFmF
MD5:	E225CB9BD7700ED6867E33BE24E622F0
SHA1:	20D6F412F0BA48BD88504B9199CE84F669227E16
SHA-256:	80FA61E80994E3855AC05314FD48FB84BCDD0A4F1DFB764A1558FA835082106F
SHA-512:	1737A6F97342C387C57C738883A5B0A1F4AC48655B354DAAC2F486924D1B20C7E590E652E26E0163D5CF92151D39FEC0DD0F20A455754777B65676EC5A556629
Malicious:	false
Reputation:	low
Preview:	RIFFXJ..WEBPVP8LLJ../..?.M8l.F....<.....CD.'.......03l='.......e.`&.._.l.t..{.6.Hj........n.w>m..66I@].n._e..J.?.=3..?aA5........u.\|l......&U ....lO..a........@..3......:03S5....1v.....Te....DL.%.11..;...dRR....^...(]b7b.6.T...%]...y.v..!.........r.........4....KvR".........._...fb...:..x.%H.N...opZ.`SB.....w..#.].'......<?!....Y.4!.'3.......$.f+...3......-....L.H...*i&&.....H}uK....7.Q...()2+gfa#B.+C,h).-...e......GT..&.F.a...8\..$y..T.n$. . .m.6.XB..-=...>B..!..Y...-.cB<6.=!u.............\..+..j.$....m...=$..Ep.P<.F\|.~..........`..}.A.w#",a..p.?NE............,DH.o (..P<.(..p.h<.N...6...j\|..,..x..@....P\|....$..........B....I....qD...4...t...qD`'@..V<h@$.....;ow........<C'....._d.8..,x..\.\|..S..@.g....9.....4yp.(....e.......z.s....YX.?._Gg..y...89.!...P.Si.D.u..Nx...V.N....a...q..=..b.({....I....l.. @A..AD....O.8TF...#....@$a..jC....mo.@..K.z...r.#.(..Jzk./L..~...V.o.....k.O....Bq.......b.u........VNK.EcS.NE.BQE.>:.....^t.b-97.+..(.8.Z...m..4..

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1168)
Category:	downloaded
Size (bytes):	19096
Entropy (8bit):	5.632859591359612
Encrypted:	false
SSDEEP:	384:vHZwUcyXMVPFKpE5mov2WMvL5R8nEFE5QZyGJqBHK1lqT2jggOS2m9R3T+zdSMx0:vHZwUTXMVMa5mov2WMvlinEFE5QZtJqs
MD5:	7B439ACE03B648FC4E25C8BE4FAC2178
SHA1:	78569C861D6323F41D8404FDA80C6F66135D03B0
SHA-256:	0ED432FCEA422A6AE2983E29A4663F14F122508AD82DE2BAF14417412A085E15
SHA-512:	E0F84A06C939420CB1F5DA131B37F111C0E009613FF0C7D2FEDA3694EC9566786B550EE875C62F9AB29F8F63A9C331B6482D7DB9D56AA01E1BE24B085A92ED46
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P6sQOc,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Z5uLle,ZDZcre,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,ebZ3mb,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t8OL6d,tBvKNb,tKHFxf,vNKqzc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=dfkSTe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Bf(_.zpa);._.u("sOXFj");.var yxa=class extends _.Nq{constructor(a){super(a.va)}H(a){return a()}};_.Oq(_.ypa,yxa);._.w();._.u("oGtAuc");._.pxa=new _.ie(_.zpa);._.w();._.qxa=class extends _.Zk{static Ja(){return{Rl:{xZ(a){return _.Rd(a)}}}}constructor(a){super(a.va);this.soy=this.Sj=null;if(this.Mk()){var b=_.Rj(this.Wh(),[_.ok,_.nk]);b=_.Ye([b[_.ok],b[_.nk]]).then(function(c){this.soy=c[0];this.Sj=c[1]},null,this);_.al(this,b)}this.Pa=a.Rl.xZ}ep(a){return this.Pa.ep(a)}getData(a){return this.Pa.getData(a)}pr(){_.wl(this.Sj.hf())}fH(){}};_.Br=(a,b)=>{a&&_.ke.Gb().register(a,b)};._.u("q0xTif");.var sxa=function(a){const b=c=>{_.il(c)&&(_.il(c).oc=null,_.mr(c,null));c.XyHi9&&(c.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(let c=0;c<a.length;c++)b(a[c])};var txa,uxa,vxa,wxa;txa=function(a){const b=a.Xa();return(...c)=>a.Sa.H(()=>b(...c))};uxa=function(a){const b=a.W();return b?(.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9270
Entropy (8bit):	7.973786790952994
Encrypted:	false
SSDEEP:	192:IIjELAJ6wo3pBvjZZXqtHxxZsMSqfQ5XHfJ889UqDw/GAmd:IIj+A4xdsfxX+OzSd
MD5:	664690CC29246D3BB6257D8E7F790343
SHA1:	19559A7E8B91BAD19798AC44BECBD3E376281CAD
SHA-256:	2441EFA89E8D41238794A3C53F1223161A222B212CE6BFBF57B0E26BE9F4D0C8
SHA-512:	835699F095AC4078A71F64903463D035E55D4D687B7C79991EDDB2B1A660A2F79A5ED0BDF1CC58D9D9DAD1D5BD25C12F38128ECE07478616FA768EF63F8C2517
Malicious:	false
Reputation:	low
Preview:	RIFF.$..WEBPVP8L"$../?...M(l..Ar...G.G{..c..m.{.R...?..6.D..^0n#IQ.C...?.....n.p[...E.N.._..E...m#I.....>...........wb...3+#.nfs.../..e.........9_......[+.0..a{{..a.\s....IND.Z.....\|..r.<./..}....#.S.h.S....^H~w...G'..pS......a<....D...,.%....m.j+g.s...b.0s.jH8iN..U........`[...Cn.L..c.s..}?/~.Q..Hgu.E...O.....N.$9.......9....p.pP..\|.......P.2.1..<..h6.}.q....N.;...k..m.m....}]k..v.F.s.q...O#I..$.#.\....5..\.......m.Kwffff.ff....#3..0I.{...m....U]...=....m.m.m..Y..rM....+.Jr..yD\..9..J..".oz~,D..xC....^..5..u^\|..\|.......;.x}...:+=&..li.he.I..E..~......".'..].R..{...w@..6...%...J.27w.b=.h.A.N7...X..Q`..M.E=.HQ...R. .Hz/ .f.... .jM.p...._?..Q:h\|1.KZ.U.a....0\|..9.B?.B.^.. ....CH...&N.....@..D.@.L....o.......1..R...r.!2...z^_sG..@..c>u..b...i....8B{)[e.]..~.w.l........q.U....4(.B..wB#8DZ%.&.y...)+.k.mjx2q.E.5q....4:.F....]..'.....Td.....{.Gw.T....:..."..yk.W\|....5o.*...;....q.kTB.I....@.....Yl.8.1c..%.&.-.P.H....

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	43014
Entropy (8bit):	7.99521569379116
Encrypted:	true
SSDEEP:	768:dFTuIeRDGROzV+NSQrTKQNWgUpBiR50luTKwAWCikGAnStGN/u1lP8XvEdvIk:lcqkxoqQcdBiBK7mkL/u1lkXvwr
MD5:	2DD7CC1256D0A2788F3770A23E64CDB8
SHA1:	507B201D19D0B6FAC362C1E9D6B1A0BAFBC97DD4
SHA-256:	4BDA2D9C7B23C9C2B71FBF70812E0FDE3AAA98D55A91EC66951722802C7EC55A
SHA-512:	DE2F64A61468AF8E7E7042BF8AE24449F51F85A3A35EEF30B867584252B566DA5B24DE8576126BB533BD63506C6DA5F67E24F18926AE9C7613AC296EEA589DB0
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/u9DetvmIAh9OuL485cvYerLGPUfRtjx70huaquRLozRz5npaqFnX6EupWUwXMY3z-yk=w648-h364-rw
Preview:	RIFF....WEBPVP8 ........*..l.>Q$.E#.!.z].8...77\|.=._W..\..PGm"^6....[..5^%....'....A..;.{.........._...k.hy;..n>}.g................/..u...........;...G.O.....c~......[..g.......~........_....._....................p.....z.~....Q...........g.o`..~..?..s._.....s...o..H.O.Q.G...\|U...?h....._.........._.......O^.......g............3?...........o..........7........Q.......................a.........o...~..g?...qOa.=~j)....g..n.?\|.X........h......(...u...\|...m.l.Jm.....U.5R..........M...UxS8.o.}.N...yjD,...G.#.~.....GC."#...SI..(..".h.......~..S"..+.v.\.,v...v.8O.....C...j..P.....O..$.}.....b.x..RJF..............{...6k......_.\"._.N".SV.....\........7z...\7.[.He..3b.b.{..U.NN..i.{n.p.....%..h..@.l...V.M..."...hH..Vc.~).R........Zr.$."...5..3UB.4K.Ut_.^..7...m..\|..tQ.V.m.7....J.V.........>n`...h....qt_..N..`f.V...-..w:...L..v.._..w....m..........}#1.;.z...'.?.No..=.{.."D.i..U..B....i.........(.......B..K..2.....Sr.E..V.....;......\|.1C/E.....TSh

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3700
Entropy (8bit):	7.940804872171076
Encrypted:	false
SSDEEP:	96:u0aRnCUerEqc7iYKx/F460A1UinDoXZrBqkElRAgaevfytpU:RaCUerpYKNF4Ha9nDotUkEgMum
MD5:	C0862283A462739D303C9D9B3E7D32CE
SHA1:	380C9A84C4A4797E70CDEE3D0A8A68750A79D089
SHA-256:	FD51521B9887138D805F079CB3CF4576BC381519EAD4F48C8B8C4C115F415908
SHA-512:	7B941B6822BE7CCC819CE970A08C2AD093DF43966DD5CBB9BF6B8DF85A77399D83AC2E7EFF6B50E50EE2563E9D762C004FD1AE06B87299D978CBBE1CB92DFC2D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/0oO5sAneb9lJP6l8c6DH4aj6f85qNpplQVHmPmbbBxAukDnlO7DarDW0b-kEIHa8SQ=s256-rw
Preview:	RIFFl...WEBPVP8L_.../..?.;.-...W.E.5..bffffffffffffuO....".(6ud.c......R9.H.v...SC....w wM{.$.a....,b..]b....ff...SG8'.d.c..#3.+...l..w....Sm..Y."333F...W@='5.^.yj.9..2.z............v6.0....s..\|.f.'3........Lv.m;.m.m.m....m...m..4i.?..4............P..&..<..!.2...@..8..Eh)j$....P...,4.....ngW.....CE....D........#.....t.&....YL.3. \|....VW.-,........$..k.....n._K+....E..X.cFT&KEVe.i...o2.s.z.................7..gA....WGV!.EPd.q..!K...![....??[.,z..&3.....9Z.o.:..@.O....F... ...=..q.....jj...7.....Zb.]Pa....xo~.... ..-n..1...-?..........p........j..i..A..r?T(4L.U...EF....T.......P`.)..#.P..V..P..)..b0>.8.9...[4......i..]X.. `L=+h.a$.....`XR.{.5n........A......./-........lp.....&..68Ruvg.....T/.W.7.....r.p.U.:.z....0<..].Q....c..j...[...l.p..8.-.....x.?.........>..... _..)s...o...........&.[.U..........W]]....Q.(`.....T...A.......,1{..6...G..^....F.6wfz.:w....Xn....+#.../G..e.A....wM,@..QYi.S...j...%F`K..lHB.d8...;..x..k..y...r..

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	11010
Entropy (8bit):	7.847908168465599
Encrypted:	false
SSDEEP:	192:SAt0XvYpn0529J+8GO8bIMJbDgZt3rbGTEmMQE/dBW3NMUtbF0:f+8G938ZRYI3KiEJ0
MD5:	D80B3ED07283321397DE506D79E0EFCF
SHA1:	3A09C0AA0C0AB693203D587EAEAEF2062C0212AC
SHA-256:	EA7F2A0DABC5A5ADAF7043D385DC4EE6C64E64256307CEF4EF5FCCDC26E7F713
SHA-512:	7022C5593CDBE82F73A9F1DDA5CFB4C51F03A5F30EDEE92B9F1F881A93C028AB28EC43A8D71913CEF2F0700A95DB292EBE8F0419278BCA4F7DE16705460F5233
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/qNvgdUZ91rA/hqdefault.jpg
Preview:	......JFIF....................................%.....'10-'--5=PB58K9--DaEKSV[][2AemdXlPY[W......./..0W=56WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW]......h....".......................................B........................!1.AQ.aq...."R..2B..b..r.S...#%345DT..................................).......................!1..AQ"2.a..q...............?............................................................................................................................................................}c....O.{.B.(...}c....\|.....Z....O.{.@.\|.../Z.k ...}c....O.{.Bj.k(...>........w.5N...K.>.....\|....ju..j....w...>.....e.O..{.A...X.~..Q...x=G.......W........:....$.....[...-.k.....51.....N.{.A}.}c......t........=...{8.~...5c...\|....%{_....5Z.9.M.r_.K...g.q..?..M..E.J_.Jq...4.......Y..TN.\@4{......X...]3...g.=..........`4.....'.'.=..4.....=...u.8.~.T.a...ju.w.......z.`...*}P.....:...i...C..>.w~....T;.A..x...S.;.B>.S.;.A.. m.]N.........i.....{.@.l....i.....j}P

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	46950
Entropy (8bit):	7.990907762535572
Encrypted:	true
SSDEEP:	768:pNpDpfXCCtmxCdRcPO5/fkZsUxorj/avXIWCT98/QtCj1t:pNthC4mwMa+a4IWiwICj1t
MD5:	3AB924292F147C69AA071BDCA37F1061
SHA1:	B2D0FE8E94AB2D85A64CF96CA5C39AFBD37EB957
SHA-256:	16FD916BB8A25DC3DCFF0E69411FD820401F626BAEBB26A605E96B52B51043A3
SHA-512:	8AE82F70AA69624C572AE000EABBD897F1C5DAAAAE2AAE9A7C80584FF1AFF26C5100DABDDB9092D58B3E1AE66D501E4092528CCA42A21FD94FBC0102B6BD4E8C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/M03pLkIu8Rp_jxkdSXjkoeW0p-TlH493P9GaK9YkY_uVm5tnkjsarW1vcZ9XDsr_-G8=s256-rw
Preview:	RIFF^...WEBPVP8LQ.../..?.............I.......!..J..?.)I....1..>.....S.......R...$1.i<.:..@..if..}p..$...,3....3$......-&...s...'u...d...ER..~..$...o.MJ.....wJ.I.....m../...;...H...q<L.a..f.p.!....5aRk.......e..'..5....D...F...f...."I.Ue.2. ..u7..K.ff....sU..9...03]#\|.i..BFPr.C/f(.U.E04....P..i..KF,$.........#....Sw....._C.....$.U......a0V.SJ...Rt...8.$)....k5.....t..... ...........w.X.4F...X)[..gd...c6........s;6bS..I...+..,X..#..;...X...Pw.,`..s...s..`...e.Wgt%...........:.].t..DY.U..1..........\.:....Z.p9...US.,.X.......G.A.5Z........$$....Hf.a7..'3......CSm...,...".n....5..gs.>.....p.4&...z"."".U...."....z.q .GED....ED[.i.z..5.v.N..QQ...1....::.X.g..O.?W%_.*WEQdDD......V....R.s..u.TD..E.NH.....=..:.8...(i.(.g8.......c.3....I...H...>.F..F`..3EQ.8.$................4......}...I~e.Y......[..;l.;.V,r..B]d..%.?.... .. ...x.\.......8.w.)11e.....CB}.K@....6...7...\|. .}...E...6...?.}..D...}...W.Q}..K..s..nQ....k.+..H....A&T.....F..pG0..z.0.{T._.<@..

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	14521
Entropy (8bit):	7.8525415109461765
Encrypted:	false
SSDEEP:	384:6aLLNbRieKueQDm9Eep0faWdHwBgjXJwRy:6aLHiLueQ5Wg7Jwy
MD5:	AF3B657F0E50DE0A91216E8D29BBA192
SHA1:	451933DF586C8616D80A7E5DF423EAF173011F3B
SHA-256:	C7824F47A12CEDDF63A07314DDFDD56C0DF16FF0728A53AFE4FF4B0194B70DF8
SHA-512:	0232C6831D29829052F9BEEE896743B1AAF58E8C3E90E076C0AC17533CDFB4612A05620E23966ABA24772A22BC23C3635522656B81CD91650B7B991D11F24748
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/L46PkGz3SqI/hqdefault.jpg
Preview:	......JFIF............................. %. .!% %%..(10-(-+5=PB58K9.-EaEKSV[\[2AemdXlPY[W......./..0WB7=WWWWXWW_WWWW_]WWWWXWWWWWWW]WWWWWW_]W]WWWWWWWWWW]WW......h....".......................................>........................!1AQ..."Raq....2..#B.....Sbr..$3...C...............................2..........................!Q1Aa"q..2....#B.3Rb..............?..........................................................................................................................................:.C..W.>.W.....B.FZ..9......._..._4:...S..O.............hu..B.Dk.....hu...U\|.....N..>.X:.A..Y\|....S./..S..O.....j......._5>....:...9`......Y\|..V.S./.4*t5..r....o5>...@..._.B.C^.g(._.......}....Y\|....z}..u~.[.O....+y..........W.......}....Y\|....z}..u~.[.O....+y..........W.......}..._.B.C^.g(._.......}..._.B.C^.g(._.......}..._.B.C^.g(._.......}..._.B.C^.g(._.......}..._.B.C^.g(._.......}..._.B.C^.g(._...............hT.k....~...Y\|........h..k....~...Y\|.......h..k....z...

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (967)
Category:	downloaded
Size (bytes):	5561
Entropy (8bit):	5.688140868533134
Encrypted:	false
SSDEEP:	96:kWmmL2YNXpcv1CMNkQtQuVqdvJqgHQ9nG7Lf4h/H8pml:zmmL2YNXpcv1CMNkIQOIvJQ9nGn4hUS
MD5:	2A9165D276DBFCADF3941160C6C3F111
SHA1:	1F03C30FE8A383E3DBB89525B7937F30E5B5D44E
SHA-256:	E820F3817D9CFADBBB516F013B83B578433A99657620F17EB632495BEC5F8E66
SHA-512:	A611071A5F7F22083827CB16C338D9D0964ED60C14C7EC71F3457BFEFD7F1C32229A6ED79BC3D2CA904754CBAC01813FD75D482C0E4095082146A12C26F4A889
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,C7e1Kc,CKm2Wb,DRmmld,EEDORb,EFQ78c,ElYdAc,FCpbqb,FoxcOd,FuzVxc,GjTCAc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,J22eF,JH2zc,JNoxi,JWUKXe,KUM7Z,Kfp2G,L1AAkb,LCkxpb,LEikZe,LRovxc,LcQwud,Lkzi5d,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkwaS,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P6sQOc,PAQZbb,PHUIyb,PRm2u,PZ1hre,PrPYRd,QIhFr,RBsfwb,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,UINLVc,ULFnWe,UUJqVe,UZStuc,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,WhJNk,Wt6vjf,XVMNvd,Y413Bc,YTx6oe,Z5uLle,ZDZcre,ZMKy0d,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,dZ05Qb,dfkSTe,e3Zld,e5qFLc,ebZ3mb,fI4Vwc,fKUV3e,fPcQoe,g6aYuf,grWkAb,gychg,hKSk3e,hc6Ubd,hhhU8,iAQMie,iLGjNb,kWgXee,kdbckd,kjKdXe,kpVlPe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,mmmrlc,mzLjxc,n73qwf,oEJvKc,ovKuLd,pQUyNd,pYCIec,pjICDe,pw70Gc,qczJ2b,qk5AGd,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t8OL6d,tBvKNb,tKHFxf,vNKqzc,w08zce,w9hDv,wg1P6b,ws9Tlc,xI1uef,xQtZb,xUdipf,xii62b,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=lDZ2Fb"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.DDa=_.B("lDZ2Fb",[_.Ar]);._.u("lDZ2Fb");.var wdc=class extends _.z{constructor(a){super(a)}};wdc.prototype.qa="K4YEGe";var xdc=class extends _.z{constructor(a){super(a)}},ydc=[2,3],zdc=class extends _.z{constructor(a){super(a)}kb(){return _.F(this,_.nt,4)}},Adc=[7],Bdc=class extends _.z{constructor(a){super(a)}VB(){return _.F(this,_.x2b,4)}};Bdc.prototype.qa="swBvle";var Cdc=[2,3],Ddc=class extends _.z{constructor(a){super(a)}},Edc=class extends _.z{constructor(a){super(a)}};Edc.prototype.qa="XMKGyc";.var Fdc,Gdc,Hdc,Idc,Jdc,Kdc=function(a,b,c,d){var e=_.LW(c.kb()?.H());const f=e?"3121\|"+e:"3121";e=_.Y(h=>{_.sh(c,_.Ug(c,ydc,2))!=null?(h.open("p","WcV9v"),h.ka("class",d?d:""),h.V(),h.print(_.L(c,_.Ug(c,ydc,2))),h.close()):_.Vg(c,_.st,3,ydc)&&h.print(_.JW(_.J(c,_.st,3,ydc)))});const g=_.YN(h=>{h.ka("target","_blank");_.ZN(h,_.WN(""));h.ka("jslog","197536; 1:"+f+"; track:impression,clic

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	74176
Entropy (8bit):	7.9956452812069765
Encrypted:	true
SSDEEP:	1536:Gs0Bn7m1EWnnvkinvpFgcEvXdwgGkEHDotAuZnlOHghbh5tBOCYMj:kyVvkGhFgXvXygFQoNtkEh5uCR
MD5:	92D639281E9F4208F083A85CA8CEDFC9
SHA1:	7F0E13C4BF4EAA97E2964B425D95C639F9C9F244
SHA-256:	4CF59358414C932FD436A5720B7C3E5B87E41C2A88C93CF76445374F8E639039
SHA-512:	012C2FF6C60C48E847FA9FE0B67531801570612F0682C9D8D39A0FE046E1C4CA6C68B7D90297D7F46B5C0A95BCCA56E562240F8E0CD0D27E96D9061E042398DA
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/LByrur1mTmPeNr0ljI-uAUcct1rzmTve5Esau1SwoAzjBXQUby6uHIfHbF9TAT51mgHm=s256-rw
Preview:	RIFF.!..WEBPVP8L.!../..?.M@.d.n3..x.#.....O.....y.?...".{v.[.$)3...~.s3....v.&.H."l.j.$.../.wOuf.[.b...ve~..D..Tu%...~..1...u.][.u.#.~. ...S_...4Ii..V}1..}..a....'.m...........J...km..)IyN.....t.]3G-i.;.G~.....:m.{...1s/$.....x.83c...b.3.}.......Y>..\|..9.@@......... .~.E..zp......(.(@J>%]d.9.m..bg_...T2.FV..}8.L...~!O...Ng^..-(H.s..$.tw...."..9o......].....z...{....!....&Y....>.....s..-U..F..MO.3..<..Y.,!../B....!~...My..Um..i. ..&\|..sg....Q.W...J..L.A.c.1...moZ.=...."...xx2.....\.'@B&..?..)J....B..........6..B@D...E..X.R...U..R4R<Z..9;.!...B."...:.<..]R.H$`..!.H..!.DB..........zW.I.J.z.)...'.......!...1.njS].....B.G..4.p.T.m..xJ..`....I=.\|......f......^....O...K73....K,Q....O}4..rp..7...P.w.s..!s...Q\|..d......y>jw... ......X...9.gN....\|..Q.v.N~......\|.......dI7.Q..w.>d:l,......'.8.P.X..J.Bz.\|xs...)%.w.4..8....f.............n.u.,.s.p..r..S1....I9^..V..`.,.d+....E{f=.U....JJ..m..e8..j..z\...X....k.../<..S........9.....\.J9.....a..e..... ...K.)

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1854
Entropy (8bit):	7.860594273249272
Encrypted:	false
SSDEEP:	48:K73PdLjWpiWSj/xqBpynVk1rzLUURy/yi0c65JP:2dLypg5HMrzLUU4AN
MD5:	A165DED0BE016DD4D3D3DDD3ECBD6DFD
SHA1:	F2C994E64D1330D0062880E85982B177EB7B3353
SHA-256:	990B7B9F8D6DE559E11F65A0941EB2D6A8ACA1E6E1BA96A1C441F5F40D63C6F6
SHA-512:	E13B89BA2600F378D0510A0441D5998C52FC92ACD268385352806BA54B6876D39EDF1CD9349061398BB6A38B2095D5F8D3109248C6A08D33AEA3FD7611F01040
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/RKt7FfLHYfXyEJkY2imqAe1BP96wjAHtm7tH_rZZmBBX2QkC_2luYj6jXlPqoRhX5HmB=s64-rw
Preview:	RIFF6...WEBPVP8L.../?....Em#9....'\|.BD.'@?..\.K.../........W..;..m#..N7....m$.Z.{...?.S.'...c.q.....x....1zA..d.Dt.._d'......U.......n.;m.BE...{.P..;.....0sK.ts.'6X._./...#..SQ..-q.AZ.......'...M..k_\|...m3.m..C.m...^rn.6.g.s..b.........m.e..R.w.....l.~..3...0.N.J.. ...#..l.2......lMb..Y\D.....-<.<x`..@.aJ.S3:+d...J.......0.P`..^.D..G...K..S.(...+a....<.C..s+..E]...%...y.).......Uy.p`.~x..Z52.O/".kdm..."........f.B..RI.<...e.....\...R....F25.JM..BfS.X}.....1..D.e^.pP..,..K....E............H...=....wuQ.2W.6........\:.:.....-...^...f...m.).i.4.....ws..O...l...R..o.Xi.LE..6l.N.......}.k..D../.(0h...2. ...YK....t>y.........(.\...2.y2t.w.c....k...C}.q....8....0...T.<...H..m....#...J....`.G...2p5...E.Moc..%.@..&UB..lBd...CE.5...B.3..p.i..1.L.fY.G.0K...n/..}H"l...x..,.]......K.x."....".3R...$.C..t.4[.'......x.x5...e.A..Z.Yv.F.]b.]....A..E.0G...&.F.p.}......fQ..k...cq"i...QY.JSV.XiT!...lLL.)k.)....W\..7..p...H..EvZ.F...A.g.z5..P...Qq.

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	14488
Entropy (8bit):	7.877375184944868
Encrypted:	false
SSDEEP:	384:i+nkZheKRIwrm/a48si3/C1UKkb/0XUTkxXqDB/8:i+nkZIK+wrm/mP0K0XWdN/8
MD5:	4544570A922C51E96CB2F1BB67A0608E
SHA1:	ED99AD69140AA35B702FFDC6E0AABB78F529E18D
SHA-256:	B1A9CA2D487FBA3195C3B53218A97328A31C10F45686550704957A8913BABB87
SHA-512:	A79079CF4B0E3FA0B91F61C0AF75DA7F0E947B09FB0CA9D7FC2ACDB5E2A98604B7AE78EBBAD6AF3DF95D8FA54EE970DA1D64770384A1A273311A81D7B5B13E20
Malicious:	false
Reputation:	low
Preview:	......JFIF..............................%%..""%%%%..'10-'--5=PB58K9--DaEKSV[\[2AemdXlPY[W......./..0W?57WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................C.......................!..1AQ..Raq...."2B...Sbr..#3...Cs..4....c................................(........................!1.AQ"2a.....q............?........................................................................................................................................................................%...=..5.. %...=...X"._@...>... %...=].CK.@Z..Od.......7.ib..],......~A....o.l..t...::\|c....d...........'.<.r..D..#.._..)....`7...G^.....z..T...\|2......./..:?...9}..u.....I.s.?gFu........_yC.O.G..1.yC.O.Nk....5......1.yC.O.C.........7.................."?.....?.5...M.q.s t..V+.G.O.F.......S....n?.G:......m.k.m..g..q.7.U.O.m.K......<...S.y.#[3.M..Q..E.y. .c......YH..hy..5e..g...U8...9>.,....<...S.9.!.?....^z*...~Bt]N1......e /-.S.y. .c....... ].c...

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2966
Entropy (8bit):	7.927274526033156
Encrypted:	false
SSDEEP:	48:nvck6cvWfLha8+nZJIbAerAOMVw3WdOEQPcWgMh6xR59Nb+8gKIzHmIZTl:nvclS4vIJoAsv5EQP1VGfLIHf
MD5:	C9E2532397F8A360407440DA02DCB395
SHA1:	7AA596D1C34A32476D17B6CE2E2B446328373338
SHA-256:	1B64CE1418BB67AC02B6BA86BDE363B287944B6777FEA198173AE09156A55B3E
SHA-512:	4AAFA0C1249B6FA89F3F74CA88AA305AC575E90EED3AE4812C7DE9E48F0C08ECC6C2236D0F4E6001E86AEC5B26A826D79FB24408F557E472A009B062FEC5363A
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?....i...NR....1..J.c...$...%<....yd[.^Sx.$p=.........m;.1.N.m.m..l.m..7....1Vl;.Q..Xe>..m..3..Ie.._l.3..5..-..C.$....m.m.m.m.Z...+;.?.tnm;.9..._.....m.m..mOl;...y...A.Tv..s.l......x..s..X.:.N.Yi".?....f....g...4..l.....s.:.Q..._..zI...NE.)....\|c_$..w.h......S..B...)).Q.R..pp.....\|{...h2.......[\|8.w.J3..C.#.Mh....~.gh.0D...m.m..Y@.d....~....'.......d....(...0Z....;.:.....#.y'?.W0.#cp........+o~...s/......H.I....K.b4f.i3..!./....>......$\|.t...q.ql..lO...c...V../.5o.>q....b..>.T.......c1r...Q>.u.v.\|.H0......TF>ix.j.)....5....!.3.XbW).4..M6..3.Ue.omi....\|...H.%s........D......oH."......'...A[.?c .._6.284...y...{S..$..y@n\....1......-...$....qrFe3)i.Vl..E...R..............fE.S\|..a..@.2.Er ...L..K.ps...B..$M+..Q..Y.O...J.=..J.9.........L.....a.#g!9...)...bv/Q.)......i....H*.4.e.p.Iz#+...u....$.'Q.W...&[SZ{J9$'...'.Z'lx......n.,...<n.'.X...8...Iz..P.]...qI.r..r.l....,.U).1a..HJ..)..c..)....X.T).rN.......9._

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	148
Entropy (8bit):	6.523312318185472
Encrypted:	false
SSDEEP:	3:clyg1ZreK5l1GzQ9O9xbSj0hGqBBs+dK484MVYQkGAKAJlJwBNlWn:coWZaKBUdSghtBfI43M0VJlJkWn
MD5:	F6FCD4D43487A3BF8F47A592569FAFEB
SHA1:	22B1887F1C703EA9ED827A59B02AC7FCDF79CA54
SHA-256:	C6AEC5614A1193CCECA829712C4027C6F1B94A106395D2223229861AE110A9A4
SHA-512:	98ECA13BC52869440EE4319FD09AB3C076EFBD51F769052B8C85571236355E50D5426F15CFD67F4DC1942D07D72A0BF0706ACADBDFC5CD2082645CF746778443
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/mw_NfsvKM8m6RPv8Fz2GQawCOsqWv010saMnc7zbWalMxuaA9IY8h7E0VMieLxSxAFB98NFeYqbFrXXq=s16-rw
Preview:	RIFF....WEBPVP8L..../......j.....]@G....51..C..G.3..<...w..#.O....{.P...I).......T./]......}..1^..\|.~.}.B..B%.JP..%.\..%..$..K.Y,".\../?#..

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	61748
Entropy (8bit):	7.989183763154298
Encrypted:	false
SSDEEP:	1536:Vy35XrfooAdq5fzwLTM08K+H5rWlyRzcoMo:49fdX5fUU08KiY0dh
MD5:	A538AA1A5C81C10119948446E522D703
SHA1:	791658E4C5E7B65CE030F671D79E5DEF60FBC421
SHA-256:	BA4CB75A6480511B005F33E6B0D8C6931DC3EE2001E4136F4A2F6AB4341A4720
SHA-512:	EAB184503116A9B01BCA3D052A5FD60C94FCC985BD8AD34F8A4909B07A060D429CC607EAB72A22A0CDE74F745F44D436E5ADF91EE6D7A0B1A9D79C6AC7329628
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/OmRFgoSS-iZDwzkMpygYEjbBkpY-_fpE2CEiEgj2KG0yoj2DcP01fbGMutWEf8ip2tiv=s256-rw
Preview:	RIFF,...WEBPVP8L .../..?.M@.$7l3.... .`IVJ.....?I)..?V.2.a?...}K.z........"."..D........to....iI....s.nE.....<>.......o...{....A..F.2.?......*.....%`<.......P.7....c.....\|]...m....Z..o\...Yld\|)rOU.g.......Y..2.....uy.4.o.x.q.E....D.A.0......nq#.....tC.H....\Oz..$O.q\|.....F...`.TU..HA.....\.m...pe......h.mIU..+c..S93s.=#........L..-...,..M%f...$.JF....[@....8!A.....IVm[y....=.>........L..A.4.f..8k........t......z...f5.S....B.a$.......=m..j....%..^.....6R.e.W......,..YI.#&.......S...k~W.o.........v\..M.......w..........?.!.-.^e.j^].........G...=....?..#...1.7...R5.K..R.%l...........xx.>h. #`h.&UN...S.x..O{c- ...9...A.?..o._...T.d..UK.?..K...q......,..)..j.{..L}....?..3.G.....y.]..Pw..d.r.X.....)......p.\|...&.D;...v(K..?.<6.mgZ3....5...<.........;..h...'.p...v...{.,5.-..v...<.......0.e.$..B..w.J.t...8.^S~..N.'.......=t8.o..c.y$....%...&..0,.....P.8..?k.f.......u.......s..........;..0%r....M'l...<....e.....a.....iXQ.J....J. }D......a.bEc}w...6

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (642)
Category:	dropped
Size (bytes):	5130
Entropy (8bit):	5.420717119791416
Encrypted:	false
SSDEEP:	96:kdvJsQfBcwJefGbWpAc4sc5+ll2Lnk9cCs3F8wvMAyj/Wiz+M3OwIOG3ITYl:QveQfBc0e+b15kok9cB3zyj/Wiz+Ea
MD5:	FA29F5BFF02FEC73797A3C13EE9A09C9
SHA1:	698D31325EE3BFFF377748D812ADDEEB9B4C1274
SHA-256:	9C407A940D30224E641CAA45E8D1D1491DF5DAB3FEAAAB85598689BAF1D904AE
SHA-512:	F1E253EE48B5E8BB11526396F5592EAE45E2A2B066B113121BC7F8682629AC70CE6518EC20091E8FCD5C0F6C3713710F42745DF96DF1724C50FA5309B814B7BF
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("ZKp19");._.Dic=_.ll("jzJ2q");._.w();._.u("s48s2");._.Qic=_.ll("sG2nqb");._.w();._.qFa=_.B("b7Ourf",[]);._.u("b7Ourf");._.Ric=class extends _.ur{constructor(a){super(a.va);this.H=new Set}};_.vr(_.qFa,_.Ric);._.w();._.rFa=_.B("wW2D8b",[_.qFa]);._.u("wW2D8b");.var Sic=class extends _.Ks{static Ja(){return{model:{xB:_.Ric}}}constructor(a){super(a.va);this.H=a.model.xB}O(){this.na().find(".KKjvXb").Je(a=>{this.H.H.add(a.id)})}W(a){a=a.targetElement;if(this.na().getData("expandedToggles").Pc(!1)){var b=a.Jb("id");a.Jb("aria-pressed")==="true"?(a=this.H.H.values().next().value,this.H.H.add(b),a?(this.notify(_.Dic,a),a=!0):a=!1):(this.H.H.delete(b),a=!1);if(a)return}else b=a.Jb("id"),a.Jb("data-menu-when-selected")===null?a.Jb("aria-pressed")==="true"?this.H.H.add(b):.this.H.H.delete(b):((a=a.Jb("data-previous-id"))&&this.H.H.delete(a),b&&this.H.H.add(b));this.trigger(_.Qic,this.H.H)}};_.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	47404
Entropy (8bit):	7.958298502519838
Encrypted:	false
SSDEEP:	768:KmZDMhc6gOkcLPTiasY0Q0MKaMzEelJvQ5/rZyVqkP08L6d:KOghx3JLWasY0nMBMzb0yVqks8Gd
MD5:	2ED4E0E474ED1A3866E5A18ADE7F4F4B
SHA1:	36CDC446E4202CA16D48959F90419545AD9C3516
SHA-256:	94A2D29CE8E95DC341668E80DFB084EA023DAF26F6A6EB40BB54ECCF4D7CCC38
SHA-512:	E3EA2960905E45AA86E56A0C84B27ACA88B6B777B9D0C5B9BEE3D5DD21C48C8F109EFEF489F497D7646B68FA2E28A1E136A141F1117091F339C1F911D3C67777
Malicious:	false
Reputation:	low
Preview:	RIFF$...WEBPVP8L..../..Z....$I.z.;....w..".?.X@g.M...".....^xQ5...6P.f...A.0.......)y..H.......Z..tJmf,...P.Lw.WW....".g...6....@.B...N..B....C.m?..`0...Pu....m.%../.........oE'x5....{....t.f...=D.^.k..}O.T...D.!...B/...m..f.bO.o(e...."..p' ....k.t...u...E.~.....f.5.......)g.'eW..'.....ZKp....A.N~n...I.5..L&H.5....f.>..U[v.U..t0.i.%.Uu]..D.#I.$.Q.......A".h.V.}_`.H...[....l...Vp$IR$.1.8.Y....m....Y.'...`A (..c.1...,.....Z....%...n.X.. ......-..o.t.....f..G..m.hk.....6.4.c.jhA.6....; .a.{.%.......v...........6.6!.....7w.h&..B........<........7.6..h.P..(.Z.....o7.M.m.uL.....O../..<...@1..j... ...4.........;..C.i..2...;........................_N....O.........................m..Pv..."..:..`\|+?....h`...p...~.3..R....`.,...:.@`....h3.,.p....C.#.X....M....Z-....b.;.xo.Z.`..+m.x.".A.......p..x....(.D...4-....b..B..q..p.w..A.6...g}w.....0.g.mQ.Q.}......V9...r.5.......]..1c..7<...#\*3.....y.........B.y....K5.Y;.Om?.).y.]_q.."4.%.\....[.MA..N.~E#...B..?.L

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	43014
Entropy (8bit):	7.99521569379116
Encrypted:	true
SSDEEP:	768:dFTuIeRDGROzV+NSQrTKQNWgUpBiR50luTKwAWCikGAnStGN/u1lP8XvEdvIk:lcqkxoqQcdBiBK7mkL/u1lkXvwr
MD5:	2DD7CC1256D0A2788F3770A23E64CDB8
SHA1:	507B201D19D0B6FAC362C1E9D6B1A0BAFBC97DD4
SHA-256:	4BDA2D9C7B23C9C2B71FBF70812E0FDE3AAA98D55A91EC66951722802C7EC55A
SHA-512:	DE2F64A61468AF8E7E7042BF8AE24449F51F85A3A35EEF30B867584252B566DA5B24DE8576126BB533BD63506C6DA5F67E24F18926AE9C7613AC296EEA589DB0
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ........*..l.>Q$.E#.!.z].8...77\|.=._W..\..PGm"^6....[..5^%....'....A..;.{.........._...k.hy;..n>}.g................/..u...........;...G.O.....c~......[..g.......~........_....._....................p.....z.~....Q...........g.o`..~..?..s._.....s...o..H.O.Q.G...\|U...?h....._.........._.......O^.......g............3?...........o..........7........Q.......................a.........o...~..g?...qOa.=~j)....g..n.?\|.X........h......(...u...\|...m.l.Jm.....U.5R..........M...UxS8.o.}.N...yjD,...G.#.~.....GC."#...SI..(..".h.......~..S"..+.v.\.,v...v.8O.....C...j..P.....O..$.}.....b.x..RJF..............{...6k......_.\"._.N".SV.....\........7z...\7.[.He..3b.b.{..U.NN..i.{n.p.....%..h..@.l...V.M..."...hH..Vc.~).R........Zr.$."...5..3UB.4K.Ut_.^..7...m..\|..tQ.V.m.7....J.V.........>n`...h....qt_..N..`f.V...-..w:...L..v.._..w....m..........}#1.;.z...'.?.No..=.{.."D.i..U..B....i.........(.......B..K..2.....Sr.E..V.....;......\|.1C/E.....TSh

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	645
Entropy (8bit):	7.631563068517978
Encrypted:	false
SSDEEP:	12:6v/7ihaL0Z6T2rkLv0cLSbLzKlRv+reS0TZPhnv8NuKS8jrRJI1b3g0hfue9:riS+v05bLzK7CmTRhnUTJjk1b3Jhfj
MD5:	EA2722D3B676D5CDD4F7225E65695112
SHA1:	97E5E94CFF5B62F60BA76C7DD9F606304AF8B10C
SHA-256:	317E5FDAA14E548C0045D5E662709CFE0B692E0384A8396CF22054BF0A1E1C48
SHA-512:	BF06CE48B306A0EA13EBC7BE92CB56440DDF1C35C214BA7C164DECFDA6E2E7AAAB31605196D0690BE4FF509404701CA620C504A5EDF0C3E6A12C6FA5A73C78DA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/avatar_anonymous/v4/web-32dp/logo_avatar_anonymous_color_1x_web_32dp.png
Preview:	.PNG........IHDR... ... .....szz....LIDATx.b .<\|...P\|.h(.E.0.....\|.x.......a.....!.....q{.t.U...(.A.g.....w.3,&.s.~..h2.....Ip=..4!..[.................r.p6.R......R.....19]z.......%.E.q..........6".#...9..Y.n.U.ZU.ZMu:.Q:t%..y`<.+.0T6.=.i.0.e..a.f...b.\..Ax..e...K...$7..BAk@.\f..}bG.K....\Nk@.T.ha.+.w.%x.5.....k..OJr...$Gd....,.0....n.{..b........%].....K.....?....f....w....j4...@%p{?...\|>.....hH.h.....r....h..s.J..@X.j..3#h>.`@Xw..l.K.;).c..>....V.b. T....0B.4....%G......a[..P.........G..B"..!...m9rj%.....E.AD...0...!..y``....o.z...1J.FF,..sEr3.s.&....b.m.+.........'.m3(D..{..:..So.Ja..*......#..'....IEND.B`.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	5.233260541314526
Encrypted:	false
SSDEEP:	12:kRZTFMTMi3K/Aa9iJmNfoK/AaeiXgYisumK/AaoA2i73BndrK/AaoiN9DkbRN20:kzeTZGElG1XgbmGP71ZGnN9Qrl
MD5:	DC3CF012C00CF1501227D66EDCB9041B
SHA1:	605993EC98CD57D87EE6400EE76FA0C4E14B0CA1
SHA-256:	11FC13767F74EFA2CB620A58F3291FCA76C3817DD3B2CF96244211F0C5BE0AEB
SHA-512:	EFA0BD9E422A4046392BFD82A17A90CA45B2FDE04F883F1C522B8F1AA93C55BDC04CA4DB5BFE573AFF2A269DB4D0DAB4080A1B3D3905BD7A971A3DC4F5A90DAB
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P6sQOc,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Z5uLle,ZDZcre,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,dfkSTe,e5qFLc,ebZ3mb,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t8OL6d,tBvKNb,tKHFxf,vNKqzc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=yNB6me,qqarmf,FuzVxc,I8lFqf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("yNB6me");._.Br(_.WCa,class extends _.Cr{constructor(a){super(a.va)}H(){return"yNB6me"}O(){return!0}Xa(){return _.ndc}});_.jr.yNB6me=_.sdc;._.w();._.u("qqarmf");._.Br(_.HDa,class extends _.Cr{constructor(a){super(a.va)}H(){return"qqarmf"}O(){return!0}Xa(){return _.Qec}});_.jr.qqarmf=_.Ugc;._.w();._.u("FuzVxc");._.Br(_.JDa,class extends _.Cr{constructor(a){super(a.va)}H(){return"FuzVxc"}O(){return!0}Xa(){return _.phc}});_.jr.FuzVxc=_.shc;._.w();._.u("I8lFqf");._.Br(_.MDa,class extends _.Cr{constructor(a){super(a.va)}H(){return"I8lFqf"}O(){return!0}Xa(){return _.vhc}});_.jr.I8lFqf=_.xhc;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	96244
Entropy (8bit):	7.995866684143568
Encrypted:	true
SSDEEP:	1536:FHK/hRcwAibBCWo2Kr3itjSXkDt6gtYoRrLjNB9wm6h1mWhK8Lsr99iKw6Y:U/jcwt+2vtj3DkgtjvpwHzlsAs/iKC
MD5:	466B4A5FE8657727A479600B7EEB8FC4
SHA1:	9FCA656E630B6182BB492ECF12C66B3D32802AE3
SHA-256:	E27062228CE45767350AB98F35BC7566D3636177439EDE0317E640C408C7FC1E
SHA-512:	F6B4C24892AA8B090B0539C127AEC8C6D4A85029F7E9769E4FD942F75A20B2B68A525BF7F7A338B928E8CBE32FB0B067AA8BA4B5EAEB58FE01406B0BDB8FE49A
Malicious:	false
Reputation:	low
Preview:	RIFF.w..WEBPVP8L.w../..Z..8l.F......._.WAD.'./%._.`$.../I...M...U..'t..t....N...n....M.^...IuW..... .+uR.....z....s....Bw.._=.mI%.....,U..t..=..b....m`N.....H...&...'.$[.m.....\|.r...`z.c.7l......~......o......N'..x...FC2...z.I...(z..~u..2&. .......Fh....$..I:.!>B.....m.a..-M..H.@.l.i#..............,..........<...-.+l9..-...,... .. Uqx$..,.....t.sw..k..97~..d...).@...2.[..../...?ftne..p.i.Msn.s...... ..%!.;..T.5.U.rc......!!tX.....lb.\|.W.N.;......m".&......ia.8T.............QmYE.O.p.>.j....oXB......-.....%.O[N......!......!.X..d.).iNe_..7..K.^Z,.'{.%.V.6..g..5@.?it..R.....k.{..m2.o...!....>...JUWE.....X?.....sk..U..p.....T 7..S....>..Z...G.N./N_Z}...TU).a..{g.....`........{....................Z.L.0........@.V..}k9.T.J....4H....B.bb.X.}z.S...3a..5J....u.j.....h.i`.H=.!..m&f..y........2..$...`]...:..82.l[.$O...>.W9..'.....c...`0....P.......rB.HOF.3.(......?......C..H.. >..e.1e...........W.....?...]..r;..q....._..O..dG&....,.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	67110
Entropy (8bit):	7.99376089320763
Encrypted:	true
SSDEEP:	1536:+E/rJxmuc7ObLnKhz3b/+QfSy1Mpc30do4tZD9v8a/1L1RYxSeXFN:1xmV7Qzq/ZfSy1Mpc30dhZhUvtXv
MD5:	0118C979F09681E54BC819E335DD49DF
SHA1:	5B1E5B2AC7F8CA54BDF1824555A0E5B13393E0C4
SHA-256:	C56C3C3829E186C6A2DE785E1070173A24C45F46811554F3DEF015179645B357
SHA-512:	CF992FECA65F1A07C432A773118A5C868CB6774FD869335808A78C0D4523E7B729C1876CC68C3024153DCDC8AFA047416113712FB90B495D3CE898E1E196A7D4
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/dGKZPosymsiOkBIv9lkj8dOYgCLPu1QhtkLLLERmH1GO7uW4MrbdUgQORmzy1w8m6z2pvoqt8nU=w648-h364-rw
Preview:	RIFF....WEBPVP8L..../..Z..8l.F. .{...x.$WAD.'....G\......l..6......./.Z...G\|>6.. .I2.7Iv..!.RI..>E..J.....$....E..r....e/R.....'0..V2.......b./0&}Y..aU.&..N.UlFm.@...v".$G..........F...h$.D#W....$.......J...5.....Kb..,.AAr$I..;[1..._.6.........~\.S.6Ye.-.ohR..If.d.Y..C..).......^.n\|...n..&..)#.4n\|..j.OG......Jr..!.!.S.7...\.....%.,<S...yS./O..%.....g.......v.G..U...TT..A..y......%.#Vl'S3....Tl.i..Z>n.k....y.......m.H.<..B..".l).j!...V.kNv..mg.Wh...'.R(&..x....$.........~.G...L-!@.i...L.-..G%.E.-..'.f:F...w....}g.6.uF...l../.n%..3...`..P(.(..........N.......JT....g..!.......L.t]D.B.P....a..'...x^.....?.....f.WG........p..4..T.N...m..F......l.P..0..q'@..0...?7..."...\.".#s....Lp.Rn..?....R._.#..;...XK\|...0.....Z..m.H..c......D....V..Yb.s.~V%."6>.Z..'...H..>..*&.Sl.F6...7h.].6..G...k.{VVfeVUfUVeV.f.Wu..v.uUWw..wU.....eUeeefee.gVf..\........+........f&..^~...].y#.wM..............7..Id.......DL#.'..=x.<.[.t...[.,...o.q...1.p.....c=.5..A."X8..q...

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5494
Entropy (8bit):	7.950612905279893
Encrypted:	false
SSDEEP:	96:aTpf5P+tQw1iYmkpSMEm0HoAkxMMoxQE1E5RkaojlmKT1KBs6oIFEV5oy6d08Ug:IHPmZ/pzxM1Y5WdT1uxw8d0rg
MD5:	6A4A299F98D865AB9AEC8B41F71A952B
SHA1:	A30DAF73D1508A18247CB806D219C3555629A6FD
SHA-256:	789DF5BD08E7F68C5844C4765A78D52CC31B3B1C6EECA8A012E2ED38DAB5995D
SHA-512:	82E3911CFBE0147A9D7FB59B8535FA441199B2802F4B52EA9A6B5A21897F7F9947D380931D1D4CC90B2E06FC9D21EB32263C482DBCACDECFF6678E248B80BC7A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/BmUViDVOKNJe0GYJe22hsr7juFndRVbvr1fGmHGXqHfJjNAXjd26bfuGRQpVrpJ6YbA=s256-rw
Preview:	RIFFn...WEBPVP8Lb.../..?.<...$g'...d..Ubffffff...........;....c.9;.9....e..6i.'4..Xe..z.-.a......b.<y.A.bK..-4e1.,.OK.I.C8!vC#.&Oh.l... .\eF.".\F.%..lK.@{.c...1Zm...\i..U....N.p....l.Us.=....#..j.g W^N ..3.......K.... .w.$.m.c..k.=..~_.m.m.~.....m......f.....m_..m...ls.m.h_.i.....d.......=2...).w..b...c...Z}X=.8.~.76....W.Y.{.u.....s_.gU.a...z....G.......f=5`n.b!+)!...p.Y.F..j.I....Xp....G:.e..fhhs...........C>.....+...Gv..f.b....G)....r.....M...E..$..VT.......v(.!Rb.#..[H<"....4K?f\...kc.`...$}."....;.T.h..q...$"..-....r.T........~.w\!.p.H.m.`8y.....\3K.rG.gD..Sa9y#l.B..~,.P8"..2rh>.......N.>-.........c.5......i.L'..fD6...v.r.4.yzx{..y.........3.Y.}3.N.F..>E...%.....O.]."......u.m..zru.F-....'\|YOF...n.XO.[..[..Iu.pB.rU...O..8Tc.....l'..v.!j..#..v24.i5K.....92 ..dxk)q..q5.V.n.t..........W../.<v..P..jR.'xo.Z.*..9l..#%..;rh.+.r#.L.`g.s!..G.{w..;.v....c...9..P."..W.3....=.....B;..h.....y..XK.`...4..`.4...n......N..F..%i...NJu..

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk4BRY1LvFEvhIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2192
Entropy (8bit):	7.902885558861517
Encrypted:	false
SSDEEP:	48:UEv/3YCV75otukXiyV/Q6QElCV3ucHj3+SLnmLfcCu6Nroa:R/ogDA/QgW+cHjOSDmLfcCJrJ
MD5:	8D56135121FE8A8C530E5416F649F283
SHA1:	3DF57B6F89047E6320F25A81F52223F89C15FC0A
SHA-256:	342DD87911632EF5234582A185F6EEC9D6A297F549ABE6BC1399D6544514E48F
SHA-512:	FAB9D23CD2C1A9CD52219421FE3F60A8162EBCF8DCC3C102C0E30CA1FB8AB7ED57EE07F43E514103FBAED133E8834A170953795DAB97DB20BA86943F71199769
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/kMofEFLjobZy_bCuaiDogzBcUT-dz3BBbOrIEjJ-hqOabjK8ieuevGe6wlTD15QzOqw=s256-rw
Preview:	RIFF....WEBPVP8L{.../..?..P..#..yz.....MNS.6 ..6a.N.n"....s./....e...DD.r..k@..p..........m..M.z..1$I.....S9gq2.k.V.d..^..s.!o....V..O&.....$.r...ffffffff.effff..u.....V.a.Mf.+....J.+XK}......e.q6.;rT.O........{.I-..Cc..........f...F....7r<I......lVe/y..m4.z...m.t..`...S\...l...O..G...:.......1".... .)3.].".......YM...t......3...f.)E.F..=&m`..)..G...f..........S\|..^..A.......b..{....\|.,I..=..C[.4.......c`...$".....$@.e....s...,S.5....^6.....P.....U.....E.....z..qw...(..M.PW..wN]N....t...HDR(h-S..r.8n:.ma.Q..8...x.....?..b.8.d...`...JG.x~...o@._..{./.\.D..-.1...n..I....@.....Qw..Qk....X.N.3.t...+.F...&...)...>....'..^...)Q.C.8..v>.p2.$.........L.H$.gH..;...]...#.F.@U;3H.:..0..l0^C...c...R....K..{..:.%....#r....k7a$.\|..;..u....t.....Y,..55.)...C......y'??.)Q..81..;..0kh.SpB...~....s)R...t9.@....X....`....)^....!t..`..2.q.....-........G_9......9]N.O'..)v..Dn.=.rP...*..RU......;....]b..vF.......A(.mi..>.\.9(^..F....&!kK...V.CoU

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	51938
Entropy (8bit):	7.996921682198692
Encrypted:	true
SSDEEP:	768:Az8PmM0+NA7KBZscRU+FeUTAyk+c7IExDBMjxCptVBj0W8l0c1xAeztj7OXJ2dg:M8e9+NXBZBYUzE7eGBj0pl0c1x/ztnBe
MD5:	53D851F83276928FEBCE24D55E32655C
SHA1:	CF31F7BC145B049105C2FD3ABA38DBD72A054CD6
SHA-256:	23A3E9A91FA897E413EE48BF7A6CF59B3147DBB353EA710D99A3B2CD2ABDF2EF
SHA-512:	BCFF7C954C59ABB6F5BA42388E6ED0CF368526CF55C345157C2D44641E54C8E69D910DA8508B7430C82DBB2785B42304FC7D5E89C8F38DA725AB94AF42765F80
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ...........l.>e.E$"../......fn1...;<..........Y...]>.........v...]]-................u.........?B_....._............O.w........~..............o...w.....?^....?-....~...................4.........._.o.........]F..........k...O..0...G........_............._......W............7.G....~......s..;_............g....uO........s68+?..6T..g....8FK....`/..+./k?D.O..,xnY..+6b..5.Z.s=_".t....T.}...w..}.Q.NU_.?.{....if..Z.p...B.c.q....f.b...0..q.EwN..64..5..H..iv^.{....(.w.x.;`.ieQ.....8......X..w.....l\|....7.c...\|..W@`].^E.hui...X......".Q.}.g4..&...)..f8T9....H...A...T.\F.`.......B.\|...A.2d:wb...L.et..z..$-......2.,.rI.".....4.[V=`!v1..fT.7..T?.$...\|<..G.t..G #.....!GE....P..L.W..3.~.m......O9z.N.{X....(...$G..$\|..SCH.....=C..mo.1.Ty...H..W.QI..-W.w..F..B/.%?.k.....N.c.`.P.W....b...V0.s..e..t.Z....l...[;&@........t.6l;h....L..Ti.?"....7.n........Z..ZfS..Z.....d.;?.Di..\._.{2.d..kF......m..U......3.....h...9c8....4...".\|.#.#AQ./9..O.....t

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2042
Entropy (8bit):	7.893202627206632
Encrypted:	false
SSDEEP:	48:vxZ37NhRPOOIh+vVgGhDtwOD+cEc6mubyd+Q+JvTbrJk0BJMgMB:5Z3puNgV9wO1Ec6mUTQeXrJXMrB
MD5:	A708F11B160D0B4F22F6A4A3825FD23A
SHA1:	A792D8344847BDBA699985D7B68232CC50902558
SHA-256:	7BDA762AA4CE569B542BF3B9E2673D7E0B02C0E25D92E20071D57E4235C040B5
SHA-512:	6E2A9FEC9BFE6D020E8A7BF0AC6D260F2922342637733B35093970C07B9DAC840831FC05A55C9C805DFED335E7A2701EA14F37B589F6F36FD30F4C0122E58BC7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/vIMymGDzl2arE2styucCrIO35Qv6yX7iJJYZGmIUMXXV_mT5OyR5MjpkfHFB3tc8bA=s64-rw
Preview:	RIFF....WEBPVP8L..../?...5.A......!"&.?.r.+m."Y.l\n."&%ww..Y......w.._..w.(r.;`"d....m.{..l.d.M.V2`2....pI...^.N.fd..o..fX.tm\|\"..R.+..\.....V....p8..i..I...`.U..m.m.t......=.....T.m.=.m.v./9{.v.Zs.N.v.m.m...h<.6[...m.IR={.{.o....:...Crwwww.j.. ...hn.........=\|tf./@.5.7.....~......&..7.i$.Q.'t.l~(..o3#..lk.`)A.,.I...H.......Hh......V.........4..X.pp.W.:B...i.e..9.<.ZU.Yz.:F..f.S......;.t......y....i..,..UJ.D.....b......JC...[L.qM7.2...A@.g..w..+c..,..R$...!^).D.'.3HX.....H.'X..L.!..(#A...1..)x...@......4.(b..&T...a..3I.T..#.p...U...........4.!....PY.....e.F0...I!....B.zA...FM.{i.W%.R.E\...#. .E( .=..b.qA.p.....Wwz}..k`b......E..U........a....CU..t...fD$.M ....ng.......F..../.....h...f.....,.....~go$A.....'..{L.....`j......o......00S...G..i...?K...\.@. ..9.3#.!5....a(Z.0#P..1X...in..lP...I..`w....>..........,.#......./.t.t.~eP....4W.t..[.AA.!..h\.E.}..E..q......r<..C<.0..4.sz...+...P....c ..@.......%....N..(.5...pi..^...x}..:. .#..D~w....r.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	152338
Entropy (8bit):	7.99680837515417
Encrypted:	true
SSDEEP:	3072:DBhfrLws0bafl9qv8HpvQjjyuuOTj/9JZ1Ir0nb7cVEg/9cmxUkYcqzhIw:dN0+feoIf9HTj/9Tar0PocnnbWw
MD5:	C2188F26C02425D96A7A0485CA85EDFE
SHA1:	944FDEB7CB0E47CF8373CEE879A9F25BC9042BF0
SHA-256:	79BBE323BBD34E080A611BD696204525CB6A81DE55A788E08FBE2F9ED7B3863F
SHA-512:	7ED04A04000CEB3174D5D61D83AA476282B00C72239752401706FFFD5F370DBB57FF6DB8739051442C4BF42DAB0CC503CF572F260612A9BDC38B097BBB5B7AF0
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/oKz8aRZyiwP5bLJkwlACQ0ZGq_GPxpNi8wbcE65I_PFHBqgu1xk3T_nTff7urKZisu0=w648-h364-rw
Preview:	RIFF.S..WEBPVP8L.R../..Z....$.mj.........BD.'@\|j...m.7...].c....{...?....8.F.Oj@..S.Tz._.R.`..r..$..4.[k..;a.y..p!.t....q...{.Oyh'.....a.......I@%..:..H .:.] ..\|....A..I~YG.w...9-.... .Z..Fx.lC=.$........9u....9..@...:".I..,..8.R.~ .$in.X..w.rV..!.q[.....R..Z.$9.-#i....\|..o......=-...]...][.\.....u._.E.,.U'Z."'.l....[.....5..U..O...L(MA(.S"HD.E.HL..11R"U..H.)+Q...R...Db..(.H$....s..2R.H..D.....T...A.MoQ4.F"...Z.........G..i.lMU....C)-...F.o)}T.%....-.'V\.S...mg.!..D..e. .....P..(J.....Ig.&.&(k.[.7..2q./t.].....I..D...E...D.%..n......\.....={g\|?;.]...<..:.xik7R.$b..h. JJ.H$...n.<.pi..{.....8.p.].....E..H.D.TA4..%....p..0@....8c..\|..L....H$B.....,M.!@.4M0..`........1...x4.6*.,Y...,1...X .w.....;...X..K....P......d..D"APF..PU.). ...M...0.o.N.......##..8;=.?.g...T.H....K.1.od!../f..-j...)c...../.'O.0...:...U$X..2-.P....3.....3s.,..;........k..xL.=(...R...l...t.N3.d..2....qr.1.....0`........%..[...Zsi.c..k`.8.....1..?....u...E.........a.O.i..n...rk

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	90462
Entropy (8bit):	7.976966393333891
Encrypted:	false
SSDEEP:	1536:05GnkNveINsxitIW2ld1S3b71IQb3xRvc45JlNE2nskaunTsX:05oasxitIdd4lbhZrJY2nPaKTe
MD5:	9242E084DEEAAEEE9A7DFC679B51E9CD
SHA1:	891D6A2F63AD389C0BE6B690F27FC8BEC7ED251D
SHA-256:	F528C0546EFA7DC973F8878D23F8975984C2673D9ACD8FAF141A846623F8273B
SHA-512:	477C7851CEE450ADE6FE833C9B3EBBCF427203B56A80A432B86EBEEDB0B62F743A7007C656303C9DAA7F28CEF533F7BC9B302EF32A183ADE7EE0C2847623EDC3
Malicious:	false
Reputation:	low
Preview:	RIFFVa..WEBPVP8X..............VP8L.a../..?.MHl.H.....;..?....".?.$.@.If.b.6I.i.:...X.. ..8.x.Qg ...u.\|U.....fZ..W?.5.........2K..~}/.T.....v~.m..e).+.o]...Q.......O.xB.Z.-?.?.m..~.j....$.../...K.........[.$........\|..j...[.!.<7.'..+.[.......]..K(...U.2...s(6..^.....p?o[...8.....u..G......I../.$.......I.".....5....s.w/.k ........hl.}aI..h....k.P.".dn0..V].I6-Py.[..$...P..T.n$I......bz...EP..i.........l..I..x.....F.<..9....&..:.4.H#B..t(@...5....Z9.t...$Q2(..._..6J.x.......G....nT....:uB..i...a..!..N...}`7.s....h(;'.....T4..6.6X..!...(.FS.;.s{..3..;.....*.s..q..WC.~.{u;<._./...B..~...%.......l.q...~._...Q....i.\|.P.....`...H.t..c!.a/.G.G<)....4.3.N..j&u.&........6.{.......N....z..u&.Ssrj'.4.7.....b.Zp...`aa.....~.....Y7..b.G;.c...+Oy.......h........Y.I[.OTJ..P.Q.....,...c..F_.....x.L..>..k.y(U.q...=...-..r....:..5...T....I...8.l.M.O...<.rQ.q. ...;&]....N...1....}i.....)@Qc`..d.9.........,....w..N.....y)....9p...G..j.p.>...qy.d.U..`=s!nO.....p

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2353)
Category:	downloaded
Size (bytes):	640560
Entropy (8bit):	5.569838958124769
Encrypted:	false
SSDEEP:	12288:h4+ClnP/Puis/JBRkDMtgI2hU7wFpgmde/bmUwgPwkuRIG2akxOYcH+YnluAD3nj:h4+ClnP/Puis/JBRkDMKI2hU7wFpgmd1
MD5:	CD475F85231C5479978B3D6935E4A700
SHA1:	DA6AF371FF3B499DAA60C24A7CD67AC7A24012AC
SHA-256:	30580B24660C7E41F9F427E3EAD752EA2DF56CDF5F468BE3393613C45332C9A8
SHA-512:	70360D53BA83EA5792E057A37821000955D0826084DA59816D2B7363CB20DD9E98DCCFE4A6DA3E7B80B546DC007BD3FACDDB47DD5C782B6EB32D41AC2C290F22
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,xUdipf,OTA3Ae,A1yn5d,fKUV3e,aurFic,Ug7Xab,ZwDk9d,V3dDOb,WO9ee,mI3LFb,m9oV,z5Gxfe,O6y8ed,PrPYRd,MpJwZc,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,pYCIec,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,ebZ3mb,Z5uLle,BBI74,ZDZcre,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1192
Entropy (8bit):	7.806565312102328
Encrypted:	false
SSDEEP:	24:kEnpCBPGXib3YxcGti9nwqDW7wEzD5ZH6/5QCPj4Dia:kcpCBPSQopowOKzgBPMDl
MD5:	DBC7183373F7BCF789471C000325B450
SHA1:	3C23B96FFF13168509319FEE2ABA285F7BB496E4
SHA-256:	44069F4A07013CC79CC69930C54017907AD6A31CBD08DA51D0E8D5698E8749AB
SHA-512:	A76E7B73D578BA08C0E2DBCFFF2227A2389CA0D3BF0D73B1F9AFB86B81B29079A7411306C90C75F68238B05FE2797F417254FDE97F04A7C54F25607104BC93AB
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.7. .$E..G.b..1<Y...$).".j...d.......m.A..A...\|........@.B.I...o......U...`....iu$I.?w.+V........WsQ,..H......EU...@i.....Mt'!.....!HBs..@...).H.(...T....!.B..#P@CBl..T..b..$H@.T.H..H.$.!....[P..@P..*.J..!........Bz3...........P._.v.i;..m........UVP...8e.9.?...t..k.oD..m.H..{...\|=.......'=1.>4}.y.x..wVl..'.{.\|]...R.....k..&9..h.....>q.r.5j.`.v.....M.]_.....c.m...z.9..nT...s_.D..+uq.)..c.}.x.u....o..w9np...m.E.0.....1....y..=.v.../..../.S.7.o...o..~........,.p{..\k.k.N=. ......I..Q.E8..zwP}.....>l.!...a.....pT}x..K.......Unk6..G...{...k\|..../.@_<..VO7y.IH.L.%..U@...KS..uw.H.j.v...]..u.......].$..%5x.\....e...9..d....8..lL%.u.(.1.\...".uZ./..w..!-..q1l..hx....i5T.#Z.~.Jg5....}..V.NF#5\|.?M.j.<~....I.U...7<..b......#.....o.C...S}..V...>....Ha\|...l......o.;YR.t,k....7...G.....".?.....w...N=csx.........7......@.............c....!....c.....ol.......)..w...!.."...!....LR{...k<...~b..0.......FJ/..j.....0m:........=,"..h4).

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	8362
Entropy (8bit):	7.613883339622099
Encrypted:	false
SSDEEP:	192:xX53rJfOfvqJA/6xO0pDTNk9BYKyjp4zr1i83:xX53rNO3F6xNqBE40U
MD5:	00EF465556A04BB4CD3546CB4D761693
SHA1:	FDF9720172C6C056E7B72467003474C7C123BEB9
SHA-256:	168DAEC29A76CEB70EBECF4E5740E0A0F554309334174AED0C3F93161C82BEDC
SHA-512:	99EE29FF2FD08E4088A49937BF79080600F6873575B198D4C7F161E8D6221D6C230C7438A93DA4BE52F3B72F41EB0AC52974FE9FFD617280788E27F97B252D74
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/k6pS5_C1zPg/hqdefault.jpg
Preview:	......JFIF...............................%....& %"..'10-'-/5=PB58K9--EaEKSV[\[2AemdXlPY[W.......0..0X?9=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW]WWWWW......h....".......................................?........................!1Q....."4ARaqs....#r..23B.$b.....S.C.........................................................!1.23.AQ"..aq.....B.............?.....................B..W....NT.K..DwH..mSg.O.n.yj..^Z....U........./-[Q.I."8#...V.8..mDh.Z......Q^....n........v..8#w..C..G;k..\......z...j.=.h.C.7...mC..V.6z2....oqw.j.]...=.R.MK...9Nm..Y.:......".R..V..6.S.\.Z].}l.SS.P.8I..0.\..a.y.y....s......d.h..V..g&...fq.....z.D..M..kH.+.US.^Tal.1v..n....N.TZi%.,..C..h......F...Rj.i.6.Z...C$S.G......:M^...gA.n.SB.h.'....w...v.]r..K.E..]?...+......4.UN.Q..Q....g.g..-.Jx.Ge.7<0...e..Z\z5.......l..Xp.<.R}.-.vN.<<...QnV..y.%h...7..l..N..qi....Vy..t3.=..Rq.'..R.....;..,......................................e..Dx.C.......v.s/3.{tr.N*I..]..6}h......G....PxZ..n..

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1342
Entropy (8bit):	7.707394641103377
Encrypted:	false
SSDEEP:	24:8iLA8Bl5WGrmjVeokhraci/lP15TlQt1Hzpawlf7uGBH40H1jtEbwwwRtXq:Ys7weR8/lPPu1HYIBH7H1jtEbwwkXq
MD5:	FBC24C57CA98A1E4A9B20C9403F74CEC
SHA1:	0E4D5B0B78C7844D1F86DAEEDF584FD580B492B2
SHA-256:	E76380DA09625F7E1F2FF0D991000EAF705697645FF653E0C33EA404BDF9523D
SHA-512:	CA6E0198E2375A4B91B55329FC38911BF2587854A2EAD9812AAEE2AE7D6DCD127493D1749DE82C9135655CA058503001D9149E61941651F4C1F9E16A34E4186E
Malicious:	false
Reputation:	low
Preview:	RIFF6...WEBPVP8L.../..?..$..6.@2..C..'.A.......bff.JR.F..{-....u_S.....$I...+1..j..O.?0.R.......:.=...z...jOp..U.....5.}../.k[.Ok....u{.c-...T...ip..0..$..,......4......W..%.r..........~(....8.X.[W....F...>...H...A...J.D.>}&.N..Ce}.....(L.]\..p....T..U/.5..p...Ts...".u..px....C...j..../.S.Ty...g. b...>+C.....fE.P......dL...Yi..8.0y..%p.1a^E.\.......=.J........l...P....)......8X.0}.y.+..e.....W...d.a{.[.P...n&.0..=..8.0#.)?....3G....lM...P.8..:3.`lV..8(.03..}v...M.^q..n....sV..%p.6a......o.F.....5..]u..[......m.V;...&..={..8.0.J..&....FA......h.\...&.`.\...&L.S..AY.nK.S`E.M.8.......#..a..Sp....0....Z..0;.....6pXd.\|.5.@2.i..>@.(.f...2...&......M.'.,.L..\|...R..e.d.`h.mR..W.5..0.h,.B.f...4.w`..[.AaR..>.9q.....).....v'7.h...`.j...d...U[f.....S$.....PV..e..f.4...P.QML.}3fP..d>.&...4E9..8....1..A,..../..3..u,.gi.b.F..d...U.......u6..f....C.Uj..Q~1.8r...$...8**.].A.....Z...X..+...TFLh.wc.cO..R..d....Ob{.y,.......x...f....A....u......A....k..

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3226
Entropy (8bit):	7.9053543064992535
Encrypted:	false
SSDEEP:	48:ECbUntgSGlAsqZCHiVEsf7m2HcATh9DeWhJzzhYfFjjTGwWTA3jjZoY+1HSEldTp:TUntgSGNgQsC28A7YBjTGdTOx+1H9lVp
MD5:	B3FE0FA904BD862EB0784A03FBBA1A19
SHA1:	42C3B5B6D3536B20E4CD660A12B4610CBAE60E55
SHA-256:	6C39BD4B61B394BF49CDA5DF1C1D7483B95327563572FCC16D3EC5FCEABFCDFA
SHA-512:	15A6E492F294CB7917D9F9BABA9D9E7C033ED792DDD6C80768C6524227768DC83469F18B24C18966F714ACADB723B948587C998E96DDCDA0ACCAA5A304D14E07
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/F4U2pL8z-Ic5FzCfe1xVXMWRvff6oEBIzDsyGRc4mE3bIUPiCfhuXXXvTOfcpVglKqs=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.+.......f8\|..._.f....133333333333333S....../..C.m..%#.B....\b+....3...d..C..."C...x,.2,...h.B<.P.a.....ra,.....n&...w\V.p.Qq%;.W.<..2.uHF.B.I.vU..qW...]QT...L!...}./CC..#8..........b...d..5.7.\|.[.k.s.m.m.m..G..I......<....v.A. ...%.N..H.m..m+.m.m..M..A....h.`6.i.....dp......\\.....L,cbj~V..c..{O"'..a....:.x....x..(x../2<'..r..rO....q..d....JC9...S.S.\....v..W.;......!.N..)+...$.lny...QW.H..]n..vS\.gx...+D/.h.....]......y9...5.....3d......o..G..L..cp.N..>..1.L.U.........Ph3...;.....p7BXL......."g."...e.5.1.3. T&...,`\~ZE......T.R..L.B.... ...J.-.Pj1.Y.D....B..V-...8.5.~..g......4S.I.p.L...F.....r.y..p...;.B...M.iBp....pyK..8..^cF..!9.,..%.MB..,9....,Bs..#^.V...cJ..Q.0.&...n.I..y....d....>R...[ft]3^.c...&P:DA....4V..t...1F.l...~..h..s[.AP.........}{..n...*0.w...9...a....6NI..?..f......Y...C.8......).#.p9.m$f........V+.`.T..c.F.p....FP....cd7B.~.q4.aN.g......~.3..4h`.k~&.o..j....6....h.x^.....[....b.W.o.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2606
Entropy (8bit):	7.909722711358669
Encrypted:	false
SSDEEP:	48:XjTBdJl1bGh3vvRIc8m3dbN4t6XXYAD6El85sj8SnzcjG45aKAB:XjTZlg/vuc8gR4EHlRl8pSnzcjg9B
MD5:	7390F98865D7E8025DEA896B7900EB17
SHA1:	ADA7CAED8942C0C304541C13E95048A6E12B45A1
SHA-256:	A86C060F36DE5284DB48A49896D238D0F8DAAB9EA633E9A80E41C6647A141C02
SHA-512:	2536863ADEDE3DA7A8FD4975B06F4724133AACE3802C5DEB4A9CA1D68AA5D814FEC8365226367A63DEB862D3011A95F59784CDD56F5E3A623639C7376DFBCD5F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/G6jK9S77RN0laf9_6nhDo3AVxbRP9SgMmt8ZmQjKQ2hibn9xhOY-W5YFn_7stJD1CA=s256-rw
Preview:	RIFF&...WEBPVP8L..../..?..7l..........]".]...@..%z.D...8R...L....2..LK.$...$.......y\.q.1....:..Sr...pMK.....&....gOl~.0.....'"....=.....P'....[&.w6f...[~.w..g......~...^..S..}kR..mx.G.9.7.zS=...2.}.......~S..C.s.(t.....s.....N......N6F...9.gDD........[z$a.t....{..WD..2.[.b.$.bW...5C.P..E..m($.....(...\|...B...`..Q..Q;H.A...:..~M..$\|`.l.......v.n....+..-`.vy....\z}..E...{.\...m........Cl8]...........nr..\H.......a&...4HnO1a.J+...\.`.Q......xP.P....p..f......c..:c,#.e...(....j.~...V..I.fX:Tie...y,.....H.%,..t......R.3.\...q..h..!}...,%>.N..............$GZ...!q.-.8..D..;..st.'...v....U.T..c...M.=..Srh...... .-=....y..^....L.f..F....@=.(.\|.(D..2...}`,...>._!.....7..$. ..".3.ym..$...<.t.!.:0~...G...J..8n..v... ..#.\|.m.....".K.53..6.@.s...]....a.d.t..t[.5.;].c....2.2<........l}..u....R.n\|...0../ ...0...9.\q...._.i}m...>..5....d...[.....5.fK9...VF.v..,..y.g..&.L.C@..7.#.c.....d..)i..?.........+x0...2...'w...fIzB.Y....'.F".9...fq)...$u.#.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	15742
Entropy (8bit):	7.987435431620976
Encrypted:	false
SSDEEP:	384:rSgE/rsWBEBVleHQZk5PtkJ8ydwFMQbvEnSideDbE:WnrlBEBVliQSPtkJ8AwSQjecQ
MD5:	0CA92FFEFA961F83064FE5FEE52C99DD
SHA1:	59C5D5F1821274B00E103DBA07CDDC857C4B42A8
SHA-256:	F32E8E7F4D7DAA42569D62624C20063A956DBCA27A660BF0F0B28BB55F419CE7
SHA-512:	3CBD1FE45B04240F6A00560722759D17A0C77F1F7B2B11FFAA3AF744907DEF510643B8FE2D90BAC3135FF29749BC4AAFCB2DEC71BA57E0BDF6B7B172CD0CC490
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/XRDaSYtkE4CmnsfdfgH7CGPmqCDJmeu-h1_J0qwXeHn5yu4NpZWyGRN60yDRYS_wVwg=s256-rw
Preview:	RIFFv=..WEBPVP8X..............VP8 .=...........>i.E."../6\|.@..h.p..ge.....}..?.?.......ky.t_.?........D.7.o......V../R.......7.K.#.....oP....z.=..s.:.u...................C.."....G?$.&}.j;.r?......~........}.....z......r.3......._.~.?.....'..........R........./...O.....?.{.........;..9"...l.P..S.......Bg.k....7..MO#/.n..u.^.Qi.l.Z.....y'bw.._.w/..9}I6.d.......0<..Y5.Y..^.....$Y.."....M...h..5..kqk.Eg.....4....H.3.1<.......P...}.E...@.Y.........=4.E..........c.(...p..l...zJ{..,..[V`..\|.:.A...`4..z..<...S.....]X.9_...3.;...o.Q(....>&.>.O.....Kn^.E.ZP....,...G....F].l_.y......W....V...Z:.Om;./..7E.t_.Z0..-JV.....J?V....I..K..y.h.2X7.S.(R.F;@..>.."cZ.../=.(X....;BX-X<.h?L.6...4?.%.<.5...T.dx;kx....p......o<..7R.e~.2.........*Aw.F^..7.,...7.o.yY.W.....oY.B4W.U.......D{;.....l3.c..#.3g.g.,.p.....].=.M......y...2.(..../4.w=a.<. .H8y...y.9K..t......>(..G.......c....J.<.:.....cx.......t~C..\|.v9...n..`:..Y.h...L.&Z...^m....".......?..s..eR..<.9bt..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	8362
Entropy (8bit):	7.613883339622099
Encrypted:	false
SSDEEP:	192:xX53rJfOfvqJA/6xO0pDTNk9BYKyjp4zr1i83:xX53rNO3F6xNqBE40U
MD5:	00EF465556A04BB4CD3546CB4D761693
SHA1:	FDF9720172C6C056E7B72467003474C7C123BEB9
SHA-256:	168DAEC29A76CEB70EBECF4E5740E0A0F554309334174AED0C3F93161C82BEDC
SHA-512:	99EE29FF2FD08E4088A49937BF79080600F6873575B198D4C7F161E8D6221D6C230C7438A93DA4BE52F3B72F41EB0AC52974FE9FFD617280788E27F97B252D74
Malicious:	false
Reputation:	low
Preview:	......JFIF...............................%....& %"..'10-'-/5=PB58K9--EaEKSV[\[2AemdXlPY[W.......0..0X?9=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW]WWWWW......h....".......................................?........................!1Q....."4ARaqs....#r..23B.$b.....S.C.........................................................!1.23.AQ"..aq.....B.............?.....................B..W....NT.K..DwH..mSg.O.n.yj..^Z....U........./-[Q.I."8#...V.8..mDh.Z......Q^....n........v..8#w..C..G;k..\......z...j.=.h.C.7...mC..V.6z2....oqw.j.]...=.R.MK...9Nm..Y.:......".R..V..6.S.\.Z].}l.SS.P.8I..0.\..a.y.y....s......d.h..V..g&...fq.....z.D..M..kH.+.US.^Tal.1v..n....N.TZi%.,..C..h......F...Rj.i.6.Z...C$S.G......:M^...gA.n.SB.h.'....w...v.]r..K.E..]?...+......4.UN.Q..Q....g.g..-.Jx.Ge.7<0...e..Z\z5.......l..Xp.<.R}.-.vN.<<...QnV..y.%h...7..l..N..qi....Vy..t3.=..Rq.'..R.....;..,......................................e..Dx.C.......v.s/3.{tr.N*I..]..6}h......G....PxZ..n..

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (483)
Category:	dropped
Size (bytes):	1087
Entropy (8bit):	5.423187331521408
Encrypted:	false
SSDEEP:	24:kzLeEBQEHxSg1QjKyp0qQtJWNx9Dz35DdwnQfjHZRtlnSWtkKGX7rl:kLcleqBL9Dz55VnSckxrl
MD5:	AA42E4DF1C2D5F82C8CFAB8C9FB1B14C
SHA1:	A25C61E3B31AE3D04D13343A764157B84318AFC6
SHA-256:	CDF11B95CADB6E5944B661BE129D390CF936B8DE5605372AD4EE628077CDEE35
SHA-512:	73533B2944CD0DD1501B63CB8B6CD8AD9A202A01AAA99F3B66C8B2D101946F203F313A1C8C2C198A8758CCAD93A2ED37F576DD92A54F77C48AA7D42022E18A50
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("hBmIab");.var UYc,WYc,XYc,VYc;UYc=function(a){if(a=_.gf(a,b=>!!b.attributes&&!!b.attributes.getNamedItem("c-wiz")))return _.il(a)};_.E7=function({gs:a,Ob:b,Zr:c,ob:d}){return new VYc({gs:a,Ob:b,Zr:c,ob:d})};WYc=function(a){return _.wr(a.O).then(b=>(b.Wd\|\|b.CA\|\|b.BA).Db().vc())};XYc=function(a){const b=_.pr(UYc(a.H)).find(c=>c.ob.Gx===a.W).ub.clone();return c=>{b.yc().Wb().zm().Dg(c.gp());return a.Qm.Gb(b)}};_.F7=function(a){WYc(a).then(b=>{_.sf(a.H,_.OYc,{Sk:b,yo:XYc(a),LV:c=>c.Db()})})};.VYc=class{constructor({gs:a,Ob:b,Zr:c,ob:d}){this.H=a;this.O=b;this.W=c;this.Qm=d}};._.w();._.ICa=_.B("PH175e",[_.Fk]);._.u("PH175e");.var dZc=class extends _.Ks{static Ja(){return{model:{component:_.yr}}}constructor(a){super(a.va);this.H=a.model.component}O(){_.F7(_.E7({gs:this.na().el(),Ob:this.H,Zr:_.RD,ob:_.DUa}))}};_.V(dZc.prototype,"eiLb1d",function(){return this.O});_.Rs(_.ICa,dZc);._.w();

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	47404
Entropy (8bit):	7.958298502519838
Encrypted:	false
SSDEEP:	768:KmZDMhc6gOkcLPTiasY0Q0MKaMzEelJvQ5/rZyVqkP08L6d:KOghx3JLWasY0nMBMzb0yVqks8Gd
MD5:	2ED4E0E474ED1A3866E5A18ADE7F4F4B
SHA1:	36CDC446E4202CA16D48959F90419545AD9C3516
SHA-256:	94A2D29CE8E95DC341668E80DFB084EA023DAF26F6A6EB40BB54ECCF4D7CCC38
SHA-512:	E3EA2960905E45AA86E56A0C84B27ACA88B6B777B9D0C5B9BEE3D5DD21C48C8F109EFEF489F497D7646B68FA2E28A1E136A141F1117091F339C1F911D3C67777
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/jbv4-yx8rFlYHFqT7ta55EetzdvgZZM3q21E2wGFwT-5CTAv3Sf5eQTmOaMJ9mSxf-kCBbcA1QA=w648-h364-rw
Preview:	RIFF$...WEBPVP8L..../..Z....$I.z.;....w..".?.X@g.M...".....^xQ5...6P.f...A.0.......)y..H.......Z..tJmf,...P.Lw.WW....".g...6....@.B...N..B....C.m?..`0...Pu....m.%../.........oE'x5....{....t.f...=D.^.k..}O.T...D.!...B/...m..f.bO.o(e...."..p' ....k.t...u...E.~.....f.5.......)g.'eW..'.....ZKp....A.N~n...I.5..L&H.5....f.>..U[v.U..t0.i.%.Uu]..D.#I.$.Q.......A".h.V.}_`.H...[....l...Vp$IR$.1.8.Y....m....Y.'...`A (..c.1...,.....Z....%...n.X.. ......-..o.t.....f..G..m.hk.....6.4.c.jhA.6....; .a.{.%.......v...........6.6!.....7w.h&..B........<........7.6..h.P..(.Z.....o7.M.m.uL.....O../..<...@1..j... ...4.........;..C.i..2...;........................_N....O.........................m..Pv..."..:..`\|+?....h`...p...~.3..R....`.,...:.@`....h3.,.p....C.#.X....M....Z-....b.;.xo.Z.`..+m.x.".A.......p..x....(.D...4-....b..B..q..p.w..A.6...g}w.....0.g.mQ.Q.}......V9...r.5.......]..1c..7<...#\*3.....y.........B.y....K5.Y;.Om?.).y.]_q.."4.%.\....[.MA..N.~E#...B..?.L

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (443)
Category:	downloaded
Size (bytes):	687
Entropy (8bit):	5.332548475998944
Encrypted:	false
SSDEEP:	12:kRZTFY4EdCbywDI/AcZ5EDnSWqXiMXKFxd2R9/7hXXZrGDKGXWrRkbRN20:kz64EsBktAnSWrf0RrXN0KGXW2rl
MD5:	87ABE3193657518EA1B55E331A272B03
SHA1:	77CC76608F0AC0993D0E2B33224F91AEBC53FAAB
SHA-256:	68D64CB9C62CA337E31706CDFA64D058B74F88DB259E2F3287FAACC1DF99B147
SHA-512:	6A77CB668C363A83AB624B7B3BE0D8FD2343D1FA07E9EB2E15964A789C4F4C8448CBCD27897C45A431DC509DC09A8C062DA6F0C0D8A10AC3D45AE620020FE4AB
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,C7e1Kc,CKm2Wb,DRmmld,EEDORb,EFQ78c,ElYdAc,FCpbqb,FoxcOd,FuzVxc,GjTCAc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,J22eF,JH2zc,JNoxi,JWUKXe,KUM7Z,Kfp2G,L1AAkb,LCkxpb,LEikZe,LRovxc,LcQwud,Lkzi5d,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkwaS,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P6sQOc,PAQZbb,PH175e,PHUIyb,PRm2u,PZ1hre,PrPYRd,QIhFr,RBsfwb,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,UINLVc,ULFnWe,UUJqVe,UZStuc,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,WhJNk,Wt6vjf,XVMNvd,Y413Bc,YTx6oe,Z5uLle,ZDZcre,ZMKy0d,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,chfSwc,dZ05Qb,dfkSTe,e3Zld,e5qFLc,ebZ3mb,fI4Vwc,fKUV3e,fPcQoe,g6aYuf,grWkAb,gychg,hKSk3e,hc6Ubd,hhhU8,iAQMie,iLGjNb,jZ2Ncd,kWgXee,kdbckd,kjKdXe,kpVlPe,kr6Nlf,lDZ2Fb,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,mmmrlc,mzLjxc,n73qwf,oEJvKc,ovKuLd,pQUyNd,pYCIec,pjICDe,pw70Gc,qczJ2b,qk5AGd,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t8OL6d,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w08zce,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xI1uef,xQtZb,xUdipf,xii62b,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=CvxVpd"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.HCa=_.B("CvxVpd",[_.Fk,_.vm]);._.u("CvxVpd");.var cZc=class extends _.Ks{static Ja(){return{model:{component:_.yr},service:{Ce:_.NS}}}constructor(a){super(a.va);this.H=a.model.component;this.O=a.service.Ce}W(){_.F7(_.E7({gs:this.na().el(),Ob:this.H,Zr:_.OD,ob:_.CUa}))}ma(){const a=_.ti(this.getData("userLevelTestCodes")).map(Number);a.length>0&&_.MS(this.O,a)}};_.V(cZc.prototype,"YhLDHd",function(){return this.ma});_.V(cZc.prototype,"eiLb1d",function(){return this.W});_.Rs(_.HCa,cZc);._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	20202
Entropy (8bit):	7.9885613514323115
Encrypted:	false
SSDEEP:	384:l1wsC+MpVo1jiEXiuJh7nx/MztLMpNhjOifQzTF2lQMwGslkVe:fwtLWiWb7nxEztefOifgT/M9Ve
MD5:	0B9FBBB73BD0A1D2C58AD3CCE80B4EAA
SHA1:	02E416C66C1F844C85B470EA4CB4EF542FF75547
SHA-256:	87E30299858AF3E59555543845771C2C70464E2F66AB02AB23ED5819901275AE
SHA-512:	7B855EBF7B520DB6D5CD6064DBA6896258D9DB10F930D27CD404086BD19985C9355C252CA7EA11BC5BC858DE9E7415149F96ED1E37F16C3CC6791B44A77895B2
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/tMIgKazDGX4JzzaF3TUPPdZvRTlpGOFKIqwwb0f9lThr-Rlj572zCYCycF_la8NEjumIj9OiUA=w648-h364-rw
Preview:	RIFF.N..WEBPVP8L.N../..Z...m...`[Xd........W.....8s..Q..R..V{.n%..._k..;I.d.L]H.o.d.:J4H...9qW...).mc.v..q......k......c.d7..$p.6..\|.I&..j...5xs .....}.....>....5.&.I....2>.P]./.h.w....../L$...H..{.\|...#...P.`..G.P..j.l..nc...{....J...@.b.._]]=.m.m..Pk.)._...=Q!HPD.?,....u&.6.....Kz3.z......{.4.t...`.y..f...{z...%{..\...............D.u......P0.>..A.E.C...u{.L>#..)3..xt.r...Bm...ED.T.57t..!...zyp..........\......G.......I......-u.....#..?`..../E.<3.0.'...f.d....q...........&].s.H.#...W...........h3.a.< ....".z....h}...->...4.i+....9..".!.p..l@.~.6}..>......I...S.8d.d._.t....9..sA..].cR...q8.@N......rB]....AU.c..m.'... =eL.d...w:JZ.2.....xr..[>.}u..... .......i.>...n.^=.}.......+..\|/i...`.@A........>.I..Jvm)E......w..0.1.a..Z.KN%.j...^.0w+...u..i0......5..}..].z.....0_D..?..ShmMI/.K.@HU.g&...Z........M...f..<YJ:.\|RN..Y..m.H...I{....@^y.j.s.&..&.-F...Y.5.UK.Cz..o...".[...>].....7'T..Q..;.....;..P...]u.......U..~..A9.......q(g.ei%..y..Bn.G.).v....

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	84576
Entropy (8bit):	7.992013870667903
Encrypted:	true
SSDEEP:	1536:EuWY3oT4C/N6AewZvVrtNRZF+WWbNGU4rjVoJO0fxBSkg3OFsxdvt:Eu1GncA9vVrtNLjOGU4rBonfSWFmF
MD5:	E225CB9BD7700ED6867E33BE24E622F0
SHA1:	20D6F412F0BA48BD88504B9199CE84F669227E16
SHA-256:	80FA61E80994E3855AC05314FD48FB84BCDD0A4F1DFB764A1558FA835082106F
SHA-512:	1737A6F97342C387C57C738883A5B0A1F4AC48655B354DAAC2F486924D1B20C7E590E652E26E0163D5CF92151D39FEC0DD0F20A455754777B65676EC5A556629
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/gnSC6s8-6Tjc4uhvDW7nfrSJxpbhllzYhgX8y374N1LYvWBStn2YhozS9XXaz1T_Pi2q=s256-rw
Preview:	RIFFXJ..WEBPVP8LLJ../..?.M8l.F....<.....CD.'.......03l='.......e.`&.._.l.t..{.6.Hj........n.w>m..66I@].n._e..J.?.=3..?aA5........u.\|l......&U ....lO..a........@..3......:03S5....1v.....Te....DL.%.11..;...dRR....^...(]b7b.6.T...%]...y.v..!.........r.........4....KvR".........._...fb...:..x.%H.N...opZ.`SB.....w..#.].'......<?!....Y.4!.'3.......$.f+...3......-....L.H...*i&&.....H}uK....7.Q...()2+gfa#B.+C,h).-...e......GT..&.F.a...8\..$y..T.n$. . .m.6.XB..-=...>B..!..Y...-.cB<6.=!u.............\..+..j.$....m...=$..Ep.P<.F\|.~..........`..}.A.w#",a..p.?NE............,DH.o (..P<.(..p.h<.N...6...j\|..,..x..@....P\|....$..........B....I....qD...4...t...qD`'@..V<h@$.....;ow........<C'....._d.8..,x..\.\|..S..@.g....9.....4yp.(....e.......z.s....YX.?._Gg..y...89.!...P.Si.D.u..Nx...V.N....a...q..=..b.({....I....l.. @A..AD....O.8TF...#....@$a..jC....mo.@..K.z...r.#.(..Jzk./L..~...V.o.....k.O....Bq.......b.u........VNK.EcS.NE.BQE.>:.....^t.b-97.+..(.8.Z...m..4..

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	303438
Entropy (8bit):	7.99109230855078
Encrypted:	true
SSDEEP:	6144:NONPYY5JwWZCRtm9rxsDygQIU4N285I0HCAQxOsUlOc4R+O2BoNDM0:rY5JwJRtm4DyGUhOsgGR+zBot
MD5:	A5C166280DFE3A47E5B8A14B51A45065
SHA1:	17CFB89A87399F238EDA795C7AEA806522EBD44D
SHA-256:	F34D69E41C4C1E32C6BE479C66D069EFEC716AFEBF1ADD8A1BF16ABE5C8BD453
SHA-512:	26113643EDC9EA6CBEED59C0C81C68FDAE2A6C2F74177A83709C7C75BB5C0AA2F165B694C01F56D43945699E124D95378D57A3941485C5E9F20C376F12F30957
Malicious:	false
Reputation:	low
Preview:	RIFFF...WEBPVP8L9.../..Z..@l$9l.;.$/.`.!.....+U.TU...a..>...{o~........ .6.....!.$.4.B....v.+...r.g..>.._.......=.x...d.p..+p.9..(....1q`..i[S.-..e..~.'.Z6.`.L%M.I........o....f..4fZ.].~.z.;..>..G>ZMO{...4.Mb_U..\Vm.m...L....n.M.J._[@.f+./.nc......$Uw%U.,..j.c'.5..F.<..$+e?...A....`-...r...HG..` ..jje%l......}..?..d....k_@y...C.........4F...H5..J5.p.}r....j.$."~..A.$1..xo.`..}.E.c0..HD ..."..@Y..F.t......S.[..y..U3k.......D@Y......PA....].=.....>..~..F..m..{....)';)..."..F6....V.4....!.l..I(.6".."R.)..@.AN+.$.q. .@...S@"........)8.....p.B.p(...Ap.p... R....N.lB.F..'...,u.pr....aW...\/T..U.a...T..n.Vl..!.5.K?.$.........6r.......q..I..B.f.l.\.:...g.P.....C..v...0:...~..............c?b.].31......+......4v]...:....@....u.V........0...}&..........~....0..`,..d......L. G..Hcb\|.(3vlp.}..a3.X......N..ke....}fL.1....BE....@......T]f.0.J=$6)#.........s.%.MV.5\|^.'.=s..>'. ..#.I.G_!...T....g.&.....UG6%..1.Qq.8.$..n...\....lb....b.y].v.b..@

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	636
Entropy (8bit):	7.600775301724357
Encrypted:	false
SSDEEP:	12:MDNuvIKqnbvUWaJMfBVaEPxH43YtUJP0te971o1XJTNMv/S+5GaD:ENuvvqsMzNP1ftuP0Emzav75L
MD5:	2A4F43FCC5ECAF85B82D800C574E8D19
SHA1:	CFA7D1DB091BC2224D1F43E03DAB7F2A4F1B6839
SHA-256:	5D1F984B2D0F5F0B932A1334D9C36FE94FF30CC0BC4882B7D01934F49AAE95FB
SHA-512:	5DBCF1C417C6F6ADB588B460FD2178E9AE725626C46CDA283C8B344B55E12D9D333D5D6AF47BE4F2A98B0FA362276F2A5389B04B63C6AA40645925BFECA2333F
Malicious:	false
Reputation:	low
Preview:	RIFFt...WEBPVP8Lg.../?.....m$IJ.fw.%p.....i8l.F.$'3.{....)W..8n.F......6...!....g..9] ....d.4.b@...D.I.........>...Y. ...9?N{...m..t.=.d\|...D...@f.v... ..V?f...8.DP.D@....Z.......A.C`L..... .......... ..6k.. E..IbP.DA......." ....6..G"..$.G"....7..].fHN.m.3.....N6.]=..q.W......S......h.R..^...Bh.....W).Y.:....3....qh...,.g/g.sqf.._k....R}..... ..qW80...v.h.w.....7L`Wl..]...57.D....n..... .W~y....BD/&..'c.~5."....i)m.'..-..r......,{x..u.8.z..O.y).k.E.?..o=y.GS...<..M.......\|7s..).=},o....?.....^.#.....Y3.)....j}/..^.0..\7.&8F.HM./9..>.63.kS..-..Wc.+...t.mt`.[..@...\....1. .)...<.....h..8.1.<.#.. ..

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	678
Entropy (8bit):	7.631267665350741
Encrypted:	false
SSDEEP:	12:4PAt0RpZEi/iqmUtvvUQGfM3N2ClqlG7b/WYbFlygxcaJSGkbaZ67HOtw4Z7/J1f:4otQp/ish7GfM30FiNbjcaJJkbakjgRZ
MD5:	364F9F3D361FDCE79EEABAF6A6F6B4A4
SHA1:	86554657B8E9BCEF39A4BC862C0477F397328253
SHA-256:	19BCE113C75DD4CC77EFD50C7EE39D003F2702A6C68103A0D2365192C8B3B624
SHA-512:	7C37A2DD894106AD87E2ADE0C20894BD2BEB37665C6D5748F883172DFC31A8CCA7C41212EB4C12D40E695D879AEC07B0BBA8BB6A5B09FEF52A566C0BDFF06A2F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/4whGAVjZGrrlNxzheKAfBXrxggtyAb4euWLeQI8fDfVfdnFEZjE0DZTJ8DKoh64pqcIa=s64-rw
Preview:	RIFF....WEBPVP8 .........@.@.>I .D".!...4(....Y.....r@y..F...f.....C...........u......o...5..;.../]_D....\|T..'.....gK.n..z(.....s..l......l.@....2..4...E....:..S..kP.Y=u.R..f/$.3#)h.......?...E.........@...H...$..{xk\sG.e.\|...?.?.........w.xL@..?..[.G..$..z.....P..WPq_6.Y..'.......MB...x..f.-....8..1$.0.r....L.\|.}..HYW..K.R......Mq.y..e[.}.\|.d`c....>..O%......?.\.....c.Q......8..?....?....D.IU&......X%.3F&?.....3....l)^.D...M}w.):.....?w;....0.Y...Y.b.W.......2B\.b... g..X...c..b..[...G...P.uN.T...K/~...G.:....4....\|#./N.=.7%.j...a\{~L....m.+.w{).....g..Ys.:p.v6..U.y.n.z.kA{!.....L..3iM.=E.".`.0U....l.:..?..>.!.Q..y.=.^O..cSx...Gj..j(.*^..@..=..

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8672
Entropy (8bit):	7.9657826197851955
Encrypted:	false
SSDEEP:	192:QxhfN+RkTxzurpYeoEkYqelM0WxpjQyyd5P8nJZpqhnCh7e6:QXN5zuOekYbbWxRQld5PsZQhnEt
MD5:	4CEA15C604E63D3E7537324F34811098
SHA1:	FCE3E1380CF11F7F3318D857BC9E4BAEE82D89FA
SHA-256:	653EEE6AA0AE78CD5EF4FD2E3897D198A5422CC5F63F1F667ECEBBE692AAB019
SHA-512:	6C3E0893561B7AB8474A3E526EED9B5503721B14275E0641351577D06AC60CD7B97A5F70107DB1D2B5FF682C57573A6E3F71A290B0000E0D522A407085BBB5CD
Malicious:	false
Reputation:	low
Preview:	RIFF.!..WEBPVP8X........?..?..VP8L.!../?.....n.."..#..UA...gC&../..#...X$_..N[.X8.l.v.z.mk.......>.`.I..y-.8.# .@..5....$........_kg.?.~..O..2...@.!.&.(t.\Q.;Q......b..yA.b...f.b.."SH)MPZ...P.dEV.y.._s..j>U.4..U}XR.:..Ws..U..3.....{Z..4.b-.J..g..r...P...?.!"&@...N.#.Q@..`.v33........@...-/!..l!J..3'....)~...v..te:r..'......1.03....t?]Z.e....o.rCI.$..........y.0.4....4.N.....{.t..H....Zz....i..$...v..2&.....\K[.....MI..\..j.m.6.m...k.NR.B.G..=...{..hwg.YC.v....l~BO..m..lw.{d.....i.m;.S...&. ip..,0u.-.........L..]:..u.@....\.u../l..I..<..8...kZc...Z...Z.m..v-.ms.rufVfD..._L..Z..e.9..j.....dP"..9..g.3g-.....\...+.]..m[U.y.}....i.R......."..H..h...6.....ev.9..;,?..'...7?.?.....). ..(.(@$@.@..W..0k.......m..X..c.......Rx.1L@.@.D.. 6..A..XV........b.YD....0=...j..6.<.(@.....".p.qj.V...:.}...8..K!.-$1.. ...._.W.t ...4.....>.b.T..Y..m....L..d.....S.!.@P..KRAc..g..*. Ra2........o...zl....XN..>h..\d..F.Fn...i$.fI.i(.<.q:~u...jB..$A...Wk.XU}.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1618), with no line terminators
Category:	downloaded
Size (bytes):	1618
Entropy (8bit):	5.770883646203778
Encrypted:	false
SSDEEP:	48:VKEcJHxKo7LmvtUjPKtXsNQHFmc8s1vQZ/rLrwUnG:fSHgj5cOHFbHv2nsuG
MD5:	0E70E9004FE6F5A7E7A51C3484A64292
SHA1:	5F9568D31ED83B60D0F99C9EBAAB5453C6BAF737
SHA-256:	E98AD6DDD86EBF01A466EE2D91901D1E474ECC0749E0D7FAADC00002F336BD2F
SHA-512:	B7CDEEAEECC0F34BF61BDBCDE28E0317F7A8789D0EF2E9AC4B7298D2635F5CB77172ACA5D329D577E8207308962FA402D1EB377C941CFE582523873E03E7B1AE
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (967)
Category:	dropped
Size (bytes):	5561
Entropy (8bit):	5.688140868533134
Encrypted:	false
SSDEEP:	96:kWmmL2YNXpcv1CMNkQtQuVqdvJqgHQ9nG7Lf4h/H8pml:zmmL2YNXpcv1CMNkIQOIvJQ9nGn4hUS
MD5:	2A9165D276DBFCADF3941160C6C3F111
SHA1:	1F03C30FE8A383E3DBB89525B7937F30E5B5D44E
SHA-256:	E820F3817D9CFADBBB516F013B83B578433A99657620F17EB632495BEC5F8E66
SHA-512:	A611071A5F7F22083827CB16C338D9D0964ED60C14C7EC71F3457BFEFD7F1C32229A6ED79BC3D2CA904754CBAC01813FD75D482C0E4095082146A12C26F4A889
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.DDa=_.B("lDZ2Fb",[_.Ar]);._.u("lDZ2Fb");.var wdc=class extends _.z{constructor(a){super(a)}};wdc.prototype.qa="K4YEGe";var xdc=class extends _.z{constructor(a){super(a)}},ydc=[2,3],zdc=class extends _.z{constructor(a){super(a)}kb(){return _.F(this,_.nt,4)}},Adc=[7],Bdc=class extends _.z{constructor(a){super(a)}VB(){return _.F(this,_.x2b,4)}};Bdc.prototype.qa="swBvle";var Cdc=[2,3],Ddc=class extends _.z{constructor(a){super(a)}},Edc=class extends _.z{constructor(a){super(a)}};Edc.prototype.qa="XMKGyc";.var Fdc,Gdc,Hdc,Idc,Jdc,Kdc=function(a,b,c,d){var e=_.LW(c.kb()?.H());const f=e?"3121\|"+e:"3121";e=_.Y(h=>{_.sh(c,_.Ug(c,ydc,2))!=null?(h.open("p","WcV9v"),h.ka("class",d?d:""),h.V(),h.print(_.L(c,_.Ug(c,ydc,2))),h.close()):_.Vg(c,_.st,3,ydc)&&h.print(_.JW(_.J(c,_.st,3,ydc)))});const g=_.YN(h=>{h.ka("target","_blank");_.ZN(h,_.WN(""));h.ka("jslog","197536; 1:"+f+"; track:impression,clic

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	40286
Entropy (8bit):	7.994832373658113
Encrypted:	true
SSDEEP:	768:T9yEHx1cbeZqjOPszUIdXB3owny8Z7MFCLmWz0AKFZH2xsbUpJOaH7e:T9yWx1GeZquFIdR3fny8Z2NLH2YENH7e
MD5:	89102E01A5F72E9438B364D0882AD603
SHA1:	919BBF882605DCC3917BC76A95C1309DE68C4729
SHA-256:	5F65C139F54E868BD51677444EE8EFE39DE6A7D00AF0C5EA68FE8BB61FFC815E
SHA-512:	8960A493F93881347001E7CD5EBA171B12FCAA7BF1BD18EFEFCA89CD4BD7D2D7AE20BC3341AF244AB833C5DBE9668659AACEC30E0EFA5C1D934331EC750AA6FC
Malicious:	false
Reputation:	low
Preview:	RIFFV...WEBPVP8 J...p......l.>Q$.E#.!.[-.8....`&.^r.A..$.........G.7...u..._..._i.w.7...o...}W~......../...w.....O.....~..?m...s.}.[..._...?^.c.......~........S...K.W.s........l....z..A.{..........g....K...]........:..W.....c........?....S.........I...........[.s.C........;..............?......g..o....._........!...g....x.~....o....................?...............m.....`.......O..................#.o...........^.]...\|.&.U.-....Z..A.{$P..0..D...~~.........@....*[....1.82WC.r..h.v....Gs...?\|.Q.ZYie.......W...Zlk..e...m......5z2\|..2.I...L@....p(..\|..v..-,.....).C...tY.{RJ.Ex2..B`.>S%zB:.......z.N.r.bvx......K`.........E.8R.............\|_"..,b..`.n...?\|.....B...{..t.`..r...%.......!,.=....`.j.......AE.......{.4.89S\.nL].V..b...17lUBW&,.B}....s..[..O..9........^...n.\g\|Y.........o...m..y...E.f.....,.?.VB(.g..x.;[p.s..\.H.yY.4.1-6..2..z.....Fq.......`.?<4q.........5.a...>?.5.{.-..K.P..w..:...x.1..r{..yW.)z.....g..w.a..[...........B'...L.

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	792
Entropy (8bit):	5.233260541314526
Encrypted:	false
SSDEEP:	12:kRZTFMTMi3K/Aa9iJmNfoK/AaeiXgYisumK/AaoA2i73BndrK/AaoiN9DkbRN20:kzeTZGElG1XgbmGP71ZGnN9Qrl
MD5:	DC3CF012C00CF1501227D66EDCB9041B
SHA1:	605993EC98CD57D87EE6400EE76FA0C4E14B0CA1
SHA-256:	11FC13767F74EFA2CB620A58F3291FCA76C3817DD3B2CF96244211F0C5BE0AEB
SHA-512:	EFA0BD9E422A4046392BFD82A17A90CA45B2FDE04F883F1C522B8F1AA93C55BDC04CA4DB5BFE573AFF2A269DB4D0DAB4080A1B3D3905BD7A971A3DC4F5A90DAB
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("yNB6me");._.Br(_.WCa,class extends _.Cr{constructor(a){super(a.va)}H(){return"yNB6me"}O(){return!0}Xa(){return _.ndc}});_.jr.yNB6me=_.sdc;._.w();._.u("qqarmf");._.Br(_.HDa,class extends _.Cr{constructor(a){super(a.va)}H(){return"qqarmf"}O(){return!0}Xa(){return _.Qec}});_.jr.qqarmf=_.Ugc;._.w();._.u("FuzVxc");._.Br(_.JDa,class extends _.Cr{constructor(a){super(a.va)}H(){return"FuzVxc"}O(){return!0}Xa(){return _.phc}});_.jr.FuzVxc=_.shc;._.w();._.u("I8lFqf");._.Br(_.MDa,class extends _.Cr{constructor(a){super(a.va)}H(){return"I8lFqf"}O(){return!0}Xa(){return _.vhc}});_.jr.I8lFqf=_.xhc;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	14488
Entropy (8bit):	7.877375184944868
Encrypted:	false
SSDEEP:	384:i+nkZheKRIwrm/a48si3/C1UKkb/0XUTkxXqDB/8:i+nkZIK+wrm/mP0K0XWdN/8
MD5:	4544570A922C51E96CB2F1BB67A0608E
SHA1:	ED99AD69140AA35B702FFDC6E0AABB78F529E18D
SHA-256:	B1A9CA2D487FBA3195C3B53218A97328A31C10F45686550704957A8913BABB87
SHA-512:	A79079CF4B0E3FA0B91F61C0AF75DA7F0E947B09FB0CA9D7FC2ACDB5E2A98604B7AE78EBBAD6AF3DF95D8FA54EE970DA1D64770384A1A273311A81D7B5B13E20
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/3mkmZHd6xK8/hqdefault.jpg
Preview:	......JFIF..............................%%..""%%%%..'10-'--5=PB58K9--DaEKSV[\[2AemdXlPY[W......./..0W?57WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................C.......................!..1AQ..Raq...."2B...Sbr..#3...Cs..4....c................................(........................!1.AQ"2a.....q............?........................................................................................................................................................................%...=..5.. %...=...X"._@...>... %...=].CK.@Z..Od.......7.ib..],......~A....o.l..t...::\|c....d...........'.<.r..D..#.._..)....`7...G^.....z..T...\|2......./..:?...9}..u.....I.s.?gFu........_yC.O.G..1.yC.O.Nk....5......1.yC.O.C.........7.................."?.....?.5...M.q.s t..V+.G.O.F.......S....n?.G:......m.k.m..g..q.7.U.O.m.K......<...S.y.#[3.M..Q..E.y. .c......YH..hy..5e..g...U8...9>.,....<...S.9.!.?....^z*...~Bt]N1......e /-.S.y. .c....... ].c...

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.976663363230767
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKYQCpM0Waee:PLKdXNQKQ7L
MD5:	899F3616D1031A5633D9A0F4CA491B2D
SHA1:	129580E3399BE36658BB5164AD4C187E97EE12B3
SHA-256:	D4FE562B542385ED27C0A5B044F51B790B51CF0A57A265BD63BF51D94B570197
SHA-512:	3B5819AA67ABD91C54E395407E9FF01FBFC95490E86EB1AC9A5F22F30C7C6FCC359B6550450AAEDBCAF2D23037DDBAB09ADA5BE3FD227188FF828E5EC40F41DA
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1192
Entropy (8bit):	7.806565312102328
Encrypted:	false
SSDEEP:	24:kEnpCBPGXib3YxcGti9nwqDW7wEzD5ZH6/5QCPj4Dia:kcpCBPSQopowOKzgBPMDl
MD5:	DBC7183373F7BCF789471C000325B450
SHA1:	3C23B96FFF13168509319FEE2ABA285F7BB496E4
SHA-256:	44069F4A07013CC79CC69930C54017907AD6A31CBD08DA51D0E8D5698E8749AB
SHA-512:	A76E7B73D578BA08C0E2DBCFFF2227A2389CA0D3BF0D73B1F9AFB86B81B29079A7411306C90C75F68238B05FE2797F417254FDE97F04A7C54F25607104BC93AB
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/aD_yV7NdU8txkDPV1NU557BjnvZf-D6Ip8Cn7xhdieHgMLGt1FTQXlBBgH1jTNhhnw1v=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.7. .$E..G.b..1<Y...$).".j...d.......m.A..A...\|........@.B.I...o......U...`....iu$I.?w.+V........WsQ,..H......EU...@i.....Mt'!.....!HBs..@...).H.(...T....!.B..#P@CBl..T..b..$H@.T.H..H.$.!....[P..@P..*.J..!........Bz3...........P._.v.i;..m........UVP...8e.9.?...t..k.oD..m.H..{...\|=.......'=1.>4}.y.x..wVl..'.{.\|]...R.....k..&9..h.....>q.r.5j.`.v.....M.]_.....c.m...z.9..nT...s_.D..+uq.)..c.}.x.u....o..w9np...m.E.0.....1....y..=.v.../..../.S.7.o...o..~........,.p{..\k.k.N=. ......I..Q.E8..zwP}.....>l.!...a.....pT}x..K.......Unk6..G...{...k\|..../.@_<..VO7y.IH.L.%..U@...KS..uw.H.j.v...]..u.......].$..%5x.\....e...9..d....8..lL%.u.(.1.\...".uZ./..w..!-..q1l..hx....i5T.#Z.~.Jg5....}..V.NF#5\|.?M.j.<~....I.U...7<..b......#.....o.C...S}..V...>....Ha\|...l......o.;YR.t,k....7...G.....".?.....w...N=csx.........7......@.............c....!....c.....ol.......)..w...!.."...!....LR{...k<...~b..0.......FJ/..j.....0m:........=,"..h4).

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (483)
Category:	downloaded
Size (bytes):	1087
Entropy (8bit):	5.423187331521408
Encrypted:	false
SSDEEP:	24:kzLeEBQEHxSg1QjKyp0qQtJWNx9Dz35DdwnQfjHZRtlnSWtkKGX7rl:kLcleqBL9Dz55VnSckxrl
MD5:	AA42E4DF1C2D5F82C8CFAB8C9FB1B14C
SHA1:	A25C61E3B31AE3D04D13343A764157B84318AFC6
SHA-256:	CDF11B95CADB6E5944B661BE129D390CF936B8DE5605372AD4EE628077CDEE35
SHA-512:	73533B2944CD0DD1501B63CB8B6CD8AD9A202A01AAA99F3B66C8B2D101946F203F313A1C8C2C198A8758CCAD93A2ED37F576DD92A54F77C48AA7D42022E18A50
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,C7e1Kc,CKm2Wb,DRmmld,EEDORb,EFQ78c,ElYdAc,FCpbqb,FoxcOd,FuzVxc,GjTCAc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,J22eF,JH2zc,JNoxi,JWUKXe,KUM7Z,Kfp2G,L1AAkb,LCkxpb,LEikZe,LRovxc,LcQwud,Lkzi5d,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkwaS,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P6sQOc,PAQZbb,PHUIyb,PRm2u,PZ1hre,PrPYRd,QIhFr,RBsfwb,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,UINLVc,ULFnWe,UUJqVe,UZStuc,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,WhJNk,Wt6vjf,XVMNvd,Y413Bc,YTx6oe,Z5uLle,ZDZcre,ZMKy0d,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,dZ05Qb,dfkSTe,e3Zld,e5qFLc,ebZ3mb,fI4Vwc,fKUV3e,fPcQoe,g6aYuf,grWkAb,gychg,hKSk3e,hc6Ubd,hhhU8,iAQMie,iLGjNb,kWgXee,kdbckd,kjKdXe,kpVlPe,kr6Nlf,lDZ2Fb,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,mmmrlc,mzLjxc,n73qwf,oEJvKc,ovKuLd,pQUyNd,pYCIec,pjICDe,pw70Gc,qczJ2b,qk5AGd,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t8OL6d,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w08zce,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xI1uef,xQtZb,xUdipf,xii62b,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=PH175e"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("hBmIab");.var UYc,WYc,XYc,VYc;UYc=function(a){if(a=_.gf(a,b=>!!b.attributes&&!!b.attributes.getNamedItem("c-wiz")))return _.il(a)};_.E7=function({gs:a,Ob:b,Zr:c,ob:d}){return new VYc({gs:a,Ob:b,Zr:c,ob:d})};WYc=function(a){return _.wr(a.O).then(b=>(b.Wd\|\|b.CA\|\|b.BA).Db().vc())};XYc=function(a){const b=_.pr(UYc(a.H)).find(c=>c.ob.Gx===a.W).ub.clone();return c=>{b.yc().Wb().zm().Dg(c.gp());return a.Qm.Gb(b)}};_.F7=function(a){WYc(a).then(b=>{_.sf(a.H,_.OYc,{Sk:b,yo:XYc(a),LV:c=>c.Db()})})};.VYc=class{constructor({gs:a,Ob:b,Zr:c,ob:d}){this.H=a;this.O=b;this.W=c;this.Qm=d}};._.w();._.ICa=_.B("PH175e",[_.Fk]);._.u("PH175e");.var dZc=class extends _.Ks{static Ja(){return{model:{component:_.yr}}}constructor(a){super(a.va);this.H=a.model.component}O(){_.F7(_.E7({gs:this.na().el(),Ob:this.H,Zr:_.RD,ob:_.DUa}))}};_.V(dZc.prototype,"eiLb1d",function(){return this.O});_.Rs(_.ICa,dZc);._.w();

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18277)
Category:	downloaded
Size (bytes):	18897
Entropy (8bit):	5.668931243578904
Encrypted:	false
SSDEEP:	384:a4PzmcmvXAxSvxff+9VWhunFMLpNYUECcgmrunaeC5NTBU+JzrW:ZCHv1fcnewizaeyrm
MD5:	6B937DF7FC11C029A2DB0C4DF88E69E0
SHA1:	3429FEF3FD96FED39CDE8378C0573A5C2EB4E9A5
SHA-256:	F49FCE9719C08B38CC24DFDF67C251623D0F57831ED84031D4255C9F2C21D929
SHA-512:	A69A8BE8D9E1195685BDD329D04B56AE60FC10312FBB4ACF66C5A48AA55B7CF65D76E73ABDAE531031483ACB95AB09C1099E70778A9229B1D0E0985F35A3FEC4
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/9J_OlxnAizjMJN_fZ8JRYj0PV4Me2EAx1CVcnywh2Sk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var H=function(O,A){if((A=(O=null,l).trustedTypes,!A)\|\|!A.createPolicy)return O;try{O=A.createPolicy("bg",{createHTML:z,createScript:z,createScriptURL:z})}catch(U){l.console&&l.console.error(U.message)}return O},l=this\|\|self,z=function(O){return O};(0,eval)(function(O,A){return(A=H())&&O.eval(A.createScript("1"))===1?function(U){return A.createScript(U)}:function(U){return""+U}}(l)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var OQ=function(A,O){function z(){this.j=(this.n=0,[])}return[(A=((z.prototype.us=function(U,H){(this.n++,this.j.length)<50?this.j.push(U):(H=Math.floor(Math.random()*this.n),H<50&&(this.j[H]=U))},z.prototype).vL=function(){if(this.n===0)return[0,0];return[(this.j.sort(function(U,H){return U-H}),this.n),this.j[this.j.length>>1]]},O=new z,new z),function(U){(O.us(U),A).us(U)}),

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	dropped
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	105614
Entropy (8bit):	7.99434337668501
Encrypted:	true
SSDEEP:	3072:po/xKrZBjhuxmsImTXosuPVoD5HVLq5Od5myjsUoFf:q/xyfjhusXmTYp9oDu5OdtIlV
MD5:	8416D64F7F68EFDE21B9B2A2E2452531
SHA1:	4DA54B3CC670A8A60E4786A7484555CB947A1038
SHA-256:	8C131099DBACCE03114258C7C31A2F609B82EF50A19F368A117F2A9186321472
SHA-512:	27D4EB4C704804D9B3F7456504A4B19068FB40341FA9D17772F0F81369405620A7D56FCBE9B1B7EC9501A88576D5BC2AB89A81D1453A14EC58C163A8E641920D
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8Ly.../..?.M@l.H..?].....p.].....\|v.`.... >.[.D....Pl4......c.I.%`rD:.T..9$...13.YN.xP....;.......t.-...]....w...:.tx.%.......-i.6.l.O.h.L...q........=w.....I.@I.....?.............;.....$.....a.>.z....D..L.!..[......G@..9(.Ue<..s.$..CW....`.>=..e...L5..n.;..+q..:3..f..8s H"..vf.f..;NCOG.xf.3.PWU......<SB..{/.. U......$...).3......Nx..w.e.I2.Z..,v.....0.........o..!.X\|.m..m..K.e..,.......7P...?..-.c.i.G......s<..O.8Gp.67?E!DQ.!.l_...mNl.A.)D.Bd.{.Gs..9....0..a...i.M#R4""".m.ZY;...}.....J."......W...1....6".t$ .dT3.5...IC.}..[..,.....\|...H.H....~...U......\..;DY...`...u&.3.alfL...Y.NZ.+.. d....}.J\7Kj .....Y....~l...t1.....lf.....2_.....8)..-^...1f....!..s@.t..2...6.n.h...(...U.E.v:.P.8..m.Ji2A;..#0\|.UdX\|.8]-.!.Y..y.[~.....FJ.bj.....H. p.v:..).Ly..7.\|.....Qr.'.N.. ......u..a.`..p..w.\.x.?.....%.n..iJv...Q..p8..e..~..<.......3.L.y..R.M..>..1.....,%]."K.p....e..w.~....f.HG..!.Yf^.)wU,.p...0.f..lC1jQd.@.0..w..6.n3...DG.......~

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8110
Entropy (8bit):	7.970472055197818
Encrypted:	false
SSDEEP:	192:febLURWW4TUQJQ2XfPJTGK1CkGugSoQxyTa1nwtvLv:ferwUQ2XfR3+4Furvr
MD5:	0774C92E1F52575BED464B934A5AAF0F
SHA1:	C6B00A80DB9CB0A488D1F8C1558B746D8FD82EA9
SHA-256:	84826894489CC5CB6E8482C6C2FC43EC2CFDB998242A87F6CF6D56F560C826ED
SHA-512:	CA72F2DAE5E09FF38F5694933FB2DF286F20794FFD822DA44ED78D17A80007A6639AA938C8E9E56706A9D994C88C7A530B95C43EAB0761ABFB317FD2F1615B50
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/lseTiUc1yh-O3RozWzTOxXfoUxBkmRu8e5gKZdWfqtN7r4dgM2-Snqn46uuSLQvwL_s=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L^.../?...M(l........{DD.'...u.P=...R(dW..#..h...>.p.I.S.Ia..C.....8.F.....!%..1D."...0..HRT.....d.....`...d.d..`..X...C-....l...1o.J....rD...d......F...^gO.H.h....Hb.~.?.P...k.a.+..m.%C...y........Q..1..m.$.i.;."b......#...F..U...IL\.&'1k.h.....B.\.j[.c.}...R...IP%..L._...$I.m[.$$Y..). .....8.].os.m...3.#.o..6......I5;..`m...~.l...l....~.5..Lg.N.....O?.).d.....CDfDBqUg.`ff.....$..<$....Z. ...3..+"<......M.$...".jf..Q..M.........Z.5efff^3.1.5df.f....r07SU.P....9y....x...T4.-,..&R..P..1..iq+.6.W..!.;......L...Z].M..xO.....K.FK.... ...[S.+...A(...;.....Ib...O...........v.w......).r..V.2....A......MC..."....IM...53,e..7..&NNCb2h.Z.h.q........q...!..6.9...uP...*H..g,..........d1.......!..`.kO;....x0...Q.x.e.Rp4L...`.<.`...H..a..@.Id'...J..d...d....nW.A$.7.....H1 5.P3....A.....@.F.....Y2O.r.B...S@.V,.v.u..og7b8.'.r...y...X...cNH7l.:_; (BP $.S?....BC....<.I...........V.g.q.S...v..Y.\|"N....g..<..%

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	11564
Entropy (8bit):	7.980634353343647
Encrypted:	false
SSDEEP:	192:TWFGZCKCJ+1+uismkaiJX9eYy1VA5Hks0E45L4ptje9/:ycUKCJHuismxiN9vIokD8YV
MD5:	129677E6E582CA8DC366FD529BA364C1
SHA1:	88175E68A44490E7B5E22ECC30FFA279589A4653
SHA-256:	F4AF81BEA68F2BF34B41802EBDCB45DB05BEC1B16E4DBEDEA91AFC4B31E85B3F
SHA-512:	B3F540572FDA2DAA5E9099E053AFC315225F92C5559BE0326BA2D076F0779E9B29A1ED46E97939F5208665C259D62527B75C62C525973CAD8A42753B2912F22C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/NW2ASwJ4qtxfThhVIpm4641sR4o-yGv80yqaJnOnpC4lEmdxEcNTFcF6-TlZYtmdaA=s256-rw
Preview:	RIFF$-..WEBPVP8L.-../..?.......&.@..#..df.2..Fs..<....eY,..+..$..BC.2..$k..~...}..=..a:e.Q...\.6..:.k.=..l..(7....2..Pn.S).8.eF...NPeff.L.TfT....a...h6.S..3.Q.^).x6e.mNe....=.]n8Y...............^T.....'...e..Tn=..g..)L.B...70...z.Mn../.\7......)..)n...2.....m.d....{t...VY6.......m.m.......PFf%".z(...^.>..lku...I......m.......MS6..!... .6......G.../nnBn....\|........S....a$.....(F.h..4...^.L.VI...l......,...Eh...K.G.c..O..nq.?\..<`\.......D.T.Fw..RC..c.j..2....ei.'JF.FA.;...Ly8.'..O..I..RA..T...p"h.9\|S.3..O.3P...:w..,.B.L.g%.{..L..-M...2....6z[..........GUU..#L,ea..H.&...1...-A.M-v/..T..Z.........l...U..Ju.V-.4...lRo.\|..Ku..........$-.}..\.#..O.cV..z.QYi.I...O..E.X....vm ...>....mc.U...oG...u.b.[C.E..V...F.{..(`.N.....i<y.2...\|R.p.%.<s,.......u..j.{i........].[e..b....oJr.Jv.ih:...Y...S,...t....r."a.0....E.)..c...Di........)T...d.mk..$...fI.T..y;V...:...l.).y........+.....QZ.....W......u(...:u...#]W..g....W.......>9..W...4.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4570
Entropy (8bit):	7.949149387587025
Encrypted:	false
SSDEEP:	96:VhosiLiep5n1SBcvuXI7XKPFvYQ2KrmMFikLlO1BRqx+l2K:fjiZ5n1HxXKPTyqVQa+P
MD5:	F2D06E330F6113318774DCE3FA67EB3A
SHA1:	6907D25967396E802038786266123A9047699FCE
SHA-256:	FC65440DF1AB6440397B3973DBEC874AF55A937EB869D42E8FF5FE16CB97702D
SHA-512:	DAB0424869AD8309E945AB41B989841BEA8F73DD66D48DC2B0269C177E88173D9A1EAF8716C9218EF20D8FF267FA3C8657236E2DBB8C3BF3F3F8D5B8F361B72F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/6CFQQ0b9r5fzF1v6f0gIirWsOGL7sGWkJifuUQxxhbCMcBx5aSG_cNXpjDKDn5c1jwjq=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.Ua..o.-9oUN........3.....y......8.......}...~.r..0.....9.S.n./.(......fVQ..!..#.HfNVp..!'.Q..6.q......V!.[.%..v..v.:.&7<.[.......Q]_......_..FM...E.......Z.0......L.R..\|...r..Q.Z.4G.p.?.....l...F.m.u....3.m.m..g.{...L...m.m.X....$H.......O.....?...0.]X....p"."..2<......Q6.6.4.....5../..vn...i......t vl#..}j....+A...F.."..P.g.n.<.x....9F...n.5..D`.y.%..O.W.j...{.d.$3x/..\E&.........!S686......?.PeO.....0v.bc,,'7B..W!XFa.T ..[..J....GNd.)W.....oo.......Np;..?.F."...W.....N...0I.G..f;..... ..E...9p.j.-..3B..Q.. .j7&..R.p`.E4.=.Sv.VX]..8.....z..#r.#..f.].....b...."s.,.5....Q...t.HF.k..)_..T".>..F.....Ha@g.9...\|MfYd}...e15%......S..=wgD.d.........\|$s.<6I.T-..cQuE8ueY..).8Z.).9....q..Sp.2.}hRF.}....A.=.L.;7...>.A.....s.'.....5S..(..S..o.li.....e..).......j.i)......~....=.)......._..\|.u...[RG..T.a.W^e$.....X/.le.."...H..j"cjM!..a.@.K8X.[.=.l.O....~.F.e/t'd-.........e..R.1!... ......t...]..h(..<+0[:.ec.....+.....

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	53088
Entropy (8bit):	7.9879800556606035
Encrypted:	false
SSDEEP:	768:ZGpMIDxNfgAgZYF7VU+PHKsUMRKnlB/7Bqr4KJTdLO6QqnHVGcI0KjsP3/k:+1xFge5jPIMQBOB5LO6n1GcI0Lfc
MD5:	5FAC4891016B60CD4F50FC23A4E10D8A
SHA1:	3B5B129201AAAF58030435142793DCA9698ADD03
SHA-256:	CB78F15CD707BE3E0A049AE8889A49197422B4FE3E9BC9B75E142F6F8C52841A
SHA-512:	647AFA64D1F33CDF42225156E0355C32C401AEDC49BEE6C759901D1F90E099C0CE81BE8D873177028252B6D83BF7D22E226F6FE299056AA3D76527C868C853D7
Malicious:	false
Reputation:	low
Preview:	RIFFX...WEBPVP8X..............VP8L..../..?.M@.$7l.'..8N./..e....O.L.......0...dFU.c.......i@..O..0...NI...$.."..Y.......m7.( ..1...g...W.U.:.......u8D...^/~...J4.x.K..1g........0.._...1..bNIq.%..9.....Hb.DC.......1"#t.-@@p.'...........j.WWd....~<g4.Z.u..J .j........v...2....3....b"I.$..........vy:xRl.m.....I...4:u....,...Zn...Pn#I.$..q"b...\|-B=.~.W.....<..ZE.\|.E.....\|.>z....../.6...I..X{c.).....C...g....^{...}..U.p~8)...<..L3t.}.[Ky.....^{.O..\|...bb..N..j..N.'KC....M.....>.._z....I.v.....9.qn]s44F.3$.G....=.."&.Q...$I...h.,..~{.....9.8.....-...E...........L.....'e......Vn.=e..A+.<........`.<......6........V,?~.~....?...s.\!...+..8f.....1i..Ze:w..."...{?].I.J..1&....q:D.Ycl,...........BGg..P)..."[.....0t.-.1..\.....r2.eY.XB.IJD..:eCM...Gt.....,..t....QF.xPjrb.nr.,....1..8.v...mj....t. p*.jKiZ...P..^..{.....r...........&5....,t....G.s..Z..V.....x..rw..5..P.Z..9g.....r......+r4..O..<{z...~X.].....X....c..{......v.%.ZKg+<.}...s..'...7

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8776
Entropy (8bit):	7.9613872851996526
Encrypted:	false
SSDEEP:	192:RwQWFO3JP03Ms5Huy1DBsyyuRx09FkbO/KZoZrVhcZlU:RwQWFO3J83Ms5HuIDuyDSwa/SoX4G
MD5:	38C47955F69CDD3385FA4AF83D5546F5
SHA1:	AF3262E75B7460F71AA5227E9C86E12BCFC4519A
SHA-256:	A6A96CD449F92399140F51DFF505AFA38A8524B37F9E8AA11425E0B8F8DF292C
SHA-512:	19E1E262CB4C44DEE1F4FBC22B86C368B90610BF85129C0AAB5F9A1860B68C0482E356E0029F6B9356DCBCEB3FA1110C6A6240014186E3DC27C72AF44FFB3EF8
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/yZsmiNjmji3ZoOuLthoVvptLB9cZ0vCmitcky4OUXNcEFV3IEQkrBD2uu5kuWRF5_ERA=s256-rw
Preview:	RIFF@"..WEBPVP8X..............VP8L.!../..?..Gn.H.l........4...O..........>.....:.}P..K@IP....H..*".7Hb.]....N..._.......#RF$i.l...k..6..4..6.@.=<..2r.6.!..n..k..l..`...m.1..'.{X\a...8o..6.....DB@... .c....48.4J0........a.2 .iq.-..#&.@.jZ.g.\|...............[.......@....$...NR...#b.x.n{^.=..c.;pa8.....P...........2v.O..{.mK.$I..........O.Y._....}.k1..w..@..}.Y...2.1.$IRN..y......h........-.v.Q.3...@P.5..?.m.L.QUw.m..8Y.m.m.m.v.;..6.....>........lm..YQ...x#]..tl.c.3k..m......m...V..$.m....N.8....9.3.Z...$.m.q..$sp..A..O.tC..k.k..X.`.X.....P,.M@,...B.m.....n?...t.6..G+..I.j.%=.....7[...mli.......S.+.....=.[5.A^.8tk{..V4.r..../.Y...\|..b....).X.h../V. ...\|.U.6...V..x.5..'.....%V..W.{v..6..'z4n&m]......}...K.K.e.7.5....\...W.ez.W...@.....Rk6..>.[....]2.g..#.cP.5....@....D.A....U.........k..jqo..r?e.z:#a.Mn.v......uj.F...2.....9..-..L.^j..=Y.Wc?.Oon....4..u.1...S..U....pF.w".....c.Z=.j.....G....p....%'rIr..9......6c.5.4..S..`.g8...E...2.`..M...:.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10588
Entropy (8bit):	7.947623769601875
Encrypted:	false
SSDEEP:	192:kCja7Wa1+mALIFvidfrelHR/kN4G1xKdnGhwz1o60mM1d3nFrTiV6Ymk5R:ra7mbImiMiG1IE/T3nFr03
MD5:	8601F9C12726883B1BFFB240AB1BACEE
SHA1:	559933A35BFFF10F3F5D0612EC18E488A75D9ACE
SHA-256:	2F1C79C7338A796703B2B61686983180DC30E310DA8C40B4C426688CC7E18C33
SHA-512:	8E0175DF431950EAE0B032DB46D2D8000E5085836E2A2DC1F08C3744AFC3B551F01E06E0ACC7F724C080BF98DC2F5ECAE24FA00BA7984064BB77A2A23BB86A23
Malicious:	false
Reputation:	low
Preview:	RIFFT)..WEBPVP8LG)../..?.M@r.H.... .....g.......:b.....{.. ......$.4.A...y...'.....IuD..s.d.R33b."3.V.u.l....E..@.S0...^.~G...{.....[z...q..e.....7...u........j....?w...+\|.....#..$.6m.....7^k..,.i..@.$..3=...G......{i.....sd....',.....3..&..i...j..f..f.&.z....-.N.......KJ#.""...VZ........"Q]J......x.....l.KH..4..EY(.R ..V.s..L.1.<....YQ..#:..".RF.-.H..h.......$.RT....^z5.3.0..JJI).1Q.....Q..(..e.DD....$"...B.h ".C.5...%..EJC"."IJ+..5~...C;S...>.-....jZ.O....@....L...@......HU..uK...........l....+...m$I.$...{fv..1...}....q.S....f-.i[......f.8..IPL...ZUq.4.N+.....l.j.......;Km....V.\w...o.....E..F.B..Mm...N...I.Y.>.v.k..."./.W....T..`?M..S..@.....P.8..6..'....q$.N.x.0G.,...7..b.p1.8...c...^ff.333333333333,.a.alp.Uu.n..s.s.-.....@.y4:........`_E....Z..9Yv...@.F.8..'...^9.9...s..H.#IRd[..p.33.....?...O.'.3.eX...D.)...\.......o.6zF.l..m...]..U.m3.{.....;i.S.....B.#p..X..D.!t.:...+....~]zG......I.R.../tP.Y.?......1..%.^...KS............

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18277)
Category:	dropped
Size (bytes):	18897
Entropy (8bit):	5.668931243578904
Encrypted:	false
SSDEEP:	384:a4PzmcmvXAxSvxff+9VWhunFMLpNYUECcgmrunaeC5NTBU+JzrW:ZCHv1fcnewizaeyrm
MD5:	6B937DF7FC11C029A2DB0C4DF88E69E0
SHA1:	3429FEF3FD96FED39CDE8378C0573A5C2EB4E9A5
SHA-256:	F49FCE9719C08B38CC24DFDF67C251623D0F57831ED84031D4255C9F2C21D929
SHA-512:	A69A8BE8D9E1195685BDD329D04B56AE60FC10312FBB4ACF66C5A48AA55B7CF65D76E73ABDAE531031483ACB95AB09C1099E70778A9229B1D0E0985F35A3FEC4
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var H=function(O,A){if((A=(O=null,l).trustedTypes,!A)\|\|!A.createPolicy)return O;try{O=A.createPolicy("bg",{createHTML:z,createScript:z,createScriptURL:z})}catch(U){l.console&&l.console.error(U.message)}return O},l=this\|\|self,z=function(O){return O};(0,eval)(function(O,A){return(A=H())&&O.eval(A.createScript("1"))===1?function(U){return A.createScript(U)}:function(U){return""+U}}(l)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var OQ=function(A,O){function z(){this.j=(this.n=0,[])}return[(A=((z.prototype.us=function(U,H){(this.n++,this.j.length)<50?this.j.push(U):(H=Math.floor(Math.random()*this.n),H<50&&(this.j[H]=U))},z.prototype).vL=function(){if(this.n===0)return[0,0];return[(this.j.sort(function(U,H){return U-H}),this.n),this.j[this.j.length>>1]]},O=new z,new z),function(U){(O.us(U),A).us(U)}),

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8110
Entropy (8bit):	7.970472055197818
Encrypted:	false
SSDEEP:	192:febLURWW4TUQJQ2XfPJTGK1CkGugSoQxyTa1nwtvLv:ferwUQ2XfR3+4Furvr
MD5:	0774C92E1F52575BED464B934A5AAF0F
SHA1:	C6B00A80DB9CB0A488D1F8C1558B746D8FD82EA9
SHA-256:	84826894489CC5CB6E8482C6C2FC43EC2CFDB998242A87F6CF6D56F560C826ED
SHA-512:	CA72F2DAE5E09FF38F5694933FB2DF286F20794FFD822DA44ED78D17A80007A6639AA938C8E9E56706A9D994C88C7A530B95C43EAB0761ABFB317FD2F1615B50
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8L^.../?...M(l........{DD.'...u.P=...R(dW..#..h...>.p.I.S.Ia..C.....8.F.....!%..1D."...0..HRT.....d.....`...d.d..`..X...C-....l...1o.J....rD...d......F...^gO.H.h....Hb.~.?.P...k.a.+..m.%C...y........Q..1..m.$.i.;."b......#...F..U...IL\.&'1k.h.....B.\.j[.c.}...R...IP%..L._...$I.m[.$$Y..). .....8.].os.m...3.#.o..6......I5;..`m...~.l...l....~.5..Lg.N.....O?.).d.....CDfDBqUg.`ff.....$..<$....Z. ...3..+"<......M.$...".jf..Q..M.........Z.5efff^3.1.5df.f....r07SU.P....9y....x...T4.-,..&R..P..1..iq+.6.W..!.;......L...Z].M..xO.....K.FK.... ...[S.+...A(...;.....Ib...O...........v.w......).r..V.2....A......MC..."....IM...53,e..7..&NNCb2h.Z.h.q........q...!..6.9...uP...*H..g,..........d1.......!..`.kO;....x0...Q.x.e.Rp4L...`.<.`...H..a..@.Id'...J..d...d....nW.A$.7.....H1 5.P3....A.....@.F.....Y2O.r.B...S@.V,.v.u..og7b8.'.r...y...X...cNH7l.:_; (BP $.S?....BC....<.I...........V.g.q.S...v..Y.\|"N....g..<..%

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	28068
Entropy (8bit):	7.982902928995031
Encrypted:	false
SSDEEP:	768:kA2R9/naqduyxhkIvI8jc1JFUtxYEc5ys/h2ygU:kAyYqduyxhk4hjc72cf/hgU
MD5:	9A5DB0B18E9EA28D97158A2EB42309CA
SHA1:	B075C2DB37A8FE06943F1072B51A6ADEA263761B
SHA-256:	5BC02F4D81D7287CA2C1BBF7F963983311F425093DD0CDA9EA6FB5BE4F4B50E5
SHA-512:	4D90AE6536BE00BBFD6E5D5FB4BCD0B7024F97056CAB426AA39DE8C7CB16C7597D8721F522A94185D12DFBD54F7E724AEE23E998A431007AE4A69B599B00C7B7
Malicious:	false
Reputation:	low
Preview:	RIFF.m..WEBPVP8L.m../..?....$E.ff.X...f..!.....H...FD<..H....W.,.H.<........U..@..f.~#...f..b.W....]..U.T..7~X.Z..`.6...... .../r..`.ff\|CJ.UM.afD.Iy.._.Q.'.e...~.u.S.T....""%...\....!.I..q.$...R.;I........I...!.....t%.......Nv..J....=....9?DDd...]Y.h_.>r...I.YD...$..I:.".A >IP..{.v....2e.$.6me..ms.C1....o..H..)....@.?1....;....x...C.8@....."4..t...v"qP......5]Cl.0....Bk!..+y.....:>.o5;L..+.T.'..4S....$.....H..].u. ..7(..l4..@.Q.$3..X.2l....6Ph.p...v....B....J/..... v.L.+Q..q..H ...N....(...A...34....DP9...;..`.b..........j...3p.....ZWYx.6../*..&..)........q.f..T~..p.ND./.@pO.C...07y.....=@..EX...{3',.....X...._..{b.3x..G{...Hr...^.=?I;. "&......?J...r...:...r.$..X>l]{'.1j c.........$...D%..HB..&..).g....).........'z...@xh[...@ri/..j.8....D%.!/Um..P!G-...!9...ZA.......}...'.U.%j/@.#9.,9.U.p....m.h+@[.}zO...W.K...mW.&..8i.=...Nx.....?.(..}..#h..........U.+U..F... ..b.1.....@.6.~..g m.l.-....%.m....'......O....a.i..G0......4..C.h.7I...A`.W.i4.hL.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	7860
Entropy (8bit):	7.955805602659907
Encrypted:	false
SSDEEP:	192:LOV54+q/rQD1YSiWl2/05YdNGBhK/saP1FH:LOV5MkD1ZiWl8tzYhYP3H
MD5:	46170B933402D7FAFD745DC0CEF0F062
SHA1:	239B021E0FE588B2EA6875F584E46F1B09A53E9A
SHA-256:	5059ED15F42F09678D74EF63726867324485A18A42A7283A4C0004EA6376CBE8
SHA-512:	5E6E9B8B92731A6533365CA6CAD8222F907F02FAC571700BC67145560842D9A9AC4C1EFF10327ED17245220DF14ECDAA0BF1BB4FFCBF0AB0BEF123E7ABEEAE9A
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8Lc.../?...M0h.H.6.?...........v~..<...I..wP=..4.I..m#I...\|].1..4.8...T...B...PCw"w.2..HR..c...'3.?.....V..... ...6....0..6..f.7.oX...L..n....s.<..k....\|....y...~....G_.......M...N..CA.6....v.......v%K.3..m...1.>..o...h..P"..T=.+.....g@....9{.5.{Q.K....2.......lD.....h..l.o.Q.......].j+.c.s.........A..9.{..'....G.?s..,.A.A!.K....m....!..m;$I..8......bwUW.3s.m.m...m.]Yi.N.K_."..m.m[.Vj.}L-l..}...m.V...?..zl.m...hk.&..UO.m.nlk[.c.dI.P..\fffff....)f....rs....."....di.9z(L...+ ...CC.X.!...JTj......H..&.....x).v....uK...e1v.o.So...4....".........B.B.....-..C...........1..0...l..RV.X&.).`.f.l{c\(X.P..VZ..P..@C...x.iy...`.g......-.W.R8..2..R.....T. 9=t.~.!B.a..LT....N.X.)..Lb...p^}.2.2.."..V%PK..V...9.z..3...... .#h......./p...C0. L.(.0:. ..^H.}...E.p...(@$....!.....z4.@....(`Q.IB[.(...).....Qn%..#....^_.....`.N.I!e2..S.r...hI..W...O.y.....a.5%.......eL.[.]..Q7.P.."."....%.""...);f...8...$.$..b..'9...x.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4276
Entropy (8bit):	7.947437701443973
Encrypted:	false
SSDEEP:	96:7xt684cj+nRPOX8XSJYezhcNWcXY53Ufgcc30tA0S:1n4cjcRPA8XSRhcNmxUfzLAb
MD5:	5AB20EEAD7888C45390108FCFF18A460
SHA1:	9B1F8317C8153F68CEEAF5193AE6EACD8CBA8EFC
SHA-256:	8A024C0A14F78B235BC1A07D4A30E4000FE3B1D99E8C68D090DE74ACA4B76148
SHA-512:	5F484430A59E1DE5E576C3F4C61AC24B753724C0F9BD4A535B088FDA03ADE0DDDC6973C03B77322B8A03AAA6A24AB42E674616333FA8B16C2FE1501BAA45B5DB
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.&.../s...aX0c..3333333333.........{...'>.......e.!w..G....Gv..1..l...92z#.....0Ek...=ys....L.\..(..g.L.+...i%;s.p<.)g...S....#..3..+..I.i[}m.m.m.~..e..m...m..?ms.....Ir.f.T.MR....p.@Md_..k..5.....2>.xp.V.............R4.>.6....y\/.I]..FI....T5.nZ.......o..O.),...KH..._./!H.....C'.I.....4.w#.R....s....F.f.T.^.&.x.[........~M....v.W.M...SB#..6.u#.......+.9......c#...5O>..G.<..Lpx2.r..jvq..5<yU5.TL...j..m&p....S<../&..l.u.H~......)6..4...x....&.9....H...-g.qz.Z..>D.B..._9.KN......i..U......"c..4.7....oA.....PMk...O...S..fux...u....>p.X....`..F..G......2c.....;7.AW..+.>.Z.LJ..J/...7...-..U.c..n".u..(}..i..].Rd.LD.J.t.]..R.}$'..&b..bd..v6...d2..b....bt..p....W..5.u%;..+..q.....5D..`8..W.&.....Y....n.q..\R...\|9..w....E.3....^).~....6.V.8..^.....V....vq.K....._._.b...E.X.v...+.S(\d5..GAHG.#K.....{W.U`.....Si.....[zS1....Y.\|.S:.m..s.E.WB.Jf..Y\..Q.m.A......r....z}.B..6l...t"l...U..(h..go.......~.!...{...9...S5.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	40286
Entropy (8bit):	7.994832373658113
Encrypted:	true
SSDEEP:	768:T9yEHx1cbeZqjOPszUIdXB3owny8Z7MFCLmWz0AKFZH2xsbUpJOaH7e:T9yWx1GeZquFIdR3fny8Z2NLH2YENH7e
MD5:	89102E01A5F72E9438B364D0882AD603
SHA1:	919BBF882605DCC3917BC76A95C1309DE68C4729
SHA-256:	5F65C139F54E868BD51677444EE8EFE39DE6A7D00AF0C5EA68FE8BB61FFC815E
SHA-512:	8960A493F93881347001E7CD5EBA171B12FCAA7BF1BD18EFEFCA89CD4BD7D2D7AE20BC3341AF244AB833C5DBE9668659AACEC30E0EFA5C1D934331EC750AA6FC
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/tC7d8c7CF9UbOvBTB-B_17QB2c19cnjILsYw6OtQrGDKy_l8MsEWsGZZOrX2ZFjeDuNA5Zb_i8a-=w648-h364-rw
Preview:	RIFFV...WEBPVP8 J...p......l.>Q$.E#.!.[-.8....`&.^r.A..$.........G.7...u..._..._i.w.7...o...}W~......../...w.....O.....~..?m...s.}.[..._...?^.c.......~........S...K.W.s........l....z..A.{..........g....K...]........:..W.....c........?....S.........I...........[.s.C........;..............?......g..o....._........!...g....x.~....o....................?...............m.....`.......O..................#.o...........^.]...\|.&.U.-....Z..A.{$P..0..D...~~.........@....*[....1.82WC.r..h.v....Gs...?\|.Q.ZYie.......W...Zlk..e...m......5z2\|..2.I...L@....p(..\|..v..-,.....).C...tY.{RJ.Ex2..B`.>S%zB:.......z.N.r.bvx......K`.........E.8R.............\|_"..,b..`.n...?\|.....B...{..t.`..r...%.......!,.=....`.j.......AE.......{.4.89S\.nL].V..b...17lUBW&,.B}....s..[..O..9........^...n.\g\|Y.........o...m..y...E.f.....,.?.VB(.g..x.;[p.s..\.H.yY.4.1-6..2..z.....Fq.......`.?<4q.........5.a...>?.5.{.-..K.P..w..:...x.1..r{..yW.)z.....g..w.a..[...........B'...L.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	55036
Entropy (8bit):	7.993796361635342
Encrypted:	true
SSDEEP:	1536:A4J76bdOOz1EXyfa0yXhMoMGjHF8d/r/H66IG:LB782yi00hi/rf68
MD5:	EA9B540836CE96D89485CF86233D773D
SHA1:	AE2E5E265301344327DF771668520541A446751C
SHA-256:	440600F95B3A65833F1B2CE47DEC75D98BC2E6B59FEFD0C19E2057931CC79906
SHA-512:	8DB60850DFE3A8B38B90096DC2E5FE6D4A5B26A91C61ABB84B5889387665333EAAB0D8BFACA96F0CBFE3EF66E525AB54418BC52C70C8EA39F5C20073A53F67B0
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..Z..Hl.H.$H6....?...O ....q^...3.....\.....v!..Lx...A....j.g.....&py.e..0...@...+..t`..H.B.3.V!..KA..@..0...s)t..w[.;.&.j..m...$.qH.,2(T@ '.p_>B6s.G_HL^~Z...f...$.C...S.0.-...VJv.......$..+[.......w...........p.8Y.a.Q....a..E..:...J.d...03..M.......\z.GGKO[W.....i..Um... >.....!2.O..U.._IV..Q..Dm..y.n$.....OH.....o..<....z....r..v.._.h.)@.D..(..:..S.W.O...f.].;......a..d0.L.0pv.3Zv..m....0...a.4d....'a3...G,.....y.G......+Z..#.M....Q....vv..m._.... i....6....O..Q...e.h...~j.4.\|.d.OZ.7........f.7{.u.Y6.k.P...EH..{Y..@_..~m....Ze......w.G...l......=?......w......PT=.4.....\|.5...;.I.?.z.r...\|.......@.j...g....(.,.j.~T...M..`Q.iR-Ty...j/....@..........T. p...^._..:....W..<.?Y...4....T..&...Un.....]t.t.].....{..&........F.-.iT.jR....<. a2Z.J.W.'..-/.6L.0.3.JX..C....h...@Mw....!a.6.$.as...;..d..}g.`.....-.,7....@.....)...$O....P..U..o5j.6...t......#..3sg..Y..*.u3...pz...>..>...'.m.w0....-I9,.ek..7o..]...4.\|..x\.0.d..t.............I..

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	54736
Entropy (8bit):	7.996413898708276
Encrypted:	true
SSDEEP:	1536:VUiEXCYr9H2PaBNdUvqkOiG5oDtAad0ku4/57wUD5Q2la3:V0nr7zUvTfG5oDtDtdZ4
MD5:	E7F8B129B4F71EDA5604859BC080B6BD
SHA1:	CFE0C1F355F049A2A539CD0D9FF4623FF2EA0424
SHA-256:	3E1A5A8182EA0C8CF9D8B6C6C53A094D3E09A065AF41D0CE4605C68496D27C5B
SHA-512:	68BE0A7BE10147AAAC18A75B48D6DA18C6753EAFF8740288CC14725C5264DB4E3FAE8347E540B6AB7955D0735590D262210E48DA4488CE63E0D328F6668B140E
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ...........l.>](.F#.!.)t..p..ek.....Z.0&{.i.+........'\}\H.&.e.l.w..k.I.M...?Q_..=y..R........O....^...?.....zw~..E.h...e.S..%?E.s.g...}...lA...^c..O..}.........W.G....W...>..........o.../.?..............>....................(.Z..C..?....q.7..;.b..&......\|Jvt..h.....<...)c..c...Z.B....jZ..#.o]...}.{...-.._.....\|=//).[..b..s}UX.k(.n0n....l.~.BK#....vm..w.....TU...'g.....z_...q.....&......~.~..._..PI....7A....N-..y.dA9..A.\G..U.~.jQ..kC.K.&P- ..{<..J..38c.7..B.z.W..<.x#....s.w...9o........l..OC>>.zz.!.]$...m$........;..a.....V.B.u"..!$^.M..iR?.mo.1r....-.....=<i1...k..j.Mv...@...>b.g..L.....fYU..\!..9._R.{J\|....f....xy.v.... ..o...q..=._...p...r.....z84...2.EP..r.w).......'.\|=i_........D...:N..C~..L.&...#.im..DI..\|,.Z..O.yj@ .I..<.....O..huC...)..>...D...7....3P.........l.G...H.t...d..0Q..m.....V....{.b. O....2f.U......O.(.r....}....?.G.L`..1.0....<.U..t.h..0q....~...l1.zc..L7.8."_J.%..N.T.Ct.........l;....U-..q<Xv...C.T.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3700
Entropy (8bit):	7.940804872171076
Encrypted:	false
SSDEEP:	96:u0aRnCUerEqc7iYKx/F460A1UinDoXZrBqkElRAgaevfytpU:RaCUerpYKNF4Ha9nDotUkEgMum
MD5:	C0862283A462739D303C9D9B3E7D32CE
SHA1:	380C9A84C4A4797E70CDEE3D0A8A68750A79D089
SHA-256:	FD51521B9887138D805F079CB3CF4576BC381519EAD4F48C8B8C4C115F415908
SHA-512:	7B941B6822BE7CCC819CE970A08C2AD093DF43966DD5CBB9BF6B8DF85A77399D83AC2E7EFF6B50E50EE2563E9D762C004FD1AE06B87299D978CBBE1CB92DFC2D
Malicious:	false
Reputation:	low
Preview:	RIFFl...WEBPVP8L_.../..?.;.-...W.E.5..bffffffffffffuO....".(6ud.c......R9.H.v...SC....w wM{.$.a....,b..]b....ff...SG8'.d.c..#3.+...l..w....Sm..Y."333F...W@='5.^.yj.9..2.z............v6.0....s..\|.f.'3........Lv.m;.m.m.m....m...m..4i.?..4............P..&..<..!.2...@..8..Eh)j$....P...,4.....ngW.....CE....D........#.....t.&....YL.3. \|....VW.-,........$..k.....n._K+....E..X.cFT&KEVe.i...o2.s.z.................7..gA....WGV!.EPd.q..!K...![....??[.,z..&3.....9Z.o.:..@.O....F... ...=..q.....jj...7.....Zb.]Pa....xo~.... ..-n..1...-?..........p........j..i..A..r?T(4L.U...EF....T.......P`.)..#.P..V..P..)..b0>.8.9...[4......i..]X.. `L=+h.a$.....`XR.{.5n........A......./-........lp.....&..68Ruvg.....T/.W.7.....r.p.U.:.z....0<..].Q....c..j...[...l.p..8.-.....x.?.........>..... _..)s...o...........&.[.U..........W]]....Q.(`.....T...A.......,1{..6...G..^....F.6wfz.:w....Xn....+#.../G..e.A....wM,@..QYi.S...j...%F`K..lHB.d8...;..x..k..y...r..

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	205300
Entropy (8bit):	7.9913705835653115
Encrypted:	true
SSDEEP:	6144:7y5zefD3RNudOU5Lz82zR/sD8vlEbYtqJy+v:7szeTRoOUFlzCD1bYtqJyu
MD5:	E46D4912A0C35A1EF16B51F4130BF49D
SHA1:	08303D8A84F30758EED030D8182904CB6CD45E97
SHA-256:	5B120BE6E2173B648E98B920399E3E3CA72FE680C1E276DC81A37AA97FD9997D
SHA-512:	555C25AD32BE8806438314B8820460E3C8BC49D4E53D2063F0214DCA72A44FDD904F1E01A29EE54DE71E0634CEA9172D9EEE1914DBD765A62CD30A1262F0573A
Malicious:	false
Reputation:	low
Preview:	RIFF.!..WEBPVP8L.!../..Z..@.$7l3....O._....O....u...H./I..t...y..F4..7!)1!.__wc..d...0..k..`@..B)....m.`k....%......s&"v.9.$~..-..D....3?...."..$..(H.n..\lphkCU......[.......L..P..Gz~..RUduwI.X.G....v=.....y..Q....L.[.U.lU?U......0..` .V\....qb.j3.slW....rUK6.\|#...\.........h..p.H.. .f......`....''''.F.Rh...5..N..Dl..{.uh.x.....s....<....T(.......d.t.yc......).4..vK..Z.m.........q..9....w..{..!.."Dr.B...2.9.Z.m.$...M(^....{.}CkF..7...~.V........l.m.i....TM...U..=9..[...XE.e.Mg.....m.1......Z.U.W=.q.[8..8.....Y.hb..-j...@...d.,.....p. ...T.X.Z.&.. ..D.x.....}r..Pu.`a...N.,^...<G...R..}....s...........[..]............g. 4p.yy.S.I.^..u.. .!.)U.....M......v...w?o..lm...M.w.......Vq.:.:...\|.YgmQ[...1.A`...-S`..2Y.ZZ..q....7...U.......G......j... ..... .....V...EJ......../K.c.>..U.du.!....... ......5.PC.B...Xx..";XB...'.D.....t[+\|.i.V.....0.^.s.'....Q...7r.}...n-.,...i..j.....&G...........Tk.<.)..Ppn\|^....Z..mk..m{....'...-K>Y....z.p.w....s.Y....j@.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	6.676048050841229
Encrypted:	false
SSDEEP:	3:0Zrwlp8NJrXNwje/UwbgXwYIlGKZqvqJAy7ZrUilBCkzX/BfTA1D31n:0ZklpUXNwjecwb7lGurFUihBLiDF
MD5:	461204FBB9CB6D19F763B8EAECDC01D6
SHA1:	95354D81968469C5A9EE2DDEF3C84B9F788802D0
SHA-256:	FD29716389D0077F1D88C7ACA6A408FDB9E27A9D33FBD74B265CFF2F6A2E3786
SHA-512:	B7BA5AB186109447B9C6317F7E9EC8BCBAEF65B1A0EC96FB12334A3C0DF97430B142B2C3C7011C0B7D09C425C8E673CEA79F4EF126FB01BB0D8E23409A177BEE
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=s16-rw
Preview:	RIFF....WEBPVP8L..../........G...C-....13+N.8....3.q.G..M..G....~.4.2IP_..)......Z:.}.....$...... O.....,......QU....T...$.?%.....z);I2Z9...=$...{./u..2p.cj.\...%m..

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	52048
Entropy (8bit):	7.932854653786267
Encrypted:	false
SSDEEP:	768:3uZAymcJGwrD2sPnuEj+T6LKfPBaRr64FeqVCn1mYY/CQEbPMQEBJv4iJk:jcJvDl+T6LKfpnqVCwYYdEbPrEBJvLS
MD5:	7FA328C422128500DF949E409D2E5F41
SHA1:	FDEAE7E611F9577101685632CFC17F9BF059FA00
SHA-256:	0E4EA7E19ED1D9093BF33B23213264DFB6216F42158F84205C503B662CE82AA2
SHA-512:	B619CC102443BEFB1361354810E63D399319B501B5895969C1767D3B2B8EB69E7C50749110E46951EB05A1BA991EEC7FC0DCA341D5E1C5767CD3BE6D66AE69D5
Malicious:	false
Reputation:	low
Preview:	RIFFH...WEBPVP8L<.../..?.MH.$)...]@...'............z.~....x#......fFD...l;"`D......K.y........&.+I..E4`H.:sy..O....`Z....S.%.YY..a-c.,..0x.....=......S.&b.x..E...t.....%.!..E....`.8..qe..K....a.y#.[. g1@......k..I=....<.o..'.Y.$)..f...k....e..R)....3@R#I........&.."..m.v2...m...5 .^V6;.....wp.g.?....%.....`...cdC.&....8.06.g.(08..)..8.....1T..M.b..Z..`......8....`B.......F........j.4.lX[E...H.....u.s.F;...K$.-.`.......;....(p..S?...D..6..zs^...566..;..W....Y....{.].)./...1./.O..`\K.......aBt.F.a.<.Yi..V.]...........'.....+..".&/..1..d89_.P......\|%..1..%Q.......T..w.MY...C......K[LIn..[E-L.......;q.....).....).....N..1.....{..:.I.m...f......J[.c.-B.......o!b.T..D.E..I.r.l...X..T..\q.Fn..".%...U..W.!..^..@.N.&....<KNcB.....'Q.R{.w.v.]..f.ywD.aE..W"=.+.tQmB...?...;......v.).~.P...O..m.Yo.f..o......u.\|..\./E....s..N3......yO.......H~.,.R1.I+.........~..DO..R.K..((.....q.....0&5).............t].t.R. .P\|.F...].....M ......MZj...tUMT...B.I(..@.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	60472
Entropy (8bit):	7.9963373437241305
Encrypted:	true
SSDEEP:	1536:CenKnw09EGjk1HLYUv6aAb28QoNLp0eFe7e+SDH2YOktwb4:CeKnyrYUvs2NoNp0Se7eXsktq4
MD5:	306422F8340BFECA17413E26276C2016
SHA1:	DF9CC65A8C3002E22CA3D4E666B7F38ABA2042FF
SHA-256:	C836CB225038A5FF9B058652AAC2456858C01563B4FBD7D4EFEFAA99A17A0199
SHA-512:	879EB8A2790CD2074628E4743BCB93DD08514DC761830A2256996A2C5696138635A8504113067C20782033C52161415FC1FB47594D8D40264CA855CE2ED24EDB
Malicious:	false
Reputation:	low
Preview:	RIFF0...WEBPVP8 $..........l.>i.E$"...W.....Mzc..5.........1..?J..o..w.......C...~....O..[._._...._.=......1...O.o.^................O..^.VO@...Y....?.....~..a.........W......<.......xO............C..../..d.@......._..............................]...7..............o...........}.............?.....O..........`/........A.c.m.?.....?........o............7.....?......g...3.../.........~....h.....F7.....^.....c.k...yD...E...?.O......+.NK..4._....>L}.I.F5......]...1.$......lu^.....UW..2x..A....+.(..v...~zL.Mw...r-.S...YE;........p.b..o.-M..C..+.9.V#...........CM.....Hr..@N..?.........m..j.14a.X#D"%E...Wg....{....e..h..{../..b0tDVs..=J....vZ.;.{o._Y.).... h!.g.....2..X..0D.~......R.!.#h^x.o......j.N>.....l..L......q....J:.sEG..b...?..<..@}..........g.2V....h..&.....]WX.K..;..lC..o..y...n...7"o......L.....V]`)>.....w8...S1p@..8.Jn?$..~..R...Y.5t.1E..~.\.p.....pw.:...Ux.b8..m..N.............&..!.];1...Q`Dv.ok{N...*&Ns.,>-:./..........2!b+za.....}#......r..Pc

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	96244
Entropy (8bit):	7.995866684143568
Encrypted:	true
SSDEEP:	1536:FHK/hRcwAibBCWo2Kr3itjSXkDt6gtYoRrLjNB9wm6h1mWhK8Lsr99iKw6Y:U/jcwt+2vtj3DkgtjvpwHzlsAs/iKC
MD5:	466B4A5FE8657727A479600B7EEB8FC4
SHA1:	9FCA656E630B6182BB492ECF12C66B3D32802AE3
SHA-256:	E27062228CE45767350AB98F35BC7566D3636177439EDE0317E640C408C7FC1E
SHA-512:	F6B4C24892AA8B090B0539C127AEC8C6D4A85029F7E9769E4FD942F75A20B2B68A525BF7F7A338B928E8CBE32FB0B067AA8BA4B5EAEB58FE01406B0BDB8FE49A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/f85XQiNarzDgmEcOULx2ZI7mZ3ZzCos_H5DiXYcO6fK1vNQy7dhIr0mGpI9yHeNZ-Qb_OktHBuM=w648-h364-rw
Preview:	RIFF.w..WEBPVP8L.w../..Z..8l.F......._.WAD.'./%._.`$.../I...M...U..'t..t....N...n....M.^...IuW..... .+uR.....z....s....Bw.._=.mI%.....,U..t..=..b....m`N.....H...&...'.$[.m.....\|.r...`z.c.7l......~......o......N'..x...FC2...z.I...(z..~u..2&. .......Fh....$..I:.!>B.....m.a..-M..H.@.l.i#..............,..........<...-.+l9..-...,... .. Uqx$..,.....t.sw..k..97~..d...).@...2.[..../...?ftne..p.i.Msn.s...... ..%!.;..T.5.U.rc......!!tX.....lb.\|.W.N.;......m".&......ia.8T.............QmYE.O.p.>.j....oXB......-.....%.O[N......!......!.X..d.).iNe_..7..K.^Z,.'{.%.V.6..g..5@.?it..R.....k.{..m2.o...!....>...JUWE.....X?.....sk..U..p.....T 7..S....>..Z...G.N./N_Z}...TU).a..{g.....`........{....................Z.L.0........@.V..}k9.T.J....4H....B.bb.X.}z.S...3a..5J....u.j.....h.i`.H=.!..m&f..y........2..$...`]...:..82.l[.$O...>.W9..'.....c...`0....P.......rB.HOF.3.(......?......C..H.. >..e.1e...........W.....?...]..r;..q....._..O..dG&....,.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	79242
Entropy (8bit):	6.019706801697464
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOI3buhXwW4nxM:mGRFauOxLA/+IcTOZX/
MD5:	68DF4E65BB75C72BB2DE801EEBEEC9C9
SHA1:	76462F14972C57A6DDD6EB1FE624EF226A7DBC37
SHA-256:	AF772A1084C1E08E7A7B0A650DE797CB14337EA9BA8FEE556BD44DB8E0DBE1DE
SHA-512:	3482D7A1803045B83001BB180548E8E125D8F48386DE46804CB4BCE6B842C545282966A7E6F0F137C2661328C4D0D99A6301A302312591F03728135FADDE211C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	835
Entropy (8bit):	5.130101663717494
Encrypted:	false
SSDEEP:	24:D76bBSJFvVdGUF+fWlp98HpXXW/clctloFHMZeKsf:H8MNAwlp6Bmicnosk5
MD5:	F53D1967DA56BF267CD09767738E3507
SHA1:	FB87E868C42DB65F4CD1901F09EBAA2DA9626124
SHA-256:	5EF32E0E13AA8DDD4B9B288F1703B29C87CE5A8494C19D75A736DDCA6AD6D9F6
SHA-512:	F6CDF2567958EA29DB1033CDE493AFC2568F7269CA48705B6BF3E3517C5CE63F5D68363CC93E1F73EAD45E24766BFE8C4A6096F58E986E75DCB148C0D3E100A9
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/support/realtime/operatorParams
Preview:	{. "operatorDeferredUrl": "https://ssl.gstatic.com/support/realtime/operator/1729584116185/operatordeferred_bin_base.js",. "eagerLoadHostnamePattern": "((https://www\\.google\\.com/express)\|(https://www\\.yt-web-green\\.corp\\.youtube\\.com)\|(https://www\\.web-green-qa\\.youtube\\.com)\|(((ads\|adwords)(-.)?\|campaignmanager\|photos-.\|play-.*\|support\|support-content-staging.sandbox\|business\|fi\|.+\\.corp)\\.google\\.))",. "eagerLoadHostnameFlags": "i",. "cbfVersion": 1729584116185,. "screenShareVersion": 1729587679111,. "settings": {. "enable_customer_can_end_chat": true,. "enable_emojis": true,. "mole_show_survey_url_percentage": 100,. "mole_skin_version": 2,. "operatordeferred_report_rpc_events_percentage": 10,. "screenshare_skin_version": 3,. "rms_screen_share_skin_version": 4. }.}.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	43764
Entropy (8bit):	7.9886137330089
Encrypted:	false
SSDEEP:	768:2tsNR+1i+RCWHT4FJG2ODx/f83DsMEsRUHYZ7NBlBa9lInKrkNlLv3pkChiJj:2t+R+1i45zYgxM3DsSWHYZHz+mnKrkL4
MD5:	5641C6F62D35B3511847BCB0D713B9FE
SHA1:	ADD194A9701D2FDD120651E560D0D5A3991B46F1
SHA-256:	0E44A67A0DA4275E6C2E4FFD1A93C042CED14A39E1D9F4CCCD41089547FF3CBB
SHA-512:	142D5A4F94B49D74506ED729839986CFFBFBCF04FE426CCB3BFA8264CF0EB47B2D00CE85F707B5D61B5CF65CA029291072F9EF4ED8210A5CEC7BF6F482188F29
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8L.../..Z..8l.F....A../x..5....x.....I.}ZAM,..q.'IH.c.vM..c7.{1......I..Z..'...of.o$...."3"j...}"....Lu... ...K.F_..ql.3.~......-;.....,..N...Z....o..C.i...@i..r/.._-...v.f.N...R4.\|.....{r.B...E.\W G..Hr!V.._.}.1.13s.' .R.F..h#.ZR..-(..UhY3...].cy..n....@...tk/..&?J..]..q.....m.z.......t)]J.1...b.j1....JI...J.WM.....Z.>..~.~.5xT.]J..u).z...n...i....M.g.J.R!...bY.c:..}.W.>...?.`A..2p...s..._..0..T...s.w%)I(C.Z.U....W...B.Z..UkP7...7i...V.y.Z-0..5.c...Y.m..A....q......_..p.o.q.o..j..#....8A.........jP.x..x.1...........YR..e+$<..d".........@..["..~.....B...S......B...$../".Y.#./1..8..8..........k.q.O......./.=8.{0.C..1\..z.I.......+.lo.+.B5..(.L.+VZ..JR.xA...$...I.]......$I.?.9'...Z..g...}..`o.K}...w.+.uwwgle\|...,+.9..bz.{{..zN!..5q).-#....I\z.w...B."...p.....Y...wo.]I.pN.+....;..Q.;....J.Rl"w...[..U.P..}.Lt..N.....Bx...\|.......Q.6..eM={;.c:..m.m...1......Ee.I...oX.........gf..bUi.S..m.m.yo..v.....'.4.....b.x...Z.%.y.....

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	303438
Entropy (8bit):	7.99109230855078
Encrypted:	true
SSDEEP:	6144:NONPYY5JwWZCRtm9rxsDygQIU4N285I0HCAQxOsUlOc4R+O2BoNDM0:rY5JwJRtm4DyGUhOsgGR+zBot
MD5:	A5C166280DFE3A47E5B8A14B51A45065
SHA1:	17CFB89A87399F238EDA795C7AEA806522EBD44D
SHA-256:	F34D69E41C4C1E32C6BE479C66D069EFEC716AFEBF1ADD8A1BF16ABE5C8BD453
SHA-512:	26113643EDC9EA6CBEED59C0C81C68FDAE2A6C2F74177A83709C7C75BB5C0AA2F165B694C01F56D43945699E124D95378D57A3941485C5E9F20C376F12F30957
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/R9vMA0btLstD6t9Q8S8Unwdahep2m9P4RWri0lCiAKoLjcEs-MwMnShCS3SO_6XR_Hc=w648-h364-rw
Preview:	RIFFF...WEBPVP8L9.../..Z..@l$9l.;.$/.`.!.....+U.TU...a..>...{o~........ .6.....!.$.4.B....v.+...r.g..>.._.......=.x...d.p..+p.9..(....1q`..i[S.-..e..~.'.Z6.`.L%M.I........o....f..4fZ.].~.z.;..>..G>ZMO{...4.Mb_U..\Vm.m...L....n.M.J._[@.f+./.nc......$Uw%U.,..j.c'.5..F.<..$+e?...A....`-...r...HG..` ..jje%l......}..?..d....k_@y...C.........4F...H5..J5.p.}r....j.$."~..A.$1..xo.`..}.E.c0..HD ..."..@Y..F.t......S.[..y..U3k.......D@Y......PA....].=.....>..~..F..m..{....)';)..."..F6....V.4....!.l..I(.6".."R.)..@.AN+.$.q. .@...S@"........)8.....p.B.p(...Ap.p... R....N.lB.F..'...,u.pr....aW...\/T..U.a...T..n.Vl..!.5.K?.$.........6r.......q..I..B.f.l.\.:...g.P.....C..v...0:...~..............c?b.].31......+......4v]...:....@....u.V........0...}&..........~....0..`,..d......L. G..Hcb\|.(3vlp.}..a3.X......N..ke....}fL.1....BE....@......T]f.0.J=$6)#.........s.%.MV.5\|^.'.=s..>'. ..#.I.G_!...T....g.&.....UG6%..1.Qq.8.$..n...\....lb....b.y].v.b..@

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	16242
Entropy (8bit):	7.9402572379727125
Encrypted:	false
SSDEEP:	384:Xuw19G/c5AIyS87w1YRmRAjkECvcFd/NP5zOoYJw0:P19GU5T587wiAsw0H/NPeJw0
MD5:	6B2CB8AD472A93B0D97FEE592C13E1AB
SHA1:	F40C495C1CA874FE508F6F69059041A5243D9A38
SHA-256:	49CA14F45BE05F2A2CB10304CB6481A9A18E15141819C86D15E8891CF371AEC8
SHA-512:	7C63115A9EA99072CC01CE04D354952C4EEC03B7CB781186199F6D45967A7FD5D7E190B2810D671F53A03A6B3964AB1B7F7A4D84114EF3BCDA7BA4BCABA23C1C
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/dSg_iqQpKYA/hqdefault.jpg
Preview:	......JFIF....................................'.....'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W......./../W?7=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................H........................!1.A."Qaq..2RS....#B......3Cbr...c...$...4ds.........................................................!1.Q.A"2.3Baq.#.....$............?...B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..N..N+.P.?...8.n....Z.>H.9.N..N+.P.?...8.yC...L5a.G...t.bq^...}..{..g.a...>.n.......<....N+.....K.\|..sp...W.G..LO...n....i/B.a..a:/...n.....C1>.......a..a:A.N$..yC...Lp....(y..V?.>.f.......<...../.P.?..X......O......3.1.b.>...i/B.#..!:?.x.yG...L>..}.>g.c.^.....Bt..O.....;.6+.P.?....?.>.f.......<....6+.P.?..Xo.g1.....{..g.a....(y..7..........3.0.....<...V....Bt..a.^....a.^..3.0...s0.Jz..c...?.%?.w....;..4

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	39276
Entropy (8bit):	7.9937207470063125
Encrypted:	true
SSDEEP:	768:WLm9ucPACNV9jQ/YV6fdd61jaDJzv/l+51/qa9WFVhcwT:om7LNV9YYxoJzvCydhpT
MD5:	EEF9248F61C0705848F355E0D5585686
SHA1:	4A50F405D48049C611DDA383863C1F09BDBF38B5
SHA-256:	BDF1E4D4D7C6B50832697057F3AAC2144FEEFB3B59DC99279FEFD8D4935105A0
SHA-512:	955124457345FBD69DEFB07E4E7051DF21DE510D9C140A64F772C4593B36615E2ADDFFAD280C6BAAD50E13E9097949DC670112FD53952E1D15A6D2BE618828B9
Malicious:	false
Reputation:	low
Preview:	RIFFd...WEBPVP8 X.........l.>U&.E#.!.\|.(8.D.7~.......}...[.&..K.'j.....g......p.Q......._.....]...g....@.!..?....C..........{....3.o.........?......;........`=......G...G............+...O.g.O......@...........7...............p.....].m...........?............_@..}..........._...m.o.?..!............[.?X........y.a....._.?......[.?..............?....w~......n.-..?.......}....o.....\|X.../C?z.#........._...;>G...S...........i..........?....G.S.g._...?........_._.....?............}.....#.S.o...I..(.}l..$l.s1..2.@..N......v...O.&.......L......4.+..#.).!.,yny^B...j."o..c2..i(..F........n..q.[4z...>u.K....X=.k.....R.;.0Z.a..#.J.m.*.Rr...zi...I.0.o.~.5.j..h..{....~m5.}.X..4..'....#,@......s..$.X......KO..q.V.....(..i.8\V..s.;..g..WG......\|.G...c.....b..S...T..u0J[.......L.B. .@....].>Y^.F<..es.-.,/....$H.b......x/........p.......r./N.o..hR36s./..y4R..jeb..$H....j...p%..w.b.S.......!.k..;Y%..^2}..d.a..T.I.t.....{.A.n.h....eUW.5..T..a.D...d.C.WK.@......j.F.h.zY

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4570
Entropy (8bit):	7.949149387587025
Encrypted:	false
SSDEEP:	96:VhosiLiep5n1SBcvuXI7XKPFvYQ2KrmMFikLlO1BRqx+l2K:fjiZ5n1HxXKPTyqVQa+P
MD5:	F2D06E330F6113318774DCE3FA67EB3A
SHA1:	6907D25967396E802038786266123A9047699FCE
SHA-256:	FC65440DF1AB6440397B3973DBEC874AF55A937EB869D42E8FF5FE16CB97702D
SHA-512:	DAB0424869AD8309E945AB41B989841BEA8F73DD66D48DC2B0269C177E88173D9A1EAF8716C9218EF20D8FF267FA3C8657236E2DBB8C3BF3F3F8D5B8F361B72F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.Ua..o.-9oUN........3.....y......8.......}...~.r..0.....9.S.n./.(......fVQ..!..#.HfNVp..!'.Q..6.q......V!.[.%..v..v.:.&7<.[.......Q]_......_..FM...E.......Z.0......L.R..\|...r..Q.Z.4G.p.?.....l...F.m.u....3.m.m..g.{...L...m.m.X....$H.......O.....?...0.]X....p"."..2<......Q6.6.4.....5../..vn...i......t vl#..}j....+A...F.."..P.g.n.<.x....9F...n.5..D`.y.%..O.W.j...{.d.$3x/..\E&.........!S686......?.PeO.....0v.bc,,'7B..W!XFa.T ..[..J....GNd.)W.....oo.......Np;..?.F."...W.....N...0I.G..f;..... ..E...9p.j.-..3B..Q.. .j7&..R.p`.E4.=.Sv.VX]..8.....z..#r.#..f.].....b...."s.,.5....Q...t.HF.k..)_..T".>..F.....Ha@g.9...\|MfYd}...e15%......S..=wgD.d.........\|$s.<6I.T-..cQuE8ueY..).8Z.).9....q..Sp.2.}hRF.}....A.=.L.;7...>.A.....s.'.....5S..(..S..o.li.....e..).......j.i)......~....=.)......._..\|.u...[RG..T.a.W^e$.....X/.le.."...H..j"cjM!..a.@.K8X.[.=.l.O....~.F.e/t'd-.........e..R.1!... ......t...]..h(..<+0[:.ec.....+.....

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	60180
Entropy (8bit):	7.980143591719596
Encrypted:	false
SSDEEP:	1536:c3MXT7iWLj2jchOA05b51OBYSQjH9K99y5qgBa947qbT:WEuWH2jchl0z1OBYzz9KPyLq3
MD5:	B907E05FAEDD4745C481844795D7B198
SHA1:	DACC30CEC9FFCBA894A5A8B6A62C61F0793F2390
SHA-256:	7FAB437039BBA8D2C95E28602946A9DEA4CCA95A1C82FD3A4598869044D69CF9
SHA-512:	4DC692742A9507DB370A601FE886E7253E7F23ACC1549D213809BB1138E3A31A101A40A77C536915A3FF4310FD066F18F54FD1EAC8B8A5451664EB4D68B7E987
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/NJ5uQ6WWHUGny_oHS_2hjNPaplNPw_3CXvl7AWtkVOwHgo9GNwvi3a8y7wyvvIxacWZZO2Vj9Q=w648-h364-rw
Preview:	RIFF....WEBPVP8L..../..Z..@l.H....o...p..~.@D.'...._..=.g......J.;EU.....;K2.-.B'.vw..!@.74........L... .\.6.J....dM".M.O..n..4.I(.....>..K.Dl...`.5.%..8.^nMB.Z(]....!...m.?..Y.74.y.^..;..z.Qg.2{r...T.N...=.x..x..8.....6']. ^z.q.....w{....{!).,@..mo.=..G\|...+-~....z/W.U...."~.dI.U..{C+.a..3.-...8...Yo....y.n.'../.y..[x3b....c._.#n...V..Y..........b'.Q.c4.S.^.B.R,Y.LjQ...j.!SP.....s........-......QO.....Z,..o.....%.4..ps.\..i.....c.[....?....F..;.v.U.;...(.......$.p...k.....j...........P......(....n....(`..G".X.L.2..o...G....... .m@.G+c.aX........v.p{.[.~..E.\|...H.H.y.X.....].h.{..Ts......._.@..m....+......@=........4..HQE..f{{...F......"...v......)...N.+x8j..+V,,.F......#..HnN.)K.....@)../.K..w..n......2.XIQq-.......>....v.#..X..J...J(.S... ..lQ.....].A.w...i"EJ........#..3.gz....=...f9}<.^.N.4.+..H_..4../n...V.#@..J(.\|......J(..T.7...rz..M.Nd.V......@.#.....<3b_.h.#.4S...+....J....4.$c. .. [Wp.W...F).. vr..75n>....Ls7.2.....;s...D.S\....

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1042
Entropy (8bit):	7.774168594515862
Encrypted:	false
SSDEEP:	24:YCDrTteFxOINP0b0umL4cTv+ew31RD5wuRVvkia:YCat3ycSj3BwuTRa
MD5:	AADFB00B40D3E4CA78BC6D5031ED7595
SHA1:	97DCA684A185C843A2E11D39064C6D4013878D9D
SHA-256:	5E71ED681E2698FAA442185832AC78B3A606F556C48BF39A8C9C1A69B9BD9A08
SHA-512:	167570204770B5199125A6A68C7594D40ECA6618298799B025F51FAFC4C9062CB40257EEF881E2AF21A671421F6C58F3A3EDC516C929CC4A60FF704AF8107084
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?....lW..C..}..[.~...w.6.$I.........y5.I.....!..@..?......@( i.m......e.#...qX.G.Z.I..E.8YyDw/-).ZF$(.16...M@a.(D..PI..cl..! H.ko-+.....ig.$@.)i........B....B...J!E..J..,E$`....."...B%A...I..$I..JD..A..=.<\|..mkk$...kR.o..w...;......@..o.....Z$o.<.':....[........=..N.o.>...L.kt4..<yY....t..~M<.^.op..6...MZx..+..A....`fw.&..P...C`r/n>tz...N....$.M.,.L..K.....@~......\|....).m.....Qg......3.>;H.t...kI...s. .s...w&`.s.....[Yg.s;..&......:..;T.U8?..5.1...Z.....n.L..Z.3.<..?..sL..e]c..s.n_..X\|Qd..+(........K....).7J.......q\| ...'>x?..n.....YdU\........k....1Z\5....g.AEX.z._.=9i....3..z...<cm.a..ol.a..o...a..o..GXD..{..""..&H..<s.5i.._.3..ED~...""..k[.ED^9....O,..#".\."1b.'............w>./.O.F..Mr\|,.\|...[.C..NC...:.%]z"N...CS;Ry`....r[...KeE....6......(...T.2.Fb.M....)hk.x.g.....A.-6./..Wr47......c.yA.U.A..h...UP.4..^5. .....h...........h.;v.8...S...A...P!4....T..b7.^.*....'.B.. ....1H.. ..;.L.%G....k.BL...c...~..~...-O........;&....a....

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	47924
Entropy (8bit):	7.995943409923895
Encrypted:	true
SSDEEP:	768:F0hKwQGvYasD/PDYr20eI2uEb3J8SdTHbW7sIEJwGHoup1eVaQQdu7td/uaMbfyn:F8Yau/dISN8Sdm4q8oup1eAQf7dcyVhz
MD5:	BCD49D0E74E5C338468FDF14246DABC3
SHA1:	8214CD1EF2BF6FFF2E8B22B149E05E0234168978
SHA-256:	20B29DCD9DA7DF6043002D497596245E2D62407F18B21FD92FDD9EDED0274152
SHA-512:	3794EF68166BF495D4FF0BB98BEA1C3244BA7588BA88495BD651DDC6412F44746E2BE8E74090918D77B5F509C9D3C5842FCE67CB5AAA26822C6622034B26AA87
Malicious:	false
Reputation:	low
Preview:	RIFF,...WEBPVP8 ..........l.>Q$.E..!"....p..ei..o6......_k....>F~......N.?./`.....k[li....5E..7W...7m.....~.....=h.R....3....R..=M^..r.._....Y........O$.R...._v...?........._....u.[....y.J...?...z..E.#...>.\|.w.._.....{I.?........K.q...=.............?...................c...../....R....._...G.w.........k............}....s.'......_.o..?...Q.... nE...9K..ENV._...=...)Ot.../.jM.._W ..x......p.l5B.....r.....L..n..v.^.. ..o.x..rl=.....f.g.... ........../.....F T.L%w.L.{..l.h3u....^y.....-X.l.}8'....)U.W..........h3..J.X!._.[.}..!..2\...Q..#.B.:[2oM.y.:y.s..E.uRX]OJ...1..).~$...wW..3....%../..WV....f.-....d.......].v!R.vwv.'.....w?-yTw....Q8......TK".(......_.'.q...F1H.Z.........u.......5.+..}...B..3.$B<.E...Y.....Y....l..g..dHKIE.....i..o\......3..A.7...6...ATR}.,..K ...9.4.{.#^...Ua..y[...Dki7.mX...O...P...\|.@..._Z...{....P.Ae....t.@.b;/...ZA.....$....0VQ..jj.".....f....T.U!.....xQ......g.b......!.....E..o._..#d.&H.-.....#._..\|.....?.C.Q.?t. Vb..

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	76696
Entropy (8bit):	7.987965450903897
Encrypted:	false
SSDEEP:	1536:CV6zX6Qc/xX24vIUs3fybZhqbkwg3Mb2/roYkOBN8/eMWKFfRv5wkiiDd6FbzT:CsQ/xG4gFPkpwgc6joDwjhKFfvRSbf
MD5:	54044E9E42F03C55D758C401E8BF5413
SHA1:	087CAF3CC700C3B82BD5FCC52EE03235BD89280E
SHA-256:	908A44907039EAA8E6CDE570E4496101C622B2EE431D4EDB8E9BEE0B13EB2F07
SHA-512:	B4D59F4F9C34BBE8424703A0108931614D6B00E8CFD65F469C6068805A5E1BE962CAFA0DE9F2B69733B42F0ADCDC054626A331D6C5981213F732B9FEFE302C2E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/PybCNhe-jjLeSh7EWh_cyzw4kqxsN1dB6zuDhVAEyomlQfcauwghs0hrjR6pUWrBLdLeu45uPiY=w648-h364-rw
Preview:	RIFF.+..WEBPVP8L.+../..Z..0l...\R.......'.......H. _I=...6.@N....:f&yu.>Iz..9u....@zP.T........ .o$..I@'i....z.F.c. .6.m.i...:u..>....\E.B.l......%.....a... .....N.<+...&..A.d....3I^...N..I}..i........`......?...jG...=.Y.oN..>../..p.?...Uko#.`.Y..B.'.f5..8...`.. ...l.n3.c>f......0<r.KW.}A..........Dy...<<..j.}.g.R....@".."Q..l...t...`.z......>i..>B...'..G....gd;#4.5.....A.....m.N...D...X$.1....~.;l.6......V...._...!..ar.H,.!......8].^...6Uj?/k?kx...V........i...D.dMT.x.k=.l..(.......BY&....V..D._3......e...G=(..}h[.6...o.9Y....z.h"....A..g...?..#`T....q%.k-#uBb....IQ4B`C...c..u...j....Y....i..D..~....Ec..I.'..Q....@&.X.....:..m....dE.(..IQt..lz...\|...p._.H'1..i.9........=dp....Q%..i<.x..G.G..jzS.~..Xgr-c9....u;.=.._gE#..-O...h...>h=4.2.C.r~.g.~..m....[uX.^...%.{n.V..%..}.G....?.......=.LM.=..I..;d.$.......C....h.+..L4..........`...\|......\7.....fq)M..`T$...s...Q"q.`..ga8.^.a.....\|y..S.A.L...f..e............X..D..z.p.........%#W...s..x

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12050)
Category:	downloaded
Size (bytes):	159641
Entropy (8bit):	5.659876137110023
Encrypted:	false
SSDEEP:	3072:djMuK8dpaDGPh1Xwzjwm1W4swP0RrH4staSUkxQ8M0cTmVDG480KBVmp7QwcXqE1:CuK8dpaDGPh1Xwzjwm4W0RrH4staSUkQ
MD5:	DA9086A6A3081BF40653996C7599660E
SHA1:	ADD8E11DAE5A4B1C8921B0520A430FE0E085A1CE
SHA-256:	88CD37BB4D22EE2A0703A931C3058680C8F38EEEC59710F11584026937B7BAEE
SHA-512:	742E4A94BB1A613D02CE2FB0C6BCD41A1B07508789E1175ABDA96B47DEC21048FA8A3EC0D5BF153D6EBC61A4C42965AE7AD23D55C2A91412B272F948C09AA3DB
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,EEDORb,EFQ78c,GkRiKb,IZT63,IcVnM,JNoxi,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Z5uLle,ZDZcre,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,ebZ3mb,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,ovKuLd,pYCIec,pjICDe,pw70Gc,s39S4,t8OL6d,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=vNKqzc,fI4Vwc,sJhETb,JWUKXe,t1sulf,JH2zc,tBvKNb,soHxf,IJGqxf,wg1P6b,ywOR5c,PHUIyb,BfdUQc,oEJvKc,tKHFxf,M2Qezd,rpbmN"
Preview:	"use strict";_F_installCss(".hUTled{height:50px;left:50%;margin-left:-25px;margin-top:-25px;position:fixed;text-align:center;top:50%;width:50px;z-index:20001}.k7smx{background-color:#fff;bottom:0;left:0;opacity:.5;position:fixed;right:0;top:0;z-index:20000}.rFrNMe{-webkit-user-select:none;-webkit-user-select:none;-webkit-tap-highlight-color:transparent;display:inline-block;outline:none;padding-bottom:8px;width:200px}.aCsJod{height:40px;position:relative;vertical-align:top}.aXBtI{display:flex;position:relative;top:14px}.Xb9hP{display:flex;box-flex:1;flex-grow:1;flex-shrink:1;min-width:0%;position:relative}.A37UZe{box-sizing:border-box;height:24px;line-height:24px;position:relative}.qgcB3c:not(:empty){padding-right:12px}.sxyYjd:not(:empty){padding-left:12px}.whsOnd{box-flex:1;flex-grow:1;flex-shrink:1;background-color:transparent;border:none;display:block;font:400 16px Roboto,RobotoDraft,Helvetica,Arial,sans-serif;height:24px;line-height:24px;margin:0;min-width:0%;outline:none;padding:0;

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	28068
Entropy (8bit):	7.982902928995031
Encrypted:	false
SSDEEP:	768:kA2R9/naqduyxhkIvI8jc1JFUtxYEc5ys/h2ygU:kAyYqduyxhk4hjc72cf/hgU
MD5:	9A5DB0B18E9EA28D97158A2EB42309CA
SHA1:	B075C2DB37A8FE06943F1072B51A6ADEA263761B
SHA-256:	5BC02F4D81D7287CA2C1BBF7F963983311F425093DD0CDA9EA6FB5BE4F4B50E5
SHA-512:	4D90AE6536BE00BBFD6E5D5FB4BCD0B7024F97056CAB426AA39DE8C7CB16C7597D8721F522A94185D12DFBD54F7E724AEE23E998A431007AE4A69B599B00C7B7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/VRMWkE5p3CkWhJs6nv-9ZsLAs1QOg5ob1_3qg-rckwYW7yp1fMrYZqnEFpk0IoVP4LM=s256-rw
Preview:	RIFF.m..WEBPVP8L.m../..?....$E.ff.X...f..!.....H...FD<..H....W.,.H.<........U..@..f.~#...f..b.W....]..U.T..7~X.Z..`.6...... .../r..`.ff\|CJ.UM.afD.Iy.._.Q.'.e...~.u.S.T....""%...\....!.I..q.$...R.;I........I...!.....t%.......Nv..J....=....9?DDd...]Y.h_.>r...I.YD...$..I:.".A >IP..{.v....2e.$.6me..ms.C1....o..H..)....@.?1....;....x...C.8@....."4..t...v"qP......5]Cl.0....Bk!..+y.....:>.o5;L..+.T.'..4S....$.....H..].u. ..7(..l4..@.Q.$3..X.2l....6Ph.p...v....B....J/..... v.L.+Q..q..H ...N....(...A...34....DP9...;..`.b..........j...3p.....ZWYx.6../*..&..)........q.f..T~..p.ND./.@pO.C...07y.....=@..EX...{3',.....X...._..{b.3x..G{...Hr...^.=?I;. "&......?J...r...:...r.$..X>l]{'.1j c.........$...D%..HB..&..).g....).........'z...@xh[...@ri/..j.8....D%.!/Um..P!G-...!9...ZA.......}...'.U.%j/@.#9.,9.U.p....m.h+@[.}zO...W.K...mW.&..8i.=...Nx.....?.(..}..#h..........U.+U..F... ..b.1.....@.6.~..g m.l.-....%.m....'......O....a.i..G0......4..C.h.7I...A`.W.i4.hL.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4009)
Category:	downloaded
Size (bytes):	122767
Entropy (8bit):	5.471559936982107
Encrypted:	false
SSDEEP:	1536:KXIcfKjLlaGhfI2kgnfd89QV/G0O5viV/bcFAVY5shJN7yvy9m/De3qsU9MC++6Q:YIyKXnt9GVXFAVmYU9MCvlx8I
MD5:	4B031CDE8D1A9763EB4DC8387E9EDCD6
SHA1:	26C15A9C7F3D092F4F87A77EF0AE9898850E57BB
SHA-256:	1D692F4BB15602118362C5BFB1E0C8434489269DF541DBF2B92F28871713E410
SHA-512:	9A5E762043CB7452A73A2E2210DC6A384F5C9CC459DEF8F3E6215E90BA1164376E432FD8A0BAD91E9B70018355798EF2E7BF511F23885A873C75A2E84A061551
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	274449
Entropy (8bit):	5.586439790986108
Encrypted:	false
SSDEEP:	6144:KtdRo3k4a5DVBvif2s3qXk9np+rWBBNy2U3/:id2kr5pBKfWv
MD5:	99D02BC2E9132B399D3258D403C03F15
SHA1:	450C672A0073C7EA418D09C29AC2672ABBECBABC
SHA-256:	9464D02516FBE33BDD9AA97ED2D31126E570F7A02D669B1EFDE4B6645D7594B8
SHA-512:	79DC63CA3ECB52A5C742A1981946890EF7CB9C50E4EDF57FCBF48461132AA0688EC22865C529C608362C67D6005462CA89C985F65DF1B26EC79C21D4ADDD350D
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":16,"vtp_rules":["list","play\\.google\\.com"],"tag_id":10},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","play\\.google\\.com"],"tag_id":12},{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":13},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	15400
Entropy (8bit):	7.983373069517256
Encrypted:	false
SSDEEP:	384:zxnKuhIZFkt4sQKUtom1vVH6mpuCrptikIZDbyimlWfCL2uE:5Kuvt4/tlvVH6ArnpSbyimlI
MD5:	E1208B7FB2AEC116022BBE125F05E036
SHA1:	2D87FA3BA5F8F59E7637A2F9B37EB1B3C38CAE5B
SHA-256:	28D1DA0CB5A6904F3A75612BA333B532A887B5C4DE61C9B0370D0E2B8D3B1AE9
SHA-512:	0FB1DF10D35F0826CA5882C441667C77215D38A4DF6C10467F07B7D05EEF55C1A9C9EA2F516277227231B4488C3C53415C9D9BBD01F4794B3D0CFC34E44354B8
Malicious:	false
Reputation:	low
Preview:	RIFF <..WEBPVP8L.<../..?..H.$.........a.#.?..WJ../i...m......YLU.y"I50..7N8.O..<..&6...EB. km.F.U.A...F=S.{..R<.B.....R....J.\..N`..i......%...[.m..l........d&`.9.).....&I..H...N..lf2..g....p.Gr$.....-k.......ZU.I.."I.$.H..i.di.....a...c.v.,..?...?.d...%XB.'.\|.?......YL...I..V.W.i$..tv.)..H(r]..;......D.CYS.......H.V.N#+.+....sf..lT..t:.............+.......Z~'..H.p{.}v.d.i..........q......~.....:l...I5N.......O..r.p....,(..@..k..p.i..><.g..Vs.....H.`.....,......5...".cD..-.MC..1...g...]...&..$.`.)....H..<...a(....X]V.!.t.t.U....4ijY."...+?....jU.....4k....$.M...-.JQ.J.Ziy&..!7U.H......,]>.J.M6...Q.$..USC......!oRd.I.(.EB....,...4..U.U$I...\....$K..uR...Y..1..9."*x..C.`.T......U.......$.v\.Q.,fid7e,d.kQ;.(.F...Hg.9.V....>.Y.&.cr.o....r...=..l..,.6.'.v8.Bw7L...X........z...2......L2F2.X:.<.d..s._.]fL.9=._.Q..3....]x.)..q.tN.....<en/yN].;sqiN..T.-..Qsg(..v.../W+Iw.I2..m...m.m.m.3q.Q....p.m..Rj.c.5#...m.+.#..........d..l......{....k..V....'...".2 .

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	147652
Entropy (8bit):	7.992337332751458
Encrypted:	true
SSDEEP:	3072:6R2O7BseegiyhmVfCFmBGKE9CDKHybhTgxe0jeCfhYSk4Sn8MYluP:jO7BXWyhaxj4CH9ThchYL4Sn1YgP
MD5:	A042EFE7D75A7733C49D22B5BABB9E14
SHA1:	E8DD4CA5C24065ABCD6AF10E15CB7928FCA7C323
SHA-256:	98D291889B06C886AFDB105216656F4682CB7D89D7CE51383AFB934A79BBFA43
SHA-512:	70089D5580F8C281F4C70F0A6F8B8AD19657017486EECD79DB3EA4D99DDF9AE6DA595C3353BEB463801DDC696159A9EAB45024138C1D790B47353E3FC84A83CB
Malicious:	false
Reputation:	low
Preview:	RIFF.@..WEBPVP8L.@../..Z..8.$)nj.....?`=..D....o^..o...6,..i-^IR..$.o.c"u.I].7ri..!......#I...=.E..ES9.6...D..y....p\|.<.#e..j.D8..oi...>J..b..%.!"m..9...@w.9.O.....I&...p../.....EM.b6}.`...._tGR..P=.._n7$..E.%.K.... .mh].[Z...M$9....A....^M...If...!..A..t.)...."I. ...hwY....Y../ow..$.d..FG?)ff.^....c....h..G.....dZ......?. k..,#]m.......o..@.7..'.~Z....d.@.z0.J.E$...v'.........$.S..e.~;\|>.0....V....U....0-.!-"......;..Y2.+9.................A...=..y.D....T.........c.......W..a..q.0....E.cg.QL.~........u<...<.8&..U.....#.F.S..jp..d].u\|....S9..:d.Rk...,.$..q....Y..UG.V{......i1S7...].~j.PG..+h..3.a..`..g..V.B..8.u....!...\..Zu.E....L..9.Zkx..z...%R.[.S.4&...$.N.+h...u'..<+.V.$.....P.B.u...1u,..f..Q'%.T.N.....t.......F.....=k...Q.5j.=.k@A.u...\|-."....0..2@.7.._{.+f.L......\&...B....H.Cu,q..-z2$..g.....!..f7......[.NHo.d....3N.H.p.S.L.Fg:??.......z........;.B.....h...xW.\|.+./V..........fU>.w.......M...Z....l..UD&.I.........6..3Z..B.P1Te.q...)._%+

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	15742
Entropy (8bit):	7.987435431620976
Encrypted:	false
SSDEEP:	384:rSgE/rsWBEBVleHQZk5PtkJ8ydwFMQbvEnSideDbE:WnrlBEBVliQSPtkJ8AwSQjecQ
MD5:	0CA92FFEFA961F83064FE5FEE52C99DD
SHA1:	59C5D5F1821274B00E103DBA07CDDC857C4B42A8
SHA-256:	F32E8E7F4D7DAA42569D62624C20063A956DBCA27A660BF0F0B28BB55F419CE7
SHA-512:	3CBD1FE45B04240F6A00560722759D17A0C77F1F7B2B11FFAA3AF744907DEF510643B8FE2D90BAC3135FF29749BC4AAFCB2DEC71BA57E0BDF6B7B172CD0CC490
Malicious:	false
Reputation:	low
Preview:	RIFFv=..WEBPVP8X..............VP8 .=...........>i.E."../6\|.@..h.p..ge.....}..?.?.......ky.t_.?........D.7.o......V../R.......7.K.#.....oP....z.=..s.:.u...................C.."....G?$.&}.j;.r?......~........}.....z......r.3......._.~.?.....'..........R........./...O.....?.{.........;..9"...l.P..S.......Bg.k....7..MO#/.n..u.^.Qi.l.Z.....y'bw.._.w/..9}I6.d.......0<..Y5.Y..^.....$Y.."....M...h..5..kqk.Eg.....4....H.3.1<.......P...}.E...@.Y.........=4.E..........c.(...p..l...zJ{..,..[V`..\|.:.A...`4..z..<...S.....]X.9_...3.;...o.Q(....>&.>.O.....Kn^.E.ZP....,...G....F].l_.y......W....V...Z:.Om;./..7E.t_.Z0..-JV.....J?V....I..K..y.h.2X7.S.(R.F;@..>.."cZ.../=.(X....;BX-X<.h?L.6...4?.%.<.5...T.dx;kx....p......o<..7R.e~.2.........*Aw.F^..7.,...7.o.yY.W.....oY.B4W.U.......D{;.....l3.c..#.3g.g.,.p.....].=.M......y...2.(..../4.w=a.<. .H8y...y.9K..t......>(..G.......c....J.<.:.....cx.......t~C..\|.v9...n..`:..Y.h...L.&Z...^m....".......?..s..eR..<.9bt..

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2966
Entropy (8bit):	7.927274526033156
Encrypted:	false
SSDEEP:	48:nvck6cvWfLha8+nZJIbAerAOMVw3WdOEQPcWgMh6xR59Nb+8gKIzHmIZTl:nvclS4vIJoAsv5EQP1VGfLIHf
MD5:	C9E2532397F8A360407440DA02DCB395
SHA1:	7AA596D1C34A32476D17B6CE2E2B446328373338
SHA-256:	1B64CE1418BB67AC02B6BA86BDE363B287944B6777FEA198173AE09156A55B3E
SHA-512:	4AAFA0C1249B6FA89F3F74CA88AA305AC575E90EED3AE4812C7DE9E48F0C08ECC6C2236D0F4E6001E86AEC5B26A826D79FB24408F557E472A009B062FEC5363A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/KxeSAjPTKliCErbivNiXrd6cTwfbqUJcbSRPe_IBVK_YmwckfMRS1VIHz-5cgT09yMo=s256-rw
Preview:	RIFF....WEBPVP8L..../..?....i...NR....1..J.c...$...%<....yd[.^Sx.$p=.........m;.1.N.m.m..l.m..7....1Vl;.Q..Xe>..m..3..Ie.._l.3..5..-..C.$....m.m.m.m.Z...+;.?.tnm;.9..._.....m.m..mOl;...y...A.Tv..s.l......x..s..X.:.N.Yi".?....f....g...4..l.....s.:.Q..._..zI...NE.)....\|c_$..w.h......S..B...)).Q.R..pp.....\|{...h2.......[\|8.w.J3..C.#.Mh....~.gh.0D...m.m..Y@.d....~....'.......d....(...0Z....;.:.....#.y'?.W0.#cp........+o~...s/......H.I....K.b4f.i3..!./....>......$\|.t...q.ql..lO...c...V../.5o.>q....b..>.T.......c1r...Q>.u.v.\|.H0......TF>ix.j.)....5....!.3.XbW).4..M6..3.Ue.omi....\|...H.%s........D......oH."......'...A[.?c .._6.284...y...{S..$..y@n\....1......-...$....qrFe3)i.Vl..E...R..............fE.S\|..a..@.2.Er ...L..K.ps...B..$M+..Q..Y.O...J.=..J.9.........L.....a.#g!9...)...bv/Q.)......i....H*.4.e.p.Iz#+...u....$.'Q.W...&[SZ{J9$'...'.Z'lx......n.,...<n.'.X...8...Iz..P.]...qI.r..r.l....,.U).1a..HJ..)..c..)....X.T).rN.......9._

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4276
Entropy (8bit):	7.947437701443973
Encrypted:	false
SSDEEP:	96:7xt684cj+nRPOX8XSJYezhcNWcXY53Ufgcc30tA0S:1n4cjcRPA8XSRhcNmxUfzLAb
MD5:	5AB20EEAD7888C45390108FCFF18A460
SHA1:	9B1F8317C8153F68CEEAF5193AE6EACD8CBA8EFC
SHA-256:	8A024C0A14F78B235BC1A07D4A30E4000FE3B1D99E8C68D090DE74ACA4B76148
SHA-512:	5F484430A59E1DE5E576C3F4C61AC24B753724C0F9BD4A535B088FDA03ADE0DDDC6973C03B77322B8A03AAA6A24AB42E674616333FA8B16C2FE1501BAA45B5DB
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/jCln_XT8Ruzp7loH1S6yM-ZzzpLP1kZ3CCdXVEo0tP2w5HNtWQds6lo6aLxLIjiW_X8=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.&.../s...aX0c..3333333333.........{...'>.......e.!w..G....Gv..1..l...92z#.....0Ek...=ys....L.\..(..g.L.+...i%;s.p<.)g...S....#..3..+..I.i[}m.m.m.~..e..m...m..?ms.....Ir.f.T.MR....p.@Md_..k..5.....2>.xp.V.............R4.>.6....y\/.I]..FI....T5.nZ.......o..O.),...KH..._./!H.....C'.I.....4.w#.R....s....F.f.T.^.&.x.[........~M....v.W.M...SB#..6.u#.......+.9......c#...5O>..G.<..Lpx2.r..jvq..5<yU5.TL...j..m&p....S<../&..l.u.H~......)6..4...x....&.9....H...-g.qz.Z..>D.B..._9.KN......i..U......"c..4.7....oA.....PMk...O...S..fux...u....>p.X....`..F..G......2c.....;7.AW..+.>.Z.LJ..J/...7...-..U.c..n".u..(}..i..].Rd.LD.J.t.]..R.}$'..&b..bd..v6...d2..b....bt..p....W..5.u%;..+..q.....5D..`8..W.&.....Y....n.q..\R...\|9..w....E.3....^).~....6.V.8..^.....V....vq.K....._._.b...E.X.v...+.S(\d5..GAHG.#K.....{W.U`.....Si.....[zS1....Y.\|.S:.m..s.E.WB.Jf..Y\..Q.m.A......r....z}.B..6l...t"l...U..(h..go.......~.!...{...9...S5.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7900
Entropy (8bit):	7.955994208237327
Encrypted:	false
SSDEEP:	192:phvfUqSsJ1gOoITKJwcn2pHxz2Wjra03F0/Ntv2gMQ1rbJ0hK1No:X0sJCOo6zHQ010/NB2Q1rKh0C
MD5:	54B59EE915C97AE0F62BE0284DD369D7
SHA1:	086E6CE76E8CD66CA8D9A81AEC17E77E55F9CB18
SHA-256:	2E0AAB20AD8A0BB773C20FC0BADEAC88482EB5E312A0FA32D60C4A497F46293A
SHA-512:	89C8BF9902168B7852B68D2E2315ED5B5370EBF0359415C6A9E21F259557BC1D742CE53B26E5DE5C507A6E1E5E068551004A5B87E7EB45F108EE4749CF5DFC70
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/qjlLBqevxOQjDqB5abhHHesrkYzum2QNV89LzngZivcOoL_ie2TY1_1mxY50otwRtxw=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?...M0l.6R.......!....KL..z.TPI .. ...v.w.m#I...L.!.s....8.6......\o..b>x2.4....-..Uo..y.....v.....=.o....A..8..w./Y4h...J.y...d/.Q..m.3....0..&bo.S.....p.4........#...-q....,X......$...\|E.........8Z.gm...m..sF..jl.Q]LE.....!.....$..w.w.#2+.n[.....G.#.m.n...n..]..S..../_.$..m.y.Rkm.q@.0.73...;.;.;?;....'.......V[).1...w......B..AM..../...0.r....1...S..L#./9.E..m.V. ....%..H'tIs.....&X.....zt.6.A...Q...A..h9.9......a..m.SZ......O~..k.....<.^nV.a....^.^.20........8.e...e.4;...ad.S...[..Q...I..D..WK.,......e.#.I.G...r.._...!)Q..x.f....!.....j.).V.B...........X.0......fb.....DU.a..W.L@..D.#....-....).J...pX.!......O.oOK.N.GOy....B0i.8:.....G.#K ..La.de.nYXz..q.A.].fcI.."!..`.......$=5XA.1!.s.kJr..`f..?..nX_.l8...B ........R...>...r..Q....;6I.Ts6..9..<+.l0.......X.q.L.....1....$.......J...{.q..JZ.Ln0..L...P!.....~d...n...!D..R......mg....\.....N..."s.5Y..-.IF&$\B..!}........Wq.K.J... .#Z....r...7.=.i.v.YT..RhP.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12046)
Category:	downloaded
Size (bytes):	325028
Entropy (8bit):	5.562440565373323
Encrypted:	false
SSDEEP:	6144:IT0dmGBRo3k4w+CvviuXXs3qXk9nB1wdWq:Z2k/BvK+ek
MD5:	6032A616ED9DDA7CCF5A23EF37ECA129
SHA1:	5B4103077D6FF532370EC688E35D57A592C71BCB
SHA-256:	38B8E5D70155413CAD0A5831E1B6DF825FBC753CB15406746686539646631690
SHA-512:	D155BB5C6F366BFD07C23BBA8AD0BE8BFD95B10A06465F2F3426667E36812F012CB81EC23AC92E21E0411E2282E1595264DFAE8E7A3664B8B57085F8FD8EABDA
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-K59689F
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__j","vtp_name":"navigator.userAgent"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":["macro",3],"vtp_name":"originalLocation"},{"function":"__u","convert_case_to":1,"vtp_component":"QUERY","vtp_queryKey":"utm_source","vtp_customUrlSource":["macro",4],"vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":["template",["macro",2],":",["macro",5]]},{"function":"__dbg"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":"G-LL

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	dropped
Size (bytes):	3196
Entropy (8bit):	5.523709727307665
Encrypted:	false
SSDEEP:	96:kwJI7eNRLcOT7u04gw/it96Fo82ycXzufZl:nI7eDcnNF52y4K7
MD5:	F07D4AD740F644FAAE7E045A6706D8C1
SHA1:	D179FC5B51A3B231452C5B5187034D04154C8DC9
SHA-256:	3CA5A3036A4878B74ED0BA487D044434D66467FDB56918CF6F257C8693F842DA
SHA-512:	33D5EF888E5262B389B120EC312C33B613C1158D4197D58B60406EAF9DDCC6C68EE1936D4CF0C821E516651EF622BFD81B0C762C525A2BE50062CF408F6B6667
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("Wt6vjf");.var Fdb=class extends _.z{constructor(a){super(a,0,Fdb.Xd)}tc(){return _.qh(this,1)}kf(a){return _.Jh(this,1,a)}};Fdb.Xd="f.bo";var Gdb=function(a){a.iI&&(window.clearTimeout(a.iI),a.iI=0)},Hdb=function(a){const b=_.oL.get(window.location.protocol=="https:"?"SAPISID":"APISID","");a.JG=a.NE!==""&&b==="";a.OO=a.NE!=b;a.NE=b},Jdb=function(a){a.aA=!0;const b=Idb(a);let c="rt=r&f_uid="+encodeURIComponent(String(a.aJ));_.Ok(b,(0,_.kf)(a.O,a),"POST",c)},ZL=function(a){if(a.BM\|\|a.aA)Gdb(a),a.iI=window.setTimeout((0,_.kf)(a.H,a),Math.max(3,a.TE)1E3)},Idb=function(a){const b=new _.io(a.ZV);a.SJ!=null&&_.uo(b,"authuser",a.SJ);return b},.Kdb=function(a){a.JG\|\|(a.aA=!0,a.TE=Math.min((a.TE\|\|3)2,60),ZL(a))},Ldb=class extends _.fk{vd(){this.BM=!1;Gdb(this);super.vd()}H(){Hdb(this);if(this.aA)return Jdb(this),!1;if(!this.OO)return ZL(this),!0;this.dispatchEvent("p");if(!this.aJ)return

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4009)
Category:	dropped
Size (bytes):	122767
Entropy (8bit):	5.471559936982107
Encrypted:	false
SSDEEP:	1536:KXIcfKjLlaGhfI2kgnfd89QV/G0O5viV/bcFAVY5shJN7yvy9m/De3qsU9MC++6Q:YIyKXnt9GVXFAVmYU9MCvlx8I
MD5:	4B031CDE8D1A9763EB4DC8387E9EDCD6
SHA1:	26C15A9C7F3D092F4F87A77EF0AE9898850E57BB
SHA-256:	1D692F4BB15602118362C5BFB1E0C8434489269DF541DBF2B92F28871713E410
SHA-512:	9A5E762043CB7452A73A2E2210DC6A384F5C9CC459DEF8F3E6215E90BA1164376E432FD8A0BAD91E9B70018355798EF2E7BF511F23885A873C75A2E84A061551
Malicious:	false
Reputation:	low
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	4.639719888612948
Encrypted:	false
SSDEEP:	96:EdAdhzUooooRoooT0oooooHooooooovqxoooooooooA:EkLL
MD5:	A217F758EFDFFF14053678DBE58FA4D0
SHA1:	6E0EB512C2F386D645712D7ECBE339EA85CFCA68
SHA-256:	F343B3015D0545A7D5B719A434135BCAE2AC766ED459AEEA671E3688B79D1875
SHA-512:	9BCF90FED875FFAF3170EF3425949642EB23B4E750CD42BA546D30E1A58C4FEE1A14CCDBD31455A6A442D09372CCB3873BD7477A59853608BC87660FB578119F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/android/market_images/web/favicon_v3.ico
Preview:	...... .... .........(... ...@..... .................................................................................................................................................................5C..5C..5C.]5C.5C.5C.`5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l.................................................. <../A.8D..5C..5C..5C..5C..5C.:5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................TN.(?..'>..8D..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l....................................................2..l...8..&>..8D..5C..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................../... ..m...8..&>..8D..5C..5C..5C..5C..5C..5C..5C.g5C..5C..5C..5C..5C..=/..$l...................................................E...>......m...8..%>..8D..5C..5C..5C..5C..5C..5C..5C..5C.?5C..5C..5C..=/..$l...................................................B..C...>......m...8..$=..8D..5C

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1008
Entropy (8bit):	7.728465169020496
Encrypted:	false
SSDEEP:	24:LoCrRq7G9aj2fgnVZTsEX2zfAjnuafsVfZvgmOY2rkr:LoiRKAmjVRBGzfAdsv4m2y
MD5:	427DCE1A7E2562C6B2B50398B549E851
SHA1:	C4CF15E9F6BDB25CA9C4BC4BBA734436D4A9AB06
SHA-256:	A72E7D3EAD2FCE6354203C052D498207F11C9C9373AE79FDEFED0BD725A74870
SHA-512:	1203635517F072E46EEAE668939756CEBEF59F8808BCA175C01DCDD2E606EDB5736A0DDDD2796D42C4272B09DD2AE0F1BEA1CA87187666286AA89DB03E08C928
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/U202Yto9o6IT1ZA8bgigA5q4nIzvu0S9ztl2d0WQSj6Iw0hIw5W7SIAnH0U2-Kk3nao=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.w...$I..!.k.....`..2p..$.3....F........I.$.@@B.@.P...Z).....2`.e..Y8....bH6T......`H.!..I........#...H.8.....B.Qf..^....@..U.Hn.}...~.....$#..aNH....B..u...y...........q.....uQQ.......X0.....Gh.P8Ba...~./l.........i.....v..m.][.m.m.2o.l4V._.7m.O.D...H..)..(......W.\.r......to.Q..._z.....i...M.0-;...^\;.6o.f.....J$l..PA.y. i....w..n...O.&.(..b:..;....h.Q+(...I....w$.u.=.....J5u-...E.f...B....x.v......I...t.....V...G.n.d.B7.m..n.+.B7..G.......(v.%..&.b7=A.k....J.....w..oT..w..oT..w......._..A...l..wN..Q..7.B...^....H..W:..v..[..z.....W\|s..[.......i.iP...S...E3...?.p..#.{\|......>C._..X[..>..>A1-J].>.Bp...$Ar...z.@.OfNxD....{.....5{...y.2.?&`............A3.bL_.G..Xh...5..d..^.-e..'$..,<..l....g+.....LU...g.L.7.y.t...cJ..H-[.*.2...+@.,./.?.t..x...._.Q..$...z.t..ucu......C..9..u..Z'..g...g....^...?DO.....3..xS.u..x.=}.z.T..=.......=e.zf.z.a.%..W.'.@O_..=..pO.8....EO....I...=.....z....~y{.cJ[...w"^..-....Zy..)....

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1881)
Category:	dropped
Size (bytes):	42769
Entropy (8bit):	5.438756368647044
Encrypted:	false
SSDEEP:	768:s/1nkMc3Za0w2rEoFSltgXWwrBI8ch96T5OJPqSt5yvxRkFe6Aov8ZBp3dKdn1mO:zMA0RtgX9POJ50v406akd1oM+l1tw8Q9
MD5:	2D58E45E7D2254A45BA33DEF7B1FD2CB
SHA1:	33D5DBB9B8AAD00F039718F7606787218FBCF2B6
SHA-256:	2922C4D5DFB10F016A7D05F20B8EF7286AC97C506FAD43A61F8EA5280A0BE0F4
SHA-512:	26523458DEFDBFC1304F22A65ECDAEA8C1672DBC0A505105D520F4AF822044315FE25373830CFFAE9CCBE6D26C4C843D1D8A8ABE6126AA9FACBACAC1639A75EF
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Lqa=function(a){let b=0;for(const c in a)b++;return b};_.Mqa=function(a,b){for(const c in a)if(a[c]==b)return!0;return!1};_.Nqa=function(a){return a.mh&&typeof a.mh=="function"?a.mh():_.da(a)\|\|typeof a==="string"?a.length:_.Lqa(a)};._.bo=function(a){if(a.Bi&&typeof a.Bi=="function")return a.Bi();if(typeof Map!=="undefined"&&a instanceof Map\|\|typeof Set!=="undefined"&&a instanceof Set)return Array.from(a.values());if(typeof a==="string")return a.split("");if(_.da(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.Va(a)};._.Oqa=function(a){if(a.un&&typeof a.un=="function")return a.un();if(!a.Bi\|\|typeof a.Bi!="function"){if(typeof Map!=="undefined"&&a instanceof Map)return Array.from(a.keys());if(!(typeof Set!=="undefined"&&a instanceof Set)){if(_.da(a)\|\|typeof a==="string"){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.Wa(a)}}};.var Pqa,Qqa,Rqa

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (443)
Category:	dropped
Size (bytes):	687
Entropy (8bit):	5.332548475998944
Encrypted:	false
SSDEEP:	12:kRZTFY4EdCbywDI/AcZ5EDnSWqXiMXKFxd2R9/7hXXZrGDKGXWrRkbRN20:kz64EsBktAnSWrf0RrXN0KGXW2rl
MD5:	87ABE3193657518EA1B55E331A272B03
SHA1:	77CC76608F0AC0993D0E2B33224F91AEBC53FAAB
SHA-256:	68D64CB9C62CA337E31706CDFA64D058B74F88DB259E2F3287FAACC1DF99B147
SHA-512:	6A77CB668C363A83AB624B7B3BE0D8FD2343D1FA07E9EB2E15964A789C4F4C8448CBCD27897C45A431DC509DC09A8C062DA6F0C0D8A10AC3D45AE620020FE4AB
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.HCa=_.B("CvxVpd",[_.Fk,_.vm]);._.u("CvxVpd");.var cZc=class extends _.Ks{static Ja(){return{model:{component:_.yr},service:{Ce:_.NS}}}constructor(a){super(a.va);this.H=a.model.component;this.O=a.service.Ce}W(){_.F7(_.E7({gs:this.na().el(),Ob:this.H,Zr:_.OD,ob:_.CUa}))}ma(){const a=_.ti(this.getData("userLevelTestCodes")).map(Number);a.length>0&&_.MS(this.O,a)}};_.V(cZc.prototype,"YhLDHd",function(){return this.ma});_.V(cZc.prototype,"eiLb1d",function(){return this.W});_.Rs(_.HCa,cZc);._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1342
Entropy (8bit):	7.707394641103377
Encrypted:	false
SSDEEP:	24:8iLA8Bl5WGrmjVeokhraci/lP15TlQt1Hzpawlf7uGBH40H1jtEbwwwRtXq:Ys7weR8/lPPu1HYIBH7H1jtEbwwkXq
MD5:	FBC24C57CA98A1E4A9B20C9403F74CEC
SHA1:	0E4D5B0B78C7844D1F86DAEEDF584FD580B492B2
SHA-256:	E76380DA09625F7E1F2FF0D991000EAF705697645FF653E0C33EA404BDF9523D
SHA-512:	CA6E0198E2375A4B91B55329FC38911BF2587854A2EAD9812AAEE2AE7D6DCD127493D1749DE82C9135655CA058503001D9149E61941651F4C1F9E16A34E4186E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/A-Rnrh0J7iKmABskTonqFAANRLGTGUg_nuE4PEMYwJavL3nPt5uWsU2WO_DSgV_mOOM=s256-rw
Preview:	RIFF6...WEBPVP8L.../..?..$..6.@2..C..'.A.......bff.JR.F..{-....u_S.....$I...+1..j..O.?0.R.......:.=...z...jOp..U.....5.}../.k[.Ok....u{.c-...T...ip..0..$..,......4......W..%.r..........~(....8.X.[W....F...>...H...A...J.D.>}&.N..Ce}.....(L.]\..p....T..U/.5..p...Ts...".u..px....C...j..../.S.Ty...g. b...>+C.....fE.P......dL...Yi..8.0y..%p.1a^E.\.......=.J........l...P....)......8X.0}.y.+..e.....W...d.a{.[.P...n&.0..=..8.0#.)?....3G....lM...P.8..:3.`lV..8(.03..}v...M.^q..n....sV..%p.6a......o.F.....5..]u..[......m.V;...&..={..8.0.J..&....FA......h.\...&.`.\...&L.S..AY.nK.S`E.M.8.......#..a..Sp....0....Z..0;.....6pXd.\|.5.@2.i..>@.(.f...2...&......M.'.,.L..\|...R..e.d.`h.mR..W.5..0.h,.B.f...4.w`..[.AaR..>.9q.....).....v'7.h...`.j...d...U[f.....S$.....PV..e..f.4...P.QML.}3fP..d>.&...4E9..8....1..A,..../..3..u,.gi.b.F..d...U.......u6..f....C.Uj..Q~1.8r...$...8**.].A.....Z...X..+...TFLh.wc.cO..R..d....Ob{.y,.......x...f....A....u......A....k..

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	602
Entropy (8bit):	7.560703505640411
Encrypted:	false
SSDEEP:	12:6EYUFsvZ2w+7XTXlA4x6gSoEjyNZUQYu8kS/bfSmPcqSpV0:EpvZ23jVbx6gSoNZURbbS4cq1
MD5:	5164F0787A126A9B88937AD605FA7C55
SHA1:	554E78E9B77AA10BCEC5C842A36816113E897F95
SHA-256:	E195473D95C9F500152483F8A181B3237E41C32D652ADC37A2E34C14FA4EF74E
SHA-512:	D998757F62D6749D14BBEF69FAE710580289D314DB9D92D94B36A7E0589DEF83B4BE285FF6BBD5DDF688683396D348F9EB7499C5F1272DCACF657F3876C3C6DF
Malicious:	false
Reputation:	low
Preview:	RIFFR...WEBPVP8LF.../?.....$Gj.t...v.%....{...0l.6.._..\,.?..Us..fI2I&IJ.d.Az... I.ZI.....).)E..D.L.D0I..p..sC2.....+IJ...Zm.`r....B:....}V......fc...L..W.j..W.i.$'.......,.j..QW....E....Q~@..$.c..m..Y...Vj.....RR.s...Fn#)r..m...v.(.T....u).o....".`..d.<D.-..O!..Z7.Q.....0........./.ULw6..z.l..;y$,Hk;.I@4...;{(.G.W}10.3.L-....IO....l.~.5...t.......a..yl.7.1.T/.P.k..r"=...B.,(...a.U......A..<.R.\|./..O..;Y..S9...pC..A...6dX..w[\........;e.g..}^}Y...}.s}o............b.\|...?E.z.0..k...\yo...<..O....]k/..............T....}PH.4[3..}.......sy...... V.R~<_[CN.[.a.s..y_)..

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	98700
Entropy (8bit):	7.995075378296886
Encrypted:	true
SSDEEP:	3072:TvqmbOBf7sAG51VCJprCRvLLH8/5xFc+MA:TCZST5HeRChLo/5x25A
MD5:	EB5D83B2DF2A14E88810CC79DB4446F1
SHA1:	BA02C291ADEB61393670AB5AC2A7EFFA18B25E8E
SHA-256:	768193DF16447BDA98569835126534B8B972D2D5905329B902FE7F712887C45F
SHA-512:	E69BCB20BBDD5972307A4F05A665564B8B6025EE79D689FC1F93ED72B10465F6204C5560D471C18F2248B8B17866521A3F3B9922F93648C7D07891A72E2A7847
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Nz4AvRKB-2Ei330Du2EiuF6D3nAi5o_jARnmHnrtZ8C2IruknKUWrvKGuWzv1ol5ZfCgh0yBclU=w648-h364-rw
Preview:	RIFF....WEBPVP8Lx.../..Z..@l.H..........................2..7)Nv....[.....7....p..Za[5.bY.$s..W.....>..K.U.....wI..W...W.........jU.FgK..V.lc...S.e....6...E.r...1..\....;.%iJ......\|..1..].M..-)............N........u..y.K.~...8..T.L9.1S..+z....h6.f.m.z38DN.p..}.>..qw..6...qO.e.v.6g%.....'....<J,.#@._a....y..e4.....BVs>.w.,.{..3...5......... .#.98.@.9.G.?..)...MY..1.... ..zpX...qmk.....S.........+..`c..X...l.mk.......v..g.P.........co.q.\|..ns....v;....z.]o..V..[tr\..,..k...Gl'?..7K...._6...[4.1'....9.s.l.......a.(S........2.;.....1'..G}...........YL.....3.=i.u..._fK.m._..........t09:.......?....JG....1..M.5{q.._:.;.I:b~...h?..F.u0..8.e.,LR\,.f..arV.S..Z...8.x../. ZU...KOZ....>.r.9J..I. )qp..6..`..1=.s.Z_.Z.WyV...O...D_[......_..$..'.`.k".aOz..\......}L..5......$)...(.B..`.~.sdC.j\..Z}.z"+.Cu]&..HR.$)Ra$.-.S..O..h..W..h.L..Z..PPP.Y+n..B.)$Ij.TV.....O"L..........U.*....E4.q......"....Oz...E....e4..<.Y.x.lp ...D{.....@ ...mF...w

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	downloaded
Size (bytes):	3196
Entropy (8bit):	5.523709727307665
Encrypted:	false
SSDEEP:	96:kwJI7eNRLcOT7u04gw/it96Fo82ycXzufZl:nI7eDcnNF52y4K7
MD5:	F07D4AD740F644FAAE7E045A6706D8C1
SHA1:	D179FC5B51A3B231452C5B5187034D04154C8DC9
SHA-256:	3CA5A3036A4878B74ED0BA487D044434D66467FDB56918CF6F257C8693F842DA
SHA-512:	33D5EF888E5262B389B120EC312C33B613C1158D4197D58B60406EAF9DDCC6C68EE1936D4CF0C821E516651EF622BFD81B0C762C525A2BE50062CF408F6B6667
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P6sQOc,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Z5uLle,ZDZcre,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,dfkSTe,e5qFLc,ebZ3mb,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qqarmf,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t8OL6d,tBvKNb,tKHFxf,vNKqzc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("Wt6vjf");.var Fdb=class extends _.z{constructor(a){super(a,0,Fdb.Xd)}tc(){return _.qh(this,1)}kf(a){return _.Jh(this,1,a)}};Fdb.Xd="f.bo";var Gdb=function(a){a.iI&&(window.clearTimeout(a.iI),a.iI=0)},Hdb=function(a){const b=_.oL.get(window.location.protocol=="https:"?"SAPISID":"APISID","");a.JG=a.NE!==""&&b==="";a.OO=a.NE!=b;a.NE=b},Jdb=function(a){a.aA=!0;const b=Idb(a);let c="rt=r&f_uid="+encodeURIComponent(String(a.aJ));_.Ok(b,(0,_.kf)(a.O,a),"POST",c)},ZL=function(a){if(a.BM\|\|a.aA)Gdb(a),a.iI=window.setTimeout((0,_.kf)(a.H,a),Math.max(3,a.TE)1E3)},Idb=function(a){const b=new _.io(a.ZV);a.SJ!=null&&_.uo(b,"authuser",a.SJ);return b},.Kdb=function(a){a.JG\|\|(a.aA=!0,a.TE=Math.min((a.TE\|\|3)2,60),ZL(a))},Ldb=class extends _.fk{vd(){this.BM=!1;Gdb(this);super.vd()}H(){Hdb(this);if(this.aA)return Jdb(this),!1;if(!this.OO)return ZL(this),!0;this.dispatchEvent("p");if(!this.aJ)return

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8420
Entropy (8bit):	7.954213328290604
Encrypted:	false
SSDEEP:	192:sCXT2XNyTPBGnWS8Uvb/tmatLZbrkmjXroVd/zdVZdHTy:zmYPs/vbIatZbdyd/xJm
MD5:	A0BEEA592D2E8A6AE7964CEAB1B24131
SHA1:	EDFCD1719CBA65C1C81FFA13F4BE17AF37E27D77
SHA-256:	FC026B102F5D8262011BFE6BFBC9C58E0F70E5668AFCAFC078A0B98C25766F6C
SHA-512:	CB23229857D9755ACC8037F285BA3A0F1664D3848A3FFB02DE6FAA8D8F5FE2B0257367691D83C3B23AC68AEA00E0A170058C2B9CC66ED17C9CD49FE6AAD7E5B1
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/zi6QgTtIiAnGqQMizfoj2LnE85kzHyZlgTruSzJ7Zw_79NAmB3fhxuDegwxby7P0yw=s256-rw
Preview:	RIFF. ..WEBPVP8X..............VP8L. ../..?...m$)R-.u.....3.....,..Q.tL..t. ..S.@.z....b...D.y$Fh.D.U+..;H.G......i:nz...6..I.($.......3.\|....$9J.&&... ...Po. ................>...:n...B.Wp.......]...U.5.@,E..D.M..[.:.l..6sc..0....$....-.`.%W..l.......\K.......Q....x1...Y.i.".0....2..\..c...X.'I.t....@#.j./..@.l.4T. G..B.a!@.=.....DCCh..........]...Q...@.e..X.?.,+K_g...J.'..\.BD{.O..?../...n.....]....6r$._........j.....{M.+j..B.L/...].r.$g.az...L..A...N.ot....U...C..%...jMK...t..n.>=..n........Z...>P?"...o.m....H (...eU........K ......K..8...Y.....F. ...4h....G...C..^.m....%Sr ..!..>r.{.%..$IR.b...e.GE......m.$KYU}Jm.c.m.m.m.....=...>msZ....~.....n..q.]1Qk...g......V...... I6m[..m...m.m~..g....m..%l.....~.UuU.{b..b{g.m.v.Yf..l'+.N.=.......$IQ...#.62......S.;p..;...)).$.8...{......].. CIR...J...'0.I.\#(....E..a.........s...!..d&.s....W6.......k,.$..N%\$..Y.s...@...!H\.&.A.=....^..e!......y....pI..h.w..t..v.E.H.{./...S.yI.P......h`.H)..

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	48942
Entropy (8bit):	7.954348475963941
Encrypted:	false
SSDEEP:	768:K9B355aXZ5MwmgnM1S33X+xmcE75Wrqvl/X/fpRUcHPKMdosbGH4cGeUKrinHPjy:Kd4ZubT6H/ce51XnUcvhdbbGYnG2H7vq
MD5:	05821970737886CCA9EC6D9F640FDC4E
SHA1:	62DFF2BCD60FDA2E97B1D309A431EAE621976D76
SHA-256:	2F6C9820F9C7429ABDAF184352A73BCF16B85D5AC960552A6C0ABAB33C2B64FB
SHA-512:	478FF7EB9CCC3592290070779E347C664EA67E24BC13278F64E10373D9A7561A7B2CFA18079FFC0B0DB4CD67C7FAC28F8727A21E8AE78AFA8D266991ED761A90
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/NetAUUeOatNbtzGAvZfgrxVvUajTyf2G3BRpTJMZ1Hnaxa_wcBscJO4eGrp-LvJOIgaGBz_IHteN=w648-h364-rw
Preview:	RIFF&...WEBPVP8L..../..Z...m... '..%....s.-D...@......PU...7....vU.O....W+(.^)@U...}..Mgl.%..me;-..+..T..8.GlK.m..._jw...J..T..%..........'..Ju....V.../ _.b.l....4..oI?..H.....u.l.QHb{.3S.((..R2s .?.....G...BCbW...+.m.y.k...cWQ.......-....h'i.......6.4...p.`/...o.L.(=3G..PP.M7H...s....t....`..9R2..a.t.'"s...9i.>...13S.m......o....m.v2K...2+.......S.....p..v.L.#....]m...+..)..B.$...H.gfEV.Gn................~...w..........>..!.P...\|...xH.j...j....Y..........d...N..........d/o.(..LE.s.....fmj..9.(]...,.n...H......_.......P...t...I.<m.5.......g..g..'.f..m..N.'..(.........l....F....P..,R.4Z.h.@..U1.W...K...-.......S..............".)..b..{6.r0..,........i.wO.+..........@......P.`%@`....^....n.d. ..l.,.3.......qW.....t.@.....F0..\|?.G/.f.$.&...%.j..b[.>.-P.xJK?.......<.rp.O..$....t.p....b....l.F.@.2...08....&c....@.T.C....T..6.~......`...&..bv.Z..m#(.?...S...@...R..a/....N.]...s.T*.K....g........J.=..j.i;9]...J@.-..l...'T.{..e....w......#.t.J...j.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	61748
Entropy (8bit):	7.989183763154298
Encrypted:	false
SSDEEP:	1536:Vy35XrfooAdq5fzwLTM08K+H5rWlyRzcoMo:49fdX5fUU08KiY0dh
MD5:	A538AA1A5C81C10119948446E522D703
SHA1:	791658E4C5E7B65CE030F671D79E5DEF60FBC421
SHA-256:	BA4CB75A6480511B005F33E6B0D8C6931DC3EE2001E4136F4A2F6AB4341A4720
SHA-512:	EAB184503116A9B01BCA3D052A5FD60C94FCC985BD8AD34F8A4909B07A060D429CC607EAB72A22A0CDE74F745F44D436E5ADF91EE6D7A0B1A9D79C6AC7329628
Malicious:	false
Reputation:	low
Preview:	RIFF,...WEBPVP8L .../..?.M@.$7l3.... .`IVJ.....?I)..?V.2.a?...}K.z........"."..D........to....iI....s.nE.....<>.......o...{....A..F.2.?......*.....%`<.......P.7....c.....\|]...m....Z..o\...Yld\|)rOU.g.......Y..2.....uy.4.o.x.q.E....D.A.0......nq#.....tC.H....\Oz..$O.q\|.....F...`.TU..HA.....\.m...pe......h.mIU..+c..S93s.=#........L..-...,..M%f...$.JF....[@....8!A.....IVm[y....=.>........L..A.4.f..8k........t......z...f5.S....B.a$.......=m..j....%..^.....6R.e.W......,..YI.#&.......S...k~W.o.........v\..M.......w..........?.!.-.^e.j^].........G...=....?..#...1.7...R5.K..R.%l...........xx.>h. #`h.&UN...S.x..O{c- ...9...A.?..o._...T.d..UK.?..K...q......,..)..j.{..L}....?..3.G.....y.]..Pw..d.r.X.....)......p.\|...&.D;...v(K..?.<6.mgZ3....5...<.........;..h...'.p...v...{.,5.-..v...<.......0.e.$..B..w.J.t...8.^S~..N.'.......=t8.o..c.y$....%...&..0,.....P.8..?k.f.......u.......s..........;..0%r....M'l...<....e.....a.....iXQ.J....J. }D......a.bEc}w...6

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.976663363230767
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKYQCpM0Waee:PLKdXNQKQ7L
MD5:	899F3616D1031A5633D9A0F4CA491B2D
SHA1:	129580E3399BE36658BB5164AD4C187E97EE12B3
SHA-256:	D4FE562B542385ED27C0A5B044F51B790B51CF0A57A265BD63BF51D94B570197
SHA-512:	3B5819AA67ABD91C54E395407E9FF01FBFC95490E86EB1AC9A5F22F30C7C6FCC359B6550450AAEDBCAF2D23037DDBAB09ADA5BE3FD227188FF828E5EC40F41DA
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	46950
Entropy (8bit):	7.990907762535572
Encrypted:	true
SSDEEP:	768:pNpDpfXCCtmxCdRcPO5/fkZsUxorj/avXIWCT98/QtCj1t:pNthC4mwMa+a4IWiwICj1t
MD5:	3AB924292F147C69AA071BDCA37F1061
SHA1:	B2D0FE8E94AB2D85A64CF96CA5C39AFBD37EB957
SHA-256:	16FD916BB8A25DC3DCFF0E69411FD820401F626BAEBB26A605E96B52B51043A3
SHA-512:	8AE82F70AA69624C572AE000EABBD897F1C5DAAAAE2AAE9A7C80584FF1AFF26C5100DABDDB9092D58B3E1AE66D501E4092528CCA42A21FD94FBC0102B6BD4E8C
Malicious:	false
Reputation:	low
Preview:	RIFF^...WEBPVP8LQ.../..?.............I.......!..J..?.)I....1..>.....S.......R...$1.i<.:..@..if..}p..$...,3....3$......-&...s...'u...d...ER..~..$...o.MJ.....wJ.I.....m../...;...H...q<L.a..f.p.!....5aRk.......e..'..5....D...F...f...."I.Ue.2. ..u7..K.ff....sU..9...03]#\|.i..BFPr.C/f(.U.E04....P..i..KF,$.........#....Sw....._C.....$.U......a0V.SJ...Rt...8.$)....k5.....t..... ...........w.X.4F...X)[..gd...c6........s;6bS..I...+..,X..#..;...X...Pw.,`..s...s..`...e.Wgt%...........:.].t..DY.U..1..........\.:....Z.p9...US.,.X.......G.A.5Z........$$....Hf.a7..'3......CSm...,...".n....5..gs.>.....p.4&...z"."".U...."....z.q .GED....ED[.i.z..5.v.N..QQ...1....::.X.g..O.?W%_.*WEQdDD......V....R.s..u.TD..E.NH.....=..:.8...(i.(.g8.......c.3....I...H...>.F..F`..3EQ.8.$................4......}...I~e.Y......[..;l.;.V,r..B]d..%.?.... .. ...x.\.......8.w.)11e.....CB}.K@....6...7...\|. .}...E...6...?.}..D...}...W.Q}..K..s..nQ....k.+..H....A&T.....F..pG0..z.0.{T._.<@..

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8776
Entropy (8bit):	7.9613872851996526
Encrypted:	false
SSDEEP:	192:RwQWFO3JP03Ms5Huy1DBsyyuRx09FkbO/KZoZrVhcZlU:RwQWFO3J83Ms5HuIDuyDSwa/SoX4G
MD5:	38C47955F69CDD3385FA4AF83D5546F5
SHA1:	AF3262E75B7460F71AA5227E9C86E12BCFC4519A
SHA-256:	A6A96CD449F92399140F51DFF505AFA38A8524B37F9E8AA11425E0B8F8DF292C
SHA-512:	19E1E262CB4C44DEE1F4FBC22B86C368B90610BF85129C0AAB5F9A1860B68C0482E356E0029F6B9356DCBCEB3FA1110C6A6240014186E3DC27C72AF44FFB3EF8
Malicious:	false
Reputation:	low
Preview:	RIFF@"..WEBPVP8X..............VP8L.!../..?..Gn.H.l........4...O..........>.....:.}P..K@IP....H..*".7Hb.]....N..._.......#RF$i.l...k..6..4..6.@.=<..2r.6.!..n..k..l..`...m.1..'.{X\a...8o..6.....DB@... .c....48.4J0........a.2 .iq.-..#&.@.jZ.g.\|...............[.......@....$...NR...#b.x.n{^.=..c.;pa8.....P...........2v.O..{.mK.$I..........O.Y._....}.k1..w..@..}.Y...2.1.$IRN..y......h........-.v.Q.3...@P.5..?.m.L.QUw.m..8Y.m.m.m.v.;..6.....>........lm..YQ...x#]..tl.c.3k..m......m...V..$.m....N.8....9.3.Z...$.m.q..$sp..A..O.tC..k.k..X.`.X.....P,.M@,...B.m.....n?...t.6..G+..I.j.%=.....7[...mli.......S.+.....=.[5.A^.8tk{..V4.r..../.Y...\|..b....).X.h../V. ...\|.U.6...V..x.5..'.....%V..W.{v..6..'z4n&m]......}...K.K.e.7.5....\...W.ez.W...@.....Rk6..>.[....]2.g..#.cP.5....@....D.A....U.........k..jqo..r?e.z:#a.Mn.v......uj.F...2.....9..-..L.^j..=Y.Wc?.Oon....4..u.1...S..U....pF.w".....c.Z=.j.....G....p....%'rIr..9......6c.5.4..S..`.g8...E...2.`..M...:.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	835
Entropy (8bit):	5.130101663717494
Encrypted:	false
SSDEEP:	24:D76bBSJFvVdGUF+fWlp98HpXXW/clctloFHMZeKsf:H8MNAwlp6Bmicnosk5
MD5:	F53D1967DA56BF267CD09767738E3507
SHA1:	FB87E868C42DB65F4CD1901F09EBAA2DA9626124
SHA-256:	5EF32E0E13AA8DDD4B9B288F1703B29C87CE5A8494C19D75A736DDCA6AD6D9F6
SHA-512:	F6CDF2567958EA29DB1033CDE493AFC2568F7269CA48705B6BF3E3517C5CE63F5D68363CC93E1F73EAD45E24766BFE8C4A6096F58E986E75DCB148C0D3E100A9
Malicious:	false
Reputation:	low
Preview:	{. "operatorDeferredUrl": "https://ssl.gstatic.com/support/realtime/operator/1729584116185/operatordeferred_bin_base.js",. "eagerLoadHostnamePattern": "((https://www\\.google\\.com/express)\|(https://www\\.yt-web-green\\.corp\\.youtube\\.com)\|(https://www\\.web-green-qa\\.youtube\\.com)\|(((ads\|adwords)(-.)?\|campaignmanager\|photos-.\|play-.*\|support\|support-content-staging.sandbox\|business\|fi\|.+\\.corp)\\.google\\.))",. "eagerLoadHostnameFlags": "i",. "cbfVersion": 1729584116185,. "screenShareVersion": 1729587679111,. "settings": {. "enable_customer_can_end_chat": true,. "enable_emojis": true,. "mole_show_survey_url_percentage": 100,. "mole_skin_version": 2,. "operatordeferred_report_rpc_events_percentage": 10,. "screenshare_skin_version": 3,. "rms_screen_share_skin_version": 4. }.}.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3456)
Category:	downloaded
Size (bytes):	13885
Entropy (8bit):	5.68563299125544
Encrypted:	false
SSDEEP:	384:5a+/ULxjbyFj4Q/gxTrjha5P0tjmvuQOu6BrYGkph:5FsLxjbyFj4gmrFa5P0tjmmQGrJKh
MD5:	D155A6751AB7C385E15A8D16C24417E6
SHA1:	70E6E511CC92E7FA77C88A62ACA8E208BF945664
SHA-256:	9894A0B58E423167C748F4488152F6E6F9A01BE4A74640550B0AE846D6D215D3
SHA-512:	4A858FF5527909C7814C3A263615BF04EC683B16524B63DE507165DFE8127AB710B81444E20782A6D02EFD47DF87FCAA38DB109BA382AE5F6C436662053C03C2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,C7e1Kc,CKm2Wb,CvxVpd,DRmmld,EEDORb,EFQ78c,ElYdAc,FCpbqb,FoxcOd,FuzVxc,GjTCAc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,J22eF,JH2zc,JNoxi,JWUKXe,KUM7Z,Kfp2G,L1AAkb,LCkxpb,LEikZe,LRovxc,LcQwud,Lkzi5d,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkwaS,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P6sQOc,PAQZbb,PH175e,PHUIyb,PRm2u,PZ1hre,PrPYRd,QIhFr,RBsfwb,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,UINLVc,ULFnWe,UUJqVe,UZStuc,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,WhJNk,Wt6vjf,XVMNvd,Y413Bc,YTx6oe,Z5uLle,ZDZcre,ZMKy0d,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,chfSwc,dZ05Qb,dfkSTe,e3Zld,e5qFLc,ebZ3mb,fI4Vwc,fKUV3e,fPcQoe,g6aYuf,grWkAb,gychg,hKSk3e,hc6Ubd,hhhU8,iAQMie,iLGjNb,jZ2Ncd,kWgXee,kdbckd,kjKdXe,kpVlPe,kr6Nlf,lDZ2Fb,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,mmmrlc,mzLjxc,n73qwf,oEJvKc,ovKuLd,pQUyNd,pYCIec,pjICDe,pw70Gc,qczJ2b,qk5AGd,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t8OL6d,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w08zce,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xI1uef,xQtZb,xUdipf,xii62b,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=gKWqec,t7vw0b"
Preview:	"use strict";_F_installCss(".x1OGnc{align-items:center;background:#123a2b;border-radius:2px;color:#28feaf;display:flex;flex-flow:row nowrap;font-size:.5rem;height:16px;justify-content:center;margin-left:.5rem;text-transform:uppercase;width:30px}.ZYIb7d .VfPpkd-P5QLlc{min-width:720px}@media (max-height:360px){.ZYIb7d .VfPpkd-P5QLlc{max-height:100%}}@media (min-height:360px){.ZYIb7d .VfPpkd-P5QLlc{max-height:360px}}@media (-ms-high-contrast:active) and (min-height:360px),(-ms-high-contrast:none) and (min-height:360px){.ZYIb7d .VfPpkd-wzTsW{align-items:stretch;height:auto}}.ZYIb7d .VfPpkd-cnG4Wd{padding:0 0 0 0}.IsssNc{position:relative}.AcxtQe,.TRaZhc{color:#8d8d8d;cursor:pointer;position:absolute;right:8px;top:8px}.YG3b9e,.adTxc{background-color:#2a2b2e;font-family:\"Google Sans\",Helvetica,Arial,sans-serif;padding:40px}.YG3b9e:not(:disabled),.adTxc:not(:disabled){background-color:#2a2b2e}.inFyWc{align-items:center;display:flex}.jmkV3e{color:white;display:flex;margin-top:10px}.KCiMwd{mi

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	17964
Entropy (8bit):	7.978688159198759
Encrypted:	false
SSDEEP:	384:7/E4phoB2g6XrFXNVT+7LPhONnExpY/RZGERTv8Mkn9Dk:LEAg6DVToJOQ4LRw5w
MD5:	E1CDDC757EA9456C3AC00F1414F942D7
SHA1:	016FA20C53C64E523396C5CADA86EB0A84F0ADBF
SHA-256:	24A5E2C640ACF0E181413EE18EA6451FC3D9A0EE040B9E7A83B940D28483A740
SHA-512:	B42676C661B17BC356B54A21EF2E6BE916430EC8CF368DA0D2FD11A6E91988C6AF3636ECC13084FD56C575971306C0D3A6464AA3E80751A5BF55D1118FDB067D
Malicious:	false
Reputation:	low
Preview:	RIFF$F..WEBPVP8L.F../..?..H..F..E.....`..Y.......9..(.+Z.g.%/.N.#..I..=...n...+....hF7...03.I....i\|.....o....Q.bf...RD.T....J...*...f.UU#..}.(.LU.$}....,o...?.)rBB.$..9...s.9...r...u.\|..\u...w@D,....$).\|..Y....j..6.mUY..Hc./...N..,I.M[.u..ls.....u_D.'.....7..n,...?.........d..[cP.b..k..!...\|.}=....o..}......R.2.....R..B...'2.. ...@.(Q(H..I.R_...LK......Kq..~..q!%....A..b/.,t...".....=.;....K.3...(j....`)G..e...`- h...J....l........E.]#....>........2]".2..5..............[...h.q)..wa,}...h..A`.T.-.5V.ak6..............q..as....N.#b..35{:.(,(OtK.#...)......P.`$l.........K.<.. .V.]..:.g.i.-.&4m....x..[....K..X..www.........}.u..R.rNk.....>]m.#%.[.3........w..>...>k.i.pww..?..#."..!.xp..#.t...\b.....-.vZ8..(nH.!i.E.r.NozS..N....z.k...\R.....`6...ll...p..M..xR..J...o...WzC\......g$..w=.W.R.z..6...zw....m.m.5......]U..+..mm.1I....D$...c{...7k.c..m..m+.....7&.k...m.v.W.{.w..)...2R....6.1..`.y..y(%...../.A'....G.+!%0h..nZT.(.C7=t.GE..6..GK....>t._ ....

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	645
Entropy (8bit):	7.631563068517978
Encrypted:	false
SSDEEP:	12:6v/7ihaL0Z6T2rkLv0cLSbLzKlRv+reS0TZPhnv8NuKS8jrRJI1b3g0hfue9:riS+v05bLzK7CmTRhnUTJjk1b3Jhfj
MD5:	EA2722D3B676D5CDD4F7225E65695112
SHA1:	97E5E94CFF5B62F60BA76C7DD9F606304AF8B10C
SHA-256:	317E5FDAA14E548C0045D5E662709CFE0B692E0384A8396CF22054BF0A1E1C48
SHA-512:	BF06CE48B306A0EA13EBC7BE92CB56440DDF1C35C214BA7C164DECFDA6E2E7AAAB31605196D0690BE4FF509404701CA620C504A5EDF0C3E6A12C6FA5A73C78DA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....LIDATx.b .<\|...P\|.h(.E.0.....\|.x.......a.....!.....q{.t.U...(.A.g.....w.3,&.s.~..h2.....Ip=..4!..[.................r.p6.R......R.....19]z.......%.E.q..........6".#...9..Y.n.U.ZU.ZMu:.Q:t%..y`<.+.0T6.=.i.0.e..a.f...b.\..Ax..e...K...$7..BAk@.\f..}bG.K....\Nk@.T.ha.+.w.%x.5.....k..OJr...$Gd....,.0....n.{..b........%].....K.....?....f....w....j4...@%p{?...\|>.....hH.h.....r....h..s.J..@X.j..3#h>.`@Xw..l.K.;).c..>....V.b. T....0B.4....%G......a[..P.........G..B"..!...m9rj%.....E.AD...0...!..y``....o.z...1J.FF,..sEr3.s.&....b.m.+.........'.m3(D..{..:..So.Ja..*......#..'....IEND.B`.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	44215
Entropy (8bit):	7.97839217732228
Encrypted:	false
SSDEEP:	768:gGvyJk8FYFkSjgLyiz14beCYi7trcC286Fz9QYZlLLU5OHqaOjAMlam2m6F:tvMFxSjgLTzGiCYi2Cf6d9V/LCOKHAh7
MD5:	E01AC3670BDE78937AB48F04DD66EF91
SHA1:	9E31EF13BF8668F422F7BCC8B670BBCF8D9B1678
SHA-256:	FF8C3CE69ABD41161AF5A4DDC79D844F44C728199E3A098C6A86CE9C9F49F446
SHA-512:	19A1F5A457C2349A51EE645BA45835BF4255C210EFAE043AABEBDD31784920B1A79140C9C78D9EC17BBFD5D928FD251D9D22568E23FF6E66A7FD0DACE41DCA25
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/on0ng3OGqMA/hqdefault.jpg
Preview:	......JFIF......................................................................................................................................................h....".........................................S........................!..1AQ.."aq2..BRS.......#br...3.....Cs....$....4c..%5Tt..................................D.......................!..1A.Qa."q........2BRS...#...b..Cr.$3...T.............?...QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A...?.........t.~G[O........lX.....h......v.................\|.....u.f.P......y....v...?........&.S....b....)..\|...W.O.k.>...6'..U...m..VQu..0..+'..a...p.iY4.g+*..P.....@F/Ei..<_.a....W../.0..^..).k.,...........1.I....._.A.....{.....`..'....Hv...L?....v...L7...=.Y.f.kR~`....`...}{...`x..}{....c.~Y...K..

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1042
Entropy (8bit):	7.774168594515862
Encrypted:	false
SSDEEP:	24:YCDrTteFxOINP0b0umL4cTv+ew31RD5wuRVvkia:YCat3ycSj3BwuTRa
MD5:	AADFB00B40D3E4CA78BC6D5031ED7595
SHA1:	97DCA684A185C843A2E11D39064C6D4013878D9D
SHA-256:	5E71ED681E2698FAA442185832AC78B3A606F556C48BF39A8C9C1A69B9BD9A08
SHA-512:	167570204770B5199125A6A68C7594D40ECA6618298799B025F51FAFC4C9062CB40257EEF881E2AF21A671421F6C58F3A3EDC516C929CC4A60FF704AF8107084
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/trfOy_Wg9gQTwGcoYJNushqXIV3xFhWBReAVWM5IPqspN5N811YhTKQCG48anNS13HE=s256-rw
Preview:	RIFF....WEBPVP8L..../..?....lW..C..}..[.~...w.6.$I.........y5.I.....!..@..?......@( i.m......e.#...qX.G.Z.I..E.8YyDw/-).ZF$(.16...M@a.(D..PI..cl..! H.ko-+.....ig.$@.)i........B....B...J!E..J..,E$`....."...B%A...I..$I..JD..A..=.<\|..mkk$...kR.o..w...;......@..o.....Z$o.<.':....[........=..N.o.>...L.kt4..<yY....t..~M<.^.op..6...MZx..+..A....`fw.&..P...C`r/n>tz...N....$.M.,.L..K.....@~......\|....).m.....Qg......3.>;H.t...kI...s. .s...w&`.s.....[Yg.s;..&......:..;T.U8?..5.1...Z.....n.L..Z.3.<..?..sL..e]c..s.n_..X\|Qd..+(........K....).7J.......q\| ...'>x?..n.....YdU\........k....1Z\5....g.AEX.z._.=9i....3..z...<cm.a..ol.a..o...a..o..GXD..{..""..&H..<s.5i.._.3..ED~...""..k[.ED^9....O,..#".\."1b.'............w>./.O.F..Mr\|,.\|...[.C..NC...:.%]z"N...CS;Ry`....r[...KeE....6......(...T.2.Fb.M....)hk.x.g.....A.-6./..Wr47......c.yA.U.A..h...UP.4..^5. .....h...........h.;v.8...S...A...P!4....T..b7.^.*....'.B.. ....1H.. ..;.L.%G....k.BL...c...~..~...-O........;&....a....

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9130
Entropy (8bit):	7.9567084578110325
Encrypted:	false
SSDEEP:	192:YwH6q/rmVQzQHBC2KKY/aLNKIf6UyULHmozxA1oSdRPX03AdDJc:XH7jMicBC2KKYUEiXG2xAeSdBXdm
MD5:	653FADBE48451E081A9151ED7C125119
SHA1:	71463636A82FEADB6CCE22F7F8E0704B9D004273
SHA-256:	951F9ED94EBA0880F04A514121E87704C8C8140E5C696F3FE56F6FCCAEA486CB
SHA-512:	0D0179026235306D16E4FEA1E198778396768BD0B8E6CC97F8E23313548645D19B7425E1DD7845E32BF31A8FDA63634098500EE41FB05E7FB9DC5E1C2E8A0A49
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/TBRwjS_qfJCSj1m7zZB93FnpJM5fSpMA_wUlFDLxWAb45T9RmwBvQd5cWR5viJJOhkI=s256-rw
Preview:	RIFF.#..WEBPVP8X..............VP8LZ#../..?..H.$I......)...5..9G......;$Z.`'.+i...F\|.m'...$......}N.Ib......M.9...Am'........M.C..+0..N.cHZ..0.....(c...x._......S..2#..$u...p...,$........(.^..,f.6.....B....f.W..OB...W..2.......'".:.:^......'D2e. G....... [f.{.....y.G...y]....8.,=.a.`.....-A...X.7.V6.By#=...By$...J.....I4.HY.....K_$................%.....u....yO.W=..,U.......<G2q/.......9+l-...x.s<Il....\@...3...!......S.J6.<...W$I.m.Ue...qf.....;.D..3...N......tP.OQ.HN.....gX...m.....\L..g..I...................2.?...Oq.w....K9`..J%.../.!.L.jKm(3.>'.#...33S..l..Z...!I.d...-.L..m\....m...Fs.Fa.NTf.#$7..H.y.._.{.....=...u..?V<...>.....SO.....p......MM.F}......7o..p_.-fD.i!..m.U...{..P.-..y.R.l.^..{..m$IT.....n......$I..1.?...G.z.}..8^.F.^.....(.H..5...(.18V..4.$G.<......=}...0..Ms...b....7...tR....dd5...!.u..$/&.^{...1..F..W..p....QK.9eK..;!.ts.(.z.......c.B....q./..D.!.Bn>;.=L..D#..k.{.e._.y...F.k.....'<..?.YH..8..3..........e.Esq.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1580
Entropy (8bit):	7.854615390864796
Encrypted:	false
SSDEEP:	48:rbsIqxSi2dXXzeeQC4L5job28Tim4criuH/oLv+CSHBI:/pQSi2CesG28l4crc+JBI
MD5:	2B3DAE5CC32A92D8FCF8F249E3EB6C98
SHA1:	8DC6C8DF68C37C642D456C2E32CFC3AC36D1AA56
SHA-256:	E5F750DC0DA75C8BD3ED659305B8779182A1CAF478EF07BBD05EF3A0FB874FF7
SHA-512:	B360076D0950A2D51D0F04C48A7250B0EA833316939967FEA0F51CBAE801F6A062783AC15C254409F18B63C557E7757DEA3FD51D19292765563209979464DAF8
Malicious:	false
Reputation:	low
Preview:	RIFF$...WEBPVP8L..../?....Em.IJ.....{Q.....+....k...Q..y...m%'...].'!.1.1......,.d.q.P.F.T.H@..%....wvj.qt.HIB.M/@D....D..X...........J..(..'s..ff.........tN.$....H.mm..7...._.m.lwf.1...m..$W_.>I.$)..V=p.......X..$Ij.&8!yA.7\|.~...).KCCv.Npa..q.N..N.....@..L...P..L`v$H..(..R.H.\..N.d.%..v.n..\|.....'.$x"..-m......{..R..E....-.4n..TU..Iu6....d.....O....jx..2H.2^../....[f.fB..ec.u.....I......a...u.R..X...`.j.p".]2YY...=.SX.h..mA...>...9]!0.6tR9r.....EB..$GS.p..Y..t.R........{.e.e...Oi.....XBF..s...4...my.28...5......y3p1.B../\|...#.....v.....{..qL.M{...8...F...V...T..>J..Y.....v}7..Y.d...-...G......wp.......[rWa..3.........X....?..kZ.L.g.S?\|..-{.@ks...<.[d..........w......2...3}'.]..f\|..5q.-...!......e.G.8.{`Aj......._.q..3..!X[4g....M.A'.T..B.....&..9..p1..o.....~../.o...._.&.2.R3q.._.6#..V.![&\.2 ......... ..........G.2i.....;}...q...C...Ua'/.)....z.N.....Zdz.....L.{B.l......M.....3......,.*.>.wL........w../8...=....d3.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2606
Entropy (8bit):	7.909722711358669
Encrypted:	false
SSDEEP:	48:XjTBdJl1bGh3vvRIc8m3dbN4t6XXYAD6El85sj8SnzcjG45aKAB:XjTZlg/vuc8gR4EHlRl8pSnzcjg9B
MD5:	7390F98865D7E8025DEA896B7900EB17
SHA1:	ADA7CAED8942C0C304541C13E95048A6E12B45A1
SHA-256:	A86C060F36DE5284DB48A49896D238D0F8DAAB9EA633E9A80E41C6647A141C02
SHA-512:	2536863ADEDE3DA7A8FD4975B06F4724133AACE3802C5DEB4A9CA1D68AA5D814FEC8365226367A63DEB862D3011A95F59784CDD56F5E3A623639C7376DFBCD5F
Malicious:	false
Reputation:	low
Preview:	RIFF&...WEBPVP8L..../..?..7l..........]".]...@..%z.D...8R...L....2..LK.$...$.......y\.q.1....:..Sr...pMK.....&....gOl~.0.....'"....=.....P'....[&.w6f...[~.w..g......~...^..S..}kR..mx.G.9.7.zS=...2.}.......~S..C.s.(t.....s.....N......N6F...9.gDD........[z$a.t....{..WD..2.[.b.$.bW...5C.P..E..m($.....(...\|...B...`..Q..Q;H.A...:..~M..$\|`.l.......v.n....+..-`.vy....\z}..E...{.\...m........Cl8]...........nr..\H.......a&...4HnO1a.J+...\.`.Q......xP.P....p..f......c..:c,#.e...(....j.~...V..I.fX:Tie...y,.....H.%,..t......R.3.\...q..h..!}...,%>.N..............$GZ...!q.-.8..D..;..st.'...v....U.T..c...M.=..Srh...... .-=....y..^....L.f..F....@=.(.\|.(D..2...}`,...>._!.....7..$. ..".3.ym..$...<.t.!.:0~...G...J..8n..v... ..#.\|.m.....".K.53..6.@.s...]....a.d.t..t[.5.;].c....2.2<........l}..u....R.n\|...0../ ...0...9.\q...._.i}m...>..5....d...[.....5.fK9...VF.v..,..y.g..&.L.C@..7.#.c.....d..)i..?.........+x0...2...'w...fIzB.Y....'.F".9...fq)...$u.#.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	39276
Entropy (8bit):	7.9937207470063125
Encrypted:	true
SSDEEP:	768:WLm9ucPACNV9jQ/YV6fdd61jaDJzv/l+51/qa9WFVhcwT:om7LNV9YYxoJzvCydhpT
MD5:	EEF9248F61C0705848F355E0D5585686
SHA1:	4A50F405D48049C611DDA383863C1F09BDBF38B5
SHA-256:	BDF1E4D4D7C6B50832697057F3AAC2144FEEFB3B59DC99279FEFD8D4935105A0
SHA-512:	955124457345FBD69DEFB07E4E7051DF21DE510D9C140A64F772C4593B36615E2ADDFFAD280C6BAAD50E13E9097949DC670112FD53952E1D15A6D2BE618828B9
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/gAc6Do2rlEFGZEbG9HrLCHNBZW_jqtAP-8PKHSXEPRcA51Qw7t9OhO8cQSUPHL1yk9I=w648-h364-rw
Preview:	RIFFd...WEBPVP8 X.........l.>U&.E#.!.\|.(8.D.7~.......}...[.&..K.'j.....g......p.Q......._.....]...g....@.!..?....C..........{....3.o.........?......;........`=......G...G............+...O.g.O......@...........7...............p.....].m...........?............_@..}..........._...m.o.?..!............[.?X........y.a....._.?......[.?..............?....w~......n.-..?.......}....o.....\|X.../C?z.#........._...;>G...S...........i..........?....G.S.g._...?........_._.....?............}.....#.S.o...I..(.}l..$l.s1..2.@..N......v...O.&.......L......4.+..#.).!.,yny^B...j."o..c2..i(..F........n..q.[4z...>u.K....X=.k.....R.;.0Z.a..#.J.m.*.Rr...zi...I.0.o.~.5.j..h..{....~m5.}.X..4..'....#,@......s..$.X......KO..q.V.....(..i.8\V..s.;..g..WG......\|.G...c.....b..S...T..u0J[.......L.B. .@....].>Y^.F<..es.-.,/....$H.b......x/........p.......r./N.o..hR36s./..y4R..jeb..$H....j...p%..w.b.S.......!.k..;Y%..^2}..d.a..T.I.t.....{.A.n.h....eUW.5..T..a.D...d.C.WK.@......j.F.h.zY

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	32208
Entropy (8bit):	7.993879453839868
Encrypted:	true
SSDEEP:	768:nHcSuG/YJ756nr6noJowtPXWQQolqE+3PZUbeoNI/nt7GYGay+:HcS3/QYr5ddXFlD+/mNevGU
MD5:	BD7D13EA2E801E36578EC3E676A7E55F
SHA1:	22C9ACB03C0A9061F9AFEEBC826D5F0CD9120635
SHA-256:	2C79AA56778F429A16983D82F6023C782EF3948311AD6161C444F8F6B380AC32
SHA-512:	ECA472169797A9E81EBC86CA4718AD41614572A0443304234ED4DECB6BE7CE34A5D3410BE0CCCF016BD494145781B7606FAB5DED7EF87EFC4942AA4E91A6E4D0
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/gSKT7WzQz63Ha91RiOEPMl3Q5mBIi2V-H0D9LQijC9n0HDAlE7EQN3NuCyRk_2o8kpk=w648-h364-rw
Preview:	RIFF.}..WEBPVP8 .}.........l.>I .E".!....(......)..Qr.T...[K....>a.R..Uy..w=j...b.o....'..\|..r........R/.^..Dy..g..._.........~........j............._...pl..d..^.\|...O....L...........9..x.....8#@_./.."_......_...=....g.../..".......3...7...?...?...g..a/.oN.....w.....L....P..H..~...tu...gw.p. .n{...+.B..Z.s.._../....}{y~(t.M}o..P^~.rZy..u.].......<..at%s.q&...&..;.$..QV.A!.. ..f.m..7..yN...d..V.r...&.gm$<.2.(2.hT.8.....S.....]..R_R..X...k..N.x....e.&.e....C(.m..\|.e..:.\|..k.1...dZ..E:....Z.=.VT..).C....=.e..(....K.79.I.G/.w..YD.(..;.-1..../;...@w..H..!oo.2.0....b..g....8?..G...J.o.x...O.Fn."^,z.lrGw.O....g..(.t......U.K.i.X<..=f...QO..../....+U/..X../...O~v.x.R."v=.zM.....[........;2;DV....J..Q...yb..&.v.8.s.(.o.....y.....Lk...\|..QNU..-..?9#..c.`..tU.4......$&........R..@........m\|....+{.........Z....Y.z...8w.C......\|..#......T.6.......K......q.Qs...w2{.....U.k.....A<.4w....M....ED.^....#`../W....~.>=....4.eR.....@S...g.W.l..bY...G..[J...

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	60180
Entropy (8bit):	7.980143591719596
Encrypted:	false
SSDEEP:	1536:c3MXT7iWLj2jchOA05b51OBYSQjH9K99y5qgBa947qbT:WEuWH2jchl0z1OBYzz9KPyLq3
MD5:	B907E05FAEDD4745C481844795D7B198
SHA1:	DACC30CEC9FFCBA894A5A8B6A62C61F0793F2390
SHA-256:	7FAB437039BBA8D2C95E28602946A9DEA4CCA95A1C82FD3A4598869044D69CF9
SHA-512:	4DC692742A9507DB370A601FE886E7253E7F23ACC1549D213809BB1138E3A31A101A40A77C536915A3FF4310FD066F18F54FD1EAC8B8A5451664EB4D68B7E987
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..Z..@l.H....o...p..~.@D.'...._..=.g......J.;EU.....;K2.-.B'.vw..!@.74........L... .\.6.J....dM".M.O..n..4.I(.....>..K.Dl...`.5.%..8.^nMB.Z(]....!...m.?..Y.74.y.^..;..z.Qg.2{r...T.N...=.x..x..8.....6']. ^z.q.....w{....{!).,@..mo.=..G\|...+-~....z/W.U...."~.dI.U..{C+.a..3.-...8...Yo....y.n.'../.y..[x3b....c._.#n...V..Y..........b'.Q.c4.S.^.B.R,Y.LjQ...j.!SP.....s........-......QO.....Z,..o.....%.4..ps.\..i.....c.[....?....F..;.v.U.;...(.......$.p...k.....j...........P......(....n....(`..G".X.L.2..o...G....... .m@.G+c.aX........v.p{.[.~..E.\|...H.H.y.X.....].h.{..Ts......._.@..m....+......@=........4..HQE..f{{...F......"...v......)...N.+x8j..+V,,.F......#..HnN.)K.....@)../.K..w..n......2.XIQq-.......>....v.#..X..J...J(.S... ..lQ.....].A.w...i"EJ........#..3.gz....=...f9}<.^.N.4.+..H_..4../n...V.#@..J(.\|......J(..T.7...rz..M.Nd.V......@.#.....<3b_.h.#.4S...+....J....4.$c. .. [Wp.W...F).. vr..75n>....Ls7.2.....;s...D.S\....

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3034
Entropy (8bit):	7.899921007431496
Encrypted:	false
SSDEEP:	48:omfAGs94LSvCRYAJqB5mNFdkI4cIJTsY0frXVR5A7FTz:1ARyLNqLuddoJTspKH
MD5:	84219843A86CCE72CE8130D28CCC5709
SHA1:	1D992CDB3EC1E062C5F07E8E5866A2B3C722E48C
SHA-256:	43D733337414644C4E45C66782675DA46EF04A78B12EF13BDF99ECE240CA604A
SHA-512:	69F74099290374EA6D695813C1E124860C3ED3DB48A10B91DDDCDACDA9AF0881B4CFE68559207A2146BBF9227BF2F326975B6E57F3E6EBED7EC6C52652C15841
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/9AZOTXU_CpreTFAXUPAmJNkm8VGCb1C90fjJ9pHGcVmpGMDSTq3cUbaQJdBT9Tdp9A=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..`..#....s9."b...]0nCk...h...Wt...Ec.../....I.......e.~........~..y_...I..n....+.6..6...\Z."n....J.......(...2H)..Hu..k......2.9.c..,b..o.f."..:@; "...........(.zXj .hsB.......-.me...m.\|.m.."......O.....F.Hr.;.[..333333.'.O............W.].B....d.;.EI.d...6......J1.y..c^..0XZpe.Z.....v5.......\......7.N...uA(.._.....yk..q..<Yg+...@).S.g.j!..O.Q..YS....m...mc.?.m.m...v......n.5t I.i..d.}.........v.w.......?..-o..m.Y.Yc.B.'.....7.s..S...3...=]...2.fP(.W..W4_.q.h.$.'. Eo.p.xt.#.L'3d.S...uv.U.g..HQ...D..e.Jkm..,....(.%..........UL[... .Us<9U......&..k..<.U..lqc..W8V..#S....,.{0...-.j.....!_4_..d.....X.P..f..~..a.LQ.j....h.&..#..X.g..Z.........57h.c. ._..5I.t.F.j...d..\{..........X....o..}~.-..v.w,.+......Gc............$..6o.j..KwY...\|...H.d..$IRx.>..=x..1..........h.t.Zo.S.M.Qm\"6.S......`....O...=...L...nc..8.{.....%....L....].Y.....8t.:...I.&c]5....xt4."................j.#....,?`.&cz....*.j(...%y

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5494
Entropy (8bit):	7.950612905279893
Encrypted:	false
SSDEEP:	96:aTpf5P+tQw1iYmkpSMEm0HoAkxMMoxQE1E5RkaojlmKT1KBs6oIFEV5oy6d08Ug:IHPmZ/pzxM1Y5WdT1uxw8d0rg
MD5:	6A4A299F98D865AB9AEC8B41F71A952B
SHA1:	A30DAF73D1508A18247CB806D219C3555629A6FD
SHA-256:	789DF5BD08E7F68C5844C4765A78D52CC31B3B1C6EECA8A012E2ED38DAB5995D
SHA-512:	82E3911CFBE0147A9D7FB59B8535FA441199B2802F4B52EA9A6B5A21897F7F9947D380931D1D4CC90B2E06FC9D21EB32263C482DBCACDECFF6678E248B80BC7A
Malicious:	false
Reputation:	low
Preview:	RIFFn...WEBPVP8Lb.../..?.<...$g'...d..Ubffffff...........;....c.9;.9....e..6i.'4..Xe..z.-.a......b.<y.A.bK..-4e1.,.OK.I.C8!vC#.&Oh.l... .\eF.".\F.%..lK.@{.c...1Zm...\i..U....N.p....l.Us.=....#..j.g W^N ..3.......K.... .w.$.m.c..k.=..~_.m.m.~.....m......f.....m_..m...ls.m.h_.i.....d.......=2...).w..b...c...Z}X=.8.~.76....W.Y.{.u.....s_.gU.a...z....G.......f=5`n.b!+)!...p.Y.F..j.I....Xp....G:.e..fhhs...........C>.....+...Gv..f.b....G)....r.....M...E..$..VT.......v(.!Rb.#..[H<"....4K?f\...kc.`...$}."....;.T.h..q...$"..-....r.T........~.w\!.p.H.m.`8y.....\3K.rG.gD..Sa9y#l.B..~,.P8"..2rh>.......N.>-.........c.5......i.L'..fD6...v.r.4.yzx{..y.........3.Y.}3.N.F..>E...%.....O.]."......u.m..zru.F-....'\|YOF...n.XO.[..[..Iu.pB.rU...O..8Tc.....l'..v.!j..#..v24.i5K.....92 ..dxk)q..q5.V.n.t..........W../.<v..P..jR.'xo.Z.*..9l..#%..;rh.+.r#.L.`g.s!..G.{w..;.v....c...9..P."..W.3....=.....B;..h.....y..XK.`...4..`.4...n......N..F..%i...NJu..

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8672
Entropy (8bit):	7.9657826197851955
Encrypted:	false
SSDEEP:	192:QxhfN+RkTxzurpYeoEkYqelM0WxpjQyyd5P8nJZpqhnCh7e6:QXN5zuOekYbbWxRQld5PsZQhnEt
MD5:	4CEA15C604E63D3E7537324F34811098
SHA1:	FCE3E1380CF11F7F3318D857BC9E4BAEE82D89FA
SHA-256:	653EEE6AA0AE78CD5EF4FD2E3897D198A5422CC5F63F1F667ECEBBE692AAB019
SHA-512:	6C3E0893561B7AB8474A3E526EED9B5503721B14275E0641351577D06AC60CD7B97A5F70107DB1D2B5FF682C57573A6E3F71A290B0000E0D522A407085BBB5CD
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/87ZWG0h0ohRprr_B-ikfu66EgiL__wNWROk9yW5xl918h0RSzfAjRC4OnIaXhTux_mRW=s64-rw
Preview:	RIFF.!..WEBPVP8X........?..?..VP8L.!../?.....n.."..#..UA...gC&../..#...X$_..N[.X8.l.v.z.mk.......>.`.I..y-.8.# .@..5....$........_kg.?.~..O..2...@.!.&.(t.\Q.;Q......b..yA.b...f.b.."SH)MPZ...P.dEV.y.._s..j>U.4..U}XR.:..Ws..U..3.....{Z..4.b-.J..g..r...P...?.!"&@...N.#.Q@..`.v33........@...-/!..l!J..3'....)~...v..te:r..'......1.03....t?]Z.e....o.rCI.$..........y.0.4....4.N.....{.t..H....Zz....i..$...v..2&.....\K[.....MI..\..j.m.6.m...k.NR.B.G..=...{..hwg.YC.v....l~BO..m..lw.{d.....i.m;.S...&. ip..,0u.-.........L..]:..u.@....\.u../l..I..<..8...kZc...Z...Z.m..v-.ms.rufVfD..._L..Z..e.9..j.....dP"..9..g.3g-.....\...+.]..m[U.y.}....i.R......."..H..h...6.....ev.9..;,?..'...7?.?.....). ..(.(@$@.@..W..0k.......m..X..c.......Rx.1L@.@.D.. 6..A..XV........b.YD....0=...j..6.<.(@.....".p.qj.V...:.}...8..K!.-$1.. ...._.W.t ...4.....>.b.T..Y..m....L..d.....S.!.@P..KRAc..g..*. Ra2........o...zl....XN..>h..\d..F.Fn...i$.fI.i(.<.q:~u...jB..$A...Wk.XU}.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	53088
Entropy (8bit):	7.9879800556606035
Encrypted:	false
SSDEEP:	768:ZGpMIDxNfgAgZYF7VU+PHKsUMRKnlB/7Bqr4KJTdLO6QqnHVGcI0KjsP3/k:+1xFge5jPIMQBOB5LO6n1GcI0Lfc
MD5:	5FAC4891016B60CD4F50FC23A4E10D8A
SHA1:	3B5B129201AAAF58030435142793DCA9698ADD03
SHA-256:	CB78F15CD707BE3E0A049AE8889A49197422B4FE3E9BC9B75E142F6F8C52841A
SHA-512:	647AFA64D1F33CDF42225156E0355C32C401AEDC49BEE6C759901D1F90E099C0CE81BE8D873177028252B6D83BF7D22E226F6FE299056AA3D76527C868C853D7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/1Ns1T_qN0pEXMvZeZ5lQNAR8z4blP7ce2J2Nn5doXvt2T1g_W7VMORdWHaApkOooupI=s256-rw
Preview:	RIFFX...WEBPVP8X..............VP8L..../..?.M@.$7l.'..8N./..e....O.L.......0...dFU.c.......i@..O..0...NI...$.."..Y.......m7.( ..1...g...W.U.:.......u8D...^/~...J4.x.K..1g........0.._...1..bNIq.%..9.....Hb.DC.......1"#t.-@@p.'...........j.WWd....~<g4.Z.u..J .j........v...2....3....b"I.$..........vy:xRl.m.....I...4:u....,...Zn...Pn#I.$..q"b...\|-B=.~.W.....<..ZE.\|.E.....\|.>z....../.6...I..X{c.).....C...g....^{...}..U.p~8)...<..L3t.}.[Ky.....^{.O..\|...bb..N..j..N.'KC....M.....>.._z....I.v.....9.qn]s44F.3$.G....=.."&.Q...$I...h.,..~{.....9.8.....-...E...........L.....'e......Vn.=e..A+.<........`.<......6........V,?~.~....?...s.\!...+..8f.....1i..Ze:w..."...{?].I.J..1&....q:D.Ycl,...........BGg..P)..."[.....0t.-.1..\.....r2.eY.XB.IJD..:eCM...Gt.....,..t....QF.xPjrb.nr.,....1..8.v...mj....t. p*.jKiZ...P..^..{.....r...........&5....,t....G.s..Z..V.....x..rw..5..P.Z..9g.....r......+r4..O..<{z...~X.].....X....c..{......v.%.ZKg+<.}...s..'...7

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	11564
Entropy (8bit):	7.980634353343647
Encrypted:	false
SSDEEP:	192:TWFGZCKCJ+1+uismkaiJX9eYy1VA5Hks0E45L4ptje9/:ycUKCJHuismxiN9vIokD8YV
MD5:	129677E6E582CA8DC366FD529BA364C1
SHA1:	88175E68A44490E7B5E22ECC30FFA279589A4653
SHA-256:	F4AF81BEA68F2BF34B41802EBDCB45DB05BEC1B16E4DBEDEA91AFC4B31E85B3F
SHA-512:	B3F540572FDA2DAA5E9099E053AFC315225F92C5559BE0326BA2D076F0779E9B29A1ED46E97939F5208665C259D62527B75C62C525973CAD8A42753B2912F22C
Malicious:	false
Reputation:	low
Preview:	RIFF$-..WEBPVP8L.-../..?.......&.@..#..df.2..Fs..<....eY,..+..$..BC.2..$k..~...}..=..a:e.Q...\.6..:.k.=..l..(7....2..Pn.S).8.eF...NPeff.L.TfT....a...h6.S..3.Q.^).x6e.mNe....=.]n8Y...............^T.....'...e..Tn=..g..)L.B...70...z.Mn../.\7......)..)n...2.....m.d....{t...VY6.......m.m.......PFf%".z(...^.>..lku...I......m.......MS6..!... .6......G.../nnBn....\|........S....a$.....(F.h..4...^.L.VI...l......,...Eh...K.G.c..O..nq.?\..<`\.......D.T.Fw..RC..c.j..2....ei.'JF.FA.;...Ly8.'..O..I..RA..T...p"h.9\|S.3..O.3P...:w..,.B.L.g%.{..L..-M...2....6z[..........GUU..#L,ea..H.&...1...-A.M-v/..T..Z.........l...U..Ju.V-.4...lRo.\|..Ku..........$-.}..\.#..O.cV..z.QYi.I...O..E.X....vm ...>....mc.U...oG...u.b.[C.E..V...F.{..(`.N.....i<y.2...\|R.p.%.<s,.......u..j.{i........].[e..b....oJr.Jv.ih:...Y...S,...t....r."a.0....E.)..c...Di........)T...d.mk..$...fI.T..y;V...:...l.).y........+.....QZ.....W......u(...:u...#]W..g....W.......>9..W...4.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5904
Entropy (8bit):	7.961610300807082
Encrypted:	false
SSDEEP:	96:DNnkcyhJbY+vbovIhZsWZahPrDAmVBG7vMRqMCErvPQPglY/GE+ut:DNTyhavICrkmy7vdxsqglYVPt
MD5:	B02F12AC9FFEAC96D1505466A0AC0B6F
SHA1:	17B05850127B1E075379BA20F68CB79736D30C50
SHA-256:	5E8C56E24D74A133314D693B5DCF9A86A83226BEE94125FE549CCE5ECC022B5E
SHA-512:	5F389B2C246CE155BF616551F337A83ED48E16C425347CE76563963EA8B29688A6D21A9E2076570A50F47BBFEDBF49AB23324FED668527846B1EB39D47728B97
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/M0srkoCNqpU1LsVI55ik8Q11JP-CeQgZq5IzT0yXmM_cyc-AhxdcOGkvpgH8hsLfe-Q=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.5...Q......"b.........oaa.U....m.....c..t...IK../.....0.:lf.33......a....Ma.$.......}4..4.f2..Lu0.9.pz...%.'.3.'3.4RK{2C....Ur2.%3.).I.....K.Fji..ze.....f.S.......Y.\|.p..f.03U.....=.H.6.m?.H......&.mi.8(.!..O....OKr._..1.Q..m.m.m.u...9U...V...........t.c;7NNg..Sg..X....].j..h..v.m'...JcO....~..]...1VN.bTE'K;.......S..m........$...F.m;,.=S..{..6.{.i.......Dm...E.. +R'.3+.,...M........=..v..C..z..;...\.....yjfR.-._n..=...z...!..J..c.......%..z..k'.(..l... ./....W.....8..u".r.n...B(r('.....A....g..y.........Nrt......p.c.......,H[..n5;qp....j..=[.....z...60q...p8.d"VZ.I.S.LK..O....F..^#[.....}.:.#.hKo..cm.n8..Y1tO<..!.54'.a...x..M.<.L(.j.}..1....,(.F..l.l.n&....jK....j...g....n..Y..>4`.v7..Wk.....}.....~U......([.!..e..Y......<P._. ....f@&....J..Z .=...).J.......&.JT. ..y%..e...H.v....... ..n......3^....qv.N.9..9......K.d.=..,...&.......@..nD..(.c............:.X.~..L.r4.r#.r.....T....UBd....,......l..M~.:7...

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	678
Entropy (8bit):	7.631267665350741
Encrypted:	false
SSDEEP:	12:4PAt0RpZEi/iqmUtvvUQGfM3N2ClqlG7b/WYbFlygxcaJSGkbaZ67HOtw4Z7/J1f:4otQp/ish7GfM30FiNbjcaJJkbakjgRZ
MD5:	364F9F3D361FDCE79EEABAF6A6F6B4A4
SHA1:	86554657B8E9BCEF39A4BC862C0477F397328253
SHA-256:	19BCE113C75DD4CC77EFD50C7EE39D003F2702A6C68103A0D2365192C8B3B624
SHA-512:	7C37A2DD894106AD87E2ADE0C20894BD2BEB37665C6D5748F883172DFC31A8CCA7C41212EB4C12D40E695D879AEC07B0BBA8BB6A5B09FEF52A566C0BDFF06A2F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........@.@.>I .D".!...4(....Y.....r@y..F...f.....C...........u......o...5..;.../]_D....\|T..'.....gK.n..z(.....s..l......l.@....2..4...E....:..S..kP.Y=u.R..f/$.3#)h.......?...E.........@...H...$..{xk\sG.e.\|...?.?.........w.xL@..?..[.G..$..z.....P..WPq_6.Y..'.......MB...x..f.-....8..1$.0.r....L.\|.}..HYW..K.R......Mq.y..e[.}.\|.d`c....>..O%......?.\.....c.Q......8..?....?....D.IU&......X%.3F&?.....3....l)^.D...M}w.):.....?w;....0.Y...Y.b.W.......2B\.b... g..X...c..b..[...G...P.uN.T...K/~...G.:....4....\|#./N.=.7%.j...a\{~L....m.+.w{).....g..Ys.:p.v6..U.y.n.z.kA{!.....L..3iM.=E.".`.0U....l.:..?..>.!.Q..y.=.^O..cSx...Gj..j(.*^..@..=..

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2616
Entropy (8bit):	7.898065804909313
Encrypted:	false
SSDEEP:	48:pdQBGXXXz1gowFTCmszOSuV1CWegI2+S3cjB4AXd9++f9S6tLqgWhf7HSAkBL/t0:IBgTZwEvOSO1CWfIM3ieqdb75qgWtH2C
MD5:	245BFC94D20865EFF643910ABFDF888A
SHA1:	328B10E4E87577494255D2F6BCD0DC7F22E4B9A4
SHA-256:	5D85EFCAB8AFEC3D0FB583D22A87A25C2E4503ABE61483FC107D600713D674BB
SHA-512:	69B5F4B8E78B662FA018A6D3A7DC5FEC83FF80A9E4CBC3FB1DEC21FA270ECD4C895421582F1699C63AC6A2DC8B837793CBB5FFB9FA2443F5931DABB953B412F7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/_sJ-ST-crO8lxIzTv44xv_hiZvA6X7X2-8jSjhha2RfYcGSgACRod38yA6dfmcJHy_M=s256-rw
Preview:	RIFF0...WEBPVP8L$.../..?.......................\w;....u..s.3...v.._.U.P.....R.E....[.4......Z.S....f...... "v.]........2NJ.......sC.T@.n.U...........v~#.7....A....-x.'.. e.Y...[..Y...vm.m..m.;.z.m.]...,#...I..i:;....m......cB...?.....f..D...j...Ns52.V....L4.:.<.......... .RX1..-.0..&Q....D..x....`.,.......h...d.....!..l.T.D.@.,`...y_..E.w.x.........v.-HU...P.5x....n.\..\|....4K.,l........\|.i....z`V.P`...B..d....o9...Y.g.1..n....cKP5.-8.].lUy.....S]..Z.1p.O..<...\.;.i....q.L.c{.\|..)..F@._..Q.8..'...3..O....3....T...P...D....X.......h.J...w.G.r)... .b.,.6..2...a.s.....%4.."1.bq..bq.\|r/..YC....{.....4..-X.F`.....Sk..Q.Z..(?.?Y.......F..N/.X,.=..J...Sq...6.~o.P.*`3.....%>..o...90....{@.\|`i..-1..Gn....V.....lw.".].5...w...>lt.+...>......Q....G...1...m..Uu..-cj.......7.v..w..\|i.P5`..^A.o..n..j..P...H...."....@h/0s=...mjO..?.~>..\|.i.......3..z..8k....h....Lu..)8....t;n.......,\.>...>.....rV..[W.._lps..7S..X......e...;..S.....7....a7....e.s.7.{.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2725)
Category:	downloaded
Size (bytes):	69247
Entropy (8bit):	5.427434387210052
Encrypted:	false
SSDEEP:	768:8Fx5xxd7wzX9lngoLzYmFAMKPsHWxwkyaer1gAn3m4JxBSJLT/K8xupscx4H:831d7ajgo5AX0HCW3mosLT/5l62
MD5:	288F16F77F0EA72D84B578EA5B4F3ACB
SHA1:	570BED647FD3679FBF5B54638F620EF404912D9A
SHA-256:	5A87617C61ACBCE1CC86B392009E4AABE7C8A22DD8FB57C13556195C864B0D0B
SHA-512:	6DF261DFAFCCCDD796070AC36B7A55E2ED8DB4A4E6087DB198E01883D17260E5F322FBB1B267A32A04F6586B33AEED5D55CE345B7E81270DB19C26FF659295B4
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/ghelp/13d9xnj0dpt7t/chat_load.js
Preview:	(function(){'use strict';var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ca(this);function t(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(h){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(h\|\|"")+"_"+e++,h)}function c(h,f){this.g=h;ba(this,"description",{configurable:!0,writable:!0,value:f

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 36, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	185
Entropy (8bit):	5.9780303893393345
Encrypted:	false
SSDEEP:	3:yionv//thPlSYLl+1IHCRsHrXLRa+dn/23rIIGU5thNnkncm3w4qtmkW7PXl0VMa:6v/lhP0YLkyymvVGtjnUnRq0kW7N0xVp
MD5:	07505E9DAC6DD922116F038EB58C9B88
SHA1:	4DAB9005E4603F76A6FAD92FE78FB9C92D05B62F
SHA-256:	C4DB75F643BB4DD47E39A9601FCC0A14621B588D5E4EBE987EE4828120BDE791
SHA-512:	5A94B97148037E9A25AF768AF67A1AD5D4959E5D5C216DC5353FB159630302A74A990CCA20F787C024C6B7229A12920B287A88A4063514FBA534E7D1DB094C11
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/store/images/regionflags/us.png
Preview:	.PNG........IHDR...0...$.....=k.9....PLTE"u.#t."s..OO.PP.OO.........o.......tRNSJ....J..J.j.\...DIDATx.c`T..ec$.. .].A...1..Z..!..%p.A....H...0......*.....]...Qp...al.....IEND.B`.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	98700
Entropy (8bit):	7.995075378296886
Encrypted:	true
SSDEEP:	3072:TvqmbOBf7sAG51VCJprCRvLLH8/5xFc+MA:TCZST5HeRChLo/5x25A
MD5:	EB5D83B2DF2A14E88810CC79DB4446F1
SHA1:	BA02C291ADEB61393670AB5AC2A7EFFA18B25E8E
SHA-256:	768193DF16447BDA98569835126534B8B972D2D5905329B902FE7F712887C45F
SHA-512:	E69BCB20BBDD5972307A4F05A665564B8B6025EE79D689FC1F93ED72B10465F6204C5560D471C18F2248B8B17866521A3F3B9922F93648C7D07891A72E2A7847
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8Lx.../..Z..@l.H..........................2..7)Nv....[.....7....p..Za[5.bY.$s..W.....>..K.U.....wI..W...W.........jU.FgK..V.lc...S.e....6...E.r...1..\....;.%iJ......\|..1..].M..-)............N........u..y.K.~...8..T.L9.1S..+z....h6.f.m.z38DN.p..}.>..qw..6...qO.e.v.6g%.....'....<J,.#@._a....y..e4.....BVs>.w.,.{..3...5......... .#.98.@.9.G.?..)...MY..1.... ..zpX...qmk.....S.........+..`c..X...l.mk.......v..g.P.........co.q.\|..ns....v;....z.]o..V..[tr\..,..k...Gl'?..7K...._6...[4.1'....9.s.l.......a.(S........2.;.....1'..G}...........YL.....3.=i.u..._fK.m._..........t09:.......?....JG....1..M.5{q.._:.;.I:b~...h?..F.u0..8.e.,LR\,.f..arV.S..Z...8.x../. ZU...KOZ....>.r.9J..I. )qp..6..`..1=.s.Z_.Z.WyV...O...D_[......_..$..'.`.k".aOz..\......}L..5......$)...(.B..`.~.sdC.j\..Z}.z"+.Cu]&..HR.$)Ra$.-.S..O..h..W..h.L..Z..PPP.Y+n..B.)$Ij.TV.....O"L..........U.*....E4.q......"....Oz...E....e4..<.Y.x.lp ...D{.....@ ...mF...w

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	17964
Entropy (8bit):	7.978688159198759
Encrypted:	false
SSDEEP:	384:7/E4phoB2g6XrFXNVT+7LPhONnExpY/RZGERTv8Mkn9Dk:LEAg6DVToJOQ4LRw5w
MD5:	E1CDDC757EA9456C3AC00F1414F942D7
SHA1:	016FA20C53C64E523396C5CADA86EB0A84F0ADBF
SHA-256:	24A5E2C640ACF0E181413EE18EA6451FC3D9A0EE040B9E7A83B940D28483A740
SHA-512:	B42676C661B17BC356B54A21EF2E6BE916430EC8CF368DA0D2FD11A6E91988C6AF3636ECC13084FD56C575971306C0D3A6464AA3E80751A5BF55D1118FDB067D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ldcQMpP7OaVmglCF6kGas9cY_K0PsJzSSosx2saw9KF1m3RHaEXpH_9mwBWaYnkmctk=s256-rw
Preview:	RIFF$F..WEBPVP8L.F../..?..H..F..E.....`..Y.......9..(.+Z.g.%/.N.#..I..=...n...+....hF7...03.I....i\|.....o....Q.bf...RD.T....J...*...f.UU#..}.(.LU.$}....,o...?.)rBB.$..9...s.9...r...u.\|..\u...w@D,....$).\|..Y....j..6.mUY..Hc./...N..,I.M[.u..ls.....u_D.'.....7..n,...?.........d..[cP.b..k..!...\|.}=....o..}......R.2.....R..B...'2.. ...@.(Q(H..I.R_...LK......Kq..~..q!%....A..b/.,t...".....=.;....K.3...(j....`)G..e...`- h...J....l........E.]#....>........2]".2..5..............[...h.q)..wa,}...h..A`.T.-.5V.ak6..............q..as....N.#b..35{:.(,(OtK.#...)......P.`$l.........K.<.. .V.]..:.g.i.-.&4m....x..[....K..X..www.........}.u..R.rNk.....>]m.#%.[.3........w..>...>k.i.pww..?..#."..!.xp..#.t...\b.....-.vZ8..(nH.!i.E.r.NozS..N....z.k...\R.....`6...ll...p..M..xR..J...o...WzC\......g$..w=.W.R.z..6...zw....m.m.5......]U..+..mm.1I....D$...c{...7k.c..m..m+.....7&.k...m.v.W.{.w..)...2R....6.1..`.y..y(%...../.A'....G.+!%0h..nZT.(.C7=t.GE..6..GK....>t._ ....

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12050)
Category:	dropped
Size (bytes):	159641
Entropy (8bit):	5.659876137110023
Encrypted:	false
SSDEEP:	3072:djMuK8dpaDGPh1Xwzjwm1W4swP0RrH4staSUkxQ8M0cTmVDG480KBVmp7QwcXqE1:CuK8dpaDGPh1Xwzjwm4W0RrH4staSUkQ
MD5:	DA9086A6A3081BF40653996C7599660E
SHA1:	ADD8E11DAE5A4B1C8921B0520A430FE0E085A1CE
SHA-256:	88CD37BB4D22EE2A0703A931C3058680C8F38EEEC59710F11584026937B7BAEE
SHA-512:	742E4A94BB1A613D02CE2FB0C6BCD41A1B07508789E1175ABDA96B47DEC21048FA8A3EC0D5BF153D6EBC61A4C42965AE7AD23D55C2A91412B272F948C09AA3DB
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".hUTled{height:50px;left:50%;margin-left:-25px;margin-top:-25px;position:fixed;text-align:center;top:50%;width:50px;z-index:20001}.k7smx{background-color:#fff;bottom:0;left:0;opacity:.5;position:fixed;right:0;top:0;z-index:20000}.rFrNMe{-webkit-user-select:none;-webkit-user-select:none;-webkit-tap-highlight-color:transparent;display:inline-block;outline:none;padding-bottom:8px;width:200px}.aCsJod{height:40px;position:relative;vertical-align:top}.aXBtI{display:flex;position:relative;top:14px}.Xb9hP{display:flex;box-flex:1;flex-grow:1;flex-shrink:1;min-width:0%;position:relative}.A37UZe{box-sizing:border-box;height:24px;line-height:24px;position:relative}.qgcB3c:not(:empty){padding-right:12px}.sxyYjd:not(:empty){padding-left:12px}.whsOnd{box-flex:1;flex-grow:1;flex-shrink:1;background-color:transparent;border:none;display:block;font:400 16px Roboto,RobotoDraft,Helvetica,Arial,sans-serif;height:24px;line-height:24px;margin:0;min-width:0%;outline:none;padding:0;

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	16242
Entropy (8bit):	7.9402572379727125
Encrypted:	false
SSDEEP:	384:Xuw19G/c5AIyS87w1YRmRAjkECvcFd/NP5zOoYJw0:P19GU5T587wiAsw0H/NPeJw0
MD5:	6B2CB8AD472A93B0D97FEE592C13E1AB
SHA1:	F40C495C1CA874FE508F6F69059041A5243D9A38
SHA-256:	49CA14F45BE05F2A2CB10304CB6481A9A18E15141819C86D15E8891CF371AEC8
SHA-512:	7C63115A9EA99072CC01CE04D354952C4EEC03B7CB781186199F6D45967A7FD5D7E190B2810D671F53A03A6B3964AB1B7F7A4D84114EF3BCDA7BA4BCABA23C1C
Malicious:	false
Reputation:	low
Preview:	......JFIF....................................'.....'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W......./../W?7=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................H........................!1.A."Qaq..2RS....#B......3Cbr...c...$...4ds.........................................................!1.Q.A"2.3Baq.#.....$............?...B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..N..N+.P.?...8.n....Z.>H.9.N..N+.P.?...8.yC...L5a.G...t.bq^...}..{..g.a...>.n.......<....N+.....K.\|..sp...W.G..LO...n....i/B.a..a:/...n.....C1>.......a..a:A.N$..yC...Lp....(y..V?.>.f.......<...../.P.?..X......O......3.1.b.>...i/B.#..!:?.x.yG...L>..}.>g.c.^.....Bt..O.....;.6+.P.?....?.>.f.......<....6+.P.?..Xo.g1.....{..g.a....(y..7..........3.0.....<...V....Bt..a.^....a.^..3.0...s0.Jz..c...?.%?.w....;..4

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	67110
Entropy (8bit):	7.99376089320763
Encrypted:	true
SSDEEP:	1536:+E/rJxmuc7ObLnKhz3b/+QfSy1Mpc30do4tZD9v8a/1L1RYxSeXFN:1xmV7Qzq/ZfSy1Mpc30dhZhUvtXv
MD5:	0118C979F09681E54BC819E335DD49DF
SHA1:	5B1E5B2AC7F8CA54BDF1824555A0E5B13393E0C4
SHA-256:	C56C3C3829E186C6A2DE785E1070173A24C45F46811554F3DEF015179645B357
SHA-512:	CF992FECA65F1A07C432A773118A5C868CB6774FD869335808A78C0D4523E7B729C1876CC68C3024153DCDC8AFA047416113712FB90B495D3CE898E1E196A7D4
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..Z..8l.F. .{...x.$WAD.'....G\......l..6......./.Z...G\|>6.. .I2.7Iv..!.RI..>E..J.....$....E..r....e/R.....'0..V2.......b./0&}Y..aU.&..N.UlFm.@...v".$G..........F...h$.D#W....$.......J...5.....Kb..,.AAr$I..;[1..._.6.........~\.S.6Ye.-.ohR..If.d.Y..C..).......^.n\|...n..&..)#.4n\|..j.OG......Jr..!.!.S.7...\.....%.,<S...yS./O..%.....g.......v.G..U...TT..A..y......%.#Vl'S3....Tl.i..Z>n.k....y.......m.H.<..B..".l).j!...V.kNv..mg.Wh...'.R(&..x....$.........~.G...L-!@.i...L.-..G%.E.-..'.f:F...w....}g.6.uF...l../.n%..3...`..P(.(..........N.......JT....g..!.......L.t]D.B.P....a..'...x^.....?.....f.WG........p..4..T.N...m..F......l.P..0..q'@..0...?7..."...\.".#s....Lp.Rn..?....R._.#..;...XK\|...0.....Z..m.H..c......D....V..Yb.s.~V%."6>.Z..'...H..>..*&.Sl.F6...7h.].6..G...k.{VVfeVUfUVeV.f.Wu..v.uUWw..wU.....eUeeefee.gVf..\........+........f&..^~...].y#.wM..............7..Id.......DL#.'..=x.<.[.t...[.,...o.q...1.p.....c=.5..A."X8..q...

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	7900
Entropy (8bit):	7.955994208237327
Encrypted:	false
SSDEEP:	192:phvfUqSsJ1gOoITKJwcn2pHxz2Wjra03F0/Ntv2gMQ1rbJ0hK1No:X0sJCOo6zHQ010/NB2Q1rKh0C
MD5:	54B59EE915C97AE0F62BE0284DD369D7
SHA1:	086E6CE76E8CD66CA8D9A81AEC17E77E55F9CB18
SHA-256:	2E0AAB20AD8A0BB773C20FC0BADEAC88482EB5E312A0FA32D60C4A497F46293A
SHA-512:	89C8BF9902168B7852B68D2E2315ED5B5370EBF0359415C6A9E21F259557BC1D742CE53B26E5DE5C507A6E1E5E068551004A5B87E7EB45F108EE4749CF5DFC70
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?...M0l.6R.......!....KL..z.TPI .. ...v.w.m#I...L.!.s....8.6......\o..b>x2.4....-..Uo..y.....v.....=.o....A..8..w./Y4h...J.y...d/.Q..m.3....0..&bo.S.....p.4........#...-q....,X......$...\|E.........8Z.gm...m..sF..jl.Q]LE.....!.....$..w.w.#2+.n[.....G.#.m.n...n..]..S..../_.$..m.y.Rkm.q@.0.73...;.;.;?;....'.......V[).1...w......B..AM..../...0.r....1...S..L#./9.E..m.V. ....%..H'tIs.....&X.....zt.6.A...Q...A..h9.9......a..m.SZ......O~..k.....<.^nV.a....^.^.20........8.e...e.4;...ad.S...[..Q...I..D..WK.,......e.#.I.G...r.._...!)Q..x.f....!.....j.).V.B...........X.0......fb.....DU.a..W.L@..D.#....-....).J...pX.!......O.oOK.N.GOy....B0i.8:.....G.#K ..La.de.nYXz..q.A.].fcI.."!..`.......$=5XA.1!.s.kJr..`f..?..nX_.l8...B ........R...>...r..Q....;6I.Ts6..9..<+.l0.......X.q.L.....1....$.......J...{.q..JZ.Ln0..L...P!.....~d...n...!D..R......mg....\.....N..."s.5Y..-.IF&$\B..!}........Wq.K.J... .#Z....r...7.=.i.v.YT..RhP.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	74176
Entropy (8bit):	7.9956452812069765
Encrypted:	true
SSDEEP:	1536:Gs0Bn7m1EWnnvkinvpFgcEvXdwgGkEHDotAuZnlOHghbh5tBOCYMj:kyVvkGhFgXvXygFQoNtkEh5uCR
MD5:	92D639281E9F4208F083A85CA8CEDFC9
SHA1:	7F0E13C4BF4EAA97E2964B425D95C639F9C9F244
SHA-256:	4CF59358414C932FD436A5720B7C3E5B87E41C2A88C93CF76445374F8E639039
SHA-512:	012C2FF6C60C48E847FA9FE0B67531801570612F0682C9D8D39A0FE046E1C4CA6C68B7D90297D7F46B5C0A95BCCA56E562240F8E0CD0D27E96D9061E042398DA
Malicious:	false
Reputation:	low
Preview:	RIFF.!..WEBPVP8L.!../..?.M@.d.n3..x.#.....O.....y.?...".{v.[.$)3...~.s3....v.&.H."l.j.$.../.wOuf.[.b...ve~..D..Tu%...~..1...u.][.u.#.~. ...S_...4Ii..V}1..}..a....'.m...........J...km..)IyN.....t.]3G-i.;.G~.....:m.{...1s/$.....x.83c...b.3.}.......Y>..\|..9.@@......... .~.E..zp......(.(@J>%]d.9.m..bg_...T2.FV..}8.L...~!O...Ng^..-(H.s..$.tw...."..9o......].....z...{....!....&Y....>.....s..-U..F..MO.3..<..Y.,!../B....!~...My..Um..i. ..&\|..sg....Q.W...J..L.A.c.1...moZ.=...."...xx2.....\.'@B&..?..)J....B..........6..B@D...E..X.R...U..R4R<Z..9;.!...B."...:.<..]R.H$`..!.H..!.DB..........zW.I.J.z.)...'.......!...1.njS].....B.G..4.p.T.m..xJ..`....I=.\|......f......^....O...K73....K,Q....O}4..rp..7...P.w.s..!s...Q\|..d......y>jw... ......X...9.gN....\|..Q.v.N~......\|.......dI7.Q..w.>d:l,......'.8.P.X..J.Bz.\|xs...)%.w.4..8....f.............n.u.,.s.p..r..S1....I9^..V..`.,.d+....E{f=.U....JJ..m..e8..j..z\...X....k.../<..S........9.....\.J9.....a..e..... ...K.)

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	51542
Entropy (8bit):	7.9920172980393955
Encrypted:	true
SSDEEP:	768:Ml3S2R7aE99aAkzItLOhBJmDTa+PsQU8+P9JDS:ASg2EGAAItLOh+DZPW8abG
MD5:	C41D50A3494852F27CEC1AEC3575C664
SHA1:	1D855775AD19961AAD06D56E83C319A249F660DB
SHA-256:	BCAB4198AD8148E384313FF169BA75B21952BD780320DBA26B2C475898F297ED
SHA-512:	D628CDBD8AC90B70E64A2567DCBF6E3F0F3031A60675184A8FD28244D82F1C2B5EA4315A28554F821422DF4F9A4967D8C84687435CE22CEC9BCAE9DBCA20ADC4
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/bYtqbOcTYOlgc6gqZ2rwb8lptHuwlNE75zYJu6Bn076-hTmvd96HH-6v7S0YUAAJXoJN=s256-rw
Preview:	RIFFN...WEBPVP8LA.../..?.MH.$I.$..j.X.%n...".?.\|=..=...;~..\|k.}....a.mG...\..+..m7.;.....'2s.m'.(G.K.j.H.:!.v0-.4.Z..U.s..c.2.Y....Y.....Lp.MI@...;B....=3V......33#...........[u..U..Ll..~..l.k...u...v.H...j.Aq..F..6.u3....k{].7...F..I.%.9y.....'.G....`iWf. I.$I...q.......$..G.$.....:th\|.u.=...+....Cww'...m#E.2.-..H.6.!`...E...cD.......#"REDDG4...j4.e.V.jE.VD.b..L.)nH.T.gZ......+JDd2x.V5....a.H...W..\.aww^../...8......!Z4j'o......B..2\...>....... :d..>.-.....0.w.q.~'BLL.......g....\|...D...is\|..L.&..:8.F."2..50(..U...iBP...pC.#X.Q...Y..V.Jx}Nmq..c..BV.]BPgE.P.........0e.0...P]ET..........[.\|..^..)..%P..+...g...).)...".."..\&....s..$..d...Y!...q&..P`............;N..........ZO........=+aj.!.....Zm..<.f[.a..Y...a.....j?B..n....p.[k}..T...jE!...V..j.n.o.@..._..e..pgB.....g2..Z.g...n.5....}....I.o..Z.5;.....}.\|d...JLj.Jh.^....;...}.[.n-...T&G..g.}...,,..Y\|../...r.....M=...u.N........dpt...w...6......B/:uh.C.V5..d0.Tj..u9..L.\..KH=..+U......

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	105614
Entropy (8bit):	7.99434337668501
Encrypted:	true
SSDEEP:	3072:po/xKrZBjhuxmsImTXosuPVoD5HVLq5Od5myjsUoFf:q/xyfjhusXmTYp9oDu5OdtIlV
MD5:	8416D64F7F68EFDE21B9B2A2E2452531
SHA1:	4DA54B3CC670A8A60E4786A7484555CB947A1038
SHA-256:	8C131099DBACCE03114258C7C31A2F609B82EF50A19F368A117F2A9186321472
SHA-512:	27D4EB4C704804D9B3F7456504A4B19068FB40341FA9D17772F0F81369405620A7D56FCBE9B1B7EC9501A88576D5BC2AB89A81D1453A14EC58C163A8E641920D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/yRcYFIvlZuMlXHqksUMQA30ujhiBRwRbvbZxbE5ZAYtaCDwAiADUnu4IWOVkXoCO0jQt=s256-rw
Preview:	RIFF....WEBPVP8Ly.../..?.M@l.H..?].....p.].....\|v.`.... >.[.D....Pl4......c.I.%`rD:.T..9$...13.YN.xP....;.......t.-...]....w...:.tx.%.......-i.6.l.O.h.L...q........=w.....I.@I.....?.............;.....$.....a.>.z....D..L.!..[......G@..9(.Ue<..s.$..CW....`.>=..e...L5..n.;..+q..:3..f..8s H"..vf.f..;NCOG.xf.3.PWU......<SB..{/.. U......$...).3......Nx..w.e.I2.Z..,v.....0.........o..!.X\|.m..m..K.e..,.......7P...?..-.c.i.G......s<..O.8Gp.67?E!DQ.!.l_...mNl.A.)D.Bd.{.Gs..9....0..a...i.M#R4""".m.ZY;...}.....J."......W...1....6".t$ .dT3.5...IC.}..[..,.....\|...H.H....~...U......\..;DY...`...u&.3.alfL...Y.NZ.+.. d....}.J\7Kj .....Y....~l...t1.....lf.....2_.....8)..-^...1f....!..s@.t..2...6.n.h...(...U.E.v:.P.8..m.Ji2A;..#0\|.UdX\|.8]-.!.Y..y.[~.....FJ.bj.....H. p.v:..).Ly..7.\|.....Qr.'.N.. ......u..a.`..p..w.\.x.?.....%.n..iJv...Q..p8..e..~..<.......3.L.y..R.M..>..1.....,%]."K.p....e..w.~....f.HG..!.Yf^.)wU,.p...0.f..lC1jQd.@.0..w..6.n3...DG.......~

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4204
Entropy (8bit):	7.9410406645652545
Encrypted:	false
SSDEEP:	96:xVol0QZkPgINkrlwx7VUYSeJzRZV+oenov87/0UgxN7:x+a9PNAwx7YeRVhk287/ax
MD5:	C98F44F16F361608BB09263E75BCDE75
SHA1:	4947A587B834A97501E159B6E82051C4C42EBAEC
SHA-256:	14B2050B31C86C8DCA1331B98E110A63BCA965C65E4DD55DD82C56897B49974C
SHA-512:	A60DBE61D9C22903193786CFBD80D23C31F0A18942E87C9CE5A0C07304CFC8DEF779A19D1760E35F05B6CB277F5024F93EDDF960BB818FABA126EC1319FA7742
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/pCr8yx-Yp_3CfXYv2zpUntlSpfDV5d8tkBA7OVNR5MjP3nwlW7kyUwFVsWLaehlkE-hWXW2t0Uk=w648-h364-rw
Preview:	RIFFd...WEBPVP8 X....p.....l.>=..E"!...4< ...q.BYhw..\|........'..~..?i?.....l.u?):$.O8.$................7._..........`...W.....G.......^..?........m.{..................R.L?........}N.p......a.....i..y..}V.?J.B.........._......f.. .eR.2z..A..R.OU>(9.}5J@....6...H.=T......).'.....>.. d.S...T....\|Ps`.j....O...4>.. d.S...T....:E.....T.`..A........_.`.j....O..l.L.;..q.$...VZ....E..-T......).'.P.P K.......xw.... .R.OU>(9.}5-V.../.u..(.mq.%hx$G..)-"J....R.OU>(9..3...b.:X..2..@..Bn0.N.4.v`.[........\....T....+()y&...8....p...t.B.O:.P....).%`..P=2....W.....`..\.q....j....&c2.m46+.`Y.ZI.&.......m..%..~..vby^\..........MR.2z.....6E"\|..L....=r..n......"z.^.Xo.F.C.4.d.S.....G.....h.C.f..L.}..Z1..R....6...H.=5.Ww....b ..~$D..=4...D.2i.24g.i..H.=T.....xX.....>*....i.....T........>.. d.S...T....\|Ps`.j....O..l.MR.2z..A..R.OU>(9.}5J@....6...H.=T......).'.....>.. d.S...T....\| .......W@..........-..zf..n.Yw..%..........%}........%.Y.?1........a..S

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2616
Entropy (8bit):	7.898065804909313
Encrypted:	false
SSDEEP:	48:pdQBGXXXz1gowFTCmszOSuV1CWegI2+S3cjB4AXd9++f9S6tLqgWhf7HSAkBL/t0:IBgTZwEvOSO1CWfIM3ieqdb75qgWtH2C
MD5:	245BFC94D20865EFF643910ABFDF888A
SHA1:	328B10E4E87577494255D2F6BCD0DC7F22E4B9A4
SHA-256:	5D85EFCAB8AFEC3D0FB583D22A87A25C2E4503ABE61483FC107D600713D674BB
SHA-512:	69B5F4B8E78B662FA018A6D3A7DC5FEC83FF80A9E4CBC3FB1DEC21FA270ECD4C895421582F1699C63AC6A2DC8B837793CBB5FFB9FA2443F5931DABB953B412F7
Malicious:	false
Reputation:	low
Preview:	RIFF0...WEBPVP8L$.../..?.......................\w;....u..s.3...v.._.U.P.....R.E....[.4......Z.S....f...... "v.]........2NJ.......sC.T@.n.U...........v~#.7....A....-x.'.. e.Y...[..Y...vm.m..m.;.z.m.]...,#...I..i:;....m......cB...?.....f..D...j...Ns52.V....L4.:.<.......... .RX1..-.0..&Q....D..x....`.,.......h...d.....!..l.T.D.@.,`...y_..E.w.x.........v.-HU...P.5x....n.\..\|....4K.,l........\|.i....z`V.P`...B..d....o9...Y.g.1..n....cKP5.-8.].lUy.....S]..Z.1p.O..<...\.;.i....q.L.c{.\|..)..F@._..Q.8..'...3..O....3....T...P...D....X.......h.J...w.G.r)... .b.,.6..2...a.s.....%4.."1.bq..bq.\|r/..YC....{.....4..-X.F`.....Sk..Q.Z..(?.?Y.......F..N/.X,.=..J...Sq...6.~o.P.*`3.....%>..o...90....{@.\|`i..-1..Gn....V.....lw.".].5...w...>lt.+...>......Q....G...1...m..Uu..-cj.......7.v..w..\|i.P5`..^A.o..n..j..P...H...."....@h/0s=...mjO..?.~>..\|.i.......3..z..8k....h....Lu..)8....t;n.......,\.>...>.....rV..[W.._lps..7S..X......e...;..S.....7....a7....e.s.7.{.

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1168)
Category:	dropped
Size (bytes):	19096
Entropy (8bit):	5.632859591359612
Encrypted:	false
SSDEEP:	384:vHZwUcyXMVPFKpE5mov2WMvL5R8nEFE5QZyGJqBHK1lqT2jggOS2m9R3T+zdSMx0:vHZwUTXMVMa5mov2WMvlinEFE5QZtJqs
MD5:	7B439ACE03B648FC4E25C8BE4FAC2178
SHA1:	78569C861D6323F41D8404FDA80C6F66135D03B0
SHA-256:	0ED432FCEA422A6AE2983E29A4663F14F122508AD82DE2BAF14417412A085E15
SHA-512:	E0F84A06C939420CB1F5DA131B37F111C0E009613FF0C7D2FEDA3694EC9566786B550EE875C62F9AB29F8F63A9C331B6482D7DB9D56AA01E1BE24B085A92ED46
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Bf(_.zpa);._.u("sOXFj");.var yxa=class extends _.Nq{constructor(a){super(a.va)}H(a){return a()}};_.Oq(_.ypa,yxa);._.w();._.u("oGtAuc");._.pxa=new _.ie(_.zpa);._.w();._.qxa=class extends _.Zk{static Ja(){return{Rl:{xZ(a){return _.Rd(a)}}}}constructor(a){super(a.va);this.soy=this.Sj=null;if(this.Mk()){var b=_.Rj(this.Wh(),[_.ok,_.nk]);b=_.Ye([b[_.ok],b[_.nk]]).then(function(c){this.soy=c[0];this.Sj=c[1]},null,this);_.al(this,b)}this.Pa=a.Rl.xZ}ep(a){return this.Pa.ep(a)}getData(a){return this.Pa.getData(a)}pr(){_.wl(this.Sj.hf())}fH(){}};_.Br=(a,b)=>{a&&_.ke.Gb().register(a,b)};._.u("q0xTif");.var sxa=function(a){const b=c=>{_.il(c)&&(_.il(c).oc=null,_.mr(c,null));c.XyHi9&&(c.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(let c=0;c<a.length;c++)b(a[c])};var txa,uxa,vxa,wxa;txa=function(a){const b=a.Xa();return(...c)=>a.Sa.H(()=>b(...c))};uxa=function(a){const b=a.W();return b?(.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	112596
Entropy (8bit):	7.980311286510738
Encrypted:	false
SSDEEP:	1536:JzNoPfR617MqHJb2sLvLRlHyPvmXzlIZuLUsw0sTc/ogBAPN0UjN/I0KQsI:J6fg3HF1PHy8lIZuL9NjiPNLJ6I
MD5:	E20C81F9233980D56416AA7A68B1A3EE
SHA1:	EAD8623E87C74A80A3D21ED67F21BEE871EA4A69
SHA-256:	CF01ADCDAEC3174430E10571EA9B169C681EBF7FB1327646C2E10CA677E166EC
SHA-512:	D46A828447168883140B351E320024634CC9CDC610C4B93615F8595744B95B7B767165DD704AD032FD3DE892331190369F4D7F0B17E1B56F640368E8084A526F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/BTcoU_yqIVkbdMjhv2SHgT7mF25HPJRKDeGhwMjlFc0fjItL7Uiq7i_3Viz9s8jbHNQ=w648-h364-rw
Preview:	RIFF...WEBPVP8L..../..Z...m.H.dy?......^.......@,_..A+X..o!...D._ZJ..?.J.`+>.G.kL.F....]i.K.6...&}.+...I.....EB..\.cE.....mz6I..M..p..o....... &N.m..`..2.z.&..C.<.+...M..s=.-o.........t......+.<h..q...L..:t..>..<..$....+...&.c....j0.......):..E.4.@.$I..F)^&.@....g.U..^...$GR......q2h.....-x#..,I.S7't.1Hu.I2..?c.a...2.\|._a...t.O...`._W..@....e....wl.z[u...J...E.^...z....e..J?.U..2...[BB.Ke..&V1..F...PYj...x....}T..j..9&..."t.\9.{..F..P..-.,.sPS..W..K.-\.4...FT...SI..PR..}......2..R.."..L..G......_...p..]..u..wHc..d.rZ.1.@.~A.58..r$.1...........y]?.`H.....;U....N%<44...C./.>.w.`.U.q.....;...@-.o..m.6~..jIu,..+...Ym...?..%~..D...^[..(.f7.7.h...~..[.h...q^.+.[.5..L3#..E..{....d...._k..[..A....>.ul..k.p..[...N......Z..m$i.?...D...~N.v.^..\m.4Iv.n..6..Y.Z....Ov.E.. G..r..>......... .j.....cT@...4.....N......._...UA...N.T......../.-.Y.....\_...j.e.D'...p.q.1..&....u......]Q.{.2..\].BQvU..:8..0.-.[...P.B.?..N[L.C....pl...A...@...yy.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2389)
Category:	dropped
Size (bytes):	330870
Entropy (8bit):	5.746291558466733
Encrypted:	false
SSDEEP:	3072:D2Oo3WEEiee3zIN1cupFnnnxlc66b6muipx9KXaDJT6B3ub9dXrkByOSChARUVkf:CE1MzIN1cubbw6mjKXET6B8XriYGiV
MD5:	0B4AC3DCA9B81EC3180728015F865C86
SHA1:	C9A9239BBB14659719BF25D2B248A27A3E764206
SHA-256:	F5CF60741474A746373313BD61E4327E77A3CE6236EFECFC57E93EEEF9580C5C
SHA-512:	774403513BA8D910E60C1DC976A7C167D72C730224F396A54723AE2107E451D86086ABA463F2D72BF055887633F75C6A4812DCC73D4F536769199C5068E86289
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".jXRZQb{margin-left:24px;margin-right:24px}@media screen and (min-width:600px){.jXRZQb{margin-left:48px;margin-right:48px}}@media screen and (min-width:1280px){.jXRZQb{margin-left:72px;margin-right:72px}}@media screen and (min-width:1440px){.jXRZQb{margin-left:auto;margin-right:auto;max-width:1296px}}sentinel{}");.this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{.var xqa;_.Qn=function(a,b){if(!Number.isFinite(a))return String(a);a=String(a);let c=a.indexOf(".");c===-1&&(c=a.length);const d=a[0]==="-"?"-":"";d&&(a=a.substring(1));return d+"0".repeat(Math.max(0,b-c))+a};.xqa={jQ:["BC","AD"],wW:["Before Christ","Anno Domini"],UW:"JFMAMJJASOND".split(""),nX:"JFMAMJJASOND".split(""),wQ:"January February March April May June July August September October November December".split(" "),IQ:"January February March April May June July August September October November December".split(" "),FQ:"Jan Feb Mar Apr May Jun Jul Aug Sep Oc

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	152338
Entropy (8bit):	7.99680837515417
Encrypted:	true
SSDEEP:	3072:DBhfrLws0bafl9qv8HpvQjjyuuOTj/9JZ1Ir0nb7cVEg/9cmxUkYcqzhIw:dN0+feoIf9HTj/9Tar0PocnnbWw
MD5:	C2188F26C02425D96A7A0485CA85EDFE
SHA1:	944FDEB7CB0E47CF8373CEE879A9F25BC9042BF0
SHA-256:	79BBE323BBD34E080A611BD696204525CB6A81DE55A788E08FBE2F9ED7B3863F
SHA-512:	7ED04A04000CEB3174D5D61D83AA476282B00C72239752401706FFFD5F370DBB57FF6DB8739051442C4BF42DAB0CC503CF572F260612A9BDC38B097BBB5B7AF0
Malicious:	false
Reputation:	low
Preview:	RIFF.S..WEBPVP8L.R../..Z....$.mj.........BD.'@\|j...m.7...].c....{...?....8.F.Oj@..S.Tz._.R.`..r..$..4.[k..;a.y..p!.t....q...{.Oyh'.....a.......I@%..:..H .:.] ..\|....A..I~YG.w...9-.... .Z..Fx.lC=.$........9u....9..@...:".I..,..8.R.~ .$in.X..w.rV..!.q[.....R..Z.$9.-#i....\|..o......=-...]...][.\.....u._.E.,.U'Z."'.l....[.....5..U..O...L(MA(.S"HD.E.HL..11R"U..H.)+Q...R...Db..(.H$....s..2R.H..D.....T...A.MoQ4.F"...Z.........G..i.lMU....C)-...F.o)}T.%....-.'V\.S...mg.!..D..e. .....P..(J.....Ig.&.&(k.[.7..2q./t.].....I..D...E...D.%..n......\.....={g\|?;.]...<..:.xik7R.$b..h. JJ.H$...n.<.pi..{.....8.p.].....E..H.D.TA4..%....p..0@....8c..\|..L....H$B.....,M.!@.4M0..`........1...x4.6*.,Y...,1...X .w.....;...X..K....P......d..D"APF..PU.). ...M...0.o.N.......##..8;=.?.g...T.H....K.1.od!../f..-j...)c...../.'O.0...:...U$X..2-.P....3.....3s.,..;........k..xL.=(...R...l...t.N3.d..2....qr.1.....0`........%..[...Zsi.c..k`.8.....1..?....u...E.........a.O.i..n...rk

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4296
Entropy (8bit):	7.946896111680172
Encrypted:	false
SSDEEP:	96:kqtuDcuoGHC33iBjEtumxFvvpXXOSRKTzkYHZ9yitnAY2:FuoH4jbmXv8HyitA/
MD5:	93C0A060B7EE8251FB29C3FF01371BAE
SHA1:	3A57394327FC9072FA8F2A706F1544AB6959CBE7
SHA-256:	21472F95C1BA45F13DCC8F2D3EFA6609C7D104F7CC2434B65C3D9A04A24C6F9B
SHA-512:	5F175A0D596FC6DBBA4C00EFD26429A20A2BB57C588998FEBD319B94D6B098E4E70D73CE44761D7D5A4A3C0CB3FB63D914E0459EE6023AB488C8F3C6D5F39B36
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?......%...4..L.....0C.a>9...}..I..Y.^...>..#.8...c2..T..c...\22.ed....vU..i....#{..].B..B..V\lV./..SQ..72......I...l7.8q.(RK..-...I.@...!56U;..2]...Z...3v\.-dn .vU..Q..FM.k..(.......;(.r.36.v...$.m.....m.m...m.m.>g....pE,.."./..".......,....XV....!y...qaXj.E..$..\|.Mh...0.B]q....og...D.%.v.wO.'.yr..h.2D.<.l.S......l....#\.Agg.....K.B8...e!n.....#.q.o.k..\....Py..ery$F.!".V5#..B\..M8O.'........zD.P7.;K6O3_K....3......>...q% .>....=..Y.1...lT.).I.............u..=d>...d.G.)...8.. i;k...`X7..Y..........i...DM.K.x\|.........tO.ev.C....=p'.Up..u......P.!)y..7.....O..l...._...5....9./>..9<.5...cW.O.&lr.)'...g.L$.Un[j.}........Q...&........f.eG.........O.C...Vm-\|.....^...Rr.[F.[.....k..z{=]...MlF...2u42.=..t....HT.R..n(.....\}..T1.Y.K@Rx.!..2....]:...?a3:.8N2.hz.9^...T[...(.c..`.......;..[.\|n..4.U'".{W..b&...d.m.\|.9.....7....BwHK.(.v..z..5.s.`.Dv...n.4......z.i.'.....)%..~<H.O.I....et".L...q...a{../A:v6.7.U

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	14486
Entropy (8bit):	7.982749743060294
Encrypted:	false
SSDEEP:	384:95yjUQ/mSPxCQ+4cdACXMbZ75zQ5NKCccSs:95yjUWC/fSCXKk50Vc
MD5:	48BDA408F1B1556B05A4A52D0B497C5A
SHA1:	6F6BD6943442344E4D78E1FE4C5D75C6742AB7F8
SHA-256:	8671747B1E05C216FBADCFFC4EADF710AE3B6D9CCC168C6CFEBA948805D56B56
SHA-512:	5C46C8DB71207FBD4A73DB1AC383816B4C519E93C5DA52CBE2AA3E5FC90EDE8CE5C3CBB3C00F6FBE2AA1E5E20BF224F975E43F4413BEB7D53EA2AA807E277929
Malicious:	false
Reputation:	low
Preview:	RIFF.8..WEBPVP8L.8../..?..Hn#9....6...p.....O........... .5u.(..:Z.jZo...!x5.>......8.o.}&iz...W.q..j.>...M}.1.[.>..F..".^..u.c..F..tEd.A\+.Yfr33..cd../....-WU.5.....W.(...vU......$I.$_...........cl>T.F..Hy...,o..F1...n$.V.....r)2......^.'..O...%..P.&...~K_.GY.....l...2...b....i.4...QPs...w..K..j..n.....c.{YFV.A..`..4J4...4.1.+...@..4h.P0.v.M`....m.(..vg{..v.{].v...^........y..C...8.gB..dd.G 9.=.7. ../.`.EuF.....b6.D..GU..$I..f.=3..._.?.G^...f.~...`..d.r..bD.3...+.&.6..<W.5^.A.]..!.g...-.~....}......n........]G.q?gw....w.>-.w{w.Z.y....V.Z.....k...I.'..!e..g....yp...^....N8.P..F..C...S....).JO.py.."...i.+..qVH....!...70...q:}&\!D....wAX.NWX8....CN.u........B...Jq...X.....t.............F..\.hk;&I:..}.X.9m.6.6.l.m..m.5..SJ+."2......m..h....y.w.n.I.f....m.c.m.m....4yj....{..u.GL..j....9....{..R...A. ,11%...x....Z...1........a..........G....^<..@9(..j8..n..@..8&......@P.,z.:...<..U....L.?l.M.~T.t..@y..N.M.,.1(.a. .Ptu...I@

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (642)
Category:	downloaded
Size (bytes):	5130
Entropy (8bit):	5.420717119791416
Encrypted:	false
SSDEEP:	96:kdvJsQfBcwJefGbWpAc4sc5+ll2Lnk9cCs3F8wvMAyj/Wiz+M3OwIOG3ITYl:QveQfBc0e+b15kok9cB3zyj/Wiz+Ea
MD5:	FA29F5BFF02FEC73797A3C13EE9A09C9
SHA1:	698D31325EE3BFFF377748D812ADDEEB9B4C1274
SHA-256:	9C407A940D30224E641CAA45E8D1D1491DF5DAB3FEAAAB85598689BAF1D904AE
SHA-512:	F1E253EE48B5E8BB11526396F5592EAE45E2A2B066B113121BC7F8682629AC70CE6518EC20091E8FCD5C0F6C3713710F42745DF96DF1724C50FA5309B814B7BF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,C7e1Kc,CKm2Wb,DRmmld,EEDORb,EFQ78c,ElYdAc,FCpbqb,FoxcOd,FuzVxc,GjTCAc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,J22eF,JH2zc,JNoxi,JWUKXe,KUM7Z,Kfp2G,L1AAkb,LCkxpb,LEikZe,LRovxc,LcQwud,Lkzi5d,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkwaS,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P6sQOc,PAQZbb,PHUIyb,PRm2u,PZ1hre,PrPYRd,QIhFr,RBsfwb,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,UINLVc,ULFnWe,UUJqVe,UZStuc,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,WhJNk,Wt6vjf,XVMNvd,Y413Bc,YTx6oe,Z5uLle,ZDZcre,ZMKy0d,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,dZ05Qb,dfkSTe,e3Zld,e5qFLc,ebZ3mb,fI4Vwc,fKUV3e,fPcQoe,g6aYuf,grWkAb,gychg,hKSk3e,hc6Ubd,hhhU8,iAQMie,iLGjNb,kWgXee,kdbckd,kjKdXe,kpVlPe,kr6Nlf,lDZ2Fb,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,mmmrlc,mzLjxc,n73qwf,oEJvKc,ovKuLd,pQUyNd,pYCIec,pjICDe,pw70Gc,qczJ2b,qk5AGd,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t8OL6d,tBvKNb,tKHFxf,vNKqzc,w08zce,w9hDv,wg1P6b,ws9Tlc,xI1uef,xQtZb,xUdipf,xii62b,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=wW2D8b,vrGZEc"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("ZKp19");._.Dic=_.ll("jzJ2q");._.w();._.u("s48s2");._.Qic=_.ll("sG2nqb");._.w();._.qFa=_.B("b7Ourf",[]);._.u("b7Ourf");._.Ric=class extends _.ur{constructor(a){super(a.va);this.H=new Set}};_.vr(_.qFa,_.Ric);._.w();._.rFa=_.B("wW2D8b",[_.qFa]);._.u("wW2D8b");.var Sic=class extends _.Ks{static Ja(){return{model:{xB:_.Ric}}}constructor(a){super(a.va);this.H=a.model.xB}O(){this.na().find(".KKjvXb").Je(a=>{this.H.H.add(a.id)})}W(a){a=a.targetElement;if(this.na().getData("expandedToggles").Pc(!1)){var b=a.Jb("id");a.Jb("aria-pressed")==="true"?(a=this.H.H.values().next().value,this.H.H.add(b),a?(this.notify(_.Dic,a),a=!0):a=!1):(this.H.H.delete(b),a=!1);if(a)return}else b=a.Jb("id"),a.Jb("data-menu-when-selected")===null?a.Jb("aria-pressed")==="true"?this.H.H.add(b):.this.H.H.delete(b):((a=a.Jb("data-previous-id"))&&this.H.H.delete(a),b&&this.H.H.add(b));this.trigger(_.Qic,this.H.H)}};_.

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	165054
Entropy (8bit):	7.908073974480113
Encrypted:	false
SSDEEP:	3072:S/fDVnIXag4LcXeI5fvWQ/gVpiyT6cIzgulCmZE60T23FDv:S/fDVIXaBLUJN+QwyfZE6Vp
MD5:	109765D89C224235C206888C17A0CA53
SHA1:	732975BD9A4B1E7FBA7BA8F21A21EDC254E57F0B
SHA-256:	77D8E1215F7DEF162E55D8C9344144CFE4087DF47ED3BAE20CE1597D30F997D3
SHA-512:	73766AE3F1161508D4111F7F38522A0C43DC7FE72812E71DC12286371C6F5FE3C748BF7BEBC248DC492197997D2C9752609B9F16B300CBEEC4FFC39A75967049
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..Z..@l.F...#..[.....w....X..&.... u.{N&a.S.9j.......\|..a.M4.9p....iS.&.. ..zL.S.-..@...j..4...v..__.z....p....Z. U.m:o.N...Z '_\.\|.B.6..Bw.....nT...pL.H..>\|N...I..u....82..<.+.{ts.]f..%..H..]...] G<0.ds....2.o..&k.3....a.^..O.9\|.7{.$.".f.9..W.?...H.\[I4.[X.h...Bs..A.!.m.m......m...3.7...<r.H.$.....8..6r...Y......Cd...4.C.z...{..........r....KdQ4.....\.a.q.&.C........r.]..D..>.C..4M"aPX"2..M..{XG."n...H..4_%:9."I...XE14"........kH."9..Kz.#_%g.....s.0...p...G....%..}t..r.U"...../..4...@.C<.z(n...$n>.C......W".4.R.y.uXY...x.Rxx..~2.r.7x[..`LY.H .+...1X...Y<..66y................/.d.......>...p8......K..&...].........A..sy..@..<,....$].?@.b....C..?s'n....O...H..O04.......M..A.@...w..@.k,....g2.x. . ............<.....B...~wmu.U.,..8..A.....\|..A.........!....eT..f,".1.........."a.`x.`U.:B(..1..:."V.>..`.D..B...m..B.p.r....&.,....D..dtT.MK.R..i.!......D..Q...a..M......7B4........7\....DF"..4._uttt...Q..#.....c....:@4r9^G...H

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	526
Entropy (8bit):	7.133658027142918
Encrypted:	false
SSDEEP:	12:Gq51JNDQR+b2EDop9+jVmJ8RhwR2ARYYuDMA9YQ:dPkwKtcxzZmYYuDrN
MD5:	AFEFBF997AC562DBBA673CF3EE3A281F
SHA1:	27486FAED4E8A0D3461ABCFAD831EE4515C26809
SHA-256:	25CB02C3744089B0C43657B39C5206D16705E7007BEFE9A2D0269DD9423C3606
SHA-512:	D30FB53B5F52E1DB134586B508BEA5C953E8EF07A7CA00554D7FEE5ACF2351C53469AC2E6249BC7B9C42D09C46CEA457E18943ACDE636D60094E83D8E771FC9F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/QLQzL-MXtxKEDlbhrQCDw-REiDsA9glUH4m16syfar_KVLRXlzOhN7tmAceiPerv4Jg=s256-rw
Preview:	RIFF....WEBPVP8L..../..?...6....j.'RBRy.6.... ..x..h.u.)h#IYO..U.-f........w...rv.q.e..>..n.(.. ......J..r..eA...n..I.y.......w........G..S....bW.]-v...bW.]-v...bWk........Z.j.....Z.j.....Z.j....b..........t....3.C..7....p......7.........W.d..?...........h..Z.E7.F.n`.....-..5Zt.k....h.....X.E7.F.n`.....-..5Zt.k...G....n@..F...3.....n..6t.f...0....m...hC7`F...3.....n..6t.f...0....m...'m...6tCfG7..s...;7..s...;7..s......~...\oy.....@...vn.a..vn.a..vn.a..vn.a..vn.a..vn._>7./........{.

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	60472
Entropy (8bit):	7.9963373437241305
Encrypted:	true
SSDEEP:	1536:CenKnw09EGjk1HLYUv6aAb28QoNLp0eFe7e+SDH2YOktwb4:CeKnyrYUvs2NoNp0Se7eXsktq4
MD5:	306422F8340BFECA17413E26276C2016
SHA1:	DF9CC65A8C3002E22CA3D4E666B7F38ABA2042FF
SHA-256:	C836CB225038A5FF9B058652AAC2456858C01563B4FBD7D4EFEFAA99A17A0199
SHA-512:	879EB8A2790CD2074628E4743BCB93DD08514DC761830A2256996A2C5696138635A8504113067C20782033C52161415FC1FB47594D8D40264CA855CE2ED24EDB
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ksQztMpwCo1I4qacMnW96bzIrnfeQh5xyId11qZ405X5LFdtGUxoralRZkAWBI9SGbf_=w648-h364-rw
Preview:	RIFF0...WEBPVP8 $..........l.>i.E$"...W.....Mzc..5.........1..?J..o..w.......C...~....O..[._._...._.=......1...O.o.^................O..^.VO@...Y....?.....~..a.........W......<.......xO............C..../..d.@......._..............................]...7..............o...........}.............?.....O..........`/........A.c.m.?.....?........o............7.....?......g...3.../.........~....h.....F7.....^.....c.k...yD...E...?.O......+.NK..4._....>L}.I.F5......]...1.$......lu^.....UW..2x..A....+.(..v...~zL.Mw...r-.S...YE;........p.b..o.-M..C..+.9.V#...........CM.....Hr..@N..?.........m..j.14a.X#D"%E...Wg....{....e..h..{../..b0tDVs..=J....vZ.;.{o._Y.).... h!.g.....2..X..0D.~......R.!.#h^x.o......j.N>.....l..L......q....J:.sEG..b...?..<..@}..........g.2V....h..&.....]WX.K..;..lC..o..y...n...7"o......L.....V]`)>.....w8...S1p@..8.Jn?$..~..R...Y.5t.1E..~.\.p.....pw.:...Ux.b8..m..N.............&..!.];1...Q`Dv.ok{N...*&Ns.,>-:./..........2!b+za.....}#......r..Pc

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6990
Entropy (8bit):	7.962002082701178
Encrypted:	false
SSDEEP:	96:lZmLANRKrN2fFHX4C9UPlVv/saAe8Aa8LdgWxrWTWEd53fsJXBaifvtYilwI6eBM:lZmENQ4tHNQUlBu5mj5KaoceB9Ea50
MD5:	F86EC9D0715A5A9F155AFD1C576C89B9
SHA1:	C837ADDD814D2A81B51330DBB705E2FACC74A6B6
SHA-256:	703F4A604336DADC5831EEE7B1492F3809C85EB98B3C02D5C4DF861E7C901AE5
SHA-512:	DF0AA64C54D828AC8C2E396854BC8FF641BBF2068277F84E591F3385D68F79D0F312C9473E4233AFC89B46A5BF88E51AAC28FBCA6F652C6BD7F656B8C1EB4197
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/-gmI1L0dHJnjIFqmSJZDeo-bTUx_eQV-64_s-9fsZ8KsK-k-3fV5kvh5_uGqqiBWtEk=s256-rw
Preview:	RIFFF...WEBPVP8L9.../..?.U..$I.?.gf.......^..^.W..#0..s.....+..k4.m..3.....f......V..7..$U..P...f...r...L.......................?...qI.qQq..F..N.U.qQ..R@T....c..O.`....._5.L%.>.ma.J..@..."....#..n..q#...V...m`jXT.F..-.}...?n\|....w.H..jGM..j..'X..].....m...'`.Y...D..QD.G......m%.T......Q..X...{4k....6.$.{...lf.m..@..7....2...........>....LU......./........{..[..).....RB.@.C...st....=x.!....#....R.".@...;.tl.....b's...F,.CD.kx..d."}H]#'.v`a...S.LC...Fo.DS...^."\W.P.ddN......q......E.t.=t./..v..m.m.....m.....6.ji.vi...[g.m.m.m.?..v.m.......soa..-.!....X_...v3-.18.S....K.ji...e2..$.DY8...[Fb1..t.........S...`t.......,..k1..._..`8..k...^'YU..2.S..X..q...!..1..#.$dH...........P.f.f........'.V.........J....h$D]).I.0n..V0g..X&...M.z...$...:j{.]$.B...H..Lu.f;%.....h.&..}.S.Q?'w.\y.[!..H..2....,..08..2.B.......(......v.C.y:.0E........)..{..88c....[.".:......s......r.k;Tz...frhF.K.=.7.J.TL... .t.,?Y..1...r.j....C.&.G93....m.;

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5904
Entropy (8bit):	7.961610300807082
Encrypted:	false
SSDEEP:	96:DNnkcyhJbY+vbovIhZsWZahPrDAmVBG7vMRqMCErvPQPglY/GE+ut:DNTyhavICrkmy7vdxsqglYVPt
MD5:	B02F12AC9FFEAC96D1505466A0AC0B6F
SHA1:	17B05850127B1E075379BA20F68CB79736D30C50
SHA-256:	5E8C56E24D74A133314D693B5DCF9A86A83226BEE94125FE549CCE5ECC022B5E
SHA-512:	5F389B2C246CE155BF616551F337A83ED48E16C425347CE76563963EA8B29688A6D21A9E2076570A50F47BBFEDBF49AB23324FED668527846B1EB39D47728B97
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.5...Q......"b.........oaa.U....m.....c..t...IK../.....0.:lf.33......a....Ma.$.......}4..4.f2..Lu0.9.pz...%.'.3.'3.4RK{2C....Ur2.%3.).I.....K.Fji..ze.....f.S.......Y.\|.p..f.03U.....=.H.6.m?.H......&.mi.8(.!..O....OKr._..1.Q..m.m.m.u...9U...V...........t.c;7NNg..Sg..X....].j..h..v.m'...JcO....~..]...1VN.bTE'K;.......S..m........$...F.m;,.=S..{..6.{.i.......Dm...E.. +R'.3+.,...M........=..v..C..z..;...\.....yjfR.-._n..=...z...!..J..c.......%..z..k'.(..l... ./....W.....8..u".r.n...B(r('.....A....g..y.........Nrt......p.c.......,H[..n5;qp....j..=[.....z...60q...p8.d"VZ.I.S.LK..O....F..^#[.....}.:.#.hKo..cm.n8..Y1tO<..!.54'.a...x..M.<.L(.j.}..1....,(.F..l.l.n&....jK....j...g....n..Y..>4`.v7..Wk.....}.....~U......([.!..e..Y......<P._. ....f@&....J..Z .=...).J.......&.JT. ..y%..e...H.v....... ..n......3^....qv.N.9..9......K.d.=..,...&.......@..nD..(.c............:.X.~..L.r4.r#.r.....T....UBd....,......l..M~.:7...

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2389)
Category:	downloaded
Size (bytes):	330870
Entropy (8bit):	5.746291558466733
Encrypted:	false
SSDEEP:	3072:D2Oo3WEEiee3zIN1cupFnnnxlc66b6muipx9KXaDJT6B3ub9dXrkByOSChARUVkf:CE1MzIN1cubbw6mjKXET6B8XriYGiV
MD5:	0B4AC3DCA9B81EC3180728015F865C86
SHA1:	C9A9239BBB14659719BF25D2B248A27A3E764206
SHA-256:	F5CF60741474A746373313BD61E4327E77A3CE6236EFECFC57E93EEEF9580C5C
SHA-512:	774403513BA8D910E60C1DC976A7C167D72C730224F396A54723AE2107E451D86086ABA463F2D72BF055887633F75C6A4812DCC73D4F536769199C5068E86289
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,EEDORb,EFQ78c,FCpbqb,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P6sQOc,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,WhJNk,Wt6vjf,XVMNvd,Z5uLle,ZDZcre,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,dfkSTe,e5qFLc,ebZ3mb,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,hhhU8,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qqarmf,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t8OL6d,tBvKNb,tKHFxf,vNKqzc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RjJvI,DRmmld,mzLjxc,LRovxc,Y413Bc,J22eF,iLGjNb,ULFnWe,grWkAb,Lkzi5d,LcQwud,mmmrlc,YTx6oe,qk5AGd,kdbckd,dZ05Qb,UZStuc,xI1uef,PAQZbb,e3Zld,w08zce,UINLVc,iAQMie,NkwaS,GjTCAc,kpVlPe,qyd4Kb,g6aYuf,ElYdAc,PRm2u,pQUyNd,RBsfwb,ZMKy0d,Kfp2G,qczJ2b,C7e1Kc,xii62b,PZ1hre,FoxcOd,CKm2Wb"
Preview:	"use strict";_F_installCss(".jXRZQb{margin-left:24px;margin-right:24px}@media screen and (min-width:600px){.jXRZQb{margin-left:48px;margin-right:48px}}@media screen and (min-width:1280px){.jXRZQb{margin-left:72px;margin-right:72px}}@media screen and (min-width:1440px){.jXRZQb{margin-left:auto;margin-right:auto;max-width:1296px}}sentinel{}");.this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{.var xqa;_.Qn=function(a,b){if(!Number.isFinite(a))return String(a);a=String(a);let c=a.indexOf(".");c===-1&&(c=a.length);const d=a[0]==="-"?"-":"";d&&(a=a.substring(1));return d+"0".repeat(Math.max(0,b-c))+a};.xqa={jQ:["BC","AD"],wW:["Before Christ","Anno Domini"],UW:"JFMAMJJASOND".split(""),nX:"JFMAMJJASOND".split(""),wQ:"January February March April May June July August September October November December".split(" "),IQ:"January February March April May June July August September October November December".split(" "),FQ:"Jan Feb Mar Apr May Jun Jul Aug Sep Oc

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	20202
Entropy (8bit):	7.9885613514323115
Encrypted:	false
SSDEEP:	384:l1wsC+MpVo1jiEXiuJh7nx/MztLMpNhjOifQzTF2lQMwGslkVe:fwtLWiWb7nxEztefOifgT/M9Ve
MD5:	0B9FBBB73BD0A1D2C58AD3CCE80B4EAA
SHA1:	02E416C66C1F844C85B470EA4CB4EF542FF75547
SHA-256:	87E30299858AF3E59555543845771C2C70464E2F66AB02AB23ED5819901275AE
SHA-512:	7B855EBF7B520DB6D5CD6064DBA6896258D9DB10F930D27CD404086BD19985C9355C252CA7EA11BC5BC858DE9E7415149F96ED1E37F16C3CC6791B44A77895B2
Malicious:	false
Reputation:	low
Preview:	RIFF.N..WEBPVP8L.N../..Z...m...`[Xd........W.....8s..Q..R..V{.n%..._k..;I.d.L]H.o.d.:J4H...9qW...).mc.v..q......k......c.d7..$p.6..\|.I&..j...5xs .....}.....>....5.&.I....2>.P]./.h.w....../L$...H..{.\|...#...P.`..G.P..j.l..nc...{....J...@.b.._]]=.m.m..Pk.)._...=Q!HPD.?,....u&.6.....Kz3.z......{.4.t...`.y..f...{z...%{..\...............D.u......P0.>..A.E.C...u{.L>#..)3..xt.r...Bm...ED.T.57t..!...zyp..........\......G.......I......-u.....#..?`..../E.<3.0.'...f.d....q...........&].s.H.#...W...........h3.a.< ....".z....h}...->...4.i+....9..".!.p..l@.~.6}..>......I...S.8d.d._.t....9..sA..].cR...q8.@N......rB]....AU.c..m.'... =eL.d...w:JZ.2.....xr..[>.}u..... .......i.>...n.^=.}.......+..\|/i...`.@A........>.I..Jvm)E......w..0.1.a..Z.KN%.j...^.0w+...u..i0......5..}..].z.....0_D..?..ShmMI/.K.@HU.g&...Z........M...f..<YJ:.\|RN..Y..m.H...I{....@^y.j.s.&..&.-F...Y.5.UK.Cz..o...".[...>].....7'T..Q..;.....;..P...]u.......U..~..A9.......q(g.ei%..y..Bn.G.).v....

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2284)
Category:	downloaded
Size (bytes):	208230
Entropy (8bit):	5.509862385528734
Encrypted:	false
SSDEEP:	6144:BkpbK9ASyGcE3CviFApY59mqvdedgo9Bkl9r+CRKON8IVjPmYtI8W3qX6no:BkpbK9ASyGcE3CviFApY5xvsdgo9Bkl7
MD5:	DF6A6F3F705D060700FE30404EB71D6F
SHA1:	2386D604B09E5F93DA264C1D0D0722F6B12DBC77
SHA-256:	281AC8104FD050330CAE800150BB15DB8135FBD4C981A1CE7E1FA53BCD1E471F
SHA-512:	F7C117F1F36FCD9ECFF180A6715F7D932B1DB5497C7FF82BA920397E6C3C3E750261F2E6396B941FCF24C98007DE0EACA9C414FA4868244CFEC06C50E3F6A47F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/excm=_b,_tp,developernamesearchview/ed=1/dg=0/wt=2/ujg=1/rs=AB1caFW1p2ysF0_9TKv4YdjIBl8QaC4VeA/m=_b,_tp"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x431b747, 0x20efae8c, 0x3f806049, 0x2c60e3c1, 0x0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,iaa,kaa,Ia,saa,Aaa,Caa,Eaa,db,gb,Gaa,Haa,Iaa,Jaa,lb,nb,Laa,Naa,Paa,Taa,Uaa,Xaa,Zaa,aba,bba,fba,iba,cba,hba,gba,eba,dba,jba,oba,pba,Qb,Rb,tba,wba,Bba,Cba,fc,xba,dc,yba,zba,Eba,nc,Iba,Jba,Lba,Kba,Nba,Oba,Pba,Rba,Qba,Uba,Vba,Wba,Xba,yc,Zba,$ba,Bc,bca,dca,eca,Oc,gca,hca,Lc,nca,oca,Rc,Kc,Mc,rca,xca,zca,yca,ed,gd,Fca,Hca,Ica,Zca,cda,Fd,eda,Gd,ida,kda,Kd,Bda,Eda,Dda,Fda,Gda,Hda,Ida,Jda,Lda,Mda,Qda,Sda,Wda,Xda,ee

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	16248
Entropy (8bit):	7.98482221372096
Encrypted:	false
SSDEEP:	384:lBRHy8G+Cm5PKBO5Oe17yo6iSjK3MZzbmDeaf57W952zK9s7:lBRHy8G/m5GqO0yohSjKSz6DH57852W2
MD5:	CFFEF1A03C9D15F18DEA729534A5C39C
SHA1:	8B7F5B2DFDE9E57F72E95A194C6A517FD8C99AD4
SHA-256:	C43DD9DDFA011C7322F742574D5E5A8F1D0C33ED4B391BAA759BB6F0A6ADFE9C
SHA-512:	34254F41028DF431A4ACCC45F1EE69DB6C76F4E42745A9C925F006476BFE9AC2028BFD73A5D0C18854F971CECF2412A2C8AC2B498BDA06881FDFCE5EF85DFCA5
Malicious:	false
Reputation:	low
Preview:	RIFFp?..WEBPVP8 d?..0......l.>=..D.!..J,. ...p...KO..Y7..S.......Ia~....o./._...v..........G..........'........7./..?.\|_z........_....{......W....._...\|..U.....K.{.............?.........._..._.?........;././._..........S......`...q~....k...~..o.u._....E........5......z.~A.../...=..../..c...G...<..K.............._..._......!.........m.......k.....W..?...................l....~......#....~I...........G%A.....$..J...'..H%...'8N'.J9.Np.O. .rT...8..A(...Cr7...;..#.r.J0h....(2.\...........4c.ix.........">.}.Z[E../].X.R.h..O.n$.@[...~I................A..n..V....q0.['....]..nN..q.2..o.'8N'.J9.Np.`.....l...6..^..(..H%..[I....IC,.^.2-eA.....$.i......u.c~..l!.\|....'.9I..`!.. .rT...8..A(.&9N7t.J..V.8...u........I...k.Np.O. .rR.G.5...NQ.C.P..2e~".}...=.....Bs..~I........&....\.S.v.=.\.n~.].)......O.2-eA.....$..G.,KJ......<)Y.O..U.~..=;z..TW..H%...'8N'...hB.'...D..-[f..<U.z.E1k.7.....9L.K...0<....\|~...\...'..H%....c..g?.5F.....n........@.,k....zh..a..k.d..m.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	32208
Entropy (8bit):	7.993879453839868
Encrypted:	true
SSDEEP:	768:nHcSuG/YJ756nr6noJowtPXWQQolqE+3PZUbeoNI/nt7GYGay+:HcS3/QYr5ddXFlD+/mNevGU
MD5:	BD7D13EA2E801E36578EC3E676A7E55F
SHA1:	22C9ACB03C0A9061F9AFEEBC826D5F0CD9120635
SHA-256:	2C79AA56778F429A16983D82F6023C782EF3948311AD6161C444F8F6B380AC32
SHA-512:	ECA472169797A9E81EBC86CA4718AD41614572A0443304234ED4DECB6BE7CE34A5D3410BE0CCCF016BD494145781B7606FAB5DED7EF87EFC4942AA4E91A6E4D0
Malicious:	false
Reputation:	low
Preview:	RIFF.}..WEBPVP8 .}.........l.>I .E".!....(......)..Qr.T...[K....>a.R..Uy..w=j...b.o....'..\|..r........R/.^..Dy..g..._.........~........j............._...pl..d..^.\|...O....L...........9..x.....8#@_./.."_......_...=....g.../..".......3...7...?...?...g..a/.oN.....w.....L....P..H..~...tu...gw.p. .n{...+.B..Z.s.._../....}{y~(t.M}o..P^~.rZy..u.].......<..at%s.q&...&..;.$..QV.A!.. ..f.m..7..yN...d..V.r...&.gm$<.2.(2.hT.8.....S.....]..R_R..X...k..N.x....e.&.e....C(.m..\|.e..:.\|..k.1...dZ..E:....Z.=.VT..).C....=.e..(....K.79.I.G/.w..YD.(..;.-1..../;...@w..H..!oo.2.0....b..g....8?..G...J.o.x...O.Fn."^,z.lrGw.O....g..(.t......U.K.i.X<..=f...QO..../....+U/..X../...O~v.x.R."v=.zM.....[........;2;DV....J..Q...yb..&.v.8.s.(.o.....y.....Lk...\|..QNU..-..?9#..c.`..tU.4......$&........R..@........m\|....+{.........Z....Y.z...8w.C......\|..#......T.6.......K......q.Qs...w2{.....U.k.....A<.4w....M....ED.^....#`../W....~.>=....4.eR.....@S...g.W.l..bY...G..[J...

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	165054
Entropy (8bit):	7.908073974480113
Encrypted:	false
SSDEEP:	3072:S/fDVnIXag4LcXeI5fvWQ/gVpiyT6cIzgulCmZE60T23FDv:S/fDVIXaBLUJN+QwyfZE6Vp
MD5:	109765D89C224235C206888C17A0CA53
SHA1:	732975BD9A4B1E7FBA7BA8F21A21EDC254E57F0B
SHA-256:	77D8E1215F7DEF162E55D8C9344144CFE4087DF47ED3BAE20CE1597D30F997D3
SHA-512:	73766AE3F1161508D4111F7F38522A0C43DC7FE72812E71DC12286371C6F5FE3C748BF7BEBC248DC492197997D2C9752609B9F16B300CBEEC4FFC39A75967049
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/gtB5zvc0y7tJAUw1pyuC96Fevhev_zgOMFKUZO17tqKp5Sa0RdJloJyd5uEACMC3rJRK=w648-h364-rw
Preview:	RIFF....WEBPVP8L..../..Z..@l.F...#..[.....w....X..&.... u.{N&a.S.9j.......\|..a.M4.9p....iS.&.. ..zL.S.-..@...j..4...v..__.z....p....Z. U.m:o.N...Z '_\.\|.B.6..Bw.....nT...pL.H..>\|N...I..u....82..<.+.{ts.]f..%..H..]...] G<0.ds....2.o..&k.3....a.^..O.9\|.7{.$.".f.9..W.?...H.\[I4.[X.h...Bs..A.!.m.m......m...3.7...<r.H.$.....8..6r...Y......Cd...4.C.z...{..........r....KdQ4.....\.a.q.&.C........r.]..D..>.C..4M"aPX"2..M..{XG."n...H..4_%:9."I...XE14"........kH."9..Kz.#_%g.....s.0...p...G....%..}t..r.U"...../..4...@.C<.z(n...$n>.C......W".4.R.y.uXY...x.Rxx..~2.r.7x[..`LY.H .+...1X...Y<..66y................/.d.......>...p8......K..&...].........A..sy..@..<,....$].?@.b....C..?s'n....O...H..O04.......M..A.@...w..@.k,....g2.x. . ............<.....B...~wmu.U.,..8..A.....\|..A.........!....eT..f,".1.........."a.`x.`U.:B(..1..:."V.>..`.D..B...m..B.p.r....&.,....D..dtT.MK.R..i.!......D..Q...a..M......7B4........7\....DF"..4._uttt...Q..#.....c....:@4r9^G...H

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9270
Entropy (8bit):	7.973786790952994
Encrypted:	false
SSDEEP:	192:IIjELAJ6wo3pBvjZZXqtHxxZsMSqfQ5XHfJ889UqDw/GAmd:IIj+A4xdsfxX+OzSd
MD5:	664690CC29246D3BB6257D8E7F790343
SHA1:	19559A7E8B91BAD19798AC44BECBD3E376281CAD
SHA-256:	2441EFA89E8D41238794A3C53F1223161A222B212CE6BFBF57B0E26BE9F4D0C8
SHA-512:	835699F095AC4078A71F64903463D035E55D4D687B7C79991EDDB2B1A660A2F79A5ED0BDF1CC58D9D9DAD1D5BD25C12F38128ECE07478616FA768EF63F8C2517
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/pQqL4JTm_4PS4UGdvVNnv4f0AYXeRwItrhlAhu84_jtUO-xslQmRaHgrJouYh82OPps=s64-rw
Preview:	RIFF.$..WEBPVP8L"$../?...M(l..Ar...G.G{..c..m.{.R...?..6.D..^0n#IQ.C...?.....n.p[...E.N.._..E...m#I.....>...........wb...3+#.nfs.../..e.........9_......[+.0..a{{..a.\s....IND.Z.....\|..r.<./..}....#.S.h.S....^H~w...G'..pS......a<....D...,.%....m.j+g.s...b.0s.jH8iN..U........`[...Cn.L..c.s..}?/~.Q..Hgu.E...O.....N.$9.......9....p.pP..\|.......P.2.1..<..h6.}.q....N.;...k..m.m....}]k..v.F.s.q...O#I..$.#.\....5..\.......m.Kwffff.ff....#3..0I.{...m....U]...=....m.m.m..Y..rM....+.Jr..yD\..9..J..".oz~,D..xC....^..5..u^\|..\|.......;.x}...:+=&..li.he.I..E..~......".'..].R..{...w@..6...%...J.27w.b=.h.A.N7...X..Q`..M.E=.HQ...R. .Hz/ .f.... .jM.p...._?..Q:h\|1.KZ.U.a....0\|..9.B?.B.^.. ....CH...&N.....@..D.@.L....o.......1..R...r.!2...z^_sG..@..c>u..b...i....8B{)[e.]..~.w.l........q.U....4(.B..wB#8DZ%.&.y...)+.k.mjx2q.E.5q....4:.F....]..'.....Td.....{.Gw.T....:..."..yk.W\|....5o.*...;....q.kTB.I....@.....Yl.8.1c..%.&.-.P.H....

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7860
Entropy (8bit):	7.955805602659907
Encrypted:	false
SSDEEP:	192:LOV54+q/rQD1YSiWl2/05YdNGBhK/saP1FH:LOV5MkD1ZiWl8tzYhYP3H
MD5:	46170B933402D7FAFD745DC0CEF0F062
SHA1:	239B021E0FE588B2EA6875F584E46F1B09A53E9A
SHA-256:	5059ED15F42F09678D74EF63726867324485A18A42A7283A4C0004EA6376CBE8
SHA-512:	5E6E9B8B92731A6533365CA6CAD8222F907F02FAC571700BC67145560842D9A9AC4C1EFF10327ED17245220DF14ECDAA0BF1BB4FFCBF0AB0BEF123E7ABEEAE9A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/FVQXdzxDphpLdMRqIc5kG4C_Dc4AEO7-9uKHPt85v5_6Sp3J4mTV1S6P3ipLEoK6lDer=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8Lc.../?...M0h.H.6.?...........v~..<...I..wP=..4.I..m#I...\|].1..4.8...T...B...PCw"w.2..HR..c...'3.?.....V..... ...6....0..6..f.7.oX...L..n....s.<..k....\|....y...~....G_.......M...N..CA.6....v.......v%K.3..m...1.>..o...h..P"..T=.+.....g@....9{.5.{Q.K....2.......lD.....h..l.o.Q.......].j+.c.s.........A..9.{..'....G.?s..,.A.A!.K....m....!..m;$I..8......bwUW.3s.m.m...m.]Yi.N.K_."..m.m[.Vj.}L-l..}...m.V...?..zl.m...hk.&..UO.m.nlk[.c.dI.P..\fffff....)f....rs....."....di.9z(L...+ ...CC.X.!...JTj......H..&.....x).v....uK...e1v.o.So...4....".........B.B.....-..C...........1..0...l..RV.X&.).`.f.l{c\(X.P..VZ..P..@C...x.iy...`.g......-.W.R8..2..R.....T. 9=t.~.!B.a..LT....N.X.)..Lb...p^}.2.2.."..V%PK..V...9.z..3...... .#h......./p...C0. L.(.0:. ..^H.}...E.p...(@$....!.....z4.@....(`Q.IB[.(...).....Qn%..#....^_.....`.N.I!e2..S.r...hI..W...O.y.....a.5%.......eL.[.]..Q7.P.."."....%.""...);f...8...$.$..b..'9...x.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	22078
Entropy (8bit):	7.988867065623458
Encrypted:	false
SSDEEP:	384:r0ilpVj0DtNZwScbR0KpkvPGoD0xwhdnS0uQcJMRmhyn872sVjtygo7d:T76ncd0KmvPGooxwh5S01Deyn8qsmL
MD5:	787C16D2400E178DF35F9FFB150A40B9
SHA1:	FC85EB6A5D78A14952ECE375A44FC0629234515C
SHA-256:	24B362BA568532E6732E989E44AD173CFEF5E2A07390940CC187A2334782B7EE
SHA-512:	570EF24EA93ABAF9C563D87B46F0F9F404FAA74C84848D671637BAB548511A6DD983B163C0707ABF8BBD9F5C317C263AA3CBB628A2408A36321C7B6C7140DE7A
Malicious:	false
Reputation:	low
Preview:	RIFF6V..WEBPVP8X...........k..VP8 .U..P2.....l.>=..D.!..... ...~)....ni.i.8........_........~q...H....._..{3..b.m...g............_.../.......?........?.W.......y...x.e.1......?..\|..[...#...S.'....W....?.. .S._.../......?.?>.@=.?.z.z..s..._.~..g.?,.......:...+.W./..............^....k./._...~.........P.m.....W........................g.....?..".............~......'..._.?p.......g.W..O.................?.^.?r..{.......(.....~."....D...#.r2..K.>..c...........@/_...!.......FP...^Fy.....@/_......'......Y.u......_..Q...W......W...\|....~k.\v.......?M.(].Y.?.\..V.l....+.......2.S..{I.,.^...!.l.....6....CM...&...b..X....;......F.P.Z~Kv.n6.v_7..c....;i.YV...G.. 6!...l...~.H..EW...........U.K..1..<.`...J..:...."h...{.......dL.N.....Y..i..S.M...(. .q.....L#..{.*.]h...~."..../..l...<0K..g.0a...)....Z>{.'b...q...z.....x.-E.~n...d...P.$......r.......c...w.......D\...G(y>]H.^.@m....rK.f...:.m.?.\...2......J#(g+B1....H.0..9...y.@......l#.....S~Q.5.`M...

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3034
Entropy (8bit):	7.899921007431496
Encrypted:	false
SSDEEP:	48:omfAGs94LSvCRYAJqB5mNFdkI4cIJTsY0frXVR5A7FTz:1ARyLNqLuddoJTspKH
MD5:	84219843A86CCE72CE8130D28CCC5709
SHA1:	1D992CDB3EC1E062C5F07E8E5866A2B3C722E48C
SHA-256:	43D733337414644C4E45C66782675DA46EF04A78B12EF13BDF99ECE240CA604A
SHA-512:	69F74099290374EA6D695813C1E124860C3ED3DB48A10B91DDDCDACDA9AF0881B4CFE68559207A2146BBF9227BF2F326975B6E57F3E6EBED7EC6C52652C15841
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..`..#....s9."b...]0nCk...h...Wt...Ec.../....I.......e.~........~..y_...I..n....+.6..6...\Z."n....J.......(...2H)..Hu..k......2.9.c..,b..o.f."..:@; "...........(.zXj .hsB.......-.me...m.\|.m.."......O.....F.Hr.;.[..333333.'.O............W.].B....d.;.EI.d...6......J1.y..c^..0XZpe.Z.....v5.......\......7.N...uA(.._.....yk..q..<Yg+...@).S.g.j!..O.Q..YS....m...mc.?.m.m...v......n.5t I.i..d.}.........v.w.......?..-o..m.Y.Yc.B.'.....7.s..S...3...=]...2.fP(.W..W4_.q.h.$.'. Eo.p.xt.#.L'3d.S...uv.U.g..HQ...D..e.Jkm..,....(.%..........UL[... .Us<9U......&..k..<.U..lqc..W8V..#S....,.{0...-.j.....!_4_..d.....X.P..f..~..a.LQ.j....h.&..#..X.g..Z.........57h.c. ._..5I.t.F.j...d..\{..........X....o..}~.-..v.w,.+......Gc............$..6o.j..KwY...\|...H.d..$IRx.>..=x..1..........h.t.Zo.S.M.Qm\"6.S......`....O...=...L...nc..8.{.....%....L....].Y.....8t.:...I.&c]5....xt4."................j.#....,?`.&cz....*.j(...%y

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	11642
Entropy (8bit):	7.956171805486366
Encrypted:	false
SSDEEP:	192:6E5kih7O8gZn5HCHAHxtpBqOMDcepyTKWGqUjv/34y3wC1XSD0mq9StNxem+vD:6C24HAR1qhoeImL/34C1XAtjxem+r
MD5:	85E15874190D00FE93335117BD3434E3
SHA1:	716521585BF924B5F998D39BE1651CCCBFB4DD60
SHA-256:	2FF947BE28407FF45217185C8D453F5FA4366E60C3CCB8179B2A1BE3F726FDE0
SHA-512:	2F0828D78747D6BC313B4FB8B946341265D043B69FABCE931C49197FAC0433F8704246C37E0FFF0BDB9F3F402197778B4FA62074866BF763BE0F4F3F52D0C3DD
Malicious:	false
Reputation:	low
Preview:	RIFFr-..WEBPVP8Lf-../..?...#.m.I......g.=G...UE.R.......s.....p.\|..7..pr$8...k.......J.....hd..?..........f..{.'X.=.6wwww...2..n.iq........%....Gr.w..).....$....).......PI....MC{..u..x(Ez?......m....m....{l.m..BP....r.m{.m.M.m..<....:s.....rEl....!.mU.J......h.Fp..-U-..'G:q,...._.9.t..?$I.h.5..a...._..S.k..`m...m.=......".B..Vd#....{.2..d....8...Wl.N....i..f\|x..d.......j..i...EJ....B.E.Lf..$..~{..uSk..Pd...0..u....E.....(@.w.(a.vf.....6W6v..m...m..&y./.._....5.m.u.Q.mD.'@w.^O.....r...[....;o.....y......V.r.z...'.^............69.).9$....G........j.......zV...;...G{..<......UiT..R{.Jm.j.ZTe.8..H...E.....]..4...Z.?..I8 ..Z..^.6DW...5..X.k.....e.E.e.b.c?....^{q.[....R...4.....f..WV..Z....!...^.....Y..]..ug..'6<...W..E.{...9j..[1.Q....$./I.3...QB.w.............Zp..{.}.OY8.....8....4..K"F..:.,].n..=....m+.u7K-a.P.y.8\|.`.Li.>...C...\|RP...........U...]&...0...Ml;RS.."vy .......`...Z....L.#.x.P.....>Y QG..kZa.9...

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	526
Entropy (8bit):	7.133658027142918
Encrypted:	false
SSDEEP:	12:Gq51JNDQR+b2EDop9+jVmJ8RhwR2ARYYuDMA9YQ:dPkwKtcxzZmYYuDrN
MD5:	AFEFBF997AC562DBBA673CF3EE3A281F
SHA1:	27486FAED4E8A0D3461ABCFAD831EE4515C26809
SHA-256:	25CB02C3744089B0C43657B39C5206D16705E7007BEFE9A2D0269DD9423C3606
SHA-512:	D30FB53B5F52E1DB134586B508BEA5C953E8EF07A7CA00554D7FEE5ACF2351C53469AC2E6249BC7B9C42D09C46CEA457E18943ACDE636D60094E83D8E771FC9F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?...6....j.'RBRy.6.... ..x..h.u.)h#IYO..U.-f........w...rv.q.e..>..n.(.. ......J..r..eA...n..I.y.......w........G..S....bW.]-v...bW.]-v...bWk........Z.j.....Z.j.....Z.j....b..........t....3.C..7....p......7.........W.d..?...........h..Z.E7.F.n`.....-..5Zt.k....h.....X.E7.F.n`.....-..5Zt.k...G....n@..F...3.....n..6t.f...0....m...hC7`F...3.....n..6t.f...0....m...'m...6tCfG7..s...;7..s...;7..s......~...\oy.....@...vn.a..vn.a..vn.a..vn.a..vn.a..vn._>7./........{.

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	44215
Entropy (8bit):	7.97839217732228
Encrypted:	false
SSDEEP:	768:gGvyJk8FYFkSjgLyiz14beCYi7trcC286Fz9QYZlLLU5OHqaOjAMlam2m6F:tvMFxSjgLTzGiCYi2Cf6d9V/LCOKHAh7
MD5:	E01AC3670BDE78937AB48F04DD66EF91
SHA1:	9E31EF13BF8668F422F7BCC8B670BBCF8D9B1678
SHA-256:	FF8C3CE69ABD41161AF5A4DDC79D844F44C728199E3A098C6A86CE9C9F49F446
SHA-512:	19A1F5A457C2349A51EE645BA45835BF4255C210EFAE043AABEBDD31784920B1A79140C9C78D9EC17BBFD5D928FD251D9D22568E23FF6E66A7FD0DACE41DCA25
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................h....".........................................S........................!..1AQ.."aq2..BRS.......#br...3.....Cs....$....4c..%5Tt..................................D.......................!..1A.Qa."q........2BRS...#...b..Cr.$3...T.............?...QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A..QD.QE.A...?.........t.~G[O........lX.....h......v.................\|.....u.f.P......y....v...?........&.S....b....)..\|...W.O.k.>...6'..U...m..VQu..0..+'..a...p.iY4.g+*..P.....@F/Ei..<_.a....W../.0..^..).k.,...........1.I....._.A.....{.....`..'....Hv...L?....v...L7...=.Y.f.kR~`....`...}{...`x..}{....c.~Y...K..

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	636
Entropy (8bit):	7.600775301724357
Encrypted:	false
SSDEEP:	12:MDNuvIKqnbvUWaJMfBVaEPxH43YtUJP0te971o1XJTNMv/S+5GaD:ENuvvqsMzNP1ftuP0Emzav75L
MD5:	2A4F43FCC5ECAF85B82D800C574E8D19
SHA1:	CFA7D1DB091BC2224D1F43E03DAB7F2A4F1B6839
SHA-256:	5D1F984B2D0F5F0B932A1334D9C36FE94FF30CC0BC4882B7D01934F49AAE95FB
SHA-512:	5DBCF1C417C6F6ADB588B460FD2178E9AE725626C46CDA283C8B344B55E12D9D333D5D6AF47BE4F2A98B0FA362276F2A5389B04B63C6AA40645925BFECA2333F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/sb30umyAPj9A4ixl4jnPJO15ET-mo4TihKOI0xwFzRbxOfZo6fozeKmAjf8Lhl3mqHY=s64-rw
Preview:	RIFFt...WEBPVP8Lg.../?.....m$IJ.fw.%p.....i8l.F.$'3.{....)W..8n.F......6...!....g..9] ....d.4.b@...D.I.........>...Y. ...9?N{...m..t.=.d\|...D...@f.v... ..V?f...8.DP.D@....Z.......A.C`L..... .......... ..6k.. E..IbP.DA......." ....6..G"..$.G"....7..].fHN.m.3.....N6.]=..q.W......S......h.R..^...Bh.....W).Y.:....3....qh...,.g/g.sqf.._k....R}..... ..qW80...v.h.w.....7L`Wl..]...57.D....n..... .W~y....BD/&..'c.~5."....i)m.'..-..r......,{x..u.8.z..O.y).k.E.?..o=y.GS...<..M.......\|7s..).=},o....?.....^.#.....Y3.)....j}/..^.0..\7.&8F.HM./9..>.63.kS..-..Wc.+...t.mt`.[..@...\....1. .)...<.....h..8.1.<.#.. ..

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	11642
Entropy (8bit):	7.956171805486366
Encrypted:	false
SSDEEP:	192:6E5kih7O8gZn5HCHAHxtpBqOMDcepyTKWGqUjv/34y3wC1XSD0mq9StNxem+vD:6C24HAR1qhoeImL/34C1XAtjxem+r
MD5:	85E15874190D00FE93335117BD3434E3
SHA1:	716521585BF924B5F998D39BE1651CCCBFB4DD60
SHA-256:	2FF947BE28407FF45217185C8D453F5FA4366E60C3CCB8179B2A1BE3F726FDE0
SHA-512:	2F0828D78747D6BC313B4FB8B946341265D043B69FABCE931C49197FAC0433F8704246C37E0FFF0BDB9F3F402197778B4FA62074866BF763BE0F4F3F52D0C3DD
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/HW8aJVN5rdXLOWYaJiW67XekFeJLQ_UtRctTnosyizlbDcjp195fw6Sq6Z95bw_ramQ=s256-rw
Preview:	RIFFr-..WEBPVP8Lf-../..?...#.m.I......g.=G...UE.R.......s.....p.\|..7..pr$8...k.......J.....hd..?..........f..{.'X.=.6wwww...2..n.iq........%....Gr.w..).....$....).......PI....MC{..u..x(Ez?......m....m....{l.m..BP....r.m{.m.M.m..<....:s.....rEl....!.mU.J......h.Fp..-U-..'G:q,...._.9.t..?$I.h.5..a...._..S.k..`m...m.=......".B..Vd#....{.2..d....8...Wl.N....i..f\|x..d.......j..i...EJ....B.E.Lf..$..~{..uSk..Pd...0..u....E.....(@.w.(a.vf.....6W6v..m...m..&y./.._....5.m.u.Q.mD.'@w.^O.....r...[....;o.....y......V.r.z...'.^............69.).9$....G........j.......zV...;...G{..<......UiT..R{.Jm.j.ZTe.8..H...E.....]..4...Z.?..I8 ..Z..^.6DW...5..X.k.....e.E.e.b.c?....^{q.[....R...4.....f..WV..Z....!...^.....Y..]..ug..'6<...W..E.{...9j..[1.Q....$./I.3...QB.w.............Zp..{.}.OY8.....8....4..K"F..:.,].n..=....m+.u7K-a.P.y.8\|.`.Li.>...C...\|RP...........U...]&...0...Ml;RS.."vy .......`...Z....L.#.x.P.....>Y QG..kZa.9...

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1618), with no line terminators
Category:	dropped
Size (bytes):	1618
Entropy (8bit):	5.770883646203778
Encrypted:	false
SSDEEP:	48:VKEcJHxKo7LmvtUjPKtXsNQHFmc8s1vQZ/rLrwUnG:fSHgj5cOHFbHv2nsuG
MD5:	0E70E9004FE6F5A7E7A51C3484A64292
SHA1:	5F9568D31ED83B60D0F99C9EBAAB5453C6BAF737
SHA-256:	E98AD6DDD86EBF01A466EE2D91901D1E474ECC0749E0D7FAADC00002F336BD2F
SHA-512:	B7CDEEAEECC0F34BF61BDBCDE28E0317F7A8789D0EF2E9AC4B7298D2635F5CB77172ACA5D329D577E8207308962FA402D1EB377C941CFE582523873E03E7B1AE
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10588
Entropy (8bit):	7.947623769601875
Encrypted:	false
SSDEEP:	192:kCja7Wa1+mALIFvidfrelHR/kN4G1xKdnGhwz1o60mM1d3nFrTiV6Ymk5R:ra7mbImiMiG1IE/T3nFr03
MD5:	8601F9C12726883B1BFFB240AB1BACEE
SHA1:	559933A35BFFF10F3F5D0612EC18E488A75D9ACE
SHA-256:	2F1C79C7338A796703B2B61686983180DC30E310DA8C40B4C426688CC7E18C33
SHA-512:	8E0175DF431950EAE0B032DB46D2D8000E5085836E2A2DC1F08C3744AFC3B551F01E06E0ACC7F724C080BF98DC2F5ECAE24FA00BA7984064BB77A2A23BB86A23
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw
Preview:	RIFFT)..WEBPVP8LG)../..?.M@r.H.... .....g.......:b.....{.. ......$.4.A...y...'.....IuD..s.d.R33b."3.V.u.l....E..@.S0...^.~G...{.....[z...q..e.....7...u........j....?w...+\|.....#..$.6m.....7^k..,.i..@.$..3=...G......{i.....sd....',.....3..&..i...j..f..f.&.z....-.N.......KJ#.""...VZ........"Q]J......x.....l.KH..4..EY(.R ..V.s..L.1.<....YQ..#:..".RF.-.H..h.......$.RT....^z5.3.0..JJI).1Q.....Q..(..e.DD....$"...B.h ".C.5...%..EJC"."IJ+..5~...C;S...>.-....jZ.O....@....L...@......HU..uK...........l....+...m$I.$...{fv..1...}....q.S....f-.i[......f.8..IPL...ZUq.4.N+.....l.j.......;Km....V.\w...o.....E..F.B..Mm...N...I.Y.>.v.k..."./.W....T..`?M..S..@.....P.8..6..'....q$.N.x.0G.,...7..b.p1.8...c...^ff.333333333333,.a.alp.Uu.n..s.s.-.....@.y4:........`_E....Z..9Yv...@.F.8..'...^9.9...s..H.#IRd[..p.33.....?...O.'.3.eX...D.)...\.......o.6zF.l..m...]..U.m3.{.....;i.S.....B.#p..X..D.!t.:...+....~]zG......I.R.../tP.Y.?......1..%.^...KS............

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (785)
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	5.301223695635806
Encrypted:	false
SSDEEP:	24:kzijJWvPfRFbtG1B/CKFQXIk9ns6GbSk1Gb7v9s+b5bEtpStARQy78rl:kiUvPbJGngns6Gb51Gb7K+VEpjudrl
MD5:	28C1399143660DCE57528288E362B723
SHA1:	30BBA1FA00AFF614E7197A221DEE422927F971CC
SHA-256:	E3EEA52F5DBAC83915ABEEB93381EE0EEB283A7A4043EB00E4010312810068E2
SHA-512:	6E8BD6CC792F69F1CC4D691E91253847D4679A26522E6456890DD9E0DB72A9FD81028F9E5DDCD6A82160772753A729462E7BEA93E9F0D1B7A1145506C97D7749
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("P6sQOc");.var rab=!!(_.Jf[3]&4);var tab=function(a){const b={};_.xa(a.ua(),e=>{b[e]=!0});const c=a.O(),d=a.oa();return new sab(a.W(),_.wh(c,1)1E3,a.H(),_.wh(d,1)1E3,b)},uab=function(a){return Math.random()Math.min(a.oaMath.pow(a.ma,a.H),a.ua)},fL=function(a,b){return a.H>=a.W?!1:b!=null?!!a.Aa[b]:!0},sab=class{constructor(a,b,c,d,e){this.W=a;this.oa=b;this.ma=c;this.ua=d;this.Aa=e;this.H=0;this.O=uab(this)}};var vab=function(a,b,c,d){return c.then(e=>e,e=>{if(rab)if(e instanceof _.ee){if(!e.status\|\|!fL(d,e.status.H()))throw e;}else{if("function"==typeof _.pq&&e instanceof _.pq&&e.O!==103&&e.O!==7)throw e;}else if(!e.status\|\|!fL(d,e.status.H()))throw e;return _.$d(d.O).then(()=>{if(!fL(d))throw Error("Ec`"+d.W);++d.H;d.O=uab(d);b=_.qj(b,_.Via,d.H);return vab(a,b,a.fetch(b),d)})})};._.Oq(_.MLa,class extends _.Nq{static Ja(){return{service:{AO:_.pab,metadata:_.qab,M0:_.oab}}}cons

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	148
Entropy (8bit):	6.523312318185472
Encrypted:	false
SSDEEP:	3:clyg1ZreK5l1GzQ9O9xbSj0hGqBBs+dK484MVYQkGAKAJlJwBNlWn:coWZaKBUdSghtBfI43M0VJlJkWn
MD5:	F6FCD4D43487A3BF8F47A592569FAFEB
SHA1:	22B1887F1C703EA9ED827A59B02AC7FCDF79CA54
SHA-256:	C6AEC5614A1193CCECA829712C4027C6F1B94A106395D2223229861AE110A9A4
SHA-512:	98ECA13BC52869440EE4319FD09AB3C076EFBD51F769052B8C85571236355E50D5426F15CFD67F4DC1942D07D72A0BF0706ACADBDFC5CD2082645CF746778443
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../......j.....]@G....51..C..G.3..<...w..#.O....{.P...I).......T./]......}..1^..\|.~.}.B..B%.JP..%.\..%..$..K.Y,".\../?#..

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9130
Entropy (8bit):	7.9567084578110325
Encrypted:	false
SSDEEP:	192:YwH6q/rmVQzQHBC2KKY/aLNKIf6UyULHmozxA1oSdRPX03AdDJc:XH7jMicBC2KKYUEiXG2xAeSdBXdm
MD5:	653FADBE48451E081A9151ED7C125119
SHA1:	71463636A82FEADB6CCE22F7F8E0704B9D004273
SHA-256:	951F9ED94EBA0880F04A514121E87704C8C8140E5C696F3FE56F6FCCAEA486CB
SHA-512:	0D0179026235306D16E4FEA1E198778396768BD0B8E6CC97F8E23313548645D19B7425E1DD7845E32BF31A8FDA63634098500EE41FB05E7FB9DC5E1C2E8A0A49
Malicious:	false
Reputation:	low
Preview:	RIFF.#..WEBPVP8X..............VP8LZ#../..?..H.$I......)...5..9G......;$Z.`'.+i...F\|.m'...$......}N.Ib......M.9...Am'........M.C..+0..N.cHZ..0.....(c...x._......S..2#..$u...p...,$........(.^..,f.6.....B....f.W..OB...W..2.......'".:.:^......'D2e. G....... [f.{.....y.G...y]....8.,=.a.`.....-A...X.7.V6.By#=...By$...J.....I4.HY.....K_$................%.....u....yO.W=..,U.......<G2q/.......9+l-...x.s<Il....\@...3...!......S.J6.<...W$I.m.Ue...qf.....;.D..3...N......tP.OQ.HN.....gX...m.....\L..g..I...................2.?...Oq.w....K9`..J%.../.!.L.jKm(3.>'.#...33S..l..Z...!I.d...-.L..m\....m...Fs.Fa.NTf.#$7..H.y.._.{.....=...u..?V<...>.....SO.....p......MM.F}......7o..p_.-fD.i!..m.U...{..P.-..y.R.l.^..{..m$IT.....n......$I..1.?...G.z.}..8^.F.^.....(.H..5...(.18V..4.$G.<......=}...0..Ms...b....7...tR....dd5...!.u..$/&.^{...1..F..W..p....QK.9eK..;!.ts.(.z.......c.B....q./..D.!.Bn>;.=L..D#..k.{.e._.y...F.k.....'<..?.YH..8..3..........e.Esq.

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2353)
Category:	dropped
Size (bytes):	640560
Entropy (8bit):	5.569838958124769
Encrypted:	false
SSDEEP:	12288:h4+ClnP/Puis/JBRkDMtgI2hU7wFpgmde/bmUwgPwkuRIG2akxOYcH+YnluAD3nj:h4+ClnP/Puis/JBRkDMKI2hU7wFpgmd1
MD5:	CD475F85231C5479978B3D6935E4A700
SHA1:	DA6AF371FF3B499DAA60C24A7CD67AC7A24012AC
SHA-256:	30580B24660C7E41F9F427E3EAD752EA2DF56CDF5F468BE3393613C45332C9A8
SHA-512:	70360D53BA83EA5792E057A37821000955D0826084DA59816D2B7363CB20DD9E98DCCFE4A6DA3E7B80B546DC007BD3FACDDB47DD5C782B6EB32D41AC2C290F22
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	55036
Entropy (8bit):	7.993796361635342
Encrypted:	true
SSDEEP:	1536:A4J76bdOOz1EXyfa0yXhMoMGjHF8d/r/H66IG:LB782yi00hi/rf68
MD5:	EA9B540836CE96D89485CF86233D773D
SHA1:	AE2E5E265301344327DF771668520541A446751C
SHA-256:	440600F95B3A65833F1B2CE47DEC75D98BC2E6B59FEFD0C19E2057931CC79906
SHA-512:	8DB60850DFE3A8B38B90096DC2E5FE6D4A5B26A91C61ABB84B5889387665333EAAB0D8BFACA96F0CBFE3EF66E525AB54418BC52C70C8EA39F5C20073A53F67B0
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/NpvhVORMiao4cXfxSz4j4gq_F_IMkFTTAImQdHkRL11IMlaAGVMOEbVSuO_DDMZM4IUEUi-M3OQ=w648-h364-rw
Preview:	RIFF....WEBPVP8L..../..Z..Hl.H.$H6....?...O ....q^...3.....\.....v!..Lx...A....j.g.....&py.e..0...@...+..t`..H.B.3.V!..KA..@..0...s)t..w[.;.&.j..m...$.qH.,2(T@ '.p_>B6s.G_HL^~Z...f...$.C...S.0.-...VJv.......$..+[.......w...........p.8Y.a.Q....a..E..:...J.d...03..M.......\z.GGKO[W.....i..Um... >.....!2.O..U.._IV..Q..Dm..y.n$.....OH.....o..<....z....r..v.._.h.)@.D..(..:..S.W.O...f.].;......a..d0.L.0pv.3Zv..m....0...a.4d....'a3...G,.....y.G......+Z..#.M....Q....vv..m._.... i....6....O..Q...e.h...~j.4.\|.d.OZ.7........f.7{.u.Y6.k.P...EH..{Y..@_..~m....Ze......w.G...l......=?......w......PT=.4.....\|.5...;.I.?.z.r...\|.......@.j...g....(.,.j.~T...M..`Q.iR-Ty...j/....@..........T. p...^._..:....W..<.?Y...4....T..&...Un.....]t.t.].....{..&........F.-.iT.jR....<. a2Z.J.W.'..-/.6L.0.3.JX..C....h...@Mw....!a.6.$.as...;..d..}g.`.....-.,7....@.....)...$O....P..U..o5j.6...t......#..3sg..Y..*.u3...pz...>..>...'.m.w0....-I9,.ek..7o..]...4.\|..x\.0.d..t.............I..

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	43154
Entropy (8bit):	7.995866272293357
Encrypted:	true
SSDEEP:	768:ElN7DtKhc4Sc4y0o6T0h2/EmDAd2IfPQMiEsATbbiwLi7Mz+:4DU9SS/6Tb/k1fzsATq8ih
MD5:	FF756D379749E915D9EB860B9E092C45
SHA1:	0A6AE2682668DB8CB5A64B86968F2375591CC8B3
SHA-256:	42041082A8FB1C5D823C48A728294A1878A15B4B318D5564DB6232B8F576EAB1
SHA-512:	27D572D8ECDDFB28EA61B803F7C2E697D230E984FBF9E7858D8EFF5025FB020AEB8015148BC1773C01173DC5960E6B695FF599247FBAF12CADE70084252D3DE7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/sj8PUk54GEgDfm4Ya37Zg_Br0jG0jEU-4p2mw5-vwGM63a384TPHAO-3mzlOSYEQcEp1=w648-h364-rw
Preview:	RIFF....WEBPVP8 ~...0......l.>=..E"!.!#5..@..id...?..[.....j.....K..7.................f.O..q....c.....a.p..t.$.....?...K~c.../ c.A........M.y...7k.............S._z..x..i.o.........'..W..}.........[..x".S.....?.?.?..Q.K..}..V.....?p..................[......?....p.h..5...C.\|8f.x.......7?.....A...o..!..f.a.x...2]....var.WP.x;T..&.P..X...#.!Rr.~.........,.J..IF..e[..Q.....E.._T..H@. ...E...Uzi?>.DY."..n.U...uZ..).PL.&.........dU.......7..&.....e...... Q.o..>#..EGZ.2_o.%..R.b.Z.:.I...rg..M..~..M.Q............p. .a.c.-P...V...0W+.....Q...d.....,.....Aq..6....0.~hoK...~.k...hL..F..........kj..E"...3..L..X...!....\..h.#..A6~..x1.....1...E..E..s_. .Y`...+.\|g"..;.@..W....@\...+.H(.Qv8s..C./>.....V.+......../..Z..............I..f...t....<......V,5-.{......E...O....T-8.k..t..G.40.....{..EW.ep.#.p..-..;.........Hj........G.B3..J.Q../.@....OB...e.)[ ....?..o..2.)}"}......9.;Jc..;...]^......b8X;..:.(.U...P./..>G....lk......6...........sYX}G.KhZ.

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2200)
Category:	downloaded
Size (bytes):	37846
Entropy (8bit):	5.60196584633895
Encrypted:	false
SSDEEP:	768:ISIUjbd0dI3wiyrclD62d242s5X8RSQYfLrdxu20MGMO09pCyrS7kL7Pl9kr8vw3:CSUMNpCyrS7kLnPsGuHhcLQdf
MD5:	112F585E196C824C46685651C3434483
SHA1:	E76A0B85F4CD5913129C926ED51FBAD9DBF6E6F4
SHA-256:	6B009CA44234FA3A35606B870A2AE908E90982A844FCF4A1C01AB16E5C3F60A4
SHA-512:	87227C55DC9E2CB08D5991A240E90937C1439DABCC4353302EFEA86D7FA38210CA7DC5E9D0F802173D2739F7360DB1E42F17C826F9EE9170150D1477E84F81EE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.x03QJGGLav0.2021.O/ck=boq-play.PlayStoreUi.a_cLFkfmVbI.L.B1.O/am=R7cxBKPrO5gEBvgHj4Ox/d=1/exm=A1yn5d,A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,C7e1Kc,CKm2Wb,DRmmld,EEDORb,EFQ78c,ElYdAc,FCpbqb,FoxcOd,FuzVxc,GjTCAc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,J22eF,JH2zc,JNoxi,JWUKXe,KUM7Z,Kfp2G,L1AAkb,LCkxpb,LEikZe,LRovxc,LcQwud,Lkzi5d,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkwaS,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P6sQOc,PAQZbb,PH175e,PHUIyb,PRm2u,PZ1hre,PrPYRd,QIhFr,RBsfwb,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,UINLVc,ULFnWe,UUJqVe,UZStuc,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,WhJNk,Wt6vjf,XVMNvd,Y413Bc,YTx6oe,Z5uLle,ZDZcre,ZMKy0d,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,dZ05Qb,dfkSTe,e3Zld,e5qFLc,ebZ3mb,fI4Vwc,fKUV3e,fPcQoe,g6aYuf,grWkAb,gychg,hKSk3e,hc6Ubd,hhhU8,iAQMie,iLGjNb,kWgXee,kdbckd,kjKdXe,kpVlPe,kr6Nlf,lDZ2Fb,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,mmmrlc,mzLjxc,n73qwf,oEJvKc,ovKuLd,pQUyNd,pYCIec,pjICDe,pw70Gc,qczJ2b,qk5AGd,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t8OL6d,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w08zce,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xI1uef,xQtZb,xUdipf,xii62b,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developernamesearchview/ed=1/wt=2/ujg=1/rs=AB1caFX1jOXXR9DwBOHtmNYUlidduoek8w/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;sgjhQc:bQAegc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=chfSwc,jZ2Ncd"
Preview:	"use strict";_F_installCss(".H1RBrd{max-width:500px}.UIeOBe{margin-top:30px;min-height:120px}.k2cXo{margin:0}.qlYO9b{left:0;padding:12px;position:fixed;text-align:center;top:6px;width:100%;z-index:20003}.Gq7XXc{border-radius:3px;box-shadow:0 2px 40px rgba(0,0,0,.4);background-color:#fe8;border:1px solid #ba5;font-weight:500;padding:7px 14px}@media screen and (max-width:600px){.qlYO9b{box-shadow:0 2px 40px rgba(0,0,0,.4);background-color:#fe8;top:48px;width:auto}.Gq7XXc{box-shadow:none;border:0;font-size:16px;font-weight:300;padding:0}}.XWz5yd{margin-left:160px;padding:0 20px 20px}@media screen and (max-width:480px){.XWz5yd{margin-left:0;padding-left:0}}.iCVHHc{height:215px;text-align:center;width:160px}.FOYkDe{max-height:215px;max-width:160px}.Dtwbxf{font-size:28px}.Hv8szf{text-align:right}.rYrxJf,.rYrxJf:visited{color:#00838f;padding-left:3px}.F9JOfb{margin-right:3px}sentinel{}");.this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("YYmHzb");.v

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 00:49:58.156665087 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 25, 2024 00:50:00.175477028 CEST	49735	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:00.175529003 CEST	443	49735	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:00.175631046 CEST	49735	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:00.175940990 CEST	49735	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:00.175961971 CEST	443	49735	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:00.776124954 CEST	443	49735	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:00.778021097 CEST	49735	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:00.778048992 CEST	443	49735	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:00.778939962 CEST	443	49735	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:00.779031038 CEST	49735	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:00.780328989 CEST	49735	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:00.780365944 CEST	49735	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:00.780416965 CEST	443	49735	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:00.780453920 CEST	49735	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:00.780525923 CEST	49735	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:00.780875921 CEST	49737	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:00.780920982 CEST	443	49737	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:00.780997992 CEST	49737	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:00.783056021 CEST	49737	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:00.783071041 CEST	443	49737	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:01.414726019 CEST	443	49737	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:01.414983988 CEST	49737	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:01.415011883 CEST	443	49737	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:01.416089058 CEST	443	49737	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:01.416157007 CEST	49737	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:01.417534113 CEST	49737	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:01.417606115 CEST	443	49737	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:01.417679071 CEST	49737	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:01.417686939 CEST	443	49737	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:01.471096992 CEST	49737	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:01.554939032 CEST	443	49737	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:01.555020094 CEST	443	49737	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:01.555085897 CEST	49737	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:01.556221008 CEST	49737	443	192.168.2.4	104.21.39.31
Oct 25, 2024 00:50:01.556233883 CEST	443	49737	104.21.39.31	192.168.2.4
Oct 25, 2024 00:50:01.569834948 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:01.569864988 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:01.569925070 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:01.570271015 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:01.570285082 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.323854923 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 00:50:02.323892117 CEST	443	49740	142.250.185.228	192.168.2.4
Oct 25, 2024 00:50:02.323960066 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 00:50:02.324233055 CEST	49740	443	192.168.2.4	142.250.185.228
Oct 25, 2024 00:50:02.324243069 CEST	443	49740	142.250.185.228	192.168.2.4
Oct 25, 2024 00:50:02.416023016 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.416290045 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.416304111 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.416681051 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.416740894 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.417407036 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.417457104 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.418540955 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.418610096 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.418852091 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.418859959 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.471040010 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.779000044 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.779028893 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.779134989 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.779153109 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.779211044 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.787267923 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.787363052 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.795845032 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.795955896 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.894999027 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.895148039 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.898365021 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.898464918 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.902441978 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.902532101 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.920032978 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.920166016 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.928832054 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.928917885 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.946069956 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.946199894 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.946213007 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.954684019 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:02.954771042 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:02.954788923 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.001918077 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.010948896 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.011048079 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.011079073 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.011109114 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.011123896 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.011135101 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.011183023 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.011636019 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.011678934 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.011684895 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.012531042 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.012581110 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.012586117 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.014573097 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.014628887 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.014633894 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.014852047 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.014893055 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.014897108 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.019282103 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.019337893 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.019346952 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.020859957 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.020905018 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.020912886 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.026935101 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.026989937 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.026998997 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.032109976 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.032146931 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.032176018 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.032181978 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.032219887 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.037036896 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.042422056 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.042470932 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.042503119 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.042512894 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.042555094 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.048088074 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.053169012 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.053258896 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.053271055 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.053281069 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.053333044 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.058542967 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.063632965 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.063718081 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.063719034 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.063745975 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.063795090 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.069006920 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.074256897 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.074340105 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.074350119 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.074362993 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.074414968 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.080070972 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.113334894 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.113452911 CEST	49739	443	192.168.2.4	172.217.23.110
Oct 25, 2024 00:50:03.113472939 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.127108097 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.127196074 CEST	443	49739	172.217.23.110	192.168.2.4
Oct 25, 2024 00:50:03.127232075 CEST	49739	443	192.168.2.4	172.217.23.110

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 00:50:00.145500898 CEST	192.168.2.4	1.1.1.1	0x7930	Standard query (0)	www.spectrl.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:00.146291018 CEST	192.168.2.4	1.1.1.1	0xe078	Standard query (0)	www.spectrl.com	65	IN (0x0001)	false
Oct 25, 2024 00:50:00.162278891 CEST	192.168.2.4	1.1.1.1	0xd50a	Standard query (0)	www.spectrl.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:00.162506104 CEST	192.168.2.4	1.1.1.1	0x94fb	Standard query (0)	www.spectrl.com	65	IN (0x0001)	false
Oct 25, 2024 00:50:01.559730053 CEST	192.168.2.4	1.1.1.1	0x2563	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:01.560144901 CEST	192.168.2.4	1.1.1.1	0x52eb	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 25, 2024 00:50:02.314161062 CEST	192.168.2.4	1.1.1.1	0xbba2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:02.314352036 CEST	192.168.2.4	1.1.1.1	0x3e2e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 00:50:03.835203886 CEST	192.168.2.4	1.1.1.1	0x1aa5	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.835364103 CEST	192.168.2.4	1.1.1.1	0x3676	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 25, 2024 00:50:03.835800886 CEST	192.168.2.4	1.1.1.1	0x96f6	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.835936069 CEST	192.168.2.4	1.1.1.1	0xa7d4	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Oct 25, 2024 00:50:05.025130033 CEST	192.168.2.4	1.1.1.1	0xd28b	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.025418043 CEST	192.168.2.4	1.1.1.1	0x408f	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 25, 2024 00:50:05.040569067 CEST	192.168.2.4	1.1.1.1	0xcaa5	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.040749073 CEST	192.168.2.4	1.1.1.1	0x2669	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Oct 25, 2024 00:50:08.415170908 CEST	192.168.2.4	1.1.1.1	0xf4b8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:08.415724993 CEST	192.168.2.4	1.1.1.1	0xfadf	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 00:50:12.465557098 CEST	192.168.2.4	1.1.1.1	0xe938	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:12.465920925 CEST	192.168.2.4	1.1.1.1	0xe750	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 25, 2024 00:51:10.431240082 CEST	192.168.2.4	1.1.1.1	0xedd2	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:51:10.434802055 CEST	192.168.2.4	1.1.1.1	0x2144	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 00:50:00.159468889 CEST	1.1.1.1	192.168.2.4	0xe078	No error (0)	www.spectrl.com			65	IN (0x0001)	false
Oct 25, 2024 00:50:00.159491062 CEST	1.1.1.1	192.168.2.4	0x7930	No error (0)	www.spectrl.com		104.21.39.31	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:00.159491062 CEST	1.1.1.1	192.168.2.4	0x7930	No error (0)	www.spectrl.com		172.67.142.212	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:00.174690008 CEST	1.1.1.1	192.168.2.4	0xd50a	No error (0)	www.spectrl.com		104.21.39.31	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:00.174690008 CEST	1.1.1.1	192.168.2.4	0xd50a	No error (0)	www.spectrl.com		172.67.142.212	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:00.174818039 CEST	1.1.1.1	192.168.2.4	0x94fb	No error (0)	www.spectrl.com			65	IN (0x0001)	false
Oct 25, 2024 00:50:01.568654060 CEST	1.1.1.1	192.168.2.4	0x2563	No error (0)	play.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:02.322313070 CEST	1.1.1.1	192.168.2.4	0xbba2	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:02.322326899 CEST	1.1.1.1	192.168.2.4	0x3e2e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 00:50:03.844333887 CEST	1.1.1.1	192.168.2.4	0x96f6	No error (0)	play-lh.googleusercontent.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:03.844379902 CEST	1.1.1.1	192.168.2.4	0x1aa5	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.032339096 CEST	1.1.1.1	192.168.2.4	0xd28b	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:05.048265934 CEST	1.1.1.1	192.168.2.4	0xcaa5	No error (0)	play-lh.googleusercontent.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:08.423793077 CEST	1.1.1.1	192.168.2.4	0xf4b8	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:08.424412966 CEST	1.1.1.1	192.168.2.4	0xfadf	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 00:50:13.057261944 CEST	1.1.1.1	192.168.2.4	0xe938	No error (0)	play.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:13.973568916 CEST	1.1.1.1	192.168.2.4	0xe842	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:13.973568916 CEST	1.1.1.1	192.168.2.4	0xe842	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:15.906474113 CEST	1.1.1.1	192.168.2.4	0x49ce	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:50:15.906474113 CEST	1.1.1.1	192.168.2.4	0x49ce	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:28.395986080 CEST	1.1.1.1	192.168.2.4	0x1b45	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:50:28.395986080 CEST	1.1.1.1	192.168.2.4	0x1b45	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:50:45.147898912 CEST	1.1.1.1	192.168.2.4	0xffbf	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:50:45.147898912 CEST	1.1.1.1	192.168.2.4	0xffbf	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:51:10.438762903 CEST	1.1.1.1	192.168.2.4	0xedd2	No error (0)	play.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:51:11.526726961 CEST	1.1.1.1	192.168.2.4	0xc95e	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:51:11.526726961 CEST	1.1.1.1	192.168.2.4	0xc95e	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	104.21.39.31	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:01 UTC	658	OUT	GET / HTTP/1.1 Host: www.spectrl.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:01 UTC	655	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 24 Oct 2024 22:50:01 GMT Content-Type: text/html Content-Length: 167 Connection: close Cache-Control: max-age=3600 Expires: Thu, 24 Oct 2024 23:50:01 GMT Location: https://play.google.com/store/apps/developer?id=SPECTRL Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CT5M4%2FMIBs8LVlYegpvfakz%2BqiKLbdv%2FSOWPqY2I9aqjExMH%2BTOih8Bb9hR3izwvO4EZHU1AoYLQ0bYGcT8gB%2FlHduysz1N7GzcX0JASq%2FcWu3vtzjcm0udnQ%2Fk2nd3a1V0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d85ff4a66479f-DFW
2024-10-24 22:50:01 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	172.217.23.110	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:02 UTC	689	OUT	GET /store/apps/developer?id=SPECTRL HTTP/1.1 Host: play.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:02 UTC	4019	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:02 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-site Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-73HYs1baYNB-HP5sI7VcdQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/PlayStoreUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport/allowlist Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.google.com/js/bg/ https://www.gstatic.com/_/boq-play/_/js/k=boq [TRUNCATED] Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/PlayStoreUi/web-reports?context=eJzj8tHikmLw0JBikPj6kkkNiJ3SZ7AGAHHrzXOsk4E46d951gIgNlS4xGoPxKo9l1iNgbhI4gprAxDP6b_HugiIY2ffYxXi4Zg17_UONoEXG_dtYVKST8ovjC_ISawszSxOLSpLLYo3MjAyMTQwMtIzMIsvMAQA0yAvqw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA; expires=Fri, 25-Apr-2025 22:50:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:02 UTC	4019	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 Data Ascii: 8000<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://play.google.com/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><meta name="viewport" content="width=device-width, initial-scale=1"><meta
2024-10-24 22:50:02 UTC	4019	IN	Data Raw: 2c 34 32 2c 31 33 39 2c 36 33 2c 31 36 39 2c 39 35 2c 31 35 35 5d 5d 5d 2c 5b 5b 37 2c 31 30 5d 2c 5b 5b 31 2c 37 33 2c 39 36 2c 31 30 33 2c 39 37 2c 35 38 2c 35 30 2c 39 32 2c 35 32 2c 31 31 32 2c 36 39 2c 31 39 2c 33 31 2c 31 30 31 2c 31 32 33 2c 37 34 2c 34 39 2c 38 30 2c 32 30 2c 31 30 2c 31 34 2c 37 39 2c 34 33 2c 34 32 2c 31 33 39 2c 36 33 2c 31 36 39 2c 39 35 2c 31 35 35 5d 5d 5d 2c 5b 5b 37 2c 31 32 32 5d 2c 5b 5b 31 2c 37 33 2c 39 36 2c 31 30 33 2c 39 37 2c 35 38 2c 35 30 2c 39 32 2c 35 32 2c 31 31 32 2c 36 39 2c 31 39 2c 33 31 2c 31 30 31 2c 31 32 33 2c 37 34 2c 34 39 2c 38 30 2c 32 30 2c 31 30 2c 31 34 2c 37 39 2c 34 33 2c 34 32 2c 31 33 39 2c 36 33 2c 31 36 39 2c 39 35 2c 31 35 35 5d 5d 5d 2c 5b 5b 37 2c 37 32 5d 2c 5b 5b 31 2c 37 33 2c 39 36 Data Ascii: ,42,139,63,169,95,155]]],[[7,10],[[1,73,96,103,97,58,50,92,52,112,69,19,31,101,123,74,49,80,20,10,14,79,43,42,139,63,169,95,155]]],[[7,122],[[1,73,96,103,97,58,50,92,52,112,69,19,31,101,123,74,49,80,20,10,14,79,43,42,139,63,169,95,155]]],[[7,72],[[1,73,96
2024-10-24 22:50:02 UTC	4019	IN	Data Raw: 2c 31 30 5d 5d 5d 2c 5b 5b 31 37 2c 36 35 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 35 2c 31 33 2c 33 31 2c 35 2c 34 31 2c 32 37 2c 38 2c 31 34 2c 31 30 5d 5d 5d 2c 5b 5b 31 37 2c 31 31 30 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 35 2c 31 33 2c 33 31 2c 35 2c 34 31 2c 32 37 2c 38 2c 31 34 2c 31 30 5d 5d 5d 2c 5b 5b 31 37 2c 31 31 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 35 2c 31 33 2c 33 31 2c 35 2c 34 31 2c 32 37 2c 38 2c 31 34 2c 31 30 5d 5d 5d 2c 5b 5b 31 37 2c 35 36 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 35 2c 31 33 2c 33 31 2c 35 2c 34 31 2c 32 37 2c 38 2c 31 34 2c 31 30 5d 5d 5d 2c 5b 5b 31 37 2c 35 35 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 35 2c 31 33 2c 33 31 2c 35 2c 34 31 2c 32 37 2c 38 2c 31 34 2c 31 30 5d 5d 5d 2c 5b 5b 31 37 2c 39 36 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 35 2c 31 33 Data Ascii: ,10]]],[[17,65],[[1,7,9,25,13,31,5,41,27,8,14,10]]],[[17,110],[[1,7,9,25,13,31,5,41,27,8,14,10]]],[[17,11],[[1,7,9,25,13,31,5,41,27,8,14,10]]],[[17,56],[[1,7,9,25,13,31,5,41,27,8,14,10]]],[[17,55],[[1,7,9,25,13,31,5,41,27,8,14,10]]],[[17,96],[[1,7,9,25,13
2024-10-24 22:50:02 UTC	4019	IN	Data Raw: 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 33 31 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c 38 2c 31 2c 31 30 2c 31 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 31 30 34 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c 38 2c 31 2c 31 30 2c 31 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 39 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c 38 2c 31 2c 31 30 2c 31 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 38 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c 38 2c 31 2c 31 30 2c 31 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 32 37 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c 38 2c 31 2c 31 30 2c 31 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 31 32 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c 38 2c 31 2c 31 30 2c 31 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 36 35 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c Data Ascii: 1,5]]],[[44,31],[[3,4,9,6,7,2,8,1,10,11,5]]],[[44,104],[[3,4,9,6,7,2,8,1,10,11,5]]],[[44,9],[[3,4,9,6,7,2,8,1,10,11,5]]],[[44,8],[[3,4,9,6,7,2,8,1,10,11,5]]],[[44,27],[[3,4,9,6,7,2,8,1,10,11,5]]],[[44,12],[[3,4,9,6,7,2,8,1,10,11,5]]],[[44,65],[[3,4,9,6,7,
2024-10-24 22:50:02 UTC	4019	IN	Data Raw: 31 39 2c 32 31 2c 31 37 2c 31 35 2c 31 32 2c 31 36 2c 32 30 5d 5d 5d 2c 5b 5b 34 2c 31 30 5d 2c 5b 5b 31 2c 33 2c 35 2c 34 2c 37 2c 36 2c 31 31 2c 31 39 2c 32 31 2c 31 37 2c 31 35 2c 31 32 2c 31 36 2c 32 30 5d 5d 5d 2c 5b 5b 34 2c 31 32 32 5d 2c 5b 5b 31 2c 33 2c 35 2c 34 2c 37 2c 36 2c 31 31 2c 31 39 2c 32 31 2c 31 37 2c 31 35 2c 31 32 2c 31 36 2c 32 30 5d 5d 5d 2c 5b 5b 34 2c 37 32 5d 2c 5b 5b 31 2c 33 2c 35 2c 34 2c 37 2c 36 2c 31 31 2c 31 39 2c 32 31 2c 31 37 2c 31 35 2c 31 32 2c 31 36 2c 32 30 5d 5d 5d 2c 5b 5b 34 2c 37 31 5d 2c 5b 5b 31 2c 33 2c 35 2c 34 2c 37 2c 36 2c 31 31 2c 31 39 2c 32 31 2c 31 37 2c 31 35 2c 31 32 2c 31 36 2c 32 30 5d 5d 5d 2c 5b 5b 34 2c 36 34 5d 2c 5b 5b 31 2c 33 2c 35 2c 34 2c 37 2c 36 2c 31 31 2c 31 39 2c 32 31 2c 31 37 2c Data Ascii: 19,21,17,15,12,16,20]]],[[4,10],[[1,3,5,4,7,6,11,19,21,17,15,12,16,20]]],[[4,122],[[1,3,5,4,7,6,11,19,21,17,15,12,16,20]]],[[4,72],[[1,3,5,4,7,6,11,19,21,17,15,12,16,20]]],[[4,71],[[1,3,5,4,7,6,11,19,21,17,15,12,16,20]]],[[4,64],[[1,3,5,4,7,6,11,19,21,17,
2024-10-24 22:50:02 UTC	4019	IN	Data Raw: 62 66 63 5c 22 5d 2c 5b 34 35 35 38 35 35 32 31 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 74 62 39 4c 54 5c 22 5d 2c 5b 34 35 35 38 35 35 31 39 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 4f 65 62 5a 63 64 5c 22 5d 2c 5b 34 35 35 38 35 35 32 36 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 57 75 54 50 6f 62 5c 22 5d 2c 5b 34 35 35 33 32 34 32 35 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 45 59 6c 45 6a 64 5c 22 5d 2c 5b 34 35 35 38 35 35 33 31 2c 33 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 52 42 42 65 6c 62 5c 22 5d 2c 5b 34 35 35 38 35 35 32 33 2c 6e 75 6c 6c 2c 66 61 Data Ascii: bfc\"],[45585521,null,true,null,null,null,\"tb9LT\"],[45585519,null,true,null,null,null,\"OebZcd\"],[45585526,null,true,null,null,null,\"WuTPob\"],[45532425,null,true,null,null,null,\"EYlEjd\"],[45585531,3,null,null,null,null,\"RBBelb\"],[45585523,null,fa
2024-10-24 22:50:02 UTC	4019	IN	Data Raw: 70 73 3a 2f 2f 63 61 6c 65 6e 64 61 72 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 22 2c 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 22 5d 5d 5d 2c 5c 22 4b 46 6a 4a 68 63 5c 22 5d 2c 5b 34 35 36 31 36 33 33 30 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 47 49 70 64 34 63 5c 22 5d 2c 5b 34 35 35 33 32 34 32 38 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 42 33 6e 30 52 65 5c 22 5d 2c 5b 34 35 35 38 35 35 34 39 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 53 4d 34 36 7a 62 5c 22 5d 2c 5b 34 35 36 31 35 34 39 37 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5c 22 74 79 70 65 2e 67 6f 6f 67 6c Data Ascii: ps://calendar.google.com\",\"https://www.google.com\"]]],\"KFjJhc\"],[45616330,null,true,null,null,null,\"GIpd4c\"],[45532428,null,false,null,null,null,\"B3n0Re\"],[45585549,null,false,null,null,null,\"SM46zb\"],[45615497,null,null,null,null,[\"type.googl
2024-10-24 22:50:02 UTC	4019	IN	Data Raw: 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 43 49 6f 74 43 64 5c 22 5d 2c 5b 34 35 35 38 35 35 35 36 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 50 56 32 6d 6f 65 5c 22 5d 2c 5b 34 35 35 33 32 34 34 32 2c 31 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 6d 44 56 78 56 5c 22 5d 2c 5b 34 35 35 33 32 34 32 37 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 76 65 33 65 61 62 5c 22 5d 2c 5b 34 35 35 38 35 36 30 31 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 74 57 33 6f 30 64 5c 22 5d 2c 5b 34 35 36 31 37 34 38 33 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 63 6b 71 44 49 5c 22 5d 2c Data Ascii: null,null,\"CIotCd\"],[45585556,null,true,null,null,null,\"PV2moe\"],[45532442,15,null,null,null,null,\"mDVxV\"],[45532427,null,false,null,null,null,\"ve3eab\"],[45585601,null,false,null,null,null,\"tW3o0d\"],[45617483,null,true,null,null,null,\"ckqDI\"],
2024-10-24 22:50:02 UTC	624	IN	Data Raw: 30 38 5d 2c 5b 5b 31 2c 37 33 2c 39 36 2c 31 30 33 2c 39 37 2c 35 38 2c 35 30 2c 39 32 2c 35 32 2c 31 31 32 2c 36 39 2c 31 39 2c 33 31 2c 31 30 31 2c 31 32 33 2c 37 34 2c 34 39 2c 38 30 2c 32 30 2c 31 30 2c 31 34 2c 37 39 2c 34 33 2c 34 32 2c 31 33 39 2c 36 33 2c 31 36 39 2c 39 35 2c 31 35 35 5d 5d 5d 2c 5b 5b 37 2c 31 30 30 5d 2c 5b 5b 31 2c 37 33 2c 39 36 2c 31 30 33 2c 39 37 2c 35 38 2c 35 30 2c 39 32 2c 35 32 2c 31 31 32 2c 36 39 2c 31 39 2c 33 31 2c 31 30 31 2c 31 32 33 2c 37 34 2c 34 39 2c 38 30 2c 32 30 2c 31 30 2c 31 34 2c 37 39 2c 34 33 2c 34 32 2c 31 33 39 2c 36 33 2c 31 36 39 2c 39 35 2c 31 35 35 5d 5d 5d 2c 5b 5b 37 2c 31 39 34 5d 2c 5b 5b 31 2c 37 33 2c 39 36 2c 31 30 33 2c 39 37 2c 35 38 2c 35 30 2c 39 32 2c 35 32 2c 31 31 32 2c 36 39 2c 31 Data Ascii: 08],[[1,73,96,103,97,58,50,92,52,112,69,19,31,101,123,74,49,80,20,10,14,79,43,42,139,63,169,95,155]]],[[7,100],[[1,73,96,103,97,58,50,92,52,112,69,19,31,101,123,74,49,80,20,10,14,79,43,42,139,63,169,95,155]]],[[7,194],[[1,73,96,103,97,58,50,92,52,112,69,1
2024-10-24 22:50:02 UTC	817	IN	Data Raw: 33 32 61 0d 0a 2c 31 36 39 2c 39 35 2c 31 35 35 5d 5d 5d 2c 5b 5b 39 2c 36 38 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 31 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 33 31 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 31 30 34 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 39 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 38 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 Data Ascii: 32a,169,95,155]]],[[9,68],[[1,7,9,24,12,31,5,15,27,8,13,10]]],[[9,1],[[1,7,9,24,12,31,5,15,27,8,13,10]]],[[9,31],[[1,7,9,24,12,31,5,15,27,8,13,10]]],[[9,104],[[1,7,9,24,12,31,5,15,27,8,13,10]]],[[9,9],[[1,7,9,24,12,31,5,15,27,8,13,10]]],[[9,8],[[1,7,9,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49753	142.250.186.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:04 UTC	1028	OUT	GET /vi/k6pS5_C1zPg/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:04 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 8362 Date: Thu, 24 Oct 2024 22:50:04 GMT Expires: Fri, 25 Oct 2024 00:50:04 GMT Cache-Control: public, max-age=7200 ETag: "1625205600" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:04 UTC	732	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 17 16 1a 17 15 17 1d 1d 17 1d 1d 1f 25 1e 1e 1d 1e 26 20 25 22 1e 2e 27 31 30 2d 27 2d 2f 35 3d 50 42 35 38 4b 39 2d 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 30 1b 1b 30 58 3f 39 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 5d 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 05 07 ff c4 00 3f 10 00 02 01 02 01 05 0e 05 04 00 07 01 01 01 00 00 00 01 02 03 11 12 04 21 31 51 a1 05 06 13 14 22 34 41 52 61 71 73 91 b1 b2 15 23 72 81 d1 32 33 Data Ascii: JFIF%& %".'10-'-/5=PB58K9--EaEKSV[\[2AemdXlPY[W00X?9=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW]WWWWWh"?!1Q"4ARaqs#r23
2024-10-24 22:50:04 UTC	1378	IN	Data Raw: 41 91 6e de 53 42 8c 68 c2 9d 27 08 a6 93 92 77 ce db eb 76 9e 5d 2a 72 82 92 4b f5 45 c5 f7 5d 3f e9 0e a8 2b 86 fd f6 d7 ab b9 ea 34 a3 55 4e e9 b6 b9 51 c0 9b 51 bb c2 db e5 67 cd a1 67 b1 b3 2d c6 4a 78 1d 47 65 19 37 3c 30 b5 e3 87 92 be 65 af ca 5a 5c 7a 35 96 9b 9c a3 85 d3 85 ba 6c ad 8a 58 70 a9 3c fa 52 7d 16 2d 2a 93 76 4e 95 3c 3c ab c7 0a 51 6e 56 bb b2 79 9f 25 68 b6 8e f2 37 09 f4 6c f0 f7 4e 8b 82 71 69 a7 19 b5 ca 56 79 af a5 74 33 ce 3d ad dc 52 71 e1 27 fa a5 52 ed f6 bb b3 c5 3b af 86 2c f5 e9 be 80 01 d2 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 f7 03 f6 65 f5 bf 44 78 07 43 bd ff 00 d9 97 d6 fd 11 76 1f 73 2f 33 e3 7b 74 72 19 4e 2a 49 c6 cf 5d cb fc 36 7d 68 ed fc 1b b9 17 ed 47 Data Ascii: AnSBh'wv]rKE]?+4UNQQgg-JxGe7<0eZ\z5lXp<R}-vN<<QnVy%h7lNqiVyt3=Rq'R;,eDxCvs/3{trN*I]6}hG
2024-10-24 22:50:04 UTC	1378	IN	Data Raw: 0c 08 ba 25 a3 0e e5 f5 9d 52 aa a5 7c ca ed ea 46 49 e4 73 8c 71 4a 12 8c 75 b4 d0 85 49 46 f8 64 d5 f4 d9 b5 73 35 35 f2 6a bf f3 53 ff 00 f4 22 5c 5a f6 86 ae 04 5e 96 4c e6 ed 08 b7 6d 36 e8 5d af a0 19 eb 54 58 63 08 be 4a 49 be d9 bd 2d fa 7d 88 d9 6b db c4 31 cb 22 9a 4d b8 e6 5a 5c 5a 95 bb ed a0 c5 c1 a3 2d 39 b8 49 4a 2e cd 68 66 5c aa 95 ab 4a 31 5f cb 32 d5 7e 8d a3 68 8b da 27 52 d5 e0 d1 9d 64 15 1a 4d 42 56 6a eb b8 ad 48 38 b7 19 2b 49 36 9a ed 33 65 c9 70 b2 5a b0 af 28 a5 fd 0d fe 51 37 b6 e3 a6 58 e5 90 ce 29 b7 06 92 d2 62 8d 1b b4 92 6d b7 64 bb 49 c2 6c 64 2b e6 c3 b1 df c9 5f fa 23 7b 92 6f 68 89 99 95 3e 1d 53 a9 2d 85 6a 64 92 82 bc a2 d2 ed 2b 60 90 9b 11 6b fd e7 fd 7f ea bc 1a 1c 1a 2e 4d 8e 7a a5 d7 54 a9 c1 a1 c1 a2 e0 8e a9 Data Ascii: %R\|FIsqJuIFds55jS"\Z^Lm6]TXcJI-}k1"MZ\Z-9IJ.hf\J1_2~h'RdMBVjH8+I63epZ(Q7X)bmdIld+_#{oh>S-jd+`k.MzT
2024-10-24 22:50:04 UTC	1378	IN	Data Raw: 16 3e d9 1c 69 e9 71 be 37 95 ca f9 00 01 a5 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3a ed e9 f3 69 f8 b2 f6 c4 e4 4e b3 7a bc da 7e 2b f6 c4 29 cf ed 7b 70 5d 25 c2 45 e9 24 e4 b1 3b 47 a5 a3 cc bd ba ed b7 bf c7 c5 e8 e2 8a 7e 15 b0 47 b1 5f 24 55 a9 2e 2f 67 83 ed 7f f2 a5 ff 00 6e 79 29 11 7a cd 5d e3 c9 17 80 93 61 49 a5 4d 24 9a 7a 55 93 bf 29 93 c0 47 3a fa ec f1 2d 0a f6 cd d3 a0 8d 23 d4 d7 96 b0 36 a9 d3 8e 28 38 dd f2 a1 77 75 af 3d d6 94 44 21 17 69 24 ff 00 9a b3 77 fe 37 b8 e9 47 a8 d6 06 6a 14 f1 5d 5e df a5 79 c9 23 2d 28 c6 f8 92 92 cf 25 9d a7 9b 0b ec 22 2b b4 cd f4 d5 06 cc 21 0b 62 b3 b3 84 b3 5f 43 5f 63 04 62 9e 97 6f b5 c8 98 d1 16 da a0 be 15 74 af 75 af 41 9d bb ca a4 5a 58 52 Data Ascii: >iq7:iNz~+){p]%E$;G~G_$U./gny)z]aIM$zU)G:-#6(8wu=D!i$w7Gj]^y#-(%"+!b_C_cbotuAZXR
2024-10-24 22:50:04 UTC	1378	IN	Data Raw: e5 1c 8f 63 d3 c2 4d 8b d8 9b 1a 9e 6e d8 f0 92 a2 6c 2c 96 a3 fe 0f ef 65 ea 52 74 a5 1f d5 16 bb c8 da 7b a9 84 8c 26 4b 0b 04 6d 8f 09 18 4c b6 22 c0 db 16 12 1c 4c b8 48 c2 41 b6 2c 24 38 99 5c 48 c2 0d b0 e1 21 c4 cc e2 55 c4 27 6c 2e 26 6c 9b 2b a9 4b f4 bb c7 aa f4 7d b5 10 e2 55 c4 e2 f4 ad e3 56 8d c3 aa 64 b5 27 75 9d 4b da c9 72 e8 54 cd fa 65 d5 7f d6 b3 68 e6 9c 4d cc 97 74 65 0e 4c f9 51 da bf 27 93 c8 fa 74 c7 ea c5 fb 3d 7e 3f d4 a2 7f 4e 5f dd ec 82 94 aa c6 6a f0 77 45 cf 26 62 62 75 2f 56 2d 16 8d c2 05 89 07 0e 90 48 00 73 db f5 e6 b0 f1 a3 ed 91 c4 1d be fd b9 ac 3c 68 fb 64 71 07 b3 c2 f8 9e 77 23 de 00 0d 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 a7 de ca f9 12 f1 1f b6 27 30 75 Data Ascii: cMnl,eRt{&KmL"LHA,$8\H!U'l.&l+K}UVd'uKrTehMteLQ't=~?N_jwE&bbu/V-Hs<hdqw#'0u
2024-10-24 22:50:04 UTC	1378	IN	Data Raw: 92 03 9d a0 82 40 46 d0 c8 24 58 83 6a 91 62 c4 10 8d ab 62 0b 11 60 6d e3 6f 97 f6 23 e2 2f 6c 8e 68 e9 b7 cb fb 11 f1 17 b6 47 32 51 7f 2f 6f 83 f1 00 03 86 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb 77 a7 cd a7 e2 bf 6c 4e 48 eb b7 a7 cd a7 e2 cb db 12 cc 5e e6 5e 5f c6 f6 c1 59 e8 76 35 38 76 fa 5f 99 b6 b4 ea 79 95 a7 53 74 82 94 25 78 47 bb d0 c8 70 ae 50 01 64 ae ec 73 33 11 1b 94 79 ec 88 c1 cb 34 53 6f b0 bb c9 e6 bf 8b fb 59 fa 17 e1 92 56 59 96 a2 1d 7e d3 cd b7 3a 77 fa 63 b3 54 71 a3 5d e5 80 19 2a 4b 16 7e 9d 7a cc 66 ec 59 63 2d 77 0c d9 29 34 9d 04 17 a7 07 27 64 6d c6 8c 57 45 fb f3 96 4c e9 15 a4 cb 44 1b b3 a1 17 d1 6e d5 98 d3 a9 07 17 67 ff 00 a8 8d a2 d4 9a aa 41 25 25 36 9d b4 33 Data Ascii: @F$Xjbb`mo#/lhG2Q/owlNH^^_Yv58v_ySt%xGpPds3y4SoYVY~:wcTq]*K~zfYc-w)4'dmWELDngA%%63
2024-10-24 22:50:04 UTC	740	IN	Data Raw: ad db a1 99 ab 65 b2 92 b2 e4 ae cd 3e 67 9d c6 e3 a9 ec 23 8d c7 53 d8 67 ff 00 f3 e2 ea ea d7 75 fe be 7e 9e 8d f6 6d 5c 29 6a 35 78 dc 75 3d 83 8d c7 53 d8 68 db 37 45 9b 58 de b7 e6 c6 37 ad f9 b3 57 8d c7 53 d8 47 1a 8e a7 b0 8e c6 ae db c6 f5 bf 36 45 cd 5e 35 1d 4f 60 e3 51 d4 f6 0e c4 d6 d3 e5 a5 be 67 f2 23 e2 2f 6c 8e 60 e8 77 c1 5d 4a 8c 52 bf ee 2d 3d cc e7 8a 6f e5 ec 70 a3 58 80 01 cb 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7b 7b 8b 2b 52 97 d6 fd 11 e2 1e b6 e5 4a d4 df d4 fd 11 d5 7c a9 cd ed 7a 98 86 23 07 08 38 42 dd b1 f4 b3 e2 0e 66 0e 10 b5 2a f8 27 19 59 3c 2d 3b 49 5d 3b 74 31 b4 74 b3 d4 8c a0 d2 92 69 b4 9d 9e 9b 3d 05 31 1b 59 4e e9 70 95 5b a5 46 9c 9c da 76 95 15 29 e2 7a 57 Data Ascii: e>g#Sgu~m\)j5xu=Sh7EX7WSG6E^5O`Qg#/l`w]JR-=opX`{{+RJ\|z#8Bf*'Y<-;I];t1ti=1YNp[Fv)zW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49752	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:04 UTC	1091	OUT	GET /KSZawu-1vhqACZzOqNl4izY5-XLtxxT8J2b5yXaiyyciXpNGmhA6qR1fjsuQuc9oGg=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:04 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 602 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:39:24 GMT Expires: Fri, 25 Oct 2024 22:39:24 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 640 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:04 UTC	602	IN	Data Raw: 52 49 46 46 52 02 00 00 57 45 42 50 56 50 38 4c 46 02 00 00 2f 3f c0 0f 00 97 e4 a0 8d 24 47 6a fe 74 ef e3 dc 76 d5 25 10 08 da b6 8d 7b fe 94 bf 30 6c db 36 92 f7 5f f7 fe 5c 2c cd 3f d1 b4 0d 55 73 d9 1b 66 49 32 49 26 49 4a 01 64 c1 41 7a 00 ee 95 85 89 20 49 1c 5a 49 ad 08 92 94 0b 29 0b 29 45 8a 2a c0 44 00 4c 92 44 30 49 84 9b 70 8b 08 73 43 32 01 eb d6 c3 dc 2b 49 4a 91 17 1c 5a 6d ff 60 72 9a 1b 12 90 42 3a 1f dc c4 aa ff 7d 56 ab ca 04 00 0c 9e 66 63 fe d8 fd 4c d2 ee 57 d5 6a b5 80 57 a7 69 10 24 27 93 94 05 81 c1 93 04 2c ab 6a 0c e9 51 57 b9 00 96 95 45 16 f9 91 e2 51 7e 40 d6 b6 ed 85 24 bd 63 b6 c7 b6 6d ab c7 9e 59 db e6 d8 56 6a eb ab ad f4 fc e4 e9 52 52 a7 73 10 d1 7f 46 6e 23 29 72 c3 c0 6d 16 ff b0 76 af 28 0e 54 d2 1c 06 b1 75 29 d4 Data Ascii: RIFFRWEBPVP8LF/?$Gjtv%{0l6_\,?UsfI2I&IJdAz IZI))E*DLD0IpsC2+IJZm`rB:}VfcLWjWi$',jQWEQ~@$cmYVjRRsFn#)rmv(Tu)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49754	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:04 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 22:50:05 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=237338 Date: Thu, 24 Oct 2024 22:50:04 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49762	142.250.185.246	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:06 UTC	460	OUT	GET /vi/k6pS5_C1zPg/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:07 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 8362 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:39:23 GMT Expires: Fri, 25 Oct 2024 00:39:23 GMT Cache-Control: public, max-age=7200 ETag: "1625205600" Content-Type: image/jpeg Vary: Origin Age: 644 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:07 UTC	722	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 17 16 1a 17 15 17 1d 1d 17 1d 1d 1f 25 1e 1e 1d 1e 26 20 25 22 1e 2e 27 31 30 2d 27 2d 2f 35 3d 50 42 35 38 4b 39 2d 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 30 1b 1b 30 58 3f 39 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 5d 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 05 07 ff c4 00 3f 10 00 02 01 02 01 05 0e 05 04 00 07 01 01 01 00 00 00 01 02 03 11 12 04 21 31 51 a1 05 06 13 14 22 34 41 52 61 71 73 91 b1 b2 15 23 72 81 d1 32 33 Data Ascii: JFIF%& %".'10-'-/5=PB58K9--EaEKSV[\[2AemdXlPY[W00X?9=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW]WWWWWh"?!1Q"4ARaqs#r23
2024-10-24 22:50:07 UTC	1378	IN	Data Raw: 95 af 8b 3a 4d 5e f9 b4 ad 67 41 91 6e de 53 42 8c 68 c2 9d 27 08 a6 93 92 77 ce db eb 76 9e 5d 2a 72 82 92 4b f5 45 c5 f7 5d 3f e9 0e a8 2b 86 fd f6 d7 ab b9 ea 34 a3 55 4e e9 b6 b9 51 c0 9b 51 bb c2 db e5 67 cd a1 67 b1 b3 2d c6 4a 78 1d 47 65 19 37 3c 30 b5 e3 87 92 be 65 af ca 5a 5c 7a 35 96 9b 9c a3 85 d3 85 ba 6c ad 8a 58 70 a9 3c fa 52 7d 16 2d 2a 93 76 4e 95 3c 3c ab c7 0a 51 6e 56 bb b2 79 9f 25 68 b6 8e f2 37 09 f4 6c f0 f7 4e 8b 82 71 69 a7 19 b5 ca 56 79 af a5 74 33 ce 3d ad dc 52 71 e1 27 fa a5 52 ed f6 bb b3 c5 3b af 86 2c f5 e9 be 80 01 d2 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 f7 03 f6 65 f5 bf 44 78 07 43 bd ff 00 d9 97 d6 fd 11 76 1f 73 2f 33 e3 7b 74 72 19 4e 2a 49 c6 cf 5d cb fc Data Ascii: :M^gAnSBh'wv]rKE]?+4UNQQgg-JxGe7<0eZ\z5lXp<R}-vN<<QnVy%h7lNqiVyt3=Rq'R;,eDxCvs/3{trN*I]
2024-10-24 22:50:07 UTC	1378	IN	Data Raw: e3 26 78 b6 bb 57 bf fd 2b 81 0c 08 ba 25 a3 0e e5 f5 9d 52 aa a5 7c ca ed ea 46 49 e4 73 8c 71 4a 12 8c 75 b4 d0 85 49 46 f8 64 d5 f4 d9 b5 73 35 35 f2 6a bf f3 53 ff 00 f4 22 5c 5a f6 86 ae 04 5e 96 4c e6 ed 08 b7 6d 36 e8 5d af a0 19 eb 54 58 63 08 be 4a 49 be d9 bd 2d fa 7d 88 d9 6b db c4 31 cb 22 9a 4d b8 e6 5a 5c 5a 95 bb ed a0 c5 c1 a3 2d 39 b8 49 4a 2e cd 68 66 5c aa 95 ab 4a 31 5f cb 32 d5 7e 8d a3 68 8b da 27 52 d5 e0 d1 9d 64 15 1a 4d 42 56 6a eb b8 ad 48 38 b7 19 2b 49 36 9a ed 33 65 c9 70 b2 5a b0 af 28 a5 fd 0d fe 51 37 b6 e3 a6 58 e5 90 ce 29 b7 06 92 d2 62 8d 1b b4 92 6d b7 64 bb 49 c2 6c 64 2b e6 c3 b1 df c9 5f fa 23 7b 92 6f 68 89 99 95 3e 1d 53 a9 2d 85 6a 64 92 82 bc a2 d2 ed 2b 60 90 9b 11 6b fd e7 fd 7f ea bc 1a 1c 1a 2e 4d 8e 7a a5 Data Ascii: &xW+%R\|FIsqJuIFds55jS"\Z^Lm6]TXcJI-}k1"MZ\Z-9IJ.hf\J1_2~h'RdMBVjH8+I63epZ(Q7X)bmdIld+_#{oh>S-jd+`k.Mz
2024-10-24 22:50:07 UTC	1378	IN	Data Raw: 58 fb 64 71 c7 65 bf 0e 6d 0f 16 3e d9 1c 69 e9 71 be 37 95 ca f9 00 01 a5 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3a ed e9 f3 69 f8 b2 f6 c4 e4 4e b3 7a bc da 7e 2b f6 c4 29 cf ed 7b 70 5d 25 c2 45 e9 24 e4 b1 3b 47 a5 a3 cc bd ba ed b7 bf c7 c5 e8 e2 8a 7e 15 b0 47 b1 5f 24 55 a9 2e 2f 67 83 ed 7f f2 a5 ff 00 6e 79 29 11 7a cd 5d e3 c9 17 80 93 61 49 a5 4d 24 9a 7a 55 93 bf 29 93 c0 47 3a fa ec f1 2d 0a f6 cd d3 a0 8d 23 d4 d7 96 b0 36 a9 d3 8e 28 38 dd f2 a1 77 75 af 3d d6 94 44 21 17 69 24 ff 00 9a b3 77 fe 37 b8 e9 47 a8 d6 06 6a 14 f1 5d 5e df a5 79 c9 23 2d 28 c6 f8 92 92 cf 25 9d a7 9b 0b ec 22 2b b4 cd f4 d5 06 cc 21 0b 62 b3 b3 84 b3 5f 43 5f 63 04 62 9e 97 6f b5 c8 98 d1 16 da a0 be 15 74 af Data Ascii: Xdqem>iq7:iNz~+){p]%E$;G~G_$U./gny)z]aIM$zU)G:-#6(8wu=D!i$w7Gj]^y#-(%"+!b_C_cbot
2024-10-24 22:50:07 UTC	1378	IN	Data Raw: ef 6d 7c 89 78 8f db 12 dc 5e e5 1c 8f 63 d3 c2 4d 8b d8 9b 1a 9e 6e d8 f0 92 a2 6c 2c 96 a3 fe 0f ef 65 ea 52 74 a5 1f d5 16 bb c8 da 7b a9 84 8c 26 4b 0b 04 6d 8f 09 18 4c b6 22 c0 db 16 12 1c 4c b8 48 c2 41 b6 2c 24 38 99 5c 48 c2 0d b0 e1 21 c4 cc e2 55 c4 27 6c 2e 26 6c 9b 2b a9 4b f4 bb c7 aa f4 7d b5 10 e2 55 c4 e2 f4 ad e3 56 8d c3 aa 64 b5 27 75 9d 4b da c9 72 e8 54 cd fa 65 d5 7f d6 b3 68 e6 9c 4d cc 97 74 65 0e 4c f9 51 da bf 27 93 c8 fa 74 c7 ea c5 fb 3d 7e 3f d4 a2 7f 4e 5f dd ec 82 94 aa c6 6a f0 77 45 cf 26 62 62 75 2f 56 2d 16 8d c2 05 89 07 0e 90 48 00 73 db f5 e6 b0 f1 a3 ed 91 c4 1d be fd b9 ac 3c 68 fb 64 71 07 b3 c2 f8 9e 77 23 de 00 0d 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 a7 Data Ascii: m\|x^cMnl,eRt{&KmL"LHA,$8\H!U'l.&l+K}UVd'uKrTehMteLQ't=~?N_jwE&bbu/V-Hs<hdqw#
2024-10-24 22:50:07 UTC	1378	IN	Data Raw: 5f a2 2a c8 13 a8 f1 2a 5c 5c 92 03 9d a0 82 40 46 d0 c8 24 58 83 6a 91 62 c4 10 8d ab 62 0b 11 60 6d e3 6f 97 f6 23 e2 2f 6c 8e 68 e9 b7 cb fb 11 f1 17 b6 47 32 51 7f 2f 6f 83 f1 00 03 86 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb 77 a7 cd a7 e2 bf 6c 4e 48 eb b7 a7 cd a7 e2 cb db 12 cc 5e e6 5e 5f c6 f6 c1 59 e8 76 35 38 76 fa 5f 99 b6 b4 ea 79 95 a7 53 74 82 94 25 78 47 bb d0 c8 70 ae 50 01 64 ae ec 73 33 11 1b 94 79 ec 88 c1 cb 34 53 6f b0 bb c9 e6 bf 8b fb 59 fa 17 e1 92 56 59 96 a2 1d 7e d3 cd b7 3a 77 fa 63 b3 54 71 a3 5d e5 80 19 2a 4b 16 7e 9d 7a cc 66 ec 59 63 2d 77 0c d9 29 34 9d 04 17 a7 07 27 64 6d c6 8c 57 45 fb f3 96 4c e9 15 a4 cb 44 1b b3 a1 17 d1 6e d5 98 d3 a9 07 17 67 ff 00 a8 8d a2 Data Ascii: _*\\@F$Xjbb`mo#/lhG2Q/owlNH^^_Yv58v_ySt%xGpPds3y4SoYVY~:wcTq]K~zfYc-w)4'dmWELDng
2024-10-24 22:50:07 UTC	750	IN	Data Raw: de 4d 35 4e 58 9c 71 3e 8e 55 ad db a1 99 ab 65 b2 92 b2 e4 ae cd 3e 67 9d c6 e3 a9 ec 23 8d c7 53 d8 67 ff 00 f3 e2 ea ea d7 75 fe be 7e 9e 8d f6 6d 5c 29 6a 35 78 dc 75 3d 83 8d c7 53 d8 68 db 37 45 9b 58 de b7 e6 c6 37 ad f9 b3 57 8d c7 53 d8 47 1a 8e a7 b0 8e c6 ae db c6 f5 bf 36 45 cd 5e 35 1d 4f 60 e3 51 d4 f6 0e c4 d6 d3 e5 a5 be 67 f2 23 e2 2f 6c 8e 60 e8 77 c1 5d 4a 8c 52 bf ee 2d 3d cc e7 8a 6f e5 ec 70 a3 58 80 01 cb 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7b 7b 8b 2b 52 97 d6 fd 11 e2 1e b6 e5 4a d4 df d4 fd 11 d5 7c a9 cd ed 7a 98 86 23 07 08 38 42 dd b1 f4 b3 e2 0e 66 0e 10 b5 2a f8 27 19 59 3c 2d 3b 49 5d 3b 74 31 b4 74 b3 d4 8c a0 d2 92 69 b4 9d 9e 9b 3d 05 31 1b 59 4e e9 70 95 5b a5 46 Data Ascii: M5NXq>Ue>g#Sgu~m\)j5xu=Sh7EX7WSG6E^5O`Qg#/l`w]JR-=opX`{{+RJ\|z#8Bf*'Y<-;I];t1ti=1YNp[F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49763	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:06 UTC	523	OUT	GET /KSZawu-1vhqACZzOqNl4izY5-XLtxxT8J2b5yXaiyyciXpNGmhA6qR1fjsuQuc9oGg=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:07 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 602 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:39:24 GMT Expires: Fri, 25 Oct 2024 22:39:24 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 643 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:07 UTC	602	IN	Data Raw: 52 49 46 46 52 02 00 00 57 45 42 50 56 50 38 4c 46 02 00 00 2f 3f c0 0f 00 97 e4 a0 8d 24 47 6a fe 74 ef e3 dc 76 d5 25 10 08 da b6 8d 7b fe 94 bf 30 6c db 36 92 f7 5f f7 fe 5c 2c cd 3f d1 b4 0d 55 73 d9 1b 66 49 32 49 26 49 4a 01 64 c1 41 7a 00 ee 95 85 89 20 49 1c 5a 49 ad 08 92 94 0b 29 0b 29 45 8a 2a c0 44 00 4c 92 44 30 49 84 9b 70 8b 08 73 43 32 01 eb d6 c3 dc 2b 49 4a 91 17 1c 5a 6d ff 60 72 9a 1b 12 90 42 3a 1f dc c4 aa ff 7d 56 ab ca 04 00 0c 9e 66 63 fe d8 fd 4c d2 ee 57 d5 6a b5 80 57 a7 69 10 24 27 93 94 05 81 c1 93 04 2c ab 6a 0c e9 51 57 b9 00 96 95 45 16 f9 91 e2 51 7e 40 d6 b6 ed 85 24 bd 63 b6 c7 b6 6d ab c7 9e 59 db e6 d8 56 6a eb ab ad f4 fc e4 e9 52 52 a7 73 10 d1 7f 46 6e 23 29 72 c3 c0 6d 16 ff b0 76 af 28 0e 54 d2 1c 06 b1 75 29 d4 Data Ascii: RIFFRWEBPVP8LF/?$Gjtv%{0l6_\,?UsfI2I&IJdAz IZI))E*DLD0IpsC2+IJZm`rB:}VfcLWjWi$',jQWEQ~@$cmYVjRRsFn#)rmv(Tu)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49764	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:06 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 22:50:07 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=237335 Date: Thu, 24 Oct 2024 22:50:07 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 22:50:07 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49740	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:08 UTC	1220	OUT	GET /recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:08 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 24 Oct 2024 22:50:08 GMT Date: Thu, 24 Oct 2024 22:50:08 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:08 UTC	629	IN	Data Raw: 36 35 32 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 652/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-24 22:50:08 UTC	996	IN	Data Raw: 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f Data Ascii: V+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.coo
2024-10-24 22:50:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49767	172.217.23.110	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:08 UTC	1299	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1468 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:08 UTC	1468	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 32 39 38 31 30 32 30 36 31 36 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1729810206164",null,null,null,null,
2024-10-24 22:50:08 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:08 GMT Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:08 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 32 39 38 31 30 32 30 38 38 35 39 22 5d 0d 0a Data Ascii: 1a["900000","1729810208859"]
2024-10-24 22:50:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49766	172.217.23.110	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:08 UTC	1273	OUT	POST /_/PlayStoreUi/cspreport/fine-allowlist HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 2755 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/csp-report sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:08 UTC	2755	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 76 65 6c 6f 70 65 72 3f 69 64 3d 53 50 45 43 54 52 4c 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 73 63 72 69 70 74 2d 73 72 63 2d 65 6c 65 6d 22 2c 22 65 66 66 65 63 74 69 76 65 2d 64 69 72 65 63 74 69 76 65 22 3a 22 73 63 72 69 70 74 2d 73 72 63 2d 65 6c 65 6d 22 2c 22 6f 72 69 67 69 6e 61 6c 2d 70 6f 6c 69 63 79 22 3a 22 73 63 72 69 70 74 2d 73 72 63 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 68 74 Data Ascii: {"csp-report":{"document-uri":"https://play.google.com/store/apps/developer?id=SPECTRL","referrer":"","violated-directive":"script-src-elem","effective-directive":"script-src-elem","original-policy":"script-src 'unsafe-inline' 'unsafe-eval' blob: data: ht
2024-10-24 22:50:08 UTC	3301	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:08 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-nNW_eeYFAAlOoZhqPxEIeg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/PlayStoreUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin-allow-popups Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.google.com/js/bg/ https://www.gstatic.com/_/boq-play/_/js/k=boq [TRUNCATED] Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49768	172.217.23.110	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:08 UTC	1273	OUT	POST /_/PlayStoreUi/cspreport/fine-allowlist HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 2807 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/csp-report sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:08 UTC	2807	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 76 65 6c 6f 70 65 72 3f 69 64 3d 53 50 45 43 54 52 4c 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 73 63 72 69 70 74 2d 73 72 63 2d 65 6c 65 6d 22 2c 22 65 66 66 65 63 74 69 76 65 2d 64 69 72 65 63 74 69 76 65 22 3a 22 73 63 72 69 70 74 2d 73 72 63 2d 65 6c 65 6d 22 2c 22 6f 72 69 67 69 6e 61 6c 2d 70 6f 6c 69 63 79 22 3a 22 73 63 72 69 70 74 2d 73 72 63 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 68 74 Data Ascii: {"csp-report":{"document-uri":"https://play.google.com/store/apps/developer?id=SPECTRL","referrer":"","violated-directive":"script-src-elem","effective-directive":"script-src-elem","original-policy":"script-src 'unsafe-inline' 'unsafe-eval' blob: data: ht
2024-10-24 22:50:08 UTC	3301	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:08 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-APT-BKvPMHZlGE6GNyRPzQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/PlayStoreUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.google.com/js/bg/ https://www.gstatic.com/_/boq-play/_/js/k=boq [TRUNCATED] Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49778	172.217.23.110	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:09 UTC	1273	OUT	POST /_/PlayStoreUi/cspreport/fine-allowlist HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1585 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/csp-report sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:09 UTC	1585	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 76 65 6c 6f 70 65 72 3f 69 64 3d 53 50 45 43 54 52 4c 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 73 63 72 69 70 74 2d 73 72 63 2d 65 6c 65 6d 22 2c 22 65 66 66 65 63 74 69 76 65 2d 64 69 72 65 63 74 69 76 65 22 3a 22 73 63 72 69 70 74 2d 73 72 63 2d 65 6c 65 6d 22 2c 22 6f 72 69 67 69 6e 61 6c 2d 70 6f 6c 69 63 79 22 3a 22 73 63 72 69 70 74 2d 73 72 63 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 68 74 Data Ascii: {"csp-report":{"document-uri":"https://play.google.com/store/apps/developer?id=SPECTRL","referrer":"","violated-directive":"script-src-elem","effective-directive":"script-src-elem","original-policy":"script-src 'unsafe-inline' 'unsafe-eval' blob: data: ht
2024-10-24 22:50:09 UTC	3301	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:09 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-VgH12p_7CNAA_WwCgMMYRQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/PlayStoreUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport/allowlist Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.google.com/js/bg/ https://www.gstatic.com/_/boq-play/_/js/k=boq [TRUNCATED] Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49780	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:09 UTC	713	OUT	GET /recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:09 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 24 Oct 2024 22:50:09 GMT Date: Thu, 24 Oct 2024 22:50:09 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:09 UTC	629	IN	Data Raw: 36 35 32 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 652/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-24 22:50:09 UTC	996	IN	Data Raw: 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f Data Ascii: V+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.coo
2024-10-24 22:50:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49783	172.217.23.110	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:11 UTC	1522	OUT	POST /_/PlayStoreUi/browserinfo?f.sid=-4647688482496319979&bl=boq_playuiserver_20241022.06_p1&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=67810&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA; _ga=GA1.3.104830921.1729810210; _gid=GA1.3.2110399767.1729810210; _gat_UA199959031=1
2024-10-24 22:50:11 UTC	118	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 39 25 32 43 31 25 32 43 31 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 31 30 32 34 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 39 30 37 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 31 25 32 43 31 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 25 35 42 30 25 32 43 30 25 32 43 30 25 35 44 25 35 44 26 Data Ascii: f.req=%5B9%2C1%2C1%2C%5Bnull%2C1024%2C1280%5D%2C%5Bnull%2C907%2C1280%5D%2C%5B1%2C1%2Cnull%2C1%5D%2C%5B0%2C0%2C0%5D%5D&
2024-10-24 22:50:13 UTC	1195	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:11 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: same-site Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Cross-Origin-Opener-Policy: same-origin-allow-popups Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:13 UTC	99	IN	Data Raw: 35 64 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 66 2e 6d 74 22 5d 2c 5b 22 64 69 22 2c 32 31 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 32 31 2c 22 2d 36 32 35 39 35 35 36 31 31 32 31 34 32 31 32 38 35 35 33 22 2c 31 32 30 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 33 5d 5d 5d 0d 0a Data Ascii: 5d)]}'[[["f.mt"],["di",21],["af.httprm",21,"-6259556112142128553",120],["e",4,null,null,93]]]
2024-10-24 22:50:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49784	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:13 UTC	1474	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=invisible&cb=99qpeju3sn34 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:13 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:13 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-NU5-INNEyf5FOaViuV7L1w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:13 UTC	217	IN	Data Raw: 35 37 65 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 Data Ascii: 57ee<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text
2024-10-24 22:50:13 UTC	1378	IN	Data Raw: 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 Data Ascii: /css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0
2024-10-24 22:50:13 UTC	1378	IN	Data Raw: 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 Data Ascii: U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD
2024-10-24 22:50:13 UTC	1378	IN	Data Raw: 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 Data Ascii: t-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto';
2024-10-24 22:50:13 UTC	1378	IN	Data Raw: 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: m/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-10-24 22:50:13 UTC	1378	IN	Data Raw: 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 Data Ascii: : normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0
2024-10-24 22:50:13 UTC	1378	IN	Data Raw: 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 4e 55 35 2d 49 4e 4e 45 79 66 35 46 4f 61 56 69 75 56 37 4c 31 77 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d Data Ascii: text/javascript" src="https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js" nonce="NU5-INNEyf5FOaViuV7L1w"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id=
2024-10-24 22:50:13 UTC	1378	IN	Data Raw: 58 32 44 4f 36 50 32 71 42 52 38 47 42 43 2d 6c 44 74 58 38 42 65 43 41 78 69 50 35 74 38 6e 52 71 4a 44 7a 5f 4f 78 78 39 69 4e 73 72 4a 4c 47 6d 35 64 36 6f 2d 7a 70 6f 47 51 6b 39 33 33 6c 6c 6c 4f 65 53 75 78 6a 34 78 6e 4f 64 6c 56 57 49 50 59 45 33 55 66 4f 43 30 66 59 55 59 79 38 59 6d 4b 2d 62 48 4b 58 31 61 38 52 66 38 58 47 56 73 54 47 5a 2d 36 70 51 6e 45 57 58 47 78 45 34 75 2d 6e 38 38 43 43 6d 35 30 5a 4b 51 43 30 41 38 4f 55 57 79 30 63 4b 43 71 55 55 6f 4b 70 6c 56 72 36 39 62 79 36 49 77 4e 6f 4e 56 4d 6f 79 70 6d 51 35 61 50 55 75 4d 65 73 44 70 57 4c 70 32 31 62 34 4c 39 33 6c 46 61 6b 2d 4f 30 53 64 49 36 30 34 46 4a 31 57 72 5f 4f 58 6f 38 54 61 59 54 4f 57 37 78 45 4a 53 49 65 6f 44 33 64 42 30 75 7a 53 54 33 4b 53 71 64 58 68 4e 36 Data Ascii: X2DO6P2qBR8GBC-lDtX8BeCAxiP5t8nRqJDz_Oxx9iNsrJLGm5d6o-zpoGQk933lllOeSuxj4xnOdlVWIPYE3UfOC0fYUYy8YmK-bHKX1a8Rf8XGVsTGZ-6pQnEWXGxE4u-n88CCm50ZKQC0A8OUWy0cKCqUUoKplVr69by6IwNoNVMoypmQ5aPUuMesDpWLp21b4L93lFak-O0SdI604FJ1Wr_OXo8TaYTOW7xEJSIeoD3dB0uzST3KSqdXhN6
2024-10-24 22:50:13 UTC	1378	IN	Data Raw: 55 30 4a 52 54 55 35 45 51 6d 68 6e 56 55 45 7a 65 6c 4e 4a 63 79 39 77 57 48 56 53 62 58 52 7a 54 30 64 4c 61 6b 6c 59 5a 46 41 76 4d 30 39 79 52 30 49 32 51 30 70 70 61 48 55 32 54 6d 39 36 63 48 46 4b 56 45 39 69 61 57 64 6c 64 6e 4e 36 4d 56 42 55 65 6e 4a 6b 59 6d 52 69 65 69 39 6e 52 6d 64 47 61 48 56 68 4e 69 73 77 51 54 42 4c 54 57 52 61 64 58 46 4a 51 6b 4e 61 4d 30 56 51 5a 31 4a 6b 53 54 4e 43 56 47 70 56 61 57 52 34 64 30 35 54 4e 44 55 30 54 58 4e 77 61 45 39 54 51 56 56 6d 4e 46 42 6a 4e 6e 56 54 64 32 56 6b 52 54 42 76 65 6e 42 4a 54 47 31 4c 53 6d 52 48 59 57 46 57 4c 31 52 6d 61 45 77 7a 4e 54 4a 48 59 30 70 61 4f 48 5a 43 63 57 70 74 54 54 64 4e 65 47 68 4f 57 47 56 4b 52 54 52 50 62 32 4e 79 52 6c 52 68 4b 33 63 33 5a 57 6c 73 4d 48 52 Data Ascii: U0JRTU5EQmhnVUEzelNJcy9wWHVSbXRzT0dLaklYZFAvM09yR0I2Q0ppaHU2Tm96cHFKVE9iaWdldnN6MVBUenJkYmRiei9nRmdGaHVhNiswQTBLTWRadXFJQkNaM0VQZ1JkSTNCVGpVaWR4d05TNDU0TXNwaE9TQVVmNFBjNnVTd2VkRTBvenBJTG1LSmRHYWFWL1RmaEwzNTJHY0paOHZCcWptTTdNeGhOWGVKRTRPb2NyRlRhK3c3ZWlsMHR
2024-10-24 22:50:13 UTC	1378	IN	Data Raw: 56 6e 62 46 6c 48 4e 55 52 57 4d 7a 5a 6e 5a 47 31 52 4f 56 59 78 54 57 74 6e 64 6e 70 6f 54 45 59 33 55 6b 52 61 4d 56 4a 71 4e 56 6b 34 4e 7a 4a 4d 4b 31 4a 33 53 53 74 71 65 6b 74 33 59 7a 42 61 4b 33 4a 72 64 48 46 73 4e 6c 6c 53 52 57 63 30 4e 79 73 35 52 6b 6c 5a 59 30 5a 32 52 54 4a 45 52 48 4e 72 56 54 5a 30 54 30 56 71 4e 6e 45 32 4d 47 31 6d 55 6b 56 5a 63 55 35 79 54 6d 68 4c 55 56 59 34 52 44 4a 79 64 48 4e 35 56 47 39 57 51 56 56 44 55 56 52 57 4c 32 35 74 52 6d 74 48 65 45 49 35 56 69 74 4d 56 48 70 4e 56 30 46 7a 64 32 4a 56 5a 6c 42 76 61 54 68 32 51 6a 56 49 51 55 77 33 59 57 52 70 53 47 59 7a 53 44 67 32 56 6d 67 72 61 33 63 32 52 69 39 76 4e 47 56 68 52 45 70 68 4c 32 46 71 52 54 46 6b 61 30 49 72 56 32 5a 50 51 6c 52 75 51 30 70 52 55 Data Ascii: VnbFlHNURWMzZnZG1ROVYxTWtndnpoTEY3UkRaMVJqNVk4NzJMK1J3SStqekt3YzBaK3JrdHFsNllSRWc0Nys5RklZY0Z2RTJERHNrVTZ0T0VqNnE2MG1mUkVZcU5yTmhLUVY4RDJydHN5VG9WQVVDUVRWL25tRmtHeEI5VitMVHpNV0Fzd2JVZlBvaTh2QjVIQUw3YWRpSGYzSDg2Vmgra3c2Ri9vNGVhREphL2FqRTFka0IrV2ZPQlRuQ0pRU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49786	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:13 UTC	1165	OUT	GET /tools/feedback/chat_load.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:14 UTC	893	IN	HTTP/1.1 302 Found Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:14 GMT Location: https://www.gstatic.com/feedback/js/ghelp/13d9xnj0dpt7t/chat_load.js Content-Security-Policy: require-trusted-types-for 'script';report-uri /tools/feedback/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-DLem1e04KxxhqGWdMK7sqw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/asx-frontend-server/ Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49795	216.58.206.78	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:13 UTC	796	OUT	GET /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA; _ga=GA1.3.104830921.1729810210; _gid=GA1.3.2110399767.1729810210; _gat_UA199959031=1; _gcl_au=1.1.1430326302.1729810210
2024-10-24 22:50:14 UTC	441	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:14 GMT Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:14 UTC	937	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 400 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-24 22:50:14 UTC	734	IN	Data Raw: 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c Data Ascii: ng/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url
2024-10-24 22:50:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49798	216.58.206.78	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:13 UTC	916	OUT	GET /_/PlayStoreUi/browserinfo?f.sid=-4647688482496319979&bl=boq_playuiserver_20241022.06_p1&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=67810&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA; _ga=GA1.3.104830921.1729810210; _gid=GA1.3.2110399767.1729810210; _gat_UA199959031=1; _gcl_au=1.1.1430326302.1729810210
2024-10-24 22:50:14 UTC	1094	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:14 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Cross-Origin-Opener-Policy: same-origin-allow-popups Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:14 UTC	139	IN	Data Raw: 38 35 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 5d 2c 5b 22 64 69 22 2c 31 32 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 31 31 2c 22 2d 33 33 35 38 31 32 34 38 34 33 31 30 30 36 36 36 34 37 35 22 2c 31 33 31 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 33 33 5d 5d 5d 0d 0a Data Ascii: 85)]}'[[["er",null,null,null,null,405,null,null,null,9],["di",12],["af.httprm",11,"-3358124843100666475",131],["e",4,null,null,133]]]
2024-10-24 22:50:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49807	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:15 UTC	1376	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=invisible&cb=99qpeju3sn34 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:15 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Thu, 24 Oct 2024 22:50:15 GMT Date: Thu, 24 Oct 2024 22:50:15 GMT Cache-Control: private, max-age=300 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:15 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');
2024-10-24 22:50:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49806	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:15 UTC	1364	OUT	GET /js/bg/9J_OlxnAizjMJN_fZ8JRYj0PV4Me2EAx1CVcnywh2Sk.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=invisible&cb=99qpeju3sn34 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:15 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18897 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 22 Oct 2024 16:31:44 GMT Expires: Wed, 22 Oct 2025 16:31:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 17 Oct 2024 15:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 195511 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:15 UTC	566	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 48 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 41 29 7b 69 66 28 28 41 3d 28 4f 3d 6e 75 6c 6c 2c 6c 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 41 29 7c 7c 21 41 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4f 3b 74 72 79 7b 4f 3d 41 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 7a 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 7a 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 7a 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var H=function(O,A){if((A=(O=null,l).trustedTypes,!A)\|\|!A.createPolicy)return O;try{O=A.createPolicy("bg",{createHTML:z,createScript:z,createScriptURL:z}
2024-10-24 22:50:15 UTC	1378	IN	Data Raw: 65 20 4c 4c 43 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 4f 51 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 4f 29 7b 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 74 68 69 73 2e 6a 3d 28 74 68 69 73 2e 6e 3d 30 2c 5b 5d 29 7d 72 65 74 75 72 6e 5b 28 41 3d 28 28 7a 2e 70 72 6f 74 6f 74 79 70 65 2e 75 73 3d 66 75 6e 63 74 69 6f 6e 28 55 2c 48 29 7b 28 74 68 69 73 2e 6e 2b 2b 2c 74 68 69 73 2e 6a 2e 6c 65 6e 67 74 68 29 3c 35 30 3f 74 68 69 73 2e 6a 2e 70 75 73 68 28 55 29 3a 28 48 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 6e 29 2c 48 3c 35 30 26 26 28 74 68 69 73 2e 6a 5b 48 5d 3d 55 29 29 7d 2c 7a 2e 70 Data Ascii: e LLC',' SPDX-License-Identifier: Apache-2.0','/','var OQ=function(A,O){function z(){this.j=(this.n=0,[])}return[(A=((z.prototype.us=function(U,H){(this.n++,this.j.length)<50?this.j.push(U):(H=Math.floor(Math.random()this.n),H<50&&(this.j[H]=U))},z.p
2024-10-24 22:50:15 UTC	1378	IN	Data Raw: 29 29 3a 4a 28 7a 2c 31 36 32 2c 41 29 2c 4f 29 2c 7a 29 2c 31 36 32 29 2c 55 29 2c 7a 29 2c 33 31 32 29 7d 2c 71 7a 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 4f 2c 7a 2c 55 2c 48 2c 72 29 7b 66 6f 72 28 4f 3d 28 7a 3d 28 28 28 55 3d 41 5b 73 51 5d 7c 7c 7b 7d 2c 48 3d 62 28 41 29 2c 55 29 2e 50 4c 3d 62 28 41 29 2c 55 29 2e 53 3d 5b 5d 2c 72 3d 41 2e 4a 3d 3d 41 3f 28 44 28 41 29 7c 30 29 2d 31 3a 31 2c 62 28 41 29 29 2c 30 29 3b 4f 3c 72 3b 4f 2b 2b 29 55 2e 53 2e 70 75 73 68 28 62 28 41 29 29 3b 66 6f 72 28 55 2e 4e 64 3d 78 28 41 2c 7a 29 3b 72 2d 2d 3b 29 55 2e 53 5b 72 5d 3d 78 28 41 2c 55 2e 53 5b 72 5d 29 3b 72 65 74 75 72 6e 20 55 2e 51 50 3d 78 28 41 2c 48 29 2c 55 7d 2c 45 51 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 4f 2c 7a 2c 55 2c 48 29 7b 66 75 6e 63 Data Ascii: )):J(z,162,A),O),z),162),U),z),312)},qz=function(A,O,z,U,H,r){for(O=(z=(((U=A[sQ]\|\|{},H=b(A),U).PL=b(A),U).S=[],r=A.J==A?(D(A)\|0)-1:1,b(A)),0);O<r;O++)U.S.push(b(A));for(U.Nd=x(A,z);r--;)U.S[r]=x(A,U.S[r]);return U.QP=x(A,H),U},EQ=function(A,O,z,U,H){func
2024-10-24 22:50:15 UTC	1378	IN	Data Raw: 29 2c 55 2e 55 3d 4e 7a 2c 74 72 75 65 7d 2c 24 70 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 4f 2c 7a 2c 55 2c 48 29 7b 28 28 28 48 3d 78 28 4f 2c 28 48 3d 28 41 26 3d 28 7a 3d 41 26 33 2c 34 29 2c 62 28 4f 29 29 2c 55 3d 62 28 4f 29 2c 48 29 29 2c 41 29 26 26 28 48 3d 53 4a 28 22 22 2b 48 29 29 2c 7a 29 26 26 70 28 4f 2c 63 28 32 2c 48 2e 6c 65 6e 67 74 68 29 2c 55 29 2c 70 29 28 4f 2c 48 2c 55 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 4f 2c 7a 2c 55 2c 48 2c 72 2c 75 2c 71 2c 45 2c 6c 2c 77 2c 49 2c 5a 2c 52 29 7b 69 66 28 28 75 3d 78 28 41 2c 31 36 32 29 2c 75 29 3e 3d 41 2e 4e 29 74 68 72 6f 77 5b 4c 2c 33 31 5d 3b 66 6f 72 28 48 3d 28 49 3d 28 77 3d 7a 2c 45 3d 75 2c 41 29 2e 46 6c 2e 6c 65 6e 67 74 68 2c 30 29 3b 77 3e 30 3b 29 6c 3d 45 3e 3e 33 2c Data Ascii: ),U.U=Nz,true},$p=function(A,O,z,U,H){(((H=x(O,(H=(A&=(z=A&3,4),b(O)),U=b(O),H)),A)&&(H=SJ(""+H)),z)&&p(O,c(2,H.length),U),p)(O,H,U)},B=function(A,O,z,U,H,r,u,q,E,l,w,I,Z,R){if((u=x(A,162),u)>=A.N)throw[L,31];for(H=(I=(w=z,E=u,A).Fl.length,0);w>0;)l=E>>3,
2024-10-24 22:50:15 UTC	1378	IN	Data Raw: 28 41 2c 4f 2c 7a 2c 55 2c 48 2c 72 2c 75 2c 71 29 7b 72 65 74 75 72 6e 20 48 3d 4d 5b 41 3d 28 71 3d 7a 26 28 72 3d 62 79 2c 37 29 2c 5b 32 37 2c 2d 34 33 2c 36 37 2c 2d 35 33 2c 37 2c 38 2c 41 2c 35 2c 2d 31 30 2c 2d 39 35 5d 29 2c 4f 2e 48 5d 28 4f 2e 48 4c 29 2c 48 5b 4f 2e 48 5d 3d 66 75 6e 63 74 69 6f 6e 28 45 29 7b 75 3d 45 2c 71 2b 3d 36 2b 37 2a 7a 2c 71 26 3d 37 7d 2c 48 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 28 75 3d 28 45 3d 28 45 3d 55 25 31 36 2b 31 2c 45 3d 34 2a 55 2a 55 2a 45 2d 20 2d 32 32 37 39 2a 55 2a 75 2b 35 33 2a 75 2a 75 2d 45 2a 75 2b 71 2d 31 33 37 38 2a 75 2b 41 5b 71 2b 35 39 26 37 5d 2a 55 2a 45 2d 32 31 32 2a 55 2a 55 2a 75 2b 28 72 28 29 7c 30 29 2a 45 2c 41 5b 45 5d 29 2c 76 6f 69 64 Data Ascii: (A,O,z,U,H,r,u,q){return H=M[A=(q=z&(r=by,7),[27,-43,67,-53,7,8,A,5,-10,-95]),O.H](O.HL),H[O.H]=function(E){u=E,q+=6+7z,q&=7},H.concat=function(E){return(u=(E=(E=U%16+1,E=4UUE- -2279Uu+53uu-Eu+q-1378u+A[q+59&7]UE-212UUu+(r()\|0)E,A[E]),void
2024-10-24 22:50:15 UTC	1378	IN	Data Raw: 41 2e 73 3d 21 28 41 2e 73 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 30 29 2c 41 29 2e 54 66 3d 4f 3b 74 72 79 7b 48 3d 41 2e 6f 28 29 2c 41 2e 56 3d 48 2c 41 2e 59 3d 30 2c 41 2e 6c 3d 30 2c 41 2e 57 3d 48 2c 72 3d 7a 61 28 41 2c 4f 29 2c 4f 3d 7a 3f 30 3a 31 30 2c 55 3d 41 2e 6f 28 29 2d 41 2e 57 2c 41 2e 6e 4b 2b 3d 55 2c 41 2e 52 75 26 26 41 2e 52 75 28 55 2d 41 2e 69 2c 41 2e 49 2c 41 2e 46 2c 41 2e 6c 29 2c 41 2e 69 3d 30 2c 41 2e 46 3d 66 61 6c 73 65 2c 41 2e 49 3d 66 61 6c 73 65 2c 55 3c 4f 7c 7c 41 2e 77 5f 2d 2d 3c 3d 30 7c 7c 28 55 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 55 29 2c 41 2e 79 50 2e 70 75 73 68 28 55 3c 3d 32 35 34 3f 55 3a 32 35 34 29 29 7d 66 69 6e 61 6c 6c 79 7b 41 2e 73 3d 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 72 7d 7d 2c 4c Data Ascii: A.s=!(A.s&&":TQR:TQR:"(),0),A).Tf=O;try{H=A.o(),A.V=H,A.Y=0,A.l=0,A.W=H,r=za(A,O),O=z?0:10,U=A.o()-A.W,A.nK+=U,A.Ru&&A.Ru(U-A.i,A.I,A.F,A.l),A.i=0,A.F=false,A.I=false,U<O\|\|A.w_--<=0\|\|(U=Math.floor(U),A.yP.push(U<=254?U:254))}finally{A.s=false}return r}},L
2024-10-24 22:50:15 UTC	1378	IN	Data Raw: 2c 4f 2e 68 28 41 29 3b 65 6c 73 65 20 69 66 28 55 3d 3d 76 29 7b 48 3d 41 5b 31 5d 3b 74 72 79 7b 7a 3d 4f 2e 52 7c 7c 4f 2e 68 28 41 29 7d 63 61 74 63 68 28 72 29 7b 46 28 72 2c 4f 29 2c 7a 3d 4f 2e 52 7d 28 48 28 28 41 3d 4f 2e 6f 28 29 2c 7a 29 29 2c 4f 29 2e 69 2b 3d 4f 2e 6f 28 29 2d 41 7d 65 6c 73 65 20 69 66 28 55 3d 3d 67 43 29 41 5b 33 5d 26 26 28 4f 2e 49 3d 74 72 75 65 29 2c 41 5b 34 5d 26 26 28 4f 2e 46 3d 74 72 75 65 29 2c 4f 2e 68 28 41 29 3b 65 6c 73 65 20 69 66 28 55 3d 3d 70 51 29 4f 2e 49 3d 74 72 75 65 2c 4f 2e 68 28 41 29 3b 65 6c 73 65 20 69 66 28 55 3d 3d 69 79 29 7b 74 72 79 7b 66 6f 72 28 7a 3d 30 3b 7a 3c 4f 2e 4f 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 74 72 79 7b 48 3d 4f 2e 4f 5b 7a 5d 2c 48 5b 30 5d 5b 48 5b 31 5d 5d 28 48 5b 32 Data Ascii: ,O.h(A);else if(U==v){H=A[1];try{z=O.R\|\|O.h(A)}catch(r){F(r,O),z=O.R}(H((A=O.o(),z)),O).i+=O.o()-A}else if(U==gC)A[3]&&(O.I=true),A[4]&&(O.F=true),O.h(A);else if(U==pQ)O.I=true,O.h(A);else if(U==iy){try{for(z=0;z<O.O.length;z++)try{H=O.O[z],H[0][H[1]](H[2
2024-10-24 22:50:15 UTC	1378	IN	Data Raw: 74 69 6f 6e 53 74 61 72 74 29 7c 7c 30 29 2c 4f 29 2e 76 3d 5b 5d 2c 4f 2e 42 3d 76 6f 69 64 20 30 2c 72 29 26 26 72 2e 6c 65 6e 67 74 68 3d 3d 32 26 26 28 4f 2e 78 50 3d 72 5b 31 5d 2c 4f 2e 7a 66 3d 72 5b 30 5d 29 2c 55 29 74 72 79 7b 4f 2e 43 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 55 29 7d 63 61 74 63 68 28 6c 29 7b 4f 2e 43 3d 7b 7d 7d 4e 28 4f 2c 28 43 28 28 4a 28 4f 2c 28 4a 28 4f 2c 32 37 34 2c 28 59 28 34 34 30 2c 4f 2c 28 4f 2e 58 6c 3d 28 59 28 34 34 32 2c 4f 2c 28 59 28 32 36 34 2c 28 59 28 28 59 28 32 35 32 2c 4f 2c 28 59 28 31 34 34 2c 4f 2c 28 59 28 34 38 33 2c 4f 2c 28 59 28 28 59 28 32 35 30 2c 4f 2c 28 4a 28 4f 2c 28 4a 28 4f 2c 28 4a 28 4f 2c 28 4a 28 4f 2c 28 4a 28 4f 2c 28 59 28 32 32 35 2c 4f 2c 28 59 28 33 35 31 2c 28 59 28 32 33 33 2c Data Ascii: tionStart)\|\|0),O).v=[],O.B=void 0,r)&&r.length==2&&(O.xP=r[1],O.zf=r[0]),U)try{O.C=JSON.parse(U)}catch(l){O.C={}}N(O,(C((J(O,(J(O,274,(Y(440,O,(O.Xl=(Y(442,O,(Y(264,(Y((Y(252,O,(Y(144,O,(Y(483,O,(Y((Y(250,O,(J(O,(J(O,(J(O,(J(O,(J(O,(Y(225,O,(Y(351,(Y(233,
2024-10-24 22:50:15 UTC	1378	IN	Data Raw: 69 6f 6e 28 64 2c 66 2c 47 2c 48 5a 2c 6d 29 7b 66 6f 72 28 6d 3d 28 47 3d 28 48 5a 3d 5b 5d 2c 5b 5d 29 2c 30 29 3b 6d 3c 53 3b 6d 2b 2b 29 7b 69 66 28 21 5a 5b 66 3d 54 5b 6d 5d 2c 6d 5d 29 7b 66 6f 72 28 3b 66 3e 3d 48 5a 2e 6c 65 6e 67 74 68 3b 29 48 5a 2e 70 75 73 68 28 62 28 64 29 29 3b 66 3d 48 5a 5b 66 5d 7d 47 2e 70 75 73 68 28 66 29 7d 64 2e 42 3d 6f 6f 28 28 64 2e 4c 3d 6f 6f 28 79 2e 73 6c 69 63 65 28 29 2c 64 29 2c 47 29 2c 64 29 7d 29 7d 29 29 2c 59 28 37 38 2c 4f 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 49 2c 5a 2c 52 29 7b 66 6f 72 28 52 3d 28 77 3d 28 5a 3d 28 49 3d 62 28 6c 29 2c 77 43 28 6c 29 29 2c 5b 5d 29 2c 30 29 3b 52 3c 5a 3b 52 2b 2b 29 77 2e 70 75 73 68 28 44 28 6c 29 29 3b 4a 28 6c 2c 49 2c 77 29 7d 29 2c 59 28 34 37 37 2c 4f Data Ascii: ion(d,f,G,HZ,m){for(m=(G=(HZ=[],[]),0);m<S;m++){if(!Z[f=T[m],m]){for(;f>=HZ.length;)HZ.push(b(d));f=HZ[f]}G.push(f)}d.B=oo((d.L=oo(y.slice(),d),G),d)})})),Y(78,O,function(l,w,I,Z,R){for(R=(w=(Z=(I=b(l),wC(l)),[]),0);R<Z;R++)w.push(D(l));J(l,I,w)}),Y(477,O
2024-10-24 22:50:16 UTC	1378	IN	Data Raw: 2c 6c 2e 4a 29 2c 77 29 2c 6c 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6c 5b 31 5d 2c 6c 5b 32 5d 2c 74 29 7d 29 2c 51 28 34 29 29 29 2c 5b 5d 29 29 2c 5b 32 30 34 38 5d 29 29 2c 4f 29 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 6a 4a 28 34 2c 6c 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 49 29 7b 4a 28 28 49 3d 62 28 28 77 3d 62 28 6c 29 2c 6c 29 29 2c 77 3d 78 28 6c 2c 77 29 2c 77 3d 79 69 28 77 29 2c 6c 29 2c 49 2c 77 29 7d 29 29 2c 4f 29 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 49 2c 5a 29 7b 5a 3d 78 28 6c 2c 28 77 3d 78 28 6c 2c 28 49 3d 62 28 28 77 3d 62 28 28 5a 3d 62 28 6c 29 2c 6c 29 29 2c 6c 29 29 2c 77 29 29 2c 5a 29 29 3d 3d 77 2c 4a 28 6c 2c 49 2c 2b 5a 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 Data Ascii: ,l.J),w),l)[0].removeEventListener(l[1],l[2],t)}),Q(4))),[])),[2048])),O),function(l){jJ(4,l)}),function(l,w,I){J((I=b((w=b(l),l)),w=x(l,w),w=yi(w),l),I,w)})),O),function(l,w,I,Z){Z=x(l,(w=x(l,(I=b((w=b((Z=b(l),l)),l)),w)),Z))==w,J(l,I,+Z)}),function(){})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49812	172.217.23.110	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:17 UTC	546	OUT	GET /opensearch.xml HTTP/1.1 Host: play.google.com Connection: keep-alive Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:17 UTC	1757	IN	HTTP/1.1 200 OK Content-Type: application/opensearchdescription+xml; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:17 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayAtomFeedHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Von5D7iRBDuX91tvDmw4mQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/PlayAtomFeedHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/PlayAtomFeedHttp/cspreport/allowlist Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data:;report-uri /_/PlayAtomFeedHttp/cspreport/fine-allowlist Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:17 UTC	615	IN	Data Raw: 32 36 30 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 4f 70 65 6e 53 65 61 72 63 68 44 65 73 63 72 69 70 74 69 6f 6e 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 2f 31 2e 31 2f 22 3e 0a 20 20 3c 53 68 6f 72 74 4e 61 6d 65 3e 47 6f 6f 67 6c 65 20 50 6c 61 79 3c 2f 53 68 6f 72 74 4e 61 6d 65 3e 0a 20 20 3c 44 65 73 63 72 69 70 74 69 6f 6e 3e 53 65 61 72 63 68 20 66 6f 72 20 63 6f 6e 74 65 6e 74 20 6f 6e 20 47 6f 6f 67 6c 65 20 50 6c 61 79 3c 2f 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 3c 54 61 67 73 3e 67 6f 6f 67 6c 65 20 70 6c 61 79 20 61 70 70 73 20 6d 6f 76 69 65 73 20 74 76 20 62 6f 6f 6b 73 20 67 Data Ascii: 260<?xml version="1.0" encoding="UTF-8"?><OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/"> <ShortName>Google Play</ShortName> <Description>Search for content on Google Play</Description> <Tags>google play apps movies tv books g
2024-10-24 22:50:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49815	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:17 UTC	691	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:17 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Thu, 24 Oct 2024 22:50:17 GMT Date: Thu, 24 Oct 2024 22:50:17 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:17 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');
2024-10-24 22:50:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49816	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:17 UTC	683	OUT	GET /js/bg/9J_OlxnAizjMJN_fZ8JRYj0PV4Me2EAx1CVcnywh2Sk.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:17 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18897 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 22 Oct 2024 16:31:44 GMT Expires: Wed, 22 Oct 2025 16:31:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 17 Oct 2024 15:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 195513 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:17 UTC	566	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 48 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 41 29 7b 69 66 28 28 41 3d 28 4f 3d 6e 75 6c 6c 2c 6c 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 41 29 7c 7c 21 41 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4f 3b 74 72 79 7b 4f 3d 41 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 7a 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 7a 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 7a 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var H=function(O,A){if((A=(O=null,l).trustedTypes,!A)\|\|!A.createPolicy)return O;try{O=A.createPolicy("bg",{createHTML:z,createScript:z,createScriptURL:z}
2024-10-24 22:50:17 UTC	1378	IN	Data Raw: 65 20 4c 4c 43 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 4f 51 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 4f 29 7b 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 74 68 69 73 2e 6a 3d 28 74 68 69 73 2e 6e 3d 30 2c 5b 5d 29 7d 72 65 74 75 72 6e 5b 28 41 3d 28 28 7a 2e 70 72 6f 74 6f 74 79 70 65 2e 75 73 3d 66 75 6e 63 74 69 6f 6e 28 55 2c 48 29 7b 28 74 68 69 73 2e 6e 2b 2b 2c 74 68 69 73 2e 6a 2e 6c 65 6e 67 74 68 29 3c 35 30 3f 74 68 69 73 2e 6a 2e 70 75 73 68 28 55 29 3a 28 48 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 6e 29 2c 48 3c 35 30 26 26 28 74 68 69 73 2e 6a 5b 48 5d 3d 55 29 29 7d 2c 7a 2e 70 Data Ascii: e LLC',' SPDX-License-Identifier: Apache-2.0','/','var OQ=function(A,O){function z(){this.j=(this.n=0,[])}return[(A=((z.prototype.us=function(U,H){(this.n++,this.j.length)<50?this.j.push(U):(H=Math.floor(Math.random()this.n),H<50&&(this.j[H]=U))},z.p
2024-10-24 22:50:17 UTC	1378	IN	Data Raw: 29 29 3a 4a 28 7a 2c 31 36 32 2c 41 29 2c 4f 29 2c 7a 29 2c 31 36 32 29 2c 55 29 2c 7a 29 2c 33 31 32 29 7d 2c 71 7a 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 4f 2c 7a 2c 55 2c 48 2c 72 29 7b 66 6f 72 28 4f 3d 28 7a 3d 28 28 28 55 3d 41 5b 73 51 5d 7c 7c 7b 7d 2c 48 3d 62 28 41 29 2c 55 29 2e 50 4c 3d 62 28 41 29 2c 55 29 2e 53 3d 5b 5d 2c 72 3d 41 2e 4a 3d 3d 41 3f 28 44 28 41 29 7c 30 29 2d 31 3a 31 2c 62 28 41 29 29 2c 30 29 3b 4f 3c 72 3b 4f 2b 2b 29 55 2e 53 2e 70 75 73 68 28 62 28 41 29 29 3b 66 6f 72 28 55 2e 4e 64 3d 78 28 41 2c 7a 29 3b 72 2d 2d 3b 29 55 2e 53 5b 72 5d 3d 78 28 41 2c 55 2e 53 5b 72 5d 29 3b 72 65 74 75 72 6e 20 55 2e 51 50 3d 78 28 41 2c 48 29 2c 55 7d 2c 45 51 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 4f 2c 7a 2c 55 2c 48 29 7b 66 75 6e 63 Data Ascii: )):J(z,162,A),O),z),162),U),z),312)},qz=function(A,O,z,U,H,r){for(O=(z=(((U=A[sQ]\|\|{},H=b(A),U).PL=b(A),U).S=[],r=A.J==A?(D(A)\|0)-1:1,b(A)),0);O<r;O++)U.S.push(b(A));for(U.Nd=x(A,z);r--;)U.S[r]=x(A,U.S[r]);return U.QP=x(A,H),U},EQ=function(A,O,z,U,H){func
2024-10-24 22:50:17 UTC	1378	IN	Data Raw: 29 2c 55 2e 55 3d 4e 7a 2c 74 72 75 65 7d 2c 24 70 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 4f 2c 7a 2c 55 2c 48 29 7b 28 28 28 48 3d 78 28 4f 2c 28 48 3d 28 41 26 3d 28 7a 3d 41 26 33 2c 34 29 2c 62 28 4f 29 29 2c 55 3d 62 28 4f 29 2c 48 29 29 2c 41 29 26 26 28 48 3d 53 4a 28 22 22 2b 48 29 29 2c 7a 29 26 26 70 28 4f 2c 63 28 32 2c 48 2e 6c 65 6e 67 74 68 29 2c 55 29 2c 70 29 28 4f 2c 48 2c 55 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 4f 2c 7a 2c 55 2c 48 2c 72 2c 75 2c 71 2c 45 2c 6c 2c 77 2c 49 2c 5a 2c 52 29 7b 69 66 28 28 75 3d 78 28 41 2c 31 36 32 29 2c 75 29 3e 3d 41 2e 4e 29 74 68 72 6f 77 5b 4c 2c 33 31 5d 3b 66 6f 72 28 48 3d 28 49 3d 28 77 3d 7a 2c 45 3d 75 2c 41 29 2e 46 6c 2e 6c 65 6e 67 74 68 2c 30 29 3b 77 3e 30 3b 29 6c 3d 45 3e 3e 33 2c Data Ascii: ),U.U=Nz,true},$p=function(A,O,z,U,H){(((H=x(O,(H=(A&=(z=A&3,4),b(O)),U=b(O),H)),A)&&(H=SJ(""+H)),z)&&p(O,c(2,H.length),U),p)(O,H,U)},B=function(A,O,z,U,H,r,u,q,E,l,w,I,Z,R){if((u=x(A,162),u)>=A.N)throw[L,31];for(H=(I=(w=z,E=u,A).Fl.length,0);w>0;)l=E>>3,
2024-10-24 22:50:17 UTC	1378	IN	Data Raw: 28 41 2c 4f 2c 7a 2c 55 2c 48 2c 72 2c 75 2c 71 29 7b 72 65 74 75 72 6e 20 48 3d 4d 5b 41 3d 28 71 3d 7a 26 28 72 3d 62 79 2c 37 29 2c 5b 32 37 2c 2d 34 33 2c 36 37 2c 2d 35 33 2c 37 2c 38 2c 41 2c 35 2c 2d 31 30 2c 2d 39 35 5d 29 2c 4f 2e 48 5d 28 4f 2e 48 4c 29 2c 48 5b 4f 2e 48 5d 3d 66 75 6e 63 74 69 6f 6e 28 45 29 7b 75 3d 45 2c 71 2b 3d 36 2b 37 2a 7a 2c 71 26 3d 37 7d 2c 48 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 28 75 3d 28 45 3d 28 45 3d 55 25 31 36 2b 31 2c 45 3d 34 2a 55 2a 55 2a 45 2d 20 2d 32 32 37 39 2a 55 2a 75 2b 35 33 2a 75 2a 75 2d 45 2a 75 2b 71 2d 31 33 37 38 2a 75 2b 41 5b 71 2b 35 39 26 37 5d 2a 55 2a 45 2d 32 31 32 2a 55 2a 55 2a 75 2b 28 72 28 29 7c 30 29 2a 45 2c 41 5b 45 5d 29 2c 76 6f 69 64 Data Ascii: (A,O,z,U,H,r,u,q){return H=M[A=(q=z&(r=by,7),[27,-43,67,-53,7,8,A,5,-10,-95]),O.H](O.HL),H[O.H]=function(E){u=E,q+=6+7z,q&=7},H.concat=function(E){return(u=(E=(E=U%16+1,E=4UUE- -2279Uu+53uu-Eu+q-1378u+A[q+59&7]UE-212UUu+(r()\|0)E,A[E]),void
2024-10-24 22:50:17 UTC	1378	IN	Data Raw: 41 2e 73 3d 21 28 41 2e 73 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 30 29 2c 41 29 2e 54 66 3d 4f 3b 74 72 79 7b 48 3d 41 2e 6f 28 29 2c 41 2e 56 3d 48 2c 41 2e 59 3d 30 2c 41 2e 6c 3d 30 2c 41 2e 57 3d 48 2c 72 3d 7a 61 28 41 2c 4f 29 2c 4f 3d 7a 3f 30 3a 31 30 2c 55 3d 41 2e 6f 28 29 2d 41 2e 57 2c 41 2e 6e 4b 2b 3d 55 2c 41 2e 52 75 26 26 41 2e 52 75 28 55 2d 41 2e 69 2c 41 2e 49 2c 41 2e 46 2c 41 2e 6c 29 2c 41 2e 69 3d 30 2c 41 2e 46 3d 66 61 6c 73 65 2c 41 2e 49 3d 66 61 6c 73 65 2c 55 3c 4f 7c 7c 41 2e 77 5f 2d 2d 3c 3d 30 7c 7c 28 55 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 55 29 2c 41 2e 79 50 2e 70 75 73 68 28 55 3c 3d 32 35 34 3f 55 3a 32 35 34 29 29 7d 66 69 6e 61 6c 6c 79 7b 41 2e 73 3d 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 72 7d 7d 2c 4c Data Ascii: A.s=!(A.s&&":TQR:TQR:"(),0),A).Tf=O;try{H=A.o(),A.V=H,A.Y=0,A.l=0,A.W=H,r=za(A,O),O=z?0:10,U=A.o()-A.W,A.nK+=U,A.Ru&&A.Ru(U-A.i,A.I,A.F,A.l),A.i=0,A.F=false,A.I=false,U<O\|\|A.w_--<=0\|\|(U=Math.floor(U),A.yP.push(U<=254?U:254))}finally{A.s=false}return r}},L
2024-10-24 22:50:17 UTC	1378	IN	Data Raw: 2c 4f 2e 68 28 41 29 3b 65 6c 73 65 20 69 66 28 55 3d 3d 76 29 7b 48 3d 41 5b 31 5d 3b 74 72 79 7b 7a 3d 4f 2e 52 7c 7c 4f 2e 68 28 41 29 7d 63 61 74 63 68 28 72 29 7b 46 28 72 2c 4f 29 2c 7a 3d 4f 2e 52 7d 28 48 28 28 41 3d 4f 2e 6f 28 29 2c 7a 29 29 2c 4f 29 2e 69 2b 3d 4f 2e 6f 28 29 2d 41 7d 65 6c 73 65 20 69 66 28 55 3d 3d 67 43 29 41 5b 33 5d 26 26 28 4f 2e 49 3d 74 72 75 65 29 2c 41 5b 34 5d 26 26 28 4f 2e 46 3d 74 72 75 65 29 2c 4f 2e 68 28 41 29 3b 65 6c 73 65 20 69 66 28 55 3d 3d 70 51 29 4f 2e 49 3d 74 72 75 65 2c 4f 2e 68 28 41 29 3b 65 6c 73 65 20 69 66 28 55 3d 3d 69 79 29 7b 74 72 79 7b 66 6f 72 28 7a 3d 30 3b 7a 3c 4f 2e 4f 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 74 72 79 7b 48 3d 4f 2e 4f 5b 7a 5d 2c 48 5b 30 5d 5b 48 5b 31 5d 5d 28 48 5b 32 Data Ascii: ,O.h(A);else if(U==v){H=A[1];try{z=O.R\|\|O.h(A)}catch(r){F(r,O),z=O.R}(H((A=O.o(),z)),O).i+=O.o()-A}else if(U==gC)A[3]&&(O.I=true),A[4]&&(O.F=true),O.h(A);else if(U==pQ)O.I=true,O.h(A);else if(U==iy){try{for(z=0;z<O.O.length;z++)try{H=O.O[z],H[0][H[1]](H[2
2024-10-24 22:50:17 UTC	1378	IN	Data Raw: 74 69 6f 6e 53 74 61 72 74 29 7c 7c 30 29 2c 4f 29 2e 76 3d 5b 5d 2c 4f 2e 42 3d 76 6f 69 64 20 30 2c 72 29 26 26 72 2e 6c 65 6e 67 74 68 3d 3d 32 26 26 28 4f 2e 78 50 3d 72 5b 31 5d 2c 4f 2e 7a 66 3d 72 5b 30 5d 29 2c 55 29 74 72 79 7b 4f 2e 43 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 55 29 7d 63 61 74 63 68 28 6c 29 7b 4f 2e 43 3d 7b 7d 7d 4e 28 4f 2c 28 43 28 28 4a 28 4f 2c 28 4a 28 4f 2c 32 37 34 2c 28 59 28 34 34 30 2c 4f 2c 28 4f 2e 58 6c 3d 28 59 28 34 34 32 2c 4f 2c 28 59 28 32 36 34 2c 28 59 28 28 59 28 32 35 32 2c 4f 2c 28 59 28 31 34 34 2c 4f 2c 28 59 28 34 38 33 2c 4f 2c 28 59 28 28 59 28 32 35 30 2c 4f 2c 28 4a 28 4f 2c 28 4a 28 4f 2c 28 4a 28 4f 2c 28 4a 28 4f 2c 28 4a 28 4f 2c 28 59 28 32 32 35 2c 4f 2c 28 59 28 33 35 31 2c 28 59 28 32 33 33 2c Data Ascii: tionStart)\|\|0),O).v=[],O.B=void 0,r)&&r.length==2&&(O.xP=r[1],O.zf=r[0]),U)try{O.C=JSON.parse(U)}catch(l){O.C={}}N(O,(C((J(O,(J(O,274,(Y(440,O,(O.Xl=(Y(442,O,(Y(264,(Y((Y(252,O,(Y(144,O,(Y(483,O,(Y((Y(250,O,(J(O,(J(O,(J(O,(J(O,(J(O,(Y(225,O,(Y(351,(Y(233,
2024-10-24 22:50:17 UTC	1378	IN	Data Raw: 69 6f 6e 28 64 2c 66 2c 47 2c 48 5a 2c 6d 29 7b 66 6f 72 28 6d 3d 28 47 3d 28 48 5a 3d 5b 5d 2c 5b 5d 29 2c 30 29 3b 6d 3c 53 3b 6d 2b 2b 29 7b 69 66 28 21 5a 5b 66 3d 54 5b 6d 5d 2c 6d 5d 29 7b 66 6f 72 28 3b 66 3e 3d 48 5a 2e 6c 65 6e 67 74 68 3b 29 48 5a 2e 70 75 73 68 28 62 28 64 29 29 3b 66 3d 48 5a 5b 66 5d 7d 47 2e 70 75 73 68 28 66 29 7d 64 2e 42 3d 6f 6f 28 28 64 2e 4c 3d 6f 6f 28 79 2e 73 6c 69 63 65 28 29 2c 64 29 2c 47 29 2c 64 29 7d 29 7d 29 29 2c 59 28 37 38 2c 4f 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 49 2c 5a 2c 52 29 7b 66 6f 72 28 52 3d 28 77 3d 28 5a 3d 28 49 3d 62 28 6c 29 2c 77 43 28 6c 29 29 2c 5b 5d 29 2c 30 29 3b 52 3c 5a 3b 52 2b 2b 29 77 2e 70 75 73 68 28 44 28 6c 29 29 3b 4a 28 6c 2c 49 2c 77 29 7d 29 2c 59 28 34 37 37 2c 4f Data Ascii: ion(d,f,G,HZ,m){for(m=(G=(HZ=[],[]),0);m<S;m++){if(!Z[f=T[m],m]){for(;f>=HZ.length;)HZ.push(b(d));f=HZ[f]}G.push(f)}d.B=oo((d.L=oo(y.slice(),d),G),d)})})),Y(78,O,function(l,w,I,Z,R){for(R=(w=(Z=(I=b(l),wC(l)),[]),0);R<Z;R++)w.push(D(l));J(l,I,w)}),Y(477,O
2024-10-24 22:50:17 UTC	1378	IN	Data Raw: 2c 6c 2e 4a 29 2c 77 29 2c 6c 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6c 5b 31 5d 2c 6c 5b 32 5d 2c 74 29 7d 29 2c 51 28 34 29 29 29 2c 5b 5d 29 29 2c 5b 32 30 34 38 5d 29 29 2c 4f 29 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 6a 4a 28 34 2c 6c 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 49 29 7b 4a 28 28 49 3d 62 28 28 77 3d 62 28 6c 29 2c 6c 29 29 2c 77 3d 78 28 6c 2c 77 29 2c 77 3d 79 69 28 77 29 2c 6c 29 2c 49 2c 77 29 7d 29 29 2c 4f 29 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 49 2c 5a 29 7b 5a 3d 78 28 6c 2c 28 77 3d 78 28 6c 2c 28 49 3d 62 28 28 77 3d 62 28 28 5a 3d 62 28 6c 29 2c 6c 29 29 2c 6c 29 29 2c 77 29 29 2c 5a 29 29 3d 3d 77 2c 4a 28 6c 2c 49 2c 2b 5a 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 Data Ascii: ,l.J),w),l)[0].removeEventListener(l[1],l[2],t)}),Q(4))),[])),[2048])),O),function(l){jJ(4,l)}),function(l,w,I){J((I=b((w=b(l),l)),w=x(l,w),w=yi(w),l),I,w)})),O),function(l,w,I,Z){Z=x(l,(w=x(l,(I=b((w=b((Z=b(l),l)),l)),w)),Z))==w,J(l,I,+Z)}),function(){})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49817	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:17 UTC	1469	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 11515 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=invisible&cb=99qpeju3sn34 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:17 UTC	11515	OUT	Data Raw: 0a 18 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 12 ce 0f 30 33 41 46 63 57 65 41 35 36 5a 53 48 48 42 46 71 5f 62 46 4f 7a 4e 47 75 7a 5a 52 49 5a 70 42 78 35 62 49 6a 77 38 71 49 65 55 56 6c 79 41 51 35 47 4f 37 30 6c 32 36 34 34 78 58 42 52 76 38 78 36 32 38 69 6a 68 54 39 66 52 2d 54 47 63 61 55 77 62 45 56 4b 78 79 55 65 7a 53 4b 49 6a 2d 62 74 45 63 52 56 67 37 47 75 47 7a 68 64 5f 38 78 30 45 57 65 43 55 34 46 51 6e 49 64 52 73 72 76 79 75 31 55 62 6a 4d 66 64 42 77 49 49 5f 34 5f 6b 30 56 4c 6e 45 67 6f 32 44 33 7a 43 6c 39 4b 79 62 51 52 49 62 70 69 64 30 6e 6d 41 5a 30 77 47 6e 5a 46 67 56 6d 43 75 6b 56 36 2d 35 34 70 57 58 47 44 32 68 38 64 4f 75 31 5a 49 62 78 4a 4a 6a 53 51 53 68 55 4a 52 6d 74 47 5a 66 49 44 4e Data Ascii: lqsTZ5beIbCkK4uGEGv9JmUR03AFcWeA56ZSHHBFq_bFOzNGuzZRIZpBx5bIjw8qIeUVlyAQ5GO70l2644xXBRv8x628ijhT9fR-TGcaUwbEVKxyUezSKIj-btEcRVg7GuGzhd_8x0EWeCU4FQnIdRsrvyu1UbjMfdBwII_4_k0VLnEgo2D3zCl9KybQRIbpid0nmAZ0wGnZFgVmCukV6-54pWXGD2h8dOu1ZIbxJJjSQShUJRmtGZfIDN
2024-10-24 22:50:18 UTC	1000	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Date: Thu, 24 Oct 2024 22:50:17 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: _GRECAPTCHA=09ANOXeZwb0cbdcN8f4qkT6xhGsNBn1THOXEiJ00R1Bj3mXcmP6qsDlMTf726Vy1XnqVviwHoN6KKPJIwFexdryzY; Expires=Tue, 22-Apr-2025 22:50:17 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Expires: Thu, 24 Oct 2024 22:50:17 GMT Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:18 UTC	378	IN	Data Raw: 32 66 35 31 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 4d 58 49 35 49 63 49 50 30 37 69 4e 6e 76 42 68 6e 6d 4e 4d 64 66 71 79 45 37 5a 66 53 52 54 75 6a 39 66 59 33 69 62 4a 33 6d 67 4e 4e 55 76 65 64 32 65 52 6a 62 74 38 35 72 37 31 6c 78 6f 57 2d 6b 46 54 71 6d 6a 77 5f 46 72 46 6b 42 39 31 35 68 72 33 70 58 37 39 65 71 6f 59 52 65 42 4f 35 30 41 4e 65 74 63 38 56 44 68 4e 63 39 62 39 6d 65 64 79 63 6e 56 41 74 33 78 50 61 5f 39 66 39 4d 5a 54 6a 2d 6c 35 72 45 71 79 57 4c 70 67 6f 76 39 33 45 4a 72 55 5f 43 49 58 76 76 30 5f 56 6d 48 72 73 37 36 6f 6d 6c 62 2d 6f 55 4f 43 38 31 49 65 64 79 53 4c 63 72 65 46 6d 63 64 33 47 37 33 42 77 51 4f 5f 79 66 74 4d 34 43 6a 4c 53 4b 33 53 75 7a 38 53 36 41 63 6e 6f 30 2d 7a 71 Data Ascii: 2f51)]}'["rresp","03AFcWeA5MXI5IcIP07iNnvBhnmNMdfqyE7ZfSRTuj9fY3ibJ3mgNNUved2eRjbt85r71lxoW-kFTqmjw_FrFkB915hr3pX79eqoYReBO50ANetc8VDhNc9b9medycnVAt3xPa_9f9MZTj-l5rEqyWLpgov93EJrU_CIXvv0_VmHrs76omlb-oUOC81IedySLcreFmcd3G73BwQO_yftM4CjLSK3Suz8S6Acno0-zq
2024-10-24 22:50:18 UTC	1378	IN	Data Raw: 4c 46 70 4c 41 4a 67 32 69 4a 41 59 44 72 78 74 68 72 66 67 56 73 6e 33 4b 41 63 51 41 4f 47 55 38 49 74 57 63 68 68 5f 72 41 47 53 75 65 44 45 50 77 46 30 43 42 50 6d 35 77 2d 5f 58 36 54 4d 61 51 38 37 53 76 76 4f 6a 7a 37 6d 6d 55 35 6b 68 2d 77 4d 75 4d 55 34 75 5f 36 54 62 35 73 37 42 73 4e 59 42 46 66 56 75 4f 74 55 78 76 47 39 4a 31 6b 47 62 6a 73 30 49 43 43 6d 72 6d 75 6d 50 49 41 68 59 68 4c 72 72 4f 42 5a 70 54 46 75 72 6f 65 56 32 6c 66 74 53 63 61 68 72 73 42 63 77 54 77 38 64 73 56 39 66 4b 36 76 54 36 4b 35 4f 30 69 73 38 45 4d 62 4e 57 30 68 6c 73 2d 6f 43 52 62 4e 74 45 4e 48 6c 62 48 6d 6e 47 50 41 55 33 32 4d 72 32 69 58 62 6c 4a 58 47 78 38 33 64 63 39 4d 2d 34 6b 42 65 6e 6f 75 39 79 77 5f 62 75 58 63 50 79 72 6d 4f 63 57 69 42 34 30 Data Ascii: LFpLAJg2iJAYDrxthrfgVsn3KAcQAOGU8ItWchh_rAGSueDEPwF0CBPm5w-_X6TMaQ87SvvOjz7mmU5kh-wMuMU4u_6Tb5s7BsNYBFfVuOtUxvG9J1kGbjs0ICCmrmumPIAhYhLrrOBZpTFuroeV2lftScahrsBcwTw8dsV9fK6vT6K5O0is8EMbNW0hls-oCRbNtENHlbHmnGPAU32Mr2iXblJXGx83dc9M-4kBenou9yw_buXcPyrmOcWiB40
2024-10-24 22:50:18 UTC	1378	IN	Data Raw: 6f 62 45 78 36 53 6c 56 50 61 30 5a 4a 4f 54 4a 4a 62 7a 4a 70 54 46 68 4a 61 56 41 76 63 6c 42 52 57 6a 52 4c 53 45 4e 48 57 57 46 4a 59 58 4d 7a 4d 48 41 35 4d 56 46 6a 61 31 4a 52 51 56 59 34 62 47 74 42 65 56 5a 32 62 6e 6c 73 61 6b 56 4a 61 32 59 72 53 57 74 58 57 6b 52 42 4d 6a 5a 4c 4b 32 46 6e 54 56 64 6f 54 46 67 79 4d 6c 52 6e 57 48 68 6b 55 6a 59 31 4f 44 42 35 55 57 74 42 62 6e 70 73 63 7a 63 78 4d 57 4a 31 5a 33 70 73 55 30 39 57 4b 33 4e 49 64 33 45 79 54 57 52 6a 56 58 4a 50 57 57 35 34 63 47 4d 79 55 55 51 79 54 33 63 32 53 45 64 51 4f 46 42 32 56 30 56 7a 4d 6c 68 48 4e 43 39 36 64 33 6c 45 54 6d 70 57 52 45 63 30 52 57 5a 46 4e 6d 4e 54 4b 30 39 54 54 45 46 7a 61 47 39 36 59 6c 68 4c 64 47 46 73 59 6e 68 58 63 47 4a 73 61 30 74 52 64 48 Data Ascii: obEx6SlVPa0ZJOTJJbzJpTFhJaVAvclBRWjRLSENHWWFJYXMzMHA5MVFja1JRQVY4bGtBeVZ2bnlsakVJa2YrSWtXWkRBMjZLK2FnTVdoTFgyMlRnWHhkUjY1ODB5UWtBbnpsczcxMWJ1Z3psU09WK3NId3EyTWRjVXJPWW54cGMyUUQyT3c2SEdQOFB2V0VzMlhHNC96d3lETmpWREc0RWZFNmNTK09TTEFzaG96YlhLdGFsYnhXcGJsa0tRdH
2024-10-24 22:50:18 UTC	1378	IN	Data Raw: 30 74 6b 4f 46 52 4c 4e 57 39 6a 4f 58 52 70 4d 6a 6c 69 63 7a 56 6a 55 57 34 31 5a 32 51 72 62 30 68 7a 61 46 46 34 53 47 31 55 62 6d 64 4a 65 6e 52 6c 59 6e 52 4f 53 55 45 31 59 31 68 75 5a 6d 5a 71 59 33 46 4d 62 58 68 51 63 57 30 32 62 55 46 55 62 6e 64 57 55 58 68 6a 59 32 39 4c 4b 7a 56 52 61 55 56 51 65 6c 56 4e 54 30 77 30 56 58 4e 47 65 54 42 50 4d 54 59 31 52 7a 56 70 63 6a 64 4b 64 55 46 68 55 6d 39 44 63 53 39 69 56 6e 46 31 51 55 52 48 56 58 70 75 65 48 4a 4e 55 46 70 31 54 48 4a 74 53 47 56 79 51 55 46 6c 62 6d 35 4b 56 31 63 72 62 58 64 49 61 58 5a 30 56 55 70 77 52 57 46 42 59 6d 6b 31 4d 48 63 76 59 6b 67 78 4f 47 74 4a 4d 6d 6f 35 61 58 56 4c 4d 48 46 4f 59 6a 49 72 63 6d 38 79 62 33 6b 78 52 55 67 34 52 6b 56 74 64 32 52 4d 56 6e 56 50 Data Ascii: 0tkOFRLNW9jOXRpMjliczVjUW41Z2Qrb0hzaFF4SG1UbmdJenRlYnROSUE1Y1huZmZqY3FMbXhQcW02bUFUbndWUXhjY29LKzVRaUVQelVNT0w0VXNGeTBPMTY1RzVpcjdKdUFhUm9DcS9iVnF1QURHVXpueHJNUFp1THJtSGVyQUFlbm5KV1crbXdIaXZ0VUpwRWFBYmk1MHcvYkgxOGtJMmo5aXVLMHFOYjIrcm8yb3kxRUg4RkVtd2RMVnVP
2024-10-24 22:50:18 UTC	1378	IN	Data Raw: 68 62 33 51 33 62 44 4d 35 65 45 4a 72 62 54 56 6a 63 7a 4e 51 5a 6d 39 78 64 57 6c 35 51 6d 74 34 63 47 74 50 52 57 64 55 59 6e 70 50 4b 30 4a 7a 55 6c 64 4a 4e 6b 64 5a 54 6a 68 45 5a 45 39 4d 4e 30 4e 73 63 6c 56 48 59 6e 5a 58 52 30 64 6f 5a 58 42 43 56 44 42 75 5a 47 46 55 56 33 52 6a 56 47 78 36 54 48 46 4a 52 47 78 71 51 57 52 42 64 33 68 58 62 32 4e 4b 53 6e 49 33 4f 46 64 34 64 6d 52 71 52 45 78 50 4d 57 78 32 52 44 4a 71 5a 6c 6f 34 53 33 46 6b 56 6c 68 53 55 46 68 58 51 56 42 50 55 48 55 72 61 6e 56 79 56 32 31 45 4c 32 52 5a 52 33 42 58 52 55 74 68 55 56 42 48 61 55 4e 6c 64 55 6c 77 54 58 42 6a 55 31 52 4f 4e 30 4a 59 62 44 51 35 53 30 35 55 53 6c 4a 7a 59 6e 64 33 56 47 52 72 63 7a 68 6e 63 31 6b 33 4b 32 46 4c 4f 48 45 76 53 30 78 77 62 6d Data Ascii: hb3Q3bDM5eEJrbTVjczNQZm9xdWl5Qmt4cGtPRWdUYnpPK0JzUldJNkdZTjhEZE9MN0NsclVHYnZXR0doZXBCVDBuZGFUV3RjVGx6THFJRGxqQWRBd3hXb2NKSnI3OFd4dmRqRExPMWx2RDJqZlo4S3FkVlhSUFhXQVBPUHUranVyV21EL2RZR3BXRUthUVBHaUNldUlwTXBjU1RON0JYbDQ5S05USlJzYnd3VGRrczhnc1k3K2FLOHEvS0xwbm
2024-10-24 22:50:18 UTC	1378	IN	Data Raw: 6c 4e 79 5a 6b 45 32 52 44 6c 34 56 31 6c 78 4d 56 6c 58 63 6b 31 68 61 6e 52 4f 65 47 64 48 5a 58 46 6c 61 6a 55 79 53 45 31 73 62 6a 46 36 59 57 68 6c 56 32 31 79 51 57 6c 46 4c 7a 46 73 59 6a 67 30 53 55 39 43 65 47 70 55 63 32 68 6b 61 32 39 6a 61 58 42 71 54 46 4e 6e 63 6a 5a 47 54 48 70 58 55 32 78 6b 62 7a 68 58 65 56 64 58 64 45 31 50 52 6a 6c 4e 56 6a 56 4c 57 48 52 79 56 30 46 6e 4d 32 39 36 4c 31 55 32 59 33 52 47 56 33 49 72 5a 57 39 76 5a 6c 64 53 4f 56 5a 74 54 6d 31 33 59 6e 56 79 5a 56 64 51 5a 58 56 57 55 45 74 4a 52 6e 70 6a 62 46 56 78 59 6a 4e 68 64 44 55 76 62 6b 68 70 4d 57 73 35 63 47 35 49 4f 45 73 77 4f 58 4e 6c 51 7a 41 31 59 30 64 4f 56 6b 35 77 4d 6e 6c 70 5a 47 78 53 61 69 74 77 4e 6e 5a 75 57 6a 68 4a 5a 31 46 6a 63 54 67 35 Data Ascii: lNyZkE2RDl4V1lxMVlXck1hanROeGdHZXFlajUySE1sbjF6YWhlV21yQWlFLzFsYjg0SU9CeGpUc2hka29jaXBqTFNncjZGTHpXU2xkbzhXeVdXdE1PRjlNVjVLWHRyV0FnM296L1U2Y3RGV3IrZW9vZldSOVZtTm13YnVyZVdQZXVWUEtJRnpjbFVxYjNhdDUvbkhpMWs5cG5IOEswOXNlQzA1Y0dOVk5wMnlpZGxSaitwNnZuWjhJZ1FjcTg5
2024-10-24 22:50:18 UTC	1378	IN	Data Raw: 44 55 6d 39 4a 63 7a 68 31 56 6c 6c 68 61 47 56 59 64 57 46 57 52 54 63 31 4f 56 41 77 64 58 6c 6f 53 6b 52 47 56 48 49 78 56 46 4a 53 52 45 6b 33 54 6b 56 4d 4e 6e 56 58 4e 32 4a 51 53 6c 64 4e 4e 48 4a 6c 61 56 70 32 4e 55 4d 79 52 47 6c 45 55 30 35 31 57 46 4a 78 4d 54 45 77 56 6b 64 6d 51 32 4d 7a 5a 6d 68 45 54 56 67 34 52 31 64 53 5a 58 42 4b 61 33 5a 54 65 45 78 6e 59 32 78 6f 4b 7a 52 70 61 43 74 30 54 57 4e 30 4d 54 4d 79 4e 55 73 7a 64 47 52 51 56 56 4e 6a 62 58 5a 44 62 6a 68 42 59 6b 39 76 64 48 42 79 63 7a 4e 68 62 55 4e 58 51 57 6f 35 61 30 39 46 54 57 51 31 56 6b 63 33 63 6a 68 5a 4d 6d 6c 69 52 6d 5a 6f 4e 46 5a 49 61 48 68 6e 62 45 35 59 65 6e 68 76 56 57 39 59 54 47 68 59 62 6c 5a 4a 4c 30 4a 54 53 46 42 54 64 45 39 69 61 54 51 78 64 6d Data Ascii: DUm9Jczh1VllhaGVYdWFWRTc1OVAwdXloSkRGVHIxVFJSREk3TkVMNnVXN2JQSldNNHJlaVp2NUMyRGlEU051WFJxMTEwVkdmQ2MzZmhETVg4R1dSZXBKa3ZTeExnY2xoKzRpaCt0TWN0MTMyNUszdGRQVVNjbXZDbjhBYk9vdHByczNhbUNXQWo5a09FTWQ1Vkc3cjhZMmliRmZoNFZIaHhnbE5YenhvVW9YTGhYblZJL0JTSFBTdE9iaTQxdm
2024-10-24 22:50:18 UTC	1378	IN	Data Raw: 7a 4e 6a 56 33 45 78 4d 7a 56 47 4d 47 78 77 56 6b 70 6f 56 57 52 78 64 6b 52 47 4e 44 6c 6f 61 45 4a 55 54 6c 68 6d 63 57 45 32 53 6c 6c 73 55 6c 42 70 59 33 52 71 57 55 55 30 63 6e 70 42 63 30 64 52 54 6b 46 4a 62 7a 4a 75 63 6b 6c 4e 61 30 4e 42 59 30 67 7a 53 33 6c 4f 61 7a 64 49 54 6d 77 77 62 45 31 6b 59 6d 4e 6e 55 45 74 36 5a 58 46 59 4c 7a 4a 56 52 6e 70 53 52 55 6c 35 52 7a 64 4b 62 45 39 45 64 6b 52 6a 62 47 64 70 64 79 38 31 4e 53 74 49 64 45 35 54 4c 32 63 72 51 6a 41 78 61 45 4a 52 63 47 74 73 4f 55 56 32 65 6d 77 76 53 6c 68 49 52 32 68 32 61 6b 52 48 52 58 5a 4a 65 6d 64 55 4d 6a 5a 50 61 6a 4e 47 52 45 56 75 56 69 39 45 62 7a 67 79 64 6b 6c 72 4c 7a 46 76 56 55 6c 73 65 6c 6c 58 51 58 41 72 52 69 74 61 53 32 64 75 56 33 4e 31 51 32 6c 34 Data Ascii: zNjV3ExMzVGMGxwVkpoVWRxdkRGNDloaEJUTlhmcWE2SllsUlBpY3RqWUU0cnpBc0dRTkFJbzJucklNa0NBY0gzS3lOazdITmwwbE1kYmNnUEt6ZXFYLzJVRnpSRUl5RzdKbE9EdkRjbGdpdy81NStIdE5TL2crQjAxaEJRcGtsOUV2emwvSlhIR2h2akRHRXZJemdUMjZPajNGREVuVi9EbzgydklrLzFvVUlsellXQXArRitaS2duV3N1Q2l4
2024-10-24 22:50:18 UTC	1378	IN	Data Raw: 4e 5a 57 52 6c 64 6b 52 73 63 47 4e 74 53 45 51 76 51 7a 42 53 54 6c 56 4f 54 44 56 50 65 47 31 72 4f 58 42 5a 51 55 6c 75 5a 48 4e 6d 57 6e 5a 57 5a 55 46 76 4f 55 64 54 4f 54 4e 43 4e 57 70 6f 59 6b 4a 45 4e 54 4e 33 54 57 5a 4f 4e 46 70 79 64 6d 63 35 4d 6c 56 51 56 6a 52 72 54 6a 51 34 4b 31 4e 6d 52 6a 64 4a 64 30 74 75 52 48 6c 51 62 6c 51 32 4f 44 68 58 61 48 46 71 63 55 77 77 62 44 49 79 4b 33 67 7a 52 33 45 77 56 48 6c 72 61 58 56 43 52 46 52 6b 57 6b 68 5a 63 55 39 53 4e 30 6c 61 62 56 4a 6f 61 6e 6c 50 64 45 4a 59 63 46 6b 30 53 6b 73 31 59 58 68 6d 5a 57 4d 34 56 6b 70 47 4d 30 39 70 65 6d 5a 76 65 6e 42 5a 64 46 42 4d 4b 33 4a 30 4d 46 4d 35 51 79 38 32 61 47 4a 52 4c 32 56 59 4e 47 35 74 63 32 68 36 51 6d 4e 4b 4f 47 74 33 53 79 39 4e 62 44 Data Ascii: NZWRldkRscGNtSEQvQzBSTlVOTDVPeG1rOXBZQUluZHNmWnZWZUFvOUdTOTNCNWpoYkJENTN3TWZONFpydmc5MlVQVjRrTjQ4K1NmRjdJd0tuRHlQblQ2ODhXaHFqcUwwbDIyK3gzR3EwVHlraXVCRFRkWkhZcU9SN0labVJoanlPdEJYcFk0Sks1YXhmZWM4VkpGM09pemZvenBZdFBMK3J0MFM5Qy82aGJRL2VYNG5tc2h6QmNKOGt3Sy9NbD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49822	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:19 UTC	798	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZwb0cbdcN8f4qkT6xhGsNBn1THOXEiJ00R1Bj3mXcmP6qsDlMTf726Vy1XnqVviwHoN6KKPJIwFexdryzY; NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:19 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:19 GMT Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:19 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-24 22:50:19 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-10-24 22:50:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49823	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:19 UTC	1565	OUT	POST /recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 2113 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-protobuf sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=invisible&cb=99qpeju3sn34 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZwb0cbdcN8f4qkT6xhGsNBn1THOXEiJ00R1Bj3mXcmP6qsDlMTf726Vy1XnqVviwHoN6KKPJIwFexdryzY; NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:19 UTC	2113	OUT	Data Raw: 0a 28 36 4c 63 41 32 74 45 5a 41 41 41 41 41 4a 6a 37 46 54 59 54 46 39 63 5a 34 4e 4c 33 53 68 67 42 43 42 66 6b 57 6f 76 30 12 ce 0f 30 33 41 46 63 57 65 41 35 36 5a 53 48 48 42 46 71 5f 62 46 4f 7a 4e 47 75 7a 5a 52 49 5a 70 42 78 35 62 49 6a 77 38 71 49 65 55 56 6c 79 41 51 35 47 4f 37 30 6c 32 36 34 34 78 58 42 52 76 38 78 36 32 38 69 6a 68 54 39 66 52 2d 54 47 63 61 55 77 62 45 56 4b 78 79 55 65 7a 53 4b 49 6a 2d 62 74 45 63 52 56 67 37 47 75 47 7a 68 64 5f 38 78 30 45 57 65 43 55 34 46 51 6e 49 64 52 73 72 76 79 75 31 55 62 6a 4d 66 64 42 77 49 49 5f 34 5f 6b 30 56 4c 6e 45 67 6f 32 44 33 7a 43 6c 39 4b 79 62 51 52 49 62 70 69 64 30 6e 6d 41 5a 30 77 47 6e 5a 46 67 56 6d 43 75 6b 56 36 2d 35 34 70 57 58 47 44 32 68 38 64 4f 75 31 5a 49 62 78 4a 4a Data Ascii: (6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov003AFcWeA56ZSHHBFq_bFOzNGuzZRIZpBx5bIjw8qIeUVlyAQ5GO70l2644xXBRv8x628ijhT9fR-TGcaUwbEVKxyUezSKIj-btEcRVg7GuGzhd_8x0EWeCU4FQnIdRsrvyu1UbjMfdBwII_4_k0VLnEgo2D3zCl9KybQRIbpid0nmAZ0wGnZFgVmCukV6-54pWXGD2h8dOu1ZIbxJJ
2024-10-24 22:50:19 UTC	657	IN	HTTP/1.1 200 OK Content-Type: application/binary Access-Control-Allow-Origin: https://www.google.com Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Date: Thu, 24 Oct 2024 22:50:19 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49824	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:20 UTC	795	OUT	GET /recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZwb0cbdcN8f4qkT6xhGsNBn1THOXEiJ00R1Bj3mXcmP6qsDlMTf726Vy1XnqVviwHoN6KKPJIwFexdryzY; NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:20 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:20 GMT Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:20 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-24 22:50:20 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-10-24 22:50:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49827	172.217.23.110	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:24 UTC	1716	OUT	POST /_/PlayStoreUi/data/batchexecute?rpcids=eIpeLd%2Cw3QCWb%2Cw37aie&source-path=%2Fstore%2Fapps&f.sid=-4647688482496319979&bl=boq_playuiserver_20241022.06_p1&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=167810&rt=c HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 33945 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA; _gid=GA1.3.2110399767.1729810210; _gat_UA199959031=1; _gcl_au=1.1.1430326302.1729810210; _ga=GA1.1.104830921.1729810210; _ga_6VGGZHMLM2=GS1.1.1729810213.1.0.1729810215.0.0.0; OTZ=7791770_72_76_104100_72_446760
2024-10-24 22:50:24 UTC	16384	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 25 35 42 25 35 42 25 32 32 65 49 70 65 4c 64 25 32 32 25 32 43 25 32 32 25 35 42 32 25 32 43 25 35 43 25 32 32 41 50 50 4c 49 43 41 54 49 4f 4e 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 70 68 6f 6e 65 25 35 43 25 32 32 25 35 44 25 32 32 25 32 43 6e 75 6c 6c 25 32 43 25 32 32 31 25 32 32 25 35 44 25 32 43 25 35 42 25 32 32 77 33 51 43 57 62 25 32 32 25 32 43 25 32 32 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 32 25 32 43 25 35 43 25 32 32 41 50 50 4c 49 43 41 54 49 4f 4e 25 35 43 25 32 32 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 38 25 32 43 25 35 42 32 30 25 32 43 35 30 25 35 44 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 39 36 25 32 43 31 30 38 25 32 43 37 32 25 32 43 31 30 30 25 32 43 32 37 25 32 Data Ascii: f.req=%5B%5B%5B%22eIpeLd%22%2C%22%5B2%2C%5C%22APPLICATION%5C%22%2C%5C%22phone%5C%22%5D%22%2Cnull%2C%221%22%5D%2C%5B%22w3QCWb%22%2C%22%5B%5Bnull%2C2%2C%5C%22APPLICATION%5C%22%2Cnull%2C%5B%5B8%2C%5B20%2C50%5D%5D%2Cnull%2Cnull%2C%5B96%2C108%2C72%2C100%2C27%2
2024-10-24 22:50:24 UTC	16384	OUT	Data Raw: 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 33 39 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 35 30 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 36 39 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 36 35 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 Data Ascii: C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C139%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C150%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C169%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C165%5D%2C%5B%5B1%2C7%2C
2024-10-24 22:50:24 UTC	1177	OUT	Data Raw: 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 35 30 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 36 39 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 36 35 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 Data Ascii: 2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C150%5D%2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C169%5D%2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C165%5D%2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%
2024-10-24 22:50:24 UTC	1242	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:24 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-site Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:24 UTC	136	IN	Data Raw: 34 36 31 0d 0a 29 5d 7d 27 0a 0a 31 31 31 31 0a 5b 5b 22 77 72 62 2e 66 72 22 2c 22 65 49 70 65 4c 64 22 2c 22 5b 5b 5b 5b 5b 6e 75 6c 6c 2c 5c 22 50 68 6f 6e 65 5c 22 2c 6e 75 6c 6c 2c 5c 22 70 68 6f 6e 65 5f 61 6e 64 72 6f 69 64 5c 22 2c 74 72 75 65 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 3f 64 65 76 69 63 65 5c 5c 75 30 30 33 64 70 68 6f 6e 65 5c 22 5d 5d 5d 2c 6e 75 Data Ascii: 461)]}'1111[["wrb.fr","eIpeLd","[[[[[null,\"Phone\",null,\"phone_android\",true,[null,null,\"/store/apps?device\\u003dphone\"]]],nu
2024-10-24 22:50:24 UTC	992	IN	Data Raw: 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 71 67 49 6d 77 67 45 6a 43 68 31 68 63 48 42 7a 58 32 68 76 62 57 56 66 63 33 56 69 62 6d 46 32 58 32 5a 70 62 48 52 6c 63 6c 39 77 61 47 39 75 5a 52 41 41 47 41 45 5c 5c 75 30 30 33 64 5c 22 5d 2c 5b 5b 5b 6e 75 6c 6c 2c 5c 22 54 61 62 6c 65 74 5c 22 2c 6e 75 6c 6c 2c 5c 22 74 61 62 6c 65 74 5f 61 6e 64 72 6f 69 64 5c 22 2c 66 61 6c 73 65 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 3f 64 65 76 69 63 65 5c 5c 75 30 30 33 64 74 61 62 6c 65 74 5c 22 5d 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 71 67 49 6e 77 67 45 6b 43 68 35 68 63 48 42 7a 58 32 68 76 62 57 56 66 63 33 56 69 62 6d 46 32 58 32 5a 70 62 48 52 6c 63 6c 39 30 59 57 4a 73 5a 58 51 51 41 52 67 41 5c 22 Data Ascii: ll,null,null,\"qgImwgEjCh1hcHBzX2hvbWVfc3VibmF2X2ZpbHRlcl9waG9uZRAAGAE\\u003d\"],[[[null,\"Tablet\",null,\"tablet_android\",false,[null,null,\"/store/apps?device\\u003dtablet\"]]],null,null,null,\"qgInwgEkCh5hcHBzX2hvbWVfc3VibmF2X2ZpbHRlcl90YWJsZXQQARgA\"
2024-10-24 22:50:24 UTC	57	IN	Data Raw: 33 33 0d 0a 34 39 0a 5b 5b 22 77 72 62 2e 66 72 22 2c 22 77 33 37 61 69 65 22 2c 22 5b 5b 5d 5d 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 33 22 5d 5d 0a 0d 0a Data Ascii: 3349[["wrb.fr","w37aie","[[]]",null,null,null,"3"]]
2024-10-24 22:50:25 UTC	1378	IN	Data Raw: 38 30 30 30 0d 0a 38 37 30 30 35 30 0a 5b 5b 22 77 72 62 2e 66 72 22 2c 22 77 33 51 43 57 62 22 2c 22 5b 5b 6e 75 6c 6c 2c 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5c 22 71 67 49 70 45 69 63 51 41 4f 41 48 41 62 6f 4a 48 77 6f 64 43 68 64 75 62 33 64 66 59 32 78 31 63 33 52 6c 63 6c 39 42 55 46 42 4d 53 55 4e 42 56 45 6c 50 54 68 41 74 47 41 4d 5c 5c 75 30 30 33 64 5c 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: 8000870050[["wrb.fr","w3QCWb","[[null,[[null,null,null,[\"qgIpEicQAOAHAboJHwodChdub3dfY2x1c3Rlcl9BUFBMSUNBVElPThAtGAM\\u003d\"],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null
2024-10-24 22:50:25 UTC	1378	IN	Data Raw: 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 50 43 6e 37 48 7a 5a 68 41 6d 59 2d 51 30 51 68 73 4e 41 34 5a 35 57 79 5a 46 72 50 4f 47 4d 46 37 48 66 59 6f 74 35 54 44 50 30 6d 6b 7a 6f 59 6f 41 68 61 56 52 74 4b 4b 78 35 30 64 6e 59 5f 4d 4b 6c 6f 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 31 30 38 30 2c 31 39 32 30 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4d 31 51 66 38 77 31 38 56 78 75 4e 69 4e 31 39 76 4e 46 41 59 7a 76 74 78 37 46 41 30 42 38 36 76 33 67 6d 30 4f 6d 58 4e 6a 63 49 71 75 63 79 30 59 49 74 61 61 62 38 45 66 Data Ascii: ],[null,null,\"https://play-lh.googleusercontent.com/PCn7HzZhAmY-Q0QhsNA4Z5WyZFrPOGMF7HfYot5TDP0mkzoYoAhaVRtKKx50dnY_MKlo\"]],[null,2,[1080,1920],[null,null,\"https://play-lh.googleusercontent.com/M1Qf8w18VxuNiN19vNFAYzvtx7FA0B86v3gm0OmXNjcIqucy0YItaab8Ef
2024-10-24 22:50:25 UTC	1378	IN	Data Raw: 7a 55 56 61 74 4e 6f 58 32 50 4b 43 38 32 4f 35 59 36 46 56 42 76 51 36 35 77 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 31 30 38 30 2c 31 39 32 30 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 39 61 54 4b 64 77 30 65 41 69 39 78 59 74 43 52 73 73 77 6f 71 72 75 71 47 6a 34 4a 39 61 56 73 6f 63 79 59 46 56 33 51 58 47 67 57 54 6f 43 65 5a 49 2d 5a 7a 74 71 5f 73 67 4a 72 57 37 37 2d 51 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 31 30 38 30 2c 31 39 32 30 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 46 49 6a 55 4b 42 42 35 4c 42 6a Data Ascii: zUVatNoX2PKC82O5Y6FVBvQ65w\"]],[null,2,[1080,1920],[null,null,\"https://play-lh.googleusercontent.com/N9aTKdw0eAi9xYtCRsswoqruqGj4J9aVsocyYFV3QXGgWToCeZI-Zztq_sgJrW77-Q\"]],[null,2,[1080,1920],[null,null,\"https://play-lh.googleusercontent.com/FIjUKBB5LBj
2024-10-24 22:50:25 UTC	1378	IN	Data Raw: 6c 62 33 42 7a 58 7a 51 34 4d 7a 45 77 4e 54 67 32 4d 54 45 32 4d 6a 67 77 4f 44 41 78 4d 54 67 51 6c 51 45 59 41 78 49 6b 5a 54 49 33 5a 44 67 35 4d 44 49 74 4d 54 4e 6b 4d 43 30 30 59 6d 4e 6a 4c 57 4a 6d 5a 54 59 74 4e 7a 6b 7a 4d 7a 63 78 4d 57 51 30 4d 54 55 78 5c 22 5d 2c 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 6c 50 51 68 77 43 31 31 4a 48 30 5c 22 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 76 69 64 65 6f 2f 6c 61 76 61 2f 77 65 62 2f 70 6c 61 79 65 72 2f 79 74 3a 6d 6f 76 69 65 3a 6c 50 51 68 77 43 31 31 4a 48 30 3f 61 75 74 6f 70 6c 61 79 5c 5c 75 30 30 33 64 31 5c 5c 75 30 30 32 36 65 6d 62 65 64 5c 5c 75 30 30 33 64 70 6c 61 79 5c 22 5d 2c 5c 22 79 74 3a 6d 6f 76 69 65 Data Ascii: lb3BzXzQ4MzEwNTg2MTE2MjgwODAxMTgQlQEYAxIkZTI3ZDg5MDItMTNkMC00YmNjLWJmZTYtNzkzMzcxMWQ0MTUx\"],[[[null,null,\"lPQhwC11JH0\",[null,null,\"https://play.google.com/video/lava/web/player/yt:movie:lPQhwC11JH0?autoplay\\u003d1\\u0026embed\\u003dplay\"],\"yt:movie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49828	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:24 UTC	1572	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 12501 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=invisible&cb=99qpeju3sn34 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZwb0cbdcN8f4qkT6xhGsNBn1THOXEiJ00R1Bj3mXcmP6qsDlMTf726Vy1XnqVviwHoN6KKPJIwFexdryzY; NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:24 UTC	12501	OUT	Data Raw: 0a 18 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 12 ce 0f 30 33 41 46 63 57 65 41 35 36 5a 53 48 48 42 46 71 5f 62 46 4f 7a 4e 47 75 7a 5a 52 49 5a 70 42 78 35 62 49 6a 77 38 71 49 65 55 56 6c 79 41 51 35 47 4f 37 30 6c 32 36 34 34 78 58 42 52 76 38 78 36 32 38 69 6a 68 54 39 66 52 2d 54 47 63 61 55 77 62 45 56 4b 78 79 55 65 7a 53 4b 49 6a 2d 62 74 45 63 52 56 67 37 47 75 47 7a 68 64 5f 38 78 30 45 57 65 43 55 34 46 51 6e 49 64 52 73 72 76 79 75 31 55 62 6a 4d 66 64 42 77 49 49 5f 34 5f 6b 30 56 4c 6e 45 67 6f 32 44 33 7a 43 6c 39 4b 79 62 51 52 49 62 70 69 64 30 6e 6d 41 5a 30 77 47 6e 5a 46 67 56 6d 43 75 6b 56 36 2d 35 34 70 57 58 47 44 32 68 38 64 4f 75 31 5a 49 62 78 4a 4a 6a 53 51 53 68 55 4a 52 6d 74 47 5a 66 49 44 4e Data Ascii: lqsTZ5beIbCkK4uGEGv9JmUR03AFcWeA56ZSHHBFq_bFOzNGuzZRIZpBx5bIjw8qIeUVlyAQ5GO70l2644xXBRv8x628ijhT9fR-TGcaUwbEVKxyUezSKIj-btEcRVg7GuGzhd_8x0EWeCU4FQnIdRsrvyu1UbjMfdBwII_4_k0VLnEgo2D3zCl9KybQRIbpid0nmAZ0wGnZFgVmCukV6-54pWXGD2h8dOu1ZIbxJJjSQShUJRmtGZfIDN
2024-10-24 22:50:25 UTC	1000	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Date: Thu, 24 Oct 2024 22:50:24 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: _GRECAPTCHA=09ANOXeZy0BwTzkqryMMkvnxBvQCh02k0yRlGMyKfeGxGxLnk_TQMul1Jqk6KI_NdUWr2j8ac_ByiyUo6CENRknwo; Expires=Tue, 22-Apr-2025 22:50:24 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Expires: Thu, 24 Oct 2024 22:50:24 GMT Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:25 UTC	378	IN	Data Raw: 33 30 32 39 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 64 6f 46 65 66 34 33 62 42 39 39 58 54 74 52 6f 5f 69 4a 6b 63 56 2d 4a 56 4f 66 48 76 70 66 6e 6c 4d 77 32 69 6f 45 6c 62 4d 31 59 5a 52 34 4a 65 47 4f 46 31 51 4f 4b 5f 52 42 64 6b 54 55 53 52 6a 37 53 75 76 4d 42 51 56 63 65 52 77 5f 4b 79 64 71 55 53 35 73 6b 4e 6d 6d 6e 7a 4f 6e 39 6a 51 62 2d 66 4d 69 33 34 6d 43 61 50 4b 76 43 73 66 41 7a 34 6b 79 51 49 4c 31 6c 73 39 35 51 78 37 38 54 73 50 56 5a 76 4e 53 62 47 47 6e 6e 71 5f 4e 75 49 4b 31 63 5a 6b 73 45 58 33 78 33 58 54 74 43 54 4a 4a 37 4a 70 4b 50 77 53 4d 70 51 5a 4a 43 4c 34 79 53 5a 57 35 61 67 6f 6b 72 69 39 4d 5a 50 70 74 69 4e 6c 6b 73 4a 76 43 30 53 52 47 59 31 42 66 4f 35 6b 65 4e 65 47 48 4c 47 Data Ascii: 3029)]}'["rresp","03AFcWeA6doFef43bB99XTtRo_iJkcV-JVOfHvpfnlMw2ioElbM1YZR4JeGOF1QOK_RBdkTUSRj7SuvMBQVceRw_KydqUS5skNmmnzOn9jQb-fMi34mCaPKvCsfAz4kyQIL1ls95Qx78TsPVZvNSbGGnnq_NuIK1cZksEX3x3XTtCTJJ7JpKPwSMpQZJCL4ySZW5agokri9MZPptiNlksJvC0SRGY1BfO5keNeGHLG
2024-10-24 22:50:25 UTC	1378	IN	Data Raw: 4a 51 61 4d 70 32 45 50 53 58 47 4b 43 37 71 6c 68 6f 2d 5a 52 65 6a 36 70 6e 78 41 63 52 58 48 45 34 56 35 73 4c 79 4a 5a 31 35 32 34 4f 73 49 4c 49 2d 71 67 65 4d 77 73 64 5f 6c 64 78 33 6d 54 46 32 59 47 4e 64 71 4d 7a 54 7a 43 43 61 6f 34 31 2d 37 79 6e 54 4f 2d 47 45 59 4d 75 6b 52 49 48 45 44 47 43 33 52 63 73 4a 4a 69 6d 50 78 65 58 61 6c 56 41 69 45 7a 41 31 6c 4c 6c 67 66 61 5f 59 6a 58 77 6b 39 75 57 4b 34 52 38 66 44 73 4e 70 69 35 69 73 6e 52 55 2d 49 32 37 58 57 50 6e 77 63 6f 6e 58 2d 64 37 4d 5a 43 35 48 45 58 62 75 43 6f 54 61 49 75 43 6f 52 6a 56 54 32 51 64 7a 45 78 61 7a 4d 79 6f 2d 5f 41 54 76 43 30 7a 41 70 62 50 6b 6c 69 6c 79 6b 77 50 77 54 44 2d 76 39 66 5f 64 33 75 54 37 44 32 77 46 31 4f 33 72 70 66 38 50 55 4f 4d 67 79 31 70 43 Data Ascii: JQaMp2EPSXGKC7qlho-ZRej6pnxAcRXHE4V5sLyJZ1524OsILI-qgeMwsd_ldx3mTF2YGNdqMzTzCCao41-7ynTO-GEYMukRIHEDGC3RcsJJimPxeXalVAiEzA1lLlgfa_YjXwk9uWK4R8fDsNpi5isnRU-I27XWPnwconX-d7MZC5HEXbuCoTaIuCoRjVT2QdzExazMyo-_ATvC0zApbPklilykwPwTD-v9f_d3uT7D2wF1O3rpf8PUOMgy1pC
2024-10-24 22:50:25 UTC	1378	IN	Data Raw: 56 7a 49 33 62 47 5a 72 52 46 46 75 52 6b 77 76 56 6c 68 43 59 69 38 34 56 56 5a 6b 52 30 78 76 4d 79 39 44 63 33 6c 46 65 56 5a 50 4e 45 4a 6c 54 55 74 7a 57 58 42 70 64 48 68 44 4c 33 59 32 5a 48 4e 6f 4f 55 39 44 56 31 4a 33 4f 55 51 78 57 46 4e 47 54 44 6b 7a 57 6e 4d 35 51 6a 4a 77 51 56 4a 72 5a 55 77 77 59 54 46 51 4d 48 46 35 65 47 31 4d 64 33 52 53 65 45 68 68 63 47 52 49 55 32 56 6f 52 56 70 4f 52 55 46 49 62 55 52 35 4f 55 74 50 55 33 6c 69 56 6c 4d 34 61 53 74 6a 64 32 74 58 55 46 59 32 4c 7a 64 76 54 32 6c 6d 4d 48 4d 34 4d 30 64 33 4e 44 52 71 54 7a 4a 57 55 48 46 50 5a 54 6c 75 55 6a 46 74 53 6b 74 52 53 55 78 54 4d 6b 5a 75 4d 6a 42 73 61 6b 68 43 4e 44 4e 70 52 57 39 6d 51 57 35 35 52 47 39 72 4b 32 52 74 4d 33 56 46 4d 32 68 52 63 30 70 Data Ascii: VzI3bGZrRFFuRkwvVlhCYi84VVZkR0xvMy9Dc3lFeVZPNEJlTUtzWXBpdHhDL3Y2ZHNoOU9DV1J3OUQxWFNGTDkzWnM5QjJwQVJrZUwwYTFQMHF5eG1Md3RSeEhhcGRIU2VoRVpORUFIbUR5OUtPU3liVlM4aStjd2tXUFY2LzdvT2lmMHM4M0d3NDRqTzJWUHFPZTluUjFtSktRSUxTMkZuMjBsakhCNDNpRW9mQW55RG9rK2RtM3VFM2hRc0p
2024-10-24 22:50:25 UTC	1378	IN	Data Raw: 78 6a 5a 56 64 61 4f 48 4e 77 53 48 6c 35 52 6b 56 78 51 6b 31 4f 5a 30 73 30 5a 45 46 32 4d 47 46 34 52 45 68 4f 61 31 68 71 4d 6b 31 4d 64 32 78 4f 5a 44 55 34 63 46 64 4d 56 6b 70 58 55 45 45 30 54 32 5a 51 55 58 56 36 4d 48 49 35 64 69 73 35 53 6d 70 52 64 31 70 72 65 6d 49 34 61 7a 4a 51 56 43 39 36 4d 43 39 30 51 32 64 4a 61 48 4a 53 53 6e 5a 75 4c 31 42 6f 52 30 4a 75 65 6b 70 4a 53 7a 63 31 63 7a 59 31 61 30 46 68 4d 55 4e 76 63 6c 4d 31 55 6b 56 4e 55 32 4e 50 4b 7a 4d 30 55 56 42 4f 64 44 46 78 57 58 5a 74 57 44 56 4d 59 32 31 47 54 55 64 52 55 6d 4a 6b 4f 43 74 48 4f 57 39 6d 62 7a 6c 51 4e 6b 68 74 4e 32 39 6f 62 44 49 7a 4b 33 64 36 4d 46 68 6d 52 30 51 33 4e 57 56 50 52 7a 6c 54 65 57 46 4f 63 6c 6c 42 64 6d 31 34 65 56 46 46 64 30 4e 58 52 Data Ascii: xjZVdaOHNwSHl5RkVxQk1OZ0s0ZEF2MGF4REhOa1hqMk1Md2xOZDU4cFdMVkpXUEE0T2ZQUXV6MHI5dis5SmpRd1premI4azJQVC96MC90Q2dJaHJSSnZuL1BoR0JuekpJSzc1czY1a0FhMUNvclM1UkVNU2NPKzM0UVBOdDFxWXZtWDVMY21GTUdRUmJkOCtHOW9mbzlQNkhtN29obDIzK3d6MFhmR0Q3NWVPRzlTeWFOcllBdm14eVFFd0NXR
2024-10-24 22:50:25 UTC	1378	IN	Data Raw: 4f 58 68 4c 59 6d 4e 7a 56 6e 64 78 4e 6e 42 50 62 6a 4e 58 5a 47 39 50 62 57 78 56 4d 55 56 43 4e 45 68 59 5a 6b 73 77 65 6d 74 72 52 79 74 4d 62 48 42 53 51 57 46 4d 54 30 31 53 55 6a 56 6e 65 6e 4a 70 4e 7a 46 77 63 55 35 61 64 58 56 5a 54 6e 51 77 52 6c 6c 44 64 56 56 61 63 6a 52 71 56 57 5a 76 64 56 42 52 4e 6c 6c 5a 62 30 59 78 63 48 4e 44 61 6c 68 6e 56 46 56 69 4d 6a 4e 49 65 6e 63 33 54 30 4a 43 4e 46 6b 78 56 45 4a 78 64 7a 49 32 4e 31 4a 45 59 6b 39 42 4e 58 4e 6e 5a 7a 6c 33 65 57 31 68 65 58 4e 31 64 33 68 47 54 57 46 58 63 6d 74 4e 55 46 6c 6d 63 32 35 79 61 6e 46 57 53 33 56 4b 64 6e 52 45 4e 58 6c 72 56 6a 4a 75 4f 45 4d 79 53 58 52 49 62 55 49 30 4e 6a 4a 32 4b 7a 68 59 4f 55 55 34 64 31 42 34 64 46 4a 50 61 6b 78 4a 56 6e 51 78 64 31 6b Data Ascii: OXhLYmNzVndxNnBPbjNXZG9PbWxVMUVCNEhYZkswemtrRytMbHBSQWFMT01SUjVnenJpNzFwcU5adXVZTnQwRllDdVVacjRqVWZvdVBRNllZb0YxcHNDalhnVFViMjNIenc3T0JCNFkxVEJxdzI2N1JEYk9BNXNnZzl3eW1heXN1d3hGTWFXcmtNUFlmc25yanFWS3VKdnRENXlrVjJuOEMySXRIbUI0NjJ2KzhYOUU4d1B4dFJPakxJVnQxd1k
2024-10-24 22:50:25 UTC	1378	IN	Data Raw: 59 31 54 30 52 6a 56 7a 6c 74 4e 32 74 6e 55 57 56 6a 55 57 68 34 53 30 5a 78 57 6c 6b 32 55 6b 4a 69 65 47 70 32 5a 58 52 52 4d 47 70 56 65 54 41 32 5a 79 38 7a 63 58 56 76 4e 31 6b 34 64 55 31 79 57 55 31 73 53 48 46 4f 57 46 64 75 63 43 73 32 4d 6d 52 71 51 33 68 4e 65 6b 74 58 65 6c 5a 35 4c 32 56 4c 4e 7a 42 48 64 33 6f 35 64 33 46 71 65 6a 46 76 55 53 39 32 4f 54 68 73 64 45 6c 35 59 6c 68 46 4f 47 46 58 52 58 42 51 56 48 5a 76 5a 6b 5a 57 63 6d 35 47 55 30 49 30 54 6d 74 51 61 6b 74 47 51 6a 52 48 53 55 70 49 61 54 46 54 4e 56 6b 72 64 58 68 53 57 46 64 71 57 45 78 4e 55 32 35 61 56 58 6c 4d 65 6b 31 31 61 30 70 42 63 7a 56 76 64 46 6f 32 52 45 5a 35 59 32 56 78 53 6b 38 33 61 47 70 73 54 6d 70 4d 65 45 31 50 55 54 42 52 5a 6a 4e 5a 64 6a 41 31 5a Data Ascii: Y1T0RjVzltN2tnUWVjUWh4S0ZxWlk2UkJieGp2ZXRRMGpVeTA2Zy8zcXVvN1k4dU1yWU1sSHFOWFducCs2MmRqQ3hNektXelZ5L2VLNzBHd3o5d3FqejFvUS92OThsdEl5YlhFOGFXRXBQVHZvZkZWcm5GU0I0TmtQaktGQjRHSUpIaTFTNVkrdXhSWFdqWExNU25aVXlMek11a0pBczVvdFo2REZ5Y2VxSk83aGpsTmpMeE1PUTBRZjNZdjA1Z
2024-10-24 22:50:25 UTC	1378	IN	Data Raw: 56 6b 56 5a 63 6c 4a 74 52 6d 4a 4e 54 6a 52 45 53 32 74 77 4d 57 6c 6d 4d 57 6c 51 5a 46 6c 4b 54 53 74 75 54 54 4d 78 56 30 74 4f 64 44 52 6c 61 58 5a 4b 4b 31 56 49 59 32 39 73 56 33 67 32 54 47 70 4f 55 6e 42 44 54 6d 46 6f 61 47 55 72 65 6d 4d 31 59 7a 4e 57 54 56 46 4d 62 6c 4a 73 52 30 31 6d 53 31 64 6d 54 47 64 33 61 6c 4e 56 63 79 73 76 4c 32 77 77 59 6c 46 44 53 6e 56 57 51 6b 5a 6b 56 33 68 76 4f 47 5a 73 4e 55 6c 31 4d 47 46 48 57 57 35 75 4b 32 64 6d 64 32 4e 55 62 33 64 32 64 48 63 35 61 6b 67 7a 65 46 64 54 57 56 4a 78 54 56 6c 33 51 55 70 4f 5a 45 78 61 62 7a 5a 34 53 58 51 7a 52 30 74 55 55 45 46 42 4e 7a 64 71 59 6c 42 6b 51 55 39 5a 54 6d 56 7a 62 32 74 59 63 56 67 77 56 45 35 6a 61 6e 56 45 5a 45 70 73 4d 6b 73 31 64 58 52 4b 4d 44 42 Data Ascii: VkVZclJtRmJNTjRES2twMWlmMWlQZFlKTStuTTMxV0tOdDRlaXZKK1VIY29sV3g2TGpOUnBDTmFoaGUremM1YzNWTVFMblJsR01mS1dmTGd3alNVcysvL2wwYlFDSnVWQkZkV3hvOGZsNUl1MGFHWW5uK2dmd2NUb3d2dHc5akgzeFdTWVJxTVl3QUpOZExabzZ4SXQzR0tUUEFBNzdqYlBkQU9ZTmVzb2tYcVgwVE5janVEZEpsMks1dXRKMDB
2024-10-24 22:50:25 UTC	1378	IN	Data Raw: 46 6f 4c 32 4a 43 55 6c 56 35 4b 32 6c 53 53 55 4e 58 5a 55 4e 72 52 32 78 72 63 32 56 4a 51 58 70 50 64 57 46 46 61 46 52 44 4d 45 68 56 5a 54 52 44 53 6e 42 6c 59 6b 6c 71 65 54 52 30 57 54 4a 73 62 32 46 76 59 6c 6f 72 4d 57 67 7a 65 6b 74 4a 57 55 74 55 65 56 51 32 54 55 38 76 5a 54 67 34 4e 45 52 5a 65 58 51 77 51 32 31 49 56 6d 6b 7a 4e 6d 52 71 51 57 52 71 55 6e 52 4e 5a 44 4e 6a 4e 56 5a 54 56 47 56 49 54 47 4e 57 56 45 74 4e 5a 32 52 48 63 6b 49 78 55 30 38 33 63 57 78 61 64 45 68 73 4e 6b 55 7a 54 6c 6f 76 52 48 42 31 56 45 52 76 5a 6a 46 55 53 54 4d 34 51 6a 56 31 5a 46 52 69 4d 57 5a 4e 53 55 4d 32 5a 47 73 33 64 57 70 47 62 6c 64 46 5a 54 6c 70 65 6d 31 34 4f 56 42 35 55 6c 46 33 63 55 6c 57 56 47 70 7a 64 46 70 42 57 55 56 42 53 48 63 31 51 Data Ascii: FoL2JCUlV5K2lSSUNXZUNrR2xrc2VJQXpPdWFFaFRDMEhVZTRDSnBlYklqeTR0WTJsb2FvYlorMWgzektJWUtUeVQ2TU8vZTg4NERZeXQwQ21IVmkzNmRqQWRqUnRNZDNjNVZTVGVITGNWVEtNZ2RHckIxU083cWxadEhsNkUzTlovRHB1VERvZjFUSTM4QjV1ZFRiMWZNSUM2ZGs3dWpGbldFZTlpem14OVB5UlF3cUlWVGpzdFpBWUVBSHc1Q
2024-10-24 22:50:25 UTC	1378	IN	Data Raw: 5a 6d 51 30 52 44 46 30 5a 30 4a 52 52 46 46 6c 54 6d 35 54 52 6e 46 4a 4c 7a 68 68 63 6b 5a 70 5a 45 52 73 4f 45 6c 79 56 6a 52 47 61 57 35 52 65 6b 5a 45 52 45 49 34 64 46 45 72 53 6e 6c 73 52 6a 5a 53 65 55 4d 33 5a 6b 6c 6f 4e 6d 78 6f 51 57 73 72 53 45 5a 5a 4d 31 46 42 54 32 56 68 55 44 4a 36 5a 31 6c 52 63 57 64 77 62 54 4a 54 59 6b 31 47 52 7a 52 6b 56 7a 46 61 56 56 56 5a 53 47 64 6c 56 55 34 35 65 56 6c 57 51 69 74 61 51 55 39 32 55 30 52 73 4d 30 5a 6b 62 55 39 6e 57 6b 70 36 62 44 42 54 62 57 34 30 53 30 73 32 53 57 51 32 4e 57 35 33 53 6e 56 54 55 47 63 79 54 6a 52 56 55 33 6c 4b 56 6d 77 30 52 57 46 79 65 47 35 5a 59 33 45 76 61 32 6f 7a 61 6e 4e 72 62 6d 78 79 5a 6c 45 31 4b 31 46 47 55 6b 56 43 52 6b 4a 75 4e 54 64 35 5a 45 6c 72 4f 56 52 Data Ascii: ZmQ0RDF0Z0JRRFFlTm5TRnFJLzhhckZpZERsOElyVjRGaW5RekZEREI4dFErSnlsRjZSeUM3ZkloNmxoQWsrSEZZM1FBT2VhUDJ6Z1lRcWdwbTJTYk1GRzRkVzFaVVVZSGdlVU45eVlWQitaQU92U0RsM0ZkbU9nWkp6bDBTbW40S0s2SWQ2NW53SnVTUGcyTjRVU3lKVmw0RWFyeG5ZY3Eva2ozanNrbmxyZlE1K1FGUkVCRkJuNTd5ZElrOVR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49829	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:26 UTC	1565	OUT	POST /recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 2137 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-protobuf sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=invisible&cb=99qpeju3sn34 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZy0BwTzkqryMMkvnxBvQCh02k0yRlGMyKfeGxGxLnk_TQMul1Jqk6KI_NdUWr2j8ac_ByiyUo6CENRknwo; NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:26 UTC	2137	OUT	Data Raw: 0a 28 36 4c 63 41 32 74 45 5a 41 41 41 41 41 4a 6a 37 46 54 59 54 46 39 63 5a 34 4e 4c 33 53 68 67 42 43 42 66 6b 57 6f 76 30 12 ce 0f 30 33 41 46 63 57 65 41 35 36 5a 53 48 48 42 46 71 5f 62 46 4f 7a 4e 47 75 7a 5a 52 49 5a 70 42 78 35 62 49 6a 77 38 71 49 65 55 56 6c 79 41 51 35 47 4f 37 30 6c 32 36 34 34 78 58 42 52 76 38 78 36 32 38 69 6a 68 54 39 66 52 2d 54 47 63 61 55 77 62 45 56 4b 78 79 55 65 7a 53 4b 49 6a 2d 62 74 45 63 52 56 67 37 47 75 47 7a 68 64 5f 38 78 30 45 57 65 43 55 34 46 51 6e 49 64 52 73 72 76 79 75 31 55 62 6a 4d 66 64 42 77 49 49 5f 34 5f 6b 30 56 4c 6e 45 67 6f 32 44 33 7a 43 6c 39 4b 79 62 51 52 49 62 70 69 64 30 6e 6d 41 5a 30 77 47 6e 5a 46 67 56 6d 43 75 6b 56 36 2d 35 34 70 57 58 47 44 32 68 38 64 4f 75 31 5a 49 62 78 4a 4a Data Ascii: (6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov003AFcWeA56ZSHHBFq_bFOzNGuzZRIZpBx5bIjw8qIeUVlyAQ5GO70l2644xXBRv8x628ijhT9fR-TGcaUwbEVKxyUezSKIj-btEcRVg7GuGzhd_8x0EWeCU4FQnIdRsrvyu1UbjMfdBwII_4_k0VLnEgo2D3zCl9KybQRIbpid0nmAZ0wGnZFgVmCukV6-54pWXGD2h8dOu1ZIbxJJ
2024-10-24 22:50:27 UTC	657	IN	HTTP/1.1 200 OK Content-Type: application/binary Access-Control-Allow-Origin: https://www.google.com Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Date: Thu, 24 Oct 2024 22:50:27 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49830	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:26 UTC	798	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZy0BwTzkqryMMkvnxBvQCh02k0yRlGMyKfeGxGxLnk_TQMul1Jqk6KI_NdUWr2j8ac_ByiyUo6CENRknwo; NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:27 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:27 GMT Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:27 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-24 22:50:27 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-10-24 22:50:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49833	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:28 UTC	1091	OUT	GET /RpY2HMoj2ZfD2CIy4-atnMUUU0gPk6afkefze7kC-XDgJqJW7fQc70yGdl8KOcxYSA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:28 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2080 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:50:28 GMT Expires: Fri, 25 Oct 2024 22:50:28 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:28 UTC	848	IN	Data Raw: 52 49 46 46 18 08 00 00 57 45 42 50 56 50 38 4c 0b 08 00 00 2f 3f c0 0f 00 2a ba b5 b6 3d 8e 9b fe 2b 5c cc 0c bc 1f 78 ac 77 58 04 83 1d cc 62 65 63 a4 ca 86 72 11 23 f9 02 a6 02 1e 75 a0 16 26 66 2c 76 80 c3 58 5e 42 01 32 7f 05 f2 2a 42 99 f7 52 b8 a1 fc 94 20 87 26 58 02 43 f5 a0 1e b4 15 f0 a0 03 46 b6 05 c5 76 72 1e 86 b2 05 28 de 0e e4 4d 03 38 cc 55 81 8b 70 8e 22 66 8c 59 84 7c 01 ea c0 43 2e 62 ca 50 21 4d 2d f2 6e 73 99 0e bc d0 84 3a 20 d4 03 19 31 45 19 9b 2a dc 0c 47 05 b8 97 87 1d 68 52 15 e0 63 34 c1 0a 14 5a c8 45 ca 24 09 10 40 00 d1 c4 1f 74 aa 0f d8 b6 6d db b6 b9 b6 6d db 36 b2 6d db b6 1d dc 00 00 08 36 67 74 f2 01 b6 6d db b6 6d db 8c 6d db 49 6d db b6 6d a3 ff 13 a0 27 7a cd 77 3d 91 0c 61 0c 81 0c c1 bd 45 4f 04 43 08 43 00 8d 37 Data Ascii: RIFFWEBPVP8L/?=+\xwXbecr#u&f,vX^B2BR &XCFvr(M8Up"fY\|C.bP!M-ns: 1E*GhRc4ZE$@tmm6m6gtmmmImm'zw=aEOCC7
2024-10-24 22:50:28 UTC	1232	IN	Data Raw: 45 52 28 56 ea 50 45 28 77 52 26 29 b5 44 4a be 57 52 70 0d 82 09 55 81 48 32 ba f3 07 a0 6b f3 27 29 b2 37 98 f3 cd 8e 65 67 cd 67 6f b2 b4 42 63 d3 16 5c 97 c8 22 c9 64 32 75 28 20 98 3b 21 13 95 c6 79 23 45 ca b5 f4 9e 70 fa 49 dc 62 3a a6 0e ed 3b 00 60 ee d5 e5 92 f7 ad cc f7 a1 67 7e 99 24 a3 db bf 70 9d 27 8a 0c be 9d 4b 2f ed d3 f7 ed d3 77 43 08 e6 8c cb 6a 28 6f 3a b2 fc 7e ab e3 08 42 49 d9 d3 41 00 26 0e c4 25 b2 77 d9 43 6d 63 d7 dc b6 d1 ab ce c5 17 8e f7 b9 a8 44 72 cd dd 47 7f e7 48 d6 e2 5b 0b b8 ce e0 45 2d 5c 3a 3f 23 5c 34 7b de f2 60 fe a4 aa ce 18 8e 6c 7c 39 4f a2 15 65 36 80 a1 3a e4 92 dc 1c 8f b2 49 37 07 bc 37 4f 96 28 2c 80 71 4a c1 ff b9 0f 70 9e c0 68 92 2c cb 7d be 77 dd a1 e2 19 95 a8 83 df 29 64 f0 57 f0 1c 9d eb 8e 0c 0c Data Ascii: ER(VPE(wR&)DJWRpUH2k')7eggoBc\"d2u( ;!y#EpIb:;`g~$p'K/wCj(o:~BIA&%wCmcDrGH[E-\:?#\4{`l\|9Oe6:I77O(,qJph,}w)dW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49835	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:28 UTC	1093	OUT	GET /RKt7FfLHYfXyEJkY2imqAe1BP96wjAHtm7tH_rZZmBBX2QkC_2luYj6jXlPqoRhX5HmB=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:28 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1854 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:26:38 GMT Expires: Fri, 25 Oct 2024 20:26:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 8630 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:28 UTC	845	IN	Data Raw: 52 49 46 46 36 07 00 00 57 45 42 50 56 50 38 4c 2a 07 00 00 2f 3f c0 0f 10 09 45 6d 23 39 9a f2 db f0 27 7c 15 42 44 ff 27 40 3f c1 cb 5c 14 4b 02 13 bd 2f 14 b4 91 14 95 1f 01 f8 57 89 83 3b d0 a0 a6 6d 23 c8 00 4e 37 1e 7f 90 ef a8 a8 6d 24 c7 5a 04 7b bd bc 8e 3f c8 53 ff 27 00 bf e4 63 f2 90 71 9b 17 f8 87 dd 78 00 04 2e 08 31 7a 41 da e9 64 00 44 74 ae ff 5f 64 27 bf ff ff ae cf de b8 55 09 ee ee ee ee ee ee 6e a5 3b 6d e8 42 45 eb 0e 95 7b 99 50 b9 bb 3b ac dc 9d 9d f9 e3 30 73 4b ec 8b b5 74 73 fe 27 36 58 1b 5f 06 2f a9 e6 9c b8 a7 23 1d 0e 53 51 ba db 2d 71 87 41 5a 2a f7 17 90 12 d7 17 e0 b2 27 8d 1c c8 b6 4d db 1a 6b 5f 7c db b6 ed 9f d9 b6 6d 33 b3 6d db b6 fd 43 db b6 6d 9f b3 f7 5e 72 6e db 36 b6 67 ef 73 ef f3 62 bc f9 8c d8 b6 93 ca ac 92 Data Ascii: RIFF6WEBPVP8L/?Em#9'\|BD'@?\K/W;m#N7m$Z{?S'cqx.1zAdDt_d'Un;mBE{P;0sKts'6X_/#SQ-qAZ'Mk_\|m3mCm^rn6gsb
2024-10-24 22:50:28 UTC	1009	IN	Data Raw: b3 14 db 24 1a 43 2a 94 df a4 74 de 85 34 5b 96 27 a3 ec df 04 c2 16 78 cc 78 35 1b 1f 11 65 1c 41 b7 95 5a a8 59 76 18 46 82 5d 62 a3 5d 14 11 c6 a9 96 41 8c d9 a9 45 02 30 47 9a 9c be 26 df 46 01 70 e7 7d f2 09 09 91 0a b4 66 51 ef d0 6b 9d f2 0a 63 71 22 69 9c a5 ce 51 59 8a 4a 53 56 9a 58 69 54 21 00 82 bc 6c 4c 4c 9a 29 6b e5 8f 29 d2 0c 82 18 2a 57 5c 87 fd 37 9f f8 70 85 8a eb 48 04 8f 45 76 5a fe 46 08 95 c1 41 02 67 90 7a 35 06 af 50 a5 a0 0a 51 71 8c 02 d9 42 00 9a 40 7f f1 8a 5a 50 22 09 29 bf c1 04 69 ba 0c 3a ff 89 20 a4 59 e5 03 e4 04 03 ba 90 71 12 6f 87 ed 73 f2 9d 0b 54 ba 01 04 2d b8 e8 99 08 74 5f 5c 49 c1 d3 0d b8 96 50 f2 aa 67 2a 99 e7 93 80 09 75 a0 5a f5 9d e8 37 5c 28 c1 3c 81 94 c8 13 8f 44 f6 38 fe 89 53 02 e0 bd d9 27 bf d6 5b Data Ascii: $Ct4['xx5eAZYvF]b]AE0G&Fp}fQkcq"iQYJSVXiT!lLL)k)W\7pHEvZFAgz5PQqB@ZP")i: YqosT-t_\IPg*uZ7\(<D8S'[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49836	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:28 UTC	1091	OUT	GET /vIMymGDzl2arE2styucCrIO35Qv6yX7iJJYZGmIUMXXV_mT5OyR5MjpkfHFB3tc8bA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:28 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2042 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:17:22 GMT Expires: Fri, 25 Oct 2024 21:17:22 GMT Cache-Control: public, max-age=86400, no-transform Age: 5586 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:28 UTC	845	IN	Data Raw: 52 49 46 46 f2 07 00 00 57 45 42 50 56 50 38 4c e5 07 00 00 2f 3f c0 0f 00 35 07 41 b6 cd ea ef fd 1c 21 22 26 a0 3f c5 72 a7 2b 6d ff 22 59 b9 6c 5c 6e 80 22 26 25 77 77 d7 f1 59 f7 ed fe f7 ac 1f 77 97 99 5f f7 bf 77 89 28 72 d7 3b 60 22 64 8a 18 b2 7f 6d 8a 7b ea cc 6c d5 64 87 4d c9 56 32 60 32 f4 06 a8 cd 70 49 dd ff e9 5e 01 4e d7 66 64 c7 87 13 6f d5 af 8e 66 58 e4 74 6d 7c 5c 22 2e 00 52 ed 2b a0 eb 5c 00 ae 11 19 d1 56 f5 05 1c 8d 70 38 16 12 69 ba f1 89 49 e4 0a 00 60 c8 55 d2 b2 b7 6d db 6d ca 74 f9 83 94 b6 9d b3 3d 8b db 9d 99 d8 b6 9d 54 b6 6d fb 3d c9 b6 6d 9b 76 95 2f 39 7b c7 76 f6 5a 73 c7 4e c9 76 d5 b6 6d d5 6d fd 81 ed a4 68 3c db 36 5b ff 1d b8 6d 1b 49 52 3d 7b ef ba 7b b5 6f 80 9a ff ff 3a e5 1e 9a 43 72 77 77 77 77 d7 6a 95 1d 20 Data Ascii: RIFFWEBPVP8L/?5A!"&?r+m"Yl\n"&%wwYw_w(r;`"dm{ldMV2`2pI^NfdofXtm\|\".R+\Vp8iI`Ummt=Tm=mv/9{vZsNvmmh<6[mIR={{o:Crwwwwj
2024-10-24 22:50:28 UTC	1197	IN	Data Raw: fa d2 f8 3e 7f 7f 0c 8a c5 b3 a3 95 88 88 b9 2c c0 23 0a 06 9a 0c aa 9d ce 2f e3 74 16 74 7f 7e 65 50 95 9a a2 08 34 57 e8 74 82 02 5b 1c 41 41 8b 21 c6 d3 68 5c ad 45 81 7d b6 b9 45 d7 db 87 71 19 e7 16 8e f6 19 72 3c 10 87 43 3c 93 30 0e fb 34 d3 98 73 7a 1d 10 0d 2b 87 11 95 50 ae a4 96 f8 63 20 7f de a6 40 1f a6 04 e0 0d db 0f 25 8d ac a7 dc 4e ea dd 28 d0 88 35 e8 87 1e c9 70 69 bb b1 5e 09 89 f7 78 7d a7 c0 3a 1a 20 fa 23 cd 05 44 7e 77 09 81 06 e5 72 f1 ec 18 f4 6b 00 22 2a d1 0b d4 e5 fa 5e 33 a4 a2 f7 df 6f 05 06 30 01 11 8d 79 21 8a 66 46 1a 95 a9 6c b3 ba 04 b5 62 05 c1 4b 02 ea fe fa 36 2e e3 33 05 62 10 10 b6 d4 c0 cc 82 c6 f9 c0 29 3e f8 42 bc 85 00 0d a6 d2 c3 77 38 3c 64 54 71 5f 33 d4 c3 13 20 03 ef 8b c3 d7 1b de a2 78 76 44 0d a9 68 e2 Data Ascii: >,#/tt~eP4Wt[AA!h\E}Eqr<C<04sz+Pc @%N(5pi^x}: #D~wrk"*^3o0y!fFlbK6.3b)>Bw8<dTq_3 xvDh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49838	172.217.23.110	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:28 UTC	1490	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 3047 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA; _gid=GA1.3.2110399767.1729810210; _gat_UA199959031=1; _gcl_au=1.1.1430326302.1729810210; _ga=GA1.1.104830921.1729810210; OTZ=7791770_72_76_104100_72_446760; _ga_6VGGZHMLM2=GS1.1.1729810213.1.1.1729810226.0.0.0
2024-10-24 22:50:28 UTC	3047	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 32 39 38 31 30 32 30 36 31 38 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1729810206181",null,null,null,null,
2024-10-24 22:50:28 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:28 GMT Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:28 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 32 39 38 31 30 32 32 38 37 36 38 22 5d 0d 0a Data Ascii: 1a["900000","1729810228768"]
2024-10-24 22:50:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49839	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:28 UTC	1105	OUT	GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=s16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:28 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 170 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:21:14 GMT Expires: Fri, 25 Oct 2024 20:21:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 8954 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:28 UTC	170	IN	Data Raw: 52 49 46 46 a2 00 00 00 57 45 42 50 56 50 38 4c 95 00 00 00 2f 0f c0 03 10 05 d4 da b6 96 47 af 93 94 43 2d c4 c5 c5 c5 31 33 2b 4e dc 38 2e 81 99 14 33 db 71 8c 47 bc f7 4d 0d 11 47 fe 9f 00 d0 7e be 34 fc 32 49 50 5f 9e ea 29 a5 9c a4 fe bc bb 5a 3a d5 7d e9 f6 9e fe 95 24 ad e4 d5 af c9 bf aa d7 20 4f 8f cb c5 ea a4 11 2c a5 94 91 8a 86 fd 51 55 bb 8a b7 fe 54 07 8d c2 ab 24 cf 3f 25 f9 db e8 e6 fe 7a 29 3b 49 32 5a 39 d5 fa 7f 3d 24 f9 de d5 7b f8 2f 75 a8 94 32 70 e1 63 6a 90 5c 9a bd fd 25 6d 00 00 Data Ascii: RIFFWEBPVP8L/GC-13+N8.3qGMG~42IP_)Z:}$ O,QUT$?%z);I2Z9=${/u2pcj\%m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49834	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:28 UTC	1105	OUT	GET /mw_NfsvKM8m6RPv8Fz2GQawCOsqWv010saMnc7zbWalMxuaA9IY8h7E0VMieLxSxAFB98NFeYqbFrXXq=s16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:28 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 148 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:21:59 GMT Expires: Fri, 25 Oct 2024 20:21:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 8909 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:28 UTC	148	IN	Data Raw: 52 49 46 46 8c 00 00 00 57 45 42 50 56 50 38 4c 7f 00 00 00 2f 0f c0 03 10 85 d3 6a db 96 e5 dd e9 9f 00 5d 40 47 80 c4 04 16 35 31 81 bb 43 a2 ba 47 92 33 82 bb 3c e1 fd fe 77 86 88 23 ff 4f 00 a0 f0 b0 d3 7b 15 50 bd d9 ec 49 29 a5 89 88 88 9b 8d ee 54 1f 2f 5d a9 d8 f6 11 a9 b0 7d 1d 11 31 5e f0 8e 7c d1 b6 7e 13 7d d9 a4 42 d9 cd 42 25 c7 8c 4a 50 cb f6 25 d9 ac 5c b2 ce ac 25 c8 e8 b5 24 98 0d 4b fa 59 2c 22 e8 5c 1a 16 2f 3f 23 02 00 Data Ascii: RIFFWEBPVP8L/j]@G51CG3<w#O{PI)T/]}1^\|~}BB%JP%\%$KY,"\/?#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49837	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:28 UTC	1093	OUT	GET /VRMWkE5p3CkWhJs6nv-9ZsLAs1QOg5ob1_3qg-rckwYW7yp1fMrYZqnEFpk0IoVP4LM=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:28 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 28068 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:41:01 GMT Expires: Fri, 25 Oct 2024 21:41:01 GMT Cache-Control: public, max-age=86400, no-transform Age: 4167 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:28 UTC	844	IN	Data Raw: 52 49 46 46 9c 6d 00 00 57 45 42 50 56 50 38 4c 90 6d 00 00 2f ff c0 3f 00 09 87 8d 24 45 8e 66 66 1f 58 ec fc 03 66 e1 08 21 a2 ff 13 10 01 48 89 97 d9 46 44 3c ca 1b 48 fa 96 17 0a 57 fb 2c 04 48 f8 3c a7 ef 19 b1 f0 06 e6 ee 55 19 01 40 0f 0c 66 ee 7e 23 a9 fa 06 66 a6 2e 62 89 57 05 08 06 92 5d e6 01 55 05 54 d5 9f a0 37 7e 58 d2 5a 8e de 60 d0 36 cb 13 00 96 d6 12 20 1d 0c 90 2f 72 ce 0b 60 d3 66 66 7c 43 4a 19 55 4d bd 61 66 44 15 49 79 87 9b 5f 93 51 f5 27 d9 65 de ac 2e b3 7e a7 75 87 53 90 54 b7 16 ef cc 22 22 25 12 0d d7 5c 1b b9 99 99 21 00 49 02 b0 71 fe 24 1d b0 ed 52 94 3b 49 ce c9 ab cb 08 bb 13 c9 ab e8 49 ce 0b d3 21 ce a6 1b 90 f6 c9 74 25 b3 d3 fe fb 01 80 e4 4e 76 fa d0 4a a3 99 8d f0 3d c7 18 ee ce 39 3f 44 44 64 e6 b0 ac d3 2e 5d 59 Data Ascii: RIFFmWEBPVP8Lm/?$EffXf!HFD<HW,H<U@f~#f.bW]UT7~XZ`6 /r`ff\|CJUMafDIy_Q'e.~uST""%\!Iq$R;II!t%NvJ=9?DDd.]Y
2024-10-24 22:50:28 UTC	1378	IN	Data Raw: 2b 40 5b d5 b6 7d 7a 4f 00 da f6 57 e7 bf 4b db fe 09 6d 57 e3 26 db ff 38 69 c2 3d a1 04 ff 4e 78 b0 81 00 1a 1b 3f 03 28 c0 c1 7d ad 7f 23 68 f8 1b a8 16 ae f5 af 00 19 ac 55 10 2b 55 c0 b5 46 04 06 aa 20 8e fe 62 d8 31 80 02 f4 a0 c0 40 da 36 d9 7e ff 96 67 20 6d 9b 6c fe 2d 7f 8f f0 93 ed 9f 25 db b5 6d b5 d6 db f0 27 7f ac 92 aa 1b ad 4f 0e 1f 81 01 61 ba 69 84 fb 47 30 d0 e8 12 04 8a c4 34 9b fb 43 d0 68 c8 9c 37 49 a3 1c b9 41 60 fa 57 b9 69 34 b7 68 4c 02 f7 9b fb 21 68 0c a6 db 11 a4 39 19 05 82 44 13 f3 e2 ca 41 db b6 6d 24 bb ef f6 ff 2d 9e ff 98 00 bd d1 b6 2d db b6 2d e7 ef ee ee 8e bb bb 66 50 82 43 aa 31 29 74 a0 11 b4 41 46 4a 01 ee 90 ba 3b bc 3c 9f 9c d7 f3 dd 37 1d ac 0d bc f3 a5 58 46 76 07 eb 0c f9 d6 00 f3 57 80 a5 7a 34 70 e4 c8 1b Data Ascii: +@[}zOWKmW&8i=Nx?(}#hU+UF b1@6~g ml-%m'OaiG04Ch7IA`Wi4hL!h9DAm$---fPC1)tAFJ;<7XFvWz4p
2024-10-24 22:50:28 UTC	1378	IN	Data Raw: 95 c5 79 bb ca 55 08 80 88 48 81 04 6e e1 f8 8e dd 2e de 39 a8 ca 6a 97 d2 73 15 c9 61 72 7e 29 a5 aa 0b 6e 53 e3 d9 83 be be 1b 95 6e cc 04 06 05 a1 52 49 75 d2 c2 82 a8 24 b6 e7 3d 26 d1 9e f3 eb 8c 63 d9 3c 4d 67 65 d5 c0 0e d7 87 0d 64 2c 0c ce 84 d9 13 f4 ec 65 85 36 f1 12 7d aa b3 66 9b 3f 0c 9a 30 7c 61 30 2f b8 8d db 6f ab 47 c7 0c d6 bc ca 51 d3 1f f2 56 08 f5 c6 3e 48 23 4d fc a4 90 ea 22 28 6e d8 c4 4a ea 3a 0e ce 26 c7 ee eb b6 4b 75 55 13 7e 36 a2 00 54 6a a9 ef 8c 0a 81 04 b9 51 9d fc d4 48 37 57 29 c3 5e 11 5e ee f5 8e 27 72 2b e7 b6 ea 22 78 8a d2 1d b6 a2 9b 1a 66 93 fb 4c a5 4a e5 0a 44 29 15 1f df ea 8a 7d 07 7b 9c e3 b1 c6 cb 51 e3 36 fa 5b 07 b1 f1 a4 1b 83 be 8d 31 5b 6f 1f 82 35 dc df 6b 0a 67 ab e6 01 36 b5 a9 41 10 20 82 73 bf 2e Data Ascii: yUHn.9jsar~)nSnRIu$=&c<Mged,e6}f?0\|a0/oGQV>H#M"(nJ:&KuU~6TjQH7W)^^'r+"xfLJD)}{Q6[1[o5kg6A s.
2024-10-24 22:50:28 UTC	1378	IN	Data Raw: d7 bc 59 c7 dc 2b 89 b7 63 11 14 d4 20 11 55 12 0c fa fa 31 49 a5 3d 49 42 ea 33 4e b9 36 29 a7 57 32 d5 11 41 f7 fe a6 7c 67 51 32 ea b5 f8 49 69 ca 5a 66 ae e7 1c 71 2a 22 df 82 6b de 55 d7 bc 08 a3 33 f3 6a de e5 bd 44 06 0f 21 07 81 a0 0e 19 cc 12 01 78 19 7f 50 ec c2 8a ae 84 88 32 56 7a e9 56 1b 3b e0 94 f9 75 37 99 2a 17 e9 b5 a5 5f dd 4e 43 c5 af 21 f8 3c 2e 45 25 50 a0 52 b9 95 74 45 cd 0e 09 4d 02 f9 52 9b 0f 44 c9 11 dd 2b 19 4f c0 4d 0b 3d c7 b6 b4 6a 79 f0 41 8e f4 1b ae a5 12 42 42 08 49 59 8a 34 ce 3a dc c5 51 cc 18 2f 19 04 91 6e cf 86 a6 b4 5e 43 ca 08 09 95 40 32 91 47 6e 11 63 02 d8 c6 66 cc 29 35 b7 d8 4b ac c0 91 cc cc 8b 80 b2 ea 6d 42 39 26 6f 9f 65 b2 7c 0e 49 1a a2 44 29 0a 90 3a e9 72 2b 4f de 7b e3 ca 7c ce 2f 7f 85 f7 de 38 55 Data Ascii: Y+c U1I=IB3N6)W2A\|gQ2IiZfq"kU3jD!xP2VzV;u7_NC!<.E%PRtEMRD+OM=jyABBIY4:Q/n^C@2Gncf)5KmB9&oe\|ID):r+O{\|/8U
2024-10-24 22:50:28 UTC	1378	IN	Data Raw: e6 71 3b 66 5d bf ae d2 74 47 d5 51 db b1 d4 a8 a2 a2 60 4c a2 31 b9 eb 88 37 5f f7 51 9a 75 07 55 77 c8 87 b0 a9 b7 95 4a ca a9 3a ba fb 07 64 bd f5 de 76 01 c2 42 3f f3 5d f2 f8 d6 e2 ba 31 dc 55 62 10 40 10 42 08 62 e4 1e 82 8b 40 12 39 10 2b 09 3c 48 1e 1e 77 8d d7 3b e8 56 5b b6 6e 85 51 35 df ef e7 b5 ee 85 75 1c f5 5a a9 af 5d 34 a4 89 64 41 08 6a 04 51 b2 a4 d4 fa fe b7 fb 30 5f be ef 4e 91 7c 48 52 6f f1 89 8a 7c 26 c9 5c 1f 14 b5 5a ed 32 d6 c8 b5 7e c2 f9 9c ba 25 21 49 86 80 01 63 0c 72 d9 a0 70 c9 09 20 90 5e c4 6b 2e 21 cf 2f 72 20 58 ca c5 3c 22 21 b9 07 d4 d4 ec d3 3e 35 d4 71 8c e5 71 bc 7b b2 5b 36 7f c8 69 55 ea b1 f6 69 14 13 4c 8b 2c 45 d1 18 5d 6a cd dc cf 49 af a9 23 ea a6 d5 9b 5d a1 f5 31 8d bb 12 94 18 52 04 65 b6 e6 28 d3 27 a0 Data Ascii: q;f]tGQ`L17_QuUwJ:dvB?]1Ub@Bb@9+<Hw;V[nQ5uZ]4dAjQ0_N\|HRo\|&\Z2~%!Icrp ^k.!/r X<"!>5qq{[6iUiL,E]jI#]1Re('
2024-10-24 22:50:28 UTC	1378	IN	Data Raw: 22 da aa 8c 1d 4f 53 5f e7 7e bc 2f 38 ff eb b5 5f 41 59 d8 22 41 56 5b 18 34 2e 00 b1 87 97 17 f2 60 ff ff 8e a9 a6 e4 6e ea 03 f4 19 d6 84 d2 93 2f 86 15 7e f1 1b e1 0e 04 69 cc fd 22 8b e3 c2 73 9c f7 49 38 49 c8 45 45 f0 8b aa fb d7 3f 1c bf f3 d7 3a aa aa d8 f1 b4 82 0a 21 2d a2 21 04 63 e2 82 f7 de 17 e4 13 07 fe 0b 2b 2e 97 cd 40 f4 39 3e 92 44 3a d8 27 6f a1 d1 cc 98 3c 82 e0 17 09 f1 1a 72 2e e4 bc b5 a9 36 4c 2f 98 d4 fc 8d ae 9b db e1 fe 76 17 41 44 b1 2d 24 6a 50 96 7a 0f 78 d9 fc d5 06 22 52 13 75 03 fa 2c 6b 27 6f 80 9a 5a 60 21 10 21 e4 17 29 2e 27 97 4b 44 02 e7 ed e9 6e 43 ff de da fb 9c 7b 39 8f fc 9a 23 0d 41 b1 69 40 5c 62 5a 58 2e 9e 79 b9 d9 f2 7b 26 1a cf 1d 3c fa 34 73 e1 13 75 6c 73 1d 12 b5 11 8c e4 88 44 12 04 91 10 22 97 13 52 Data Ascii: "OS_~/8_AY"AV[4.`n/~i"sI8IEE?:!-!c+.@9>D:'o<r.6L/vAD-$jPzx"Ru,k'oZ`!!).'KDnC{9#Ai@\bZX.y{&<4sulsD"R
2024-10-24 22:50:28 UTC	1378	IN	Data Raw: 58 24 f4 db bf be 38 8c 20 d9 e1 1e 39 f7 bc 04 76 aa 88 51 5d 2b cb c4 65 a0 19 40 14 6c 00 67 f1 c8 f1 8b fe 5f b5 0b 44 b8 89 3d 7f fc f1 5f 73 1d 4c a7 07 61 30 6e 0c 03 20 82 6a 68 fb 44 ce 9b 04 09 f2 92 7b 5c 20 09 ce fb 93 e3 e4 e4 1e 17 97 9c 20 ec c0 cd eb 25 56 f4 cd 51 04 c8 b0 4b 26 f7 40 a0 21 24 f7 e4 b9 c8 23 14 15 9a 2a ba 16 59 da 16 66 69 42 b3 a5 21 88 50 42 0f 62 4f c9 33 23 ca d8 65 bc ce a5 8c 0e 2a 2d 8e 7f 4f 39 72 51 50 40 b1 8a 48 e2 cd 27 77 41 9c e3 20 e1 0e 27 77 e4 5c 4e 70 b9 38 81 40 04 60 4a f0 6b 31 23 40 6a 6c ef a1 cd 3f 44 84 78 8e 24 77 02 1b a8 55 70 f1 0f 49 e2 ca 4a a2 8b d0 d2 b0 7d aa 09 3c 67 e9 78 f5 ca ef ac 26 88 82 fa 73 52 f7 fe 96 be e1 97 b3 f1 32 da 5a a4 a8 32 2d d1 84 13 11 91 87 c8 09 c9 9b cb 25 81 Data Ascii: X$8 9vQ]+e@lg_D=_sLa0n jhD{\ %VQK&@!$#YfiB!PBbO3#e-O9rQP@H'wA 'w\Np8@`Jk1#@jl?Dx$wUpIJ}<gx&sR2Z2-%
2024-10-24 22:50:28 UTC	1378	IN	Data Raw: 04 90 82 4d 3b 8c f7 2f a3 5a 64 da 08 d1 31 63 c2 13 44 c4 fd e3 fe 01 35 28 f0 14 2a 80 aa 2a 95 a9 f2 a3 14 69 7d 85 42 bc f5 55 3b 68 6b 47 67 0f 93 69 9e fd 95 57 f2 25 a0 81 02 93 68 6d 9a 85 54 a0 6b 46 a9 15 17 af 8a 04 30 31 10 4c 4c 30 aa 7b 83 5c ee 5c f6 dd 67 76 d3 fb 40 bf c4 4a c3 c5 42 52 bc 25 ce 92 c3 da 31 0d e2 9d 99 ab 10 e1 e1 65 1f 82 3c a2 20 f2 54 01 54 55 51 45 e0 0b 77 35 f5 3e 7c 3e f1 ef 83 4d ad 90 8d 4a 56 3e c0 0b b9 d2 c2 f8 f4 ea 0f a8 94 0a ee 37 16 a9 22 60 96 a2 b6 80 44 3c 09 c5 a8 d9 41 80 18 30 ac 18 12 09 39 84 67 27 74 4d 2f 7d 5c 04 68 3e e3 87 9b 87 23 f7 84 87 3d d6 ee d6 d7 64 a4 f2 eb 3b 9d e1 a4 27 92 50 11 24 0f 88 52 ac 42 85 4a 08 30 7d 44 9f 95 40 e5 f3 8f a0 47 be 93 6c 9f e0 c1 10 d5 ff 9c 78 6c 40 0c Data Ascii: M;/Zd1cD5(**i}BU;hkGgiW%hmTkF01LL0{\\gv@JBR%1e< TTUQEw5>\|>MJV>7"`D<A09g'tM/}\h>#=d;'P$RBJ0}D@Glxl@
2024-10-24 22:50:28 UTC	1378	IN	Data Raw: 68 d6 50 ba d3 9c 69 07 7f 1c de 0b 56 14 14 91 18 0e 1d b7 2d 2b 14 09 d6 d0 7d 31 e7 e0 92 08 a1 19 fb cf 9f 96 68 e2 2d d9 6e 24 c4 13 48 5c 3c 87 ec c5 b2 6c f9 5d 06 a9 37 6e 1f 4c f1 ab 0f f9 d5 fc dd c4 69 b1 6a 8e a0 75 18 69 74 0a ad f1 62 a9 68 45 b5 5a a4 0a 02 c0 93 ae 9d 1f 71 3f 67 a2 3b 1a ca 9b b0 d0 4d 32 27 cd 7c e9 7b fa f8 6b a2 96 08 a0 55 44 e5 d3 a1 6b 8b 71 07 6a 05 0d 0e 12 23 19 e6 16 29 d2 60 72 de fa 8b ff 39 09 27 11 f2 88 60 74 f7 da 96 5f d9 f2 eb 64 2b ea a3 eb ed 0f fd be a4 79 42 d2 2d 10 ce 40 73 29 35 2d 0a ac b2 c0 85 a8 52 56 a1 20 e8 b0 68 ff 73 9f 27 af ea a5 6c f9 22 58 68 d7 d0 a7 9f fc 11 6f 75 e3 5f 2a 2a 97 09 2e 3a 73 86 b4 6a 82 6b 75 dd c2 85 62 ea 00 d0 45 78 2e 24 18 e6 8d 48 54 e3 c9 81 27 88 37 f1 40 42 Data Ascii: hPiV-+}1h-n$H\<l]7nLijuitbhEZq?g;M2'\|{kUDkqj#)`r9'`t_d+yB-@s)5-RV hs'l"Xhou_**.:sjkubEx.$HT'7@B
2024-10-24 22:50:29 UTC	1378	IN	Data Raw: ef 12 3d 00 0c 30 98 29 00 14 c0 0e 4e 4c de 7e 4b 7c 8f bb 37 f9 ad 24 1a d4 8c ae 54 dc c2 8c ce 91 f7 78 7d 72 24 e1 e4 42 34 fd 52 ee 7c 86 ef 25 f1 e4 ee de 24 3c b9 48 1e 59 18 45 8d 59 86 4a 53 1b 0b 12 6a 07 15 ae 42 ad 8e 06 aa bc 7c cf ad 0d b2 22 cd 22 0d 4d 46 b8 45 f7 38 7d 69 10 6d a6 b9 66 56 7b 7d 0e ef 47 2c 1b e8 e8 c0 60 06 18 cc 60 02 82 03 f3 2e 88 bd 3b 11 0b 66 95 69 1b 14 09 fa ee 7d 9e b5 24 69 06 88 87 47 12 24 11 91 a0 b5 77 aa 87 93 78 10 6f 9f 27 11 af 27 44 a4 8a d0 a9 36 4d 15 6d a8 94 12 32 c3 20 8d 6f 35 a3 0b ac b9 9c 37 9a 8a d8 58 11 67 8e 79 88 3d f5 9f 5f 8e 48 13 99 38 dd c5 7e 20 96 0e 05 f2 80 23 66 30 18 60 30 02 31 81 26 ba 7c cb 8b 9f e6 2a 71 31 12 ec ee 45 7f 67 34 1a 4f 2e 22 89 88 c7 5b 2b 7c e9 9d 00 8e 88 Data Ascii: =0)NL~K\|7$Tx}r$B4R\|%$<HYEYJSjB\|""MFE8}imfV{}G,``.;fi}$iG$wxo''D6Mm2 o57Xgy=_H8~ #f0`01&\|*q1Eg4O."[+\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49840	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:28 UTC	1572	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 12677 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=invisible&cb=99qpeju3sn34 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZy0BwTzkqryMMkvnxBvQCh02k0yRlGMyKfeGxGxLnk_TQMul1Jqk6KI_NdUWr2j8ac_ByiyUo6CENRknwo; NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:28 UTC	12677	OUT	Data Raw: 0a 18 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 12 ce 0f 30 33 41 46 63 57 65 41 35 36 5a 53 48 48 42 46 71 5f 62 46 4f 7a 4e 47 75 7a 5a 52 49 5a 70 42 78 35 62 49 6a 77 38 71 49 65 55 56 6c 79 41 51 35 47 4f 37 30 6c 32 36 34 34 78 58 42 52 76 38 78 36 32 38 69 6a 68 54 39 66 52 2d 54 47 63 61 55 77 62 45 56 4b 78 79 55 65 7a 53 4b 49 6a 2d 62 74 45 63 52 56 67 37 47 75 47 7a 68 64 5f 38 78 30 45 57 65 43 55 34 46 51 6e 49 64 52 73 72 76 79 75 31 55 62 6a 4d 66 64 42 77 49 49 5f 34 5f 6b 30 56 4c 6e 45 67 6f 32 44 33 7a 43 6c 39 4b 79 62 51 52 49 62 70 69 64 30 6e 6d 41 5a 30 77 47 6e 5a 46 67 56 6d 43 75 6b 56 36 2d 35 34 70 57 58 47 44 32 68 38 64 4f 75 31 5a 49 62 78 4a 4a 6a 53 51 53 68 55 4a 52 6d 74 47 5a 66 49 44 4e Data Ascii: lqsTZ5beIbCkK4uGEGv9JmUR03AFcWeA56ZSHHBFq_bFOzNGuzZRIZpBx5bIjw8qIeUVlyAQ5GO70l2644xXBRv8x628ijhT9fR-TGcaUwbEVKxyUezSKIj-btEcRVg7GuGzhd_8x0EWeCU4FQnIdRsrvyu1UbjMfdBwII_4_k0VLnEgo2D3zCl9KybQRIbpid0nmAZ0wGnZFgVmCukV6-54pWXGD2h8dOu1ZIbxJJjSQShUJRmtGZfIDN
2024-10-24 22:50:29 UTC	1000	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Date: Thu, 24 Oct 2024 22:50:28 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: _GRECAPTCHA=09ANOXeZwvAZkhUuyzhgCpmRkJOxhsuNribcRO1sMUFClzXvRUwULgzOtRe0aDqUF_csWETf2grcuUCK1-ikaCJLI; Expires=Tue, 22-Apr-2025 22:50:28 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Expires: Thu, 24 Oct 2024 22:50:28 GMT Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:29 UTC	378	IN	Data Raw: 33 30 39 62 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 34 7a 73 62 41 66 6b 6c 58 33 59 4e 63 46 68 4d 33 43 48 75 4b 38 58 41 71 47 70 58 54 43 73 59 65 72 4a 37 48 46 64 48 59 7a 4a 71 59 43 4f 61 65 6f 70 58 2d 62 5a 56 78 49 36 6d 79 48 4f 4d 46 70 6f 5a 47 4c 30 31 72 63 4e 64 63 33 59 37 69 6a 39 49 6b 65 79 47 59 32 54 65 50 45 32 73 30 4f 6e 56 4e 6d 73 78 43 6c 6a 30 70 58 42 50 38 74 79 47 57 50 62 61 6a 4b 45 46 34 53 32 4e 78 47 72 71 58 31 4f 31 38 32 6f 4e 45 35 36 55 6d 52 78 45 48 45 54 63 47 32 45 66 6b 6a 74 74 66 50 70 43 71 4d 67 45 4d 63 75 79 78 68 51 79 5a 77 75 64 79 54 61 54 45 4d 4a 6e 7a 49 70 68 55 49 6e 53 41 4f 5f 43 4b 37 68 45 79 62 64 6f 30 30 56 75 47 62 71 6f 4a 58 6c 77 55 4b 4e 78 62 Data Ascii: 309b)]}'["rresp","03AFcWeA74zsbAfklX3YNcFhM3CHuK8XAqGpXTCsYerJ7HFdHYzJqYCOaeopX-bZVxI6myHOMFpoZGL01rcNdc3Y7ij9IkeyGY2TePE2s0OnVNmsxClj0pXBP8tyGWPbajKEF4S2NxGrqX1O182oNE56UmRxEHETcG2EfkjttfPpCqMgEMcuyxhQyZwudyTaTEMJnzIphUInSAO_CK7hEybdo00VuGbqoJXlwUKNxb
2024-10-24 22:50:29 UTC	1378	IN	Data Raw: 47 4e 76 75 35 5f 61 71 49 4d 4b 79 61 7a 38 44 37 52 64 62 44 58 30 30 56 41 35 42 39 53 71 66 44 34 61 54 41 43 45 78 53 56 64 71 42 5a 43 68 2d 4d 53 6a 6b 31 6e 6f 6f 41 70 5a 70 44 41 32 63 78 4b 71 48 7a 41 59 49 56 75 5f 41 6d 63 49 62 50 6b 77 77 41 4e 4e 35 54 6d 50 34 59 31 65 38 76 6a 6f 39 73 44 55 34 4c 32 30 7a 43 52 53 71 67 45 39 6e 6c 41 5a 4e 33 33 50 64 58 6b 47 4e 36 78 6c 77 4b 58 6a 49 35 4e 4c 70 57 53 50 47 68 35 66 57 38 7a 6b 5f 49 51 66 75 49 6d 45 47 54 4f 47 35 35 5a 75 61 35 6f 6c 42 47 75 36 78 32 67 61 75 4d 70 75 6c 4f 47 2d 4d 54 38 58 31 34 30 57 55 53 69 46 42 50 56 49 6f 72 45 2d 45 65 52 79 64 66 47 56 65 63 39 67 33 6f 74 4c 73 56 48 75 58 64 48 41 48 64 55 4a 51 45 6c 65 6c 55 31 6c 66 5a 78 62 79 74 77 64 49 57 30 Data Ascii: GNvu5_aqIMKyaz8D7RdbDX00VA5B9SqfD4aTACExSVdqBZCh-MSjk1nooApZpDA2cxKqHzAYIVu_AmcIbPkwwANN5TmP4Y1e8vjo9sDU4L20zCRSqgE9nlAZN33PdXkGN6xlwKXjI5NLpWSPGh5fW8zk_IQfuImEGTOG55Zua5olBGu6x2gauMpulOG-MT8X140WUSiFBPVIorE-EeRydfGVec9g3otLsVHuXdHAHdUJQElelU1lfZxbytwdIW0
2024-10-24 22:50:29 UTC	1378	IN	Data Raw: 34 4c 30 64 5a 4d 45 31 6d 61 6d 5a 79 52 6d 46 4e 5a 7a 56 51 55 79 74 6f 52 56 51 34 64 33 4e 4b 54 31 4e 51 64 56 68 35 54 47 4a 75 51 57 78 34 57 48 6c 53 65 6a 68 6d 4e 55 68 6b 61 55 78 61 65 6c 70 6e 51 6c 5a 78 54 6a 55 7a 53 7a 52 78 4b 7a 5a 5a 5a 6e 5a 32 63 56 6c 36 4c 30 4e 69 52 31 4e 31 65 48 4d 31 53 6a 46 51 56 6a 42 30 59 33 56 70 4d 47 5a 74 54 6a 4e 4c 62 57 34 31 54 57 46 6d 4e 53 39 68 63 6d 77 32 59 30 31 4e 56 44 56 51 61 45 64 68 55 46 5a 79 53 32 35 52 55 45 39 49 51 6e 56 5a 54 33 49 30 4f 48 5a 53 51 6d 46 76 5a 45 78 6c 54 57 46 54 5a 6a 4e 73 61 31 4a 6d 56 47 39 4a 4b 31 46 4b 56 6d 4e 61 53 46 68 68 61 45 52 6d 63 46 55 35 4c 32 46 6e 4e 69 74 4d 4d 7a 4a 34 65 57 68 59 4d 45 63 35 64 6c 46 72 5a 45 78 61 57 45 4d 34 59 33 Data Ascii: 4L0dZME1mamZyRmFNZzVQUytoRVQ4d3NKT1NQdVh5TGJuQWx4WHlSejhmNUhkaUxaelpnQlZxTjUzSzRxKzZZZnZ2cVl6L0NiR1N1eHM1SjFQVjB0Y3VpMGZtTjNLbW41TWFmNS9hcmw2Y01NVDVQaEdhUFZyS25RUE9IQnVZT3I0OHZSQmFvZExlTWFTZjNsa1JmVG9JK1FKVmNaSFhhaERmcFU5L2FnNitMMzJ4eWhYMEc5dlFrZExaWEM4Y3
2024-10-24 22:50:29 UTC	1378	IN	Data Raw: 48 52 6f 52 6a 5a 59 4d 45 6c 72 4d 55 46 45 5a 47 70 75 4d 43 73 77 56 7a 52 48 54 56 4e 4b 63 6e 5a 31 4e 32 56 6a 59 6e 5a 4a 56 47 35 34 64 6e 64 57 56 54 42 46 53 32 56 4d 62 31 56 6f 61 6e 68 6d 59 30 73 34 51 55 45 32 5a 6e 64 4e 54 6e 68 51 5a 31 4e 4b 55 31 52 6e 54 33 5a 73 54 6d 38 33 63 57 63 31 51 6c 56 46 59 6d 68 73 55 6e 56 50 59 6a 5a 34 51 55 5a 47 56 6c 56 52 4d 55 51 30 4e 33 68 6b 64 32 6b 77 54 6d 70 35 64 32 4a 59 4e 47 35 6b 53 6a 5a 4b 61 46 4a 55 62 30 52 35 64 57 31 78 4d 6b 55 30 5a 32 6f 77 5a 56 4a 50 61 6e 46 36 4e 55 67 32 52 7a 68 78 59 6b 56 7a 63 30 52 4a 63 55 4e 31 63 31 64 4c 54 57 68 6a 55 56 4e 43 65 54 4a 6e 57 55 31 4d 5a 54 46 47 54 54 4a 61 4e 45 6c 56 65 55 74 57 59 30 45 78 55 30 6c 75 61 6b 78 33 53 48 6b 7a Data Ascii: HRoRjZYMElrMUFEZGpuMCswVzRHTVNKcnZ1N2VjYnZJVG54dndWVTBFS2VMb1VoanhmY0s4QUE2ZndNTnhQZ1NKU1RnT3ZsTm83cWc1QlVFYmhsUnVPYjZ4QUZGVlVRMUQ0N3hkd2kwTmp5d2JYNG5kSjZKaFJUb0R5dW1xMkU0Z2owZVJPanF6NUg2RzhxYkVzc0RJcUN1c1dLTWhjUVNCeTJnWU1MZTFGTTJaNElVeUtWY0ExU0luakx3SHkz
2024-10-24 22:50:29 UTC	1378	IN	Data Raw: 34 56 6b 74 54 53 69 39 61 4d 45 56 6f 4e 47 52 36 63 6d 68 78 55 33 52 69 65 6c 64 7a 4e 46 56 76 5a 7a 63 76 4e 56 6c 58 63 58 51 30 5a 6c 6c 47 4c 33 4a 6a 56 46 49 34 53 54 56 6a 56 44 45 35 5a 46 64 51 57 56 6f 77 52 6e 68 74 5a 48 4d 7a 61 6d 68 68 52 46 56 77 56 54 56 4d 5a 44 63 7a 62 6a 42 72 56 30 45 33 54 47 68 51 4e 58 6c 36 5a 57 6c 31 61 54 4d 72 59 7a 64 61 4c 30 35 36 62 48 4e 59 56 47 46 76 64 45 35 79 51 7a 64 4c 62 30 5a 50 62 6d 77 7a 55 45 6b 72 55 7a 55 7a 51 6e 42 6e 63 32 39 36 4c 30 52 49 63 46 52 44 4d 6a 56 4c 65 45 4e 33 54 6a 68 48 62 57 31 75 57 47 5a 75 61 31 56 72 61 45 5a 6d 4b 33 4a 48 51 6e 4e 46 57 47 70 33 53 30 64 68 62 47 6b 34 64 54 45 34 52 45 64 55 52 56 49 32 51 6d 64 6a 59 56 4d 7a 53 6d 46 79 5a 6b 73 72 4d 47 Data Ascii: 4VktTSi9aMEVoNGR6cmhxU3RieldzNFVvZzcvNVlXcXQ0ZllGL3JjVFI4STVjVDE5ZFdQWVowRnhtZHMzamhhRFVwVTVMZDczbjBrV0E3TGhQNXl6ZWl1aTMrYzdaL056bHNYVGFvdE5yQzdLb0ZPbmwzUEkrUzUzQnBnc296L0RIcFRDMjVLeEN3TjhHbW1uWGZua1VraEZmK3JHQnNFWGp3S0dhbGk4dTE4REdURVI2QmdjYVMzSmFyZksrMG
2024-10-24 22:50:29 UTC	1378	IN	Data Raw: 57 35 78 54 54 4d 78 4d 45 4e 77 59 31 6b 79 5a 31 52 4f 53 6b 46 70 4b 32 39 36 57 6e 4a 53 5a 6e 56 77 63 32 46 5a 56 32 31 4f 53 44 6c 6f 55 30 74 4d 56 31 55 76 53 31 4a 4c 57 46 4a 6b 65 48 46 57 54 6d 56 7a 4b 79 74 4d 54 30 51 79 56 30 74 55 55 57 6f 30 61 7a 64 4a 61 48 5a 36 56 55 70 48 54 6a 56 74 5a 6a 68 32 57 6d 68 42 52 32 68 72 5a 33 59 34 56 6a 55 35 54 45 56 44 51 32 64 36 57 6b 4a 61 4e 7a 4a 6c 55 44 42 70 54 45 78 30 52 48 68 42 51 31 51 72 57 6d 4a 4b 54 31 46 7a 52 31 70 32 64 45 74 48 63 57 31 4d 52 57 49 78 56 47 77 7a 4b 31 42 36 62 33 5a 73 63 57 56 36 55 32 39 78 61 54 46 4f 53 43 74 32 61 6c 5a 58 64 58 42 46 54 56 46 77 4b 31 64 58 52 31 64 71 5a 55 64 59 65 6c 64 4c 62 31 63 32 53 6a 6c 73 62 6e 68 43 56 44 4a 49 62 46 70 47 Data Ascii: W5xTTMxMENwY1kyZ1ROSkFpK296WnJSZnVwc2FZV21OSDloU0tMV1UvS1JLWFJkeHFWTmVzKytMT0QyV0tUUWo0azdJaHZ6VUpHTjVtZjh2WmhBR2hrZ3Y4VjU5TEVDQ2d6WkJaNzJlUDBpTEx0RHhBQ1QrWmJKT1FzR1p2dEtHcW1MRWIxVGwzK1B6b3ZscWV6U29xaTFOSCt2alZXdXBFTVFwK1dXR1dqZUdYeldLb1c2SjlsbnhCVDJIbFpG
2024-10-24 22:50:29 UTC	1378	IN	Data Raw: 44 59 32 6c 4d 57 6a 4d 30 4e 46 4d 78 61 55 52 6e 56 6b 4a 72 57 45 4a 6f 52 46 4a 52 4d 48 42 33 5a 55 52 35 56 30 46 4e 62 53 39 70 61 48 64 4e 53 6b 68 42 53 6d 51 30 62 6e 4e 57 54 6b 68 6d 63 6c 42 5a 64 48 46 59 54 55 39 6c 4e 57 56 34 55 47 46 59 63 57 46 30 63 6c 6c 61 4d 47 31 74 54 46 70 30 56 48 46 72 65 45 31 34 59 6d 70 79 52 44 64 57 5a 45 56 43 4c 33 64 48 56 45 39 69 4d 6b 4e 6d 62 48 56 31 55 6d 64 4a 56 47 39 36 4d 33 64 58 51 6a 64 35 63 6d 52 70 4f 47 35 31 4d 30 4a 6e 61 48 45 32 62 47 46 48 55 31 6b 30 64 32 30 76 61 6e 52 5a 4b 33 56 78 54 57 59 7a 62 6b 6c 36 4e 45 6c 45 4f 48 46 57 52 6d 4e 70 53 6c 68 6f 52 57 4a 73 61 6a 4e 5a 56 47 4e 6e 56 6c 4d 72 62 32 5a 54 61 47 5a 7a 62 6e 68 4f 56 33 4a 78 63 32 68 5a 4e 58 56 54 5a 45 Data Ascii: DY2lMWjM0NFMxaURnVkJrWEJoRFJRMHB3ZUR5V0FNbS9paHdNSkhBSmQ0bnNWTkhmclBZdHFYTU9lNWV4UGFYcWF0cllaMG1tTFp0VHFreE14YmpyRDdWZEVCL3dHVE9iMkNmbHV1UmdJVG96M3dXQjd5cmRpOG51M0JnaHE2bGFHU1k0d20vanRZK3VxTWYzbkl6NElEOHFWRmNpSlhoRWJsajNZVGNnVlMrb2ZTaGZzbnhOV3Jxc2hZNXVTZE
2024-10-24 22:50:29 UTC	1378	IN	Data Raw: 6c 56 46 55 55 64 45 4d 6a 52 42 65 48 64 75 56 6d 78 71 4e 56 67 77 5a 6d 59 33 4c 30 64 47 53 6c 70 47 52 7a 45 32 63 45 45 7a 4e 31 41 78 62 7a 52 46 59 58 68 6a 54 44 52 42 65 48 68 6b 52 58 4a 73 65 57 31 4d 4f 54 4a 52 65 54 42 48 62 58 46 4c 56 6b 73 33 55 44 56 50 54 6a 67 30 61 46 64 53 54 55 46 46 54 44 45 31 55 6d 39 54 52 56 56 55 65 45 64 69 53 6a 46 6c 53 6b 4e 58 54 55 52 54 56 6a 42 71 53 58 4e 36 55 6e 52 4a 57 6c 59 76 4e 56 46 76 4d 6c 64 34 4e 45 4e 68 62 55 39 48 57 6d 5a 78 55 58 70 6b 61 44 56 79 57 57 39 68 51 30 67 77 61 54 45 35 55 47 68 76 55 58 42 78 51 6a 64 47 57 56 46 30 52 57 6c 48 62 47 5a 71 61 6b 5a 4c 54 56 6f 72 4d 6c 52 61 59 54 49 30 63 45 4a 6d 4d 6a 56 5a 4e 6e 5a 6c 54 6b 74 6c 64 31 4a 4a 51 54 64 47 53 7a 4e 47 Data Ascii: lVFUUdEMjRBeHduVmxqNVgwZmY3L0dGSlpGRzE2cEEzN1AxbzRFYXhjTDRBeHhkRXJseW1MOTJReTBHbXFLVks3UDVPTjg0aFdSTUFFTDE1Um9TRVVUeEdiSjFlSkNXTURTVjBqSXN6UnRJWlYvNVFvMld4NENhbU9HWmZxUXpkaDVyWW9hQ0gwaTE5UGhvUXBxQjdGWVF0RWlHbGZqakZLTVorMlRaYTI0cEJmMjVZNnZlTktld1JJQTdGSzNG
2024-10-24 22:50:29 UTC	1378	IN	Data Raw: 79 61 6b 52 77 4d 32 64 47 65 6b 52 4f 59 32 31 54 53 31 64 32 53 45 70 30 64 6e 6c 53 52 6b 46 78 62 57 46 4b 65 6b 74 34 55 32 31 6b 55 46 4e 7a 56 53 39 6d 53 6c 6b 30 59 33 4a 59 64 6b 52 43 52 32 78 75 54 48 46 44 53 30 6c 74 64 47 63 72 54 45 63 34 57 57 64 6b 64 57 67 30 53 54 5a 4f 4d 55 56 34 53 6d 35 6f 5a 54 4e 6c 4e 33 67 7a 4e 30 68 34 4c 7a 6c 32 52 55 68 33 4d 55 6f 32 52 6e 4e 6b 59 32 34 34 56 57 70 74 4c 31 49 32 53 44 5a 52 4d 58 4e 56 64 48 4a 48 62 44 4e 78 4d 6d 64 57 5a 32 52 4d 52 6a 6c 73 54 6d 4a 6c 62 48 42 6e 4d 6a 46 51 56 54 4d 30 59 6e 42 50 56 56 52 4e 4f 55 46 69 4f 57 45 77 4d 55 31 71 56 54 42 74 4f 48 68 54 56 57 56 6f 56 56 46 55 65 56 41 78 54 46 5a 4a 65 54 6b 31 63 6e 5a 42 53 46 5a 75 61 54 42 74 56 6c 4e 44 55 57 Data Ascii: yakRwM2dGekROY21TS1d2SEp0dnlSRkFxbWFKekt4U21kUFNzVS9mSlk0Y3JYdkRCR2xuTHFDS0ltdGcrTEc4WWdkdWg0STZOMUV4Sm5oZTNlN3gzN0h4Lzl2RUh3MUo2RnNkY244VWptL1I2SDZRMXNVdHJHbDNxMmdWZ2RMRjlsTmJlbHBnMjFQVTM0YnBPVVRNOUFiOWEwMU1qVTBtOHhTVWVoVVFUeVAxTFZJeTk1cnZBSFZuaTBtVlNDUW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49841	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:29 UTC	1093	OUT	GET /KxeSAjPTKliCErbivNiXrd6cTwfbqUJcbSRPe_IBVK_YmwckfMRS1VIHz-5cgT09yMo=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:29 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2966 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 18:56:29 GMT Expires: Fri, 25 Oct 2024 18:56:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 14040 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:29 UTC	844	IN	Data Raw: 52 49 46 46 8e 0b 00 00 57 45 42 50 56 50 38 4c 81 0b 00 00 2f ff c0 3f 00 15 07 e3 80 69 e3 88 fd c7 4e 52 c0 bd be 11 31 01 fc 4a 1d 63 ba 18 d2 24 bd 90 82 25 3c 1c 09 df e1 79 64 5b 0a 5e 53 78 12 24 70 3d a2 07 9a 0b 1f db 0e ff df a6 6d 3b 0f 31 2a db 4e 2a db b6 6d db b6 6d db b6 fd 6c db b6 6d 9d e7 37 e6 da fb ac 31 56 6c 3b 95 51 dd f3 ba 58 65 3e 19 b1 6d cf d8 b6 33 ca d8 49 65 db b6 8d 5f 6c db 33 e8 de 35 90 b6 2d fe d2 43 82 24 d9 b4 f5 df b9 df b6 6d db b6 6d db b6 6d db b6 6d db 5a d9 f6 ff 2b 3b fa 3f 01 74 6e 6d 3b b6 39 b3 a6 f2 5f 98 0e b1 d5 da b6 6d db b6 6d db b6 c7 b6 6d 4f 6c 3b b9 ee fb 79 9e eb ba 7f 41 9c 54 76 97 ca b6 73 c6 aa 6c 1b c3 2e b6 ed d2 78 b3 c6 73 0d ba 58 95 3a db 4e aa 59 69 22 fa 3f 01 b3 04 7f 66 ff 9f d9 ff Data Ascii: RIFFWEBPVP8L/?iNR1Jc$%<yd[^Sx$p=m;1Nmmlm71Vl;QXe>m3Ie_l35-C$mmmmZ+;?tnm;9_mmmOl;yATvsl.xsX:NYi"?f
2024-10-24 22:50:29 UTC	1378	IN	Data Raw: 96 29 ff b4 8a 0b d7 e3 69 07 82 db 84 e1 b1 48 2a f1 34 17 65 b2 70 8b 49 7a 23 2b c9 ca d3 75 94 fe 13 c1 24 c7 a5 27 51 9e 57 a0 bc d1 26 5b 53 5a 7b 4a 39 24 27 9b b8 b0 27 ae 5a 27 6c 78 1d d6 99 89 ab 09 08 6e 92 2c 89 c1 d5 3c 6e 93 27 88 58 92 88 ab 38 8e f3 12 49 7a ae 8a 50 de 5d ec c1 90 71 49 f2 72 95 89 72 ff 6c 90 01 12 96 2c c6 55 29 ca 88 31 61 90 be 48 4a 94 eb b5 29 83 c7 63 91 8b 29 a0 94 fe 89 58 e4 54 29 ea 72 4e 8b 9c 8a a2 2e bd 93 39 ad 5f 6f c9 36 be cb db a1 30 cf ea cc b3 6e 05 f2 10 71 9f 3a 85 3f 1e 83 f1 b1 18 7e fb 62 f7 79 70 9f a4 74 e9 37 b1 ff 5f fd 8d 8f 3f 26 a3 63 33 f8 63 2f e4 87 89 1d 28 6a 71 db eb ad 69 93 5e ad 04 e2 37 f5 9d 44 41 27 78 84 57 2e 8c bb 9f 2c 55 b2 42 3c dd 5b 28 8f 2f ae db 49 e1 a1 0e 7d 93 70 Data Ascii: )iH*4epIz#+u$'QW&[SZ{J9$''Z'lxn,<n'X8IzP]qIrrl,U)1aHJ)c)XT)rN.9_o60nq:?~bypt7_?&c3c/(jqi^7DA'xW.,UB<[(/I}p
2024-10-24 22:50:29 UTC	744	IN	Data Raw: ae 8f 60 be 2a 00 b4 bf 49 61 17 38 f1 ab 76 60 f7 d4 14 88 3a e5 c2 76 00 84 9b 53 ba 92 91 61 fb bd 44 bd 72 70 2e 55 01 a8 24 59 25 d8 bf 28 51 b7 bc b0 3a 4c 28 d7 55 b0 3f 60 42 44 fd 32 25 ac ed 2d b7 32 fc 25 d5 5f b0 be e3 65 bc 82 a8 e3 c2 70 58 57 66 b5 aa 19 a5 9a c9 d6 1a 37 35 42 cc 94 a8 69 18 3c 9e b5 18 af a6 6d a9 9e b4 b3 de f5 0d 19 17 44 8d c3 e8 d1 fc b2 0a 48 05 9b f3 9e 1f a2 e6 33 b7 7d f6 e6 d4 5a 65 0b aa af 3a 73 08 e4 50 b0 40 57 df 49 fc dc 20 ad 4c e9 0c f6 2a ec c6 d3 3f 0a 94 d0 b2 00 9f 14 f5 28 d3 a3 a4 5e c8 03 25 94 e5 ad 12 f4 53 4a 9e 52 af 82 7a 76 42 63 96 bb 3d 09 80 fa 7b 1d 79 cb 92 a1 4d 62 27 4a 5d 8a af 52 47 5e f8 fb 26 a1 92 5b 5e bf fb b7 a0 af 7d 23 84 4e 8f 49 30 2c 32 6a cc 34 bc 5c 77 d3 cf 45 e0 61 bf Data Ascii: `Ia8v`:vSaDrp.U$Y%(Q:L(U?`BD2%-2%_epXWf75Bi<mDH3}Ze:sP@WI L?(^%SJRzvBc={yMb'J]RG^&[^}#NI0,2j4\wEa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49842	216.58.206.78	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:29 UTC	1073	OUT	GET /_/PlayStoreUi/data/batchexecute?rpcids=eIpeLd%2Cw3QCWb%2Cw37aie&source-path=%2Fstore%2Fapps&f.sid=-4647688482496319979&bl=boq_playuiserver_20241022.06_p1&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=167810&rt=c HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA; _gid=GA1.3.2110399767.1729810210; _gat_UA199959031=1; _gcl_au=1.1.1430326302.1729810210; _ga=GA1.1.104830921.1729810210; OTZ=7791770_72_76_104100_72_446760; _ga_6VGGZHMLM2=GS1.1.1729810213.1.1.1729810226.0.0.0
2024-10-24 22:50:29 UTC	1121	IN	HTTP/1.1 400 Bad Request Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:29 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin-allow-popups Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:29 UTC	120	IN	Data Raw: 37 32 0d 0a 29 5d 7d 27 0a 0a 31 30 35 0a 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 33 5d 2c 5b 22 64 69 22 2c 31 34 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 31 33 2c 22 2d 38 33 39 39 31 31 34 38 33 39 39 36 33 38 30 33 35 30 38 22 2c 31 32 30 5d 5d 0a 0d 0a Data Ascii: 72)]}'105[["er",null,null,null,null,400,null,null,null,3],["di",14],["af.httprm",13,"-8399114839963803508",120]]
2024-10-24 22:50:29 UTC	33	IN	Data Raw: 31 62 0d 0a 32 35 0a 5b 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 34 31 5d 5d 0a 0d 0a Data Ascii: 1b25[["e",4,null,null,141]]
2024-10-24 22:50:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49843	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:29 UTC	1093	OUT	GET /BmUViDVOKNJe0GYJe22hsr7juFndRVbvr1fGmHGXqHfJjNAXjd26bfuGRQpVrpJ6YbA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:30 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5494 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:52:55 GMT Expires: Fri, 25 Oct 2024 20:52:55 GMT Cache-Control: public, max-age=86400, no-transform Age: 7055 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:30 UTC	845	IN	Data Raw: 52 49 46 46 6e 15 00 00 57 45 42 50 56 50 38 4c 62 15 00 00 2f ff c0 3f 00 2a 3c d6 b6 ab b2 24 67 27 15 f3 ed 64 86 cb 90 55 62 66 66 66 66 66 66 96 9a 99 99 99 99 99 a9 18 9b 99 3b b3 ee 09 86 63 c4 39 3b f6 39 11 b1 b7 d7 65 a9 ed 36 69 06 27 34 83 10 58 65 d6 0c 7a 10 2d 8b 61 0c e5 cb 8b 9c 81 d0 62 96 3c 79 9a 41 b9 62 4b ae ac 2d 34 65 31 b3 2c c9 4f 4b f2 a4 49 dc 95 43 38 21 76 43 23 a0 26 4f 68 b3 6c 86 1c 81 20 ad 5c 65 46 98 22 8b 5c 46 8b 25 93 c9 6c 4b 1a 40 7b e2 63 09 d2 0c 31 5a 6d 8a b2 ac 5c 69 96 ab 55 96 98 f9 ca 4e eb ae 70 e5 ed 95 13 90 6c d6 55 73 9b 3d 02 f1 0c a4 23 b0 d2 6a ab 67 20 57 5e 4e 20 d7 16 33 a3 cf 10 9e d6 15 ff 4b 8c 16 b3 a6 20 b9 77 d1 82 24 db b4 6d 8d 63 db db 6b ef 3d d7 ba cf 7e 5f b6 6d db b6 6d db 7e ef da Data Ascii: RIFFnWEBPVP8Lb/?*<$g'dUbffffff;c9;9e6i'4Xez-ab<yAbK-4e1,OKIC8!vC#&Ohl \eF"\F%lK@{c1Zm\iUNplUs=#jg W^N 3K w$mck=~_mm~
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: d1 b5 bc ad e4 02 91 57 03 c7 2f 1f 3c 76 fe f1 50 06 c4 6a 52 dd 27 78 6f c2 5a cd 2a 84 f0 39 6c fa f4 23 25 9f ee 3b 72 68 e3 95 2b 9a 72 23 99 4c ca 60 67 ca ba 73 21 84 c8 b7 47 03 7b 77 c8 b7 1d 3b fd 76 15 ef de c1 63 e7 f6 15 39 b4 e7 50 db be 22 bd 97 57 00 33 96 8c ae e6 3d 9d 90 ac 92 06 42 3b 93 ef 68 0f f8 84 da c9 79 a3 e5 b3 58 4b ca 60 1f da b2 b5 34 a7 df 60 d9 34 f6 92 ea 6e c1 ff 05 99 b5 d9 4e ca e8 46 de ff 25 69 db 8a 07 98 4e 4a 75 a7 10 ec 49 2b 06 ac 82 92 02 2c 27 a5 8c cc 66 fd 1f 91 05 cb 6e ad b3 aa 3e c3 70 52 ca c8 3c 2e d8 97 f6 5e 87 a9 c6 5c bf 4d 66 ba d8 8d 2f d9 85 46 25 0d ee 99 ba e4 4b c1 0b 5d ec d2 db be 65 b9 4d 6a df 52 92 e7 a6 8d 95 b9 98 2b 36 6c 54 33 db 26 b5 77 09 a4 10 5b ae 5f ad 3c 91 32 8e a0 77 cc b7 Data Ascii: W/<vPjR'xoZ*9l#%;rh+r#L`gs!G{w;vc9P"W3=B;hyXK`4`4nNF%iNJuI+,'fn>pR<.^\Mf/F%K]eMjR+6lT3&w[_<2w
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 56 68 20 23 d9 6b 43 81 6b fb de 25 24 7b ed 29 d4 d6 86 f3 cd 85 f5 cc 30 4e e4 61 79 b8 77 9d d9 a6 ea 6e 9c cd d7 c4 d2 ab 63 d1 75 b1 6a e3 da b3 73 75 1d 88 6b 87 d7 5b 29 97 d7 63 fa db 50 e0 5a 91 65 9c 34 7c 65 9e 6f 43 75 03 31 20 62 6f e3 01 ee aa 1f b2 61 28 87 a3 7c ab 1f 43 94 cc 40 24 bc ee b5 b2 6c 9b 34 f4 a0 84 f6 76 56 5f 15 f6 29 9c 56 b3 fa 7f b5 49 83 fd 72 9c 17 01 23 e2 ef ea 4d 00 bb 34 14 65 1f 44 cd e8 68 6f bc b3 64 30 26 17 d6 33 26 2a 61 67 74 df d7 03 cc 05 f2 d4 76 a3 e5 b3 3a 05 a6 15 9e e2 90 86 fe fb da 0f 50 02 23 a9 6d a5 c4 ad 3c 86 52 06 5e 5e 1a ba 49 f6 23 42 e7 82 b1 b4 f6 2b 9d 02 d3 8a ae e5 8d f8 c7 8b 64 d8 54 30 9a d6 b6 53 bb e7 c4 18 05 df 1b 84 34 f0 04 c2 7e f0 7f 81 ac 53 2e 57 ca 65 c7 a1 b8 35 bc 87 79 Data Ascii: Vh #kCk%${)0Naywncujsuk[)cPZe4\|eoCu1 boa(\|C@$l4vV_)VIr#M4eDhod0&3&*agtv:P#m<R^^I#B+dT0S4~S.We5y
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: ef 93 f2 78 c6 e3 80 10 c2 0e 34 d2 46 c9 cd 51 f6 f4 e9 91 83 f3 cc 71 94 e4 33 bf 8f 0b 4c 25 01 0a 92 f8 a1 b8 8b 48 03 5d f7 13 53 df 81 63 a7 7d 0e 13 42 28 79 e0 e3 0c 93 37 c7 4e a4 d4 e6 23 06 53 ac ec dd 6e 13 b8 d9 60 7f 9a dc 4d b2 e5 56 75 9c e6 83 3a 9e fa ae b9 64 44 b7 10 62 b2 a7 1c 31 4e 6e 95 1a a4 f8 41 ff 25 9b e0 48 c9 27 1f 2f 70 d7 c9 7e 04 b1 8d fe b4 a4 53 ae 9d 2f a5 00 be a6 fb 9a 11 42 64 d5 3d 82 71 72 9f ba 80 0e 7a 1a 36 28 cb e3 84 e9 cf 27 15 d8 d9 c0 ff 94 24 7e 30 6e 3d 3d e8 a6 47 0c c9 a5 81 bd 85 bb 82 3e 21 84 b0 c2 33 59 13 c8 e3 08 19 d3 bb c4 a0 8d 57 2d 9f 98 11 d8 67 2e a8 47 04 72 57 c6 ec f3 ea 15 ab de 0d a3 81 85 b3 7f ed 16 42 d8 b7 62 06 29 b7 77 c2 01 23 06 65 7b ac ee dd eb 14 71 5a e1 49 0e 49 fc d8 02 Data Ascii: x4FQq3L%H]Sc}B(y7N#Sn`MVu:dDb1NnA%H'/p~S/Bd=qrz6('$~0n==G>!3YW-g.GrWBb)w#e{qZII
2024-10-24 22:50:30 UTC	515	IN	Data Raw: 24 5b 53 ed 07 99 e1 84 22 f6 c7 e5 6b 60 d1 6d 23 72 be 16 48 a6 9b 0f e8 97 7c 2e 88 53 1b 5f fc 51 ff a6 7d ba 1c 00 d4 a3 e9 89 68 ce 8c eb 64 c5 3e 75 ee dc 1b 19 f0 b8 cf b3 23 b5 5f 20 43 26 fd e0 e3 00 51 c7 ad 9e 25 e2 29 38 89 70 fe 1e 6e 19 00 a0 f4 d5 77 38 e5 07 2f 85 09 5b 55 cd fe b9 bc 82 9e 1e 47 c8 fa 71 fc e3 91 f5 f1 90 dc dd 93 8e df a4 b6 0c c2 38 0b 91 f2 d7 d5 c0 40 38 d7 b4 4f 5f f5 5a 08 a7 3c be c0 39 ff d4 ad 50 b8 0e 68 96 ce d8 1b f1 0f de c6 7d cd 40 c8 2e 90 a1 57 c4 cc eb d2 ca 9b d0 96 8d 6b cf 2d 69 cf 2d 6a d7 0d 69 c3 35 b1 e4 d2 99 34 04 c3 79 de 71 ca 63 4f ed 87 7c 2e 10 af b8 27 e1 a9 39 b9 70 5e f5 46 58 e3 76 4d d1 89 d1 2e dd f3 13 8e 42 35 04 45 7f e4 4b 21 7b d6 2a 64 03 91 3f ce 19 e7 9e 1a 0c ad 74 8d 99 5c Data Ascii: $[S"k`m#rH\|.S_Q}hd>u#_ C&Q%)8pnw8/[UGq8@8O_Z<9Ph}@.Wk-i-ji54yqcO\|.'9p^FXvM.B5EK!{*d?t\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49846	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:29 UTC	1094	OUT	GET /bYtqbOcTYOlgc6gqZ2rwb8lptHuwlNE75zYJu6Bn076-hTmvd96HH-6v7S0YUAAJXoJN=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:30 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 51542 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:29:18 GMT Expires: Fri, 25 Oct 2024 21:29:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 4871 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:30 UTC	844	IN	Data Raw: 52 49 46 46 4e c9 00 00 57 45 42 50 56 50 38 4c 41 c9 00 00 2f ff c0 3f 00 4d 48 8c 24 49 91 24 ab cc 6a a8 58 fd 25 6e 9a 07 01 22 fa 3f 01 7c 3d 81 d6 a0 3d d4 c5 7f 3b 7e 11 e3 bb b8 7c 6b 80 7d 98 11 91 f3 61 82 6d 47 04 8c 88 5c ef c0 2b c7 be d4 9d 6d 37 98 3b c8 cc fc c0 91 27 32 73 02 6d 27 a9 28 47 d6 a9 4b c9 be 6a 19 48 11 3a 21 a9 76 30 2d f1 34 14 5a 0a 90 55 1b 73 d9 0f 63 d1 32 14 59 17 1c d6 1d 59 99 f3 9b a1 be cc cc 4c 70 bc 4d 49 40 f5 cc 0c 3b 42 d0 1d f5 04 3d 33 56 81 ad 0b a4 9e 0b 33 33 23 ec 0d fb 82 2e 89 02 a8 1e 11 06 5b 75 00 a6 55 1c 1b 4c 6c 9b db 7e d3 01 6c 9b 6b e9 f7 8b 75 00 11 11 76 bd 48 9b b3 01 6a d7 41 71 d4 ce bc 46 b0 ed b1 36 b6 75 33 d9 cf ce b1 f8 6b 7b 5d d4 37 f7 ed 93 85 e4 46 92 1c 49 b2 25 c7 39 79 f1 13 Data Ascii: RIFFNWEBPVP8LA/?MH$I$jX%n"?\|==;~\|k}amG\+m7;'2sm'(GKjH:!v0-4ZUsc2YYLpMI@;B=3V33#.[uULl~lkuvHjAqF6u3k{]7FI%9y
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: b7 1f 49 0f 6f df ed b7 5a eb 35 3b 88 c8 96 dd dd ef 7d 82 7c 64 9e ba 94 4a 4c 6a d3 4a 68 9e 5e dc 87 ee c3 eb 3b 09 82 e0 7d a1 5b b5 6e 2d a2 b2 a0 54 26 47 f7 b8 67 c6 7d f8 e3 cb 2c 2c 16 e3 a2 59 7c aa 87 2f f7 d6 da 72 f9 b9 fb e3 cb 4d 3d e9 f6 ad 75 eb 4e ad 0c ae a9 f2 17 b5 ca 64 70 74 ff b3 d4 77 d4 1d a5 36 18 0c fe b3 0e d7 42 2f 3a 75 68 dd 43 ab 56 35 94 aa 64 30 a9 54 6a 93 ca 75 39 a1 1f 4c 1d 5c 1d 9c 4b 48 3d 0d a5 2b 55 b0 a9 d4 2a cb 02 db 2a 82 ca d0 73 99 a1 da 32 a2 0d 06 93 6d 81 d1 ce d2 dc c5 b4 11 0c 56 fa d4 42 a8 49 5d 68 50 1d 8e db 46 72 24 95 f2 cf ba cd ac bb 7b 47 c4 04 f0 5f da 5e e6 88 7a 89 87 17 d8 02 14 3c b2 32 ab 66 a7 ca 5a 71 15 15 d4 09 d5 8d c5 1d 67 14 bc c8 c9 03 af c8 82 13 20 17 a4 4b 87 e2 01 24 49 23 Data Ascii: IoZ5;}\|dJLjJh^;}[n-T&Gg},,Y\|/rM=uNdptw6B/:uhCV5d0Tju9L\KH=+U**s2mVBI]hPFr${G_^z<2fZqg K$I#
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: fa a7 04 5c ac b2 af ab 0e 7c b6 83 d3 20 9e ab a5 e1 2d 04 e9 27 8d c0 aa bb c5 07 5c b3 38 80 dd 19 e8 f1 5c 79 0e 2a e0 f2 b8 24 e1 c0 48 ec f4 eb 4c 8c ae f3 de 9f 71 91 1e 9d 20 65 41 86 66 8f 81 d9 64 bb c1 9d 1e d1 b9 98 16 4e a9 0b f0 d4 31 61 bf 24 05 0d 95 50 33 28 20 ef e6 8d 76 50 0b 4d 16 77 4a 1a 57 2c 01 33 bb 61 6c 10 75 7e b0 e9 af 31 38 85 27 28 50 76 47 d3 3b b8 f5 b5 2b c8 dc cd 47 28 d4 71 45 c8 bf da 30 6f 7e 97 79 3a 47 50 0a 5b 2a 54 b7 83 5c 59 1e cb 93 73 e3 b6 ab c4 ca 49 bc 2c 2d 47 e9 08 4d 57 c3 b3 04 45 b5 1a 2b a9 4d d4 67 ef 27 52 32 29 7b 48 1e 51 19 fd 51 75 ec eb 01 8d f7 d8 06 f2 ca 91 7c 18 0b 8c 15 07 e9 00 23 6b de 49 0d 2f 63 32 66 12 9f 3c ba d8 bb ad 38 8f 4e 3c 22 8b 2d 56 d0 21 50 11 5c ab 34 f2 f5 d1 7b 47 8f Data Ascii: \\| -'\8\y$HLq eAfdN1a$P3( vPMwJW,3alu~18'(PvG;+G(qE0o~y:GP[T\YsI,-GMWE+Mg'R2){HQQu\|#kI/c2f<8N<"-V!P\4{G
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 01 1d 54 ac 20 ee 7d 88 cb 3b 26 bf 55 fd 04 45 31 77 2e 20 7f 99 14 df 97 ab da 0a 02 d9 00 25 ed 82 cd fd d9 00 41 d1 0a 1e 8d 61 d9 4c b8 ff 59 c8 b0 ea d1 ac af 15 3b d4 f0 68 10 91 b2 4a fc 78 bb 2b 81 e0 83 14 b0 29 40 71 2e 2e bc a2 0a 23 fe ac ea bb fa c6 eb 88 ab 94 da a6 35 5f 06 62 7f 06 95 6c f2 83 ee 75 a1 a5 ba 5e f5 a7 84 36 88 83 ea 54 f5 b9 2d bf 5a 22 34 68 79 5e 3d 7f 0a 06 31 eb 7b 04 0a 83 af d8 ec ac 89 84 95 f8 46 d3 de e3 76 e1 4d 02 a5 0e d1 ca 1e 88 96 c3 8b c4 4b f7 89 1a 72 a5 70 79 14 ef 0b 9a 62 a0 a4 97 2d 0a 66 d6 69 fb 73 8f 1e 68 a1 35 3e f5 c8 cc 09 2a 7c ae bf 47 02 1a 7c a8 9a 56 e2 cd 11 bb ab 85 fb 7a ab 77 95 39 b7 2a f7 3c b1 67 be b0 83 b3 d2 a6 07 17 b2 48 ef 2a bf a4 4d 81 04 75 84 89 6b 7e b5 9d 8e 40 50 cb 85 Data Ascii: T };&UE1w. %AaLY;hJx+)@q..#5_blu^6T-Z"4hy^=1{FvMKrpyb-fish5>\|G\|Vzw9<gH*Muk~@P
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 1f 3a 24 87 14 3a 48 9c bb b3 43 14 45 d7 ba a3 3e 6e 4a b5 90 5c 0c 5f db 5e e3 a4 bf 72 ea 67 db a5 d9 45 55 6e 7f 37 b6 cc 56 6e 0c f7 d6 78 a4 cd 5b 8d e7 29 76 4c ef 9c bc 56 3d 3a 74 70 fc cb cd 6b fe 96 27 70 1a 11 37 e2 75 4b ed 48 e9 37 f6 b4 19 7a ef c8 d5 08 13 de fc 01 13 50 0a f8 e4 42 9a 3a 9d d9 fe e1 00 9a 24 0c 4b a8 62 e1 d4 42 09 dc b1 16 ed b9 0f 35 ce 9b a3 7b 09 34 8d 1e ca 75 ee bc 3d 1f 27 51 cf 32 ea 09 33 9c 88 e4 bc e7 cc 3c 94 c6 ab b0 03 a7 84 fa f1 ef 51 64 65 64 83 3d 23 c1 e1 c2 f6 dc 3c 8d 16 7b 45 e7 c0 21 8f 6a fd 1b eb d1 fb c7 90 da 24 b1 dd 69 9b f9 d4 eb 8a 92 55 f0 8b 4a 8d 04 34 1e b3 5a 0f 0f cf c1 ef 84 1c 41 82 11 ea 1c 83 e2 d5 44 8e 8b 37 96 49 da af 17 1a b1 13 47 dd 74 f9 62 7d fa 9d d4 6b 82 57 fd 52 ce 45 Data Ascii: :$:HCE>nJ\_^rgEUn7Vnx[)vLV=:tpk'p7uKH7zPB:$KbB5{4u='Q23<Qded=#<{E!j$iUJ4ZAD7IGtb}kWRE
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: a8 51 71 39 3a b6 61 5f 8b 47 84 44 30 c7 97 9c 04 0d d0 4f 4d bb 24 a4 b2 49 da 38 1c a9 c8 e5 76 19 74 3b 61 62 07 09 06 ea ee 6d 2d cb 0f 90 62 0c 99 d2 5a 8f a8 02 8f 72 0b 14 9e 19 33 54 d1 42 dc a0 a4 de 3f 7f f9 87 14 fb 6d 41 94 a9 38 f2 04 a3 31 f2 ac 4a 7e 2e ac 1f 95 9b c8 5b 05 92 23 ee 3e 6c 0b 61 e0 30 3a e4 35 17 77 bf d0 40 85 92 4c 0a 28 36 0c 5a c9 82 8d f7 f0 14 f9 f2 0b a7 1b 8c d2 b8 62 a4 c8 42 8b 5f 38 83 da 58 12 a1 6e 3b a6 bf 37 42 9c 2a 69 85 b6 5f 92 de c3 af c7 68 30 84 fc 8a 40 99 d2 e1 fe bd 4b 6c 56 13 2b 6b f1 df ca 36 a5 eb 2f 4d ed 49 71 48 fc 2d 41 d5 1f e3 49 94 d0 85 4b 18 18 77 ad db bc 52 ef f7 38 7b 8a c7 9b 82 9f b1 54 10 3e a7 d9 aa 5c af 82 7f ef cb 53 82 e4 f4 e7 61 c1 90 ec 11 08 8a 97 7a b3 61 56 bd f6 1f 4a Data Ascii: Qq9:a_GD0OM$I8vt;abm-bZr3TB?mA81J~.[#>la0:5w@L(6ZbB_8Xn;7B*i_h0@KlV+k6/MIqH-AIKwR8{T>\SazaVJ
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 9b 8e 38 f8 63 80 d4 db ee 8b 80 b8 14 87 a0 2d bb 1b 89 1f 5a c7 dd 84 03 7c 1e 55 ee b6 98 0f 1f b6 2e 18 27 a8 b4 45 8b c7 63 eb 6d 7f 89 7e 05 f3 a0 d6 3a 51 09 e9 e5 5d a5 5b ae 0d d7 b3 f9 8e 36 ef 5c 77 44 b2 27 31 a2 67 e2 22 f2 af 02 c9 21 eb 5a a9 f8 30 23 aa 9f 61 ec cd 11 79 29 2e 27 62 5c 09 54 42 8f 6e 5b db 48 c8 6f ab 77 44 0a 96 9d 15 f6 d6 43 c2 d7 3e f7 81 b2 57 4b 55 c0 b3 ca 40 0a ca b9 cd e0 9b 5f 04 46 dc 7a 4e 7d 2e de 64 2b 41 9c e3 91 63 fb 23 da 33 06 bc d6 2d df 04 1a 14 5e 59 0c 85 1b 48 22 fe 9a df c9 de 87 00 43 01 11 11 4a 80 64 e5 00 45 89 96 9b f5 1c cd f0 40 e1 98 31 10 d2 12 de ee 58 d9 f9 e6 b1 44 d3 00 49 b9 9a 04 c6 4c d9 a0 a1 c3 3b 00 a5 1b 94 41 38 a7 ea c5 cd d5 5a ce 50 d4 77 d7 0b 4d 9d c5 19 ff 53 e1 14 08 dc Data Ascii: 8c-Z\|U.'Ecm~:Q][6\wD'1g"!Z0#ay).'b\TBn[HowDC>WKU@_FzN}.d+Ac#3-^YH"CJdE@1XDIL;A8ZPwMS
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 1d c7 6e b4 d2 66 20 78 15 34 0e 54 7a b2 6e e4 41 b4 15 99 2a 38 4a 84 c8 3d 19 2c 90 1c 54 27 fa aa 01 c2 40 75 d0 60 45 30 2a dc 95 c2 89 c8 77 61 da b1 a0 ef 6b ed 74 84 52 9f 3f be 8e 94 8f d8 45 b8 52 c8 6b fa 2c 11 61 21 e3 5b 1c aa e6 1d ca 35 d7 70 be 47 48 16 1c 3a 1e 31 6d 8b 78 f4 71 74 c7 09 15 8f fa f0 e4 9c e8 c7 15 d1 82 8d bd 57 8f 3e c0 10 23 56 15 3a 62 35 2b 6f d2 76 d5 b3 40 8f 22 9b 73 c5 6e 3a e9 10 e2 cc 32 f8 b7 d6 77 e4 84 d2 c4 4d 11 71 95 c1 99 c1 e9 d4 07 5f b2 1d b1 f8 5d 0c 9b 7a 54 a5 a3 af 5a 4a 50 e7 9c e0 04 34 09 63 04 37 21 da d1 b7 b8 d0 28 21 10 0b b6 e8 63 d2 40 6c bb b0 e8 7c 29 70 66 13 36 5e 51 c9 1e 3b 3d 5c ad 00 ee a0 95 24 14 a3 42 f0 3f 20 2f dc 1d b1 76 f5 5c b7 b3 e4 67 bf 77 c2 9d 7f 72 e2 af ff e4 b8 87 Data Ascii: nf x4TznA8J=,T'@u`E0waktR?ERk,a![5pGH:1mxqtW>#V:b5+ov@"sn:2wMq_]zTZJP4c7!(!c@l\|)pf6^Q;=\$B? /v\gwr
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 45 24 9e b6 29 f5 1e 25 f5 ac 7f f4 fe 44 ef 3d 95 cf 73 fc f4 59 d8 c1 d8 c3 03 94 6c 11 93 b1 5b a7 ce 4a 7a 52 bf 91 fd 6a cf e9 69 e7 1b 2e 84 5f 13 10 b1 4c d1 e9 a4 59 bf 5b 63 65 f8 9e a0 f7 be df 58 ba e4 3a 33 02 da b0 f6 f4 fd 2d 7a 32 dc e9 5f 96 81 21 40 c6 89 c4 3b 71 dc 1c e1 f0 19 1e e4 8f 7c a1 f8 74 d4 0c 4e ca b4 32 86 c4 a0 91 fc 19 8a bd 6f 4d 1e 64 0e 46 76 de 31 29 a4 25 22 35 29 1a 84 d1 d4 22 11 de e1 f8 46 94 d9 6d 78 64 e7 bc 17 48 1e 54 12 0b e7 e8 cb 58 af dc 4d ed 7c e3 71 cd 87 e0 c1 d9 ac 36 15 5b f2 55 6d 79 6f 8b ce 69 72 87 6e 0d a4 c4 ef e6 9a 12 8c e4 19 d2 6b b2 9a 73 cc 81 ef 69 7a 7e b8 7b d2 0f ff f2 27 d0 86 b6 bb ff ad 4b 1f fa e7 9e c7 fe 86 37 16 78 b4 61 5e 35 3c b4 7b 03 25 65 0e 09 8e f2 a9 53 03 ae 34 d4 21 Data Ascii: E$)%D=sYl[JzRji._LY[ceX:3-z2_!@;q\|tN2oMdFv1)%"5)"FmxdHTXM\|q6[Umyoirnksiz~{'K7xa^5<{%eS4!
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 85 79 1f e2 ac a5 a8 95 ef 81 3e a2 7c d8 30 2f 21 ed dd a2 fb 25 78 e7 f1 85 b8 6e 4c bf 69 7b f1 ad 54 c2 5c a0 2d ed 4a 6e 51 d4 b9 d4 58 06 ff 11 8d bf b1 c5 77 dc 64 c9 8c b5 94 3f 11 4c 4f 30 f2 0c 68 dc ba 93 32 5d 17 14 94 43 25 10 22 c7 04 a6 62 a4 80 94 27 1b 6d c6 1f bd b1 e6 c6 17 9f be f8 85 67 42 7b ed 87 04 c6 88 1a c9 a1 a4 eb 9c 41 f5 a7 5f 1e 16 4c 78 f7 2d 39 16 dd ae 64 f0 29 91 8b 4d 67 44 e4 5f bc 00 ed 53 0c df 26 91 50 c2 1c ec e4 92 74 ec f8 7a a1 99 93 2f 31 52 a0 eb 62 ee ac 4c c9 d1 2e 0d 3f d3 85 2a 11 dc 1c 65 69 11 2a aa 0f f5 bd 97 84 1f 80 4a c6 fd f4 7f 1d bd 19 77 46 62 c0 27 4e 28 95 47 81 3a 78 0d ae 71 16 c1 93 14 cf aa 29 5e 96 7c 0e 1d 91 16 45 39 e2 d6 a3 23 e3 d1 ed 47 fe fe b1 dc d2 66 31 58 40 b9 e3 6f 5b a8 16 Data Ascii: y>\|0/!%xnLi{T\-JnQXwd?LO0h2]C%"b'mgB{A_Lx-9d)MgD_S&Ptz/1RbL.?eiJwFb'N(G:xq)^\|E9#Gf1X@o[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49844	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:29 UTC	1093	OUT	GET /ldcQMpP7OaVmglCF6kGas9cY_K0PsJzSSosx2saw9KF1m3RHaEXpH_9mwBWaYnkmctk=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:30 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 17964 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:15:26 GMT Expires: Fri, 25 Oct 2024 20:15:26 GMT Cache-Control: public, max-age=86400, no-transform Age: 9304 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:30 UTC	844	IN	Data Raw: 52 49 46 46 24 46 00 00 57 45 42 50 56 50 38 4c 18 46 00 00 2f ff c0 3f 00 09 48 92 a4 46 8c a2 45 0b 08 0b fe ff 60 d0 e2 59 ee 11 fd 9f 00 fc bf 39 be 05 28 fc 2b 5a c9 67 ba 25 2f e4 4e c9 23 c1 1d 49 be d0 3d eb d8 19 6e d8 1f ac 2b ed f8 00 bb 68 46 37 b0 15 a0 30 33 ec 49 0a 00 92 99 69 7c 12 05 8c 88 ce 6f a2 ab c6 17 51 c8 62 66 e6 ee 07 52 44 c4 54 c9 c6 db 0d 4a 8a 98 aa 2a 09 db c9 66 a0 55 55 23 99 e6 7d ee 28 00 4c 55 95 24 7d 17 bb b6 f0 2c 6f f4 c0 dd 3f ee 29 72 42 42 95 24 cd fb 39 e5 0c a3 73 f7 39 a7 cf 19 72 b5 d4 e8 75 d6 7c 10 b4 5c 75 ae 15 11 77 40 44 2c fc c7 0b c8 91 24 29 92 7c 99 e9 98 59 7f 11 b1 ab 6a f9 ef 36 b6 6d 55 59 df dd b0 48 63 fa 2f 86 90 12 4e 05 0c 2c 49 b2 4d 5b b9 75 8d f5 6c 73 fe 03 b2 ed f7 75 5f 44 ff 27 c0 Data Ascii: RIFF$FWEBPVP8LF/?HFE`Y9(+Zg%/N#I=n+hF703Ii\|oQbfRDTJ*fUU#}(LU$},o?)rBB$9s9ru\|\uw@D,$)\|Yj6mUYHc/N,IM[ulsu_D'
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: ea 1e db ec f7 a0 5d 55 a9 a4 2b c9 eb b1 6d 6d db 31 49 d2 f5 bc 7f 44 24 da b6 bd d5 63 7b e6 08 b4 37 6b ce 63 ce c2 b6 6d db d6 96 6d 2b b3 10 19 f8 bf 37 26 80 6b b6 7f ae 6d db 76 e6 bc 57 de 7b ef bd 77 f0 0a 29 12 97 85 32 52 00 12 15 f4 36 07 31 ef bd 19 60 2e 79 89 7f 79 28 25 d1 82 7f aa 9e c2 2f ae 41 27 1e b0 c9 eb 8f 47 0a 2b 21 25 30 68 a3 8b 6e 5a 54 09 28 98 43 37 3d 74 d0 95 47 45 a1 84 36 dd b4 d3 96 47 4b e9 d0 09 17 3e 74 c2 5f 20 b2 89 15 be 54 b0 72 5b 79 fc f3 38 31 28 a5 9e c2 94 97 5a 0c b0 22 d9 76 ad f4 bc f4 45 a1 00 0d 48 c7 41 d4 94 f3 82 1c 49 92 ab aa ba df c3 28 dc c7 14 8e 9c b4 f8 62 a7 62 02 f4 64 db fe fe ff a4 cc 2e 99 12 ba 75 40 1b 55 60 01 0f f8 a2 45 03 32 72 6a 73 0e bb f0 f9 ce 10 a7 bf 2c e1 63 db bb dc fa d5 Data Ascii: ]U+mm1ID$c{7kcmm+7&kmvW{w)2R61`.yy(%/A'G+!%0hnZT(C7=tGE6GK>t_ Tr[y81(Z"vEHAI(bbd.u@U`E2rjs,c
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 63 a6 59 7a c8 82 eb 28 85 0a 85 44 ea e8 90 d9 c9 cf 9f ec 9f a5 8b aa c8 65 29 ec 9a f2 d6 81 fc c5 17 79 f1 53 8c fd 79 ff d1 97 56 34 eb 48 e2 0f 71 0b da 21 48 62 7c 4c 1d 19 e8 27 cd 7d 7b 49 07 13 c2 fb a8 08 87 db cf 2b c2 41 1d 0f 66 44 c1 a6 3c 5b 0a 5d dc 72 61 21 40 4a 8d 8e 02 d8 81 12 47 ba 99 2a 73 65 2f 7e b9 16 9f 4d 67 e7 73 ac 97 9d ae 3e f2 f1 b9 39 ab 66 c2 c2 8c 23 64 71 c0 52 20 72 d4 41 8e 99 f8 d9 a1 6f 57 38 98 04 71 3d 35 fd 9b 83 99 93 d9 26 b3 be 19 e3 be 64 5d c7 85 20 05 d6 48 41 a2 94 40 ec ff fd 1e 5c 72 2f 41 04 53 0d ae bf 38 1f 6c cf 8f 7c 8b b1 38 dc b1 57 9f 57 32 a3 99 23 08 24 95 58 dc 2a 73 b8 c5 cb ee 7d f4 19 68 c2 83 2f a6 62 54 fb 49 33 9f 18 57 84 67 9b 71 1d f9 13 de 8f 9a c4 03 1f bd 6f 39 7a a3 d7 66 84 2f Data Ascii: cYz(De)ySyV4Hq!Hb\|L'}{I+AfD<[]ra!@JGse/~Mgs>9f#dqR rAoW8q=5&d] HA@\r/AS8l\|8WW2#$Xs}h/bTI3Wgqo9zf/
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 63 7e 58 1c e4 95 58 9c 10 39 42 84 c8 db 4c 80 b8 b5 9c e0 68 8e 15 bb 5e da 03 8c d3 f7 d2 8c 28 9e 4c 2d b4 52 a3 9b ee f7 51 42 ba ce 74 c7 22 19 1d b8 02 d2 b0 76 ac 4a 3b 6f 49 ba 48 93 9f 06 91 3a 05 27 70 e7 32 79 48 3d e5 72 cd fc b0 03 16 c0 2d 3d b1 07 28 f4 d2 03 85 79 5e 6d 02 8f 91 47 dd 73 12 66 b6 3a fa 8f 1f 6b ac c0 fb 88 f2 b3 43 bf f1 df 27 88 eb 2c a1 1a 29 2b d3 32 39 ba 8b 62 d1 47 b7 e2 b2 ea 29 0a 94 cc 6e 47 9e 15 aa 20 23 a3 a7 42 43 23 87 23 d3 a8 9a 24 cf a8 4d 8a 1c 67 32 ca 99 4d f9 00 57 3b 72 00 57 7b c9 5b bd 28 47 3c 14 0a b7 30 3c 46 1d 6f 13 07 57 7b e9 b7 8c 70 1d fb 78 b8 ad 77 ae d1 e1 fb 1d 6d 40 9d 69 e5 48 d9 74 1a fd 75 f7 bc e0 b7 fb 64 f6 1a 55 14 d4 b8 8c f3 87 bc 65 06 99 39 ce 33 18 0c ce 79 b0 06 f2 88 a1 Data Ascii: c~XX9BLh^(L-RQBt"vJ;oIH:'p2yH=r-=(y^mGsf:kC',)+29bG)nG #BC##$Mg2MW;rW{[(G<0<FoW{pxwm@iHtudUe93y
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 81 c4 03 c0 30 6a 69 98 d2 4c e5 a3 06 76 75 b7 5e 26 af 0b 15 85 42 0d 73 bf ee 39 5a 71 af 91 a3 15 f7 1a f5 8c b9 57 00 8f f3 b9 8e 62 e4 6c 0e 07 15 e3 63 bd 77 6d f9 bf 52 1b a2 eb b8 58 a0 64 51 67 4b 54 23 17 69 16 35 b8 42 35 12 27 b6 92 b8 26 2b 3a 51 b4 6d 83 d1 89 91 8c 21 42 43 43 1e ad 0f ce b3 23 e1 20 13 f5 d0 88 98 d1 f1 7a ae ed 4b fb 4b 4a 58 11 4f 91 43 f9 a2 6c af e4 78 96 9f 17 39 9e e5 e7 15 e4 a1 3c 8a d1 1e 98 d0 e7 61 ea fe b3 66 9b a0 b7 8f 75 28 25 de 7d 26 a2 a4 50 a3 8f 14 a5 04 39 11 90 4e 53 38 eb 35 a3 03 35 12 a7 6d 0a 96 42 03 9e 82 8d f5 75 e3 2b 6a ef a8 35 38 20 13 70 0b 18 cd b4 6b da 84 56 9e 7e 55 3f e2 4c 74 b9 2a f1 7f b9 9f 25 42 f0 75 57 08 18 bb 42 c0 d8 35 43 40 e0 f6 18 84 93 c0 c4 d4 cf f7 c2 4d 42 74 1d dd Data Ascii: 0jiLvu^&Bs9ZqWblcwmRXdQgKT#i5B5'&+:Qm!BCC# zKKJXOClx9<afu(%}&P9NS855mBu+j58 pkV~U?Lt*%BuWB5C@MBt
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 10 84 69 e6 ed 06 fb ad e5 4b 0e 1e cd cc ed 43 a3 c7 7d 45 1a 37 b6 5a 42 56 eb 9b 40 70 c9 f4 5b 87 12 25 e3 d2 ec b7 74 8d 6b 0a f6 55 39 d2 8e 5f a7 c9 1f d8 84 4e 1a a8 e7 d6 8a 26 d4 38 83 84 54 bb e1 ac 83 7f 83 0e f8 18 ea 50 fc bf 3a 6d 12 bb fe 43 2f 38 c6 a5 93 5f 9d b4 6b b0 b9 b9 29 b4 c5 6a b1 9e 35 ae e3 ba e5 6d 1f 35 b7 58 cf 68 42 ac 6f 6a 75 e4 51 e3 d1 1c 9a fa f6 b1 3e c5 9b e5 7e ef e3 92 7c dd fb 2d 85 f2 dc 65 54 66 91 28 fa 48 16 85 a9 f1 6b fa ad 3f 9b 6b aa 34 d3 d5 80 8d 40 1b dc 99 6b a0 7c 06 10 0c 46 73 4b ee ed 3b f2 00 40 90 49 ac b6 07 73 68 d3 1e ae b4 22 a8 2f 2f f7 bf d2 44 5b cf 3c d5 0c 8d ab bd a0 9d b3 06 f0 21 68 35 26 da 39 eb d9 47 8f 23 d7 f3 d4 84 6f d7 97 6b ec 2b a8 f3 63 fe f7 bc 33 37 44 69 73 4f 99 85 4b Data Ascii: iKC}E7ZBV@p[%tkU9_N&8TP:mC/8_k)j5m5XhBojuQ>~\|-eTf(Hk?k4@k\|FsK;@Ish"//D[<!h5&9G#ok+c37DisOK
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 4a 26 5d b8 4c ba 76 5f cc 74 25 1e 84 1a fc 6b 73 1d e7 94 73 1e 5a 60 da 2d d8 f2 0e c9 c9 d9 27 cf 55 a4 98 41 0c 40 2d 07 df a9 80 01 b0 b2 50 21 46 4b da d2 46 73 7f c3 bc 19 b7 43 36 31 44 28 c6 1b b4 6a 30 fc 3c 1e 0d 8e e3 38 8e e3 38 ce 3e 9a 0e ce e6 06 b7 64 e0 91 b7 1c fe 67 ff e9 5c e1 b2 0e 1e f5 4a a2 6a 51 05 43 27 3b bb 28 a6 89 e6 3c 6a 20 6a 68 a2 04 61 a3 10 9d bc a7 1e 94 15 74 28 9b 1a c9 15 3d 4c 51 e5 58 e5 f8 6d 40 8d 27 f9 af ff d6 bf ff 36 ab 9f 88 ad da 3f dd ac 7c f2 33 8d 24 30 04 24 31 c0 7b 18 98 79 62 2d 95 03 16 96 67 d6 ab 0c 96 d0 56 f7 2b 22 15 20 08 0c ad da 48 1a 38 b1 e1 cb 94 14 48 49 81 06 3a d0 70 4b 6e c0 2d b9 35 ff cb e3 1f f8 e4 af bd e1 80 15 73 97 60 0b a7 2d a7 71 35 cb 4c ad 1d 95 e2 8a 5c 34 f3 ae 11 9a Data Ascii: J&]Lv_t%kssZ`-'UA@-P!FKFsC61D(j0<88>dg\JjQC';(<j jhat(=LQXm@'6?\|3$0$1{yb-gV+" H8HI:pKn-5s`-q5L\4
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: b7 01 e7 8e 69 c0 b7 af dc 8f 71 84 d9 57 1c 60 76 3c 17 44 24 db 57 9c e3 e5 90 1b b7 d9 5e 64 34 f2 01 d8 b6 13 9d 03 b8 b3 9c 1f 60 e5 5e 8a 32 49 73 f5 07 ab fc 1d 09 fe 81 ee 7c 4b 4f a5 f9 6b 3e 0f ad 11 09 93 d9 07 26 9c 7c f1 e2 4b cc 0e 04 44 bd 84 83 b9 a9 ea 6e 3b 94 61 9c 84 a6 68 31 c9 e5 48 f0 6d ee 2f 42 42 e3 18 c6 d0 34 08 e3 38 32 4d 43 81 83 9c 08 10 d6 0b 6c f4 52 c8 a5 8b 09 a4 18 fe 6d 6c dc 9a 60 6b 9b da b6 01 01 a8 91 a4 43 90 9e b7 1f fd 84 7f a0 17 18 c9 99 5a ea 88 df 77 0c 6a 40 b6 76 db be 04 cd 2d c0 11 2c f4 44 0a c5 cd ad f9 23 99 ac a0 3d 9c bd 71 46 46 6a 29 36 69 0c 91 b9 0e 06 df 3e 24 7c 91 e5 ed 40 96 f7 ed 83 83 9c 50 10 44 b2 da 53 60 ba 79 72 0b 66 b1 96 aa eb 5b 21 09 a1 b6 09 71 ef 06 a7 70 33 b2 a7 4a d6 bd fd Data Ascii: iqW`v<D$W^d4`^2Is\|KOk>&\|KDn;ah1Hm/BB482MClRml`kCZwj@v-,D#=qFFj)6i>$\|@PDS`yrf[!qp3J
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: ac c6 b4 1a ff 7e 37 6f 96 bb e3 b7 58 10 ac 18 f6 11 ac df 78 7e 76 23 18 11 6b 3e 20 a2 25 18 49 79 ae d6 39 77 9e c2 38 df c2 04 bb 40 b8 c0 85 ec 18 1a 52 9f e3 6c d2 34 67 c3 38 3b 29 b1 4d ca 36 fa 1a 98 f5 69 4e cd 71 4d 35 44 00 01 71 0b 68 a6 45 f3 7c 9e ae 30 e0 e8 5f 1a 8f 19 9e 33 1e 01 f8 7a 03 7f 89 ff 7e 8c 53 39 50 ac 29 ce 25 cd dd e1 82 cf c1 94 38 e0 c4 0f 8e e3 00 05 63 c4 21 04 cc 7a e0 a4 65 fe 68 76 01 50 78 17 38 63 3e 3f 4c 81 c5 e0 31 e3 d1 7c 2b 07 a6 f9 70 9c 6b 6d 3a 25 c7 45 39 15 88 71 ea 86 bc 4e 31 33 06 22 01 33 36 92 3e 04 48 6f 33 0e 94 cf 3e d0 ab ec f8 df 65 5a bb fc 79 2a bb 44 4a c2 00 34 82 68 07 ac 01 04 11 fb 23 ee 98 47 12 78 46 cd 0c ae 77 7a 00 6e 8a 65 4a 4d 2d 6d 9c d8 a9 32 72 14 24 c1 20 bf 08 b3 e3 08 dc Data Ascii: ~7oXx~v#k> %Iy9w8@Rl4g8;)M6iNqM5DqhE\|0_3z~S9P)%8c!zehvPx8c>?L1\|+pkm:%E9qN13"36>Ho3>eZy*DJ4h#GxFwzneJM-m2r$
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: c7 00 44 46 7e f4 d6 9e 41 c8 96 0c a7 f5 80 69 ab 66 88 11 20 30 09 1f 97 82 65 d9 32 80 ae bd 6e 5d 62 26 37 1c 7b 9f 3e 91 2a 00 34 4b 23 a7 db d6 96 ba a4 92 df 36 4b 5a bc 37 44 ef ab 4b cb 2e 23 9b bd 66 61 11 e8 63 35 92 63 23 61 81 cb dd 6d 6e e2 4f 6f 24 98 cd f8 24 9b 31 25 1d a1 98 02 53 a3 22 6b 39 c8 ce a1 17 34 db a4 7a 19 09 cd 48 43 01 28 dd b2 43 e9 30 10 f0 c6 6b 94 dc 51 ce c5 d7 ed e0 87 66 82 52 1a 9a c2 2d ca 5e 00 97 37 6d 7d d1 17 b4 8f d5 2a b3 48 cf 84 ae ec 74 58 9b 44 29 4d b3 b3 fc 52 18 7a e5 fb a5 c4 e4 06 ae 99 0d 8e 44 d2 27 98 e9 45 31 af 10 52 79 73 a3 5b 90 9d 9d f7 e8 3b a8 82 47 30 cd 88 18 b1 49 d5 2e 05 a9 8c 44 8c 01 97 99 36 d2 22 97 63 4b 7c 5e 93 dc 78 02 08 85 53 26 e9 ea af 6a 08 69 40 93 60 2c 04 2c 6d 1a c0 Data Ascii: DF~Aif 0e2n]b&7{>4K#6KZ7DK.#fac5c#amnOo$$1%S"k94zHC(C0kQfR-^7m}HtXD)MRzD'E1Rys[;G0I.D6"cK\|^xS&ji@`,,m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49845	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:29 UTC	1093	OUT	GET /9v08ai07I8aoFLj5M-90nzWPpvyNzOVgA2ZWF9avdW7oS8L9YqF9trVI44SUn2qGTA0=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:30 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4296 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:31:49 GMT Expires: Fri, 25 Oct 2024 22:31:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 1121 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:30 UTC	845	IN	Data Raw: 52 49 46 46 c0 10 00 00 57 45 42 50 56 50 38 4c b3 10 00 00 2f ff c0 3f 00 2a ac f2 ff ad d6 25 e7 ea 86 c3 34 cc cc 4c 87 19 9a 99 e9 30 43 f3 61 3e 39 cd cc dc 7d 98 99 49 ec b5 9e e7 59 cf 5e ef fb ba 3e 91 91 23 c3 a4 38 ab aa af 63 32 aa ed 54 ad b0 63 ba 85 8c 5c 32 32 b5 65 64 e4 b8 7f e0 0a 76 55 ae 81 69 d0 e5 a8 1d 90 23 7b ec c8 91 5d b5 42 ba ab 42 c3 a0 e3 56 5c 6c 56 b0 2f e3 e8 53 51 bb 12 37 32 cc b9 01 dc 01 1b cb 49 cb d4 c8 6c 37 f2 a4 38 71 93 28 52 4b b7 9c 2d e7 06 c2 49 df 40 d4 ee 8a 8b cc 91 21 35 36 55 3b a0 c8 32 5d c3 ba 86 ad 5a 8e ed f0 33 76 5c f6 2d 64 6e 20 e8 a2 76 55 e4 d8 ae 51 a4 ba 46 4d fd 6b a9 a9 28 a6 1b c8 d8 c0 92 d1 3b 28 d3 72 e4 33 36 ed 76 f5 9f 16 24 d9 a6 6d ab af ef e3 e7 b5 6d db b6 6d db de d6 b1 6d db Data Ascii: RIFFWEBPVP8L/?*%4L0Ca>9}IY^>#8c2Tc\22edvUi#{]BBV\lV/SQ72Il78q(RK-I@!56U;2]Z3v\-dn vUQFMk(;(r36v$mmmm
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: ed 8e a5 0b e0 54 5b c4 a2 f1 89 10 28 f3 63 c7 d8 60 07 eb 04 91 f8 e2 c3 3b 11 11 5b d0 7c 6e ec 9e 11 34 fb 55 27 22 12 7b 57 92 b4 62 26 f3 d9 b6 e6 64 1d 6d 8c 7c b2 39 f9 d7 08 0e a8 37 f4 01 b2 ef 42 77 48 4b 19 28 fd 76 96 c8 7a c3 b7 09 35 99 73 c6 8c 60 e4 44 76 81 9b d4 6e 85 34 db 06 d9 11 b1 f9 7a 82 69 c2 27 84 04 f9 04 98 29 25 99 a7 7e 3c 48 90 4f 8c 49 1c 82 85 ff 65 74 22 dc 94 4c d7 de ce a7 71 a7 89 98 61 7b 8b bc 2f 41 3a 76 36 d7 37 0a 55 af 06 c1 4b 71 68 37 4d d3 d3 0e 00 38 4d 4e 23 e1 7c 5d 0c 00 92 e3 27 48 26 f3 e2 00 e0 9e 4a 80 ab 3f 70 f4 e1 72 a8 09 ba 55 1f 3a 14 5e 93 93 a8 e1 b0 9e 16 74 a7 94 58 f1 d2 3b 1f da 86 84 f5 96 78 bc 94 a7 f0 29 16 e8 4b 00 00 e9 ce 8e 24 28 04 40 30 30 81 64 fb f4 00 40 06 48 ba 95 57 5a 1f Data Ascii: T[(c`;[\|n4U'"{Wb&dm\|97BwHK(vz5s`Dvn4zi')%~<HOIet"Lqa{/A:v67UKqh7M8MN#\|]'H&J?prU:^tX;x)K$(@00d@HWZ
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 34 66 a4 04 51 1c 6c 9f ce cb 1e a5 29 25 80 e0 a4 eb 13 4c e2 9e 05 f1 94 1d 5a 8e e7 59 61 3a 30 de 6e a5 23 24 3b 66 c7 2d 88 cc 4e e6 a3 96 d3 24 b6 00 c2 cb 62 8d 17 88 b8 85 6b 5a 49 78 f3 74 fc 9c be 44 44 93 34 5e 89 8f 4f 37 a5 1a 88 cc 2f 2e 56 41 bc d5 ae 45 db f8 de 66 bd af 2b 9e 6b b4 af f1 91 35 5f 6c 46 ef ea f4 90 83 9b a7 8b 51 fd d8 6a 0b 0d 09 91 a2 3a 50 cb f1 13 a6 07 a4 7e 2b 26 22 f6 8e 31 95 c0 aa b6 72 ae 96 97 fb d7 de 1b 42 54 cb 52 17 87 d3 b5 5b be 8d 77 5e 02 b1 55 7a d3 6f 55 61 7c bf 7a bb e2 1e a8 1a bb e6 6a 70 3d 57 00 b1 dd 2d 08 11 77 2c c8 a9 80 65 0d ed e0 63 78 af b0 20 da ed 64 cf d0 db 69 f3 c2 fd a2 13 26 50 87 85 da 6b 6e 7d 3b 56 f7 e9 1d e1 14 2f 07 20 cd 7e c3 8d 3e 80 cd 3f ac f5 2c 0e 94 b9 9d 0b 10 71 ef Data Ascii: 4fQl)%LZYa:0n#$;f-N$bkZIxtDD4^O7/.VAEf+k5_lFQj:P~+&"1rBTR[w^UzoUa\|zjp=W-w,ecx di&Pkn};V/ ~>?,q
2024-10-24 22:50:30 UTC	695	IN	Data Raw: 19 3d 5e 61 35 fb 66 a4 59 9a 6e c2 03 6d 20 bd c9 57 82 d6 74 13 98 19 37 26 e9 e2 94 66 e1 3f 0b c9 f5 8b 15 55 4b a6 2f 99 02 25 13 28 df 52 e5 01 19 60 97 da b3 98 64 c7 dc 1c 0b f3 25 48 5e 2c 55 61 85 c0 21 1b 70 0f 6a 54 38 bc ad 2c 35 08 06 a6 91 8c 19 29 b0 c8 9e 4c 32 20 d9 ac 74 41 e1 31 7b 95 3f f8 e5 37 fe 96 91 a0 81 df c6 92 04 6f 22 e8 64 16 49 ff 38 ac 7c 81 95 2a a6 42 50 67 22 7e 88 68 e7 fc 2c 5d ee ab 88 a4 a8 84 d1 32 01 77 86 94 04 7f 38 a4 f1 24 92 4e e6 15 a0 a2 6a 4e 4d 85 ac 2f 0b 5d c8 fd 1b d1 1c b5 f4 c9 ac e2 a7 11 bd 72 50 61 0d 88 fd d7 3f 66 db 92 f5 ef 6b 3c 2d 98 3a e0 d5 df 43 84 f3 74 ab dd 2f 58 6a 4e b2 ce ce bf 40 e2 d7 11 15 96 96 0b 4d 3d 02 dd e8 83 c2 31 44 88 a7 3c 53 29 99 c8 e5 12 d9 fc aa 37 9f 1a c9 6f 98 Data Ascii: =^a5fYnm Wt7&f?UK/%(R`d%H^,Ua!pjT8,5)L2 tA1{?7o"dI8\|*BPg"~h,]2w8$NjNM/]rPa?fk<-:Ct/XjN@M=1D<S)7o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49847	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:30 UTC	1093	OUT	GET /_sJ-ST-crO8lxIzTv44xv_hiZvA6X7X2-8jSjhha2RfYcGSgACRod38yA6dfmcJHy_M=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:30 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2616 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:10:05 GMT Expires: Fri, 25 Oct 2024 22:10:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 2425 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:30 UTC	845	IN	Data Raw: 52 49 46 46 30 0a 00 00 57 45 42 50 56 50 38 4c 24 0a 00 00 2f ff c0 3f 00 2a bb f5 ff ab b6 ad ac e7 ee ee ee ee ee ee ee ee 9a b9 bb bb bb bb bb bb 5c 77 3b f2 dc dd dd 75 cb d9 73 ee 33 e6 cc de 8e 76 05 cf 5f 8e 55 e3 50 04 15 d0 c3 c2 52 06 45 ec 12 2e 91 5b fa 34 a6 05 f7 85 15 e3 5a 80 53 08 99 16 f0 66 82 9c 2e b0 d4 ce 20 22 76 89 5d 9e 15 c1 18 eb 84 13 af 80 32 4e 4a 03 0e 1d dc 1a b0 89 73 43 ec 54 40 15 6e 99 55 c1 18 bf 16 18 bb 8e dd c2 8b d1 06 76 7e 23 e2 37 c8 08 f5 f4 41 e4 ff d7 0c 2d 78 15 27 c5 0b 20 65 0c 59 b7 b5 1d 5b b5 d2 59 fd 01 db 76 6d db b6 6d db d6 91 6d db 3b 7f 7a 91 6d db b6 5d b2 05 00 2c 23 e9 ef ef 49 83 a4 69 3a 3b b6 d1 b1 cd dd b1 6d db bc f6 7f 02 0e 1c 63 42 fe 0f f9 3f f4 d7 9d 9b 1e eb 66 ac 0b 44 f6 d7 14 6a Data Ascii: RIFF0WEBPVP8L$/?*\w;us3v_UPRE.[4ZSf. "v]2NJsCT@nUv~#7A-x' eY[Yvmmm;zm],#Ii:;mcB?fDj
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: ec 80 f8 fe fb 22 1f b3 d9 f5 40 68 2f 30 73 3d f8 16 b2 6d 6a 4f 8d c2 3f 15 7e 3e d4 19 7c b6 69 83 dc 0d f1 7f c0 10 33 d7 93 94 7a 9c 17 38 6b 86 b5 05 ac 68 cc c8 ce 84 ef 4c 75 d6 7f 29 38 f7 ee f9 cc 74 3b 6e f1 f7 a1 1e da d9 b6 ee 2c 5c f3 3e ce da 1a 3e d3 ae d8 16 e2 f5 72 56 14 bc 5b 57 9d 06 5f 6c 70 73 00 c4 bb 37 53 88 d6 58 87 dc 06 be 1b 07 65 bf 83 82 3b 97 b2 53 15 b8 11 10 00 37 bf dc 17 ab 61 37 d1 d7 87 cf 88 1a 65 a7 73 cf ae 37 05 7b c6 58 fb 3c 2a 0d b1 1f 8b d4 81 c3 cc 60 0b f4 37 81 cf 73 2c 88 12 49 13 4a 0d cf 8c 9e 0a 37 21 79 21 4e fb f4 fd 6f 0f f1 a9 f0 ae dd 11 b6 da 33 28 75 cc 18 ef b0 ff b0 c3 56 09 af 08 53 46 07 88 b3 e0 fd 24 0b d6 2a ff 9b 94 7a ee d8 70 ff d2 0e 0d 57 61 ea d6 50 9e 0e ef 8d 80 5a 41 f8 2b 92 f1 Data Ascii: "@h/0s=mjO?~>\|i3z8khLu)8t;n,\>>rV[W_lps7SXe;S7a7es7{X<`7s,IJ7!y!No3(uVSF$zpWaPZA+
2024-10-24 22:50:30 UTC	393	IN	Data Raw: 2d 22 ae 0f 3e 49 7e 74 8e c7 09 d9 b3 f8 f5 43 d9 b3 f8 4d a9 ef 26 85 7b c1 ca 2b 74 53 9d ff f6 3f 5e 7f 39 c1 4a 6d ff 7b 96 f3 dc af ca 5b e9 d5 14 f5 96 10 b9 0f c5 a9 b2 b6 77 cf a7 60 74 7f c4 f5 0e a7 6c 0c 90 b3 9d 9b 1f 77 5f f4 73 b6 27 7d 8d 7a c3 4f e0 55 92 ee 74 a7 bb 97 4a 9a 27 a7 ad 92 d3 96 6b a7 ad 4a c4 4f ef 9e 4b 6c ad 12 5e fe 6a ff 5e 46 0b a4 a2 37 69 01 0c df 92 d4 a7 85 de fd a3 31 c6 44 ff 58 35 b0 66 88 53 e3 1a fe 4b d2 b5 e3 08 7c c8 7f 21 ff 85 fc 77 e8 b9 06 99 68 66 32 f5 95 b0 14 0d b5 cc 76 1b 06 9f ff 86 14 3d e5 38 06 3f 58 31 b4 28 45 8b 7f cf 9e 8f c1 43 72 8b 6d 29 ca 27 77 3f c0 c0 24 24 cf a5 68 fd ec 8d cb c0 fe bb 14 91 05 91 16 b0 58 6b 48 48 8e 47 d9 ea ca 0a d8 4d 16 fd 94 95 a4 52 49 33 37 60 f6 96 e5 47 Data Ascii: -">I~tCM&{+tS?^9Jm{[w`tlw_s'}zOUtJ'kJOKl^j^F7i1DX5fSK\|!whf2v=8?X1(ECrm)'w?$$hXkHHGMRI37`G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49848	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:30 UTC	1565	OUT	POST /recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 2162 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-protobuf sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=invisible&cb=99qpeju3sn34 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZwvAZkhUuyzhgCpmRkJOxhsuNribcRO1sMUFClzXvRUwULgzOtRe0aDqUF_csWETf2grcuUCK1-ikaCJLI; NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:30 UTC	2162	OUT	Data Raw: 0a 28 36 4c 63 41 32 74 45 5a 41 41 41 41 41 4a 6a 37 46 54 59 54 46 39 63 5a 34 4e 4c 33 53 68 67 42 43 42 66 6b 57 6f 76 30 12 ce 0f 30 33 41 46 63 57 65 41 35 36 5a 53 48 48 42 46 71 5f 62 46 4f 7a 4e 47 75 7a 5a 52 49 5a 70 42 78 35 62 49 6a 77 38 71 49 65 55 56 6c 79 41 51 35 47 4f 37 30 6c 32 36 34 34 78 58 42 52 76 38 78 36 32 38 69 6a 68 54 39 66 52 2d 54 47 63 61 55 77 62 45 56 4b 78 79 55 65 7a 53 4b 49 6a 2d 62 74 45 63 52 56 67 37 47 75 47 7a 68 64 5f 38 78 30 45 57 65 43 55 34 46 51 6e 49 64 52 73 72 76 79 75 31 55 62 6a 4d 66 64 42 77 49 49 5f 34 5f 6b 30 56 4c 6e 45 67 6f 32 44 33 7a 43 6c 39 4b 79 62 51 52 49 62 70 69 64 30 6e 6d 41 5a 30 77 47 6e 5a 46 67 56 6d 43 75 6b 56 36 2d 35 34 70 57 58 47 44 32 68 38 64 4f 75 31 5a 49 62 78 4a 4a Data Ascii: (6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov003AFcWeA56ZSHHBFq_bFOzNGuzZRIZpBx5bIjw8qIeUVlyAQ5GO70l2644xXBRv8x628ijhT9fR-TGcaUwbEVKxyUezSKIj-btEcRVg7GuGzhd_8x0EWeCU4FQnIdRsrvyu1UbjMfdBwII_4_k0VLnEgo2D3zCl9KybQRIbpid0nmAZ0wGnZFgVmCukV6-54pWXGD2h8dOu1ZIbxJJ
2024-10-24 22:50:30 UTC	657	IN	HTTP/1.1 200 OK Content-Type: application/binary Access-Control-Allow-Origin: https://www.google.com Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Date: Thu, 24 Oct 2024 22:50:30 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49849	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:30 UTC	795	OUT	GET /recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZwvAZkhUuyzhgCpmRkJOxhsuNribcRO1sMUFClzXvRUwULgzOtRe0aDqUF_csWETf2grcuUCK1-ikaCJLI; NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:30 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:30 GMT Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:30 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-24 22:50:30 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-10-24 22:50:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49851	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:30 UTC	523	OUT	GET /RpY2HMoj2ZfD2CIy4-atnMUUU0gPk6afkefze7kC-XDgJqJW7fQc70yGdl8KOcxYSA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:30 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2080 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:50:28 GMT Expires: Fri, 25 Oct 2024 22:50:28 GMT Cache-Control: public, max-age=86400, no-transform Age: 2 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:30 UTC	848	IN	Data Raw: 52 49 46 46 18 08 00 00 57 45 42 50 56 50 38 4c 0b 08 00 00 2f 3f c0 0f 00 2a ba b5 b6 3d 8e 9b fe 2b 5c cc 0c bc 1f 78 ac 77 58 04 83 1d cc 62 65 63 a4 ca 86 72 11 23 f9 02 a6 02 1e 75 a0 16 26 66 2c 76 80 c3 58 5e 42 01 32 7f 05 f2 2a 42 99 f7 52 b8 a1 fc 94 20 87 26 58 02 43 f5 a0 1e b4 15 f0 a0 03 46 b6 05 c5 76 72 1e 86 b2 05 28 de 0e e4 4d 03 38 cc 55 81 8b 70 8e 22 66 8c 59 84 7c 01 ea c0 43 2e 62 ca 50 21 4d 2d f2 6e 73 99 0e bc d0 84 3a 20 d4 03 19 31 45 19 9b 2a dc 0c 47 05 b8 97 87 1d 68 52 15 e0 63 34 c1 0a 14 5a c8 45 ca 24 09 10 40 00 d1 c4 1f 74 aa 0f d8 b6 6d db b6 b9 b6 6d db 36 b2 6d db b6 1d dc 00 00 08 36 67 74 f2 01 b6 6d db b6 6d db 8c 6d db 49 6d db b6 6d a3 ff 13 a0 27 7a cd 77 3d 91 0c 61 0c 81 0c c1 bd 45 4f 04 43 08 43 00 8d 37 Data Ascii: RIFFWEBPVP8L/?=+\xwXbecr#u&f,vX^B2BR &XCFvr(M8Up"fY\|C.bP!M-ns: 1E*GhRc4ZE$@tmm6m6gtmmmImm'zw=aEOCC7
2024-10-24 22:50:30 UTC	1232	IN	Data Raw: 45 52 28 56 ea 50 45 28 77 52 26 29 b5 44 4a be 57 52 70 0d 82 09 55 81 48 32 ba f3 07 a0 6b f3 27 29 b2 37 98 f3 cd 8e 65 67 cd 67 6f b2 b4 42 63 d3 16 5c 97 c8 22 c9 64 32 75 28 20 98 3b 21 13 95 c6 79 23 45 ca b5 f4 9e 70 fa 49 dc 62 3a a6 0e ed 3b 00 60 ee d5 e5 92 f7 ad cc f7 a1 67 7e 99 24 a3 db bf 70 9d 27 8a 0c be 9d 4b 2f ed d3 f7 ed d3 77 43 08 e6 8c cb 6a 28 6f 3a b2 fc 7e ab e3 08 42 49 d9 d3 41 00 26 0e c4 25 b2 77 d9 43 6d 63 d7 dc b6 d1 ab ce c5 17 8e f7 b9 a8 44 72 cd dd 47 7f e7 48 d6 e2 5b 0b b8 ce e0 45 2d 5c 3a 3f 23 5c 34 7b de f2 60 fe a4 aa ce 18 8e 6c 7c 39 4f a2 15 65 36 80 a1 3a e4 92 dc 1c 8f b2 49 37 07 bc 37 4f 96 28 2c 80 71 4a c1 ff b9 0f 70 9e c0 68 92 2c cb 7d be 77 dd a1 e2 19 95 a8 83 df 29 64 f0 57 f0 1c 9d eb 8e 0c 0c Data Ascii: ER(VPE(wR&)DJWRpUH2k')7eggoBc\"d2u( ;!y#EpIb:;`g~$p'K/wCj(o:~BIA&%wCmcDrGH[E-\:?#\4{`l\|9Oe6:I77O(,qJph,}w)dW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49852	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:30 UTC	1092	OUT	GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:30 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10588 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:10:18 GMT Expires: Fri, 25 Oct 2024 21:10:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 6012 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:30 UTC	844	IN	Data Raw: 52 49 46 46 54 29 00 00 57 45 42 50 56 50 38 4c 47 29 00 00 2f ff c0 3f 00 4d 40 72 db 48 92 04 d9 91 b5 20 f2 ff 1f de b3 bb 67 ce 11 fd 9f 00 fe df 3a 62 03 11 e7 e2 02 7b 8b 04 20 d9 10 b1 e1 11 dc 81 24 81 34 e1 41 1b cf 0e 79 f2 2a af df 27 84 eb 0a ad 9d 49 75 44 a5 da 73 d9 64 d3 52 33 33 62 ea 22 33 d3 56 17 75 a7 6c c9 fe 05 f9 45 d0 e8 40 7f 53 30 f9 be 8d 5e c9 7e 47 fd a7 b1 7b 99 b6 97 1e 00 5b 7a 0d b5 ae 71 07 80 65 ef 8a 08 2e a0 b3 37 ae 0b a8 75 df f0 dc 1f bb 80 1c d9 b6 6a a5 91 00 c8 3f 2a 77 db f5 ea 2b 7c b9 b8 eb 13 1e 23 a6 90 24 d9 36 6d e5 f7 f3 db df 37 5e 6b cd 7f 2c bf 69 db b6 7f 40 8a 24 c9 91 e4 33 3d 0a c6 f2 47 b2 10 e4 dd 05 84 7b 69 d5 ff 09 c0 7f 73 64 0c 8c 81 f1 27 2c a7 ad 05 00 0b 33 b0 d8 9c 26 cd e8 69 f0 0c f5 Data Ascii: RIFFT)WEBPVP8LG)/?M@rH g:b{ $4Ay'IuDsdR33b"3VulE@S0^~G{[zqe.7uj?w+\|#$6m7^k,i@$3=G{isd',3&i
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: b3 8c cf 2e fc 3f 11 ae 06 4f 8a 27 04 33 c3 65 58 98 ae a4 44 db b6 29 c9 da fb 5c c4 8b 88 97 aa c4 18 d1 aa 6f db 36 7a 46 cf 6c fd 96 6d db fe bf 5d cd df b2 55 b6 6d 33 cc 7b ef 89 09 d0 ab ec ff 3b 69 9a 53 b5 de 84 9b ae bc 42 a1 23 70 87 a8 58 a1 0e 44 07 21 74 08 3a 84 f5 ae 2b a8 9e 9e ee 7e 5d 7a 47 1b ca 7f f8 f2 97 f9 49 f1 52 0c 1a 8a 2f 74 50 f2 59 c1 3f 18 fe b0 e6 09 1b 31 d0 0c 25 f3 89 5e 93 bd cc 4b 53 c8 fd e4 fd fa e2 cb b3 c1 c4 f2 cd 9a bf bc 8d 45 45 9a 03 90 69 99 d6 a3 05 a8 b5 6d bb 56 d6 3a 3f 7f fd c9 a0 53 1b 74 87 a6 2e 8a c0 e1 70 f9 ed 0d 29 b2 6d d7 ca 5a fb 47 e2 88 21 52 f0 8c 0f 44 50 b8 c8 ec 1d 13 f0 08 9e f9 ff 99 ff 9f 01 de 0c 57 32 66 c4 58 42 0d 74 e3 7c 0e 1d 63 0a 0a 05 ee 27 f6 1f b8 18 ee b2 42 03 09 a9 05 Data Ascii: .?O'3eXD)\o6zFlm]Um3{;iSB#pXD!t:+~]zGIR/tPY?1%^KSEEimV:?St.p)mZG!RDPW2fXBt\|c'B
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: cc 2c 91 19 35 12 59 81 d3 50 94 06 1e 07 8d cc 50 e4 db ca e9 2e e0 bf a3 55 22 72 02 aa 37 92 18 34 9a 65 f0 13 31 e9 31 eb b0 f6 cc e4 2e 99 bc dc 3c 6c a8 33 05 3d 1a 3c ad ea 71 02 06 88 6d 5c 72 aa 00 93 8b ac b0 11 a3 d7 b6 11 b0 42 50 41 df 88 3f c9 14 56 74 f2 d3 56 64 52 27 0a 7a cc 07 a2 a0 5f 9d 1d e8 45 ab d1 56 11 b6 bd b6 00 3f cd 0a f2 6d 6c 60 e4 2c 3d df c4 12 49 42 82 35 1b 33 1c 94 c1 10 9c 1d 31 51 46 32 a8 75 f8 67 38 dc b6 cb f1 b0 f9 4b 2d 6e 88 6a 00 af 2b 01 0f 0f 62 dd ab 78 8e 68 3b f2 c3 c2 26 0f d5 8f c9 49 b5 a0 4b e4 15 12 4b f7 2a da 61 ac 1f 02 45 a4 96 6a 24 9b 5d b1 88 d9 3b a2 5f ce 36 e7 8d b4 14 7e 9a ff 18 4f f7 7d 2d 49 ae 6e 22 67 66 71 1f 75 0d ea 40 52 84 d2 6b e9 80 66 e8 88 32 18 3e 70 40 1a 80 b9 70 48 9d b7 Data Ascii: ,5YPP.U"r74e11.<l3=<qm\rBPA?VtVdR'z_EV?ml`,=IB531QF2ug8K-nj+bxh;&IKK*aEj$];_6~O}-In"gfqu@Rkf2>p@pH
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 19 77 b3 ef 61 ff dd 69 96 f9 46 1c 11 98 80 b5 16 09 09 40 80 bd 7c 16 3d 31 4f 7e 47 1f f3 04 b9 1c 8c 88 99 71 be 7d 34 7e 45 73 6e e1 81 2b cc 01 59 29 1c 53 05 e0 81 3d 0a 23 8e 36 03 8f 9c 23 b0 37 cc d8 a4 04 36 98 81 43 45 b4 15 f6 94 0a 7b 0f f6 04 20 d5 f1 38 09 30 60 db 6d 1e a0 81 13 90 18 a8 41 c0 0d 80 35 73 2c 45 39 65 8c 21 b1 a6 5a 56 43 d4 69 95 e2 22 b6 9c b2 56 cd cd 96 45 59 97 ad a2 12 a7 22 ef 38 09 a9 3c 42 23 d2 57 d4 52 08 fe f8 f4 a6 87 b7 a9 74 f9 92 39 f9 3d 0f 17 ef 7c 3c 21 3e 34 46 38 f6 db af 9d 9d 72 a6 dd d6 0b ee 96 9d 7b 59 a4 54 e3 fd ee df bd 47 d8 5b 6d 22 54 a9 28 c3 7e 7c 3c 07 cd ce 0d e0 94 ad 08 66 df b6 51 0b da 78 95 52 61 a7 c0 ac 4b 75 04 a9 0c d8 76 9b d9 8f 00 03 48 f3 30 3c 20 84 1b 00 b4 cf 7d bc fe 33 Data Ascii: waiF@\|=1O~Gq}4~Esn+Y)S=#6#76CE{ 80`mA5s,E9e!ZVCi"VEY"8<B#WRt9=\|<!>4F8r{YTG[m"T(~\|<fQxRaKuvH0< }3
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: ba 97 72 01 02 43 f0 a1 06 cf 54 66 bc 67 3d c5 af 87 97 b5 86 00 02 b5 11 17 97 6c 97 10 f6 f4 56 01 b0 13 e8 7f 10 65 7f ce 14 f7 b6 3f 4c 24 7c 2d c1 51 5b 95 92 5f 77 50 ec 20 fd 40 16 50 f0 18 eb 22 10 d0 47 54 d8 08 48 be 04 d2 2a fe 96 b7 27 4f db ed 93 9d 42 69 46 d5 fd 8e 78 d9 c7 8e c6 f8 1f 3e 96 5f 71 79 ac 8b 81 b6 ec 82 6d e3 9e f7 7e f9 50 84 be 0d 60 b3 54 78 7c cd 52 9e be 0c e9 6c 29 8c a8 cd 66 b7 69 6f 86 b6 e1 fa ef e9 d8 7e 57 5b 1a 28 1c c9 c2 bd d0 41 85 9d 52 d9 00 12 1e be 7c d7 ed f6 c9 80 e0 00 7d 03 54 c0 fb b7 af 5a 65 d8 13 d1 4c 5b a1 af 09 e0 04 1e 5f f3 1c 9b a7 8f e7 e1 b2 81 45 6a b2 70 42 3f cc 0d ce 5a f0 aa 40 41 bc 21 8e 23 f8 e8 d5 78 10 38 a5 b2 13 e0 00 3b 94 4f 76 22 95 03 74 bb 28 f0 af c3 3e a2 b5 5d 02 1a ba Data Ascii: rCTfg=lVe?L$\|-Q[_wP @P"GTH*'OBiFx>_qym~P`Tx\|Rl)fio~W[(AR\|}TZeL[_EjpB?Z@A!#x8;Ov"t(>]
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 48 33 80 9f 89 86 53 9b 99 3e a2 c2 89 54 80 9d 3f c1 a7 cb 5f 3a 83 66 7b 22 68 66 bd d8 69 00 dc 91 ec af f2 e0 31 03 d8 bc 80 13 8a de 91 30 40 01 76 ee 55 78 92 60 03 4c 10 cd 4e e0 48 7a 4a 37 09 fd 7b 38 5c a5 b5 33 68 36 12 f4 51 2a 3b 91 00 c3 5e 55 76 9f a4 c3 fb d8 10 f0 98 c0 f1 38 d1 d5 00 28 d0 3b e3 d5 6c 22 da e0 94 ca 06 15 4e 44 01 06 51 76 ee 35 49 c7 bb dd 44 44 7b 0d 70 3c 4e bc 65 00 34 40 07 e2 4a ce 8c 06 cb 2a 15 90 5b 70 22 01 38 11 60 f2 50 4c f2 8e 8c 68 8f 9c d7 26 2e 57 5a 03 6c 1b 44 70 77 85 57 44 e3 62 18 a0 c0 6c b7 4f 3b 83 0a c0 48 b0 23 45 f5 3e 49 f7 c4 65 db ee 01 a5 6f 27 80 b9 f4 99 78 c1 df cb 15 ef 03 93 12 74 a4 32 89 58 df 21 15 66 92 ca 1e e3 32 47 11 70 0f 68 d8 99 00 76 02 27 08 e8 3b 1e e2 0a b1 53 14 e6 1e Data Ascii: H3S>T?_:f{"hfi10@vUx`LNHzJ7{8\3h6Q;^Uv8(;l"NDQv5IDD{p<Ne4@J[p"8`PLh&.WZlDpwWDblO;H#E>Ieo'xt2X!f2Gphv';S
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 48 6b 3b a0 b0 11 f4 4e 34 50 d9 29 15 af 60 53 90 11 8d d3 89 f5 ba db 31 01 bf 6b 41 72 aa 39 db 79 be 5f 8d 34 da 6d f8 7d ff 65 e5 21 97 b3 3f f5 f7 ef 3f 02 da f3 f5 ac 5a f5 51 77 fd a1 88 8e d1 90 5c c1 40 47 71 17 f6 bd 53 2e bb 01 80 99 04 e8 48 33 bd 8f d2 42 ec 44 00 76 4a 85 bd 57 dd dd 65 44 83 6d 47 66 69 c3 b6 9f b0 53 aa 3f cf 3e c0 1e 01 a9 06 22 00 ec 8c e8 be 3b fd e1 e3 2a fb 61 3d 5e b0 1a 29 cd 71 0b 0e 1f 20 33 48 1f 7a bc cd 53 e3 bc 8f 5a 35 0b b8 d6 f9 4b f5 25 ee df 96 b4 75 f5 2c 38 ee 06 71 1c 78 b1 ba e0 3e ef cd bc 23 98 49 08 d7 41 40 ef 29 95 01 01 d8 29 c0 08 b8 98 64 44 43 70 e0 34 94 46 04 3b a5 b2 f7 2f 0d 76 09 48 35 0c 7b e4 d3 28 b9 4a 7b 15 1c f6 ce b8 6d 96 2d e4 2d 88 23 4b 28 e4 04 6f 39 dc fb a1 a6 bb 7d c6 b5 Data Ascii: Hk;N4P)`S1kAr9y_4m}e!??ZQw\@GqS.H3BDvJWeDmGfiS?>";*a=^)q 3HzSZ5K%u,8qx>#IA@))dDCp4F;/vH5{(J{m--#K(o9}
2024-10-24 22:50:30 UTC	1378	IN	Data Raw: 11 65 f0 97 03 4d 72 2e 68 0d ce fc ac db 15 17 ac 39 03 d9 76 2a b6 0c 53 36 b5 3a 20 92 20 09 20 88 77 5a 14 cc 10 7f eb b7 14 06 cf 70 ff db 85 63 80 4d 9d 17 65 21 ec f9 78 5f fb fc 32 5c 12 fb 61 bf 98 e4 16 da 7b 35 6c bf 3f e7 15 24 37 3d d2 a5 33 2e ff a8 b8 30 ab a4 3e ff f8 1c 33 7b b8 b5 f8 02 af 66 2f fa ba 7d a2 e6 23 a1 19 e8 d8 6d fb a3 7a d1 74 61 29 db 0d 5d 0e f7 05 0a a2 a3 71 10 86 52 4a 22 4c 0c 5d 00 98 2d 9e 9f 7f 65 22 5e 56 d7 dd 71 13 16 1d 33 e3 4c 9e df b4 f3 ee cd f7 9d 97 e6 3c 9c 21 62 bf 72 a3 37 69 6e 3a 51 bd 7d 38 27 c6 20 8c 01 50 bd 3f 73 06 2e f0 11 e9 9b de b7 7c ff b3 24 84 dc 80 36 de 75 a4 67 f0 f2 d2 4b c5 7d d6 e9 29 52 ac 51 50 83 a8 06 e7 96 33 6f 72 fe be 85 87 5c 8e 0b 32 8e 0d d8 b2 c1 bc be a1 04 dd 4b 7a Data Ascii: eMr.h9v*S6: wZpcMe!x_2\a{5l?$7=3.0>3{f/}#mzta)]qRJ"L]-e"^Vq3L<!br7in:Q}8' P?s.\|$6ugK})RQP3or\2Kz
2024-10-24 22:50:30 UTC	98	IN	Data Raw: b2 d6 a9 f4 a4 05 e6 d2 ac e4 45 52 89 36 02 95 c5 31 19 0c 24 21 59 65 59 9d 5d 82 3f 80 95 ac 2c 15 53 18 8b c5 b1 19 0c 81 24 ee c4 e0 84 90 2e 22 62 2a 8b a3 54 89 48 83 d2 b4 81 84 24 21 44 58 1c af 62 10 91 db 10 42 30 84 a3 57 10 d2 44 88 8d 10 08 47 b4 dc 32 3c f3 ff 33 ff 7f 6e 4e 00 Data Ascii: ER61$!YeY]?,S$."b*TH$!DXbB0WDG2<3nN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49858	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:30 UTC	798	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZwvAZkhUuyzhgCpmRkJOxhsuNribcRO1sMUFClzXvRUwULgzOtRe0aDqUF_csWETf2grcuUCK1-ikaCJLI; NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:31 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:31 GMT Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:31 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-24 22:50:31 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-10-24 22:50:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49853	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:30 UTC	525	OUT	GET /RKt7FfLHYfXyEJkY2imqAe1BP96wjAHtm7tH_rZZmBBX2QkC_2luYj6jXlPqoRhX5HmB=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:31 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1854 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:26:38 GMT Expires: Fri, 25 Oct 2024 20:26:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 8633 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:31 UTC	845	IN	Data Raw: 52 49 46 46 36 07 00 00 57 45 42 50 56 50 38 4c 2a 07 00 00 2f 3f c0 0f 10 09 45 6d 23 39 9a f2 db f0 27 7c 15 42 44 ff 27 40 3f c1 cb 5c 14 4b 02 13 bd 2f 14 b4 91 14 95 1f 01 f8 57 89 83 3b d0 a0 a6 6d 23 c8 00 4e 37 1e 7f 90 ef a8 a8 6d 24 c7 5a 04 7b bd bc 8e 3f c8 53 ff 27 00 bf e4 63 f2 90 71 9b 17 f8 87 dd 78 00 04 2e 08 31 7a 41 da e9 64 00 44 74 ae ff 5f 64 27 bf ff ff ae cf de b8 55 09 ee ee ee ee ee ee 6e a5 3b 6d e8 42 45 eb 0e 95 7b 99 50 b9 bb 3b ac dc 9d 9d f9 e3 30 73 4b ec 8b b5 74 73 fe 27 36 58 1b 5f 06 2f a9 e6 9c b8 a7 23 1d 0e 53 51 ba db 2d 71 87 41 5a 2a f7 17 90 12 d7 17 e0 b2 27 8d 1c c8 b6 4d db 1a 6b 5f 7c db b6 ed 9f d9 b6 6d 33 b3 6d db b6 fd 43 db b6 6d 9f b3 f7 5e 72 6e db 36 b6 67 ef 73 ef f3 62 bc f9 8c d8 b6 93 ca ac 92 Data Ascii: RIFF6WEBPVP8L/?Em#9'\|BD'@?\K/W;m#N7m$Z{?S'cqx.1zAdDt_d'Un;mBE{P;0sKts'6X_/#SQ-qAZ'Mk_\|m3mCm^rn6gsb
2024-10-24 22:50:31 UTC	1009	IN	Data Raw: b3 14 db 24 1a 43 2a 94 df a4 74 de 85 34 5b 96 27 a3 ec df 04 c2 16 78 cc 78 35 1b 1f 11 65 1c 41 b7 95 5a a8 59 76 18 46 82 5d 62 a3 5d 14 11 c6 a9 96 41 8c d9 a9 45 02 30 47 9a 9c be 26 df 46 01 70 e7 7d f2 09 09 91 0a b4 66 51 ef d0 6b 9d f2 0a 63 71 22 69 9c a5 ce 51 59 8a 4a 53 56 9a 58 69 54 21 00 82 bc 6c 4c 4c 9a 29 6b e5 8f 29 d2 0c 82 18 2a 57 5c 87 fd 37 9f f8 70 85 8a eb 48 04 8f 45 76 5a fe 46 08 95 c1 41 02 67 90 7a 35 06 af 50 a5 a0 0a 51 71 8c 02 d9 42 00 9a 40 7f f1 8a 5a 50 22 09 29 bf c1 04 69 ba 0c 3a ff 89 20 a4 59 e5 03 e4 04 03 ba 90 71 12 6f 87 ed 73 f2 9d 0b 54 ba 01 04 2d b8 e8 99 08 74 5f 5c 49 c1 d3 0d b8 96 50 f2 aa 67 2a 99 e7 93 80 09 75 a0 5a f5 9d e8 37 5c 28 c1 3c 81 94 c8 13 8f 44 f6 38 fe 89 53 02 e0 bd d9 27 bf d6 5b Data Ascii: $Ct4['xx5eAZYvF]b]AE0G&Fp}fQkcq"iQYJSVXiT!lLL)k)W\7pHEvZFAgz5PQqB@ZP")i: YqosT-t_\IPg*uZ7\(<D8S'[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49857	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:30 UTC	523	OUT	GET /vIMymGDzl2arE2styucCrIO35Qv6yX7iJJYZGmIUMXXV_mT5OyR5MjpkfHFB3tc8bA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:31 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2042 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:17:22 GMT Expires: Fri, 25 Oct 2024 21:17:22 GMT Cache-Control: public, max-age=86400, no-transform Age: 5589 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:31 UTC	845	IN	Data Raw: 52 49 46 46 f2 07 00 00 57 45 42 50 56 50 38 4c e5 07 00 00 2f 3f c0 0f 00 35 07 41 b6 cd ea ef fd 1c 21 22 26 a0 3f c5 72 a7 2b 6d ff 22 59 b9 6c 5c 6e 80 22 26 25 77 77 d7 f1 59 f7 ed fe f7 ac 1f 77 97 99 5f f7 bf 77 89 28 72 d7 3b 60 22 64 8a 18 b2 7f 6d 8a 7b ea cc 6c d5 64 87 4d c9 56 32 60 32 f4 06 a8 cd 70 49 dd ff e9 5e 01 4e d7 66 64 c7 87 13 6f d5 af 8e 66 58 e4 74 6d 7c 5c 22 2e 00 52 ed 2b a0 eb 5c 00 ae 11 19 d1 56 f5 05 1c 8d 70 38 16 12 69 ba f1 89 49 e4 0a 00 60 c8 55 d2 b2 b7 6d db 6d ca 74 f9 83 94 b6 9d b3 3d 8b db 9d 99 d8 b6 9d 54 b6 6d fb 3d c9 b6 6d 9b 76 95 2f 39 7b c7 76 f6 5a 73 c7 4e c9 76 d5 b6 6d d5 6d fd 81 ed a4 68 3c db 36 5b ff 1d b8 6d 1b 49 52 3d 7b ef ba 7b b5 6f 80 9a ff ff 3a e5 1e 9a 43 72 77 77 77 77 d7 6a 95 1d 20 Data Ascii: RIFFWEBPVP8L/?5A!"&?r+m"Yl\n"&%wwYw_w(r;`"dm{ldMV2`2pI^NfdofXtm\|\".R+\Vp8iI`Ummt=Tm=mv/9{vZsNvmmh<6[mIR={{o:Crwwwwj
2024-10-24 22:50:31 UTC	1197	IN	Data Raw: fa d2 f8 3e 7f 7f 0c 8a c5 b3 a3 95 88 88 b9 2c c0 23 0a 06 9a 0c aa 9d ce 2f e3 74 16 74 7f 7e 65 50 95 9a a2 08 34 57 e8 74 82 02 5b 1c 41 41 8b 21 c6 d3 68 5c ad 45 81 7d b6 b9 45 d7 db 87 71 19 e7 16 8e f6 19 72 3c 10 87 43 3c 93 30 0e fb 34 d3 98 73 7a 1d 10 0d 2b 87 11 95 50 ae a4 96 f8 63 20 7f de a6 40 1f a6 04 e0 0d db 0f 25 8d ac a7 dc 4e ea dd 28 d0 88 35 e8 87 1e c9 70 69 bb b1 5e 09 89 f7 78 7d a7 c0 3a 1a 20 fa 23 cd 05 44 7e 77 09 81 06 e5 72 f1 ec 18 f4 6b 00 22 2a d1 0b d4 e5 fa 5e 33 a4 a2 f7 df 6f 05 06 30 01 11 8d 79 21 8a 66 46 1a 95 a9 6c b3 ba 04 b5 62 05 c1 4b 02 ea fe fa 36 2e e3 33 05 62 10 10 b6 d4 c0 cc 82 c6 f9 c0 29 3e f8 42 bc 85 00 0d a6 d2 c3 77 38 3c 64 54 71 5f 33 d4 c3 13 20 03 ef 8b c3 d7 1b de a2 78 76 44 0d a9 68 e2 Data Ascii: >,#/tt~eP4Wt[AA!h\E}Eqr<C<04sz+Pc @%N(5pi^x}: #D~wrk"*^3o0y!fFlbK6.3b)>Bw8<dTq_3 xvDh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49854	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:30 UTC	537	OUT	GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=s16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:31 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 170 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:21:14 GMT Expires: Fri, 25 Oct 2024 20:21:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 8957 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:31 UTC	170	IN	Data Raw: 52 49 46 46 a2 00 00 00 57 45 42 50 56 50 38 4c 95 00 00 00 2f 0f c0 03 10 05 d4 da b6 96 47 af 93 94 43 2d c4 c5 c5 c5 31 33 2b 4e dc 38 2e 81 99 14 33 db 71 8c 47 bc f7 4d 0d 11 47 fe 9f 00 d0 7e be 34 fc 32 49 50 5f 9e ea 29 a5 9c a4 fe bc bb 5a 3a d5 7d e9 f6 9e fe 95 24 ad e4 d5 af c9 bf aa d7 20 4f 8f cb c5 ea a4 11 2c a5 94 91 8a 86 fd 51 55 bb 8a b7 fe 54 07 8d c2 ab 24 cf 3f 25 f9 db e8 e6 fe 7a 29 3b 49 32 5a 39 d5 fa 7f 3d 24 f9 de d5 7b f8 2f 75 a8 94 32 70 e1 63 6a 90 5c 9a bd fd 25 6d 00 00 Data Ascii: RIFFWEBPVP8L/GC-13+N8.3qGMG~42IP_)Z:}$ O,QUT$?%z);I2Z9=${/u2pcj\%m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49855	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:31 UTC	525	OUT	GET /VRMWkE5p3CkWhJs6nv-9ZsLAs1QOg5ob1_3qg-rckwYW7yp1fMrYZqnEFpk0IoVP4LM=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:31 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 28068 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:41:01 GMT Expires: Fri, 25 Oct 2024 21:41:01 GMT Cache-Control: public, max-age=86400, no-transform Age: 4170 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:31 UTC	844	IN	Data Raw: 52 49 46 46 9c 6d 00 00 57 45 42 50 56 50 38 4c 90 6d 00 00 2f ff c0 3f 00 09 87 8d 24 45 8e 66 66 1f 58 ec fc 03 66 e1 08 21 a2 ff 13 10 01 48 89 97 d9 46 44 3c ca 1b 48 fa 96 17 0a 57 fb 2c 04 48 f8 3c a7 ef 19 b1 f0 06 e6 ee 55 19 01 40 0f 0c 66 ee 7e 23 a9 fa 06 66 a6 2e 62 89 57 05 08 06 92 5d e6 01 55 05 54 d5 9f a0 37 7e 58 d2 5a 8e de 60 d0 36 cb 13 00 96 d6 12 20 1d 0c 90 2f 72 ce 0b 60 d3 66 66 7c 43 4a 19 55 4d bd 61 66 44 15 49 79 87 9b 5f 93 51 f5 27 d9 65 de ac 2e b3 7e a7 75 87 53 90 54 b7 16 ef cc 22 22 25 12 0d d7 5c 1b b9 99 99 21 00 49 02 b0 71 fe 24 1d b0 ed 52 94 3b 49 ce c9 ab cb 08 bb 13 c9 ab e8 49 ce 0b d3 21 ce a6 1b 90 f6 c9 74 25 b3 d3 fe fb 01 80 e4 4e 76 fa d0 4a a3 99 8d f0 3d c7 18 ee ce 39 3f 44 44 64 e6 b0 ac d3 2e 5d 59 Data Ascii: RIFFmWEBPVP8Lm/?$EffXf!HFD<HW,H<U@f~#f.bW]UT7~XZ`6 /r`ff\|CJUMafDIy_Q'e.~uST""%\!Iq$R;II!t%NvJ=9?DDd.]Y
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 2b 40 5b d5 b6 7d 7a 4f 00 da f6 57 e7 bf 4b db fe 09 6d 57 e3 26 db ff 38 69 c2 3d a1 04 ff 4e 78 b0 81 00 1a 1b 3f 03 28 c0 c1 7d ad 7f 23 68 f8 1b a8 16 ae f5 af 00 19 ac 55 10 2b 55 c0 b5 46 04 06 aa 20 8e fe 62 d8 31 80 02 f4 a0 c0 40 da 36 d9 7e ff 96 67 20 6d 9b 6c fe 2d 7f 8f f0 93 ed 9f 25 db b5 6d b5 d6 db f0 27 7f ac 92 aa 1b ad 4f 0e 1f 81 01 61 ba 69 84 fb 47 30 d0 e8 12 04 8a c4 34 9b fb 43 d0 68 c8 9c 37 49 a3 1c b9 41 60 fa 57 b9 69 34 b7 68 4c 02 f7 9b fb 21 68 0c a6 db 11 a4 39 19 05 82 44 13 f3 e2 ca 41 db b6 6d 24 bb ef f6 ff 2d 9e ff 98 00 bd d1 b6 2d db b6 2d e7 ef ee ee 8e bb bb 66 50 82 43 aa 31 29 74 a0 11 b4 41 46 4a 01 ee 90 ba 3b bc 3c 9f 9c d7 f3 dd 37 1d ac 0d bc f3 a5 58 46 76 07 eb 0c f9 d6 00 f3 57 80 a5 7a 34 70 e4 c8 1b Data Ascii: +@[}zOWKmW&8i=Nx?(}#hU+UF b1@6~g ml-%m'OaiG04Ch7IA`Wi4hL!h9DAm$---fPC1)tAFJ;<7XFvWz4p
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 95 c5 79 bb ca 55 08 80 88 48 81 04 6e e1 f8 8e dd 2e de 39 a8 ca 6a 97 d2 73 15 c9 61 72 7e 29 a5 aa 0b 6e 53 e3 d9 83 be be 1b 95 6e cc 04 06 05 a1 52 49 75 d2 c2 82 a8 24 b6 e7 3d 26 d1 9e f3 eb 8c 63 d9 3c 4d 67 65 d5 c0 0e d7 87 0d 64 2c 0c ce 84 d9 13 f4 ec 65 85 36 f1 12 7d aa b3 66 9b 3f 0c 9a 30 7c 61 30 2f b8 8d db 6f ab 47 c7 0c d6 bc ca 51 d3 1f f2 56 08 f5 c6 3e 48 23 4d fc a4 90 ea 22 28 6e d8 c4 4a ea 3a 0e ce 26 c7 ee eb b6 4b 75 55 13 7e 36 a2 00 54 6a a9 ef 8c 0a 81 04 b9 51 9d fc d4 48 37 57 29 c3 5e 11 5e ee f5 8e 27 72 2b e7 b6 ea 22 78 8a d2 1d b6 a2 9b 1a 66 93 fb 4c a5 4a e5 0a 44 29 15 1f df ea 8a 7d 07 7b 9c e3 b1 c6 cb 51 e3 36 fa 5b 07 b1 f1 a4 1b 83 be 8d 31 5b 6f 1f 82 35 dc df 6b 0a 67 ab e6 01 36 b5 a9 41 10 20 82 73 bf 2e Data Ascii: yUHn.9jsar~)nSnRIu$=&c<Mged,e6}f?0\|a0/oGQV>H#M"(nJ:&KuU~6TjQH7W)^^'r+"xfLJD)}{Q6[1[o5kg6A s.
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: d7 bc 59 c7 dc 2b 89 b7 63 11 14 d4 20 11 55 12 0c fa fa 31 49 a5 3d 49 42 ea 33 4e b9 36 29 a7 57 32 d5 11 41 f7 fe a6 7c 67 51 32 ea b5 f8 49 69 ca 5a 66 ae e7 1c 71 2a 22 df 82 6b de 55 d7 bc 08 a3 33 f3 6a de e5 bd 44 06 0f 21 07 81 a0 0e 19 cc 12 01 78 19 7f 50 ec c2 8a ae 84 88 32 56 7a e9 56 1b 3b e0 94 f9 75 37 99 2a 17 e9 b5 a5 5f dd 4e 43 c5 af 21 f8 3c 2e 45 25 50 a0 52 b9 95 74 45 cd 0e 09 4d 02 f9 52 9b 0f 44 c9 11 dd 2b 19 4f c0 4d 0b 3d c7 b6 b4 6a 79 f0 41 8e f4 1b ae a5 12 42 42 08 49 59 8a 34 ce 3a dc c5 51 cc 18 2f 19 04 91 6e cf 86 a6 b4 5e 43 ca 08 09 95 40 32 91 47 6e 11 63 02 d8 c6 66 cc 29 35 b7 d8 4b ac c0 91 cc cc 8b 80 b2 ea 6d 42 39 26 6f 9f 65 b2 7c 0e 49 1a a2 44 29 0a 90 3a e9 72 2b 4f de 7b e3 ca 7c ce 2f 7f 85 f7 de 38 55 Data Ascii: Y+c U1I=IB3N6)W2A\|gQ2IiZfq"kU3jD!xP2VzV;u7_NC!<.E%PRtEMRD+OM=jyABBIY4:Q/n^C@2Gncf)5KmB9&oe\|ID):r+O{\|/8U
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: e6 71 3b 66 5d bf ae d2 74 47 d5 51 db b1 d4 a8 a2 a2 60 4c a2 31 b9 eb 88 37 5f f7 51 9a 75 07 55 77 c8 87 b0 a9 b7 95 4a ca a9 3a ba fb 07 64 bd f5 de 76 01 c2 42 3f f3 5d f2 f8 d6 e2 ba 31 dc 55 62 10 40 10 42 08 62 e4 1e 82 8b 40 12 39 10 2b 09 3c 48 1e 1e 77 8d d7 3b e8 56 5b b6 6e 85 51 35 df ef e7 b5 ee 85 75 1c f5 5a a9 af 5d 34 a4 89 64 41 08 6a 04 51 b2 a4 d4 fa fe b7 fb 30 5f be ef 4e 91 7c 48 52 6f f1 89 8a 7c 26 c9 5c 1f 14 b5 5a ed 32 d6 c8 b5 7e c2 f9 9c ba 25 21 49 86 80 01 63 0c 72 d9 a0 70 c9 09 20 90 5e c4 6b 2e 21 cf 2f 72 20 58 ca c5 3c 22 21 b9 07 d4 d4 ec d3 3e 35 d4 71 8c e5 71 bc 7b b2 5b 36 7f c8 69 55 ea b1 f6 69 14 13 4c 8b 2c 45 d1 18 5d 6a cd dc cf 49 af a9 23 ea a6 d5 9b 5d a1 f5 31 8d bb 12 94 18 52 04 65 b6 e6 28 d3 27 a0 Data Ascii: q;f]tGQ`L17_QuUwJ:dvB?]1Ub@Bb@9+<Hw;V[nQ5uZ]4dAjQ0_N\|HRo\|&\Z2~%!Icrp ^k.!/r X<"!>5qq{[6iUiL,E]jI#]1Re('
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 22 da aa 8c 1d 4f 53 5f e7 7e bc 2f 38 ff eb b5 5f 41 59 d8 22 41 56 5b 18 34 2e 00 b1 87 97 17 f2 60 ff ff 8e a9 a6 e4 6e ea 03 f4 19 d6 84 d2 93 2f 86 15 7e f1 1b e1 0e 04 69 cc fd 22 8b e3 c2 73 9c f7 49 38 49 c8 45 45 f0 8b aa fb d7 3f 1c bf f3 d7 3a aa aa d8 f1 b4 82 0a 21 2d a2 21 04 63 e2 82 f7 de 17 e4 13 07 fe 0b 2b 2e 97 cd 40 f4 39 3e 92 44 3a d8 27 6f a1 d1 cc 98 3c 82 e0 17 09 f1 1a 72 2e e4 bc b5 a9 36 4c 2f 98 d4 fc 8d ae 9b db e1 fe 76 17 41 44 b1 2d 24 6a 50 96 7a 0f 78 d9 fc d5 06 22 52 13 75 03 fa 2c 6b 27 6f 80 9a 5a 60 21 10 21 e4 17 29 2e 27 97 4b 44 02 e7 ed e9 6e 43 ff de da fb 9c 7b 39 8f fc 9a 23 0d 41 b1 69 40 5c 62 5a 58 2e 9e 79 b9 d9 f2 7b 26 1a cf 1d 3c fa 34 73 e1 13 75 6c 73 1d 12 b5 11 8c e4 88 44 12 04 91 10 22 97 13 52 Data Ascii: "OS_~/8_AY"AV[4.`n/~i"sI8IEE?:!-!c+.@9>D:'o<r.6L/vAD-$jPzx"Ru,k'oZ`!!).'KDnC{9#Ai@\bZX.y{&<4sulsD"R
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 58 24 f4 db bf be 38 8c 20 d9 e1 1e 39 f7 bc 04 76 aa 88 51 5d 2b cb c4 65 a0 19 40 14 6c 00 67 f1 c8 f1 8b fe 5f b5 0b 44 b8 89 3d 7f fc f1 5f 73 1d 4c a7 07 61 30 6e 0c 03 20 82 6a 68 fb 44 ce 9b 04 09 f2 92 7b 5c 20 09 ce fb 93 e3 e4 e4 1e 17 97 9c 20 ec c0 cd eb 25 56 f4 cd 51 04 c8 b0 4b 26 f7 40 a0 21 24 f7 e4 b9 c8 23 14 15 9a 2a ba 16 59 da 16 66 69 42 b3 a5 21 88 50 42 0f 62 4f c9 33 23 ca d8 65 bc ce a5 8c 0e 2a 2d 8e 7f 4f 39 72 51 50 40 b1 8a 48 e2 cd 27 77 41 9c e3 20 e1 0e 27 77 e4 5c 4e 70 b9 38 81 40 04 60 4a f0 6b 31 23 40 6a 6c ef a1 cd 3f 44 84 78 8e 24 77 02 1b a8 55 70 f1 0f 49 e2 ca 4a a2 8b d0 d2 b0 7d aa 09 3c 67 e9 78 f5 ca ef ac 26 88 82 fa 73 52 f7 fe 96 be e1 97 b3 f1 32 da 5a a4 a8 32 2d d1 84 13 11 91 87 c8 09 c9 9b cb 25 81 Data Ascii: X$8 9vQ]+e@lg_D=_sLa0n jhD{\ %VQK&@!$#YfiB!PBbO3#e-O9rQP@H'wA 'w\Np8@`Jk1#@jl?Dx$wUpIJ}<gx&sR2Z2-%
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 04 90 82 4d 3b 8c f7 2f a3 5a 64 da 08 d1 31 63 c2 13 44 c4 fd e3 fe 01 35 28 f0 14 2a 80 aa 2a 95 a9 f2 a3 14 69 7d 85 42 bc f5 55 3b 68 6b 47 67 0f 93 69 9e fd 95 57 f2 25 a0 81 02 93 68 6d 9a 85 54 a0 6b 46 a9 15 17 af 8a 04 30 31 10 4c 4c 30 aa 7b 83 5c ee 5c f6 dd 67 76 d3 fb 40 bf c4 4a c3 c5 42 52 bc 25 ce 92 c3 da 31 0d e2 9d 99 ab 10 e1 e1 65 1f 82 3c a2 20 f2 54 01 54 55 51 45 e0 0b 77 35 f5 3e 7c 3e f1 ef 83 4d ad 90 8d 4a 56 3e c0 0b b9 d2 c2 f8 f4 ea 0f a8 94 0a ee 37 16 a9 22 60 96 a2 b6 80 44 3c 09 c5 a8 d9 41 80 18 30 ac 18 12 09 39 84 67 27 74 4d 2f 7d 5c 04 68 3e e3 87 9b 87 23 f7 84 87 3d d6 ee d6 d7 64 a4 f2 eb 3b 9d e1 a4 27 92 50 11 24 0f 88 52 ac 42 85 4a 08 30 7d 44 9f 95 40 e5 f3 8f a0 47 be 93 6c 9f e0 c1 10 d5 ff 9c 78 6c 40 0c Data Ascii: M;/Zd1cD5(**i}BU;hkGgiW%hmTkF01LL0{\\gv@JBR%1e< TTUQEw5>\|>MJV>7"`D<A09g'tM/}\h>#=d;'P$RBJ0}D@Glxl@
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 68 d6 50 ba d3 9c 69 07 7f 1c de 0b 56 14 14 91 18 0e 1d b7 2d 2b 14 09 d6 d0 7d 31 e7 e0 92 08 a1 19 fb cf 9f 96 68 e2 2d d9 6e 24 c4 13 48 5c 3c 87 ec c5 b2 6c f9 5d 06 a9 37 6e 1f 4c f1 ab 0f f9 d5 fc dd c4 69 b1 6a 8e a0 75 18 69 74 0a ad f1 62 a9 68 45 b5 5a a4 0a 02 c0 93 ae 9d 1f 71 3f 67 a2 3b 1a ca 9b b0 d0 4d 32 27 cd 7c e9 7b fa f8 6b a2 96 08 a0 55 44 e5 d3 a1 6b 8b 71 07 6a 05 0d 0e 12 23 19 e6 16 29 d2 60 72 de fa 8b ff 39 09 27 11 f2 88 60 74 f7 da 96 5f d9 f2 eb 64 2b ea a3 eb ed 0f fd be a4 79 42 d2 2d 10 ce 40 73 29 35 2d 0a ac b2 c0 85 a8 52 56 a1 20 e8 b0 68 ff 73 9f 27 af ea a5 6c f9 22 58 68 d7 d0 a7 9f fc 11 6f 75 e3 5f 2a 2a 97 09 2e 3a 73 86 b4 6a 82 6b 75 dd c2 85 62 ea 00 d0 45 78 2e 24 18 e6 8d 48 54 e3 c9 81 27 88 37 f1 40 42 Data Ascii: hPiV-+}1h-n$H\<l]7nLijuitbhEZq?g;M2'\|{kUDkqj#)`r9'`t_d+yB-@s)5-RV hs'l"Xhou_**.:sjkubEx.$HT'7@B
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: ef 12 3d 00 0c 30 98 29 00 14 c0 0e 4e 4c de 7e 4b 7c 8f bb 37 f9 ad 24 1a d4 8c ae 54 dc c2 8c ce 91 f7 78 7d 72 24 e1 e4 42 34 fd 52 ee 7c 86 ef 25 f1 e4 ee de 24 3c b9 48 1e 59 18 45 8d 59 86 4a 53 1b 0b 12 6a 07 15 ae 42 ad 8e 06 aa bc 7c cf ad 0d b2 22 cd 22 0d 4d 46 b8 45 f7 38 7d 69 10 6d a6 b9 66 56 7b 7d 0e ef 47 2c 1b e8 e8 c0 60 06 18 cc 60 02 82 03 f3 2e 88 bd 3b 11 0b 66 95 69 1b 14 09 fa ee 7d 9e b5 24 69 06 88 87 47 12 24 11 91 a0 b5 77 aa 87 93 78 10 6f 9f 27 11 af 27 44 a4 8a d0 a9 36 4d 15 6d a8 94 12 32 c3 20 8d 6f 35 a3 0b ac b9 9c 37 9a 8a d8 58 11 67 8e 79 88 3d f5 9f 5f 8e 48 13 99 38 dd c5 7e 20 96 0e 05 f2 80 23 66 30 18 60 30 02 31 81 26 ba 7c cb 8b 9f e6 2a 71 31 12 ec ee 45 7f 67 34 1a 4f 2e 22 89 88 c7 5b 2b 7c e9 9d 00 8e 88 Data Ascii: =0)NL~K\|7$Tx}r$B4R\|%$<HYEYJSjB\|""MFE8}imfV{}G,``.;fi}$iG$wxo''D6Mm2 o57Xgy=_H8~ #f0`01&\|*q1Eg4O."[+\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49856	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:31 UTC	537	OUT	GET /mw_NfsvKM8m6RPv8Fz2GQawCOsqWv010saMnc7zbWalMxuaA9IY8h7E0VMieLxSxAFB98NFeYqbFrXXq=s16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:31 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 148 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:21:59 GMT Expires: Fri, 25 Oct 2024 20:21:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 8912 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:31 UTC	148	IN	Data Raw: 52 49 46 46 8c 00 00 00 57 45 42 50 56 50 38 4c 7f 00 00 00 2f 0f c0 03 10 85 d3 6a db 96 e5 dd e9 9f 00 5d 40 47 80 c4 04 16 35 31 81 bb 43 a2 ba 47 92 33 82 bb 3c e1 fd fe 77 86 88 23 ff 4f 00 a0 f0 b0 d3 7b 15 50 bd d9 ec 49 29 a5 89 88 88 9b 8d ee 54 1f 2f 5d a9 d8 f6 11 a9 b0 7d 1d 11 31 5e f0 8e 7c d1 b6 7e 13 7d d9 a4 42 d9 cd 42 25 c7 8c 4a 50 cb f6 25 d9 ac 5c b2 ce ac 25 c8 e8 b5 24 98 0d 4b fa 59 2c 22 e8 5c 1a 16 2f 3f 23 02 00 Data Ascii: RIFFWEBPVP8L/j]@G51CG3<w#O{PI)T/]}1^\|~}BB%JP%\%$KY,"\/?#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49859	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:31 UTC	1093	OUT	GET /trfOy_Wg9gQTwGcoYJNushqXIV3xFhWBReAVWM5IPqspN5N811YhTKQCG48anNS13HE=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:31 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1042 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:58:53 GMT Expires: Fri, 25 Oct 2024 21:58:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 3098 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:31 UTC	845	IN	Data Raw: 52 49 46 46 0a 04 00 00 57 45 42 50 56 50 38 4c fe 03 00 00 2f ff c0 3f 00 ef e5 2a 92 6c 57 99 99 43 8e fe 7d a0 00 5b e9 7e 81 86 f9 77 db 36 92 24 49 d5 bd 9f b7 de e5 9f c0 f9 97 d9 79 35 ff 49 06 c1 06 06 02 21 08 84 40 08 84 3f 03 c2 0f a4 12 96 40 28 20 69 fc 6d e0 00 c2 00 a4 d2 65 ef 23 97 8c ac 71 58 1e 47 03 5a 14 49 8a e0 45 1f 38 59 79 44 77 2f 2d 29 ca 5a 46 24 28 a4 31 36 86 c6 de 4d 40 61 08 28 44 a0 c8 50 49 88 05 63 6c 84 00 21 20 48 18 6b 6f 2d 2b 10 a0 8d cb d6 69 67 e8 24 40 03 29 69 19 90 00 05 a8 a5 12 12 42 a5 90 04 14 42 90 14 02 4a 21 45 1a 02 4a 82 84 2c 45 24 60 08 d2 c6 82 04 14 22 12 14 02 42 25 41 90 0a 11 49 1a 82 24 49 09 09 4a 44 90 00 41 11 04 3d fd 3c 7c 81 da 6d 6b 6b 24 e5 8e fb b4 6b 52 ad 6f d5 1d 77 f7 c1 83 3b 0c Data Ascii: RIFFWEBPVP8L/?*lWC}[~w6$Iy5I!@?@( ime#qXGZIE8YyDw/-)ZF$(16M@a(DPIcl! Hko-+ig$@)iBBJ!EJ,E$`"B%AI$IJDA=<\|mkk$kRow;
2024-10-24 22:50:31 UTC	197	IN	Data Raw: 10 a8 83 63 f9 79 41 09 55 c4 b9 41 af 0e 68 10 e7 e4 55 50 09 34 88 f3 81 5e 35 d0 20 ce c3 13 a0 1e 68 10 bb f7 15 a8 09 1a c4 ce 85 a1 2e 68 10 3b 76 e3 38 2a 83 06 b1 53 0f 81 ea a0 41 ec d0 06 50 21 34 88 9d b9 0d 54 09 0d 62 37 fe 5e 07 2a 85 06 b1 0b 27 d0 42 b5 d0 20 ce ec d7 7f 31 48 c5 d0 20 ce e6 9b 3b d1 4c 17 25 47 83 7f d2 fb 6b f7 42 4c a4 9b a2 63 15 cb 0e 7e fb 9f 7e f8 fe ed 2d 4f cd 02 ba e8 aa ec c8 0e a4 3b 26 a0 c3 d2 f3 61 e9 bf d2 7f c3 7b d8 26 85 d7 8a eb 80 14 76 16 d7 55 18 09 18 5c 28 2e fb 16 c2 e2 eb c2 46 5b e4 c7 2b 28 fc 79 9f d9 d2 ff a5 ff 87 7d 08 Data Ascii: cyAUAhUP4^5 h.h;v8SAP!4Tb7^'B 1H ;L%GkBLc~~-O;&a{&vU\(.F[+(y}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49860	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:31 UTC	1093	OUT	GET /F4U2pL8z-Ic5FzCfe1xVXMWRvff6oEBIzDsyGRc4mE3bIUPiCfhuXXXvTOfcpVglKqs=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:31 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3226 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:32 GMT Expires: Fri, 25 Oct 2024 19:12:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13079 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:31 UTC	844	IN	Data Raw: 52 49 46 46 92 0c 00 00 57 45 42 50 56 50 38 4c 86 0c 00 00 2f ff c0 3f 10 2a 2b d6 f6 af 92 ed ec 1b 66 38 7c ba f7 ff 5f 1d 66 e6 c4 e5 c6 31 33 33 33 33 33 33 33 33 33 33 33 33 33 33 53 1f a8 fd ab bd f7 2f ee fe 43 be 6d 98 c1 25 23 88 42 c7 d8 ea ae 92 a7 5c 62 2b e4 2e f4 8a c4 33 88 96 e1 64 08 99 43 85 1c 0d 22 43 88 cd 10 78 2c b9 32 2c ef 1c c2 9c 68 9a 42 3c 1e 50 e1 8c 80 61 00 ed ae ba 2e f6 a8 72 61 2c 15 98 c1 95 a5 6e 26 10 95 15 77 5c 56 06 70 d7 51 71 25 3b bc 57 85 3c 83 bc 32 f2 ae 75 48 46 b2 42 c7 49 ad 76 55 b2 e4 71 57 06 d5 99 c0 5d 51 54 01 d7 eb 4c 21 cc d9 e1 7d e1 2f 43 43 b8 b5 2a 23 38 2e 92 13 c5 fa 82 db f2 d7 eb 62 1b 09 92 64 9b b6 35 b4 37 06 7c 9b 5b ab 6b 9f 73 be 6d db b6 6d db b6 6d db 86 04 47 92 14 49 fa ff cb f6 Data Ascii: RIFFWEBPVP8L/?+f8\|_f133333333333333S/Cm%#B\b+.3dC"Cx,2,hB<Pa.ra,n&w\VpQq%;W<2uHFBIvUqW]QTL!}/CC#8.bd57\|[ksmmmGI
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 39 b5 88 93 61 8e d8 cb e2 36 4e 49 8d a7 3f b5 ab 66 14 83 a0 8a da c9 59 1a 8d c1 43 c7 38 a2 eb ba b8 a3 d5 aa 0f 2e 29 1d 23 a3 70 39 1c 6d 24 66 b4 8a 93 81 ac fd fc 96 56 2b df bf 60 18 54 91 17 63 f6 46 e1 70 c5 c2 98 cb c4 b6 46 50 15 f3 c6 08 63 64 37 42 af 7e a4 71 34 a9 61 4e 00 67 0e 13 af 1a c2 e4 7e e5 84 33 8a e7 99 8a 34 68 60 0b 6b 7e 26 ad 6f 90 a7 6a 10 d6 92 1c be 36 80 89 ee e5 68 a3 78 5e ce 8b 16 e2 b0 d3 c5 5b 82 93 16 14 62 e2 57 12 6f d5 1c 5f 16 42 0c 12 27 bc 51 4a 08 c1 d0 68 1b 75 aa 54 5b 08 26 6f 73 31 97 60 78 ae 10 5c be e7 60 ce 65 b0 5f 88 14 61 ce 61 f2 2b 51 b7 4b 48 8c a0 8e 62 22 5f b4 2c c7 dd 00 cc fd c9 e4 30 de c6 5d b9 4a 68 f2 46 3f ee 6c 26 46 30 d2 1a 17 77 09 9e 3d 9f c3 61 4b 4f da 8e c8 4b 14 a0 d2 ac 63 Data Ascii: 9a6NI?fYC8.)#p9m$fV+`TcFpFPcd7B~q4aNg~34h`k~&oj6hx^[bWo_B'QJhuT[&os1`x\`e_aa+QKHb"_,0]JhF?l&F0w=aKOKc
2024-10-24 22:50:31 UTC	1004	IN	Data Raw: 7d 52 02 ee 92 25 7c e4 b2 ef 03 74 b4 62 42 48 b3 c3 4b b8 3b 78 7d a3 34 f8 af ac c4 a7 95 76 51 a8 d2 8c 94 f4 27 01 6f ef d5 cd 66 ef 9f 6d fe e1 99 6f 6f ee c1 d9 ca 0e 2e f5 35 12 1f 99 8f 91 79 e9 5e 1a eb 2c 66 f6 84 cc c6 95 c6 d4 25 91 46 3b e5 31 b5 5a 49 cc 45 f0 52 e5 86 d3 ae d4 5c 94 ac e5 ec 96 34 de b1 f7 c8 55 9a 89 2b 4d a8 6f 41 1a f0 39 8b cc 84 e2 a2 15 ed 5d 30 a2 2b 9b 8a e8 b9 d0 37 44 77 fe 3b a0 dc 94 c6 b6 cc c5 5a cf 7c 33 a2 c9 8f 69 d4 49 62 26 46 ea 65 61 ab c7 8c 48 89 92 33 13 b9 17 1b d0 d1 b3 64 26 e8 de 4d 0c a7 cd ff 73 3a c1 c5 e1 5f eb 04 85 a6 33 b1 f5 00 63 f9 dc 88 0d ad 48 1f d3 4c ec 65 f2 01 4b 27 e8 5d a5 d3 9e dc 35 ff e5 23 f3 5d 36 04 72 6e 8b 06 b6 f0 e0 44 ab 0d 5f dd 99 fb a2 81 16 00 17 b8 72 64 2c dd Data Ascii: }R%\|tbBHK;x}4vQ'ofmoo.5y^,f%F;1ZIER\4U+MoA9]0+7Dw;Z\|3iIb&FeaH3d&Ms:_3cHLeK']5#]6rnD_rd,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49861	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:31 UTC	1093	OUT	GET /kMofEFLjobZy_bCuaiDogzBcUT-dz3BBbOrIEjJ-hqOabjK8ieuevGe6wlTD15QzOqw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:31 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2192 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:50:09 GMT Expires: Fri, 25 Oct 2024 20:50:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 7222 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:31 UTC	845	IN	Data Raw: 52 49 46 46 88 08 00 00 57 45 42 50 56 50 38 4c 7b 08 00 00 2f ff c0 3f 10 e6 50 db b6 0d 23 fd 7f 79 7a c6 88 98 00 ca 1b 4d 4e 53 12 36 20 95 dd 36 61 cf 4e fb 6e 22 d9 96 15 9b 90 73 e7 2f fe 1d bc bf 65 a7 8a e8 44 44 e4 88 b8 72 f0 af e7 6b 40 0f 1a 70 b2 f9 c0 0c 1a be 80 a7 85 14 6d 1b a9 4d a6 7a c0 d0 86 31 24 49 82 fc 1d 8e e3 9e bb 53 39 67 71 32 8e 6b db 56 1a 64 aa 8f 5e dc 0a 73 d7 21 6f 8c 97 00 91 56 bc 0e 4f 26 80 8e b3 fd 8b 24 e7 72 cc cc 0c 66 66 66 66 66 66 66 66 86 65 66 66 66 66 de ad fa 75 cf ff 17 2e c6 86 56 9f 61 e9 9f 4d 66 86 2b ac f6 06 96 4a 9a 2b 58 4b 7d 83 91 19 f2 91 fa 0c 65 e6 71 36 a9 3b 72 54 91 4f b0 14 b5 9c 8f fa 0c cb 7b 83 49 2d 1f a0 43 63 b6 2a a7 8e d9 8e d8 95 ed 0d da d1 e4 66 fb 9f 9b 46 9d 99 1d b5 37 72 Data Ascii: RIFFWEBPVP8L{/?P#yzMNS6 6aNn"s/eDDrk@pmMz1$IS9gq2kVd^s!oVO&$rffffffffeffffu.VaMf+J+XK}eq6;rTO{I-Cc*fF7r
2024-10-24 22:50:31 UTC	1347	IN	Data Raw: 52 ff 0d 85 74 39 11 40 b6 0c f6 e3 a0 58 a1 91 e0 a3 ae 1e 60 94 ae fa 1b 29 5e c7 d7 1a ca 21 74 dc 9f a2 60 f3 09 32 c4 a8 71 b0 f6 bb 13 80 2d 03 02 1b c5 ac b8 14 1a 7f 47 5f 39 ca 14 b7 d9 eb db 39 5d 4e 05 4f 27 dd bd 18 29 76 b3 17 44 6e bb 3d f2 72 50 fe d6 92 fa 2a fe e0 52 55 7f ee da ef 8c eb db 3b a3 a8 c2 86 dc 5d 62 16 ed 76 46 8e 2e fc fc 0c 04 c7 41 28 92 6d 69 c7 dc 3e b6 5c e9 39 28 5e c9 17 46 91 0d 14 cd 26 21 6b 4b cf e0 f9 56 ab 43 6f 55 ed cc 4f 7e 71 0a 00 cb 2a c5 b5 a8 f3 02 2c 80 b2 5b fc f2 d4 37 a7 02 65 cf 22 15 9f ab 0b 95 bd f3 95 3f 0e 29 dd ae 67 ec f9 82 86 e6 19 28 c2 ef 8e 85 e4 49 a3 74 a3 a4 ec 29 26 da 97 cc f3 89 b1 29 36 41 1a a5 93 65 59 37 4a 8a 86 e8 55 54 fd 6b 93 6e 1a 1f 06 59 4b c7 d9 35 66 71 c2 e3 e3 85 Data Ascii: Rt9@X`)^!t`2q-G_99]NO')vDn=rPRU;]bvF.A(mi>\9(^F&!kKVCoUO~q,[7e"?)g(It)&)6AeY7JUTknYK5fq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49863	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:31 UTC	1094	OUT	GET /ebs6ftYUkOKlDY0M174OpvargwbDyHUVAnO_G5aE0dL5GBQKCtfh3adN5H3ZMThXogDi=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:31 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 52048 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:57:58 GMT Expires: Fri, 25 Oct 2024 20:57:58 GMT Cache-Control: public, max-age=86400, no-transform Age: 6753 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:31 UTC	844	IN	Data Raw: 52 49 46 46 48 cb 00 00 57 45 42 50 56 50 38 4c 3c cb 00 00 2f ff c0 3f 00 4d 48 8c 24 29 0c a3 ba 5d 40 dc c8 f9 27 cc 01 b2 ff 03 88 e8 ff 04 f0 f5 04 7a 87 7e 91 07 ff ed 78 23 9e ef e2 f0 ae 03 f6 66 46 44 9b 17 13 6c 3b 22 60 44 b4 f5 0c bc b2 1d 4b 9e 79 e5 b4 b5 d6 ae 12 88 b5 03 b4 d6 26 d0 2b 49 09 bc 45 34 60 48 8d 3a 73 79 00 c5 4f 91 80 a4 ac 60 5a a2 10 0c 15 53 a1 25 01 59 59 bd 11 61 2d 63 f3 2c da 95 ee 30 78 ab f5 e4 8d 88 d6 e6 9c 9c 3d 1a 1b c1 90 04 17 53 d2 26 62 ba 78 1c f9 45 e9 07 90 74 80 d4 e6 11 80 25 ea 84 21 09 18 45 07 b0 95 1b 60 ba 38 b5 ed a3 71 65 db 1c 4b ef 1b eb 12 61 db 79 23 15 5b 1b 20 67 31 40 b1 d5 86 db 08 ca 11 6b a7 cc 93 49 3d 07 db e4 cf 8e 3c c8 6f ce fb 27 0b 59 ae 24 29 92 f4 66 99 99 f9 6b be f6 fe e7 89 Data Ascii: RIFFHWEBPVP8L</?MH$)]@'z~x#fFDl;"`DKy&+IE4`H:syO`ZS%YYa-c,0x=S&bxEt%!E`8qeKay#[ g1@kI=<o'Y$)fk
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 8c b5 75 ad 7c f6 ac 5c 8d 2f 45 b3 08 f0 d3 73 d1 e6 4e 33 d4 f2 99 0f db f7 e5 93 79 4f 07 00 8d ea fa 85 e7 bf 48 7e f2 2c 8d 52 2a 31 a1 49 2b d1 e0 95 b3 ed ce 0b ef f4 7e 17 89 44 4f ec ea 52 a5 4b 03 10 28 28 14 89 b9 eb ca 71 bb f3 cd d7 e3 30 26 35 29 b6 ee ed bc b1 8f 97 96 0b 7f cb f7 1e a9 de 74 5d ba 74 a5 52 04 20 a0 50 7c 85 46 91 08 cc 5d 93 ae ef a8 c7 0a 4d 20 f0 11 1f ed 84 fb a1 4d 5a 6a a1 e9 d6 74 55 2a 4d 54 12 81 84 42 a1 49 28 02 81 40 a8 33 53 05 16 1b 02 81 d0 42 4b 6d 31 55 88 4e 4a 60 50 a1 51 94 03 0e a7 08 28 42 3b 33 54 aa 90 e1 18 d1 04 02 c3 dc 40 34 bd b4 38 30 58 19 a7 16 42 ce 38 b3 1e 34 c0 70 db b6 91 20 49 9a fe ab de d9 fd 8b 3e 8e 88 09 70 45 50 c5 2b 8a 3b 5e c1 af b9 a1 b2 20 2f 3b 2e 27 78 e5 82 67 41 e1 23 de Data Ascii: u\|\/EsN3yOH~,R1I+~DORK((q0&5)t]tR P\|F]M MZjtUMTBI(@3SBKm1UNJ`PQ(B;3T@480XB84p I>pEP+;^ /;.'xgA#
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 18 1b a2 15 17 5a 2a 62 d2 f8 62 e4 8b ed b2 bc 7c 25 2f 89 70 aa f8 ab 89 18 63 d2 42 45 34 48 46 98 24 06 81 e1 58 e5 0e 58 4b 5c 3d 7d b5 39 2a 5b e3 1c d7 dc a4 9a e3 ab 57 04 ca 9b c9 39 a0 89 68 aa 91 93 82 c4 a1 a4 96 c0 8a 94 e3 05 ad 80 b2 4e 84 f2 b8 2a 2a 1a 6b b1 5e 0e 42 4d 2b 62 48 8f 58 44 49 28 25 4b bc 54 c8 48 1a d1 ba 60 27 63 1d 16 80 ad 50 d4 c7 6a b9 4c 0c 1d a0 e9 6a 15 47 45 62 32 c8 d8 7d 75 9c 92 1a 42 69 77 45 5a 4c 31 2e 1a 69 69 14 70 2c 24 31 5e 22 c1 ae 55 32 d3 82 0e 85 11 20 a4 d6 cb 89 22 07 09 00 f3 4a a0 98 0f 6b 6d 52 97 25 01 85 a2 80 39 51 62 43 03 d4 d3 84 3a 95 84 a9 16 b3 58 04 5a a3 da 46 52 a0 65 82 2f 60 8a c5 18 53 a9 51 06 cc 72 c7 dd bd a2 88 88 a9 80 82 e4 08 2a cf f8 d3 13 89 25 82 64 36 94 04 a4 e8 32 3d Data Ascii: Zbb\|%/pcBE4HF$XXK\=}9[W9hN*k^BM+bHXDI(%KTH`'cPjLjGEb2}uBiwEZL1.iip,$1^"U2 "JkmR%9QbC:XZFRe/`SQr%d62=
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 15 7c 22 09 6d 05 0a 6e af 5d 16 10 2e 65 5d 56 35 ab e9 a5 e8 22 a8 92 d4 28 e2 93 92 84 59 22 a4 16 b0 a6 56 57 48 5d 4c cd 50 31 15 50 ab 53 24 ac 42 09 43 05 2c ca eb f2 5a 1a 9f 14 ea a6 bc 58 97 37 60 e0 b4 ba a2 94 f9 24 14 66 05 ba d8 ec 5e 8a d4 4e 49 d2 49 a9 05 bb b5 c4 cc 85 88 ed 52 65 93 7c f5 93 14 b5 d4 74 e5 35 b4 a4 24 c8 b6 14 4a a8 95 e7 f4 24 5f e0 35 52 7b 25 3b 17 b0 04 11 94 0e aa f3 69 05 05 c1 f2 6f 01 60 80 ae b4 d3 2b ea 09 75 2c cc 58 12 a9 14 a9 a3 0b 91 5f ce aa cb 49 4d c7 15 cd 54 ab ca eb 92 b2 a1 e4 ab a5 42 02 53 2a 14 54 d3 c5 c8 65 a2 e2 93 59 55 af 68 38 14 85 32 d4 a3 46 69 4b 1a 16 d5 22 6d 4e 69 64 53 12 20 0a 88 a4 63 8a ac 59 13 41 e6 48 0b 9c 29 4a 75 59 0f db b4 b6 5a 86 8b a2 5b 64 97 7c dd 12 18 85 59 42 a9 Data Ascii: \|"mn].e]V5"(Y"VWH]LP1PS$BC,ZX7`$f^NIIRe\|t5$J$_5R{%;io`+u,X_IMTBS*TeYUh82FiK"mNidS cYAH)JuYZ[d\|YB
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 57 98 ec e9 75 ec 20 4d 7a ca d5 d4 22 79 19 43 2d 57 1d 99 c8 72 12 89 2f 14 0a e4 75 31 24 b1 52 0d ea 14 52 d2 e3 44 95 82 4e d1 52 8f ea 09 75 be 50 13 b5 54 6a 4a 97 e9 40 52 29 f2 95 32 5f 56 93 e4 f4 52 12 c9 08 ea 89 be 95 2a ab 47 ca 91 ba 29 d2 44 c4 a8 14 9a 48 7a 7d 6a a5 2a b1 46 e5 f9 e3 15 f5 72 14 d7 ab b8 0a 32 8c 42 88 90 8a 22 e3 f2 02 ff ea a7 2f d4 b1 20 09 58 ca 41 91 a4 35 94 57 a2 be a0 04 a4 4c 67 0b 7a 62 bd 9c 40 52 6e 88 c9 34 e4 4f 72 4a 5d 97 54 c4 52 89 70 11 84 7e 21 80 56 64 94 0a bd 1c 2b cc e2 40 3a cc f8 64 13 6a 5a 28 03 42 29 45 2c e0 d5 28 95 ca 21 8d 04 d1 84 32 7b 04 b1 4e 08 2b cb 62 c3 25 64 60 a9 d4 6b 65 7a 90 13 86 5c 5a f0 e2 94 61 2a 16 f3 d5 b2 3a 56 b6 b2 94 03 69 c6 45 56 34 e7 a4 32 08 28 96 15 7f a2 08 Data Ascii: Wu Mz"yC-Wr/u1$RRDNRuPTjJ@R)2_VRG)DHz}jFr2B"/ XA5WLgzb@Rn4OrJ]TRp~!Vd+@:djZ(B)E,(!2{N+b%d`kez\Za*:ViEV42(
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: a1 15 49 af ae 28 45 29 2b 7b d8 d0 6a 4d 27 5a 53 4d a5 d0 90 85 4d 4a 6a da 90 fa c5 92 82 60 3c 66 14 c1 52 85 3a 6f a9 94 15 f8 2a ca e1 dc 65 b0 06 d9 86 45 79 2d 5f 28 b1 a9 97 29 87 92 f5 69 79 85 74 33 6a 03 85 38 cb 89 b0 94 ac 2e 84 54 6a 2a 97 8c 7a ad 54 e9 b7 aa b5 44 d0 32 5d 29 52 46 63 06 d4 d9 26 2f 0b 07 51 1d 28 16 a4 88 95 55 86 0b 3d 25 43 91 2a 4e 56 8a 23 85 75 38 68 c9 60 44 c2 2c 6c 42 92 a0 27 52 a1 46 87 a9 c3 0c 11 73 a2 a6 56 eb 38 d2 d3 a8 94 91 2f 64 b2 0e 52 db 0a b4 14 e6 a5 8c f2 d6 15 45 fb 69 a8 70 2d 15 32 2f 87 c9 2a 42 2a 39 a2 5a a8 05 0c 92 93 64 2f 27 32 e9 12 45 69 66 da 6a 44 35 a9 22 55 1b 6a 2a 1f d4 6a 8e 24 e8 b0 68 03 51 ec cc ca 90 67 6a 2d fd 2a 59 d4 e5 0d 92 ab 95 75 5a 2a f2 27 42 b0 63 a9 48 1c 85 a2 Data Ascii: I(E)+{jM'ZSMMJj`<fR:oeEy-_()iyt3j8.TjzTD2])RFc&/Q(U=%CNV#u8h`D,lB'RFsV8/dREip-2/B9Zd/'2EifjD5"Ujj$hQgj-YuZ'BcH
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 56 8c 2f 80 54 7c 09 72 c7 41 84 63 81 5a 2a 82 5e cc 69 41 81 30 f4 20 47 a1 30 dd ee 94 4a 11 05 c4 a2 82 8a 17 60 85 5c 46 51 49 48 ed f1 a7 17 59 09 85 50 37 2a b3 5b 4c 58 d0 7c b5 5c 94 15 21 c4 0c 0b 21 2a 05 56 f5 40 90 06 06 a6 34 44 ee 8c 1a 25 7f 11 13 65 dc 79 31 56 a6 c8 8e ad 8a 31 a2 0c 00 80 c3 d0 30 11 48 00 28 0c 26 84 20 3c 59 88 04 e2 30 a2 20 b5 09 cb 28 39 0c 4c 13 b7 48 9a 28 0c 22 4e 84 03 f4 11 9f 48 01 19 10 84 6c 1d bb c2 e4 0a f3 e5 28 57 33 c5 52 f0 07 7c c1 75 59 d4 32 8a 79 80 f9 78 54 e5 8b e1 5a c9 31 80 2c 50 fd a6 70 5e a3 80 5c aa 00 45 90 21 50 c6 74 61 2d 57 8f 85 18 28 42 0e 34 d9 28 a2 c4 a4 b4 dc 8c bb a0 c0 72 20 96 a5 7e 15 4b 01 73 87 16 99 01 92 46 b4 4d 31 11 40 aa 6e 1c 50 66 b1 96 b9 e6 d2 e3 52 cc 2c 30 44 Data Ascii: V/T\|rAcZ^iA0 G0J`\FQIHYP7[LX\|\!!*V@4D%ey1V10H(& <Y0 (9LH("NHl(W3R\|uY2yxTZ1,Pp^\E!Pta-W(B4(r ~KsFM1@nPfR,0D
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 26 5b 00 d3 8f ad f5 71 7e 3d 5c 7a 31 a3 db 4e ad fa af 26 4b 23 44 28 62 92 ce c6 87 0c 20 10 a2 0e b4 86 8c 15 28 56 27 70 5d 90 80 4b fd f4 09 81 a5 bd 7a 29 d5 d6 71 95 54 a0 18 51 11 c0 8e 69 54 94 a4 57 91 d6 d0 cb 15 31 77 ca 8a 24 6f 9b bb 86 35 e0 c9 8b d8 a8 6c 41 2d a7 22 a2 5a 5d d1 2c 63 2c 4c 3e be 58 ea 72 99 92 11 ea 40 56 16 cb d4 f5 74 52 52 5c d9 d5 6a 39 79 d4 f2 31 20 2d 70 1c d6 05 80 3a a5 82 98 6a 81 15 08 aa 50 8d 65 c9 a8 08 35 a6 5b c9 32 1f 5f 62 ea 4a 82 a4 10 d7 a4 ad 2b c3 b6 d2 d0 02 26 89 29 ff 37 9a 79 ef 76 c6 5a be f0 fa f9 5b fe c2 cb 1b fe da ab 77 fe b5 e7 9f fc 8f c0 83 9f 7c e6 7f 2c 77 bf 76 f6 ab ef 3c 3b f2 ed 27 cf 3c 6c db f6 cd 37 e3 4d ab fd 5f 67 57 db 28 ad 0e 08 21 a7 65 e1 da 05 04 c8 27 ca 5c a8 77 25 Data Ascii: &[q~=\z1N&K#D(b (V'p]Kz)qTQiTW1w$o5lA-"Z],c,L>Xr@VtRR\j9y1 -p:jPe5[2_bJ+&)7yvZ[w\|,wv<;'<l7M_gW(!e'\w%
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: a9 43 51 d9 9a 2f eb 68 8d 45 41 d0 56 3f 0e 1b 00 5a 82 86 90 02 62 ad 3e a9 d4 b1 55 af 55 d4 ea b3 56 9b 84 44 a1 98 b2 54 c4 ba ac 10 21 c5 e6 a9 fe 72 ef 3f 7d ac 3e f2 a7 9e 6d bd 99 b0 00 de af cb 2f ff 7d 8b 95 fb 26 85 60 08 80 ac 5f 8a 95 c0 42 34 e3 7c a2 3c 7f 20 da 2b f2 28 ab 0f 97 28 42 92 a2 a1 69 8a 09 08 a3 35 27 2a a5 12 1a 31 5f 46 d8 52 42 a4 92 17 0e 40 4d 32 c9 40 5a 2a ab 90 52 c8 81 4a bd 63 29 8a 42 5d d4 89 42 28 85 79 15 d4 62 c8 87 2b 59 a7 a7 57 70 d7 13 ca ac 80 16 6d 99 c2 10 25 d4 ca 50 46 77 86 68 85 b2 e4 ab d5 15 b6 1a 3d 96 52 81 67 35 a9 96 30 f2 e5 e5 2f c4 4c a5 7e af f7 9f 3e 7f f5 8f 7e f3 f7 ff e8 cf 25 1b c0 fb f6 74 f7 ff 7a f6 89 7f ba fc cc df eb e5 53 1f da a4 56 42 21 40 2b 2f 87 65 be 4c cb 27 45 fd 6a 92 Data Ascii: CQ/hEAV?Zb>UUVDT!r?}>m/}&`_B4\|< +((Bi5'1_FRB@M2@ZRJc)B]B(yb+YWpm%PFwh=Rg50/L~>~%tzSVB!@+/eL'Ej
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 14 52 bc 85 48 65 28 4c 72 bb e2 5a 2e d5 c4 2a c8 56 ae 08 21 af ba a8 ce e3 a2 d2 0f 84 2c f4 2a 21 31 83 10 8e 70 12 63 a6 42 c9 95 ba 5a 49 0e c6 f1 95 b2 2c 21 66 b3 f6 02 76 a9 8b 22 9c b1 8a ca 9d 71 b5 a8 c0 89 85 a6 d3 ea bb ca c5 4a c5 86 54 18 d9 5b ac bf 0a 3c 78 af ba 3f 6a 7b 68 dc 7f e7 5a df 7f ab ad 7f 94 fe 55 fa d7 c8 44 04 e1 a0 00 26 4a 1b 71 48 b2 00 62 36 94 3c a0 44 00 61 c9 29 84 49 b6 b6 ee 3f f9 f2 bb 97 7d f1 a3 ad 5f f8 04 07 97 bf 6d 37 e9 c1 80 a1 b1 bb 78 ca e5 fd e7 1f 6a 4a e3 78 9b 54 88 58 1a 7a b1 51 69 b5 54 70 66 8d 30 c6 b6 2b cc 5a 65 8c db 94 11 c2 25 9c c5 41 11 b5 58 13 85 68 8a 49 bf 4a 66 59 ca a8 29 13 bf 10 eb 6a 05 b5 b4 46 37 ca a4 46 04 d5 d1 11 1c 02 c7 49 c5 f4 6c 0a 6b c1 c5 4a 28 b4 2a 76 ae 54 93 ce Data Ascii: RHe(LrZ.V!,!1pcBZI,!fv"qJT[<x?j{hZUD&JqHb6<Da)I?}_m7xjJxTXzQiTpf0+Ze%AXhIJfY)jF7FIlkJ(*vT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49862	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:31 UTC	1098	OUT	GET /gAc6Do2rlEFGZEbG9HrLCHNBZW_jqtAP-8PKHSXEPRcA51Qw7t9OhO8cQSUPHL1yk9I=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:31 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 39276 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:58:51 GMT Expires: Fri, 25 Oct 2024 21:58:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 3100 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:31 UTC	844	IN	Data Raw: 52 49 46 46 64 99 00 00 57 45 42 50 56 50 38 20 58 99 00 00 d0 95 01 9d 01 2a 88 02 6c 01 3e 55 26 8f 45 23 a2 21 14 7c e5 28 38 05 44 b5 37 7e 0a b3 d1 18 88 1d 11 7d be f8 9f 5b a9 26 f5 de 4b fd 27 6a b8 9f f1 ff e4 bf 67 bf c7 fe c6 fc cd 70 ff 51 de 1c fb 7f f9 8f f1 5f da bf f4 ff a7 f9 5d fe ab ee 67 df 1e b5 fa 40 f8 21 f3 9f d7 3f da 7f 88 ff 43 ff cf fc cf cd 9f f3 1f f2 ff c2 7b 97 fd 1b ff 33 fc 6f ef ff d0 17 f2 0f e6 ff e6 3f b7 ff 8c ff c1 fe 3b ff ff ff ff c3 ff ef 7f 60 3d cf 7f 81 ff a1 f9 47 f0 0b fa 47 f8 0f fd 1f e5 7f d9 7f f9 ff bb f5 2b fe bf f6 4f dd 67 f8 4f f6 1f b4 1f eb fe 40 bf ad 7f 97 ff c3 f9 ff f1 c7 ec 37 fb b1 ff ff dc 13 fa 8f fa cf fe 1e cf bf f4 7f 70 7f e6 fc 9b ff 5d ff 6d ff df fd e7 fd 1f ff ff ff fe c4 3f a3 ff Data Ascii: RIFFdWEBPVP8 X*l>U&E#!\|(8D7~}[&K'jgpQ_]g@!?C{3o?;`=GG+OgO@7p]m?
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 78 2f d1 18 eb bc 89 f3 f6 d1 90 83 96 70 e4 01 c9 e8 dc 8c ae df 72 17 2f 4e b4 6f 1c a1 68 52 33 36 73 fe 2f ba c3 79 34 52 88 b2 6a 65 62 ab fb 24 48 df c0 12 e4 6a 80 9d 15 70 25 aa 18 77 8e 62 18 53 0a f4 e4 2e 06 c4 a5 1f 21 13 6b 0f f1 3b 59 25 d1 f5 5e 32 7d c2 ca 64 96 61 ad 92 54 e1 49 df 74 11 ff 03 fa f0 7b 02 41 e5 6e b4 68 d1 f5 8f 96 65 55 57 94 35 f7 fa 54 04 96 61 93 44 d4 af ea 08 64 af 43 87 57 4b ba 40 8f 9c ca 7f 11 1b 6a ef 46 ab 68 0a 7a 59 a9 0e ef a2 96 1e 98 cf aa f2 ba a2 8a 6b 85 8b 1d ab d9 66 24 1d 73 4a ac 90 c2 a6 de 48 6f 7e 41 ea 17 25 ea 37 96 18 34 de d7 f4 33 ea 18 68 7b 44 06 27 5d b6 ce e3 68 81 31 f3 a9 7d 3c 11 83 9a 76 bd 24 5e 69 ef e8 b2 58 cf 67 81 16 95 cd a2 5a fa ad 2e ca 1e 39 16 5c e9 11 b1 1b a6 f6 4a 2b Data Ascii: x/pr/NohR36s/y4Rjeb$Hjp%wbS.!k;Y%^2}daTIt{AnheUW5TaDdCWK@jFhzYkf$sJHo~A%743h{D']h1}<v$^iXgZ.9\J+
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 93 e8 bc 73 56 10 68 6f 4d a9 67 8a 15 59 5a 27 4e 1d ff ff 04 89 fe 61 a7 7c 07 55 2b 7f dc 86 7e 9c 56 d1 dc dd 14 6f 8d 28 97 ff eb ce b5 ff 83 29 36 3b 09 70 73 99 66 d8 81 ea 11 4d 0c f1 50 10 8c fc 54 d5 d1 76 5e 60 5b a8 6a 6c 4b c2 71 7c b6 f8 fd dd 2b 74 b6 a2 e9 29 91 d7 19 3a 78 ad 32 2e 30 26 3b c7 e8 11 b5 dc ca 86 b3 28 72 b8 49 bc 80 ed 80 ec 22 6a f1 2a 65 b5 56 25 30 f4 b2 86 f5 d7 ed 68 5b 4a 0a ce c5 1b 35 5f 2d 04 4e 2b b6 c8 22 b2 13 1f 09 a1 ad 65 64 d3 bc 29 f3 48 c2 ac 25 54 c6 64 fb c4 f7 c3 e2 42 12 3f 37 f8 5e 7f a2 b7 d1 41 4f 74 df 67 d4 23 9d 68 e8 39 36 bf b9 7c ee a1 f2 13 91 6f 1d 3e 64 f7 ab b8 0b ea f0 cc a3 f2 4b 55 dc 1f d9 73 29 bb a3 95 6d 85 1d 37 55 e0 da dc 57 ff e0 8d 4c 6e 37 53 54 e2 79 d6 39 a9 a8 ef 1e cc 23 Data Ascii: sVhoMgYZ'Na\|U+~Vo()6;psfMPTv^`[jlKq\|+t):x2.0&;(rI"j*eV%0h[J5_-N+"ed)H%TdB?7^AOtg#h96\|o>dKUs)m7UWLn7STy9#
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: a8 28 ac 39 eb 13 08 6b 42 45 75 50 26 34 9b e2 6f c2 9a 87 db 34 cf af cc 40 40 60 ac 07 08 bd 76 01 b5 db 90 f5 65 ff b2 17 74 36 a5 e3 b6 38 80 f4 ee 59 88 cc e9 cd 95 19 1e eb a8 e9 4c 04 c1 32 1d bb 80 74 66 a8 73 c3 ff de 33 dd a8 33 91 5a a2 68 f4 81 30 49 94 dd 9e 41 6a e8 f8 48 15 cb cc 9a 3d 3c 4e 2a 18 0f e9 5a b9 11 c5 2d 9a ac 59 f5 f8 da 8f d1 e9 2c 8d 26 94 41 ab 9f 1c 99 be 1a 37 99 6a a8 42 04 81 2f fc 28 73 d1 a0 ea 53 e7 0c 55 7d 7a 31 ad 27 8c aa ce 18 2f bc c6 8a 27 50 28 d2 eb d7 32 dc d4 fa 39 2a 71 38 2c e2 87 08 f0 45 90 86 b6 bc b1 e9 51 0a 4e 62 f2 a2 d0 8d 7f 66 cc 8f cb 77 b8 b0 b2 77 be 56 d0 2a d1 26 07 81 19 b7 4c 93 0f a8 6c 24 35 92 85 5f bc 75 ee 71 7c b4 e2 1f 56 cc 94 56 81 a7 45 ca 03 ed 4b 40 12 e0 cd aa c0 4c ec 3e Data Ascii: (9kBEuP&4o4@@`vet68YL2tfs33Zh0IAjH=<NZ-Y,&A7jB/(sSU}z1'/'P(29q8,EQNbfwwV*&Ll$5_uq\|VVEK@L>
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: ef 58 ed 19 8c 08 f8 f0 05 a5 7f 8f b7 ef 06 fd da 25 38 9f 33 fa f2 44 f5 36 1c 34 07 8e 1d 7f 41 c8 03 98 76 73 c8 6b 70 a5 35 9f 12 e2 36 45 f1 48 37 86 e7 03 f0 ba e6 60 7e 00 12 49 95 4d db 0f 6d 75 49 bd 52 70 ed 79 5e 0f e8 c1 49 77 02 e9 b2 2a fb 53 2e 1a 71 ba 07 7f a8 a9 65 8f d1 f3 69 4c ec a7 7f b1 3f ca da 15 b5 96 8f 6a 7f 6d 8b c5 dc 08 7a dc 13 3b 01 cb 3e 6c 08 8c e7 59 27 38 15 d9 f4 02 76 7a 75 40 ef 6a 9b c9 f9 cc fe 8f 35 20 d8 f3 53 de d4 8b 3f 53 f8 a9 23 34 38 3b 99 f9 48 24 12 c8 3e 9f b1 02 67 41 5f 25 ab 8b 57 28 e2 51 9d 87 58 88 ca 7e 05 c9 89 c3 b3 99 3b 26 a4 08 83 67 bc 8b ea 21 41 59 2e d5 9c 99 62 87 d9 13 11 1c 53 46 11 cd fe a7 70 4d 4a 49 b2 dc ab 6a 10 3b 99 d0 7c 12 14 96 c8 3a d4 31 69 48 9c 31 1c 35 4b 75 56 19 53 Data Ascii: X%83D64Avskp56EH7`~IMmuIRpy^Iw*S.qeiL?jmz;>lY'8vzu@j5 S?S#48;H$>gA_%W(QX~;&g!AY.bSFpMJIj;\|:1iH15KuVS
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 42 24 b4 78 c8 60 20 53 1e 0a 1f a0 d8 fa 86 5a b7 3c d3 eb f6 f7 2f 5d d3 61 fd 9d 91 39 bf ae d2 87 04 ce ff a8 f5 87 a4 4f da d6 06 e9 27 3c 81 2b 82 7a 3b f5 68 7f 55 df e6 c0 20 38 17 1b cf b0 d1 2e 00 6a b2 10 5f 48 8e e0 7d 6e ec fc e0 84 22 b8 d9 53 01 84 f8 42 c1 18 5c 1f 26 9d a9 68 66 ca a5 bb 9f 8d ce f8 82 6e 65 54 d1 5b 58 d6 e5 dd fa 25 4b f5 56 90 91 28 51 fd 48 b0 de 66 12 c8 5d 8d dc 66 b0 32 e8 8d a9 52 2f 4c d5 89 d0 83 db 1c ce 05 1f f8 6b e2 e5 10 a2 6d 02 38 da f3 e6 a4 09 cc 91 56 e5 a5 c4 1e e9 d3 81 d1 3e 2d 73 b6 01 d3 6f c0 4e c8 9a c5 b9 6a c9 8b b6 d3 92 3c 0b d4 e3 31 42 b3 1a b4 6e 81 9a 3c 97 23 f8 a4 db 7d 04 7f a5 9f 71 f2 9e b4 ce 38 f4 7d ae c9 3f 04 43 cc 9e fe 82 75 e3 09 30 88 65 14 41 fb b9 60 80 b3 a9 19 16 6e 57 Data Ascii: B$x` SZ</]a9O'<+z;hU 8.j_H}n"SB\&hfneT[X%KV(QHf]f2R/Lkm8V>-soNj<1Bn<#}q8}?Cu0eA`nW
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 92 ba d8 e1 54 83 46 4c cc 75 dc 02 c8 8e 0a 3c ff d0 66 0f ac fc 0c af 77 c9 dd 91 9c 6d 5b fe 5d 07 67 f3 e2 2f ba ca fb b2 b3 bd 38 f9 19 90 42 f4 11 f0 e5 1d 33 9b 8c 0a fe 65 a6 aa fc 73 10 3e f9 d4 a1 6c 25 82 c2 6b b5 cd 07 67 ca 3b ed d3 df e9 30 86 bc 8a 21 42 90 aa dd bd bd 00 46 1b e0 f6 0c e2 63 7d 61 2f 69 9e be 8c 97 e5 21 e4 2b 50 90 92 b9 9d 9e 9b 85 99 c2 b3 b7 e6 d7 bc 79 da 54 cc 2a 21 cd d1 a8 01 30 01 23 88 83 67 7b 67 00 3d 0a 2c 1f 01 6f 9d 8d 20 6a 81 13 52 52 32 52 8b 07 5d 0d ba 30 59 8c 1d bb f6 06 8c 28 aa b7 c0 d4 c2 8d 3f af d4 5f a5 27 ef 8f 24 7d 59 fd ff 69 52 a8 8d 49 90 09 23 08 4c cf d3 0f 59 57 5f 4f 29 7d c3 b2 80 25 bd 36 ac 43 de 1b bd ae 76 61 c2 7c 5a 86 ef 9d 17 ec 8a a2 ad 17 31 4d c1 be 08 d1 26 95 8f 63 13 bf Data Ascii: TFLu<fwm[]g/8B3es>l%kg;0!BFc}a/i!+PyT*!0#g{g=,o jRR2R]0Y(?_'$}YiRI#LYW_O)}%6Cva\|Z1M&c
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: c9 4b 87 cd 9d 25 9a 24 de 37 b1 4b d8 d5 6a 9d 7a 93 de b3 8d 3e a8 06 13 d0 f4 cb ff 1e b0 37 b1 47 66 42 2b e0 a9 e6 0e b4 e2 79 97 94 c4 f7 a0 2e 14 43 b8 81 3c f7 fa 03 41 55 17 63 24 62 8b 16 a1 d9 a1 a6 9b d0 6e b4 b6 3a 36 6f b6 86 55 b8 a6 17 72 3d 0f f5 97 98 30 32 0d a8 50 2e aa e8 23 27 48 1a f5 5a 5a 82 5e da 15 5a bf 82 55 f3 06 49 a1 54 f7 97 3c 84 49 62 77 3d 44 6b 94 db 7c 6e 79 d8 ef 39 ec 03 55 cf 3f 76 7a 1b e6 b3 25 fe 8e b6 d6 1f ce 44 3c 22 c7 97 fb 75 09 7d f0 aa a3 aa 6f 9a 12 97 9f 17 0c 54 c1 1c 66 fc c6 b5 26 f6 79 db ce 04 33 98 33 83 76 b4 23 5a 5f 2e 23 63 5c d5 6f 46 41 54 47 32 1e 69 b2 e6 8e 09 b2 43 86 56 9a 14 98 cb 08 22 66 b0 52 03 b5 56 f7 53 bf 81 25 5b b9 8b 6c 88 65 f5 21 36 a0 70 55 f3 2d c0 b3 2c 2d e5 e0 ed b5 Data Ascii: K%$7Kjz>7GfB+y.C<AUc$bn:6oUr=02P.#'HZZ^ZUIT<Ibw=Dk\|ny9U?vz%D<"u}oTf&y33v#Z_.#c\oFATG2iCV"fRVS%[le!6pU-,-
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 3f f2 40 3c ef b5 48 b8 a2 c9 98 36 93 6e bc ee 0c 26 c8 57 81 37 80 d7 e2 09 69 5a d3 d5 80 98 e7 70 d2 b5 3a 6a ec a6 f9 46 38 ae 0c 90 ec 8e 29 bd 4c a4 32 70 73 41 e1 0c e3 2a 38 20 f1 a8 65 7f 0f aa ce 20 e3 8b 8e e4 c2 10 b7 f6 1c b0 ab b1 7e 15 67 20 c7 86 91 6f 24 25 31 f5 e8 b8 46 64 d9 b3 ea 20 f1 6d aa ac 49 80 62 ca 8e a6 f0 a7 39 d4 5f a7 44 da 47 bc ed 74 d1 b2 da c4 e8 6a ac 34 e6 8d 99 5a a2 24 95 80 f7 f9 88 86 5d 07 8a 29 a5 54 a4 6a 6c 4a 11 45 46 84 27 15 e8 1c d0 23 c6 0e 75 22 64 9d 6e ff 95 f9 5a 27 59 2e af 63 56 02 5b ec 3b 38 67 f2 52 ff 6b 7f 98 b0 d9 54 e0 03 e3 84 25 a6 10 4e 13 6b ea ec 95 b7 99 b7 cf 1b c0 bd 5d cd 4e 25 d1 ec 6c ba e0 31 30 b3 9f fe b6 1b 3e ab 77 52 b8 de a0 30 3b 77 fd bb 68 a3 77 00 e0 4f 9e 3e 05 17 d4 Data Ascii: ?@<H6n&W7iZp:jF8)L2psA*8 e ~g o$%1Fd mIb9_DGtj4Z$])TjlJEF'#u"dnZ'Y.cV[;8gRkT%Nk]N%l10>wR0;whwO>
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: e8 bf e5 de f8 a9 05 cc 01 97 ef 0e d9 8d ff 44 bc b1 ed cf c3 a7 6c 5b 2f 9c 5b 1e 4f 32 f0 43 55 b3 e2 b0 59 36 07 09 ce 2f 82 d5 63 d7 3f 8d c8 e7 3e 42 91 9a 8f 98 a7 b3 09 18 6d bc bc 61 25 7f d6 24 6c e0 c3 0c cc e0 33 de 0f 47 01 a8 4a eb 7e 0c 35 cb 12 7a 5b a9 8b 7e 18 cd 63 bc 57 cb d3 7f 4e b6 28 39 c5 da 82 41 10 19 78 4b 0e db f6 a7 bf 63 11 fc 2f 0b ce 53 b1 0f 7f 08 52 80 b9 18 8c 02 4a 0b 05 5e 60 88 17 3b 82 24 cc 1c 3a a1 1e 4e b9 ba af 11 e8 97 9e 6e f7 32 f5 89 c5 2b 48 e3 a2 cf 77 5c fc ad 9a 3f 03 a2 d8 98 4a 16 c9 80 64 f1 77 b6 9a 1d 3a 50 e2 56 d7 78 9a c5 88 57 1c 2d 53 4b 13 c3 97 84 8d 1e 93 af 6c c4 25 76 c9 a9 2b ef 71 fd 4e 20 06 da 9b 61 e9 0f 38 d8 1c 2e d4 45 d6 7f 07 73 83 8e fc 0d 8d 4c 64 8e cb 1c 83 42 f6 ef f3 88 5e Data Ascii: Dl[/[O2CUY6/c?>Bma%$l3GJ~5z[~cWN(9AxKc/SRJ^`;$:Nn2+Hw\?Jdw:PVxW-SKl%v+qN a8.EsLdB^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49864	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:31 UTC	525	OUT	GET /KxeSAjPTKliCErbivNiXrd6cTwfbqUJcbSRPe_IBVK_YmwckfMRS1VIHz-5cgT09yMo=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:31 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2966 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 18:56:29 GMT Expires: Fri, 25 Oct 2024 18:56:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 14042 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:31 UTC	844	IN	Data Raw: 52 49 46 46 8e 0b 00 00 57 45 42 50 56 50 38 4c 81 0b 00 00 2f ff c0 3f 00 15 07 e3 80 69 e3 88 fd c7 4e 52 c0 bd be 11 31 01 fc 4a 1d 63 ba 18 d2 24 bd 90 82 25 3c 1c 09 df e1 79 64 5b 0a 5e 53 78 12 24 70 3d a2 07 9a 0b 1f db 0e ff df a6 6d 3b 0f 31 2a db 4e 2a db b6 6d db b6 6d db b6 fd 6c db b6 6d 9d e7 37 e6 da fb ac 31 56 6c 3b 95 51 dd f3 ba 58 65 3e 19 b1 6d cf d8 b6 33 ca d8 49 65 db b6 8d 5f 6c db 33 e8 de 35 90 b6 2d fe d2 43 82 24 d9 b4 f5 df b9 df b6 6d db b6 6d db b6 6d db b6 6d db 5a d9 f6 ff 2b 3b fa 3f 01 74 6e 6d 3b b6 39 b3 a6 f2 5f 98 0e b1 d5 da b6 6d db b6 6d db b6 c7 b6 6d 4f 6c 3b b9 ee fb 79 9e eb ba 7f 41 9c 54 76 97 ca b6 73 c6 aa 6c 1b c3 2e b6 ed d2 78 b3 c6 73 0d ba 58 95 3a db 4e aa 59 69 22 fa 3f 01 b3 04 7f 66 ff 9f d9 ff Data Ascii: RIFFWEBPVP8L/?iNR1Jc$%<yd[^Sx$p=m;1Nmmlm71Vl;QXe>m3Ie_l35-C$mmmmZ+;?tnm;9_mmmOl;yATvsl.xsX:NYi"?f
2024-10-24 22:50:31 UTC	1378	IN	Data Raw: 96 29 ff b4 8a 0b d7 e3 69 07 82 db 84 e1 b1 48 2a f1 34 17 65 b2 70 8b 49 7a 23 2b c9 ca d3 75 94 fe 13 c1 24 c7 a5 27 51 9e 57 a0 bc d1 26 5b 53 5a 7b 4a 39 24 27 9b b8 b0 27 ae 5a 27 6c 78 1d d6 99 89 ab 09 08 6e 92 2c 89 c1 d5 3c 6e 93 27 88 58 92 88 ab 38 8e f3 12 49 7a ae 8a 50 de 5d ec c1 90 71 49 f2 72 95 89 72 ff 6c 90 01 12 96 2c c6 55 29 ca 88 31 61 90 be 48 4a 94 eb b5 29 83 c7 63 91 8b 29 a0 94 fe 89 58 e4 54 29 ea 72 4e 8b 9c 8a a2 2e bd 93 39 ad 5f 6f c9 36 be cb db a1 30 cf ea cc b3 6e 05 f2 10 71 9f 3a 85 3f 1e 83 f1 b1 18 7e fb 62 f7 79 70 9f a4 74 e9 37 b1 ff 5f fd 8d 8f 3f 26 a3 63 33 f8 63 2f e4 87 89 1d 28 6a 71 db eb ad 69 93 5e ad 04 e2 37 f5 9d 44 41 27 78 84 57 2e 8c bb 9f 2c 55 b2 42 3c dd 5b 28 8f 2f ae db 49 e1 a1 0e 7d 93 70 Data Ascii: )iH*4epIz#+u$'QW&[SZ{J9$''Z'lxn,<n'X8IzP]qIrrl,U)1aHJ)c)XT)rN.9_o60nq:?~bypt7_?&c3c/(jqi^7DA'xW.,UB<[(/I}p
2024-10-24 22:50:31 UTC	744	IN	Data Raw: ae 8f 60 be 2a 00 b4 bf 49 61 17 38 f1 ab 76 60 f7 d4 14 88 3a e5 c2 76 00 84 9b 53 ba 92 91 61 fb bd 44 bd 72 70 2e 55 01 a8 24 59 25 d8 bf 28 51 b7 bc b0 3a 4c 28 d7 55 b0 3f 60 42 44 fd 32 25 ac ed 2d b7 32 fc 25 d5 5f b0 be e3 65 bc 82 a8 e3 c2 70 58 57 66 b5 aa 19 a5 9a c9 d6 1a 37 35 42 cc 94 a8 69 18 3c 9e b5 18 af a6 6d a9 9e b4 b3 de f5 0d 19 17 44 8d c3 e8 d1 fc b2 0a 48 05 9b f3 9e 1f a2 e6 33 b7 7d f6 e6 d4 5a 65 0b aa af 3a 73 08 e4 50 b0 40 57 df 49 fc dc 20 ad 4c e9 0c f6 2a ec c6 d3 3f 0a 94 d0 b2 00 9f 14 f5 28 d3 a3 a4 5e c8 03 25 94 e5 ad 12 f4 53 4a 9e 52 af 82 7a 76 42 63 96 bb 3d 09 80 fa 7b 1d 79 cb 92 a1 4d 62 27 4a 5d 8a af 52 47 5e f8 fb 26 a1 92 5b 5e bf fb b7 a0 af 7d 23 84 4e 8f 49 30 2c 32 6a cc 34 bc 5c 77 d3 cf 45 e0 61 bf Data Ascii: `Ia8v`:vSaDrp.U$Y%(Q:L(U?`BD2%-2%_epXWf75Bi<mDH3}Ze:sP@WI L?(^%SJRzvBc={yMb'J]RG^&[^}#NI0,2j4\wEa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49865	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:32 UTC	1098	OUT	GET /oKz8aRZyiwP5bLJkwlACQ0ZGq_GPxpNi8wbcE65I_PFHBqgu1xk3T_nTff7urKZisu0=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:32 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 152338 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:18:53 GMT Expires: Fri, 25 Oct 2024 21:18:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 5499 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:32 UTC	843	IN	Data Raw: 52 49 46 46 0a 53 02 00 57 45 42 50 56 50 38 4c fd 52 02 00 2f 87 c2 5a 00 11 88 91 24 c7 6d 6a 17 84 8e d8 81 f3 0f 18 8f 19 42 44 ff 27 40 7c 6a 1b c0 9c 6d fe 37 96 0f cd b1 5d ac 63 d1 ce 9b ef d5 7b 80 9e e4 3f ad fd c7 d9 38 e9 46 8f 4f 6a 40 03 0c 53 d2 54 7a a2 5f 92 52 1b 60 ef da 72 b6 ec be 24 19 95 34 2e 5b 6b ed 0a 3b 61 e9 79 cb be e9 70 21 c1 74 1f ec df e2 be 71 b4 91 b1 7b bc 4f 79 68 27 dd 18 c3 14 ee 61 1f fa e0 a2 f7 c5 d8 2e 49 40 25 80 1d 3a 97 cb 9c 48 20 c4 3a eb 5d 20 a3 83 7c 12 eb cf f3 41 b6 0d 49 7e 59 47 b0 77 82 2a c0 e5 39 2d 1b 96 df a2 a6 20 b1 5a f0 c3 46 78 82 6c 43 3d aa 24 a5 aa f2 e3 0d f5 bc 93 39 75 0b d3 92 b3 95 39 95 cd 2a 40 80 04 12 3a 22 00 49 f6 e1 2c c0 b6 38 ac 52 f1 7e 20 fe 24 69 6e e6 58 a8 2a af 77 eb Data Ascii: RIFFSWEBPVP8LR/Z$mjBD'@\|jm7]c{?8FOj@STz_R`r$4.[k;ayp!tq{Oyh'a.I@%:H :] \|AI~YGw9- ZFxlC=$9u9@:"I,8R~ $inX*w
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 30 2e 8e cb 3a b8 b4 1b 55 24 58 08 97 32 2d 12 50 18 99 b8 c8 33 8d 89 cf ec e1 33 73 d3 2c cb d8 3b bd 05 18 a7 a3 c6 e2 b0 f0 6b 01 c0 78 4c 0e 3d 28 82 00 a0 52 9a a6 aa 6c c0 13 0f 74 cc 4e 33 d3 64 cf dd 32 07 e0 96 93 71 72 18 31 82 c1 00 00 18 30 60 9d d5 01 04 cb b4 a2 89 94 25 80 09 5b cc 93 0c fd 5a 73 69 9a 63 dd 0d 6b 60 e2 38 1e a7 ce c8 b5 cc 80 31 00 d0 3f f5 96 89 b3 75 ba 1d bc 45 04 00 82 08 94 00 01 98 e6 61 fa 4f c2 bd 69 de 1f 6e dd e3 7f 72 6b 9a e6 e9 fc 74 3a d7 f9 5c cd 69 b0 14 f5 8f 9e d3 3b ad 9c ba d3 e8 fe f0 78 00 06 65 10 55 55 15 55 96 25 94 6a 05 00 c0 77 01 00 4c d3 e7 b6 76 4f db a7 cb d3 c5 5c eb 73 8d c0 93 62 4c 8f c1 21 87 eb 03 00 51 65 54 a4 dc aa 8c 94 25 00 10 00 28 0d 04 00 b8 e1 66 fa 60 08 00 14 43 00 60 71 Data Ascii: 0.:U$X2-P33s,;kxL=(RltN3d2qr10`%[Zsick`81?uEaOinrkt:\i;xeUUU%jwLvO\sbL!QeT%(f`C`q
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: db 91 fb 6d db e6 f7 fd ff ab e7 7b 9e fb be ce 5e 6b 8e d1 63 02 f8 b1 ff bf dc 92 e4 e6 fb fd 3d cf 39 f7 dc 7b 8b ab 9a 99 86 a9 87 67 96 29 33 0b b3 e6 65 66 33 2f 33 33 c3 ac 97 41 eb 31 c3 ee 0e 2d 0d 65 16 86 79 b6 87 9b a1 9a 8a ee bd e7 3c cf ef f7 c7 39 f7 56 4d d7 64 f6 df 4f a2 0e a7 c2 60 18 b3 5d 8a 7e 51 9e c0 09 8c ec 5f 60 cc b3 10 19 fa 9f 13 6b 26 a3 8a 74 46 d9 df 1f 73 cc 37 60 0c 83 a1 a3 1c c3 91 55 81 fe e3 09 54 38 15 34 fb 76 68 dd 81 52 74 03 37 51 07 1e 45 66 3b 4c 0b aa 48 95 f5 ad 3f 6e 2b be 8a 3a 60 38 01 33 75 68 e4 96 52 7f 54 a0 0c 95 e8 91 35 1d da b8 cc 8c 23 ad 2a 60 b8 8e e6 2a 32 9c 80 d9 9e dd b5 32 6a 4d 2c 51 27 ea 0e 9f 40 99 5d 92 99 69 b4 9a e0 aa 02 25 ab d7 f2 23 b9 25 4b 0f 6c db aa 2d 49 d2 5a 7b 9f 73 ef Data Ascii: m{^kc=9{g)3ef3/33A1-ey<9VMdO`]~Q_`k&tFs7`UT84vhRt7QEf;LH?n+:`83uhRT5#`22jM,Q'@]i%#%Kl-IZ{s
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: c2 3b 0a 4f c2 1c 45 7e 05 e8 d8 97 00 17 f6 7b 67 ce 5a 6a 72 83 7a 5d 9b de 5b 72 25 3d 01 0e 8c 02 bb d4 bf 90 d4 59 7f 72 2d 6e ef 75 77 90 2a bb 59 45 a6 83 f9 43 76 49 95 fa 77 54 07 ec 70 80 4a 4d dd ac 7d 27 dc 12 32 91 70 00 17 74 b2 22 75 51 bc b2 1b 79 ed 00 12 e5 0e 57 cc fd f3 cf 4e 80 45 b9 0d 58 c8 3b e2 90 6f 26 6f 94 89 4c 2c 85 5d a6 de 2c 7b 14 14 1f 6c d9 5b 2c 3c 2d 04 b1 9b 82 fa aa a1 09 dd 98 88 b5 35 fd a1 03 4d 39 22 3c a1 a8 ee 27 9e f4 d7 98 4b 8d 58 bb bd 08 5b 47 a8 f9 f6 ab eb ab 6c b6 c2 ec 51 a4 43 84 53 78 7b 17 99 2f 44 36 32 a3 b0 dd 88 c0 95 79 f4 28 ba 74 6e 94 db 49 ff 0f 96 b5 e9 7d 91 77 5b 47 01 15 20 02 07 d4 ce 4d 77 de 72 a2 aa ca f4 61 a6 6a 26 13 3e 52 75 6c cd f4 d8 dd e7 c8 64 97 e9 b6 eb 64 9a de 77 8e a9 Data Ascii: ;OE~{gZjrz][r%=Yr-nuw*YECvIwTpJM}'2pt"uQyWNEX;o&oL,],{l[,<-5M9"<'KX[GlQCSx{/D62y(tnI}w[G Mwraj&>Rulddw
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 6c 29 a1 1b 71 86 25 51 d8 8d 25 29 68 a1 1b a5 d3 60 72 db 4f 9d 02 a5 a9 01 f1 54 aa 44 41 11 97 f3 19 0b ce 67 5b 4b 31 4d cc 5f 1d 67 02 54 d2 00 b1 88 bc 33 b2 43 ed 0b f6 bb 93 98 b8 2f c1 f5 64 ac 98 fb 51 02 1c 5b 70 f1 a0 f4 3d 80 5f a9 db ce 79 bb b9 75 52 ef f5 96 40 02 37 44 36 b9 c1 6e d6 ae 99 d4 1f 9f fa 4f b6 de 92 dd ac 66 f2 fd 79 e7 05 5b 59 a2 a6 dd ac a6 24 b3 a8 df 49 dd 03 3e 73 b2 eb 1c c6 e3 bc b3 3b 41 ea af c8 c4 7e 12 9f 33 dc 1d 2f 01 34 71 5a 41 80 d3 67 30 97 65 91 61 7b 06 7f db 73 40 ef b0 48 39 cd 91 2f 6a 35 ab 3d 6b 84 89 58 27 97 4c 94 d2 09 fd ed b5 52 6c 2d 73 d4 e3 e8 65 23 8f 67 24 4b d1 9b 99 c9 ac 37 46 b8 4b 66 ca da 3e f7 f2 c5 d6 a2 37 ce 98 17 a8 1e 3b 15 4c 66 9e 75 ef 68 c1 e7 a3 2a 80 28 d2 41 bc 3b a2 26 Data Ascii: l)q%Q%)h`rOTDAg[K1M_gT3C/dQ[p=_yuR@7D6nOfy[Y$I>s;A~3/4qZAg0ea{s@H9/j5=kX'LRl-se#g$K7FKf>7;Lfuh*(A;&
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 98 55 a6 35 6d e0 a3 ca 89 63 26 2f c4 1d aa 9a 93 9d 59 cd 74 bf d7 c4 27 d4 6d 37 94 a8 3d f2 96 39 05 6a 33 73 9a 6f 76 03 8e c9 87 33 55 b7 f1 fe 3e 93 c9 f1 06 1f 99 e7 ef e0 5d 7a e4 f2 2e fb f0 91 77 ef 67 24 57 fd 71 cd 47 7c 41 b6 c3 d7 02 d8 28 7c 7b 26 2f 91 4d 6e 53 f9 e2 e0 e5 47 c5 4b a7 ef 7e eb 5b 85 c8 89 6f cd 5e fa 5e 88 07 54 a7 20 34 78 b2 f7 8a fa 4a 7f 04 4c 44 69 fa 97 3c d2 52 ef a5 60 6c 5c 34 34 1c 0e b3 c1 fe f6 0f 9b dc c6 50 c5 a8 4d 23 4d d3 4c 2d ca 22 f9 61 c3 a0 5b 04 b8 dc de 8f 8c 29 97 e7 1a 73 35 81 e0 82 79 b9 5e 08 a0 09 56 a0 c3 ed 1d 3c 70 05 27 fb 48 d6 b9 f2 e8 f1 d7 db 1d 2e 64 1d 78 44 22 f5 6f 0a 8e 84 0f 77 b3 de 5b da ea c1 fb f6 1e f3 78 4c f8 ae fb a7 47 8e f0 e2 16 1f e9 5f d3 cd ce bc 81 29 87 d4 bb 4b Data Ascii: U5mc&/Yt'm7=9j3sov3U>]z.wg$WqG\|A(\|{&/MnSGK~[o^^T 4xJLDi<R`l\44PM#ML-"a[)s5y^V<p'H.dxD"ow[xLG_)K
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 02 99 ed 8a 99 43 41 c6 2c 71 9d 91 f8 f1 37 fd f5 a6 bf e8 8a 03 ca f2 9d 7c ba 1a 30 f4 a0 94 fa b4 cf 64 8e 9e de 39 22 3d ba dc fa 7a a7 d6 17 a8 85 08 cc 23 f3 7a c8 54 28 7a 8b 7a 7b e5 d1 f7 57 84 6e 73 84 3a a1 9a d0 20 4f 6e ed ca 32 9d ae b6 46 69 6a 6d 88 86 a9 e8 8d 49 ef de f8 03 f9 81 5c 98 57 89 97 f9 75 96 be b7 a2 77 14 06 d9 d3 b6 ed af 01 47 70 79 45 f6 a7 71 c0 d3 d3 13 f9 e7 0b e6 54 13 f1 11 4f 3f d4 c9 54 33 a9 d8 65 e5 7e a7 42 da 9e 30 cf 55 92 d9 b6 24 b7 47 1c 67 76 1d 89 44 a6 6e f6 9c 6c dd cd 1e 79 d2 8d 62 7b ba de 70 0a a4 fe 6b d8 7a 83 e1 b4 7f f5 f7 42 cc 86 29 25 15 10 2c e2 9d ee 42 2d ca f5 08 e1 d1 01 79 ef 1b 67 e5 51 b3 de 28 58 d6 34 8b b6 01 34 8c be 2b 27 94 1e 11 67 e5 51 0b 51 7a 90 b2 55 dd 49 ff 12 dc 52 bb Data Ascii: CA,q7\|0d9"=z#zT(zz{Wns: On2FijmI\WuwGpyEqTO?T3e~B0U$GgvDnlyb{pkzB)%,B-ygQ(X44+'gQQzUIR
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 28 ca 9b 86 49 d0 d4 63 31 68 c4 fc 2a 8d 2d d0 0a a5 14 bd a5 89 28 b5 85 ad 51 22 48 c6 1f 26 27 98 73 1f 59 c7 5e 01 47 99 15 20 80 cd f2 02 e8 86 3b 8f 5b 49 00 bc 86 47 ad 80 3e e8 9d e1 44 0d 8a 03 18 b5 4b c6 6d d7 9a 88 f7 27 aa 6e a6 e3 5f 02 ec ec f0 18 d8 f7 3b 2f a0 4c de 3b 88 c3 ac 0c 9d 6a 26 d3 01 76 89 17 06 65 5d 85 5c 11 9b 63 46 26 c7 59 49 dd 05 3b 76 99 7c 9c 06 3e b2 3b 51 4b 81 56 91 ec 4e 54 a9 37 13 35 91 89 3a eb 7d df 49 9c 9a de 4d 98 83 96 d7 49 26 b7 53 c1 7c b3 8a e3 f7 c8 af 50 05 dc 63 3b 4c 61 45 c9 5c 50 02 c5 d6 a7 8e 1d 49 69 3b bd 27 84 6e 39 2a 05 81 d6 d0 b4 02 01 0d 5f 3e 11 51 aa b9 40 81 b0 8c cd 23 f7 a5 51 20 5a 43 43 2b a1 77 c1 b4 36 fd 53 b1 b5 75 1a 0a 51 3a c9 c1 21 0e b6 7b 30 a3 f7 f6 86 52 a7 dc 03 d8 Data Ascii: (Ic1h-(Q"H&'sY^G ;[IG>DKm'n_;/L;j&ve]\cF&YI;v\|>;QKVNT75:}IMI&S\|Pc;LaE\PIi;'n9_>Q@#Q ZCC+w6SuQ:!{0R
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 06 ed 42 66 89 5c 1b 45 b7 50 be 07 71 b6 5f 9c 19 74 1b 4c d0 ae ee cf 78 55 92 42 36 ab 27 9a c0 54 4a 61 fe 2a 2d 0e 94 a9 55 f3 d4 89 42 79 29 67 ba 53 7e 15 d9 60 56 0f 4c 5f 01 8e 98 ef 22 00 84 fd 98 f8 8a e9 2b e0 81 7d 1f f2 c2 f6 2f c8 9e 04 a3 c6 0b f6 0b b9 eb ad f0 2e 67 66 57 d2 fc 62 dc 87 bb 9a ae cc 7a eb 77 f5 de 90 5e c0 4c d5 ad a9 bb 3b 81 1f 5f 1d 41 82 25 a0 01 4e ba 53 7c d8 cd d5 9a 33 51 31 e8 5d 11 9f eb ef 5b 27 58 a4 81 08 31 50 3a 29 29 11 ad a1 e3 5e 05 85 c3 2b a0 01 1d 05 1a 06 11 a2 a8 39 9c 24 c3 ba a8 11 6b ad 35 30 bc 22 01 a0 e3 3c 5d 44 64 9a fa 5e 0d a0 be 1e 80 d5 eb aa b1 8e a1 11 25 48 a0 01 e8 38 82 8e a1 a1 11 6b 14 d4 d1 12 0c 25 48 8a d5 d3 b4 81 8e 13 8d 68 38 d1 15 db 44 a0 01 44 4b 50 0f 04 54 6a a0 14 da Data Ascii: Bf\EPq_tLxUB6'TJa*-UBy)gS~`VL_"+}/.gfWbzw^L;_A%NS\|3Q1]['X1P:))^+9$k50"<]Dd^%H8k%Hh8DDKPTj
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 1f 2c a4 ca 9b f3 92 0c f0 0b 59 42 81 70 e4 06 ea a0 01 5a f0 46 1f 41 6d a0 53 c4 31 a9 57 e8 6a 68 ed e9 6a 69 20 1d a4 9d 59 5b 68 06 27 72 4f a0 16 17 7c 15 77 46 e7 11 f7 3b 95 b6 b8 1d d9 84 4b a4 c8 2c e1 40 55 55 79 45 76 92 28 a4 c0 29 d3 29 af d3 98 06 af 2a 73 06 2d e1 81 99 33 39 5b d2 0d 9d 5b c9 24 59 95 1a e8 5a 2a 25 62 6f 94 6c 34 06 cc 80 5a 06 d4 4c 9f cc ed f9 d5 a1 bf 84 98 e1 55 dc 8a fe 1f fd 13 54 90 ee f0 c4 d1 5e 75 4c 6b 9c 05 b2 95 da 8a 36 fc c4 b4 c5 37 f9 10 25 5a 9b ca 15 0b e3 a4 53 e5 84 38 4f dc b6 25 1b 78 2d 9a 2b 92 4c a8 cc 14 9d 09 9e f0 13 2d 80 5b 1c d2 39 c8 e9 68 27 39 68 46 55 c6 69 e9 c9 75 4a 15 bc 24 37 e8 90 7e e2 5b 55 73 60 c5 2c b0 71 e3 1b 51 86 26 16 6e b1 e1 01 d2 17 9c 73 ef 9d a7 a4 87 b3 79 f8 b2 Data Ascii: ,YBpZFAmS1Wjhji Y[h'rO\|wF;K,@UUyEv())s-39[[$YZ%bol4ZLUT^uLk67%ZS8O%x-+L-[9h'9hFUiuJ$7~[Us`,qQ&nsy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49866	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:32 UTC	1098	OUT	GET /BTcoU_yqIVkbdMjhv2SHgT7mF25HPJRKDeGhwMjlFc0fjItL7Uiq7i_3Viz9s8jbHNQ=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:32 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 112596 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:20:31 GMT Expires: Fri, 25 Oct 2024 20:20:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 9001 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:32 UTC	843	IN	Data Raw: 52 49 46 46 cc b7 01 00 57 45 42 50 56 50 38 4c c0 b7 01 00 2f 87 c2 5a 10 11 87 6d db 48 12 64 79 3f cc f5 df f0 cc ec 5e 09 11 fd 9f 00 aa c4 40 2c 5f 8b 04 41 2b 58 81 f0 6f 21 08 b1 84 44 fe 5f 5a 4a 8c db 3f 14 4a e7 60 2a 2b 3e 16 47 a0 6b 4c e8 46 19 a3 ba f1 5d 69 ea 4b 92 36 02 a3 b7 26 7d ed 2b c7 14 07 49 a2 1f 88 c9 ce 45 42 c6 e6 5c e4 b5 63 45 ca c5 ef f7 1b 6d 7a 36 49 ce c9 4d 12 9f 70 d3 c2 6f d0 ec cf fc b7 1d 08 20 26 4e 7f 6d da 16 60 00 e4 32 f1 7a d5 26 dd df 43 e6 3c ce 97 2b d3 f4 e5 4d ef 90 cd 73 3d be 2d 6f b8 81 c8 da c3 d7 b1 fb bb ed 74 c5 84 9c f7 81 c7 9b a2 2b ca 3c 68 86 84 71 e0 c3 06 4c cd c4 3a 74 14 06 3e 00 0f 3c 8f 02 24 9a b6 bd a7 2b 83 af a2 26 05 63 9a 96 f9 e4 bb 6a 30 ce c5 ba f8 a3 88 b5 95 29 3a f5 9b 45 94 Data Ascii: RIFFWEBPVP8L/ZmHdy?^@,_A+Xo!D_ZJ?J`*+>GkLF]iK6&}+IEB\cEmz6IMpo &Nm`2z&C<+Ms=-ot+<hqL:t><$+&cj0):E
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 40 c8 e1 1c 34 e9 f8 c5 1e cd 4e 93 a4 fc 91 c3 99 99 8d 5f 00 91 e1 55 41 04 dc 9b e5 4e 01 54 e0 ce cc 0a f9 ce 87 d5 ec 2f 0a 2d bf 59 ce c5 cf ff ce 5c 5f fc cf a9 9f 6a db 65 db 96 44 27 e3 82 10 7f 70 e2 71 8c 31 d7 ce ab 26 02 0f 0f d5 75 f0 98 18 b6 d9 ed a4 d0 5d 51 0a 7b ba 32 d3 fd 5c 5d 0a 42 51 76 55 ee a1 90 ee 3a 38 06 86 30 a7 2d 0a 5b 95 1b aa 50 88 42 da 3f 85 eb 4e 5b 4c 12 43 b8 9d 82 dc b3 70 6c 04 a1 02 41 f2 90 b9 e9 88 c0 40 10 18 ba 79 79 04 86 70 27 06 d5 d2 31 b6 7d 29 4c 37 30 04 13 55 08 84 61 b8 12 8e c0 40 90 6d d3 41 dd 1f ed 88 da b6 51 33 9c c7 ff 79 14 2c 20 28 f8 3f ba 09 f0 d2 ff bf 6d cb f6 f5 d4 ca fd 0a e3 20 af 28 b8 19 08 0c bd f9 57 10 76 4f 0a 8c b9 f6 f3 c4 c1 1b c6 c5 6d 93 e5 a3 34 34 f8 c3 cb c2 2f f7 fc 2d Data Ascii: @4N_UANT/-Y\_jeD'pq1&u]Q{2\]BQvU:80-[PB?N[LCplA@yyp'1})L70Ua@mAQ3y, (?m (WvOm44/-
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 1a 59 63 55 68 9d 4a 65 2c c7 69 ac 0a 15 8e d3 a7 1e a7 8a cb f5 2b ea 50 d1 ab cb 0d 6d 42 af fa 77 f6 eb da ab dd 5e 7d 6f 7b b9 f9 ae 45 7f 9b da e4 f2 1d bd 94 aa 4d bb 91 da 44 9b da 74 de f7 da bc fe 8e 9f 7a b5 db a6 3b 7b e5 32 6b 9b 7e e7 36 5d 6e ee 8e e4 cb 2b 7a 75 77 a4 7f a7 6d 5e ea 74 e7 c3 53 af d0 ab de dc da 35 7d 6f 9b da 4b da 5f ea 6c b3 57 7a a5 5d 93 48 77 9e f7 de 1c ab de 3b c6 ed b1 2a 7e 38 bf aa 31 96 37 47 9d f5 de a1 e2 ed bf fe 91 8a cb f7 17 63 f9 f4 b1 a0 f5 b9 1b b7 fb b5 62 3b 96 8b 73 57 c3 59 f1 66 85 b1 1c 67 a5 84 e7 95 e7 95 8a cb ad fb d4 0a 3c f7 55 31 77 ad 9f a8 5c c2 b3 2e 59 74 0f 6b 0d 06 16 0e 8d b8 9f ef 64 70 28 2a 54 6c c7 a2 14 56 47 5c ec bd 6a 7c 4a 33 c6 ca e9 ce d4 a8 c7 bc ce 9d b1 5c 9e bf 92 5b Data Ascii: YcUhJe,i+PmBw^}o{EMDtz;{2k~6]n+zuwm^tS5}oK_lWz]Hw;~817Gcb;sWYfg<U1w\.Ytkdp(TlVG\j\|J3\[
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: ae a2 57 e8 b5 6b 37 f4 ea a8 94 3a 2b 08 15 2a 95 fa b9 ae 5a ed fc c4 15 e3 81 07 c6 7a 5e 31 96 8a c2 ea 62 d0 1c 7a c5 91 e5 d9 4f a8 08 a3 f7 e8 d9 2b dc 6f fb 85 12 db 71 8b 61 19 6b 63 dc 94 6d 3b 83 b1 e9 a7 71 36 8a 3b e5 a6 42 0c bf 84 17 ea fe 54 79 be 62 f6 a8 c7 82 15 a8 74 ca 52 cc 3c f9 a1 6a ec bc 64 c2 be 4c 3f ba 5c bf 6a 7e f8 7e dc 82 b9 df 75 53 4d 6d 72 72 f6 43 5c af 64 88 b7 4f 9a 31 ec 9d b1 54 8c 85 0a e6 ee cd f9 db 3f 42 73 c7 94 e2 9f 2b de 53 29 e1 8c dd 2e 95 5d c1 c9 f9 2f e7 57 44 ba 3b 72 87 f3 3e 0e d3 9d 97 db 28 46 ee c8 80 6c 13 da 1c 6d 92 6a af 97 49 ed 55 7f 2e 18 8f fb cb 4d af 8c 62 94 f1 f9 93 3b 8b fe 5d 83 32 68 7f 78 7f 2c 46 e9 f5 f2 89 d3 56 2e b7 f1 db 2b bd 3a ef bf ec af f2 5c 7b 6d af a1 9e 13 41 d1 4c Data Ascii: Wk7:+*Zz^1bzO+oqakcm;q6;BTybtR<jdL?\j~~uSMmrrC\dO1T?Bs+S).]/WD;r>(FlmjIU.Mb;]2hx,FV.+:\{mAL
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 2f db 95 a5 ae 48 0d f5 9e f7 fb f3 56 ee c2 72 a8 d8 b6 ee ed 1a a7 cb 15 b5 49 3b ab e7 0b 4a 11 8a ab 23 51 d4 32 79 3c 15 f4 b7 a9 57 2b da 44 7b 82 51 7c 9b fb 5e 7b a5 ef 31 20 e3 f2 2a d2 ee 28 d6 62 40 f9 36 c9 90 61 ff 45 4e d4 3e 4a ed f5 65 53 9e c5 c9 d6 eb e5 96 76 1f b7 9e 35 12 7d 79 16 92 c7 f5 ed 69 3b 7d fb ba 95 1f eb e7 5b df fa 77 9b be 9d 88 7c 98 68 53 31 dc 1f cb 68 2f 26 87 ab f5 dd b4 1b 19 65 a0 a0 47 9b 2a 5d 94 51 ec 86 dd 76 cd c5 f7 f6 0a ed 9e 17 15 f5 1b 8f a7 9b b1 6c 2b 17 4c 6d 3f 36 a1 39 c5 c5 b9 bb 58 59 5f 34 0b a2 a1 82 fb 6b ac 4a b5 dd 6f 72 37 f7 d2 c2 2a 33 1b ad ab fb d5 c5 b9 57 5c ae 28 db ef bd c2 82 bb cb 39 55 a2 d4 9c aa c9 5f 4d 23 14 87 52 71 71 2c 95 f6 11 37 31 2a f2 0f d6 cb ae 88 2f 42 95 ae bf 5f Data Ascii: /HVrI;J#Q2y<W+D{Q\|^{1 (b@6aEN>JeSv5}yi;}[w\|hS1h/&eG]Qvl+Lm?69XY_4kJor73W\(9U_M#Rqq,71/B_
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 36 ed e3 8e ee 6d fa 1d 2f 75 da 8d c3 a4 79 32 68 4f 76 b7 cf 1f 34 b3 a6 f3 7e c8 77 1f 22 a1 3d c5 ba 23 63 af ab fa c8 aa d7 f6 ba da 5d 97 a4 cd a1 8c 62 24 0f 4f 76 db 54 3b b5 a3 cd c3 1c 85 ed d4 7c 7a 7c 3e 6d a7 4d af 3e 1f 2b a7 51 71 1a 2a 4e e3 7e da 1e 9f 1f a5 ed b1 99 6d 42 9b 1a 53 64 b4 d9 66 19 05 a2 4d ba 8a df 7e 7e 1c 4a ed ed 76 de 7f 99 b4 59 86 32 16 77 86 cf 37 46 89 8c 5e fb f2 ed ab dd 80 b6 cc 51 7a 6d 93 5e b9 dc 7a fd ed e7 5e 45 f6 aa 5d f3 bc 3f ef cf 87 1b 2e 37 95 b9 db 56 2a 18 f5 f2 e6 b5 9e a8 b4 0e c7 79 9c 95 8a cb ed e3 bd 97 51 6e 55 e2 ee a6 6a da 8e 85 8a 6d c1 67 3f 8d 1f da 06 2a 78 f6 2c 73 67 2c a3 72 43 c6 1a 0b 4a 39 fe 86 0a 73 87 71 0b c6 2d 2e 8e 5b c6 62 a8 21 d7 54 f5 0c ca 4f ea ab af f6 8d 93 1d 45 Data Ascii: 6m/uy2hOv4~w"=#c]b$OvT;\|z\|>mM>+QqN~mBSdfM~~JvY2w7F^Qzm^z^E]?.7VyQnUjmg?*x,sg,rCJ9sq-.[b!TOE
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: bd 77 95 fb 0b 8e 53 3d 6e 81 b1 2a 78 5e 2b 2e de 5f cc 5d e4 60 df 9f 8c fd d2 58 30 77 54 15 b9 d3 55 bd b6 0f ee 4c 0c 89 3d 5f 7e 2e 43 da cd 71 7f 84 7d f7 ad fc 1c 7d 7f 99 95 36 93 41 7b 12 69 b7 fd fc db 07 55 af fa 3e 92 51 8c d2 e6 50 56 df db 9e 42 7b 8a bc ab cd ed 54 8d 5e b4 4f bd f6 36 ed cf ea c7 50 2f 79 eb d5 e3 d6 eb c7 a8 2f d7 d7 2d e3 34 14 db 69 fb 3c b7 93 ed b7 27 da 55 0a 6d da 6d 33 12 cb 1a 9f 6f 76 fb db 7c 78 7a 1c f5 f3 b4 79 f4 bb be d8 4f 8e 22 52 d8 7d dc fa 4f dd c3 ac bd 8c 25 3d 4c 68 d7 d2 66 5c 9e de f6 76 3b 2b 44 3e 4c a2 a0 bd ae 7a 3d 1f 6e bd fa de 2f 57 54 7c 72 09 6b 0f 3c 95 54 5c ac 8c e5 58 71 f9 fe b2 0d 47 9c fd 89 b8 58 8f 5b 98 3b 2a 67 b3 fd d6 b3 9a 9f 43 e5 f9 4a 3d 6e 81 23 4b c5 b8 e5 38 37 9e 9b Data Ascii: wS=nx^+._]`X0wTUL=_~.Cq}}6A{iU>QPVB{T^O6P/y/-4i<'Umm3ov\|xzyO"R}O%=Lhf\v;+D>Lz=n/WT\|rk<T\XqGX[;gCJ=n#K87
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 9d 56 3b 25 5a c7 dc 2b 54 c6 9a bb d2 fa 68 57 d4 af 12 8b 77 77 9e 0b c7 e9 cd 7a ac 3f fd e6 db 13 92 e7 73 a2 e6 28 dd 33 ac cb ea ee ac 23 db ec 95 8c d4 8e f6 1d eb 92 5b 19 4e 5b 7f ff d4 a6 36 ad ee 6c 9e c6 fd a7 cb d7 b1 8f be ef 55 af 8c a2 3f 97 5f de c4 6a b7 4d e4 f7 dc d9 cc e7 be ac cb 73 8f 7d 2f db e5 e6 b7 9f 7f fb 59 9b bd ea 2a be bc d2 ab 5e 4f a3 76 d5 23 5b 7a 74 f7 76 da 4e 91 b1 93 a1 cd 32 b0 68 26 7a b5 7b a6 6c a7 da 8d a5 4d bb 91 4b 9b 7c 79 15 f4 7a 22 20 28 46 11 7d 1f bd 8a 13 c2 ee 02 91 71 7f 2c e3 14 d4 1e 05 0f d3 fd f1 dd d4 26 2a 38 b2 8c 35 96 6d 59 19 2c 99 28 31 77 8e e5 fd 23 18 3f da 15 39 da 95 69 67 2d 5c b9 3b 38 4e a8 50 ef 1d 67 34 d4 c7 72 79 da c7 aa b8 58 84 ca 71 ce 5d a1 ee 9b 12 38 4e 15 b4 ae 1e ab Data Ascii: V;%Z+ThWwwz?s(3#[N[6lU?_jMs}/Y^Ov#[ztvN2h&z{lMK\|yz" (F}q,&85mY,(1w#?9ig-\;8NPg4ryXq]8N
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 8b 55 3d 6d 1f ab 15 ca b7 29 19 c5 d6 f7 97 db e5 b6 2e 6b 31 e0 f9 31 77 78 ff ff 57 75 95 8c c4 28 06 a4 7f 87 6d b6 e9 59 19 7a d1 3e 75 55 a7 6c e8 f5 f0 b7 a1 57 c8 e8 2a 5d ed 6a a7 18 75 a7 97 f0 5c 7a ec c7 a3 bb 23 a3 ac ef 66 9b 46 19 05 e7 36 ab 5e cf 65 14 68 53 64 a0 8c 65 5d d6 77 b3 57 67 65 28 02 6d b2 b8 33 e0 b1 ea 04 05 0f 53 af 44 e9 96 76 2c 63 41 28 f8 72 eb 6d 46 a1 e1 f3 b7 df 40 3d 56 51 95 81 d0 fd 9b db fa b8 dd 5f ef dd c5 76 ec 2a 94 c5 55 0c 4b a5 75 db ca 52 4b a1 a4 36 6f 57 7c fa dc c7 8d b6 4b d4 f2 2c a5 b8 1b aa d4 85 76 a1 2a 93 e7 15 c7 a9 7d 48 05 45 61 b1 36 f5 de 6d 4b a8 fb 95 54 c5 b6 3c 83 a2 68 85 83 4c af e3 86 ae e3 43 8d 74 67 7f 9b 6d 7e 7b b1 1a e4 28 3c f7 ea f2 ea fc 97 63 59 ed ae 90 d5 90 da 24 8d 32 Data Ascii: U=m).k11wxWu(mYz>uUlW]ju\z#fF6^ehSde]wWge(m3SDv,cA(rmF@=VQ_vUKuRK6oW\|K,v*}HEa6mKT<hLCtgm~{(<cY$2
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: e6 7a 7f 3d 1c bd 7f 6d 1f 0e d3 28 8c 36 53 a4 ef cf ed 84 a1 d8 3a d4 5e 3f 7f 10 ec e9 ef 3e d4 5e f5 8a b3 7d 17 7f f9 63 3e 94 0f f5 f1 db a4 76 c5 50 cb 8f 0a db 89 48 d1 26 da cc f0 bd 41 81 c8 b0 5b ce db c9 9d d5 f9 9e 49 b8 98 2c da 84 70 e7 d2 e6 e5 26 fa fd a7 53 a0 8c 77 c7 32 8a e8 95 d3 f6 88 a0 b4 ab dd 47 ed 6a b7 8c 28 a2 cd e2 5c fb 43 99 1e 66 9b 65 44 d1 a9 70 de 7f 49 35 ed f6 b7 7d 26 2a 73 f7 a9 d7 3b 82 bc 7e 2e 11 eb 77 94 9d 46 7d 59 52 63 05 0a 41 e5 d8 a9 89 b1 66 3e 1e 6b f3 76 7c ae ec 4e c4 2f 6b 51 65 6c 3c 76 1d 86 9d e3 74 af b5 d3 7e 59 a9 40 3d 70 98 4f 15 73 a7 82 b1 38 58 7a 24 a1 d5 d7 65 bb 63 f9 25 b9 c1 a1 79 d5 3a be 04 a3 7c 7b 42 32 ca b7 27 fb 76 2c 46 62 85 dc fa 76 f9 19 72 40 92 b6 d3 d6 f7 58 df 7d 80 c4 Data Ascii: z=m(6S:^?>^}c>vPH&A[I,p&Sw2Gj(\CfeDpI5}&*s;~.wF}YRcAf>kv\|N/kQel<vt~Y@=pOs8Xz$ec%y:\|{B2'v,Fbvr@X}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49867	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:32 UTC	1106	OUT	GET /7ychYovQPtJoIVWiH4osNrweQE-KEzVqry_PxYGqr9984sOjfaK9KZmeLBAfN6kvoO3WBcxECQM=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:32 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 43764 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:12:41 GMT Expires: Fri, 25 Oct 2024 21:12:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 5871 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:32 UTC	844	IN	Data Raw: 52 49 46 46 ec aa 00 00 57 45 42 50 56 50 38 4c df aa 00 00 2f 87 c2 5a 00 8d 38 6c db 46 92 a0 d8 d8 9b 41 f6 fa 2f 78 de dc 35 10 d1 ff 09 78 ff 18 01 fe 96 49 ac 7d 5a 41 4d 2c 1e 0f 71 b8 27 49 48 c9 63 03 76 4d ef e2 63 37 80 7b 31 ed 91 b4 8c 81 a2 88 cc 8c 49 d4 b4 d6 5a f6 de 27 bd 84 16 6f 66 d7 6f 24 df c5 fe 05 22 33 22 6a ec c9 9b 99 7d 22 dd f3 10 c9 4c 75 cc a2 84 d1 20 00 dd 13 4b cf 46 5f d1 ea 71 6c e0 33 b1 7e 06 ad b0 0f b4 03 2d 3b bb f6 16 e7 da 81 2c b9 f9 4e e4 d8 b6 ad 5a d1 c4 dd dd 6f 88 bb 43 f3 69 03 83 f0 40 69 e4 ee 72 2f ef df 5f 2d 80 a5 da 76 eb 66 db 4e fb f4 00 52 34 fe 7c 85 8c a0 f7 de 7b 72 11 42 08 f1 ca 45 b8 5c 57 20 47 92 a4 48 72 21 56 80 d6 5f 92 7d e2 31 c5 31 33 73 ff 27 20 08 2a 52 df 46 08 a8 68 23 d4 5a 52 Data Ascii: RIFFWEBPVP8L/Z8lFA/x5xI}ZAM,q'IHcvMc7{1IZ'ofo$"3"j}"Lu KF_ql3~-;,NZoCi@ir/_-vfNR4\|{rBE\W GHr!V_}113s' *RFh#ZR
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: ee d2 51 b8 3b 14 2e 85 c3 4a e2 52 6c 22 77 2e 8d bb 5b c7 ba bb 55 e0 50 e8 15 7d 83 4c 74 0c ee 4e c7 da 1d b6 ee 42 78 e0 ff ff 7c 9b ed ff 9e ef f7 07 51 93 36 8b d3 65 4d 3d 7b 3b ec 63 3a dc ed b0 6d db a7 6d db b6 cf f3 b0 31 f3 18 da ee dc da 45 65 f0 49 f2 c9 07 6f 58 c0 fe ff 90 dd ea f3 fb fd 67 66 f7 ac 62 55 69 9f 53 05 b5 6d db b6 6d db b6 79 6f 9a 2a b8 76 9d da 8a 93 93 d4 27 f7 34 87 eb dd 99 f9 ff 62 02 78 bd ff b7 5a 92 25 e7 79 9e b5 f6 8e 88 c4 a2 e6 1e 33 33 de da af c0 6f c0 97 be f6 25 de fa 3d f8 55 f8 4d 30 5d 31 33 db 07 aa 2a 4f 25 44 46 ec bd d7 f3 5c 64 d6 e9 f6 68 87 e9 ea a7 a3 34 96 c2 90 65 28 b9 a1 14 86 94 55 d2 f9 1b c2 d0 f0 37 34 1e a5 b1 d4 4a ab 71 49 a5 32 fb 31 a4 79 99 a1 a4 30 95 a1 d4 ae 9b a5 d6 f0 cc 32 e4 Data Ascii: Q;.JRl"w.[UP}LtNBx\|Q6eM={;c:mm1EeIoXgfbUiSmmyov'4bxZ%y33o%=UM0]13O%DF\dh4e(U74JqI21y02
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: ae 04 96 fc d9 ca 7c 4f 08 a5 31 a8 c9 9d 49 6b 46 ee ad fe dd 54 fb 77 9d 30 cf b1 76 5a eb c2 34 63 dd c3 be 9e e0 c7 f3 d1 2d af 07 06 3f a6 22 8d 71 4d 4e 29 ad 7a 69 66 f5 17 d7 41 b5 c8 22 9c a2 ae 4b f3 9e a0 5e 0b dd 45 74 cb 4c 2b f3 7e 91 b6 c1 da 35 d6 ad fa ef 55 d5 df d9 40 d4 4b 2c 6c ad 75 59 40 82 2d 98 51 0b 5c 4b f4 ea f7 ad de 99 34 36 6a a7 bc 5b e5 9f 4e 8d ff 76 0a 36 3a 58 88 d6 3a 2b 60 03 cd b6 b5 ae 19 bb e5 ab e0 e2 97 8a 34 96 6a 3b 7f 50 e5 9f 8e af f9 cd 24 24 11 0b 59 dd 14 b0 4d ec 18 b0 4e 19 88 dd fc 46 70 c9 eb 54 a4 b1 57 db b9 9d 2b 7e 73 41 fc 99 49 d8 70 cd 75 4f 3e 1c 73 b5 c0 ed 44 ef fd 4f 70 c9 34 2a d2 d8 ad ed f1 cd 42 9f fd 0c 26 3d 36 5d 73 dd 12 70 0c 0b 55 6b 33 91 9b 3e 0b 2e 9e 41 45 1a fb cd ae cf a2 5b Data Ascii: \|O1IkFTw0vZ4c-?"qMN)zifA"K^EtL+~5U@K,luY@-Q\K46j[Nv6:X:+`4j;P$$YMNFpTW+~sAIpuO>sDOp4*B&=6]spUk3>.AE[
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 75 2d 40 57 7f f0 a0 d8 15 82 26 9e 0f 0b 58 e2 a5 35 ed c2 d1 54 1b 14 2d 5f f5 e7 2d 59 c6 79 3d ad c8 b2 95 7f 3d 46 d7 0a 74 7c c7 1d ee 9b d9 59 1e cf 8b d6 fc 6a a2 5d 38 9e 6a 87 c2 5a b3 f2 57 db b3 ac f3 76 5a 51 e9 a8 fc e7 d1 ba 96 a0 ab b7 9e e3 ee 28 82 86 a7 c3 da 2d fe e0 be ce e4 2e 54 5b f4 2b 5f dc 8c cd 55 4f 07 56 49 e5 df ae d7 b5 06 5d bd f5 36 61 96 4e e1 e5 54 df bb b3 33 d5 49 b5 47 94 52 f1 d5 75 59 22 eb e1 a0 61 e5 3f 9d ae 6b 11 ba ea bd 3b 45 ce 7d 9a 67 d3 ce 68 62 e7 0e a7 da a4 70 ac ea 77 93 59 34 e3 d9 dc 59 f0 8a 5e 5d ab d0 f1 5d d7 bb 6f 36 41 57 8f a6 9d 79 5b d1 6b ff 47 b5 4b 61 07 55 7f da 98 f5 e6 3c 1a ac f9 e0 75 15 2b 3d 43 5e 45 51 a0 80 9c 45 99 44 92 d2 28 08 87 66 34 dc 02 f0 08 c2 76 a7 e3 bb ae 72 5e c3 Data Ascii: u-@W&X5T-_-Yy==Ft\|Yj]8jZWvZQ(-.T[+_UOVI]6aNT3IGRuY"a?k;E}ghbpwY4Y^]]o6AWy[kGKaU<u+=C^EQED(f4vr^
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 98 b0 f1 a0 93 55 9d 2c ca 97 41 1a e6 05 0d 5c 17 77 69 b3 b1 14 4a 2f d5 9a 51 83 76 30 80 3c 3d b1 42 5a 85 64 02 c8 02 42 d0 fb 37 f5 52 76 7a 26 09 4d 50 e5 12 bb d6 d3 41 06 8d b7 fe c2 3d c3 c2 5c 53 49 4b 56 38 01 e1 af db 5e 7c d1 2a 81 ab 05 0f 04 88 a2 45 86 e4 f8 35 8f 3d 88 ce 59 97 47 64 a4 86 17 18 76 46 53 3a 23 02 cb ac fd b7 f2 1d 4d e9 26 69 42 3b 73 5f d1 d0 fd f4 9e fb 56 dd 9a b2 4a 56 d2 b0 aa 72 97 18 c8 a4 05 2c 21 67 58 51 a2 cc 7b a5 4c a9 bd 67 71 69 b9 da 98 40 29 f2 e8 82 52 96 86 8a 9e 75 3d 86 ed 84 f4 7d 83 19 34 78 1e 19 70 3d d3 94 e4 58 d4 b2 a4 74 f0 84 c1 f0 be 68 dd 00 2d 77 d9 58 5a ae 9a 76 3b 7d ec 25 9d 7d b7 aa 87 5a ce df db 32 67 4e 92 e7 a6 b1 15 fa 86 9c 44 41 d9 52 7e 7b 24 b9 18 9c bf 59 08 32 d0 89 d7 a3 Data Ascii: U,A\wiJ/Qv0<=BZdB7Rvz&MPA=\SIKV8^\|*E5=YGdvFS:#M&iB;s_VJVr,!gXQ{Lgqi@)Ru=}4xp=Xth-wXZv;}%}Z2gNDAR~{$Y2
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 46 f1 ed 9a ee a8 3b 09 98 b4 26 14 49 1e 08 26 c4 86 ee 9d d4 fc ee 7a ed 1e 68 33 c4 7c c6 42 96 f1 10 1a 98 07 92 65 f9 cc c9 6e 21 5d d4 a5 d6 c6 26 9a d4 f0 e2 32 ef 3f 23 90 a3 aa 12 18 85 1c 17 dc 89 d9 56 56 e8 3f 8f 4b 92 44 81 d5 2c 91 3d 8c 38 f5 51 c3 9a 2a f9 d6 64 ab 06 91 08 c9 a2 c8 99 cc 89 8d 72 76 6b 5d 2b 48 00 62 66 20 34 20 b8 48 57 6a 8e dc c3 b9 91 6b 3e a6 6e a8 48 8a b3 53 66 d3 0d 39 14 45 9b a1 87 3b 8c 67 00 04 90 7a 1a 84 48 63 6b f8 37 3d 24 4a b7 98 c9 bc d9 32 ed f6 e9 89 a4 01 10 84 10 61 6e 93 90 59 52 e1 c3 ed ec 6c ac 04 5b 1f 5b d2 65 1e c5 95 81 8f a6 a5 17 d9 a7 65 d0 ab c8 a4 59 c1 a9 84 24 4a d1 39 27 29 ce e3 85 4a 82 65 a6 88 62 0c 23 c4 34 bc 90 7d b9 c4 a0 a7 f3 a0 c8 6c 3f 28 bd 3c 59 11 fd bf 36 ca d0 66 08 Data Ascii: F;&I&zh3\|Ben!]&2?#VV?KD,=8Q*drvk]+Hbf 4 HWjk>nHSf9E;gzHck7=$J2anYRl[[eeY$J9')Jeb#4}l?(<Y6f
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 0e 3b d6 ad 6e 77 72 3c af c2 94 60 d0 76 19 51 12 13 67 c0 c2 30 0e a5 c8 74 96 35 1b 2d f6 ca 52 c6 71 19 47 e3 e5 38 09 2b 8a e1 72 61 9e 82 73 e0 0a 60 a1 19 a4 41 61 c1 b8 2f 90 57 da 29 f7 5b ed bd 8a 2b 32 5d 51 15 01 9e 08 bc 0c 68 a1 fd e8 9a 7d 27 b8 2f 17 41 47 d1 01 87 87 9a d1 f5 6f c8 24 6c ce b9 a8 48 21 4a 11 e7 97 7c dd de fe 6e 7b e5 1c d3 e6 66 4f 14 32 62 a3 6f 61 91 60 87 1c d0 b0 88 90 82 93 18 49 1c 81 3a b1 8b d9 25 61 87 55 60 96 c5 d8 e6 11 2f 1e 89 36 b7 72 61 81 05 42 82 d5 34 69 d5 65 50 04 e4 85 d0 c0 15 33 3a 9a f7 19 0e fa e7 bf fd 1f 56 b9 48 5b 3c 51 ce 5a ea e5 4c 61 ac 8e b4 1f 42 46 f5 9f 77 64 fd aa e8 b0 12 87 1f c5 fe d3 87 32 79 e0 3b f8 e0 52 a7 2d 0a 5b ed a4 2f 7e a8 61 bc ca 11 2e b9 88 16 fb 12 07 0c ea ee b0 Data Ascii: ;nwr<`vQg0t5-RqG8+ras`Aa/W)[+2]Qh}'/AGo$lH!J\|n{fO2boa`I:%aU`/6raB4ieP3:VH[<QZLaBFwd2y;R-[/~a.
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 18 64 96 73 e4 69 b6 43 19 ce 52 56 2d 3f 7f fd 31 1f bb dc 8e 8a d6 ca 3a cc d4 95 1b d4 cc 5a bc 52 2e e1 75 f3 c7 03 c6 fa c7 9b 89 5e aa 64 88 ca 32 ea 25 b2 48 b2 93 95 40 50 d4 24 49 4c a1 8d 61 01 66 ee b0 4b 12 44 b1 8d 98 98 00 0b ce 2b 1c d6 80 73 71 07 22 c6 aa 56 96 bd 5e bf cf 59 ef 04 83 00 a6 0a 44 9c c1 a2 ca 97 b6 59 d0 34 6b d6 48 5f 4e 88 fb 3d ba 5b cd d0 8e c8 88 fd c0 bb 7c bb 62 6b 66 d1 aa 11 5b 88 40 2a b8 b0 b4 a4 01 f9 c7 33 41 a5 ad ce 89 2d 99 65 10 84 91 a8 49 1c 97 00 ec 07 24 36 8e c0 9c 70 04 02 92 38 ae d8 26 19 08 00 e3 b0 36 ab 80 dc e6 eb ae 47 65 65 8a fe 30 ef 95 5b d5 a0 8c ce 82 38 4d 90 67 36 03 20 09 a9 81 a5 09 f3 3f a1 cd 4b 1a b2 f9 25 77 b3 af 76 87 ed 88 79 ff ce 07 02 e0 28 b6 77 e1 99 06 f3 7c 46 32 1d 86 Data Ascii: dsiCRV-?1:ZR.u^d2%H@P$ILafKD+sq"V^YDY4kH_N=[\|bkf[@*3A-eI$6p8&6Gee0[8Mg6 ?K%wvy(w\|F2
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 4c 45 b1 01 35 2c 66 84 b3 bf 54 0c 98 f6 94 01 e8 b6 bc c9 61 14 09 c9 0a ac 20 49 44 b1 54 05 32 73 87 a3 48 a8 79 37 7a 99 dd 96 3d ae 34 5c 2d 7f 85 ed 70 57 17 b9 81 b3 9f c3 a3 49 dc 49 7f fa d7 d2 48 42 13 44 04 72 b8 9d ea 34 41 f7 cc 8a 06 d4 e5 89 ff d3 86 43 cd 33 70 00 be 96 2f 0e fa fb ef 4d ff da 99 10 92 8c a5 2b 21 8a 9c 94 12 39 41 4c f6 78 cc 6b cc 40 9c e7 18 0e 06 64 26 c5 b8 1d a1 65 58 04 34 51 6d a2 98 17 d6 46 52 b1 7a 0e af 92 00 b0 4d 6f 5c 12 93 8d a4 e0 98 39 89 c8 b9 c4 ae 29 c5 2a 24 e6 7c 7d d2 34 6b 6b 50 e3 ac 79 0f fb 3c 26 36 9c bd c0 c3 1a 4d c8 ba 42 8f bd 8c 91 9a 06 42 50 e2 29 4a ae 7a 34 be 38 cd 1f 30 c3 5f 50 6a bd 08 dd d7 d6 e6 40 5d 69 58 ff 13 63 23 88 17 8e 5a 30 84 64 0a 0b 62 ce 9f cf 20 8e 34 14 0e 71 d5 Data Ascii: LE5,fTa IDT2sHy7z=4\-pWIIHBDr4AC3p/M+!9ALxk@d&eX4QmFRzMo\9)*$\|}4kkPy<&6MBBP)Jz480_Pj@]iXc#Z0db 4q
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 2b f7 64 c4 24 19 88 66 65 1c 01 14 db 74 46 f7 2d 92 0d 29 4e 87 23 c3 f6 78 30 d9 96 9c e1 11 5f a5 e0 5a c5 a1 51 a2 8e 54 4c b5 de 46 85 a6 5d 81 44 35 1f 6c f7 22 56 0f c9 10 45 85 28 33 11 04 54 22 cb bc 6a 65 92 b1 94 f4 69 74 1c 8b 18 92 48 e3 a8 de 61 6f d8 d5 ee 24 ca 52 14 05 68 ab e7 7a 7d 4a d1 81 85 01 86 b0 08 45 f3 a7 24 02 b0 55 6c 9d dc d9 9d 19 5f 28 79 1c 95 a2 12 b5 92 aa a2 44 b4 45 5b 12 dd 56 19 8d 81 fe 2b 0a 7d ff 6c 55 cf 9a 1b 56 7e 68 56 eb e1 8e 2d b4 63 60 a1 56 70 c4 92 e2 e4 b7 90 4a f9 87 7c e4 c5 53 e3 23 e3 96 f5 0e 9f f2 53 cf a0 ac d1 05 a5 94 52 48 1c f5 56 45 62 2a 9c 5f 69 64 15 e3 e8 88 2c 39 7a ce 41 65 d2 28 6a e8 bf 4b 2e b4 3e 22 d6 ca 31 f4 fa 18 f0 80 f3 b8 53 ad 1b b4 00 b8 1c 53 ef 59 0d 27 cf 51 99 3b 8b Data Ascii: +d$fetF-)N#x0_ZQTLF]D5l"VE(3T"jeitHao$Rhz}JE$Ul_(yDE[V+}lUV~hV-c`VpJ\|S#SRHVEb*_id,9zAe(jK.>"1SSY'Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49868	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:32 UTC	1107	OUT	GET /NetAUUeOatNbtzGAvZfgrxVvUajTyf2G3BRpTJMZ1Hnaxa_wcBscJO4eGrp-LvJOIgaGBz_IHteN=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:32 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 48942 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:12:41 GMT Expires: Fri, 25 Oct 2024 21:12:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 5871 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:32 UTC	844	IN	Data Raw: 52 49 46 46 26 bf 00 00 57 45 42 50 56 50 38 4c 19 bf 00 00 2f 87 c2 5a 00 11 88 6d db 08 92 20 27 f6 dc 25 f7 fd 17 bc 73 f7 2d 44 f4 7f 02 40 b6 d3 ad ac ed dd 0d 50 55 ab eb 9e a4 bb 37 ac c6 b6 94 d8 76 55 15 4f f9 b2 b2 9d 57 2b 28 d8 5e 29 40 55 95 2e eb a4 a5 7d c5 b6 d4 4d 67 6c bf 25 f1 d4 6d 65 3b 2d 05 db 2b 01 c1 54 a9 be 38 e9 47 6c 4b 89 6d d7 e5 2e 5f 6a 77 01 96 c7 4a 01 aa 54 a2 f4 25 11 ef aa aa 07 b4 ed 92 c4 f3 cf e7 17 27 ad e7 8d a5 4a 75 93 8f 9c 06 56 b1 ad e7 a7 a1 2f 20 5f f6 62 d2 6c b0 bd 92 f8 34 9f ae 6f 49 3f 12 d9 b6 48 ce d8 ef 07 05 75 b3 6c a7 51 48 62 7b a1 33 53 f5 28 28 0a 04 52 32 73 20 13 3f 97 af 0f 8a ae 47 a3 c4 f6 42 43 62 57 c1 eb 97 a6 1e 2b 88 6d bf 79 86 6b e9 97 af bb a2 63 57 51 82 bf cb df a6 01 fd e3 2d Data Ascii: RIFF&WEBPVP8L/Zm '%s-D@PU7vUOW+(^)@U.}Mgl%me;-+T8GlKm._jwJT%'JuV/ _bl4oI?HulQHb{3S((R2s ?GBCbW+mykcWQ-
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: e8 09 30 38 1c 17 18 07 26 63 03 d9 c9 0e 40 d2 54 b4 43 8c 01 80 1c 54 8e ce ac 36 de 7e d7 f2 a6 14 00 05 f4 60 1d 80 9f 26 f7 f4 62 76 ae 5a 18 b4 6d 23 28 c9 9e 3f e9 db dd 53 88 88 09 40 ab 01 b5 52 a9 80 61 2f 01 f9 96 c0 4e 1e 5d b4 12 e8 73 ac 54 2a c0 4b 0a a0 95 e2 67 a7 ff a9 04 db fc be 8f 4a 90 3d 01 d4 6a c6 69 3b 39 5d d3 8a da 00 4a 40 90 2d f9 e9 6c fb f8 8d 27 54 e2 7b 00 ee 65 02 a8 15 e7 77 e5 9c 05 8b ca 9b c0 f7 23 05 74 d2 4a b1 17 9e 6a 80 dc 66 e6 90 6d 07 d4 6a 86 29 db 06 59 7b a2 05 b8 c0 f0 7a 09 98 2a d5 8a 00 dc 97 6b 81 95 30 2a bb 72 fa 8a 67 9c c7 4e e5 c2 5d 79 54 90 d3 a9 84 c9 72 39 dd a9 26 3d dc ac 52 1f 38 b5 15 98 aa 01 0c c0 9d 6a 80 b9 04 1e 2a bb 72 3a d5 d0 f4 80 05 78 ad 3c ac 02 2e 3e 73 3a d5 d0 74 39 f5 68 Data Ascii: 08&c@TCT6~`&bvZm#(?S@Ra/N]sTKgJ=ji;9]J@-l'T{ew#tJjfmj)Y{zk0rgN]yTr9&=R8jr:x<.>s:t9h
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 25 d9 33 6a 18 7d 4a 7b ee 97 10 0a e1 cd 1d 7f a7 37 c7 0d 7b a4 f5 af a6 5e b0 7e 6e f3 e9 4a 8a 21 02 25 0c 10 cb f0 50 0f f7 fb f6 1f 15 44 e3 78 d1 fd ab 43 16 81 51 1b cd d0 18 06 0b a9 e1 32 9f e4 44 d4 f1 b1 27 82 08 65 b4 6b 7b 7d 60 5e 74 99 c2 09 6c 2f 35 4c 01 04 84 63 05 0d cb 71 7a 52 93 85 28 4f f9 db 4b 76 af 20 90 a2 8f 08 15 9c 9e 4e 3f a5 e8 36 cb ce fb 3c a5 6f 9f 37 5a 21 92 69 9f f6 85 de 17 0b 4e f4 df f8 f5 f4 df fa f7 d3 d7 ed 9a e6 64 a6 3b 7c fe f6 f8 d8 97 81 e8 3d 60 f7 81 3c 55 c1 e4 2c 15 b5 f2 3e c6 0d d6 26 35 0c 0d 1a 14 82 65 0e f7 b3 f2 86 e3 a5 e4 76 ed f2 e7 4d 8c 11 49 a0 14 00 25 74 a8 fb dd db eb 8a 3a 8c 2b b7 57 3b 2f 1f 26 64 19 18 56 c6 46 07 1a e3 b0 90 1a 36 d3 1b 41 11 25 88 d4 1d 32 98 da 61 1c 6a 20 20 40 Data Ascii: %3j}J{7{^~nJ!%PDxCQ2D'ek{}`^tl/5LcqzR(OKv N?6<o7Z!iNd;\|=`<U,>&5evMI%t:+W;/&dVF6A%2aj @
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 52 a8 40 a6 8a b2 dc 11 d9 de 29 bb ab 32 a6 bb 7f 9e 77 90 84 01 32 e8 80 89 fa c2 10 20 03 cc f7 31 83 a0 38 2b 68 0c 33 b7 85 75 af 63 1f 10 4a 52 99 be cb d7 67 fd 0b 67 fb a9 dd e2 29 95 8c 14 51 41 fe a7 5f ad cf 57 9f b7 7c 6b 63 7d f0 dd fc fb 7e f6 b4 9f fe 12 1e c7 31 10 d3 db 55 87 96 71 57 2d cf 21 50 a2 42 c5 78 c1 9a f6 d9 a3 ae 14 c6 d0 b5 13 f8 1f 98 c9 33 13 41 ce 10 2c 81 9f 91 07 20 67 cd 59 df 07 3d b5 d1 98 15 ea 18 2c 73 47 51 82 98 15 8a 0a 02 31 0f df 72 f4 c6 1c 98 e7 29 55 66 66 20 73 83 0e 86 a8 2b ac 8c 0d 90 01 18 61 bf 21 14 1e 84 c6 30 2e 41 0c d7 87 9c 40 80 92 d4 84 ac a0 e9 c3 b2 bf 36 eb bf fa a9 cd 12 e2 d8 50 71 ec f5 fb ff d1 7f 69 3d c3 cd 77 f5 09 78 79 f8 f3 5f a3 ff cc db 5a ab 43 6c 15 65 2d 88 94 10 89 12 8d 57 Data Ascii: R@)2w2 18+h3ucJRgg)QA_W\|kc}~1UqW-!PBx3A, gY=,sGQ1r)Uff s+a!0.A@6Pqi=wxy_ZCle-W
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 1d 0a c1 62 46 a1 02 20 fa 8a 65 95 92 57 ee ef d7 bb 53 e8 f2 8f 77 84 90 8a b4 df cf 6c f9 9d 28 e3 0d a3 18 7d 0d dc 33 1a c1 8d b2 89 d2 7e 12 47 8a 0a 9c 34 28 2c 02 29 54 cc f7 6c 44 1d 17 33 e7 82 4d ed 8d 9b 89 35 02 3b 1b a0 1e 34 e6 0e a2 10 17 61 19 87 86 28 f4 fe 40 46 bd 13 1a 2c c3 73 77 db b8 69 32 14 d8 2a f3 79 97 8f 36 2e 07 4b 06 02 10 20 ed db 4f 97 5b c3 ea 41 0d 50 78 a9 71 54 cc f7 33 14 82 c6 dc 51 68 20 1c 26 30 b2 b2 b1 f7 78 ff 92 bb 53 c7 ef c1 34 58 b1 a9 ae 5a 84 7e e7 ec ad 59 ef 0b 4e 30 04 37 91 a1 01 f7 be 22 c8 42 40 03 99 bb a1 8e 0b 81 05 15 bc 0f 84 42 70 ea 3d 0a 2c 6f 75 3a 66 f8 ed f1 98 11 60 e1 24 14 e6 fa aa a2 62 98 a9 41 d4 f1 24 23 45 4a 90 c2 24 25 bd c9 34 16 18 7b a0 77 17 de bf 70 0c 01 08 43 f4 57 8f ee Data Ascii: bF eWSwl(}3~G4(,)TlD3M5;4a(@F,swi2*y6.K O[APxqT3Qh &0xS4XZ~YN07"B@Bp=,ou:f`$bA$#EJ$%4{wpCW
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 47 cb bd f9 2d 6a 9c 0c 8d ba ff 95 7c fd ac ac 7b a1 a1 33 10 85 94 19 8d 71 68 90 42 ef 8f 3d cb 52 10 91 d5 eb c5 14 8f 7f d9 fb bd 67 1d 71 05 89 c2 32 05 31 8e 0a 16 73 9b c2 1a 14 e6 b2 03 f7 6f ec f8 33 8a 6c 2a 75 dc 9c 67 07 01 32 00 43 60 a1 94 36 3a 81 4f 03 a6 9c fc c9 37 29 8f 82 7f e2 15 d8 a8 02 76 89 02 89 86 d4 b1 82 d3 be 04 c5 0b 82 60 39 16 e4 3c 1d 40 60 d4 2e 8c 49 c7 08 6a ee 55 c5 8b 48 45 f4 77 40 42 6e e0 8a 42 a1 d7 3b 17 bd dc 46 fc e4 6f 7d 6d fa 1f a3 42 cd 10 14 d6 7d 06 cb 38 34 58 8e d7 ce 14 10 b1 84 20 f5 ce aa 31 fe f8 57 5e b7 be 3a ed 07 a2 d0 13 21 28 a2 42 0a 7b 0b eb 4e 28 ce db 22 84 0f 7f f1 5b cd 1f 0a 4d e7 36 dc 47 22 44 00 03 64 80 84 52 ca f0 b7 b7 78 9e 2a 4c c7 bc f1 63 62 44 cd 12 34 fb ca 46 b4 6f c0 8d Data Ascii: G-j\|{3qhB=Rgq21so3lug2C`6:O7)v`9<@`.IjUHEw@BnB;Fo}mB}84X 1W^:!(B{N("[M6G"DdRxLcbD4Fo
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 44 44 53 0d 64 ad 0e 35 56 2c 52 c3 93 14 52 38 4b 20 28 a1 01 34 da d9 69 97 ac 1e 59 6b 29 db 4e 57 ca 08 2c 58 e6 f6 e6 68 08 30 81 09 34 3b 46 1c 60 7e 1e 33 f9 f4 d3 1b 57 ce 23 44 02 61 94 b2 b7 90 37 20 2d 56 f5 b6 f3 8d 63 80 09 10 40 74 2c 29 41 28 ac b9 67 b6 e5 d5 68 90 18 23 60 cf 6c c4 56 53 83 8a fe 20 09 e9 5c ff 44 5f c4 b2 89 1e fb 80 99 a8 0d 44 cd c1 db f3 e4 c2 70 58 59 21 56 59 8a 17 dc be 34 32 16 4b 88 5a 61 41 1c 9b 49 10 8a 4c 0d 8d 57 4f 4c 20 e8 dc 90 4d 39 7c d3 f6 6e e4 4b c3 b9 4f 16 82 9a 29 81 28 44 c5 f1 e4 f4 83 3a b2 fa 96 6c 0d ce c4 a7 3e 66 eb 58 79 45 1a 81 22 25 86 05 19 08 43 d4 f7 cf e7 89 ef 61 9c d4 33 d9 74 a3 a6 a2 00 29 a6 d2 fb 7b 4d ea 8a 6e 94 bf c8 f3 6e 9f 1d b2 21 02 08 90 81 92 3e 47 65 54 58 ec d0 18 Data Ascii: DDSd5V,RR8K (4iYk)NW,Xh04;F`~3W#Da7 -Vc@t,)A(gh#`lVS \D_DpXY!VY42KZaAILWOL M9\|nKO)(D:l>fXyE"%Ca3t){Mnn!>GeTX
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 4f 03 02 03 a4 f3 6d d2 38 e6 96 1e a2 8e cd dc 42 d4 31 fd 78 a2 2f 62 54 c5 b0 29 44 76 b5 ac ee db b7 e0 a2 c5 ea 50 81 8c ba d1 c1 8a 43 14 b2 9b 5b 34 c6 99 16 ac bb e3 63 6f 71 00 03 51 65 be 67 33 18 a7 c6 77 37 df 2b f3 cf 66 5f 70 52 12 78 3f 2b 13 da 69 15 4e 25 82 a8 18 56 10 71 32 ea 0b 0c b9 81 f3 40 00 10 d2 19 d3 1d b2 a1 57 27 03 ee 58 1b 05 90 84 bc f7 c3 85 7f 20 d1 87 f3 c1 6c 3e 5f 16 06 c4 bc bf 45 e3 b7 d9 20 75 6c e6 0e 87 3a 9e 8d 9c b0 08 76 94 a9 dd e7 80 21 b8 03 da 72 90 61 34 90 c2 32 b7 20 14 99 15 2c e3 98 0b 51 c7 07 82 50 86 84 65 6f 86 68 67 bb bb b6 17 5d 20 46 e8 27 e4 da 18 a5 65 b0 66 45 ac 35 ae 60 4d 9e 94 57 53 42 85 42 f0 18 e0 18 1e 6d f7 ca e3 fd 6a 77 aa 71 a8 e1 0d 24 49 1d fb ac fd fa b3 fb f5 e7 f0 83 57 88 Data Ascii: Om8B1x/bT)DvPC[4coqQeg3w7+f_pRx?+iN%Vq2@W'X l>_E ul:v!ra42 ,QPeohg] F'efE5`MWSBBmjwq$IW
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 20 49 7d de 15 d4 4c b8 7e 33 fc af 45 11 9d 61 79 35 b3 42 ea f8 f8 ea 22 08 85 d0 b0 30 9f c4 0e 16 81 d9 90 31 99 a1 db c6 ac 9d 43 53 56 a6 52 0c 7d 30 8b 80 24 66 b7 db 6d 0e 53 d1 ac 8e 50 06 07 63 5f 66 57 6c 08 97 a0 08 2c 53 14 15 c8 dc 16 75 8c 80 00 22 b5 26 b3 72 b1 67 c8 ea fe c3 19 92 cd 60 19 07 13 c8 a8 35 b7 e2 c8 2d 87 62 ae 7b 05 cb f8 dc 16 a2 f0 d8 a6 74 10 40 51 cd 48 b3 fd 57 7f 3e 2e 99 15 96 57 33 1b 44 1d 17 31 2a 44 83 65 1c 2c 84 e2 4a e8 3e 39 6d ec 67 73 d1 d8 eb 62 fd 3e 20 01 02 bc f7 27 6f 57 9b cf af 39 e9 9d d9 91 1c 86 7f d0 ea 41 2c 5c 05 c3 20 72 7d 15 ea 18 2c e6 5b a1 04 99 bb 41 61 01 02 19 80 81 48 49 98 85 86 31 24 df 7b 38 da 09 73 1a e3 d0 40 18 b5 11 9c 40 28 e4 3d c1 32 8c 69 21 35 7c 20 10 18 b0 f0 1e 77 9b Data Ascii: I}L~3Eay5B"01CSVR}0$fmSPc_fWl,Su"&rg`5-b{t@QHW>.W3D1*De,J>9mgsb> 'oW9A,\ r},[AaHI1${8s@@(=2i!5\| w
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: a9 31 4c b2 7d 56 b4 5d 8f 77 e6 df fa e4 7b 13 84 82 4d 09 8d e1 b9 ed 20 0a 6b 22 08 8a f4 1e 03 73 13 48 65 2f 3c a4 68 de 72 fa 9b 0b 08 50 a2 82 05 73 cf 37 96 bb a0 66 ef 8b 20 c0 40 82 a5 2f 38 6f 7f 16 36 2c 55 63 98 a1 8e 0d 22 38 04 60 9c 1c 42 7b 8f a3 6b b2 67 f3 82 d1 6a 4b c8 40 e0 67 b6 e2 b5 46 33 97 8a 22 25 41 ce 04 60 00 0b c1 72 2c e7 be f6 09 51 58 8e 53 63 98 60 88 f6 33 3f 5a 0f c2 8f 3d 6d 96 ca f2 a6 04 cb ab 61 91 de 0b cd 24 23 25 34 58 c6 c1 02 2a c3 6b 9a 19 c8 37 ff 9a 02 4b 08 0b 29 e6 0e 84 50 e6 ce 85 0c 14 24 b3 68 d5 64 42 66 b4 bd ba 75 37 31 2a f2 14 7b 53 34 b0 dc 80 0e b5 06 22 56 aa 91 07 b7 95 ce e5 7c 88 1b 46 57 22 05 c4 54 28 01 3b 54 55 34 62 f1 4a ea d8 58 cb f9 0e 60 00 11 04 a9 63 73 8b f7 6f 9b a0 10 64 36 Data Ascii: 1L}V]w{M k"sHe/<hrPs7f @/8o6,Uc"8`B{kgjK@gF3"%A`r,QXSc`3?Z=ma$#%4Xk7K)P$hdBfu71{S4"V\|FW"T(;TU4bJX`csod6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49869	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:32 UTC	1098	OUT	GET /fqEcPOtm9aSOTmCcH5ebeKerdIz8x5oo-cAi9HTlRBAsg-TEwlf3UQpplmbywU4k6uM=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:32 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 47924 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:42:29 GMT Expires: Fri, 25 Oct 2024 21:42:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 4083 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:32 UTC	844	IN	Data Raw: 52 49 46 46 2c bb 00 00 57 45 42 50 56 50 38 20 20 bb 00 00 f0 08 02 9d 01 2a 88 02 6c 01 3e 51 24 8e 45 a3 a2 21 22 a7 f8 8a b8 70 0a 09 65 69 eb e3 6f 36 b9 a6 b6 0e 8e ee 5f 6b 86 95 b7 fe 3e 46 7e ab e8 1f f9 a7 f8 4e bb 3f dd 2f 60 0a de ec f4 b1 6b 5b 6c 69 f3 14 ba 0d 35 45 e2 fc 37 57 ea db ec 37 6d a5 f3 ff 17 92 7e fb e4 ba fc 1f f6 3d 68 7f 52 dd dd e6 b7 ce 33 d2 ff f9 1f 52 0f f1 3d 4d 5e 86 fe 72 fe ae 5f df 7f f6 fa 59 fa 80 7f ff f6 d2 e7 87 f5 4f 24 bf 52 fb a1 e1 af e8 5f 76 fe c3 fc 3f ee a7 f7 ff 9e bb c7 fc 17 f8 5f fa fd 0c fe 75 f8 5b f8 1f df ff 79 be 4a ff 9f df 3f eb df d9 7a 02 fe 45 fd 23 fd b7 aa 3e e8 7c 07 77 cf f8 5f fb 7f db fb 04 7b 49 f6 3f f9 9f e4 ff d2 ff f1 ff 4b f2 71 f8 df fc 3d 16 fd eb fd b7 fd df b8 bf b0 0f e7 Data Ascii: RIFF,WEBPVP8 *l>Q$E!"peio6_k>F~N?/`k[li5E7W7m~=hR3R=M^r_YO$R_v?_u[yJ?zE#>\|w_{I?Kq=
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 06 4f d3 af ad ae 50 a2 ad d8 7c ff 40 88 a8 d6 5f 5a 81 08 08 7b 94 7f 97 b7 50 e7 41 65 19 f8 b2 12 74 b4 40 b8 62 3b 2f 11 1e e3 5a 41 eb 04 12 c5 0e 24 e8 12 ee b4 c2 30 56 51 b4 09 6a 6a 8c 22 ec ee ef 0e 0c 66 1c 9f 7f 1e 54 bf 55 21 04 f2 f0 1c 94 78 51 8c b7 bf 0d 15 c1 67 d9 62 da 07 1c 18 ba 9d 21 c4 ce 06 0a c8 45 9e 1a 6f de 5f f3 dc 23 64 cf b4 26 48 fd 2d ce 10 e7 0d 91 23 05 5f f8 c0 7c fa c6 b2 b6 fa 81 3f a6 43 7f 51 c9 ac 3f 74 d4 20 56 62 1c ca 99 61 11 bb 7a 45 95 33 d3 ea 78 66 a8 87 45 2c 8c fc 04 05 c3 ad 36 42 c7 20 9c 9e 15 c5 ff eb 96 44 e9 09 77 d6 92 bc 44 21 63 b4 0a e8 14 b4 2d 6a a9 53 89 14 63 5e 0c 24 f9 0b 09 88 8c f7 5e a9 72 7e 77 c7 79 40 cd 9a ae 9a db 79 91 c9 c2 01 6a 21 8a 3a 51 ce 5f 4f 1a d7 1c f9 4d 82 44 4a 18 Data Ascii: OP\|@_Z{PAet@b;/ZA$0VQjj"fTU!xQgb!Eo_#d&H-#_\|?CQ?t VbazE3xfE,6B DwD!c-jSc^$^r~wy@yj!:Q_OMDJ
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 64 b2 c6 b6 9e b4 7f e8 b0 67 9c ce aa 2d bf 8f 17 1d 51 53 22 37 50 a8 57 8c 68 56 06 b3 09 1b d3 68 a2 39 54 da 50 12 75 28 06 3f 24 9b bc a0 d7 5c c0 6c 99 1e c7 7e 60 1d d2 a7 86 4a 90 bc f1 ba 17 62 c1 9f ff ff c8 8b 4e 02 1c 45 82 11 c4 a1 7e be 8e 72 ae 3e 8b a1 d3 5f 88 c7 0a 22 b8 ca bb e4 bc c9 93 8b d0 f1 a3 16 9d b6 27 ef 1a da 79 43 39 09 a3 6e 35 92 28 34 5d b8 f4 19 ac 92 d4 db 81 cf 81 b1 32 a3 ce 03 70 05 a0 7f 00 75 5b d3 c0 93 f3 a4 3e 64 91 3e 17 2d cc 07 45 63 4f b8 06 b2 cf bf 1e 4c 7a 20 46 54 7d 87 3d a4 0f 26 28 53 9d c3 49 e8 a7 f4 a1 cd 74 1c 41 30 f4 7f 1d 93 de 90 f0 64 79 62 db 8d 87 47 1d b7 bf 56 10 a4 18 4b 98 ff c4 6a aa bb e5 b3 7c 68 fa d7 67 af 35 c8 df 79 9c 51 f4 5b 6b 27 6e 54 6e fa fc 54 00 c4 18 43 19 d9 2b 79 14 Data Ascii: dg-QS"7PWhVh9TPu(?$\l~`JbNE~r>_"'yC9n5(4]2pu[>d>-EcOLz FT}=&(SItA0dybGVKj\|hg5yQ[k'nTnTC+y
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 8e c4 8a 93 cf ac 9b 1c 97 86 74 5e 7c 7c b1 24 a7 b3 a9 f1 67 9e ea 04 75 f3 b2 a5 1f 5c f5 b2 5a 7c 02 b8 2b 97 26 af b7 0c 03 69 b2 7f d3 97 6b bf a7 04 d1 87 6a 0e 1d db 0b 6f e5 3f d6 50 83 3b 42 d4 58 c3 07 7e e8 a5 c2 14 73 9d b7 b8 58 c7 d0 6d 1c 75 b1 54 af e0 a2 c5 df 5c 6d e8 37 20 72 7f e5 45 bb 93 da f6 22 78 66 58 b8 b6 e7 fe 4f 27 9d ca fa fb aa d8 60 1e f7 51 2b 16 ca eb 35 49 4f 2d 6a 01 13 d0 63 ac ef 97 ac 94 2c f6 72 15 ba d9 b7 fd cc cb 8d 03 c3 c2 a8 5f 9b c8 4b e3 e9 e5 bf c3 e5 1a f1 79 15 2c 81 49 7a b2 32 fa 87 11 3e a7 49 c6 64 e8 32 d7 60 00 98 08 6e 66 3a f6 1b 6e ed 04 b2 34 4c 5a da b9 7f 5e 64 8f 02 2d 84 67 ef f2 0d 4a d4 99 e9 33 eb b4 fe 96 13 fb b3 89 66 1b 4f 08 25 fa f5 d6 5f ad 1e 3f 6d 58 1c 74 9a 9a 8d 9b 70 44 13 Data Ascii: t^\|\|$gu\Z\|+&ikjo?P;BX~sXmuT\m7 rE"xfXO'`Q+5IO-jc,r_Ky,Iz2>Id2`nf:n4LZ^d-gJ3fO%_?mXtpD
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 74 67 ba 09 a9 48 4f b0 9f 8c 28 48 98 75 e8 da bd c6 8d 36 c8 10 c6 e5 ca ca c4 f0 bc 30 c3 3c a5 1c 71 ba 06 e0 ea 0a ca 05 ef 1e bc a0 63 9b 52 e2 82 c1 70 f1 7a bb 40 7e b4 98 3c fd 12 80 73 7b 88 04 34 38 65 95 a1 bf 7a 75 28 f1 77 cd 2d 95 2c 1d 25 98 c9 a1 30 ed a8 9c a7 37 c5 1d bf 3c 56 55 6f f3 88 4a 68 44 01 09 54 a4 ec ff 50 b2 cf 88 55 bc 70 0b df b5 0f f3 4b ce b7 f4 da 44 76 12 f6 b3 74 57 4a 3b 8c eb b9 ee 2b 87 d5 06 21 0f 71 5d f1 ae 83 7d 3a 7a d0 94 bc cd ce 8c a5 0f f5 73 90 f3 e6 1f 0f 88 1a af db f2 e5 5e 6e f6 c2 a4 b0 02 08 9e c7 49 0c 71 57 c6 1e fb 6b 7f 32 a5 7c 00 91 29 0c 4b c9 c4 73 49 a8 10 66 c0 a0 ac df b2 e6 92 cb 04 46 22 b1 bc 7e c4 e2 02 af e3 bb 30 60 49 18 9f a0 f7 14 70 c0 07 52 43 9f 0b e4 89 ee 92 59 62 d6 91 37 Data Ascii: tgHO(Hu60<qcRpz@~<s{48ezu(w-,%07<VUoJhDTPUpKDvtWJ;+!q]}:zs^nIqWk2\|)KsIfF"~0`IpRCYb7
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: ee 62 44 89 4a 63 1f 3d 3b 15 df 72 5a d8 6d 26 0f 56 b7 d6 c6 fb ff fd 5f 84 e7 37 f0 4b 21 dd 8c 62 73 0c 1a f3 f8 fe 0d a2 6e e4 6c a9 c5 cb d0 70 0c 26 72 5c 91 bd 8b c7 1a 14 63 b6 18 0d ae 56 cd 09 65 62 a8 42 64 ae 20 51 2a d8 be ce b7 9e b5 ff 0c ec 5a 1b 15 54 a5 46 bd 30 d5 16 90 d9 24 81 88 92 f6 46 1d 73 25 61 3b 7d fd 27 fa 7f 17 d2 3e 80 94 53 8e 46 3c 59 09 b2 f2 f8 be 90 d5 91 9d 21 50 d1 86 ee d9 66 31 8f a0 47 6a 92 02 15 41 2b 85 50 69 56 42 c7 8b cf 0d 12 0a da eb 97 fa ea 9c 9d 53 e7 f6 98 70 c2 ec 45 5a f7 ee 3f a7 1b c7 41 e7 42 dd 64 eb 5a 49 14 32 17 85 3b 20 f2 b2 fd b5 2a a8 06 43 7f 31 75 1f 81 fa 24 bf 02 2a f9 13 33 50 ac d5 64 36 68 c0 cb 9b 5c e9 d5 12 eb 8b b8 6d b7 f6 09 80 36 27 4b 2f e9 00 72 54 f1 6d 9c 3e 2e 68 44 de Data Ascii: bDJc=;rZm&V_7K!bsnlp&r\cVebBd QZTF0$Fs%a;}'>SF<Y!Pf1GjA+PiVBSpEZ?ABdZI2; C1u$*3Pd6h\m6'K/rTm>.hD
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: f7 da 8a fa fc 9e 97 16 08 e5 42 25 82 59 4f a6 08 fb 76 d6 85 aa 5b 5d 3e d6 55 72 f0 eb e7 de 46 4f 65 67 47 d8 b7 56 9c 4c 87 59 6f 35 1c 77 62 e7 8e 03 07 92 c2 67 bc 11 f5 b1 39 a7 ef 86 47 89 60 9d f5 8e 37 47 9d e4 1b 62 25 f9 e0 84 44 47 0c 82 82 97 12 15 d3 84 3f 1b a1 cc cc aa 95 6b 1d 1a e7 b7 10 3c b5 d5 0e 6d c3 31 4f 1d ae ab 0c 0e a0 bb b9 ff 58 2a 48 e4 9a 93 6c 30 bc 4a 2f 5f 7c 98 62 a5 37 5c 86 22 33 cb 48 ba 6e 3d b5 9b a8 30 6e d8 ee ec 0a 5b 2e 1e 66 b2 59 22 64 dc 6c 34 2a 07 ec 37 a2 d6 e6 0e df da 74 18 0d 14 9f 69 59 ec 3b 5f 45 a2 dd 8e c0 6b cc 82 8f 1e 7a 94 7a 5f 22 d0 23 3f 07 95 fb 5d ba 9d 14 96 c9 6b d6 11 72 84 cc 56 d6 c0 92 64 dc 3b 15 00 53 f1 ac 86 e1 ed 43 23 d7 37 b6 d8 95 d7 51 cb 39 67 1e 92 95 f0 69 01 48 4a 47 Data Ascii: B%YOv[]>UrFOegGVLYo5wbg9G`7Gb%DG?k<m1OXHl0J/_\|b7\"3Hn=0n[.fY"dl47tiY;_Ekzz_"#?]krVd;SC#7Q9giHJG
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: f5 0e 51 e5 42 16 03 7f ce e8 53 fa 2b 67 36 50 79 25 0a b1 a8 aa 31 e4 f9 60 e8 c7 a4 c2 f4 db 6a 21 4d 89 46 eb 68 7f b6 32 c9 2e 06 0c 9a 88 8d 5c 78 d2 5c 27 3b ac 30 3d a5 2f 05 e3 2c a3 93 07 af de ba f1 84 63 6d b3 ec c6 9f 3a c9 92 96 cf b2 8d a3 64 97 70 45 52 5a 92 09 21 be e6 33 92 1b c1 1f e5 0b 04 3b da 96 91 a0 95 81 1d 2d 8d 45 b8 48 23 81 70 85 b4 f8 30 67 07 8d 7a 72 af fa c0 da 71 13 96 48 4c 44 36 2b 66 bd 25 8e 45 9b 0a 54 a1 5b 75 dd c5 bf 4b 12 f0 17 00 2c 5d 0d e5 df e3 a7 7d 58 4d 21 fb cc f8 bd bf 62 6d a6 b9 7d 9a 1c 07 78 4c c8 64 1a 08 2e 48 b1 80 6c 2b 53 01 e1 62 30 29 99 21 ab 3c 4c b2 fc 28 7a 4c 4f a9 33 51 6a 35 3a 27 b5 b7 d8 d1 b2 a7 e0 68 ac af 23 cf c2 ad 67 dc 83 58 67 4c a4 bc 98 9f c5 f5 ee b0 0f e4 90 be 7b 59 67 Data Ascii: QBS+g6Py%1`j!MFh2.\x\';0=/,cm:dpERZ!3;-EH#p0gzrqHLD6+f%ET[uK,]}XM!bm}xLd.Hl+Sb0)!<L(zLO3Qj5:'h#gXgL{Yg
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: df 26 d4 f6 8d 82 bc 39 2c 9a b5 1c 0c 17 5b ac f5 fc f9 14 38 0d 73 12 72 da 10 fc b5 09 a8 a6 54 5a e9 f4 b3 a7 9b 15 37 b3 06 a5 61 c4 87 70 b3 dc 02 d4 b5 f7 4f 01 a9 38 95 57 d4 5c e6 6b 76 73 43 e2 cd 61 6a 09 18 04 15 9a d4 1b f8 d4 07 7f 8e 1f 30 8b 0d 09 40 97 16 67 35 e1 55 be 76 a9 fb 75 86 d0 c1 d3 a5 52 8c b3 67 3d 04 6e 89 63 e6 75 d1 2c 5f 7c a4 5c 5a ad 9b 67 80 64 04 29 cb 9f 50 0e 57 93 2a c5 b7 2f 65 29 31 3f 25 07 1a 5b 5f 2b 41 3d 0c cb 2c 27 61 22 cb 76 8f 9b c6 43 c5 db a6 69 fb d8 93 39 a5 1a c7 9f dc 9d 13 3f ae 4b 71 af 79 41 38 e0 e7 ea 21 7b 5b b3 44 bb 83 ae 52 63 bf 6c c1 7d 8a b6 44 1d b4 aa b3 06 ed 0a 08 bd 0d 36 ca 16 1f 2e bf a5 7d bb 2b 6d 92 18 1c 25 f2 db 32 7d f2 cf ac b0 e5 49 62 58 06 12 d1 6c 4c f1 c2 c1 79 e6 ce Data Ascii: &9,[8srTZ7apO8W\kvsCaj0@g5UvuRg=ncu,_\|\Zgd)PW*/e)1?%[_+A=,'a"vCi9?KqyA8!{[DRcl}D6.}+m%2}IbXlLy
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: f9 48 9b 49 3e 20 8b 64 8c a5 6a 9f 2f 57 9c db f8 c8 bc 3d c4 bf 29 5f 46 51 6e 2a 09 41 ab 47 c7 25 7c 94 23 37 76 a7 93 34 be 65 af 40 ff 6f 34 4e 57 31 97 02 28 b7 b8 23 16 60 42 68 37 4f 15 9c 13 7a f6 0d e1 f8 67 f4 b0 42 a3 43 0d 51 1c 16 3d 24 88 3a 39 7f 11 71 37 29 d6 79 40 84 46 48 41 a9 ea b5 9b 49 44 d4 06 52 7c 29 60 a6 3e 31 13 94 75 12 78 d3 1c 33 96 e1 34 cf a2 f2 50 e0 d6 68 a8 8d 36 1f e3 9d 7f 7e 46 2c 3f 74 45 18 1a 54 2f 7f aa 97 f9 69 f8 8d eb 53 6c 02 ca 76 7b aa 9f bb 3f 45 8f 9a 64 68 2d 76 9f 36 5d 2c 31 e5 bc 2e 00 5d c9 58 58 52 ef eb c9 0d 49 e5 db 7d 60 9d 92 92 40 3d bb 86 1f ef 6f 26 4d 4c fd a4 34 56 e2 43 53 3b 7e 18 87 3f 86 b8 a6 e7 8c 90 dc 64 ed 0f 9f 22 2a 6d dc f7 64 79 d2 e4 24 bf b6 27 e6 39 0a ed 7a 4a 2e c8 87 Data Ascii: HI> dj/W=)_FQnAG%\|#7v4e@o4NW1(#`Bh7OzgBCQ=$:9q7)y@FHAIDR\|)`>1ux34Ph6~F,?tET/iSlv{?Edh-v6],1.]XXRI}`@=o&ML4VCS;~?d"mdy$'9zJ.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49872	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:32 UTC	525	OUT	GET /BmUViDVOKNJe0GYJe22hsr7juFndRVbvr1fGmHGXqHfJjNAXjd26bfuGRQpVrpJ6YbA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:32 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5494 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:52:55 GMT Expires: Fri, 25 Oct 2024 20:52:55 GMT Cache-Control: public, max-age=86400, no-transform Age: 7057 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:32 UTC	845	IN	Data Raw: 52 49 46 46 6e 15 00 00 57 45 42 50 56 50 38 4c 62 15 00 00 2f ff c0 3f 00 2a 3c d6 b6 ab b2 24 67 27 15 f3 ed 64 86 cb 90 55 62 66 66 66 66 66 66 96 9a 99 99 99 99 99 a9 18 9b 99 3b b3 ee 09 86 63 c4 39 3b f6 39 11 b1 b7 d7 65 a9 ed 36 69 06 27 34 83 10 58 65 d6 0c 7a 10 2d 8b 61 0c e5 cb 8b 9c 81 d0 62 96 3c 79 9a 41 b9 62 4b ae ac 2d 34 65 31 b3 2c c9 4f 4b f2 a4 49 dc 95 43 38 21 76 43 23 a0 26 4f 68 b3 6c 86 1c 81 20 ad 5c 65 46 98 22 8b 5c 46 8b 25 93 c9 6c 4b 1a 40 7b e2 63 09 d2 0c 31 5a 6d 8a b2 ac 5c 69 96 ab 55 96 98 f9 ca 4e eb ae 70 e5 ed 95 13 90 6c d6 55 73 9b 3d 02 f1 0c a4 23 b0 d2 6a ab 67 20 57 5e 4e 20 d7 16 33 a3 cf 10 9e d6 15 ff 4b 8c 16 b3 a6 20 b9 77 d1 82 24 db b4 6d 8d 63 db db 6b ef 3d d7 ba cf 7e 5f b6 6d db b6 6d db 7e ef da Data Ascii: RIFFnWEBPVP8Lb/?*<$g'dUbffffff;c9;9e6i'4Xez-ab<yAbK-4e1,OKIC8!vC#&Ohl \eF"\F%lK@{c1Zm\iUNplUs=#jg W^N 3K w$mck=~_mm~
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: d1 b5 bc ad e4 02 91 57 03 c7 2f 1f 3c 76 fe f1 50 06 c4 6a 52 dd 27 78 6f c2 5a cd 2a 84 f0 39 6c fa f4 23 25 9f ee 3b 72 68 e3 95 2b 9a 72 23 99 4c ca 60 67 ca ba 73 21 84 c8 b7 47 03 7b 77 c8 b7 1d 3b fd 76 15 ef de c1 63 e7 f6 15 39 b4 e7 50 db be 22 bd 97 57 00 33 96 8c ae e6 3d 9d 90 ac 92 06 42 3b 93 ef 68 0f f8 84 da c9 79 a3 e5 b3 58 4b ca 60 1f da b2 b5 34 a7 df 60 d9 34 f6 92 ea 6e c1 ff 05 99 b5 d9 4e ca e8 46 de ff 25 69 db 8a 07 98 4e 4a 75 a7 10 ec 49 2b 06 ac 82 92 02 2c 27 a5 8c cc 66 fd 1f 91 05 cb 6e ad b3 aa 3e c3 70 52 ca c8 3c 2e d8 97 f6 5e 87 a9 c6 5c bf 4d 66 ba d8 8d 2f d9 85 46 25 0d ee 99 ba e4 4b c1 0b 5d ec d2 db be 65 b9 4d 6a df 52 92 e7 a6 8d 95 b9 98 2b 36 6c 54 33 db 26 b5 77 09 a4 10 5b ae 5f ad 3c 91 32 8e a0 77 cc b7 Data Ascii: W/<vPjR'xoZ*9l#%;rh+r#L`gs!G{w;vc9P"W3=B;hyXK`4`4nNF%iNJuI+,'fn>pR<.^\Mf/F%K]eMjR+6lT3&w[_<2w
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 56 68 20 23 d9 6b 43 81 6b fb de 25 24 7b ed 29 d4 d6 86 f3 cd 85 f5 cc 30 4e e4 61 79 b8 77 9d d9 a6 ea 6e 9c cd d7 c4 d2 ab 63 d1 75 b1 6a e3 da b3 73 75 1d 88 6b 87 d7 5b 29 97 d7 63 fa db 50 e0 5a 91 65 9c 34 7c 65 9e 6f 43 75 03 31 20 62 6f e3 01 ee aa 1f b2 61 28 87 a3 7c ab 1f 43 94 cc 40 24 bc ee b5 b2 6c 9b 34 f4 a0 84 f6 76 56 5f 15 f6 29 9c 56 b3 fa 7f b5 49 83 fd 72 9c 17 01 23 e2 ef ea 4d 00 bb 34 14 65 1f 44 cd e8 68 6f bc b3 64 30 26 17 d6 33 26 2a 61 67 74 df d7 03 cc 05 f2 d4 76 a3 e5 b3 3a 05 a6 15 9e e2 90 86 fe fb da 0f 50 02 23 a9 6d a5 c4 ad 3c 86 52 06 5e 5e 1a ba 49 f6 23 42 e7 82 b1 b4 f6 2b 9d 02 d3 8a ae e5 8d f8 c7 8b 64 d8 54 30 9a d6 b6 53 bb e7 c4 18 05 df 1b 84 34 f0 04 c2 7e f0 7f 81 ac 53 2e 57 ca 65 c7 a1 b8 35 bc 87 79 Data Ascii: Vh #kCk%${)0Naywncujsuk[)cPZe4\|eoCu1 boa(\|C@$l4vV_)VIr#M4eDhod0&3&*agtv:P#m<R^^I#B+dT0S4~S.We5y
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: ef 93 f2 78 c6 e3 80 10 c2 0e 34 d2 46 c9 cd 51 f6 f4 e9 91 83 f3 cc 71 94 e4 33 bf 8f 0b 4c 25 01 0a 92 f8 a1 b8 8b 48 03 5d f7 13 53 df 81 63 a7 7d 0e 13 42 28 79 e0 e3 0c 93 37 c7 4e a4 d4 e6 23 06 53 ac ec dd 6e 13 b8 d9 60 7f 9a dc 4d b2 e5 56 75 9c e6 83 3a 9e fa ae b9 64 44 b7 10 62 b2 a7 1c 31 4e 6e 95 1a a4 f8 41 ff 25 9b e0 48 c9 27 1f 2f 70 d7 c9 7e 04 b1 8d fe b4 a4 53 ae 9d 2f a5 00 be a6 fb 9a 11 42 64 d5 3d 82 71 72 9f ba 80 0e 7a 1a 36 28 cb e3 84 e9 cf 27 15 d8 d9 c0 ff 94 24 7e 30 6e 3d 3d e8 a6 47 0c c9 a5 81 bd 85 bb 82 3e 21 84 b0 c2 33 59 13 c8 e3 08 19 d3 bb c4 a0 8d 57 2d 9f 98 11 d8 67 2e a8 47 04 72 57 c6 ec f3 ea 15 ab de 0d a3 81 85 b3 7f ed 16 42 d8 b7 62 06 29 b7 77 c2 01 23 06 65 7b ac ee dd eb 14 71 5a e1 49 0e 49 fc d8 02 Data Ascii: x4FQq3L%H]Sc}B(y7N#Sn`MVu:dDb1NnA%H'/p~S/Bd=qrz6('$~0n==G>!3YW-g.GrWBb)w#e{qZII
2024-10-24 22:50:32 UTC	515	IN	Data Raw: 24 5b 53 ed 07 99 e1 84 22 f6 c7 e5 6b 60 d1 6d 23 72 be 16 48 a6 9b 0f e8 97 7c 2e 88 53 1b 5f fc 51 ff a6 7d ba 1c 00 d4 a3 e9 89 68 ce 8c eb 64 c5 3e 75 ee dc 1b 19 f0 b8 cf b3 23 b5 5f 20 43 26 fd e0 e3 00 51 c7 ad 9e 25 e2 29 38 89 70 fe 1e 6e 19 00 a0 f4 d5 77 38 e5 07 2f 85 09 5b 55 cd fe b9 bc 82 9e 1e 47 c8 fa 71 fc e3 91 f5 f1 90 dc dd 93 8e df a4 b6 0c c2 38 0b 91 f2 d7 d5 c0 40 38 d7 b4 4f 5f f5 5a 08 a7 3c be c0 39 ff d4 ad 50 b8 0e 68 96 ce d8 1b f1 0f de c6 7d cd 40 c8 2e 90 a1 57 c4 cc eb d2 ca 9b d0 96 8d 6b cf 2d 69 cf 2d 6a d7 0d 69 c3 35 b1 e4 d2 99 34 04 c3 79 de 71 ca 63 4f ed 87 7c 2e 10 af b8 27 e1 a9 39 b9 70 5e f5 46 58 e3 76 4d d1 89 d1 2e dd f3 13 8e 42 35 04 45 7f e4 4b 21 7b d6 2a 64 03 91 3f ce 19 e7 9e 1a 0c ad 74 8d 99 5c Data Ascii: $[S"k`m#rH\|.S_Q}hd>u#_ C&Q%)8pnw8/[UGq8@8O_Z<9Ph}@.Wk-i-ji54yqcO\|.'9p^FXvM.B5EK!{*d?t\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49875	142.250.185.228	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:32 UTC	795	OUT	GET /recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZwvAZkhUuyzhgCpmRkJOxhsuNribcRO1sMUFClzXvRUwULgzOtRe0aDqUF_csWETf2grcuUCK1-ikaCJLI; NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA
2024-10-24 22:50:32 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:32 GMT Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:32 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-24 22:50:32 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-10-24 22:50:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49871	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:32 UTC	525	OUT	GET /9v08ai07I8aoFLj5M-90nzWPpvyNzOVgA2ZWF9avdW7oS8L9YqF9trVI44SUn2qGTA0=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:32 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4296 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:31:49 GMT Expires: Fri, 25 Oct 2024 22:31:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 1123 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:32 UTC	845	IN	Data Raw: 52 49 46 46 c0 10 00 00 57 45 42 50 56 50 38 4c b3 10 00 00 2f ff c0 3f 00 2a ac f2 ff ad d6 25 e7 ea 86 c3 34 cc cc 4c 87 19 9a 99 e9 30 43 f3 61 3e 39 cd cc dc 7d 98 99 49 ec b5 9e e7 59 cf 5e ef fb ba 3e 91 91 23 c3 a4 38 ab aa af 63 32 aa ed 54 ad b0 63 ba 85 8c 5c 32 32 b5 65 64 e4 b8 7f e0 0a 76 55 ae 81 69 d0 e5 a8 1d 90 23 7b ec c8 91 5d b5 42 ba ab 42 c3 a0 e3 56 5c 6c 56 b0 2f e3 e8 53 51 bb 12 37 32 cc b9 01 dc 01 1b cb 49 cb d4 c8 6c 37 f2 a4 38 71 93 28 52 4b b7 9c 2d e7 06 c2 49 df 40 d4 ee 8a 8b cc 91 21 35 36 55 3b a0 c8 32 5d c3 ba 86 ad 5a 8e ed f0 33 76 5c f6 2d 64 6e 20 e8 a2 76 55 e4 d8 ae 51 a4 ba 46 4d fd 6b a9 a9 28 a6 1b c8 d8 c0 92 d1 3b 28 d3 72 e4 33 36 ed 76 f5 9f 16 24 d9 a6 6d ab af ef e3 e7 b5 6d db b6 6d db de d6 b1 6d db Data Ascii: RIFFWEBPVP8L/?*%4L0Ca>9}IY^>#8c2Tc\22edvUi#{]BBV\lV/SQ72Il78q(RK-I@!56U;2]Z3v\-dn vUQFMk(;(r36v$mmmm
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: ed 8e a5 0b e0 54 5b c4 a2 f1 89 10 28 f3 63 c7 d8 60 07 eb 04 91 f8 e2 c3 3b 11 11 5b d0 7c 6e ec 9e 11 34 fb 55 27 22 12 7b 57 92 b4 62 26 f3 d9 b6 e6 64 1d 6d 8c 7c b2 39 f9 d7 08 0e a8 37 f4 01 b2 ef 42 77 48 4b 19 28 fd 76 96 c8 7a c3 b7 09 35 99 73 c6 8c 60 e4 44 76 81 9b d4 6e 85 34 db 06 d9 11 b1 f9 7a 82 69 c2 27 84 04 f9 04 98 29 25 99 a7 7e 3c 48 90 4f 8c 49 1c 82 85 ff 65 74 22 dc 94 4c d7 de ce a7 71 a7 89 98 61 7b 8b bc 2f 41 3a 76 36 d7 37 0a 55 af 06 c1 4b 71 68 37 4d d3 d3 0e 00 38 4d 4e 23 e1 7c 5d 0c 00 92 e3 27 48 26 f3 e2 00 e0 9e 4a 80 ab 3f 70 f4 e1 72 a8 09 ba 55 1f 3a 14 5e 93 93 a8 e1 b0 9e 16 74 a7 94 58 f1 d2 3b 1f da 86 84 f5 96 78 bc 94 a7 f0 29 16 e8 4b 00 00 e9 ce 8e 24 28 04 40 30 30 81 64 fb f4 00 40 06 48 ba 95 57 5a 1f Data Ascii: T[(c`;[\|n4U'"{Wb&dm\|97BwHK(vz5s`Dvn4zi')%~<HOIet"Lqa{/A:v67UKqh7M8MN#\|]'H&J?prU:^tX;x)K$(@00d@HWZ
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 34 66 a4 04 51 1c 6c 9f ce cb 1e a5 29 25 80 e0 a4 eb 13 4c e2 9e 05 f1 94 1d 5a 8e e7 59 61 3a 30 de 6e a5 23 24 3b 66 c7 2d 88 cc 4e e6 a3 96 d3 24 b6 00 c2 cb 62 8d 17 88 b8 85 6b 5a 49 78 f3 74 fc 9c be 44 44 93 34 5e 89 8f 4f 37 a5 1a 88 cc 2f 2e 56 41 bc d5 ae 45 db f8 de 66 bd af 2b 9e 6b b4 af f1 91 35 5f 6c 46 ef ea f4 90 83 9b a7 8b 51 fd d8 6a 0b 0d 09 91 a2 3a 50 cb f1 13 a6 07 a4 7e 2b 26 22 f6 8e 31 95 c0 aa b6 72 ae 96 97 fb d7 de 1b 42 54 cb 52 17 87 d3 b5 5b be 8d 77 5e 02 b1 55 7a d3 6f 55 61 7c bf 7a bb e2 1e a8 1a bb e6 6a 70 3d 57 00 b1 dd 2d 08 11 77 2c c8 a9 80 65 0d ed e0 63 78 af b0 20 da ed 64 cf d0 db 69 f3 c2 fd a2 13 26 50 87 85 da 6b 6e 7d 3b 56 f7 e9 1d e1 14 2f 07 20 cd 7e c3 8d 3e 80 cd 3f ac f5 2c 0e 94 b9 9d 0b 10 71 ef Data Ascii: 4fQl)%LZYa:0n#$;f-N$bkZIxtDD4^O7/.VAEf+k5_lFQj:P~+&"1rBTR[w^UzoUa\|zjp=W-w,ecx di&Pkn};V/ ~>?,q
2024-10-24 22:50:32 UTC	695	IN	Data Raw: 19 3d 5e 61 35 fb 66 a4 59 9a 6e c2 03 6d 20 bd c9 57 82 d6 74 13 98 19 37 26 e9 e2 94 66 e1 3f 0b c9 f5 8b 15 55 4b a6 2f 99 02 25 13 28 df 52 e5 01 19 60 97 da b3 98 64 c7 dc 1c 0b f3 25 48 5e 2c 55 61 85 c0 21 1b 70 0f 6a 54 38 bc ad 2c 35 08 06 a6 91 8c 19 29 b0 c8 9e 4c 32 20 d9 ac 74 41 e1 31 7b 95 3f f8 e5 37 fe 96 91 a0 81 df c6 92 04 6f 22 e8 64 16 49 ff 38 ac 7c 81 95 2a a6 42 50 67 22 7e 88 68 e7 fc 2c 5d ee ab 88 a4 a8 84 d1 32 01 77 86 94 04 7f 38 a4 f1 24 92 4e e6 15 a0 a2 6a 4e 4d 85 ac 2f 0b 5d c8 fd 1b d1 1c b5 f4 c9 ac e2 a7 11 bd 72 50 61 0d 88 fd d7 3f 66 db 92 f5 ef 6b 3c 2d 98 3a e0 d5 df 43 84 f3 74 ab dd 2f 58 6a 4e b2 ce ce bf 40 e2 d7 11 15 96 96 0b 4d 3d 02 dd e8 83 c2 31 44 88 a7 3c 53 29 99 c8 e5 12 d9 fc aa 37 9f 1a c9 6f 98 Data Ascii: =^a5fYnm Wt7&f?UK/%(R`d%H^,Ua!pjT8,5)L2 tA1{?7o"dI8\|*BPg"~h,]2w8$NjNM/]rPa?fk<-:Ct/XjN@M=1D<S)7o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49870	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:32 UTC	525	OUT	GET /ldcQMpP7OaVmglCF6kGas9cY_K0PsJzSSosx2saw9KF1m3RHaEXpH_9mwBWaYnkmctk=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:32 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 17964 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:15:26 GMT Expires: Fri, 25 Oct 2024 20:15:26 GMT Cache-Control: public, max-age=86400, no-transform Age: 9306 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:32 UTC	844	IN	Data Raw: 52 49 46 46 24 46 00 00 57 45 42 50 56 50 38 4c 18 46 00 00 2f ff c0 3f 00 09 48 92 a4 46 8c a2 45 0b 08 0b fe ff 60 d0 e2 59 ee 11 fd 9f 00 fc bf 39 be 05 28 fc 2b 5a c9 67 ba 25 2f e4 4e c9 23 c1 1d 49 be d0 3d eb d8 19 6e d8 1f ac 2b ed f8 00 bb 68 46 37 b0 15 a0 30 33 ec 49 0a 00 92 99 69 7c 12 05 8c 88 ce 6f a2 ab c6 17 51 c8 62 66 e6 ee 07 52 44 c4 54 c9 c6 db 0d 4a 8a 98 aa 2a 09 db c9 66 a0 55 55 23 99 e6 7d ee 28 00 4c 55 95 24 7d 17 bb b6 f0 2c 6f f4 c0 dd 3f ee 29 72 42 42 95 24 cd fb 39 e5 0c a3 73 f7 39 a7 cf 19 72 b5 d4 e8 75 d6 7c 10 b4 5c 75 ae 15 11 77 40 44 2c fc c7 0b c8 91 24 29 92 7c 99 e9 98 59 7f 11 b1 ab 6a f9 ef 36 b6 6d 55 59 df dd b0 48 63 fa 2f 86 90 12 4e 05 0c 2c 49 b2 4d 5b b9 75 8d f5 6c 73 fe 03 b2 ed f7 75 5f 44 ff 27 c0 Data Ascii: RIFF$FWEBPVP8LF/?HFE`Y9(+Zg%/N#I=n+hF703Ii\|oQbfRDTJ*fUU#}(LU$},o?)rBB$9s9ru\|\uw@D,$)\|Yj6mUYHc/N,IM[ulsu_D'
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: ea 1e db ec f7 a0 5d 55 a9 a4 2b c9 eb b1 6d 6d db 31 49 d2 f5 bc 7f 44 24 da b6 bd d5 63 7b e6 08 b4 37 6b ce 63 ce c2 b6 6d db d6 96 6d 2b b3 10 19 f8 bf 37 26 80 6b b6 7f ae 6d db 76 e6 bc 57 de 7b ef bd 77 f0 0a 29 12 97 85 32 52 00 12 15 f4 36 07 31 ef bd 19 60 2e 79 89 7f 79 28 25 d1 82 7f aa 9e c2 2f ae 41 27 1e b0 c9 eb 8f 47 0a 2b 21 25 30 68 a3 8b 6e 5a 54 09 28 98 43 37 3d 74 d0 95 47 45 a1 84 36 dd b4 d3 96 47 4b e9 d0 09 17 3e 74 c2 5f 20 b2 89 15 be 54 b0 72 5b 79 fc f3 38 31 28 a5 9e c2 94 97 5a 0c b0 22 d9 76 ad f4 bc f4 45 a1 00 0d 48 c7 41 d4 94 f3 82 1c 49 92 ab aa ba df c3 28 dc c7 14 8e 9c b4 f8 62 a7 62 02 f4 64 db fe fe ff a4 cc 2e 99 12 ba 75 40 1b 55 60 01 0f f8 a2 45 03 32 72 6a 73 0e bb f0 f9 ce 10 a7 bf 2c e1 63 db bb dc fa d5 Data Ascii: ]U+mm1ID$c{7kcmm+7&kmvW{w)2R61`.yy(%/A'G+!%0hnZT(C7=tGE6GK>t_ Tr[y81(Z"vEHAI(bbd.u@U`E2rjs,c
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 63 a6 59 7a c8 82 eb 28 85 0a 85 44 ea e8 90 d9 c9 cf 9f ec 9f a5 8b aa c8 65 29 ec 9a f2 d6 81 fc c5 17 79 f1 53 8c fd 79 ff d1 97 56 34 eb 48 e2 0f 71 0b da 21 48 62 7c 4c 1d 19 e8 27 cd 7d 7b 49 07 13 c2 fb a8 08 87 db cf 2b c2 41 1d 0f 66 44 c1 a6 3c 5b 0a 5d dc 72 61 21 40 4a 8d 8e 02 d8 81 12 47 ba 99 2a 73 65 2f 7e b9 16 9f 4d 67 e7 73 ac 97 9d ae 3e f2 f1 b9 39 ab 66 c2 c2 8c 23 64 71 c0 52 20 72 d4 41 8e 99 f8 d9 a1 6f 57 38 98 04 71 3d 35 fd 9b 83 99 93 d9 26 b3 be 19 e3 be 64 5d c7 85 20 05 d6 48 41 a2 94 40 ec ff fd 1e 5c 72 2f 41 04 53 0d ae bf 38 1f 6c cf 8f 7c 8b b1 38 dc b1 57 9f 57 32 a3 99 23 08 24 95 58 dc 2a 73 b8 c5 cb ee 7d f4 19 68 c2 83 2f a6 62 54 fb 49 33 9f 18 57 84 67 9b 71 1d f9 13 de 8f 9a c4 03 1f bd 6f 39 7a a3 d7 66 84 2f Data Ascii: cYz(De)ySyV4Hq!Hb\|L'}{I+AfD<[]ra!@JGse/~Mgs>9f#dqR rAoW8q=5&d] HA@\r/AS8l\|8WW2#$Xs}h/bTI3Wgqo9zf/
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 63 7e 58 1c e4 95 58 9c 10 39 42 84 c8 db 4c 80 b8 b5 9c e0 68 8e 15 bb 5e da 03 8c d3 f7 d2 8c 28 9e 4c 2d b4 52 a3 9b ee f7 51 42 ba ce 74 c7 22 19 1d b8 02 d2 b0 76 ac 4a 3b 6f 49 ba 48 93 9f 06 91 3a 05 27 70 e7 32 79 48 3d e5 72 cd fc b0 03 16 c0 2d 3d b1 07 28 f4 d2 03 85 79 5e 6d 02 8f 91 47 dd 73 12 66 b6 3a fa 8f 1f 6b ac c0 fb 88 f2 b3 43 bf f1 df 27 88 eb 2c a1 1a 29 2b d3 32 39 ba 8b 62 d1 47 b7 e2 b2 ea 29 0a 94 cc 6e 47 9e 15 aa 20 23 a3 a7 42 43 23 87 23 d3 a8 9a 24 cf a8 4d 8a 1c 67 32 ca 99 4d f9 00 57 3b 72 00 57 7b c9 5b bd 28 47 3c 14 0a b7 30 3c 46 1d 6f 13 07 57 7b e9 b7 8c 70 1d fb 78 b8 ad 77 ae d1 e1 fb 1d 6d 40 9d 69 e5 48 d9 74 1a fd 75 f7 bc e0 b7 fb 64 f6 1a 55 14 d4 b8 8c f3 87 bc 65 06 99 39 ce 33 18 0c ce 79 b0 06 f2 88 a1 Data Ascii: c~XX9BLh^(L-RQBt"vJ;oIH:'p2yH=r-=(y^mGsf:kC',)+29bG)nG #BC##$Mg2MW;rW{[(G<0<FoW{pxwm@iHtudUe93y
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 81 c4 03 c0 30 6a 69 98 d2 4c e5 a3 06 76 75 b7 5e 26 af 0b 15 85 42 0d 73 bf ee 39 5a 71 af 91 a3 15 f7 1a f5 8c b9 57 00 8f f3 b9 8e 62 e4 6c 0e 07 15 e3 63 bd 77 6d f9 bf 52 1b a2 eb b8 58 a0 64 51 67 4b 54 23 17 69 16 35 b8 42 35 12 27 b6 92 b8 26 2b 3a 51 b4 6d 83 d1 89 91 8c 21 42 43 43 1e ad 0f ce b3 23 e1 20 13 f5 d0 88 98 d1 f1 7a ae ed 4b fb 4b 4a 58 11 4f 91 43 f9 a2 6c af e4 78 96 9f 17 39 9e e5 e7 15 e4 a1 3c 8a d1 1e 98 d0 e7 61 ea fe b3 66 9b a0 b7 8f 75 28 25 de 7d 26 a2 a4 50 a3 8f 14 a5 04 39 11 90 4e 53 38 eb 35 a3 03 35 12 a7 6d 0a 96 42 03 9e 82 8d f5 75 e3 2b 6a ef a8 35 38 20 13 70 0b 18 cd b4 6b da 84 56 9e 7e 55 3f e2 4c 74 b9 2a f1 7f b9 9f 25 42 f0 75 57 08 18 bb 42 c0 d8 35 43 40 e0 f6 18 84 93 c0 c4 d4 cf f7 c2 4d 42 74 1d dd Data Ascii: 0jiLvu^&Bs9ZqWblcwmRXdQgKT#i5B5'&+:Qm!BCC# zKKJXOClx9<afu(%}&P9NS855mBu+j58 pkV~U?Lt*%BuWB5C@MBt
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 10 84 69 e6 ed 06 fb ad e5 4b 0e 1e cd cc ed 43 a3 c7 7d 45 1a 37 b6 5a 42 56 eb 9b 40 70 c9 f4 5b 87 12 25 e3 d2 ec b7 74 8d 6b 0a f6 55 39 d2 8e 5f a7 c9 1f d8 84 4e 1a a8 e7 d6 8a 26 d4 38 83 84 54 bb e1 ac 83 7f 83 0e f8 18 ea 50 fc bf 3a 6d 12 bb fe 43 2f 38 c6 a5 93 5f 9d b4 6b b0 b9 b9 29 b4 c5 6a b1 9e 35 ae e3 ba e5 6d 1f 35 b7 58 cf 68 42 ac 6f 6a 75 e4 51 e3 d1 1c 9a fa f6 b1 3e c5 9b e5 7e ef e3 92 7c dd fb 2d 85 f2 dc 65 54 66 91 28 fa 48 16 85 a9 f1 6b fa ad 3f 9b 6b aa 34 d3 d5 80 8d 40 1b dc 99 6b a0 7c 06 10 0c 46 73 4b ee ed 3b f2 00 40 90 49 ac b6 07 73 68 d3 1e ae b4 22 a8 2f 2f f7 bf d2 44 5b cf 3c d5 0c 8d ab bd a0 9d b3 06 f0 21 68 35 26 da 39 eb d9 47 8f 23 d7 f3 d4 84 6f d7 97 6b ec 2b a8 f3 63 fe f7 bc 33 37 44 69 73 4f 99 85 4b Data Ascii: iKC}E7ZBV@p[%tkU9_N&8TP:mC/8_k)j5m5XhBojuQ>~\|-eTf(Hk?k4@k\|FsK;@Ish"//D[<!h5&9G#ok+c37DisOK
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 4a 26 5d b8 4c ba 76 5f cc 74 25 1e 84 1a fc 6b 73 1d e7 94 73 1e 5a 60 da 2d d8 f2 0e c9 c9 d9 27 cf 55 a4 98 41 0c 40 2d 07 df a9 80 01 b0 b2 50 21 46 4b da d2 46 73 7f c3 bc 19 b7 43 36 31 44 28 c6 1b b4 6a 30 fc 3c 1e 0d 8e e3 38 8e e3 38 ce 3e 9a 0e ce e6 06 b7 64 e0 91 b7 1c fe 67 ff e9 5c e1 b2 0e 1e f5 4a a2 6a 51 05 43 27 3b bb 28 a6 89 e6 3c 6a 20 6a 68 a2 04 61 a3 10 9d bc a7 1e 94 15 74 28 9b 1a c9 15 3d 4c 51 e5 58 e5 f8 6d 40 8d 27 f9 af ff d6 bf ff 36 ab 9f 88 ad da 3f dd ac 7c f2 33 8d 24 30 04 24 31 c0 7b 18 98 79 62 2d 95 03 16 96 67 d6 ab 0c 96 d0 56 f7 2b 22 15 20 08 0c ad da 48 1a 38 b1 e1 cb 94 14 48 49 81 06 3a d0 70 4b 6e c0 2d b9 35 ff cb e3 1f f8 e4 af bd e1 80 15 73 97 60 0b a7 2d a7 71 35 cb 4c ad 1d 95 e2 8a 5c 34 f3 ae 11 9a Data Ascii: J&]Lv_t%kssZ`-'UA@-P!FKFsC61D(j0<88>dg\JjQC';(<j jhat(=LQXm@'6?\|3$0$1{yb-gV+" H8HI:pKn-5s`-q5L\4
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: b7 01 e7 8e 69 c0 b7 af dc 8f 71 84 d9 57 1c 60 76 3c 17 44 24 db 57 9c e3 e5 90 1b b7 d9 5e 64 34 f2 01 d8 b6 13 9d 03 b8 b3 9c 1f 60 e5 5e 8a 32 49 73 f5 07 ab fc 1d 09 fe 81 ee 7c 4b 4f a5 f9 6b 3e 0f ad 11 09 93 d9 07 26 9c 7c f1 e2 4b cc 0e 04 44 bd 84 83 b9 a9 ea 6e 3b 94 61 9c 84 a6 68 31 c9 e5 48 f0 6d ee 2f 42 42 e3 18 c6 d0 34 08 e3 38 32 4d 43 81 83 9c 08 10 d6 0b 6c f4 52 c8 a5 8b 09 a4 18 fe 6d 6c dc 9a 60 6b 9b da b6 01 01 a8 91 a4 43 90 9e b7 1f fd 84 7f a0 17 18 c9 99 5a ea 88 df 77 0c 6a 40 b6 76 db be 04 cd 2d c0 11 2c f4 44 0a c5 cd ad f9 23 99 ac a0 3d 9c bd 71 46 46 6a 29 36 69 0c 91 b9 0e 06 df 3e 24 7c 91 e5 ed 40 96 f7 ed 83 83 9c 50 10 44 b2 da 53 60 ba 79 72 0b 66 b1 96 aa eb 5b 21 09 a1 b6 09 71 ef 06 a7 70 33 b2 a7 4a d6 bd fd Data Ascii: iqW`v<D$W^d4`^2Is\|KOk>&\|KDn;ah1Hm/BB482MClRml`kCZwj@v-,D#=qFFj)6i>$\|@PDS`yrf[!qp3J
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: ac c6 b4 1a ff 7e 37 6f 96 bb e3 b7 58 10 ac 18 f6 11 ac df 78 7e 76 23 18 11 6b 3e 20 a2 25 18 49 79 ae d6 39 77 9e c2 38 df c2 04 bb 40 b8 c0 85 ec 18 1a 52 9f e3 6c d2 34 67 c3 38 3b 29 b1 4d ca 36 fa 1a 98 f5 69 4e cd 71 4d 35 44 00 01 71 0b 68 a6 45 f3 7c 9e ae 30 e0 e8 5f 1a 8f 19 9e 33 1e 01 f8 7a 03 7f 89 ff 7e 8c 53 39 50 ac 29 ce 25 cd dd e1 82 cf c1 94 38 e0 c4 0f 8e e3 00 05 63 c4 21 04 cc 7a e0 a4 65 fe 68 76 01 50 78 17 38 63 3e 3f 4c 81 c5 e0 31 e3 d1 7c 2b 07 a6 f9 70 9c 6b 6d 3a 25 c7 45 39 15 88 71 ea 86 bc 4e 31 33 06 22 01 33 36 92 3e 04 48 6f 33 0e 94 cf 3e d0 ab ec f8 df 65 5a bb fc 79 2a bb 44 4a c2 00 34 82 68 07 ac 01 04 11 fb 23 ee 98 47 12 78 46 cd 0c ae 77 7a 00 6e 8a 65 4a 4d 2d 6d 9c d8 a9 32 72 14 24 c1 20 bf 08 b3 e3 08 dc Data Ascii: ~7oXx~v#k> %Iy9w8@Rl4g8;)M6iNqM5DqhE\|0_3z~S9P)%8c!zehvPx8c>?L1\|+pkm:%E9qN13"36>Ho3>eZy*DJ4h#GxFwzneJM-m2r$
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: c7 00 44 46 7e f4 d6 9e 41 c8 96 0c a7 f5 80 69 ab 66 88 11 20 30 09 1f 97 82 65 d9 32 80 ae bd 6e 5d 62 26 37 1c 7b 9f 3e 91 2a 00 34 4b 23 a7 db d6 96 ba a4 92 df 36 4b 5a bc 37 44 ef ab 4b cb 2e 23 9b bd 66 61 11 e8 63 35 92 63 23 61 81 cb dd 6d 6e e2 4f 6f 24 98 cd f8 24 9b 31 25 1d a1 98 02 53 a3 22 6b 39 c8 ce a1 17 34 db a4 7a 19 09 cd 48 43 01 28 dd b2 43 e9 30 10 f0 c6 6b 94 dc 51 ce c5 d7 ed e0 87 66 82 52 1a 9a c2 2d ca 5e 00 97 37 6d 7d d1 17 b4 8f d5 2a b3 48 cf 84 ae ec 74 58 9b 44 29 4d b3 b3 fc 52 18 7a e5 fb a5 c4 e4 06 ae 99 0d 8e 44 d2 27 98 e9 45 31 af 10 52 79 73 a3 5b 90 9d 9d f7 e8 3b a8 82 47 30 cd 88 18 b1 49 d5 2e 05 a9 8c 44 8c 01 97 99 36 d2 22 97 63 4b 7c 5e 93 dc 78 02 08 85 53 26 e9 ea af 6a 08 69 40 93 60 2c 04 2c 6d 1a c0 Data Ascii: DF~Aif 0e2n]b&7{>4K#6KZ7DK.#fac5c#amnOo$$1%S"k94zHC(C0kQfR-^7m}HtXD)MRzD'E1Rys[;G0I.D6"cK\|^xS&ji@`,,m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49873	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:32 UTC	525	OUT	GET /_sJ-ST-crO8lxIzTv44xv_hiZvA6X7X2-8jSjhha2RfYcGSgACRod38yA6dfmcJHy_M=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:32 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2616 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:10:05 GMT Expires: Fri, 25 Oct 2024 22:10:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 2427 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:32 UTC	845	IN	Data Raw: 52 49 46 46 30 0a 00 00 57 45 42 50 56 50 38 4c 24 0a 00 00 2f ff c0 3f 00 2a bb f5 ff ab b6 ad ac e7 ee ee ee ee ee ee ee ee 9a b9 bb bb bb bb bb bb 5c 77 3b f2 dc dd dd 75 cb d9 73 ee 33 e6 cc de 8e 76 05 cf 5f 8e 55 e3 50 04 15 d0 c3 c2 52 06 45 ec 12 2e 91 5b fa 34 a6 05 f7 85 15 e3 5a 80 53 08 99 16 f0 66 82 9c 2e b0 d4 ce 20 22 76 89 5d 9e 15 c1 18 eb 84 13 af 80 32 4e 4a 03 0e 1d dc 1a b0 89 73 43 ec 54 40 15 6e 99 55 c1 18 bf 16 18 bb 8e dd c2 8b d1 06 76 7e 23 e2 37 c8 08 f5 f4 41 e4 ff d7 0c 2d 78 15 27 c5 0b 20 65 0c 59 b7 b5 1d 5b b5 d2 59 fd 01 db 76 6d db b6 6d db d6 91 6d db 3b 7f 7a 91 6d db b6 5d b2 05 00 2c 23 e9 ef ef 49 83 a4 69 3a 3b b6 d1 b1 cd dd b1 6d db bc f6 7f 02 0e 1c 63 42 fe 0f f9 3f f4 d7 9d 9b 1e eb 66 ac 0b 44 f6 d7 14 6a Data Ascii: RIFF0WEBPVP8L$/?*\w;us3v_UPRE.[4ZSf. "v]2NJsCT@nUv~#7A-x' eY[Yvmmm;zm],#Ii:;mcB?fDj
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: ec 80 f8 fe fb 22 1f b3 d9 f5 40 68 2f 30 73 3d f8 16 b2 6d 6a 4f 8d c2 3f 15 7e 3e d4 19 7c b6 69 83 dc 0d f1 7f c0 10 33 d7 93 94 7a 9c 17 38 6b 86 b5 05 ac 68 cc c8 ce 84 ef 4c 75 d6 7f 29 38 f7 ee f9 cc 74 3b 6e f1 f7 a1 1e da d9 b6 ee 2c 5c f3 3e ce da 1a 3e d3 ae d8 16 e2 f5 72 56 14 bc 5b 57 9d 06 5f 6c 70 73 00 c4 bb 37 53 88 d6 58 87 dc 06 be 1b 07 65 bf 83 82 3b 97 b2 53 15 b8 11 10 00 37 bf dc 17 ab 61 37 d1 d7 87 cf 88 1a 65 a7 73 cf ae 37 05 7b c6 58 fb 3c 2a 0d b1 1f 8b d4 81 c3 cc 60 0b f4 37 81 cf 73 2c 88 12 49 13 4a 0d cf 8c 9e 0a 37 21 79 21 4e fb f4 fd 6f 0f f1 a9 f0 ae dd 11 b6 da 33 28 75 cc 18 ef b0 ff b0 c3 56 09 af 08 53 46 07 88 b3 e0 fd 24 0b d6 2a ff 9b 94 7a ee d8 70 ff d2 0e 0d 57 61 ea d6 50 9e 0e ef 8d 80 5a 41 f8 2b 92 f1 Data Ascii: "@h/0s=mjO?~>\|i3z8khLu)8t;n,\>>rV[W_lps7SXe;S7a7es7{X<`7s,IJ7!y!No3(uVSF$zpWaPZA+
2024-10-24 22:50:32 UTC	393	IN	Data Raw: 2d 22 ae 0f 3e 49 7e 74 8e c7 09 d9 b3 f8 f5 43 d9 b3 f8 4d a9 ef 26 85 7b c1 ca 2b 74 53 9d ff f6 3f 5e 7f 39 c1 4a 6d ff 7b 96 f3 dc af ca 5b e9 d5 14 f5 96 10 b9 0f c5 a9 b2 b6 77 cf a7 60 74 7f c4 f5 0e a7 6c 0c 90 b3 9d 9b 1f 77 5f f4 73 b6 27 7d 8d 7a c3 4f e0 55 92 ee 74 a7 bb 97 4a 9a 27 a7 ad 92 d3 96 6b a7 ad 4a c4 4f ef 9e 4b 6c ad 12 5e fe 6a ff 5e 46 0b a4 a2 37 69 01 0c df 92 d4 a7 85 de fd a3 31 c6 44 ff 58 35 b0 66 88 53 e3 1a fe 4b d2 b5 e3 08 7c c8 7f 21 ff 85 fc 77 e8 b9 06 99 68 66 32 f5 95 b0 14 0d b5 cc 76 1b 06 9f ff 86 14 3d e5 38 06 3f 58 31 b4 28 45 8b 7f cf 9e 8f c1 43 72 8b 6d 29 ca 27 77 3f c0 c0 24 24 cf a5 68 fd ec 8d cb c0 fe bb 14 91 05 91 16 b0 58 6b 48 48 8e 47 d9 ea ca 0a d8 4d 16 fd 94 95 a4 52 49 33 37 60 f6 96 e5 47 Data Ascii: -">I~tCM&{+tS?^9Jm{[w`tlw_s'}zOUtJ'kJOKl^j^F7i1DX5fSK\|!whf2v=8?X1(ECrm)'w?$$hXkHHGMRI37`G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49876	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:32 UTC	526	OUT	GET /bYtqbOcTYOlgc6gqZ2rwb8lptHuwlNE75zYJu6Bn076-hTmvd96HH-6v7S0YUAAJXoJN=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:32 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 51542 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:29:18 GMT Expires: Fri, 25 Oct 2024 21:29:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 4874 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:32 UTC	844	IN	Data Raw: 52 49 46 46 4e c9 00 00 57 45 42 50 56 50 38 4c 41 c9 00 00 2f ff c0 3f 00 4d 48 8c 24 49 91 24 ab cc 6a a8 58 fd 25 6e 9a 07 01 22 fa 3f 01 7c 3d 81 d6 a0 3d d4 c5 7f 3b 7e 11 e3 bb b8 7c 6b 80 7d 98 11 91 f3 61 82 6d 47 04 8c 88 5c ef c0 2b c7 be d4 9d 6d 37 98 3b c8 cc fc c0 91 27 32 73 02 6d 27 a9 28 47 d6 a9 4b c9 be 6a 19 48 11 3a 21 a9 76 30 2d f1 34 14 5a 0a 90 55 1b 73 d9 0f 63 d1 32 14 59 17 1c d6 1d 59 99 f3 9b a1 be cc cc 4c 70 bc 4d 49 40 f5 cc 0c 3b 42 d0 1d f5 04 3d 33 56 81 ad 0b a4 9e 0b 33 33 23 ec 0d fb 82 2e 89 02 a8 1e 11 06 5b 75 00 a6 55 1c 1b 4c 6c 9b db 7e d3 01 6c 9b 6b e9 f7 8b 75 00 11 11 76 bd 48 9b b3 01 6a d7 41 71 d4 ce bc 46 b0 ed b1 36 b6 75 33 d9 cf ce b1 f8 6b 7b 5d d4 37 f7 ed 93 85 e4 46 92 1c 49 b2 25 c7 39 79 f1 13 Data Ascii: RIFFNWEBPVP8LA/?MH$I$jX%n"?\|==;~\|k}amG\+m7;'2sm'(GKjH:!v0-4ZUsc2YYLpMI@;B=3V33#.[uULl~lkuvHjAqF6u3k{]7FI%9y
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: b7 1f 49 0f 6f df ed b7 5a eb 35 3b 88 c8 96 dd dd ef 7d 82 7c 64 9e ba 94 4a 4c 6a d3 4a 68 9e 5e dc 87 ee c3 eb 3b 09 82 e0 7d a1 5b b5 6e 2d a2 b2 a0 54 26 47 f7 b8 67 c6 7d f8 e3 cb 2c 2c 16 e3 a2 59 7c aa 87 2f f7 d6 da 72 f9 b9 fb e3 cb 4d 3d e9 f6 ad 75 eb 4e ad 0c ae a9 f2 17 b5 ca 64 70 74 ff b3 d4 77 d4 1d a5 36 18 0c fe b3 0e d7 42 2f 3a 75 68 dd 43 ab 56 35 94 aa 64 30 a9 54 6a 93 ca 75 39 a1 1f 4c 1d 5c 1d 9c 4b 48 3d 0d a5 2b 55 b0 a9 d4 2a cb 02 db 2a 82 ca d0 73 99 a1 da 32 a2 0d 06 93 6d 81 d1 ce d2 dc c5 b4 11 0c 56 fa d4 42 a8 49 5d 68 50 1d 8e db 46 72 24 95 f2 cf ba cd ac bb 7b 47 c4 04 f0 5f da 5e e6 88 7a 89 87 17 d8 02 14 3c b2 32 ab 66 a7 ca 5a 71 15 15 d4 09 d5 8d c5 1d 67 14 bc c8 c9 03 af c8 82 13 20 17 a4 4b 87 e2 01 24 49 23 Data Ascii: IoZ5;}\|dJLjJh^;}[n-T&Gg},,Y\|/rM=uNdptw6B/:uhCV5d0Tju9L\KH=+U**s2mVBI]hPFr${G_^z<2fZqg K$I#
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: fa a7 04 5c ac b2 af ab 0e 7c b6 83 d3 20 9e ab a5 e1 2d 04 e9 27 8d c0 aa bb c5 07 5c b3 38 80 dd 19 e8 f1 5c 79 0e 2a e0 f2 b8 24 e1 c0 48 ec f4 eb 4c 8c ae f3 de 9f 71 91 1e 9d 20 65 41 86 66 8f 81 d9 64 bb c1 9d 1e d1 b9 98 16 4e a9 0b f0 d4 31 61 bf 24 05 0d 95 50 33 28 20 ef e6 8d 76 50 0b 4d 16 77 4a 1a 57 2c 01 33 bb 61 6c 10 75 7e b0 e9 af 31 38 85 27 28 50 76 47 d3 3b b8 f5 b5 2b c8 dc cd 47 28 d4 71 45 c8 bf da 30 6f 7e 97 79 3a 47 50 0a 5b 2a 54 b7 83 5c 59 1e cb 93 73 e3 b6 ab c4 ca 49 bc 2c 2d 47 e9 08 4d 57 c3 b3 04 45 b5 1a 2b a9 4d d4 67 ef 27 52 32 29 7b 48 1e 51 19 fd 51 75 ec eb 01 8d f7 d8 06 f2 ca 91 7c 18 0b 8c 15 07 e9 00 23 6b de 49 0d 2f 63 32 66 12 9f 3c ba d8 bb ad 38 8f 4e 3c 22 8b 2d 56 d0 21 50 11 5c ab 34 f2 f5 d1 7b 47 8f Data Ascii: \\| -'\8\y$HLq eAfdN1a$P3( vPMwJW,3alu~18'(PvG;+G(qE0o~y:GP[T\YsI,-GMWE+Mg'R2){HQQu\|#kI/c2f<8N<"-V!P\4{G
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 01 1d 54 ac 20 ee 7d 88 cb 3b 26 bf 55 fd 04 45 31 77 2e 20 7f 99 14 df 97 ab da 0a 02 d9 00 25 ed 82 cd fd d9 00 41 d1 0a 1e 8d 61 d9 4c b8 ff 59 c8 b0 ea d1 ac af 15 3b d4 f0 68 10 91 b2 4a fc 78 bb 2b 81 e0 83 14 b0 29 40 71 2e 2e bc a2 0a 23 fe ac ea bb fa c6 eb 88 ab 94 da a6 35 5f 06 62 7f 06 95 6c f2 83 ee 75 a1 a5 ba 5e f5 a7 84 36 88 83 ea 54 f5 b9 2d bf 5a 22 34 68 79 5e 3d 7f 0a 06 31 eb 7b 04 0a 83 af d8 ec ac 89 84 95 f8 46 d3 de e3 76 e1 4d 02 a5 0e d1 ca 1e 88 96 c3 8b c4 4b f7 89 1a 72 a5 70 79 14 ef 0b 9a 62 a0 a4 97 2d 0a 66 d6 69 fb 73 8f 1e 68 a1 35 3e f5 c8 cc 09 2a 7c ae bf 47 02 1a 7c a8 9a 56 e2 cd 11 bb ab 85 fb 7a ab 77 95 39 b7 2a f7 3c b1 67 be b0 83 b3 d2 a6 07 17 b2 48 ef 2a bf a4 4d 81 04 75 84 89 6b 7e b5 9d 8e 40 50 cb 85 Data Ascii: T };&UE1w. %AaLY;hJx+)@q..#5_blu^6T-Z"4hy^=1{FvMKrpyb-fish5>\|G\|Vzw9<gH*Muk~@P
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 1f 3a 24 87 14 3a 48 9c bb b3 43 14 45 d7 ba a3 3e 6e 4a b5 90 5c 0c 5f db 5e e3 a4 bf 72 ea 67 db a5 d9 45 55 6e 7f 37 b6 cc 56 6e 0c f7 d6 78 a4 cd 5b 8d e7 29 76 4c ef 9c bc 56 3d 3a 74 70 fc cb cd 6b fe 96 27 70 1a 11 37 e2 75 4b ed 48 e9 37 f6 b4 19 7a ef c8 d5 08 13 de fc 01 13 50 0a f8 e4 42 9a 3a 9d d9 fe e1 00 9a 24 0c 4b a8 62 e1 d4 42 09 dc b1 16 ed b9 0f 35 ce 9b a3 7b 09 34 8d 1e ca 75 ee bc 3d 1f 27 51 cf 32 ea 09 33 9c 88 e4 bc e7 cc 3c 94 c6 ab b0 03 a7 84 fa f1 ef 51 64 65 64 83 3d 23 c1 e1 c2 f6 dc 3c 8d 16 7b 45 e7 c0 21 8f 6a fd 1b eb d1 fb c7 90 da 24 b1 dd 69 9b f9 d4 eb 8a 92 55 f0 8b 4a 8d 04 34 1e b3 5a 0f 0f cf c1 ef 84 1c 41 82 11 ea 1c 83 e2 d5 44 8e 8b 37 96 49 da af 17 1a b1 13 47 dd 74 f9 62 7d fa 9d d4 6b 82 57 fd 52 ce 45 Data Ascii: :$:HCE>nJ\_^rgEUn7Vnx[)vLV=:tpk'p7uKH7zPB:$KbB5{4u='Q23<Qded=#<{E!j$iUJ4ZAD7IGtb}kWRE
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: a8 51 71 39 3a b6 61 5f 8b 47 84 44 30 c7 97 9c 04 0d d0 4f 4d bb 24 a4 b2 49 da 38 1c a9 c8 e5 76 19 74 3b 61 62 07 09 06 ea ee 6d 2d cb 0f 90 62 0c 99 d2 5a 8f a8 02 8f 72 0b 14 9e 19 33 54 d1 42 dc a0 a4 de 3f 7f f9 87 14 fb 6d 41 94 a9 38 f2 04 a3 31 f2 ac 4a 7e 2e ac 1f 95 9b c8 5b 05 92 23 ee 3e 6c 0b 61 e0 30 3a e4 35 17 77 bf d0 40 85 92 4c 0a 28 36 0c 5a c9 82 8d f7 f0 14 f9 f2 0b a7 1b 8c d2 b8 62 a4 c8 42 8b 5f 38 83 da 58 12 a1 6e 3b a6 bf 37 42 9c 2a 69 85 b6 5f 92 de c3 af c7 68 30 84 fc 8a 40 99 d2 e1 fe bd 4b 6c 56 13 2b 6b f1 df ca 36 a5 eb 2f 4d ed 49 71 48 fc 2d 41 d5 1f e3 49 94 d0 85 4b 18 18 77 ad db bc 52 ef f7 38 7b 8a c7 9b 82 9f b1 54 10 3e a7 d9 aa 5c af 82 7f ef cb 53 82 e4 f4 e7 61 c1 90 ec 11 08 8a 97 7a b3 61 56 bd f6 1f 4a Data Ascii: Qq9:a_GD0OM$I8vt;abm-bZr3TB?mA81J~.[#>la0:5w@L(6ZbB_8Xn;7B*i_h0@KlV+k6/MIqH-AIKwR8{T>\SazaVJ
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 9b 8e 38 f8 63 80 d4 db ee 8b 80 b8 14 87 a0 2d bb 1b 89 1f 5a c7 dd 84 03 7c 1e 55 ee b6 98 0f 1f b6 2e 18 27 a8 b4 45 8b c7 63 eb 6d 7f 89 7e 05 f3 a0 d6 3a 51 09 e9 e5 5d a5 5b ae 0d d7 b3 f9 8e 36 ef 5c 77 44 b2 27 31 a2 67 e2 22 f2 af 02 c9 21 eb 5a a9 f8 30 23 aa 9f 61 ec cd 11 79 29 2e 27 62 5c 09 54 42 8f 6e 5b db 48 c8 6f ab 77 44 0a 96 9d 15 f6 d6 43 c2 d7 3e f7 81 b2 57 4b 55 c0 b3 ca 40 0a ca b9 cd e0 9b 5f 04 46 dc 7a 4e 7d 2e de 64 2b 41 9c e3 91 63 fb 23 da 33 06 bc d6 2d df 04 1a 14 5e 59 0c 85 1b 48 22 fe 9a df c9 de 87 00 43 01 11 11 4a 80 64 e5 00 45 89 96 9b f5 1c cd f0 40 e1 98 31 10 d2 12 de ee 58 d9 f9 e6 b1 44 d3 00 49 b9 9a 04 c6 4c d9 a0 a1 c3 3b 00 a5 1b 94 41 38 a7 ea c5 cd d5 5a ce 50 d4 77 d7 0b 4d 9d c5 19 ff 53 e1 14 08 dc Data Ascii: 8c-Z\|U.'Ecm~:Q][6\wD'1g"!Z0#ay).'b\TBn[HowDC>WKU@_FzN}.d+Ac#3-^YH"CJdE@1XDIL;A8ZPwMS
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 1d c7 6e b4 d2 66 20 78 15 34 0e 54 7a b2 6e e4 41 b4 15 99 2a 38 4a 84 c8 3d 19 2c 90 1c 54 27 fa aa 01 c2 40 75 d0 60 45 30 2a dc 95 c2 89 c8 77 61 da b1 a0 ef 6b ed 74 84 52 9f 3f be 8e 94 8f d8 45 b8 52 c8 6b fa 2c 11 61 21 e3 5b 1c aa e6 1d ca 35 d7 70 be 47 48 16 1c 3a 1e 31 6d 8b 78 f4 71 74 c7 09 15 8f fa f0 e4 9c e8 c7 15 d1 82 8d bd 57 8f 3e c0 10 23 56 15 3a 62 35 2b 6f d2 76 d5 b3 40 8f 22 9b 73 c5 6e 3a e9 10 e2 cc 32 f8 b7 d6 77 e4 84 d2 c4 4d 11 71 95 c1 99 c1 e9 d4 07 5f b2 1d b1 f8 5d 0c 9b 7a 54 a5 a3 af 5a 4a 50 e7 9c e0 04 34 09 63 04 37 21 da d1 b7 b8 d0 28 21 10 0b b6 e8 63 d2 40 6c bb b0 e8 7c 29 70 66 13 36 5e 51 c9 1e 3b 3d 5c ad 00 ee a0 95 24 14 a3 42 f0 3f 20 2f dc 1d b1 76 f5 5c b7 b3 e4 67 bf 77 c2 9d 7f 72 e2 af ff e4 b8 87 Data Ascii: nf x4TznA8J=,T'@u`E0waktR?ERk,a![5pGH:1mxqtW>#V:b5+ov@"sn:2wMq_]zTZJP4c7!(!c@l\|)pf6^Q;=\$B? /v\gwr
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 45 24 9e b6 29 f5 1e 25 f5 ac 7f f4 fe 44 ef 3d 95 cf 73 fc f4 59 d8 c1 d8 c3 03 94 6c 11 93 b1 5b a7 ce 4a 7a 52 bf 91 fd 6a cf e9 69 e7 1b 2e 84 5f 13 10 b1 4c d1 e9 a4 59 bf 5b 63 65 f8 9e a0 f7 be df 58 ba e4 3a 33 02 da b0 f6 f4 fd 2d 7a 32 dc e9 5f 96 81 21 40 c6 89 c4 3b 71 dc 1c e1 f0 19 1e e4 8f 7c a1 f8 74 d4 0c 4e ca b4 32 86 c4 a0 91 fc 19 8a bd 6f 4d 1e 64 0e 46 76 de 31 29 a4 25 22 35 29 1a 84 d1 d4 22 11 de e1 f8 46 94 d9 6d 78 64 e7 bc 17 48 1e 54 12 0b e7 e8 cb 58 af dc 4d ed 7c e3 71 cd 87 e0 c1 d9 ac 36 15 5b f2 55 6d 79 6f 8b ce 69 72 87 6e 0d a4 c4 ef e6 9a 12 8c e4 19 d2 6b b2 9a 73 cc 81 ef 69 7a 7e b8 7b d2 0f ff f2 27 d0 86 b6 bb ff ad 4b 1f fa e7 9e c7 fe 86 37 16 78 b4 61 5e 35 3c b4 7b 03 25 65 0e 09 8e f2 a9 53 03 ae 34 d4 21 Data Ascii: E$)%D=sYl[JzRji._LY[ceX:3-z2_!@;q\|tN2oMdFv1)%"5)"FmxdHTXM\|q6[Umyoirnksiz~{'K7xa^5<{%eS4!
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 85 79 1f e2 ac a5 a8 95 ef 81 3e a2 7c d8 30 2f 21 ed dd a2 fb 25 78 e7 f1 85 b8 6e 4c bf 69 7b f1 ad 54 c2 5c a0 2d ed 4a 6e 51 d4 b9 d4 58 06 ff 11 8d bf b1 c5 77 dc 64 c9 8c b5 94 3f 11 4c 4f 30 f2 0c 68 dc ba 93 32 5d 17 14 94 43 25 10 22 c7 04 a6 62 a4 80 94 27 1b 6d c6 1f bd b1 e6 c6 17 9f be f8 85 67 42 7b ed 87 04 c6 88 1a c9 a1 a4 eb 9c 41 f5 a7 5f 1e 16 4c 78 f7 2d 39 16 dd ae 64 f0 29 91 8b 4d 67 44 e4 5f bc 00 ed 53 0c df 26 91 50 c2 1c ec e4 92 74 ec f8 7a a1 99 93 2f 31 52 a0 eb 62 ee ac 4c c9 d1 2e 0d 3f d3 85 2a 11 dc 1c 65 69 11 2a aa 0f f5 bd 97 84 1f 80 4a c6 fd f4 7f 1d bd 19 77 46 62 c0 27 4e 28 95 47 81 3a 78 0d ae 71 16 c1 93 14 cf aa 29 5e 96 7c 0e 1d 91 16 45 39 e2 d6 a3 23 e3 d1 ed 47 fe fe b1 dc d2 66 31 58 40 b9 e3 6f 5b a8 16 Data Ascii: y>\|0/!%xnLi{T\-JnQXwd?LO0h2]C%"b'mgB{A_Lx-9d)MgD_S&Ptz/1RbL.?eiJwFb'N(G:xq)^\|E9#Gf1X@o[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49874	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:32 UTC	524	OUT	GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:32 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10588 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:10:18 GMT Expires: Fri, 25 Oct 2024 21:10:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 6014 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:32 UTC	844	IN	Data Raw: 52 49 46 46 54 29 00 00 57 45 42 50 56 50 38 4c 47 29 00 00 2f ff c0 3f 00 4d 40 72 db 48 92 04 d9 91 b5 20 f2 ff 1f de b3 bb 67 ce 11 fd 9f 00 fe df 3a 62 03 11 e7 e2 02 7b 8b 04 20 d9 10 b1 e1 11 dc 81 24 81 34 e1 41 1b cf 0e 79 f2 2a af df 27 84 eb 0a ad 9d 49 75 44 a5 da 73 d9 64 d3 52 33 33 62 ea 22 33 d3 56 17 75 a7 6c c9 fe 05 f9 45 d0 e8 40 7f 53 30 f9 be 8d 5e c9 7e 47 fd a7 b1 7b 99 b6 97 1e 00 5b 7a 0d b5 ae 71 07 80 65 ef 8a 08 2e a0 b3 37 ae 0b a8 75 df f0 dc 1f bb 80 1c d9 b6 6a a5 91 00 c8 3f 2a 77 db f5 ea 2b 7c b9 b8 eb 13 1e 23 a6 90 24 d9 36 6d e5 f7 f3 db df 37 5e 6b cd 7f 2c bf 69 db b6 7f 40 8a 24 c9 91 e4 33 3d 0a c6 f2 47 b2 10 e4 dd 05 84 7b 69 d5 ff 09 c0 7f 73 64 0c 8c 81 f1 27 2c a7 ad 05 00 0b 33 b0 d8 9c 26 cd e8 69 f0 0c f5 Data Ascii: RIFFT)WEBPVP8LG)/?M@rH g:b{ $4Ay'IuDsdR33b"3VulE@S0^~G{[zqe.7uj?w+\|#$6m7^k,i@$3=G{isd',3&i
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: b3 8c cf 2e fc 3f 11 ae 06 4f 8a 27 04 33 c3 65 58 98 ae a4 44 db b6 29 c9 da fb 5c c4 8b 88 97 aa c4 18 d1 aa 6f db 36 7a 46 cf 6c fd 96 6d db fe bf 5d cd df b2 55 b6 6d 33 cc 7b ef 89 09 d0 ab ec ff 3b 69 9a 53 b5 de 84 9b ae bc 42 a1 23 70 87 a8 58 a1 0e 44 07 21 74 08 3a 84 f5 ae 2b a8 9e 9e ee 7e 5d 7a 47 1b ca 7f f8 f2 97 f9 49 f1 52 0c 1a 8a 2f 74 50 f2 59 c1 3f 18 fe b0 e6 09 1b 31 d0 0c 25 f3 89 5e 93 bd cc 4b 53 c8 fd e4 fd fa e2 cb b3 c1 c4 f2 cd 9a bf bc 8d 45 45 9a 03 90 69 99 d6 a3 05 a8 b5 6d bb 56 d6 3a 3f 7f fd c9 a0 53 1b 74 87 a6 2e 8a c0 e1 70 f9 ed 0d 29 b2 6d d7 ca 5a fb 47 e2 88 21 52 f0 8c 0f 44 50 b8 c8 ec 1d 13 f0 08 9e f9 ff 99 ff 9f 01 de 0c 57 32 66 c4 58 42 0d 74 e3 7c 0e 1d 63 0a 0a 05 ee 27 f6 1f b8 18 ee b2 42 03 09 a9 05 Data Ascii: .?O'3eXD)\o6zFlm]Um3{;iSB#pXD!t:+~]zGIR/tPY?1%^KSEEimV:?St.p)mZG!RDPW2fXBt\|c'B
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: cc 2c 91 19 35 12 59 81 d3 50 94 06 1e 07 8d cc 50 e4 db ca e9 2e e0 bf a3 55 22 72 02 aa 37 92 18 34 9a 65 f0 13 31 e9 31 eb b0 f6 cc e4 2e 99 bc dc 3c 6c a8 33 05 3d 1a 3c ad ea 71 02 06 88 6d 5c 72 aa 00 93 8b ac b0 11 a3 d7 b6 11 b0 42 50 41 df 88 3f c9 14 56 74 f2 d3 56 64 52 27 0a 7a cc 07 a2 a0 5f 9d 1d e8 45 ab d1 56 11 b6 bd b6 00 3f cd 0a f2 6d 6c 60 e4 2c 3d df c4 12 49 42 82 35 1b 33 1c 94 c1 10 9c 1d 31 51 46 32 a8 75 f8 67 38 dc b6 cb f1 b0 f9 4b 2d 6e 88 6a 00 af 2b 01 0f 0f 62 dd ab 78 8e 68 3b f2 c3 c2 26 0f d5 8f c9 49 b5 a0 4b e4 15 12 4b f7 2a da 61 ac 1f 02 45 a4 96 6a 24 9b 5d b1 88 d9 3b a2 5f ce 36 e7 8d b4 14 7e 9a ff 18 4f f7 7d 2d 49 ae 6e 22 67 66 71 1f 75 0d ea 40 52 84 d2 6b e9 80 66 e8 88 32 18 3e 70 40 1a 80 b9 70 48 9d b7 Data Ascii: ,5YPP.U"r74e11.<l3=<qm\rBPA?VtVdR'z_EV?ml`,=IB531QF2ug8K-nj+bxh;&IKK*aEj$];_6~O}-In"gfqu@Rkf2>p@pH
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 19 77 b3 ef 61 ff dd 69 96 f9 46 1c 11 98 80 b5 16 09 09 40 80 bd 7c 16 3d 31 4f 7e 47 1f f3 04 b9 1c 8c 88 99 71 be 7d 34 7e 45 73 6e e1 81 2b cc 01 59 29 1c 53 05 e0 81 3d 0a 23 8e 36 03 8f 9c 23 b0 37 cc d8 a4 04 36 98 81 43 45 b4 15 f6 94 0a 7b 0f f6 04 20 d5 f1 38 09 30 60 db 6d 1e a0 81 13 90 18 a8 41 c0 0d 80 35 73 2c 45 39 65 8c 21 b1 a6 5a 56 43 d4 69 95 e2 22 b6 9c b2 56 cd cd 96 45 59 97 ad a2 12 a7 22 ef 38 09 a9 3c 42 23 d2 57 d4 52 08 fe f8 f4 a6 87 b7 a9 74 f9 92 39 f9 3d 0f 17 ef 7c 3c 21 3e 34 46 38 f6 db af 9d 9d 72 a6 dd d6 0b ee 96 9d 7b 59 a4 54 e3 fd ee df bd 47 d8 5b 6d 22 54 a9 28 c3 7e 7c 3c 07 cd ce 0d e0 94 ad 08 66 df b6 51 0b da 78 95 52 61 a7 c0 ac 4b 75 04 a9 0c d8 76 9b d9 8f 00 03 48 f3 30 3c 20 84 1b 00 b4 cf 7d bc fe 33 Data Ascii: waiF@\|=1O~Gq}4~Esn+Y)S=#6#76CE{ 80`mA5s,E9e!ZVCi"VEY"8<B#WRt9=\|<!>4F8r{YTG[m"T(~\|<fQxRaKuvH0< }3
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: ba 97 72 01 02 43 f0 a1 06 cf 54 66 bc 67 3d c5 af 87 97 b5 86 00 02 b5 11 17 97 6c 97 10 f6 f4 56 01 b0 13 e8 7f 10 65 7f ce 14 f7 b6 3f 4c 24 7c 2d c1 51 5b 95 92 5f 77 50 ec 20 fd 40 16 50 f0 18 eb 22 10 d0 47 54 d8 08 48 be 04 d2 2a fe 96 b7 27 4f db ed 93 9d 42 69 46 d5 fd 8e 78 d9 c7 8e c6 f8 1f 3e 96 5f 71 79 ac 8b 81 b6 ec 82 6d e3 9e f7 7e f9 50 84 be 0d 60 b3 54 78 7c cd 52 9e be 0c e9 6c 29 8c a8 cd 66 b7 69 6f 86 b6 e1 fa ef e9 d8 7e 57 5b 1a 28 1c c9 c2 bd d0 41 85 9d 52 d9 00 12 1e be 7c d7 ed f6 c9 80 e0 00 7d 03 54 c0 fb b7 af 5a 65 d8 13 d1 4c 5b a1 af 09 e0 04 1e 5f f3 1c 9b a7 8f e7 e1 b2 81 45 6a b2 70 42 3f cc 0d ce 5a f0 aa 40 41 bc 21 8e 23 f8 e8 d5 78 10 38 a5 b2 13 e0 00 3b 94 4f 76 22 95 03 74 bb 28 f0 af c3 3e a2 b5 5d 02 1a ba Data Ascii: rCTfg=lVe?L$\|-Q[_wP @P"GTH*'OBiFx>_qym~P`Tx\|Rl)fio~W[(AR\|}TZeL[_EjpB?Z@A!#x8;Ov"t(>]
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 48 33 80 9f 89 86 53 9b 99 3e a2 c2 89 54 80 9d 3f c1 a7 cb 5f 3a 83 66 7b 22 68 66 bd d8 69 00 dc 91 ec af f2 e0 31 03 d8 bc 80 13 8a de 91 30 40 01 76 ee 55 78 92 60 03 4c 10 cd 4e e0 48 7a 4a 37 09 fd 7b 38 5c a5 b5 33 68 36 12 f4 51 2a 3b 91 00 c3 5e 55 76 9f a4 c3 fb d8 10 f0 98 c0 f1 38 d1 d5 00 28 d0 3b e3 d5 6c 22 da e0 94 ca 06 15 4e 44 01 06 51 76 ee 35 49 c7 bb dd 44 44 7b 0d 70 3c 4e bc 65 00 34 40 07 e2 4a ce 8c 06 cb 2a 15 90 5b 70 22 01 38 11 60 f2 50 4c f2 8e 8c 68 8f 9c d7 26 2e 57 5a 03 6c 1b 44 70 77 85 57 44 e3 62 18 a0 c0 6c b7 4f 3b 83 0a c0 48 b0 23 45 f5 3e 49 f7 c4 65 db ee 01 a5 6f 27 80 b9 f4 99 78 c1 df cb 15 ef 03 93 12 74 a4 32 89 58 df 21 15 66 92 ca 1e e3 32 47 11 70 0f 68 d8 99 00 76 02 27 08 e8 3b 1e e2 0a b1 53 14 e6 1e Data Ascii: H3S>T?_:f{"hfi10@vUx`LNHzJ7{8\3h6Q;^Uv8(;l"NDQv5IDD{p<Ne4@J[p"8`PLh&.WZlDpwWDblO;H#E>Ieo'xt2X!f2Gphv';S
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 48 6b 3b a0 b0 11 f4 4e 34 50 d9 29 15 af 60 53 90 11 8d d3 89 f5 ba db 31 01 bf 6b 41 72 aa 39 db 79 be 5f 8d 34 da 6d f8 7d ff 65 e5 21 97 b3 3f f5 f7 ef 3f 02 da f3 f5 ac 5a f5 51 77 fd a1 88 8e d1 90 5c c1 40 47 71 17 f6 bd 53 2e bb 01 80 99 04 e8 48 33 bd 8f d2 42 ec 44 00 76 4a 85 bd 57 dd dd 65 44 83 6d 47 66 69 c3 b6 9f b0 53 aa 3f cf 3e c0 1e 01 a9 06 22 00 ec 8c e8 be 3b fd e1 e3 2a fb 61 3d 5e b0 1a 29 cd 71 0b 0e 1f 20 33 48 1f 7a bc cd 53 e3 bc 8f 5a 35 0b b8 d6 f9 4b f5 25 ee df 96 b4 75 f5 2c 38 ee 06 71 1c 78 b1 ba e0 3e ef cd bc 23 98 49 08 d7 41 40 ef 29 95 01 01 d8 29 c0 08 b8 98 64 44 43 70 e0 34 94 46 04 3b a5 b2 f7 2f 0d 76 09 48 35 0c 7b e4 d3 28 b9 4a 7b 15 1c f6 ce b8 6d 96 2d e4 2d 88 23 4b 28 e4 04 6f 39 dc fb a1 a6 bb 7d c6 b5 Data Ascii: Hk;N4P)`S1kAr9y_4m}e!??ZQw\@GqS.H3BDvJWeDmGfiS?>";*a=^)q 3HzSZ5K%u,8qx>#IA@))dDCp4F;/vH5{(J{m--#K(o9}
2024-10-24 22:50:32 UTC	1378	IN	Data Raw: 11 65 f0 97 03 4d 72 2e 68 0d ce fc ac db 15 17 ac 39 03 d9 76 2a b6 0c 53 36 b5 3a 20 92 20 09 20 88 77 5a 14 cc 10 7f eb b7 14 06 cf 70 ff db 85 63 80 4d 9d 17 65 21 ec f9 78 5f fb fc 32 5c 12 fb 61 bf 98 e4 16 da 7b 35 6c bf 3f e7 15 24 37 3d d2 a5 33 2e ff a8 b8 30 ab a4 3e ff f8 1c 33 7b b8 b5 f8 02 af 66 2f fa ba 7d a2 e6 23 a1 19 e8 d8 6d fb a3 7a d1 74 61 29 db 0d 5d 0e f7 05 0a a2 a3 71 10 86 52 4a 22 4c 0c 5d 00 98 2d 9e 9f 7f 65 22 5e 56 d7 dd 71 13 16 1d 33 e3 4c 9e df b4 f3 ee cd f7 9d 97 e6 3c 9c 21 62 bf 72 a3 37 69 6e 3a 51 bd 7d 38 27 c6 20 8c 01 50 bd 3f 73 06 2e f0 11 e9 9b de b7 7c ff b3 24 84 dc 80 36 de 75 a4 67 f0 f2 d2 4b c5 7d d6 e9 29 52 ac 51 50 83 a8 06 e7 96 33 6f 72 fe be 85 87 5c 8e 0b 32 8e 0d d8 b2 c1 bc be a1 04 dd 4b 7a Data Ascii: eMr.h9v*S6: wZpcMe!x_2\a{5l?$7=3.0>3{f/}#mzta)]qRJ"L]-e"^Vq3L<!br7in:Q}8' P?s.\|$6ugK})RQP3or\2Kz
2024-10-24 22:50:33 UTC	98	IN	Data Raw: b2 d6 a9 f4 a4 05 e6 d2 ac e4 45 52 89 36 02 95 c5 31 19 0c 24 21 59 65 59 9d 5d 82 3f 80 95 ac 2c 15 53 18 8b c5 b1 19 0c 81 24 ee c4 e0 84 90 2e 22 62 2a 8b a3 54 89 48 83 d2 b4 81 84 24 21 44 58 1c af 62 10 91 db 10 42 30 84 a3 57 10 d2 44 88 8d 10 08 47 b4 dc 32 3c f3 ff 33 ff 7f 6e 4e 00 Data Ascii: ER61$!YeY]?,S$."b*TH$!DXbB0WDG2<3nN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49878	172.217.23.110	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:33 UTC	1490	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5483 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA; _gid=GA1.3.2110399767.1729810210; _gat_UA199959031=1; _gcl_au=1.1.1430326302.1729810210; _ga=GA1.1.104830921.1729810210; OTZ=7791770_72_76_104100_72_446760; _ga_6VGGZHMLM2=GS1.1.1729810213.1.1.1729810226.0.0.0
2024-10-24 22:50:33 UTC	5483	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 32 39 38 31 30 32 32 35 38 30 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1729810225805",null,null,null,null,
2024-10-24 22:50:33 UTC	836	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:33 GMT Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Content-Security-Policy-Report-Only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/3a220ba58ee09f8ff61d38cf740a2d68/mr Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:33 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 32 39 38 31 30 32 33 33 35 34 39 22 5d 0d 0a Data Ascii: 1a["900000","1729810233549"]
2024-10-24 22:50:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49879	172.217.23.110	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:33 UTC	1490	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4807 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA; _gid=GA1.3.2110399767.1729810210; _gat_UA199959031=1; _gcl_au=1.1.1430326302.1729810210; _ga=GA1.1.104830921.1729810210; OTZ=7791770_72_76_104100_72_446760; _ga_6VGGZHMLM2=GS1.1.1729810213.1.1.1729810226.0.0.0
2024-10-24 22:50:33 UTC	4807	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 32 39 38 31 30 32 32 35 38 30 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1729810225807",null,null,null,null,
2024-10-24 22:50:33 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:33 GMT Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:33 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 32 39 38 31 30 32 33 33 35 37 36 22 5d 0d 0a Data Ascii: 1a["900000","1729810233576"]
2024-10-24 22:50:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49880	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:33 UTC	1105	OUT	GET /NJ5uQ6WWHUGny_oHS_2hjNPaplNPw_3CXvl7AWtkVOwHgo9GNwvi3a8y7wyvvIxacWZZO2Vj9Q=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:33 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 60180 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:23:54 GMT Expires: Fri, 25 Oct 2024 19:23:54 GMT Cache-Control: public, max-age=86400, no-transform Age: 12399 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:33 UTC	843	IN	Data Raw: 52 49 46 46 0c eb 00 00 57 45 42 50 56 50 38 4c ff ea 00 00 2f 87 c2 5a 00 8d 40 6c db 48 92 04 a9 bc 6f dd e4 1f 70 d7 f4 7e 17 40 44 ff 27 80 ff b2 e9 5f ba 1e 3d 1c 67 01 e4 e5 02 9c e6 bb 4a 81 3b 45 55 d5 9f c4 1d 95 a2 3b 4b 32 f4 2d 9e 42 27 8b 76 77 03 83 21 40 ba 37 34 09 d0 0d 0c 09 1a 15 a0 4c 94 16 1f 20 02 5c 97 36 85 4a 0b ae 81 02 64 4d 22 d0 4d ab 4f 85 12 6e 8b b4 34 a7 49 28 04 bd 86 84 f9 3e b1 1e 4b 9b 44 6c d2 0c d9 60 bf 35 09 25 0a 90 38 10 5e 6e 4d 42 a8 5a 28 5d 8e 86 e3 d8 ab 21 cd da c0 6d d8 3f 06 d4 84 59 80 37 34 05 79 a1 5e d0 89 c5 3b e1 c5 7a 9c 51 67 82 32 7b 72 a9 da d8 54 aa 4e 92 a1 ea 3d a1 78 f1 f6 78 d7 7f 38 91 e4 da da db 36 27 5d 85 20 5e 7a 19 71 94 de f6 bf 1a 77 7b 14 fc c8 e8 83 7b 21 29 a5 2c 40 96 aa 6d 6f Data Ascii: RIFFWEBPVP8L/Z@lHop~@D'_=gJ;EU;K2-B'vw!@74L \6JdM"MOn4I(>KDl`5%8^nMBZ(]!m?Y74y^;zQg2{rTN=xx86'] ^zqw{{!),@mo
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 94 4e fd 34 d2 2b 19 d4 80 48 5f a5 a0 34 c5 06 2f 6e ac d8 dd 56 c1 23 40 81 98 4a 28 bd 7c d4 bb d2 06 8b 84 12 4a 28 11 fd 54 e9 a6 37 cb f9 cd 72 7a cf dc 4d 95 4e 64 ed 56 0b 2e e5 e2 ab 00 00 40 c1 23 96 00 82 82 02 3c 33 62 5f ef 68 e0 23 9f 34 53 ba b9 1b 2b bd 12 ea e7 4a af f4 1a ee 34 b4 24 63 b0 20 93 01 20 5b 57 70 d9 57 9f a5 00 46 29 00 00 20 76 72 e7 2e 37 35 6e 3e d3 c4 cf f8 4c 73 37 0d 32 99 9b 9b 0c c8 3b 73 ef cc 0d 44 ea 53 5c ea ab ac a2 1e 90 b2 8e ac ec 68 4a 35 5f de 8d 60 92 82 82 82 7c ce 96 37 4a 99 00 00 91 b2 9e 8c 97 93 71 9c 8c 45 1b 70 37 76 32 c5 4d d3 14 19 00 0a 6e 80 ad c6 95 79 ce cd e9 b8 9e 46 25 83 c9 93 16 b0 4d 6a ec 9a 07 19 4c f6 76 1a 3b 18 61 68 bf 82 ad 72 53 f0 06 66 c6 0e 7a fb 17 3b e8 ed 07 f1 ae e2 a4 Data Ascii: N4+H_4/nV#@J(\|J(T7rzMNdV.@#<3b_h#4S+J4$c [WpWF) vr.75n>Ls72;sDS\hJ5_`\|7JqEp7v2MnyF%MjLv;ahrSfz;
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 05 00 30 1b 5b 48 9c a3 05 4b da 21 0e fd c1 24 96 c2 49 b0 95 34 ca 73 b6 22 e2 20 c1 49 35 c5 42 89 38 87 6b 30 e1 6e 2e c4 a2 af fc d8 39 5c 2c ed e6 0a 80 92 a1 4d 2f 97 3b 1d 1a ae c7 0d 35 1c c8 45 82 ac ab 0a 10 12 f0 a9 30 c9 72 6b 00 d5 df 54 89 a5 e7 70 b1 b2 31 00 f7 4d 6e 83 4e d4 45 8b 25 b8 c3 05 04 65 7d a8 71 3b dd aa ac 0f ee 4b e0 97 88 25 80 c7 5d 55 ee f6 7d ec 9c ae 1f f8 42 a8 7f b2 4f 91 93 45 1f d0 4a c0 5a 23 04 1f ce 79 1b 6a d7 74 31 a3 60 ce 85 0a 41 1f ce f9 1b 6e ed 08 c0 44 5c 03 6e 3b 07 90 a5 8d 05 30 88 dc f0 4e 9c 03 38 30 f8 e4 0b b5 fb a9 1c 6e 6a a4 0c ce 09 9c 64 c4 aa 06 e6 86 8c 3a 5f cd e1 d6 73 02 27 5b 20 30 0e 2a 70 0e 20 be 10 79 0f 0a 07 3b fe 45 50 fc 35 f5 f0 f9 16 ad 1c 6f 24 ae 21 f1 7e b5 58 f4 1c 25 86 Data Ascii: 0[HK!$I4s" I5B8k0n.9\,M/;5E0rkTp1MnNE%e}q;K%]U}BOEJZ#yjt1`AnD\n;0N80njd:_s'[ 0*p y;EP5o$!~X%
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: e9 a6 46 2d 1a af 15 ee fd 1a 0f ba 12 89 7b 3e 00 00 ee db 3b ec b1 f1 0d c0 88 00 ca 31 76 cc a5 ed 54 c0 14 58 54 c0 bf 44 d7 50 78 0f 63 53 17 fa 45 d0 47 4a 22 63 e8 fc d6 b7 f9 97 08 9a 3b 1d 0e 32 10 c3 fd bc b9 69 b5 74 3d 35 51 8f 4a 35 8f e4 5a 10 3b 41 6c 05 e6 4d 9a 19 45 ab 75 71 84 20 55 84 53 25 be 59 f6 af bc 88 51 d7 db 59 71 71 54 54 1e 68 c2 61 46 f5 cc bc de af a5 8d 6e 32 e1 39 00 00 62 7d 6a c7 d0 d9 68 27 3e a0 70 02 89 02 a4 ce 32 ca a5 48 e9 9d f5 e7 1f b0 e6 ab e4 7d 5e cf 43 2f c3 48 4b 89 78 ab 32 53 50 82 4d 0c da 70 88 b1 fc c7 fb 03 86 38 8b 06 cb 26 83 5c 52 73 9d 82 33 1a ef d6 f7 13 56 22 89 5c c2 75 90 35 c1 a7 09 38 5e d7 71 59 eb d0 96 11 3b 0f 63 93 76 e0 54 30 83 56 bd e3 55 75 e7 89 69 33 9b c7 18 11 24 44 15 04 4a Data Ascii: F-{>;1vTXTDPxcSEGJ"c;2it=5QJ5Z;AlMEuq US%YQYqqTThaFn29b}jh'>p2H}^C/HKx2SPMp8&\Rs3V"\u58^qY;cvT0VUui3$DJ
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: cf 49 c9 b3 65 4f 79 e5 6d 5a 53 db 90 ff bd c6 ce a4 2a 85 15 8a dc 94 a4 d1 24 34 90 27 92 45 2a 49 15 33 e2 72 b0 ce 01 00 e8 cb bc 79 b1 48 0c 43 a3 30 8b 0f b3 28 1b 02 ad a4 78 13 8b 55 56 20 0c aa 87 71 83 cc 2f 90 fd ac a6 29 66 2f 90 a8 8f d8 79 08 9b b4 af f3 c2 0c 5a 8e b2 86 4d 1e 7e df 77 da e8 72 42 83 fb 93 5e da 81 46 c9 99 90 db 99 3b 4b ca 98 99 1b f9 ed 67 dc 3e 59 b0 75 91 a7 a7 5d f3 86 04 1e 08 f5 dd 10 6d 7f a3 92 0d 19 73 89 66 34 05 1f a7 d8 cb 2c 1b 74 fe 0b 25 9c 94 e8 38 5f 77 72 b8 59 e4 07 e9 e9 4e 5a ff 83 3c 3d 7d 32 7d 21 11 e2 45 9c 1b ad bc 49 89 32 a4 94 a5 0e e0 82 27 45 ae 04 5c 42 d6 58 23 41 1a 76 28 ef 37 14 90 f9 30 15 e6 39 e3 e8 1a 97 a4 08 d1 48 74 90 4d 8d f6 66 94 50 52 57 2f 05 40 41 b7 b5 cc 13 8f c6 b3 dd Data Ascii: IeOymZS$4'EI3ryHC0(xUV q/)f/yZM~wrB^F;Kg>Yu]msf4,t%8_wrYNZ<=}2}!EI2'E\BX#Av(709HtMfPRW/@A
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: fc 4f ba 29 c6 b9 f5 17 da 70 b2 c6 2d 81 3c 5b 1b c0 f3 9e 5f 09 3c f5 f2 77 f6 7b 73 c5 8e f8 d4 ad 75 36 38 98 6e 90 64 73 9a 8d a1 97 5e f4 90 e3 bf 1f b8 4b cc 3d 21 4e f9 b0 65 eb 45 8a 3c bb 78 fc e8 95 88 d2 05 56 98 cf 9d 02 d8 fd dd ff 39 d0 4e f4 b6 ee 10 49 45 ca 06 b7 9b f2 4e fb a4 2b 36 b4 71 51 d2 2d 8a ba 8d cc bd 9d 94 e9 b5 f4 bd dd 89 9b cf 3b f0 c5 b7 f3 d4 48 f3 8b 5a 77 f7 84 86 cd 48 2e 85 e9 72 20 17 54 5c 50 6a 43 ae 35 2f ab 54 da c1 2c 7b cf f2 79 5e 64 b4 a5 c1 56 7a 9d 6b 8a 23 75 71 50 58 1e 64 95 37 46 ae fe 18 5f ce 86 9e 46 b2 b9 f1 c1 08 91 24 12 a4 d1 60 c0 66 02 c5 aa 00 ec fe 74 65 50 cb 2c 23 15 e3 e4 3e 55 a1 fd 22 22 3e ae 90 e2 33 7c da 8b e0 61 3f 4b df 37 b9 82 71 ad eb 91 fa 90 3f 9f f6 fd fa 34 e2 e5 60 ec d9 Data Ascii: O)p-<[_<w{su68nds^K=!NeE<xV9NIEN+6qQ-;HZwH.r T\PjC5/T,{y^dVzk#uqPXd7F_F$`fteP,#>U"">3\|a?K7q?4`
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 0e fd 0e 64 c1 a5 62 6c 42 25 f4 05 45 b0 dd 7b cf 22 96 58 59 29 fe 5a 65 07 3f 75 99 5f 00 d4 e8 06 d0 a0 11 ed 9e fa 0b 07 57 6b 7b ff b5 17 47 71 3f ab 00 00 45 9b eb 8f e1 ae a7 9b 5c e5 2b 8d 15 45 bc a4 f4 d6 d4 50 68 2c f9 bb ea 44 4e 48 56 22 35 93 26 a6 a7 bc be 29 9e 1c da ef ef dc bc 20 dc 2e 85 b2 13 c6 65 15 17 54 ac cb 59 c8 59 27 f0 22 c2 3b 27 6c 5c 1c a7 92 08 00 c0 21 d2 e6 c6 7a 15 26 d8 cb 79 01 b1 4c 80 a8 10 8f 9a b9 55 9e 72 30 d8 f0 81 ba da 46 69 b4 3b 6d 0b e0 28 cf bf 75 76 44 95 71 22 db e8 07 44 40 0f 40 cc 32 ca 8a 95 f6 39 24 cf 04 71 4b 05 68 08 00 09 0e 63 d5 fb a9 77 6f 94 7e ef 13 fe da 23 4e 27 00 50 0c 87 87 7f 8b b5 4e 96 29 60 3d a9 4b 9f 59 66 82 7f e1 ef 16 e4 64 39 99 62 56 64 4c cc a8 d4 17 8c 1b 00 00 ae 98 f6 Data Ascii: dblB%E{"XY)Ze?u_Wk{Gq?E\+EPh,DNHV"5&) .eTYY'";'l\!z&yLUr0Fi;m(uvDq"D@@29$qKhcwo~#N'PN)`=KYfd9bVdL
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 7c 1a 01 2b 1c 14 0a b2 83 08 2e cc cf d3 fc 5d a6 6f 4f af 3d ff 4b 00 b0 23 f4 84 be d0 0c 42 81 a7 e7 b2 08 00 a4 01 ce b1 54 a6 55 54 89 3b 00 9e af 5e 26 47 c8 2b 26 fc b8 56 fb cd 6b 00 fa bb 31 98 a6 fc bb 40 70 df 63 ff f9 d9 2a 8f 76 26 ab 10 52 a0 04 00 70 9e c0 93 72 19 71 c2 41 aa 5d bb e0 b4 17 a4 3c 10 4e 32 df ab 8f c6 ba 7e 04 35 fe 34 4e 95 4d d6 f7 dd 77 d2 0d 10 16 1f 32 9b 90 30 9b c9 27 f0 e8 0f 36 63 10 65 28 8a 8e fb da 5b d0 0a 56 02 80 5f 2d 92 ab 15 8f 9d 52 85 48 47 fc e5 ae a1 9d 2f cf 2a 98 59 07 af fd 71 d7 ec 02 00 cf 81 3e d0 02 c2 c0 8a aa 19 80 a6 fb 09 2c f4 59 3a e3 71 05 50 0c fe 32 98 63 9f 6d db fd 89 05 d6 73 d7 2a 87 78 93 13 ac a4 88 2b 25 e7 a4 d8 4f 0d 01 f0 90 53 1c e1 a6 c2 ed 37 80 73 65 8b 91 ad 76 22 23 ce Data Ascii: \|+.]oO=K#BTUT;^&G+&Vk1@pcv&RprqA]<N2~54NMw20'6ce([V_-RHG/Yq>,Y:qP2cms*x+%OS7sev"#
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 2d de e0 b0 f8 24 05 d3 af fb 94 ff ea 80 ef 03 a0 4b 9c 36 75 b7 35 6e b3 96 52 a4 d0 79 4d d9 7f ce 53 f0 80 5e 16 8b 50 1b 74 9a fa f4 aa 75 79 60 d5 ee 10 0c b5 fa dc d2 78 9f 2e 9c eb 2e 9d ae 78 3f ee 00 e2 2c 4a 67 73 6b 56 ad 6c 3e 46 20 07 75 47 09 2a 78 be 66 02 88 b0 e7 e5 93 d9 3d df 6a c2 63 a4 7c d3 72 55 76 27 0e ab 75 93 c2 5b d4 18 14 43 c9 3d 61 fa ad 1c a7 e6 70 6e d0 c8 27 fc 93 6f c3 c8 2b 3f 36 fe f2 af 60 95 b2 18 b3 0c 85 92 c9 33 8e ba 64 e8 ec e1 08 5d e1 00 00 28 98 0b e0 b1 f9 e1 5f a9 b1 6b 1e e0 d6 12 31 af 72 7c 8f 83 17 2f 9d ba 70 19 c0 af df 00 d6 83 4e 10 0b b6 57 0a cf 81 7f 11 0a 2d c1 e2 5a 66 01 a2 96 af a8 c2 8c c8 1d 35 99 4d a6 dc 0a 10 d9 55 40 d6 e7 00 94 ef 7a 7a 42 cf 07 cb 64 9d 75 28 63 b3 b5 d6 ee a8 c0 13 Data Ascii: -$K6u5nRyMS^Ptuy`x..x?,JgskVl>F uG*xf=jc\|rUv'u[C=apn'o+?6`3d](_k1r\|/pNW-Zf5MU@zzBdu(c
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 60 b1 dd 6b 74 17 80 66 5d c9 6b be 86 b7 c3 87 2e 67 ad 5f 38 c7 ec 4b a7 94 b4 17 74 6e 7a 5b ee f7 e0 ff 78 e0 85 bf 46 00 d0 bd a2 06 05 e2 08 b1 c3 f4 8d 63 e8 92 b8 2a 1d 78 9e f9 ec 84 e6 bc 90 51 cc a6 0b d5 66 96 e7 3c b6 3f f2 d3 91 f5 e1 c5 62 d5 1d 6b a0 1d 89 5b 10 48 2f 98 d4 63 64 9f 17 ad 06 00 1e 09 bd e1 8f 7d d0 f6 b8 2c 98 07 ff 6c 7f 18 0b 00 7a 5f a7 ef 3d da ef d8 68 4a e4 3c 24 f9 9d ac ca 07 00 00 ed 29 a8 58 f3 27 83 38 b0 28 2f 0f 00 00 9b 8f 31 a1 23 cc 7d b7 f5 8e de 0f c9 a8 5b 92 71 bd 44 d5 e1 b8 c0 61 99 7f 41 4b 0b 95 21 e6 de ac d7 7c 71 78 da 7f 5a f0 24 ec b4 e6 89 94 01 6e b0 0f 0d 45 d3 7a ea ff 10 9d 0c 1b 0f f5 de 98 59 01 00 b0 71 89 14 6d d4 9f 02 d8 e0 f4 14 5a c2 a1 e5 5f 55 12 3d 36 13 51 51 3e a2 97 cb 11 f2 Data Ascii: `ktf]k.g_8Ktnz[xFc*xQf<?bk[H/cd},lz_=hJ<$)X'8(/1#}[qDaAK!\|qxZ$nEzYqmZ_U=6QQ>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49885	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:33 UTC	1098	OUT	GET /R9vMA0btLstD6t9Q8S8Unwdahep2m9P4RWri0lCiAKoLjcEs-MwMnShCS3SO_6XR_Hc=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:33 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 303438 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:46:45 GMT Expires: Fri, 25 Oct 2024 20:46:45 GMT Cache-Control: public, max-age=86400, no-transform Age: 7428 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:33 UTC	843	IN	Data Raw: 52 49 46 46 46 a1 04 00 57 45 42 50 56 50 38 4c 39 a1 04 00 2f 87 c2 5a 00 8d 40 6c 24 39 6c 83 3b e9 b8 24 2f ec bf 60 2a ae 21 a2 ff 13 a0 9f 2b 55 df 95 54 55 d5 ff dc 61 f3 1d 3e b3 09 df 7b 6f 7e 0e 10 01 f9 18 90 08 d8 20 90 36 90 0d b9 96 86 21 17 24 8f 34 01 42 01 06 10 ee 76 9c 2b 1f ac a4 72 c2 67 90 1a 3e 9d d3 5f b6 1b cb fc 1a a4 af 3d bc 78 f4 92 c3 64 0a 70 02 e4 2b 70 ce 39 18 1e 28 7f b4 9a 8c 31 71 60 f3 f3 69 5b 53 c0 2d 2e 86 65 b9 92 7e d8 27 f6 5a 36 1d 60 15 4c 25 4d b5 49 9c 0f 91 87 b9 ae e9 bc 96 0c 6f 1f 03 af dd b6 66 ef d0 b3 34 66 5a db 5d d3 a3 7e ed 7a c2 3b 87 a3 3e e6 d6 89 47 3e 5a 4d 4f 7b bb f6 94 34 a7 4d 62 5f 55 1d f7 5c 56 6d af 6d db f3 15 4c 2e be ce 18 6e 82 4d dd 4a d2 5f 5b 40 07 66 2b 8d 2f 06 6e 63 d7 b5 0d Data Ascii: RIFFFWEBPVP8L9/Z@l$9l;$/`*!+UTUa>{o~ 6!$4Bv+rg>_=xdp+p9(1q`i[S-.e~'Z6`L%MIof4fZ]~z;>G>ZMO{4Mb_U\VmmL.nMJ_[@f+/nc
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: d8 58 fa ec fb d5 f9 d7 4e d8 e0 b0 6b 65 04 ce 96 f9 b4 7d 66 4c 8c 31 8a 82 04 09 42 45 85 a0 0a be 40 95 a9 b4 14 a9 9a 54 5d 66 f2 30 d3 8b 4a 3d 24 36 29 23 05 e5 9e fd 2e 19 cb 2a dc 08 de 73 9f 25 b7 4d 56 ae 35 7c 5e a3 27 f3 3d 73 98 de 3e 27 e3 20 0d c8 23 ba 49 b6 47 5f 21 08 99 cd 8a 54 cb cc c5 07 67 cd 26 86 07 1f 96 92 55 47 36 25 b9 94 31 08 51 71 fb 38 92 24 09 11 6e 17 ce 97 e9 5c 07 8f 8b c7 6c 62 06 e6 0f 83 62 16 79 5d f3 ba 9a 76 95 62 ae 00 40 10 1c 38 64 a4 56 98 6c cf 15 cf 5d 88 22 c8 96 9a 55 93 75 60 12 93 93 21 6c 82 ed 39 7c 25 cc cc 9e 06 ca ce fc fa c9 05 23 9d e9 f9 7c 06 d1 28 6e 35 5b c6 3d cf c7 32 8f 3e 8e 67 c1 79 86 02 18 54 06 43 08 2c ad d5 22 36 52 6a 56 1d b9 a0 8a 6c 0a 6b ab 8d b0 cf d9 d6 44 92 33 4d 09 72 52 Data Ascii: XNke}fL1BE@T]f0J=$6)#.*s%MV5\|^'=s>' #IG_!Tg&UG6%1Qq8$n\lbby]vb@8dVl]"Uu`!l9\|%#\|(n5[=2>gyTC,"6RjVlkD3MrR
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 3e fb 9c 73 e6 16 80 b6 1c 30 92 20 49 88 14 8d ff 3e 60 27 4c ea b1 75 3e 84 c3 b6 6d 03 89 ca fd fe 1b 7f 1d 0e dc 46 52 a4 3d 66 2a ec b9 17 f8 8a 24 c9 b6 6d db b6 cc 3c 5b 9f 73 bd 17 84 c5 1f d7 e2 f0 6e 25 ec 67 80 a0 20 49 92 22 49 32 8d 99 c5 63 be fb ff 0b 99 af dc b7 6c db b6 ed b6 b5 95 53 e9 63 c2 d7 4f f0 af 9a 00 c8 ef f5 93 1f 85 d9 6b a8 6d db 86 79 c2 76 7a 19 2d 07 6c 24 48 92 03 b0 d7 7f 87 a5 0a 3c 26 cf 07 df 92 24 59 92 24 d9 16 8a aa 9a 5f aa 2a 6e 75 7f 2b a8 ff ff 9f fa 82 ea 7b e7 3d d3 dd dc cc 54 44 62 db 46 82 24 51 35 f7 9f 7f c0 77 ed 60 c3 36 92 a2 2b 9f 71 68 1f 5b 4f 81 6c cb b6 6d 4b 92 68 9f 3f 4f f8 f3 f8 0c 3e 03 23 60 25 a3 90 9b dd 35 9a 25 c7 38 f8 96 24 c9 92 64 db ae 44 d5 cc 3d 22 33 ab aa 7b 8c 31 e7 dc f7 db Data Ascii: >s0 I>`'Lu>mFR=f$m<[sn%g I"I2clScOkmyvz-l$H<&$Y$_nu+{=TDbF$Q5w`6+qh[OlmKh?O>#`%5%8$dD="3{1
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 92 e4 e2 75 62 ae 6e f5 aa c5 5c e1 58 fe e1 7b ef 73 8f e0 ac ed 9f 22 49 92 ac 3f 89 88 82 81 43 50 52 31 cd cc 61 66 a6 25 af cf ee 5c c0 b9 9e b3 3a 2b 66 66 66 ae ee 81 a6 aa ce ca ca cc 40 07 03 55 15 91 3f dc 86 07 49 92 54 db b6 6d cb cc 23 5b 1f 73 6d 38 c2 5c d1 0b 7b 9f 73 d6 5e 07 ea 78 0b c0 0c 0b e6 1c 3d c3 f9 d8 b6 ad da b6 6d a7 94 da fa 98 6b ed 73 3e 83 98 d9 e2 08 90 a5 ff c3 a4 a4 cf 3f 00 0a 0a 33 4b be 3c c9 67 a6 0b fb ac 35 7b ab 11 7a 6e db 56 6d 6b 5b d7 d4 7b 1f 73 ae bd 8f 5d 7b fc f9 14 77 f7 cc 21 f3 7f f0 45 58 46 64 21 11 91 e6 c4 e4 5f 8a bb bb bb c3 e3 57 ce 39 7b af 35 47 ef a5 e0 49 db b6 35 92 6c db 7a e1 fb 65 32 77 8f 08 cf 8c 48 ce 9c 73 51 9d 99 99 8a cc 58 c3 3a 43 44 c2 62 5e ab 25 cc 1d 58 0d 98 cc 3c 13 03 9c Data Ascii: ubn\X{s"I?CPR1af%\:+fff@U?ITm#[sm8\{s^x=mks>?3K<g5{znVmk[{s]{w!EXFd!_W9{5GI5lze2wHsQX:CDb^%X<
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 77 99 a1 82 b3 19 aa 5a 50 87 10 e0 6a 53 08 4d a6 6a df 6f bd 3f 6e 0b d4 a6 50 0d 4d ea 43 08 4d bb 2f ed 7b ab 8e d4 c1 fb 37 3f 9f ef be 1b 46 bd ea cf a6 d0 b6 bc fe db df ff d1 e1 50 84 e1 06 34 8a a2 01 07 11 1a 8b d0 08 e2 60 88 22 c0 01 1a 21 88 43 00 09 0f 70 1a 24 09 79 b6 0a 9a 25 0c f4 6f 04 80 ee 0c 53 21 77 56 1d 5d df ac e3 51 e9 b8 fc 81 a1 57 f6 7c 7f 18 42 63 5e b2 43 f2 28 a2 59 a3 da 40 ba 11 c2 08 d6 4d 26 ac 63 de 9c 1f 19 60 a0 83 78 ce 94 08 05 90 02 03 1d 36 61 2b 84 29 ca 0e 8c 74 44 31 30 a3 18 b0 9d 82 27 64 05 86 48 b0 78 74 36 82 10 c3 91 e9 2c c6 5d c3 2c 76 8c 19 4d 74 96 05 c4 23 bb 89 60 05 18 a4 34 40 c1 14 18 52 3f c3 d0 e7 e4 14 4a 00 a1 99 3c 07 0c 9c 9b 85 ca 61 2a 01 76 80 20 48 82 25 80 f9 b2 50 49 22 14 a0 11 1a Data Ascii: wZPjSMjo?nPMCM/{7?FP4`"!Cp$y%oS!wV]QW\|Bc^C(Y@M&c`x6a+)tD10'dHxt6,],vMt#`4@R?J<a*v H%PI"
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: be 7f fe c7 76 fb f2 bd 7f 5e 7a fb 79 ae b8 8a 91 eb 36 34 ec a3 5d dc 9a 04 c2 20 69 08 4b 20 f0 b0 52 02 51 81 b0 07 ca 50 28 50 19 4a 20 7f 10 84 41 02 39 69 29 a6 0f 25 28 61 92 00 00 4d 21 27 0c 81 9c fd e3 48 30 9d 66 a7 04 a0 42 01 96 40 86 68 34 84 80 1b 70 08 1e 21 ae a8 b3 a5 db 79 6f 96 5b e7 cd 56 3e 12 ed 68 2e 20 5d b6 54 37 12 a6 8e b6 18 a9 33 45 7b b7 1b e7 b9 dd 8e 8d 7a 99 ab 22 d8 75 dc 4d fc bd bc fe f8 9b 02 9b 3b be f7 f5 b7 69 7f d1 a2 ee 99 67 dc dd 52 ed e8 f7 df be bb f4 f9 b7 2f c2 ae a8 db fc 4e d7 df 7c a6 55 7d 1c 71 e8 78 11 1a 37 84 d1 d1 23 14 45 dc 2b 11 c4 c1 ff a3 03 43 18 c8 01 8f 07 c1 e0 0c 61 08 9b 00 fb f9 97 30 90 94 72 20 db 99 1c bb a0 32 10 73 21 56 b0 86 8a a1 1c 28 5f 37 fa bb ef a8 58 21 16 d5 8e b9 62 9d Data Ascii: v^zy64] iK RQP(PJ A9i)%(aM!'H0fB@h4p!yo[V>h. ]T73E{z"uM;igR/N\|U}qx7#E+Ca0r 2s!V(_7X!b
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 27 a4 64 06 09 3d 58 94 b4 3c 7d 08 f0 00 74 b9 03 29 0c cb e1 81 4a 20 49 2f 5f 9a 01 36 36 42 29 3a 6a 4b de b6 72 0b ba fd 70 be b7 8a 86 30 3a 1a 41 88 06 34 6a a4 cf 05 21 3f b8 85 9a 29 a3 1e 9b 55 0d 4c 94 0a 97 b9 1a 9b 5c 86 5c 4d a9 52 8e ce de 4f de 33 3b 6c 69 34 5a 2b 4c d7 dd 7b ea 3a af ca 74 03 ca 6d c9 2a 06 42 c2 56 a5 35 34 a3 54 63 c5 87 b8 f4 cd 4d a3 63 3a 24 ab da 2a 13 47 73 dd 54 e8 68 57 8f d5 d5 ad 5e 4a ad ed bf bb 56 6d e3 7c 3a 3c 1f 75 d9 bb aa 93 a9 54 ce 5e f4 2d 6f b8 6a 47 93 6e 0d 07 9f 3c 30 95 c7 4d 5f 22 54 00 03 15 a7 19 4a 23 25 f9 cf 2e 16 0c 85 1c 23 07 58 c2 14 02 9b 12 30 32 5d a1 92 07 a8 02 05 40 80 0a 40 01 2a 49 ee c9 5b 10 9a 92 9c 04 06 3a 81 4a f2 98 05 5c d3 2e ea a2 49 6e 4b 5b 76 fb 33 86 73 ab 61 95 Data Ascii: 'd=X<}t)J I/_66B):jKrp0:A4j!?)UL\\MRO3;li4Z+L{:tmBV54TcMc:$GsThW^JVm\|:<uT^-ojGn<0M_"TJ#%.#X02]@@*I[:J\.InK[v3sa
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 48 a7 0f 45 0b f7 4f 7f b6 fb bd 7e 75 24 a5 5b b5 bf 7c 5d 7d bf ff bd eb ba af ef ff 78 f9 50 61 4f 05 15 a7 9a e8 54 06 2a 20 7b 64 3f 16 2a 12 60 73 98 4e 0b d0 0f 1a 49 00 23 dc 76 2d e8 18 d5 96 29 5c df 8e 57 bc 90 65 8a dd d6 c5 d6 0d 86 6c 97 9d 27 52 63 2b 06 b3 1b 88 a1 e6 06 b3 56 c4 98 71 ec 39 20 30 24 39 3c 1c 60 0a d3 c5 74 48 12 bd 34 3e e4 31 96 8c 50 5f 41 33 58 3d 83 4a 7a aa 39 90 cd 70 c1 80 0d a6 83 27 6f 79 cd 0a 63 30 76 65 c7 ce d7 01 60 0f 73 aa c0 9e 81 d8 b0 d8 8e c1 73 76 2d fc 65 99 be 29 4e f1 e3 bc 1c ec 39 9e 18 dd b8 7d 72 1f 60 08 43 92 c1 49 81 fa f4 93 04 0e 72 82 40 43 31 0f a1 23 21 01 94 69 b9 81 01 42 b4 57 06 67 d3 76 2a 1b 77 b9 86 89 e3 92 77 5e 83 8a d2 bd f7 3a e2 73 b1 df 96 3e e1 34 75 08 cc 0b 56 ab 00 e9 Data Ascii: HEO~u$[\|]}xPaOT* {d?`sNI#v-)\Wel'Rc+Vq9 0$9<`tH4>1P_A3X=Jz9p'oyc0ve`ssv-e)N9}r`CIr@C1#!iBWgvww^:s>4uV
2024-10-24 22:50:33 UTC	1378	IN	Data Raw: 7f ab 71 e9 94 27 a9 68 2a ca 48 cf 73 b5 0b d3 5f 78 b0 4e d1 df b6 d5 5a 51 8f ce ad aa 63 ab 2b a8 ad 8f d9 9a e5 ac 28 5d d1 3a 85 40 e1 36 0f 1c 1f e3 8f af 1f a7 47 d5 8c 7a 46 d5 f9 18 4d 47 7c 38 33 9a 0e 09 93 f4 24 e3 09 92 3a 66 28 33 a2 a0 c0 c0 f6 91 73 a9 16 7d 77 a3 00 0b c8 d4 83 2e 2a de e8 4e 83 04 49 92 0a 95 42 54 0e 0b 81 a4 8c ae e7 d4 12 07 0a d2 37 34 88 b3 dc bd df bb db ed 68 2b d4 57 ae f6 5e 6f ed 29 e7 61 3f ba dd ae d6 7a 6f bb 46 3b 93 5c 49 db 0a fa de df 7e f7 f1 94 49 4a c8 6b 9d 3e 91 95 af ff bd ba fb 68 91 ce de 5a 38 5a e5 ea 85 5b 1b 6b ff cd 89 ab 5b a3 ca 26 88 1b 16 91 aa a7 74 99 91 f3 06 0a b7 28 37 47 15 ad ac 71 75 fa f4 44 d1 56 b9 b5 9e 8f 6e d3 5d de fb 47 b5 5b b7 5f af 0f 57 db 0f ae 50 dd c0 f2 db fe e9 Data Ascii: q'hHs_xNZQc+(]:@6GzFMG\|83$:f(3s}w.NIBT74h+W^o)a?zoF;\I~IJk>hZ8Z[k[&t(7GquDVn]G[_WP
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: ec 6c 02 7d 5c df c5 bc 4d 1f e0 03 cc 55 ad 42 49 58 37 af 83 ec 46 ca d2 cd 0c 97 61 e9 56 f3 0c 2d 37 5c b2 da b2 1e ad 2f 83 b8 6b 5c 85 f6 8a 26 a4 67 39 fc ab 1c 0d ee cc c5 80 af 83 33 01 85 e1 e1 50 fe 72 12 38 ed a4 94 9c b0 94 e2 67 08 92 20 55 0b 5b f8 26 81 40 13 68 09 10 48 0e 2f 87 21 90 04 31 12 06 09 1c 1a 31 71 68 e6 96 3d b6 ae b1 ed 91 82 e7 6d 31 73 34 e9 0c b5 e5 ea 36 6f 9d 8e 88 db 4f 59 6a b1 d4 ae e6 1c 64 57 57 34 29 7a 8b ae bd 48 dd 9e dd dd 6c ed 44 58 c5 2b 4e 37 5f d8 31 1f 4f 5f 61 25 52 e7 aa b2 ba 84 a8 a3 38 95 23 83 ba cc 8a 99 b9 6e 48 d5 9b 3a 55 59 b4 41 b5 0d 7d 1f 45 13 95 c8 82 6e c9 5e 77 a0 5b 8f 4b e1 80 3f 97 c2 c8 6a 6d 4e 97 e6 3a 54 19 5d 36 db 62 c5 07 43 7d 25 eb 54 43 9d 3d ab 75 54 a6 0d f9 62 bf 55 ba Data Ascii: l}\MUBIX7FaV-7\/k\&g93Pr8g U[&@hH/!11qh=m1s46oOYjdWW4)zHlDX+N7_1O_a%R8#nH:UYA}En^w[K?jmN:T]6bC}%TC=uTbU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49888	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:33 UTC	525	OUT	GET /kMofEFLjobZy_bCuaiDogzBcUT-dz3BBbOrIEjJ-hqOabjK8ieuevGe6wlTD15QzOqw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:34 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2192 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:50:09 GMT Expires: Fri, 25 Oct 2024 20:50:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 7224 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:34 UTC	845	IN	Data Raw: 52 49 46 46 88 08 00 00 57 45 42 50 56 50 38 4c 7b 08 00 00 2f ff c0 3f 10 e6 50 db b6 0d 23 fd 7f 79 7a c6 88 98 00 ca 1b 4d 4e 53 12 36 20 95 dd 36 61 cf 4e fb 6e 22 d9 96 15 9b 90 73 e7 2f fe 1d bc bf 65 a7 8a e8 44 44 e4 88 b8 72 f0 af e7 6b 40 0f 1a 70 b2 f9 c0 0c 1a be 80 a7 85 14 6d 1b a9 4d a6 7a c0 d0 86 31 24 49 82 fc 1d 8e e3 9e bb 53 39 67 71 32 8e 6b db 56 1a 64 aa 8f 5e dc 0a 73 d7 21 6f 8c 97 00 91 56 bc 0e 4f 26 80 8e b3 fd 8b 24 e7 72 cc cc 0c 66 66 66 66 66 66 66 66 86 65 66 66 66 66 de ad fa 75 cf ff 17 2e c6 86 56 9f 61 e9 9f 4d 66 86 2b ac f6 06 96 4a 9a 2b 58 4b 7d 83 91 19 f2 91 fa 0c 65 e6 71 36 a9 3b 72 54 91 4f b0 14 b5 9c 8f fa 0c cb 7b 83 49 2d 1f a0 43 63 b6 2a a7 8e d9 8e d8 95 ed 0d da d1 e4 66 fb 9f 9b 46 9d 99 1d b5 37 72 Data Ascii: RIFFWEBPVP8L{/?P#yzMNS6 6aNn"s/eDDrk@pmMz1$IS9gq2kVd^s!oVO&$rffffffffeffffu.VaMf+J+XK}eq6;rTO{I-Cc*fF7r
2024-10-24 22:50:34 UTC	1347	IN	Data Raw: 52 ff 0d 85 74 39 11 40 b6 0c f6 e3 a0 58 a1 91 e0 a3 ae 1e 60 94 ae fa 1b 29 5e c7 d7 1a ca 21 74 dc 9f a2 60 f3 09 32 c4 a8 71 b0 f6 bb 13 80 2d 03 02 1b c5 ac b8 14 1a 7f 47 5f 39 ca 14 b7 d9 eb db 39 5d 4e 05 4f 27 dd bd 18 29 76 b3 17 44 6e bb 3d f2 72 50 fe d6 92 fa 2a fe e0 52 55 7f ee da ef 8c eb db 3b a3 a8 c2 86 dc 5d 62 16 ed 76 46 8e 2e fc fc 0c 04 c7 41 28 92 6d 69 c7 dc 3e b6 5c e9 39 28 5e c9 17 46 91 0d 14 cd 26 21 6b 4b cf e0 f9 56 ab 43 6f 55 ed cc 4f 7e 71 0a 00 cb 2a c5 b5 a8 f3 02 2c 80 b2 5b fc f2 d4 37 a7 02 65 cf 22 15 9f ab 0b 95 bd f3 95 3f 0e 29 dd ae 67 ec f9 82 86 e6 19 28 c2 ef 8e 85 e4 49 a3 74 a3 a4 ec 29 26 da 97 cc f3 89 b1 29 36 41 1a a5 93 65 59 37 4a 8a 86 e8 55 54 fd 6b 93 6e 1a 1f 06 59 4b c7 d9 35 66 71 c2 e3 e3 85 Data Ascii: Rt9@X`)^!t`2q-G_99]NO')vDn=rPRU;]bvF.A(mi>\9(^F&!kKVCoUO~q,[7e"?)g(It)&)6AeY7JUTknYK5fq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49887	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:33 UTC	525	OUT	GET /F4U2pL8z-Ic5FzCfe1xVXMWRvff6oEBIzDsyGRc4mE3bIUPiCfhuXXXvTOfcpVglKqs=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:34 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3226 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:32 GMT Expires: Fri, 25 Oct 2024 19:12:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13081 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:34 UTC	844	IN	Data Raw: 52 49 46 46 92 0c 00 00 57 45 42 50 56 50 38 4c 86 0c 00 00 2f ff c0 3f 10 2a 2b d6 f6 af 92 ed ec 1b 66 38 7c ba f7 ff 5f 1d 66 e6 c4 e5 c6 31 33 33 33 33 33 33 33 33 33 33 33 33 33 33 53 1f a8 fd ab bd f7 2f ee fe 43 be 6d 98 c1 25 23 88 42 c7 d8 ea ae 92 a7 5c 62 2b e4 2e f4 8a c4 33 88 96 e1 64 08 99 43 85 1c 0d 22 43 88 cd 10 78 2c b9 32 2c ef 1c c2 9c 68 9a 42 3c 1e 50 e1 8c 80 61 00 ed ae ba 2e f6 a8 72 61 2c 15 98 c1 95 a5 6e 26 10 95 15 77 5c 56 06 70 d7 51 71 25 3b bc 57 85 3c 83 bc 32 f2 ae 75 48 46 b2 42 c7 49 ad 76 55 b2 e4 71 57 06 d5 99 c0 5d 51 54 01 d7 eb 4c 21 cc d9 e1 7d e1 2f 43 43 b8 b5 2a 23 38 2e 92 13 c5 fa 82 db f2 d7 eb 62 1b 09 92 64 9b b6 35 b4 37 06 7c 9b 5b ab 6b 9f 73 be 6d db b6 6d db b6 6d db 86 04 47 92 14 49 fa ff cb f6 Data Ascii: RIFFWEBPVP8L/?+f8\|_f133333333333333S/Cm%#B\b+.3dC"Cx,2,hB<Pa.ra,n&w\VpQq%;W<2uHFBIvUqW]QTL!}/CC#8.bd57\|[ksmmmGI
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 39 b5 88 93 61 8e d8 cb e2 36 4e 49 8d a7 3f b5 ab 66 14 83 a0 8a da c9 59 1a 8d c1 43 c7 38 a2 eb ba b8 a3 d5 aa 0f 2e 29 1d 23 a3 70 39 1c 6d 24 66 b4 8a 93 81 ac fd fc 96 56 2b df bf 60 18 54 91 17 63 f6 46 e1 70 c5 c2 98 cb c4 b6 46 50 15 f3 c6 08 63 64 37 42 af 7e a4 71 34 a9 61 4e 00 67 0e 13 af 1a c2 e4 7e e5 84 33 8a e7 99 8a 34 68 60 0b 6b 7e 26 ad 6f 90 a7 6a 10 d6 92 1c be 36 80 89 ee e5 68 a3 78 5e ce 8b 16 e2 b0 d3 c5 5b 82 93 16 14 62 e2 57 12 6f d5 1c 5f 16 42 0c 12 27 bc 51 4a 08 c1 d0 68 1b 75 aa 54 5b 08 26 6f 73 31 97 60 78 ae 10 5c be e7 60 ce 65 b0 5f 88 14 61 ce 61 f2 2b 51 b7 4b 48 8c a0 8e 62 22 5f b4 2c c7 dd 00 cc fd c9 e4 30 de c6 5d b9 4a 68 f2 46 3f ee 6c 26 46 30 d2 1a 17 77 09 9e 3d 9f c3 61 4b 4f da 8e c8 4b 14 a0 d2 ac 63 Data Ascii: 9a6NI?fYC8.)#p9m$fV+`TcFpFPcd7B~q4aNg~34h`k~&oj6hx^[bWo_B'QJhuT[&os1`x\`e_aa+QKHb"_,0]JhF?l&F0w=aKOKc
2024-10-24 22:50:34 UTC	1004	IN	Data Raw: 7d 52 02 ee 92 25 7c e4 b2 ef 03 74 b4 62 42 48 b3 c3 4b b8 3b 78 7d a3 34 f8 af ac c4 a7 95 76 51 a8 d2 8c 94 f4 27 01 6f ef d5 cd 66 ef 9f 6d fe e1 99 6f 6f ee c1 d9 ca 0e 2e f5 35 12 1f 99 8f 91 79 e9 5e 1a eb 2c 66 f6 84 cc c6 95 c6 d4 25 91 46 3b e5 31 b5 5a 49 cc 45 f0 52 e5 86 d3 ae d4 5c 94 ac e5 ec 96 34 de b1 f7 c8 55 9a 89 2b 4d a8 6f 41 1a f0 39 8b cc 84 e2 a2 15 ed 5d 30 a2 2b 9b 8a e8 b9 d0 37 44 77 fe 3b a0 dc 94 c6 b6 cc c5 5a cf 7c 33 a2 c9 8f 69 d4 49 62 26 46 ea 65 61 ab c7 8c 48 89 92 33 13 b9 17 1b d0 d1 b3 64 26 e8 de 4d 0c a7 cd ff 73 3a c1 c5 e1 5f eb 04 85 a6 33 b1 f5 00 63 f9 dc 88 0d ad 48 1f d3 4c ec 65 f2 01 4b 27 e8 5d a5 d3 9e dc 35 ff e5 23 f3 5d 36 04 72 6e 8b 06 b6 f0 e0 44 ab 0d 5f dd 99 fb a2 81 16 00 17 b8 72 64 2c dd Data Ascii: }R%\|tbBHK;x}4vQ'ofmoo.5y^,f%F;1ZIER\4U+MoA9]0+7Dw;Z\|3iIb&FeaH3d&Ms:_3cHLeK']5#]6rnD_rd,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49889	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:33 UTC	1097	OUT	GET /ZVQE0WXIo3XOeHvZcpC7qn560xGEF8FDCQtV2fWFTWXXjLh6uXpOzw90mau7jXNUrQ=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:34 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 51938 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:58:51 GMT Expires: Fri, 25 Oct 2024 21:58:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 3102 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:34 UTC	844	IN	Data Raw: 52 49 46 46 da ca 00 00 57 45 42 50 56 50 38 20 ce ca 00 00 f0 80 02 9d 01 2a 88 02 6c 01 3e 65 2a 90 45 24 22 a1 a1 2f 97 0b a8 80 0c 89 66 6e 31 fb e0 2a 9f 3b 3c 83 0d c5 f2 1f ea bf ca fe eb fe 59 fc b1 f1 bf 5d 3e c1 fb a7 f9 bf f9 df e1 bd de 76 d9 d8 1e 5d 5d 2d ff ab fc c7 e6 ef cd 0f f7 ff f7 7f d0 7f 99 f8 75 fd 13 fd 17 fd ff f2 ff bf 3f 42 5f ae ff b2 1e b9 5f b6 9e f6 bf c5 7f dd fc 9d f8 1b fd 4f fd 77 ed 17 fd 8f 87 1f fa df b7 7e f3 7f bd 7f cf f6 0f fe a3 ff 07 ff ff b6 6f ab 17 ef 77 b0 f7 ee 7f ff 3f 5e bf dd 0f fb 3f 2d 1f da ff ec 7e ea 7f dd f7 b0 ff fb fe fb dc 03 ff ff b6 c7 f0 0f ff fc 34 1e 81 fc be fd b7 82 ff 97 fd 5f fb 6f ef ff e9 bf ec fb 2e e3 0f b4 5d 46 be 7f f9 93 fa 9f e3 fd ac 7f 6b ff b3 fd 4f 8e bf 30 7f e5 ff 47 ec Data Ascii: RIFFWEBPVP8 l>eE$"/fn1*;<Y]>v]]-u?B__Ow~ow?^?-~4_o.]FkO0G
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 0a 2e 6c 80 93 b3 5b 3b 26 40 d6 d9 d0 e6 f6 0e b4 1a 74 95 36 6c 3b 68 e1 d1 85 95 8d 4c 7f d0 54 69 9d 3f 22 d5 05 a3 da 37 1e 6e 05 cd e5 db ab c4 cd a8 fc f5 5a 9d 08 5a 66 53 ea ab 92 c4 5a e9 83 fd c9 00 bd 64 bd 3b 3f e4 44 69 b0 e9 97 5c 07 5f ee 7b 32 c2 64 08 17 6b 46 85 1a dc 1a 81 fd 6d 80 8d 55 9e f9 cc d9 80 96 d0 33 c5 01 af 01 9a 68 e3 e5 fb 39 63 38 b7 dc 19 ed b0 34 92 8e c0 22 12 7c 2e 23 a4 23 41 51 c4 2f 39 b2 81 4f 0d ad a3 f3 81 b8 d2 8b 74 da 7f 83 e0 f0 e4 79 27 99 97 c4 49 2a 5c ee 2b 12 22 d2 9e b1 71 d9 dd ee 98 0e 6f e7 e3 e5 37 f6 c4 21 eb d8 d7 dc 6c ca 76 67 19 f0 29 f8 bb 87 36 6c 22 d3 5e a9 ee f7 54 d6 89 3b 77 a8 13 6b 1b e8 fe a4 88 28 eb f8 b7 13 ee 7b cd de 91 2a 9c be 40 0c e6 e8 11 b6 a0 55 07 af 04 20 80 82 4f 13 Data Ascii: .l[;&@t6l;hLTi?"7nZZfSZd;?Di\_{2dkFmU3h9c84"\|.##AQ/9Oty'I\+"qo7!lvg)6l"^T;wk({@U O
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 92 ca 6e df cd 10 cb 33 24 4c dc b6 02 1b ec c6 ba d7 25 36 1d 6a aa 9b 82 81 61 39 bb 32 f5 cc c7 f1 30 fd 8a 29 17 88 fa d1 0b 95 57 72 d5 e3 c0 81 43 83 8b 7b bb d7 41 ab 40 7d 68 74 07 ff fc 15 f2 78 c6 d6 7b 1e 02 fc b1 9c d1 4f 53 9e 6d e2 87 a3 bd 27 56 eb f5 40 ca 08 b5 06 bb e7 ed 79 8a b4 a3 a4 1a 0b b8 12 18 2f 85 ed 26 63 88 3b 6a 8b ad 80 b3 f1 25 17 91 5b 0b df 3c f3 b6 72 df 8f a6 16 a9 78 ac 0f c7 0c db bb 43 20 53 0c 13 ad 34 ea 59 32 8a ef 14 67 4e 53 53 aa 14 92 bf fd 92 0e 6d e3 28 64 20 85 57 60 ec 27 12 bd 0d 34 9e d6 a6 60 db d1 13 fd f0 56 2c 5b 98 06 3b 12 9f aa 0a 35 f9 cb a3 42 67 a5 c7 b6 d1 0c 0a 70 23 5a 9c db ac e2 58 c3 dc e0 0d 96 2f 27 36 9a d6 ac 50 ae 75 9f c0 ac db 0f ad 03 53 c1 f4 5a cf 36 8e 39 29 f1 2a ba 76 28 53 Data Ascii: n3$L%6ja920)WrC{A@}htx{OSm'V@y/&c;j%[<rxC S4Y2gNSSm(d W`'4`V,[;5Bgp#ZX/'6PuSZ69)*v(S
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: cc 67 11 ee de 92 92 1f a2 9d 7c ae 99 c2 a4 b6 1f c9 8d 05 40 64 4f d9 92 88 89 f7 6d 7f 2c a2 8b cd 1e b9 9c 30 ae da 2c ad d4 cd c7 1d a0 7f 10 96 0a e1 cf 00 68 78 34 f7 36 b2 89 84 4f 80 17 dc 29 6e e8 dd 48 69 85 68 c0 d7 56 ba 5f ea 47 b6 21 bd 46 36 bb 41 66 60 2d b7 5e de 6d 62 10 88 7d ea ab a1 dd c6 70 7a 68 12 24 ac 29 8c 5d cc 12 74 0c be 67 50 9f cd ec 63 86 22 c2 53 8a bd e4 98 fc 49 bf 17 28 28 17 d0 96 c6 c6 87 58 e2 c3 b7 16 cc ed 49 bc 8a 29 8b 24 c0 96 6e 57 af bb a1 be c8 13 5c 4b b8 c7 6c 4f ad 81 e2 6e b6 b9 a3 6b c6 be 12 ad 7e 64 f9 b3 d4 0d 41 5e 1e 86 3e 54 f1 db ca 1b 21 b3 05 39 8d 11 cf c1 b1 7f 27 a8 05 cc 77 c3 bc 72 c3 e8 f5 f5 4b 13 5b 0f 73 20 ce 39 7d cf 5d 7e 4f ad 84 79 0c 34 5e e8 5f f2 8d b9 bb 0b 8b 00 2e 4f 83 07 Data Ascii: g\|@dOm,0,hx46O)nHihV_G!F6Af`-^mb}pzh$)]tgPc"SI((XI)$nW\KlOnk~dA^>T!9'wrK[s 9}]~Oy4^_.O
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 97 d0 e5 31 f6 84 b0 d2 5a 74 7e bf 43 54 50 7f a2 b6 1b 2d da 43 a1 ca b7 5c 51 08 1b 4d 1a 5b 48 77 9e 26 9c bd a1 a6 d4 19 19 b8 ad b2 77 2f b9 08 82 08 f8 27 06 d8 9b 1b e1 3d 39 5e b0 02 bc 8b d5 b0 25 99 6b dd f7 a8 a3 e9 d1 6e 23 8e 00 4d d5 80 6b 3e 7f 58 1b 58 9d 54 21 cf a9 c3 99 05 90 38 51 35 94 77 28 18 c3 d1 61 d3 49 71 3a 2a 1f 65 fe 1a 0e 85 e9 e4 d1 4a c7 02 fb 93 3d 44 ab e6 28 aa 7e 1b bb 39 53 e8 43 5f 83 1d d1 77 cf f5 4b 50 aa 35 39 f1 c0 28 95 cc fe 06 ca 1e 93 f1 e6 19 fe 70 ac 9d 60 ba 10 7c 5b ce 09 c8 00 fe ff f8 13 f5 5f 1c e9 16 50 80 a2 b0 e1 ea 0d 45 1a c8 bf 23 bb 08 03 22 c8 db 5e 3c b5 e0 8b 16 dd 3b 03 ed 5d f3 23 14 e5 d8 11 ec 72 b4 63 f7 94 66 f0 c1 da 49 27 11 8f d2 fe e3 f8 6c b3 b5 22 6f 78 09 58 f7 4f 8a 31 3c 93 Data Ascii: 1Zt~CTP-C\QM[Hw&w/'=9^%kn#Mk>XXT!8Q5w(aIq:*eJ=D(~9SC_wKP59(p`\|[_PE#"^<;]#rcfI'l"oxXO1<
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: a3 f6 ac 94 4b 66 12 6b 64 64 d4 04 2d 79 07 e3 15 e8 76 93 f8 36 8b 8b 8b b6 0a af e2 e0 e0 74 5a 1a fb 38 b5 4d 1e 51 ac cc a7 cb 47 a2 91 25 27 b1 3b 90 9d 5c 64 4c ff a2 37 f1 43 72 08 97 6a e2 9a 8a e3 ce 60 2c d5 f6 33 75 5e d9 dc bd 7b 9c 13 a4 d0 9d 6e 40 1b ef 63 d2 41 8a ee 7b ab 2e c6 41 55 d0 73 f4 1c ec 57 45 c5 63 99 bc dd 64 3f d0 c4 11 28 0d 1c e8 65 dc 18 bd e6 2b 95 d1 f9 de 5d 7a c2 fe 3d 52 1a 49 7d 11 fd cb 53 0c cd d0 f1 d7 fb b4 1e f2 ec d8 69 5d f5 60 42 b0 cd 9a 5e 1d 72 6b f8 75 57 85 76 be b1 ea 33 55 66 3a b7 5a 3c 7a 5e b8 8d 48 e4 83 48 81 d1 15 53 d9 67 ff 85 b6 92 11 4d 05 79 e9 c1 b9 72 20 a7 c1 66 dd ca 1b 7d 1a 31 3b ee b7 0a e2 2c 16 bc d9 c1 55 79 90 b3 8a a2 33 52 f7 08 ec 5f 82 db 06 37 77 75 45 1d 8f 59 36 de b1 15 Data Ascii: Kfkdd-yv6tZ8MQG%';\dL7Crj`,3u^{n@cA{.AUsWEcd?(e+]z=RI}Si]`B^rkuWv3Uf:Z<z^HHSgMyr f}1;,Uy3R_7wuEY6
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: f0 b6 76 1a b1 35 5a f5 d4 6c 9f 63 9b d0 a6 0c eb a4 8e a5 eb 6e c6 d4 9d 5d 63 5b 77 a2 db b7 57 50 9b 4d b1 e6 3e b4 a3 6b aa 97 a2 dc fa 5d a1 46 89 35 5b bb bd b5 fb 89 64 d1 2e e0 66 93 e4 4f 81 9f ef 7c 6d dc 91 81 e3 bb 49 5e c3 46 60 dc 52 3d 77 68 cf 85 2e bb 84 55 e6 48 58 15 6d af 7d c6 93 e7 b2 25 de 8c 32 f7 e0 48 dc ce d9 5b 38 ce 38 95 42 2c c7 2d e5 b6 ec d3 ca 55 be 77 87 bc 20 f8 40 26 ec b5 a2 bf 3e 9f 15 7b 23 05 c3 77 85 92 a6 5e fe 7f 6a da c7 3a bf 02 32 95 50 69 10 44 85 29 25 37 5f 2a 2b 06 b2 7d 73 d2 50 fd 60 95 99 8e 29 05 9d d8 6e d3 6f 4b 87 0a 69 09 df f4 fa 30 ca 76 ac 28 33 a4 5d 48 14 5f 2d f0 04 03 3a 22 88 48 c8 94 b5 16 24 52 35 b2 68 a2 47 f2 65 f9 30 83 25 43 69 87 e5 fa 2e 4b ab e8 51 c4 dc b3 23 f0 63 05 5c bd 4d Data Ascii: v5Zlcn]c[wWPM>k]F5[d.fO\|mI^F`R=wh.UHXm}%2H[88B,-Uw @&>{#w^j:2PiD)%7_*+}sP`)noKi0v(3]H_-:"H$R5hGe0%Ci.KQ#c\M
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 55 dd 5e 7e f8 74 01 c6 f4 34 7b 17 99 9e 76 9b d0 48 06 a9 ac 38 8b 77 32 bc 87 a9 3a cf 5d 2c 54 e0 69 3e 43 2a 44 de b8 41 8a 39 fd 47 40 48 28 22 4e e8 a5 fb ba 42 88 96 ac e0 3f 57 f1 4d 5a 68 96 ba c9 a0 88 bb 44 0f e1 54 97 db 28 7e 86 b7 c5 fe 4f d5 ba 74 ba 8e 0b 32 95 0f 2b f3 1b 09 cc c1 a4 ac 00 5e 90 37 01 9a 33 e0 a3 ba 9a 87 d7 22 4f 2f c9 32 5d e4 4e 0c de 3f 47 b2 5b f7 0a 13 fb 72 59 66 9f cd 0a 73 50 a0 5d 23 40 b8 e6 f3 f6 c6 5a 12 da 23 0d b2 58 f0 94 22 7e 1b d1 60 f5 03 0e cd a6 72 1a 92 ac 4e 41 e3 44 2e 37 93 12 50 dd fc c4 db d9 f6 8b b2 11 b2 f2 17 c8 14 b5 c1 70 78 23 c0 0c 07 c9 27 05 48 6f c6 4d 84 64 93 23 d0 2f 91 32 c8 0a 3e a9 44 0a 2d 64 2b 70 c4 82 60 1f 98 00 01 1f 51 34 82 3a 73 48 34 26 21 59 52 53 5c 8c 67 5c 73 fa Data Ascii: U^~t4{vH8w2:],Ti>C*DA9G@H("NB?WMZhDT(~Ot2+^73"O/2]N?G[rYfsP]#@Z#X"~`rNAD.7Ppx#'HoMd#/2>D-d+p`Q4:sH4&!YRS\g\s
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: c1 b0 12 60 70 7b cf 2e 6d 93 b0 b0 a8 35 90 ac 2a 0d de 15 96 4b a5 d2 00 f3 de 4d 14 d0 28 1f 9e 17 29 35 54 81 a4 3a 95 f0 60 9c 1a 77 17 f7 7a f4 b0 d7 de 3d 6a a9 c1 2f bf ee f6 eb bd 59 19 49 a6 77 24 ed 76 5a 2d 42 0c 0a ae 8c f2 cc 50 71 22 c6 f0 1f d1 4b 16 06 32 94 02 0d 84 1b e1 ad a5 76 d3 49 36 48 f2 fd d2 c0 60 f6 48 63 72 ca 6a 57 9b 58 9b e9 f0 02 7b 7a 05 9e 4a fe 87 af 88 b4 f2 12 04 80 0c b9 61 36 42 ea 78 0a 74 74 4d 00 8d 8f 0e 82 54 0e e6 d3 fc 02 1d 64 49 a0 8f d0 8d 1c 86 da 84 f4 a1 b7 ca 76 42 52 e9 88 5e 1b 0b 68 57 3e f0 5f 83 cb 9e 61 ce a8 92 0f 71 ac 48 64 51 9c de 00 f5 25 d5 8e 58 9a 19 81 49 f9 11 4d e7 1b 10 fa 24 76 15 cf a5 a1 78 e6 04 ed eb 29 0a a6 d1 f2 05 0b 47 53 11 fa 2d 04 db 0c bf bc bd e4 51 5d 05 5d 48 a3 f3 Data Ascii: `p{.m5*KM()5T:`wz=j/YIw$vZ-BPq"K2vI6H`HcrjWX{zJa6BxttMTdIvBR^hW>_aqHdQ%XIM$vx)GS-Q]]H
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: ff 0b 48 fd 6a 90 3d 5e 6b 08 d3 db 28 c6 a4 c5 bf 87 b8 5d 5f db ed 77 05 10 2f eb 89 23 ff be d8 75 21 4e 17 c7 3f 0e a7 25 8b 7e 6e 8e 9e 36 17 7e ff 96 87 ad 05 e1 ab 8a 39 47 4a 36 23 e5 6d 84 66 83 ea a5 b7 18 c3 0b 97 21 15 9d 13 13 38 9e e3 bb 31 d5 3f 85 58 3d af af 7a d6 71 20 25 ba 74 35 1f 34 be 13 20 f1 d1 a6 d8 2e e1 65 a7 cd c5 38 6d dd 03 3e 19 7e 5a 58 5b 04 82 5f 6b 67 1b 00 46 90 d1 00 6a 39 81 a8 63 fe 85 d9 13 f2 ed fb 38 88 f5 a3 1b d8 dd 2f ca 77 0a c9 6d ad d1 3b 57 6e 34 2a 65 4c 32 94 d5 0b a0 93 17 6c c3 2f 4a 84 9b 39 c4 d0 a0 d5 24 c1 ea 5e d9 af 38 4d 24 4d d2 a6 84 80 b2 6b 75 5b 41 0c c4 29 af d9 a5 c4 4b 44 ab a2 7a b8 45 40 40 b4 73 38 38 fa d7 d4 be ea 56 0f 06 35 a4 0b 25 9a 57 b4 dd e2 6f a8 76 e9 3d a7 7b 40 ad 8c ce Data Ascii: Hj=^k(]_w/#u!N?%~n6~9GJ6#mf!81?X=zq %t54 .e8m>~ZX[_kgFj9c8/wm;Wn4*eL2l/J9$^8M$Mku[A)KDzE@@s88V5%Wov={@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49886	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:33 UTC	525	OUT	GET /trfOy_Wg9gQTwGcoYJNushqXIV3xFhWBReAVWM5IPqspN5N811YhTKQCG48anNS13HE=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:34 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1042 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:58:53 GMT Expires: Fri, 25 Oct 2024 21:58:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 3101 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:34 UTC	845	IN	Data Raw: 52 49 46 46 0a 04 00 00 57 45 42 50 56 50 38 4c fe 03 00 00 2f ff c0 3f 00 ef e5 2a 92 6c 57 99 99 43 8e fe 7d a0 00 5b e9 7e 81 86 f9 77 db 36 92 24 49 d5 bd 9f b7 de e5 9f c0 f9 97 d9 79 35 ff 49 06 c1 06 06 02 21 08 84 40 08 84 3f 03 c2 0f a4 12 96 40 28 20 69 fc 6d e0 00 c2 00 a4 d2 65 ef 23 97 8c ac 71 58 1e 47 03 5a 14 49 8a e0 45 1f 38 59 79 44 77 2f 2d 29 ca 5a 46 24 28 a4 31 36 86 c6 de 4d 40 61 08 28 44 a0 c8 50 49 88 05 63 6c 84 00 21 20 48 18 6b 6f 2d 2b 10 a0 8d cb d6 69 67 e8 24 40 03 29 69 19 90 00 05 a8 a5 12 12 42 a5 90 04 14 42 90 14 02 4a 21 45 1a 02 4a 82 84 2c 45 24 60 08 d2 c6 82 04 14 22 12 14 02 42 25 41 90 0a 11 49 1a 82 24 49 09 09 4a 44 90 00 41 11 04 3d fd 3c 7c 81 da 6d 6b 6b 24 e5 8e fb b4 6b 52 ad 6f d5 1d 77 f7 c1 83 3b 0c Data Ascii: RIFFWEBPVP8L/?*lWC}[~w6$Iy5I!@?@( ime#qXGZIE8YyDw/-)ZF$(16M@a(DPIcl! Hko-+ig$@)iBBJ!EJ,E$`"B%AI$IJDA=<\|mkk$kRow;
2024-10-24 22:50:34 UTC	197	IN	Data Raw: 10 a8 83 63 f9 79 41 09 55 c4 b9 41 af 0e 68 10 e7 e4 55 50 09 34 88 f3 81 5e 35 d0 20 ce c3 13 a0 1e 68 10 bb f7 15 a8 09 1a c4 ce 85 a1 2e 68 10 3b 76 e3 38 2a 83 06 b1 53 0f 81 ea a0 41 ec d0 06 50 21 34 88 9d b9 0d 54 09 0d 62 37 fe 5e 07 2a 85 06 b1 0b 27 d0 42 b5 d0 20 ce ec d7 7f 31 48 c5 d0 20 ce e6 9b 3b d1 4c 17 25 47 83 7f d2 fb 6b f7 42 4c a4 9b a2 63 15 cb 0e 7e fb 9f 7e f8 fe ed 2d 4f cd 02 ba e8 aa ec c8 0e a4 3b 26 a0 c3 d2 f3 61 e9 bf d2 7f c3 7b d8 26 85 d7 8a eb 80 14 76 16 d7 55 18 09 18 5c 28 2e fb 16 c2 e2 eb c2 46 5b e4 c7 2b 28 fc 79 9f d9 d2 ff a5 ff 87 7d 08 Data Ascii: cyAUAhUP4^5 h.h;v8SAP!4Tb7^'B 1H ;L%GkBLc~~-O;&a{&vU\(.F[+(y}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49890	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:33 UTC	530	OUT	GET /gAc6Do2rlEFGZEbG9HrLCHNBZW_jqtAP-8PKHSXEPRcA51Qw7t9OhO8cQSUPHL1yk9I=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:34 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 39276 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:58:51 GMT Expires: Fri, 25 Oct 2024 21:58:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 3103 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:34 UTC	844	IN	Data Raw: 52 49 46 46 64 99 00 00 57 45 42 50 56 50 38 20 58 99 00 00 d0 95 01 9d 01 2a 88 02 6c 01 3e 55 26 8f 45 23 a2 21 14 7c e5 28 38 05 44 b5 37 7e 0a b3 d1 18 88 1d 11 7d be f8 9f 5b a9 26 f5 de 4b fd 27 6a b8 9f f1 ff e4 bf 67 bf c7 fe c6 fc cd 70 ff 51 de 1c fb 7f f9 8f f1 5f da bf f4 ff a7 f9 5d fe ab ee 67 df 1e b5 fa 40 f8 21 f3 9f d7 3f da 7f 88 ff 43 ff cf fc cf cd 9f f3 1f f2 ff c2 7b 97 fd 1b ff 33 fc 6f ef ff d0 17 f2 0f e6 ff e6 3f b7 ff 8c ff c1 fe 3b ff ff ff ff c3 ff ef 7f 60 3d cf 7f 81 ff a1 f9 47 f0 0b fa 47 f8 0f fd 1f e5 7f d9 7f f9 ff bb f5 2b fe bf f6 4f dd 67 f8 4f f6 1f b4 1f eb fe 40 bf ad 7f 97 ff c3 f9 ff f1 c7 ec 37 fb b1 ff ff dc 13 fa 8f fa cf fe 1e cf bf f4 7f 70 7f e6 fc 9b ff 5d ff 6d ff df fd e7 fd 1f ff ff ff fe c4 3f a3 ff Data Ascii: RIFFdWEBPVP8 X*l>U&E#!\|(8D7~}[&K'jgpQ_]g@!?C{3o?;`=GG+OgO@7p]m?
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 78 2f d1 18 eb bc 89 f3 f6 d1 90 83 96 70 e4 01 c9 e8 dc 8c ae df 72 17 2f 4e b4 6f 1c a1 68 52 33 36 73 fe 2f ba c3 79 34 52 88 b2 6a 65 62 ab fb 24 48 df c0 12 e4 6a 80 9d 15 70 25 aa 18 77 8e 62 18 53 0a f4 e4 2e 06 c4 a5 1f 21 13 6b 0f f1 3b 59 25 d1 f5 5e 32 7d c2 ca 64 96 61 ad 92 54 e1 49 df 74 11 ff 03 fa f0 7b 02 41 e5 6e b4 68 d1 f5 8f 96 65 55 57 94 35 f7 fa 54 04 96 61 93 44 d4 af ea 08 64 af 43 87 57 4b ba 40 8f 9c ca 7f 11 1b 6a ef 46 ab 68 0a 7a 59 a9 0e ef a2 96 1e 98 cf aa f2 ba a2 8a 6b 85 8b 1d ab d9 66 24 1d 73 4a ac 90 c2 a6 de 48 6f 7e 41 ea 17 25 ea 37 96 18 34 de d7 f4 33 ea 18 68 7b 44 06 27 5d b6 ce e3 68 81 31 f3 a9 7d 3c 11 83 9a 76 bd 24 5e 69 ef e8 b2 58 cf 67 81 16 95 cd a2 5a fa ad 2e ca 1e 39 16 5c e9 11 b1 1b a6 f6 4a 2b Data Ascii: x/pr/NohR36s/y4Rjeb$Hjp%wbS.!k;Y%^2}daTIt{AnheUW5TaDdCWK@jFhzYkf$sJHo~A%743h{D']h1}<v$^iXgZ.9\J+
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 93 e8 bc 73 56 10 68 6f 4d a9 67 8a 15 59 5a 27 4e 1d ff ff 04 89 fe 61 a7 7c 07 55 2b 7f dc 86 7e 9c 56 d1 dc dd 14 6f 8d 28 97 ff eb ce b5 ff 83 29 36 3b 09 70 73 99 66 d8 81 ea 11 4d 0c f1 50 10 8c fc 54 d5 d1 76 5e 60 5b a8 6a 6c 4b c2 71 7c b6 f8 fd dd 2b 74 b6 a2 e9 29 91 d7 19 3a 78 ad 32 2e 30 26 3b c7 e8 11 b5 dc ca 86 b3 28 72 b8 49 bc 80 ed 80 ec 22 6a f1 2a 65 b5 56 25 30 f4 b2 86 f5 d7 ed 68 5b 4a 0a ce c5 1b 35 5f 2d 04 4e 2b b6 c8 22 b2 13 1f 09 a1 ad 65 64 d3 bc 29 f3 48 c2 ac 25 54 c6 64 fb c4 f7 c3 e2 42 12 3f 37 f8 5e 7f a2 b7 d1 41 4f 74 df 67 d4 23 9d 68 e8 39 36 bf b9 7c ee a1 f2 13 91 6f 1d 3e 64 f7 ab b8 0b ea f0 cc a3 f2 4b 55 dc 1f d9 73 29 bb a3 95 6d 85 1d 37 55 e0 da dc 57 ff e0 8d 4c 6e 37 53 54 e2 79 d6 39 a9 a8 ef 1e cc 23 Data Ascii: sVhoMgYZ'Na\|U+~Vo()6;psfMPTv^`[jlKq\|+t):x2.0&;(rI"j*eV%0h[J5_-N+"ed)H%TdB?7^AOtg#h96\|o>dKUs)m7UWLn7STy9#
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: a8 28 ac 39 eb 13 08 6b 42 45 75 50 26 34 9b e2 6f c2 9a 87 db 34 cf af cc 40 40 60 ac 07 08 bd 76 01 b5 db 90 f5 65 ff b2 17 74 36 a5 e3 b6 38 80 f4 ee 59 88 cc e9 cd 95 19 1e eb a8 e9 4c 04 c1 32 1d bb 80 74 66 a8 73 c3 ff de 33 dd a8 33 91 5a a2 68 f4 81 30 49 94 dd 9e 41 6a e8 f8 48 15 cb cc 9a 3d 3c 4e 2a 18 0f e9 5a b9 11 c5 2d 9a ac 59 f5 f8 da 8f d1 e9 2c 8d 26 94 41 ab 9f 1c 99 be 1a 37 99 6a a8 42 04 81 2f fc 28 73 d1 a0 ea 53 e7 0c 55 7d 7a 31 ad 27 8c aa ce 18 2f bc c6 8a 27 50 28 d2 eb d7 32 dc d4 fa 39 2a 71 38 2c e2 87 08 f0 45 90 86 b6 bc b1 e9 51 0a 4e 62 f2 a2 d0 8d 7f 66 cc 8f cb 77 b8 b0 b2 77 be 56 d0 2a d1 26 07 81 19 b7 4c 93 0f a8 6c 24 35 92 85 5f bc 75 ee 71 7c b4 e2 1f 56 cc 94 56 81 a7 45 ca 03 ed 4b 40 12 e0 cd aa c0 4c ec 3e Data Ascii: (9kBEuP&4o4@@`vet68YL2tfs33Zh0IAjH=<NZ-Y,&A7jB/(sSU}z1'/'P(29q8,EQNbfwwV*&Ll$5_uq\|VVEK@L>
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: ef 58 ed 19 8c 08 f8 f0 05 a5 7f 8f b7 ef 06 fd da 25 38 9f 33 fa f2 44 f5 36 1c 34 07 8e 1d 7f 41 c8 03 98 76 73 c8 6b 70 a5 35 9f 12 e2 36 45 f1 48 37 86 e7 03 f0 ba e6 60 7e 00 12 49 95 4d db 0f 6d 75 49 bd 52 70 ed 79 5e 0f e8 c1 49 77 02 e9 b2 2a fb 53 2e 1a 71 ba 07 7f a8 a9 65 8f d1 f3 69 4c ec a7 7f b1 3f ca da 15 b5 96 8f 6a 7f 6d 8b c5 dc 08 7a dc 13 3b 01 cb 3e 6c 08 8c e7 59 27 38 15 d9 f4 02 76 7a 75 40 ef 6a 9b c9 f9 cc fe 8f 35 20 d8 f3 53 de d4 8b 3f 53 f8 a9 23 34 38 3b 99 f9 48 24 12 c8 3e 9f b1 02 67 41 5f 25 ab 8b 57 28 e2 51 9d 87 58 88 ca 7e 05 c9 89 c3 b3 99 3b 26 a4 08 83 67 bc 8b ea 21 41 59 2e d5 9c 99 62 87 d9 13 11 1c 53 46 11 cd fe a7 70 4d 4a 49 b2 dc ab 6a 10 3b 99 d0 7c 12 14 96 c8 3a d4 31 69 48 9c 31 1c 35 4b 75 56 19 53 Data Ascii: X%83D64Avskp56EH7`~IMmuIRpy^Iw*S.qeiL?jmz;>lY'8vzu@j5 S?S#48;H$>gA_%W(QX~;&g!AY.bSFpMJIj;\|:1iH15KuVS
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 42 24 b4 78 c8 60 20 53 1e 0a 1f a0 d8 fa 86 5a b7 3c d3 eb f6 f7 2f 5d d3 61 fd 9d 91 39 bf ae d2 87 04 ce ff a8 f5 87 a4 4f da d6 06 e9 27 3c 81 2b 82 7a 3b f5 68 7f 55 df e6 c0 20 38 17 1b cf b0 d1 2e 00 6a b2 10 5f 48 8e e0 7d 6e ec fc e0 84 22 b8 d9 53 01 84 f8 42 c1 18 5c 1f 26 9d a9 68 66 ca a5 bb 9f 8d ce f8 82 6e 65 54 d1 5b 58 d6 e5 dd fa 25 4b f5 56 90 91 28 51 fd 48 b0 de 66 12 c8 5d 8d dc 66 b0 32 e8 8d a9 52 2f 4c d5 89 d0 83 db 1c ce 05 1f f8 6b e2 e5 10 a2 6d 02 38 da f3 e6 a4 09 cc 91 56 e5 a5 c4 1e e9 d3 81 d1 3e 2d 73 b6 01 d3 6f c0 4e c8 9a c5 b9 6a c9 8b b6 d3 92 3c 0b d4 e3 31 42 b3 1a b4 6e 81 9a 3c 97 23 f8 a4 db 7d 04 7f a5 9f 71 f2 9e b4 ce 38 f4 7d ae c9 3f 04 43 cc 9e fe 82 75 e3 09 30 88 65 14 41 fb b9 60 80 b3 a9 19 16 6e 57 Data Ascii: B$x` SZ</]a9O'<+z;hU 8.j_H}n"SB\&hfneT[X%KV(QHf]f2R/Lkm8V>-soNj<1Bn<#}q8}?Cu0eA`nW
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 92 ba d8 e1 54 83 46 4c cc 75 dc 02 c8 8e 0a 3c ff d0 66 0f ac fc 0c af 77 c9 dd 91 9c 6d 5b fe 5d 07 67 f3 e2 2f ba ca fb b2 b3 bd 38 f9 19 90 42 f4 11 f0 e5 1d 33 9b 8c 0a fe 65 a6 aa fc 73 10 3e f9 d4 a1 6c 25 82 c2 6b b5 cd 07 67 ca 3b ed d3 df e9 30 86 bc 8a 21 42 90 aa dd bd bd 00 46 1b e0 f6 0c e2 63 7d 61 2f 69 9e be 8c 97 e5 21 e4 2b 50 90 92 b9 9d 9e 9b 85 99 c2 b3 b7 e6 d7 bc 79 da 54 cc 2a 21 cd d1 a8 01 30 01 23 88 83 67 7b 67 00 3d 0a 2c 1f 01 6f 9d 8d 20 6a 81 13 52 52 32 52 8b 07 5d 0d ba 30 59 8c 1d bb f6 06 8c 28 aa b7 c0 d4 c2 8d 3f af d4 5f a5 27 ef 8f 24 7d 59 fd ff 69 52 a8 8d 49 90 09 23 08 4c cf d3 0f 59 57 5f 4f 29 7d c3 b2 80 25 bd 36 ac 43 de 1b bd ae 76 61 c2 7c 5a 86 ef 9d 17 ec 8a a2 ad 17 31 4d c1 be 08 d1 26 95 8f 63 13 bf Data Ascii: TFLu<fwm[]g/8B3es>l%kg;0!BFc}a/i!+PyT*!0#g{g=,o jRR2R]0Y(?_'$}YiRI#LYW_O)}%6Cva\|Z1M&c
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: c9 4b 87 cd 9d 25 9a 24 de 37 b1 4b d8 d5 6a 9d 7a 93 de b3 8d 3e a8 06 13 d0 f4 cb ff 1e b0 37 b1 47 66 42 2b e0 a9 e6 0e b4 e2 79 97 94 c4 f7 a0 2e 14 43 b8 81 3c f7 fa 03 41 55 17 63 24 62 8b 16 a1 d9 a1 a6 9b d0 6e b4 b6 3a 36 6f b6 86 55 b8 a6 17 72 3d 0f f5 97 98 30 32 0d a8 50 2e aa e8 23 27 48 1a f5 5a 5a 82 5e da 15 5a bf 82 55 f3 06 49 a1 54 f7 97 3c 84 49 62 77 3d 44 6b 94 db 7c 6e 79 d8 ef 39 ec 03 55 cf 3f 76 7a 1b e6 b3 25 fe 8e b6 d6 1f ce 44 3c 22 c7 97 fb 75 09 7d f0 aa a3 aa 6f 9a 12 97 9f 17 0c 54 c1 1c 66 fc c6 b5 26 f6 79 db ce 04 33 98 33 83 76 b4 23 5a 5f 2e 23 63 5c d5 6f 46 41 54 47 32 1e 69 b2 e6 8e 09 b2 43 86 56 9a 14 98 cb 08 22 66 b0 52 03 b5 56 f7 53 bf 81 25 5b b9 8b 6c 88 65 f5 21 36 a0 70 55 f3 2d c0 b3 2c 2d e5 e0 ed b5 Data Ascii: K%$7Kjz>7GfB+y.C<AUc$bn:6oUr=02P.#'HZZ^ZUIT<Ibw=Dk\|ny9U?vz%D<"u}oTf&y33v#Z_.#c\oFATG2iCV"fRVS%[le!6pU-,-
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 3f f2 40 3c ef b5 48 b8 a2 c9 98 36 93 6e bc ee 0c 26 c8 57 81 37 80 d7 e2 09 69 5a d3 d5 80 98 e7 70 d2 b5 3a 6a ec a6 f9 46 38 ae 0c 90 ec 8e 29 bd 4c a4 32 70 73 41 e1 0c e3 2a 38 20 f1 a8 65 7f 0f aa ce 20 e3 8b 8e e4 c2 10 b7 f6 1c b0 ab b1 7e 15 67 20 c7 86 91 6f 24 25 31 f5 e8 b8 46 64 d9 b3 ea 20 f1 6d aa ac 49 80 62 ca 8e a6 f0 a7 39 d4 5f a7 44 da 47 bc ed 74 d1 b2 da c4 e8 6a ac 34 e6 8d 99 5a a2 24 95 80 f7 f9 88 86 5d 07 8a 29 a5 54 a4 6a 6c 4a 11 45 46 84 27 15 e8 1c d0 23 c6 0e 75 22 64 9d 6e ff 95 f9 5a 27 59 2e af 63 56 02 5b ec 3b 38 67 f2 52 ff 6b 7f 98 b0 d9 54 e0 03 e3 84 25 a6 10 4e 13 6b ea ec 95 b7 99 b7 cf 1b c0 bd 5d cd 4e 25 d1 ec 6c ba e0 31 30 b3 9f fe b6 1b 3e ab 77 52 b8 de a0 30 3b 77 fd bb 68 a3 77 00 e0 4f 9e 3e 05 17 d4 Data Ascii: ?@<H6n&W7iZp:jF8)L2psA*8 e ~g o$%1Fd mIb9_DGtj4Z$])TjlJEF'#u"dnZ'Y.cV[;8gRkT%Nk]N%l10>wR0;whwO>
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: e8 bf e5 de f8 a9 05 cc 01 97 ef 0e d9 8d ff 44 bc b1 ed cf c3 a7 6c 5b 2f 9c 5b 1e 4f 32 f0 43 55 b3 e2 b0 59 36 07 09 ce 2f 82 d5 63 d7 3f 8d c8 e7 3e 42 91 9a 8f 98 a7 b3 09 18 6d bc bc 61 25 7f d6 24 6c e0 c3 0c cc e0 33 de 0f 47 01 a8 4a eb 7e 0c 35 cb 12 7a 5b a9 8b 7e 18 cd 63 bc 57 cb d3 7f 4e b6 28 39 c5 da 82 41 10 19 78 4b 0e db f6 a7 bf 63 11 fc 2f 0b ce 53 b1 0f 7f 08 52 80 b9 18 8c 02 4a 0b 05 5e 60 88 17 3b 82 24 cc 1c 3a a1 1e 4e b9 ba af 11 e8 97 9e 6e f7 32 f5 89 c5 2b 48 e3 a2 cf 77 5c fc ad 9a 3f 03 a2 d8 98 4a 16 c9 80 64 f1 77 b6 9a 1d 3a 50 e2 56 d7 78 9a c5 88 57 1c 2d 53 4b 13 c3 97 84 8d 1e 93 af 6c c4 25 76 c9 a9 2b ef 71 fd 4e 20 06 da 9b 61 e9 0f 38 d8 1c 2e d4 45 d6 7f 07 73 83 8e fc 0d 8d 4c 64 8e cb 1c 83 42 f6 ef f3 88 5e Data Ascii: Dl[/[O2CUY6/c?>Bma%$l3GJ~5z[~cWN(9AxKc/SRJ^`;$:Nn2+Hw\?Jdw:PVxW-SKl%v+qN a8.EsLdB^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49891	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:33 UTC	1105	OUT	GET /tMIgKazDGX4JzzaF3TUPPdZvRTlpGOFKIqwwb0f9lThr-Rlj572zCYCycF_la8NEjumIj9OiUA=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:34 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 20202 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:12:41 GMT Expires: Fri, 25 Oct 2024 21:12:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 5873 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:34 UTC	844	IN	Data Raw: 52 49 46 46 e2 4e 00 00 57 45 42 50 56 50 38 4c d5 4e 00 00 2f 87 c2 5a 00 11 88 6d db 08 92 60 5b 58 64 f1 f3 fd 17 bc 99 cc fc 57 10 d1 ff 09 d0 38 73 8a c3 51 f6 fa 52 b9 96 56 7b aa 6e 25 89 e6 a6 ee a4 5f 6b 87 df 3b 49 e2 64 cd 4c 5d 48 bc 6f 90 64 9b 3a 4a 34 48 96 04 8d 39 71 57 9b 08 bc 29 c0 6d 63 ab 76 f6 f2 b7 71 15 fc 1e 80 a7 cb 6b 83 f7 9f b2 a5 cd 63 ac 64 37 fd 08 24 70 d9 36 b6 94 7c aa 49 26 02 89 6a ac 1f ad 35 78 73 20 90 a0 eb fd fa 7d d3 ce 04 1f d0 3e d3 03 01 94 35 be 26 da 49 ee e9 f3 ec 32 3e 13 50 5d 0e 2f 08 68 f2 77 82 e7 91 f2 1f 04 ea 2f 4c 24 b9 b6 e5 48 ca c1 7b 08 7c db d2 13 23 0f 81 f7 50 ab 60 cc fe 47 a5 50 a8 94 6a c5 ac 6c ef 00 6e 63 db ae 95 c1 7b f8 fe 13 9e 4a 10 fd 97 40 f4 62 ec c6 5f 5d 5d 3d c9 b2 6d bb 6d Data Ascii: RIFFNWEBPVP8LN/Zm`[XdW8sQRV{n%_k;IdL]Hod:J4H9qW)mcvqkcd7$p6\|I&j5xs }>5&I2>P]/hw/L$H{\|#P`GPjlnc{J@b_]]=mm
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 07 f0 4d cc c1 f9 66 01 dd 3c 59 4a 3a 00 7c 52 4e 2a b0 ab 59 18 b7 6d e4 48 ea bf ec dd 49 7b f1 19 11 13 40 5e 79 c3 6a a0 73 d9 26 cf c9 26 88 2d 46 ce 90 96 1d 59 e9 35 cc 55 4b da 43 7a a1 d0 6f 12 b0 cd 22 93 2a 5b 95 7f d2 3e 5d ef ff bd 92 1c 37 27 54 f5 c4 9e 51 ba f2 3b f1 0b f4 fb f3 3b f0 0b 50 da e9 dc 5d 75 ce b9 98 dd a9 e7 fc 9f d3 55 a7 ee 7e 14 c6 41 39 8b ab 9c 1b de 07 c6 71 28 67 1f 65 69 25 02 ca 79 a0 08 42 6e 87 47 de 29 e7 76 b6 15 9c 93 02 47 c6 40 2e d0 e0 c5 e3 a0 b4 d0 ce 1a be ca 0b d3 81 0e 7d 51 c0 a2 25 c4 c7 e1 4a 0b 47 02 ab 38 32 56 a1 17 ec 9b b9 a0 23 51 ce d9 5e 80 50 56 43 88 0d 42 03 e3 4f 6b c6 39 0f 56 74 0e 0a 84 e8 c4 9b 81 b0 a0 1a ce 39 51 39 11 ab 9c 0f 4c b4 b3 29 39 48 18 db 77 02 1d 16 84 10 69 60 40 e0 Data Ascii: Mf<YJ:\|RNYmHI{@^yjs&&-FY5UKCzo"[>]7'TQ;;P]uU~A9q(gei%yBnG)vG@.}Q%JG82V#Q^PVCBOk9Vt9Q9L)9Hwi`@
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 85 41 d2 33 eb 28 9e f5 54 ed bb f0 92 e5 82 21 e1 81 f0 61 ea f7 0d 9f 4a 31 28 27 a4 42 6e 86 02 72 9b aa 15 a7 21 a5 0e 63 14 33 75 4a 24 3c 17 08 1e ea 97 b9 f6 da cf ba b9 60 c8 ca 07 82 9b 99 13 c5 42 50 ce 74 be 91 40 a4 97 ab 4d d1 06 2e 0f c8 c8 b8 64 6c dc 7e 67 90 e4 6c 70 de 8f a8 7f 75 e9 5e 55 f4 20 37 a3 76 12 4c 46 88 b9 71 c5 90 80 cb 73 90 9a 15 21 2f c8 78 b8 46 23 3a 37 94 48 6e e6 72 ff 3d eb 27 17 06 17 5c 30 23 01 d7 ae 0b ee 58 04 ca 49 54 33 f3 24 10 f2 b3 48 c9 06 9e de 20 61 19 da 18 a6 ea f4 91 d4 cc 8b ea ee 27 6a 5f ee b9 c1 25 23 29 19 f5 1b b0 00 a8 7a 8f af 68 c0 d7 bb 4d c5 8a 80 6f a0 cf 7a 2a 46 ea 86 41 32 73 d9 89 1e d5 af 2e ac 7f d9 bb 56 32 92 95 1f 75 43 84 99 16 3f 2d d3 40 9d ef 3a 05 1b f8 fa 2d e8 eb 40 8d b0 Data Ascii: A3(T!aJ1('Bnr!c3uJ$<`BPt@M.dl~glpu^U 7vLFqs!/xF#:7Hnr='\0#XIT3$H a'j_%#)zhMoz*FA2s.V2uC?-@:-@
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 46 8d 64 03 5b 45 8c e5 c9 67 bd dd cc b7 8d 9e 61 b4 90 37 df de 08 c1 b4 1d b1 e4 80 85 d4 c4 64 88 bb ec 7c ab a9 d2 47 8c 65 e7 1f cf fc de ff bf b9 44 8b 59 5e c8 62 8e 5c 53 11 45 2f d2 39 92 92 44 70 74 21 66 be fa 13 47 7c 32 03 f1 a5 9d 39 35 f5 ab 8d 35 46 cb c9 9f 10 4e 62 10 6a c3 b4 4c 0f 7f 74 21 15 71 55 c4 17 62 d6 67 7d 76 cd 56 21 9e cd f9 93 bf d9 7f 00 f4 b5 85 86 dd 2d 33 50 1d 27 5b 5a 40 5b 0d ab 50 58 b8 d1 d1 56 ab 0e 14 43 47 51 c0 6a d8 db a4 a3 6c 69 b5 d5 56 af b0 ca f4 ba dd 4d ab 88 5d 87 86 05 b4 d5 56 db db a0 15 5b 68 58 6d b5 3d e7 6c 63 15 18 da 6a 7b eb b4 8d 0b 1b 97 b1 98 72 8a 53 49 39 3d 84 fa 72 35 29 88 f5 f4 86 78 0d 26 d2 e8 38 7e c7 10 5f be fd c4 0f ef be c6 a0 ee 64 27 fb 8c e6 cb e9 db c9 d9 87 db 9c e5 a0 Data Ascii: Fd[Ega7d\|GeDY^b\SE/9Dpt!fG\|2955FNbjLt!qUbg}vV!-3P'[Z@[PXVCGQjliVM]V[hXm=lcj{rSI9=r5)x&8~_d'
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: e9 d3 fe 71 19 4f 68 c3 8c 27 f2 c0 e3 69 5b b9 80 5f 10 da 0d 00 b2 8b 93 3f 5b 23 54 5e c7 6b 7e c7 90 f2 d5 1b b5 e3 a6 5b 05 98 3a ce e8 c4 83 a3 3e b9 19 79 10 f2 d5 c2 7d 7d 08 cd 1e 56 93 e9 cd 9c 1d 73 84 4e 8b a0 ba 1b f7 fe e7 e5 ec 67 e9 f8 62 93 72 72 ee a6 60 b8 43 14 6f c4 f1 74 ae a9 98 44 d8 db b2 05 fc 82 d0 ee 49 06 d9 c5 a9 df ce 1a e8 56 d4 e1 7a df 15 24 fd 46 3f fd 77 f5 b4 b9 5b f7 dd 54 90 81 6b 37 26 1e 1c ba 4f 29 11 3e 39 6b cd be 3e 84 7a 61 14 c8 f2 d7 f9 40 a6 63 47 e4 fd 21 de f6 58 d6 0e fe 0a a8 0d cd 64 2a 00 d6 b2 7e 85 98 cb bb 3e bd 43 12 e1 06 d3 82 75 03 be 20 b4 73 35 08 9b e9 df ad 81 ac 51 a6 74 fa cb 29 64 bd cf a0 b3 9b ab 51 b7 0a b0 f0 bf 8e 5a 4c c0 fb 54 48 26 9c 3e d4 72 69 5f 6f 10 5a 56 31 4f 88 8f dd 91 Data Ascii: qOh'i[_?[#T^k~[:>y}}VsNgbrr`CotDIVz$F?w[Tk7&O)>9k>za@cG!Xd*~>Cu s5Qt)dQZLTH&>ri_oZV1O
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: a2 0f 06 60 b0 15 d7 16 44 3a 9b a2 82 24 40 c4 09 a2 45 f0 b9 5d 06 31 3f ec 94 18 09 9c 70 bd a0 ec d3 81 57 be d5 1d 47 3d f4 94 d4 9f 19 bc 53 9d 79 1c d6 df c9 1e d2 03 17 50 80 10 1b ff 75 4b 04 03 c3 49 00 f8 e2 b2 ad 40 a0 e9 20 e6 f2 55 0b c8 e8 0c a4 74 70 e2 96 c3 3d 5f 4c 2d eb 2c aa 48 0c 6f cd a6 a2 a4 71 fb b7 ed b8 43 07 b4 73 b8 7a 56 26 82 09 f9 dc f9 44 c0 d7 1f 34 7f 1e 10 bb a3 9d 20 23 85 67 4c 89 10 fc de 45 c1 c5 9f 70 86 f9 d8 db 16 bd 18 e1 c5 11 b8 0f 35 a5 c7 6b 8d f1 ca ba 03 fc 75 4d 45 05 eb f5 12 89 70 10 2f 71 b0 c9 cb 42 5e 2e 13 df d1 a9 5e 29 d4 47 92 02 32 a9 f6 3a 64 37 a0 ec 48 60 84 97 c7 93 ba af 9c 67 93 47 7b 1d 37 e4 5a ed 1c 53 c1 f1 e1 9a 41 12 60 60 be 7e 84 a6 2e 9f 8b 74 23 76 fe 36 33 c2 32 e0 a6 92 96 d4 Data Ascii: `D:$@E]1?pWG=SyPuKI@ Utp=_L-,HoqCszV&D4 #gLEp5kuMEp/qB^.^)G2:d7H`gG{7ZSA``~.t#v632
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 48 cc ce 06 75 d3 9a ba 24 a7 73 70 fe 6e 93 5e 86 e0 f3 ef a0 24 e2 a8 0b d7 98 48 4e 6a f0 8a e5 ad 98 46 01 ce 14 d7 07 6b 31 38 19 c2 cf 1e 59 8c 16 05 1f 83 6c 79 d1 2d 4a 28 05 58 58 11 7a e6 7b 98 18 ba db 36 45 9a a4 40 24 93 09 bc f6 13 7e b9 31 32 e3 fb 4e 0d a2 c1 57 5d 89 b0 ef 45 0b 1a 39 28 5b 27 3d 11 f9 2d 78 c7 26 1e 11 7c ed 72 33 38 d0 fe 33 c2 8d 48 39 0a f1 01 3e c1 9c cb 05 fd 39 5c c3 fb ed 36 08 c5 10 cd e1 53 b8 22 b7 0d 15 4b 0c 44 33 df b3 7a 8e d4 d8 50 65 d0 a2 35 44 3f f9 51 4a 26 af d4 4e b3 4c 03 79 46 68 de 53 1d 36 a6 c5 4c 78 c5 ca 51 06 b4 3b c4 94 e6 f5 46 5f fa c8 ce 33 3b 28 db 96 09 45 a3 40 c6 01 c8 0f c4 30 c8 b4 78 9f 86 64 0d cb c4 18 1c 10 69 a8 70 cc 05 71 76 76 f6 fb 5c a4 0c e2 97 7e 04 13 c3 a1 1d 23 4e 8c Data Ascii: Hu$spn^$HNjFk18Yly-J(XXz{6E@$~12NW]E9(['=-x&\|r383H9>9\6S"KD3zPe5D?QJ&NLyFhS6LxQ;F_3;(E@0xdipqvv\~#N
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 85 db 13 00 78 9d d1 5d 9c 66 a9 92 17 7d d8 b8 79 32 1e 48 d7 fc 24 ff af 1b 81 09 27 cf ae 66 cb 01 dd 3b 1e 2d 8a 82 56 e2 4c ed 2b c7 a4 a8 ab f9 84 b0 29 6b 24 d2 d4 37 23 21 1e cc ff 70 19 59 30 57 9f 41 62 55 39 88 1a 01 ba 13 1b 44 f0 28 d3 ee e4 2d 81 b1 12 af f8 58 7d 63 06 f7 77 38 63 f2 22 e7 23 dc a6 9a 6e fa ca 71 9c 47 ae d5 3c 62 18 6b a2 d9 7e 32 db 02 05 c5 e3 6f c7 33 8a 02 44 80 78 0e a7 3b b1 04 f0 d2 2d 15 e5 50 22 cc ac 37 a7 43 13 a2 c7 b8 3c de 21 ed 62 25 33 ad 8c 44 97 1c 26 90 23 27 b2 ee 54 26 53 f1 50 4b 16 b3 ac 3d 83 30 70 77 87 93 26 86 9e 03 c6 68 74 b1 57 8c ce 78 e2 92 38 80 6c 75 fd 83 d8 b2 92 96 41 b5 ca 39 a4 52 ac 52 0b 17 12 46 b3 38 a0 7e 4d 0a a8 5a f2 23 11 8c ca 74 9b e3 b3 66 64 9c 7c bd c9 83 ca 30 99 f5 3a Data Ascii: x]f}y2H$'f;-VL+)k$7#!pY0WAbU9D(-X}cw8c"#nqG<bk~2o3Dx;-P"7C<!b%3D&#'T&SPK=0pw&htWx8luA9RRF8~MZ#tfd\|0:
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 72 41 2c f8 e4 23 df 96 47 27 01 50 8e 36 9f e4 b0 d5 e3 ae c4 93 83 68 72 cd 2c 1e bd 60 35 73 7e 83 61 54 67 7c 4c 6b bd a3 bb 45 a1 c4 ad e1 bc 96 52 58 80 6b 93 62 48 e4 2d 19 a6 1a bc da 22 65 b6 86 07 71 18 d4 e6 94 20 c2 05 60 63 e1 e0 d2 86 3c e8 3f 98 28 99 5c 72 1c 84 e4 a3 b3 5d d9 24 e0 87 1c f3 29 a5 50 fe 16 c7 83 2c a7 91 de 59 f1 30 cc 1d 9a 19 02 a7 81 02 e5 ad 75 61 82 c3 56 02 93 94 25 c4 c0 a7 d8 a6 c7 67 07 e6 b2 50 81 14 45 e2 a1 32 ba 11 44 95 45 cc 7c 2c 5c 63 79 cc d4 d8 ef 6b 24 72 2a c5 91 24 a4 bb 9d 8a 24 80 9e e8 06 52 e0 cd 2f 52 b1 64 79 46 63 f0 12 2e 48 d4 d9 55 1a 0c 38 41 07 c5 b6 35 44 68 75 e5 10 db e6 b3 3b da f9 fc f9 41 ca 25 db f6 81 09 2e 43 56 49 14 80 a1 63 01 3f 89 96 07 fd 07 33 d7 24 72 68 88 93 7c f2 91 6d Data Ascii: rA,#G'P6hr,`5s~aTg\|LkERXkbH-"eq `c<?(\r]$)P,Y0uaV%gPE2DE\|,\cyk$r*$$R/RdyFc.HU8A5Dhu;A%.CVIc?3$rh\|m
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 39 d9 1d d9 aa 22 b0 1b 63 5a 2a 71 81 17 9c 25 c0 fe 86 cb 16 1a 62 03 be 85 30 4e ef a5 95 84 a2 c8 f5 bb a8 c9 54 4c 5b 26 81 9d 7e 88 55 84 20 ad be 78 28 2e d7 ba 01 73 ab d6 a7 a6 fc 1d 16 97 65 a0 bb fe 73 3b 63 cd 0f 5d 59 54 38 77 2c 76 67 92 c8 00 54 58 b7 8c a7 28 a1 09 5b 4c 5e fc 89 40 52 8c ce e3 39 06 6b 55 34 f3 f4 df bb 4f 3e f9 98 46 0c 82 c6 45 06 2b 70 6e 8e cd c9 d7 1f 81 c8 9a 09 20 9a 82 35 96 88 7f 9a 91 c0 4e 97 9d 3d 57 5e 10 13 34 b1 70 ca ba c1 37 4e 35 43 0c 9e aa ec 28 61 39 08 37 cc 2c ae 59 2d 19 3f 20 12 df 3e 81 01 00 c5 71 d1 6c f0 dc 7c 66 93 89 09 62 0a d9 bd fb 93 46 c2 98 9c 96 1c 18 24 41 6b 92 65 ca 81 38 dd 63 8c 1e 26 9c 75 22 39 62 15 6c 7c 7c 86 91 c8 4c 7b 41 ff 9d 47 e9 5e 18 82 c4 06 e3 94 b5 a8 d3 0d e8 b1 Data Ascii: 9"cZ*q%b0NTL[&~U x(.ses;c]YT8w,vgTX([L^@R9kU4O>FE+pn 5N=W^4p7N5C(a97,Y-? >ql\|fbF$Ake8c&u"9bl\|\|L{AG^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49893	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:34 UTC	526	OUT	GET /ebs6ftYUkOKlDY0M174OpvargwbDyHUVAnO_G5aE0dL5GBQKCtfh3adN5H3ZMThXogDi=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:34 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 52048 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:57:58 GMT Expires: Fri, 25 Oct 2024 20:57:58 GMT Cache-Control: public, max-age=86400, no-transform Age: 6756 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:34 UTC	844	IN	Data Raw: 52 49 46 46 48 cb 00 00 57 45 42 50 56 50 38 4c 3c cb 00 00 2f ff c0 3f 00 4d 48 8c 24 29 0c a3 ba 5d 40 dc c8 f9 27 cc 01 b2 ff 03 88 e8 ff 04 f0 f5 04 7a 87 7e 91 07 ff ed 78 23 9e ef e2 f0 ae 03 f6 66 46 44 9b 17 13 6c 3b 22 60 44 b4 f5 0c bc b2 1d 4b 9e 79 e5 b4 b5 d6 ae 12 88 b5 03 b4 d6 26 d0 2b 49 09 bc 45 34 60 48 8d 3a 73 79 00 c5 4f 91 80 a4 ac 60 5a a2 10 0c 15 53 a1 25 01 59 59 bd 11 61 2d 63 f3 2c da 95 ee 30 78 ab f5 e4 8d 88 d6 e6 9c 9c 3d 1a 1b c1 90 04 17 53 d2 26 62 ba 78 1c f9 45 e9 07 90 74 80 d4 e6 11 80 25 ea 84 21 09 18 45 07 b0 95 1b 60 ba 38 b5 ed a3 71 65 db 1c 4b ef 1b eb 12 61 db 79 23 15 5b 1b 20 67 31 40 b1 d5 86 db 08 ca 11 6b a7 cc 93 49 3d 07 db e4 cf 8e 3c c8 6f ce fb 27 0b 59 ae 24 29 92 f4 66 99 99 f9 6b be f6 fe e7 89 Data Ascii: RIFFHWEBPVP8L</?MH$)]@'z~x#fFDl;"`DKy&+IE4`H:syO`ZS%YYa-c,0x=S&bxEt%!E`8qeKay#[ g1@kI=<o'Y$)fk
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 8c b5 75 ad 7c f6 ac 5c 8d 2f 45 b3 08 f0 d3 73 d1 e6 4e 33 d4 f2 99 0f db f7 e5 93 79 4f 07 00 8d ea fa 85 e7 bf 48 7e f2 2c 8d 52 2a 31 a1 49 2b d1 e0 95 b3 ed ce 0b ef f4 7e 17 89 44 4f ec ea 52 a5 4b 03 10 28 28 14 89 b9 eb ca 71 bb f3 cd d7 e3 30 26 35 29 b6 ee ed bc b1 8f 97 96 0b 7f cb f7 1e a9 de 74 5d ba 74 a5 52 04 20 a0 50 7c 85 46 91 08 cc 5d 93 ae ef a8 c7 0a 4d 20 f0 11 1f ed 84 fb a1 4d 5a 6a a1 e9 d6 74 55 2a 4d 54 12 81 84 42 a1 49 28 02 81 40 a8 33 53 05 16 1b 02 81 d0 42 4b 6d 31 55 88 4e 4a 60 50 a1 51 94 03 0e a7 08 28 42 3b 33 54 aa 90 e1 18 d1 04 02 c3 dc 40 34 bd b4 38 30 58 19 a7 16 42 ce 38 b3 1e 34 c0 70 db b6 91 20 49 9a fe ab de d9 fd 8b 3e 8e 88 09 70 45 50 c5 2b 8a 3b 5e c1 af b9 a1 b2 20 2f 3b 2e 27 78 e5 82 67 41 e1 23 de Data Ascii: u\|\/EsN3yOH~,R1I+~DORK((q0&5)t]tR P\|F]M MZjtUMTBI(@3SBKm1UNJ`PQ(B;3T@480XB84p I>pEP+;^ /;.'xgA#
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 18 1b a2 15 17 5a 2a 62 d2 f8 62 e4 8b ed b2 bc 7c 25 2f 89 70 aa f8 ab 89 18 63 d2 42 45 34 48 46 98 24 06 81 e1 58 e5 0e 58 4b 5c 3d 7d b5 39 2a 5b e3 1c d7 dc a4 9a e3 ab 57 04 ca 9b c9 39 a0 89 68 aa 91 93 82 c4 a1 a4 96 c0 8a 94 e3 05 ad 80 b2 4e 84 f2 b8 2a 2a 1a 6b b1 5e 0e 42 4d 2b 62 48 8f 58 44 49 28 25 4b bc 54 c8 48 1a d1 ba 60 27 63 1d 16 80 ad 50 d4 c7 6a b9 4c 0c 1d a0 e9 6a 15 47 45 62 32 c8 d8 7d 75 9c 92 1a 42 69 77 45 5a 4c 31 2e 1a 69 69 14 70 2c 24 31 5e 22 c1 ae 55 32 d3 82 0e 85 11 20 a4 d6 cb 89 22 07 09 00 f3 4a a0 98 0f 6b 6d 52 97 25 01 85 a2 80 39 51 62 43 03 d4 d3 84 3a 95 84 a9 16 b3 58 04 5a a3 da 46 52 a0 65 82 2f 60 8a c5 18 53 a9 51 06 cc 72 c7 dd bd a2 88 88 a9 80 82 e4 08 2a cf f8 d3 13 89 25 82 64 36 94 04 a4 e8 32 3d Data Ascii: Zbb\|%/pcBE4HF$XXK\=}9[W9hN*k^BM+bHXDI(%KTH`'cPjLjGEb2}uBiwEZL1.iip,$1^"U2 "JkmR%9QbC:XZFRe/`SQr%d62=
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 15 7c 22 09 6d 05 0a 6e af 5d 16 10 2e 65 5d 56 35 ab e9 a5 e8 22 a8 92 d4 28 e2 93 92 84 59 22 a4 16 b0 a6 56 57 48 5d 4c cd 50 31 15 50 ab 53 24 ac 42 09 43 05 2c ca eb f2 5a 1a 9f 14 ea a6 bc 58 97 37 60 e0 b4 ba a2 94 f9 24 14 66 05 ba d8 ec 5e 8a d4 4e 49 d2 49 a9 05 bb b5 c4 cc 85 88 ed 52 65 93 7c f5 93 14 b5 d4 74 e5 35 b4 a4 24 c8 b6 14 4a a8 95 e7 f4 24 5f e0 35 52 7b 25 3b 17 b0 04 11 94 0e aa f3 69 05 05 c1 f2 6f 01 60 80 ae b4 d3 2b ea 09 75 2c cc 58 12 a9 14 a9 a3 0b 91 5f ce aa cb 49 4d c7 15 cd 54 ab ca eb 92 b2 a1 e4 ab a5 42 02 53 2a 14 54 d3 c5 c8 65 a2 e2 93 59 55 af 68 38 14 85 32 d4 a3 46 69 4b 1a 16 d5 22 6d 4e 69 64 53 12 20 0a 88 a4 63 8a ac 59 13 41 e6 48 0b 9c 29 4a 75 59 0f db b4 b6 5a 86 8b a2 5b 64 97 7c dd 12 18 85 59 42 a9 Data Ascii: \|"mn].e]V5"(Y"VWH]LP1PS$BC,ZX7`$f^NIIRe\|t5$J$_5R{%;io`+u,X_IMTBS*TeYUh82FiK"mNidS cYAH)JuYZ[d\|YB
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 57 98 ec e9 75 ec 20 4d 7a ca d5 d4 22 79 19 43 2d 57 1d 99 c8 72 12 89 2f 14 0a e4 75 31 24 b1 52 0d ea 14 52 d2 e3 44 95 82 4e d1 52 8f ea 09 75 be 50 13 b5 54 6a 4a 97 e9 40 52 29 f2 95 32 5f 56 93 e4 f4 52 12 c9 08 ea 89 be 95 2a ab 47 ca 91 ba 29 d2 44 c4 a8 14 9a 48 7a 7d 6a a5 2a b1 46 e5 f9 e3 15 f5 72 14 d7 ab b8 0a 32 8c 42 88 90 8a 22 e3 f2 02 ff ea a7 2f d4 b1 20 09 58 ca 41 91 a4 35 94 57 a2 be a0 04 a4 4c 67 0b 7a 62 bd 9c 40 52 6e 88 c9 34 e4 4f 72 4a 5d 97 54 c4 52 89 70 11 84 7e 21 80 56 64 94 0a bd 1c 2b cc e2 40 3a cc f8 64 13 6a 5a 28 03 42 29 45 2c e0 d5 28 95 ca 21 8d 04 d1 84 32 7b 04 b1 4e 08 2b cb 62 c3 25 64 60 a9 d4 6b 65 7a 90 13 86 5c 5a f0 e2 94 61 2a 16 f3 d5 b2 3a 56 b6 b2 94 03 69 c6 45 56 34 e7 a4 32 08 28 96 15 7f a2 08 Data Ascii: Wu Mz"yC-Wr/u1$RRDNRuPTjJ@R)2_VRG)DHz}jFr2B"/ XA5WLgzb@Rn4OrJ]TRp~!Vd+@:djZ(B)E,(!2{N+b%d`kez\Za*:ViEV42(
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: a1 15 49 af ae 28 45 29 2b 7b d8 d0 6a 4d 27 5a 53 4d a5 d0 90 85 4d 4a 6a da 90 fa c5 92 82 60 3c 66 14 c1 52 85 3a 6f a9 94 15 f8 2a ca e1 dc 65 b0 06 d9 86 45 79 2d 5f 28 b1 a9 97 29 87 92 f5 69 79 85 74 33 6a 03 85 38 cb 89 b0 94 ac 2e 84 54 6a 2a 97 8c 7a ad 54 e9 b7 aa b5 44 d0 32 5d 29 52 46 63 06 d4 d9 26 2f 0b 07 51 1d 28 16 a4 88 95 55 86 0b 3d 25 43 91 2a 4e 56 8a 23 85 75 38 68 c9 60 44 c2 2c 6c 42 92 a0 27 52 a1 46 87 a9 c3 0c 11 73 a2 a6 56 eb 38 d2 d3 a8 94 91 2f 64 b2 0e 52 db 0a b4 14 e6 a5 8c f2 d6 15 45 fb 69 a8 70 2d 15 32 2f 87 c9 2a 42 2a 39 a2 5a a8 05 0c 92 93 64 2f 27 32 e9 12 45 69 66 da 6a 44 35 a9 22 55 1b 6a 2a 1f d4 6a 8e 24 e8 b0 68 03 51 ec cc ca 90 67 6a 2d fd 2a 59 d4 e5 0d 92 ab 95 75 5a 2a f2 27 42 b0 63 a9 48 1c 85 a2 Data Ascii: I(E)+{jM'ZSMMJj`<fR:oeEy-_()iyt3j8.TjzTD2])RFc&/Q(U=%CNV#u8h`D,lB'RFsV8/dREip-2/B9Zd/'2EifjD5"Ujj$hQgj-YuZ'BcH
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 56 8c 2f 80 54 7c 09 72 c7 41 84 63 81 5a 2a 82 5e cc 69 41 81 30 f4 20 47 a1 30 dd ee 94 4a 11 05 c4 a2 82 8a 17 60 85 5c 46 51 49 48 ed f1 a7 17 59 09 85 50 37 2a b3 5b 4c 58 d0 7c b5 5c 94 15 21 c4 0c 0b 21 2a 05 56 f5 40 90 06 06 a6 34 44 ee 8c 1a 25 7f 11 13 65 dc 79 31 56 a6 c8 8e ad 8a 31 a2 0c 00 80 c3 d0 30 11 48 00 28 0c 26 84 20 3c 59 88 04 e2 30 a2 20 b5 09 cb 28 39 0c 4c 13 b7 48 9a 28 0c 22 4e 84 03 f4 11 9f 48 01 19 10 84 6c 1d bb c2 e4 0a f3 e5 28 57 33 c5 52 f0 07 7c c1 75 59 d4 32 8a 79 80 f9 78 54 e5 8b e1 5a c9 31 80 2c 50 fd a6 70 5e a3 80 5c aa 00 45 90 21 50 c6 74 61 2d 57 8f 85 18 28 42 0e 34 d9 28 a2 c4 a4 b4 dc 8c bb a0 c0 72 20 96 a5 7e 15 4b 01 73 87 16 99 01 92 46 b4 4d 31 11 40 aa 6e 1c 50 66 b1 96 b9 e6 d2 e3 52 cc 2c 30 44 Data Ascii: V/T\|rAcZ^iA0 G0J`\FQIHYP7[LX\|\!!*V@4D%ey1V10H(& <Y0 (9LH("NHl(W3R\|uY2yxTZ1,Pp^\E!Pta-W(B4(r ~KsFM1@nPfR,0D
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 26 5b 00 d3 8f ad f5 71 7e 3d 5c 7a 31 a3 db 4e ad fa af 26 4b 23 44 28 62 92 ce c6 87 0c 20 10 a2 0e b4 86 8c 15 28 56 27 70 5d 90 80 4b fd f4 09 81 a5 bd 7a 29 d5 d6 71 95 54 a0 18 51 11 c0 8e 69 54 94 a4 57 91 d6 d0 cb 15 31 77 ca 8a 24 6f 9b bb 86 35 e0 c9 8b d8 a8 6c 41 2d a7 22 a2 5a 5d d1 2c 63 2c 4c 3e be 58 ea 72 99 92 11 ea 40 56 16 cb d4 f5 74 52 52 5c d9 d5 6a 39 79 d4 f2 31 20 2d 70 1c d6 05 80 3a a5 82 98 6a 81 15 08 aa 50 8d 65 c9 a8 08 35 a6 5b c9 32 1f 5f 62 ea 4a 82 a4 10 d7 a4 ad 2b c3 b6 d2 d0 02 26 89 29 ff 37 9a 79 ef 76 c6 5a be f0 fa f9 5b fe c2 cb 1b fe da ab 77 fe b5 e7 9f fc 8f c0 83 9f 7c e6 7f 2c 77 bf 76 f6 ab ef 3c 3b f2 ed 27 cf 3c 6c db f6 cd 37 e3 4d ab fd 5f 67 57 db 28 ad 0e 08 21 a7 65 e1 da 05 04 c8 27 ca 5c a8 77 25 Data Ascii: &[q~=\z1N&K#D(b (V'p]Kz)qTQiTW1w$o5lA-"Z],c,L>Xr@VtRR\j9y1 -p:jPe5[2_bJ+&)7yvZ[w\|,wv<;'<l7M_gW(!e'\w%
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: a9 43 51 d9 9a 2f eb 68 8d 45 41 d0 56 3f 0e 1b 00 5a 82 86 90 02 62 ad 3e a9 d4 b1 55 af 55 d4 ea b3 56 9b 84 44 a1 98 b2 54 c4 ba ac 10 21 c5 e6 a9 fe 72 ef 3f 7d ac 3e f2 a7 9e 6d bd 99 b0 00 de af cb 2f ff 7d 8b 95 fb 26 85 60 08 80 ac 5f 8a 95 c0 42 34 e3 7c a2 3c 7f 20 da 2b f2 28 ab 0f 97 28 42 92 a2 a1 69 8a 09 08 a3 35 27 2a a5 12 1a 31 5f 46 d8 52 42 a4 92 17 0e 40 4d 32 c9 40 5a 2a ab 90 52 c8 81 4a bd 63 29 8a 42 5d d4 89 42 28 85 79 15 d4 62 c8 87 2b 59 a7 a7 57 70 d7 13 ca ac 80 16 6d 99 c2 10 25 d4 ca 50 46 77 86 68 85 b2 e4 ab d5 15 b6 1a 3d 96 52 81 67 35 a9 96 30 f2 e5 e5 2f c4 4c a5 7e af f7 9f 3e 7f f5 8f 7e f3 f7 ff e8 cf 25 1b c0 fb f6 74 f7 ff 7a f6 89 7f ba fc cc df eb e5 53 1f da a4 56 42 21 40 2b 2f 87 65 be 4c cb 27 45 fd 6a 92 Data Ascii: CQ/hEAV?Zb>UUVDT!r?}>m/}&`_B4\|< +((Bi5'1_FRB@M2@ZRJc)B]B(yb+YWpm%PFwh=Rg50/L~>~%tzSVB!@+/eL'Ej
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 14 52 bc 85 48 65 28 4c 72 bb e2 5a 2e d5 c4 2a c8 56 ae 08 21 af ba a8 ce e3 a2 d2 0f 84 2c f4 2a 21 31 83 10 8e 70 12 63 a6 42 c9 95 ba 5a 49 0e c6 f1 95 b2 2c 21 66 b3 f6 02 76 a9 8b 22 9c b1 8a ca 9d 71 b5 a8 c0 89 85 a6 d3 ea bb ca c5 4a c5 86 54 18 d9 5b ac bf 0a 3c 78 af ba 3f 6a 7b 68 dc 7f e7 5a df 7f ab ad 7f 94 fe 55 fa d7 c8 44 04 e1 a0 00 26 4a 1b 71 48 b2 00 62 36 94 3c a0 44 00 61 c9 29 84 49 b6 b6 ee 3f f9 f2 bb 97 7d f1 a3 ad 5f f8 04 07 97 bf 6d 37 e9 c1 80 a1 b1 bb 78 ca e5 fd e7 1f 6a 4a e3 78 9b 54 88 58 1a 7a b1 51 69 b5 54 70 66 8d 30 c6 b6 2b cc 5a 65 8c db 94 11 c2 25 9c c5 41 11 b5 58 13 85 68 8a 49 bf 4a 66 59 ca a8 29 13 bf 10 eb 6a 05 b5 b4 46 37 ca a4 46 04 d5 d1 11 1c 02 c7 49 c5 f4 6c 0a 6b c1 c5 4a 28 b4 2a 76 ae 54 93 ce Data Ascii: RHe(LrZ.V!,!1pcBZI,!fv"qJT[<x?j{hZUD&JqHb6<Da)I?}_m7xjJxTXzQiTpf0+Ze%AXhIJfY)jF7FIlkJ(*vT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49892	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:34 UTC	530	OUT	GET /oKz8aRZyiwP5bLJkwlACQ0ZGq_GPxpNi8wbcE65I_PFHBqgu1xk3T_nTff7urKZisu0=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:34 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 152338 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:18:53 GMT Expires: Fri, 25 Oct 2024 21:18:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 5501 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:34 UTC	843	IN	Data Raw: 52 49 46 46 0a 53 02 00 57 45 42 50 56 50 38 4c fd 52 02 00 2f 87 c2 5a 00 11 88 91 24 c7 6d 6a 17 84 8e d8 81 f3 0f 18 8f 19 42 44 ff 27 40 7c 6a 1b c0 9c 6d fe 37 96 0f cd b1 5d ac 63 d1 ce 9b ef d5 7b 80 9e e4 3f ad fd c7 d9 38 e9 46 8f 4f 6a 40 03 0c 53 d2 54 7a a2 5f 92 52 1b 60 ef da 72 b6 ec be 24 19 95 34 2e 5b 6b ed 0a 3b 61 e9 79 cb be e9 70 21 c1 74 1f ec df e2 be 71 b4 91 b1 7b bc 4f 79 68 27 dd 18 c3 14 ee 61 1f fa e0 a2 f7 c5 d8 2e 49 40 25 80 1d 3a 97 cb 9c 48 20 c4 3a eb 5d 20 a3 83 7c 12 eb cf f3 41 b6 0d 49 7e 59 47 b0 77 82 2a c0 e5 39 2d 1b 96 df a2 a6 20 b1 5a f0 c3 46 78 82 6c 43 3d aa 24 a5 aa f2 e3 0d f5 bc 93 39 75 0b d3 92 b3 95 39 95 cd 2a 40 80 04 12 3a 22 00 49 f6 e1 2c c0 b6 38 ac 52 f1 7e 20 fe 24 69 6e e6 58 a8 2a af 77 eb Data Ascii: RIFFSWEBPVP8LR/Z$mjBD'@\|jm7]c{?8FOj@STz_R`r$4.[k;ayp!tq{Oyh'a.I@%:H :] \|AI~YGw9- ZFxlC=$9u9@:"I,8R~ $inX*w
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 30 2e 8e cb 3a b8 b4 1b 55 24 58 08 97 32 2d 12 50 18 99 b8 c8 33 8d 89 cf ec e1 33 73 d3 2c cb d8 3b bd 05 18 a7 a3 c6 e2 b0 f0 6b 01 c0 78 4c 0e 3d 28 82 00 a0 52 9a a6 aa 6c c0 13 0f 74 cc 4e 33 d3 64 cf dd 32 07 e0 96 93 71 72 18 31 82 c1 00 00 18 30 60 9d d5 01 04 cb b4 a2 89 94 25 80 09 5b cc 93 0c fd 5a 73 69 9a 63 dd 0d 6b 60 e2 38 1e a7 ce c8 b5 cc 80 31 00 d0 3f f5 96 89 b3 75 ba 1d bc 45 04 00 82 08 94 00 01 98 e6 61 fa 4f c2 bd 69 de 1f 6e dd e3 7f 72 6b 9a e6 e9 fc 74 3a d7 f9 5c cd 69 b0 14 f5 8f 9e d3 3b ad 9c ba d3 e8 fe f0 78 00 06 65 10 55 55 15 55 96 25 94 6a 05 00 c0 77 01 00 4c d3 e7 b6 76 4f db a7 cb d3 c5 5c eb 73 8d c0 93 62 4c 8f c1 21 87 eb 03 00 51 65 54 a4 dc aa 8c 94 25 00 10 00 28 0d 04 00 b8 e1 66 fa 60 08 00 14 43 00 60 71 Data Ascii: 0.:U$X2-P33s,;kxL=(RltN3d2qr10`%[Zsick`81?uEaOinrkt:\i;xeUUU%jwLvO\sbL!QeT%(f`C`q
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: db 91 fb 6d db e6 f7 fd ff ab e7 7b 9e fb be ce 5e 6b 8e d1 63 02 f8 b1 ff bf dc 92 e4 e6 fb fd 3d cf 39 f7 dc 7b 8b ab 9a 99 86 a9 87 67 96 29 33 0b b3 e6 65 66 33 2f 33 33 c3 ac 97 41 eb 31 c3 ee 0e 2d 0d 65 16 86 79 b6 87 9b a1 9a 8a ee bd e7 3c cf ef f7 c7 39 f7 56 4d d7 64 f6 df 4f a2 0e a7 c2 60 18 b3 5d 8a 7e 51 9e c0 09 8c ec 5f 60 cc b3 10 19 fa 9f 13 6b 26 a3 8a 74 46 d9 df 1f 73 cc 37 60 0c 83 a1 a3 1c c3 91 55 81 fe e3 09 54 38 15 34 fb 76 68 dd 81 52 74 03 37 51 07 1e 45 66 3b 4c 0b aa 48 95 f5 ad 3f 6e 2b be 8a 3a 60 38 01 33 75 68 e4 96 52 7f 54 a0 0c 95 e8 91 35 1d da b8 cc 8c 23 ad 2a 60 b8 8e e6 2a 32 9c 80 d9 9e dd b5 32 6a 4d 2c 51 27 ea 0e 9f 40 99 5d 92 99 69 b4 9a e0 aa 02 25 ab d7 f2 23 b9 25 4b 0f 6c db aa 2d 49 d2 5a 7b 9f 73 ef Data Ascii: m{^kc=9{g)3ef3/33A1-ey<9VMdO`]~Q_`k&tFs7`UT84vhRt7QEf;LH?n+:`83uhRT5#`22jM,Q'@]i%#%Kl-IZ{s
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: c2 3b 0a 4f c2 1c 45 7e 05 e8 d8 97 00 17 f6 7b 67 ce 5a 6a 72 83 7a 5d 9b de 5b 72 25 3d 01 0e 8c 02 bb d4 bf 90 d4 59 7f 72 2d 6e ef 75 77 90 2a bb 59 45 a6 83 f9 43 76 49 95 fa 77 54 07 ec 70 80 4a 4d dd ac 7d 27 dc 12 32 91 70 00 17 74 b2 22 75 51 bc b2 1b 79 ed 00 12 e5 0e 57 cc fd f3 cf 4e 80 45 b9 0d 58 c8 3b e2 90 6f 26 6f 94 89 4c 2c 85 5d a6 de 2c 7b 14 14 1f 6c d9 5b 2c 3c 2d 04 b1 9b 82 fa aa a1 09 dd 98 88 b5 35 fd a1 03 4d 39 22 3c a1 a8 ee 27 9e f4 d7 98 4b 8d 58 bb bd 08 5b 47 a8 f9 f6 ab eb ab 6c b6 c2 ec 51 a4 43 84 53 78 7b 17 99 2f 44 36 32 a3 b0 dd 88 c0 95 79 f4 28 ba 74 6e 94 db 49 ff 0f 96 b5 e9 7d 91 77 5b 47 01 15 20 02 07 d4 ce 4d 77 de 72 a2 aa ca f4 61 a6 6a 26 13 3e 52 75 6c cd f4 d8 dd e7 c8 64 97 e9 b6 eb 64 9a de 77 8e a9 Data Ascii: ;OE~{gZjrz][r%=Yr-nuw*YECvIwTpJM}'2pt"uQyWNEX;o&oL,],{l[,<-5M9"<'KX[GlQCSx{/D62y(tnI}w[G Mwraj&>Rulddw
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 6c 29 a1 1b 71 86 25 51 d8 8d 25 29 68 a1 1b a5 d3 60 72 db 4f 9d 02 a5 a9 01 f1 54 aa 44 41 11 97 f3 19 0b ce 67 5b 4b 31 4d cc 5f 1d 67 02 54 d2 00 b1 88 bc 33 b2 43 ed 0b f6 bb 93 98 b8 2f c1 f5 64 ac 98 fb 51 02 1c 5b 70 f1 a0 f4 3d 80 5f a9 db ce 79 bb b9 75 52 ef f5 96 40 02 37 44 36 b9 c1 6e d6 ae 99 d4 1f 9f fa 4f b6 de 92 dd ac 66 f2 fd 79 e7 05 5b 59 a2 a6 dd ac a6 24 b3 a8 df 49 dd 03 3e 73 b2 eb 1c c6 e3 bc b3 3b 41 ea af c8 c4 7e 12 9f 33 dc 1d 2f 01 34 71 5a 41 80 d3 67 30 97 65 91 61 7b 06 7f db 73 40 ef b0 48 39 cd 91 2f 6a 35 ab 3d 6b 84 89 58 27 97 4c 94 d2 09 fd ed b5 52 6c 2d 73 d4 e3 e8 65 23 8f 67 24 4b d1 9b 99 c9 ac 37 46 b8 4b 66 ca da 3e f7 f2 c5 d6 a2 37 ce 98 17 a8 1e 3b 15 4c 66 9e 75 ef 68 c1 e7 a3 2a 80 28 d2 41 bc 3b a2 26 Data Ascii: l)q%Q%)h`rOTDAg[K1M_gT3C/dQ[p=_yuR@7D6nOfy[Y$I>s;A~3/4qZAg0ea{s@H9/j5=kX'LRl-se#g$K7FKf>7;Lfuh*(A;&
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 98 55 a6 35 6d e0 a3 ca 89 63 26 2f c4 1d aa 9a 93 9d 59 cd 74 bf d7 c4 27 d4 6d 37 94 a8 3d f2 96 39 05 6a 33 73 9a 6f 76 03 8e c9 87 33 55 b7 f1 fe 3e 93 c9 f1 06 1f 99 e7 ef e0 5d 7a e4 f2 2e fb f0 91 77 ef 67 24 57 fd 71 cd 47 7c 41 b6 c3 d7 02 d8 28 7c 7b 26 2f 91 4d 6e 53 f9 e2 e0 e5 47 c5 4b a7 ef 7e eb 5b 85 c8 89 6f cd 5e fa 5e 88 07 54 a7 20 34 78 b2 f7 8a fa 4a 7f 04 4c 44 69 fa 97 3c d2 52 ef a5 60 6c 5c 34 34 1c 0e b3 c1 fe f6 0f 9b dc c6 50 c5 a8 4d 23 4d d3 4c 2d ca 22 f9 61 c3 a0 5b 04 b8 dc de 8f 8c 29 97 e7 1a 73 35 81 e0 82 79 b9 5e 08 a0 09 56 a0 c3 ed 1d 3c 70 05 27 fb 48 d6 b9 f2 e8 f1 d7 db 1d 2e 64 1d 78 44 22 f5 6f 0a 8e 84 0f 77 b3 de 5b da ea c1 fb f6 1e f3 78 4c f8 ae fb a7 47 8e f0 e2 16 1f e9 5f d3 cd ce bc 81 29 87 d4 bb 4b Data Ascii: U5mc&/Yt'm7=9j3sov3U>]z.wg$WqG\|A(\|{&/MnSGK~[o^^T 4xJLDi<R`l\44PM#ML-"a[)s5y^V<p'H.dxD"ow[xLG_)K
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 02 99 ed 8a 99 43 41 c6 2c 71 9d 91 f8 f1 37 fd f5 a6 bf e8 8a 03 ca f2 9d 7c ba 1a 30 f4 a0 94 fa b4 cf 64 8e 9e de 39 22 3d ba dc fa 7a a7 d6 17 a8 85 08 cc 23 f3 7a c8 54 28 7a 8b 7a 7b e5 d1 f7 57 84 6e 73 84 3a a1 9a d0 20 4f 6e ed ca 32 9d ae b6 46 69 6a 6d 88 86 a9 e8 8d 49 ef de f8 03 f9 81 5c 98 57 89 97 f9 75 96 be b7 a2 77 14 06 d9 d3 b6 ed af 01 47 70 79 45 f6 a7 71 c0 d3 d3 13 f9 e7 0b e6 54 13 f1 11 4f 3f d4 c9 54 33 a9 d8 65 e5 7e a7 42 da 9e 30 cf 55 92 d9 b6 24 b7 47 1c 67 76 1d 89 44 a6 6e f6 9c 6c dd cd 1e 79 d2 8d 62 7b ba de 70 0a a4 fe 6b d8 7a 83 e1 b4 7f f5 f7 42 cc 86 29 25 15 10 2c e2 9d ee 42 2d ca f5 08 e1 d1 01 79 ef 1b 67 e5 51 b3 de 28 58 d6 34 8b b6 01 34 8c be 2b 27 94 1e 11 67 e5 51 0b 51 7a 90 b2 55 dd 49 ff 12 dc 52 bb Data Ascii: CA,q7\|0d9"=z#zT(zz{Wns: On2FijmI\WuwGpyEqTO?T3e~B0U$GgvDnlyb{pkzB)%,B-ygQ(X44+'gQQzUIR
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 28 ca 9b 86 49 d0 d4 63 31 68 c4 fc 2a 8d 2d d0 0a a5 14 bd a5 89 28 b5 85 ad 51 22 48 c6 1f 26 27 98 73 1f 59 c7 5e 01 47 99 15 20 80 cd f2 02 e8 86 3b 8f 5b 49 00 bc 86 47 ad 80 3e e8 9d e1 44 0d 8a 03 18 b5 4b c6 6d d7 9a 88 f7 27 aa 6e a6 e3 5f 02 ec ec f0 18 d8 f7 3b 2f a0 4c de 3b 88 c3 ac 0c 9d 6a 26 d3 01 76 89 17 06 65 5d 85 5c 11 9b 63 46 26 c7 59 49 dd 05 3b 76 99 7c 9c 06 3e b2 3b 51 4b 81 56 91 ec 4e 54 a9 37 13 35 91 89 3a eb 7d df 49 9c 9a de 4d 98 83 96 d7 49 26 b7 53 c1 7c b3 8a e3 f7 c8 af 50 05 dc 63 3b 4c 61 45 c9 5c 50 02 c5 d6 a7 8e 1d 49 69 3b bd 27 84 6e 39 2a 05 81 d6 d0 b4 02 01 0d 5f 3e 11 51 aa b9 40 81 b0 8c cd 23 f7 a5 51 20 5a 43 43 2b a1 77 c1 b4 36 fd 53 b1 b5 75 1a 0a 51 3a c9 c1 21 0e b6 7b 30 a3 f7 f6 86 52 a7 dc 03 d8 Data Ascii: (Ic1h-(Q"H&'sY^G ;[IG>DKm'n_;/L;j&ve]\cF&YI;v\|>;QKVNT75:}IMI&S\|Pc;LaE\PIi;'n9_>Q@#Q ZCC+w6SuQ:!{0R
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 06 ed 42 66 89 5c 1b 45 b7 50 be 07 71 b6 5f 9c 19 74 1b 4c d0 ae ee cf 78 55 92 42 36 ab 27 9a c0 54 4a 61 fe 2a 2d 0e 94 a9 55 f3 d4 89 42 79 29 67 ba 53 7e 15 d9 60 56 0f 4c 5f 01 8e 98 ef 22 00 84 fd 98 f8 8a e9 2b e0 81 7d 1f f2 c2 f6 2f c8 9e 04 a3 c6 0b f6 0b b9 eb ad f0 2e 67 66 57 d2 fc 62 dc 87 bb 9a ae cc 7a eb 77 f5 de 90 5e c0 4c d5 ad a9 bb 3b 81 1f 5f 1d 41 82 25 a0 01 4e ba 53 7c d8 cd d5 9a 33 51 31 e8 5d 11 9f eb ef 5b 27 58 a4 81 08 31 50 3a 29 29 11 ad a1 e3 5e 05 85 c3 2b a0 01 1d 05 1a 06 11 a2 a8 39 9c 24 c3 ba a8 11 6b ad 35 30 bc 22 01 a0 e3 3c 5d 44 64 9a fa 5e 0d a0 be 1e 80 d5 eb aa b1 8e a1 11 25 48 a0 01 e8 38 82 8e a1 a1 11 6b 14 d4 d1 12 0c 25 48 8a d5 d3 b4 81 8e 13 8d 68 38 d1 15 db 44 a0 01 44 4b 50 0f 04 54 6a a0 14 da Data Ascii: Bf\EPq_tLxUB6'TJa*-UBy)gS~`VL_"+}/.gfWbzw^L;_A%NS\|3Q1]['X1P:))^+9$k50"<]Dd^%H8k%Hh8DDKPTj
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 1f 2c a4 ca 9b f3 92 0c f0 0b 59 42 81 70 e4 06 ea a0 01 5a f0 46 1f 41 6d a0 53 c4 31 a9 57 e8 6a 68 ed e9 6a 69 20 1d a4 9d 59 5b 68 06 27 72 4f a0 16 17 7c 15 77 46 e7 11 f7 3b 95 b6 b8 1d d9 84 4b a4 c8 2c e1 40 55 55 79 45 76 92 28 a4 c0 29 d3 29 af d3 98 06 af 2a 73 06 2d e1 81 99 33 39 5b d2 0d 9d 5b c9 24 59 95 1a e8 5a 2a 25 62 6f 94 6c 34 06 cc 80 5a 06 d4 4c 9f cc ed f9 d5 a1 bf 84 98 e1 55 dc 8a fe 1f fd 13 54 90 ee f0 c4 d1 5e 75 4c 6b 9c 05 b2 95 da 8a 36 fc c4 b4 c5 37 f9 10 25 5a 9b ca 15 0b e3 a4 53 e5 84 38 4f dc b6 25 1b 78 2d 9a 2b 92 4c a8 cc 14 9d 09 9e f0 13 2d 80 5b 1c d2 39 c8 e9 68 27 39 68 46 55 c6 69 e9 c9 75 4a 15 bc 24 37 e8 90 7e e2 5b 55 73 60 c5 2c b0 71 e3 1b 51 86 26 16 6e b1 e1 01 d2 17 9c 73 ef 9d a7 a4 87 b3 79 f8 b2 Data Ascii: ,YBpZFAmS1Wjhji Y[h'rO\|wF;K,@UUyEv())s-39[[$YZ%bol4ZLUT^uLk67%ZS8O%x-+L-[9h'9hFUiuJ$7~[Us`,qQ&nsy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49894	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:34 UTC	1105	OUT	GET /X5t_FHWLUo0xFsu1FhjgcZ8qWWSrDVHdus0OtKW4HRFLyUbsbg95dv5dsPk9PW5WTWudRdY4Pw=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:34 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 16248 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:31:18 GMT Expires: Fri, 25 Oct 2024 22:31:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 1156 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:34 UTC	844	IN	Data Raw: 52 49 46 46 70 3f 00 00 57 45 42 50 56 50 38 20 64 3f 00 00 30 db 00 9d 01 2a 88 02 6c 01 3e 3d 1c 8c 44 a2 21 a1 12 4a 2c c0 20 03 c4 b1 b7 70 ba a8 7f 4b 4f f8 dd 8f 59 37 ba 7f 53 fd 86 ff 13 fb 89 f3 49 61 7e e1 fd cf f4 6f f7 2f da 5f 96 9d c0 76 17 9a ef 93 fe 99 fe d7 fb ef ef 47 fa 8f 9a 7f e5 ff e3 fb 1f fd 27 fe f3 f3 bb e8 07 f4 e7 fd 37 f8 2f f2 bf fa 3f cc 7c 5f 7a 9c fe cd ff 87 d4 0f f5 5f f0 9f fa 7f d3 7b c0 7f aa ff ad fe 57 dc df f6 af f6 5f f6 bf cb 7c 00 ff 55 ff 1f ff 87 d7 4b d8 7b f7 97 d8 0b fa 97 f9 af f9 9e ce 7f ef 3f fb 7f b1 ff 89 ff ff ff ff d9 5f f4 ef f6 5f fc 3f dd 7f cc ff ff ff df ec 3b fa 2f f8 2f fe 5f e8 ff df 7f ff ff ff f4 01 ff 53 d4 03 fe a7 ff ff 60 0f df ff 71 7e b1 7f 87 f0 6b fb 1f fb 7e 96 0f 6f fb 75 c8 5f Data Ascii: RIFFp?WEBPVP8 d?0*l>=D!J, pKOY7SIa~o/_vG'7/?\|_z_{W_\|UK{?__?;//_S`q~k~ou_
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: fa c2 0a 08 f0 e0 3c 29 59 05 4f a1 b8 55 05 7e bb 16 3d 3b 7a 08 e9 9b 54 57 13 f2 48 25 1c 95 04 27 38 4e 27 e4 85 e1 cd 68 42 a5 27 16 15 b7 44 c5 13 2d 5b 66 1b bf 3c 55 ae 7a f7 45 31 2a 6b 1d 37 8a ae b4 be e2 85 88 39 4c db 4b 89 0e dd 30 3c c7 1d c6 e4 7c 7e 0e e0 b1 cc 5c 82 13 9c 27 13 f2 48 25 1c 94 fd f5 63 84 bf 67 3f e8 35 46 d7 ee e4 1c e7 6e d3 85 18 8c f6 89 e6 c2 92 b8 40 f3 b2 83 2c 6b f1 da b0 e0 d1 7a 68 b7 cc 61 8c e8 6b b2 64 da f1 ba 6d 82 e8 a1 ee 06 17 9a 31 be 8f df b6 18 a5 7b 01 20 cb a6 c8 d8 69 d4 94 df 00 ca 11 3f 24 82 51 c9 50 42 73 84 60 df c2 2e 1f 64 77 9c 5e 80 5a f0 03 e9 aa e8 5a 81 2f 3f 04 19 54 5c f4 ab db 0d 5d d2 a0 c0 27 97 89 98 1b 54 61 72 a2 5b a1 d1 1f 6d 7a b9 6d 76 6c 33 c9 89 99 b6 7f fc dc e0 d9 5e 70 Data Ascii: <)YOU~=;zTWH%'8N'hB'D-[f<UzE1*k79LK0<\|~\'H%cg?5Fn@,kzhakdm1{ i?$QPBs`.dw^ZZ/?T\]'Tar[mzmvl3^p
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: cc 8e 13 66 8f ae f0 3a 60 93 a8 fe 7b 50 4a 94 7e 38 80 30 26 7f 06 2f ee 2a 07 21 ac 31 bb e4 4c ff ed 15 49 e3 25 2b 39 3f d4 23 a4 d4 00 2b 57 e5 5d 94 01 40 6b c0 cf 28 98 4f e8 07 3d 43 a0 72 b6 f7 67 ee 06 e6 45 fc b0 99 92 ba 38 92 db cd c6 55 46 2a 53 fd c7 59 46 29 19 77 c7 34 6f ef ac 4b 9b 3e 5d 0f 16 f4 2d d8 72 c8 af 3d 15 0e 98 b0 c1 d2 35 25 1e 77 2c ff 10 d4 8d e1 99 35 0c 22 14 6b 77 c0 3f a8 bd b3 d4 a3 da f0 6e 84 bb 4f 58 3f 42 ff 98 58 b9 65 ac 2e 0c 58 a4 c4 87 a4 af 7e 8b e9 56 d1 e1 0c a5 73 ed 2b ef b4 9e 83 24 4f 96 34 65 8a 3b 34 b9 34 bc 20 56 d0 2d 9b bc a5 13 36 c9 92 fd ed f0 00 9f a9 70 99 6b 63 c4 91 fc 83 52 fb 9f 47 c3 7a 7a 2a 5c 38 f6 41 d2 1a b2 13 65 66 fd a7 fb 42 60 d4 1f e0 f0 f8 4b 2f 32 ca ad 33 f6 33 b6 9b da Data Ascii: f:`{PJ~80&/!1LI%+9?#+W]@k(O=CrgE8UFSYF)w4oK>]-r=5%w,5"kw?nOX?BXe.X~Vs+$O4e;44 V-6pkcRGzz*\8AefB`K/233
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 1e 21 3b a0 8d 5c 1b d9 a3 81 d9 8c 78 ac b3 95 42 77 46 db af 01 f2 0d 4e 6b de f6 9c 9f ab ca d4 a2 5d db 5a 03 d8 99 99 20 cb 86 81 d2 9e e1 60 4b ab 52 29 51 1a dc 96 bc f7 da 34 35 ca 05 02 8f 0b ba db 2b 76 33 95 1c 8a d6 65 54 f3 01 6d f8 54 73 7c c1 df 94 cf c1 54 c3 20 8d 33 83 6a df 40 00 51 68 8d de 35 0b 2c e3 50 ee 90 e4 ec dd de 90 23 20 4e 08 80 44 77 f7 64 68 fc 86 4b d3 7f c7 74 1f 70 30 dd 9f a1 16 b4 ca 66 3e 9e c5 ae 48 e4 54 54 86 7e 4e f4 de 2d c0 a7 06 9e 8e 29 d3 b4 d0 15 c6 4c 15 10 e5 95 c4 d1 b3 44 82 3a 6d 82 c5 1a fd ef 25 0c d3 a8 29 99 f9 d5 ef da e1 20 d2 1c a7 ab 81 72 ef fc 5f 7d c6 42 ab 68 7e 54 2a 34 50 97 51 93 2a 3c 60 89 86 99 13 6f 8e 59 3d 70 ea 7f 62 e0 66 f9 d2 f3 c7 1a 13 6e 02 a1 cd eb 3b f0 f4 b6 c5 ee 20 47 Data Ascii: !;\xBwFNk]Z `KR)Q45+v3eTmTs\|T 3j@Qh5,P# NDwdhKtp0f>HTT~N-)LD:m%) r_}Bh~T4PQ<`oY=pbfn; G
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 80 1b 65 e1 97 82 0c 52 f0 9f 66 54 3e af 41 5c 51 d4 a2 1f b0 01 89 5e 86 fd 84 95 4f 5a 6a ac e1 71 46 93 d5 e4 f3 db 30 1e e8 4c e7 37 24 e3 d4 23 5a b2 b0 d1 b1 e9 90 c6 0b 74 7d 52 19 f7 f2 8e 38 2c 3d d3 f8 4c a8 df e5 9f aa a3 49 41 ee 14 9f a6 57 52 e7 d2 6e e7 73 72 d6 d3 48 9b 79 9c be 6e 05 cf f0 28 45 25 f7 f0 ca 42 65 19 19 e2 d4 a4 80 7b b4 93 bf 13 f8 30 b5 00 79 d7 7f f8 85 ac e1 cd e2 58 36 c0 a7 63 f9 69 08 ca 40 c6 0b d8 fc b0 4e 91 1e 6f 07 45 12 28 4f 3d 60 72 12 55 50 e9 9b 5e c2 ae e0 2b d8 a1 99 44 61 6b ef 7d 4d b0 e8 3e f2 88 0b a8 a5 1e 29 62 fa cf 23 c0 35 64 85 76 62 b5 dc 08 52 cb 7d 45 e1 97 ef 11 fa 86 f1 75 c8 cd 3f 47 a0 5f 25 c3 8e 31 f5 0d d9 85 dc 6a b2 83 37 31 7d 96 b8 ed 1b 07 3f fc 69 f2 3c 3d 21 37 d3 6e 42 96 8a Data Ascii: eRfT>A\Q^OZjqF0L7$#Zt}R8,=LIAWRnsrHyn(E%Be{0yX6ci@NoE(O=`rUP^+Dak}M>)b#5dvbR}Eu?G_%1j71}?i<=!7nB
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 10 1c 9b 11 21 97 d2 51 d0 3f 1f 61 d7 47 71 75 b5 04 e2 56 96 53 e1 38 cb 52 e9 91 10 69 a1 ee ea f2 e8 ce 00 96 dd b8 42 06 d8 59 b8 dc 6a a5 0a ff 93 53 5d a8 e1 0a 46 72 e5 ae e2 8c 76 45 11 02 1d 77 a7 e7 41 71 11 9e 76 c4 32 9b eb e6 63 d9 9d 37 b4 fe 80 a2 6a 0b 49 f2 2c 50 c1 f9 b1 c5 1c a1 1d b2 74 cf e6 34 4e f5 65 da 43 b3 7f 39 b2 25 9e 2f 8a 3d b9 3c 6e 3f 2d c7 49 17 2a e6 6f fb 7e d4 f1 98 cb bf ec 22 d4 2f 24 03 00 33 04 2b 94 7e f6 1f 3e 46 f6 31 17 19 79 35 f4 ca a1 01 99 88 00 02 d3 b5 5a dd ce 78 a1 0a 64 66 1d 3b a8 ba bd db aa 41 8a c1 d2 20 23 55 9c 9e d2 8a 03 5d f7 66 32 e6 b5 ff b1 ed ef fc 45 2d 6b fa 26 f1 a5 fa 18 cc 94 18 f1 aa e3 00 10 40 fd 1f 3e 31 6f 36 f5 10 ea af 41 50 80 f4 7d 7f 78 6d db 19 70 27 92 f2 89 dd 9c 1d 93 Data Ascii: !Q?aGquVS8RiBYjS]FrvEwAqv2c7jI,Pt4NeC9%/=<n?-I*o~"/$3+~>F1y5Zxdf;A #U]f2E-k&@>1o6AP}xmp'
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: a6 a8 87 f3 bd da 22 81 f4 29 5c 28 1f 5c 5a 86 ab b3 8e d5 2f 57 36 6d 2c 74 d4 23 fe f9 67 81 d0 6b 83 9f 7d 42 fd a4 51 7a 70 80 eb 9c 0d 8a 7c cf 7f 07 a3 4d 51 88 6e 45 b0 80 a0 49 fa 27 36 da fa 42 d1 92 a4 5c 57 3f 76 02 4b 77 2c 4d af bf f7 3f b1 4d 9c a9 bb 41 af 66 fd 98 84 55 41 e5 d1 04 0f 35 ca 75 83 d0 d4 a6 0d 4d 78 ee c9 41 67 e8 7e 74 e0 90 6c 61 12 9b 9a 4e bb 4b 60 ce 1d 51 0d f7 68 fa 85 7b 41 5b 99 43 de ff e7 5c 57 04 29 66 a0 82 d1 86 61 4b c3 35 74 da 1b 07 49 96 91 5d a1 8b 8e 3d 73 32 08 78 ad 1a 87 36 6c 8c b5 46 97 50 df d0 93 bb 44 54 a8 97 fd 1a 90 a9 f6 21 9c d2 cc 6d d5 34 9a e9 eb fa d8 5e 90 7a ca 5e 3e 9f c1 00 ed 25 50 27 5e b9 a9 9f 40 17 81 4c bd a9 14 b2 57 a3 94 c6 49 1b 09 08 a6 ce 60 07 bc 2d 84 dd c5 79 46 47 f4 Data Ascii: ")\(\Z/W6m,t#gk}BQzp\|MQnEI'6B\W?vKw,M?MAfUA5uMxAg~tlaNK`Qh{A[C\W)faK5tI]=s2x6lFPDT!m4^z^>%P'^@LWI`-yFG
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: be d1 f4 c2 a0 0e 9d 5f b4 42 87 c3 b4 55 ef 2d 59 a9 f4 79 ac 55 65 2b bc 9e 54 22 94 18 21 a2 57 de 1a 97 15 6e 8e 15 6b 2a 41 c2 1a f2 cd 56 6d e1 9c 6d de ac 47 7a 14 23 54 f3 cf e2 c9 78 e3 cf 79 9f aa 77 83 69 17 99 33 d4 61 27 5e b5 fa 3a d4 27 bf 8a 61 f7 d6 a0 7a 4a 57 3b b9 8a 12 1a 98 18 3d d1 9d 85 84 88 76 50 e6 c2 e3 7e 2c a4 41 9b 11 9b 4f 6d bf c4 30 e4 59 07 01 a5 86 eb 01 78 5e 66 1b 50 b2 14 18 6d de 7f 3e 3f 9a bd 2e 2b 74 38 79 4a c7 04 ed 8b d1 c5 2f 5f f7 24 0d bf 22 3c 54 57 3e 97 cb c2 c5 36 0e 0e fe 17 ee fb 92 66 39 01 de 8d c9 17 eb e9 89 e4 af 00 77 55 4b 67 91 fc 89 04 51 c2 2f 74 c9 45 43 88 c9 bd ad f9 67 26 0e ea af 4b af 46 23 ac 95 db fc ef 15 e5 aa aa 01 c8 88 5b 58 e1 27 4a bd e1 6e 98 d6 b3 a0 0d 9b f7 a6 a6 f1 62 27 Data Ascii: _BU-YyUe+T"!Wnk*AVmmGz#Txywi3a'^:'azJW;=vP~,AOm0Yx^fPm>?.+t8yJ/_$"<TW>6f9wUKgQ/tECg&KF#[X'Jnb'
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 79 69 fa 07 75 00 a5 3d 51 03 aa ef f2 4f de 2d 47 8d 08 29 a2 e4 e5 3d 50 cc 65 5b 0a 3a 31 a1 65 72 38 af 82 cc e8 eb 74 4c fb 6a 22 4c f8 05 72 c2 71 de 4e f6 0d 99 91 a7 4a a9 e1 e4 8c 83 53 e2 cc d8 d3 46 d7 7b 2d 16 f9 ef 3b ee 9c d0 03 69 79 80 f2 6e 84 a5 89 eb d9 12 4f bc 7e 26 55 8e 2f 6f 1c 9d f5 3e 65 78 95 e2 24 ac 2b cb b3 c0 d2 da f4 b1 74 8b cd 9c c7 34 20 0b 45 e2 f3 33 2a 3a 75 6e 94 c8 92 ad d3 77 7e 11 ef 0e f6 96 82 bb 79 de a9 9a 24 7e d9 b8 ad 92 64 e1 f0 d7 7b 46 b2 87 df 15 eb f4 7a f5 60 62 7e 29 2f 32 e9 31 d3 f4 b1 cf c3 15 af 60 de 2c 42 ce 50 d7 9c ad b1 5f 6f 86 49 0e 84 e1 5a 86 f5 40 d0 18 ce 84 db e1 bb f0 06 1d 97 b2 a3 fb 6d b2 5a 68 c6 2b 18 0d bd 45 0b 89 20 aa 85 52 a4 8c 99 a0 bc dd d1 1e 95 fe 1c 13 df e1 f3 31 7e Data Ascii: yiu=QO-G)=Pe[:1er8tLj"LrqNJSF{-;iynO~&U/o>ex$+t4 E3*:unw~y$~d{Fz`b~)/21`,BP_oIZ@mZh+E R1~
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 06 67 dd 07 24 b8 7e 22 33 a2 df de 1d 81 9f a8 de a3 2f de ab 0b 27 42 db 4f fe ea 20 9e 70 be b2 b9 bb 70 1f d4 65 53 4a f8 49 aa cc e5 ca f4 66 1c 8e 58 2b 1c ad 79 61 0d 2d 63 7f 97 74 a9 00 cc 3d a1 c5 5b b2 95 c4 12 a3 bd d4 a3 3e 93 77 ea 16 8a b7 7c 62 b8 50 d9 aa 94 f7 b5 4e 4d 98 b8 1d f7 49 9d 0a b4 2f 55 1c 86 ef 74 2a 69 47 9c a3 1d 19 dd 63 9c fd 56 9e fc bb e3 c1 81 6b b2 fc 24 e4 fe 6b 56 7f 86 a8 18 29 13 b7 53 3e b3 69 23 e6 42 41 a2 2a 74 31 02 f6 c8 a3 15 b0 5f 82 3b 0e 00 a9 3f 0e 0f 10 bd ec db 8c a5 b9 26 31 87 e0 eb 48 e8 fe 26 39 7f 77 27 c4 76 5b 94 5a 74 25 fd 79 b9 fe 31 6d e3 63 fe da 9a 55 c7 6b 90 24 f3 90 e9 4e ec db 6b 0c d5 0a 2a d6 2b e3 49 9f 0a 44 e5 00 78 d4 3e 67 62 f6 23 61 81 38 24 0f 2b 64 f6 c9 2c 31 e1 de 80 34 Data Ascii: g$~"3/'BO ppeSJIfX+ya-ct=[>w\|bPNMI/UtiGcVk$kV)S>i#BAt1_;?&1H&9w'v[Zt%y1mcUk$Nk*+IDx>gb#a8$+d,14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49895	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:34 UTC	1107	OUT	GET /tC7d8c7CF9UbOvBTB-B_17QB2c19cnjILsYw6OtQrGDKy_l8MsEWsGZZOrX2ZFjeDuNA5Zb_i8a-=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:34 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 40286 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:48:57 GMT Expires: Fri, 25 Oct 2024 21:48:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 3697 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:34 UTC	844	IN	Data Raw: 52 49 46 46 56 9d 00 00 57 45 42 50 56 50 38 20 4a 9d 00 00 70 cd 01 9d 01 2a 88 02 6c 01 3e 51 24 8e 45 23 a2 21 14 5b 2d b0 38 05 04 b1 b7 60 26 c7 b5 5e 72 f9 41 c9 ea 95 24 9f f9 dd b8 b2 0f b6 7f 87 fe 47 f7 37 da 93 90 fb 75 f7 8f df bd 5f ff 87 de 5f 69 f9 77 f4 37 fe 0f bd 6f 98 ff ee 7d 57 7e b2 ff e1 ee 19 fb 05 fb 2f eb c1 fb 77 ee fb f7 a3 d4 4f f5 ff f7 9f b6 7e ef 9f ee 3f 6d bd e0 ff 73 ff 7d fb 5b f0 19 fd 5f fd 7f ff 3f 5e 1f 63 cf f2 9f f5 7f ff fb 91 7e cf 7f f4 f5 ea fd dd f8 53 fe d1 ff 4b f7 57 e0 73 f6 8f ff af b0 07 ff af 6c 9f e0 1f f9 7a af fb 41 fe 7b f1 df de 07 8f ff 90 ff 0d fb 67 e7 7f 8f ef 4b ff 01 fb 5d fe 03 ff 8f c1 87 fb fe 2a 3a cb ff 57 a1 7f ca be f7 fe 63 fb cf ee 07 f8 1f dd bf ba 3f cc ff e2 ff 53 e3 8f c8 ef f2 Data Ascii: RIFFVWEBPVP8 Jpl>Q$E#![-8`&^rA$G7u__iw7o}W~/wO~?ms}[_?^c~SKWslzA{gK]:Wc?S
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 1c 87 dd e8 ce 2c 01 3f f7 56 42 28 05 67 c9 81 88 78 db 3b 5b 70 f5 73 95 0c 5c e5 a7 48 06 79 59 97 34 10 31 2d 36 9b b5 32 1b 06 7a 1c f6 fb ef 1f 46 71 9e b2 1e c9 d1 f8 d3 be 60 87 3f 3c 34 71 0d eb 0b da 0a f6 83 ce be c3 a6 35 e1 61 07 9b c3 3e 3f 12 35 ea 7b 9d 2d 91 99 4b c8 50 ab 99 77 08 c4 3a 87 1f 7f 78 a9 31 ea a4 c3 72 7b 89 ec 79 57 f8 29 7a c1 0c 8a 04 ab 67 f9 06 77 96 61 af c7 5b c1 80 84 e5 ac d1 89 a8 ab 10 b5 90 a8 42 27 f8 b0 9d 4c e3 9d aa bd 31 8f 13 6f ba 51 6f 79 5c 19 73 af df 77 2c 7c 77 51 00 3f b0 4d c2 2b 84 9a 8c 9e ca bd f3 55 f9 a7 e6 2d 85 cb d1 10 cd 49 ed c1 83 37 41 95 eb a8 0a c8 2a 48 ca 14 e1 37 f3 22 00 f4 5a 36 01 5c 9d 36 da 61 e4 e6 a0 27 20 9d 74 80 92 e1 9f 7d 1a dd 21 97 c2 2a a1 9b 1b df ac 4e 04 b3 ec c0 Data Ascii: ,?VB(gx;[ps\HyY41-62zFq`?<4q5a>?5{-KPw:x1r{yW)zgwa[B'L1oQoy\sw,\|wQ?M+U-I7AH7"Z6\6a' t}!N
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 45 20 aa 9c d1 90 e5 72 03 b6 16 1a 5e 3c f5 ba 7d b7 72 8c 03 51 53 af b2 ad c0 73 e9 41 f9 8e f9 b6 07 34 aa 4f 0e cb 1e 8e 95 d9 04 db 84 1a cf e5 2b f7 9a 92 28 a8 97 75 56 3f 31 15 5a 3c 6c 07 11 f0 ce 87 71 38 63 d2 76 ce 21 f6 02 c8 c7 0d 43 79 75 d5 6f ac 99 c9 32 f6 b0 9e a2 ed bf 58 cf ff ef 9d 64 e6 a8 60 b8 e7 06 58 84 51 38 4f 52 d5 c8 97 a4 ca 0a 8f eb 91 f7 b3 f8 8d 2d e3 7d c8 73 22 4e a9 3f bb cd 0f 6f 43 91 b3 71 71 b7 b1 24 2a 80 76 da af ee a1 22 f1 25 ae ad 21 3b d8 e9 1a d7 ce 3c bc a2 eb b0 c8 9a 38 f3 c4 46 2b 64 be f1 2d 90 78 2d 69 fd 4b 73 48 bb 3c d1 a2 19 9d 1f 18 2f 7a f1 21 10 6e 85 e9 e4 6d 33 1b bc 65 8c 16 db 9b ea 8b a3 0f 7b b9 b9 9c cd 38 f8 cd 24 18 77 58 8c c6 71 7c 06 ad 1a 99 8c 5a 86 e9 c6 c9 c7 fc 09 39 ad 94 9b Data Ascii: E r^<}rQSsA4O+(uV?1Z<lq8cv!Cyuo2Xd`XQ8OR-}s"N?oCqq$*v"%!;<8F+d-x-iKsH</z!nm3e{8$wXq\|Z9
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 6b 3e 2a 3a 8a 48 0e c2 b3 bf db 31 de ea 7d ca 6a 0d 6c ca 6d 2a fd 19 8a 4c 37 60 04 3a bb a9 a1 2f 5d ad 5a 2d 13 5e 51 54 8e fc ed 54 8f ec b9 f9 eb 4c cf f8 1a b2 10 22 b6 4f 53 ff e1 75 d2 c6 d4 ef a6 1e bb a8 81 f8 a4 6c 4b af 97 41 63 5c 9b 8a 36 20 33 c7 f4 a2 a7 76 eb 38 94 dc 92 e4 10 75 88 1a ba 94 b7 f5 fa 99 31 ad 88 52 2a 75 10 3f 76 78 9e c0 00 fe f5 29 46 ac 00 00 ac bb ff ac 81 b1 27 00 67 80 00 1a 81 0f c4 eb 2c 00 1f 10 65 0f bb 09 a4 0b 9e ce 7a d8 b5 97 3b 69 ca 3e aa 10 3b cd c5 67 f3 79 dd a2 a4 01 f8 f8 d5 47 26 d3 aa 60 4f 4f bb 83 62 9d bd e2 65 90 51 7f fc 81 36 66 f3 96 de 22 ef c0 d4 a1 9a 36 3b 51 37 f1 36 fc a6 64 42 75 28 6d 17 42 34 9f da 7b 5c 5d 07 e5 30 3b c3 a8 5f da 52 f1 45 46 b4 52 19 18 9f 23 96 b0 92 d2 2f d2 96 Data Ascii: k>:H1}jlmL7`:/]Z-^QTTL"OSulKAc\6 3v8u1R*u?vx)F'g,ez;i>;gyG&`OObeQ6f"6;Q76dBu(mB4{\]0;_REFR#/
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: b9 05 ec 8a fa 26 f9 53 3c 35 0f b6 40 76 ea 7d 1f 1b df cd 12 67 55 0d 98 b1 ce 1c 39 af fb 07 65 75 1a 5a 44 3f 48 e0 c2 70 c5 f6 14 5f e9 61 c1 9c 1b 26 27 63 26 cb 81 4f 88 50 fe f8 f7 b9 d6 a5 e9 5a 94 7b fd 58 55 25 b5 9a 43 91 5f 6d 77 8d 89 2c ef 15 f1 94 59 fa ef c1 60 43 1c 32 0b 9c d0 ed 5c 0c ef 44 15 b8 ae 85 4e 1b f2 5d 05 6b 7b f1 95 83 db dc e4 38 c3 a6 e0 e8 e2 8a 09 17 18 39 76 ab 2f f0 71 8a 60 b6 34 5b 18 7a d7 4e d2 e1 2e c4 29 6f 07 11 16 9a e3 91 75 6a 96 ba 57 bb 99 e0 a9 26 e7 39 b0 10 ce 81 b2 c3 23 6b 63 26 b4 4c a3 dd 99 7a ce c3 99 73 51 64 57 50 79 ea 40 ba 04 4e 04 bb 7b b8 66 e3 c0 01 81 e4 39 ff c9 95 d8 5e 84 06 d8 48 10 da f9 4c df 88 0a ee cd 8f 55 ab 38 a6 67 df a9 3c 95 3c 4c 08 52 7b 84 07 f8 40 de e7 b5 09 7f 5a d3 Data Ascii: &S<5@v}gU9euZD?Hp_a&'c&OPZ{XU%C_mw,Y`C2\DN]k{89v/q`4[zN.)oujW&9#kc&LzsQdWPy@N{f9^HLU8g<<LR{@Z
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: d7 63 3a 67 29 da dc c5 05 15 c4 70 d9 74 09 94 a8 77 49 34 1c 0b e1 5b b4 6a 48 2e 91 ac 94 80 16 02 f3 9e 75 2a 6e e6 7c df 5f 08 9c e5 10 f0 93 5e 9f f4 78 50 67 fb 8b 2d 30 9c d6 39 1c 74 61 ee 1d 89 9c d1 3f ba 00 ab d7 3b 6c 33 e4 86 19 ec 77 3b 6c cb 01 b3 9b 8b f4 b0 94 77 e5 1f 99 79 c3 64 38 69 81 fc 13 77 c3 52 a6 85 a1 be 4a 36 d5 87 e2 78 e8 9b 34 b4 c2 a0 26 00 78 dd 3f 3c 6d e6 e1 3d a2 e6 ce b8 0a b3 67 7c 71 dc 98 db 23 ec f2 21 94 b3 29 f1 d8 d0 f6 25 f6 49 77 e2 5c 51 b3 92 6f ae e6 6c e9 b8 d9 c1 2d 0b 7f 1d 73 4e 6b bd 99 55 0b 48 2c 36 6b 79 7d 5a 07 44 d4 d7 4e 2d a5 24 6f 8e 6d 74 c2 80 66 b6 8d 51 ed de 50 ec c5 9d 07 0d a0 68 1d 62 25 ee cc cf 6e 6f 24 07 e3 80 ea 62 17 c4 3c 52 6d cd a1 b7 23 e2 3b df 73 6e b0 de 2d aa b3 64 ba Data Ascii: c:g)ptwI4[jH.u*n\|_^xPg-09ta?;l3w;lwyd8iwRJ6x4&x?<m=g\|q#!)%Iw\Qol-sNkUH,6ky}ZDN-$omtfQPhb%no$b<Rm#;sn-d
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 92 ad 37 f2 4b 9e f8 45 54 52 2b d7 16 13 67 e2 83 12 25 e0 1d f7 89 f8 8e 00 17 85 9b d0 d2 57 b4 79 06 61 f9 24 db f2 90 1b 2d 89 f9 0e 13 75 88 ab 5f 33 66 2c 7a a6 2c e5 ed 8e e9 ee d9 73 bf d0 68 6f 56 e6 d9 0c bb 39 61 24 48 f4 d2 ed d4 f6 33 42 3c 92 02 b3 39 04 8b 46 08 83 0b 75 14 c8 63 57 b4 db 1c ff b9 37 bc 0e 1d 74 48 57 7f 07 28 06 7a 54 7e 5e b2 e4 c5 b1 c2 d9 32 3e 4e f0 49 e5 4b 2e eb c5 35 6f c5 78 8d 78 42 f3 f4 12 0d 88 71 d1 2b b5 67 49 4b d6 1f 7e bf e7 10 64 5b 00 26 14 29 4c 7f 81 1a 9b 4f 12 6e 6f 95 3b 0a 81 aa 65 db 64 ec fc 10 4d 46 b5 79 56 2e df 39 45 f5 bc bb 06 7c d2 30 65 44 f3 b7 9b 66 7e 7f 09 f5 05 a9 8f 9a 58 22 7a 3f 42 b9 e9 63 4b fd c6 60 62 d1 08 1c 82 b4 43 95 72 a4 db da 97 09 3a ce b3 3c 5b 5e 5f f6 c5 c4 76 da Data Ascii: 7KETR+g%Wya$-u_3f,z,shoV9a$H3B<9FucW7tHW(zT~^2>NIK.5oxxBq+gIK~d[&)LOno;edMFyV.9E\|0eDf~X"z?BcK`bCr:<[^_v
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 47 6d 62 ed 0c 6f 2d 76 2c 37 eb bb ef e1 a5 bc 30 94 da bb dd c2 37 33 2d d9 93 05 e2 dd d3 a3 fa f8 06 77 73 1b de 27 e0 04 00 cc cd 6d 29 a3 eb db 4b 63 44 64 c4 52 96 04 fc 0a 82 03 42 3a 33 03 e6 c1 54 71 ec ae 07 7c 24 de 06 2f 7d cf b9 76 c0 2c ae 01 a3 5f 44 21 d7 b7 c8 3c 7d 19 2e 07 c3 c6 c7 05 39 a6 30 bd e3 10 a9 f3 35 82 b0 1e 06 8a 8c 3e 09 1e bb 02 02 b8 02 c0 a1 8e 31 6b 1c 10 12 73 32 8a eb a3 6f 46 cf c4 7a e5 11 14 77 0f 79 a8 2d 60 89 0a a8 6e fd cd 9a 5c 20 17 36 ef 9c af d2 02 b2 e5 2f f2 af 61 24 0a da 35 14 28 ef 0b 06 c9 3a 19 89 70 09 70 f1 6d c2 df d3 c8 db df b8 a1 29 dd e8 2a 9e d5 a1 12 a2 d2 77 5a d3 c9 de 0e 80 98 a4 bd bd a3 a9 91 da 01 28 b2 b4 01 6c 4c 85 04 c3 e2 19 12 98 d3 9d 2a b0 9e 97 62 5b b1 ee 14 da 38 07 99 eb Data Ascii: Gmbo-v,7073-ws'm)KcDdRB:3Tq\|$/}v,_D!<}.905>1ks2oFzwy-`n\ 6/a$5(:ppm)wZ(lLb[8
2024-10-24 22:50:34 UTC	1378	IN	Data Raw: 55 72 52 ad 30 27 bb 66 01 7f d4 10 7c ef 95 fb 19 19 b6 d2 71 d0 36 e1 f8 f5 cd 37 17 00 80 8c 25 61 fe 02 3d 52 ad 36 aa 7a 2f b4 93 23 7f e7 fc 32 59 e4 ea 57 e0 50 1c 35 a7 11 85 d7 bc 37 17 77 f5 31 77 1d 96 cc 46 5b 7f 62 17 d8 df 46 ac b4 7c 31 4e c3 3a ee 76 29 a2 41 d0 63 8e f5 53 d6 6c df ef a4 3b e1 74 53 48 24 4c c5 c9 26 52 84 9f 6c b8 b9 86 74 93 b7 da f6 4c 8f 8f 9d 71 5a d9 fc 60 f0 d1 92 ae 27 a6 6a 4e b0 9d 97 e1 93 79 ee 40 0a 4c fd dc dd 81 81 c7 e3 9b 6d 7c 43 08 ac f0 7b 72 e1 c4 74 d4 be 13 f7 87 27 d8 35 29 ed 7e c9 ab 9e ef 8d e3 73 e1 ea fb a6 ec cb 9d 08 ce 80 8b be eb af a4 b0 d9 6f 9a 49 d6 32 3f 80 f3 df 7c 91 99 5e 80 b2 81 68 c8 ba b3 a0 ca f0 e5 05 81 74 19 e8 12 52 a0 4f e4 11 c3 5f ae 2b 6f 65 e8 1d 33 7a fd f6 81 92 47 Data Ascii: UrR0'f\|q67%a=R6z/#2YWP57w1wF[bF\|1N:v)AcSl;tSH$L&RltLqZ`'jNy@Lm\|C{rt'5)~soI2?\|^htRO_+oe3zG
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 3c 2a 55 13 71 93 71 f1 77 43 83 db 2c c3 1c d9 4c d9 9c a5 63 2e 17 c2 b6 e6 e0 17 87 88 46 33 c8 bc 14 0e 01 11 48 33 f9 d0 eb cc 48 88 8b 61 ea bf 56 64 9b 51 67 8b a5 d5 db 29 37 ec b9 8b 68 be 72 17 eb 01 37 e9 23 9f fe b2 98 18 b3 1f 96 e6 38 75 0c 35 69 c3 72 18 ce 6c b8 75 86 b7 b5 3e af f1 e7 a9 95 d3 f0 7d a8 00 b7 07 50 56 9e 77 cf 8a 78 3d 9f 00 33 e1 bf 1a 52 61 1a d9 41 e0 0c 68 1f 36 1b 63 fe e3 3c 13 47 9b 83 e9 ef bd 5b 89 d1 73 b0 bd 1b 76 91 dd 6d 12 35 90 35 b5 68 50 23 86 5a 7a c9 3f f8 47 9d 80 db f7 6a 0e 5f 0f f6 a6 85 4c 10 f2 04 1d 08 24 e7 1c 1d b8 7f c0 66 31 76 d8 c8 04 77 fc ad 15 de b3 2b 90 b8 d8 59 94 37 d7 5b 11 bc 5f 53 71 c6 dc a0 f3 a5 25 8b cc 4a 59 aa 13 68 1b 33 e2 59 44 83 1f 27 57 91 b2 02 a9 a0 26 27 e0 0a a6 08 Data Ascii: <*UqqwC,Lc.F3H3HaVdQg)7hr7#8u5irlu>}PVwx=3RaAh6c<G[svm55hP#Zz?Gj_L$f1vw+Y7[_Sq%JYh3YD'W&'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49899	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:34 UTC	1106	OUT	GET /PybCNhe-jjLeSh7EWh_cyzw4kqxsN1dB6zuDhVAEyomlQfcauwghs0hrjR6pUWrBLdLeu45uPiY=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:35 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 76696 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:12:40 GMT Expires: Fri, 25 Oct 2024 21:12:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5874 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:35 UTC	844	IN	Data Raw: 52 49 46 46 90 2b 01 00 57 45 42 50 56 50 38 4c 83 2b 01 00 2f 87 c2 5a 00 8d 30 6c db c6 11 5c 52 ee 0e bf ff c0 f5 fe 27 88 e8 ff 04 e0 a7 b6 df 09 48 ef 20 5f 49 3d a6 fd ae 36 10 40 4e ea d5 18 1b 3a 66 26 79 75 00 3e 49 7a d7 ce 39 75 07 c0 04 f4 40 7a 50 00 54 fd 80 84 1e e8 c9 1a 01 20 bb 6f 24 ea 09 49 40 27 69 c4 2a bb db 17 7a f8 46 1a 63 1d 20 dd 36 00 6d e1 69 8c c1 c5 3a 75 f7 8e 3e 11 e0 88 e0 5c 45 f2 42 ef 6c 02 0d ac a8 b1 e2 a8 25 ba bb b5 01 b6 61 83 11 e4 ac 20 81 8a da 02 d8 4e 9f 3c 2b 96 d7 aa d0 26 f8 1c 41 da 8b 64 85 b6 01 b6 33 49 5e e9 0b d8 4e 93 06 49 7d 03 9f 69 92 fa 0a b0 9d c0 d2 0f 60 1b 00 fe 00 d8 bf d9 3f 91 a5 da b6 6a 47 a3 dc dd 3d f6 59 fd 6f 4e b1 89 3e e3 b2 09 2f c9 e3 70 d8 3f cf ab 05 92 55 6b 6f 23 e9 60 dc Data Ascii: RIFF+WEBPVP8L+/Z0l\R'H _I=6@N:f&yu>Iz9u@zPT o$I@'i*zFc 6mi:u>\EBl%a N<+&Ad3I^NI}i`?jG=YoN>/p?Uko#`
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 3d c8 b5 96 49 eb 19 3b 64 10 24 01 bb 1c 95 bd c9 f5 43 80 bf df ea b7 68 e8 99 2b d3 d2 4c 34 c5 a6 9b be a4 ed de 93 06 14 90 11 60 b7 c9 e5 7c 10 f1 08 12 89 b9 5c 37 a5 db d5 17 d2 66 71 29 4d 2e d1 ac 60 54 24 c2 c3 ce 73 da cb f9 51 22 71 ed a6 60 ae f2 67 61 38 e8 5e a2 61 04 80 04 ec f1 7c 79 94 d3 53 de 41 da 4c ef d3 fb 66 d4 cc af 65 a5 0a 89 e4 f7 02 90 f3 f5 e8 fa 10 58 0f a4 44 9d dd 7a 05 70 1a c0 be 17 fc e8 f6 0e 96 25 23 57 b0 ff e4 73 be 8e 78 02 10 f1 7a 74 7b 85 ff 0f 00 d2 f6 e9 4e d2 41 c4 13 d8 25 85 41 db 46 92 9a 74 87 3f e8 db fb 09 44 c4 04 e4 bf ed d4 fd 4b b6 50 73 7b be 73 7d 71 e8 a6 9e 26 1e 6f ec 37 83 39 37 97 d7 03 f5 2c c9 5c 38 37 11 da 96 9e 92 ac dc 36 49 a0 ad 01 b7 49 56 9e 05 4a 1b 21 ef 16 7a cc 02 5e 29 20 b6 Data Ascii: =I;d$Ch+L4`\|\7fq)M.`T$sQ"q`ga8^a\|ySALfeXDzp%#Wsxzt{NA%AFt?DKPs{s}q&o797,\876IIVJ!z^)
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 5e 5f 75 6a fa f0 8e 15 4b 32 b2 32 02 3c 3b b2 92 96 37 c7 37 a9 a5 9a 53 12 99 90 14 4b df ba 9b b9 d3 8e a7 45 a6 ee 5b 33 8e aa b9 3a 81 82 90 08 90 2d f2 b8 1c 2e df bf d9 8d f3 24 44 24 25 09 b1 11 0d d7 c5 f3 36 9b af 66 55 3d ce 50 87 33 2a c0 22 11 20 77 42 54 55 17 bc f4 f3 54 cd 49 07 91 24 8a e8 51 55 8b d6 cc 57 8b 68 b7 a7 aa 8f b6 c6 d5 01 14 84 04 08 50 a8 6a 0c f3 32 7b fb 40 9c 66 48 82 28 b9 91 ed d9 a6 8f 57 db d1 7c d1 ec 7a 34 57 61 9e 7e 70 26 11 ac 15 40 e9 62 c2 5c 2b d2 a9 85 28 21 b1 bd 02 e6 3d f5 f5 5c 5c b5 d7 b3 79 a9 b9 ae 9f 27 50 90 08 15 12 18 46 92 ef 6a 8f 89 27 48 00 04 8a 48 65 b4 ea 97 e2 c8 a6 ca 11 45 7d c8 aa bc 56 95 09 0b 02 80 00 89 22 40 84 7f 26 22 b1 4a 45 29 d6 b5 a3 aa ef 2f c7 39 7f ad b9 4e f7 a2 da 0e Data Ascii: ^_ujK22<;77SKE[3:-.$D$%6fU=P3*" wBTUTI$QUWhPj2{@fH(W\|z4Wa~p&@b\+(!=\\y'PFj'HHeE}V"@&"JE)/9N
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 08 89 04 46 23 ec 2f 6e ea e3 98 3e fa e1 74 ed ed f3 3b a9 99 88 6c 3b d1 a1 b1 c9 a0 5f 96 ef 3c 7d 91 c5 b7 ee 36 ff bb f9 57 32 78 3a cb 9b b2 bb 95 dd 3c f1 9b 7e 47 c4 aa 2f 4e b6 32 cd 9f 8e f1 bd d5 da b0 ed d8 32 32 5b f5 46 32 8d 38 2f ee 6a 6d 18 ef 94 9a 5d e2 69 c3 0e bc 46 7c 01 1c 7a 76 99 74 47 f9 27 de e6 7f f8 e9 b6 7a f1 83 41 7e d7 db a2 4b 8b 6a 1a d4 86 e4 51 2e 62 6c 94 db ea 68 ca 78 d6 4e ad 94 31 af dc a4 cb 02 42 4a 95 a2 e7 8a ec a2 5b 7c 9c fa e5 58 bc 5e f5 87 69 2e 97 bf ac ab 21 94 48 62 49 60 64 5a f5 e1 6d 1e 66 93 87 11 4f f4 3e 9f 3b a0 21 da 8e fb 40 51 54 bd ed ab b8 5c 7c cc fc 7f bd 28 e9 e2 43 d3 8f b6 c1 15 66 da dd d3 a2 1c e2 ee d8 4d a7 c1 c2 17 c1 f0 8a ea 75 91 f7 e0 f8 f2 30 b5 ac 98 19 dc 1e 53 ae 17 42 91 Data Ascii: F#/n>t;l;_<}6W2x:<~G/N222[F28/jm]iF\|zvtG'zA~KjQ.blhxN1BJ[\|X^i.!HbI`dZmfO>;!@QT\\|(CfMu0SB
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: c9 f3 63 7c b8 57 a6 52 e5 39 00 72 51 94 62 db c2 7c 25 3e 95 f7 f0 42 7e 16 25 45 d9 77 27 c7 bb 4a d7 15 86 86 6d 4f dc b6 50 06 f5 16 99 b8 ec c6 45 19 51 8d c5 f6 82 93 a2 60 3c 28 77 a1 67 bf 0e 36 07 86 72 d4 56 d3 8d 78 75 9a ec 5b 4b 65 23 22 8f 87 12 94 58 4b ec 26 dd e1 71 a4 37 d5 af 92 cb 16 eb ea b7 ba f9 fe 29 fc dc 8e 17 47 3c 8e 70 df 79 d3 8d 6b 37 ca c7 da b7 32 94 36 19 59 2a 09 bd f9 32 cf d4 db 6d b1 6b af d3 6c 47 bb f1 db 40 22 12 8b 2a 12 18 fb 50 eb 46 4d 14 24 77 56 fe 76 f6 09 bf b9 fe c6 25 ff 2a ea bd 1b a6 92 d6 28 7d 30 87 1c 41 92 4e d2 b2 e8 c1 fc b4 f7 67 8d e2 72 e8 89 a7 29 42 2b 5b 6b d3 12 92 f5 66 22 dd f4 48 71 ab 32 0a c9 9b 03 44 68 25 3d 6c fa a5 3e 0a 99 0f 60 20 f2 14 14 16 05 2f 23 25 86 a8 b2 d8 c4 59 97 5a Data Ascii: c\|WR9rQb\|%>B~%Ew'JmOPEQ`<(wg6rVxu[Ke#"XK&q7)G<pyk726Y2mklG@"PFM$wVv%*(}0ANgr)B+[kf"Hq2Dh%=l>` /#%YZ
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: a3 b4 c7 ba 6c 0c 2f 7b 25 36 b3 8b 0b d2 62 50 8d f7 6c 43 87 e7 4b 12 44 c9 ed 5b da 1e e7 9f ce 05 b5 63 66 e3 51 57 55 f3 66 8e c4 a2 42 80 03 9a 48 40 53 43 e2 eb c9 c5 e3 73 b3 74 75 bf b5 99 96 5f db e6 87 1a 36 02 f4 a9 f3 8a e8 93 6c b0 e6 26 37 49 c0 79 a5 2c d8 2a 37 e2 f2 40 f6 97 3a 0f 68 74 73 08 43 b6 63 b8 60 87 60 5e 79 64 27 94 33 ec 68 b4 f6 e3 d2 24 78 b6 ab 75 27 c7 49 e9 e5 7e 64 f7 10 d3 8c 1b 51 1e e6 c5 28 5f 32 1e 62 cc da 3e 35 be 2d 53 d6 a1 c4 69 54 aa 99 94 24 39 39 ec 1c cb d2 63 63 db 8d 52 92 5b d5 1b f9 e3 96 5d 2e 85 e4 fa 38 4f 3d 21 c5 7a a9 14 58 2e 47 05 b9 cd d2 d4 51 ac c9 32 95 c2 cd b9 3e 68 87 b1 96 75 93 04 21 16 29 9c 42 66 8e b9 db cd b3 ed 47 35 78 07 01 56 84 0a 01 0e 6d a5 d5 c7 b1 98 1a e8 71 ef 4c a6 60 Data Ascii: l/{%6bPlCKD[cfQWUfBH@SCstu_6l&7Iy,*7@:htsCc``^yd'3h$xu'I~dQ(_2b>5-SiT$99ccR[].8O=!zX.GQ2>hu!)BfG5xVmqL`
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: de 28 85 dc 5d 05 c7 23 2c 1b ca 8a 94 d3 90 16 31 d4 20 5e 9a a4 ee 2f 2b b9 d8 76 58 8e a7 f1 38 0e 3a 5e f5 f5 3b 9f f5 8b b7 e7 1a 63 51 c8 52 d7 cd de 95 a9 9f 96 69 3f 63 29 b6 e2 78 b3 7c 39 eb 4f 7f fb cc 9f 9e f6 c4 7c 36 26 93 e9 c3 bb 65 bb 47 59 9f 9e b8 d0 79 d8 d6 a8 4e 70 ac 16 db a4 ce 85 ad c0 80 0c 49 f4 cd e3 6b 36 e7 53 18 2b 45 d7 47 d3 99 b2 1e 16 5b e6 83 cc c3 e5 c4 52 aa 4d d4 52 ec c2 14 6e a7 7d cf 68 cc 8f 51 eb f8 c1 e2 9e c2 af ee 92 2d 81 2a 04 42 92 0a 04 98 16 a5 17 d7 dd f4 18 a6 85 16 e6 6f 5c 7e 65 62 67 d5 78 61 d7 44 67 a0 44 61 c0 36 a3 d1 01 cf 2a 53 9a 9f 3b 3e f4 ee 61 76 65 1e 8e b4 cb 16 d6 cb fe 75 da 63 9a d3 e6 83 28 3a 5d ce 17 04 88 b4 51 7a 2d c6 35 7b b2 92 dc 06 a0 0f 7d 73 f6 7a bd 36 3c 7e f0 f4 3a 8d Data Ascii: (]#,1 ^/+vX8:^;cQRi?c)x\|9O\|6&eGYyNpIk6S+EG[RMRn}hQ-Bo\~ebgxaDgDa6S;>aveuc(:]Qz-5{}sz6<~:
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: f7 5f b6 1f 39 af 95 34 2d b8 d6 50 ac 45 d3 42 57 f2 6b 6f 6d a2 a5 b0 0b c9 0e c7 42 28 03 05 29 01 48 0c 03 47 da 62 3d d4 69 2b 72 2c 38 72 35 c8 b5 fd 3a 92 b4 e6 db b8 59 fb 49 5d 49 74 9f 06 39 74 f8 c9 75 75 b5 25 b7 dd 5d 4e 3a ed 64 4d 6f dd 63 63 15 13 8b 0c e3 e2 98 53 5c 8c 9f 2e 83 a6 67 f9 fe d6 8f f0 d2 5f c2 62 b7 db 72 93 be ca 91 c8 6c 12 35 bc 2c 0e 72 fa e2 5b cd 16 df b5 cf 14 87 fb 74 a9 db 5b e9 a4 ce b6 3a f2 ad 62 19 fa ad 88 86 0f 98 a6 a4 ae 99 a5 94 65 b8 39 49 ec a1 2a 6a 4f 2c 71 6b 4c fb 64 9d f8 ed 6a 2e 33 1b 4b 26 c6 6a 05 b2 71 2a 3d 43 31 a6 84 31 36 15 40 68 a3 79 fa a6 af 1f b6 8a 61 5a 68 c6 75 f7 c8 19 98 16 a9 bd ff b9 54 40 da 4f e9 e3 46 93 3c cb 10 15 c8 c1 04 c5 4d a2 99 18 dd 17 23 15 5a 51 a7 5d ca 00 02 d6 Data Ascii: _94-PEBWkomB()HGb=i+r,8r5:YI]It9tuu%]N:dMoccS\.g_brl5,r[t[:be9IjO,qkLdj.3K&jq=C116@hyaZhuT@OF<M#ZQ]
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: a7 a2 db b8 76 7f f7 f6 f6 a3 be fb 22 ef 3f 96 4f df cd f3 33 ee fa 6b dc b7 a4 19 f5 3c ff f4 0c df fc f2 1d bc 9a 72 2b 15 45 12 66 0b 4e 4b 37 fd d0 e3 e6 3e 1d 2f 9c 2d 62 ec 52 a7 1c 24 36 59 67 07 9a 4c d1 8b 25 ed b1 c4 8b a4 e8 24 12 a1 06 4e a2 04 8a 5c 93 43 6a 63 2a 2b cd b0 ff bb 3f f8 b3 bc 5f 73 9f 06 8c 9c 3e dc 7f 12 f2 13 30 39 42 63 f8 ac 3d 30 0c 8d 0c 3f a8 83 ce db 57 f5 f4 ff 65 72 ce b0 2c 59 f1 de c9 a6 95 95 b0 74 ef 49 03 1d e5 17 bf 64 8d 12 8d 3a e0 53 93 f3 1d d1 f8 7a c6 7a b8 f3 a0 30 b9 a0 ed c0 d5 b5 b1 4d f2 4c d3 82 f3 25 4f cb 0d 80 75 3c 86 88 e9 ac ad 02 a8 5c 45 d4 89 f8 c6 8e a5 2a 57 e8 bc 2a b7 c6 43 d9 15 1a 8f cf e3 44 24 6e 64 d9 9f 3e 0e ef bf 9c fa bb 72 20 b7 af 51 c5 cb d5 16 e6 f4 60 ff 74 4d db bd 5f 90 Data Ascii: v"?O3k<r+EfNK7>/-bR$6YgL%$N\Cjc+?_s>09Bc=0?Wer,YtId:Szz0ML%Ou<\EW*CD$nd>r Q`tM_
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 34 ab d4 ab 1a 15 60 a4 91 60 96 cf 8b 62 b8 91 2c cf 70 9e 7a dd 68 d9 e4 ef a6 f8 bd f8 d3 1e 7e b7 b7 30 07 36 c9 b8 a9 58 a5 77 b2 71 35 be 7f 75 25 0c 6a ed 28 0d 56 55 dd 11 8d 1a d7 b5 1e 00 00 ad 1d e3 74 62 c6 ea 64 e7 c8 ae 5e 43 9b 01 ea 0b 3c 95 aa cc ee 2b 80 43 9d 94 6a 85 58 62 6f 48 cb 47 8d c7 bc 34 7b 6d a6 9e eb 7a 58 44 24 42 85 04 fe 57 c9 ee ca bd fa 02 85 24 1a 11 06 3c 0c e3 e9 e9 93 a3 df fa d5 67 e3 d9 f7 47 82 d2 d1 6e 54 66 77 b9 cd a1 bb 2c 8e ed b3 d2 dd 9f f1 a9 1d 8f 68 e3 a2 9e ca 79 5c 48 0d 79 3a f0 a1 ec 15 87 e9 2d ab 65 fa 31 77 b8 30 83 ab 9d 67 c6 55 2d 5b b1 6f 1b 86 f5 be 4c 39 45 27 65 62 ba 94 08 d3 3e 1e 39 71 46 3d 47 5f db 60 2a 31 0e 4b 73 7a 70 6b c4 48 79 b3 36 90 45 ba 48 a5 48 22 8d 6c cb e6 30 15 46 df Data Ascii: 4``b,pzh~06Xwq5u%j(VUtbd^C<+CjXboHG4{mzXD$BW$<gGnTfw,hy\Hy:-e1w0gU-[oL9E'eb>9qF=G_`*1KszpkHy6EHH"l0F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49901	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:34 UTC	538	OUT	GET /7ychYovQPtJoIVWiH4osNrweQE-KEzVqry_PxYGqr9984sOjfaK9KZmeLBAfN6kvoO3WBcxECQM=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:35 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 43764 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:12:41 GMT Expires: Fri, 25 Oct 2024 21:12:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 5874 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:35 UTC	844	IN	Data Raw: 52 49 46 46 ec aa 00 00 57 45 42 50 56 50 38 4c df aa 00 00 2f 87 c2 5a 00 8d 38 6c db 46 92 a0 d8 d8 9b 41 f6 fa 2f 78 de dc 35 10 d1 ff 09 78 ff 18 01 fe 96 49 ac 7d 5a 41 4d 2c 1e 0f 71 b8 27 49 48 c9 63 03 76 4d ef e2 63 37 80 7b 31 ed 91 b4 8c 81 a2 88 cc 8c 49 d4 b4 d6 5a f6 de 27 bd 84 16 6f 66 d7 6f 24 df c5 fe 05 22 33 22 6a ec c9 9b 99 7d 22 dd f3 10 c9 4c 75 cc a2 84 d1 20 00 dd 13 4b cf 46 5f d1 ea 71 6c e0 33 b1 7e 06 ad b0 0f b4 03 2d 3b bb f6 16 e7 da 81 2c b9 f9 4e e4 d8 b6 ad 5a d1 c4 dd dd 6f 88 bb 43 f3 69 03 83 f0 40 69 e4 ee 72 2f ef df 5f 2d 80 a5 da 76 eb 66 db 4e fb f4 00 52 34 fe 7c 85 8c a0 f7 de 7b 72 11 42 08 f1 ca 45 b8 5c 57 20 47 92 a4 48 72 21 56 80 d6 5f 92 7d e2 31 c5 31 33 73 ff 27 20 08 2a 52 df 46 08 a8 68 23 d4 5a 52 Data Ascii: RIFFWEBPVP8L/Z8lFA/x5xI}ZAM,q'IHcvMc7{1IZ'ofo$"3"j}"Lu KF_ql3~-;,NZoCi@ir/_-vfNR4\|{rBE\W GHr!V_}113s' *RFh#ZR
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: ee d2 51 b8 3b 14 2e 85 c3 4a e2 52 6c 22 77 2e 8d bb 5b c7 ba bb 55 e0 50 e8 15 7d 83 4c 74 0c ee 4e c7 da 1d b6 ee 42 78 e0 ff ff 7c 9b ed ff 9e ef f7 07 51 93 36 8b d3 65 4d 3d 7b 3b ec 63 3a dc ed b0 6d db a7 6d db b6 cf f3 b0 31 f3 18 da ee dc da 45 65 f0 49 f2 c9 07 6f 58 c0 fe ff 90 dd ea f3 fb fd 67 66 f7 ac 62 55 69 9f 53 05 b5 6d db b6 6d db b6 79 6f 9a 2a b8 76 9d da 8a 93 93 d4 27 f7 34 87 eb dd 99 f9 ff 62 02 78 bd ff b7 5a 92 25 e7 79 9e b5 f6 8e 88 c4 a2 e6 1e 33 33 de da af c0 6f c0 97 be f6 25 de fa 3d f8 55 f8 4d 30 5d 31 33 db 07 aa 2a 4f 25 44 46 ec bd d7 f3 5c 64 d6 e9 f6 68 87 e9 ea a7 a3 34 96 c2 90 65 28 b9 a1 14 86 94 55 d2 f9 1b c2 d0 f0 37 34 1e a5 b1 d4 4a ab 71 49 a5 32 fb 31 a4 79 99 a1 a4 30 95 a1 d4 ae 9b a5 d6 f0 cc 32 e4 Data Ascii: Q;.JRl"w.[UP}LtNBx\|Q6eM={;c:mm1EeIoXgfbUiSmmyov'4bxZ%y33o%=UM0]13O%DF\dh4e(U74JqI21y02
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: ae 04 96 fc d9 ca 7c 4f 08 a5 31 a8 c9 9d 49 6b 46 ee ad fe dd 54 fb 77 9d 30 cf b1 76 5a eb c2 34 63 dd c3 be 9e e0 c7 f3 d1 2d af 07 06 3f a6 22 8d 71 4d 4e 29 ad 7a 69 66 f5 17 d7 41 b5 c8 22 9c a2 ae 4b f3 9e a0 5e 0b dd 45 74 cb 4c 2b f3 7e 91 b6 c1 da 35 d6 ad fa ef 55 d5 df d9 40 d4 4b 2c 6c ad 75 59 40 82 2d 98 51 0b 5c 4b f4 ea f7 ad de 99 34 36 6a a7 bc 5b e5 9f 4e 8d ff 76 0a 36 3a 58 88 d6 3a 2b 60 03 cd b6 b5 ae 19 bb e5 ab e0 e2 97 8a 34 96 6a 3b 7f 50 e5 9f 8e af f9 cd 24 24 11 0b 59 dd 14 b0 4d ec 18 b0 4e 19 88 dd fc 46 70 c9 eb 54 a4 b1 57 db b9 9d 2b 7e 73 41 fc 99 49 d8 70 cd 75 4f 3e 1c 73 b5 c0 ed 44 ef fd 4f 70 c9 34 2a d2 d8 ad ed f1 cd 42 9f fd 0c 26 3d 36 5d 73 dd 12 70 0c 0b 55 6b 33 91 9b 3e 0b 2e 9e 41 45 1a fb cd ae cf a2 5b Data Ascii: \|O1IkFTw0vZ4c-?"qMN)zifA"K^EtL+~5U@K,luY@-Q\K46j[Nv6:X:+`4j;P$$YMNFpTW+~sAIpuO>sDOp4*B&=6]spUk3>.AE[
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 75 2d 40 57 7f f0 a0 d8 15 82 26 9e 0f 0b 58 e2 a5 35 ed c2 d1 54 1b 14 2d 5f f5 e7 2d 59 c6 79 3d ad c8 b2 95 7f 3d 46 d7 0a 74 7c c7 1d ee 9b d9 59 1e cf 8b d6 fc 6a a2 5d 38 9e 6a 87 c2 5a b3 f2 57 db b3 ac f3 76 5a 51 e9 a8 fc e7 d1 ba 96 a0 ab b7 9e e3 ee 28 82 86 a7 c3 da 2d fe e0 be ce e4 2e 54 5b f4 2b 5f dc 8c cd 55 4f 07 56 49 e5 df ae d7 b5 06 5d bd f5 36 61 96 4e e1 e5 54 df bb b3 33 d5 49 b5 47 94 52 f1 d5 75 59 22 eb e1 a0 61 e5 3f 9d ae 6b 11 ba ea bd 3b 45 ce 7d 9a 67 d3 ce 68 62 e7 0e a7 da a4 70 ac ea 77 93 59 34 e3 d9 dc 59 f0 8a 5e 5d ab d0 f1 5d d7 bb 6f 36 41 57 8f a6 9d 79 5b d1 6b ff 47 b5 4b 61 07 55 7f da 98 f5 e6 3c 1a ac f9 e0 75 15 2b 3d 43 5e 45 51 a0 80 9c 45 99 44 92 d2 28 08 87 66 34 dc 02 f0 08 c2 76 a7 e3 bb ae 72 5e c3 Data Ascii: u-@W&X5T-_-Yy==Ft\|Yj]8jZWvZQ(-.T[+_UOVI]6aNT3IGRuY"a?k;E}ghbpwY4Y^]]o6AWy[kGKaU<u+=C^EQED(f4vr^
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 98 b0 f1 a0 93 55 9d 2c ca 97 41 1a e6 05 0d 5c 17 77 69 b3 b1 14 4a 2f d5 9a 51 83 76 30 80 3c 3d b1 42 5a 85 64 02 c8 02 42 d0 fb 37 f5 52 76 7a 26 09 4d 50 e5 12 bb d6 d3 41 06 8d b7 fe c2 3d c3 c2 5c 53 49 4b 56 38 01 e1 af db 5e 7c d1 2a 81 ab 05 0f 04 88 a2 45 86 e4 f8 35 8f 3d 88 ce 59 97 47 64 a4 86 17 18 76 46 53 3a 23 02 cb ac fd b7 f2 1d 4d e9 26 69 42 3b 73 5f d1 d0 fd f4 9e fb 56 dd 9a b2 4a 56 d2 b0 aa 72 97 18 c8 a4 05 2c 21 67 58 51 a2 cc 7b a5 4c a9 bd 67 71 69 b9 da 98 40 29 f2 e8 82 52 96 86 8a 9e 75 3d 86 ed 84 f4 7d 83 19 34 78 1e 19 70 3d d3 94 e4 58 d4 b2 a4 74 f0 84 c1 f0 be 68 dd 00 2d 77 d9 58 5a ae 9a 76 3b 7d ec 25 9d 7d b7 aa 87 5a ce df db 32 67 4e 92 e7 a6 b1 15 fa 86 9c 44 41 d9 52 7e 7b 24 b9 18 9c bf 59 08 32 d0 89 d7 a3 Data Ascii: U,A\wiJ/Qv0<=BZdB7Rvz&MPA=\SIKV8^\|*E5=YGdvFS:#M&iB;s_VJVr,!gXQ{Lgqi@)Ru=}4xp=Xth-wXZv;}%}Z2gNDAR~{$Y2
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 46 f1 ed 9a ee a8 3b 09 98 b4 26 14 49 1e 08 26 c4 86 ee 9d d4 fc ee 7a ed 1e 68 33 c4 7c c6 42 96 f1 10 1a 98 07 92 65 f9 cc c9 6e 21 5d d4 a5 d6 c6 26 9a d4 f0 e2 32 ef 3f 23 90 a3 aa 12 18 85 1c 17 dc 89 d9 56 56 e8 3f 8f 4b 92 44 81 d5 2c 91 3d 8c 38 f5 51 c3 9a 2a f9 d6 64 ab 06 91 08 c9 a2 c8 99 cc 89 8d 72 76 6b 5d 2b 48 00 62 66 20 34 20 b8 48 57 6a 8e dc c3 b9 91 6b 3e a6 6e a8 48 8a b3 53 66 d3 0d 39 14 45 9b a1 87 3b 8c 67 00 04 90 7a 1a 84 48 63 6b f8 37 3d 24 4a b7 98 c9 bc d9 32 ed f6 e9 89 a4 01 10 84 10 61 6e 93 90 59 52 e1 c3 ed ec 6c ac 04 5b 1f 5b d2 65 1e c5 95 81 8f a6 a5 17 d9 a7 65 d0 ab c8 a4 59 c1 a9 84 24 4a d1 39 27 29 ce e3 85 4a 82 65 a6 88 62 0c 23 c4 34 bc 90 7d b9 c4 a0 a7 f3 a0 c8 6c 3f 28 bd 3c 59 11 fd bf 36 ca d0 66 08 Data Ascii: F;&I&zh3\|Ben!]&2?#VV?KD,=8Q*drvk]+Hbf 4 HWjk>nHSf9E;gzHck7=$J2anYRl[[eeY$J9')Jeb#4}l?(<Y6f
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 0e 3b d6 ad 6e 77 72 3c af c2 94 60 d0 76 19 51 12 13 67 c0 c2 30 0e a5 c8 74 96 35 1b 2d f6 ca 52 c6 71 19 47 e3 e5 38 09 2b 8a e1 72 61 9e 82 73 e0 0a 60 a1 19 a4 41 61 c1 b8 2f 90 57 da 29 f7 5b ed bd 8a 2b 32 5d 51 15 01 9e 08 bc 0c 68 a1 fd e8 9a 7d 27 b8 2f 17 41 47 d1 01 87 87 9a d1 f5 6f c8 24 6c ce b9 a8 48 21 4a 11 e7 97 7c dd de fe 6e 7b e5 1c d3 e6 66 4f 14 32 62 a3 6f 61 91 60 87 1c d0 b0 88 90 82 93 18 49 1c 81 3a b1 8b d9 25 61 87 55 60 96 c5 d8 e6 11 2f 1e 89 36 b7 72 61 81 05 42 82 d5 34 69 d5 65 50 04 e4 85 d0 c0 15 33 3a 9a f7 19 0e fa e7 bf fd 1f 56 b9 48 5b 3c 51 ce 5a ea e5 4c 61 ac 8e b4 1f 42 46 f5 9f 77 64 fd aa e8 b0 12 87 1f c5 fe d3 87 32 79 e0 3b f8 e0 52 a7 2d 0a 5b ed a4 2f 7e a8 61 bc ca 11 2e b9 88 16 fb 12 07 0c ea ee b0 Data Ascii: ;nwr<`vQg0t5-RqG8+ras`Aa/W)[+2]Qh}'/AGo$lH!J\|n{fO2boa`I:%aU`/6raB4ieP3:VH[<QZLaBFwd2y;R-[/~a.
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 18 64 96 73 e4 69 b6 43 19 ce 52 56 2d 3f 7f fd 31 1f bb dc 8e 8a d6 ca 3a cc d4 95 1b d4 cc 5a bc 52 2e e1 75 f3 c7 03 c6 fa c7 9b 89 5e aa 64 88 ca 32 ea 25 b2 48 b2 93 95 40 50 d4 24 49 4c a1 8d 61 01 66 ee b0 4b 12 44 b1 8d 98 98 00 0b ce 2b 1c d6 80 73 71 07 22 c6 aa 56 96 bd 5e bf cf 59 ef 04 83 00 a6 0a 44 9c c1 a2 ca 97 b6 59 d0 34 6b d6 48 5f 4e 88 fb 3d ba 5b cd d0 8e c8 88 fd c0 bb 7c bb 62 6b 66 d1 aa 11 5b 88 40 2a b8 b0 b4 a4 01 f9 c7 33 41 a5 ad ce 89 2d 99 65 10 84 91 a8 49 1c 97 00 ec 07 24 36 8e c0 9c 70 04 02 92 38 ae d8 26 19 08 00 e3 b0 36 ab 80 dc e6 eb ae 47 65 65 8a fe 30 ef 95 5b d5 a0 8c ce 82 38 4d 90 67 36 03 20 09 a9 81 a5 09 f3 3f a1 cd 4b 1a b2 f9 25 77 b3 af 76 87 ed 88 79 ff ce 07 02 e0 28 b6 77 e1 99 06 f3 7c 46 32 1d 86 Data Ascii: dsiCRV-?1:ZR.u^d2%H@P$ILafKD+sq"V^YDY4kH_N=[\|bkf[@*3A-eI$6p8&6Gee0[8Mg6 ?K%wvy(w\|F2
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 4c 45 b1 01 35 2c 66 84 b3 bf 54 0c 98 f6 94 01 e8 b6 bc c9 61 14 09 c9 0a ac 20 49 44 b1 54 05 32 73 87 a3 48 a8 79 37 7a 99 dd 96 3d ae 34 5c 2d 7f 85 ed 70 57 17 b9 81 b3 9f c3 a3 49 dc 49 7f fa d7 d2 48 42 13 44 04 72 b8 9d ea 34 41 f7 cc 8a 06 d4 e5 89 ff d3 86 43 cd 33 70 00 be 96 2f 0e fa fb ef 4d ff da 99 10 92 8c a5 2b 21 8a 9c 94 12 39 41 4c f6 78 cc 6b cc 40 9c e7 18 0e 06 64 26 c5 b8 1d a1 65 58 04 34 51 6d a2 98 17 d6 46 52 b1 7a 0e af 92 00 b0 4d 6f 5c 12 93 8d a4 e0 98 39 89 c8 b9 c4 ae 29 c5 2a 24 e6 7c 7d d2 34 6b 6b 50 e3 ac 79 0f fb 3c 26 36 9c bd c0 c3 1a 4d c8 ba 42 8f bd 8c 91 9a 06 42 50 e2 29 4a ae 7a 34 be 38 cd 1f 30 c3 5f 50 6a bd 08 dd d7 d6 e6 40 5d 69 58 ff 13 63 23 88 17 8e 5a 30 84 64 0a 0b 62 ce 9f cf 20 8e 34 14 0e 71 d5 Data Ascii: LE5,fTa IDT2sHy7z=4\-pWIIHBDr4AC3p/M+!9ALxk@d&eX4QmFRzMo\9)*$\|}4kkPy<&6MBBP)Jz480_Pj@]iXc#Z0db 4q
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 2b f7 64 c4 24 19 88 66 65 1c 01 14 db 74 46 f7 2d 92 0d 29 4e 87 23 c3 f6 78 30 d9 96 9c e1 11 5f a5 e0 5a c5 a1 51 a2 8e 54 4c b5 de 46 85 a6 5d 81 44 35 1f 6c f7 22 56 0f c9 10 45 85 28 33 11 04 54 22 cb bc 6a 65 92 b1 94 f4 69 74 1c 8b 18 92 48 e3 a8 de 61 6f d8 d5 ee 24 ca 52 14 05 68 ab e7 7a 7d 4a d1 81 85 01 86 b0 08 45 f3 a7 24 02 b0 55 6c 9d dc d9 9d 19 5f 28 79 1c 95 a2 12 b5 92 aa a2 44 b4 45 5b 12 dd 56 19 8d 81 fe 2b 0a 7d ff 6c 55 cf 9a 1b 56 7e 68 56 eb e1 8e 2d b4 63 60 a1 56 70 c4 92 e2 e4 b7 90 4a f9 87 7c e4 c5 53 e3 23 e3 96 f5 0e 9f f2 53 cf a0 ac d1 05 a5 94 52 48 1c f5 56 45 62 2a 9c 5f 69 64 15 e3 e8 88 2c 39 7a ce 41 65 d2 28 6a e8 bf 4b 2e b4 3e 22 d6 ca 31 f4 fa 18 f0 80 f3 b8 53 ad 1b b4 00 b8 1c 53 ef 59 0d 27 cf 51 99 3b 8b Data Ascii: +d$fetF-)N#x0_ZQTLF]D5l"VE(3T"jeitHao$Rhz}JE$Ul_(yDE[V+}lUV~hV-c`VpJ\|S#SRHVEb*_id,9zAe(jK.>"1SSY'Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49902	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:34 UTC	530	OUT	GET /BTcoU_yqIVkbdMjhv2SHgT7mF25HPJRKDeGhwMjlFc0fjItL7Uiq7i_3Viz9s8jbHNQ=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:35 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 112596 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:20:31 GMT Expires: Fri, 25 Oct 2024 20:20:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 9004 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:35 UTC	843	IN	Data Raw: 52 49 46 46 cc b7 01 00 57 45 42 50 56 50 38 4c c0 b7 01 00 2f 87 c2 5a 10 11 87 6d db 48 12 64 79 3f cc f5 df f0 cc ec 5e 09 11 fd 9f 00 aa c4 40 2c 5f 8b 04 41 2b 58 81 f0 6f 21 08 b1 84 44 fe 5f 5a 4a 8c db 3f 14 4a e7 60 2a 2b 3e 16 47 a0 6b 4c e8 46 19 a3 ba f1 5d 69 ea 4b 92 36 02 a3 b7 26 7d ed 2b c7 14 07 49 a2 1f 88 c9 ce 45 42 c6 e6 5c e4 b5 63 45 ca c5 ef f7 1b 6d 7a 36 49 ce c9 4d 12 9f 70 d3 c2 6f d0 ec cf fc b7 1d 08 20 26 4e 7f 6d da 16 60 00 e4 32 f1 7a d5 26 dd df 43 e6 3c ce 97 2b d3 f4 e5 4d ef 90 cd 73 3d be 2d 6f b8 81 c8 da c3 d7 b1 fb bb ed 74 c5 84 9c f7 81 c7 9b a2 2b ca 3c 68 86 84 71 e0 c3 06 4c cd c4 3a 74 14 06 3e 00 0f 3c 8f 02 24 9a b6 bd a7 2b 83 af a2 26 05 63 9a 96 f9 e4 bb 6a 30 ce c5 ba f8 a3 88 b5 95 29 3a f5 9b 45 94 Data Ascii: RIFFWEBPVP8L/ZmHdy?^@,_A+Xo!D_ZJ?J`*+>GkLF]iK6&}+IEB\cEmz6IMpo &Nm`2z&C<+Ms=-ot+<hqL:t><$+&cj0):E
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 40 c8 e1 1c 34 e9 f8 c5 1e cd 4e 93 a4 fc 91 c3 99 99 8d 5f 00 91 e1 55 41 04 dc 9b e5 4e 01 54 e0 ce cc 0a f9 ce 87 d5 ec 2f 0a 2d bf 59 ce c5 cf ff ce 5c 5f fc cf a9 9f 6a db 65 db 96 44 27 e3 82 10 7f 70 e2 71 8c 31 d7 ce ab 26 02 0f 0f d5 75 f0 98 18 b6 d9 ed a4 d0 5d 51 0a 7b ba 32 d3 fd 5c 5d 0a 42 51 76 55 ee a1 90 ee 3a 38 06 86 30 a7 2d 0a 5b 95 1b aa 50 88 42 da 3f 85 eb 4e 5b 4c 12 43 b8 9d 82 dc b3 70 6c 04 a1 02 41 f2 90 b9 e9 88 c0 40 10 18 ba 79 79 04 86 70 27 06 d5 d2 31 b6 7d 29 4c 37 30 04 13 55 08 84 61 b8 12 8e c0 40 90 6d d3 41 dd 1f ed 88 da b6 51 33 9c c7 ff 79 14 2c 20 28 f8 3f ba 09 f0 d2 ff bf 6d cb f6 f5 d4 ca fd 0a e3 20 af 28 b8 19 08 0c bd f9 57 10 76 4f 0a 8c b9 f6 f3 c4 c1 1b c6 c5 6d 93 e5 a3 34 34 f8 c3 cb c2 2f f7 fc 2d Data Ascii: @4N_UANT/-Y\_jeD'pq1&u]Q{2\]BQvU:80-[PB?N[LCplA@yyp'1})L70Ua@mAQ3y, (?m (WvOm44/-
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 1a 59 63 55 68 9d 4a 65 2c c7 69 ac 0a 15 8e d3 a7 1e a7 8a cb f5 2b ea 50 d1 ab cb 0d 6d 42 af fa 77 f6 eb da ab dd 5e 7d 6f 7b b9 f9 ae 45 7f 9b da e4 f2 1d bd 94 aa 4d bb 91 da 44 9b da 74 de f7 da bc fe 8e 9f 7a b5 db a6 3b 7b e5 32 6b 9b 7e e7 36 5d 6e ee 8e e4 cb 2b 7a 75 77 a4 7f a7 6d 5e ea 74 e7 c3 53 af d0 ab de dc da 35 7d 6f 9b da 4b da 5f ea 6c b3 57 7a a5 5d 93 48 77 9e f7 de 1c ab de 3b c6 ed b1 2a 7e 38 bf aa 31 96 37 47 9d f5 de a1 e2 ed bf fe 91 8a cb f7 17 63 f9 f4 b1 a0 f5 b9 1b b7 fb b5 62 3b 96 8b 73 57 c3 59 f1 66 85 b1 1c 67 a5 84 e7 95 e7 95 8a cb ad fb d4 0a 3c f7 55 31 77 ad 9f a8 5c c2 b3 2e 59 74 0f 6b 0d 06 16 0e 8d b8 9f ef 64 70 28 2a 54 6c c7 a2 14 56 47 5c ec bd 6a 7c 4a 33 c6 ca e9 ce d4 a8 c7 bc ce 9d b1 5c 9e bf 92 5b Data Ascii: YcUhJe,i+PmBw^}o{EMDtz;{2k~6]n+zuwm^tS5}oK_lWz]Hw;~817Gcb;sWYfg<U1w\.Ytkdp(TlVG\j\|J3\[
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: ae a2 57 e8 b5 6b 37 f4 ea a8 94 3a 2b 08 15 2a 95 fa b9 ae 5a ed fc c4 15 e3 81 07 c6 7a 5e 31 96 8a c2 ea 62 d0 1c 7a c5 91 e5 d9 4f a8 08 a3 f7 e8 d9 2b dc 6f fb 85 12 db 71 8b 61 19 6b 63 dc 94 6d 3b 83 b1 e9 a7 71 36 8a 3b e5 a6 42 0c bf 84 17 ea fe 54 79 be 62 f6 a8 c7 82 15 a8 74 ca 52 cc 3c f9 a1 6a ec bc 64 c2 be 4c 3f ba 5c bf 6a 7e f8 7e dc 82 b9 df 75 53 4d 6d 72 72 f6 43 5c af 64 88 b7 4f 9a 31 ec 9d b1 54 8c 85 0a e6 ee cd f9 db 3f 42 73 c7 94 e2 9f 2b de 53 29 e1 8c dd 2e 95 5d c1 c9 f9 2f e7 57 44 ba 3b 72 87 f3 3e 0e d3 9d 97 db 28 46 ee c8 80 6c 13 da 1c 6d 92 6a af 97 49 ed 55 7f 2e 18 8f fb cb 4d af 8c 62 94 f1 f9 93 3b 8b fe 5d 83 32 68 7f 78 7f 2c 46 e9 f5 f2 89 d3 56 2e b7 f1 db 2b bd 3a ef bf ec af f2 5c 7b 6d af a1 9e 13 41 d1 4c Data Ascii: Wk7:+*Zz^1bzO+oqakcm;q6;BTybtR<jdL?\j~~uSMmrrC\dO1T?Bs+S).]/WD;r>(FlmjIU.Mb;]2hx,FV.+:\{mAL
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 2f db 95 a5 ae 48 0d f5 9e f7 fb f3 56 ee c2 72 a8 d8 b6 ee ed 1a a7 cb 15 b5 49 3b ab e7 0b 4a 11 8a ab 23 51 d4 32 79 3c 15 f4 b7 a9 57 2b da 44 7b 82 51 7c 9b fb 5e 7b a5 ef 31 20 e3 f2 2a d2 ee 28 d6 62 40 f9 36 c9 90 61 ff 45 4e d4 3e 4a ed f5 65 53 9e c5 c9 d6 eb e5 96 76 1f b7 9e 35 12 7d 79 16 92 c7 f5 ed 69 3b 7d fb ba 95 1f eb e7 5b df fa 77 9b be 9d 88 7c 98 68 53 31 dc 1f cb 68 2f 26 87 ab f5 dd b4 1b 19 65 a0 a0 47 9b 2a 5d 94 51 ec 86 dd 76 cd c5 f7 f6 0a ed 9e 17 15 f5 1b 8f a7 9b b1 6c 2b 17 4c 6d 3f 36 a1 39 c5 c5 b9 bb 58 59 5f 34 0b a2 a1 82 fb 6b ac 4a b5 dd 6f 72 37 f7 d2 c2 2a 33 1b ad ab fb d5 c5 b9 57 5c ae 28 db ef bd c2 82 bb cb 39 55 a2 d4 9c aa c9 5f 4d 23 14 87 52 71 71 2c 95 f6 11 37 31 2a f2 0f d6 cb ae 88 2f 42 95 ae bf 5f Data Ascii: /HVrI;J#Q2y<W+D{Q\|^{1 (b@6aEN>JeSv5}yi;}[w\|hS1h/&eG]Qvl+Lm?69XY_4kJor73W\(9U_M#Rqq,71/B_
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 36 ed e3 8e ee 6d fa 1d 2f 75 da 8d c3 a4 79 32 68 4f 76 b7 cf 1f 34 b3 a6 f3 7e c8 77 1f 22 a1 3d c5 ba 23 63 af ab fa c8 aa d7 f6 ba da 5d 97 a4 cd a1 8c 62 24 0f 4f 76 db 54 3b b5 a3 cd c3 1c 85 ed d4 7c 7a 7c 3e 6d a7 4d af 3e 1f 2b a7 51 71 1a 2a 4e e3 7e da 1e 9f 1f a5 ed b1 99 6d 42 9b 1a 53 64 b4 d9 66 19 05 a2 4d ba 8a df 7e 7e 1c 4a ed ed 76 de 7f 99 b4 59 86 32 16 77 86 cf 37 46 89 8c 5e fb f2 ed ab dd 80 b6 cc 51 7a 6d 93 5e b9 dc 7a fd ed e7 5e 45 f6 aa 5d f3 bc 3f ef cf 87 1b 2e 37 95 b9 db 56 2a 18 f5 f2 e6 b5 9e a8 b4 0e c7 79 9c 95 8a cb ed e3 bd 97 51 6e 55 e2 ee a6 6a da 8e 85 8a 6d c1 67 3f 8d 1f da 06 2a 78 f6 2c 73 67 2c a3 72 43 c6 1a 0b 4a 39 fe 86 0a 73 87 71 0b c6 2d 2e 8e 5b c6 62 a8 21 d7 54 f5 0c ca 4f ea ab af f6 8d 93 1d 45 Data Ascii: 6m/uy2hOv4~w"=#c]b$OvT;\|z\|>mM>+QqN~mBSdfM~~JvY2w7F^Qzm^z^E]?.7VyQnUjmg?*x,sg,rCJ9sq-.[b!TOE
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: bd 77 95 fb 0b 8e 53 3d 6e 81 b1 2a 78 5e 2b 2e de 5f cc 5d e4 60 df 9f 8c fd d2 58 30 77 54 15 b9 d3 55 bd b6 0f ee 4c 0c 89 3d 5f 7e 2e 43 da cd 71 7f 84 7d f7 ad fc 1c 7d 7f 99 95 36 93 41 7b 12 69 b7 fd fc db 07 55 af fa 3e 92 51 8c d2 e6 50 56 df db 9e 42 7b 8a bc ab cd ed 54 8d 5e b4 4f bd f6 36 ed cf ea c7 50 2f 79 eb d5 e3 d6 eb c7 a8 2f d7 d7 2d e3 34 14 db 69 fb 3c b7 93 ed b7 27 da 55 0a 6d da 6d 33 12 cb 1a 9f 6f 76 fb db 7c 78 7a 1c f5 f3 b4 79 f4 bb be d8 4f 8e 22 52 d8 7d dc fa 4f dd c3 ac bd 8c 25 3d 4c 68 d7 d2 66 5c 9e de f6 76 3b 2b 44 3e 4c a2 a0 bd ae 7a 3d 1f 6e bd fa de 2f 57 54 7c 72 09 6b 0f 3c 95 54 5c ac 8c e5 58 71 f9 fe b2 0d 47 9c fd 89 b8 58 8f 5b 98 3b 2a 67 b3 fd d6 b3 9a 9f 43 e5 f9 4a 3d 6e 81 23 4b c5 b8 e5 38 37 9e 9b Data Ascii: wS=nx^+._]`X0wTUL=_~.Cq}}6A{iU>QPVB{T^O6P/y/-4i<'Umm3ov\|xzyO"R}O%=Lhf\v;+D>Lz=n/WT\|rk<T\XqGX[;gCJ=n#K87
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 9d 56 3b 25 5a c7 dc 2b 54 c6 9a bb d2 fa 68 57 d4 af 12 8b 77 77 9e 0b c7 e9 cd 7a ac 3f fd e6 db 13 92 e7 73 a2 e6 28 dd 33 ac cb ea ee ac 23 db ec 95 8c d4 8e f6 1d eb 92 5b 19 4e 5b 7f ff d4 a6 36 ad ee 6c 9e c6 fd a7 cb d7 b1 8f be ef 55 af 8c a2 3f 97 5f de c4 6a b7 4d e4 f7 dc d9 cc e7 be ac cb 73 8f 7d 2f db e5 e6 b7 9f 7f fb 59 9b bd ea 2a be bc d2 ab 5e 4f a3 76 d5 23 5b 7a 74 f7 76 da 4e 91 b1 93 a1 cd 32 b0 68 26 7a b5 7b a6 6c a7 da 8d a5 4d bb 91 4b 9b 7c 79 15 f4 7a 22 20 28 46 11 7d 1f bd 8a 13 c2 ee 02 91 71 7f 2c e3 14 d4 1e 05 0f d3 fd f1 dd d4 26 2a 38 b2 8c 35 96 6d 59 19 2c 99 28 31 77 8e e5 fd 23 18 3f da 15 39 da 95 69 67 2d 5c b9 3b 38 4e a8 50 ef 1d 67 34 d4 c7 72 79 da c7 aa b8 58 84 ca 71 ce 5d a1 ee 9b 12 38 4e 15 b4 ae 1e ab Data Ascii: V;%Z+ThWwwz?s(3#[N[6lU?_jMs}/Y^Ov#[ztvN2h&z{lMK\|yz" (F}q,&85mY,(1w#?9ig-\;8NPg4ryXq]8N
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 8b 55 3d 6d 1f ab 15 ca b7 29 19 c5 d6 f7 97 db e5 b6 2e 6b 31 e0 f9 31 77 78 ff ff 57 75 95 8c c4 28 06 a4 7f 87 6d b6 e9 59 19 7a d1 3e 75 55 a7 6c e8 f5 f0 b7 a1 57 c8 e8 2a 5d ed 6a a7 18 75 a7 97 f0 5c 7a ec c7 a3 bb 23 a3 ac ef 66 9b 46 19 05 e7 36 ab 5e cf 65 14 68 53 64 a0 8c 65 5d d6 77 b3 57 67 65 28 02 6d b2 b8 33 e0 b1 ea 04 05 0f 53 af 44 e9 96 76 2c 63 41 28 f8 72 eb 6d 46 a1 e1 f3 b7 df 40 3d 56 51 95 81 d0 fd 9b db fa b8 dd 5f ef dd c5 76 ec 2a 94 c5 55 0c 4b a5 75 db ca 52 4b a1 a4 36 6f 57 7c fa dc c7 8d b6 4b d4 f2 2c a5 b8 1b aa d4 85 76 a1 2a 93 e7 15 c7 a9 7d 48 05 45 61 b1 36 f5 de 6d 4b a8 fb 95 54 c5 b6 3c 83 a2 68 85 83 4c af e3 86 ae e3 43 8d 74 67 7f 9b 6d 7e 7b b1 1a e4 28 3c f7 ea f2 ea fc 97 63 59 ed ae 90 d5 90 da 24 8d 32 Data Ascii: U=m).k11wxWu(mYz>uUlW]ju\z#fF6^ehSde]wWge(m3SDv,cA(rmF@=VQ_vUKuRK6oW\|K,v*}HEa6mKT<hLCtgm~{(<cY$2
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: e6 7a 7f 3d 1c bd 7f 6d 1f 0e d3 28 8c 36 53 a4 ef cf ed 84 a1 d8 3a d4 5e 3f 7f 10 ec e9 ef 3e d4 5e f5 8a b3 7d 17 7f f9 63 3e 94 0f f5 f1 db a4 76 c5 50 cb 8f 0a db 89 48 d1 26 da cc f0 bd 41 81 c8 b0 5b ce db c9 9d d5 f9 9e 49 b8 98 2c da 84 70 e7 d2 e6 e5 26 fa fd a7 53 a0 8c 77 c7 32 8a e8 95 d3 f6 88 a0 b4 ab dd 47 ed 6a b7 8c 28 a2 cd e2 5c fb 43 99 1e 66 9b 65 44 d1 a9 70 de 7f 49 35 ed f6 b7 7d 26 2a 73 f7 a9 d7 3b 82 bc 7e 2e 11 eb 77 94 9d 46 7d 59 52 63 05 0a 41 e5 d8 a9 89 b1 66 3e 1e 6b f3 76 7c ae ec 4e c4 2f 6b 51 65 6c 3c 76 1d 86 9d e3 74 af b5 d3 7e 59 a9 40 3d 70 98 4f 15 73 a7 82 b1 38 58 7a 24 a1 d5 d7 65 bb 63 f9 25 b9 c1 a1 79 d5 3a be 04 a3 7c 7b 42 32 ca b7 27 fb 76 2c 46 62 85 dc fa 76 f9 19 72 40 92 b6 d3 d6 f7 58 df 7d 80 c4 Data Ascii: z=m(6S:^?>^}c>vPH&A[I,p&Sw2Gj(\CfeDpI5}&*s;~.wF}YRcAf>kv\|N/kQel<vt~Y@=pOs8Xz$ec%y:\|{B2'v,Fbvr@X}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49903	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:35 UTC	539	OUT	GET /NetAUUeOatNbtzGAvZfgrxVvUajTyf2G3BRpTJMZ1Hnaxa_wcBscJO4eGrp-LvJOIgaGBz_IHteN=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:35 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 48942 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:12:41 GMT Expires: Fri, 25 Oct 2024 21:12:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 5874 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:35 UTC	844	IN	Data Raw: 52 49 46 46 26 bf 00 00 57 45 42 50 56 50 38 4c 19 bf 00 00 2f 87 c2 5a 00 11 88 6d db 08 92 20 27 f6 dc 25 f7 fd 17 bc 73 f7 2d 44 f4 7f 02 40 b6 d3 ad ac ed dd 0d 50 55 ab eb 9e a4 bb 37 ac c6 b6 94 d8 76 55 15 4f f9 b2 b2 9d 57 2b 28 d8 5e 29 40 55 95 2e eb a4 a5 7d c5 b6 d4 4d 67 6c bf 25 f1 d4 6d 65 3b 2d 05 db 2b 01 c1 54 a9 be 38 e9 47 6c 4b 89 6d d7 e5 2e 5f 6a 77 01 96 c7 4a 01 aa 54 a2 f4 25 11 ef aa aa 07 b4 ed 92 c4 f3 cf e7 17 27 ad e7 8d a5 4a 75 93 8f 9c 06 56 b1 ad e7 a7 a1 2f 20 5f f6 62 d2 6c b0 bd 92 f8 34 9f ae 6f 49 3f 12 d9 b6 48 ce d8 ef 07 05 75 b3 6c a7 51 48 62 7b a1 33 53 f5 28 28 0a 04 52 32 73 20 13 3f 97 af 0f 8a ae 47 a3 c4 f6 42 43 62 57 c1 eb 97 a6 1e 2b 88 6d bf 79 86 6b e9 97 af bb a2 63 57 51 82 bf cb df a6 01 fd e3 2d Data Ascii: RIFF&WEBPVP8L/Zm '%s-D@PU7vUOW+(^)@U.}Mgl%me;-+T8GlKm._jwJT%'JuV/ _bl4oI?HulQHb{3S((R2s ?GBCbW+mykcWQ-
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: e8 09 30 38 1c 17 18 07 26 63 03 d9 c9 0e 40 d2 54 b4 43 8c 01 80 1c 54 8e ce ac 36 de 7e d7 f2 a6 14 00 05 f4 60 1d 80 9f 26 f7 f4 62 76 ae 5a 18 b4 6d 23 28 c9 9e 3f e9 db dd 53 88 88 09 40 ab 01 b5 52 a9 80 61 2f 01 f9 96 c0 4e 1e 5d b4 12 e8 73 ac 54 2a c0 4b 0a a0 95 e2 67 a7 ff a9 04 db fc be 8f 4a 90 3d 01 d4 6a c6 69 3b 39 5d d3 8a da 00 4a 40 90 2d f9 e9 6c fb f8 8d 27 54 e2 7b 00 ee 65 02 a8 15 e7 77 e5 9c 05 8b ca 9b c0 f7 23 05 74 d2 4a b1 17 9e 6a 80 dc 66 e6 90 6d 07 d4 6a 86 29 db 06 59 7b a2 05 b8 c0 f0 7a 09 98 2a d5 8a 00 dc 97 6b 81 95 30 2a bb 72 fa 8a 67 9c c7 4e e5 c2 5d 79 54 90 d3 a9 84 c9 72 39 dd a9 26 3d dc ac 52 1f 38 b5 15 98 aa 01 0c c0 9d 6a 80 b9 04 1e 2a bb 72 3a d5 d0 f4 80 05 78 ad 3c ac 02 2e 3e 73 3a d5 d0 74 39 f5 68 Data Ascii: 08&c@TCT6~`&bvZm#(?S@Ra/N]sTKgJ=ji;9]J@-l'T{ew#tJjfmj)Y{zk0rgN]yTr9&=R8jr:x<.>s:t9h
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 25 d9 33 6a 18 7d 4a 7b ee 97 10 0a e1 cd 1d 7f a7 37 c7 0d 7b a4 f5 af a6 5e b0 7e 6e f3 e9 4a 8a 21 02 25 0c 10 cb f0 50 0f f7 fb f6 1f 15 44 e3 78 d1 fd ab 43 16 81 51 1b cd d0 18 06 0b a9 e1 32 9f e4 44 d4 f1 b1 27 82 08 65 b4 6b 7b 7d 60 5e 74 99 c2 09 6c 2f 35 4c 01 04 84 63 05 0d cb 71 7a 52 93 85 28 4f f9 db 4b 76 af 20 90 a2 8f 08 15 9c 9e 4e 3f a5 e8 36 cb ce fb 3c a5 6f 9f 37 5a 21 92 69 9f f6 85 de 17 0b 4e f4 df f8 f5 f4 df fa f7 d3 d7 ed 9a e6 64 a6 3b 7c fe f6 f8 d8 97 81 e8 3d 60 f7 81 3c 55 c1 e4 2c 15 b5 f2 3e c6 0d d6 26 35 0c 0d 1a 14 82 65 0e f7 b3 f2 86 e3 a5 e4 76 ed f2 e7 4d 8c 11 49 a0 14 00 25 74 a8 fb dd db eb 8a 3a 8c 2b b7 57 3b 2f 1f 26 64 19 18 56 c6 46 07 1a e3 b0 90 1a 36 d3 1b 41 11 25 88 d4 1d 32 98 da 61 1c 6a 20 20 40 Data Ascii: %3j}J{7{^~nJ!%PDxCQ2D'ek{}`^tl/5LcqzR(OKv N?6<o7Z!iNd;\|=`<U,>&5evMI%t:+W;/&dVF6A%2aj @
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 52 a8 40 a6 8a b2 dc 11 d9 de 29 bb ab 32 a6 bb 7f 9e 77 90 84 01 32 e8 80 89 fa c2 10 20 03 cc f7 31 83 a0 38 2b 68 0c 33 b7 85 75 af 63 1f 10 4a 52 99 be cb d7 67 fd 0b 67 fb a9 dd e2 29 95 8c 14 51 41 fe a7 5f ad cf 57 9f b7 7c 6b 63 7d f0 dd fc fb 7e f6 b4 9f fe 12 1e c7 31 10 d3 db 55 87 96 71 57 2d cf 21 50 a2 42 c5 78 c1 9a f6 d9 a3 ae 14 c6 d0 b5 13 f8 1f 98 c9 33 13 41 ce 10 2c 81 9f 91 07 20 67 cd 59 df 07 3d b5 d1 98 15 ea 18 2c 73 47 51 82 98 15 8a 0a 02 31 0f df 72 f4 c6 1c 98 e7 29 55 66 66 20 73 83 0e 86 a8 2b ac 8c 0d 90 01 18 61 bf 21 14 1e 84 c6 30 2e 41 0c d7 87 9c 40 80 92 d4 84 ac a0 e9 c3 b2 bf 36 eb bf fa a9 cd 12 e2 d8 50 71 ec f5 fb ff d1 7f 69 3d c3 cd 77 f5 09 78 79 f8 f3 5f a3 ff cc db 5a ab 43 6c 15 65 2d 88 94 10 89 12 8d 57 Data Ascii: R@)2w2 18+h3ucJRgg)QA_W\|kc}~1UqW-!PBx3A, gY=,sGQ1r)Uff s+a!0.A@6Pqi=wxy_ZCle-W
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 1d 0a c1 62 46 a1 02 20 fa 8a 65 95 92 57 ee ef d7 bb 53 e8 f2 8f 77 84 90 8a b4 df cf 6c f9 9d 28 e3 0d a3 18 7d 0d dc 33 1a c1 8d b2 89 d2 7e 12 47 8a 0a 9c 34 28 2c 02 29 54 cc f7 6c 44 1d 17 33 e7 82 4d ed 8d 9b 89 35 02 3b 1b a0 1e 34 e6 0e a2 10 17 61 19 87 86 28 f4 fe 40 46 bd 13 1a 2c c3 73 77 db b8 69 32 14 d8 2a f3 79 97 8f 36 2e 07 4b 06 02 10 20 ed db 4f 97 5b c3 ea 41 0d 50 78 a9 71 54 cc f7 33 14 82 c6 dc 51 68 20 1c 26 30 b2 b2 b1 f7 78 ff 92 bb 53 c7 ef c1 34 58 b1 a9 ae 5a 84 7e e7 ec ad 59 ef 0b 4e 30 04 37 91 a1 01 f7 be 22 c8 42 40 03 99 bb a1 8e 0b 81 05 15 bc 0f 84 42 70 ea 3d 0a 2c 6f 75 3a 66 f8 ed f1 98 11 60 e1 24 14 e6 fa aa a2 62 98 a9 41 d4 f1 24 23 45 4a 90 c2 24 25 bd c9 34 16 18 7b a0 77 17 de bf 70 0c 01 08 43 f4 57 8f ee Data Ascii: bF eWSwl(}3~G4(,)TlD3M5;4a(@F,swi2*y6.K O[APxqT3Qh &0xS4XZ~YN07"B@Bp=,ou:f`$bA$#EJ$%4{wpCW
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 47 cb bd f9 2d 6a 9c 0c 8d ba ff 95 7c fd ac ac 7b a1 a1 33 10 85 94 19 8d 71 68 90 42 ef 8f 3d cb 52 10 91 d5 eb c5 14 8f 7f d9 fb bd 67 1d 71 05 89 c2 32 05 31 8e 0a 16 73 9b c2 1a 14 e6 b2 03 f7 6f ec f8 33 8a 6c 2a 75 dc 9c 67 07 01 32 00 43 60 a1 94 36 3a 81 4f 03 a6 9c fc c9 37 29 8f 82 7f e2 15 d8 a8 02 76 89 02 89 86 d4 b1 82 d3 be 04 c5 0b 82 60 39 16 e4 3c 1d 40 60 d4 2e 8c 49 c7 08 6a ee 55 c5 8b 48 45 f4 77 40 42 6e e0 8a 42 a1 d7 3b 17 bd dc 46 fc e4 6f 7d 6d fa 1f a3 42 cd 10 14 d6 7d 06 cb 38 34 58 8e d7 ce 14 10 b1 84 20 f5 ce aa 31 fe f8 57 5e b7 be 3a ed 07 a2 d0 13 21 28 a2 42 0a 7b 0b eb 4e 28 ce db 22 84 0f 7f f1 5b cd 1f 0a 4d e7 36 dc 47 22 44 00 03 64 80 84 52 ca f0 b7 b7 78 9e 2a 4c c7 bc f1 63 62 44 cd 12 34 fb ca 46 b4 6f c0 8d Data Ascii: G-j\|{3qhB=Rgq21so3lug2C`6:O7)v`9<@`.IjUHEw@BnB;Fo}mB}84X 1W^:!(B{N("[M6G"DdRxLcbD4Fo
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 44 44 53 0d 64 ad 0e 35 56 2c 52 c3 93 14 52 38 4b 20 28 a1 01 34 da d9 69 97 ac 1e 59 6b 29 db 4e 57 ca 08 2c 58 e6 f6 e6 68 08 30 81 09 34 3b 46 1c 60 7e 1e 33 f9 f4 d3 1b 57 ce 23 44 02 61 94 b2 b7 90 37 20 2d 56 f5 b6 f3 8d 63 80 09 10 40 74 2c 29 41 28 ac b9 67 b6 e5 d5 68 90 18 23 60 cf 6c c4 56 53 83 8a fe 20 09 e9 5c ff 44 5f c4 b2 89 1e fb 80 99 a8 0d 44 cd c1 db f3 e4 c2 70 58 59 21 56 59 8a 17 dc be 34 32 16 4b 88 5a 61 41 1c 9b 49 10 8a 4c 0d 8d 57 4f 4c 20 e8 dc 90 4d 39 7c d3 f6 6e e4 4b c3 b9 4f 16 82 9a 29 81 28 44 c5 f1 e4 f4 83 3a b2 fa 96 6c 0d ce c4 a7 3e 66 eb 58 79 45 1a 81 22 25 86 05 19 08 43 d4 f7 cf e7 89 ef 61 9c d4 33 d9 74 a3 a6 a2 00 29 a6 d2 fb 7b 4d ea 8a 6e 94 bf c8 f3 6e 9f 1d b2 21 02 08 90 81 92 3e 47 65 54 58 ec d0 18 Data Ascii: DDSd5V,RR8K (4iYk)NW,Xh04;F`~3W#Da7 -Vc@t,)A(gh#`lVS \D_DpXY!VY42KZaAILWOL M9\|nKO)(D:l>fXyE"%Ca3t){Mnn!>GeTX
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 4f 03 02 03 a4 f3 6d d2 38 e6 96 1e a2 8e cd dc 42 d4 31 fd 78 a2 2f 62 54 c5 b0 29 44 76 b5 ac ee db b7 e0 a2 c5 ea 50 81 8c ba d1 c1 8a 43 14 b2 9b 5b 34 c6 99 16 ac bb e3 63 6f 71 00 03 51 65 be 67 33 18 a7 c6 77 37 df 2b f3 cf 66 5f 70 52 12 78 3f 2b 13 da 69 15 4e 25 82 a8 18 56 10 71 32 ea 0b 0c b9 81 f3 40 00 10 d2 19 d3 1d b2 a1 57 27 03 ee 58 1b 05 90 84 bc f7 c3 85 7f 20 d1 87 f3 c1 6c 3e 5f 16 06 c4 bc bf 45 e3 b7 d9 20 75 6c e6 0e 87 3a 9e 8d 9c b0 08 76 94 a9 dd e7 80 21 b8 03 da 72 90 61 34 90 c2 32 b7 20 14 99 15 2c e3 98 0b 51 c7 07 82 50 86 84 65 6f 86 68 67 bb bb b6 17 5d 20 46 e8 27 e4 da 18 a5 65 b0 66 45 ac 35 ae 60 4d 9e 94 57 53 42 85 42 f0 18 e0 18 1e 6d f7 ca e3 fd 6a 77 aa 71 a8 e1 0d 24 49 1d fb ac fd fa b3 fb f5 e7 f0 83 57 88 Data Ascii: Om8B1x/bT)DvPC[4coqQeg3w7+f_pRx?+iN%Vq2@W'X l>_E ul:v!ra42 ,QPeohg] F'efE5`MWSBBmjwq$IW
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 20 49 7d de 15 d4 4c b8 7e 33 fc af 45 11 9d 61 79 35 b3 42 ea f8 f8 ea 22 08 85 d0 b0 30 9f c4 0e 16 81 d9 90 31 99 a1 db c6 ac 9d 43 53 56 a6 52 0c 7d 30 8b 80 24 66 b7 db 6d 0e 53 d1 ac 8e 50 06 07 63 5f 66 57 6c 08 97 a0 08 2c 53 14 15 c8 dc 16 75 8c 80 00 22 b5 26 b3 72 b1 67 c8 ea fe c3 19 92 cd 60 19 07 13 c8 a8 35 b7 e2 c8 2d 87 62 ae 7b 05 cb f8 dc 16 a2 f0 d8 a6 74 10 40 51 cd 48 b3 fd 57 7f 3e 2e 99 15 96 57 33 1b 44 1d 17 31 2a 44 83 65 1c 2c 84 e2 4a e8 3e 39 6d ec 67 73 d1 d8 eb 62 fd 3e 20 01 02 bc f7 27 6f 57 9b cf af 39 e9 9d d9 91 1c 86 7f d0 ea 41 2c 5c 05 c3 20 72 7d 15 ea 18 2c e6 5b a1 04 99 bb 41 61 01 02 19 80 81 48 49 98 85 86 31 24 df 7b 38 da 09 73 1a e3 d0 40 18 b5 11 9c 40 28 e4 3d c1 32 8c 69 21 35 7c 20 10 18 b0 f0 1e 77 9b Data Ascii: I}L~3Eay5B"01CSVR}0$fmSPc_fWl,Su"&rg`5-b{t@QHW>.W3D1*De,J>9mgsb> 'oW9A,\ r},[AaHI1${8s@@(=2i!5\| w
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: a9 31 4c b2 7d 56 b4 5d 8f 77 e6 df fa e4 7b 13 84 82 4d 09 8d e1 b9 ed 20 0a 6b 22 08 8a f4 1e 03 73 13 48 65 2f 3c a4 68 de 72 fa 9b 0b 08 50 a2 82 05 73 cf 37 96 bb a0 66 ef 8b 20 c0 40 82 a5 2f 38 6f 7f 16 36 2c 55 63 98 a1 8e 0d 22 38 04 60 9c 1c 42 7b 8f a3 6b b2 67 f3 82 d1 6a 4b c8 40 e0 67 b6 e2 b5 46 33 97 8a 22 25 41 ce 04 60 00 0b c1 72 2c e7 be f6 09 51 58 8e 53 63 98 60 88 f6 33 3f 5a 0f c2 8f 3d 6d 96 ca f2 a6 04 cb ab 61 91 de 0b cd 24 23 25 34 58 c6 c1 02 2a c3 6b 9a 19 c8 37 ff 9a 02 4b 08 0b 29 e6 0e 84 50 e6 ce 85 0c 14 24 b3 68 d5 64 42 66 b4 bd ba 75 37 31 2a f2 14 7b 53 34 b0 dc 80 0e b5 06 22 56 aa 91 07 b7 95 ce e5 7c 88 1b 46 57 22 05 c4 54 28 01 3b 54 55 34 62 f1 4a ea d8 58 cb f9 0e 60 00 11 04 a9 63 73 8b f7 6f 9b a0 10 64 36 Data Ascii: 1L}V]w{M k"sHe/<hrPs7f @/8o6,Uc"8`B{kgjK@gF3"%A`r,QXSc`3?Z=ma$#%4Xk7K)P$hdBfu71{S4"V\|FW"T(;TU4bJX`csod6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49904	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:35 UTC	1106	OUT	GET /pCr8yx-Yp_3CfXYv2zpUntlSpfDV5d8tkBA7OVNR5MjP3nwlW7kyUwFVsWLaehlkE-hWXW2t0Uk=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:35 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4204 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:08:34 GMT Expires: Fri, 25 Oct 2024 19:08:34 GMT Cache-Control: public, max-age=86400, no-transform Age: 13321 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:35 UTC	844	IN	Data Raw: 52 49 46 46 64 10 00 00 57 45 42 50 56 50 38 20 58 10 00 00 10 70 00 9d 01 2a 88 02 6c 01 3e 3d 1e 8e 45 22 21 a1 90 f9 34 3c 20 03 c4 b3 b7 71 a3 42 59 68 77 d7 15 7c a9 06 cf fd db fb 07 ed 27 8d b5 7e ea 9f d5 3f 69 3f b8 fe e8 f4 97 6c 97 75 3f 29 3a 24 e8 4f 38 af 24 fc db fc cf f7 df dc ef ee df 06 ff bc fb 00 fd 37 fe 5f dc 0b f4 8b fc e7 f7 df c8 de e6 9e 60 bf a3 ff 57 ff ab fd ef de 47 fb bf a8 df ee bf dd ff 5e be 00 3f a9 ff 8f eb 13 f4 00 fe 6d fe 7b d2 cf f6 e7 e0 df f6 ab f6 af da 07 ff a7 b0 07 a0 07 52 7f 4c 3f cb f6 8d fe 07 fa af a5 7d 4e bd 70 e4 93 11 df 91 fd 98 cf b7 61 fc 00 bf 11 fe 69 fe 7f 79 b4 00 7d 56 e2 3f 4a 0e 42 bc fb bf ed f2 d7 f4 df b0 87 eb 5f a5 87 af 8f db df 66 ff d6 20 c4 65 52 90 32 7a a9 f1 41 cd 83 e9 aa 52 06 Data Ascii: RIFFdWEBPVP8 Xp*l>=E"!4< qBYhw\|'~?i?lu?):$O8$7_`WG^?m{RL?}Npaiy}V?JB_f eR2zAR
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 6a 94 81 93 d5 4f 8a 0e 6c 1f 4d 52 90 32 7a a9 f1 41 cd 83 e9 aa 52 06 4f 55 3e 28 39 b0 7d 35 4a 40 c9 ea a7 c5 07 36 0f a6 a9 48 19 3d 54 f8 a0 e6 c1 f4 d5 29 03 27 aa 9f 14 1c d8 3e 9a a5 20 64 f5 53 e2 83 9b 07 d3 54 a4 0c 9e aa 7c 20 00 00 fe fd d4 ec e4 57 40 00 00 00 00 00 00 00 06 d6 e4 aa 2d ff 08 7a 66 00 00 6e bb 59 77 d1 e4 25 09 0e cf ec f6 1b 86 bf a2 cb b0 25 7d ac c7 bf bf 01 d6 cd 90 ec d8 25 e1 59 90 3f 31 8e 0b cd fe be b1 e7 d4 61 15 ee be 53 43 ee 66 e6 94 93 07 13 20 c9 46 13 fa b8 37 f3 9f 8e 83 de e9 4a 92 cc 6d 11 1a 4b 83 67 d3 fc db 7f c2 f5 c1 ce 1d ea ec b4 d3 eb 72 da 58 87 6f 9b 66 74 13 17 6b 33 6e 3b bc a3 5f 41 6e 38 8f fa 5a c0 ad 44 62 ec 94 81 fa 87 fb 2f 32 25 29 4e 08 a1 83 4f 92 03 7e 30 85 93 9e 8e a8 5b 62 f6 7d Data Ascii: jOlMR2zAROU>(9}5J@6H=T)'> dST\| W@-zfnYw%%}%Y?1aSCf F7JmKgrXoftk3n;_An8ZDb/2%)NO~0[b}
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 4a 51 f1 73 4e 22 bd b2 dc cd 48 b4 d9 df 76 3e fd b9 ea 14 3d a4 90 1e fa aa 9d c5 f8 49 69 62 56 4f af 17 bb ca dc ee 57 75 85 ee ee 1d 83 7e 9a d8 8e 1b 1c 91 75 3c ce 5b 68 c9 39 cd 4d a0 75 c1 68 fa 45 15 6f d7 70 d5 37 27 08 0d 96 09 95 8c 8a c6 ec cd 46 38 13 f7 aa ae 33 db 9e 12 4a 74 74 9c 7e 70 60 f8 21 8d 70 74 9c 7f 8e df fd a3 18 92 f7 8e 8d 4d 4a ca 7f 82 3e 5f c1 e6 da 84 f5 6f 68 80 49 4f 09 cc 9f 9f 94 e1 db a8 af 10 09 fb 2d 04 aa ef 42 b6 73 5a ab 45 5d 9c 1f 36 77 04 80 ed fe a1 ac f4 2f 3f 0d ea a2 af c5 b8 3f f9 7a 43 c3 20 0a f9 97 a6 2a 69 f5 07 72 7d ad 42 8a 89 65 eb 20 c5 b2 bb 5d de 15 99 f9 0c 0c da 7c 92 56 cb 5b fc 83 08 ed 2b 8c d7 c7 aa a8 67 73 c5 22 9c 25 44 09 7a bd 0f d3 68 f3 51 3f eb 70 69 bb 6a 69 49 95 8b 0e 8d 6c Data Ascii: JQsN"Hv>=IibVOWu~u<[h9MuhEop7'F83Jtt~p`!ptMJ>_ohIO-BsZE]6w/??zC *ir}Be ]\|V[+gs"%DzhQ?pijiIl
2024-10-24 22:50:35 UTC	604	IN	Data Raw: 29 ec a5 53 4a 90 bd df e1 a5 da 32 0b c9 2a f5 d4 13 45 68 5c a9 55 aa e0 61 4e b3 bc cd 05 c2 be 38 8e e1 6e 13 5b 33 d7 7b 31 d4 d8 6a f5 f2 60 5e 0f 77 75 10 62 00 30 13 a3 7a f9 2a 3c ba 7e 25 a7 81 b5 72 51 0c 97 ef d4 a6 55 fc 8f c3 30 3b 07 8a ee 5c 06 b8 03 fa 45 e1 13 b8 a4 76 bc 18 61 74 db e3 0b db ac 69 62 d7 dc 17 3e 4e 2c c8 8a 71 ac 60 ff 28 1c 75 41 03 0c 08 16 00 7c c3 cb 6e 37 41 97 24 1e a3 40 f3 cf 28 f6 36 b8 11 65 4e ea d3 7a 4a 62 ea db f8 93 4d 6f b1 46 c8 55 89 08 3e ce 7f 94 e2 2f 01 65 6e 0c 7d 49 97 8d a1 1c 21 b0 ef a6 a4 ae 67 2b ef 40 c0 ae b8 5a 83 5d 89 bb 86 97 a8 34 bd 1f 45 2d 78 30 f8 37 bd 31 6d 0f 5f 0b 79 f3 02 01 21 2c 15 17 dc db 15 96 75 bb ee c6 49 5b b7 ba fc f3 bf bf f7 de 84 64 b0 a5 29 ee a5 52 9e e2 ee ac Data Ascii: )SJ2Eh\UaN8n[3{1j`^wub0z<~%rQU0;\Evatib>N,q`(uA\|n7A$@(6eNzJbMoFU>/en}I!g+@Z]4E-x071m_y!,uI[d)R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49905	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:35 UTC	530	OUT	GET /fqEcPOtm9aSOTmCcH5ebeKerdIz8x5oo-cAi9HTlRBAsg-TEwlf3UQpplmbywU4k6uM=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:35 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 47924 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:42:29 GMT Expires: Fri, 25 Oct 2024 21:42:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 4086 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:35 UTC	844	IN	Data Raw: 52 49 46 46 2c bb 00 00 57 45 42 50 56 50 38 20 20 bb 00 00 f0 08 02 9d 01 2a 88 02 6c 01 3e 51 24 8e 45 a3 a2 21 22 a7 f8 8a b8 70 0a 09 65 69 eb e3 6f 36 b9 a6 b6 0e 8e ee 5f 6b 86 95 b7 fe 3e 46 7e ab e8 1f f9 a7 f8 4e bb 3f dd 2f 60 0a de ec f4 b1 6b 5b 6c 69 f3 14 ba 0d 35 45 e2 fc 37 57 ea db ec 37 6d a5 f3 ff 17 92 7e fb e4 ba fc 1f f6 3d 68 7f 52 dd dd e6 b7 ce 33 d2 ff f9 1f 52 0f f1 3d 4d 5e 86 fe 72 fe ae 5f df 7f f6 fa 59 fa 80 7f ff f6 d2 e7 87 f5 4f 24 bf 52 fb a1 e1 af e8 5f 76 fe c3 fc 3f ee a7 f7 ff 9e bb c7 fc 17 f8 5f fa fd 0c fe 75 f8 5b f8 1f df ff 79 be 4a ff 9f df 3f eb df d9 7a 02 fe 45 fd 23 fd b7 aa 3e e8 7c 07 77 cf f8 5f fb 7f db fb 04 7b 49 f6 3f f9 9f e4 ff d2 ff f1 ff 4b f2 71 f8 df fc 3d 16 fd eb fd b7 fd df b8 bf b0 0f e7 Data Ascii: RIFF,WEBPVP8 *l>Q$E!"peio6_k>F~N?/`k[li5E7W7m~=hR3R=M^r_YO$R_v?_u[yJ?zE#>\|w_{I?Kq=
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 06 4f d3 af ad ae 50 a2 ad d8 7c ff 40 88 a8 d6 5f 5a 81 08 08 7b 94 7f 97 b7 50 e7 41 65 19 f8 b2 12 74 b4 40 b8 62 3b 2f 11 1e e3 5a 41 eb 04 12 c5 0e 24 e8 12 ee b4 c2 30 56 51 b4 09 6a 6a 8c 22 ec ee ef 0e 0c 66 1c 9f 7f 1e 54 bf 55 21 04 f2 f0 1c 94 78 51 8c b7 bf 0d 15 c1 67 d9 62 da 07 1c 18 ba 9d 21 c4 ce 06 0a c8 45 9e 1a 6f de 5f f3 dc 23 64 cf b4 26 48 fd 2d ce 10 e7 0d 91 23 05 5f f8 c0 7c fa c6 b2 b6 fa 81 3f a6 43 7f 51 c9 ac 3f 74 d4 20 56 62 1c ca 99 61 11 bb 7a 45 95 33 d3 ea 78 66 a8 87 45 2c 8c fc 04 05 c3 ad 36 42 c7 20 9c 9e 15 c5 ff eb 96 44 e9 09 77 d6 92 bc 44 21 63 b4 0a e8 14 b4 2d 6a a9 53 89 14 63 5e 0c 24 f9 0b 09 88 8c f7 5e a9 72 7e 77 c7 79 40 cd 9a ae 9a db 79 91 c9 c2 01 6a 21 8a 3a 51 ce 5f 4f 1a d7 1c f9 4d 82 44 4a 18 Data Ascii: OP\|@_Z{PAet@b;/ZA$0VQjj"fTU!xQgb!Eo_#d&H-#_\|?CQ?t VbazE3xfE,6B DwD!c-jSc^$^r~wy@yj!:Q_OMDJ
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 64 b2 c6 b6 9e b4 7f e8 b0 67 9c ce aa 2d bf 8f 17 1d 51 53 22 37 50 a8 57 8c 68 56 06 b3 09 1b d3 68 a2 39 54 da 50 12 75 28 06 3f 24 9b bc a0 d7 5c c0 6c 99 1e c7 7e 60 1d d2 a7 86 4a 90 bc f1 ba 17 62 c1 9f ff ff c8 8b 4e 02 1c 45 82 11 c4 a1 7e be 8e 72 ae 3e 8b a1 d3 5f 88 c7 0a 22 b8 ca bb e4 bc c9 93 8b d0 f1 a3 16 9d b6 27 ef 1a da 79 43 39 09 a3 6e 35 92 28 34 5d b8 f4 19 ac 92 d4 db 81 cf 81 b1 32 a3 ce 03 70 05 a0 7f 00 75 5b d3 c0 93 f3 a4 3e 64 91 3e 17 2d cc 07 45 63 4f b8 06 b2 cf bf 1e 4c 7a 20 46 54 7d 87 3d a4 0f 26 28 53 9d c3 49 e8 a7 f4 a1 cd 74 1c 41 30 f4 7f 1d 93 de 90 f0 64 79 62 db 8d 87 47 1d b7 bf 56 10 a4 18 4b 98 ff c4 6a aa bb e5 b3 7c 68 fa d7 67 af 35 c8 df 79 9c 51 f4 5b 6b 27 6e 54 6e fa fc 54 00 c4 18 43 19 d9 2b 79 14 Data Ascii: dg-QS"7PWhVh9TPu(?$\l~`JbNE~r>_"'yC9n5(4]2pu[>d>-EcOLz FT}=&(SItA0dybGVKj\|hg5yQ[k'nTnTC+y
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 8e c4 8a 93 cf ac 9b 1c 97 86 74 5e 7c 7c b1 24 a7 b3 a9 f1 67 9e ea 04 75 f3 b2 a5 1f 5c f5 b2 5a 7c 02 b8 2b 97 26 af b7 0c 03 69 b2 7f d3 97 6b bf a7 04 d1 87 6a 0e 1d db 0b 6f e5 3f d6 50 83 3b 42 d4 58 c3 07 7e e8 a5 c2 14 73 9d b7 b8 58 c7 d0 6d 1c 75 b1 54 af e0 a2 c5 df 5c 6d e8 37 20 72 7f e5 45 bb 93 da f6 22 78 66 58 b8 b6 e7 fe 4f 27 9d ca fa fb aa d8 60 1e f7 51 2b 16 ca eb 35 49 4f 2d 6a 01 13 d0 63 ac ef 97 ac 94 2c f6 72 15 ba d9 b7 fd cc cb 8d 03 c3 c2 a8 5f 9b c8 4b e3 e9 e5 bf c3 e5 1a f1 79 15 2c 81 49 7a b2 32 fa 87 11 3e a7 49 c6 64 e8 32 d7 60 00 98 08 6e 66 3a f6 1b 6e ed 04 b2 34 4c 5a da b9 7f 5e 64 8f 02 2d 84 67 ef f2 0d 4a d4 99 e9 33 eb b4 fe 96 13 fb b3 89 66 1b 4f 08 25 fa f5 d6 5f ad 1e 3f 6d 58 1c 74 9a 9a 8d 9b 70 44 13 Data Ascii: t^\|\|$gu\Z\|+&ikjo?P;BX~sXmuT\m7 rE"xfXO'`Q+5IO-jc,r_Ky,Iz2>Id2`nf:n4LZ^d-gJ3fO%_?mXtpD
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 74 67 ba 09 a9 48 4f b0 9f 8c 28 48 98 75 e8 da bd c6 8d 36 c8 10 c6 e5 ca ca c4 f0 bc 30 c3 3c a5 1c 71 ba 06 e0 ea 0a ca 05 ef 1e bc a0 63 9b 52 e2 82 c1 70 f1 7a bb 40 7e b4 98 3c fd 12 80 73 7b 88 04 34 38 65 95 a1 bf 7a 75 28 f1 77 cd 2d 95 2c 1d 25 98 c9 a1 30 ed a8 9c a7 37 c5 1d bf 3c 56 55 6f f3 88 4a 68 44 01 09 54 a4 ec ff 50 b2 cf 88 55 bc 70 0b df b5 0f f3 4b ce b7 f4 da 44 76 12 f6 b3 74 57 4a 3b 8c eb b9 ee 2b 87 d5 06 21 0f 71 5d f1 ae 83 7d 3a 7a d0 94 bc cd ce 8c a5 0f f5 73 90 f3 e6 1f 0f 88 1a af db f2 e5 5e 6e f6 c2 a4 b0 02 08 9e c7 49 0c 71 57 c6 1e fb 6b 7f 32 a5 7c 00 91 29 0c 4b c9 c4 73 49 a8 10 66 c0 a0 ac df b2 e6 92 cb 04 46 22 b1 bc 7e c4 e2 02 af e3 bb 30 60 49 18 9f a0 f7 14 70 c0 07 52 43 9f 0b e4 89 ee 92 59 62 d6 91 37 Data Ascii: tgHO(Hu60<qcRpz@~<s{48ezu(w-,%07<VUoJhDTPUpKDvtWJ;+!q]}:zs^nIqWk2\|)KsIfF"~0`IpRCYb7
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: ee 62 44 89 4a 63 1f 3d 3b 15 df 72 5a d8 6d 26 0f 56 b7 d6 c6 fb ff fd 5f 84 e7 37 f0 4b 21 dd 8c 62 73 0c 1a f3 f8 fe 0d a2 6e e4 6c a9 c5 cb d0 70 0c 26 72 5c 91 bd 8b c7 1a 14 63 b6 18 0d ae 56 cd 09 65 62 a8 42 64 ae 20 51 2a d8 be ce b7 9e b5 ff 0c ec 5a 1b 15 54 a5 46 bd 30 d5 16 90 d9 24 81 88 92 f6 46 1d 73 25 61 3b 7d fd 27 fa 7f 17 d2 3e 80 94 53 8e 46 3c 59 09 b2 f2 f8 be 90 d5 91 9d 21 50 d1 86 ee d9 66 31 8f a0 47 6a 92 02 15 41 2b 85 50 69 56 42 c7 8b cf 0d 12 0a da eb 97 fa ea 9c 9d 53 e7 f6 98 70 c2 ec 45 5a f7 ee 3f a7 1b c7 41 e7 42 dd 64 eb 5a 49 14 32 17 85 3b 20 f2 b2 fd b5 2a a8 06 43 7f 31 75 1f 81 fa 24 bf 02 2a f9 13 33 50 ac d5 64 36 68 c0 cb 9b 5c e9 d5 12 eb 8b b8 6d b7 f6 09 80 36 27 4b 2f e9 00 72 54 f1 6d 9c 3e 2e 68 44 de Data Ascii: bDJc=;rZm&V_7K!bsnlp&r\cVebBd QZTF0$Fs%a;}'>SF<Y!Pf1GjA+PiVBSpEZ?ABdZI2; C1u$*3Pd6h\m6'K/rTm>.hD
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: f7 da 8a fa fc 9e 97 16 08 e5 42 25 82 59 4f a6 08 fb 76 d6 85 aa 5b 5d 3e d6 55 72 f0 eb e7 de 46 4f 65 67 47 d8 b7 56 9c 4c 87 59 6f 35 1c 77 62 e7 8e 03 07 92 c2 67 bc 11 f5 b1 39 a7 ef 86 47 89 60 9d f5 8e 37 47 9d e4 1b 62 25 f9 e0 84 44 47 0c 82 82 97 12 15 d3 84 3f 1b a1 cc cc aa 95 6b 1d 1a e7 b7 10 3c b5 d5 0e 6d c3 31 4f 1d ae ab 0c 0e a0 bb b9 ff 58 2a 48 e4 9a 93 6c 30 bc 4a 2f 5f 7c 98 62 a5 37 5c 86 22 33 cb 48 ba 6e 3d b5 9b a8 30 6e d8 ee ec 0a 5b 2e 1e 66 b2 59 22 64 dc 6c 34 2a 07 ec 37 a2 d6 e6 0e df da 74 18 0d 14 9f 69 59 ec 3b 5f 45 a2 dd 8e c0 6b cc 82 8f 1e 7a 94 7a 5f 22 d0 23 3f 07 95 fb 5d ba 9d 14 96 c9 6b d6 11 72 84 cc 56 d6 c0 92 64 dc 3b 15 00 53 f1 ac 86 e1 ed 43 23 d7 37 b6 d8 95 d7 51 cb 39 67 1e 92 95 f0 69 01 48 4a 47 Data Ascii: B%YOv[]>UrFOegGVLYo5wbg9G`7Gb%DG?k<m1OXHl0J/_\|b7\"3Hn=0n[.fY"dl47tiY;_Ekzz_"#?]krVd;SC#7Q9giHJG
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: f5 0e 51 e5 42 16 03 7f ce e8 53 fa 2b 67 36 50 79 25 0a b1 a8 aa 31 e4 f9 60 e8 c7 a4 c2 f4 db 6a 21 4d 89 46 eb 68 7f b6 32 c9 2e 06 0c 9a 88 8d 5c 78 d2 5c 27 3b ac 30 3d a5 2f 05 e3 2c a3 93 07 af de ba f1 84 63 6d b3 ec c6 9f 3a c9 92 96 cf b2 8d a3 64 97 70 45 52 5a 92 09 21 be e6 33 92 1b c1 1f e5 0b 04 3b da 96 91 a0 95 81 1d 2d 8d 45 b8 48 23 81 70 85 b4 f8 30 67 07 8d 7a 72 af fa c0 da 71 13 96 48 4c 44 36 2b 66 bd 25 8e 45 9b 0a 54 a1 5b 75 dd c5 bf 4b 12 f0 17 00 2c 5d 0d e5 df e3 a7 7d 58 4d 21 fb cc f8 bd bf 62 6d a6 b9 7d 9a 1c 07 78 4c c8 64 1a 08 2e 48 b1 80 6c 2b 53 01 e1 62 30 29 99 21 ab 3c 4c b2 fc 28 7a 4c 4f a9 33 51 6a 35 3a 27 b5 b7 d8 d1 b2 a7 e0 68 ac af 23 cf c2 ad 67 dc 83 58 67 4c a4 bc 98 9f c5 f5 ee b0 0f e4 90 be 7b 59 67 Data Ascii: QBS+g6Py%1`j!MFh2.\x\';0=/,cm:dpERZ!3;-EH#p0gzrqHLD6+f%ET[uK,]}XM!bm}xLd.Hl+Sb0)!<L(zLO3Qj5:'h#gXgL{Yg
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: df 26 d4 f6 8d 82 bc 39 2c 9a b5 1c 0c 17 5b ac f5 fc f9 14 38 0d 73 12 72 da 10 fc b5 09 a8 a6 54 5a e9 f4 b3 a7 9b 15 37 b3 06 a5 61 c4 87 70 b3 dc 02 d4 b5 f7 4f 01 a9 38 95 57 d4 5c e6 6b 76 73 43 e2 cd 61 6a 09 18 04 15 9a d4 1b f8 d4 07 7f 8e 1f 30 8b 0d 09 40 97 16 67 35 e1 55 be 76 a9 fb 75 86 d0 c1 d3 a5 52 8c b3 67 3d 04 6e 89 63 e6 75 d1 2c 5f 7c a4 5c 5a ad 9b 67 80 64 04 29 cb 9f 50 0e 57 93 2a c5 b7 2f 65 29 31 3f 25 07 1a 5b 5f 2b 41 3d 0c cb 2c 27 61 22 cb 76 8f 9b c6 43 c5 db a6 69 fb d8 93 39 a5 1a c7 9f dc 9d 13 3f ae 4b 71 af 79 41 38 e0 e7 ea 21 7b 5b b3 44 bb 83 ae 52 63 bf 6c c1 7d 8a b6 44 1d b4 aa b3 06 ed 0a 08 bd 0d 36 ca 16 1f 2e bf a5 7d bb 2b 6d 92 18 1c 25 f2 db 32 7d f2 cf ac b0 e5 49 62 58 06 12 d1 6c 4c f1 c2 c1 79 e6 ce Data Ascii: &9,[8srTZ7apO8W\kvsCaj0@g5UvuRg=ncu,_\|\Zgd)PW*/e)1?%[_+A=,'a"vCi9?KqyA8!{[DRcl}D6.}+m%2}IbXlLy
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: f9 48 9b 49 3e 20 8b 64 8c a5 6a 9f 2f 57 9c db f8 c8 bc 3d c4 bf 29 5f 46 51 6e 2a 09 41 ab 47 c7 25 7c 94 23 37 76 a7 93 34 be 65 af 40 ff 6f 34 4e 57 31 97 02 28 b7 b8 23 16 60 42 68 37 4f 15 9c 13 7a f6 0d e1 f8 67 f4 b0 42 a3 43 0d 51 1c 16 3d 24 88 3a 39 7f 11 71 37 29 d6 79 40 84 46 48 41 a9 ea b5 9b 49 44 d4 06 52 7c 29 60 a6 3e 31 13 94 75 12 78 d3 1c 33 96 e1 34 cf a2 f2 50 e0 d6 68 a8 8d 36 1f e3 9d 7f 7e 46 2c 3f 74 45 18 1a 54 2f 7f aa 97 f9 69 f8 8d eb 53 6c 02 ca 76 7b aa 9f bb 3f 45 8f 9a 64 68 2d 76 9f 36 5d 2c 31 e5 bc 2e 00 5d c9 58 58 52 ef eb c9 0d 49 e5 db 7d 60 9d 92 92 40 3d bb 86 1f ef 6f 26 4d 4c fd a4 34 56 e2 43 53 3b 7e 18 87 3f 86 b8 a6 e7 8c 90 dc 64 ed 0f 9f 22 2a 6d dc f7 64 79 d2 e4 24 bf b6 27 e6 39 0a ed 7a 4a 2e c8 87 Data Ascii: HI> dj/W=)_FQnAG%\|#7v4e@o4NW1(#`Bh7OzgBCQ=$:9q7)y@FHAIDR\|)`>1ux34Ph6~F,?tET/iSlv{?Edh-v6],1.]XXRI}`@=o&ML4VCS;~?d"mdy$'9zJ.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49906	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:35 UTC	1107	OUT	GET /ALpMwxHBKMzUmS1C3o8cbHAgxPxVNIUvuQwf55fBNvUioarIUgoxZZSbIQYHd7Nm_bHjsrOTzcL1=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:35 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 22078 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:32 GMT Expires: Fri, 25 Oct 2024 19:12:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13083 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:35 UTC	843	IN	Data Raw: 52 49 46 46 36 56 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 87 02 00 6b 01 00 56 50 38 20 ee 55 00 00 50 32 01 9d 01 2a 88 02 6c 01 3e 3d 1c 8c 44 a2 21 a1 13 09 dc ec 20 03 c4 b2 b7 7e 29 ac c5 e1 df 6e 69 80 69 d8 38 ff 90 fc 87 f0 82 ee de 5f fc a7 eb a7 f7 0f fc 9f f6 7e 71 f8 e7 b9 ff 48 fd f3 f3 ff ef 5f fa ee 97 7b 33 cd 8b cd bf 62 ff 6d fe 0b fc 67 fd 0f f0 ff ff ff ff fd b5 f4 a5 fa 5f fd f7 b8 2f e9 df f8 8f ef 7f e1 3f da 7f 8b ff ff ff e3 c3 3f e5 57 b0 7f e7 9f d8 7f dc ff 79 fd ea f9 78 ff 65 fb 31 ee b3 fb ef fb ff f9 3f e2 bf c0 7c 81 ff 5b fe d5 ff 23 b1 03 f7 53 d8 27 f9 a7 f9 cf 57 8f f9 1f fc 3f d2 fc 20 7f 53 ff 5f ff a3 fd 2f ef af d0 7f f3 0f ee 3f f5 3f 3e fe 40 3d 00 3f e9 7a 80 7a 8b f6 73 fd 9f a5 5f 9b 7e df fe 67 Data Ascii: RIFF6VWEBPVP8XkVP8 UP2*l>=D! ~)nii8_~qH_{3bmg_/??Wyxe1?\|[#S'W? S_/??>@=?zzs_~g
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 27 62 1f e6 ea 71 e9 ff d3 a7 7a 0f dd d1 14 8c 78 ea 2d 45 c9 7e 6e 87 d2 f2 64 c8 01 13 50 98 24 bc e5 ee c5 ca bd 1e 72 c9 99 09 fa 2e d1 fb ec 63 fc af a6 77 9a ca c6 a9 a8 b8 be b5 44 5c b7 ca d6 47 28 79 3e 5d 48 80 5e bf 40 6d 9f fd f5 b4 72 4b 88 66 15 96 d6 86 3a 1e 6d db 8b 3f 0f 5c e8 91 ea e1 32 09 af 99 a8 b6 01 4a 23 28 67 2b 42 31 0c cb 81 cc fe 48 0d 30 d3 c6 39 9d ad c7 79 9f 40 fc fb d8 f9 95 ab 6c 23 0f c1 af bf d2 53 7e 51 93 35 f3 60 4d 8b dd cb 7d 7d 56 de e4 75 be 61 23 ad 56 d0 16 93 38 5d 8e eb 91 fc 84 e0 15 00 c9 76 a0 90 d2 f5 ed e7 7a fd 3c 45 57 93 b6 2f c6 67 e5 4c 20 2e a9 8c 1b c5 eb e1 8f 64 69 35 e0 58 35 a8 7f b8 76 53 0c a8 cf a5 3e fb 6b f9 7f ce 77 2c c2 2c 37 4c 18 d1 07 c7 6b ad 2c 65 90 17 ac d3 c9 57 20 7f 98 4a Data Ascii: 'bqzx-E~ndP$r.cwD\G(y>]H^@mrKf:m?\2J#(g+B1H09y@l#S~Q5`M}}Vua#V8]vz<EW/gL .di5X5vS>kw,,7Lk,eW J
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: cd 42 2d 46 fc df 9c 36 ea ab c9 f2 ea 33 2d 53 97 0e 77 3a f0 5e 24 35 61 4f 80 56 b3 6e a8 b6 1d 50 a4 98 92 27 66 3c b2 c5 1f b5 29 17 c2 a0 e7 03 76 93 c9 fd c1 53 40 fb 66 c2 8f 10 4b eb e8 01 cd f7 8d d8 c5 90 cf 18 b0 c0 80 84 22 60 01 7d ce 0b f4 11 10 0b d7 e9 e2 2a bc 9f 34 6e ce fa 03 1e 1e ea 42 24 a8 7c be 62 19 94 f8 06 61 97 85 81 fe 23 32 c9 f7 39 c0 15 68 1d 89 4d 6d 65 08 eb 78 51 06 0c e8 0a 1f 13 e0 17 af d3 c4 55 79 3e 5d 48 80 5f 1f 48 a5 ec d4 38 6d 15 f9 50 99 b3 84 6b e0 04 46 69 09 af 46 9b fc ec 33 7e 70 db aa af 27 cb a9 10 0b d7 e9 e0 34 d7 ba fb 1f ab 88 10 36 bf 6e 55 fa 78 06 17 d6 04 c7 f1 f2 ea 44 02 f5 fa 78 8a af 27 cb a9 10 0b d7 e7 85 c2 09 6e 73 5b c6 b2 c9 14 4c 62 d3 8d 98 be 53 7a 68 39 f7 71 f0 01 7a fd 3c 45 57 Data Ascii: B-F63-Sw:^$5aOVnP'f<)vS@fK"`}*4nB$\|ba#29hMmexQUy>]H_H8mPkFiF3~p'46nUxDx'ns[LbSzh9qz<EW
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: c8 09 06 37 d4 bc 69 f1 0d 22 34 cf dc cf ad 58 cb b7 ff 56 1b 8a aa 00 23 d7 8e f5 04 94 13 02 0b 1d 85 58 c1 0e b4 ce cf 6f c4 eb 1d f1 a3 f7 77 7e e6 96 ea 5a 16 7f 3a 5e dc e9 da 14 78 87 e7 1a d9 ba 82 af 64 37 62 40 5f 37 68 d1 79 e3 51 b0 b7 75 8e d3 5b 81 0e 3d a4 3f d5 07 b6 e4 a6 dd fa 62 3b cb d2 9c e9 3a 55 78 a0 ee 2c fb bd cc 10 3a 40 5e bc 76 1d 66 41 53 f2 bf b8 5a 69 7e e0 32 26 26 02 1f 89 2e 7d 2b 5f ac 0c 68 b1 66 4d b7 0c 72 a9 8e d0 5f 79 ed 16 82 c9 ee 69 ea 84 77 90 ca 19 d3 bd fb c4 c9 ee b8 6c 3a eb 3c ee e6 15 18 d3 a3 80 a6 f0 d6 dd 99 8d 3a 00 69 88 56 8b d1 e3 c4 06 67 26 22 60 03 98 51 c5 c3 94 c0 d9 b9 dc 87 cd 89 fa ee df 67 b5 90 64 3a 9b b5 fa 98 46 4f d5 b5 cf 3f c3 87 f8 f1 f0 f8 8f 9b 19 a2 7b 45 9c 7d e0 59 8c d1 74 Data Ascii: 7i"4XV#Xow~Z:^xd7b@_7hyQu[=?b;:Ux,:@^vfASZi~2&&.}+_hfMr_yiwl:<:iVg&"`Qgd:FO?{E}Yt
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 25 df 3a dc 9c c4 28 cf 2d 65 d9 fe 9c 28 e4 99 18 a2 8c 8b e6 a5 3e d3 3a 2b f1 64 3e 8a 14 c6 41 5d dd 97 b7 9c 0a 54 71 91 8f d9 0e 35 d3 e0 ff 71 11 ff 19 3c f5 61 7e 77 a3 04 b9 c1 dc 4d ff 26 21 b0 cb 73 06 8b b5 cc 45 e2 fa 32 43 ca 71 86 31 1f a2 d7 8e be a1 04 7a ac a5 ae 63 11 cf f2 f6 58 1b 33 85 59 a5 5d 6c bc 6a 5d e4 ee 72 50 95 71 23 1c b8 d3 22 d3 09 ba ff 06 a1 86 2d 52 c6 3b 8c 02 2e dc 4a 5b 73 35 ab d8 93 31 e2 a5 19 fe b4 21 8a d5 5e 3e df 5b 34 96 5a 21 f3 ff 86 bb 92 b1 2f 9e e4 94 72 10 a5 28 e3 0a 2b 05 e5 68 9a 88 08 03 9f 40 6d 9b 73 ce 90 7b 3c 80 8c 0a c5 34 9f 11 15 19 bb 41 aa b5 7d ed 50 76 88 73 e7 2d c7 58 c7 7c 22 7d 0a a2 e8 89 1d 9d ce 08 45 f3 6c ad bd 86 19 6a f4 81 a0 cc 00 c2 0a fd 07 36 81 34 a9 bd ba 5f 3e a7 7b Data Ascii: %:(-e(>:+d>A]Tq5q<a~wM&!sE2Cq1zcX3Y]lj]rPq#"-R;.J[s51!^>[4Z!/r(+h@ms{<4A}Pvs-X\|"}Elj64_>{
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 89 40 0f 2a f5 43 ff e4 c6 a6 2b f9 2f 71 74 8d 33 60 58 dc 66 30 1c ff 89 c7 53 ad 2d ef a5 79 d5 48 99 fb 27 81 2b 03 40 63 53 ef 5d df 2a 37 a4 9e 5e e2 55 a9 2a a0 07 59 74 f2 31 99 22 1a f6 f0 03 4e c0 19 54 b5 7f 64 d2 b1 c5 0f ff 95 6c a2 7d 4c 4c 2f d9 e4 0c 1a ab d4 15 b6 70 90 21 30 85 55 fc 43 58 eb f0 5c 04 f5 db 8b 02 c0 21 d7 63 88 85 b1 25 05 33 1b b9 82 d5 59 03 71 83 4a 71 d9 f3 e4 12 6f 8e 97 0c d5 e4 7d 31 11 2e 06 ef 6a 14 66 b9 74 4a f1 d5 ab 39 ef 76 52 c0 17 6c 13 2c b8 1f ba f1 44 72 12 ec 13 6b 84 62 c5 74 15 8b 15 99 4c 12 92 2f 8f a6 31 a8 d9 ac c7 42 72 21 c3 16 16 a4 2a 17 b8 44 b6 2f 69 e2 07 51 75 05 35 8b 4a 15 44 e4 db 21 c8 14 c6 53 11 df 02 16 b0 6f a5 53 6a bf 23 70 b0 25 64 1c 98 ed 23 5b 31 bc 1e 18 43 37 06 f5 9c 27 Data Ascii: @C+/qt3`Xf0S-yH'+@cS]7^UYt1"NTdl}LL/p!0UCX\!c%3YqJqo}1.jftJ9vRl,DrkbtL/1Br!D/iQu5JD!SoSj#p%d#[1C7'
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: f2 53 86 77 e5 98 02 3d c7 86 19 dc 3f 3b 76 8b 73 56 b7 3f 5b 09 b7 14 06 9a 0e 58 eb ef 97 5a f4 98 b0 9a 1c bf 1e 78 ac 38 7f 94 e6 73 9b 17 93 66 c7 40 71 74 09 e9 a2 1a fc 1f dd 76 11 a2 7d d3 49 84 7b c4 0b 38 e9 0a 1b 04 5c 2f 62 20 2a 8e 07 42 10 21 3e 26 28 bb 2d ee 5b 20 34 bd 78 25 b6 db 56 b5 a1 08 9a b1 54 5c 3d 55 1c cc c2 2d 03 9d 23 91 e0 6f cd 92 85 12 fe 44 60 87 18 5f 8c f6 9a 3a e0 c1 97 bc 3e db 6d 58 1a f8 f3 e8 72 8e 76 24 3b 43 4d 64 dc 0e c9 ab 1c 60 33 12 00 65 5e ec 34 bc 0a 4e b3 7c 7d df 8f 2b 73 00 9c 6a a5 e2 b2 16 15 2f 86 40 29 ed 2a 7a 0f b1 a3 4b cb b0 0b cf 14 1e ab 94 a9 59 e7 87 0a 05 ba a2 fa e6 7b bd c0 a5 e4 34 13 a3 88 c2 62 fe f7 0e df e4 1e f7 89 62 07 ad 6c de ac 84 2e 00 03 53 3a 69 50 61 0a 14 d2 8c f1 fb 33 Data Ascii: Sw=?;vsV?[XZx8sf@qtv}I{8\/b B!>&(-[ 4x%VT\=U-#oD`_:>mXrv$;CMd`3e^4N\|}+sj/@)zKY{4bbl.S:iPa3
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: b4 da 5c ed d1 47 b0 00 b0 ef 09 c3 a5 4f 3c bf 5b 09 db 8c e8 79 5a 81 c5 50 4d cb 94 18 f6 1d a6 32 1e 56 a4 f3 49 b9 dd 0a 02 e2 66 30 da ec 96 f0 40 b8 7b 42 1a 73 e4 8a 57 3b b9 da 09 1c fc 2f 0a ed fd 14 fe e5 ca 4a 3f 19 78 8a 98 c4 97 46 29 46 ee 86 20 62 1f a6 4f 6d e7 fa 8b 9c e7 4e 10 4d 5e ac 06 86 2f b1 c5 e6 41 25 49 e5 2f 37 15 ed 3d cb 35 4e bc 1a db 31 0d f2 06 7d ee 7c 47 3b 51 cf ec ac fd c8 31 fa 12 97 28 56 85 23 d4 f2 b2 15 28 64 0b 44 9a 86 72 5c 18 38 0b 62 1b 29 29 64 42 bf a0 d6 d8 98 de 12 a5 09 7c b1 0c 33 9c 5c e0 36 04 a2 18 a5 eb 08 9e bf 2a fc 25 2f e3 34 39 32 82 0f 84 33 14 7a 38 01 2f 1e f3 18 9f ac 17 03 bc ff 58 8a 26 3b 84 bb 0b 0b 46 ee a7 82 8a f1 d7 59 0d 38 d2 6b 90 05 12 90 76 ae 17 65 0f b5 b1 23 60 57 37 8e 84 Data Ascii: \GO<[yZPM2VIf0@{BsW;/J?xF)F bOmNM^/A%I/7=5N1}\|G;Q1(V#(dDr\8b))dB\|3\6*%/4923z8/X&;FY8kve#`W7
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: c5 37 a0 83 52 7b 59 fe 5b d3 fc 8a 0e c0 02 0e 86 fc 6c b4 8e aa 73 db 85 3a 10 6c 02 d7 14 df d6 5b 17 c4 e6 a7 40 34 5b b7 f6 03 76 5e f9 a1 d8 50 66 b7 71 37 a3 e6 1c 44 01 4f 7b 3f e7 d4 ce 54 c7 a4 45 8c 6e 3b 31 29 2f 37 e8 a0 71 55 11 92 08 5c 41 04 aa 81 d9 bd e9 ec 4b 51 b3 bd e6 7a 74 b7 a5 58 bb 73 7c 2d 66 3a 9b 93 b8 b2 6b 90 f0 46 d0 98 6f b3 f3 71 b6 36 4a 3b 17 90 40 2c 0c bd d4 8c ce 15 41 86 a3 e7 92 6d cf 6d 9d e2 7f 3f 38 26 83 74 d3 ab 0b 2a 0c 28 4a 60 6e 8a 2b 05 f9 cd 61 8e e4 62 e0 57 be 30 08 31 b1 d4 e0 8d eb 93 a0 b1 f5 53 b2 f8 f2 4b 0e f4 a2 ff 6f a2 ed 31 8f 6b 7d 77 e1 4f bd 06 8d b9 63 d4 1b 03 71 78 1f 6d cc 8b 9a 52 24 23 34 a9 ab 5b 5e a8 26 54 07 47 5e 2b 92 b4 73 6f 76 a3 83 9d 14 52 d9 bd 42 93 88 79 a2 b5 72 06 c0 Data Ascii: 7R{Y[ls:l[@4[v^Pfq7DO{?TEn;1)/7qU\AKQztXs\|-f:kFoq6J;@,Amm?8&t*(J`n+abW01SKo1k}wOcqxmR$#4[^&TG^+sovRByr
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 00 a4 8c cf e8 de a1 6a f5 3b f1 e6 e7 fe c5 09 cd 12 e6 b2 b7 e6 31 7c 1c 54 85 0d d4 ac 20 df ad 02 6c 99 07 bc 3a 44 b7 02 e3 18 3a 0f ea e5 53 85 1e 27 80 27 d6 5a 17 e7 1d a9 02 e7 55 e1 77 3b eb cc 51 41 98 f7 51 09 7d 4b 9f 67 2d 8a 4a ea cc 10 e3 0a a7 93 65 11 2d 57 a5 dd 2c 81 02 45 5f 31 a0 ab 62 17 25 92 69 55 1a 56 33 db 59 eb 90 7c 36 c1 f5 20 5e a8 a7 60 a8 30 67 dd 43 ba dc 5a 21 3b 39 67 48 5b ad d8 7d 97 78 a7 b4 b2 34 e4 8e d2 18 ac 9a d7 39 24 af ad 0a 20 fd ca d4 4b 2c 6b b8 d9 a9 a3 37 08 21 18 30 99 3e 84 a8 54 55 72 b3 79 e8 89 72 51 6b 06 a3 43 9e ab 05 4c 81 02 5d 81 c2 cc 1d 33 ea 73 5f c1 c5 ba aa b9 8e 63 c8 8b 49 21 21 b1 95 8c 17 4b ad 24 cf f5 d6 69 d4 60 81 31 d4 2e 4c ca 45 c8 92 8e 0a 01 7b 43 28 d4 b4 ee a5 e7 64 cf 67 Data Ascii: j;1\|T l:D:S''ZUw;QAQ}Kg-Je-W,E_1b%iUV3Y\|6 ^`0gCZ!;9gH[}x49$ K,k7!0>TUryrQkCL]3s_cI!!K$i`1.LE{C(dg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49907	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:35 UTC	1106	OUT	GET /Nz4AvRKB-2Ei330Du2EiuF6D3nAi5o_jARnmHnrtZ8C2IruknKUWrvKGuWzv1ol5ZfCgh0yBclU=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:35 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 98700 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:18:11 GMT Expires: Fri, 25 Oct 2024 19:18:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 12744 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:35 UTC	843	IN	Data Raw: 52 49 46 46 84 81 01 00 57 45 42 50 56 50 38 4c 78 81 01 00 2f 87 c2 5a 10 8d 40 6c db 48 92 04 ab aa bb a7 e1 ab fc 03 9e 9e da ef 02 88 e8 ff 04 e8 b7 b3 91 9f 88 08 cd cc 88 83 32 df 16 37 29 4e 76 e6 f5 8e d8 5b 00 12 07 db 8e cc 37 80 b1 ed 1b 70 03 02 5a 61 5b 35 d6 62 59 f9 24 73 11 d1 b3 57 d5 aa f2 da 0b c4 3e 00 c4 4b c3 55 ae aa 1a a3 10 77 49 fe 8b 57 a0 ca 2e 57 0d 97 01 db ba b9 80 96 00 bb 6a 55 d9 46 67 4b b6 a5 56 1c 6c 63 1b a4 9c 53 aa 65 dd 93 a7 b8 01 36 98 c3 b5 d6 45 84 72 d8 ab c1 b3 31 07 e5 5c 03 f6 00 f0 3b 1e 25 69 4a f6 18 c6 d0 c8 17 7c b8 8f 31 f6 2e 5d 0d 4d b7 e8 2d 29 15 0d d1 de 0d c9 0a 01 9d 94 9b 8a 4e ce 88 88 d6 07 a7 be e6 9f 9f c8 75 b6 ed 79 9a 4b bf 7e a5 17 1b 38 00 a6 54 ca af 4c 39 ff 31 53 1d db 2b 7a e7 95 Data Ascii: RIFFWEBPVP8Lx/Z@lH27)Nv[7pZa[5bY$sW>KUwIW.WjUFgKVlcSe6Er1\;%iJ\|1.]M-)NuyK~8TL91S+z
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 5c b8 f0 5a 7d e2 7a 22 2b e8 43 75 5d 26 10 8d 48 52 c8 84 24 29 52 61 24 14 2d b4 53 e2 d4 4f d6 8e 9a 68 ee 03 57 fd ab 68 fc 4c d5 f2 5a f5 e7 50 50 50 ae 59 2b 6e 00 ff 42 0a 29 24 49 6a 07 54 56 02 7f fc a1 0b 4f 22 4c c7 f7 db 8f df 7f de f5 0e b1 9f 55 b5 2a bb 0c 94 c2 ac 45 34 e5 a5 71 9f aa 0c ab be af 22 a0 85 a2 0b 4f 7a 98 09 91 45 16 bb 9e d7 97 65 34 ca d7 3c cb 59 c6 78 b9 6c 70 20 af c5 eb 44 7b de 18 fe d2 97 8a 40 20 a0 af d8 8e 6d 46 a8 cf ee 77 8d 57 7f 5c 53 be 7f 28 80 bc ab 0b e5 32 71 ec f9 c4 a3 69 f7 8e e5 4c eb ab f5 55 28 b1 08 9d d2 f5 6b 6f 5f 4d 70 49 ac a4 e6 53 01 b8 2f a5 66 11 70 2b f1 c5 cb 4a 66 29 ff 87 47 20 40 2d 90 db 48 72 24 45 55 66 fa 6f 74 57 8b dd 13 ef 88 98 00 7e 72 75 ad d0 e0 ed 93 aa 2a aa 98 cd fb 9a Data Ascii: \Z}z"+Cu]&HR$)Ra$-SOhWhLZPPPY+nB)$IjTVO"LUE4q"OzEe4<Yxlp D{@ mFwW\S(2qiLU(ko_MpIS/fp+Jf)G @-Hr$EUfotW~ru
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 13 52 57 49 66 3b 0c 0d 15 92 87 4a 1a ba 66 77 98 1b b2 17 61 18 1e 53 2c 72 16 69 a9 da 1c 86 5c 64 99 87 67 8e a1 a1 d2 4c 4d d7 d0 50 69 4e 4b d9 8b 18 66 4a 4b c3 8c 77 d1 30 69 0e c3 d0 b5 54 b5 48 c3 86 af 6d db aa 6d db 8e 4a a9 ad 8f b9 f6 b9 24 66 66 66 b9 2c 57 9f c4 ec 33 eb 37 24 8b 6c c6 88 f0 98 f1 d1 bd e7 ac 3d c7 68 55 13 b5 6d c7 6d db ce 83 f7 fb ff de fb 98 5e d9 66 6c db b6 4a 29 d9 b6 9d d4 54 b5 6d db 2c d9 76 b2 ad e5 a9 d1 fb ff 7d ef 13 13 c0 0b 03 80 f5 77 a3 29 ef fb fe ec ef 72 fc 9c 24 27 c9 89 35 52 4b 65 da 54 c7 aa e3 3e db 99 cf 5d c7 3e 77 77 77 1d 77 97 fa 78 fb 8d b4 33 a9 37 ae 27 47 ff e7 9c bf ff ec b5 8b 4e 3b 9b e4 9b ee ce dd bb bb 58 70 b7 e0 ee b0 d6 e7 e9 e0 72 47 71 ce e5 c1 21 38 bd fc e3 10 dc 25 38 ac dc Data Ascii: RWIf;JfwaS,ri\dgLMPiNKfJKw0iTHmmJ$fff,W37$l=hUmm^flJ)Tm,v}w)r$'5RKeT>]>wwwwx37'GN;XprGq!8%8
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 78 0e 2f f5 12 b7 07 c3 4f d5 3e c9 45 4b f9 28 70 aa 2b b8 c4 ad d9 f1 5e db 3e e9 ed 29 03 cb 00 0c b9 fc 0f 67 7e a8 05 22 8c 5b 92 b2 71 f7 8a 16 2d 42 a3 3c 66 d3 15 bf 6e 9f 19 be 6b f7 ba fb 84 57 33 81 16 b6 45 66 ec d2 7f bf d8 f0 6a 71 21 6a 6e 0f 07 70 79 1d d2 15 11 38 19 a3 84 de 96 4c 03 d0 45 73 b3 ea e4 e1 67 3d 73 f0 d9 fb 70 34 ba 8e 7d 16 24 d0 12 4b 0a 60 29 5d 86 0d 2e f7 cf 44 c9 9f fd 0d 69 b9 bc 4d 31 d3 d5 b1 0b a3 a4 22 20 ad 48 4c 64 ba 59 d5 c2 45 83 cf 05 e5 d9 fa 70 3c e1 5c d1 8e 16 7b 1f 39 3c dc e2 42 17 87 e7 5c 7c b6 0f 71 dc 0c 53 d0 a9 a8 61 42 79 ed a7 1d 16 8a 29 92 53 2f f7 bb d1 b3 b1 95 07 f0 ee 68 d8 16 91 44 27 5a f4 96 6f 25 da 71 d1 ab fd 5b 0f 3c 5e eb b8 17 e2 c3 97 2f 32 ca fd 35 52 23 0c c4 92 90 7f 6b ce Data Ascii: x/O>EK(p+^>)g~"[q-B<fnkW3Efjq!jnpy8LEsg=sp4}$K`)].DiM1" HLdYEp<\{9<B\\|qSaBy)S/hD'Zo%q[<^/25R#k
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: d0 1d 17 78 fa c4 00 44 34 b4 69 f2 01 bd f0 ea e7 7c 06 22 05 27 e5 a7 20 b6 94 ca da 38 08 5f b7 6a 32 04 4e 2c 2d 85 4a 56 7a 85 21 a2 e7 c3 d5 a8 ce 36 7b 4f 08 04 56 44 06 c3 03 44 23 2e 66 d9 99 a6 71 c3 91 37 ec a7 a3 32 ee bf f2 ce e6 c3 67 c5 3b 97 a9 8c 08 0d 8e be c9 91 71 a7 73 41 ff 5d d5 04 d5 d2 13 45 f0 81 6b 58 f1 fe dd d7 d9 0c b4 d2 6c 6c 02 b3 69 d1 15 f5 93 02 71 32 d0 e5 33 bb de cb 35 1d 98 30 c6 aa ae cf 93 eb 07 c4 18 14 cf 20 eb 5a 4e 3b 4f 1a c0 cd 2f 88 e0 c3 8c fe 27 ec 18 91 d0 8b 01 50 38 e7 c3 52 3e 4d d7 d3 46 96 01 84 f6 67 5c 70 55 37 e2 64 56 a6 ed cb 2b 9c 6f 8e b6 5d 7e 56 8a a6 b5 77 c8 38 88 1e b2 84 93 ab d7 27 3a 59 4c 50 87 82 ff f7 bb df 7c f4 8a 23 e8 bb 36 ca 9b e5 b0 6e 05 b5 4b ce 66 bb 1b 1b 0e 2d 7c 5f 96 Data Ascii: xD4i\|"' 8_j2N,-JVz!6{OVDD#.fq72g;qsA]EkXlliq2350 ZN;O/'P8R>MFg\pU7dV+o]~Vw8':YLP\|#6nKf-\|_
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 66 4d a3 92 e1 74 c0 78 1d 8f b8 92 dc 51 d1 62 37 b9 a7 1b f2 d1 f9 5f 02 38 49 4e b2 55 02 65 a9 0a 38 29 5f a5 23 c7 17 db 3e 7c a2 e7 2f 16 3b c4 0c 9a b9 e0 e8 fa ba bb 2b 97 3a ce 78 4d 1b 81 86 b6 ee 30 25 05 c2 d3 0d c3 55 85 c2 59 7c 05 8d 42 23 10 35 65 a2 64 1f 5e b4 5e bc 65 cb 72 6e d1 c3 cd e9 7d 27 cc e2 3a 6c 52 1d 33 90 cd 7d ba 85 9a f6 aa 95 a6 58 59 5b 6e f7 c0 6d 5d fd fe 89 fb ff 5b 01 ef b9 19 fe 76 0f 3c 84 91 47 25 38 1b 15 c9 aa b7 9a 09 2d 57 b5 ac 1e 26 5b 7e 07 c9 68 98 ad 50 e4 62 6a c8 d7 f5 97 54 d6 71 e1 e6 72 fe cd 89 19 62 0a 92 d8 71 c5 57 9d e2 5a 59 de f4 00 5f de 60 b5 0b c4 48 2e ee 12 26 bf 19 a5 19 14 7a 0a 03 7a 46 4f 98 8e a7 44 0c 51 da f4 bf 92 88 17 71 3f bd da 4b 6e 63 fa c5 9b dd 7f b7 7d 38 ed ea 99 68 3e Data Ascii: fMtxQb7_8INUe8)_#>\|/;+:xM0%UY\|B#5ed^^ern}':lR3}XY[nm][v<G%8-W&[~hPbjTqrbqWZY_`H.&zzFODQq?Knc}8h>
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 68 81 a5 d4 10 11 a5 c7 05 2c 4f 26 aa 1a 13 33 cd 2e ce 7d b1 61 31 aa 0e 32 4a b8 36 43 87 c6 28 72 bb 1f f8 45 0e 29 ff 28 f5 c0 e8 1e 70 a5 a0 e6 8f f6 f3 3b 4a f6 08 c7 2e f8 66 8b f8 93 c4 22 20 12 29 21 da fb 7f a7 e2 89 8c e7 41 ef 1c 94 32 e3 98 1b ca 1e 34 29 e5 59 be ff 51 cf 6e 1f de 83 9d 4e 7d 60 7f 87 b1 be af 66 94 11 4f a7 27 ce e4 1f b0 7a 55 c2 b4 ef 3d a9 64 93 4d 0f 78 08 a1 90 4c 41 54 58 c6 8f cf b6 b5 71 ab 59 82 68 ed dd d4 5d 42 25 26 da 78 3a 90 30 24 bc ae 43 4f e7 66 05 a0 51 7b 6e f8 ad c4 b3 6d 28 37 46 46 1d 70 45 b2 9a 7b fe ea c5 35 46 14 15 9d 16 ec 17 91 c5 28 b4 9c 52 29 7e 06 98 61 27 f0 1e be 1b 58 d4 4a b2 38 25 ac e4 90 b4 59 c1 05 3c ef 5f e4 dd 54 96 83 7c e6 53 a7 38 22 6f a9 2c 8d 75 f9 c3 19 c0 dc 68 9a 33 29 Data Ascii: h,O&3.}a12J6C(rE)(p;J.f" )!A24)YQnN}`fO'zU=dMxLATXqYh]B%&x:0$COfQ{nm(7FFpE{5F(R)~a'XJ8%Y<_T\|S8"o,uh3)
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: a6 74 d9 d3 e2 02 b4 dc 53 b8 06 d0 23 3d ad 84 01 27 2c 3e 11 5a 2b c0 c2 40 48 6e 21 dc 2c e9 12 9e 68 a2 60 53 75 8a 12 47 58 64 d3 ab 7c 91 7b 70 90 8f 78 f6 57 e8 b4 ea cd 15 93 a7 85 08 37 dc 7e 03 9c 35 ad b1 d1 c9 c4 a1 1a 66 32 40 4a 64 c4 ef f5 1d 16 03 da 5e 3c 9f 87 6a ef 4a 44 80 e6 89 1d 72 50 8c c2 4a 78 a9 f7 67 44 ba ab 00 a2 81 eb ee 9b 37 ca 53 46 31 16 c6 19 e3 00 a2 06 12 80 ca 6a 7f a2 47 cb f3 f1 96 7b ec f7 5c 5f dd 39 49 1c 3b a9 ac 3c da 1d ab 1b cb 2d 29 4e 87 60 c3 44 5c 74 4d 44 db de 9e e2 ed 43 41 b7 b2 ab dd b7 52 f5 76 18 b5 61 77 74 ab c3 f3 b5 37 16 62 bb df ad 7e bb db 07 78 70 64 ca 09 e0 9a 57 e1 6e bd 0e 36 ed 88 4d ed 7f 72 cb 6d 3f 79 d6 9a 94 5c f0 27 d4 4b 31 cb 60 22 3c ce dd 91 70 0c 66 28 c8 24 9b 09 cc ee be Data Ascii: tS#=',>Z+@Hn!,h`SuGXd\|{pxW7~5f2@Jd^<jJDrPJxgD7SF1jG{\_9I;<-)N`D\tMDCARvawt7b~xpdWn6Mrm?y\'K1`"<pf($
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: d4 1c 86 e4 b4 6f d7 f2 d5 a2 f0 0e 2b b7 53 84 e0 40 69 41 7a 19 dd e5 ab db 37 7d 7e ef 8d c7 33 5b a6 fc 77 90 94 30 4a 09 01 15 6a 8b 2e 1a 08 7c 20 57 31 a9 57 66 b8 a3 15 98 36 70 1d fd 5d 63 48 0c 00 03 53 7d 99 b8 80 72 e0 34 e8 3a f1 4d 32 26 c4 8e b1 c4 89 5f ef 29 6f e2 54 5c 2d 75 be da 51 cd dd 89 82 04 00 5d ed ed 2c e0 10 f3 16 7e 69 52 aa 73 9e 92 a8 81 bd 55 ac 82 94 a1 c9 98 7a 1a 85 c9 21 b5 66 fe bb 5b 35 89 e5 b4 d8 f4 eb e7 bd 7e ed 01 39 96 45 4b f4 bb ed ba 55 16 b4 60 c0 50 ca 32 f3 e4 bf 72 aa 94 64 fc 25 d5 92 39 9e 02 d4 32 6d 2c 49 d8 24 a1 4c 83 92 03 34 4a 56 ab 59 0b 2f 58 7d c5 8b e7 b3 ab 9b 9a 85 b0 c6 fd 64 74 b2 9b 34 a6 1c 12 04 66 1c d9 d6 41 8d 93 dc 02 03 27 99 49 2e 89 a4 2f 82 72 74 d7 ab 8d dd 7e 5c be 2c e3 e3 Data Ascii: o+S@iAz7}~3[w0Jj.\| W1Wf6p]cHS}r4:M2&_)oT\-uQ],~iRsUz!f[5~9EKU`P2rd%92m,I$L4JVY/X}dt4fA'I./rt~\,
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 27 cf ec 32 1d 93 89 43 a9 21 46 d1 fa da a2 5f ad 5e bf 36 d2 6b 75 74 34 33 c9 1a 24 d7 e3 8e 40 a1 65 b0 9d ec 2d 99 52 fe f5 79 93 51 d7 22 64 8c 00 d4 d2 40 07 9f d0 f0 91 53 29 93 8c 57 64 ed e5 73 f3 1c c3 92 63 16 82 90 39 6c 86 ed fe 06 4d 1c be 65 2c 43 cf 2e cf 32 66 d2 61 70 ba 2c ef 6a 5c 24 f7 85 9a 45 45 de 2b a1 01 a9 a5 2c 1c db 72 a2 2d e7 d4 af d6 a4 52 09 96 1e f4 8d 27 e1 88 a9 bc b5 14 54 21 81 02 45 9e 19 41 ba 08 9d 6c 5d 3a 6f 1e 70 8a 08 aa 4e ae 53 c0 aa 11 b1 21 b1 58 08 0b 80 30 2b 56 50 9a 5d 9c ca 0f 8d 01 18 ca 4d d6 94 fd 7c 85 fb 09 a9 d2 64 c8 dc 5f 04 1e 1a bc ec a7 75 bd 2a 49 36 87 88 b8 c8 8a 00 40 9c 45 f6 92 ed c3 ab 5f be f2 5d 11 42 70 b9 5e 2e aa dd fc 50 09 32 e5 53 d8 5c 20 36 a2 10 07 20 87 ba 6f 61 ad b5 e8 Data Ascii: '2C!F_^6kut43$@e-RyQ"d@S)Wdsc9lMe,C.2fap,j\$EE+,r-R'T!EAl]:opNS!X0+VP]M\|d_u*I6@E_]Bp^.P2S\ 6 oa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49908	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:35 UTC	537	OUT	GET /NJ5uQ6WWHUGny_oHS_2hjNPaplNPw_3CXvl7AWtkVOwHgo9GNwvi3a8y7wyvvIxacWZZO2Vj9Q=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:35 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 60180 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:23:54 GMT Expires: Fri, 25 Oct 2024 19:23:54 GMT Cache-Control: public, max-age=86400, no-transform Age: 12401 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:35 UTC	843	IN	Data Raw: 52 49 46 46 0c eb 00 00 57 45 42 50 56 50 38 4c ff ea 00 00 2f 87 c2 5a 00 8d 40 6c db 48 92 04 a9 bc 6f dd e4 1f 70 d7 f4 7e 17 40 44 ff 27 80 ff b2 e9 5f ba 1e 3d 1c 67 01 e4 e5 02 9c e6 bb 4a 81 3b 45 55 d5 9f c4 1d 95 a2 3b 4b 32 f4 2d 9e 42 27 8b 76 77 03 83 21 40 ba 37 34 09 d0 0d 0c 09 1a 15 a0 4c 94 16 1f 20 02 5c 97 36 85 4a 0b ae 81 02 64 4d 22 d0 4d ab 4f 85 12 6e 8b b4 34 a7 49 28 04 bd 86 84 f9 3e b1 1e 4b 9b 44 6c d2 0c d9 60 bf 35 09 25 0a 90 38 10 5e 6e 4d 42 a8 5a 28 5d 8e 86 e3 d8 ab 21 cd da c0 6d d8 3f 06 d4 84 59 80 37 34 05 79 a1 5e d0 89 c5 3b e1 c5 7a 9c 51 67 82 32 7b 72 a9 da d8 54 aa 4e 92 a1 ea 3d a1 78 f1 f6 78 d7 7f 38 91 e4 da da db 36 27 5d 85 20 5e 7a 19 71 94 de f6 bf 1a 77 7b 14 fc c8 e8 83 7b 21 29 a5 2c 40 96 aa 6d 6f Data Ascii: RIFFWEBPVP8L/Z@lHop~@D'_=gJ;EU;K2-B'vw!@74L \6JdM"MOn4I(>KDl`5%8^nMBZ(]!m?Y74y^;zQg2{rTN=xx86'] ^zqw{{!),@mo
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 94 4e fd 34 d2 2b 19 d4 80 48 5f a5 a0 34 c5 06 2f 6e ac d8 dd 56 c1 23 40 81 98 4a 28 bd 7c d4 bb d2 06 8b 84 12 4a 28 11 fd 54 e9 a6 37 cb f9 cd 72 7a cf dc 4d 95 4e 64 ed 56 0b 2e e5 e2 ab 00 00 40 c1 23 96 00 82 82 02 3c 33 62 5f ef 68 e0 23 9f 34 53 ba b9 1b 2b bd 12 ea e7 4a af f4 1a ee 34 b4 24 63 b0 20 93 01 20 5b 57 70 d9 57 9f a5 00 46 29 00 00 20 76 72 e7 2e 37 35 6e 3e d3 c4 cf f8 4c 73 37 0d 32 99 9b 9b 0c c8 3b 73 ef cc 0d 44 ea 53 5c ea ab ac a2 1e 90 b2 8e ac ec 68 4a 35 5f de 8d 60 92 82 82 82 7c ce 96 37 4a 99 00 00 91 b2 9e 8c 97 93 71 9c 8c 45 1b 70 37 76 32 c5 4d d3 14 19 00 0a 6e 80 ad c6 95 79 ce cd e9 b8 9e 46 25 83 c9 93 16 b0 4d 6a ec 9a 07 19 4c f6 76 1a 3b 18 61 68 bf 82 ad 72 53 f0 06 66 c6 0e 7a fb 17 3b e8 ed 07 f1 ae e2 a4 Data Ascii: N4+H_4/nV#@J(\|J(T7rzMNdV.@#<3b_h#4S+J4$c [WpWF) vr.75n>Ls72;sDS\hJ5_`\|7JqEp7v2MnyF%MjLv;ahrSfz;
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 05 00 30 1b 5b 48 9c a3 05 4b da 21 0e fd c1 24 96 c2 49 b0 95 34 ca 73 b6 22 e2 20 c1 49 35 c5 42 89 38 87 6b 30 e1 6e 2e c4 a2 af fc d8 39 5c 2c ed e6 0a 80 92 a1 4d 2f 97 3b 1d 1a ae c7 0d 35 1c c8 45 82 ac ab 0a 10 12 f0 a9 30 c9 72 6b 00 d5 df 54 89 a5 e7 70 b1 b2 31 00 f7 4d 6e 83 4e d4 45 8b 25 b8 c3 05 04 65 7d a8 71 3b dd aa ac 0f ee 4b e0 97 88 25 80 c7 5d 55 ee f6 7d ec 9c ae 1f f8 42 a8 7f b2 4f 91 93 45 1f d0 4a c0 5a 23 04 1f ce 79 1b 6a d7 74 31 a3 60 ce 85 0a 41 1f ce f9 1b 6e ed 08 c0 44 5c 03 6e 3b 07 90 a5 8d 05 30 88 dc f0 4e 9c 03 38 30 f8 e4 0b b5 fb a9 1c 6e 6a a4 0c ce 09 9c 64 c4 aa 06 e6 86 8c 3a 5f cd e1 d6 73 02 27 5b 20 30 0e 2a 70 0e 20 be 10 79 0f 0a 07 3b fe 45 50 fc 35 f5 f0 f9 16 ad 1c 6f 24 ae 21 f1 7e b5 58 f4 1c 25 86 Data Ascii: 0[HK!$I4s" I5B8k0n.9\,M/;5E0rkTp1MnNE%e}q;K%]U}BOEJZ#yjt1`AnD\n;0N80njd:_s'[ 0*p y;EP5o$!~X%
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: e9 a6 46 2d 1a af 15 ee fd 1a 0f ba 12 89 7b 3e 00 00 ee db 3b ec b1 f1 0d c0 88 00 ca 31 76 cc a5 ed 54 c0 14 58 54 c0 bf 44 d7 50 78 0f 63 53 17 fa 45 d0 47 4a 22 63 e8 fc d6 b7 f9 97 08 9a 3b 1d 0e 32 10 c3 fd bc b9 69 b5 74 3d 35 51 8f 4a 35 8f e4 5a 10 3b 41 6c 05 e6 4d 9a 19 45 ab 75 71 84 20 55 84 53 25 be 59 f6 af bc 88 51 d7 db 59 71 71 54 54 1e 68 c2 61 46 f5 cc bc de af a5 8d 6e 32 e1 39 00 00 62 7d 6a c7 d0 d9 68 27 3e a0 70 02 89 02 a4 ce 32 ca a5 48 e9 9d f5 e7 1f b0 e6 ab e4 7d 5e cf 43 2f c3 48 4b 89 78 ab 32 53 50 82 4d 0c da 70 88 b1 fc c7 fb 03 86 38 8b 06 cb 26 83 5c 52 73 9d 82 33 1a ef d6 f7 13 56 22 89 5c c2 75 90 35 c1 a7 09 38 5e d7 71 59 eb d0 96 11 3b 0f 63 93 76 e0 54 30 83 56 bd e3 55 75 e7 89 69 33 9b c7 18 11 24 44 15 04 4a Data Ascii: F-{>;1vTXTDPxcSEGJ"c;2it=5QJ5Z;AlMEuq US%YQYqqTThaFn29b}jh'>p2H}^C/HKx2SPMp8&\Rs3V"\u58^qY;cvT0VUui3$DJ
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: cf 49 c9 b3 65 4f 79 e5 6d 5a 53 db 90 ff bd c6 ce a4 2a 85 15 8a dc 94 a4 d1 24 34 90 27 92 45 2a 49 15 33 e2 72 b0 ce 01 00 e8 cb bc 79 b1 48 0c 43 a3 30 8b 0f b3 28 1b 02 ad a4 78 13 8b 55 56 20 0c aa 87 71 83 cc 2f 90 fd ac a6 29 66 2f 90 a8 8f d8 79 08 9b b4 af f3 c2 0c 5a 8e b2 86 4d 1e 7e df 77 da e8 72 42 83 fb 93 5e da 81 46 c9 99 90 db 99 3b 4b ca 98 99 1b f9 ed 67 dc 3e 59 b0 75 91 a7 a7 5d f3 86 04 1e 08 f5 dd 10 6d 7f a3 92 0d 19 73 89 66 34 05 1f a7 d8 cb 2c 1b 74 fe 0b 25 9c 94 e8 38 5f 77 72 b8 59 e4 07 e9 e9 4e 5a ff 83 3c 3d 7d 32 7d 21 11 e2 45 9c 1b ad bc 49 89 32 a4 94 a5 0e e0 82 27 45 ae 04 5c 42 d6 58 23 41 1a 76 28 ef 37 14 90 f9 30 15 e6 39 e3 e8 1a 97 a4 08 d1 48 74 90 4d 8d f6 66 94 50 52 57 2f 05 40 41 b7 b5 cc 13 8f c6 b3 dd Data Ascii: IeOymZS$4'EI3ryHC0(xUV q/)f/yZM~wrB^F;Kg>Yu]msf4,t%8_wrYNZ<=}2}!EI2'E\BX#Av(709HtMfPRW/@A
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: fc 4f ba 29 c6 b9 f5 17 da 70 b2 c6 2d 81 3c 5b 1b c0 f3 9e 5f 09 3c f5 f2 77 f6 7b 73 c5 8e f8 d4 ad 75 36 38 98 6e 90 64 73 9a 8d a1 97 5e f4 90 e3 bf 1f b8 4b cc 3d 21 4e f9 b0 65 eb 45 8a 3c bb 78 fc e8 95 88 d2 05 56 98 cf 9d 02 d8 fd dd ff 39 d0 4e f4 b6 ee 10 49 45 ca 06 b7 9b f2 4e fb a4 2b 36 b4 71 51 d2 2d 8a ba 8d cc bd 9d 94 e9 b5 f4 bd dd 89 9b cf 3b f0 c5 b7 f3 d4 48 f3 8b 5a 77 f7 84 86 cd 48 2e 85 e9 72 20 17 54 5c 50 6a 43 ae 35 2f ab 54 da c1 2c 7b cf f2 79 5e 64 b4 a5 c1 56 7a 9d 6b 8a 23 75 71 50 58 1e 64 95 37 46 ae fe 18 5f ce 86 9e 46 b2 b9 f1 c1 08 91 24 12 a4 d1 60 c0 66 02 c5 aa 00 ec fe 74 65 50 cb 2c 23 15 e3 e4 3e 55 a1 fd 22 22 3e ae 90 e2 33 7c da 8b e0 61 3f 4b df 37 b9 82 71 ad eb 91 fa 90 3f 9f f6 fd fa 34 e2 e5 60 ec d9 Data Ascii: O)p-<[_<w{su68nds^K=!NeE<xV9NIEN+6qQ-;HZwH.r T\PjC5/T,{y^dVzk#uqPXd7F_F$`fteP,#>U"">3\|a?K7q?4`
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 0e fd 0e 64 c1 a5 62 6c 42 25 f4 05 45 b0 dd 7b cf 22 96 58 59 29 fe 5a 65 07 3f 75 99 5f 00 d4 e8 06 d0 a0 11 ed 9e fa 0b 07 57 6b 7b ff b5 17 47 71 3f ab 00 00 45 9b eb 8f e1 ae a7 9b 5c e5 2b 8d 15 45 bc a4 f4 d6 d4 50 68 2c f9 bb ea 44 4e 48 56 22 35 93 26 a6 a7 bc be 29 9e 1c da ef ef dc bc 20 dc 2e 85 b2 13 c6 65 15 17 54 ac cb 59 c8 59 27 f0 22 c2 3b 27 6c 5c 1c a7 92 08 00 c0 21 d2 e6 c6 7a 15 26 d8 cb 79 01 b1 4c 80 a8 10 8f 9a b9 55 9e 72 30 d8 f0 81 ba da 46 69 b4 3b 6d 0b e0 28 cf bf 75 76 44 95 71 22 db e8 07 44 40 0f 40 cc 32 ca 8a 95 f6 39 24 cf 04 71 4b 05 68 08 00 09 0e 63 d5 fb a9 77 6f 94 7e ef 13 fe da 23 4e 27 00 50 0c 87 87 7f 8b b5 4e 96 29 60 3d a9 4b 9f 59 66 82 7f e1 ef 16 e4 64 39 99 62 56 64 4c cc a8 d4 17 8c 1b 00 00 ae 98 f6 Data Ascii: dblB%E{"XY)Ze?u_Wk{Gq?E\+EPh,DNHV"5&) .eTYY'";'l\!z&yLUr0Fi;m(uvDq"D@@29$qKhcwo~#N'PN)`=KYfd9bVdL
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 7c 1a 01 2b 1c 14 0a b2 83 08 2e cc cf d3 fc 5d a6 6f 4f af 3d ff 4b 00 b0 23 f4 84 be d0 0c 42 81 a7 e7 b2 08 00 a4 01 ce b1 54 a6 55 54 89 3b 00 9e af 5e 26 47 c8 2b 26 fc b8 56 fb cd 6b 00 fa bb 31 98 a6 fc bb 40 70 df 63 ff f9 d9 2a 8f 76 26 ab 10 52 a0 04 00 70 9e c0 93 72 19 71 c2 41 aa 5d bb e0 b4 17 a4 3c 10 4e 32 df ab 8f c6 ba 7e 04 35 fe 34 4e 95 4d d6 f7 dd 77 d2 0d 10 16 1f 32 9b 90 30 9b c9 27 f0 e8 0f 36 63 10 65 28 8a 8e fb da 5b d0 0a 56 02 80 5f 2d 92 ab 15 8f 9d 52 85 48 47 fc e5 ae a1 9d 2f cf 2a 98 59 07 af fd 71 d7 ec 02 00 cf 81 3e d0 02 c2 c0 8a aa 19 80 a6 fb 09 2c f4 59 3a e3 71 05 50 0c fe 32 98 63 9f 6d db fd 89 05 d6 73 d7 2a 87 78 93 13 ac a4 88 2b 25 e7 a4 d8 4f 0d 01 f0 90 53 1c e1 a6 c2 ed 37 80 73 65 8b 91 ad 76 22 23 ce Data Ascii: \|+.]oO=K#BTUT;^&G+&Vk1@pcv&RprqA]<N2~54NMw20'6ce([V_-RHG/Yq>,Y:qP2cms*x+%OS7sev"#
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 2d de e0 b0 f8 24 05 d3 af fb 94 ff ea 80 ef 03 a0 4b 9c 36 75 b7 35 6e b3 96 52 a4 d0 79 4d d9 7f ce 53 f0 80 5e 16 8b 50 1b 74 9a fa f4 aa 75 79 60 d5 ee 10 0c b5 fa dc d2 78 9f 2e 9c eb 2e 9d ae 78 3f ee 00 e2 2c 4a 67 73 6b 56 ad 6c 3e 46 20 07 75 47 09 2a 78 be 66 02 88 b0 e7 e5 93 d9 3d df 6a c2 63 a4 7c d3 72 55 76 27 0e ab 75 93 c2 5b d4 18 14 43 c9 3d 61 fa ad 1c a7 e6 70 6e d0 c8 27 fc 93 6f c3 c8 2b 3f 36 fe f2 af 60 95 b2 18 b3 0c 85 92 c9 33 8e ba 64 e8 ec e1 08 5d e1 00 00 28 98 0b e0 b1 f9 e1 5f a9 b1 6b 1e e0 d6 12 31 af 72 7c 8f 83 17 2f 9d ba 70 19 c0 af df 00 d6 83 4e 10 0b b6 57 0a cf 81 7f 11 0a 2d c1 e2 5a 66 01 a2 96 af a8 c2 8c c8 1d 35 99 4d a6 dc 0a 10 d9 55 40 d6 e7 00 94 ef 7a 7a 42 cf 07 cb 64 9d 75 28 63 b3 b5 d6 ee a8 c0 13 Data Ascii: -$K6u5nRyMS^Ptuy`x..x?,JgskVl>F uG*xf=jc\|rUv'u[C=apn'o+?6`3d](_k1r\|/pNW-Zf5MU@zzBdu(c
2024-10-24 22:50:35 UTC	1378	IN	Data Raw: 60 b1 dd 6b 74 17 80 66 5d c9 6b be 86 b7 c3 87 2e 67 ad 5f 38 c7 ec 4b a7 94 b4 17 74 6e 7a 5b ee f7 e0 ff 78 e0 85 bf 46 00 d0 bd a2 06 05 e2 08 b1 c3 f4 8d 63 e8 92 b8 2a 1d 78 9e f9 ec 84 e6 bc 90 51 cc a6 0b d5 66 96 e7 3c b6 3f f2 d3 91 f5 e1 c5 62 d5 1d 6b a0 1d 89 5b 10 48 2f 98 d4 63 64 9f 17 ad 06 00 1e 09 bd e1 8f 7d d0 f6 b8 2c 98 07 ff 6c 7f 18 0b 00 7a 5f a7 ef 3d da ef d8 68 4a e4 3c 24 f9 9d ac ca 07 00 00 ed 29 a8 58 f3 27 83 38 b0 28 2f 0f 00 00 9b 8f 31 a1 23 cc 7d b7 f5 8e de 0f c9 a8 5b 92 71 bd 44 d5 e1 b8 c0 61 99 7f 41 4b 0b 95 21 e6 de ac d7 7c 71 78 da 7f 5a f0 24 ec b4 e6 89 94 01 6e b0 0f 0d 45 d3 7a ea ff 10 9d 0c 1b 0f f5 de 98 59 01 00 b0 71 89 14 6d d4 9f 02 d8 e0 f4 14 5a c2 a1 e5 5f 55 12 3d 36 13 51 51 3e a2 97 cb 11 f2 Data Ascii: `ktf]k.g_8Ktnz[xFc*xQf<?bk[H/cd},lz_=hJ<$)X'8(/1#}[qDaAK!\|qxZ$nEzYqmZ_U=6QQ>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49909	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:35 UTC	1106	OUT	GET /jbv4-yx8rFlYHFqT7ta55EetzdvgZZM3q21E2wGFwT-5CTAv3Sf5eQTmOaMJ9mSxf-kCBbcA1QA=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:36 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 47404 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:31 GMT Expires: Fri, 25 Oct 2024 19:12:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 13084 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:36 UTC	843	IN	Data Raw: 52 49 46 46 24 b9 00 00 57 45 42 50 56 50 38 4c 18 b9 00 00 2f 87 c2 5a 00 11 87 8d 24 49 8d 7a f6 3b 18 9c 7f c0 77 e0 14 22 fa 3f 01 58 40 67 aa 4d 95 ed 06 22 02 1d 0d dd dd 5e 78 51 35 d2 ea 9a 8a eb ba 36 50 e5 66 01 9d a9 41 cd 30 96 1a 88 88 d0 c1 d0 29 79 f5 cc 48 99 a8 ef fb ae 90 c4 ae 5a 9b 05 74 4a 6d 66 2c 09 12 88 50 9c 4c 77 82 57 57 95 b4 ba aa 22 0e 67 d5 16 d8 36 b6 c9 ae b2 d4 40 84 42 84 0e 86 4e e4 8f b9 ba 42 12 fb 97 10 43 a7 6d 3f cf f3 60 30 11 8a 17 50 75 0b ac 99 19 6d b6 25 1b 03 2f d6 0f 01 9d a8 99 19 9f c1 6f 45 27 78 35 1a 98 c5 9a 99 7b ae bf 2e 15 74 a2 66 ba a7 c7 90 3d 44 9c 5e c1 6b a0 04 7d 4f d7 54 99 d7 97 e7 b1 ad 44 cd 80 21 9b ec a9 08 42 2f cf f3 d8 81 6d 0b ba 66 ea 62 4f 8e 6f 28 65 8e b6 c8 1e 22 08 7f 70 27 Data Ascii: RIFF$WEBPVP8L/Z$Iz;w"?X@gM"^xQ56PfA0)yHZtJmf,PLwWW"g6@BNBCm?`0Pum%/oE'x5{.tf=D^k}OTD!B/mfbOo(e"p'
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 1e fb 62 bb 18 42 b4 b5 71 80 91 70 91 77 a8 85 41 db 36 82 e2 f1 67 7d 77 fb 87 10 11 13 30 85 2a 67 15 6d 51 a5 51 d8 7d 85 ca f4 8a d6 1c ea 56 39 8f af a8 72 de a2 35 87 c2 a7 f5 cc a0 99 e6 11 5d e7 e5 31 63 ce ba bd 37 3c 9e ed c9 23 5c 2a 33 e3 07 16 aa e6 79 e1 96 c2 01 cd fa e1 f0 a5 99 19 1f 42 15 79 bc 7f 99 a9 4b 35 b7 59 3b 1c 4f 6d 3f 98 29 fa 79 d3 5d 5f 71 f9 dd 22 34 05 25 1f 5c 17 ba b4 94 5b 17 4d 41 df c5 4e 97 7e 45 23 9b b4 c6 42 1d a1 3f d1 4c 5e c5 f3 fa ff cf 6d 49 b2 b3 b6 df e7 9c 48 57 d5 de 83 a6 fa 2b f4 ff ff 0d de ab 4d f9 cc 88 73 b6 19 3c cf 73 22 f2 59 a6 a6 6f 0a 42 04 d4 48 dc 84 82 13 f4 b4 e1 90 90 9a 78 ef 7d 41 42 c1 07 ae 5b 72 d7 3c 68 66 1b 7d 45 41 41 ca 7b a5 5c 8d e4 02 02 e4 dd 3e 50 10 f2 2e 09 b9 9f bc 96 Data Ascii: bBqpwA6g}w0gmQQ}V9r5]1c7<#\3yByK5Y;Om?)y]_q"4%\[MAN~E#B?L^mIHW+Ms<s"YoBHx}AB[r<hf}EAA{\>P.
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 0c 1b 3b eb 10 64 1d 84 ac 05 38 4d 28 9b a4 1b 00 21 23 eb a0 93 a5 c0 ee b1 9e a3 2e 06 68 b9 d5 4f 74 c0 fd 74 d4 b7 74 df 25 46 f6 83 3d 82 86 1c 37 7d a0 8e 1e 3d 54 dd f9 f5 16 d0 67 72 df ff 89 21 aa a7 98 27 ed 96 29 8d b7 dc 05 9a 6b a0 b1 1f 3b b2 1c 41 8c 30 d7 10 82 99 05 93 9d fb a5 3f 79 b3 4c 69 59 8a 28 97 9c bf 7e 26 e9 f3 c2 8f 7f a8 ef fe 51 bd 72 dc 1f f7 fc 43 6e f6 c7 6d 1d ee 6b c8 3a 08 39 15 20 56 a5 f2 41 7d ec 9c 30 91 75 10 72 fa ec 7a 8f 68 74 65 e4 a6 8d a5 36 9a d6 17 b5 c4 14 ae 7d cc 4f c7 b8 21 fb 61 8f d0 90 e5 26 86 7c d2 de ea c1 eb 4b bb 4d e7 cb df 3b 42 41 93 96 23 bd 32 11 97 54 20 a9 82 bc 13 b2 1c 39 66 72 1c 82 e7 63 9b c0 01 26 69 cb db 16 97 36 4b 44 7d 5e 92 40 4e 33 f9 9b 7d cb f2 33 69 f7 67 aa 9f ee fa e9 Data Ascii: ;d8M(!#.hOttt%F=7}=Tgr!')k;A0?yLiY(~&QrCnmk:9 VA}0urzhte6}O!a&\|KM;BA#2T 9frc&i6KD}^@N3}3ig
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: f7 a5 6d 38 20 49 0d 88 fb 07 a2 63 fb 06 54 34 38 54 8b 95 84 98 60 20 3c 11 e3 18 26 db c7 77 4b 01 02 10 f9 3b 2f 4f a5 40 6f 4a d8 ca 8a f9 9e e1 69 3b 3e a1 21 eb 20 e4 34 64 2e 39 8d 0c b2 54 7a 28 d1 c9 2e e9 3e 79 d2 8c a5 3a b9 2d 00 2d e3 d2 0c 55 b5 8b df b1 69 ae 09 61 b0 3f 8e 4d 64 ed 02 04 10 01 ef 6d 83 36 5f b9 d0 1a ef 95 cc 77 7f e7 33 e9 b6 94 04 4f 94 07 a6 9c 2e 02 13 70 d3 22 15 30 fe 04 90 b8 2d 3f 87 0e da c4 40 98 d8 1f f7 58 07 08 10 85 72 16 96 79 39 d2 c2 12 61 85 b0 67 93 bd 08 cd 25 a7 21 e4 34 dc 17 72 1a 6e 64 2d 80 ce e6 86 c7 88 7b 8c bf 2d 04 c8 96 f1 4c 3e cb a8 5d fc fa ce 10 31 8e 79 7f ec 2c 30 d7 04 10 38 02 1c 04 20 5d d8 5a 5c db 4b e5 fa c9 ef f9 cc 0d 22 50 36 bf 38 97 05 4a aa ff d8 5e 94 0e 55 e1 95 c3 20 b4 Data Ascii: m8 IcT48T` <&wK;/O@oJi;>! 4d.9Tz(.>y:--Uia?Mdm6_w3O.p"0-?@Xry9ag%!4rnd-{-L>]1y,08 ]Z\K"P68J^U
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 79 a7 fd 81 cd 25 d3 a5 cb fa 45 69 71 eb 2a a0 12 c2 6d 39 82 6c 32 d7 40 4c 78 3e f6 bb 43 08 11 1f 5f 12 fc 3d 10 b0 b7 d8 1f 73 f3 e5 1d 14 82 ee 7a 69 af 80 de e2 e6 0e bc 60 8c 21 27 5f 10 b2 6e ae 11 e4 b8 3d cd f5 fe 36 db 73 db 8e 12 e8 e8 5e 49 52 a3 f5 d3 dd fd 5a c8 3a 08 39 0d f7 35 d7 ed 34 e6 ba 91 75 21 88 d7 59 3a 59 9f f7 6f da 26 d7 04 9c 99 01 68 19 80 90 44 b5 28 5d ba b0 d7 82 74 cd 81 90 7f c5 e7 ed 0b 37 e3 a7 02 fa ef b1 5d b9 10 13 0c 41 9b 30 10 dc 78 32 8e 21 c8 f2 e7 bd 57 8e e1 c2 52 02 64 33 6f de 73 fb ed 57 62 33 8d d6 6a 8a d3 c6 6c d7 5c d9 09 9c 5c 01 44 4e e3 12 b2 8e 2d 5b b6 63 24 dc dd b7 9f a5 72 90 fc 6d 7f 9c d3 cc 25 73 dd d6 41 e4 34 cc 1b 39 0f 45 05 7f f2 4e 47 33 3e 90 52 c0 00 04 8e 00 3c 3b 3c b8 3c b5 20 Data Ascii: y%Eiq*m9l2@Lx>C_=szi`!'_n=6s^IRZ:954u!Y:Yo&hD(]t7]A0x2!WRd3osWb3jl\\DN-[c$rm%sA49ENG3>R<;<<
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: ee b6 04 ff a2 6e 98 aa 3a f7 d2 c3 d8 fd 7e de 4f 20 c0 11 66 c1 46 96 21 c8 ba b9 26 17 61 b3 9f 8f b9 f6 bd 99 24 33 ee 2c 09 0d ed 43 1d 40 52 6e bd 07 5f 0d 48 ca 80 00 06 cb eb ae 5f cf d1 dd 7f f8 3e f9 62 cf d3 f6 b4 37 b6 90 21 eb 10 72 2a 00 51 fa 54 1f 3b 95 09 19 39 6d 25 a7 b2 ae 9f c4 41 64 93 6e 15 9d b0 cf 70 af 16 d0 10 6c 23 34 08 36 09 53 74 76 68 79 ea b5 82 7f 6c 0c 49 3a 77 6d 2a 60 cc 0b 85 23 80 38 01 b7 0c c8 e6 18 59 87 79 1b 72 da 7e d8 d9 da 2b 64 75 61 ad 24 fc aa 9e ae fc dc d2 8d 26 09 09 10 c5 e3 a5 ba b8 97 d0 c6 6c bf e9 68 02 ac 1b ba e6 69 7b 62 43 70 93 d3 10 64 2d 00 01 4a 65 03 ce 4c b0 1d 13 19 39 0d 21 c7 fd 20 ef 11 4e 5b 97 d0 c5 32 ba 71 23 d1 ac 71 41 fb a5 2e 1a 55 fb d0 b4 70 46 54 08 db 5c 13 dc c8 72 cb 90 Data Ascii: n:~O fF!&a$3,C@Rn_H_>b7!rQT;9m%Adnpl#46StvhylI:wm`#8Yyr~+dua$&lhi{bCpd-JeL9! N[2q#qA.UpFT\r
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 96 61 ea 1a b9 ca 01 51 d8 8a ac 43 8c ac 83 0c 27 77 a3 1e b4 88 5f a4 27 51 97 6e 09 d8 de 06 49 d3 a4 d8 2e 70 59 17 c4 08 61 90 3d 82 2c 2b 04 20 c0 a9 e4 9b 33 be 3b 63 f9 fc 19 77 fb f1 1c c7 c9 4a fa dc bb 13 5a 11 2f fa b2 72 04 98 2c f7 6e cf db bb fd f4 d8 36 84 fb 22 a7 21 ca 02 ec 95 2c 35 e2 b9 67 01 01 be 6a 8e 00 0c 04 20 1f ba c8 cf 31 72 1a 1a 72 1a dc d7 c8 5a e9 8e 44 07 bb f7 04 b9 25 73 69 7b 1b 49 98 74 ee 8b b6 8d 33 09 43 46 90 71 6c 8f 20 cb 4a 64 05 15 02 b6 d9 de f6 37 bc eb 66 5d b6 d7 9f e2 e9 1b 47 15 fe d3 2e a8 a8 3f 3f 76 b7 40 64 37 4f 78 da 9e d8 1e 5b c8 c8 69 08 49 e4 8a d6 39 fc 84 24 d9 6e cf 7e 3a 8d 79 1b b2 0e 5a ad 83 5c ce 43 73 91 b5 84 ae 1b d0 c9 3e f8 e8 69 77 4a 00 1a 61 c7 07 7f 6a b5 09 8d 91 e4 90 b9 86 Data Ascii: aQC'w_'QnI.pYa=,+ 3;cwJZ/r,n6"!,5gj 1rrZD%si{It3CFql Jd7f]G.??v@d7Ox[iI9$n~:yZ\Cs>iwJaj
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 40 0c 41 12 ee 69 d6 71 55 6a 41 9a b5 ed f3 8c ab 53 97 0c bd 48 05 e9 1d 5e 86 0b e1 b6 1c 21 9b 30 8e e1 66 c7 c8 15 20 40 00 a9 ff e4 54 8e dd c5 fa c8 86 7d ef c7 7e 5a 07 0d 39 8d 20 a7 41 73 e5 3c 1a d7 44 7e 7d 6b 6a 31 f4 a3 bf 6d 39 0d 99 2b a7 c1 4d 4e 63 ae 86 ac 83 90 e3 0f d7 d4 d1 7c ce 03 62 d1 cc c8 ca 01 01 72 d0 33 a7 48 de 82 be e2 6f 78 eb 75 62 02 dd ac 97 17 c0 c2 aa 04 32 82 41 c8 16 06 62 c4 d6 58 0a 40 80 c8 17 1f 10 cb 91 de 35 11 64 df 7b ef c7 d3 76 0c 1a 72 1a 42 d6 39 de 97 c9 3a 68 c8 5a 70 be 6e 39 fc b3 ff 2e ab d0 b8 ae ac 83 86 ac 43 17 b2 0e 9d 2c 7f f8 79 8e 8e 56 b3 96 69 ba 65 14 80 52 04 01 11 7c 19 01 d0 9c d7 8e 5a cf 70 9a 71 d0 f8 df aa a2 bd 83 15 e4 e4 38 82 6c 9a 6b 20 4c fb c1 d3 38 06 50 5e be cb 61 61 7e Data Ascii: @AiqUjASH^!0f @T}~Z9 As<D~}kj1m9+MNc\|br3Hoxub2AbX@5d{vrB9:hZpn9.C,yVieR\|Zpq8lk L8P^aa~
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: ae 15 4d 7b fc cd 3d 9f 2e 7b 9f 26 f3 89 e3 92 da 06 6f 70 55 b2 3d b6 11 34 64 c3 de 4f e6 ba 01 e9 9a 6b 16 da fa 7b cd e6 83 32 e1 19 82 85 4d f7 a2 34 9e ed 76 5d b0 60 23 c3 00 21 c8 ba d7 4d c8 72 ef d8 fb de 76 d6 ca 8d f1 af ab 72 e0 fa a3 7a 83 2c c3 7d 21 5f f8 be 46 ce c3 4d 4e 0b a1 b0 9b 68 8b 29 fd 7d fe d3 7f 66 96 a1 93 f5 f3 31 4f ba d8 8a 91 ab c4 8d cf 55 a2 69 e3 34 ee 7f 7d 6c bf d8 01 ef 7d d2 dc 02 68 1b 9b e7 5c 60 9b 1c 6f e4 b8 f7 7e 6e 13 08 b6 61 78 df 33 7e 34 e3 61 6a aa 7e 9c e7 63 93 7c 19 f1 af 76 73 af 00 98 eb 9b c0 17 c9 15 28 41 d6 8d eb 0d c1 b6 c5 be f7 63 7b ee c7 3e 44 48 d1 5d f5 24 af 34 fd b5 7f aa b1 ac 43 97 eb 76 1a 72 91 75 b8 21 eb a2 a2 1c 5f 17 d4 1e 40 5f fe 9b fe c4 57 21 c8 71 3f b2 f9 9c 87 f5 22 c5 Data Ascii: M{=.{&opU=4dOk{2M4v]`#!Mrvrz,}!_FMNh)}f1OUi4}l}h\`o~nax3~4aj~c\|vs(Ac{>DH]$4Cvru!_@_W!q?"
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 33 80 dc cc 42 d0 b1 19 91 b7 2e 77 f3 75 3f f5 eb 6d ea 79 c4 19 d6 dc 83 55 17 b2 ea 8c e3 9d 7c b6 1f 4e 75 99 a9 b3 79 bd 8d 2f 1a fb 61 7b c0 7e ec 07 0e 18 5d 10 ec b0 bc 8c 92 a7 09 31 91 f5 53 60 ca 64 13 be 11 5c 19 b0 a1 f4 fd b2 8c 21 8f db db bb 69 e2 d6 38 3c 74 ca a9 0f 4c 0c 24 e8 22 7b bb f7 16 7b 11 64 72 1a 42 ce 05 48 5e be 54 0f 9e 8e b8 21 a7 21 64 6d 2b 78 2f 9c b6 ae 09 ba 40 da e8 27 9a d5 6f f0 0e 66 2f 3c 6a cf 19 d0 c8 02 40 55 8d 7e 6c 75 8b 72 9d 27 fe d4 89 21 fc 85 d3 5f c7 91 8f c7 43 ef 93 fd 97 fc c1 f3 b0 c8 96 fb 26 88 d5 6f 9e c4 d7 ce 72 d9 ec 8f 0a 88 c4 9f 3a 06 f6 45 43 fb d1 75 76 2e b7 6f 2c 02 26 c9 d3 78 3a 0d 99 5e 6f d6 21 c8 a9 00 e1 3d ea f2 01 af 6f 58 fb c7 96 91 75 10 bd b2 16 46 ec 62 bd d8 35 80 2e fd Data Ascii: 3B.wu?myU\|Nuy/a{~]1S`d\!i8<tL$"{{drBH^T!!dm+x/@'of/<j@U~lur'!_C&or:ECuv.o,&x:^o!=oXuFb5.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49910	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:36 UTC	1099	OUT	GET /gtB5zvc0y7tJAUw1pyuC96Fevhev_zgOMFKUZO17tqKp5Sa0RdJloJyd5uEACMC3rJRK=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:36 UTC	536	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 165054 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:58:10 GMT Expires: Fri, 25 Oct 2024 19:58:10 GMT Cache-Control: public, max-age=86400, no-transform Age: 10346 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:36 UTC	842	IN	Data Raw: 52 49 46 46 b6 84 02 00 57 45 42 50 56 50 38 4c a9 84 02 00 2f 87 c2 5a 00 8d 40 6c db 46 90 04 df 23 1f ec 5b ea bf e0 9d dd c3 77 10 d1 ff 09 58 d7 ac 8d 26 8d 9d 02 a2 20 75 e3 7b 4e 26 61 c0 53 f0 39 6a ab c9 cd dc fe 04 ed 7c 8c e7 ae 61 b6 4d 34 09 39 70 00 b4 ea aa b6 a9 69 53 93 26 01 0a 20 b7 d6 7a 4c 18 53 d2 a4 2d 80 80 40 0b ea ee 6a d4 0e 34 b7 e4 e7 76 0e c7 5f 5f 9e 7a b8 e8 8b 14 10 70 d5 9a 0a ed 01 5a db 87 20 55 ec ba 6d 3a 6f a6 4e db f2 d8 5a 20 27 5f 5c a3 7c d3 42 d5 9a 36 8f a8 42 77 16 10 9c 09 e0 6e 54 f9 8a dd 70 4c b2 48 ce ec 3e 7c 4e c9 04 0a 49 82 d7 75 db a4 bb d9 1b 38 32 c9 dc 3c d5 2b d9 7b 74 73 c4 5d 66 92 fc 25 84 dc b9 48 b2 d9 5d f7 e1 da 5d 20 47 3c 30 d3 64 73 df dd ec ee 32 a3 6f e6 b4 93 e3 26 6b 8e 33 eb cc e4 Data Ascii: RIFFWEBPVP8L/Z@lF#[wX& u{N&aS9j\|aM49piS& zLS-@j4v__zpZ Um:oNZ '_\\|B6BwnTpLH>\|NIu82<+{ts]f%H]] G<0ds2o&k3
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 15 c4 03 22 61 80 60 78 ee 60 55 dd 3a 42 28 18 12 31 b3 b3 3a 1c 22 56 97 3e d8 e7 88 60 f4 44 01 d8 42 80 10 ec 6d e3 bd 11 42 a8 70 8d 72 a3 a3 b3 a6 26 04 2c 10 ab 13 89 44 10 00 64 74 54 1c 4d 4b e1 52 15 ec 69 0b 21 fc 0e 00 dc 0c c3 9a 44 d8 d1 51 e2 1a d5 61 18 1d 4d 8f 05 86 81 f4 fd 37 42 34 f4 a3 1f b7 87 ef 01 fb 37 5c 0e c0 cd e8 44 46 22 ec a1 a3 a3 34 aa 5f 75 74 74 74 b5 80 d7 51 d0 8c df 23 84 10 fa b1 05 63 f6 19 17 f1 3a 40 34 72 39 5e 47 98 81 d7 48 24 3a 12 f9 c0 ab be 0f fc 44 f5 06 08 d1 68 24 04 67 03 9c 51 0b 21 d0 61 eb 13 b9 ce b0 91 cb 5b 6e 5a 24 72 28 10 44 c2 c5 cd d9 0c 45 43 08 01 80 22 91 91 08 c3 e1 44 22 8c 09 13 61 22 91 08 44 22 11 20 8a 84 10 09 c1 d9 11 ee 8b e8 a1 31 10 b9 34 c3 89 44 4c 4c 4c 22 91 48 c4 cc 10 89 Data Ascii: "a`x`U:B(1:"V>`DBmBpr&,DdtTMKRi!DQaM7B47\DF"4_utttQ#c:@4r9^GH$:Dh$gQ!a[nZ$r(DEC"D"a"D" 14DLLL"H
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 11 fc 41 c7 a3 aa 6b 0f 04 11 31 01 14 1b 49 72 24 49 51 f3 44 7f 6d d9 4c ba a9 61 21 92 24 41 92 24 b5 a8 13 79 fe 88 9e d7 cc 6c 3a c5 36 92 24 49 92 d1 73 f6 d4 7e f4 de a9 88 f8 af ff ff bf 1f b0 6f 35 de be cd 5e 5c be 2b c3 3d 53 0c 5c 8a 68 5e dd ec 13 82 5e 2d 78 36 6a bb 9c 5f a7 af 3b 22 22 e6 4d cf 37 ec 7e ee 35 d6 d6 f0 b9 f1 f6 8a 43 c4 f7 7d 00 ae a2 75 44 eb 86 e1 bf a8 f6 35 22 a1 57 9c a2 a3 d8 71 f4 56 45 5b e5 7c d6 b5 5f bf c3 98 c5 f8 aa f1 99 57 23 76 50 2b a5 2a c0 18 6c 5f 2e 9e 15 e7 59 5b 33 00 30 ef ba d6 75 af 04 6f 06 28 b9 c1 cb bb c9 7b 36 43 20 da b2 1e d2 67 10 79 db 9e e5 05 c3 d3 c0 67 2b 69 86 81 75 5b 12 01 04 6e 01 ba c9 de 0b b0 32 48 9c 6a 22 46 7b 03 01 ac 0f d6 af fb ef f2 c5 48 ba 07 e2 ee ae 1a 25 c0 00 10 78 Data Ascii: Ak1Ir$IQDmLa!$A$yl:6$Is~o5^\+=S\h^^-x6j_;""M7~5C}uD5"WqVE[\|_W#vP+*l_.Y[30uo({6C gyg+iu[n2Hj"F{H%x
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 45 c2 c4 d4 b2 24 44 5b ec 46 8c 6f a9 09 eb 6d c7 1a 99 b6 7a 6e 96 f7 55 ec 35 5d d2 76 5b f1 d4 d2 ca 64 75 2f d6 b5 7b cb 56 66 b7 d6 ca 66 af ec 12 25 00 11 30 43 1a 10 b6 f1 20 18 1b 36 7b a8 fe 5b de 2c c2 a2 d6 ae f9 5a 26 fd 30 b1 b3 d9 c1 30 2a 1a 0c ca 1d 4d d6 34 c8 82 34 5d 9a a5 a7 60 7c 57 37 27 15 8b 65 b7 ef b6 a6 db 59 da 2c 37 6e ad fd b3 eb 35 6f be de 2e 2e 3d bd 14 53 de 19 7b d5 50 5c 77 2f 37 7d 65 55 32 87 2b 77 b9 11 12 17 72 b1 47 01 78 07 89 00 54 b1 80 c4 64 54 b8 f2 9e fb f8 29 2a 2f 6d fb 55 ff 82 ef e5 1d c3 0e 5c cd 4b db 1e 70 e0 1a 0f 58 72 8e 27 5a 92 7a dd 72 39 57 d9 d0 67 90 f3 72 94 3f be cf 77 df d7 9d 1f fd ed e7 6f ef 3f b0 5b d9 59 c6 98 89 b9 c4 24 bd af b0 92 97 3d 67 9a b9 d6 b1 5f 0b 63 a0 00 28 58 65 a3 44 Data Ascii: E$D[FomznU5]v[du/{Vff%0C 6{[,Z&00M44]`\|W7'eY,7n5o..=S{P\w/7}eU2+wrGxTdT)/mU\KpXr'Zzr9Wgr?wo?[Y$=g_c(XeD
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: e9 e2 e6 a1 b8 6f f1 ce 82 6d d8 cc 39 ea bd 26 4e 29 d5 d9 32 a1 86 72 54 1c 2e dd 2e e5 aa 56 2e 1d a6 89 6a 54 91 52 5d 5d 9d a5 7b e1 dd e1 52 48 0c 91 70 b7 6f cb 06 26 70 00 87 65 df 47 03 18 f9 4a 65 45 d4 ea 21 c1 4a 14 55 29 d2 ee 55 ac 80 23 e2 06 2b 49 35 d5 b9 46 65 e0 b1 6c b3 b7 3b 0c 0e 40 19 37 a5 7e 65 62 13 50 4b 59 96 dd 1c 19 cb e8 f6 6e bf 5d e0 b5 a2 2a 11 14 d5 67 3b 52 d0 b9 94 c6 0b 6e 00 48 03 8c 01 04 02 c0 ba 49 dd c3 1b 78 44 64 00 10 27 a8 0d 80 00 b2 27 00 3a 6a 50 b8 01 1e 76 e1 b6 ea b6 8c 88 f1 54 d6 ba cd d8 ac 5d 6d c0 18 53 86 50 dc 18 e6 f3 b3 af c8 bb b8 c5 b4 d5 ae b5 ea a5 cd c5 3a 9b cd cc e8 ba db 35 90 75 cf a2 99 35 82 0d 51 06 68 a1 ca f4 62 a6 9b ad 40 8c 77 3f d3 eb a8 8f d3 62 b6 bd da 41 25 b0 63 28 02 05 Data Ascii: om9&N)2rT..V.jTR]]{RHpo&peGJeE!JU)U#+I5Fel;@7~ebPKYn]*g;RnHIxDd'':jPvT]mSP:5u5Qhb@w?bA%c(
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 32 38 30 70 c1 bb 40 87 84 82 69 5b 43 d5 94 96 2c eb 46 8f 7b e8 e5 e7 38 63 1b 3d f7 09 97 77 f5 ba a3 e8 55 40 2c 0e ca f0 db 70 67 e0 cc 5d d5 a6 d1 fa e5 4d d3 c0 ab d1 26 f5 a6 cd b3 f7 b3 3a 54 2a 17 97 d5 c9 5e b7 17 80 05 31 06 45 6a 07 22 b1 40 10 ab a6 16 54 21 b2 1d 1b 16 f0 00 c4 11 59 ed b6 42 5c 0b 05 38 48 09 48 58 15 02 4a cc b5 9c 84 75 24 fb 83 94 a3 4a e8 76 90 54 b4 6e e1 8c cb 2a a8 dd a4 84 43 08 41 5e 9c 0e b7 05 ad d6 5c 32 64 4a 95 74 3a 3e a3 6e 48 25 02 c0 75 9a 6a ca 74 4b 59 63 2e 27 d5 5e 24 21 a5 c0 69 b5 14 22 50 de 75 a9 ed c2 ca 2b cc 5e 02 b4 b5 dd 55 55 88 bb cd 51 d2 87 08 51 17 6f e4 a4 26 b4 75 4b 2c 09 a8 be 5d df 78 cc 2a 06 6c c6 50 40 a0 6a 85 5d 2d 3a 68 76 06 2a 28 a0 39 68 f6 09 04 ec 4d 01 c0 14 d9 55 e5 c4 Data Ascii: 280p@i[C,F{8c=wU@,pg]M&:T^1Ej"@T!YB\8HHXJu$JvTnCA^\2dJt:>nH%ujtKYc.'^$!i"Pu+^UUQQo&uK,]xlP@j]-:hv(9hMU
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 86 84 5d db 1f 0b 3e ac c6 ae 05 2d 53 37 50 14 05 98 08 ab 07 44 35 57 da d4 3a c9 28 bd 23 77 a5 35 6d 6a b2 cd 90 de 51 d9 a3 86 14 13 c2 cc 64 ba d9 42 c8 49 9f b6 75 a5 66 59 f2 25 19 0f ab e0 51 1e 53 a4 01 4d 30 a7 bb 24 01 a1 10 cb ea 58 81 92 83 d6 62 01 00 d2 a9 03 6d ba 4d 74 c1 5a 8e a2 01 84 02 d4 12 47 20 cb e0 08 58 b4 42 11 41 c7 2e db ac dd 9c 40 39 64 bc 8b 7b f3 da fa de 2b 2a d7 a0 2a d3 b5 ba 59 80 95 89 e2 51 2b 6d d2 91 58 40 57 aa ad 2e 13 d7 f5 ab be 2a f4 e9 dc ec d6 ed 04 59 dd 56 4a 61 02 e2 12 e5 f3 dc ba e5 ba 51 c0 48 98 e1 be b6 3a c0 b0 16 a3 12 3a 66 28 d9 51 02 51 d1 13 50 f2 43 49 d6 4e 09 a7 3a c1 51 d8 71 43 51 24 42 a0 12 d1 72 af d5 64 59 ab 16 c1 48 ba 09 de d3 94 21 02 33 d6 f6 ea 32 a9 ab 09 b7 9d 10 65 af d5 31 Data Ascii: ]>-S7PD5W:(#w5mjQdBIufY%QSM0$XbmMtZG XBA.@9d{+*YQ+mX@W.YVJaQH::f(QQPCIN:QqCQ$BrdYH!32e1
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: bb 14 15 d0 92 96 2e d3 57 59 c1 25 8b d2 1c 95 4b ad 2b 6a 72 b7 4b 59 d7 97 6c 46 6c 13 21 8b ba 2c 3c 99 d5 85 2a a6 b0 61 53 3e 9c fa e3 18 a2 08 e8 dc 42 47 09 26 4d ba 74 95 e4 95 72 96 a5 a6 69 27 98 f2 ef 54 03 d0 8d 4e 35 a0 56 83 57 81 35 11 c9 ba a4 5a b9 9a 66 90 59 cd fd 6a 76 5f 2b ce fb 8c 26 b9 88 a8 97 8e ec ec dc 71 b0 c8 68 b0 81 60 83 82 01 4d d5 36 78 03 df b3 29 db da 0e 13 e5 24 80 6d 73 d3 5c ac e3 98 e2 b3 cd ad 9b 96 85 55 ca ba 67 b5 cc a1 dc 3b 80 17 c5 99 56 ed 54 b3 e2 ee 2b 56 76 eb 38 1d f2 b1 d7 e5 e5 92 bb b7 1e 23 66 eb e2 16 5f 1a e5 96 36 19 d1 c8 40 85 34 b0 41 0b be 3f 1e 53 ec fb 5e 58 ee 33 76 ff 9f fe c3 ee d5 16 5d c4 f4 cf 7e ed 99 15 ef ec ee 7c f2 d9 7d f3 be d5 80 98 8e 29 2d a0 0a 3a a2 12 01 25 5a 54 a4 87 Data Ascii: .WY%K+jrKYlFl!,<*aS>BG&Mtri'TN5VW5ZfYjv_+&qh`M6x)$ms\Ug;VT+Vv8#f_6@4A?S^X3v]~\|})-:%ZT
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: b1 20 a9 62 9a a2 da 85 2c 1c a9 20 45 67 32 81 a8 85 6a 82 c9 22 7b 86 87 c2 fe d9 bc ca 05 55 08 79 78 83 b2 f7 cd 63 f4 a7 9d 6c 32 51 16 49 a4 00 11 70 26 65 a1 93 b0 6d 4e 6e d3 24 22 ed 02 80 3c 36 08 a5 10 b3 cd 9e ef 9d d5 ce ca 7c ad 57 af e6 72 55 d7 64 1f 4b 4e 10 a5 5c 5d 75 a9 57 a5 54 a5 5b 3a 0a bc ae 86 91 ad 39 e2 da 91 69 6e cc 3b a0 02 07 60 41 7d 6d 63 2a 09 2a 1a 89 28 17 08 50 ca a5 94 52 aa b2 54 55 e9 92 d5 0e 03 b6 e2 f3 74 9d a5 88 72 ec aa 9d dd d3 e3 96 20 8e e2 e0 ec 6b d7 9c 89 73 9d d8 94 12 c3 1a c8 b5 4c d6 d5 e5 5c b9 d3 49 a7 ab bb e3 92 39 bc 2e 68 da 37 d8 2e 76 dc 5b 11 2c d5 de de 54 5c c6 c9 d1 8a 32 84 ff 47 54 50 09 21 6e 38 d8 7a 33 57 a7 ab a5 ab 42 90 6b 28 f9 5a 41 29 12 e1 78 7d a2 ea 55 51 b0 1a c0 40 ba 1d Data Ascii: b, Eg2j"{Uyxcl2QIp&emNn$"<6\|WrUdKN\]uWT[:9in;`A}mc**(PRTUtr ksL\I9.h7.v[,T\2GTP!n8z3WBk(ZA)x}UQ@
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 92 5e 6d 20 22 51 ab 1c 55 60 58 8c ae 47 66 19 06 df 27 b6 b4 12 80 3c 05 02 0d d0 3a a5 95 36 95 40 84 b7 b6 f4 1e e9 0a cd a9 9a cc 30 0a 66 b2 6a d6 8a 2d 00 8c d6 9f 37 50 ad a2 25 84 6a 7a 80 37 b1 91 3a bb b0 2a 36 de 46 b7 ba 4d 61 66 ad 42 27 bc d7 f9 75 62 01 4a 32 84 e5 3e a5 63 c7 62 7d fa f3 db 7b 0f 4b 72 3e b5 c6 46 6d 42 df 8c 61 08 18 e1 e9 30 eb 88 59 69 0f b3 e5 a2 8f 61 b3 c3 f0 ea 00 d9 0a bf 81 d3 63 c7 59 ff 61 79 5b 6b 62 3c de 7a 43 a9 92 2e ae 39 c5 e6 23 bb 74 b5 d0 7b 87 e5 b1 d0 ec b9 b7 ba b7 af c5 2b f7 76 b6 76 ee f7 5f be e9 f7 7c cf 82 76 ec f1 6e f5 e8 ed a8 d8 34 65 bc 92 95 bd 75 d8 52 18 af fb aa 2f cd 02 83 86 c4 32 70 07 60 14 6b a5 d9 ac 90 75 a5 6f e5 d3 7c fb 75 5d ce d7 bf 9a 1f 5e 59 5d 4c a1 b2 54 50 01 0d b4 Data Ascii: ^m "QU`XGf'<:6@0fj-7P%jz7:*6FMafB'ubJ2>cb}{Kr>FmBa0YiacYay[kb<zC.9#t{+vv_\|vn4euR/2p`kuo\|u]^Y]LTP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49911	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:36 UTC	1099	OUT	GET /ksQztMpwCo1I4qacMnW96bzIrnfeQh5xyId11qZ405X5LFdtGUxoralRZkAWBI9SGbf_=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:36 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 60472 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:31 GMT Expires: Fri, 25 Oct 2024 19:12:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 13085 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:36 UTC	843	IN	Data Raw: 52 49 46 46 30 ec 00 00 57 45 42 50 56 50 38 20 24 ec 00 00 10 82 02 9d 01 2a 88 02 6c 01 3e 69 2a 90 45 24 22 a3 a2 b0 57 0b f8 80 0d 09 4d 7a 63 a1 cc 35 da d1 a2 1f 04 10 1d c8 f7 9b 31 ff b2 3f 4a ff bb 6f fb de 77 1c cf e4 a7 dd 7f 1d ec 43 fe 8e d2 7e 7f ff 17 9a 4f c6 ff 5b e7 5f fe 5f ed ef bc 1f ea 5f ec 3d 82 ff b5 7f 8e f5 31 ff bf d7 4f f8 6f fd 5e a8 ff a7 ff be fd e3 f7 bb f4 9d fe db d4 0f fd 4f fc ef 5e ff 56 4f 40 ff db 7f 59 9f fe 7f bd 3f 0e ff e0 7f f5 7e ec fb 61 7f ff ff b9 ee 01 ff ff db 57 f8 07 ff fe 96 7f 3c f2 1b f3 df e6 7f d8 78 4f e5 d7 da 1f c2 7f 9b ff 9d fe 03 e7 43 f5 ac 91 fc 2f f9 1e 64 7f 40 fc 81 fc 9f f0 7f bc 5f 15 7f b2 ff b1 fe bb c7 1f 92 9f e6 7f 90 fc bc f9 08 fc b3 fa 1f f9 ff ef 1f 93 ff 16 df 5d ff af fd 37 Data Ascii: RIFF0WEBPVP8 $l>iE$"WMzc51?JowC~O[___=1Oo^O^VO@Y?~aW<xOC/d@_]7
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: c6 56 5d 60 29 3e ef 0c 11 ad 83 77 38 df d2 cd 53 31 70 40 01 ea 38 b1 4a 6e 3f 24 b4 e8 7e f0 08 52 e8 84 1f a8 59 a4 35 74 8b 31 45 1e e0 7e bf 5c a3 70 09 ea 11 ce d8 70 77 97 3a 03 1f e3 55 78 19 62 38 ce 07 6d fc f4 4e 06 0c ed 13 1b eb d7 e0 07 f4 a2 96 e3 26 df 12 21 bd 5d 3b 31 ee 09 92 51 60 44 76 bd 6f 6b 7b 4e c6 01 c6 a2 2a 26 4e 73 ab 2c 3e 2d 3a f8 2f 86 f4 12 a3 12 98 b0 c3 01 ab 32 21 62 2b 7a 61 87 83 fb b3 bc 7d 23 9f ff 02 10 17 b4 72 a5 f3 50 63 eb dd f9 d4 88 31 66 b8 3d fc 5a 63 64 76 e7 cd c6 e6 cd 12 3b bb 12 b9 bc 13 bf 36 92 12 b6 e7 b2 d3 d7 b2 5f ef 9b 77 8f 27 b0 7e 3f 3b c7 b5 37 0e 70 f7 e9 39 c4 d6 8e 07 cc 2a 72 32 dc 60 26 16 79 f1 c2 7a bd 97 2b c7 5b 90 bc 1f 80 40 5f 39 70 90 6b 7a c4 f8 5e 89 d0 ba 48 55 1a 6a 59 f2 Data Ascii: V]`)>w8S1p@8Jn?$~RY5t1E~\ppw:Uxb8mN&!];1Q`Dvok{N&Ns,>-:/2!b+za}#rPc1f=Zcdv;6_w'~?;7p9r2`&yz+[@_9pkz^HUjY
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: df 97 2a 48 dc ee 07 4f 31 66 8b a4 62 70 88 d0 f3 27 50 cf de 17 3e 7c 2e 3e 8d 63 b7 3d a8 f2 51 6f 61 78 b8 d3 6d 1f d5 2a 9f 31 20 d7 17 4d d1 14 18 1e 89 b5 08 9c 45 15 e8 d4 b6 6d 72 2a 7a 2c f4 ca 9a 1c 9e e9 f7 b6 89 ad 2f be 97 a3 94 51 c0 6f ff 52 ab b7 3c 26 e8 95 a8 6b 56 77 29 70 83 df cd 1b f3 38 94 87 19 9d 45 b6 79 b8 d5 2a 19 e3 35 94 19 23 b6 bf 82 8c 3a 36 79 a9 6c 4a 3b 25 9e 29 71 79 19 01 b6 f6 de fe 42 88 1e c0 74 30 ee 67 2e 6b 25 1f 02 2b e4 4a 49 98 98 3d a7 83 0b 02 c6 1b d9 f8 52 d0 f4 8f bd 1b ba 2b 52 a6 54 da df 94 01 a8 66 0f c5 32 b5 86 53 d3 f7 91 70 dd 15 d4 76 76 6b c8 a2 a2 49 0d 9a 20 af 66 85 47 6a 5d 00 0d 67 b0 95 ff 29 64 fb a3 4e ad a7 7b 87 1a a6 27 0d 61 2a de 0c ad a2 6c 7d 4e cf b3 f6 0f 4a c0 53 54 f6 af e6 Data Ascii: HO1fbp'P>\|.>c=Qoaxm1 MEmrz,/QoR<&kVw)p8Ey5#:6ylJ;%)qyBt0g.k%+JI=R+RTf2SpvvkI fGj]g)dN{'a*l}NJST
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 74 8b 12 38 bf 1e 3f 83 9b ce 24 83 7c 38 76 ef 8a d0 c9 84 fc 19 8d 5a 8a dc a6 30 d6 72 f6 7b 5b d8 68 83 74 82 08 2f 8a 6b 57 9f 0b ce be 42 4b 9e 38 a3 66 92 58 ed 83 41 db 75 a1 a4 41 2b b4 19 07 90 6e 1b 35 65 11 2b b2 fd a3 c3 76 86 81 26 00 dc e1 93 11 a2 8d a8 e7 49 ab 10 c5 36 c1 00 a2 d3 9d c5 85 34 24 4a 3f 61 ed 7c e6 d7 90 e4 eb 67 82 47 49 af a6 ef e4 b0 74 9f 17 73 3a 6d 86 49 ed 81 3f 83 94 fd ce 53 e2 5f 61 c2 ee 36 f6 82 cc 79 0a 19 5a ad d1 f4 51 bb 10 dc 8d d5 d6 2b 46 76 68 0b 51 58 30 13 38 78 17 67 77 14 7c 40 31 01 0b 65 a4 72 1f bf 4e 84 f9 72 77 3a 17 fe a8 45 f2 0d 7a 75 51 17 6e b7 0c 50 56 9f b4 c8 e8 06 e9 38 4e f9 d8 98 9f 08 1f e9 1a a1 9d d4 8f 07 ff b2 16 2b 52 26 00 0a 73 f6 c6 0b 08 b2 fe 4c ab 5b e3 44 30 ab 55 08 ef Data Ascii: t8?$\|8vZ0r{[ht/kWBK8fXAuA+n5e+v&I64$J?a\|gGIts:mI?S_a6yZQ+FvhQX08xgw\|@1erNrw:EzuQnPV8N+R&sL[D0U
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 9f 5a da aa a1 29 b9 7d 82 2b f4 f9 0d 9d f9 a7 7a 64 6a fd 79 ae dc 02 30 c0 f6 12 ad 41 99 06 66 51 70 5e b6 ef d3 1b c2 8b c2 7a fa a0 33 29 2d 7c 2d 73 83 2c 4f e2 3c 3a df 08 b9 05 a7 a3 9c 66 7c c3 a3 e1 bb ac 3e 18 e4 32 e0 c0 35 79 50 74 df a8 01 42 45 6f 22 11 82 21 69 a0 c1 bd d5 49 26 59 f8 b1 f5 9d 5e 58 38 35 55 ed ba 89 9e af a8 f0 e9 5a ab 7f fb 56 86 ed a8 a6 32 8d f1 e7 67 73 7a b3 a5 f3 6d 1f bb 30 ad 9f 6c a8 6c 9d b9 ca c2 3a 60 f3 f9 5f f7 01 65 24 91 cc bb 4d 47 16 21 4f da 4f af 6a ee 46 01 b6 1a ca d4 31 bf 41 41 a4 9f ea e8 31 aa 00 00 f4 10 f7 2f 79 92 b0 d1 31 d7 92 ae 7d 03 14 cf af ff c8 f3 fb 91 fb 85 c3 2e 07 ff b7 18 ff ed c6 3f fb 1a 68 73 fe 2d 90 83 8c eb 64 ad 05 d2 c2 ac 1e 27 d0 d6 6f f1 f3 dc 11 90 ac b6 89 75 b0 58 Data Ascii: Z)}+zdjy0AfQp^z3)-\|-s,O<:f\|>25yPtBEo"!iI&Y^X85UZV2gszm0ll:`_e$MG!OOjF1AA1/y1}.?hs-d'ouX
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: d3 45 62 ca c7 2b 94 00 10 f1 f8 37 a6 bc 59 ca 4d 82 19 a0 ff b7 fd 9b 32 3a ca a1 05 1d bd bc fa 2d 9f cc 08 39 68 fa c5 13 59 09 6a 42 24 4e 01 78 d6 3a ed 74 30 eb 33 18 38 f1 87 26 6a c3 cd 9f 99 9c e9 b6 1f 59 bd 98 49 b4 44 a0 f7 a5 7e 6e f2 39 39 ad 30 fa 56 a7 42 4c 3b b3 b1 ad 64 ff 39 92 57 4c 52 24 f5 4c d2 fd 72 8c f5 52 39 86 fa 95 8c ad 89 37 31 f1 d1 75 bb 40 a7 a7 ce 72 86 45 7c 1f 44 37 4a 7e 10 eb 89 1e a8 1b 3d 78 4c 58 97 8a 51 e8 b9 bc a3 ef 33 31 b0 d6 fd 21 c1 c6 ba 99 fa 9a 8c cb 4f 33 17 fc 8f 34 9f 52 60 02 dd f7 ce 2a fd 74 63 5f 6a 3b a0 7d f1 28 8c bd 05 c5 78 08 78 b4 b8 e8 55 08 6f 2e 3a b4 39 30 2f eb 1c 0e 8a f1 67 a1 74 6d 4f 49 f5 d6 f5 82 ae 49 f9 ed 98 03 33 6f ce 43 57 70 36 59 d2 15 fc fb c7 5f 55 fb 0d af b0 16 e6 Data Ascii: Eb+7YM2:-9hYjB$Nx:t038&jYID~n990VBL;d9WLR$LrR971u@rE\|D7J~=xLXQ31!O34R`*tc_j;}(xxUo.:90/gtmOII3oCWp6Y_U
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 55 5b cb b4 46 dd 99 c6 a1 bc f5 05 d2 5b d2 7c 57 b5 09 e2 bb 27 db 89 37 9a d7 a8 d0 73 65 d3 4d f1 a4 58 2d 42 a5 43 26 0f be 0f e8 85 41 10 67 4c 30 2e 13 0d 62 28 a2 3c ac 8b 57 a6 e5 b7 c7 be d4 ad 51 52 08 c6 1f b8 23 f6 a1 3d 98 9d d8 72 68 58 66 62 23 62 f7 82 3c ed d1 55 a7 4a 53 11 86 72 d0 fa 23 fb f2 75 24 de bc 67 32 a1 19 58 85 f6 dd c9 2a 62 d5 31 7c 1f ba 36 43 d3 b5 c3 66 df 40 e5 59 b8 4a a5 60 9b 5f b8 0d ab 55 f4 f7 c6 6f e5 a6 87 01 f0 4e 44 8c d6 01 92 30 c4 ca 3f a2 a7 55 7a bb c8 99 63 67 19 7e ac 1c e1 96 da af 40 36 1c 91 74 5c 16 32 fc 80 1a fe e4 47 e1 c8 77 d1 60 ea 6b 2f ca 54 a7 cc d9 bc 11 7d fb b4 1d f2 8e b8 55 01 b8 c6 61 42 10 64 32 b6 77 93 ce 67 a5 65 10 7c 66 fa cc f6 6d c5 de 4d 4d 89 08 db bf f5 56 a7 95 b6 aa e4 Data Ascii: U[F[\|W'7seMX-BC&AgL0.b(<WQR#=rhXfb#b<UJSr#u$g2X*b1\|6Cf@YJ`_UoND0?Uzcg~@6t\2Gw`k/T}UaBd2wge\|fmMMV
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: fd f7 08 cb 8e 5d b8 17 f5 ea 86 90 bf 0e da 58 3f e1 62 81 2c e4 95 fa 14 fc 0d ba 7c 2e 99 b4 be c4 0d 5a d5 8c 4c 41 98 50 b6 8a 6d 42 82 aa b7 37 44 07 91 20 0d 35 b7 07 ba 87 c6 b3 41 0a 22 00 1d 69 19 ae 1b ed a4 64 8e b2 1a 75 40 de d3 cb 2b 89 48 d9 60 57 e3 6c c0 f8 eb 13 5f 58 c4 dd 93 b4 c4 21 f5 0c 21 59 4d 40 57 60 e7 02 29 35 7d a9 e2 a8 04 db 45 92 bb d6 bf a9 ac d0 2d ee 64 9e b7 b7 b8 30 76 a1 de 79 9c 7c 74 d5 42 0f 7a d4 de 69 e0 6d 80 28 c6 69 88 49 38 d3 f3 08 ca 8c f2 61 c0 1a 93 4c 09 57 2a ac 24 fb ea b8 ff 9b 50 84 99 16 7a 7f 48 56 0d cb 6b 93 2d 35 8d fa 8c 87 81 51 dd 1e a3 bf b7 8c 98 06 20 4e 9a bc 71 2e 38 dd a9 f5 e0 58 78 e6 a6 3c 57 aa ae 75 8c 80 a2 b4 17 55 28 a8 9d 02 86 89 97 5d ea e8 cc 44 08 e0 64 44 36 62 7c 18 56 Data Ascii: ]X?b,\|.ZLAPmB7D 5A"idu@+H`Wl_X!!YM@W`)5}E-d0vy\|tBzim(iI8aLW*$PzHVk-5Q Nq.8Xx<WuU(]DdD6b\|V
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 79 6c ba 45 2f da 1e 08 07 b6 e8 da 44 54 25 48 35 48 35 c7 22 15 69 26 98 9a 69 94 86 cc 99 a0 3f ff e1 6a e8 04 06 dc 44 dd 08 1d de 3d 6b 40 cb fe fd bc fc ce 20 2b 91 14 4b 8f 04 1a 2e 23 2d 03 ad 89 86 81 94 91 0e d3 55 9a 46 ba 13 28 72 15 63 0b 31 88 0f cf 16 8c 32 a1 a1 d1 84 1b 32 e2 0c fe df b0 0c d5 0c d8 19 f8 53 57 55 e9 dd a8 65 bd bf 67 36 7d 0e 95 44 b0 cb de e5 c8 20 b3 a5 60 eb 5d 9a 8f 89 a6 e9 66 d8 ec b9 b6 81 ae 86 97 05 7f 8b 85 9a 5a 14 ea 4f 82 6d 2f 94 96 1e 2e 42 79 2f 5b f4 47 7d 18 c2 85 7f ed 10 c5 c7 5f 9e ee 81 08 a6 35 4b 46 cd 2d df 10 7f 36 4d a0 fb 30 18 ae 42 f7 f3 03 58 f6 be a7 c8 61 f3 53 d6 eb aa 55 a7 ed da 54 93 f3 63 3c bb 46 00 e4 31 04 a5 7f 66 01 ab 85 54 e8 66 0f b5 f8 ba e8 43 b0 ce a4 f6 b7 f0 e3 a3 a8 1a Data Ascii: ylE/DT%H5H5"i&i?jD=k@ +K.#-UF(rc122SWUeg6}D `]fZOm/.By/[G}_5KF-6M0BXaSUTc<F1fTfC
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: d6 1c b5 32 1c a6 00 5e 36 cf e4 e3 bf 63 7a 67 c5 c0 64 93 ce a8 cc 90 f2 d2 d3 a1 b3 4d a4 05 6f 99 70 50 ec 87 02 e3 8d a7 e0 8b 97 b5 6b 20 e3 46 09 68 d9 03 fd 75 bf ba 60 e7 40 f8 08 4f 7a 18 84 55 b3 f0 df f2 17 32 0e 7e e1 36 41 48 96 30 1b 38 a4 9e d2 6c 94 b3 3a c3 43 21 37 c3 8d 3b b6 1d 26 42 0e 75 b1 ca 05 8d f1 b2 a0 7e b7 76 92 48 b3 88 2e 0a db 8b b7 59 db fb 01 3e d6 0e c7 0e de 8a eb c6 f2 03 ed d6 00 c5 ba 8c b7 9c 82 24 1b eb 29 50 eb 0d 75 b1 ae 41 3c c3 b8 b3 8f a7 7a fd 1e 16 63 5a 91 23 dc 6b b8 45 fc 78 65 bb 3b d1 32 a9 b6 fa 56 ba e0 33 c5 b0 b5 c6 c0 53 53 21 70 f4 13 e2 a4 b7 9c 5b 93 c9 e0 0e 1e ec c8 d5 0a 4f 95 0e c7 7b 9d c7 c8 33 29 ae 16 55 a6 f6 10 f7 84 8d 6b e4 c4 3a 3a ce b3 ff 24 73 8e 3f e2 29 22 ad b1 cb d5 22 17 Data Ascii: 2^6czgdMopPk Fhu`@OzU2~6AH08l:C!7;&Bu~vH.Y>$)PuA<zcZ#kExe;2V3SS!p[O{3)Uk::$s?)""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49912	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:36 UTC	1098	OUT	GET /u9DetvmIAh9OuL485cvYerLGPUfRtjx70huaquRLozRz5npaqFnX6EupWUwXMY3z-yk=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:36 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 43014 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:31 GMT Expires: Fri, 25 Oct 2024 19:12:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 13085 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:36 UTC	843	IN	Data Raw: 52 49 46 46 fe a7 00 00 57 45 42 50 56 50 38 20 f2 a7 00 00 f0 f9 01 9d 01 2a 88 02 6c 01 3e 51 24 8f 45 23 a2 21 14 7a 5d 88 38 05 04 b1 37 37 7c 09 3d c0 5f 57 c9 17 5c 94 0d 50 47 6d 22 5e 36 8a ef bc e7 f6 5b b7 d5 35 5e 25 c6 16 08 d1 bb 27 f1 7f b8 f7 41 8e 7f 3b fe 7b f6 87 fb a7 ec 87 ce b5 b1 fb ef f8 5f d2 bf dc ff 6b fe 68 79 3b da fe 6e 3e 7d fb 67 fb 7f f1 1f bb ff e5 ff ff ff ff fb 8b fe cb fe 2f fa af 75 bf a5 bf eb ff 96 fd e8 fa 04 fe 3b fd 0f fd 47 f7 4f f2 9f fa ff c6 fc 63 7e d7 fb c4 ff 17 ff 5b f1 bb e0 67 f4 7f f0 df fa ff d0 7e ff fc c3 7f cb ff b9 fe 5f de 07 f7 cf f8 5f f7 ff da ff b0 f9 01 fe a7 fe 17 ff 17 af 17 b1 f7 ee 97 ff ff 70 7f e9 bf ec ff fd 7a ee 7e e7 7f cb f9 51 fe bb ff 0b f6 e7 fe 1f c8 cf ec 67 ff 6f 60 0f ff 7e Data Ascii: RIFFWEBPVP8 *l>Q$E#!z]877\|=_W\PGm"^6[5^%'A;{_khy;n>}g/u;GOc~[g~__pz~Qgo`~
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 95 e1 60 66 d1 b0 56 04 ca 8d ce 2d 9d be 77 3a f8 b1 8f 4c 9d 10 76 13 fe 5f dc e5 77 14 0e 9c f6 6d cb b5 be af a8 fa 16 0b b7 9b 1c 7d 23 31 00 3b a4 7a ac c0 f3 a9 27 a0 3f e5 4e 6f d8 a2 e4 3d f5 7b c1 b7 22 44 b5 69 84 c8 a4 55 1f 0c 42 da b9 a0 1f 8f 69 a1 d1 c6 99 c3 fa 17 f1 bb c6 91 d6 bf 28 82 b8 06 7f b8 ed ea a7 42 7f 09 4b 91 c9 32 bf 0e e1 de e4 53 72 ab 45 c2 e1 ae 56 d4 db b9 91 de d0 3b 18 03 0b a7 bf 97 7c c2 31 43 2f 45 03 08 c9 b6 1b e2 54 53 68 6f e0 31 2a 30 4b 6b f2 64 6b 14 85 7f fe c6 fa 9d c2 29 52 7e 69 ef 14 4f dc 5a 39 4f 49 94 13 47 45 80 5f 92 7a 0b 61 6c 61 67 9c f5 0a 02 c8 67 eb 13 ec e9 af f9 91 cf 44 aa 97 f0 dc 74 18 9b 2a 8a 0b d2 40 0f 9d 90 0f 31 d0 b5 71 dd 6c ba 5e a7 9d e7 db f4 e5 90 c5 ff 83 25 17 7e b9 da 09 Data Ascii: `fV-w:Lv_wm}#1;z'?No={"DiUBi(BK2SrEV;\|1C/ETSho10Kkdk)R~iOZ9OIGE_zalaggDt@1ql^%~
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: f4 88 3c f5 e9 a1 fa 27 d9 99 b9 03 c5 c8 67 5c e4 e0 c6 07 02 fa a1 29 81 5c e9 d7 79 5d 75 6c d1 89 81 b3 b3 b0 37 2c 9a 9b 30 db 8f 88 69 fc 85 18 09 36 f8 63 ca ae 7f d6 d5 dc 74 11 3a cf 3e 67 aa c2 f3 e0 92 4b 34 56 77 98 68 bf 44 8d 0a 34 0f bf ae 8a b2 84 c1 b5 57 a9 93 f1 5b 87 f0 c1 b0 ec 59 b3 66 e1 53 db 33 fe 4b 2e aa bb 47 b0 1a 59 74 88 58 4c 3c bf 08 53 ca d0 8d 86 8d f3 f4 34 84 54 c8 ff a1 01 fe 4f 22 ea 21 46 f3 09 91 04 d4 50 48 db 9e 16 28 7b 82 f4 c8 d6 57 5f 26 d3 f2 5b 34 f4 c0 76 68 36 a5 e0 7e 4e bd e3 cf 11 9c aa e2 96 35 ef fc 7e 0d e1 dd 67 4a 22 26 51 95 b7 24 d4 75 fd f6 a3 40 49 ac 7e bf 0b 7e bb 57 18 5d cd c7 df ba 39 ee 9c 0b a6 ec 57 6b 1d 6b b9 dd 1b 1e 64 9b 36 7c 43 d7 36 0b ba 07 9d 94 88 e4 28 27 8b 1e 90 de 28 34 Data Ascii: <'g\)\y]ul7,0i6ct:>gK4VwhD4W[YfS3K.GYtXL<S4TO"!FPH({W_&[4vh6~N5~gJ"&Q$u@I~~W]9Wkkd6\|C6('(4
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 00 89 2c 3e 42 f4 3b d3 53 d5 b3 1f d6 9b 0d 96 a9 6a e0 0c 57 cb f5 b6 01 3a c8 ba 98 2f e7 23 17 4d 75 27 f8 0b 68 2c aa 5d 19 00 59 08 80 9c e9 49 08 e4 5a d9 aa 8f db 59 79 65 34 d7 ef 86 86 43 72 83 5e d9 ad aa c5 d5 ed 08 4d 92 4b 40 f3 2d 70 d3 06 92 df 21 77 77 14 eb 2b 8f 3a f5 fc e6 8b df 15 49 48 50 82 33 e1 b0 87 7e be 6b a0 e1 0f 27 a5 7a 39 b2 df bb 9c 81 fe 2b 4e cc 08 e4 e8 dc 79 73 f5 db b6 b2 9d ed 72 2e b4 d3 2b b5 07 65 8b 61 46 5a 47 62 cf 58 df 1c 5a a2 05 20 00 45 55 54 c9 a3 ff d2 8e 95 c8 81 21 d8 af 34 56 23 ac b2 1b e3 2b 3c a6 0a ce 4a 0c 8a c8 e9 0e 3a d0 f7 34 0b cd 56 60 fb 72 53 56 e8 ac a2 de ff e6 28 dd b0 f4 c3 b0 0b 53 b9 2c 5a b6 5b 30 47 82 a9 34 a7 04 12 df 18 29 7c 44 74 22 29 51 14 39 dc c5 a6 52 ad d0 73 6d 83 0c Data Ascii: ,>B;SjW:/#Mu'h,]YIZYye4Cr^MK@-p!ww+:IHP3~k'z9+Nysr.+eaFZGbXZ EUT!4V#+<J:4V`rSV(S,Z[0G4)\|Dt")Q9Rsm
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: ca 0e 0f cc 91 49 b0 6c 45 b7 23 a6 4d f6 c7 66 f1 f6 f5 4b 96 86 19 c2 66 0b 46 22 27 cd 5a 72 01 a1 6b 6a 9f 0e cb 6c 07 6c ec 68 5c 61 72 d2 b4 de 98 d8 10 35 54 8c 19 ef b7 a7 b0 eb ac 0c 5c ca 1a c7 0c 86 ba 7f 24 94 4f 13 15 ad 52 f6 32 28 07 64 e7 21 5d 2b ce 29 0f 44 a8 e3 1d 69 ef 98 c0 ae 43 22 ea 46 1c b0 90 4f 16 dc db b3 d2 27 bf 1f 47 b6 cb 98 e6 41 7d 10 b8 19 92 95 87 22 2a b8 c9 41 71 b7 35 86 37 28 22 4d 06 14 78 39 d4 7e 90 20 eb 11 f7 46 f3 fc 85 74 4d 01 92 59 5c 7d 48 ec c8 01 1d 77 b3 84 fc 11 2a ef c8 df 71 a1 72 4d a5 60 2d 8e 9e 65 a3 32 28 a3 9c e8 3a d0 d7 a6 b2 9b e5 78 fb 0e fb b8 44 82 4c fe 90 cd e3 a9 82 69 57 3c 9e 35 fd 76 87 51 ad b1 c9 bc 8f 12 56 77 3f 94 7c a2 a0 c9 eb dd f8 b2 3b 02 e7 94 68 dd 40 fd a5 c5 2f 1e 0c Data Ascii: IlE#MfKfF"'Zrkjllh\ar5T\$OR2(d!]+)DiC"FO'GA}"Aq57("Mx9~ FtMY\}HwqrM`-e2(:xDLiW<5vQVw?\|;h@/
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 4a 25 6e e7 ba fc 9c 9c 3b 31 5b e0 c8 a8 34 ea 1a 92 0d 52 0b 00 a4 9b 19 32 8e 90 a0 8f cf 9a 41 02 05 ad d5 73 a7 7b 43 57 5f f2 5f d3 f1 c3 aa e7 f0 40 d4 10 d8 58 04 4e 60 a4 9f a2 71 d9 49 f7 96 c7 bd 11 9a 32 dc 7d 1f 80 8a a1 8c 3a 74 65 2d 2d 85 1f d8 60 4d b5 9d 0f ac 14 00 08 c6 0d bc 18 5e fd c5 57 14 6b d5 18 9c 02 9d 68 6a bb be 35 ab 77 20 c0 87 4e 7a e5 61 04 6e c1 fc c5 7d a5 a3 9f 87 84 d8 c7 31 6e 78 cd 8b cb 58 3c cb f2 02 cb 9a d6 30 83 00 fa 38 de dc fc fa b6 e8 7d 1d 9e 02 04 36 c5 99 20 d5 89 4b e8 c6 8a 4b 14 5a 70 96 e8 9a 9c b6 9e 7a 05 88 2f 04 77 04 df 65 91 22 18 b8 49 72 56 fb dc ef bd 2d 54 3b 83 ae 62 08 ca 72 98 99 df 00 54 5f 91 16 68 39 0d a5 b6 a8 e7 e6 14 2f fe c8 c0 22 88 0e 91 5d 1f 8e 1e 7c 69 2d e8 e0 48 f4 1c f4 Data Ascii: J%n;1[4R2As{CW__@XN`qI2}:te--`M^Wkhj5w Nzan}1nxX<08}6 KKZpz/we"IrV-T;brT_h9/"]\|i-H
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 05 08 a6 73 f8 36 34 a6 7d a5 ca ef 5f 01 99 33 9b ae 81 ad fd a9 1b 89 e7 1f 25 3c 6d 04 b1 ed 20 7b 4b 7c d8 11 59 f1 1e 28 49 f2 6e 27 ff 25 68 fa 37 86 cf fd b7 47 fa e5 81 f4 b5 66 0c 03 e3 1b 7b bc e6 9a ff bc e2 d8 23 88 ee 48 87 66 5b 50 fd 8e ae c7 1b 0b db 6b 30 29 fd ed 50 ba 04 9f 09 fb 4a 7e e7 7a ff 3f be c0 21 e9 10 2a d1 45 57 d4 d9 03 05 b8 99 85 19 9f 51 62 fb 35 6d 04 e2 c9 8a eb 40 96 b3 88 f7 3c 3c 79 80 23 80 01 09 8e e2 b3 76 c9 de e5 2a d2 fe da 57 26 75 1a 61 4a 16 d3 69 89 aa 1d 46 ce 8f 2c 7a 32 24 3e 3d 92 8c 59 32 c7 b7 c3 e4 e0 8c 7e 81 4f 92 11 48 dd 6d 1e c3 8c c0 6f 46 4f af 33 35 23 bf 10 14 ba 22 ce dc 31 f8 75 58 fa dc 6d 46 ac d9 f4 68 f3 74 b1 8c d1 f1 d2 56 e6 49 c7 68 0a 9f ed e7 15 7a 5d c2 55 2f 62 f3 62 65 5f 4f Data Ascii: s64}_3%<m {K\|Y(In'%h7Gf{#Hf[Pk0)PJ~z?!EWQb5m@<<y#vW&uaJiF,z2$>=Y2~OHmoFO35#"1uXmFhtVIhz]U/bbe_O
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 93 51 8a 74 21 81 9c 1e 2e 3e 97 02 ef f9 b2 ff 82 3a 48 64 e6 a1 bb aa bc 27 a4 39 12 c5 7d 1a 8f 49 15 97 c1 75 22 f3 2f 9d bb 71 a7 a2 5e dd 50 14 7d fa 3e 8e d5 df d7 f5 ca 85 61 50 a1 47 36 77 e1 19 46 2e 5c a4 8b 89 34 ee df aa dc 78 fd 24 b9 76 24 bf bf 29 00 e1 c6 18 6c 3d d1 6a fe 08 a0 4b 6f c1 58 ab be 0a 72 d9 bf 0d fd 13 fe 00 17 55 15 7f f9 b1 b8 22 ce 17 ea 68 05 99 72 19 3b 85 ce fe 6a 2e 74 7f 38 23 38 8a 70 88 74 8f c0 35 b1 97 ac 41 ad cf 0e 0c 37 f5 c7 7b 75 09 83 82 18 eb 22 a5 85 d0 88 cd 37 bf b2 d7 8b 84 96 73 b8 e0 7d 84 aa 20 ad af 8c 87 2f d0 c5 17 b3 4f d6 8e 09 a6 f8 dc d2 a3 50 0c 80 8e d9 c0 35 73 33 75 74 4c a0 0a b1 b4 bb 58 11 a5 bb 82 8d 59 59 54 15 f8 3a dc 6e d2 45 1d 20 8c 06 93 2f 9c 95 55 d0 11 cc a3 7d ba 1b 1f 24 Data Ascii: Qt!.>:Hd'9}Iu"/q^P}>aPG6wF.\4x$v$)l=jKoXrU"hr;j.t8#8pt5A7{u"7s} /OP5s3utLXYYT:nE /U}$
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: fd f0 aa 97 2e 92 bf f4 b5 ea 70 44 c7 09 0e 62 84 e1 91 65 a5 5b 30 0e d4 11 47 45 d2 68 33 ca b0 9a b9 e2 0d 3c 46 f0 37 56 bf a0 d1 df 73 8d ab 34 13 d2 7c c0 1e 3b 67 15 ad 06 e2 25 95 aa 95 b4 72 44 6a 9c 46 73 f5 c5 90 ad 65 f7 e7 80 db e9 19 5a 90 87 3b 65 ff 0b b5 22 7e 35 70 2f 55 3d c7 f7 00 f4 23 72 e4 80 00 00 00 07 7d 67 76 5b bd 2f 27 ec b3 da cb ff 89 75 a1 0a 0f c7 d4 9d 50 1b bd 10 79 7c d3 fd 8a f1 18 e3 eb 9f 07 1e a9 c2 16 9a ba f7 dc d1 86 6c c7 28 9f a7 23 7c 29 21 f8 df cb 46 87 2d e9 63 60 d8 ee 35 a1 11 c2 27 90 67 4c 41 e4 cc 1a cd a5 5b e8 e0 78 58 ae 1d f6 1e ce 8d f5 0a 93 6e 3c d0 50 54 36 8f 39 90 a3 3c 15 a2 f2 e1 1e 7c 34 96 22 dd 3d f9 bb 9a 43 bb 57 74 fb af e2 b3 5f 18 a7 f6 da 2c e7 8e e7 39 17 cb 63 80 81 46 35 d8 7b Data Ascii: .pDbe[0GEh3<F7Vs4\|;g%rDjFseZ;e"~5p/U=#r}gv[/'uPy\|l(#\|)!F-c`5'gLA[xXn<PT69<\|4"=CWt_,9cF5{
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 82 35 0d 26 5e 24 f2 3f bc 54 08 54 2b ff c0 47 0f 56 1a 08 73 a4 c3 da 3a 16 63 79 8e fc cc 04 48 0f 92 52 c9 99 18 be 6e bd 91 45 52 b3 e0 95 0a 96 13 56 71 3e 02 52 28 20 5b d9 e0 0b 01 e3 88 2c 6c b0 1e 74 3e 38 b8 44 dc 46 14 27 bf f7 d4 a9 0f 11 c0 b0 6c ac eb d3 f2 71 de 95 3b 43 50 a5 44 bd d4 ca 67 4c d1 16 2d ba f5 e1 a7 b4 aa 3c df f9 02 f9 b2 b6 e8 14 a4 05 2b e9 87 e2 7a ef 17 f3 92 5d c8 6b 9b 95 ca 38 8f f7 1b 3d 5c 77 c8 2b e3 7d 95 0e bb 49 78 78 a5 e4 61 f2 38 bf b0 a1 ae 68 0f 3c 23 11 9f 08 eb c2 a4 30 82 23 f5 e4 1a 31 4f 10 92 20 78 a7 2d 62 11 d7 eb bb da 67 8d 87 a0 31 5b 7d 31 74 c7 a1 7f 20 e7 0a 43 8a b6 5a d8 43 d3 65 a2 f0 3b e3 f7 ef f2 34 52 2a 85 f8 6d 96 11 bd 17 39 8a 4d 1a 49 90 0c 22 49 2e a2 fa e3 8b 9f 81 6a 38 8c e9 Data Ascii: 5&^$?TT+GVs:cyHRnERVq>R( [,lt>8DF'lq;CPDgL-<+z]k8=\w+}Ixxa8h<#0#1O x-bg1[}1t CZCe;4R*m9MI"I.j8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49913	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:36 UTC	537	OUT	GET /tMIgKazDGX4JzzaF3TUPPdZvRTlpGOFKIqwwb0f9lThr-Rlj572zCYCycF_la8NEjumIj9OiUA=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:36 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 20202 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:12:41 GMT Expires: Fri, 25 Oct 2024 21:12:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 5875 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:36 UTC	844	IN	Data Raw: 52 49 46 46 e2 4e 00 00 57 45 42 50 56 50 38 4c d5 4e 00 00 2f 87 c2 5a 00 11 88 6d db 08 92 60 5b 58 64 f1 f3 fd 17 bc 99 cc fc 57 10 d1 ff 09 d0 38 73 8a c3 51 f6 fa 52 b9 96 56 7b aa 6e 25 89 e6 a6 ee a4 5f 6b 87 df 3b 49 e2 64 cd 4c 5d 48 bc 6f 90 64 9b 3a 4a 34 48 96 04 8d 39 71 57 9b 08 bc 29 c0 6d 63 ab 76 f6 f2 b7 71 15 fc 1e 80 a7 cb 6b 83 f7 9f b2 a5 cd 63 ac 64 37 fd 08 24 70 d9 36 b6 94 7c aa 49 26 02 89 6a ac 1f ad 35 78 73 20 90 a0 eb fd fa 7d d3 ce 04 1f d0 3e d3 03 01 94 35 be 26 da 49 ee e9 f3 ec 32 3e 13 50 5d 0e 2f 08 68 f2 77 82 e7 91 f2 1f 04 ea 2f 4c 24 b9 b6 e5 48 ca c1 7b 08 7c db d2 13 23 0f 81 f7 50 ab 60 cc fe 47 a5 50 a8 94 6a c5 ac 6c ef 00 6e 63 db ae 95 c1 7b f8 fe 13 9e 4a 10 fd 97 40 f4 62 ec c6 5f 5d 5d 3d c9 b2 6d bb 6d Data Ascii: RIFFNWEBPVP8LN/Zm`[XdW8sQRV{n%_k;IdL]Hod:J4H9qW)mcvqkcd7$p6\|I&j5xs }>5&I2>P]/hw/L$H{\|#P`GPjlnc{J@b_]]=mm
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 07 f0 4d cc c1 f9 66 01 dd 3c 59 4a 3a 00 7c 52 4e 2a b0 ab 59 18 b7 6d e4 48 ea bf ec dd 49 7b f1 19 11 13 40 5e 79 c3 6a a0 73 d9 26 cf c9 26 88 2d 46 ce 90 96 1d 59 e9 35 cc 55 4b da 43 7a a1 d0 6f 12 b0 cd 22 93 2a 5b 95 7f d2 3e 5d ef ff bd 92 1c 37 27 54 f5 c4 9e 51 ba f2 3b f1 0b f4 fb f3 3b f0 0b 50 da e9 dc 5d 75 ce b9 98 dd a9 e7 fc 9f d3 55 a7 ee 7e 14 c6 41 39 8b ab 9c 1b de 07 c6 71 28 67 1f 65 69 25 02 ca 79 a0 08 42 6e 87 47 de 29 e7 76 b6 15 9c 93 02 47 c6 40 2e d0 e0 c5 e3 a0 b4 d0 ce 1a be ca 0b d3 81 0e 7d 51 c0 a2 25 c4 c7 e1 4a 0b 47 02 ab 38 32 56 a1 17 ec 9b b9 a0 23 51 ce d9 5e 80 50 56 43 88 0d 42 03 e3 4f 6b c6 39 0f 56 74 0e 0a 84 e8 c4 9b 81 b0 a0 1a ce 39 51 39 11 ab 9c 0f 4c b4 b3 29 39 48 18 db 77 02 1d 16 84 10 69 60 40 e0 Data Ascii: Mf<YJ:\|RNYmHI{@^yjs&&-FY5UKCzo"[>]7'TQ;;P]uU~A9q(gei%yBnG)vG@.}Q%JG82V#Q^PVCBOk9Vt9Q9L)9Hwi`@
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 85 41 d2 33 eb 28 9e f5 54 ed bb f0 92 e5 82 21 e1 81 f0 61 ea f7 0d 9f 4a 31 28 27 a4 42 6e 86 02 72 9b aa 15 a7 21 a5 0e 63 14 33 75 4a 24 3c 17 08 1e ea 97 b9 f6 da cf ba b9 60 c8 ca 07 82 9b 99 13 c5 42 50 ce 74 be 91 40 a4 97 ab 4d d1 06 2e 0f c8 c8 b8 64 6c dc 7e 67 90 e4 6c 70 de 8f a8 7f 75 e9 5e 55 f4 20 37 a3 76 12 4c 46 88 b9 71 c5 90 80 cb 73 90 9a 15 21 2f c8 78 b8 46 23 3a 37 94 48 6e e6 72 ff 3d eb 27 17 06 17 5c 30 23 01 d7 ae 0b ee 58 04 ca 49 54 33 f3 24 10 f2 b3 48 c9 06 9e de 20 61 19 da 18 a6 ea f4 91 d4 cc 8b ea ee 27 6a 5f ee b9 c1 25 23 29 19 f5 1b b0 00 a8 7a 8f af 68 c0 d7 bb 4d c5 8a 80 6f a0 cf 7a 2a 46 ea 86 41 32 73 d9 89 1e d5 af 2e ac 7f d9 bb 56 32 92 95 1f 75 43 84 99 16 3f 2d d3 40 9d ef 3a 05 1b f8 fa 2d e8 eb 40 8d b0 Data Ascii: A3(T!aJ1('Bnr!c3uJ$<`BPt@M.dl~glpu^U 7vLFqs!/xF#:7Hnr='\0#XIT3$H a'j_%#)zhMoz*FA2s.V2uC?-@:-@
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 46 8d 64 03 5b 45 8c e5 c9 67 bd dd cc b7 8d 9e 61 b4 90 37 df de 08 c1 b4 1d b1 e4 80 85 d4 c4 64 88 bb ec 7c ab a9 d2 47 8c 65 e7 1f cf fc de ff bf b9 44 8b 59 5e c8 62 8e 5c 53 11 45 2f d2 39 92 92 44 70 74 21 66 be fa 13 47 7c 32 03 f1 a5 9d 39 35 f5 ab 8d 35 46 cb c9 9f 10 4e 62 10 6a c3 b4 4c 0f 7f 74 21 15 71 55 c4 17 62 d6 67 7d 76 cd 56 21 9e cd f9 93 bf d9 7f 00 f4 b5 85 86 dd 2d 33 50 1d 27 5b 5a 40 5b 0d ab 50 58 b8 d1 d1 56 ab 0e 14 43 47 51 c0 6a d8 db a4 a3 6c 69 b5 d5 56 af b0 ca f4 ba dd 4d ab 88 5d 87 86 05 b4 d5 56 db db a0 15 5b 68 58 6d b5 3d e7 6c 63 15 18 da 6a 7b eb b4 8d 0b 1b 97 b1 98 72 8a 53 49 39 3d 84 fa 72 35 29 88 f5 f4 86 78 0d 26 d2 e8 38 7e c7 10 5f be fd c4 0f ef be c6 a0 ee 64 27 fb 8c e6 cb e9 db c9 d9 87 db 9c e5 a0 Data Ascii: Fd[Ega7d\|GeDY^b\SE/9Dpt!fG\|2955FNbjLt!qUbg}vV!-3P'[Z@[PXVCGQjliVM]V[hXm=lcj{rSI9=r5)x&8~_d'
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: e9 d3 fe 71 19 4f 68 c3 8c 27 f2 c0 e3 69 5b b9 80 5f 10 da 0d 00 b2 8b 93 3f 5b 23 54 5e c7 6b 7e c7 90 f2 d5 1b b5 e3 a6 5b 05 98 3a ce e8 c4 83 a3 3e b9 19 79 10 f2 d5 c2 7d 7d 08 cd 1e 56 93 e9 cd 9c 1d 73 84 4e 8b a0 ba 1b f7 fe e7 e5 ec 67 e9 f8 62 93 72 72 ee a6 60 b8 43 14 6f c4 f1 74 ae a9 98 44 d8 db b2 05 fc 82 d0 ee 49 06 d9 c5 a9 df ce 1a e8 56 d4 e1 7a df 15 24 fd 46 3f fd 77 f5 b4 b9 5b f7 dd 54 90 81 6b 37 26 1e 1c ba 4f 29 11 3e 39 6b cd be 3e 84 7a 61 14 c8 f2 d7 f9 40 a6 63 47 e4 fd 21 de f6 58 d6 0e fe 0a a8 0d cd 64 2a 00 d6 b2 7e 85 98 cb bb 3e bd 43 12 e1 06 d3 82 75 03 be 20 b4 73 35 08 9b e9 df ad 81 ac 51 a6 74 fa cb 29 64 bd cf a0 b3 9b ab 51 b7 0a b0 f0 bf 8e 5a 4c c0 fb 54 48 26 9c 3e d4 72 69 5f 6f 10 5a 56 31 4f 88 8f dd 91 Data Ascii: qOh'i[_?[#T^k~[:>y}}VsNgbrr`CotDIVz$F?w[Tk7&O)>9k>za@cG!Xd*~>Cu s5Qt)dQZLTH&>ri_oZV1O
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: a2 0f 06 60 b0 15 d7 16 44 3a 9b a2 82 24 40 c4 09 a2 45 f0 b9 5d 06 31 3f ec 94 18 09 9c 70 bd a0 ec d3 81 57 be d5 1d 47 3d f4 94 d4 9f 19 bc 53 9d 79 1c d6 df c9 1e d2 03 17 50 80 10 1b ff 75 4b 04 03 c3 49 00 f8 e2 b2 ad 40 a0 e9 20 e6 f2 55 0b c8 e8 0c a4 74 70 e2 96 c3 3d 5f 4c 2d eb 2c aa 48 0c 6f cd a6 a2 a4 71 fb b7 ed b8 43 07 b4 73 b8 7a 56 26 82 09 f9 dc f9 44 c0 d7 1f 34 7f 1e 10 bb a3 9d 20 23 85 67 4c 89 10 fc de 45 c1 c5 9f 70 86 f9 d8 db 16 bd 18 e1 c5 11 b8 0f 35 a5 c7 6b 8d f1 ca ba 03 fc 75 4d 45 05 eb f5 12 89 70 10 2f 71 b0 c9 cb 42 5e 2e 13 df d1 a9 5e 29 d4 47 92 02 32 a9 f6 3a 64 37 a0 ec 48 60 84 97 c7 93 ba af 9c 67 93 47 7b 1d 37 e4 5a ed 1c 53 c1 f1 e1 9a 41 12 60 60 be 7e 84 a6 2e 9f 8b 74 23 76 fe 36 33 c2 32 e0 a6 92 96 d4 Data Ascii: `D:$@E]1?pWG=SyPuKI@ Utp=_L-,HoqCszV&D4 #gLEp5kuMEp/qB^.^)G2:d7H`gG{7ZSA``~.t#v632
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 48 cc ce 06 75 d3 9a ba 24 a7 73 70 fe 6e 93 5e 86 e0 f3 ef a0 24 e2 a8 0b d7 98 48 4e 6a f0 8a e5 ad 98 46 01 ce 14 d7 07 6b 31 38 19 c2 cf 1e 59 8c 16 05 1f 83 6c 79 d1 2d 4a 28 05 58 58 11 7a e6 7b 98 18 ba db 36 45 9a a4 40 24 93 09 bc f6 13 7e b9 31 32 e3 fb 4e 0d a2 c1 57 5d 89 b0 ef 45 0b 1a 39 28 5b 27 3d 11 f9 2d 78 c7 26 1e 11 7c ed 72 33 38 d0 fe 33 c2 8d 48 39 0a f1 01 3e c1 9c cb 05 fd 39 5c c3 fb ed 36 08 c5 10 cd e1 53 b8 22 b7 0d 15 4b 0c 44 33 df b3 7a 8e d4 d8 50 65 d0 a2 35 44 3f f9 51 4a 26 af d4 4e b3 4c 03 79 46 68 de 53 1d 36 a6 c5 4c 78 c5 ca 51 06 b4 3b c4 94 e6 f5 46 5f fa c8 ce 33 3b 28 db 96 09 45 a3 40 c6 01 c8 0f c4 30 c8 b4 78 9f 86 64 0d cb c4 18 1c 10 69 a8 70 cc 05 71 76 76 f6 fb 5c a4 0c e2 97 7e 04 13 c3 a1 1d 23 4e 8c Data Ascii: Hu$spn^$HNjFk18Yly-J(XXz{6E@$~12NW]E9(['=-x&\|r383H9>9\6S"KD3zPe5D?QJ&NLyFhS6LxQ;F_3;(E@0xdipqvv\~#N
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 85 db 13 00 78 9d d1 5d 9c 66 a9 92 17 7d d8 b8 79 32 1e 48 d7 fc 24 ff af 1b 81 09 27 cf ae 66 cb 01 dd 3b 1e 2d 8a 82 56 e2 4c ed 2b c7 a4 a8 ab f9 84 b0 29 6b 24 d2 d4 37 23 21 1e cc ff 70 19 59 30 57 9f 41 62 55 39 88 1a 01 ba 13 1b 44 f0 28 d3 ee e4 2d 81 b1 12 af f8 58 7d 63 06 f7 77 38 63 f2 22 e7 23 dc a6 9a 6e fa ca 71 9c 47 ae d5 3c 62 18 6b a2 d9 7e 32 db 02 05 c5 e3 6f c7 33 8a 02 44 80 78 0e a7 3b b1 04 f0 d2 2d 15 e5 50 22 cc ac 37 a7 43 13 a2 c7 b8 3c de 21 ed 62 25 33 ad 8c 44 97 1c 26 90 23 27 b2 ee 54 26 53 f1 50 4b 16 b3 ac 3d 83 30 70 77 87 93 26 86 9e 03 c6 68 74 b1 57 8c ce 78 e2 92 38 80 6c 75 fd 83 d8 b2 92 96 41 b5 ca 39 a4 52 ac 52 0b 17 12 46 b3 38 a0 7e 4d 0a a8 5a f2 23 11 8c ca 74 9b e3 b3 66 64 9c 7c bd c9 83 ca 30 99 f5 3a Data Ascii: x]f}y2H$'f;-VL+)k$7#!pY0WAbU9D(-X}cw8c"#nqG<bk~2o3Dx;-P"7C<!b%3D&#'T&SPK=0pw&htWx8luA9RRF8~MZ#tfd\|0:
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 72 41 2c f8 e4 23 df 96 47 27 01 50 8e 36 9f e4 b0 d5 e3 ae c4 93 83 68 72 cd 2c 1e bd 60 35 73 7e 83 61 54 67 7c 4c 6b bd a3 bb 45 a1 c4 ad e1 bc 96 52 58 80 6b 93 62 48 e4 2d 19 a6 1a bc da 22 65 b6 86 07 71 18 d4 e6 94 20 c2 05 60 63 e1 e0 d2 86 3c e8 3f 98 28 99 5c 72 1c 84 e4 a3 b3 5d d9 24 e0 87 1c f3 29 a5 50 fe 16 c7 83 2c a7 91 de 59 f1 30 cc 1d 9a 19 02 a7 81 02 e5 ad 75 61 82 c3 56 02 93 94 25 c4 c0 a7 d8 a6 c7 67 07 e6 b2 50 81 14 45 e2 a1 32 ba 11 44 95 45 cc 7c 2c 5c 63 79 cc d4 d8 ef 6b 24 72 2a c5 91 24 a4 bb 9d 8a 24 80 9e e8 06 52 e0 cd 2f 52 b1 64 79 46 63 f0 12 2e 48 d4 d9 55 1a 0c 38 41 07 c5 b6 35 44 68 75 e5 10 db e6 b3 3b da f9 fc f9 41 ca 25 db f6 81 09 2e 43 56 49 14 80 a1 63 01 3f 89 96 07 fd 07 33 d7 24 72 68 88 93 7c f2 91 6d Data Ascii: rA,#G'P6hr,`5s~aTg\|LkERXkbH-"eq `c<?(\r]$)P,Y0uaV%gPE2DE\|,\cyk$r*$$R/RdyFc.HU8A5Dhu;A%.CVIc?3$rh\|m
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 39 d9 1d d9 aa 22 b0 1b 63 5a 2a 71 81 17 9c 25 c0 fe 86 cb 16 1a 62 03 be 85 30 4e ef a5 95 84 a2 c8 f5 bb a8 c9 54 4c 5b 26 81 9d 7e 88 55 84 20 ad be 78 28 2e d7 ba 01 73 ab d6 a7 a6 fc 1d 16 97 65 a0 bb fe 73 3b 63 cd 0f 5d 59 54 38 77 2c 76 67 92 c8 00 54 58 b7 8c a7 28 a1 09 5b 4c 5e fc 89 40 52 8c ce e3 39 06 6b 55 34 f3 f4 df bb 4f 3e f9 98 46 0c 82 c6 45 06 2b 70 6e 8e cd c9 d7 1f 81 c8 9a 09 20 9a 82 35 96 88 7f 9a 91 c0 4e 97 9d 3d 57 5e 10 13 34 b1 70 ca ba c1 37 4e 35 43 0c 9e aa ec 28 61 39 08 37 cc 2c ae 59 2d 19 3f 20 12 df 3e 81 01 00 c5 71 d1 6c f0 dc 7c 66 93 89 09 62 0a d9 bd fb 93 46 c2 98 9c 96 1c 18 24 41 6b 92 65 ca 81 38 dd 63 8c 1e 26 9c 75 22 39 62 15 6c 7c 7c 86 91 c8 4c 7b 41 ff 9d 47 e9 5e 18 82 c4 06 e3 94 b5 a8 d3 0d e8 b1 Data Ascii: 9"cZ*q%b0NTL[&~U x(.ses;c]YT8w,vgTX([L^@R9kU4O>FE+pn 5N=W^4p7N5C(a97,Y-? >ql\|fbF$Ake8c&u"9bl\|\|L{AG^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49914	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:36 UTC	529	OUT	GET /ZVQE0WXIo3XOeHvZcpC7qn560xGEF8FDCQtV2fWFTWXXjLh6uXpOzw90mau7jXNUrQ=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:36 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 51938 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:58:51 GMT Expires: Fri, 25 Oct 2024 21:58:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 3105 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:36 UTC	844	IN	Data Raw: 52 49 46 46 da ca 00 00 57 45 42 50 56 50 38 20 ce ca 00 00 f0 80 02 9d 01 2a 88 02 6c 01 3e 65 2a 90 45 24 22 a1 a1 2f 97 0b a8 80 0c 89 66 6e 31 fb e0 2a 9f 3b 3c 83 0d c5 f2 1f ea bf ca fe eb fe 59 fc b1 f1 bf 5d 3e c1 fb a7 f9 bf f9 df e1 bd de 76 d9 d8 1e 5d 5d 2d ff ab fc c7 e6 ef cd 0f f7 ff f7 7f d0 7f 99 f8 75 fd 13 fd 17 fd ff f2 ff bf 3f 42 5f ae ff b2 1e b9 5f b6 9e f6 bf c5 7f dd fc 9d f8 1b fd 4f fd 77 ed 17 fd 8f 87 1f fa df b7 7e f3 7f bd 7f cf f6 0f fe a3 ff 07 ff ff b6 6f ab 17 ef 77 b0 f7 ee 7f ff 3f 5e bf dd 0f fb 3f 2d 1f da ff ec 7e ea 7f dd f7 b0 ff fb fe fb dc 03 ff ff b6 c7 f0 0f ff fc 34 1e 81 fc be fd b7 82 ff 97 fd 5f fb 6f ef ff e9 bf ec fb 2e e3 0f b4 5d 46 be 7f f9 93 fa 9f e3 fd ac 7f 6b ff b3 fd 4f 8e bf 30 7f e5 ff 47 ec Data Ascii: RIFFWEBPVP8 l>eE$"/fn1*;<Y]>v]]-u?B__Ow~ow?^?-~4_o.]FkO0G
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 0a 2e 6c 80 93 b3 5b 3b 26 40 d6 d9 d0 e6 f6 0e b4 1a 74 95 36 6c 3b 68 e1 d1 85 95 8d 4c 7f d0 54 69 9d 3f 22 d5 05 a3 da 37 1e 6e 05 cd e5 db ab c4 cd a8 fc f5 5a 9d 08 5a 66 53 ea ab 92 c4 5a e9 83 fd c9 00 bd 64 bd 3b 3f e4 44 69 b0 e9 97 5c 07 5f ee 7b 32 c2 64 08 17 6b 46 85 1a dc 1a 81 fd 6d 80 8d 55 9e f9 cc d9 80 96 d0 33 c5 01 af 01 9a 68 e3 e5 fb 39 63 38 b7 dc 19 ed b0 34 92 8e c0 22 12 7c 2e 23 a4 23 41 51 c4 2f 39 b2 81 4f 0d ad a3 f3 81 b8 d2 8b 74 da 7f 83 e0 f0 e4 79 27 99 97 c4 49 2a 5c ee 2b 12 22 d2 9e b1 71 d9 dd ee 98 0e 6f e7 e3 e5 37 f6 c4 21 eb d8 d7 dc 6c ca 76 67 19 f0 29 f8 bb 87 36 6c 22 d3 5e a9 ee f7 54 d6 89 3b 77 a8 13 6b 1b e8 fe a4 88 28 eb f8 b7 13 ee 7b cd de 91 2a 9c be 40 0c e6 e8 11 b6 a0 55 07 af 04 20 80 82 4f 13 Data Ascii: .l[;&@t6l;hLTi?"7nZZfSZd;?Di\_{2dkFmU3h9c84"\|.##AQ/9Oty'I\+"qo7!lvg)6l"^T;wk({@U O
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 92 ca 6e df cd 10 cb 33 24 4c dc b6 02 1b ec c6 ba d7 25 36 1d 6a aa 9b 82 81 61 39 bb 32 f5 cc c7 f1 30 fd 8a 29 17 88 fa d1 0b 95 57 72 d5 e3 c0 81 43 83 8b 7b bb d7 41 ab 40 7d 68 74 07 ff fc 15 f2 78 c6 d6 7b 1e 02 fc b1 9c d1 4f 53 9e 6d e2 87 a3 bd 27 56 eb f5 40 ca 08 b5 06 bb e7 ed 79 8a b4 a3 a4 1a 0b b8 12 18 2f 85 ed 26 63 88 3b 6a 8b ad 80 b3 f1 25 17 91 5b 0b df 3c f3 b6 72 df 8f a6 16 a9 78 ac 0f c7 0c db bb 43 20 53 0c 13 ad 34 ea 59 32 8a ef 14 67 4e 53 53 aa 14 92 bf fd 92 0e 6d e3 28 64 20 85 57 60 ec 27 12 bd 0d 34 9e d6 a6 60 db d1 13 fd f0 56 2c 5b 98 06 3b 12 9f aa 0a 35 f9 cb a3 42 67 a5 c7 b6 d1 0c 0a 70 23 5a 9c db ac e2 58 c3 dc e0 0d 96 2f 27 36 9a d6 ac 50 ae 75 9f c0 ac db 0f ad 03 53 c1 f4 5a cf 36 8e 39 29 f1 2a ba 76 28 53 Data Ascii: n3$L%6ja920)WrC{A@}htx{OSm'V@y/&c;j%[<rxC S4Y2gNSSm(d W`'4`V,[;5Bgp#ZX/'6PuSZ69)*v(S
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: cc 67 11 ee de 92 92 1f a2 9d 7c ae 99 c2 a4 b6 1f c9 8d 05 40 64 4f d9 92 88 89 f7 6d 7f 2c a2 8b cd 1e b9 9c 30 ae da 2c ad d4 cd c7 1d a0 7f 10 96 0a e1 cf 00 68 78 34 f7 36 b2 89 84 4f 80 17 dc 29 6e e8 dd 48 69 85 68 c0 d7 56 ba 5f ea 47 b6 21 bd 46 36 bb 41 66 60 2d b7 5e de 6d 62 10 88 7d ea ab a1 dd c6 70 7a 68 12 24 ac 29 8c 5d cc 12 74 0c be 67 50 9f cd ec 63 86 22 c2 53 8a bd e4 98 fc 49 bf 17 28 28 17 d0 96 c6 c6 87 58 e2 c3 b7 16 cc ed 49 bc 8a 29 8b 24 c0 96 6e 57 af bb a1 be c8 13 5c 4b b8 c7 6c 4f ad 81 e2 6e b6 b9 a3 6b c6 be 12 ad 7e 64 f9 b3 d4 0d 41 5e 1e 86 3e 54 f1 db ca 1b 21 b3 05 39 8d 11 cf c1 b1 7f 27 a8 05 cc 77 c3 bc 72 c3 e8 f5 f5 4b 13 5b 0f 73 20 ce 39 7d cf 5d 7e 4f ad 84 79 0c 34 5e e8 5f f2 8d b9 bb 0b 8b 00 2e 4f 83 07 Data Ascii: g\|@dOm,0,hx46O)nHihV_G!F6Af`-^mb}pzh$)]tgPc"SI((XI)$nW\KlOnk~dA^>T!9'wrK[s 9}]~Oy4^_.O
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 97 d0 e5 31 f6 84 b0 d2 5a 74 7e bf 43 54 50 7f a2 b6 1b 2d da 43 a1 ca b7 5c 51 08 1b 4d 1a 5b 48 77 9e 26 9c bd a1 a6 d4 19 19 b8 ad b2 77 2f b9 08 82 08 f8 27 06 d8 9b 1b e1 3d 39 5e b0 02 bc 8b d5 b0 25 99 6b dd f7 a8 a3 e9 d1 6e 23 8e 00 4d d5 80 6b 3e 7f 58 1b 58 9d 54 21 cf a9 c3 99 05 90 38 51 35 94 77 28 18 c3 d1 61 d3 49 71 3a 2a 1f 65 fe 1a 0e 85 e9 e4 d1 4a c7 02 fb 93 3d 44 ab e6 28 aa 7e 1b bb 39 53 e8 43 5f 83 1d d1 77 cf f5 4b 50 aa 35 39 f1 c0 28 95 cc fe 06 ca 1e 93 f1 e6 19 fe 70 ac 9d 60 ba 10 7c 5b ce 09 c8 00 fe ff f8 13 f5 5f 1c e9 16 50 80 a2 b0 e1 ea 0d 45 1a c8 bf 23 bb 08 03 22 c8 db 5e 3c b5 e0 8b 16 dd 3b 03 ed 5d f3 23 14 e5 d8 11 ec 72 b4 63 f7 94 66 f0 c1 da 49 27 11 8f d2 fe e3 f8 6c b3 b5 22 6f 78 09 58 f7 4f 8a 31 3c 93 Data Ascii: 1Zt~CTP-C\QM[Hw&w/'=9^%kn#Mk>XXT!8Q5w(aIq:*eJ=D(~9SC_wKP59(p`\|[_PE#"^<;]#rcfI'l"oxXO1<
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: a3 f6 ac 94 4b 66 12 6b 64 64 d4 04 2d 79 07 e3 15 e8 76 93 f8 36 8b 8b 8b b6 0a af e2 e0 e0 74 5a 1a fb 38 b5 4d 1e 51 ac cc a7 cb 47 a2 91 25 27 b1 3b 90 9d 5c 64 4c ff a2 37 f1 43 72 08 97 6a e2 9a 8a e3 ce 60 2c d5 f6 33 75 5e d9 dc bd 7b 9c 13 a4 d0 9d 6e 40 1b ef 63 d2 41 8a ee 7b ab 2e c6 41 55 d0 73 f4 1c ec 57 45 c5 63 99 bc dd 64 3f d0 c4 11 28 0d 1c e8 65 dc 18 bd e6 2b 95 d1 f9 de 5d 7a c2 fe 3d 52 1a 49 7d 11 fd cb 53 0c cd d0 f1 d7 fb b4 1e f2 ec d8 69 5d f5 60 42 b0 cd 9a 5e 1d 72 6b f8 75 57 85 76 be b1 ea 33 55 66 3a b7 5a 3c 7a 5e b8 8d 48 e4 83 48 81 d1 15 53 d9 67 ff 85 b6 92 11 4d 05 79 e9 c1 b9 72 20 a7 c1 66 dd ca 1b 7d 1a 31 3b ee b7 0a e2 2c 16 bc d9 c1 55 79 90 b3 8a a2 33 52 f7 08 ec 5f 82 db 06 37 77 75 45 1d 8f 59 36 de b1 15 Data Ascii: Kfkdd-yv6tZ8MQG%';\dL7Crj`,3u^{n@cA{.AUsWEcd?(e+]z=RI}Si]`B^rkuWv3Uf:Z<z^HHSgMyr f}1;,Uy3R_7wuEY6
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: f0 b6 76 1a b1 35 5a f5 d4 6c 9f 63 9b d0 a6 0c eb a4 8e a5 eb 6e c6 d4 9d 5d 63 5b 77 a2 db b7 57 50 9b 4d b1 e6 3e b4 a3 6b aa 97 a2 dc fa 5d a1 46 89 35 5b bb bd b5 fb 89 64 d1 2e e0 66 93 e4 4f 81 9f ef 7c 6d dc 91 81 e3 bb 49 5e c3 46 60 dc 52 3d 77 68 cf 85 2e bb 84 55 e6 48 58 15 6d af 7d c6 93 e7 b2 25 de 8c 32 f7 e0 48 dc ce d9 5b 38 ce 38 95 42 2c c7 2d e5 b6 ec d3 ca 55 be 77 87 bc 20 f8 40 26 ec b5 a2 bf 3e 9f 15 7b 23 05 c3 77 85 92 a6 5e fe 7f 6a da c7 3a bf 02 32 95 50 69 10 44 85 29 25 37 5f 2a 2b 06 b2 7d 73 d2 50 fd 60 95 99 8e 29 05 9d d8 6e d3 6f 4b 87 0a 69 09 df f4 fa 30 ca 76 ac 28 33 a4 5d 48 14 5f 2d f0 04 03 3a 22 88 48 c8 94 b5 16 24 52 35 b2 68 a2 47 f2 65 f9 30 83 25 43 69 87 e5 fa 2e 4b ab e8 51 c4 dc b3 23 f0 63 05 5c bd 4d Data Ascii: v5Zlcn]c[wWPM>k]F5[d.fO\|mI^F`R=wh.UHXm}%2H[88B,-Uw @&>{#w^j:2PiD)%7_*+}sP`)noKi0v(3]H_-:"H$R5hGe0%Ci.KQ#c\M
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 55 dd 5e 7e f8 74 01 c6 f4 34 7b 17 99 9e 76 9b d0 48 06 a9 ac 38 8b 77 32 bc 87 a9 3a cf 5d 2c 54 e0 69 3e 43 2a 44 de b8 41 8a 39 fd 47 40 48 28 22 4e e8 a5 fb ba 42 88 96 ac e0 3f 57 f1 4d 5a 68 96 ba c9 a0 88 bb 44 0f e1 54 97 db 28 7e 86 b7 c5 fe 4f d5 ba 74 ba 8e 0b 32 95 0f 2b f3 1b 09 cc c1 a4 ac 00 5e 90 37 01 9a 33 e0 a3 ba 9a 87 d7 22 4f 2f c9 32 5d e4 4e 0c de 3f 47 b2 5b f7 0a 13 fb 72 59 66 9f cd 0a 73 50 a0 5d 23 40 b8 e6 f3 f6 c6 5a 12 da 23 0d b2 58 f0 94 22 7e 1b d1 60 f5 03 0e cd a6 72 1a 92 ac 4e 41 e3 44 2e 37 93 12 50 dd fc c4 db d9 f6 8b b2 11 b2 f2 17 c8 14 b5 c1 70 78 23 c0 0c 07 c9 27 05 48 6f c6 4d 84 64 93 23 d0 2f 91 32 c8 0a 3e a9 44 0a 2d 64 2b 70 c4 82 60 1f 98 00 01 1f 51 34 82 3a 73 48 34 26 21 59 52 53 5c 8c 67 5c 73 fa Data Ascii: U^~t4{vH8w2:],Ti>C*DA9G@H("NB?WMZhDT(~Ot2+^73"O/2]N?G[rYfsP]#@Z#X"~`rNAD.7Ppx#'HoMd#/2>D-d+p`Q4:sH4&!YRS\g\s
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: c1 b0 12 60 70 7b cf 2e 6d 93 b0 b0 a8 35 90 ac 2a 0d de 15 96 4b a5 d2 00 f3 de 4d 14 d0 28 1f 9e 17 29 35 54 81 a4 3a 95 f0 60 9c 1a 77 17 f7 7a f4 b0 d7 de 3d 6a a9 c1 2f bf ee f6 eb bd 59 19 49 a6 77 24 ed 76 5a 2d 42 0c 0a ae 8c f2 cc 50 71 22 c6 f0 1f d1 4b 16 06 32 94 02 0d 84 1b e1 ad a5 76 d3 49 36 48 f2 fd d2 c0 60 f6 48 63 72 ca 6a 57 9b 58 9b e9 f0 02 7b 7a 05 9e 4a fe 87 af 88 b4 f2 12 04 80 0c b9 61 36 42 ea 78 0a 74 74 4d 00 8d 8f 0e 82 54 0e e6 d3 fc 02 1d 64 49 a0 8f d0 8d 1c 86 da 84 f4 a1 b7 ca 76 42 52 e9 88 5e 1b 0b 68 57 3e f0 5f 83 cb 9e 61 ce a8 92 0f 71 ac 48 64 51 9c de 00 f5 25 d5 8e 58 9a 19 81 49 f9 11 4d e7 1b 10 fa 24 76 15 cf a5 a1 78 e6 04 ed eb 29 0a a6 d1 f2 05 0b 47 53 11 fa 2d 04 db 0c bf bc bd e4 51 5d 05 5d 48 a3 f3 Data Ascii: `p{.m5*KM()5T:`wz=j/YIw$vZ-BPq"K2vI6H`HcrjWX{zJa6BxttMTdIvBR^hW>_aqHdQ%XIM$vx)GS-Q]]H
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: ff 0b 48 fd 6a 90 3d 5e 6b 08 d3 db 28 c6 a4 c5 bf 87 b8 5d 5f db ed 77 05 10 2f eb 89 23 ff be d8 75 21 4e 17 c7 3f 0e a7 25 8b 7e 6e 8e 9e 36 17 7e ff 96 87 ad 05 e1 ab 8a 39 47 4a 36 23 e5 6d 84 66 83 ea a5 b7 18 c3 0b 97 21 15 9d 13 13 38 9e e3 bb 31 d5 3f 85 58 3d af af 7a d6 71 20 25 ba 74 35 1f 34 be 13 20 f1 d1 a6 d8 2e e1 65 a7 cd c5 38 6d dd 03 3e 19 7e 5a 58 5b 04 82 5f 6b 67 1b 00 46 90 d1 00 6a 39 81 a8 63 fe 85 d9 13 f2 ed fb 38 88 f5 a3 1b d8 dd 2f ca 77 0a c9 6d ad d1 3b 57 6e 34 2a 65 4c 32 94 d5 0b a0 93 17 6c c3 2f 4a 84 9b 39 c4 d0 a0 d5 24 c1 ea 5e d9 af 38 4d 24 4d d2 a6 84 80 b2 6b 75 5b 41 0c c4 29 af d9 a5 c4 4b 44 ab a2 7a b8 45 40 40 b4 73 38 38 fa d7 d4 be ea 56 0f 06 35 a4 0b 25 9a 57 b4 dd e2 6f a8 76 e9 3d a7 7b 40 ad 8c ce Data Ascii: Hj=^k(]_w/#u!N?%~n6~9GJ6#mf!81?X=zq %t54 .e8m>~ZX[_kgFj9c8/wm;Wn4*eL2l/J9$^8M$Mku[A)KDzE@@s88V5%Wov={@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49915	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:36 UTC	530	OUT	GET /R9vMA0btLstD6t9Q8S8Unwdahep2m9P4RWri0lCiAKoLjcEs-MwMnShCS3SO_6XR_Hc=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:36 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 303438 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:46:45 GMT Expires: Fri, 25 Oct 2024 20:46:45 GMT Cache-Control: public, max-age=86400, no-transform Age: 7431 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:36 UTC	843	IN	Data Raw: 52 49 46 46 46 a1 04 00 57 45 42 50 56 50 38 4c 39 a1 04 00 2f 87 c2 5a 00 8d 40 6c 24 39 6c 83 3b e9 b8 24 2f ec bf 60 2a ae 21 a2 ff 13 a0 9f 2b 55 df 95 54 55 d5 ff dc 61 f3 1d 3e b3 09 df 7b 6f 7e 0e 10 01 f9 18 90 08 d8 20 90 36 90 0d b9 96 86 21 17 24 8f 34 01 42 01 06 10 ee 76 9c 2b 1f ac a4 72 c2 67 90 1a 3e 9d d3 5f b6 1b cb fc 1a a4 af 3d bc 78 f4 92 c3 64 0a 70 02 e4 2b 70 ce 39 18 1e 28 7f b4 9a 8c 31 71 60 f3 f3 69 5b 53 c0 2d 2e 86 65 b9 92 7e d8 27 f6 5a 36 1d 60 15 4c 25 4d b5 49 9c 0f 91 87 b9 ae e9 bc 96 0c 6f 1f 03 af dd b6 66 ef d0 b3 34 66 5a db 5d d3 a3 7e ed 7a c2 3b 87 a3 3e e6 d6 89 47 3e 5a 4d 4f 7b bb f6 94 34 a7 4d 62 5f 55 1d f7 5c 56 6d af 6d db f3 15 4c 2e be ce 18 6e 82 4d dd 4a d2 5f 5b 40 07 66 2b 8d 2f 06 6e 63 d7 b5 0d Data Ascii: RIFFFWEBPVP8L9/Z@l$9l;$/`*!+UTUa>{o~ 6!$4Bv+rg>_=xdp+p9(1q`i[S-.e~'Z6`L%MIof4fZ]~z;>G>ZMO{4Mb_U\VmmL.nMJ_[@f+/nc
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: d8 58 fa ec fb d5 f9 d7 4e d8 e0 b0 6b 65 04 ce 96 f9 b4 7d 66 4c 8c 31 8a 82 04 09 42 45 85 a0 0a be 40 95 a9 b4 14 a9 9a 54 5d 66 f2 30 d3 8b 4a 3d 24 36 29 23 05 e5 9e fd 2e 19 cb 2a dc 08 de 73 9f 25 b7 4d 56 ae 35 7c 5e a3 27 f3 3d 73 98 de 3e 27 e3 20 0d c8 23 ba 49 b6 47 5f 21 08 99 cd 8a 54 cb cc c5 07 67 cd 26 86 07 1f 96 92 55 47 36 25 b9 94 31 08 51 71 fb 38 92 24 09 11 6e 17 ce 97 e9 5c 07 8f 8b c7 6c 62 06 e6 0f 83 62 16 79 5d f3 ba 9a 76 95 62 ae 00 40 10 1c 38 64 a4 56 98 6c cf 15 cf 5d 88 22 c8 96 9a 55 93 75 60 12 93 93 21 6c 82 ed 39 7c 25 cc cc 9e 06 ca ce fc fa c9 05 23 9d e9 f9 7c 06 d1 28 6e 35 5b c6 3d cf c7 32 8f 3e 8e 67 c1 79 86 02 18 54 06 43 08 2c ad d5 22 36 52 6a 56 1d b9 a0 8a 6c 0a 6b ab 8d b0 cf d9 d6 44 92 33 4d 09 72 52 Data Ascii: XNke}fL1BE@T]f0J=$6)#.*s%MV5\|^'=s>' #IG_!Tg&UG6%1Qq8$n\lbby]vb@8dVl]"Uu`!l9\|%#\|(n5[=2>gyTC,"6RjVlkD3MrR
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 3e fb 9c 73 e6 16 80 b6 1c 30 92 20 49 88 14 8d ff 3e 60 27 4c ea b1 75 3e 84 c3 b6 6d 03 89 ca fd fe 1b 7f 1d 0e dc 46 52 a4 3d 66 2a ec b9 17 f8 8a 24 c9 b6 6d db b6 cc 3c 5b 9f 73 bd 17 84 c5 1f d7 e2 f0 6e 25 ec 67 80 a0 20 49 92 22 49 32 8d 99 c5 63 be fb ff 0b 99 af dc b7 6c db b6 ed b6 b5 95 53 e9 63 c2 d7 4f f0 af 9a 00 c8 ef f5 93 1f 85 d9 6b a8 6d db 86 79 c2 76 7a 19 2d 07 6c 24 48 92 03 b0 d7 7f 87 a5 0a 3c 26 cf 07 df 92 24 59 92 24 d9 16 8a aa 9a 5f aa 2a 6e 75 7f 2b a8 ff ff 9f fa 82 ea 7b e7 3d d3 dd dc cc 54 44 62 db 46 82 24 51 35 f7 9f 7f c0 77 ed 60 c3 36 92 a2 2b 9f 71 68 1f 5b 4f 81 6c cb b6 6d 4b 92 68 9f 3f 4f f8 f3 f8 0c 3e 03 23 60 25 a3 90 9b dd 35 9a 25 c7 38 f8 96 24 c9 92 64 db ae 44 d5 cc 3d 22 33 ab aa 7b 8c 31 e7 dc f7 db Data Ascii: >s0 I>`'Lu>mFR=f$m<[sn%g I"I2clScOkmyvz-l$H<&$Y$_nu+{=TDbF$Q5w`6+qh[OlmKh?O>#`%5%8$dD="3{1
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 92 e4 e2 75 62 ae 6e f5 aa c5 5c e1 58 fe e1 7b ef 73 8f e0 ac ed 9f 22 49 92 ac 3f 89 88 82 81 43 50 52 31 cd cc 61 66 a6 25 af cf ee 5c c0 b9 9e b3 3a 2b 66 66 66 ae ee 81 a6 aa ce ca ca cc 40 07 03 55 15 91 3f dc 86 07 49 92 54 db b6 6d cb cc 23 5b 1f 73 6d 38 c2 5c d1 0b 7b 9f 73 d6 5e 07 ea 78 0b c0 0c 0b e6 1c 3d c3 f9 d8 b6 ad da b6 6d a7 94 da fa 98 6b ed 73 3e 83 98 d9 e2 08 90 a5 ff c3 a4 a4 cf 3f 00 0a 0a 33 4b be 3c c9 67 a6 0b fb ac 35 7b ab 11 7a 6e db 56 6d 6b 5b d7 d4 7b 1f 73 ae bd 8f 5d 7b fc f9 14 77 f7 cc 21 f3 7f f0 45 58 46 64 21 11 91 e6 c4 e4 5f 8a bb bb bb c3 e3 57 ce 39 7b af 35 47 ef a5 e0 49 db b6 35 92 6c db 7a e1 fb 65 32 77 8f 08 cf 8c 48 ce 9c 73 51 9d 99 99 8a cc 58 c3 3a 43 44 c2 62 5e ab 25 cc 1d 58 0d 98 cc 3c 13 03 9c Data Ascii: ubn\X{s"I?CPR1af%\:+fff@U?ITm#[sm8\{s^x=mks>?3K<g5{znVmk[{s]{w!EXFd!_W9{5GI5lze2wHsQX:CDb^%X<
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 77 99 a1 82 b3 19 aa 5a 50 87 10 e0 6a 53 08 4d a6 6a df 6f bd 3f 6e 0b d4 a6 50 0d 4d ea 43 08 4d bb 2f ed 7b ab 8e d4 c1 fb 37 3f 9f ef be 1b 46 bd ea cf a6 d0 b6 bc fe db df ff d1 e1 50 84 e1 06 34 8a a2 01 07 11 1a 8b d0 08 e2 60 88 22 c0 01 1a 21 88 43 00 09 0f 70 1a 24 09 79 b6 0a 9a 25 0c f4 6f 04 80 ee 0c 53 21 77 56 1d 5d df ac e3 51 e9 b8 fc 81 a1 57 f6 7c 7f 18 42 63 5e b2 43 f2 28 a2 59 a3 da 40 ba 11 c2 08 d6 4d 26 ac 63 de 9c 1f 19 60 a0 83 78 ce 94 08 05 90 02 03 1d 36 61 2b 84 29 ca 0e 8c 74 44 31 30 a3 18 b0 9d 82 27 64 05 86 48 b0 78 74 36 82 10 c3 91 e9 2c c6 5d c3 2c 76 8c 19 4d 74 96 05 c4 23 bb 89 60 05 18 a4 34 40 c1 14 18 52 3f c3 d0 e7 e4 14 4a 00 a1 99 3c 07 0c 9c 9b 85 ca 61 2a 01 76 80 20 48 82 25 80 f9 b2 50 49 22 14 a0 11 1a Data Ascii: wZPjSMjo?nPMCM/{7?FP4`"!Cp$y%oS!wV]QW\|Bc^C(Y@M&c`x6a+)tD10'dHxt6,],vMt#`4@R?J<a*v H%PI"
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: be 7f fe c7 76 fb f2 bd 7f 5e 7a fb 79 ae b8 8a 91 eb 36 34 ec a3 5d dc 9a 04 c2 20 69 08 4b 20 f0 b0 52 02 51 81 b0 07 ca 50 28 50 19 4a 20 7f 10 84 41 02 39 69 29 a6 0f 25 28 61 92 00 00 4d 21 27 0c 81 9c fd e3 48 30 9d 66 a7 04 a0 42 01 96 40 86 68 34 84 80 1b 70 08 1e 21 ae a8 b3 a5 db 79 6f 96 5b e7 cd 56 3e 12 ed 68 2e 20 5d b6 54 37 12 a6 8e b6 18 a9 33 45 7b b7 1b e7 b9 dd 8e 8d 7a 99 ab 22 d8 75 dc 4d fc bd bc fe f8 9b 02 9b 3b be f7 f5 b7 69 7f d1 a2 ee 99 67 dc dd 52 ed e8 f7 df be bb f4 f9 b7 2f c2 ae a8 db fc 4e d7 df 7c a6 55 7d 1c 71 e8 78 11 1a 37 84 d1 d1 23 14 45 dc 2b 11 c4 c1 ff a3 03 43 18 c8 01 8f 07 c1 e0 0c 61 08 9b 00 fb f9 97 30 90 94 72 20 db 99 1c bb a0 32 10 73 21 56 b0 86 8a a1 1c 28 5f 37 fa bb ef a8 58 21 16 d5 8e b9 62 9d Data Ascii: v^zy64] iK RQP(PJ A9i)%(aM!'H0fB@h4p!yo[V>h. ]T73E{z"uM;igR/N\|U}qx7#E+Ca0r 2s!V(_7X!b
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 27 a4 64 06 09 3d 58 94 b4 3c 7d 08 f0 00 74 b9 03 29 0c cb e1 81 4a 20 49 2f 5f 9a 01 36 36 42 29 3a 6a 4b de b6 72 0b ba fd 70 be b7 8a 86 30 3a 1a 41 88 06 34 6a a4 cf 05 21 3f b8 85 9a 29 a3 1e 9b 55 0d 4c 94 0a 97 b9 1a 9b 5c 86 5c 4d a9 52 8e ce de 4f de 33 3b 6c 69 34 5a 2b 4c d7 dd 7b ea 3a af ca 74 03 ca 6d c9 2a 06 42 c2 56 a5 35 34 a3 54 63 c5 87 b8 f4 cd 4d a3 63 3a 24 ab da 2a 13 47 73 dd 54 e8 68 57 8f d5 d5 ad 5e 4a ad ed bf bb 56 6d e3 7c 3a 3c 1f 75 d9 bb aa 93 a9 54 ce 5e f4 2d 6f b8 6a 47 93 6e 0d 07 9f 3c 30 95 c7 4d 5f 22 54 00 03 15 a7 19 4a 23 25 f9 cf 2e 16 0c 85 1c 23 07 58 c2 14 02 9b 12 30 32 5d a1 92 07 a8 02 05 40 80 0a 40 01 2a 49 ee c9 5b 10 9a 92 9c 04 06 3a 81 4a f2 98 05 5c d3 2e ea a2 49 6e 4b 5b 76 fb 33 86 73 ab 61 95 Data Ascii: 'd=X<}t)J I/_66B):jKrp0:A4j!?)UL\\MRO3;li4Z+L{:tmBV54TcMc:$GsThW^JVm\|:<uT^-ojGn<0M_"TJ#%.#X02]@@*I[:J\.InK[v3sa
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 48 a7 0f 45 0b f7 4f 7f b6 fb bd 7e 75 24 a5 5b b5 bf 7c 5d 7d bf ff bd eb ba af ef ff 78 f9 50 61 4f 05 15 a7 9a e8 54 06 2a 20 7b 64 3f 16 2a 12 60 73 98 4e 0b d0 0f 1a 49 00 23 dc 76 2d e8 18 d5 96 29 5c df 8e 57 bc 90 65 8a dd d6 c5 d6 0d 86 6c 97 9d 27 52 63 2b 06 b3 1b 88 a1 e6 06 b3 56 c4 98 71 ec 39 20 30 24 39 3c 1c 60 0a d3 c5 74 48 12 bd 34 3e e4 31 96 8c 50 5f 41 33 58 3d 83 4a 7a aa 39 90 cd 70 c1 80 0d a6 83 27 6f 79 cd 0a 63 30 76 65 c7 ce d7 01 60 0f 73 aa c0 9e 81 d8 b0 d8 8e c1 73 76 2d fc 65 99 be 29 4e f1 e3 bc 1c ec 39 9e 18 dd b8 7d 72 1f 60 08 43 92 c1 49 81 fa f4 93 04 0e 72 82 40 43 31 0f a1 23 21 01 94 69 b9 81 01 42 b4 57 06 67 d3 76 2a 1b 77 b9 86 89 e3 92 77 5e 83 8a d2 bd f7 3a e2 73 b1 df 96 3e e1 34 75 08 cc 0b 56 ab 00 e9 Data Ascii: HEO~u$[\|]}xPaOT* {d?`sNI#v-)\Wel'Rc+Vq9 0$9<`tH4>1P_A3X=Jz9p'oyc0ve`ssv-e)N9}r`CIr@C1#!iBWgvww^:s>4uV
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 7f ab 71 e9 94 27 a9 68 2a ca 48 cf 73 b5 0b d3 5f 78 b0 4e d1 df b6 d5 5a 51 8f ce ad aa 63 ab 2b a8 ad 8f d9 9a e5 ac 28 5d d1 3a 85 40 e1 36 0f 1c 1f e3 8f af 1f a7 47 d5 8c 7a 46 d5 f9 18 4d 47 7c 38 33 9a 0e 09 93 f4 24 e3 09 92 3a 66 28 33 a2 a0 c0 c0 f6 91 73 a9 16 7d 77 a3 00 0b c8 d4 83 2e 2a de e8 4e 83 04 49 92 0a 95 42 54 0e 0b 81 a4 8c ae e7 d4 12 07 0a d2 37 34 88 b3 dc bd df bb db ed 68 2b d4 57 ae f6 5e 6f ed 29 e7 61 3f ba dd ae d6 7a 6f bb 46 3b 93 5c 49 db 0a fa de df 7e f7 f1 94 49 4a c8 6b 9d 3e 91 95 af ff bd ba fb 68 91 ce de 5a 38 5a e5 ea 85 5b 1b 6b ff cd 89 ab 5b a3 ca 26 88 1b 16 91 aa a7 74 99 91 f3 06 0a b7 28 37 47 15 ad ac 71 75 fa f4 44 d1 56 b9 b5 9e 8f 6e d3 5d de fb 47 b5 5b b7 5f af 0f 57 db 0f ae 50 dd c0 f2 db fe e9 Data Ascii: q'hHs_xNZQc+(]:@6GzFMG\|83$:f(3s}w.NIBT74h+W^o)a?zoF;\I~IJk>hZ8Z[k[&t(7GquDVn]G[_WP
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: ec 6c 02 7d 5c df c5 bc 4d 1f e0 03 cc 55 ad 42 49 58 37 af 83 ec 46 ca d2 cd 0c 97 61 e9 56 f3 0c 2d 37 5c b2 da b2 1e ad 2f 83 b8 6b 5c 85 f6 8a 26 a4 67 39 fc ab 1c 0d ee cc c5 80 af 83 33 01 85 e1 e1 50 fe 72 12 38 ed a4 94 9c b0 94 e2 67 08 92 20 55 0b 5b f8 26 81 40 13 68 09 10 48 0e 2f 87 21 90 04 31 12 06 09 1c 1a 31 71 68 e6 96 3d b6 ae b1 ed 91 82 e7 6d 31 73 34 e9 0c b5 e5 ea 36 6f 9d 8e 88 db 4f 59 6a b1 d4 ae e6 1c 64 57 57 34 29 7a 8b ae bd 48 dd 9e dd dd 6c ed 44 58 c5 2b 4e 37 5f d8 31 1f 4f 5f 61 25 52 e7 aa b2 ba 84 a8 a3 38 95 23 83 ba cc 8a 99 b9 6e 48 d5 9b 3a 55 59 b4 41 b5 0d 7d 1f 45 13 95 c8 82 6e c9 5e 77 a0 5b 8f 4b e1 80 3f 97 c2 c8 6a 6d 4e 97 e6 3a 54 19 5d 36 db 62 c5 07 43 7d 25 eb 54 43 9d 3d ab 75 54 a6 0d f9 62 bf 55 ba Data Ascii: l}\MUBIX7FaV-7\/k\&g93Pr8g U[&@hH/!11qh=m1s46oOYjdWW4)zHlDX+N7_1O_a%R8#nH:UYA}En^w[K?jmN:T]6bC}%TC=uTbU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49916	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:36 UTC	537	OUT	GET /X5t_FHWLUo0xFsu1FhjgcZ8qWWSrDVHdus0OtKW4HRFLyUbsbg95dv5dsPk9PW5WTWudRdY4Pw=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:36 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 16248 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:31:18 GMT Expires: Fri, 25 Oct 2024 22:31:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 1158 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:36 UTC	844	IN	Data Raw: 52 49 46 46 70 3f 00 00 57 45 42 50 56 50 38 20 64 3f 00 00 30 db 00 9d 01 2a 88 02 6c 01 3e 3d 1c 8c 44 a2 21 a1 12 4a 2c c0 20 03 c4 b1 b7 70 ba a8 7f 4b 4f f8 dd 8f 59 37 ba 7f 53 fd 86 ff 13 fb 89 f3 49 61 7e e1 fd cf f4 6f f7 2f da 5f 96 9d c0 76 17 9a ef 93 fe 99 fe d7 fb ef ef 47 fa 8f 9a 7f e5 ff e3 fb 1f fd 27 fe f3 f3 bb e8 07 f4 e7 fd 37 f8 2f f2 bf fa 3f cc 7c 5f 7a 9c fe cd ff 87 d4 0f f5 5f f0 9f fa 7f d3 7b c0 7f aa ff ad fe 57 dc df f6 af f6 5f f6 bf cb 7c 00 ff 55 ff 1f ff 87 d7 4b d8 7b f7 97 d8 0b fa 97 f9 af f9 9e ce 7f ef 3f fb 7f b1 ff 89 ff ff ff ff d9 5f f4 ef f6 5f fc 3f dd 7f cc ff ff ff df ec 3b fa 2f f8 2f fe 5f e8 ff df 7f ff ff ff f4 01 ff 53 d4 03 fe a7 ff ff 60 0f df ff 71 7e b1 7f 87 f0 6b fb 1f fb 7e 96 0f 6f fb 75 c8 5f Data Ascii: RIFFp?WEBPVP8 d?0*l>=D!J, pKOY7SIa~o/_vG'7/?\|_z_{W_\|UK{?__?;//_S`q~k~ou_
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: fa c2 0a 08 f0 e0 3c 29 59 05 4f a1 b8 55 05 7e bb 16 3d 3b 7a 08 e9 9b 54 57 13 f2 48 25 1c 95 04 27 38 4e 27 e4 85 e1 cd 68 42 a5 27 16 15 b7 44 c5 13 2d 5b 66 1b bf 3c 55 ae 7a f7 45 31 2a 6b 1d 37 8a ae b4 be e2 85 88 39 4c db 4b 89 0e dd 30 3c c7 1d c6 e4 7c 7e 0e e0 b1 cc 5c 82 13 9c 27 13 f2 48 25 1c 94 fd f5 63 84 bf 67 3f e8 35 46 d7 ee e4 1c e7 6e d3 85 18 8c f6 89 e6 c2 92 b8 40 f3 b2 83 2c 6b f1 da b0 e0 d1 7a 68 b7 cc 61 8c e8 6b b2 64 da f1 ba 6d 82 e8 a1 ee 06 17 9a 31 be 8f df b6 18 a5 7b 01 20 cb a6 c8 d8 69 d4 94 df 00 ca 11 3f 24 82 51 c9 50 42 73 84 60 df c2 2e 1f 64 77 9c 5e 80 5a f0 03 e9 aa e8 5a 81 2f 3f 04 19 54 5c f4 ab db 0d 5d d2 a0 c0 27 97 89 98 1b 54 61 72 a2 5b a1 d1 1f 6d 7a b9 6d 76 6c 33 c9 89 99 b6 7f fc dc e0 d9 5e 70 Data Ascii: <)YOU~=;zTWH%'8N'hB'D-[f<UzE1*k79LK0<\|~\'H%cg?5Fn@,kzhakdm1{ i?$QPBs`.dw^ZZ/?T\]'Tar[mzmvl3^p
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: cc 8e 13 66 8f ae f0 3a 60 93 a8 fe 7b 50 4a 94 7e 38 80 30 26 7f 06 2f ee 2a 07 21 ac 31 bb e4 4c ff ed 15 49 e3 25 2b 39 3f d4 23 a4 d4 00 2b 57 e5 5d 94 01 40 6b c0 cf 28 98 4f e8 07 3d 43 a0 72 b6 f7 67 ee 06 e6 45 fc b0 99 92 ba 38 92 db cd c6 55 46 2a 53 fd c7 59 46 29 19 77 c7 34 6f ef ac 4b 9b 3e 5d 0f 16 f4 2d d8 72 c8 af 3d 15 0e 98 b0 c1 d2 35 25 1e 77 2c ff 10 d4 8d e1 99 35 0c 22 14 6b 77 c0 3f a8 bd b3 d4 a3 da f0 6e 84 bb 4f 58 3f 42 ff 98 58 b9 65 ac 2e 0c 58 a4 c4 87 a4 af 7e 8b e9 56 d1 e1 0c a5 73 ed 2b ef b4 9e 83 24 4f 96 34 65 8a 3b 34 b9 34 bc 20 56 d0 2d 9b bc a5 13 36 c9 92 fd ed f0 00 9f a9 70 99 6b 63 c4 91 fc 83 52 fb 9f 47 c3 7a 7a 2a 5c 38 f6 41 d2 1a b2 13 65 66 fd a7 fb 42 60 d4 1f e0 f0 f8 4b 2f 32 ca ad 33 f6 33 b6 9b da Data Ascii: f:`{PJ~80&/!1LI%+9?#+W]@k(O=CrgE8UFSYF)w4oK>]-r=5%w,5"kw?nOX?BXe.X~Vs+$O4e;44 V-6pkcRGzz*\8AefB`K/233
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 1e 21 3b a0 8d 5c 1b d9 a3 81 d9 8c 78 ac b3 95 42 77 46 db af 01 f2 0d 4e 6b de f6 9c 9f ab ca d4 a2 5d db 5a 03 d8 99 99 20 cb 86 81 d2 9e e1 60 4b ab 52 29 51 1a dc 96 bc f7 da 34 35 ca 05 02 8f 0b ba db 2b 76 33 95 1c 8a d6 65 54 f3 01 6d f8 54 73 7c c1 df 94 cf c1 54 c3 20 8d 33 83 6a df 40 00 51 68 8d de 35 0b 2c e3 50 ee 90 e4 ec dd de 90 23 20 4e 08 80 44 77 f7 64 68 fc 86 4b d3 7f c7 74 1f 70 30 dd 9f a1 16 b4 ca 66 3e 9e c5 ae 48 e4 54 54 86 7e 4e f4 de 2d c0 a7 06 9e 8e 29 d3 b4 d0 15 c6 4c 15 10 e5 95 c4 d1 b3 44 82 3a 6d 82 c5 1a fd ef 25 0c d3 a8 29 99 f9 d5 ef da e1 20 d2 1c a7 ab 81 72 ef fc 5f 7d c6 42 ab 68 7e 54 2a 34 50 97 51 93 2a 3c 60 89 86 99 13 6f 8e 59 3d 70 ea 7f 62 e0 66 f9 d2 f3 c7 1a 13 6e 02 a1 cd eb 3b f0 f4 b6 c5 ee 20 47 Data Ascii: !;\xBwFNk]Z `KR)Q45+v3eTmTs\|T 3j@Qh5,P# NDwdhKtp0f>HTT~N-)LD:m%) r_}Bh~T4PQ<`oY=pbfn; G
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 80 1b 65 e1 97 82 0c 52 f0 9f 66 54 3e af 41 5c 51 d4 a2 1f b0 01 89 5e 86 fd 84 95 4f 5a 6a ac e1 71 46 93 d5 e4 f3 db 30 1e e8 4c e7 37 24 e3 d4 23 5a b2 b0 d1 b1 e9 90 c6 0b 74 7d 52 19 f7 f2 8e 38 2c 3d d3 f8 4c a8 df e5 9f aa a3 49 41 ee 14 9f a6 57 52 e7 d2 6e e7 73 72 d6 d3 48 9b 79 9c be 6e 05 cf f0 28 45 25 f7 f0 ca 42 65 19 19 e2 d4 a4 80 7b b4 93 bf 13 f8 30 b5 00 79 d7 7f f8 85 ac e1 cd e2 58 36 c0 a7 63 f9 69 08 ca 40 c6 0b d8 fc b0 4e 91 1e 6f 07 45 12 28 4f 3d 60 72 12 55 50 e9 9b 5e c2 ae e0 2b d8 a1 99 44 61 6b ef 7d 4d b0 e8 3e f2 88 0b a8 a5 1e 29 62 fa cf 23 c0 35 64 85 76 62 b5 dc 08 52 cb 7d 45 e1 97 ef 11 fa 86 f1 75 c8 cd 3f 47 a0 5f 25 c3 8e 31 f5 0d d9 85 dc 6a b2 83 37 31 7d 96 b8 ed 1b 07 3f fc 69 f2 3c 3d 21 37 d3 6e 42 96 8a Data Ascii: eRfT>A\Q^OZjqF0L7$#Zt}R8,=LIAWRnsrHyn(E%Be{0yX6ci@NoE(O=`rUP^+Dak}M>)b#5dvbR}Eu?G_%1j71}?i<=!7nB
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 10 1c 9b 11 21 97 d2 51 d0 3f 1f 61 d7 47 71 75 b5 04 e2 56 96 53 e1 38 cb 52 e9 91 10 69 a1 ee ea f2 e8 ce 00 96 dd b8 42 06 d8 59 b8 dc 6a a5 0a ff 93 53 5d a8 e1 0a 46 72 e5 ae e2 8c 76 45 11 02 1d 77 a7 e7 41 71 11 9e 76 c4 32 9b eb e6 63 d9 9d 37 b4 fe 80 a2 6a 0b 49 f2 2c 50 c1 f9 b1 c5 1c a1 1d b2 74 cf e6 34 4e f5 65 da 43 b3 7f 39 b2 25 9e 2f 8a 3d b9 3c 6e 3f 2d c7 49 17 2a e6 6f fb 7e d4 f1 98 cb bf ec 22 d4 2f 24 03 00 33 04 2b 94 7e f6 1f 3e 46 f6 31 17 19 79 35 f4 ca a1 01 99 88 00 02 d3 b5 5a dd ce 78 a1 0a 64 66 1d 3b a8 ba bd db aa 41 8a c1 d2 20 23 55 9c 9e d2 8a 03 5d f7 66 32 e6 b5 ff b1 ed ef fc 45 2d 6b fa 26 f1 a5 fa 18 cc 94 18 f1 aa e3 00 10 40 fd 1f 3e 31 6f 36 f5 10 ea af 41 50 80 f4 7d 7f 78 6d db 19 70 27 92 f2 89 dd 9c 1d 93 Data Ascii: !Q?aGquVS8RiBYjS]FrvEwAqv2c7jI,Pt4NeC9%/=<n?-I*o~"/$3+~>F1y5Zxdf;A #U]f2E-k&@>1o6AP}xmp'
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: a6 a8 87 f3 bd da 22 81 f4 29 5c 28 1f 5c 5a 86 ab b3 8e d5 2f 57 36 6d 2c 74 d4 23 fe f9 67 81 d0 6b 83 9f 7d 42 fd a4 51 7a 70 80 eb 9c 0d 8a 7c cf 7f 07 a3 4d 51 88 6e 45 b0 80 a0 49 fa 27 36 da fa 42 d1 92 a4 5c 57 3f 76 02 4b 77 2c 4d af bf f7 3f b1 4d 9c a9 bb 41 af 66 fd 98 84 55 41 e5 d1 04 0f 35 ca 75 83 d0 d4 a6 0d 4d 78 ee c9 41 67 e8 7e 74 e0 90 6c 61 12 9b 9a 4e bb 4b 60 ce 1d 51 0d f7 68 fa 85 7b 41 5b 99 43 de ff e7 5c 57 04 29 66 a0 82 d1 86 61 4b c3 35 74 da 1b 07 49 96 91 5d a1 8b 8e 3d 73 32 08 78 ad 1a 87 36 6c 8c b5 46 97 50 df d0 93 bb 44 54 a8 97 fd 1a 90 a9 f6 21 9c d2 cc 6d d5 34 9a e9 eb fa d8 5e 90 7a ca 5e 3e 9f c1 00 ed 25 50 27 5e b9 a9 9f 40 17 81 4c bd a9 14 b2 57 a3 94 c6 49 1b 09 08 a6 ce 60 07 bc 2d 84 dd c5 79 46 47 f4 Data Ascii: ")\(\Z/W6m,t#gk}BQzp\|MQnEI'6B\W?vKw,M?MAfUA5uMxAg~tlaNK`Qh{A[C\W)faK5tI]=s2x6lFPDT!m4^z^>%P'^@LWI`-yFG
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: be d1 f4 c2 a0 0e 9d 5f b4 42 87 c3 b4 55 ef 2d 59 a9 f4 79 ac 55 65 2b bc 9e 54 22 94 18 21 a2 57 de 1a 97 15 6e 8e 15 6b 2a 41 c2 1a f2 cd 56 6d e1 9c 6d de ac 47 7a 14 23 54 f3 cf e2 c9 78 e3 cf 79 9f aa 77 83 69 17 99 33 d4 61 27 5e b5 fa 3a d4 27 bf 8a 61 f7 d6 a0 7a 4a 57 3b b9 8a 12 1a 98 18 3d d1 9d 85 84 88 76 50 e6 c2 e3 7e 2c a4 41 9b 11 9b 4f 6d bf c4 30 e4 59 07 01 a5 86 eb 01 78 5e 66 1b 50 b2 14 18 6d de 7f 3e 3f 9a bd 2e 2b 74 38 79 4a c7 04 ed 8b d1 c5 2f 5f f7 24 0d bf 22 3c 54 57 3e 97 cb c2 c5 36 0e 0e fe 17 ee fb 92 66 39 01 de 8d c9 17 eb e9 89 e4 af 00 77 55 4b 67 91 fc 89 04 51 c2 2f 74 c9 45 43 88 c9 bd ad f9 67 26 0e ea af 4b af 46 23 ac 95 db fc ef 15 e5 aa aa 01 c8 88 5b 58 e1 27 4a bd e1 6e 98 d6 b3 a0 0d 9b f7 a6 a6 f1 62 27 Data Ascii: _BU-YyUe+T"!Wnk*AVmmGz#Txywi3a'^:'azJW;=vP~,AOm0Yx^fPm>?.+t8yJ/_$"<TW>6f9wUKgQ/tECg&KF#[X'Jnb'
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 79 69 fa 07 75 00 a5 3d 51 03 aa ef f2 4f de 2d 47 8d 08 29 a2 e4 e5 3d 50 cc 65 5b 0a 3a 31 a1 65 72 38 af 82 cc e8 eb 74 4c fb 6a 22 4c f8 05 72 c2 71 de 4e f6 0d 99 91 a7 4a a9 e1 e4 8c 83 53 e2 cc d8 d3 46 d7 7b 2d 16 f9 ef 3b ee 9c d0 03 69 79 80 f2 6e 84 a5 89 eb d9 12 4f bc 7e 26 55 8e 2f 6f 1c 9d f5 3e 65 78 95 e2 24 ac 2b cb b3 c0 d2 da f4 b1 74 8b cd 9c c7 34 20 0b 45 e2 f3 33 2a 3a 75 6e 94 c8 92 ad d3 77 7e 11 ef 0e f6 96 82 bb 79 de a9 9a 24 7e d9 b8 ad 92 64 e1 f0 d7 7b 46 b2 87 df 15 eb f4 7a f5 60 62 7e 29 2f 32 e9 31 d3 f4 b1 cf c3 15 af 60 de 2c 42 ce 50 d7 9c ad b1 5f 6f 86 49 0e 84 e1 5a 86 f5 40 d0 18 ce 84 db e1 bb f0 06 1d 97 b2 a3 fb 6d b2 5a 68 c6 2b 18 0d bd 45 0b 89 20 aa 85 52 a4 8c 99 a0 bc dd d1 1e 95 fe 1c 13 df e1 f3 31 7e Data Ascii: yiu=QO-G)=Pe[:1er8tLj"LrqNJSF{-;iynO~&U/o>ex$+t4 E3*:unw~y$~d{Fz`b~)/21`,BP_oIZ@mZh+E R1~
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 06 67 dd 07 24 b8 7e 22 33 a2 df de 1d 81 9f a8 de a3 2f de ab 0b 27 42 db 4f fe ea 20 9e 70 be b2 b9 bb 70 1f d4 65 53 4a f8 49 aa cc e5 ca f4 66 1c 8e 58 2b 1c ad 79 61 0d 2d 63 7f 97 74 a9 00 cc 3d a1 c5 5b b2 95 c4 12 a3 bd d4 a3 3e 93 77 ea 16 8a b7 7c 62 b8 50 d9 aa 94 f7 b5 4e 4d 98 b8 1d f7 49 9d 0a b4 2f 55 1c 86 ef 74 2a 69 47 9c a3 1d 19 dd 63 9c fd 56 9e fc bb e3 c1 81 6b b2 fc 24 e4 fe 6b 56 7f 86 a8 18 29 13 b7 53 3e b3 69 23 e6 42 41 a2 2a 74 31 02 f6 c8 a3 15 b0 5f 82 3b 0e 00 a9 3f 0e 0f 10 bd ec db 8c a5 b9 26 31 87 e0 eb 48 e8 fe 26 39 7f 77 27 c4 76 5b 94 5a 74 25 fd 79 b9 fe 31 6d e3 63 fe da 9a 55 c7 6b 90 24 f3 90 e9 4e ec db 6b 0c d5 0a 2a d6 2b e3 49 9f 0a 44 e5 00 78 d4 3e 67 62 f6 23 61 81 38 24 0f 2b 64 f6 c9 2c 31 e1 de 80 34 Data Ascii: g$~"3/'BO ppeSJIfX+ya-ct=[>w\|bPNMI/UtiGcVk$kV)S>i#BAt1_;?&1H&9w'v[Zt%y1mcUk$Nk*+IDx>gb#a8$+d,14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49917	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:36 UTC	1099	OUT	GET /sj8PUk54GEgDfm4Ya37Zg_Br0jG0jEU-4p2mw5-vwGM63a384TPHAO-3mzlOSYEQcEp1=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:36 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 43154 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:32 GMT Expires: Fri, 25 Oct 2024 19:12:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13084 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:36 UTC	843	IN	Data Raw: 52 49 46 46 8a a8 00 00 57 45 42 50 56 50 38 20 7e a8 00 00 30 ce 01 9d 01 2a 88 02 6c 01 3e 3d 1e 8d 45 22 21 a1 21 23 35 a9 08 40 07 89 69 64 e1 f6 cf 3f c0 c3 5b f8 7f fe f4 c6 6a ff af cd 91 b0 bf 4b 9b fe 37 1f dc e9 84 cb 1f f8 dc f1 7f fe f2 1b fd cf ff dd ec 2a 66 b5 4f 8a e1 71 af ff a4 df b3 63 bd 15 ed 9d f6 db 61 cb 70 f0 ed 74 c8 24 fa 81 dc 19 e6 3f cd d7 ce 4b 7e 63 d0 03 a6 2f 20 63 f0 be 41 fe c1 f7 0f c0 ff d9 ff 4d f7 79 fb 95 f2 37 6b 7f a7 fb e3 f4 17 fb 87 eb bf dd ff 8b f7 53 ff 5f 7a bf cb 78 82 fe 69 fd 6f fe 17 8f 2e c7 89 e8 f5 05 f0 27 fc 8f 57 99 8d 7d 9b ee 7f b8 0f eb cf fb cf 5b 7f f7 78 22 fe 53 ff 1f b0 0f f4 3f f0 3f f5 3f b9 fe 51 fd 4b fd fc 7d de fb 56 fe 0f fe ef ff 3f 70 9f d8 bf fa fe bc ff ff 7f f3 fc 0d fd d9 ff Data Ascii: RIFFWEBPVP8 ~0l>=E"!!#5@id?[jK7fOqcapt$?K~c/ cAMy7kS_zxio.'W}[x"S???QK}V?p
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 86 2d 19 ca 96 3b a9 fe a6 8c c8 1c 15 2e 0c 48 6a f5 1c f9 e9 ca 8e a3 b2 e0 47 d2 42 33 9c f0 be 4a 8a 51 1b e7 2f fc 40 91 09 c5 e6 b2 4f 42 c3 e8 b8 1a 65 1a 29 5b 20 cb c1 18 1b 3f 2a 1e 84 6f 0d 81 32 f5 29 7d 22 7d 03 c8 16 01 d2 a5 b8 39 15 3b 4a 63 12 f4 3b dc 1f 8b 5d 5e 96 18 1a 99 d3 d9 62 38 58 3b 95 15 3a cf 28 b5 55 da 13 11 50 90 2f cb 1a 3e 47 02 02 8c cc 6c 6b 0e aa ab c1 fd 0c 36 84 09 01 97 d2 a5 0d d6 9f 9c f0 c5 c4 73 59 58 7d 47 fa 4b 68 5a d8 8e 65 b1 f4 73 95 59 93 94 50 29 7a 7e dc ef 0e 6f 7c 6d f7 d5 ff 0e 1e 4e 9c 7d c8 7a 59 f8 04 7b 9a 19 8e 10 06 f8 84 76 fb 23 5a 88 cf a2 4b 80 3c 4c 51 cf af fa 64 9d 08 a1 65 82 9f d0 3f d4 d3 56 4e 04 4a a2 1c 52 4c 71 dd 77 ac 99 1e dd 1f 2a 5c 66 78 76 b4 da 84 39 aa 29 03 69 a5 54 92 Data Ascii: -;.HjGB3JQ/@OBe)[ ?o2)}"}9;Jc;]^b8X;:(UP/>Glk6sYX}GKhZesYP)z~o\|mN}zY{v#ZK<LQde?VNJRLqw\fxv9)iT
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: be 4f bc 63 47 2a 5c b0 f3 54 97 53 09 64 23 0f a5 8a 5b 19 21 ab d6 86 6d b9 b1 94 9d 6d 7f 9c c1 da ec 44 4d b6 1e aa c1 d3 1e 06 a3 8b fe 08 5f 16 1d 9e be 66 a4 92 1e c8 7e ab 6b f0 d3 69 4c 2f fc aa f2 06 7e 7d f2 1f 2a 4f 83 2a 34 9a 4d 6c 31 81 4e fd 07 db eb 1c 33 e0 3c 41 34 2d bd 7c c9 b3 c4 93 19 7c 2c 8f 3d cc b7 11 1d 48 bf c6 19 ca 66 9b e6 d5 9d b1 69 fb 33 78 94 7c 24 be 78 25 8a 9c 2c 4a 52 da c2 08 6a ac 20 c9 62 28 c0 f3 72 c7 33 44 b3 0a e8 c6 4a d2 00 32 d9 a8 3d b1 1e 9d 94 e3 14 77 60 5e 97 dc d2 57 46 14 72 3a fe c9 5f 04 0b e6 2b 54 99 24 5e 80 d8 0d 83 ca b7 e0 40 db 99 c9 1c d2 ad 48 ea 55 a2 6a 85 4a 41 17 95 fb 24 80 42 c5 8d 05 c7 17 0c ec f3 e5 e9 7b 2c 65 68 da 4f 34 d1 40 d3 c3 89 08 ef 55 fc 97 cc ff fe c7 33 5b 0f f2 83 Data Ascii: OcG\TSd#[!mmDM_f~kiL/~}O*4Ml1N3<A4-\|\|,=Hfi3x\|$x%,JRj b(r3DJ2=w`^WFr:_+T$^@HUjJA$B{,ehO4@U3[
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 33 a7 f3 c3 5c 3c 9b 09 1b 7b e5 40 b0 67 93 d2 56 46 5c 34 61 60 21 19 15 ed 44 fa d0 7a a4 39 83 cf ef c1 90 70 fc 89 1b cf 61 86 c0 c5 42 86 f4 eb 12 64 7d 46 d9 87 d5 ad 74 9f b8 66 c3 36 dc 56 bd b2 f0 9c f6 84 51 6a 47 76 8b 27 ba 86 f4 89 49 6b 19 f0 80 31 5f fa d3 5d e5 8f 0a 09 5a fa 49 63 e3 9a 53 29 46 3f 4a db 9b 0d 55 00 12 86 1e df c1 fa 89 1a 21 98 f2 21 80 45 d0 00 fe fd 74 f6 7a 8c b0 61 a5 36 e4 99 bc 76 ec 2f 17 87 12 f7 b9 d4 00 ca f8 c6 e0 bc f4 b0 27 a0 03 26 2c 04 3b ec 0e 71 7c 92 80 fd 97 7d 7b 2d af 68 cb 55 6e c6 d9 77 a3 0b 57 c1 e8 1c dc ea c6 ee 4c 08 8c ca 2c be c5 84 c1 02 ec 87 50 9c 3f 3c b0 c2 6e 31 74 35 5f 87 20 aa d7 85 c2 fa 96 0c 0c b5 b1 45 d7 eb 02 8d 96 fe 93 70 22 0b 3e b6 3f 53 8f e3 37 94 01 fd d1 27 21 9d 28 Data Ascii: 3\<{@gVF\4a`!Dz9paBd}Ftf6VQjGv'Ik1_]ZIcS)F?JU!!Etza6v/'&,;q\|}{-hUnwWL,P?<n1t5_ Ep">?S7'!(
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: cc 22 b7 61 c6 71 15 3d 59 9f 3a 52 28 ce 7e 2b 70 cf ba 78 b8 d2 4b 9b 89 a3 a3 f1 30 c1 b5 ea 89 0b 95 04 f4 d9 fb 1a da 16 83 20 ac 14 b9 4e 31 1c 4b 6a 70 e9 d8 ad 64 ad f3 69 cd c9 88 56 77 1f 31 d9 09 03 5d 79 1b 56 4a e4 7d d6 5e 24 b1 b7 4a e0 8f 6a 23 a7 a8 64 08 8a 0b 12 73 db db d7 c9 1a e2 41 61 5d 5b a4 1f f3 e5 92 dd a8 91 88 3e 70 8e 42 b0 ca e6 e6 44 83 52 ce 11 42 9c 5e d9 da 9e d3 82 81 f0 8a 63 cc dd ce d8 cc 1f 4a b4 e8 c1 ec d6 c7 02 89 47 62 fa 1e 21 4b 9e ad d0 e6 5f 8c 18 41 56 c0 8a 04 b1 9d b1 f1 a5 f6 8b 8d 12 31 87 01 69 42 0e 67 e3 69 84 45 40 1e 49 37 bb c7 6a 65 bf 90 ba e8 62 2f ff 2e d1 f4 b3 39 b1 1d 3e 34 e6 e2 f5 07 00 6b aa 75 65 f7 15 a5 73 2b b2 1d 6a ca 6b 6a 39 8d 71 d5 2d 11 9a 9e 94 2e 02 b4 cd f8 ee b0 1f f5 eb Data Ascii: "aq=Y:R(~+pxK0 N1KjpdiVw1]yVJ}^$Jj#dsAa][>pBDRB^cJGb!K_AV1iBgiE@I7jeb/.9>4kues+jkj9q-.
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: d1 3b ff c3 c9 38 c0 1a 33 74 d8 e0 06 bb ec 38 ad 19 1b 4c f0 34 39 86 79 c0 94 7e 72 a9 b0 7d 11 4f a2 ae 9a dc 2d 70 f4 35 7d 03 c4 1a 12 a6 4a f6 aa 1c 0b 25 6d a3 a9 83 1e de dc 4e 8c 75 9f 32 da 44 54 24 08 83 0e 90 12 48 a5 2f 05 72 c2 47 38 70 37 56 a0 eb 96 44 fd 23 bf 5f 53 e0 ef e9 a7 fa d4 7c df 82 5e bd ca c6 61 eb f7 f2 e8 a5 af 9a 80 60 ca 57 7a 48 4e f4 46 1c d1 24 43 c9 e9 f1 7e 55 74 0b e5 cf a4 43 ed ff 4c b1 90 a7 18 e7 a0 a2 43 d1 f0 fa d9 20 9f bb 8d f6 81 b5 40 2e 36 27 f7 96 01 98 11 af 7e 12 0c 27 76 f8 4e 58 f1 25 64 0d 3d 5a b4 3e a3 ed 20 d3 7d e4 16 c6 e0 89 8d a6 90 c9 d3 61 e0 10 b3 e9 24 18 c2 99 fe 25 67 6e 66 23 bb 89 8e 06 f9 74 1c ef 47 5f 10 55 6b bc a0 27 d2 04 95 6c e1 2b d3 44 41 d8 de 15 f2 53 26 a4 85 6c 83 4d 79 Data Ascii: ;83t8L49y~r}O-p5}J%mNu2DT$H/rG8p7VD#_S\|^a`WzHNF$C~UtCLC @.6'~'vNX%d=Z> }a$%gnf#tG_Uk'l+DAS&lMy
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 93 58 e7 fb d1 6b 14 0c f7 f5 f8 a1 15 d2 64 5e e6 41 ce e1 d4 63 fc f8 a4 3f f7 b1 19 5b 35 94 d0 ff a8 1c 35 42 73 1c e9 f3 59 e9 0e 25 62 91 b2 79 00 85 50 43 3c 1e df 5b d8 cf fd 6e 5b e2 86 64 de cd 29 98 27 71 cf 0b 5b 70 7d db ef 51 19 ec 6e a8 5c 32 19 8c 3f df 6e 6e a2 c3 38 1c 03 96 7d f1 77 c3 5d 28 db c1 9a 50 6d a2 d8 94 f2 70 5c d1 ea 8a b0 c1 b1 2a 74 97 f9 ed 18 8f 75 95 cb 09 a5 b8 84 a0 ab 96 76 95 e8 74 a6 ba 1a 11 9b a9 1b 07 cd f8 7a 7a 41 51 12 76 7a 4d dc 44 2b 63 bc 75 a5 7a c4 47 4a ce 26 49 2d 4c ca 2f 2b 29 1c fc 3a 1a ea 88 ac b4 22 c4 96 18 07 b3 b9 65 bb 63 81 ff 85 90 0b 49 43 06 cc 03 eb 99 b6 bc f1 74 3f d2 f8 d2 50 03 c5 12 29 77 47 b2 3d f2 f7 65 59 9d 45 6d f2 13 af 15 a1 ca e0 c0 a1 fc 22 fb 88 83 64 ee 23 34 14 c3 61 Data Ascii: Xkd^Ac?[55BsY%byPC<[n[d)'q[p}Qn\2?nn8}w](Pmp\*tuvtzzAQvzMD+cuzGJ&I-L/+):"ecICt?P)wG=eYEm"d#4a
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: fc 81 96 d7 32 2a 28 b9 6d bb 9d ea 28 02 99 5d 2d df 5c 75 3a a3 0e 70 ed f6 a6 07 5e 57 77 7f 2b 45 d6 09 4d 44 86 60 6c 5b 27 85 22 57 1c 2f 56 08 aa c9 65 cb 58 3c d5 b7 3a 96 84 4c 2b 9a 6c f2 82 ed 12 cb 70 d3 56 01 3c 47 2d 04 7e 09 a5 f1 c1 45 fb be 4f 6e 48 2d 51 a4 df 1e 9a 68 0f 63 e7 17 b0 30 d8 4e 9b 9a bf e6 06 ce 99 26 a4 d9 6e 5b d6 aa bc 17 15 75 33 67 89 18 b4 bb e1 2d fd 9e 41 95 f8 9d 02 de 9c 08 46 fb ed e7 9e e4 1e d0 58 da 75 67 ea 56 12 b5 c7 27 5a 16 9a 53 b7 b9 1c 61 dc 22 31 1c 45 0d a6 98 ca a4 c5 cf 04 eb ec 59 51 80 59 58 b8 8a 61 ac b4 2d b7 11 ad 8c 5e f3 2a 5b cc d6 0d 04 2c 79 a3 81 6e 09 e1 93 a8 bc e6 a0 e6 f6 19 86 6b 6a 20 9c 51 8b ec f7 aa d5 60 01 59 29 50 99 00 c6 0c fa 0e 79 28 ba 15 ee 5c ed b5 e6 e8 a6 ab 1e d3 Data Ascii: 2(m(]-\u:p^Ww+EMD`l['"W/VeX<:L+lpV<G-~EOnH-Qhc0N&n[u3g-AFXugV'ZSa"1EYQYXa-^[,ynkj Q`Y)Py(\
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 96 49 a1 b0 2d ab 16 c8 35 e7 91 f7 df dc c1 f2 4c be 77 f2 aa 60 cd cb 46 9f 71 77 f6 f6 00 47 03 54 68 4d 6f a5 17 20 2d b6 3c 70 04 35 9c 58 e1 4d 55 68 6b 98 0a ed ce 43 64 6f bc 54 74 ed 4c 48 3e bf 6f 23 22 e7 fa 26 d6 7c b4 29 c3 2d c6 76 a8 a9 c1 aa ff 63 99 6a 6b bf a8 c5 34 0f c1 26 aa bd 97 3c 45 77 90 99 8c 95 51 8c 48 2e fd f8 04 85 6a 3e e7 75 4e e1 ec 2c 63 e6 6b 2f 1d 3c 37 f2 91 c0 67 74 b4 c0 0a 2a cb eb e4 ab 31 e3 51 c6 a3 0e e8 9b 10 aa 4a a5 ee 1b 26 63 b0 bf 2c ea 98 51 d8 d6 aa 07 7b 64 6d 80 9b 66 2f 71 df f8 70 0b 26 8f b8 2c 1e 24 91 bc 22 40 80 a9 10 1f 1d b5 96 21 10 5d 03 dd a6 81 d0 dd da 42 ea b2 3a db 29 e9 9b fc 23 0b 5b 04 4f a0 c9 78 2a fd af ce 38 36 c9 d3 cd 8b 87 44 7e 76 ae dc 15 05 61 b9 4e f6 3f 62 bb b2 db 26 6d Data Ascii: I-5Lw`FqwGThMo -<p5XMUhkCdoTtLH>o#"&\|)-vcjk4&<EwQH.j>uN,ck/<7gt1QJ&c,Q{dmf/qp&,$"@!]B:)#[Ox86D~vaN?b&m
2024-10-24 22:50:36 UTC	1378	IN	Data Raw: 26 07 37 74 7d 28 3e 17 94 aa 04 14 4f 0d 02 0b 38 12 ee 81 eb 5b 43 b5 86 73 97 d0 25 b8 3e e2 5e b7 34 48 49 10 f8 63 c7 51 d1 79 f5 cb 0d c8 d6 95 48 bb 23 99 a8 e1 de db 4e de 5b f9 6f 7d 58 0d cc c1 2c 76 c2 5a e7 8e 9d d2 2d 4a 7f dd b2 9c 49 15 08 43 5e fd db 82 c0 43 83 41 fb f9 a0 bd 41 8c 79 f8 1d 3d 25 fa 5e 00 1a 59 41 b3 07 d7 87 0c d6 84 47 cc af 88 ae bc bb ec aa fe b0 d3 04 f2 98 ab c8 ee e0 26 71 fa 22 5d 04 9c 44 29 2c 80 91 60 68 32 3e 1d 4d 0a 22 36 db 5d 2a 3b 35 2e e1 de b0 00 8c f1 65 e7 ba 7e 38 84 3f 39 e2 05 a8 62 d0 49 41 e7 e5 62 6c f7 21 2e 3d f4 3a f0 2b 8f 57 74 84 8f 1b 43 6e 32 e5 c5 a7 a7 70 6e 2a 77 60 44 96 60 9b 9b 3f 2a 13 ad 93 28 7a aa d9 c3 d8 27 92 74 94 49 76 d5 2c 35 97 00 4f 96 a6 cb 7d 21 be 79 06 34 1a 8b 8e Data Ascii: &7t}(>O8[Cs%>^4HIcQyH#N[o}X,vZ-JIC^CAAy=%^YAG&q"]D),`h2>M"6];5.e~8?9bIAbl!.=:+WtCn2pnw`D`?*(z'tIv,5O}!y4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49918	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:37 UTC	539	OUT	GET /tC7d8c7CF9UbOvBTB-B_17QB2c19cnjILsYw6OtQrGDKy_l8MsEWsGZZOrX2ZFjeDuNA5Zb_i8a-=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:37 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 40286 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:48:57 GMT Expires: Fri, 25 Oct 2024 21:48:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 3700 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:37 UTC	844	IN	Data Raw: 52 49 46 46 56 9d 00 00 57 45 42 50 56 50 38 20 4a 9d 00 00 70 cd 01 9d 01 2a 88 02 6c 01 3e 51 24 8e 45 23 a2 21 14 5b 2d b0 38 05 04 b1 b7 60 26 c7 b5 5e 72 f9 41 c9 ea 95 24 9f f9 dd b8 b2 0f b6 7f 87 fe 47 f7 37 da 93 90 fb 75 f7 8f df bd 5f ff 87 de 5f 69 f9 77 f4 37 fe 0f bd 6f 98 ff ee 7d 57 7e b2 ff e1 ee 19 fb 05 fb 2f eb c1 fb 77 ee fb f7 a3 d4 4f f5 ff f7 9f b6 7e ef 9f ee 3f 6d bd e0 ff 73 ff 7d fb 5b f0 19 fd 5f fd 7f ff 3f 5e 1f 63 cf f2 9f f5 7f ff fb 91 7e cf 7f f4 f5 ea fd dd f8 53 fe d1 ff 4b f7 57 e0 73 f6 8f ff af b0 07 ff af 6c 9f e0 1f f9 7a af fb 41 fe 7b f1 df de 07 8f ff 90 ff 0d fb 67 e7 7f 8f ef 4b ff 01 fb 5d fe 03 ff 8f c1 87 fb fe 2a 3a cb ff 57 a1 7f ca be f7 fe 63 fb cf ee 07 f8 1f dd bf ba 3f cc ff e2 ff 53 e3 8f c8 ef f2 Data Ascii: RIFFVWEBPVP8 Jpl>Q$E#![-8`&^rA$G7u__iw7o}W~/wO~?ms}[_?^c~SKWslzA{gK]:Wc?S
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 1c 87 dd e8 ce 2c 01 3f f7 56 42 28 05 67 c9 81 88 78 db 3b 5b 70 f5 73 95 0c 5c e5 a7 48 06 79 59 97 34 10 31 2d 36 9b b5 32 1b 06 7a 1c f6 fb ef 1f 46 71 9e b2 1e c9 d1 f8 d3 be 60 87 3f 3c 34 71 0d eb 0b da 0a f6 83 ce be c3 a6 35 e1 61 07 9b c3 3e 3f 12 35 ea 7b 9d 2d 91 99 4b c8 50 ab 99 77 08 c4 3a 87 1f 7f 78 a9 31 ea a4 c3 72 7b 89 ec 79 57 f8 29 7a c1 0c 8a 04 ab 67 f9 06 77 96 61 af c7 5b c1 80 84 e5 ac d1 89 a8 ab 10 b5 90 a8 42 27 f8 b0 9d 4c e3 9d aa bd 31 8f 13 6f ba 51 6f 79 5c 19 73 af df 77 2c 7c 77 51 00 3f b0 4d c2 2b 84 9a 8c 9e ca bd f3 55 f9 a7 e6 2d 85 cb d1 10 cd 49 ed c1 83 37 41 95 eb a8 0a c8 2a 48 ca 14 e1 37 f3 22 00 f4 5a 36 01 5c 9d 36 da 61 e4 e6 a0 27 20 9d 74 80 92 e1 9f 7d 1a dd 21 97 c2 2a a1 9b 1b df ac 4e 04 b3 ec c0 Data Ascii: ,?VB(gx;[ps\HyY41-62zFq`?<4q5a>?5{-KPw:x1r{yW)zgwa[B'L1oQoy\sw,\|wQ?M+U-I7AH7"Z6\6a' t}!N
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 45 20 aa 9c d1 90 e5 72 03 b6 16 1a 5e 3c f5 ba 7d b7 72 8c 03 51 53 af b2 ad c0 73 e9 41 f9 8e f9 b6 07 34 aa 4f 0e cb 1e 8e 95 d9 04 db 84 1a cf e5 2b f7 9a 92 28 a8 97 75 56 3f 31 15 5a 3c 6c 07 11 f0 ce 87 71 38 63 d2 76 ce 21 f6 02 c8 c7 0d 43 79 75 d5 6f ac 99 c9 32 f6 b0 9e a2 ed bf 58 cf ff ef 9d 64 e6 a8 60 b8 e7 06 58 84 51 38 4f 52 d5 c8 97 a4 ca 0a 8f eb 91 f7 b3 f8 8d 2d e3 7d c8 73 22 4e a9 3f bb cd 0f 6f 43 91 b3 71 71 b7 b1 24 2a 80 76 da af ee a1 22 f1 25 ae ad 21 3b d8 e9 1a d7 ce 3c bc a2 eb b0 c8 9a 38 f3 c4 46 2b 64 be f1 2d 90 78 2d 69 fd 4b 73 48 bb 3c d1 a2 19 9d 1f 18 2f 7a f1 21 10 6e 85 e9 e4 6d 33 1b bc 65 8c 16 db 9b ea 8b a3 0f 7b b9 b9 9c cd 38 f8 cd 24 18 77 58 8c c6 71 7c 06 ad 1a 99 8c 5a 86 e9 c6 c9 c7 fc 09 39 ad 94 9b Data Ascii: E r^<}rQSsA4O+(uV?1Z<lq8cv!Cyuo2Xd`XQ8OR-}s"N?oCqq$*v"%!;<8F+d-x-iKsH</z!nm3e{8$wXq\|Z9
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 6b 3e 2a 3a 8a 48 0e c2 b3 bf db 31 de ea 7d ca 6a 0d 6c ca 6d 2a fd 19 8a 4c 37 60 04 3a bb a9 a1 2f 5d ad 5a 2d 13 5e 51 54 8e fc ed 54 8f ec b9 f9 eb 4c cf f8 1a b2 10 22 b6 4f 53 ff e1 75 d2 c6 d4 ef a6 1e bb a8 81 f8 a4 6c 4b af 97 41 63 5c 9b 8a 36 20 33 c7 f4 a2 a7 76 eb 38 94 dc 92 e4 10 75 88 1a ba 94 b7 f5 fa 99 31 ad 88 52 2a 75 10 3f 76 78 9e c0 00 fe f5 29 46 ac 00 00 ac bb ff ac 81 b1 27 00 67 80 00 1a 81 0f c4 eb 2c 00 1f 10 65 0f bb 09 a4 0b 9e ce 7a d8 b5 97 3b 69 ca 3e aa 10 3b cd c5 67 f3 79 dd a2 a4 01 f8 f8 d5 47 26 d3 aa 60 4f 4f bb 83 62 9d bd e2 65 90 51 7f fc 81 36 66 f3 96 de 22 ef c0 d4 a1 9a 36 3b 51 37 f1 36 fc a6 64 42 75 28 6d 17 42 34 9f da 7b 5c 5d 07 e5 30 3b c3 a8 5f da 52 f1 45 46 b4 52 19 18 9f 23 96 b0 92 d2 2f d2 96 Data Ascii: k>:H1}jlmL7`:/]Z-^QTTL"OSulKAc\6 3v8u1R*u?vx)F'g,ez;i>;gyG&`OObeQ6f"6;Q76dBu(mB4{\]0;_REFR#/
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: b9 05 ec 8a fa 26 f9 53 3c 35 0f b6 40 76 ea 7d 1f 1b df cd 12 67 55 0d 98 b1 ce 1c 39 af fb 07 65 75 1a 5a 44 3f 48 e0 c2 70 c5 f6 14 5f e9 61 c1 9c 1b 26 27 63 26 cb 81 4f 88 50 fe f8 f7 b9 d6 a5 e9 5a 94 7b fd 58 55 25 b5 9a 43 91 5f 6d 77 8d 89 2c ef 15 f1 94 59 fa ef c1 60 43 1c 32 0b 9c d0 ed 5c 0c ef 44 15 b8 ae 85 4e 1b f2 5d 05 6b 7b f1 95 83 db dc e4 38 c3 a6 e0 e8 e2 8a 09 17 18 39 76 ab 2f f0 71 8a 60 b6 34 5b 18 7a d7 4e d2 e1 2e c4 29 6f 07 11 16 9a e3 91 75 6a 96 ba 57 bb 99 e0 a9 26 e7 39 b0 10 ce 81 b2 c3 23 6b 63 26 b4 4c a3 dd 99 7a ce c3 99 73 51 64 57 50 79 ea 40 ba 04 4e 04 bb 7b b8 66 e3 c0 01 81 e4 39 ff c9 95 d8 5e 84 06 d8 48 10 da f9 4c df 88 0a ee cd 8f 55 ab 38 a6 67 df a9 3c 95 3c 4c 08 52 7b 84 07 f8 40 de e7 b5 09 7f 5a d3 Data Ascii: &S<5@v}gU9euZD?Hp_a&'c&OPZ{XU%C_mw,Y`C2\DN]k{89v/q`4[zN.)oujW&9#kc&LzsQdWPy@N{f9^HLU8g<<LR{@Z
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: d7 63 3a 67 29 da dc c5 05 15 c4 70 d9 74 09 94 a8 77 49 34 1c 0b e1 5b b4 6a 48 2e 91 ac 94 80 16 02 f3 9e 75 2a 6e e6 7c df 5f 08 9c e5 10 f0 93 5e 9f f4 78 50 67 fb 8b 2d 30 9c d6 39 1c 74 61 ee 1d 89 9c d1 3f ba 00 ab d7 3b 6c 33 e4 86 19 ec 77 3b 6c cb 01 b3 9b 8b f4 b0 94 77 e5 1f 99 79 c3 64 38 69 81 fc 13 77 c3 52 a6 85 a1 be 4a 36 d5 87 e2 78 e8 9b 34 b4 c2 a0 26 00 78 dd 3f 3c 6d e6 e1 3d a2 e6 ce b8 0a b3 67 7c 71 dc 98 db 23 ec f2 21 94 b3 29 f1 d8 d0 f6 25 f6 49 77 e2 5c 51 b3 92 6f ae e6 6c e9 b8 d9 c1 2d 0b 7f 1d 73 4e 6b bd 99 55 0b 48 2c 36 6b 79 7d 5a 07 44 d4 d7 4e 2d a5 24 6f 8e 6d 74 c2 80 66 b6 8d 51 ed de 50 ec c5 9d 07 0d a0 68 1d 62 25 ee cc cf 6e 6f 24 07 e3 80 ea 62 17 c4 3c 52 6d cd a1 b7 23 e2 3b df 73 6e b0 de 2d aa b3 64 ba Data Ascii: c:g)ptwI4[jH.u*n\|_^xPg-09ta?;l3w;lwyd8iwRJ6x4&x?<m=g\|q#!)%Iw\Qol-sNkUH,6ky}ZDN-$omtfQPhb%no$b<Rm#;sn-d
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 92 ad 37 f2 4b 9e f8 45 54 52 2b d7 16 13 67 e2 83 12 25 e0 1d f7 89 f8 8e 00 17 85 9b d0 d2 57 b4 79 06 61 f9 24 db f2 90 1b 2d 89 f9 0e 13 75 88 ab 5f 33 66 2c 7a a6 2c e5 ed 8e e9 ee d9 73 bf d0 68 6f 56 e6 d9 0c bb 39 61 24 48 f4 d2 ed d4 f6 33 42 3c 92 02 b3 39 04 8b 46 08 83 0b 75 14 c8 63 57 b4 db 1c ff b9 37 bc 0e 1d 74 48 57 7f 07 28 06 7a 54 7e 5e b2 e4 c5 b1 c2 d9 32 3e 4e f0 49 e5 4b 2e eb c5 35 6f c5 78 8d 78 42 f3 f4 12 0d 88 71 d1 2b b5 67 49 4b d6 1f 7e bf e7 10 64 5b 00 26 14 29 4c 7f 81 1a 9b 4f 12 6e 6f 95 3b 0a 81 aa 65 db 64 ec fc 10 4d 46 b5 79 56 2e df 39 45 f5 bc bb 06 7c d2 30 65 44 f3 b7 9b 66 7e 7f 09 f5 05 a9 8f 9a 58 22 7a 3f 42 b9 e9 63 4b fd c6 60 62 d1 08 1c 82 b4 43 95 72 a4 db da 97 09 3a ce b3 3c 5b 5e 5f f6 c5 c4 76 da Data Ascii: 7KETR+g%Wya$-u_3f,z,shoV9a$H3B<9FucW7tHW(zT~^2>NIK.5oxxBq+gIK~d[&)LOno;edMFyV.9E\|0eDf~X"z?BcK`bCr:<[^_v
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 47 6d 62 ed 0c 6f 2d 76 2c 37 eb bb ef e1 a5 bc 30 94 da bb dd c2 37 33 2d d9 93 05 e2 dd d3 a3 fa f8 06 77 73 1b de 27 e0 04 00 cc cd 6d 29 a3 eb db 4b 63 44 64 c4 52 96 04 fc 0a 82 03 42 3a 33 03 e6 c1 54 71 ec ae 07 7c 24 de 06 2f 7d cf b9 76 c0 2c ae 01 a3 5f 44 21 d7 b7 c8 3c 7d 19 2e 07 c3 c6 c7 05 39 a6 30 bd e3 10 a9 f3 35 82 b0 1e 06 8a 8c 3e 09 1e bb 02 02 b8 02 c0 a1 8e 31 6b 1c 10 12 73 32 8a eb a3 6f 46 cf c4 7a e5 11 14 77 0f 79 a8 2d 60 89 0a a8 6e fd cd 9a 5c 20 17 36 ef 9c af d2 02 b2 e5 2f f2 af 61 24 0a da 35 14 28 ef 0b 06 c9 3a 19 89 70 09 70 f1 6d c2 df d3 c8 db df b8 a1 29 dd e8 2a 9e d5 a1 12 a2 d2 77 5a d3 c9 de 0e 80 98 a4 bd bd a3 a9 91 da 01 28 b2 b4 01 6c 4c 85 04 c3 e2 19 12 98 d3 9d 2a b0 9e 97 62 5b b1 ee 14 da 38 07 99 eb Data Ascii: Gmbo-v,7073-ws'm)KcDdRB:3Tq\|$/}v,_D!<}.905>1ks2oFzwy-`n\ 6/a$5(:ppm)wZ(lLb[8
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 55 72 52 ad 30 27 bb 66 01 7f d4 10 7c ef 95 fb 19 19 b6 d2 71 d0 36 e1 f8 f5 cd 37 17 00 80 8c 25 61 fe 02 3d 52 ad 36 aa 7a 2f b4 93 23 7f e7 fc 32 59 e4 ea 57 e0 50 1c 35 a7 11 85 d7 bc 37 17 77 f5 31 77 1d 96 cc 46 5b 7f 62 17 d8 df 46 ac b4 7c 31 4e c3 3a ee 76 29 a2 41 d0 63 8e f5 53 d6 6c df ef a4 3b e1 74 53 48 24 4c c5 c9 26 52 84 9f 6c b8 b9 86 74 93 b7 da f6 4c 8f 8f 9d 71 5a d9 fc 60 f0 d1 92 ae 27 a6 6a 4e b0 9d 97 e1 93 79 ee 40 0a 4c fd dc dd 81 81 c7 e3 9b 6d 7c 43 08 ac f0 7b 72 e1 c4 74 d4 be 13 f7 87 27 d8 35 29 ed 7e c9 ab 9e ef 8d e3 73 e1 ea fb a6 ec cb 9d 08 ce 80 8b be eb af a4 b0 d9 6f 9a 49 d6 32 3f 80 f3 df 7c 91 99 5e 80 b2 81 68 c8 ba b3 a0 ca f0 e5 05 81 74 19 e8 12 52 a0 4f e4 11 c3 5f ae 2b 6f 65 e8 1d 33 7a fd f6 81 92 47 Data Ascii: UrR0'f\|q67%a=R6z/#2YWP57w1wF[bF\|1N:v)AcSl;tSH$L&RltLqZ`'jNy@Lm\|C{rt'5)~soI2?\|^htRO_+oe3zG
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 3c 2a 55 13 71 93 71 f1 77 43 83 db 2c c3 1c d9 4c d9 9c a5 63 2e 17 c2 b6 e6 e0 17 87 88 46 33 c8 bc 14 0e 01 11 48 33 f9 d0 eb cc 48 88 8b 61 ea bf 56 64 9b 51 67 8b a5 d5 db 29 37 ec b9 8b 68 be 72 17 eb 01 37 e9 23 9f fe b2 98 18 b3 1f 96 e6 38 75 0c 35 69 c3 72 18 ce 6c b8 75 86 b7 b5 3e af f1 e7 a9 95 d3 f0 7d a8 00 b7 07 50 56 9e 77 cf 8a 78 3d 9f 00 33 e1 bf 1a 52 61 1a d9 41 e0 0c 68 1f 36 1b 63 fe e3 3c 13 47 9b 83 e9 ef bd 5b 89 d1 73 b0 bd 1b 76 91 dd 6d 12 35 90 35 b5 68 50 23 86 5a 7a c9 3f f8 47 9d 80 db f7 6a 0e 5f 0f f6 a6 85 4c 10 f2 04 1d 08 24 e7 1c 1d b8 7f c0 66 31 76 d8 c8 04 77 fc ad 15 de b3 2b 90 b8 d8 59 94 37 d7 5b 11 bc 5f 53 71 c6 dc a0 f3 a5 25 8b cc 4a 59 aa 13 68 1b 33 e2 59 44 83 1f 27 57 91 b2 02 a9 a0 26 27 e0 0a a6 08 Data Ascii: <*UqqwC,Lc.F3H3HaVdQg)7hr7#8u5irlu>}PVwx=3RaAh6c<G[svm55hP#Zz?Gj_L$f1vw+Y7[_Sq%JYh3YD'W&'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49920	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:37 UTC	1098	OUT	GET /h-gMHawK62d70rmr4BgsG-397OTjhB_FQ6nkaLc7pgl4FglkgIWHljPbNT0qKmvac6U=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:37 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 205300 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:20:24 GMT Expires: Fri, 25 Oct 2024 21:20:24 GMT Cache-Control: public, max-age=86400, no-transform Age: 5413 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:37 UTC	843	IN	Data Raw: 52 49 46 46 ec 21 03 00 57 45 42 50 56 50 38 4c e0 21 03 00 2f 87 c2 5a 00 8d 40 8c 24 37 6c 33 f7 00 08 c0 4f f5 5f b0 e5 a4 85 88 fe 4f 00 ff 17 bf 75 94 b9 01 48 d2 2f 49 fa 9f 74 8e 90 ae 79 b9 d7 46 34 e8 cd a0 37 21 29 31 21 7f 5f 5f 77 63 c0 92 64 02 f4 03 30 9e af 6b db 12 60 40 92 00 42 29 08 81 b4 81 6d 2e 60 6b 84 0d b6 fc 25 1d f1 fe 06 06 b0 73 26 22 76 ed 39 e7 a4 24 7e 86 84 2d c9 c6 81 44 ec ee aa d4 dd 33 3f fc fa 85 f1 22 c4 ee ae aa 24 e5 cc 28 48 cb 6e eb c5 5c 6c 70 68 6b 43 55 f5 a5 19 11 2e bb 5b f2 bb 00 8c a5 c7 2e 8d 4c 95 94 50 f5 dc 47 7a 7e f0 87 52 55 64 75 77 49 ba 58 ae 47 df 7f b2 a5 76 3d b6 aa a2 ca b8 ac 79 1e a9 51 bc 12 00 d6 4c fa 5b 11 55 e2 6c 55 3f 55 b2 95 19 01 11 09 30 dd e7 60 20 aa 56 5c a9 f4 94 ba 71 62 f3 Data Ascii: RIFF!WEBPVP8L!/Z@$7l3O_OuH/ItyF47!)1!__wcd0k`@B)m.`k%s&"v9$~-D3?"$(Hn\lphkCU.[.LPGz~RUduwIXGv=yQL[UlU?U0` V\qb
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 82 50 43 07 42 7f 13 dc 58 78 00 08 22 3b 58 42 07 1d ec 27 1e 44 c6 c4 f6 d8 e4 74 5b 2b 7c d7 69 f4 56 7f 8c db d7 d9 30 e6 5e 92 73 e7 b4 27 1a a7 1d d1 be 51 bc aa b8 37 72 b0 7d 07 94 c7 6e 2d ce 2c ec da 94 b8 69 8e bd 6a 17 00 80 06 80 26 47 be 8d fc 91 98 12 ca d1 de ca c2 54 6b e7 3c fe 29 9c f1 50 70 6e 7c 5e 07 f2 d4 90 d6 92 5a a3 b5 6d 6b eb c9 6d 7b 0a ad d6 1b 27 d4 2e ec 2d 4b 3e 59 f2 fc 8c 8b 7a cf 70 c8 77 8b 0a ef c6 73 10 59 c0 02 9a 8e 6a 40 13 a9 23 44 c0 d1 01 b7 ad dd 74 40 91 f2 d4 e7 30 90 f9 dc f9 dc c6 a7 eb 26 35 a4 35 bf 5d 92 d6 f6 a8 dd df 6f db 53 d3 bd 8d 93 3b 30 ee f9 ed b0 e6 7c 9d 06 2b 59 70 9d f7 63 ae f3 42 9f 6a 1f 84 00 80 08 44 6c 89 ed 22 d6 4c 2d fd 0a 85 ac c4 47 7f 13 a0 57 19 a5 12 06 8a 01 9c 83 cf d7 a4 Data Ascii: PCBXx";XB'Dt[+\|iV0^s'Q7r}n-,ij&GTk<)Ppn\|^Zmkm{'.-K>YzpwsYj@#Dt@0&55]oS;0\|+YpcBjDl"L-GW
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 43 86 8d 60 a4 84 4d 6e 54 65 37 75 8f 42 da 6b 3b b6 77 d1 94 94 93 8c 54 d5 0c 43 49 da ad b6 81 72 91 30 80 2e dd 43 5d 61 0e 79 24 ea ec 46 36 88 ea 2e 3c 76 49 0a 99 72 85 a4 62 83 40 11 00 dc 7d 5d 86 01 18 40 31 04 8c 0a 19 e2 7b 77 5f c4 47 db 00 ba 4b c6 6f bb bb eb cb 73 37 de fb 5b ff ee ff e5 6b db b6 2a db b6 9d 52 fa 18 31 e7 5c 1b 0e 3c e6 67 89 e5 b1 25 93 19 7e 01 4d 74 f5 13 b2 64 c9 92 05 26 33 33 33 33 4b 17 ce d9 7b af 35 e7 8c 18 bd a6 14 bd f5 31 22 62 cd 7b 6c 4e b6 6d ab b6 64 db a9 6d ac 63 e6 70 e1 a3 20 c6 cc 09 51 0e 95 0f 85 95 09 0e 31 b3 74 c1 dd cc ce ea 7a 6c db 56 b5 6d 5b fa 58 d7 f3 fe ee 12 e1 16 b9 a6 94 80 42 91 ff 31 f5 f1 94 08 32 77 77 be ef fb df ef 79 9e 3d 43 16 6d 5b 55 5b 91 d6 28 a2 d9 1c ce 8b 03 9a e4 de Data Ascii: C`MnTe7uBk;wTCIr0.C]ay$F6.<vIrb@}]@1{w_GKos7[k*R1\<g%~Mtd&3333K{51"b{lNmdmcp Q1tzlVm[XB12wwy=Cm[U[(
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 20 66 66 d6 9e 61 ab df 78 3b 31 33 b3 b4 d2 4f e8 33 b4 93 d6 d2 f6 31 bf 3b f7 9c e9 ee ca cc 70 b7 50 e4 b6 91 32 3c 57 5e f8 81 3f 6c db 8e 3d 92 b6 ef 38 4e 5c d7 75 db b1 cb ae b6 31 66 63 6c 3f b6 6d db 36 c7 9e 79 da 66 55 bb cb 48 55 92 8a 2a b8 7d 5f 3c 71 2c cb db dd e9 ea 9a 65 de bf 7d f1 ff 6c 5a 92 fc 7f ef 88 58 6b 6d 1c 64 9e 54 65 96 ab cd c1 c7 b6 6d db f7 5f bb 7b be df ef 9d ee 6c db b6 c6 9e 69 77 35 ca 55 c9 93 79 f2 ec b3 b1 d6 8a f0 86 ff 93 21 4b fe ff bd 5e 11 91 59 e8 d3 7d 30 67 66 31 ab b7 3f f8 da b6 6d db b6 6d db b6 79 d3 be f5 b1 8d f5 ee cc ce ec cc 39 a7 59 55 99 19 11 ae 20 d9 4d 9b 17 e6 44 64 45 72 8a 7f 16 b6 6d 4f e5 36 5e d8 27 e9 e8 f0 30 78 cc 8e 39 54 87 93 d2 96 bb cc cc cc cc cc cc cc cc 58 5a 4c ca 90 06 da Data Ascii: ffax;13O31;pP2<W^?l=8N\u1fcl?m6yfUHU*}_<q,e}lZXkmdTem_{liw5Uy!K^Y}0gf1?mmy9YU MDdErmO6^'0x9TXZL
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: e0 b1 7a 08 35 53 a1 6a 13 86 ae 06 e5 19 b4 22 97 3c 37 d1 56 74 1b cc 94 cc f3 2c 39 1e 17 85 e5 95 9d f0 06 71 e3 3b af 74 e4 bf 94 01 c3 01 42 41 02 17 1f 2d c6 24 57 9a 5e 54 90 0b 98 7d 37 ab 61 95 1c 76 a0 e7 09 b1 35 d6 59 ab 6b 16 bb 4a da 64 b3 d9 34 bd 50 10 e1 53 0d 2e 6c 40 a2 15 11 6f 0a 7b 57 9c 09 45 f0 c0 b5 74 ae 23 d2 12 15 c0 35 55 0d b2 5c 72 43 a2 c7 ee d9 be ce 54 36 2c ca 0c 56 70 f2 74 29 17 26 5e fa 95 d8 bc 95 9a 5c 05 ee 8e 3c 28 a2 45 c1 46 58 9b b9 ee c3 45 5d ae 47 3f fb c8 ef 0f dd 2b fe ea e5 bb 55 9f 1b 73 4c 9f bf 3e fb fc bd 5e 4b a9 02 ad d5 a3 5f 23 7e 54 fd 39 74 9a 9c 52 4c b7 de 1c f5 d9 d2 5f 7a ff fd d3 7c 9b 6d ad 04 9b da 1f 72 0d 3f c9 dc 84 fe 17 a1 7f b9 c3 c6 22 e9 57 f1 84 15 38 81 49 71 cb 55 e0 37 a4 49 Data Ascii: z5Sj"<7Vt,9q;tBA-$W^T}7av5YkJd4PS.l@o{WEt#5U\rCT6,Vpt)&^\<(EFXE]G?+UsL>^K_#~T9tRL_z\|mr?"W8IqU7I
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: ad 21 b6 cd 9d 6f 7d 9d ed 9c 33 1e 5f 80 42 0b 69 79 70 72 d8 22 f4 10 36 16 4c 66 df b9 57 e7 5d af e3 c2 2c ff 18 ed 3c 1b 2f 7e b0 e1 a5 27 50 8d 21 73 54 5a 01 7a 45 98 93 82 d7 c9 f7 6d 37 17 be f7 35 2d 83 dc 8b 29 16 ed 8e 87 3e ec 33 3e 64 7f 4e 15 97 7a dc f4 80 bd d7 6b 32 0d 53 57 ea 65 7d af 01 ef 19 db a0 a8 14 c6 4a 6b 9c 44 97 82 e3 cb b8 92 72 4c b9 c0 c0 a2 f9 c4 68 6f f9 a9 1f fb b8 7f e5 3f fc e9 3f f5 0f bb f4 d9 cb e1 e2 c8 0d 07 a7 b1 07 62 51 23 86 aa 9a ab 42 10 1b fb 29 f6 35 3d 6c 7f f9 4b b6 5f fc 63 4f ff fc 87 e7 35 df 7a cc 2b b6 eb 1d aa 03 b4 f8 44 16 25 42 14 36 a2 4e fd f0 86 f5 87 03 30 04 06 7d 1c b1 cd ee 42 6b c4 c0 5c 18 18 a0 3b f5 4c d5 ca aa e5 b4 59 64 14 85 b9 f2 60 61 0c 89 7a 32 3d e1 32 5b 36 bb a8 ef f5 ea Data Ascii: !o}3_Biypr"6LfW],</~'P!sTZzEm75-)>3>dNzk2SWe}JkDrLho??bQ#B)5=lK_cO5z+D%B6N0}Bk\;LYd`az2=2[6
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: fb e5 2b f9 b8 f0 1d 07 bb 15 e4 35 61 cc fa 4d ae c9 45 53 5e 0d ab 9d 75 da 65 9d aa d1 a6 9d 36 5e 18 0a 7d b7 a5 d7 65 5d d2 dd c5 32 e7 bb 00 0e 21 e8 eb 0f db 06 73 eb 0f fe 86 ef 38 76 0c 50 a3 14 03 98 c1 5a 6c 32 48 90 5c 00 46 14 00 64 a1 42 2f 01 80 96 c1 00 88 3a 64 58 f0 f8 1f e9 1d 5f ff 96 ef de a2 4f 23 11 13 0c 69 a6 5e 65 84 39 56 f4 35 24 1a 1b 6f 32 d1 86 2a 8c b3 a8 81 51 fb ad a7 5d 27 21 48 3e f9 74 08 b9 a0 dc 0e a4 ad 9f be 9e a8 07 5a 34 47 67 67 f8 bb 77 d1 16 97 8d d9 5b 6f fd 23 f7 21 ff fd 7d cc 6f 7d 79 ea ef 5b ff db 20 18 c0 8e e0 c0 38 7e dd f4 fe 75 f0 bc ff fd 7f f6 5f 6a 6b 46 1f 2d 5b ef fb ea c3 ab 7f f4 e1 1f fe b4 b7 3b fe 3f bd ef 2c a0 0b 30 08 06 20 18 10 05 10 2d 1f 0d 3a 51 94 78 41 3b 2d ed 2c 8e db e9 6a e1 Data Ascii: +5aMES^ue6^}e]2!s8vPZl2H\FdB/:dX_O#i^e9V5$o2*Q]'!H>tZ4Gggw[o#!}o}y[ 8~u_jkF-[;?,0 -:QxA;-,j
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 09 77 11 f1 71 cc c3 db f8 33 3e 86 e7 d2 0c e2 7c c5 9f f0 f5 dd 9f 21 5d a5 20 00 76 ad 1d 8a 50 54 04 41 7b d6 b7 1c ce 2f 3a aa 60 73 ed 96 6f 5c 1f 3f 12 15 84 20 28 88 01 b0 31 42 0d 23 11 ba a5 be e8 90 3f c6 32 89 89 8d 13 b5 61 ef de d3 e2 67 1c 06 38 f7 9d 6f 05 f3 74 80 52 07 b7 56 07 41 2a 96 13 ea 15 56 00 80 72 d9 25 2c 16 00 c4 c3 f8 90 ae 2e eb 8d e4 6b 37 b3 43 11 46 4e 51 5e 73 2d 89 ac de 7f 36 70 4c 92 11 5e 62 cb 17 76 ec 32 71 d0 6c d4 81 dd ea 3e 5e 59 7e ff 19 d5 9a 8d ba b3 77 4f b9 af ea 03 66 a1 f5 c5 91 2b be c3 63 0c 3c c6 ef 93 f3 39 68 be 9e 5b 78 21 cf a4 16 6f e6 83 79 3f 5f c4 bf d3 a1 19 b5 f7 fe 21 f2 f7 98 ab 13 c0 1e 9e 77 31 ab 0d 08 4a 24 54 f0 d4 6c 6f b8 63 14 dd 78 77 59 0e 6d d7 df ed b9 cc 09 0a 50 a0 50 28 aa Data Ascii: wq3>\|!] vPTA{/:`so\? (1B#?2ag8otRVA*Vr%,.k7CFNQ^s-6pL^bv2ql>^Y~wOf+c<9h[x!oy?_!w1J$TlocxwYmPP(
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 9f 77 6b f3 00 05 00 f6 99 7c f2 5e ef 36 54 ac 40 22 2c d0 51 98 30 a6 b7 e4 7a e7 e8 4e d3 97 a8 a4 ba da 5e 4f d4 e0 f9 36 fc 83 ff 5a 6f 3c b9 96 c9 3b 7f f1 f5 37 fe 9b 7f 92 54 51 7f fe ed 37 ce 06 50 3e f2 2b 5b 2f 35 f8 67 79 e2 1e b0 7f c1 3f fb ed ef fe 83 1f f9 4d 75 7d a1 2a ad 2d e8 78 de fd 5c b1 1f 3d 1f ce 8c 01 14 aa dc d4 db 1f ae 37 9f b0 77 7e 28 00 18 05 16 10 53 f6 3e 32 eb d9 73 7f a4 77 87 b9 1d a6 7f 96 c7 eb 67 da 9a 84 a0 a0 41 05 cd e5 1e f3 7b e5 46 08 f1 d7 d4 8f bf fb 0f ff 85 3f 5a 7e ec b7 67 fb ff 67 90 c2 74 90 f7 c8 27 e8 78 c8 dd dd fb 27 76 ee 7f 9a 58 8a e1 d3 24 87 70 88 12 d5 07 79 eb 64 5a 23 50 a4 e8 0c ee 7c e4 d7 1d f1 99 34 c9 7c 55 f8 53 3b 88 f9 40 2e ae 42 b1 a8 24 87 de 7e be e7 fe 53 88 5b 24 ef 76 df 7c Data Ascii: wk\|^6T@",Q0zN^O6Zo<;7TQ7P>+[/5gy?Mu}*-x\=7w~(S>2swgA{F?Z~ggt'x'vX$pydZ#P\|4\|US;@.B$~S[$v\|
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: d7 fb 25 63 0b d8 fe bf fb c3 ff ca 7f ff c7 7f f9 f7 ff e8 bf f2 ed 2f fa 9f 21 50 bf a9 12 ed 6d 3e fc d8 e4 f7 7b 6a 1a 03 a2 42 a5 4b 03 00 52 52 ac 51 69 5b 8c aa 16 04 80 a8 ea 02 01 eb 31 fa 56 fd ce f3 dd d7 f4 74 0b 7f d7 a7 71 0b 03 44 71 04 69 55 62 94 62 11 e4 e9 f2 8f 55 3f a5 f8 01 b6 6b 69 f0 d6 3f 19 fd a7 c6 26 1e c1 b7 d6 3f 0a be de f8 0e f2 47 fe ca 9f 89 07 cf 77 02 4a 39 3f 91 f9 c9 7b fe 4e ae d5 5c f3 8d 0a 35 d8 82 94 0c ab 8c d8 a8 b6 c4 0f 6b 25 a9 43 0a 40 67 dd e5 c7 fd 43 00 00 99 2b 3f e1 1e df 8b 9d 84 aa b5 fb f4 3c 4c 86 cb f1 d5 7a 25 40 e8 67 7c e2 2c 8b f9 78 e1 16 84 d3 d1 d3 94 11 88 1e a3 86 3d 30 46 41 01 97 dc a0 62 e1 a1 56 17 cf 51 1d eb 2d 6d bf c5 a6 a3 64 b3 d9 75 aa 97 e9 87 c4 ce 93 5c 63 d8 61 95 2f 07 df Data Ascii: %c/!Pm>{jBKRRQi[1VtqDqiUbbU?ki?&?GwJ9?{N\5k%C@gC+?<Lz%@g\|,x=0FAbVQ-mdu\ca/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49919	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:37 UTC	538	OUT	GET /PybCNhe-jjLeSh7EWh_cyzw4kqxsN1dB6zuDhVAEyomlQfcauwghs0hrjR6pUWrBLdLeu45uPiY=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:37 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 76696 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:12:40 GMT Expires: Fri, 25 Oct 2024 21:12:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 5877 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:37 UTC	844	IN	Data Raw: 52 49 46 46 90 2b 01 00 57 45 42 50 56 50 38 4c 83 2b 01 00 2f 87 c2 5a 00 8d 30 6c db c6 11 5c 52 ee 0e bf ff c0 f5 fe 27 88 e8 ff 04 e0 a7 b6 df 09 48 ef 20 5f 49 3d a6 fd ae 36 10 40 4e ea d5 18 1b 3a 66 26 79 75 00 3e 49 7a d7 ce 39 75 07 c0 04 f4 40 7a 50 00 54 fd 80 84 1e e8 c9 1a 01 20 bb 6f 24 ea 09 49 40 27 69 c4 2a bb db 17 7a f8 46 1a 63 1d 20 dd 36 00 6d e1 69 8c c1 c5 3a 75 f7 8e 3e 11 e0 88 e0 5c 45 f2 42 ef 6c 02 0d ac a8 b1 e2 a8 25 ba bb b5 01 b6 61 83 11 e4 ac 20 81 8a da 02 d8 4e 9f 3c 2b 96 d7 aa d0 26 f8 1c 41 da 8b 64 85 b6 01 b6 33 49 5e e9 0b d8 4e 93 06 49 7d 03 9f 69 92 fa 0a b0 9d c0 d2 0f 60 1b 00 fe 00 d8 bf d9 3f 91 a5 da b6 6a 47 a3 dc dd 3d f6 59 fd 6f 4e b1 89 3e e3 b2 09 2f c9 e3 70 d8 3f cf ab 05 92 55 6b 6f 23 e9 60 dc Data Ascii: RIFF+WEBPVP8L+/Z0l\R'H _I=6@N:f&yu>Iz9u@zPT o$I@'i*zFc 6mi:u>\EBl%a N<+&Ad3I^NI}i`?jG=YoN>/p?Uko#`
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 3d c8 b5 96 49 eb 19 3b 64 10 24 01 bb 1c 95 bd c9 f5 43 80 bf df ea b7 68 e8 99 2b d3 d2 4c 34 c5 a6 9b be a4 ed de 93 06 14 90 11 60 b7 c9 e5 7c 10 f1 08 12 89 b9 5c 37 a5 db d5 17 d2 66 71 29 4d 2e d1 ac 60 54 24 c2 c3 ce 73 da cb f9 51 22 71 ed a6 60 ae f2 67 61 38 e8 5e a2 61 04 80 04 ec f1 7c 79 94 d3 53 de 41 da 4c ef d3 fb 66 d4 cc af 65 a5 0a 89 e4 f7 02 90 f3 f5 e8 fa 10 58 0f a4 44 9d dd 7a 05 70 1a c0 be 17 fc e8 f6 0e 96 25 23 57 b0 ff e4 73 be 8e 78 02 10 f1 7a 74 7b 85 ff 0f 00 d2 f6 e9 4e d2 41 c4 13 d8 25 85 41 db 46 92 9a 74 87 3f e8 db fb 09 44 c4 04 e4 bf ed d4 fd 4b b6 50 73 7b be 73 7d 71 e8 a6 9e 26 1e 6f ec 37 83 39 37 97 d7 03 f5 2c c9 5c 38 37 11 da 96 9e 92 ac dc 36 49 a0 ad 01 b7 49 56 9e 05 4a 1b 21 ef 16 7a cc 02 5e 29 20 b6 Data Ascii: =I;d$Ch+L4`\|\7fq)M.`T$sQ"q`ga8^a\|ySALfeXDzp%#Wsxzt{NA%AFt?DKPs{s}q&o797,\876IIVJ!z^)
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 5e 5f 75 6a fa f0 8e 15 4b 32 b2 32 02 3c 3b b2 92 96 37 c7 37 a9 a5 9a 53 12 99 90 14 4b df ba 9b b9 d3 8e a7 45 a6 ee 5b 33 8e aa b9 3a 81 82 90 08 90 2d f2 b8 1c 2e df bf d9 8d f3 24 44 24 25 09 b1 11 0d d7 c5 f3 36 9b af 66 55 3d ce 50 87 33 2a c0 22 11 20 77 42 54 55 17 bc f4 f3 54 cd 49 07 91 24 8a e8 51 55 8b d6 cc 57 8b 68 b7 a7 aa 8f b6 c6 d5 01 14 84 04 08 50 a8 6a 0c f3 32 7b fb 40 9c 66 48 82 28 b9 91 ed d9 a6 8f 57 db d1 7c d1 ec 7a 34 57 61 9e 7e 70 26 11 ac 15 40 e9 62 c2 5c 2b d2 a9 85 28 21 b1 bd 02 e6 3d f5 f5 5c 5c b5 d7 b3 79 a9 b9 ae 9f 27 50 90 08 15 12 18 46 92 ef 6a 8f 89 27 48 00 04 8a 48 65 b4 ea 97 e2 c8 a6 ca 11 45 7d c8 aa bc 56 95 09 0b 02 80 00 89 22 40 84 7f 26 22 b1 4a 45 29 d6 b5 a3 aa ef 2f c7 39 7f ad b9 4e f7 a2 da 0e Data Ascii: ^_ujK22<;77SKE[3:-.$D$%6fU=P3*" wBTUTI$QUWhPj2{@fH(W\|z4Wa~p&@b\+(!=\\y'PFj'HHeE}V"@&"JE)/9N
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 08 89 04 46 23 ec 2f 6e ea e3 98 3e fa e1 74 ed ed f3 3b a9 99 88 6c 3b d1 a1 b1 c9 a0 5f 96 ef 3c 7d 91 c5 b7 ee 36 ff bb f9 57 32 78 3a cb 9b b2 bb 95 dd 3c f1 9b 7e 47 c4 aa 2f 4e b6 32 cd 9f 8e f1 bd d5 da b0 ed d8 32 32 5b f5 46 32 8d 38 2f ee 6a 6d 18 ef 94 9a 5d e2 69 c3 0e bc 46 7c 01 1c 7a 76 99 74 47 f9 27 de e6 7f f8 e9 b6 7a f1 83 41 7e d7 db a2 4b 8b 6a 1a d4 86 e4 51 2e 62 6c 94 db ea 68 ca 78 d6 4e ad 94 31 af dc a4 cb 02 42 4a 95 a2 e7 8a ec a2 5b 7c 9c fa e5 58 bc 5e f5 87 69 2e 97 bf ac ab 21 94 48 62 49 60 64 5a f5 e1 6d 1e 66 93 87 11 4f f4 3e 9f 3b a0 21 da 8e fb 40 51 54 bd ed ab b8 5c 7c cc fc 7f bd 28 e9 e2 43 d3 8f b6 c1 15 66 da dd d3 a2 1c e2 ee d8 4d a7 c1 c2 17 c1 f0 8a ea 75 91 f7 e0 f8 f2 30 b5 ac 98 19 dc 1e 53 ae 17 42 91 Data Ascii: F#/n>t;l;_<}6W2x:<~G/N222[F28/jm]iF\|zvtG'zA~KjQ.blhxN1BJ[\|X^i.!HbI`dZmfO>;!@QT\\|(CfMu0SB
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: c9 f3 63 7c b8 57 a6 52 e5 39 00 72 51 94 62 db c2 7c 25 3e 95 f7 f0 42 7e 16 25 45 d9 77 27 c7 bb 4a d7 15 86 86 6d 4f dc b6 50 06 f5 16 99 b8 ec c6 45 19 51 8d c5 f6 82 93 a2 60 3c 28 77 a1 67 bf 0e 36 07 86 72 d4 56 d3 8d 78 75 9a ec 5b 4b 65 23 22 8f 87 12 94 58 4b ec 26 dd e1 71 a4 37 d5 af 92 cb 16 eb ea b7 ba f9 fe 29 fc dc 8e 17 47 3c 8e 70 df 79 d3 8d 6b 37 ca c7 da b7 32 94 36 19 59 2a 09 bd f9 32 cf d4 db 6d b1 6b af d3 6c 47 bb f1 db 40 22 12 8b 2a 12 18 fb 50 eb 46 4d 14 24 77 56 fe 76 f6 09 bf b9 fe c6 25 ff 2a ea bd 1b a6 92 d6 28 7d 30 87 1c 41 92 4e d2 b2 e8 c1 fc b4 f7 67 8d e2 72 e8 89 a7 29 42 2b 5b 6b d3 12 92 f5 66 22 dd f4 48 71 ab 32 0a c9 9b 03 44 68 25 3d 6c fa a5 3e 0a 99 0f 60 20 f2 14 14 16 05 2f 23 25 86 a8 b2 d8 c4 59 97 5a Data Ascii: c\|WR9rQb\|%>B~%Ew'JmOPEQ`<(wg6rVxu[Ke#"XK&q7)G<pyk726Y2mklG@"PFM$wVv%*(}0ANgr)B+[kf"Hq2Dh%=l>` /#%YZ
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: a3 b4 c7 ba 6c 0c 2f 7b 25 36 b3 8b 0b d2 62 50 8d f7 6c 43 87 e7 4b 12 44 c9 ed 5b da 1e e7 9f ce 05 b5 63 66 e3 51 57 55 f3 66 8e c4 a2 42 80 03 9a 48 40 53 43 e2 eb c9 c5 e3 73 b3 74 75 bf b5 99 96 5f db e6 87 1a 36 02 f4 a9 f3 8a e8 93 6c b0 e6 26 37 49 c0 79 a5 2c d8 2a 37 e2 f2 40 f6 97 3a 0f 68 74 73 08 43 b6 63 b8 60 87 60 5e 79 64 27 94 33 ec 68 b4 f6 e3 d2 24 78 b6 ab 75 27 c7 49 e9 e5 7e 64 f7 10 d3 8c 1b 51 1e e6 c5 28 5f 32 1e 62 cc da 3e 35 be 2d 53 d6 a1 c4 69 54 aa 99 94 24 39 39 ec 1c cb d2 63 63 db 8d 52 92 5b d5 1b f9 e3 96 5d 2e 85 e4 fa 38 4f 3d 21 c5 7a a9 14 58 2e 47 05 b9 cd d2 d4 51 ac c9 32 95 c2 cd b9 3e 68 87 b1 96 75 93 04 21 16 29 9c 42 66 8e b9 db cd b3 ed 47 35 78 07 01 56 84 0a 01 0e 6d a5 d5 c7 b1 98 1a e8 71 ef 4c a6 60 Data Ascii: l/{%6bPlCKD[cfQWUfBH@SCstu_6l&7Iy,*7@:htsCc``^yd'3h$xu'I~dQ(_2b>5-SiT$99ccR[].8O=!zX.GQ2>hu!)BfG5xVmqL`
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: de 28 85 dc 5d 05 c7 23 2c 1b ca 8a 94 d3 90 16 31 d4 20 5e 9a a4 ee 2f 2b b9 d8 76 58 8e a7 f1 38 0e 3a 5e f5 f5 3b 9f f5 8b b7 e7 1a 63 51 c8 52 d7 cd de 95 a9 9f 96 69 3f 63 29 b6 e2 78 b3 7c 39 eb 4f 7f fb cc 9f 9e f6 c4 7c 36 26 93 e9 c3 bb 65 bb 47 59 9f 9e b8 d0 79 d8 d6 a8 4e 70 ac 16 db a4 ce 85 ad c0 80 0c 49 f4 cd e3 6b 36 e7 53 18 2b 45 d7 47 d3 99 b2 1e 16 5b e6 83 cc c3 e5 c4 52 aa 4d d4 52 ec c2 14 6e a7 7d cf 68 cc 8f 51 eb f8 c1 e2 9e c2 af ee 92 2d 81 2a 04 42 92 0a 04 98 16 a5 17 d7 dd f4 18 a6 85 16 e6 6f 5c 7e 65 62 67 d5 78 61 d7 44 67 a0 44 61 c0 36 a3 d1 01 cf 2a 53 9a 9f 3b 3e f4 ee 61 76 65 1e 8e b4 cb 16 d6 cb fe 75 da 63 9a d3 e6 83 28 3a 5d ce 17 04 88 b4 51 7a 2d c6 35 7b b2 92 dc 06 a0 0f 7d 73 f6 7a bd 36 3c 7e f0 f4 3a 8d Data Ascii: (]#,1 ^/+vX8:^;cQRi?c)x\|9O\|6&eGYyNpIk6S+EG[RMRn}hQ-Bo\~ebgxaDgDa6S;>aveuc(:]Qz-5{}sz6<~:
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: f7 5f b6 1f 39 af 95 34 2d b8 d6 50 ac 45 d3 42 57 f2 6b 6f 6d a2 a5 b0 0b c9 0e c7 42 28 03 05 29 01 48 0c 03 47 da 62 3d d4 69 2b 72 2c 38 72 35 c8 b5 fd 3a 92 b4 e6 db b8 59 fb 49 5d 49 74 9f 06 39 74 f8 c9 75 75 b5 25 b7 dd 5d 4e 3a ed 64 4d 6f dd 63 63 15 13 8b 0c e3 e2 98 53 5c 8c 9f 2e 83 a6 67 f9 fe d6 8f f0 d2 5f c2 62 b7 db 72 93 be ca 91 c8 6c 12 35 bc 2c 0e 72 fa e2 5b cd 16 df b5 cf 14 87 fb 74 a9 db 5b e9 a4 ce b6 3a f2 ad 62 19 fa ad 88 86 0f 98 a6 a4 ae 99 a5 94 65 b8 39 49 ec a1 2a 6a 4f 2c 71 6b 4c fb 64 9d f8 ed 6a 2e 33 1b 4b 26 c6 6a 05 b2 71 2a 3d 43 31 a6 84 31 36 15 40 68 a3 79 fa a6 af 1f b6 8a 61 5a 68 c6 75 f7 c8 19 98 16 a9 bd ff b9 54 40 da 4f e9 e3 46 93 3c cb 10 15 c8 c1 04 c5 4d a2 99 18 dd 17 23 15 5a 51 a7 5d ca 00 02 d6 Data Ascii: _94-PEBWkomB()HGb=i+r,8r5:YI]It9tuu%]N:dMoccS\.g_brl5,r[t[:be9IjO,qkLdj.3K&jq=C116@hyaZhuT@OF<M#ZQ]
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: a7 a2 db b8 76 7f f7 f6 f6 a3 be fb 22 ef 3f 96 4f df cd f3 33 ee fa 6b dc b7 a4 19 f5 3c ff f4 0c df fc f2 1d bc 9a 72 2b 15 45 12 66 0b 4e 4b 37 fd d0 e3 e6 3e 1d 2f 9c 2d 62 ec 52 a7 1c 24 36 59 67 07 9a 4c d1 8b 25 ed b1 c4 8b a4 e8 24 12 a1 06 4e a2 04 8a 5c 93 43 6a 63 2a 2b cd b0 ff bb 3f f8 b3 bc 5f 73 9f 06 8c 9c 3e dc 7f 12 f2 13 30 39 42 63 f8 ac 3d 30 0c 8d 0c 3f a8 83 ce db 57 f5 f4 ff 65 72 ce b0 2c 59 f1 de c9 a6 95 95 b0 74 ef 49 03 1d e5 17 bf 64 8d 12 8d 3a e0 53 93 f3 1d d1 f8 7a c6 7a b8 f3 a0 30 b9 a0 ed c0 d5 b5 b1 4d f2 4c d3 82 f3 25 4f cb 0d 80 75 3c 86 88 e9 ac ad 02 a8 5c 45 d4 89 f8 c6 8e a5 2a 57 e8 bc 2a b7 c6 43 d9 15 1a 8f cf e3 44 24 6e 64 d9 9f 3e 0e ef bf 9c fa bb 72 20 b7 af 51 c5 cb d5 16 e6 f4 60 ff 74 4d db bd 5f 90 Data Ascii: v"?O3k<r+EfNK7>/-bR$6YgL%$N\Cjc+?_s>09Bc=0?Wer,YtId:Szz0ML%Ou<\EW*CD$nd>r Q`tM_
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 34 ab d4 ab 1a 15 60 a4 91 60 96 cf 8b 62 b8 91 2c cf 70 9e 7a dd 68 d9 e4 ef a6 f8 bd f8 d3 1e 7e b7 b7 30 07 36 c9 b8 a9 58 a5 77 b2 71 35 be 7f 75 25 0c 6a ed 28 0d 56 55 dd 11 8d 1a d7 b5 1e 00 00 ad 1d e3 74 62 c6 ea 64 e7 c8 ae 5e 43 9b 01 ea 0b 3c 95 aa cc ee 2b 80 43 9d 94 6a 85 58 62 6f 48 cb 47 8d c7 bc 34 7b 6d a6 9e eb 7a 58 44 24 42 85 04 fe 57 c9 ee ca bd fa 02 85 24 1a 11 06 3c 0c e3 e9 e9 93 a3 df fa d5 67 e3 d9 f7 47 82 d2 d1 6e 54 66 77 b9 cd a1 bb 2c 8e ed b3 d2 dd 9f f1 a9 1d 8f 68 e3 a2 9e ca 79 5c 48 0d 79 3a f0 a1 ec 15 87 e9 2d ab 65 fa 31 77 b8 30 83 ab 9d 67 c6 55 2d 5b b1 6f 1b 86 f5 be 4c 39 45 27 65 62 ba 94 08 d3 3e 1e 39 71 46 3d 47 5f db 60 2a 31 0e 4b 73 7a 70 6b c4 48 79 b3 36 90 45 ba 48 a5 48 22 8d 6c cb e6 30 15 46 df Data Ascii: 4``b,pzh~06Xwq5u%j(VUtbd^C<+CjXboHG4{mzXD$BW$<gGnTfw,hy\Hy:-e1w0gU-[oL9E'eb>9qF=G_`*1KszpkHy6EHH"l0F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49921	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:37 UTC	1098	OUT	GET /TlxMMd6qkRy3sdtiCUzlVNjC8zLkbG-Qeqy_Wynv9CkXZ00VMvaJslQRdhncBgCJ0qg=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:37 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 203748 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:10:10 GMT Expires: Fri, 25 Oct 2024 21:10:10 GMT Cache-Control: public, max-age=86400, no-transform Age: 6027 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:37 UTC	843	IN	Data Raw: 52 49 46 46 dc 1b 03 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 87 02 00 6b 01 00 56 50 38 4c 93 1b 03 00 2f 87 c2 5a 00 8d 40 6c db 46 90 04 67 37 f1 ed f9 d5 7f c1 99 bd 6f 21 a2 ff 13 50 ba 6f c9 9f 19 b6 f9 28 c9 15 00 b9 bf f6 a5 4b 97 ae e7 d1 7d 97 7e 8e 94 e8 f7 92 ae 6b e6 fb ed 6e db fd 22 d9 7a 1f d9 6e db 96 47 ff 45 e2 07 8d cb 63 69 74 5d 25 a9 4e 89 2e 29 ba 7f d8 a5 aa fb ba 75 e4 55 a1 2a c5 59 1a ed ba 4b 7a ae 4b 7b 0c 11 49 ec e4 04 b3 25 69 b4 6d 8d ad 9d 94 2b b1 40 7b 66 6c 5b 47 03 d8 16 22 49 2f 23 5a 48 33 9e b1 17 b6 0d c6 40 52 9f aa 45 37 80 3d db e6 68 e8 48 ca ab 6d 8a 93 57 f7 41 92 46 3b 4a 2a 91 a4 ce 02 bc 00 b4 63 76 28 25 01 64 cf 1c b0 07 24 29 81 ea 97 cf 70 a0 ec 99 f1 c1 91 12 76 1f 92 64 2a 91 a0 0a 60 c6 Data Ascii: RIFFWEBPVP8XkVP8L/Z@lFg7o!Po(K}~kn"znGEcit]%N.)uUYKzK{I%im+@{fl[G"I/#ZH3@RE7=hHmWAF;Jcv(%d$)pvd*`
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 4e 7b 29 05 cc 02 80 d6 c9 07 f5 fb 75 fd 7b 5d 7f 52 4c 26 30 b8 6c f1 76 3d 5b b6 54 f6 a1 c7 bb c2 22 e4 58 48 9a 6b d8 57 ba 50 a9 ae eb 35 3b 73 75 fd 33 68 4b 38 e3 13 67 ea cf 5b 18 1f a6 ab 66 23 ce 37 ed d5 d9 74 f2 be 75 8f 3b 8f 7a 0d 9d 27 7e 3c 12 1f 42 48 ce af 9c 43 2a f5 a2 e9 49 85 80 b9 78 83 ab 34 5d 13 c6 a6 e5 7e 1c ac b6 5a 16 93 d9 94 7a d2 eb 17 6b 2f 81 ec 9c d7 4d ff dd 38 8e 2d b2 30 ac 0c 39 d2 8c b0 57 9a 52 a9 ab 25 34 3d 20 84 ee fc 01 74 e8 35 24 c2 93 9a 35 2b f5 a4 43 9e ed d5 09 21 c7 c2 e2 0f 5f b6 b2 68 e8 1c 27 39 93 b3 65 e7 8c 74 17 c8 8e 07 e9 b4 b7 be a9 d4 0b 5e 30 51 fa 4c de 88 fc f7 84 90 ee d2 a4 f2 7c 35 4b 3f 12 10 56 f7 0c 62 e5 38 91 6c 3e ec ff 71 7d 75 2b e4 95 65 6f da 6b af bd 52 77 6a 36 cf 66 b6 b2 Data Ascii: N{)u{]RL&0lv=[T"XHkWP5;su3hK8g[f#7tu;z'~<BHC*Ix4]~Zzk/M8-09WR%4= t5$5+C!_h'9et^0QL\|5K?Vb8l>q}u+eokRwj6f
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: ff 53 97 30 41 df b2 6d db 6e 5b db 56 ce a5 b6 0e 50 94 e7 e5 ff bf f2 66 5b 04 d0 5b 2b 11 be 25 49 b2 24 49 b2 2d 24 35 8f cc aa ee 5e d7 ff ff c2 7d bf cd 74 65 86 bb f2 43 f7 fe 07 4f 92 24 49 b6 6d 4b 12 92 d8 b9 f7 97 5e 8e c8 fd 8f dc 7d 4c bf fe f7 6c 65 df 02 24 49 92 24 49 12 00 12 8b aa 79 66 75 ff ff 77 76 cf 11 e1 26 4c 18 13 e0 cb b6 6d d7 6e 24 c1 ea 73 ed 73 01 90 26 5c 45 a4 a8 7f c1 f2 4b 3d 11 c2 85 99 11 b8 f7 ac f9 11 59 08 df 92 24 59 92 24 d9 16 92 58 54 af fb ed 93 d6 ff 7f cb 7d ad 7d e9 a9 0c 65 df 02 24 49 92 24 49 12 00 12 8b 9a 79 46 5f f3 41 fb ff ff 72 df db 15 ae c2 84 91 9e 6c db 96 ed 48 92 a4 b5 cf b9 f7 bd ff 01 10 31 11 0b 8b 88 a6 fd 2f 7a d1 1b e0 1d f0 a2 e5 b9 89 68 c2 19 81 00 fc ff df bb e7 ec 82 74 c2 93 24 db Data Ascii: S0Amn[VPf[[+%I$I-$5^}teCO$ImK^}Lle$I$Iyfuwv&Lmn$ss&\EK=Y$Y$XT}}e$I$IyF_ArlH1/zht$
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 00 8c d8 08 8c 24 36 00 19 23 ca 01 03 90 23 0a e2 38 ce 0e 20 30 1e 65 0c 46 18 19 8d a3 20 00 20 86 84 3b 2a 06 80 00 8d 24 5b b5 45 a8 60 eb 32 3c d9 c9 68 92 48 7f 2d b9 73 db 55 66 32 33 89 6e 5b 94 97 ce 09 d3 14 68 db 08 03 04 55 d6 b5 22 96 d5 7a 32 42 22 1a 02 05 59 8a c6 12 a2 6d 91 0a 69 18 82 32 63 80 92 65 10 14 b6 e2 ca 22 02 c0 84 93 00 64 bc ca 5a 66 ef 8b 8b 17 78 a1 68 c1 d5 a3 64 ba 9a 65 ca 99 a7 9c 2a 59 d8 dd 58 56 5a 3a 51 80 e1 e2 56 20 ad b2 a2 24 8b 40 01 39 31 3b 6b 84 22 41 4b 11 c0 8a 59 6d 05 09 42 12 18 53 2a 68 03 37 5f f8 02 5b 81 54 ac 8f de 5d bd 00 39 35 05 a3 cd 44 d6 9c a8 5c 8a 00 13 0c 18 88 2e 19 1a 38 06 e5 2e 9f cf 47 21 9c c1 35 ca 77 ff fd ef 3f ff f3 5f 7f 9e 3d ea 97 44 06 01 a0 42 01 0c 4c 26 46 4e 40 00 80 Data Ascii: $6##8 0eF ;$[E`2<hH-sUf23n[hU"z2B"Ymi2ce"dZfxhdeYXVZ:QV $@91;k"AKYmBS*h7_[T]95D\.8.G!5w?_=DBL&FN@
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 48 09 00 24 0d 06 06 00 46 fe 60 00 81 30 0c 83 62 00 60 48 03 88 81 1b 32 06 10 c0 48 23 21 45 00 33 02 8b 18 31 a3 18 31 6c 8a 99 6a 96 06 43 36 2b 00 9b b1 d9 9d 37 63 33 06 06 30 4d 63 18 00 c0 88 f0 24 4a 40 0c 54 33 03 00 12 04 60 51 01 00 94 41 84 02 58 80 15 56 00 46 44 40 32 12 85 00 16 85 d0 2c 10 64 94 02 82 49 48 6a 73 60 ca 5a 55 9e 03 94 90 a2 6a 59 c9 19 0e 6d 14 c2 0c 83 20 c6 10 24 ec 93 42 09 40 50 45 c3 00 60 50 50 30 39 80 d1 92 08 71 00 10 4c 68 9a 1a a6 38 32 20 11 b2 68 2a e9 25 10 77 88 26 24 21 10 41 60 47 20 21 0d d9 0c 9d aa 62 6d a5 65 0b 25 18 51 11 84 08 21 28 82 00 52 e3 98 b0 c6 a9 5e d9 1e 1d 4e de 82 c9 a1 59 af dd dd 33 a2 8f 7e 19 b3 c2 c6 c8 01 21 86 4e 2d d7 57 1c c2 81 a9 48 52 c3 82 96 19 a1 66 85 8b 84 13 2b b1 00 Data Ascii: H$F`0b`H2H#!E311ljC6+7c30Mc$J@T3`QAXVFD@2,dIHjs`ZUjYm $B@PE`PP09qLh82 h*%w&$!A`G !bme%Q!(R^NY3~!N-WHRf+
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 05 c8 32 c6 30 c0 ca 6c c3 40 c1 00 cc 88 51 46 98 21 cd 4c 35 88 62 00 33 86 81 00 90 66 31 62 a4 59 60 e0 39 30 70 c5 04 06 03 80 81 81 81 6b 04 01 8c 18 40 e0 ce 12 1b 00 18 c0 b2 98 31 03 36 63 60 08 10 00 10 03 b8 98 00 62 09 00 31 60 04 80 11 00 a0 24 14 c3 5b 20 6d b2 2c 2a 42 39 02 06 80 98 8a 49 50 19 81 00 62 05 82 4a 4d 36 13 80 08 85 54 2d 8f dd 54 96 43 08 40 14 89 28 32 38 42 54 02 09 c6 11 42 b8 4e 02 c2 52 10 4e a2 20 c1 a1 04 2b 05 4b b2 06 f0 ca ab 45 87 a4 06 54 84 30 11 00 24 28 28 a4 aa 40 ad 51 3b 3b 53 01 21 88 2a a4 22 60 0d 31 03 c9 09 e6 70 30 28 52 a3 ca 36 54 35 81 28 85 90 b9 3b 95 56 30 4c 2a 30 60 63 be 5c cf 35 77 1f ba 7d 47 0e 82 83 79 fd f1 0b 69 01 18 88 c1 88 b1 0e 15 98 18 ce a9 60 64 68 80 52 b4 42 49 4d 37 34 ac d1 Data Ascii: 20l@QF!L5b3f1bY`90pk@16c`b1`$[ m,B9IPbJM6T-TC@(28BTBNRN +KET0$((@Q;;S!"`1p0(R6T5(;V0L*0`c\5w}Gyi`dhRBIM74
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: c0 06 18 c0 18 43 61 20 c6 18 62 20 66 a0 18 8c 18 62 02 23 86 6d 8c 61 60 89 d9 30 67 00 03 c3 1a 88 c1 10 60 0c 30 10 18 21 10 03 19 2a 23 00 0c 04 00 31 a8 40 80 a6 18 54 08 20 01 cd 32 60 92 31 11 58 c8 98 88 00 19 50 0c 40 2b 03 05 0e 04 10 82 42 f8 00 82 02 66 e7 d1 21 05 ca 54 45 c3 30 b2 30 84 c0 aa 91 a5 62 9a 82 a4 30 34 e2 8a b9 62 5d 0b 26 61 0b 53 9b 29 4d 65 b5 2e db 13 17 e7 aa 5b 6b 73 69 43 c1 40 48 11 58 8a b0 eb c6 42 42 06 85 95 28 b2 e1 14 ad 20 88 16 70 71 9b 0a da a8 93 13 34 96 50 18 07 06 25 14 66 34 4c 50 a8 5a 20 9c 22 4d 32 e3 a4 52 8b 72 24 02 39 b4 3e 79 9f 72 20 8c ae c6 cd b5 9f fb f0 df be ff e9 b9 f3 6e ca 9a 1a 23 09 25 29 45 66 29 10 47 c4 0c 24 85 56 4a ad 74 48 17 8a 95 50 3b a0 5e 7d f7 8b 7e ed 93 01 04 06 20 a0 8a Data Ascii: Ca b fb#ma`0g`0!*#1@T 2`1XP@+Bf!TE00b04b]&aS)Me.[ksiC@HXBB( pq4P%f4LPZ "M2Rr$9>yr n#%)Ef)G$VJtHP;^}~
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: c8 98 01 46 00 36 61 30 82 1f 09 37 e1 12 7e 24 06 00 c4 00 b0 c0 d3 fc 99 81 e0 6d 04 10 00 36 00 04 86 27 03 0c 58 d4 32 cc 04 33 20 8d 20 30 80 46 e0 32 22 10 8c c4 0c 84 58 b5 ad 32 59 51 1b c4 28 00 6d 4d 26 22 0d cb 04 00 54 96 b5 62 0a 80 8a 21 02 5a 12 62 04 82 a1 38 28 00 38 24 45 43 50 18 04 42 e3 b0 38 4f 7d f3 95 b7 8d 52 2e a6 52 c3 aa 4d 4a 0d 36 97 0b 26 21 98 34 0f 8a 45 42 0f 83 c6 99 6e f0 ec 9a 70 56 dd a3 64 9d 0a a2 d2 90 01 20 e0 e0 61 3e 6c 99 3b 6c ea 42 88 05 c2 94 01 15 e6 d4 30 4c 55 88 28 14 a8 68 44 59 55 c6 11 34 04 02 03 06 a1 16 65 bb 0c 21 e4 d4 c6 84 01 0d 4d 2d 02 2a 2a 00 38 1e 7d ad 8f 3f ec 84 09 75 d8 0c 24 04 ce e5 99 fb 6f f3 d9 57 79 fc 94 78 3e 13 30 07 87 aa e6 14 d0 51 79 6b 97 c1 a1 d4 8c 28 94 82 a5 2a 18 6d Data Ascii: F6a07~$m6'X23 0F2"X2YQ(mM&"Tb!Zb8(8$ECPB8O}R.RMJ6&!4EBnpVd a>l;lB0LU(hDYU4e!M-*8}?u$oWyx>0Qyk(m
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 30 80 81 81 31 00 8c 31 30 06 c6 c0 6c 00 03 23 06 62 c4 e8 27 26 07 0c 97 01 d8 8c 01 36 13 01 c3 37 31 06 26 a4 11 98 32 10 83 b2 81 04 80 20 01 00 d5 08 88 51 cc 88 51 01 c5 2c cd d2 40 01 00 62 92 00 a4 19 88 a1 c2 0d 12 3c 09 0c 28 a3 1e ed 97 1e e7 2b 8f 94 93 8b 32 12 68 6c 23 07 3b 37 3f 94 8d 83 8d 17 3f 20 9a 1c 36 28 e6 ca c5 52 6c 9b 3d 3b e5 9c 3b 37 81 92 2d 2e a2 4d b6 64 34 9b 43 6e 16 60 18 2d 1b 36 a4 68 40 d0 26 09 d8 29 10 20 d8 20 b5 35 9a 93 8d 90 59 1b d3 34 94 cc c4 e0 68 66 30 a6 b9 44 9b f3 3f fc d1 cb 9f b6 3e 93 13 70 08 d4 ca 52 b1 5a 20 14 80 42 8a 50 d9 85 40 17 38 84 02 21 84 0c 21 01 10 00 02 8d 3a b6 75 4d 55 59 ae 90 86 9d 1b 6e 67 87 4f 78 50 08 8e 0e d9 79 ef 0b 84 26 40 07 e1 5c 1e 78 ff bb 3c fe d6 ed 79 7e c6 d4 c2 Data Ascii: 0110l#b'&671&2 QQ,@b<(+2hl#;7?? 6(Rl=;;7-.Md4Cn`-6h@&) 5Y4hf0D?>pRZ BP@8!!:uMUYngOxPy&@\x<y~
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: a1 da c9 a9 07 58 23 16 8b b0 19 cc 60 8a a6 a8 e2 66 c5 82 d9 b2 91 e2 1e 15 18 0b e4 68 8c 5b 57 a1 61 20 07 1b 30 9b f0 62 51 cc ec 2b 1b 21 e6 30 80 82 90 82 75 b6 5d a8 38 88 0f 3f e2 af 7e 51 c7 c9 3b 6e be db cd 53 eb 13 ef 7c 97 46 28 01 28 76 56 14 cb a4 15 82 b3 ac 55 e0 70 59 8c 08 e0 e2 10 80 68 4d 9e 17 f2 aa 65 8d 31 c3 55 3f fc 46 5f ef 4e 84 00 c0 eb 4a 7d b3 ef 4f f7 5f f0 ec 91 e5 3d 8b d6 98 ef 05 80 c6 05 87 91 d3 35 2b 07 40 7d d8 c2 f9 5a 9f 18 d2 94 34 c9 e2 b5 98 c3 8f 7e 6c f1 b5 1e 35 ac 04 3c eb 39 cf bc be ef 62 43 cb 9e 9c e9 50 82 77 62 64 93 4d cc f0 3d 62 03 30 62 c0 36 62 78 8f d8 80 01 80 11 0c c3 00 60 18 80 e1 0e 53 b6 01 c0 86 e1 bd c1 93 01 30 03 0c 00 31 7c 6e 23 94 6d 00 cd 33 15 80 61 c3 3d 03 80 29 38 c0 06 12 83 Data Ascii: X#`fh[Wa 0bQ+!0u]8?~Q;nS\|F((vVUpYhMe1U?F_NJ}O_=5+@}Z4~l5<9bCPwbdM=b0b6bx`S01\|n#m3a=)8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49922	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:37 UTC	538	OUT	GET /pCr8yx-Yp_3CfXYv2zpUntlSpfDV5d8tkBA7OVNR5MjP3nwlW7kyUwFVsWLaehlkE-hWXW2t0Uk=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:37 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4204 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:08:34 GMT Expires: Fri, 25 Oct 2024 19:08:34 GMT Cache-Control: public, max-age=86400, no-transform Age: 13323 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:37 UTC	844	IN	Data Raw: 52 49 46 46 64 10 00 00 57 45 42 50 56 50 38 20 58 10 00 00 10 70 00 9d 01 2a 88 02 6c 01 3e 3d 1e 8e 45 22 21 a1 90 f9 34 3c 20 03 c4 b3 b7 71 a3 42 59 68 77 d7 15 7c a9 06 cf fd db fb 07 ed 27 8d b5 7e ea 9f d5 3f 69 3f b8 fe e8 f4 97 6c 97 75 3f 29 3a 24 e8 4f 38 af 24 fc db fc cf f7 df dc ef ee df 06 ff bc fb 00 fd 37 fe 5f dc 0b f4 8b fc e7 f7 df c8 de e6 9e 60 bf a3 ff 57 ff ab fd ef de 47 fb bf a8 df ee bf dd ff 5e be 00 3f a9 ff 8f eb 13 f4 00 fe 6d fe 7b d2 cf f6 e7 e0 df f6 ab f6 af da 07 ff a7 b0 07 a0 07 52 7f 4c 3f cb f6 8d fe 07 fa af a5 7d 4e bd 70 e4 93 11 df 91 fd 98 cf b7 61 fc 00 bf 11 fe 69 fe 7f 79 b4 00 7d 56 e2 3f 4a 0e 42 bc fb bf ed f2 d7 f4 df b0 87 eb 5f a5 87 af 8f db df 66 ff d6 20 c4 65 52 90 32 7a a9 f1 41 cd 83 e9 aa 52 06 Data Ascii: RIFFdWEBPVP8 Xp*l>=E"!4< qBYhw\|'~?i?lu?):$O8$7_`WG^?m{RL?}Npaiy}V?JB_f eR2zAR
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 6a 94 81 93 d5 4f 8a 0e 6c 1f 4d 52 90 32 7a a9 f1 41 cd 83 e9 aa 52 06 4f 55 3e 28 39 b0 7d 35 4a 40 c9 ea a7 c5 07 36 0f a6 a9 48 19 3d 54 f8 a0 e6 c1 f4 d5 29 03 27 aa 9f 14 1c d8 3e 9a a5 20 64 f5 53 e2 83 9b 07 d3 54 a4 0c 9e aa 7c 20 00 00 fe fd d4 ec e4 57 40 00 00 00 00 00 00 00 06 d6 e4 aa 2d ff 08 7a 66 00 00 6e bb 59 77 d1 e4 25 09 0e cf ec f6 1b 86 bf a2 cb b0 25 7d ac c7 bf bf 01 d6 cd 90 ec d8 25 e1 59 90 3f 31 8e 0b cd fe be b1 e7 d4 61 15 ee be 53 43 ee 66 e6 94 93 07 13 20 c9 46 13 fa b8 37 f3 9f 8e 83 de e9 4a 92 cc 6d 11 1a 4b 83 67 d3 fc db 7f c2 f5 c1 ce 1d ea ec b4 d3 eb 72 da 58 87 6f 9b 66 74 13 17 6b 33 6e 3b bc a3 5f 41 6e 38 8f fa 5a c0 ad 44 62 ec 94 81 fa 87 fb 2f 32 25 29 4e 08 a1 83 4f 92 03 7e 30 85 93 9e 8e a8 5b 62 f6 7d Data Ascii: jOlMR2zAROU>(9}5J@6H=T)'> dST\| W@-zfnYw%%}%Y?1aSCf F7JmKgrXoftk3n;_An8ZDb/2%)NO~0[b}
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 4a 51 f1 73 4e 22 bd b2 dc cd 48 b4 d9 df 76 3e fd b9 ea 14 3d a4 90 1e fa aa 9d c5 f8 49 69 62 56 4f af 17 bb ca dc ee 57 75 85 ee ee 1d 83 7e 9a d8 8e 1b 1c 91 75 3c ce 5b 68 c9 39 cd 4d a0 75 c1 68 fa 45 15 6f d7 70 d5 37 27 08 0d 96 09 95 8c 8a c6 ec cd 46 38 13 f7 aa ae 33 db 9e 12 4a 74 74 9c 7e 70 60 f8 21 8d 70 74 9c 7f 8e df fd a3 18 92 f7 8e 8d 4d 4a ca 7f 82 3e 5f c1 e6 da 84 f5 6f 68 80 49 4f 09 cc 9f 9f 94 e1 db a8 af 10 09 fb 2d 04 aa ef 42 b6 73 5a ab 45 5d 9c 1f 36 77 04 80 ed fe a1 ac f4 2f 3f 0d ea a2 af c5 b8 3f f9 7a 43 c3 20 0a f9 97 a6 2a 69 f5 07 72 7d ad 42 8a 89 65 eb 20 c5 b2 bb 5d de 15 99 f9 0c 0c da 7c 92 56 cb 5b fc 83 08 ed 2b 8c d7 c7 aa a8 67 73 c5 22 9c 25 44 09 7a bd 0f d3 68 f3 51 3f eb 70 69 bb 6a 69 49 95 8b 0e 8d 6c Data Ascii: JQsN"Hv>=IibVOWu~u<[h9MuhEop7'F83Jtt~p`!ptMJ>_ohIO-BsZE]6w/??zC *ir}Be ]\|V[+gs"%DzhQ?pijiIl
2024-10-24 22:50:37 UTC	604	IN	Data Raw: 29 ec a5 53 4a 90 bd df e1 a5 da 32 0b c9 2a f5 d4 13 45 68 5c a9 55 aa e0 61 4e b3 bc cd 05 c2 be 38 8e e1 6e 13 5b 33 d7 7b 31 d4 d8 6a f5 f2 60 5e 0f 77 75 10 62 00 30 13 a3 7a f9 2a 3c ba 7e 25 a7 81 b5 72 51 0c 97 ef d4 a6 55 fc 8f c3 30 3b 07 8a ee 5c 06 b8 03 fa 45 e1 13 b8 a4 76 bc 18 61 74 db e3 0b db ac 69 62 d7 dc 17 3e 4e 2c c8 8a 71 ac 60 ff 28 1c 75 41 03 0c 08 16 00 7c c3 cb 6e 37 41 97 24 1e a3 40 f3 cf 28 f6 36 b8 11 65 4e ea d3 7a 4a 62 ea db f8 93 4d 6f b1 46 c8 55 89 08 3e ce 7f 94 e2 2f 01 65 6e 0c 7d 49 97 8d a1 1c 21 b0 ef a6 a4 ae 67 2b ef 40 c0 ae b8 5a 83 5d 89 bb 86 97 a8 34 bd 1f 45 2d 78 30 f8 37 bd 31 6d 0f 5f 0b 79 f3 02 01 21 2c 15 17 dc db 15 96 75 bb ee c6 49 5b b7 ba fc f3 bf bf f7 de 84 64 b0 a5 29 ee a5 52 9e e2 ee ac Data Ascii: )SJ2Eh\UaN8n[3{1j`^wub0z<~%rQU0;\Evatib>N,q`(uA\|n7A$@(6eNzJbMoFU>/en}I!g+@Z]4E-x071m_y!,uI[d)R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49923	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:37 UTC	1098	OUT	GET /XWuUR0YIVu6BgTCw6n1uqLKnUJefKSrWusPMWux4k_R9f2eJeKBdEGFITcCNRU8Grk0=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:37 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 54736 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:32 GMT Expires: Fri, 25 Oct 2024 19:12:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13085 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:37 UTC	843	IN	Data Raw: 52 49 46 46 c8 d5 00 00 57 45 42 50 56 50 38 20 bc d5 00 00 10 90 02 9d 01 2a 88 02 6c 01 3e 5d 28 90 46 23 a2 21 a1 29 74 8c 10 70 0b 89 65 6b f7 ef 97 0d c5 d4 8b 5a e6 8f 30 26 7b e5 69 dd 2b 10 01 0f 07 ec de 1a 7f 27 5c 7d 5c 48 0f 26 f8 65 f6 6c ae 77 bf da 9e 6b 1d 49 f3 4d f3 83 d3 af f6 3f 51 5f eb 9e 98 fd 3d 79 a6 f3 52 ff c5 fb 83 ef a7 fb 07 a8 4f f2 9f f6 1e b8 5e b3 df e0 3f f2 fb 15 fe de 7a 77 7e ec fc 45 7f 68 ff b3 fb 65 ed 53 a5 a7 25 3f 45 fe 73 fe 67 82 bf a2 7d cb ca a7 f6 6c 41 fb df f9 5e 63 fd e5 4f f7 f9 7d f8 fe db e2 1d 8d fd 8a 97 57 d0 47 05 bf c9 f3 57 f7 ef f8 3e c0 9f 9a fe bc 7f de f0 c3 fc 6f fc ff dd 2f 80 3f e9 bf e6 ff f9 7f a8 f7 93 ff 83 c8 af ee de a2 df b5 3e 9d df ff ff ed fc 1e fd e4 ff ff ff c3 e1 eb f7 13 ff Data Ascii: RIFFWEBPVP8 *l>](F#!)tpekZ0&{i+'\}\H&elwkIM?Q_=yRO^?zw~EheS%?Esg}lA^cO}WGW>o/?>
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 9d 47 bf f4 a4 48 cf 74 ae 91 88 64 a5 01 30 51 81 eb 6d 1f 08 b6 f9 84 56 b5 07 a3 f5 7b 89 62 12 20 4f b9 16 af 07 32 66 d2 55 0c 05 c6 de 02 bc 4f fc 28 b5 72 db e2 cf ea 7d e6 85 05 04 d7 3f ae 47 f1 a1 4c 60 f9 ee 31 f8 30 14 c1 02 08 3c d4 55 ed 02 74 c8 68 d2 c6 30 71 93 0f c7 13 7e 0b 80 85 6c 31 d1 7a 63 9f 88 2a 4c 37 8d 38 f0 22 5f 4a 04 25 98 11 4e b9 54 b1 43 74 c5 b8 b5 0a f9 93 dd 04 d4 c5 6c 3b 8d 02 ad ce 55 2d 1c ee 71 3c 58 76 83 13 f7 43 f9 54 dc 70 d4 c7 78 5c f0 88 40 95 a4 a7 78 1f e3 27 68 d6 94 5f e9 d6 4c f8 e6 ab eb 43 ed 2d 57 41 6d 22 3e 53 af 48 90 3b 25 2e b8 08 4c 4d b7 33 86 1f 82 d7 51 69 af 88 b0 84 d6 27 3f 36 59 e0 2b 71 54 b5 78 c5 38 52 24 91 57 1b b5 3e 97 6a fb 78 08 47 13 5a 6b 1a f9 10 6f 0e cb 06 f3 5e 7a 8a 3f Data Ascii: GHtd0QmV{b O2fUO(r}?GL`10<Uth0q~l1zc*L78"_J%NTCtl;U-q<XvCTpx\@x'h_LC-WAm">SH;%.LM3Qi'?6Y+qTx8R$W>jxGZko^z?
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 2c d5 50 98 b4 4c a0 7e e4 80 de 73 b3 66 23 09 22 87 21 d6 a0 de f2 9d c9 f7 cc 40 b9 f9 d4 cc 5a 31 a4 73 d0 83 dd 41 61 e5 bd 1d a2 03 bb 65 fc c9 f7 73 10 1c 7e 4c d8 cc ab af 09 95 59 d7 7f ca 22 ac a3 9d e9 28 7e 28 e9 c8 73 eb d2 8d ad dd 38 09 f9 db 01 aa a3 3b 3a 9d 1a a9 68 f9 c3 e2 4e 14 05 fa c4 e5 08 3d b8 4a c2 9f 62 42 29 e3 72 12 d8 6d 26 00 99 67 4d d2 13 57 5e 9b 52 c8 19 96 59 8b d7 9a b9 35 a2 b8 72 ec ec 13 1b da 3e 6f e1 34 6d 52 26 95 fe 3f 49 9d 3e 91 4e 2b 0e 38 3c 3d 96 7c 1d 5c f8 98 0a 9a 02 4d 8a 76 90 01 d1 84 6b 03 31 54 01 55 2e 33 b8 3c 25 82 14 e9 98 a7 0e 0a 72 69 e2 5a 20 20 70 69 86 7c 1e 23 59 f9 eb b4 2b 86 d3 04 b7 0c 74 a6 89 57 a7 4c b3 23 97 ab 5a 91 07 4a 7d b2 a1 95 6c ab 33 c0 32 2c 4e 3c 70 76 55 3b de b2 e0 Data Ascii: ,PL~sf#"!@Z1sAaes~LY"(~(s8;:hN=JbB)rm&gMW^RY5r>o4mR&?I>N+8<=\|\Mvk1TU.3<%riZ pi\|#Y+tWL#ZJ}l32,N<pvU;
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 8a e2 6c c7 1b bf 08 25 22 94 37 ab 39 d0 46 c0 50 7c 51 4f 98 92 24 50 95 97 ad 98 b6 26 3b e3 88 99 17 9c af 8e 0f 02 9a df e6 41 b7 7b fc 97 41 16 b8 cf d9 14 d2 f0 7f 5a ea 6c 42 b4 f6 6a 78 cb cf 3d ec 6c c9 18 43 22 23 88 02 8c 28 54 dd de 24 d4 87 21 84 8e 17 11 5a ed 51 4c 51 7c 10 4b c2 af ac 89 5c cd 4d a5 6d 43 09 11 49 25 90 ba bf 27 35 7d 5d 11 c9 f7 d3 48 fa 3f 8a 41 00 5d 1d f2 bf e4 cc 96 01 6a 43 ea 47 1d 4d b3 e5 09 25 0b e1 72 9e fd 58 70 97 7d 81 84 21 36 af 8b 86 dd 5a e9 95 5f d6 af 62 74 9c 63 00 43 b0 0f 94 a5 a8 1f 91 e0 db 71 f8 0c 4b ca d1 aa a2 5c 6e ba df 43 d5 37 e2 9a 95 7b 43 3f 80 2e fd 1a c1 97 ae ba 52 e0 30 73 35 16 e1 97 de 96 eb 92 ba 46 97 4b bd 99 78 16 05 2a e3 57 e2 9e 51 70 6c ff fc f6 58 46 0c 1a 45 6d d4 79 94 Data Ascii: l%"79FP\|QO$P&;A{AZlBjx=lC"#(T$!ZQLQ\|K\MmCI%'5}]H?A]jCGM%rXp}!6Z_btcCqK\nC7{C?.R0s5FKx*WQplXFEmy
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: f9 dc f1 f4 98 cb 60 0d 76 86 41 f5 0a 8a 6b 58 11 04 d0 42 81 0d 48 54 2d f5 37 2a c4 d1 b7 e1 de 78 f5 1c ce c5 2a ed b6 c1 cc a6 32 80 99 be 65 63 f9 bc a0 bf 47 13 ad 6d 9a 01 93 9c c5 8d f4 81 77 8b 6c cd a1 a8 83 3e 72 05 e0 3b 68 d5 15 13 75 09 38 39 be 98 6f 3d a3 4b ad c3 79 23 a6 ba ef ca 0f a5 0c 6e c3 49 f4 fc d3 c1 e6 ea ff 7a 94 5c c7 df b3 3b 1c 6e 4c 79 be ca f0 ae 6e 31 9f 97 d6 c1 2b cf 06 83 48 cf dc 47 c9 3e 37 0d 5d a2 01 77 8f c1 b2 9b 40 1f 9e cc a1 86 86 8b 81 19 26 a8 48 6c b8 ad 89 01 f9 d8 f3 e4 c4 c5 61 93 2b 8c 20 79 6c 50 d8 20 6a e2 25 b9 8d 03 c1 8e 68 e3 c1 28 1e 99 6c 57 cd a5 ae b5 67 6b a8 d9 cc 36 c0 6a e6 47 18 7b 95 da 14 dd 1e 38 4e f5 f8 da 05 de 9f a4 45 d2 4f 5c 8b 00 c1 7b b0 0d 62 da 85 ef b4 12 42 24 53 54 46 Data Ascii: `vAkXBHT-7x2ecGmwl>r;hu89o=Ky#nIz\;nLyn1+HG>7]w@&Hla+ ylP j%h(lWgk6jG{8NEO\{bB$STF
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 06 cf 28 56 f5 14 df 70 fa fd 10 cf 23 fa 62 93 4a f4 9b b4 ca b1 27 be df 7b d8 55 cf 94 a0 36 14 4e 65 a7 f3 2b 02 b7 64 e2 4c e3 e1 d7 3a 94 19 63 00 c1 1b 5e 10 9d 2a 69 69 14 ff d8 ee 85 09 28 7a 07 86 9c 7f bb ed b1 fb 7e 3c e3 3c 3a 48 be c6 f5 df 0c ad 36 0b f3 90 0a 14 11 c6 4e 53 9e 81 7a c3 1b 1d 3b b9 f7 d9 13 aa 28 54 fc 13 db 92 b0 8b a8 05 7b 9c bc 12 72 d7 e2 98 5f 5b 78 bc 25 ee aa c5 8c 16 47 9a 1c eb ad 5a 0b 59 fb d3 c6 13 9f fe 52 50 23 25 26 de 5f b6 de 1c f2 a9 83 e3 97 d5 2b ab 9d 04 49 aa fe 28 81 23 a8 85 8f f6 18 0c 30 27 b2 64 5d 75 68 15 23 0d 52 4f d1 08 ab c9 f6 9a 60 0e 54 d0 41 87 ea 8a 73 e0 5e 1f 27 8b 69 51 87 e4 9f e0 2a 7d 1c 4f 14 d7 b7 b1 a6 67 4d bb 44 1c 06 95 cb cf 42 06 c7 66 54 62 85 fb 11 7c e6 75 27 91 56 2e Data Ascii: (Vp#bJ'{U6Ne+dL:c^ii(z~<<:H6NSz;(T{r_[x%GZYRP#%&_+I(#0'd]uh#RO`TAs^'iQ}OgMDBfTb\|u'V.
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: a5 6f 87 df fb cb bf 54 0a 7a 89 53 e0 2a 1e 3e 87 6f 43 8f 48 f6 4a d3 85 29 17 90 58 89 ad fe 4f 5f 83 74 73 0d a7 b7 bf af 52 42 bc 16 c4 81 e7 c6 80 11 b7 c4 05 0e ac 24 16 b3 9f 6e b6 c2 b7 ff c8 21 c0 5c 81 4a b5 13 73 44 5c cd 31 4c 98 d4 4f 3d 32 36 d4 b4 f2 dd 21 be 96 6b 26 f7 df bc ab a4 c3 6c d2 d2 2c b0 9c d3 fe 4e 4e 86 26 20 30 b0 81 51 7e 1d 69 a4 7f ad a3 39 0e 81 25 cc bc 6f d9 78 d4 98 f0 17 45 25 0a 56 6d a2 32 f6 e4 64 6a 39 8f ce 02 f1 c6 9c 52 a2 b8 f0 da f3 22 e6 34 fc 2d 60 62 ad e8 d0 74 1d 7f 65 19 a8 ee eb b4 3f 5b 95 a1 b8 bf 62 2b 2b db b4 26 57 8d af fd f4 bf 34 8c fb fc 78 20 90 df 8b fa 7d f4 f9 f5 d9 d7 f8 2e 4b 8f 00 d4 de 07 5e 80 14 b3 e3 70 e1 97 20 67 d4 09 f5 39 47 02 07 2f 31 80 8f 64 d3 cb fa 1f 92 c1 9d 15 98 c5 Data Ascii: oTzS*>oCHJ)XO_tsRB$n!\JsD\1LO=26!k&l,NN& 0Q~i9%oxE%Vm2dj9R"4-`bte?[b++&W4x }.K^p g9G/1d
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: ad 65 13 f4 ed 21 16 7c 2a 55 c5 5c 96 c9 98 70 27 43 be 9f 94 4e 9c 1f ec 38 95 30 fa fe 7b 6a 34 fd ad 3a 0d b1 4c d3 55 39 e0 75 b8 d6 f0 c3 5d d2 9c 27 43 0b 81 f8 f2 1f 04 f0 7e ce fb 6a 94 bd dc e8 8a 2b 08 12 04 df dd 37 e0 fe 38 ff ed 6a 22 64 b6 8f 9e c4 00 01 0a 55 a4 00 8e 0a 86 e3 13 f7 ae 0a e1 ef 02 e6 fc bc 7c 0b 8d 94 f8 1f f7 d2 cf ed 11 3f 03 e2 14 e2 f2 6b 4b fc 97 c7 60 43 40 48 2b 8d e0 93 8d fc d1 a8 25 a4 af bb 14 fd 51 67 d6 4e 88 06 5f 38 b3 ad d6 fd c8 bb 2d 58 a2 26 64 7b 1c d9 3d 5e 22 6c 80 17 52 47 4b bf bd 9f a1 18 7c 10 51 d6 42 77 2a 75 23 69 48 fc 01 ae 99 28 fe 02 68 77 04 43 8a 85 06 66 6e d0 ae 05 b2 15 0d 42 af 47 6b fa 6b 22 96 bf 3c eb a7 cd 44 e6 1e aa be c2 6b ad 8c 27 e2 6f 36 c5 89 b1 cb 88 58 20 dc 64 8f 79 2a Data Ascii: e!\|U\p'CN80{j4:LU9u]'C~j+78j"dU\|?kK`C@H+%QgN_8-X&d{=^"lRGK\|QBwu#iH(hwCfnBGkk"<Dk'o6X dy*
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 32 24 cb 05 24 3a de 92 f0 1d 8b e7 e6 e8 6b 8c 4c 4f 2d 49 c5 35 07 78 4a f9 67 07 18 3d 7c 71 cb ed 1e 40 77 89 c3 6d ec 56 30 97 5f 93 fd d6 9b 1f 8b 5c 12 7d 45 1f 8a f3 93 e0 2e 35 67 62 b7 c7 6f 3f 3e 62 17 f1 bb e5 18 bd cd 42 2b ad 97 b8 08 cc 71 64 ae 45 69 d5 ed 62 e5 82 6a e8 c4 c7 84 df 0e dc 42 22 5b 96 27 77 62 93 0a 20 c0 31 76 aa e0 26 7e b3 25 e9 50 ca 61 cc 87 52 b3 bc d3 d3 49 7d 75 6c aa 21 02 76 6f e1 d1 08 ee c1 b3 4f fe cb e6 18 ac 90 a9 17 f1 f6 be 0e 5a b7 2d a5 fb b7 db 9d b2 20 d0 60 8e 21 9e 58 6f 08 e3 65 02 29 a8 7d b7 7d 0d 62 44 cd c3 3e db c7 d2 07 ef 64 a9 29 62 b9 45 81 fa 8a b2 a1 89 7f cf af 60 b7 d3 49 6f 52 d7 80 c4 3f 4b c2 41 15 91 d1 65 c4 f6 88 8c 05 6f d0 85 9a 5d d3 2e 4b 5c 65 a9 31 f0 64 4b d7 72 0d f0 97 e3 Data Ascii: 2$$:kLO-I5xJg=\|q@wmV0_\}E.5gbo?>bB+qdEibjB"['wb 1v&~%PaRI}ul!voOZ- `!Xoe)}}bD>d)bE`IoR?KAeo].K\e1dKr
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 76 7c c9 cd d8 bb 4f 94 0a 43 b2 67 87 66 79 cf 33 88 55 ec 54 87 3b a9 df d0 34 ff 2b 6a ed 25 db 19 62 e2 f8 1d b0 00 9e a0 f6 58 22 2c 59 36 90 05 67 00 35 c9 63 d5 38 71 80 e0 f1 ef 8b f8 9b db 2c f8 1d 33 b2 17 a6 bd e4 67 d7 9b 46 6d dc 49 90 c6 f0 e3 7e 15 9d 21 8c 26 80 a6 ad 84 ec ce a8 06 b9 f8 59 a1 bd f4 12 ad 0b f1 7a 21 9e 40 07 f5 d6 87 6b 31 ac 61 60 1d 4b 63 b4 16 02 07 d0 92 3a 98 4c 76 fa 07 5c 0e 2b ea 32 81 41 4b 9b f1 55 d7 c5 a5 ed a8 9d bf fd 55 de 92 c1 db c6 d9 b8 97 40 a9 99 25 0a 5d 37 11 27 cb d1 37 72 75 ee fe 13 54 c1 ea f9 fd 7a 2b 86 74 7a 82 bb db a0 0f 48 d0 76 e4 1e 7d 2a 2e 72 75 0a a8 19 0f e2 d7 ed c1 44 3c ea ba 8a cf 26 4b 1f 1b 6a 11 c3 ba 9e ec 33 89 f1 60 ac 33 82 f9 64 c0 4e 23 a0 4c 77 8c f1 7c fe cd 0a e3 fd Data Ascii: v\|OCgfy3UT;4+j%bX",Y6g5c8q,3gFmI~!&Yz!@k1a`Kc:Lv\+2AKUU@%]7'7ruTz+tzHv}*.ruD<&Kj3`3dN#Lw\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49924	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:37 UTC	1098	OUT	GET /gSKT7WzQz63Ha91RiOEPMl3Q5mBIi2V-H0D9LQijC9n0HDAlE7EQN3NuCyRk_2o8kpk=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:37 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 32208 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:50:37 GMT Expires: Fri, 25 Oct 2024 22:50:37 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:37 UTC	847	IN	Data Raw: 52 49 46 46 c8 7d 00 00 57 45 42 50 56 50 38 20 bc 7d 00 00 90 13 02 9d 01 2a 88 02 6c 01 3e 49 20 8d 45 22 a2 21 12 d9 f5 80 28 04 84 b2 b6 bd 02 29 dd da 51 72 da 54 c0 bd b8 5b 4b fa b2 9a e3 8a 3e 61 dd 52 b6 89 55 79 8d b4 77 3d 6a d0 c1 ee 62 f9 6f ea f9 cf f6 27 b8 03 7c cc 1e 72 8f d1 ff 8f d8 07 f6 df 52 2f ed 5e 98 bd 44 79 b6 f3 67 ff c7 fb 5f ef c7 fb 8f a8 07 f5 1f f7 7e b1 1f f8 ff ff fb cd ff 6a ff 9d ff ff dc 83 f9 c7 f9 ff ff fe d4 de b1 5f dd ff f6 70 6c f0 99 f9 64 f9 df 5e fe 7c fe a9 fc 4f b1 17 ef df 4c f9 87 f6 0f f4 bc ce fe 83 f9 c3 39 df e6 78 bf fb 17 88 d7 bc 38 23 40 5f d9 2f fb fe 22 5f e9 7f 9a f5 d3 f5 5f f3 df f5 3d c0 ff a2 ff 67 ff af eb 2f fc 0f 22 ff bf ff bf ff af fe 33 e0 1b fa 37 f7 ff fd 3f e0 fd e3 3f db f2 a3 fb Data Ascii: RIFF}WEBPVP8 }*l>I E"!()QrT[K>aRUyw=jbo'\|rR/^Dyg_~j_pld^\|OL9x8#@_/"__=g/"37??
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: bf 8d f3 59 a4 7a c4 91 9a c3 9f 38 77 cd 84 43 db c0 dc eb fb 0c 7c ef ec 23 ee 0a 8a 1b ca c6 54 84 36 db 02 d3 1f bf 83 e8 4b f9 08 f1 1c 1e fe 71 f3 b1 51 73 fe 83 03 77 32 7b 89 81 df 0b 85 55 8b 6b dc 86 e5 cc 92 8a aa 41 3c ea 34 77 a5 1a fd 2e 4d ca ac 9c 1a e8 a1 8b 45 44 f5 5e c0 90 0c fd 23 60 c6 db 2f 57 ba cb e4 ff 7e 87 3e 3d 8d 8c f6 fa 34 dd 65 52 1a 81 0c 86 d4 8a 40 53 a5 9b bd 67 0c 57 8f 6c a0 90 62 59 dd d8 e5 47 88 bc 5b 4a e3 d3 cb ae da 3e c3 74 5f d1 9f 15 30 99 44 e9 06 3f 1e bb 65 e5 e4 70 36 44 67 5d ac 2b 3d 62 2c 20 80 90 80 ed d9 27 da 08 40 33 3b c9 e2 31 04 2f ad 50 d3 91 4b 24 5a 63 46 d2 fd 2a 2d be af 69 1f b1 a3 01 1a 41 b2 9f 55 78 2d 6f 98 62 7c 37 94 f4 0f 12 7f d8 fc 7d 7b b2 e8 d3 3e 64 36 1a 41 f0 86 28 d7 a5 03 Data Ascii: Yz8wC\|#T6KqQsw2{UkA<4w.MED^#`/W~>=4eR@SgWlbYG[J>t_0D?ep6Dg]+=b, '@3;1/PK$ZcF*-iAUx-ob\|7}{>d6A(
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 46 bd 40 ca 9d b2 f2 8e 1e 81 96 74 6a 36 71 a5 65 22 19 1b 9f 16 52 0a 1c 92 c3 e9 fa 8a e2 67 4f 65 af 35 cf a0 96 bc 0f 4c ec ec e2 48 bf 5f 9f 4b 2b 99 ec 5a 8d 9c 73 7a b5 23 ed 85 53 3d fd 14 90 a4 b8 ad eb 72 ab a6 39 25 9e fe 88 0b 8a 7f 2a 78 45 b2 ae dd 06 d2 ac d3 fe 8f 96 0e 09 e8 94 49 57 a0 2c e4 c5 84 c2 77 42 09 e6 8d a5 1e b4 37 01 66 9d fa fc c9 62 24 8a 2e ce c3 ea 7e 7d 15 42 5f 23 23 43 12 a4 2f 60 69 cc 81 40 5e b1 0d 68 b3 16 5f 6a af 27 78 8f 88 6d 6d df 71 2e 50 07 90 f3 e9 83 38 f6 bc db da a3 10 59 ce 38 66 08 28 20 eb 0e 91 c4 a4 e2 29 a3 1e 03 fc f1 5a 71 8a 56 f0 86 a3 cb f3 9c 2c 8d e7 8f 42 bc 38 7c c8 e3 02 ed c4 68 79 72 da 27 17 35 60 d5 78 1e f0 79 24 0f 8c 9f aa d9 c8 a8 19 20 b6 b3 1e 83 66 f0 7e 69 7a 13 42 ab 94 73 Data Ascii: F@tj6qe"RgOe5LH_K+Zsz#S=r9%*xEIW,wB7fb$.~}B_##C/`i@^h_j'xmmq.P8Y8f( )ZqV,B8\|hyr'5`xy$ f~izBs
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 65 29 30 ba 4e 39 bc d0 03 c6 55 17 50 bf 54 b5 65 43 ad e4 d8 c0 8c 05 7b 35 16 50 e0 25 ed 0b 57 e4 a2 89 cc 0b d2 84 48 30 90 f7 d1 25 4a 80 1d 5b 30 ba 52 4f 60 bc ab be 3d af 82 80 65 9d a3 1e 32 35 8b 0c 4f 5a 8d d4 5c a2 da ad 7d cc 87 bd 87 74 8d 17 ca dd 4b 30 39 4b 56 21 6a 2c 6f 58 21 55 df 09 24 1d e9 86 3d d9 fa c1 40 ea 5a 04 6e 33 d6 d8 cb ef 01 f6 da cb b5 75 02 68 1d 88 b1 f9 39 10 36 9e b5 9d 41 62 3f 43 e0 52 18 71 82 9c c2 0d 4b b0 9a 9b da 46 74 68 50 7b be 99 1e ec 7a be cd 03 b8 cb 16 fc 51 86 15 ee a7 bb 17 4a 83 53 01 93 bb b2 b6 1e af 7f 3c 88 8c 3d 79 b1 1f df 27 ab 78 9d 57 65 13 b3 5e 39 0b a0 c6 07 87 a9 84 d2 4d 16 70 ca 15 1c a0 42 8f d8 6a 74 54 0a 9a c2 56 28 9b c3 24 f3 9d 77 17 23 b6 72 be 9d e2 5d be aa 0d 6d 76 86 7e Data Ascii: e)0N9UPTeC{5P%WH0%J[0RO`=e25OZ\}tK09KV!j,oX!U$=@Zn3uh96Ab?CRqKFthP{zQJS<=y'xWe^9MpBjtTV($w#r]mv~
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 20 f5 a0 97 05 6b 98 47 ec 12 20 77 b3 f2 99 aa c2 8f 09 ca b3 2f 51 cd 0b 3b 26 71 7c b2 dd e9 8d bd 6d ae 5c 3b 68 20 80 4d 69 10 f6 f4 0e 72 85 c1 0d f0 11 66 a0 c9 a5 d9 b7 b4 ed ef f0 9c f2 14 45 61 51 3f 02 37 bc c3 7a 38 65 66 90 03 1d 2e f0 36 38 cd 8a c0 7c e3 35 6e a7 b9 45 a5 5f 6c fb 9d 7a 0a 9f bb 44 02 39 7a 6b a2 d2 26 85 17 f7 c6 30 43 34 d5 6d a9 38 4d 01 fc 2d f2 3f fa 1c 76 2e 2f 00 e2 7d 01 f0 8a 9d 4a 32 4a e0 e8 1e 34 4c 25 e4 be 0f ff 4c ad be d1 4f a8 0f 65 e6 19 49 69 cf 30 cf 9c a8 2d f3 04 13 ed 2b 69 bb 84 8c 9e a6 be 4c 2b 62 7b b4 66 87 e6 dd 95 b8 22 6a 05 84 a3 9b 8a 32 a0 e9 6a 21 7b c7 c7 68 f9 95 44 9f 58 ad 6a e8 cf ee dd b8 de a7 bf 96 70 b4 60 36 b7 84 60 f6 1b 9c a6 45 48 0b 17 54 96 e3 ca 7f be eb 9d ae 40 9a cd 02 Data Ascii: kG w/Q;&q\|m\;h MirfEaQ?7z8ef.68\|5nE_lzD9zk&0C4m8M-?v./}J2J4L%LOeIi0-+iL+b{f"j2j!{hDXjp`6`EHT@
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 75 91 80 52 58 e8 ee 3e bd 9c 02 95 97 d3 ac 28 1f 13 8d df 35 33 ad d0 2b 80 51 08 3c ca ee 8f b4 d0 df 06 8f 7f 65 3a 28 57 8b c6 16 ba fb 3f ef 52 33 52 8c 97 13 40 2d 4b 1c 71 79 c5 46 00 ae 52 26 3f 7d 36 4e 58 2f df 7f 8b 2e 08 ff ea 17 08 c7 fe f8 8f c0 70 f7 ac 61 50 12 61 73 a0 e6 a2 c9 c4 c1 43 59 63 eb 16 de 00 1d 9a 45 d0 46 c6 3b b8 6f a7 29 48 89 be fb 49 af 00 ee 67 50 1a 47 61 c8 6a e8 bd af 55 f6 e8 fe f7 fb 45 23 fc 92 9b dc ac 32 65 4d d3 a6 e3 55 3d f0 51 c1 59 21 79 41 d7 f2 dc 97 36 e4 d2 a8 4b e5 6d 2a 30 ac ed 68 6a d1 3d 7c 12 0e 3e 48 dc 4a ee 93 9e 13 1d 17 8d 5d bb 64 1b 4d f4 54 59 ac 3a 15 c4 6b 78 ef 33 c2 9e c2 04 86 98 51 a1 fb cb 4b 17 8d 5e 0b 71 b3 7e ff 63 6e 2e 6a 61 71 fb 87 fc 71 bd 99 22 01 ee eb 28 01 e9 11 62 94 Data Ascii: uRX>(53+Q<e:(W?R3R@-KqyFR&?}6NX/.paPasCYcEF;o)HIgPGajUE#2eMU=QY!yA6Km*0hj=\|>HJ]dMTY:kx3QK^q~cn.jaqq"(b
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: fa d5 68 5d 00 60 ff 54 36 17 14 7b e4 59 44 83 f3 cb 9d 1f 0c 44 be 23 9d fd a2 f4 d2 5a 9b 35 ca a8 a3 8a 96 e3 28 af a6 14 54 cc 71 3c 9c 96 fe d0 ca ee 42 8c fb 25 8e f2 11 4a cc 4e 9e c3 a5 92 a8 21 39 cf 3a 05 39 86 cb 65 5c 04 d1 60 27 46 c8 6c 5f fb b0 20 c2 a3 9c 0d 05 00 be f9 66 24 db 24 35 21 1c 7e 2a fb 96 32 5b 7c b1 ba 08 f5 7a 12 11 b8 d9 d8 f9 0f 1c e0 db b1 75 49 fb 94 be 69 a1 10 6b 0c c1 ec e4 9b ad 31 e0 2b 3e ef 55 f6 fb 47 42 26 ee 4d 5b ff f5 09 1e dd 03 c0 e6 32 0d 03 36 40 ac 0d 73 50 96 44 85 4c 69 e3 97 04 2b ff 30 92 1e 17 65 33 cf 85 a7 0c 2f bb 28 1b 36 8e 90 d2 60 18 93 da d2 09 0f 95 79 7a fb 1d a9 06 dc 22 ef 86 a3 7c 7c f8 2f e6 25 6d 56 a5 35 c7 b6 22 d1 bc 78 ca c8 e8 dd bf a7 a4 09 ba 97 25 c3 c0 2e 4f 07 8e 8c 64 5c Data Ascii: h]`T6{YDD#Z5(Tq<B%JN!9:9e\`'Fl_ f$$5!~*2[\|zuIik1+>UGB&M[26@sPDLi+0e3/(6`yz"\|\|/%mV5"x%.Od\
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 1a b3 39 d0 8c fb 6e c8 80 4d ac 2f 23 ad a0 77 c8 dc bd a1 aa fd 5f b0 a6 8c 14 99 9c f9 5b d9 81 d1 6d 75 32 0d 03 89 ef 94 d8 7a 39 f6 95 c1 1f e6 5a 54 98 13 db 8f 6d f0 65 75 81 80 53 a4 1d 6f f8 ce 65 03 69 34 81 cb 05 28 d4 c0 28 58 b7 fa b9 25 c4 10 a5 25 58 87 f9 31 07 44 d4 7c 8e 78 70 b9 50 ea 24 eb 24 3c 42 36 eb e4 c5 4a 89 1d fc 3e 3f e6 b3 64 61 08 11 16 1e 4e b5 42 fe 4d 0a df 5d 3a 3f 62 3d b9 1a 50 9a 8e 38 14 b7 f1 44 f1 4f cb 1b fe 32 7f e7 68 fc ae 35 2d c7 6d 9e 5b bf 5c 3a 02 b5 04 3d a5 eb f6 40 ec 5d 3b a0 70 24 ec e3 ec 4e 36 99 a3 b1 36 06 75 29 6d a8 6a bd 3e df c5 cb e8 2a ec c9 ae 7c b7 2d 20 0d ac 54 97 b8 07 9e ca 5b 16 48 08 f2 ba 16 40 5b 62 3f e2 a9 f9 a9 f6 ef 1d 54 b6 e2 da f1 8f 0a 6a da 49 7b df 21 c9 3d b2 2a af 70 Data Ascii: 9nM/#w_[mu2z9ZTmeuSoei4((X%%X1D\|xpP$$<B6J>?daNBM]:?b=P8DO2h5-m[\:=@];p$N66u)mj>\|- T[H@[b?TjI{!=p
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 56 e2 eb 77 30 7a 1f a6 49 31 69 43 b9 4c 00 e7 3c 11 fa 50 8e 18 e8 08 6f ad 1a 51 82 8f fe 5e 58 e7 42 90 5c 02 21 bf 97 3a b1 7d 81 69 de 82 8b 32 63 a1 39 5c 48 1f 4a ce 91 76 8e 09 eb dd fe 7d 09 23 d6 49 1a e0 80 74 7e df d9 42 fe 5a 8d 4b 29 dd 88 9e 53 ac ed 2b 97 51 f3 00 8a 9c ba 4a b2 77 8f fa 1a fe b1 43 b7 d2 2b a0 b3 a7 55 d9 e9 b8 90 b8 0b 18 da 8e 43 60 a0 3c 20 24 e4 04 84 b5 bc b5 71 d4 4a 7d 54 22 a7 04 ab 09 c8 7b e3 c8 b0 ee 4c d9 a3 ef 54 94 5c 07 22 c2 db ef 22 37 56 36 f0 d3 c0 51 4b d7 54 7b ec 1c 54 25 29 63 da 82 37 09 89 e3 06 d3 d5 17 e7 bc 8a 60 f5 eb ec 10 c4 2a 74 55 a2 2a 21 45 9c 6b cc 24 07 05 ef 22 c5 c8 98 2e a2 03 f6 b6 19 5b b0 84 a8 8d f1 1f df a9 db cf af 8b ae 16 c4 7f d6 32 cd 8f 8b 6c cd 53 e2 85 89 9e 42 82 09 Data Ascii: Vw0zI1iCL<PoQ^XB\!:}i2c9\HJv}#It~BZK)S+QJwC+UC`< $qJ}T"{LT\""7V6QKT{T%)c7`tU!Ek$".[2lSB
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 6f dd 1c 7c 06 2d 38 45 c4 90 ee 18 1b 9f e2 6a a6 62 46 b7 53 b4 86 3a bf e5 1b 8a 60 49 e3 1c 96 8f 81 c4 f6 0d 0c d5 bf bb ac 20 21 95 15 2f 03 36 0a 9c b9 16 0e 5f 33 3a 7e 13 ea 42 ef de e2 6e c2 65 76 1d 94 44 30 37 e3 d6 96 20 30 d3 f7 c2 db 5e 47 39 72 f8 4d 69 c9 e6 b0 d3 4e 8b 1d 2b f6 34 b6 99 fd 87 68 5c 8a 7e 55 77 d5 85 64 13 80 1d 5c af 95 39 3b 0a 3c 14 5d 5f 83 e2 24 c8 a1 84 26 8c fc bb 15 3b 1c 82 0c 00 cb 25 2a 24 6d 33 ce f8 96 75 02 0f d4 a6 02 c8 68 d0 4b 96 23 94 a8 d8 23 e2 4a 36 64 84 bb e0 43 bc fa 62 55 48 4b ef b0 b4 0d c1 f2 f3 e6 b9 08 48 96 45 31 e3 69 dd b8 54 79 19 cf 72 a6 09 89 01 ce 11 0a 4f 3d 51 69 14 68 24 dc bd 6e eb 26 d9 be 20 ca 93 09 1f b5 03 54 be 43 b8 1e 7f 02 6d 65 8d 14 76 68 be 5b 9e c9 a4 f0 77 67 85 b9 Data Ascii: o\|-8EjbFS:`I !/6_3:~BnevD07 0^G9rMiN+4h\~Uwd\9;<]_$&;%*$m3uhK##J6dCbUHKHE1iTyrO=Qih$n& TCmevh[wg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49925	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:37 UTC	539	OUT	GET /ALpMwxHBKMzUmS1C3o8cbHAgxPxVNIUvuQwf55fBNvUioarIUgoxZZSbIQYHd7Nm_bHjsrOTzcL1=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:37 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 22078 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:32 GMT Expires: Fri, 25 Oct 2024 19:12:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13085 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:37 UTC	843	IN	Data Raw: 52 49 46 46 36 56 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 87 02 00 6b 01 00 56 50 38 20 ee 55 00 00 50 32 01 9d 01 2a 88 02 6c 01 3e 3d 1c 8c 44 a2 21 a1 13 09 dc ec 20 03 c4 b2 b7 7e 29 ac c5 e1 df 6e 69 80 69 d8 38 ff 90 fc 87 f0 82 ee de 5f fc a7 eb a7 f7 0f fc 9f f6 7e 71 f8 e7 b9 ff 48 fd f3 f3 ff ef 5f fa ee 97 7b 33 cd 8b cd bf 62 ff 6d fe 0b fc 67 fd 0f f0 ff ff ff ff fd b5 f4 a5 fa 5f fd f7 b8 2f e9 df f8 8f ef 7f e1 3f da 7f 8b ff ff ff e3 c3 3f e5 57 b0 7f e7 9f d8 7f dc ff 79 fd ea f9 78 ff 65 fb 31 ee b3 fb ef fb ff f9 3f e2 bf c0 7c 81 ff 5b fe d5 ff 23 b1 03 f7 53 d8 27 f9 a7 f9 cf 57 8f f9 1f fc 3f d2 fc 20 7f 53 ff 5f ff a3 fd 2f ef af d0 7f f3 0f ee 3f f5 3f 3e fe 40 3d 00 3f e9 7a 80 7a 8b f6 73 fd 9f a5 5f 9b 7e df fe 67 Data Ascii: RIFF6VWEBPVP8XkVP8 UP2*l>=D! ~)nii8_~qH_{3bmg_/??Wyxe1?\|[#S'W? S_/??>@=?zzs_~g
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 27 62 1f e6 ea 71 e9 ff d3 a7 7a 0f dd d1 14 8c 78 ea 2d 45 c9 7e 6e 87 d2 f2 64 c8 01 13 50 98 24 bc e5 ee c5 ca bd 1e 72 c9 99 09 fa 2e d1 fb ec 63 fc af a6 77 9a ca c6 a9 a8 b8 be b5 44 5c b7 ca d6 47 28 79 3e 5d 48 80 5e bf 40 6d 9f fd f5 b4 72 4b 88 66 15 96 d6 86 3a 1e 6d db 8b 3f 0f 5c e8 91 ea e1 32 09 af 99 a8 b6 01 4a 23 28 67 2b 42 31 0c cb 81 cc fe 48 0d 30 d3 c6 39 9d ad c7 79 9f 40 fc fb d8 f9 95 ab 6c 23 0f c1 af bf d2 53 7e 51 93 35 f3 60 4d 8b dd cb 7d 7d 56 de e4 75 be 61 23 ad 56 d0 16 93 38 5d 8e eb 91 fc 84 e0 15 00 c9 76 a0 90 d2 f5 ed e7 7a fd 3c 45 57 93 b6 2f c6 67 e5 4c 20 2e a9 8c 1b c5 eb e1 8f 64 69 35 e0 58 35 a8 7f b8 76 53 0c a8 cf a5 3e fb 6b f9 7f ce 77 2c c2 2c 37 4c 18 d1 07 c7 6b ad 2c 65 90 17 ac d3 c9 57 20 7f 98 4a Data Ascii: 'bqzx-E~ndP$r.cwD\G(y>]H^@mrKf:m?\2J#(g+B1H09y@l#S~Q5`M}}Vua#V8]vz<EW/gL .di5X5vS>kw,,7Lk,eW J
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: cd 42 2d 46 fc df 9c 36 ea ab c9 f2 ea 33 2d 53 97 0e 77 3a f0 5e 24 35 61 4f 80 56 b3 6e a8 b6 1d 50 a4 98 92 27 66 3c b2 c5 1f b5 29 17 c2 a0 e7 03 76 93 c9 fd c1 53 40 fb 66 c2 8f 10 4b eb e8 01 cd f7 8d d8 c5 90 cf 18 b0 c0 80 84 22 60 01 7d ce 0b f4 11 10 0b d7 e9 e2 2a bc 9f 34 6e ce fa 03 1e 1e ea 42 24 a8 7c be 62 19 94 f8 06 61 97 85 81 fe 23 32 c9 f7 39 c0 15 68 1d 89 4d 6d 65 08 eb 78 51 06 0c e8 0a 1f 13 e0 17 af d3 c4 55 79 3e 5d 48 80 5f 1f 48 a5 ec d4 38 6d 15 f9 50 99 b3 84 6b e0 04 46 69 09 af 46 9b fc ec 33 7e 70 db aa af 27 cb a9 10 0b d7 e9 e0 34 d7 ba fb 1f ab 88 10 36 bf 6e 55 fa 78 06 17 d6 04 c7 f1 f2 ea 44 02 f5 fa 78 8a af 27 cb a9 10 0b d7 e7 85 c2 09 6e 73 5b c6 b2 c9 14 4c 62 d3 8d 98 be 53 7a 68 39 f7 71 f0 01 7a fd 3c 45 57 Data Ascii: B-F63-Sw:^$5aOVnP'f<)vS@fK"`}*4nB$\|ba#29hMmexQUy>]H_H8mPkFiF3~p'46nUxDx'ns[LbSzh9qz<EW
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: c8 09 06 37 d4 bc 69 f1 0d 22 34 cf dc cf ad 58 cb b7 ff 56 1b 8a aa 00 23 d7 8e f5 04 94 13 02 0b 1d 85 58 c1 0e b4 ce cf 6f c4 eb 1d f1 a3 f7 77 7e e6 96 ea 5a 16 7f 3a 5e dc e9 da 14 78 87 e7 1a d9 ba 82 af 64 37 62 40 5f 37 68 d1 79 e3 51 b0 b7 75 8e d3 5b 81 0e 3d a4 3f d5 07 b6 e4 a6 dd fa 62 3b cb d2 9c e9 3a 55 78 a0 ee 2c fb bd cc 10 3a 40 5e bc 76 1d 66 41 53 f2 bf b8 5a 69 7e e0 32 26 26 02 1f 89 2e 7d 2b 5f ac 0c 68 b1 66 4d b7 0c 72 a9 8e d0 5f 79 ed 16 82 c9 ee 69 ea 84 77 90 ca 19 d3 bd fb c4 c9 ee b8 6c 3a eb 3c ee e6 15 18 d3 a3 80 a6 f0 d6 dd 99 8d 3a 00 69 88 56 8b d1 e3 c4 06 67 26 22 60 03 98 51 c5 c3 94 c0 d9 b9 dc 87 cd 89 fa ee df 67 b5 90 64 3a 9b b5 fa 98 46 4f d5 b5 cf 3f c3 87 f8 f1 f0 f8 8f 9b 19 a2 7b 45 9c 7d e0 59 8c d1 74 Data Ascii: 7i"4XV#Xow~Z:^xd7b@_7hyQu[=?b;:Ux,:@^vfASZi~2&&.}+_hfMr_yiwl:<:iVg&"`Qgd:FO?{E}Yt
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 25 df 3a dc 9c c4 28 cf 2d 65 d9 fe 9c 28 e4 99 18 a2 8c 8b e6 a5 3e d3 3a 2b f1 64 3e 8a 14 c6 41 5d dd 97 b7 9c 0a 54 71 91 8f d9 0e 35 d3 e0 ff 71 11 ff 19 3c f5 61 7e 77 a3 04 b9 c1 dc 4d ff 26 21 b0 cb 73 06 8b b5 cc 45 e2 fa 32 43 ca 71 86 31 1f a2 d7 8e be a1 04 7a ac a5 ae 63 11 cf f2 f6 58 1b 33 85 59 a5 5d 6c bc 6a 5d e4 ee 72 50 95 71 23 1c b8 d3 22 d3 09 ba ff 06 a1 86 2d 52 c6 3b 8c 02 2e dc 4a 5b 73 35 ab d8 93 31 e2 a5 19 fe b4 21 8a d5 5e 3e df 5b 34 96 5a 21 f3 ff 86 bb 92 b1 2f 9e e4 94 72 10 a5 28 e3 0a 2b 05 e5 68 9a 88 08 03 9f 40 6d 9b 73 ce 90 7b 3c 80 8c 0a c5 34 9f 11 15 19 bb 41 aa b5 7d ed 50 76 88 73 e7 2d c7 58 c7 7c 22 7d 0a a2 e8 89 1d 9d ce 08 45 f3 6c ad bd 86 19 6a f4 81 a0 cc 00 c2 0a fd 07 36 81 34 a9 bd ba 5f 3e a7 7b Data Ascii: %:(-e(>:+d>A]Tq5q<a~wM&!sE2Cq1zcX3Y]lj]rPq#"-R;.J[s51!^>[4Z!/r(+h@ms{<4A}Pvs-X\|"}Elj64_>{
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 89 40 0f 2a f5 43 ff e4 c6 a6 2b f9 2f 71 74 8d 33 60 58 dc 66 30 1c ff 89 c7 53 ad 2d ef a5 79 d5 48 99 fb 27 81 2b 03 40 63 53 ef 5d df 2a 37 a4 9e 5e e2 55 a9 2a a0 07 59 74 f2 31 99 22 1a f6 f0 03 4e c0 19 54 b5 7f 64 d2 b1 c5 0f ff 95 6c a2 7d 4c 4c 2f d9 e4 0c 1a ab d4 15 b6 70 90 21 30 85 55 fc 43 58 eb f0 5c 04 f5 db 8b 02 c0 21 d7 63 88 85 b1 25 05 33 1b b9 82 d5 59 03 71 83 4a 71 d9 f3 e4 12 6f 8e 97 0c d5 e4 7d 31 11 2e 06 ef 6a 14 66 b9 74 4a f1 d5 ab 39 ef 76 52 c0 17 6c 13 2c b8 1f ba f1 44 72 12 ec 13 6b 84 62 c5 74 15 8b 15 99 4c 12 92 2f 8f a6 31 a8 d9 ac c7 42 72 21 c3 16 16 a4 2a 17 b8 44 b6 2f 69 e2 07 51 75 05 35 8b 4a 15 44 e4 db 21 c8 14 c6 53 11 df 02 16 b0 6f a5 53 6a bf 23 70 b0 25 64 1c 98 ed 23 5b 31 bc 1e 18 43 37 06 f5 9c 27 Data Ascii: @C+/qt3`Xf0S-yH'+@cS]7^UYt1"NTdl}LL/p!0UCX\!c%3YqJqo}1.jftJ9vRl,DrkbtL/1Br!D/iQu5JD!SoSj#p%d#[1C7'
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: f2 53 86 77 e5 98 02 3d c7 86 19 dc 3f 3b 76 8b 73 56 b7 3f 5b 09 b7 14 06 9a 0e 58 eb ef 97 5a f4 98 b0 9a 1c bf 1e 78 ac 38 7f 94 e6 73 9b 17 93 66 c7 40 71 74 09 e9 a2 1a fc 1f dd 76 11 a2 7d d3 49 84 7b c4 0b 38 e9 0a 1b 04 5c 2f 62 20 2a 8e 07 42 10 21 3e 26 28 bb 2d ee 5b 20 34 bd 78 25 b6 db 56 b5 a1 08 9a b1 54 5c 3d 55 1c cc c2 2d 03 9d 23 91 e0 6f cd 92 85 12 fe 44 60 87 18 5f 8c f6 9a 3a e0 c1 97 bc 3e db 6d 58 1a f8 f3 e8 72 8e 76 24 3b 43 4d 64 dc 0e c9 ab 1c 60 33 12 00 65 5e ec 34 bc 0a 4e b3 7c 7d df 8f 2b 73 00 9c 6a a5 e2 b2 16 15 2f 86 40 29 ed 2a 7a 0f b1 a3 4b cb b0 0b cf 14 1e ab 94 a9 59 e7 87 0a 05 ba a2 fa e6 7b bd c0 a5 e4 34 13 a3 88 c2 62 fe f7 0e df e4 1e f7 89 62 07 ad 6c de ac 84 2e 00 03 53 3a 69 50 61 0a 14 d2 8c f1 fb 33 Data Ascii: Sw=?;vsV?[XZx8sf@qtv}I{8\/b B!>&(-[ 4x%VT\=U-#oD`_:>mXrv$;CMd`3e^4N\|}+sj/@)zKY{4bbl.S:iPa3
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: b4 da 5c ed d1 47 b0 00 b0 ef 09 c3 a5 4f 3c bf 5b 09 db 8c e8 79 5a 81 c5 50 4d cb 94 18 f6 1d a6 32 1e 56 a4 f3 49 b9 dd 0a 02 e2 66 30 da ec 96 f0 40 b8 7b 42 1a 73 e4 8a 57 3b b9 da 09 1c fc 2f 0a ed fd 14 fe e5 ca 4a 3f 19 78 8a 98 c4 97 46 29 46 ee 86 20 62 1f a6 4f 6d e7 fa 8b 9c e7 4e 10 4d 5e ac 06 86 2f b1 c5 e6 41 25 49 e5 2f 37 15 ed 3d cb 35 4e bc 1a db 31 0d f2 06 7d ee 7c 47 3b 51 cf ec ac fd c8 31 fa 12 97 28 56 85 23 d4 f2 b2 15 28 64 0b 44 9a 86 72 5c 18 38 0b 62 1b 29 29 64 42 bf a0 d6 d8 98 de 12 a5 09 7c b1 0c 33 9c 5c e0 36 04 a2 18 a5 eb 08 9e bf 2a fc 25 2f e3 34 39 32 82 0f 84 33 14 7a 38 01 2f 1e f3 18 9f ac 17 03 bc ff 58 8a 26 3b 84 bb 0b 0b 46 ee a7 82 8a f1 d7 59 0d 38 d2 6b 90 05 12 90 76 ae 17 65 0f b5 b1 23 60 57 37 8e 84 Data Ascii: \GO<[yZPM2VIf0@{BsW;/J?xF)F bOmNM^/A%I/7=5N1}\|G;Q1(V#(dDr\8b))dB\|3\6*%/4923z8/X&;FY8kve#`W7
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: c5 37 a0 83 52 7b 59 fe 5b d3 fc 8a 0e c0 02 0e 86 fc 6c b4 8e aa 73 db 85 3a 10 6c 02 d7 14 df d6 5b 17 c4 e6 a7 40 34 5b b7 f6 03 76 5e f9 a1 d8 50 66 b7 71 37 a3 e6 1c 44 01 4f 7b 3f e7 d4 ce 54 c7 a4 45 8c 6e 3b 31 29 2f 37 e8 a0 71 55 11 92 08 5c 41 04 aa 81 d9 bd e9 ec 4b 51 b3 bd e6 7a 74 b7 a5 58 bb 73 7c 2d 66 3a 9b 93 b8 b2 6b 90 f0 46 d0 98 6f b3 f3 71 b6 36 4a 3b 17 90 40 2c 0c bd d4 8c ce 15 41 86 a3 e7 92 6d cf 6d 9d e2 7f 3f 38 26 83 74 d3 ab 0b 2a 0c 28 4a 60 6e 8a 2b 05 f9 cd 61 8e e4 62 e0 57 be 30 08 31 b1 d4 e0 8d eb 93 a0 b1 f5 53 b2 f8 f2 4b 0e f4 a2 ff 6f a2 ed 31 8f 6b 7d 77 e1 4f bd 06 8d b9 63 d4 1b 03 71 78 1f 6d cc 8b 9a 52 24 23 34 a9 ab 5b 5e a8 26 54 07 47 5e 2b 92 b4 73 6f 76 a3 83 9d 14 52 d9 bd 42 93 88 79 a2 b5 72 06 c0 Data Ascii: 7R{Y[ls:l[@4[v^Pfq7DO{?TEn;1)/7qU\AKQztXs\|-f:kFoq6J;@,Amm?8&t*(J`n+abW01SKo1k}wOcqxmR$#4[^&TG^+sovRByr
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 00 a4 8c cf e8 de a1 6a f5 3b f1 e6 e7 fe c5 09 cd 12 e6 b2 b7 e6 31 7c 1c 54 85 0d d4 ac 20 df ad 02 6c 99 07 bc 3a 44 b7 02 e3 18 3a 0f ea e5 53 85 1e 27 80 27 d6 5a 17 e7 1d a9 02 e7 55 e1 77 3b eb cc 51 41 98 f7 51 09 7d 4b 9f 67 2d 8a 4a ea cc 10 e3 0a a7 93 65 11 2d 57 a5 dd 2c 81 02 45 5f 31 a0 ab 62 17 25 92 69 55 1a 56 33 db 59 eb 90 7c 36 c1 f5 20 5e a8 a7 60 a8 30 67 dd 43 ba dc 5a 21 3b 39 67 48 5b ad d8 7d 97 78 a7 b4 b2 34 e4 8e d2 18 ac 9a d7 39 24 af ad 0a 20 fd ca d4 4b 2c 6b b8 d9 a9 a3 37 08 21 18 30 99 3e 84 a8 54 55 72 b3 79 e8 89 72 51 6b 06 a3 43 9e ab 05 4c 81 02 5d 81 c2 cc 1d 33 ea 73 5f c1 c5 ba aa b9 8e 63 c8 8b 49 21 21 b1 95 8c 17 4b ad 24 cf f5 d6 69 d4 60 81 31 d4 2e 4c ca 45 c8 92 8e 0a 01 7b 43 28 d4 b4 ee a5 e7 64 cf 67 Data Ascii: j;1\|T l:D:S''ZUw;QAQ}Kg-Je-W,E_1b%iUV3Y\|6 ^`0gCZ!;9gH[}x49$ K,k7!0>TUryrQkCL]3s_cI!!K$i`1.LE{C(dg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49926	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:37 UTC	1093	OUT	GET /FpCCoNLOt6LRIY_3NM5Rk_LDN-kFNz0yxdFjm-CYM4XavRQfoQlXxOtgC7abfexIDOE=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:37 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 14486 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:58:53 GMT Expires: Fri, 25 Oct 2024 21:58:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 3104 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:37 UTC	844	IN	Data Raw: 52 49 46 46 8e 38 00 00 57 45 42 50 56 50 38 4c 82 38 00 00 2f ff c0 3f 00 09 48 6e 23 39 92 a0 8c c8 ac 36 d9 ff 7f 70 b5 9b b5 d7 88 fe 4f 00 7f d2 03 fc 11 09 ec f7 0e 88 20 e3 35 75 f7 28 ba df 3a 5a aa 6a 5a 6f f5 04 e8 b5 bd 21 78 35 e8 3e b8 8e 80 b8 a1 06 38 ba 6f d0 80 7d 26 69 7a f1 2a ac 88 57 14 71 d2 f6 6a 04 3e 13 18 96 4d 7d e6 31 16 5b c2 3e eb b6 a4 fd 46 ed 8b dd 22 e2 a4 9b 5e a5 bd 75 86 63 b1 e3 46 88 98 74 45 64 a6 41 5c 2b f3 59 66 72 33 33 f3 16 63 64 e6 d8 2f d6 cc cc d6 2d 57 55 a5 35 95 b6 0d d0 03 57 d5 28 ee ea 01 76 55 dd d2 a3 7f ec 02 8e 24 49 8a 24 5f 90 0e 97 a4 83 b6 92 d6 ee ff af 63 6c 3e 54 dd 46 92 a4 48 79 f8 fc 7f 2c 6f bc ff 46 31 88 cc 10 6e 24 d9 56 95 c6 1d be e2 72 29 32 89 d9 ff 92 c8 1c 5e ff 27 00 ff 4f 7f Data Ascii: RIFF8WEBPVP8L8/?Hn#96pO 5u(:ZjZo!x5>8o}&iz*Wqj>M}1[>F"^ucFtEdA\+Yfr33cd/-WU5W(vU$I$_cl>TFHy,oF1n$Vr)2^'O
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 96 9d aa 39 b7 91 f7 de 7b ef bd f7 52 16 1a ca 41 dc a6 20 2c 31 31 25 e1 a0 f7 ec 78 ef bd db a6 0a cc 5a b3 f7 e9 31 1a 9f 9b 2a 86 1d 85 e0 ca 61 d3 07 be a2 95 c2 1b 8e a8 e8 47 e5 cd 84 bf bc 5e 3c a1 e8 94 89 40 39 28 00 d1 6a 38 05 9b 6e fa d3 8e 40 e6 d8 38 26 97 97 e0 a4 93 2e da f4 8d 40 50 c1 2c 7a e0 3a f4 a3 1f 3c 11 c8 55 02 8a a1 b1 4c 04 3f 6c aa 4d 0b 7e 54 09 74 04 8a 40 79 08 8a 4e da 4d 0f 2c da 31 28 06 61 05 20 2a a5 50 74 75 0a 9d d0 49 40 74 d1 86 f2 66 d2 4d 25 d7 b6 ad 5a d1 da e7 e2 ee d0 25 05 8f 81 dc c9 02 5a ee 52 f5 fe 3f 4b 72 6d 6d c7 f6 9c 73 bf df f7 c5 b6 6d 8d 9c 94 c0 f1 5f 43 2a cb 8c 0d 38 b3 b4 60 db 7c ef 2b 26 e0 27 0a 9f e7 ff 07 f7 ff 03 a2 2a 90 05 23 c1 01 95 00 1a 42 06 34 85 97 92 c0 ff 72 c1 4e d0 1d 36 Data Ascii: 9{RA ,11%xZ1aG^<@9(j8n@8&.@P,z:<UL?lM~Tt@yNM,1(a PtuI@tfM%Z%ZR?Krmmsm_C8`\|+&'#B4rN6
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: d8 dc 3d b2 2e 4c f3 e9 34 b0 1d b1 b1 5c 42 24 21 66 34 96 63 08 6a 05 15 49 f9 af a6 de d3 8d fc e5 1f 39 34 a5 c3 f8 38 80 74 c2 8b 36 4b d6 1d d6 b6 2c 73 a4 28 f5 00 a8 1e 9f 40 e3 2c c5 72 61 e6 2a c1 c5 65 d9 59 25 16 f4 9c b2 3e 6b 3a 64 bb 2e 33 bf 2f 0b 7d 00 3e 7d f9 4e 17 1e d4 6c f7 07 a7 55 b3 a2 b1 30 1f e6 61 e4 80 2d 52 97 06 ca 73 9a 9d a7 6f 94 00 63 7c bc a3 ae de bf f8 c6 64 25 f8 87 49 b9 0e cb 30 ca ce 63 09 31 f4 16 90 b9 f9 6f 6f bb 5c 08 a8 2c 51 ed eb a7 93 c0 04 87 33 6b 2f 4e 65 21 f8 f4 e5 c3 df 33 31 a3 5a a9 0c 52 d2 2a f4 7d 95 83 a5 7e a1 3c 15 89 d0 79 49 63 1c 05 dd 06 4e 7a eb f3 92 5c 6d f2 ee b0 67 b0 65 9c cb c5 2b 17 b1 59 84 04 36 2c e9 61 52 68 86 96 45 0a 92 98 a1 66 94 6c f7 3e da ca fd c3 00 3e 3d cb bd a5 d8 Data Ascii: =.L4\B$!f4cjI948t6K,s(@,raeY%>k:d.3/}>}NlU0a-Rsoc\|d%I0c1oo\,Q3k/Ne!31ZR}~<yIcNz\mge+Y6,aRhEfl>>=
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 09 7c fd 01 74 e1 7e 7c f0 7a 9c 0a b7 76 f8 88 fb 17 ad e9 97 a1 24 40 e1 d6 9d d8 d6 5f 5b 37 f5 bc 0b e9 e6 5b c0 02 d0 12 76 f3 ed 66 0e 82 7b 1c 94 91 87 e7 b1 83 fa d8 bd 71 1a 8a b2 83 a2 28 07 b3 7d 4b 55 df 1f 4f 9d 81 ef 7f 55 1b 78 4c e6 a3 dd e6 0d 7e 8c 63 71 e0 91 b9 79 3f 1e 43 28 83 a7 13 6c 53 2d b8 06 ef 1d 9f 17 e6 81 d7 fd 52 be 57 e8 2f 6f 0a 87 67 d8 b1 78 ec 80 9e 04 08 78 43 fd 8b 5c 85 a7 4f c5 c7 8b 40 5b a8 f6 21 78 49 49 9e ba 28 73 df 6d 9e f2 ae e7 e1 9d a3 7a 0e 20 e0 3d b3 e8 e8 aa 7f 4e c2 e1 b7 82 b9 e1 31 dd c7 43 d3 f2 54 57 b3 b1 c0 6d 86 c3 e3 f5 81 76 b0 02 cc ed 99 aa 62 40 b6 eb a9 df af 01 e3 e6 80 9f 33 0b b8 e5 9f 76 85 23 32 e1 54 7e 7c 4e c6 43 c0 db f6 62 f9 e5 f5 ec 49 78 7d 69 78 21 e6 86 ca c9 ff b4 3f 54 Data Ascii: \|t~\|zv$@_[7[vf{q(}KUOUxL~cqy?C(lS-RW/ogxxC\O@[!xII(smz =N1CTWmvb@3v#2T~\|NCbIx}ix!?T
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 29 4a 17 c5 af 81 e8 c9 e2 b9 3d 56 c5 4f a1 82 02 58 5a a5 20 ac 21 28 09 42 5e e1 86 1b de fe cf be 1f 75 6e 53 f5 6d b5 58 60 3f 8c 06 a7 92 36 0b e5 00 30 45 dd 25 7b 9e 5e 77 6e bd c1 09 7f 79 da cd fe b7 f8 10 c7 df 3c 57 a7 bc c9 d1 49 5b 5b 2c 2a 00 31 c5 b5 41 ee 7f 9d 63 5e b2 9b a9 81 ae bf f6 2d bf 41 b8 47 18 27 f3 ae 62 a0 2c 54 4b 23 41 01 98 7d d2 e2 d7 51 fc d2 44 3f ad e9 98 f7 e7 3c 05 20 4b 90 10 4b 93 52 ad 82 92 bc e4 5b ec 5f 4b 0a 3a 2f ee 27 27 69 7c 29 f6 01 5a 85 94 21 d1 64 99 24 2f a0 59 7e ed af d5 82 68 23 c8 51 38 09 3d 2b 73 bc 93 0c 58 74 6e b0 bd 8b 55 2e 05 4b 49 80 78 8d 96 f5 47 4a 11 65 87 cc bf 39 65 43 3e 4c d7 85 45 70 ab 68 80 00 03 65 11 d5 a4 8a aa 59 4b 85 15 dd 3e ad e9 04 c5 4f 05 7b e6 24 cb 1f 39 14 02 1c Data Ascii: )J=VOXZ !(B^unSmX`?60E%{^wny<WI[[,*1Ac^-AG'b,TK#A}QD?< KKR[_K:/''i\|)Z!d$/Y~h#Q8=+sXtnU.KIxGJe9eC>LEpheYK>O{$9
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: a9 48 cd dc bb fe 5e 8c 00 4c 22 33 2f fb 91 39 8f f3 b2 77 17 88 13 7e f2 b6 b6 e7 17 8d 38 bb 36 e7 4e b5 d7 a3 5a 15 dd ed 00 3a 60 93 8f a0 eb 17 60 d0 b7 07 ec 04 3d 58 dd 24 21 a5 58 8e 31 39 99 1e ff 5f ed 01 fd 83 1f 1e cf ce 78 ea a1 c7 27 8b ae c8 5d 34 d8 c0 1f f5 38 dc 3e 87 ca 14 62 20 83 ac 4d f4 ef d2 05 59 21 54 cb 20 ed 38 da 2f 94 1d f9 4f 17 1f fb ec eb 4f 88 bc 97 7e af f5 60 73 bc d8 bc 6f c0 fa 30 a3 e7 d4 b9 4d bf b7 93 e8 e4 fb be fd 63 f0 d0 92 39 4a b7 c8 d2 81 0a d1 6f ac 37 eb 53 10 d0 60 ec 6f 5f 1f 11 9d 97 82 e8 1e 02 ac bb 1c 6d b3 53 d3 b9 bf 8f e3 d8 dd bf 4b ae 45 24 2b 93 9f e0 0e e0 a3 cd c9 f5 44 73 7a ab f8 8a ad b5 f6 be c3 17 0d 43 60 4b 5e 4e 71 bb 82 1d a8 f7 00 3e e4 ed c9 ec 94 e3 af ff e7 c3 d6 76 9b 65 a2 03 Data Ascii: H^L"3/9w~86NZ:``=X$!X19_x']48>b MY!T 8/OO~`so0Mc9Jo7S`o_mSKE$+DszC`K^Nq>ve
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 91 82 04 52 24 a0 3c 58 23 49 38 44 ca 26 e7 a8 a7 de 24 83 77 8c 76 0b 0c ee 36 a4 a5 84 2d 39 39 d9 47 9e 11 0f 96 c6 71 ea c2 69 7d a1 bb 0d 7a 3a e7 01 79 b3 e5 46 63 61 87 42 f1 cc ff 44 00 7f 79 b5 74 a4 27 b4 cc 3d 33 05 03 f8 0f 40 e1 9b 01 66 90 80 73 59 27 cd 71 d8 c0 6b 4e 6b 88 95 42 b1 20 6a 62 b6 c4 14 29 88 14 25 2d 24 06 77 b7 f5 0c d8 00 de b2 7a dc 4d 67 bf 77 35 52 19 0e 6c c9 d2 22 34 1e a4 71 dd a3 a1 04 2a a6 44 46 7a 91 dc e3 09 87 ee b4 b2 93 54 88 a9 0d 30 a3 70 fc ed 72 e8 bd 45 a7 54 4c 8b 1f 5d aa 33 f6 1f 00 18 c7 dc 90 2e 00 12 7c f6 1e be ed 5c 33 65 0d 25 26 52 90 50 56 00 41 58 d8 dd 56 33 b9 66 ff de d9 d8 79 b3 c3 3e ab 8b c2 7b b2 8e 70 cd ce d3 5b 5d f7 67 d3 69 4e 9a 34 ae c7 41 81 44 4d 08 a0 70 52 89 26 1d fd b4 ab Data Ascii: R$<X#I8D&$wv6-99Gqi}z:yFcaBDyt'=3@fsY'qkNkB jb)%-$wzMgw5Rl"4q*DFzT0prETL]3.\|\3e%&RPVAXV3fy>{p[]giN4ADMpR&
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: e0 21 1c 08 0a aa 83 52 30 08 13 80 24 c0 e9 04 36 a9 d5 aa 7a 50 e7 9e de a1 24 01 b0 02 25 a0 5b 87 c2 bd b5 9e 4b 02 e8 a0 00 38 28 74 0a 0e 50 6e 00 68 82 92 82 09 65 21 4d a9 84 8a 80 35 b1 7f da e2 a5 c6 5f b9 39 4f ce c2 63 5c a0 44 ae 1c 10 02 df 08 07 31 00 23 27 47 4e 1e c0 61 03 f4 61 6f 0e 71 7e 50 e7 8d 73 e0 dd d7 6b 30 37 04 a4 30 37 f5 0a 26 04 98 a0 a4 60 42 69 a4 48 9a 28 28 46 2d 39 eb 46 b5 4b 3f a1 77 62 e3 7a 37 6a 7e 25 0f cc 04 06 04 42 e9 e0 02 df 08 0f c4 08 04 0e 81 03 f4 c0 cd e9 9b 77 6f a0 6b 8f 39 04 bc 77 03 c2 2d 41 c0 88 81 35 60 6e 43 1f 80 54 17 46 8d 04 13 09 54 40 54 60 42 69 4a 95 94 81 a5 9a 90 98 98 c5 8e cb 27 9e d6 3b 61 16 e8 d7 6a 94 32 b1 58 c5 04 42 84 10 e0 80 07 78 20 62 e0 a4 43 e4 28 e0 70 1e b8 79 1f 7a Data Ascii: !R0$6zP$%[K8(tPnhe!M5_9Oc\D1#'GNaaoq~Psk0707&`BiH((F-9FK?wbz7j~%Bwok9w-A5`nCTFT@T`BiJ';aj2XBx bC(pyz
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: eb ad 15 7d 00 5e 3e 74 cd 6e fd fe 0e 0c 7e 79 cd d0 78 9c 16 07 27 86 9a 43 8a 44 59 05 92 1a d2 0e f5 80 81 cd 56 29 e5 66 84 77 0f 8b 09 a6 79 08 77 a2 cf d1 f1 79 e2 e1 e6 e1 34 08 48 3c 2c 0d 68 43 c3 98 12 b3 8c eb 28 0d 3a 63 74 15 d8 bb a5 d6 82 a9 a6 0d 4d 42 25 25 9a aa 0c 90 0c b0 d4 24 95 d2 04 17 2c dd 59 67 d5 c9 55 de 0e 39 ca 6a a9 1e f3 6c f5 fa 91 cc a2 f1 9c 8a 1b 0e 88 82 c4 06 af d2 d6 a4 da 10 31 a0 0e 3d 2b cb 92 b0 3a 72 03 2c bd 12 b3 7c 82 7b 30 8f ce d8 03 8f ed a5 df 25 36 72 cf e6 31 d1 22 8d 64 c2 9a d2 74 23 ae 3b 62 04 9e 35 c9 9a 54 1f 37 4d 8f 91 6d 0b 14 6f aa 32 54 4b 55 49 a9 54 15 98 6a 40 13 f5 01 d3 26 b7 49 fa f3 35 e0 f5 1b 92 be 74 47 0f b0 58 6c b7 bb 1b 98 a5 a0 0c 13 34 d5 6a 35 87 9a a5 08 54 45 48 0c a5 43 Data Ascii: }^>tn~yx'CDYV)fwywy4H<,hC(:ctMB%%$,YgU9jl1=+:r,\|{0%6r1"dt#;b5T7Mmo2TKUITj@&I5tGXl4j5TEHC
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 0f 63 db 5c 68 3e e9 a7 ca 03 56 22 06 e1 e0 50 ba ea e5 ab f3 a0 ea 0c af ec fe 5b 2d f5 f1 a4 fb 1e ea 2e 75 ad 9f 1d f9 da 2b 7c 5c f2 93 be e7 ff ca f5 bf df f0 67 76 2d 21 13 cc 48 98 40 98 48 23 2c 19 d6 e4 f2 fb 91 ef b8 86 eb e0 30 0c 6a 18 b4 74 50 bb 0d fd bd 73 76 e5 8f 9e 90 3d 91 79 d5 da 36 b5 33 5d df 56 aa d5 32 6d 1f 0e 37 c3 94 a5 2c a0 ec fe 9b bf 9f 05 b9 fa fc 47 a6 b4 9a 5b 8d af 7d 3a 62 ec 3b b3 ed a1 81 91 58 0c e8 c4 9e 70 70 28 a8 cb 6d 67 35 a4 a9 b6 fa 78 61 ea fd aa 89 8a fa 83 a3 f2 1b ac a6 ff 3c fe ff e4 4c 69 3f 94 70 32 1c 96 10 48 28 43 a4 2c 12 89 e7 79 c7 1a fc da ff 1e 47 c0 30 a8 61 f0 1d 3b 9d 84 cc a9 f3 b2 e3 85 91 32 32 6c c4 1b 48 4d 73 ed 4b 22 94 f7 b7 65 da 16 7b b5 6c ff db ae 4c d8 7b 9e 2c 3a b1 20 43 7b Data Ascii: c\h>V"P[-.u+\|\gv-!H@H#,0jtPsv=y63]V2m7,G[}:b;Xpp(mg5xa<Li?p2H(C,yG0a;22lHMsK"e{lL{,: C{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49927	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:37 UTC	538	OUT	GET /Nz4AvRKB-2Ei330Du2EiuF6D3nAi5o_jARnmHnrtZ8C2IruknKUWrvKGuWzv1ol5ZfCgh0yBclU=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:37 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 98700 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:18:11 GMT Expires: Fri, 25 Oct 2024 19:18:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 12746 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:37 UTC	843	IN	Data Raw: 52 49 46 46 84 81 01 00 57 45 42 50 56 50 38 4c 78 81 01 00 2f 87 c2 5a 10 8d 40 6c db 48 92 04 ab aa bb a7 e1 ab fc 03 9e 9e da ef 02 88 e8 ff 04 e8 b7 b3 91 9f 88 08 cd cc 88 83 32 df 16 37 29 4e 76 e6 f5 8e d8 5b 00 12 07 db 8e cc 37 80 b1 ed 1b 70 03 02 5a 61 5b 35 d6 62 59 f9 24 73 11 d1 b3 57 d5 aa f2 da 0b c4 3e 00 c4 4b c3 55 ae aa 1a a3 10 77 49 fe 8b 57 a0 ca 2e 57 0d 97 01 db ba b9 80 96 00 bb 6a 55 d9 46 67 4b b6 a5 56 1c 6c 63 1b a4 9c 53 aa 65 dd 93 a7 b8 01 36 98 c3 b5 d6 45 84 72 d8 ab c1 b3 31 07 e5 5c 03 f6 00 f0 3b 1e 25 69 4a f6 18 c6 d0 c8 17 7c b8 8f 31 f6 2e 5d 0d 4d b7 e8 2d 29 15 0d d1 de 0d c9 0a 01 9d 94 9b 8a 4e ce 88 88 d6 07 a7 be e6 9f 9f c8 75 b6 ed 79 9a 4b bf 7e a5 17 1b 38 00 a6 54 ca af 4c 39 ff 31 53 1d db 2b 7a e7 95 Data Ascii: RIFFWEBPVP8Lx/Z@lH27)Nv[7pZa[5bY$sW>KUwIW.WjUFgKVlcSe6Er1\;%iJ\|1.]M-)NuyK~8TL91S+z
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 5c b8 f0 5a 7d e2 7a 22 2b e8 43 75 5d 26 10 8d 48 52 c8 84 24 29 52 61 24 14 2d b4 53 e2 d4 4f d6 8e 9a 68 ee 03 57 fd ab 68 fc 4c d5 f2 5a f5 e7 50 50 50 ae 59 2b 6e 00 ff 42 0a 29 24 49 6a 07 54 56 02 7f fc a1 0b 4f 22 4c c7 f7 db 8f df 7f de f5 0e b1 9f 55 b5 2a bb 0c 94 c2 ac 45 34 e5 a5 71 9f aa 0c ab be af 22 a0 85 a2 0b 4f 7a 98 09 91 45 16 bb 9e d7 97 65 34 ca d7 3c cb 59 c6 78 b9 6c 70 20 af c5 eb 44 7b de 18 fe d2 97 8a 40 20 a0 af d8 8e 6d 46 a8 cf ee 77 8d 57 7f 5c 53 be 7f 28 80 bc ab 0b e5 32 71 ec f9 c4 a3 69 f7 8e e5 4c eb ab f5 55 28 b1 08 9d d2 f5 6b 6f 5f 4d 70 49 ac a4 e6 53 01 b8 2f a5 66 11 70 2b f1 c5 cb 4a 66 29 ff 87 47 20 40 2d 90 db 48 72 24 45 55 66 fa 6f 74 57 8b dd 13 ef 88 98 00 7e 72 75 ad d0 e0 ed 93 aa 2a aa 98 cd fb 9a Data Ascii: \Z}z"+Cu]&HR$)Ra$-SOhWhLZPPPY+nB)$IjTVO"LUE4q"OzEe4<Yxlp D{@ mFwW\S(2qiLU(ko_MpIS/fp+Jf)G @-Hr$EUfotW~ru
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 13 52 57 49 66 3b 0c 0d 15 92 87 4a 1a ba 66 77 98 1b b2 17 61 18 1e 53 2c 72 16 69 a9 da 1c 86 5c 64 99 87 67 8e a1 a1 d2 4c 4d d7 d0 50 69 4e 4b d9 8b 18 66 4a 4b c3 8c 77 d1 30 69 0e c3 d0 b5 54 b5 48 c3 86 af 6d db aa 6d db 8e 4a a9 ad 8f b9 f6 b9 24 66 66 66 b9 2c 57 9f c4 ec 33 eb 37 24 8b 6c c6 88 f0 98 f1 d1 bd e7 ac 3d c7 68 55 13 b5 6d c7 6d db ce 83 f7 fb ff de fb 98 5e d9 66 6c db b6 4a 29 d9 b6 9d d4 54 b5 6d db 2c d9 76 b2 ad e5 a9 d1 fb ff 7d ef 13 13 c0 0b 03 80 f5 77 a3 29 ef fb fe ec ef 72 fc 9c 24 27 c9 89 35 52 4b 65 da 54 c7 aa e3 3e db 99 cf 5d c7 3e 77 77 77 1d 77 97 fa 78 fb 8d b4 33 a9 37 ae 27 47 ff e7 9c bf ff ec b5 8b 4e 3b 9b e4 9b ee ce dd bb bb 58 70 b7 e0 ee b0 d6 e7 e9 e0 72 47 71 ce e5 c1 21 38 bd fc e3 10 dc 25 38 ac dc Data Ascii: RWIf;JfwaS,ri\dgLMPiNKfJKw0iTHmmJ$fff,W37$l=hUmm^flJ)Tm,v}w)r$'5RKeT>]>wwwwx37'GN;XprGq!8%8
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 78 0e 2f f5 12 b7 07 c3 4f d5 3e c9 45 4b f9 28 70 aa 2b b8 c4 ad d9 f1 5e db 3e e9 ed 29 03 cb 00 0c b9 fc 0f 67 7e a8 05 22 8c 5b 92 b2 71 f7 8a 16 2d 42 a3 3c 66 d3 15 bf 6e 9f 19 be 6b f7 ba fb 84 57 33 81 16 b6 45 66 ec d2 7f bf d8 f0 6a 71 21 6a 6e 0f 07 70 79 1d d2 15 11 38 19 a3 84 de 96 4c 03 d0 45 73 b3 ea e4 e1 67 3d 73 f0 d9 fb 70 34 ba 8e 7d 16 24 d0 12 4b 0a 60 29 5d 86 0d 2e f7 cf 44 c9 9f fd 0d 69 b9 bc 4d 31 d3 d5 b1 0b a3 a4 22 20 ad 48 4c 64 ba 59 d5 c2 45 83 cf 05 e5 d9 fa 70 3c e1 5c d1 8e 16 7b 1f 39 3c dc e2 42 17 87 e7 5c 7c b6 0f 71 dc 0c 53 d0 a9 a8 61 42 79 ed a7 1d 16 8a 29 92 53 2f f7 bb d1 b3 b1 95 07 f0 ee 68 d8 16 91 44 27 5a f4 96 6f 25 da 71 d1 ab fd 5b 0f 3c 5e eb b8 17 e2 c3 97 2f 32 ca fd 35 52 23 0c c4 92 90 7f 6b ce Data Ascii: x/O>EK(p+^>)g~"[q-B<fnkW3Efjq!jnpy8LEsg=sp4}$K`)].DiM1" HLdYEp<\{9<B\\|qSaBy)S/hD'Zo%q[<^/25R#k
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: d0 1d 17 78 fa c4 00 44 34 b4 69 f2 01 bd f0 ea e7 7c 06 22 05 27 e5 a7 20 b6 94 ca da 38 08 5f b7 6a 32 04 4e 2c 2d 85 4a 56 7a 85 21 a2 e7 c3 d5 a8 ce 36 7b 4f 08 04 56 44 06 c3 03 44 23 2e 66 d9 99 a6 71 c3 91 37 ec a7 a3 32 ee bf f2 ce e6 c3 67 c5 3b 97 a9 8c 08 0d 8e be c9 91 71 a7 73 41 ff 5d d5 04 d5 d2 13 45 f0 81 6b 58 f1 fe dd d7 d9 0c b4 d2 6c 6c 02 b3 69 d1 15 f5 93 02 71 32 d0 e5 33 bb de cb 35 1d 98 30 c6 aa ae cf 93 eb 07 c4 18 14 cf 20 eb 5a 4e 3b 4f 1a c0 cd 2f 88 e0 c3 8c fe 27 ec 18 91 d0 8b 01 50 38 e7 c3 52 3e 4d d7 d3 46 96 01 84 f6 67 5c 70 55 37 e2 64 56 a6 ed cb 2b 9c 6f 8e b6 5d 7e 56 8a a6 b5 77 c8 38 88 1e b2 84 93 ab d7 27 3a 59 4c 50 87 82 ff f7 bb df 7c f4 8a 23 e8 bb 36 ca 9b e5 b0 6e 05 b5 4b ce 66 bb 1b 1b 0e 2d 7c 5f 96 Data Ascii: xD4i\|"' 8_j2N,-JVz!6{OVDD#.fq72g;qsA]EkXlliq2350 ZN;O/'P8R>MFg\pU7dV+o]~Vw8':YLP\|#6nKf-\|_
2024-10-24 22:50:37 UTC	1378	IN	Data Raw: 66 4d a3 92 e1 74 c0 78 1d 8f b8 92 dc 51 d1 62 37 b9 a7 1b f2 d1 f9 5f 02 38 49 4e b2 55 02 65 a9 0a 38 29 5f a5 23 c7 17 db 3e 7c a2 e7 2f 16 3b c4 0c 9a b9 e0 e8 fa ba bb 2b 97 3a ce 78 4d 1b 81 86 b6 ee 30 25 05 c2 d3 0d c3 55 85 c2 59 7c 05 8d 42 23 10 35 65 a2 64 1f 5e b4 5e bc 65 cb 72 6e d1 c3 cd e9 7d 27 cc e2 3a 6c 52 1d 33 90 cd 7d ba 85 9a f6 aa 95 a6 58 59 5b 6e f7 c0 6d 5d fd fe 89 fb ff 5b 01 ef b9 19 fe 76 0f 3c 84 91 47 25 38 1b 15 c9 aa b7 9a 09 2d 57 b5 ac 1e 26 5b 7e 07 c9 68 98 ad 50 e4 62 6a c8 d7 f5 97 54 d6 71 e1 e6 72 fe cd 89 19 62 0a 92 d8 71 c5 57 9d e2 5a 59 de f4 00 5f de 60 b5 0b c4 48 2e ee 12 26 bf 19 a5 19 14 7a 0a 03 7a 46 4f 98 8e a7 44 0c 51 da f4 bf 92 88 17 71 3f bd da 4b 6e 63 fa c5 9b dd 7f b7 7d 38 ed ea 99 68 3e Data Ascii: fMtxQb7_8INUe8)_#>\|/;+:xM0%UY\|B#5ed^^ern}':lR3}XY[nm][v<G%8-W&[~hPbjTqrbqWZY_`H.&zzFODQq?Knc}8h>
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 68 81 a5 d4 10 11 a5 c7 05 2c 4f 26 aa 1a 13 33 cd 2e ce 7d b1 61 31 aa 0e 32 4a b8 36 43 87 c6 28 72 bb 1f f8 45 0e 29 ff 28 f5 c0 e8 1e 70 a5 a0 e6 8f f6 f3 3b 4a f6 08 c7 2e f8 66 8b f8 93 c4 22 20 12 29 21 da fb 7f a7 e2 89 8c e7 41 ef 1c 94 32 e3 98 1b ca 1e 34 29 e5 59 be ff 51 cf 6e 1f de 83 9d 4e 7d 60 7f 87 b1 be af 66 94 11 4f a7 27 ce e4 1f b0 7a 55 c2 b4 ef 3d a9 64 93 4d 0f 78 08 a1 90 4c 41 54 58 c6 8f cf b6 b5 71 ab 59 82 68 ed dd d4 5d 42 25 26 da 78 3a 90 30 24 bc ae 43 4f e7 66 05 a0 51 7b 6e f8 ad c4 b3 6d 28 37 46 46 1d 70 45 b2 9a 7b fe ea c5 35 46 14 15 9d 16 ec 17 91 c5 28 b4 9c 52 29 7e 06 98 61 27 f0 1e be 1b 58 d4 4a b2 38 25 ac e4 90 b4 59 c1 05 3c ef 5f e4 dd 54 96 83 7c e6 53 a7 38 22 6f a9 2c 8d 75 f9 c3 19 c0 dc 68 9a 33 29 Data Ascii: h,O&3.}a12J6C(rE)(p;J.f" )!A24)YQnN}`fO'zU=dMxLATXqYh]B%&x:0$COfQ{nm(7FFpE{5F(R)~a'XJ8%Y<_T\|S8"o,uh3)
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: a6 74 d9 d3 e2 02 b4 dc 53 b8 06 d0 23 3d ad 84 01 27 2c 3e 11 5a 2b c0 c2 40 48 6e 21 dc 2c e9 12 9e 68 a2 60 53 75 8a 12 47 58 64 d3 ab 7c 91 7b 70 90 8f 78 f6 57 e8 b4 ea cd 15 93 a7 85 08 37 dc 7e 03 9c 35 ad b1 d1 c9 c4 a1 1a 66 32 40 4a 64 c4 ef f5 1d 16 03 da 5e 3c 9f 87 6a ef 4a 44 80 e6 89 1d 72 50 8c c2 4a 78 a9 f7 67 44 ba ab 00 a2 81 eb ee 9b 37 ca 53 46 31 16 c6 19 e3 00 a2 06 12 80 ca 6a 7f a2 47 cb f3 f1 96 7b ec f7 5c 5f dd 39 49 1c 3b a9 ac 3c da 1d ab 1b cb 2d 29 4e 87 60 c3 44 5c 74 4d 44 db de 9e e2 ed 43 41 b7 b2 ab dd b7 52 f5 76 18 b5 61 77 74 ab c3 f3 b5 37 16 62 bb df ad 7e bb db 07 78 70 64 ca 09 e0 9a 57 e1 6e bd 0e 36 ed 88 4d ed 7f 72 cb 6d 3f 79 d6 9a 94 5c f0 27 d4 4b 31 cb 60 22 3c ce dd 91 70 0c 66 28 c8 24 9b 09 cc ee be Data Ascii: tS#=',>Z+@Hn!,h`SuGXd\|{pxW7~5f2@Jd^<jJDrPJxgD7SF1jG{\_9I;<-)N`D\tMDCARvawt7b~xpdWn6Mrm?y\'K1`"<pf($
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: d4 1c 86 e4 b4 6f d7 f2 d5 a2 f0 0e 2b b7 53 84 e0 40 69 41 7a 19 dd e5 ab db 37 7d 7e ef 8d c7 33 5b a6 fc 77 90 94 30 4a 09 01 15 6a 8b 2e 1a 08 7c 20 57 31 a9 57 66 b8 a3 15 98 36 70 1d fd 5d 63 48 0c 00 03 53 7d 99 b8 80 72 e0 34 e8 3a f1 4d 32 26 c4 8e b1 c4 89 5f ef 29 6f e2 54 5c 2d 75 be da 51 cd dd 89 82 04 00 5d ed ed 2c e0 10 f3 16 7e 69 52 aa 73 9e 92 a8 81 bd 55 ac 82 94 a1 c9 98 7a 1a 85 c9 21 b5 66 fe bb 5b 35 89 e5 b4 d8 f4 eb e7 bd 7e ed 01 39 96 45 4b f4 bb ed ba 55 16 b4 60 c0 50 ca 32 f3 e4 bf 72 aa 94 64 fc 25 d5 92 39 9e 02 d4 32 6d 2c 49 d8 24 a1 4c 83 92 03 34 4a 56 ab 59 0b 2f 58 7d c5 8b e7 b3 ab 9b 9a 85 b0 c6 fd 64 74 b2 9b 34 a6 1c 12 04 66 1c d9 d6 41 8d 93 dc 02 03 27 99 49 2e 89 a4 2f 82 72 74 d7 ab 8d dd 7e 5c be 2c e3 e3 Data Ascii: o+S@iAz7}~3[w0Jj.\| W1Wf6p]cHS}r4:M2&_)oT\-uQ],~iRsUz!f[5~9EKU`P2rd%92m,I$L4JVY/X}dt4fA'I./rt~\,
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 27 cf ec 32 1d 93 89 43 a9 21 46 d1 fa da a2 5f ad 5e bf 36 d2 6b 75 74 34 33 c9 1a 24 d7 e3 8e 40 a1 65 b0 9d ec 2d 99 52 fe f5 79 93 51 d7 22 64 8c 00 d4 d2 40 07 9f d0 f0 91 53 29 93 8c 57 64 ed e5 73 f3 1c c3 92 63 16 82 90 39 6c 86 ed fe 06 4d 1c be 65 2c 43 cf 2e cf 32 66 d2 61 70 ba 2c ef 6a 5c 24 f7 85 9a 45 45 de 2b a1 01 a9 a5 2c 1c db 72 a2 2d e7 d4 af d6 a4 52 09 96 1e f4 8d 27 e1 88 a9 bc b5 14 54 21 81 02 45 9e 19 41 ba 08 9d 6c 5d 3a 6f 1e 70 8a 08 aa 4e ae 53 c0 aa 11 b1 21 b1 58 08 0b 80 30 2b 56 50 9a 5d 9c ca 0f 8d 01 18 ca 4d d6 94 fd 7c 85 fb 09 a9 d2 64 c8 dc 5f 04 1e 1a bc ec a7 75 bd 2a 49 36 87 88 b8 c8 8a 00 40 9c 45 f6 92 ed c3 ab 5f be f2 5d 11 42 70 b9 5e 2e aa dd fc 50 09 32 e5 53 d8 5c 20 36 a2 10 07 20 87 ba 6f 61 ad b5 e8 Data Ascii: '2C!F_^6kut43$@e-RyQ"d@S)Wdsc9lMe,C.2fap,j\$EE+,r-R'T!EAl]:opNS!X0+VP]M\|d_u*I6@E_]Bp^.P2S\ 6 oa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49928	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:37 UTC	1092	OUT	GET /0oO5sAneb9lJP6l8c6DH4aj6f85qNpplQVHmPmbbBxAukDnlO7DarDW0b-kEIHa8SQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:38 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3700 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:21:31 GMT Expires: Fri, 25 Oct 2024 20:21:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 8947 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:38 UTC	845	IN	Data Raw: 52 49 46 46 6c 0e 00 00 57 45 42 50 56 50 38 4c 5f 0e 00 00 2f ff c0 3f 00 2a 3b d2 b6 2d 97 dc ac c2 a1 57 e0 45 88 35 cc cc 8c 62 66 66 66 66 66 66 66 66 66 66 66 66 75 4f cf f9 e0 ff 22 ab 28 36 75 64 a6 63 9a dc ee ae d9 80 e0 08 52 39 c7 48 d5 76 aa b2 b0 53 43 ca cc f6 b8 77 20 77 4d 7b 05 24 d8 80 61 96 d0 e5 94 e9 2c 62 cc cc 5d 62 a5 ae 2e e5 66 66 8a 94 1b 53 47 38 27 15 64 9a 63 d8 80 ab 23 33 db 2b c0 8e cc 6c af 80 77 80 fd a7 2a 87 53 6d ca 05 59 97 22 33 33 33 46 cc 0c 9f 57 40 3d 27 35 c3 a9 5e 83 79 6a 14 39 9d cc 98 32 0b 7a 03 2a fd f6 16 ba e6 98 99 ba ca cc ec c9 cc 76 36 0b 30 bd a6 8c a1 73 d1 89 cc 7c dc 66 0a 27 33 d3 02 bc 03 88 01 00 10 4c 76 8a 6d 3b db b6 6d db b6 6d db b6 6d db b6 ed 14 b6 6d db fc ff 6d ed ec 34 69 fb 3f 01 Data Ascii: RIFFlWEBPVP8L_/?;-WE5bffffffffffffuO"(6udcR9HvSCw wM{$a,b]b.ffSG8'dc#3+lwSmY"333FW@='5^yj92z*v60s\|f'3Lvm;mmmmm4i?
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: eb 99 e0 e0 26 09 5b 14 55 1a 02 f3 b1 96 96 1c 0a 04 bd 87 e7 57 5d 5d 04 e6 f1 dc 51 d4 28 60 ba d8 da d2 e4 54 f7 f9 f7 41 f8 1b 19 ad 88 f2 b4 11 2c 31 7b 0b 01 36 ec eb ef 47 90 a7 5e a8 96 f3 18 46 80 36 77 66 7a 81 3a 77 ad ad 05 cc 58 6e ae bb 09 92 2a 2b 23 05 86 0c 2f 47 bd 10 65 82 41 a7 97 cb 12 77 4d 2c 40 a1 a5 51 59 69 00 53 96 99 ee 6a c1 b1 0c 25 46 60 4b f7 00 6c 48 42 93 64 38 c6 80 a6 a6 3b 9d c0 78 17 1f 6b c0 9c 79 b9 ea 84 c2 72 ad f3 b3 47 37 0f cf 07 0e 82 12 4a 12 35 36 26 30 68 75 75 69 2d 20 96 db 03 26 0d 23 49 4b e1 08 c4 87 e1 d8 64 15 09 04 43 95 bd b9 00 a3 e6 ee a8 a2 50 f8 24 a2 f3 eb c7 2a ff f7 45 81 40 6c 6c f3 c0 ac a5 26 b9 b7 30 cc a3 9b fb c7 2e e7 3f 9b 20 c8 d3 00 c3 56 58 e8 ce 42 60 e1 ce 32 ee 3e f0 10 00 79 Data Ascii: &[UW]]Q(`TA,1{6G^F6wfz:wXn+#/GeAwM,@QYiSj%F`KlHBd8;xkyrG7J56&0huui- &#IKdCP$E@ll&0.? VXB`2>y
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 5d 0b cd d9 7a fd fa d8 95 95 e1 1b 23 cd b9 ca ca c0 0e 56 91 0e 85 db a2 01 c3 1a 1b f3 08 28 8e 50 73 73 02 f6 35 35 87 9c 34 d7 ad e2 07 23 e9 64 a7 3f 6a 6f 5f 1f 07 c8 4c 57 54 b2 53 cd 06 f8 df ca 95 b4 73 37 39 d3 04 78 05 e6 52 2f b3 81 db 3f 5e c0 72 d3 19 23 21 c9 2c 63 14 ee 42 c0 9f 0d a4 29 f6 41 00 74 78 3a 99 a0 21 c9 28 75 bd fd 0d 98 be f8 9e b2 ca 00 86 17 03 81 ef 9f 9c b4 1d b5 be 35 24 40 bb 07 b3 6a 73 99 f8 24 a3 96 96 02 6c 37 b0 6a 49 16 d2 c0 8d 4f 34 90 b8 85 1d 91 e6 b9 2c 22 a0 93 8b 8d aa 2a ce 71 a7 d9 6e 33 b3 17 30 5e d6 3c bc e3 6e b9 fe e8 b8 2b 10 d9 c1 d1 26 20 cd 21 1e 19 e0 be 04 1f 44 e8 4c a6 0c c8 87 bc dc 34 2d 60 3d 6e 91 61 ea a4 32 99 e8 74 ec 9e de 3f 90 79 10 3b d2 cc d2 12 02 d0 e9 c5 16 11 62 3e 08 b8 bd Data Ascii: ]z#V(Pss554#d?jo_LWTSs79xR/?^r#!,cB)Atx:!(u5$@js$l7jIO4,"*qn30^<n+& !DL4-`=na2t?y;b>
2024-10-24 22:50:38 UTC	99	IN	Data Raw: c5 a9 f0 60 d5 51 8a 2f 6e 4d 71 9a f6 2a 03 1b 44 ce 98 fa 50 52 4c ba ad 51 52 19 79 a5 96 53 db 37 15 43 1b 99 e0 fa 27 d1 7a 73 26 15 ed a7 cf db 55 0f b7 b3 a5 7c 82 d3 5b 0a c4 c3 14 13 94 9f 17 41 05 a8 55 4b 9c 5d c5 d3 05 e0 22 01 a7 b9 64 37 aa 5a e2 fd fb bf 7f ff f7 ef ff fe 9e 06 00 Data Ascii: `Q/nMq*DPRLQRyS7C'zs&U\|[AUK]"d7Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49929	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:38 UTC	538	OUT	GET /jbv4-yx8rFlYHFqT7ta55EetzdvgZZM3q21E2wGFwT-5CTAv3Sf5eQTmOaMJ9mSxf-kCBbcA1QA=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:38 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 47404 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:31 GMT Expires: Fri, 25 Oct 2024 19:12:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 13087 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:38 UTC	843	IN	Data Raw: 52 49 46 46 24 b9 00 00 57 45 42 50 56 50 38 4c 18 b9 00 00 2f 87 c2 5a 00 11 87 8d 24 49 8d 7a f6 3b 18 9c 7f c0 77 e0 14 22 fa 3f 01 58 40 67 aa 4d 95 ed 06 22 02 1d 0d dd dd 5e 78 51 35 d2 ea 9a 8a eb ba 36 50 e5 66 01 9d a9 41 cd 30 96 1a 88 88 d0 c1 d0 29 79 f5 cc 48 99 a8 ef fb ae 90 c4 ae 5a 9b 05 74 4a 6d 66 2c 09 12 88 50 9c 4c 77 82 57 57 95 b4 ba aa 22 0e 67 d5 16 d8 36 b6 c9 ae b2 d4 40 84 42 84 0e 86 4e e4 8f b9 ba 42 12 fb 97 10 43 a7 6d 3f cf f3 60 30 11 8a 17 50 75 0b ac 99 19 6d b6 25 1b 03 2f d6 0f 01 9d a8 99 19 9f c1 6f 45 27 78 35 1a 98 c5 9a 99 7b ae bf 2e 15 74 a2 66 ba a7 c7 90 3d 44 9c 5e c1 6b a0 04 7d 4f d7 54 99 d7 97 e7 b1 ad 44 cd 80 21 9b ec a9 08 42 2f cf f3 d8 81 6d 0b ba 66 ea 62 4f 8e 6f 28 65 8e b6 c8 1e 22 08 7f 70 27 Data Ascii: RIFF$WEBPVP8L/Z$Iz;w"?X@gM"^xQ56PfA0)yHZtJmf,PLwWW"g6@BNBCm?`0Pum%/oE'x5{.tf=D^k}OTD!B/mfbOo(e"p'
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 1e fb 62 bb 18 42 b4 b5 71 80 91 70 91 77 a8 85 41 db 36 82 e2 f1 67 7d 77 fb 87 10 11 13 30 85 2a 67 15 6d 51 a5 51 d8 7d 85 ca f4 8a d6 1c ea 56 39 8f af a8 72 de a2 35 87 c2 a7 f5 cc a0 99 e6 11 5d e7 e5 31 63 ce ba bd 37 3c 9e ed c9 23 5c 2a 33 e3 07 16 aa e6 79 e1 96 c2 01 cd fa e1 f0 a5 99 19 1f 42 15 79 bc 7f 99 a9 4b 35 b7 59 3b 1c 4f 6d 3f 98 29 fa 79 d3 5d 5f 71 f9 dd 22 34 05 25 1f 5c 17 ba b4 94 5b 17 4d 41 df c5 4e 97 7e 45 23 9b b4 c6 42 1d a1 3f d1 4c 5e c5 f3 fa ff cf 6d 49 b2 b3 b6 df e7 9c 48 57 d5 de 83 a6 fa 2b f4 ff ff 0d de ab 4d f9 cc 88 73 b6 19 3c cf 73 22 f2 59 a6 a6 6f 0a 42 04 d4 48 dc 84 82 13 f4 b4 e1 90 90 9a 78 ef 7d 41 42 c1 07 ae 5b 72 d7 3c 68 66 1b 7d 45 41 41 ca 7b a5 5c 8d e4 02 02 e4 dd 3e 50 10 f2 2e 09 b9 9f bc 96 Data Ascii: bBqpwA6g}w0gmQQ}V9r5]1c7<#\3yByK5Y;Om?)y]_q"4%\[MAN~E#B?L^mIHW+Ms<s"YoBHx}AB[r<hf}EAA{\>P.
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 0c 1b 3b eb 10 64 1d 84 ac 05 38 4d 28 9b a4 1b 00 21 23 eb a0 93 a5 c0 ee b1 9e a3 2e 06 68 b9 d5 4f 74 c0 fd 74 d4 b7 74 df 25 46 f6 83 3d 82 86 1c 37 7d a0 8e 1e 3d 54 dd f9 f5 16 d0 67 72 df ff 89 21 aa a7 98 27 ed 96 29 8d b7 dc 05 9a 6b a0 b1 1f 3b b2 1c 41 8c 30 d7 10 82 99 05 93 9d fb a5 3f 79 b3 4c 69 59 8a 28 97 9c bf 7e 26 e9 f3 c2 8f 7f a8 ef fe 51 bd 72 dc 1f f7 fc 43 6e f6 c7 6d 1d ee 6b c8 3a 08 39 15 20 56 a5 f2 41 7d ec 9c 30 91 75 10 72 fa ec 7a 8f 68 74 65 e4 a6 8d a5 36 9a d6 17 b5 c4 14 ae 7d cc 4f c7 b8 21 fb 61 8f d0 90 e5 26 86 7c d2 de ea c1 eb 4b bb 4d e7 cb df 3b 42 41 93 96 23 bd 32 11 97 54 20 a9 82 bc 13 b2 1c 39 66 72 1c 82 e7 63 9b c0 01 26 69 cb db 16 97 36 4b 44 7d 5e 92 40 4e 33 f9 9b 7d cb f2 33 69 f7 67 aa 9f ee fa e9 Data Ascii: ;d8M(!#.hOttt%F=7}=Tgr!')k;A0?yLiY(~&QrCnmk:9 VA}0urzhte6}O!a&\|KM;BA#2T 9frc&i6KD}^@N3}3ig
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: f7 a5 6d 38 20 49 0d 88 fb 07 a2 63 fb 06 54 34 38 54 8b 95 84 98 60 20 3c 11 e3 18 26 db c7 77 4b 01 02 10 f9 3b 2f 4f a5 40 6f 4a d8 ca 8a f9 9e e1 69 3b 3e a1 21 eb 20 e4 34 64 2e 39 8d 0c b2 54 7a 28 d1 c9 2e e9 3e 79 d2 8c a5 3a b9 2d 00 2d e3 d2 0c 55 b5 8b df b1 69 ae 09 61 b0 3f 8e 4d 64 ed 02 04 10 01 ef 6d 83 36 5f b9 d0 1a ef 95 cc 77 7f e7 33 e9 b6 94 04 4f 94 07 a6 9c 2e 02 13 70 d3 22 15 30 fe 04 90 b8 2d 3f 87 0e da c4 40 98 d8 1f f7 58 07 08 10 85 72 16 96 79 39 d2 c2 12 61 85 b0 67 93 bd 08 cd 25 a7 21 e4 34 dc 17 72 1a 6e 64 2d 80 ce e6 86 c7 88 7b 8c bf 2d 04 c8 96 f1 4c 3e cb a8 5d fc fa ce 10 31 8e 79 7f ec 2c 30 d7 04 10 38 02 1c 04 20 5d d8 5a 5c db 4b e5 fa c9 ef f9 cc 0d 22 50 36 bf 38 97 05 4a aa ff d8 5e 94 0e 55 e1 95 c3 20 b4 Data Ascii: m8 IcT48T` <&wK;/O@oJi;>! 4d.9Tz(.>y:--Uia?Mdm6_w3O.p"0-?@Xry9ag%!4rnd-{-L>]1y,08 ]Z\K"P68J^U
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 79 a7 fd 81 cd 25 d3 a5 cb fa 45 69 71 eb 2a a0 12 c2 6d 39 82 6c 32 d7 40 4c 78 3e f6 bb 43 08 11 1f 5f 12 fc 3d 10 b0 b7 d8 1f 73 f3 e5 1d 14 82 ee 7a 69 af 80 de e2 e6 0e bc 60 8c 21 27 5f 10 b2 6e ae 11 e4 b8 3d cd f5 fe 36 db 73 db 8e 12 e8 e8 5e 49 52 a3 f5 d3 dd fd 5a c8 3a 08 39 0d f7 35 d7 ed 34 e6 ba 91 75 21 88 d7 59 3a 59 9f f7 6f da 26 d7 04 9c 99 01 68 19 80 90 44 b5 28 5d ba b0 d7 82 74 cd 81 90 7f c5 e7 ed 0b 37 e3 a7 02 fa ef b1 5d b9 10 13 0c 41 9b 30 10 dc 78 32 8e 21 c8 f2 e7 bd 57 8e e1 c2 52 02 64 33 6f de 73 fb ed 57 62 33 8d d6 6a 8a d3 c6 6c d7 5c d9 09 9c 5c 01 44 4e e3 12 b2 8e 2d 5b b6 63 24 dc dd b7 9f a5 72 90 fc 6d 7f 9c d3 cc 25 73 dd d6 41 e4 34 cc 1b 39 0f 45 05 7f f2 4e 47 33 3e 90 52 c0 00 04 8e 00 3c 3b 3c b8 3c b5 20 Data Ascii: y%Eiq*m9l2@Lx>C_=szi`!'_n=6s^IRZ:954u!Y:Yo&hD(]t7]A0x2!WRd3osWb3jl\\DN-[c$rm%sA49ENG3>R<;<<
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: ee b6 04 ff a2 6e 98 aa 3a f7 d2 c3 d8 fd 7e de 4f 20 c0 11 66 c1 46 96 21 c8 ba b9 26 17 61 b3 9f 8f b9 f6 bd 99 24 33 ee 2c 09 0d ed 43 1d 40 52 6e bd 07 5f 0d 48 ca 80 00 06 cb eb ae 5f cf d1 dd 7f f8 3e f9 62 cf d3 f6 b4 37 b6 90 21 eb 10 72 2a 00 51 fa 54 1f 3b 95 09 19 39 6d 25 a7 b2 ae 9f c4 41 64 93 6e 15 9d b0 cf 70 af 16 d0 10 6c 23 34 08 36 09 53 74 76 68 79 ea b5 82 7f 6c 0c 49 3a 77 6d 2a 60 cc 0b 85 23 80 38 01 b7 0c c8 e6 18 59 87 79 1b 72 da 7e d8 d9 da 2b 64 75 61 ad 24 fc aa 9e ae fc dc d2 8d 26 09 09 10 c5 e3 a5 ba b8 97 d0 c6 6c bf e9 68 02 ac 1b ba e6 69 7b 62 43 70 93 d3 10 64 2d 00 01 4a 65 03 ce 4c b0 1d 13 19 39 0d 21 c7 fd 20 ef 11 4e 5b 97 d0 c5 32 ba 71 23 d1 ac 71 41 fb a5 2e 1a 55 fb d0 b4 70 46 54 08 db 5c 13 dc c8 72 cb 90 Data Ascii: n:~O fF!&a$3,C@Rn_H_>b7!rQT;9m%Adnpl#46StvhylI:wm`#8Yyr~+dua$&lhi{bCpd-JeL9! N[2q#qA.UpFT\r
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 96 61 ea 1a b9 ca 01 51 d8 8a ac 43 8c ac 83 0c 27 77 a3 1e b4 88 5f a4 27 51 97 6e 09 d8 de 06 49 d3 a4 d8 2e 70 59 17 c4 08 61 90 3d 82 2c 2b 04 20 c0 a9 e4 9b 33 be 3b 63 f9 fc 19 77 fb f1 1c c7 c9 4a fa dc bb 13 5a 11 2f fa b2 72 04 98 2c f7 6e cf db bb fd f4 d8 36 84 fb 22 a7 21 ca 02 ec 95 2c 35 e2 b9 67 01 01 be 6a 8e 00 0c 04 20 1f ba c8 cf 31 72 1a 1a 72 1a dc d7 c8 5a e9 8e 44 07 bb f7 04 b9 25 73 69 7b 1b 49 98 74 ee 8b b6 8d 33 09 43 46 90 71 6c 8f 20 cb 4a 64 05 15 02 b6 d9 de f6 37 bc eb 66 5d b6 d7 9f e2 e9 1b 47 15 fe d3 2e a8 a8 3f 3f 76 b7 40 64 37 4f 78 da 9e d8 1e 5b c8 c8 69 08 49 e4 8a d6 39 fc 84 24 d9 6e cf 7e 3a 8d 79 1b b2 0e 5a ad 83 5c ce 43 73 91 b5 84 ae 1b d0 c9 3e f8 e8 69 77 4a 00 1a 61 c7 07 7f 6a b5 09 8d 91 e4 90 b9 86 Data Ascii: aQC'w_'QnI.pYa=,+ 3;cwJZ/r,n6"!,5gj 1rrZD%si{It3CFql Jd7f]G.??v@d7Ox[iI9$n~:yZ\Cs>iwJaj
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 40 0c 41 12 ee 69 d6 71 55 6a 41 9a b5 ed f3 8c ab 53 97 0c bd 48 05 e9 1d 5e 86 0b e1 b6 1c 21 9b 30 8e e1 66 c7 c8 15 20 40 00 a9 ff e4 54 8e dd c5 fa c8 86 7d ef c7 7e 5a 07 0d 39 8d 20 a7 41 73 e5 3c 1a d7 44 7e 7d 6b 6a 31 f4 a3 bf 6d 39 0d 99 2b a7 c1 4d 4e 63 ae 86 ac 83 90 e3 0f d7 d4 d1 7c ce 03 62 d1 cc c8 ca 01 01 72 d0 33 a7 48 de 82 be e2 6f 78 eb 75 62 02 dd ac 97 17 c0 c2 aa 04 32 82 41 c8 16 06 62 c4 d6 58 0a 40 80 c8 17 1f 10 cb 91 de 35 11 64 df 7b ef c7 d3 76 0c 1a 72 1a 42 d6 39 de 97 c9 3a 68 c8 5a 70 be 6e 39 fc b3 ff 2e ab d0 b8 ae ac 83 86 ac 43 17 b2 0e 9d 2c 7f f8 79 8e 8e 56 b3 96 69 ba 65 14 80 52 04 01 11 7c 19 01 d0 9c d7 8e 5a cf 70 9a 71 d0 f8 df aa a2 bd 83 15 e4 e4 38 82 6c 9a 6b 20 4c fb c1 d3 38 06 50 5e be cb 61 61 7e Data Ascii: @AiqUjASH^!0f @T}~Z9 As<D~}kj1m9+MNc\|br3Hoxub2AbX@5d{vrB9:hZpn9.C,yVieR\|Zpq8lk L8P^aa~
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: ae 15 4d 7b fc cd 3d 9f 2e 7b 9f 26 f3 89 e3 92 da 06 6f 70 55 b2 3d b6 11 34 64 c3 de 4f e6 ba 01 e9 9a 6b 16 da fa 7b cd e6 83 32 e1 19 82 85 4d f7 a2 34 9e ed 76 5d b0 60 23 c3 00 21 c8 ba d7 4d c8 72 ef d8 fb de 76 d6 ca 8d f1 af ab 72 e0 fa a3 7a 83 2c c3 7d 21 5f f8 be 46 ce c3 4d 4e 0b a1 b0 9b 68 8b 29 fd 7d fe d3 7f 66 96 a1 93 f5 f3 31 4f ba d8 8a 91 ab c4 8d cf 55 a2 69 e3 34 ee 7f 7d 6c bf d8 01 ef 7d d2 dc 02 68 1b 9b e7 5c 60 9b 1c 6f e4 b8 f7 7e 6e 13 08 b6 61 78 df 33 7e 34 e3 61 6a aa 7e 9c e7 63 93 7c 19 f1 af 76 73 af 00 98 eb 9b c0 17 c9 15 28 41 d6 8d eb 0d c1 b6 c5 be f7 63 7b ee c7 3e 44 48 d1 5d f5 24 af 34 fd b5 7f aa b1 ac 43 97 eb 76 1a 72 91 75 b8 21 eb a2 a2 1c 5f 17 d4 1e 40 5f fe 9b fe c4 57 21 c8 71 3f b2 f9 9c 87 f5 22 c5 Data Ascii: M{=.{&opU=4dOk{2M4v]`#!Mrvrz,}!_FMNh)}f1OUi4}l}h\`o~nax3~4aj~c\|vs(Ac{>DH]$4Cvru!_@_W!q?"
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 33 80 dc cc 42 d0 b1 19 91 b7 2e 77 f3 75 3f f5 eb 6d ea 79 c4 19 d6 dc 83 55 17 b2 ea 8c e3 9d 7c b6 1f 4e 75 99 a9 b3 79 bd 8d 2f 1a fb 61 7b c0 7e ec 07 0e 18 5d 10 ec b0 bc 8c 92 a7 09 31 91 f5 53 60 ca 64 13 be 11 5c 19 b0 a1 f4 fd b2 8c 21 8f db db bb 69 e2 d6 38 3c 74 ca a9 0f 4c 0c 24 e8 22 7b bb f7 16 7b 11 64 72 1a 42 ce 05 48 5e be 54 0f 9e 8e b8 21 a7 21 64 6d 2b 78 2f 9c b6 ae 09 ba 40 da e8 27 9a d5 6f f0 0e 66 2f 3c 6a cf 19 d0 c8 02 40 55 8d 7e 6c 75 8b 72 9d 27 fe d4 89 21 fc 85 d3 5f c7 91 8f c7 43 ef 93 fd 97 fc c1 f3 b0 c8 96 fb 26 88 d5 6f 9e c4 d7 ce 72 d9 ec 8f 0a 88 c4 9f 3a 06 f6 45 43 fb d1 75 76 2e b7 6f 2c 02 26 c9 d3 78 3a 0d 99 5e 6f d6 21 c8 a9 00 e1 3d ea f2 01 af 6f 58 fb c7 96 91 75 10 bd b2 16 46 ec 62 bd d8 35 80 2e fd Data Ascii: 3B.wu?myU\|Nuy/a{~]1S`d\!i8<tL$"{{drBH^T!!dm+x/@'of/<j@U~lur'!_C&or:ECuv.o,&x:^o!=oXuFb5.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49930	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:38 UTC	531	OUT	GET /ksQztMpwCo1I4qacMnW96bzIrnfeQh5xyId11qZ405X5LFdtGUxoralRZkAWBI9SGbf_=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:38 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 60472 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:31 GMT Expires: Fri, 25 Oct 2024 19:12:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 13087 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:38 UTC	843	IN	Data Raw: 52 49 46 46 30 ec 00 00 57 45 42 50 56 50 38 20 24 ec 00 00 10 82 02 9d 01 2a 88 02 6c 01 3e 69 2a 90 45 24 22 a3 a2 b0 57 0b f8 80 0d 09 4d 7a 63 a1 cc 35 da d1 a2 1f 04 10 1d c8 f7 9b 31 ff b2 3f 4a ff bb 6f fb de 77 1c cf e4 a7 dd 7f 1d ec 43 fe 8e d2 7e 7f ff 17 9a 4f c6 ff 5b e7 5f fe 5f ed ef bc 1f ea 5f ec 3d 82 ff b5 7f 8e f5 31 ff bf d7 4f f8 6f fd 5e a8 ff a7 ff be fd e3 f7 bb f4 9d fe db d4 0f fd 4f fc ef 5e ff 56 4f 40 ff db 7f 59 9f fe 7f bd 3f 0e ff e0 7f f5 7e ec fb 61 7f ff ff b9 ee 01 ff ff db 57 f8 07 ff fe 96 7f 3c f2 1b f3 df e6 7f d8 78 4f e5 d7 da 1f c2 7f 9b ff 9d fe 03 e7 43 f5 ac 91 fc 2f f9 1e 64 7f 40 fc 81 fc 9f f0 7f bc 5f 15 7f b2 ff b1 fe bb c7 1f 92 9f e6 7f 90 fc bc f9 08 fc b3 fa 1f f9 ff ef 1f 93 ff 16 df 5d ff af fd 37 Data Ascii: RIFF0WEBPVP8 $l>iE$"WMzc51?JowC~O[___=1Oo^O^VO@Y?~aW<xOC/d@_]7
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: c6 56 5d 60 29 3e ef 0c 11 ad 83 77 38 df d2 cd 53 31 70 40 01 ea 38 b1 4a 6e 3f 24 b4 e8 7e f0 08 52 e8 84 1f a8 59 a4 35 74 8b 31 45 1e e0 7e bf 5c a3 70 09 ea 11 ce d8 70 77 97 3a 03 1f e3 55 78 19 62 38 ce 07 6d fc f4 4e 06 0c ed 13 1b eb d7 e0 07 f4 a2 96 e3 26 df 12 21 bd 5d 3b 31 ee 09 92 51 60 44 76 bd 6f 6b 7b 4e c6 01 c6 a2 2a 26 4e 73 ab 2c 3e 2d 3a f8 2f 86 f4 12 a3 12 98 b0 c3 01 ab 32 21 62 2b 7a 61 87 83 fb b3 bc 7d 23 9f ff 02 10 17 b4 72 a5 f3 50 63 eb dd f9 d4 88 31 66 b8 3d fc 5a 63 64 76 e7 cd c6 e6 cd 12 3b bb 12 b9 bc 13 bf 36 92 12 b6 e7 b2 d3 d7 b2 5f ef 9b 77 8f 27 b0 7e 3f 3b c7 b5 37 0e 70 f7 e9 39 c4 d6 8e 07 cc 2a 72 32 dc 60 26 16 79 f1 c2 7a bd 97 2b c7 5b 90 bc 1f 80 40 5f 39 70 90 6b 7a c4 f8 5e 89 d0 ba 48 55 1a 6a 59 f2 Data Ascii: V]`)>w8S1p@8Jn?$~RY5t1E~\ppw:Uxb8mN&!];1Q`Dvok{N&Ns,>-:/2!b+za}#rPc1f=Zcdv;6_w'~?;7p9r2`&yz+[@_9pkz^HUjY
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: df 97 2a 48 dc ee 07 4f 31 66 8b a4 62 70 88 d0 f3 27 50 cf de 17 3e 7c 2e 3e 8d 63 b7 3d a8 f2 51 6f 61 78 b8 d3 6d 1f d5 2a 9f 31 20 d7 17 4d d1 14 18 1e 89 b5 08 9c 45 15 e8 d4 b6 6d 72 2a 7a 2c f4 ca 9a 1c 9e e9 f7 b6 89 ad 2f be 97 a3 94 51 c0 6f ff 52 ab b7 3c 26 e8 95 a8 6b 56 77 29 70 83 df cd 1b f3 38 94 87 19 9d 45 b6 79 b8 d5 2a 19 e3 35 94 19 23 b6 bf 82 8c 3a 36 79 a9 6c 4a 3b 25 9e 29 71 79 19 01 b6 f6 de fe 42 88 1e c0 74 30 ee 67 2e 6b 25 1f 02 2b e4 4a 49 98 98 3d a7 83 0b 02 c6 1b d9 f8 52 d0 f4 8f bd 1b ba 2b 52 a6 54 da df 94 01 a8 66 0f c5 32 b5 86 53 d3 f7 91 70 dd 15 d4 76 76 6b c8 a2 a2 49 0d 9a 20 af 66 85 47 6a 5d 00 0d 67 b0 95 ff 29 64 fb a3 4e ad a7 7b 87 1a a6 27 0d 61 2a de 0c ad a2 6c 7d 4e cf b3 f6 0f 4a c0 53 54 f6 af e6 Data Ascii: HO1fbp'P>\|.>c=Qoaxm1 MEmrz,/QoR<&kVw)p8Ey5#:6ylJ;%)qyBt0g.k%+JI=R+RTf2SpvvkI fGj]g)dN{'a*l}NJST
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 74 8b 12 38 bf 1e 3f 83 9b ce 24 83 7c 38 76 ef 8a d0 c9 84 fc 19 8d 5a 8a dc a6 30 d6 72 f6 7b 5b d8 68 83 74 82 08 2f 8a 6b 57 9f 0b ce be 42 4b 9e 38 a3 66 92 58 ed 83 41 db 75 a1 a4 41 2b b4 19 07 90 6e 1b 35 65 11 2b b2 fd a3 c3 76 86 81 26 00 dc e1 93 11 a2 8d a8 e7 49 ab 10 c5 36 c1 00 a2 d3 9d c5 85 34 24 4a 3f 61 ed 7c e6 d7 90 e4 eb 67 82 47 49 af a6 ef e4 b0 74 9f 17 73 3a 6d 86 49 ed 81 3f 83 94 fd ce 53 e2 5f 61 c2 ee 36 f6 82 cc 79 0a 19 5a ad d1 f4 51 bb 10 dc 8d d5 d6 2b 46 76 68 0b 51 58 30 13 38 78 17 67 77 14 7c 40 31 01 0b 65 a4 72 1f bf 4e 84 f9 72 77 3a 17 fe a8 45 f2 0d 7a 75 51 17 6e b7 0c 50 56 9f b4 c8 e8 06 e9 38 4e f9 d8 98 9f 08 1f e9 1a a1 9d d4 8f 07 ff b2 16 2b 52 26 00 0a 73 f6 c6 0b 08 b2 fe 4c ab 5b e3 44 30 ab 55 08 ef Data Ascii: t8?$\|8vZ0r{[ht/kWBK8fXAuA+n5e+v&I64$J?a\|gGIts:mI?S_a6yZQ+FvhQX08xgw\|@1erNrw:EzuQnPV8N+R&sL[D0U
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 9f 5a da aa a1 29 b9 7d 82 2b f4 f9 0d 9d f9 a7 7a 64 6a fd 79 ae dc 02 30 c0 f6 12 ad 41 99 06 66 51 70 5e b6 ef d3 1b c2 8b c2 7a fa a0 33 29 2d 7c 2d 73 83 2c 4f e2 3c 3a df 08 b9 05 a7 a3 9c 66 7c c3 a3 e1 bb ac 3e 18 e4 32 e0 c0 35 79 50 74 df a8 01 42 45 6f 22 11 82 21 69 a0 c1 bd d5 49 26 59 f8 b1 f5 9d 5e 58 38 35 55 ed ba 89 9e af a8 f0 e9 5a ab 7f fb 56 86 ed a8 a6 32 8d f1 e7 67 73 7a b3 a5 f3 6d 1f bb 30 ad 9f 6c a8 6c 9d b9 ca c2 3a 60 f3 f9 5f f7 01 65 24 91 cc bb 4d 47 16 21 4f da 4f af 6a ee 46 01 b6 1a ca d4 31 bf 41 41 a4 9f ea e8 31 aa 00 00 f4 10 f7 2f 79 92 b0 d1 31 d7 92 ae 7d 03 14 cf af ff c8 f3 fb 91 fb 85 c3 2e 07 ff b7 18 ff ed c6 3f fb 1a 68 73 fe 2d 90 83 8c eb 64 ad 05 d2 c2 ac 1e 27 d0 d6 6f f1 f3 dc 11 90 ac b6 89 75 b0 58 Data Ascii: Z)}+zdjy0AfQp^z3)-\|-s,O<:f\|>25yPtBEo"!iI&Y^X85UZV2gszm0ll:`_e$MG!OOjF1AA1/y1}.?hs-d'ouX
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: d3 45 62 ca c7 2b 94 00 10 f1 f8 37 a6 bc 59 ca 4d 82 19 a0 ff b7 fd 9b 32 3a ca a1 05 1d bd bc fa 2d 9f cc 08 39 68 fa c5 13 59 09 6a 42 24 4e 01 78 d6 3a ed 74 30 eb 33 18 38 f1 87 26 6a c3 cd 9f 99 9c e9 b6 1f 59 bd 98 49 b4 44 a0 f7 a5 7e 6e f2 39 39 ad 30 fa 56 a7 42 4c 3b b3 b1 ad 64 ff 39 92 57 4c 52 24 f5 4c d2 fd 72 8c f5 52 39 86 fa 95 8c ad 89 37 31 f1 d1 75 bb 40 a7 a7 ce 72 86 45 7c 1f 44 37 4a 7e 10 eb 89 1e a8 1b 3d 78 4c 58 97 8a 51 e8 b9 bc a3 ef 33 31 b0 d6 fd 21 c1 c6 ba 99 fa 9a 8c cb 4f 33 17 fc 8f 34 9f 52 60 02 dd f7 ce 2a fd 74 63 5f 6a 3b a0 7d f1 28 8c bd 05 c5 78 08 78 b4 b8 e8 55 08 6f 2e 3a b4 39 30 2f eb 1c 0e 8a f1 67 a1 74 6d 4f 49 f5 d6 f5 82 ae 49 f9 ed 98 03 33 6f ce 43 57 70 36 59 d2 15 fc fb c7 5f 55 fb 0d af b0 16 e6 Data Ascii: Eb+7YM2:-9hYjB$Nx:t038&jYID~n990VBL;d9WLR$LrR971u@rE\|D7J~=xLXQ31!O34R`*tc_j;}(xxUo.:90/gtmOII3oCWp6Y_U
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 55 5b cb b4 46 dd 99 c6 a1 bc f5 05 d2 5b d2 7c 57 b5 09 e2 bb 27 db 89 37 9a d7 a8 d0 73 65 d3 4d f1 a4 58 2d 42 a5 43 26 0f be 0f e8 85 41 10 67 4c 30 2e 13 0d 62 28 a2 3c ac 8b 57 a6 e5 b7 c7 be d4 ad 51 52 08 c6 1f b8 23 f6 a1 3d 98 9d d8 72 68 58 66 62 23 62 f7 82 3c ed d1 55 a7 4a 53 11 86 72 d0 fa 23 fb f2 75 24 de bc 67 32 a1 19 58 85 f6 dd c9 2a 62 d5 31 7c 1f ba 36 43 d3 b5 c3 66 df 40 e5 59 b8 4a a5 60 9b 5f b8 0d ab 55 f4 f7 c6 6f e5 a6 87 01 f0 4e 44 8c d6 01 92 30 c4 ca 3f a2 a7 55 7a bb c8 99 63 67 19 7e ac 1c e1 96 da af 40 36 1c 91 74 5c 16 32 fc 80 1a fe e4 47 e1 c8 77 d1 60 ea 6b 2f ca 54 a7 cc d9 bc 11 7d fb b4 1d f2 8e b8 55 01 b8 c6 61 42 10 64 32 b6 77 93 ce 67 a5 65 10 7c 66 fa cc f6 6d c5 de 4d 4d 89 08 db bf f5 56 a7 95 b6 aa e4 Data Ascii: U[F[\|W'7seMX-BC&AgL0.b(<WQR#=rhXfb#b<UJSr#u$g2X*b1\|6Cf@YJ`_UoND0?Uzcg~@6t\2Gw`k/T}UaBd2wge\|fmMMV
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: fd f7 08 cb 8e 5d b8 17 f5 ea 86 90 bf 0e da 58 3f e1 62 81 2c e4 95 fa 14 fc 0d ba 7c 2e 99 b4 be c4 0d 5a d5 8c 4c 41 98 50 b6 8a 6d 42 82 aa b7 37 44 07 91 20 0d 35 b7 07 ba 87 c6 b3 41 0a 22 00 1d 69 19 ae 1b ed a4 64 8e b2 1a 75 40 de d3 cb 2b 89 48 d9 60 57 e3 6c c0 f8 eb 13 5f 58 c4 dd 93 b4 c4 21 f5 0c 21 59 4d 40 57 60 e7 02 29 35 7d a9 e2 a8 04 db 45 92 bb d6 bf a9 ac d0 2d ee 64 9e b7 b7 b8 30 76 a1 de 79 9c 7c 74 d5 42 0f 7a d4 de 69 e0 6d 80 28 c6 69 88 49 38 d3 f3 08 ca 8c f2 61 c0 1a 93 4c 09 57 2a ac 24 fb ea b8 ff 9b 50 84 99 16 7a 7f 48 56 0d cb 6b 93 2d 35 8d fa 8c 87 81 51 dd 1e a3 bf b7 8c 98 06 20 4e 9a bc 71 2e 38 dd a9 f5 e0 58 78 e6 a6 3c 57 aa ae 75 8c 80 a2 b4 17 55 28 a8 9d 02 86 89 97 5d ea e8 cc 44 08 e0 64 44 36 62 7c 18 56 Data Ascii: ]X?b,\|.ZLAPmB7D 5A"idu@+H`Wl_X!!YM@W`)5}E-d0vy\|tBzim(iI8aLW*$PzHVk-5Q Nq.8Xx<WuU(]DdD6b\|V
2024-10-24 22:50:38 UTC	1378	IN	Data Raw: 79 6c ba 45 2f da 1e 08 07 b6 e8 da 44 54 25 48 35 48 35 c7 22 15 69 26 98 9a 69 94 86 cc 99 a0 3f ff e1 6a e8 04 06 dc 44 dd 08 1d de 3d 6b 40 cb fe fd bc fc ce 20 2b 91 14 4b 8f 04 1a 2e 23 2d 03 ad 89 86 81 94 91 0e d3 55 9a 46 ba 13 28 72 15 63 0b 31 88 0f cf 16 8c 32 a1 a1 d1 84 1b 32 e2 0c fe df b0 0c d5 0c d8 19 f8 53 57 55 e9 dd a8 65 bd bf 67 36 7d 0e 95 44 b0 cb de e5 c8 20 b3 a5 60 eb 5d 9a 8f 89 a6 e9 66 d8 ec b9 b6 81 ae 86 97 05 7f 8b 85 9a 5a 14 ea 4f 82 6d 2f 94 96 1e 2e 42 79 2f 5b f4 47 7d 18 c2 85 7f ed 10 c5 c7 5f 9e ee 81 08 a6 35 4b 46 cd 2d df 10 7f 36 4d a0 fb 30 18 ae 42 f7 f3 03 58 f6 be a7 c8 61 f3 53 d6 eb aa 55 a7 ed da 54 93 f3 63 3c bb 46 00 e4 31 04 a5 7f 66 01 ab 85 54 e8 66 0f b5 f8 ba e8 43 b0 ce a4 f6 b7 f0 e3 a3 a8 1a Data Ascii: ylE/DT%H5H5"i&i?jD=k@ +K.#-UF(rc122SWUeg6}D `]fZOm/.By/[G}_5KF-6M0BXaSUTc<F1fTfC
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: d6 1c b5 32 1c a6 00 5e 36 cf e4 e3 bf 63 7a 67 c5 c0 64 93 ce a8 cc 90 f2 d2 d3 a1 b3 4d a4 05 6f 99 70 50 ec 87 02 e3 8d a7 e0 8b 97 b5 6b 20 e3 46 09 68 d9 03 fd 75 bf ba 60 e7 40 f8 08 4f 7a 18 84 55 b3 f0 df f2 17 32 0e 7e e1 36 41 48 96 30 1b 38 a4 9e d2 6c 94 b3 3a c3 43 21 37 c3 8d 3b b6 1d 26 42 0e 75 b1 ca 05 8d f1 b2 a0 7e b7 76 92 48 b3 88 2e 0a db 8b b7 59 db fb 01 3e d6 0e c7 0e de 8a eb c6 f2 03 ed d6 00 c5 ba 8c b7 9c 82 24 1b eb 29 50 eb 0d 75 b1 ae 41 3c c3 b8 b3 8f a7 7a fd 1e 16 63 5a 91 23 dc 6b b8 45 fc 78 65 bb 3b d1 32 a9 b6 fa 56 ba e0 33 c5 b0 b5 c6 c0 53 53 21 70 f4 13 e2 a4 b7 9c 5b 93 c9 e0 0e 1e ec c8 d5 0a 4f 95 0e c7 7b 9d c7 c8 33 29 ae 16 55 a6 f6 10 f7 84 8d 6b e4 c4 3a 3a ce b3 ff 24 73 8e 3f e2 29 22 ad b1 cb d5 22 17 Data Ascii: 2^6czgdMopPk Fhu`@OzU2~6AH08l:C!7;&Bu~vH.Y>$)PuA<zcZ#kExe;2V3SS!p[O{3)Uk::$s?)""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49931	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:38 UTC	530	OUT	GET /u9DetvmIAh9OuL485cvYerLGPUfRtjx70huaquRLozRz5npaqFnX6EupWUwXMY3z-yk=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:39 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 43014 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:31 GMT Expires: Fri, 25 Oct 2024 19:12:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 13087 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:39 UTC	843	IN	Data Raw: 52 49 46 46 fe a7 00 00 57 45 42 50 56 50 38 20 f2 a7 00 00 f0 f9 01 9d 01 2a 88 02 6c 01 3e 51 24 8f 45 23 a2 21 14 7a 5d 88 38 05 04 b1 37 37 7c 09 3d c0 5f 57 c9 17 5c 94 0d 50 47 6d 22 5e 36 8a ef bc e7 f6 5b b7 d5 35 5e 25 c6 16 08 d1 bb 27 f1 7f b8 f7 41 8e 7f 3b fe 7b f6 87 fb a7 ec 87 ce b5 b1 fb ef f8 5f d2 bf dc ff 6b fe 68 79 3b da fe 6e 3e 7d fb 67 fb 7f f1 1f bb ff e5 ff ff ff ff fb 8b fe cb fe 2f fa af 75 bf a5 bf eb ff 96 fd e8 fa 04 fe 3b fd 0f fd 47 f7 4f f2 9f fa ff c6 fc 63 7e d7 fb c4 ff 17 ff 5b f1 bb e0 67 f4 7f f0 df fa ff d0 7e ff fc c3 7f cb ff b9 fe 5f de 07 f7 cf f8 5f f7 ff da ff b0 f9 01 fe a7 fe 17 ff 17 af 17 b1 f7 ee 97 ff ff 70 7f e9 bf ec ff fd 7a ee 7e e7 7f cb f9 51 fe bb ff 0b f6 e7 fe 1f c8 cf ec 67 ff 6f 60 0f ff 7e Data Ascii: RIFFWEBPVP8 *l>Q$E#!z]877\|=_W\PGm"^6[5^%'A;{_khy;n>}g/u;GOc~[g~__pz~Qgo`~
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 95 e1 60 66 d1 b0 56 04 ca 8d ce 2d 9d be 77 3a f8 b1 8f 4c 9d 10 76 13 fe 5f dc e5 77 14 0e 9c f6 6d cb b5 be af a8 fa 16 0b b7 9b 1c 7d 23 31 00 3b a4 7a ac c0 f3 a9 27 a0 3f e5 4e 6f d8 a2 e4 3d f5 7b c1 b7 22 44 b5 69 84 c8 a4 55 1f 0c 42 da b9 a0 1f 8f 69 a1 d1 c6 99 c3 fa 17 f1 bb c6 91 d6 bf 28 82 b8 06 7f b8 ed ea a7 42 7f 09 4b 91 c9 32 bf 0e e1 de e4 53 72 ab 45 c2 e1 ae 56 d4 db b9 91 de d0 3b 18 03 0b a7 bf 97 7c c2 31 43 2f 45 03 08 c9 b6 1b e2 54 53 68 6f e0 31 2a 30 4b 6b f2 64 6b 14 85 7f fe c6 fa 9d c2 29 52 7e 69 ef 14 4f dc 5a 39 4f 49 94 13 47 45 80 5f 92 7a 0b 61 6c 61 67 9c f5 0a 02 c8 67 eb 13 ec e9 af f9 91 cf 44 aa 97 f0 dc 74 18 9b 2a 8a 0b d2 40 0f 9d 90 0f 31 d0 b5 71 dd 6c ba 5e a7 9d e7 db f4 e5 90 c5 ff 83 25 17 7e b9 da 09 Data Ascii: `fV-w:Lv_wm}#1;z'?No={"DiUBi(BK2SrEV;\|1C/ETSho10Kkdk)R~iOZ9OIGE_zalaggDt@1ql^%~
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: f4 88 3c f5 e9 a1 fa 27 d9 99 b9 03 c5 c8 67 5c e4 e0 c6 07 02 fa a1 29 81 5c e9 d7 79 5d 75 6c d1 89 81 b3 b3 b0 37 2c 9a 9b 30 db 8f 88 69 fc 85 18 09 36 f8 63 ca ae 7f d6 d5 dc 74 11 3a cf 3e 67 aa c2 f3 e0 92 4b 34 56 77 98 68 bf 44 8d 0a 34 0f bf ae 8a b2 84 c1 b5 57 a9 93 f1 5b 87 f0 c1 b0 ec 59 b3 66 e1 53 db 33 fe 4b 2e aa bb 47 b0 1a 59 74 88 58 4c 3c bf 08 53 ca d0 8d 86 8d f3 f4 34 84 54 c8 ff a1 01 fe 4f 22 ea 21 46 f3 09 91 04 d4 50 48 db 9e 16 28 7b 82 f4 c8 d6 57 5f 26 d3 f2 5b 34 f4 c0 76 68 36 a5 e0 7e 4e bd e3 cf 11 9c aa e2 96 35 ef fc 7e 0d e1 dd 67 4a 22 26 51 95 b7 24 d4 75 fd f6 a3 40 49 ac 7e bf 0b 7e bb 57 18 5d cd c7 df ba 39 ee 9c 0b a6 ec 57 6b 1d 6b b9 dd 1b 1e 64 9b 36 7c 43 d7 36 0b ba 07 9d 94 88 e4 28 27 8b 1e 90 de 28 34 Data Ascii: <'g\)\y]ul7,0i6ct:>gK4VwhD4W[YfS3K.GYtXL<S4TO"!FPH({W_&[4vh6~N5~gJ"&Q$u@I~~W]9Wkkd6\|C6('(4
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 00 89 2c 3e 42 f4 3b d3 53 d5 b3 1f d6 9b 0d 96 a9 6a e0 0c 57 cb f5 b6 01 3a c8 ba 98 2f e7 23 17 4d 75 27 f8 0b 68 2c aa 5d 19 00 59 08 80 9c e9 49 08 e4 5a d9 aa 8f db 59 79 65 34 d7 ef 86 86 43 72 83 5e d9 ad aa c5 d5 ed 08 4d 92 4b 40 f3 2d 70 d3 06 92 df 21 77 77 14 eb 2b 8f 3a f5 fc e6 8b df 15 49 48 50 82 33 e1 b0 87 7e be 6b a0 e1 0f 27 a5 7a 39 b2 df bb 9c 81 fe 2b 4e cc 08 e4 e8 dc 79 73 f5 db b6 b2 9d ed 72 2e b4 d3 2b b5 07 65 8b 61 46 5a 47 62 cf 58 df 1c 5a a2 05 20 00 45 55 54 c9 a3 ff d2 8e 95 c8 81 21 d8 af 34 56 23 ac b2 1b e3 2b 3c a6 0a ce 4a 0c 8a c8 e9 0e 3a d0 f7 34 0b cd 56 60 fb 72 53 56 e8 ac a2 de ff e6 28 dd b0 f4 c3 b0 0b 53 b9 2c 5a b6 5b 30 47 82 a9 34 a7 04 12 df 18 29 7c 44 74 22 29 51 14 39 dc c5 a6 52 ad d0 73 6d 83 0c Data Ascii: ,>B;SjW:/#Mu'h,]YIZYye4Cr^MK@-p!ww+:IHP3~k'z9+Nysr.+eaFZGbXZ EUT!4V#+<J:4V`rSV(S,Z[0G4)\|Dt")Q9Rsm
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: ca 0e 0f cc 91 49 b0 6c 45 b7 23 a6 4d f6 c7 66 f1 f6 f5 4b 96 86 19 c2 66 0b 46 22 27 cd 5a 72 01 a1 6b 6a 9f 0e cb 6c 07 6c ec 68 5c 61 72 d2 b4 de 98 d8 10 35 54 8c 19 ef b7 a7 b0 eb ac 0c 5c ca 1a c7 0c 86 ba 7f 24 94 4f 13 15 ad 52 f6 32 28 07 64 e7 21 5d 2b ce 29 0f 44 a8 e3 1d 69 ef 98 c0 ae 43 22 ea 46 1c b0 90 4f 16 dc db b3 d2 27 bf 1f 47 b6 cb 98 e6 41 7d 10 b8 19 92 95 87 22 2a b8 c9 41 71 b7 35 86 37 28 22 4d 06 14 78 39 d4 7e 90 20 eb 11 f7 46 f3 fc 85 74 4d 01 92 59 5c 7d 48 ec c8 01 1d 77 b3 84 fc 11 2a ef c8 df 71 a1 72 4d a5 60 2d 8e 9e 65 a3 32 28 a3 9c e8 3a d0 d7 a6 b2 9b e5 78 fb 0e fb b8 44 82 4c fe 90 cd e3 a9 82 69 57 3c 9e 35 fd 76 87 51 ad b1 c9 bc 8f 12 56 77 3f 94 7c a2 a0 c9 eb dd f8 b2 3b 02 e7 94 68 dd 40 fd a5 c5 2f 1e 0c Data Ascii: IlE#MfKfF"'Zrkjllh\ar5T\$OR2(d!]+)DiC"FO'GA}"Aq57("Mx9~ FtMY\}HwqrM`-e2(:xDLiW<5vQVw?\|;h@/
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 4a 25 6e e7 ba fc 9c 9c 3b 31 5b e0 c8 a8 34 ea 1a 92 0d 52 0b 00 a4 9b 19 32 8e 90 a0 8f cf 9a 41 02 05 ad d5 73 a7 7b 43 57 5f f2 5f d3 f1 c3 aa e7 f0 40 d4 10 d8 58 04 4e 60 a4 9f a2 71 d9 49 f7 96 c7 bd 11 9a 32 dc 7d 1f 80 8a a1 8c 3a 74 65 2d 2d 85 1f d8 60 4d b5 9d 0f ac 14 00 08 c6 0d bc 18 5e fd c5 57 14 6b d5 18 9c 02 9d 68 6a bb be 35 ab 77 20 c0 87 4e 7a e5 61 04 6e c1 fc c5 7d a5 a3 9f 87 84 d8 c7 31 6e 78 cd 8b cb 58 3c cb f2 02 cb 9a d6 30 83 00 fa 38 de dc fc fa b6 e8 7d 1d 9e 02 04 36 c5 99 20 d5 89 4b e8 c6 8a 4b 14 5a 70 96 e8 9a 9c b6 9e 7a 05 88 2f 04 77 04 df 65 91 22 18 b8 49 72 56 fb dc ef bd 2d 54 3b 83 ae 62 08 ca 72 98 99 df 00 54 5f 91 16 68 39 0d a5 b6 a8 e7 e6 14 2f fe c8 c0 22 88 0e 91 5d 1f 8e 1e 7c 69 2d e8 e0 48 f4 1c f4 Data Ascii: J%n;1[4R2As{CW__@XN`qI2}:te--`M^Wkhj5w Nzan}1nxX<08}6 KKZpz/we"IrV-T;brT_h9/"]\|i-H
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 05 08 a6 73 f8 36 34 a6 7d a5 ca ef 5f 01 99 33 9b ae 81 ad fd a9 1b 89 e7 1f 25 3c 6d 04 b1 ed 20 7b 4b 7c d8 11 59 f1 1e 28 49 f2 6e 27 ff 25 68 fa 37 86 cf fd b7 47 fa e5 81 f4 b5 66 0c 03 e3 1b 7b bc e6 9a ff bc e2 d8 23 88 ee 48 87 66 5b 50 fd 8e ae c7 1b 0b db 6b 30 29 fd ed 50 ba 04 9f 09 fb 4a 7e e7 7a ff 3f be c0 21 e9 10 2a d1 45 57 d4 d9 03 05 b8 99 85 19 9f 51 62 fb 35 6d 04 e2 c9 8a eb 40 96 b3 88 f7 3c 3c 79 80 23 80 01 09 8e e2 b3 76 c9 de e5 2a d2 fe da 57 26 75 1a 61 4a 16 d3 69 89 aa 1d 46 ce 8f 2c 7a 32 24 3e 3d 92 8c 59 32 c7 b7 c3 e4 e0 8c 7e 81 4f 92 11 48 dd 6d 1e c3 8c c0 6f 46 4f af 33 35 23 bf 10 14 ba 22 ce dc 31 f8 75 58 fa dc 6d 46 ac d9 f4 68 f3 74 b1 8c d1 f1 d2 56 e6 49 c7 68 0a 9f ed e7 15 7a 5d c2 55 2f 62 f3 62 65 5f 4f Data Ascii: s64}_3%<m {K\|Y(In'%h7Gf{#Hf[Pk0)PJ~z?!EWQb5m@<<y#vW&uaJiF,z2$>=Y2~OHmoFO35#"1uXmFhtVIhz]U/bbe_O
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 93 51 8a 74 21 81 9c 1e 2e 3e 97 02 ef f9 b2 ff 82 3a 48 64 e6 a1 bb aa bc 27 a4 39 12 c5 7d 1a 8f 49 15 97 c1 75 22 f3 2f 9d bb 71 a7 a2 5e dd 50 14 7d fa 3e 8e d5 df d7 f5 ca 85 61 50 a1 47 36 77 e1 19 46 2e 5c a4 8b 89 34 ee df aa dc 78 fd 24 b9 76 24 bf bf 29 00 e1 c6 18 6c 3d d1 6a fe 08 a0 4b 6f c1 58 ab be 0a 72 d9 bf 0d fd 13 fe 00 17 55 15 7f f9 b1 b8 22 ce 17 ea 68 05 99 72 19 3b 85 ce fe 6a 2e 74 7f 38 23 38 8a 70 88 74 8f c0 35 b1 97 ac 41 ad cf 0e 0c 37 f5 c7 7b 75 09 83 82 18 eb 22 a5 85 d0 88 cd 37 bf b2 d7 8b 84 96 73 b8 e0 7d 84 aa 20 ad af 8c 87 2f d0 c5 17 b3 4f d6 8e 09 a6 f8 dc d2 a3 50 0c 80 8e d9 c0 35 73 33 75 74 4c a0 0a b1 b4 bb 58 11 a5 bb 82 8d 59 59 54 15 f8 3a dc 6e d2 45 1d 20 8c 06 93 2f 9c 95 55 d0 11 cc a3 7d ba 1b 1f 24 Data Ascii: Qt!.>:Hd'9}Iu"/q^P}>aPG6wF.\4x$v$)l=jKoXrU"hr;j.t8#8pt5A7{u"7s} /OP5s3utLXYYT:nE /U}$
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: fd f0 aa 97 2e 92 bf f4 b5 ea 70 44 c7 09 0e 62 84 e1 91 65 a5 5b 30 0e d4 11 47 45 d2 68 33 ca b0 9a b9 e2 0d 3c 46 f0 37 56 bf a0 d1 df 73 8d ab 34 13 d2 7c c0 1e 3b 67 15 ad 06 e2 25 95 aa 95 b4 72 44 6a 9c 46 73 f5 c5 90 ad 65 f7 e7 80 db e9 19 5a 90 87 3b 65 ff 0b b5 22 7e 35 70 2f 55 3d c7 f7 00 f4 23 72 e4 80 00 00 00 07 7d 67 76 5b bd 2f 27 ec b3 da cb ff 89 75 a1 0a 0f c7 d4 9d 50 1b bd 10 79 7c d3 fd 8a f1 18 e3 eb 9f 07 1e a9 c2 16 9a ba f7 dc d1 86 6c c7 28 9f a7 23 7c 29 21 f8 df cb 46 87 2d e9 63 60 d8 ee 35 a1 11 c2 27 90 67 4c 41 e4 cc 1a cd a5 5b e8 e0 78 58 ae 1d f6 1e ce 8d f5 0a 93 6e 3c d0 50 54 36 8f 39 90 a3 3c 15 a2 f2 e1 1e 7c 34 96 22 dd 3d f9 bb 9a 43 bb 57 74 fb af e2 b3 5f 18 a7 f6 da 2c e7 8e e7 39 17 cb 63 80 81 46 35 d8 7b Data Ascii: .pDbe[0GEh3<F7Vs4\|;g%rDjFseZ;e"~5p/U=#r}gv[/'uPy\|l(#\|)!F-c`5'gLA[xXn<PT69<\|4"=CWt_,9cF5{
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 82 35 0d 26 5e 24 f2 3f bc 54 08 54 2b ff c0 47 0f 56 1a 08 73 a4 c3 da 3a 16 63 79 8e fc cc 04 48 0f 92 52 c9 99 18 be 6e bd 91 45 52 b3 e0 95 0a 96 13 56 71 3e 02 52 28 20 5b d9 e0 0b 01 e3 88 2c 6c b0 1e 74 3e 38 b8 44 dc 46 14 27 bf f7 d4 a9 0f 11 c0 b0 6c ac eb d3 f2 71 de 95 3b 43 50 a5 44 bd d4 ca 67 4c d1 16 2d ba f5 e1 a7 b4 aa 3c df f9 02 f9 b2 b6 e8 14 a4 05 2b e9 87 e2 7a ef 17 f3 92 5d c8 6b 9b 95 ca 38 8f f7 1b 3d 5c 77 c8 2b e3 7d 95 0e bb 49 78 78 a5 e4 61 f2 38 bf b0 a1 ae 68 0f 3c 23 11 9f 08 eb c2 a4 30 82 23 f5 e4 1a 31 4f 10 92 20 78 a7 2d 62 11 d7 eb bb da 67 8d 87 a0 31 5b 7d 31 74 c7 a1 7f 20 e7 0a 43 8a b6 5a d8 43 d3 65 a2 f0 3b e3 f7 ef f2 34 52 2a 85 f8 6d 96 11 bd 17 39 8a 4d 1a 49 90 0c 22 49 2e a2 fa e3 8b 9f 81 6a 38 8c e9 Data Ascii: 5&^$?TT+GVs:cyHRnERVq>R( [,lt>8DF'lq;CPDgL-<+z]k8=\w+}Ixxa8h<#0#1O x-bg1[}1t CZCe;4R*m9MI"I.j8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49932	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:38 UTC	531	OUT	GET /gtB5zvc0y7tJAUw1pyuC96Fevhev_zgOMFKUZO17tqKp5Sa0RdJloJyd5uEACMC3rJRK=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:39 UTC	536	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 165054 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:58:10 GMT Expires: Fri, 25 Oct 2024 19:58:10 GMT Cache-Control: public, max-age=86400, no-transform Age: 10348 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:39 UTC	842	IN	Data Raw: 52 49 46 46 b6 84 02 00 57 45 42 50 56 50 38 4c a9 84 02 00 2f 87 c2 5a 00 8d 40 6c db 46 90 04 df 23 1f ec 5b ea bf e0 9d dd c3 77 10 d1 ff 09 58 d7 ac 8d 26 8d 9d 02 a2 20 75 e3 7b 4e 26 61 c0 53 f0 39 6a ab c9 cd dc fe 04 ed 7c 8c e7 ae 61 b6 4d 34 09 39 70 00 b4 ea aa b6 a9 69 53 93 26 01 0a 20 b7 d6 7a 4c 18 53 d2 a4 2d 80 80 40 0b ea ee 6a d4 0e 34 b7 e4 e7 76 0e c7 5f 5f 9e 7a b8 e8 8b 14 10 70 d5 9a 0a ed 01 5a db 87 20 55 ec ba 6d 3a 6f a6 4e db f2 d8 5a 20 27 5f 5c a3 7c d3 42 d5 9a 36 8f a8 42 77 16 10 9c 09 e0 6e 54 f9 8a dd 70 4c b2 48 ce ec 3e 7c 4e c9 04 0a 49 82 d7 75 db a4 bb d9 1b 38 32 c9 dc 3c d5 2b d9 7b 74 73 c4 5d 66 92 fc 25 84 dc b9 48 b2 d9 5d f7 e1 da 5d 20 47 3c 30 d3 64 73 df dd ec ee 32 a3 6f e6 b4 93 e3 26 6b 8e 33 eb cc e4 Data Ascii: RIFFWEBPVP8L/Z@lF#[wX& u{N&aS9j\|aM49piS& zLS-@j4v__zpZ Um:oNZ '_\\|B6BwnTpLH>\|NIu82<+{ts]f%H]] G<0ds2o&k3
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 15 c4 03 22 61 80 60 78 ee 60 55 dd 3a 42 28 18 12 31 b3 b3 3a 1c 22 56 97 3e d8 e7 88 60 f4 44 01 d8 42 80 10 ec 6d e3 bd 11 42 a8 70 8d 72 a3 a3 b3 a6 26 04 2c 10 ab 13 89 44 10 00 64 74 54 1c 4d 4b e1 52 15 ec 69 0b 21 fc 0e 00 dc 0c c3 9a 44 d8 d1 51 e2 1a d5 61 18 1d 4d 8f 05 86 81 f4 fd 37 42 34 f4 a3 1f b7 87 ef 01 fb 37 5c 0e c0 cd e8 44 46 22 ec a1 a3 a3 34 aa 5f 75 74 74 74 b5 80 d7 51 d0 8c df 23 84 10 fa b1 05 63 f6 19 17 f1 3a 40 34 72 39 5e 47 98 81 d7 48 24 3a 12 f9 c0 ab be 0f fc 44 f5 06 08 d1 68 24 04 67 03 9c 51 0b 21 d0 61 eb 13 b9 ce b0 91 cb 5b 6e 5a 24 72 28 10 44 c2 c5 cd d9 0c 45 43 08 01 80 22 91 91 08 c3 e1 44 22 8c 09 13 61 22 91 08 44 22 11 20 8a 84 10 09 c1 d9 11 ee 8b e8 a1 31 10 b9 34 c3 89 44 4c 4c 4c 22 91 48 c4 cc 10 89 Data Ascii: "a`x`U:B(1:"V>`DBmBpr&,DdtTMKRi!DQaM7B47\DF"4_utttQ#c:@4r9^GH$:Dh$gQ!a[nZ$r(DEC"D"a"D" 14DLLL"H
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 11 fc 41 c7 a3 aa 6b 0f 04 11 31 01 14 1b 49 72 24 49 51 f3 44 7f 6d d9 4c ba a9 61 21 92 24 41 92 24 b5 a8 13 79 fe 88 9e d7 cc 6c 3a c5 36 92 24 49 92 d1 73 f6 d4 7e f4 de a9 88 f8 af ff ff bf 1f b0 6f 35 de be cd 5e 5c be 2b c3 3d 53 0c 5c 8a 68 5e dd ec 13 82 5e 2d 78 36 6a bb 9c 5f a7 af 3b 22 22 e6 4d cf 37 ec 7e ee 35 d6 d6 f0 b9 f1 f6 8a 43 c4 f7 7d 00 ae a2 75 44 eb 86 e1 bf a8 f6 35 22 a1 57 9c a2 a3 d8 71 f4 56 45 5b e5 7c d6 b5 5f bf c3 98 c5 f8 aa f1 99 57 23 76 50 2b a5 2a c0 18 6c 5f 2e 9e 15 e7 59 5b 33 00 30 ef ba d6 75 af 04 6f 06 28 b9 c1 cb bb c9 7b 36 43 20 da b2 1e d2 67 10 79 db 9e e5 05 c3 d3 c0 67 2b 69 86 81 75 5b 12 01 04 6e 01 ba c9 de 0b b0 32 48 9c 6a 22 46 7b 03 01 ac 0f d6 af fb ef f2 c5 48 ba 07 e2 ee ae 1a 25 c0 00 10 78 Data Ascii: Ak1Ir$IQDmLa!$A$yl:6$Is~o5^\+=S\h^^-x6j_;""M7~5C}uD5"WqVE[\|_W#vP+*l_.Y[30uo({6C gyg+iu[n2Hj"F{H%x
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 45 c2 c4 d4 b2 24 44 5b ec 46 8c 6f a9 09 eb 6d c7 1a 99 b6 7a 6e 96 f7 55 ec 35 5d d2 76 5b f1 d4 d2 ca 64 75 2f d6 b5 7b cb 56 66 b7 d6 ca 66 af ec 12 25 00 11 30 43 1a 10 b6 f1 20 18 1b 36 7b a8 fe 5b de 2c c2 a2 d6 ae f9 5a 26 fd 30 b1 b3 d9 c1 30 2a 1a 0c ca 1d 4d d6 34 c8 82 34 5d 9a a5 a7 60 7c 57 37 27 15 8b 65 b7 ef b6 a6 db 59 da 2c 37 6e ad fd b3 eb 35 6f be de 2e 2e 3d bd 14 53 de 19 7b d5 50 5c 77 2f 37 7d 65 55 32 87 2b 77 b9 11 12 17 72 b1 47 01 78 07 89 00 54 b1 80 c4 64 54 b8 f2 9e fb f8 29 2a 2f 6d fb 55 ff 82 ef e5 1d c3 0e 5c cd 4b db 1e 70 e0 1a 0f 58 72 8e 27 5a 92 7a dd 72 39 57 d9 d0 67 90 f3 72 94 3f be cf 77 df d7 9d 1f fd ed e7 6f ef 3f b0 5b d9 59 c6 98 89 b9 c4 24 bd af b0 92 97 3d 67 9a b9 d6 b1 5f 0b 63 a0 00 28 58 65 a3 44 Data Ascii: E$D[FomznU5]v[du/{Vff%0C 6{[,Z&00M44]`\|W7'eY,7n5o..=S{P\w/7}eU2+wrGxTdT)/mU\KpXr'Zzr9Wgr?wo?[Y$=g_c(XeD
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: e9 e2 e6 a1 b8 6f f1 ce 82 6d d8 cc 39 ea bd 26 4e 29 d5 d9 32 a1 86 72 54 1c 2e dd 2e e5 aa 56 2e 1d a6 89 6a 54 91 52 5d 5d 9d a5 7b e1 dd e1 52 48 0c 91 70 b7 6f cb 06 26 70 00 87 65 df 47 03 18 f9 4a 65 45 d4 ea 21 c1 4a 14 55 29 d2 ee 55 ac 80 23 e2 06 2b 49 35 d5 b9 46 65 e0 b1 6c b3 b7 3b 0c 0e 40 19 37 a5 7e 65 62 13 50 4b 59 96 dd 1c 19 cb e8 f6 6e bf 5d e0 b5 a2 2a 11 14 d5 67 3b 52 d0 b9 94 c6 0b 6e 00 48 03 8c 01 04 02 c0 ba 49 dd c3 1b 78 44 64 00 10 27 a8 0d 80 00 b2 27 00 3a 6a 50 b8 01 1e 76 e1 b6 ea b6 8c 88 f1 54 d6 ba cd d8 ac 5d 6d c0 18 53 86 50 dc 18 e6 f3 b3 af c8 bb b8 c5 b4 d5 ae b5 ea a5 cd c5 3a 9b cd cc e8 ba db 35 90 75 cf a2 99 35 82 0d 51 06 68 a1 ca f4 62 a6 9b ad 40 8c 77 3f d3 eb a8 8f d3 62 b6 bd da 41 25 b0 63 28 02 05 Data Ascii: om9&N)2rT..V.jTR]]{RHpo&peGJeE!JU)U#+I5Fel;@7~ebPKYn]*g;RnHIxDd'':jPvT]mSP:5u5Qhb@w?bA%c(
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 32 38 30 70 c1 bb 40 87 84 82 69 5b 43 d5 94 96 2c eb 46 8f 7b e8 e5 e7 38 63 1b 3d f7 09 97 77 f5 ba a3 e8 55 40 2c 0e ca f0 db 70 67 e0 cc 5d d5 a6 d1 fa e5 4d d3 c0 ab d1 26 f5 a6 cd b3 f7 b3 3a 54 2a 17 97 d5 c9 5e b7 17 80 05 31 06 45 6a 07 22 b1 40 10 ab a6 16 54 21 b2 1d 1b 16 f0 00 c4 11 59 ed b6 42 5c 0b 05 38 48 09 48 58 15 02 4a cc b5 9c 84 75 24 fb 83 94 a3 4a e8 76 90 54 b4 6e e1 8c cb 2a a8 dd a4 84 43 08 41 5e 9c 0e b7 05 ad d6 5c 32 64 4a 95 74 3a 3e a3 6e 48 25 02 c0 75 9a 6a ca 74 4b 59 63 2e 27 d5 5e 24 21 a5 c0 69 b5 14 22 50 de 75 a9 ed c2 ca 2b cc 5e 02 b4 b5 dd 55 55 88 bb cd 51 d2 87 08 51 17 6f e4 a4 26 b4 75 4b 2c 09 a8 be 5d df 78 cc 2a 06 6c c6 50 40 a0 6a 85 5d 2d 3a 68 76 06 2a 28 a0 39 68 f6 09 04 ec 4d 01 c0 14 d9 55 e5 c4 Data Ascii: 280p@i[C,F{8c=wU@,pg]M&:T^1Ej"@T!YB\8HHXJu$JvTnCA^\2dJt:>nH%ujtKYc.'^$!i"Pu+^UUQQo&uK,]xlP@j]-:hv(9hMU
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 86 84 5d db 1f 0b 3e ac c6 ae 05 2d 53 37 50 14 05 98 08 ab 07 44 35 57 da d4 3a c9 28 bd 23 77 a5 35 6d 6a b2 cd 90 de 51 d9 a3 86 14 13 c2 cc 64 ba d9 42 c8 49 9f b6 75 a5 66 59 f2 25 19 0f ab e0 51 1e 53 a4 01 4d 30 a7 bb 24 01 a1 10 cb ea 58 81 92 83 d6 62 01 00 d2 a9 03 6d ba 4d 74 c1 5a 8e a2 01 84 02 d4 12 47 20 cb e0 08 58 b4 42 11 41 c7 2e db ac dd 9c 40 39 64 bc 8b 7b f3 da fa de 2b 2a d7 a0 2a d3 b5 ba 59 80 95 89 e2 51 2b 6d d2 91 58 40 57 aa ad 2e 13 d7 f5 ab be 2a f4 e9 dc ec d6 ed 04 59 dd 56 4a 61 02 e2 12 e5 f3 dc ba e5 ba 51 c0 48 98 e1 be b6 3a c0 b0 16 a3 12 3a 66 28 d9 51 02 51 d1 13 50 f2 43 49 d6 4e 09 a7 3a c1 51 d8 71 43 51 24 42 a0 12 d1 72 af d5 64 59 ab 16 c1 48 ba 09 de d3 94 21 02 33 d6 f6 ea 32 a9 ab 09 b7 9d 10 65 af d5 31 Data Ascii: ]>-S7PD5W:(#w5mjQdBIufY%QSM0$XbmMtZG XBA.@9d{+*YQ+mX@W.YVJaQH::f(QQPCIN:QqCQ$BrdYH!32e1
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: bb 14 15 d0 92 96 2e d3 57 59 c1 25 8b d2 1c 95 4b ad 2b 6a 72 b7 4b 59 d7 97 6c 46 6c 13 21 8b ba 2c 3c 99 d5 85 2a a6 b0 61 53 3e 9c fa e3 18 a2 08 e8 dc 42 47 09 26 4d ba 74 95 e4 95 72 96 a5 a6 69 27 98 f2 ef 54 03 d0 8d 4e 35 a0 56 83 57 81 35 11 c9 ba a4 5a b9 9a 66 90 59 cd fd 6a 76 5f 2b ce fb 8c 26 b9 88 a8 97 8e ec ec dc 71 b0 c8 68 b0 81 60 83 82 01 4d d5 36 78 03 df b3 29 db da 0e 13 e5 24 80 6d 73 d3 5c ac e3 98 e2 b3 cd ad 9b 96 85 55 ca ba 67 b5 cc a1 dc 3b 80 17 c5 99 56 ed 54 b3 e2 ee 2b 56 76 eb 38 1d f2 b1 d7 e5 e5 92 bb b7 1e 23 66 eb e2 16 5f 1a e5 96 36 19 d1 c8 40 85 34 b0 41 0b be 3f 1e 53 ec fb 5e 58 ee 33 76 ff 9f fe c3 ee d5 16 5d c4 f4 cf 7e ed 99 15 ef ec ee 7c f2 d9 7d f3 be d5 80 98 8e 29 2d a0 0a 3a a2 12 01 25 5a 54 a4 87 Data Ascii: .WY%K+jrKYlFl!,<*aS>BG&Mtri'TN5VW5ZfYjv_+&qh`M6x)$ms\Ug;VT+Vv8#f_6@4A?S^X3v]~\|})-:%ZT
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: b1 20 a9 62 9a a2 da 85 2c 1c a9 20 45 67 32 81 a8 85 6a 82 c9 22 7b 86 87 c2 fe d9 bc ca 05 55 08 79 78 83 b2 f7 cd 63 f4 a7 9d 6c 32 51 16 49 a4 00 11 70 26 65 a1 93 b0 6d 4e 6e d3 24 22 ed 02 80 3c 36 08 a5 10 b3 cd 9e ef 9d d5 ce ca 7c ad 57 af e6 72 55 d7 64 1f 4b 4e 10 a5 5c 5d 75 a9 57 a5 54 a5 5b 3a 0a bc ae 86 91 ad 39 e2 da 91 69 6e cc 3b a0 02 07 60 41 7d 6d 63 2a 09 2a 1a 89 28 17 08 50 ca a5 94 52 aa b2 54 55 e9 92 d5 0e 03 b6 e2 f3 74 9d a5 88 72 ec aa 9d dd d3 e3 96 20 8e e2 e0 ec 6b d7 9c 89 73 9d d8 94 12 c3 1a c8 b5 4c d6 d5 e5 5c b9 d3 49 a7 ab bb e3 92 39 bc 2e 68 da 37 d8 2e 76 dc 5b 11 2c d5 de de 54 5c c6 c9 d1 8a 32 84 ff 47 54 50 09 21 6e 38 d8 7a 33 57 a7 ab a5 ab 42 90 6b 28 f9 5a 41 29 12 e1 78 7d a2 ea 55 51 b0 1a c0 40 ba 1d Data Ascii: b, Eg2j"{Uyxcl2QIp&emNn$"<6\|WrUdKN\]uWT[:9in;`A}mc**(PRTUtr ksL\I9.h7.v[,T\2GTP!n8z3WBk(ZA)x}UQ@
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 92 5e 6d 20 22 51 ab 1c 55 60 58 8c ae 47 66 19 06 df 27 b6 b4 12 80 3c 05 02 0d d0 3a a5 95 36 95 40 84 b7 b6 f4 1e e9 0a cd a9 9a cc 30 0a 66 b2 6a d6 8a 2d 00 8c d6 9f 37 50 ad a2 25 84 6a 7a 80 37 b1 91 3a bb b0 2a 36 de 46 b7 ba 4d 61 66 ad 42 27 bc d7 f9 75 62 01 4a 32 84 e5 3e a5 63 c7 62 7d fa f3 db 7b 0f 4b 72 3e b5 c6 46 6d 42 df 8c 61 08 18 e1 e9 30 eb 88 59 69 0f b3 e5 a2 8f 61 b3 c3 f0 ea 00 d9 0a bf 81 d3 63 c7 59 ff 61 79 5b 6b 62 3c de 7a 43 a9 92 2e ae 39 c5 e6 23 bb 74 b5 d0 7b 87 e5 b1 d0 ec b9 b7 ba b7 af c5 2b f7 76 b6 76 ee f7 5f be e9 f7 7c cf 82 76 ec f1 6e f5 e8 ed a8 d8 34 65 bc 92 95 bd 75 d8 52 18 af fb aa 2f cd 02 83 86 c4 32 70 07 60 14 6b a5 d9 ac 90 75 a5 6f e5 d3 7c fb 75 5d ce d7 bf 9a 1f 5e 59 5d 4c a1 b2 54 50 01 0d b4 Data Ascii: ^m "QU`XGf'<:6@0fj-7P%jz7:*6FMafB'ubJ2>cb}{Kr>FmBa0YiacYay[kb<zC.9#t{+vv_\|vn4euR/2p`kuo\|u]^Y]LTP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49933	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:38 UTC	531	OUT	GET /sj8PUk54GEgDfm4Ya37Zg_Br0jG0jEU-4p2mw5-vwGM63a384TPHAO-3mzlOSYEQcEp1=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:39 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 43154 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:32 GMT Expires: Fri, 25 Oct 2024 19:12:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13087 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:39 UTC	843	IN	Data Raw: 52 49 46 46 8a a8 00 00 57 45 42 50 56 50 38 20 7e a8 00 00 30 ce 01 9d 01 2a 88 02 6c 01 3e 3d 1e 8d 45 22 21 a1 21 23 35 a9 08 40 07 89 69 64 e1 f6 cf 3f c0 c3 5b f8 7f fe f4 c6 6a ff af cd 91 b0 bf 4b 9b fe 37 1f dc e9 84 cb 1f f8 dc f1 7f fe f2 1b fd cf ff dd ec 2a 66 b5 4f 8a e1 71 af ff a4 df b3 63 bd 15 ed 9d f6 db 61 cb 70 f0 ed 74 c8 24 fa 81 dc 19 e6 3f cd d7 ce 4b 7e 63 d0 03 a6 2f 20 63 f0 be 41 fe c1 f7 0f c0 ff d9 ff 4d f7 79 fb 95 f2 37 6b 7f a7 fb e3 f4 17 fb 87 eb bf dd ff 8b f7 53 ff 5f 7a bf cb 78 82 fe 69 fd 6f fe 17 8f 2e c7 89 e8 f5 05 f0 27 fc 8f 57 99 8d 7d 9b ee 7f b8 0f eb cf fb cf 5b 7f f7 78 22 fe 53 ff 1f b0 0f f4 3f f0 3f f5 3f b9 fe 51 fd 4b fd fc 7d de fb 56 fe 0f fe ef ff 3f 70 9f d8 bf fa fe bc ff ff 7f f3 fc 0d fd d9 ff Data Ascii: RIFFWEBPVP8 ~0l>=E"!!#5@id?[jK7fOqcapt$?K~c/ cAMy7kS_zxio.'W}[x"S???QK}V?p
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 86 2d 19 ca 96 3b a9 fe a6 8c c8 1c 15 2e 0c 48 6a f5 1c f9 e9 ca 8e a3 b2 e0 47 d2 42 33 9c f0 be 4a 8a 51 1b e7 2f fc 40 91 09 c5 e6 b2 4f 42 c3 e8 b8 1a 65 1a 29 5b 20 cb c1 18 1b 3f 2a 1e 84 6f 0d 81 32 f5 29 7d 22 7d 03 c8 16 01 d2 a5 b8 39 15 3b 4a 63 12 f4 3b dc 1f 8b 5d 5e 96 18 1a 99 d3 d9 62 38 58 3b 95 15 3a cf 28 b5 55 da 13 11 50 90 2f cb 1a 3e 47 02 02 8c cc 6c 6b 0e aa ab c1 fd 0c 36 84 09 01 97 d2 a5 0d d6 9f 9c f0 c5 c4 73 59 58 7d 47 fa 4b 68 5a d8 8e 65 b1 f4 73 95 59 93 94 50 29 7a 7e dc ef 0e 6f 7c 6d f7 d5 ff 0e 1e 4e 9c 7d c8 7a 59 f8 04 7b 9a 19 8e 10 06 f8 84 76 fb 23 5a 88 cf a2 4b 80 3c 4c 51 cf af fa 64 9d 08 a1 65 82 9f d0 3f d4 d3 56 4e 04 4a a2 1c 52 4c 71 dd 77 ac 99 1e dd 1f 2a 5c 66 78 76 b4 da 84 39 aa 29 03 69 a5 54 92 Data Ascii: -;.HjGB3JQ/@OBe)[ ?o2)}"}9;Jc;]^b8X;:(UP/>Glk6sYX}GKhZesYP)z~o\|mN}zY{v#ZK<LQde?VNJRLqw\fxv9)iT
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: be 4f bc 63 47 2a 5c b0 f3 54 97 53 09 64 23 0f a5 8a 5b 19 21 ab d6 86 6d b9 b1 94 9d 6d 7f 9c c1 da ec 44 4d b6 1e aa c1 d3 1e 06 a3 8b fe 08 5f 16 1d 9e be 66 a4 92 1e c8 7e ab 6b f0 d3 69 4c 2f fc aa f2 06 7e 7d f2 1f 2a 4f 83 2a 34 9a 4d 6c 31 81 4e fd 07 db eb 1c 33 e0 3c 41 34 2d bd 7c c9 b3 c4 93 19 7c 2c 8f 3d cc b7 11 1d 48 bf c6 19 ca 66 9b e6 d5 9d b1 69 fb 33 78 94 7c 24 be 78 25 8a 9c 2c 4a 52 da c2 08 6a ac 20 c9 62 28 c0 f3 72 c7 33 44 b3 0a e8 c6 4a d2 00 32 d9 a8 3d b1 1e 9d 94 e3 14 77 60 5e 97 dc d2 57 46 14 72 3a fe c9 5f 04 0b e6 2b 54 99 24 5e 80 d8 0d 83 ca b7 e0 40 db 99 c9 1c d2 ad 48 ea 55 a2 6a 85 4a 41 17 95 fb 24 80 42 c5 8d 05 c7 17 0c ec f3 e5 e9 7b 2c 65 68 da 4f 34 d1 40 d3 c3 89 08 ef 55 fc 97 cc ff fe c7 33 5b 0f f2 83 Data Ascii: OcG\TSd#[!mmDM_f~kiL/~}O*4Ml1N3<A4-\|\|,=Hfi3x\|$x%,JRj b(r3DJ2=w`^WFr:_+T$^@HUjJA$B{,ehO4@U3[
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 33 a7 f3 c3 5c 3c 9b 09 1b 7b e5 40 b0 67 93 d2 56 46 5c 34 61 60 21 19 15 ed 44 fa d0 7a a4 39 83 cf ef c1 90 70 fc 89 1b cf 61 86 c0 c5 42 86 f4 eb 12 64 7d 46 d9 87 d5 ad 74 9f b8 66 c3 36 dc 56 bd b2 f0 9c f6 84 51 6a 47 76 8b 27 ba 86 f4 89 49 6b 19 f0 80 31 5f fa d3 5d e5 8f 0a 09 5a fa 49 63 e3 9a 53 29 46 3f 4a db 9b 0d 55 00 12 86 1e df c1 fa 89 1a 21 98 f2 21 80 45 d0 00 fe fd 74 f6 7a 8c b0 61 a5 36 e4 99 bc 76 ec 2f 17 87 12 f7 b9 d4 00 ca f8 c6 e0 bc f4 b0 27 a0 03 26 2c 04 3b ec 0e 71 7c 92 80 fd 97 7d 7b 2d af 68 cb 55 6e c6 d9 77 a3 0b 57 c1 e8 1c dc ea c6 ee 4c 08 8c ca 2c be c5 84 c1 02 ec 87 50 9c 3f 3c b0 c2 6e 31 74 35 5f 87 20 aa d7 85 c2 fa 96 0c 0c b5 b1 45 d7 eb 02 8d 96 fe 93 70 22 0b 3e b6 3f 53 8f e3 37 94 01 fd d1 27 21 9d 28 Data Ascii: 3\<{@gVF\4a`!Dz9paBd}Ftf6VQjGv'Ik1_]ZIcS)F?JU!!Etza6v/'&,;q\|}{-hUnwWL,P?<n1t5_ Ep">?S7'!(
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: cc 22 b7 61 c6 71 15 3d 59 9f 3a 52 28 ce 7e 2b 70 cf ba 78 b8 d2 4b 9b 89 a3 a3 f1 30 c1 b5 ea 89 0b 95 04 f4 d9 fb 1a da 16 83 20 ac 14 b9 4e 31 1c 4b 6a 70 e9 d8 ad 64 ad f3 69 cd c9 88 56 77 1f 31 d9 09 03 5d 79 1b 56 4a e4 7d d6 5e 24 b1 b7 4a e0 8f 6a 23 a7 a8 64 08 8a 0b 12 73 db db d7 c9 1a e2 41 61 5d 5b a4 1f f3 e5 92 dd a8 91 88 3e 70 8e 42 b0 ca e6 e6 44 83 52 ce 11 42 9c 5e d9 da 9e d3 82 81 f0 8a 63 cc dd ce d8 cc 1f 4a b4 e8 c1 ec d6 c7 02 89 47 62 fa 1e 21 4b 9e ad d0 e6 5f 8c 18 41 56 c0 8a 04 b1 9d b1 f1 a5 f6 8b 8d 12 31 87 01 69 42 0e 67 e3 69 84 45 40 1e 49 37 bb c7 6a 65 bf 90 ba e8 62 2f ff 2e d1 f4 b3 39 b1 1d 3e 34 e6 e2 f5 07 00 6b aa 75 65 f7 15 a5 73 2b b2 1d 6a ca 6b 6a 39 8d 71 d5 2d 11 9a 9e 94 2e 02 b4 cd f8 ee b0 1f f5 eb Data Ascii: "aq=Y:R(~+pxK0 N1KjpdiVw1]yVJ}^$Jj#dsAa][>pBDRB^cJGb!K_AV1iBgiE@I7jeb/.9>4kues+jkj9q-.
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: d1 3b ff c3 c9 38 c0 1a 33 74 d8 e0 06 bb ec 38 ad 19 1b 4c f0 34 39 86 79 c0 94 7e 72 a9 b0 7d 11 4f a2 ae 9a dc 2d 70 f4 35 7d 03 c4 1a 12 a6 4a f6 aa 1c 0b 25 6d a3 a9 83 1e de dc 4e 8c 75 9f 32 da 44 54 24 08 83 0e 90 12 48 a5 2f 05 72 c2 47 38 70 37 56 a0 eb 96 44 fd 23 bf 5f 53 e0 ef e9 a7 fa d4 7c df 82 5e bd ca c6 61 eb f7 f2 e8 a5 af 9a 80 60 ca 57 7a 48 4e f4 46 1c d1 24 43 c9 e9 f1 7e 55 74 0b e5 cf a4 43 ed ff 4c b1 90 a7 18 e7 a0 a2 43 d1 f0 fa d9 20 9f bb 8d f6 81 b5 40 2e 36 27 f7 96 01 98 11 af 7e 12 0c 27 76 f8 4e 58 f1 25 64 0d 3d 5a b4 3e a3 ed 20 d3 7d e4 16 c6 e0 89 8d a6 90 c9 d3 61 e0 10 b3 e9 24 18 c2 99 fe 25 67 6e 66 23 bb 89 8e 06 f9 74 1c ef 47 5f 10 55 6b bc a0 27 d2 04 95 6c e1 2b d3 44 41 d8 de 15 f2 53 26 a4 85 6c 83 4d 79 Data Ascii: ;83t8L49y~r}O-p5}J%mNu2DT$H/rG8p7VD#_S\|^a`WzHNF$C~UtCLC @.6'~'vNX%d=Z> }a$%gnf#tG_Uk'l+DAS&lMy
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 93 58 e7 fb d1 6b 14 0c f7 f5 f8 a1 15 d2 64 5e e6 41 ce e1 d4 63 fc f8 a4 3f f7 b1 19 5b 35 94 d0 ff a8 1c 35 42 73 1c e9 f3 59 e9 0e 25 62 91 b2 79 00 85 50 43 3c 1e df 5b d8 cf fd 6e 5b e2 86 64 de cd 29 98 27 71 cf 0b 5b 70 7d db ef 51 19 ec 6e a8 5c 32 19 8c 3f df 6e 6e a2 c3 38 1c 03 96 7d f1 77 c3 5d 28 db c1 9a 50 6d a2 d8 94 f2 70 5c d1 ea 8a b0 c1 b1 2a 74 97 f9 ed 18 8f 75 95 cb 09 a5 b8 84 a0 ab 96 76 95 e8 74 a6 ba 1a 11 9b a9 1b 07 cd f8 7a 7a 41 51 12 76 7a 4d dc 44 2b 63 bc 75 a5 7a c4 47 4a ce 26 49 2d 4c ca 2f 2b 29 1c fc 3a 1a ea 88 ac b4 22 c4 96 18 07 b3 b9 65 bb 63 81 ff 85 90 0b 49 43 06 cc 03 eb 99 b6 bc f1 74 3f d2 f8 d2 50 03 c5 12 29 77 47 b2 3d f2 f7 65 59 9d 45 6d f2 13 af 15 a1 ca e0 c0 a1 fc 22 fb 88 83 64 ee 23 34 14 c3 61 Data Ascii: Xkd^Ac?[55BsY%byPC<[n[d)'q[p}Qn\2?nn8}w](Pmp\*tuvtzzAQvzMD+cuzGJ&I-L/+):"ecICt?P)wG=eYEm"d#4a
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: fc 81 96 d7 32 2a 28 b9 6d bb 9d ea 28 02 99 5d 2d df 5c 75 3a a3 0e 70 ed f6 a6 07 5e 57 77 7f 2b 45 d6 09 4d 44 86 60 6c 5b 27 85 22 57 1c 2f 56 08 aa c9 65 cb 58 3c d5 b7 3a 96 84 4c 2b 9a 6c f2 82 ed 12 cb 70 d3 56 01 3c 47 2d 04 7e 09 a5 f1 c1 45 fb be 4f 6e 48 2d 51 a4 df 1e 9a 68 0f 63 e7 17 b0 30 d8 4e 9b 9a bf e6 06 ce 99 26 a4 d9 6e 5b d6 aa bc 17 15 75 33 67 89 18 b4 bb e1 2d fd 9e 41 95 f8 9d 02 de 9c 08 46 fb ed e7 9e e4 1e d0 58 da 75 67 ea 56 12 b5 c7 27 5a 16 9a 53 b7 b9 1c 61 dc 22 31 1c 45 0d a6 98 ca a4 c5 cf 04 eb ec 59 51 80 59 58 b8 8a 61 ac b4 2d b7 11 ad 8c 5e f3 2a 5b cc d6 0d 04 2c 79 a3 81 6e 09 e1 93 a8 bc e6 a0 e6 f6 19 86 6b 6a 20 9c 51 8b ec f7 aa d5 60 01 59 29 50 99 00 c6 0c fa 0e 79 28 ba 15 ee 5c ed b5 e6 e8 a6 ab 1e d3 Data Ascii: 2(m(]-\u:p^Ww+EMD`l['"W/VeX<:L+lpV<G-~EOnH-Qhc0N&n[u3g-AFXugV'ZSa"1EYQYXa-^[,ynkj Q`Y)Py(\
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 96 49 a1 b0 2d ab 16 c8 35 e7 91 f7 df dc c1 f2 4c be 77 f2 aa 60 cd cb 46 9f 71 77 f6 f6 00 47 03 54 68 4d 6f a5 17 20 2d b6 3c 70 04 35 9c 58 e1 4d 55 68 6b 98 0a ed ce 43 64 6f bc 54 74 ed 4c 48 3e bf 6f 23 22 e7 fa 26 d6 7c b4 29 c3 2d c6 76 a8 a9 c1 aa ff 63 99 6a 6b bf a8 c5 34 0f c1 26 aa bd 97 3c 45 77 90 99 8c 95 51 8c 48 2e fd f8 04 85 6a 3e e7 75 4e e1 ec 2c 63 e6 6b 2f 1d 3c 37 f2 91 c0 67 74 b4 c0 0a 2a cb eb e4 ab 31 e3 51 c6 a3 0e e8 9b 10 aa 4a a5 ee 1b 26 63 b0 bf 2c ea 98 51 d8 d6 aa 07 7b 64 6d 80 9b 66 2f 71 df f8 70 0b 26 8f b8 2c 1e 24 91 bc 22 40 80 a9 10 1f 1d b5 96 21 10 5d 03 dd a6 81 d0 dd da 42 ea b2 3a db 29 e9 9b fc 23 0b 5b 04 4f a0 c9 78 2a fd af ce 38 36 c9 d3 cd 8b 87 44 7e 76 ae dc 15 05 61 b9 4e f6 3f 62 bb b2 db 26 6d Data Ascii: I-5Lw`FqwGThMo -<p5XMUhkCdoTtLH>o#"&\|)-vcjk4&<EwQH.j>uN,ck/<7gt1QJ&c,Q{dmf/qp&,$"@!]B:)#[Ox86D~vaN?b&m
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 26 07 37 74 7d 28 3e 17 94 aa 04 14 4f 0d 02 0b 38 12 ee 81 eb 5b 43 b5 86 73 97 d0 25 b8 3e e2 5e b7 34 48 49 10 f8 63 c7 51 d1 79 f5 cb 0d c8 d6 95 48 bb 23 99 a8 e1 de db 4e de 5b f9 6f 7d 58 0d cc c1 2c 76 c2 5a e7 8e 9d d2 2d 4a 7f dd b2 9c 49 15 08 43 5e fd db 82 c0 43 83 41 fb f9 a0 bd 41 8c 79 f8 1d 3d 25 fa 5e 00 1a 59 41 b3 07 d7 87 0c d6 84 47 cc af 88 ae bc bb ec aa fe b0 d3 04 f2 98 ab c8 ee e0 26 71 fa 22 5d 04 9c 44 29 2c 80 91 60 68 32 3e 1d 4d 0a 22 36 db 5d 2a 3b 35 2e e1 de b0 00 8c f1 65 e7 ba 7e 38 84 3f 39 e2 05 a8 62 d0 49 41 e7 e5 62 6c f7 21 2e 3d f4 3a f0 2b 8f 57 74 84 8f 1b 43 6e 32 e5 c5 a7 a7 70 6e 2a 77 60 44 96 60 9b 9b 3f 2a 13 ad 93 28 7a aa d9 c3 d8 27 92 74 94 49 76 d5 2c 35 97 00 4f 96 a6 cb 7d 21 be 79 06 34 1a 8b 8e Data Ascii: &7t}(>O8[Cs%>^4HIcQyH#N[o}X,vZ-JIC^CAAy=%^YAG&q"]D),`h2>M"6];5.e~8?9bIAbl!.=:+WtCn2pnw`D`?*(z'tIv,5O}!y4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49934	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:38 UTC	1093	OUT	GET /1Ns1T_qN0pEXMvZeZ5lQNAR8z4blP7ce2J2Nn5doXvt2T1g_W7VMORdWHaApkOooupI=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:39 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 53088 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:34:26 GMT Expires: Fri, 25 Oct 2024 21:34:26 GMT Cache-Control: public, max-age=86400, no-transform Age: 4573 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:39 UTC	844	IN	Data Raw: 52 49 46 46 58 cf 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 0f cf 00 00 2f ff c0 3f 10 4d 40 8c 24 37 6c e3 27 08 80 38 4e fa 2f 98 10 65 a7 82 88 fe 4f 80 4c 0a ce bd b7 a4 b5 96 d9 30 a2 16 92 64 46 55 1c 63 8c b5 96 9d c3 dd 9d f2 88 69 40 d1 01 4f e0 90 30 eb c8 ce 4e 49 da 95 06 ac 24 e2 e0 22 86 bb 59 85 c7 11 90 80 fb 85 6d 37 cb aa 28 20 82 eb 31 a6 cc b6 99 67 d1 16 90 57 d6 55 d0 3a b0 b8 0c 9d e6 9c 19 dd 75 38 44 14 97 af 5e 2f 7e 1d cd fa 4a 34 ff 78 7f 4b 92 c6 31 67 04 1e 17 cb 1d 90 a4 d1 30 a7 84 5f f4 2e 8d 31 dc 01 62 4e 49 71 b3 25 c9 f2 89 88 39 f5 b8 a5 fd f9 48 62 18 44 43 84 a4 cf f3 96 e4 ee b2 e2 31 22 23 74 e9 2d 40 40 70 99 27 a4 17 8f ce eb cc 84 e0 d7 fe a3 c5 6a dc 57 57 64 e7 0f bd Data Ascii: RIFFXWEBPVP8XVP8L/?M@$7l'8N/eOL0dFUci@O0NI$"Ym7( 1gWU:u8D^/~J4xK1g0_.1bNIq%9HbDC1"#t-@@p'jWWd
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 6a 4b 69 5a 96 bd d8 50 96 e2 5e fa dd bd 7b f7 ab f5 c3 aa 94 72 d9 dd fb be dd f7 ed f2 e9 d2 d0 26 35 89 cb 12 b5 2c 74 14 ad 85 b8 47 cb 73 b7 bf 5a ee 95 e3 56 e4 b8 f3 1a 9e 8b 78 ee fb 72 77 ef da 35 ff c5 50 86 5a 8c b5 39 67 b9 b7 bf 96 c7 72 ff bf dd 0c cf e5 b1 8e 2b 72 34 c2 8e 8e 4f 97 b3 3c 7b 7a da bd fd b5 7e 58 df 9c 5d f9 f1 e3 d1 f2 58 1e fb f4 c4 63 b9 97 7b db e3 de f7 fd aa 76 da a1 25 84 5a 4b 67 2b 3c f7 7d bf dc cb 73 9f fe 27 ee fd c8 37 ab 9c bf 4e dc cb ac 43 57 15 a3 4e da c3 18 46 d3 26 5f 76 2d f7 6c 38 4b bf f7 e6 77 2d 2d 33 cd ee 5e a5 74 5e bc 63 b4 24 5a c4 22 66 d9 30 0d 9a a6 bd 74 1f ea 4d 6d 1a f7 d7 37 f5 a6 93 d5 14 37 c4 2c 8d 90 46 83 44 45 79 ed ae 1b cd 04 69 a2 ed 3c 92 da 49 be f1 91 9d 31 2b 37 3a 42 82 dc Data Ascii: jKiZP^{r&5,tGsZVxrw5PZ9gr+r4O<{z~X]Xc{v%ZKg+<}s'7NCWNF&_v-l8Kw--3^t^c$Z"f0tMm77,FDEyi<I1+7:B
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 0f cb a5 f0 1e 99 3b fe 98 4e 2a c8 b5 6d 2d 6b 36 36 72 ba 60 d1 02 43 ea d0 06 bc 15 87 1a 18 92 64 9e 1a dc dd dd fd 8b 08 15 85 5e d1 cb 5f 05 52 ff 4a 05 19 69 28 52 99 48 21 97 48 14 a1 54 12 c2 44 00 13 82 81 69 50 09 16 68 04 0b 71 82 00 bd aa be 71 8b 2b e5 26 5a 55 e4 d7 ca 56 53 5e 9e 92 ed e2 de bc 27 ac 76 74 eb 37 25 53 be ac ca c5 dc ba 49 5f d7 a2 dc 53 33 ef 35 6c 55 ba b8 86 94 a5 d4 ec 6c 21 aa 30 43 20 03 29 42 bd 87 7e f9 3d 37 fa fe 10 9f 6e c8 2d ad e0 c6 e8 ac b0 21 59 2d 10 20 17 e8 f6 91 e0 eb 3f 31 f9 17 7e a0 fc ee 19 a8 41 a5 48 34 64 4a 04 e4 0d 3a 11 68 cc 4f 09 36 30 8b a0 00 22 23 b4 e3 57 d9 fd aa 90 9d fa 80 90 c9 84 6c 95 0d 3b 3b 4c ab 27 4a 13 b3 61 54 58 e9 21 f1 fb 07 d9 12 cc 37 79 44 f6 9f e5 97 4c 7e 58 3e a8 f5 Data Ascii: ;N*m-k66r`Cd^_RJi(RH!HTDiPhqq+&ZUVS^'vt7%SI_S35lUl!0C )B~=7n-!Y- ?1~AH4dJ:hO60"#Wl;;L'JaTX!7yDL~X>
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: f7 a2 cb 73 55 a0 54 ac 62 ed 0d 06 73 04 8b ec 8c 50 e7 2b d5 68 ab 3d b9 25 84 8c ba fd 05 fa f6 40 f0 43 36 b0 b5 a5 3c 6a 51 6c 60 3b 58 33 79 41 56 a1 83 0f 6b 52 81 1d ba d1 5b 0d c3 c2 e4 86 c7 72 d6 be ed 1e 16 f0 7d e3 0e a1 c8 d4 d9 14 6e 67 5c 5a 44 a3 71 dc 41 53 05 d6 e4 b7 b0 91 73 82 e0 e6 19 ac 87 98 45 76 c7 ad aa 48 8c b7 b5 b7 cb 0b 92 6e b3 66 84 78 5f 42 d0 e0 86 6d eb 2c 86 d6 a5 b6 31 dc ef 0e 5f 2a fb bb 1d b8 a2 70 56 13 ab c0 88 0e 31 12 ed cd 96 0b ed 3b 11 da f7 3d 1a 77 80 10 07 e5 25 1c d0 31 59 27 a4 7e de 73 45 b8 2a 42 00 ae 28 f7 0c 7f 0c 84 19 ce 75 f1 d9 7b a1 9e de 83 61 53 16 76 a2 14 6f 97 36 6e 59 88 64 95 84 3d 9b 58 d6 b2 44 c5 43 73 52 85 d9 8e 46 03 3d 60 3c 11 09 c9 01 6e bb b2 2d eb db e1 ab cd 03 46 da 71 8c Data Ascii: sUTbsP+h=%@C6<jQl`;X3yAVkR[r}ng\ZDqASsEvHnfx_Bm,1_pV1;=w%1Y'~sEB(u{aSvo6nYd=XDCsRF=`<n-Fq
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 26 c9 ec 8e 39 ee e4 54 14 d0 12 05 68 00 08 b3 c3 f0 bf d4 e3 f9 4e 9a 1f 5b 72 21 0c 87 81 01 3b 77 a0 4b 90 f5 78 b5 0c 6f 1d 15 f1 19 a9 34 fc 78 4e 8e f3 cf 18 a0 88 e2 58 b4 a0 e5 0c 8d a6 cb 7e 39 f6 74 57 bc e6 41 e2 8b 4a 30 e0 00 60 14 93 0e 02 00 11 3b cc 72 6f c5 fb 0b d3 61 9f a5 1d b3 22 3d 93 48 14 4e 90 d9 d7 bf f6 31 89 45 d7 c6 fe f8 35 dc c3 4f da 67 a2 31 26 3c 59 f9 46 e6 1c d6 01 fb b8 a1 d4 c7 5a fe ae 4c 2c 18 99 94 8e 92 e7 76 b8 e4 3b 75 29 47 5b 87 ad f0 f9 3c 4e 09 60 60 64 b5 c9 58 ba c9 ae eb 3a 4b 73 ef 28 52 41 cb 04 92 31 42 0f 99 32 12 43 7a 22 b7 28 a5 a5 77 30 92 d2 8e 3f 35 4e 80 1b b7 c5 62 d0 fd 85 eb 7c b9 40 2a 9f c6 b6 24 82 83 31 ad 26 03 bf 37 5a a0 81 b0 08 8b 6d a9 87 95 05 59 4c 8b 52 84 5f f2 45 a7 25 42 05 Data Ascii: &9ThN[r!;wKxo4xNX~9tWAJ0`;roa"=HN1E5Og1&<YFZL,v;u)G[<N``dX:Ks(RA1B2Cz"(w0?5Nb\|@*$1&7ZmYLR_E%B
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 68 cb 43 50 30 6a ab 31 b2 86 c2 50 c0 c9 ab 24 2b 94 0a b8 55 62 8e 0d 29 34 ad ec 6e 7e f8 db dd 2e 6e 44 9c 7a 71 f0 c5 81 03 0e 54 c5 93 7d 2d 6f e0 f9 6a 1b 37 19 db 36 cb b8 15 d8 e7 a6 38 6d 28 a1 4e e1 57 bc 13 6b 7b 0a 36 83 d0 0f 85 dc 98 ad a0 8d 57 e4 fc e8 fb f9 fa 37 a1 76 9b 3b 55 58 6b df e6 df 1f 51 b4 6b 81 44 68 3b 57 bd d5 cd 13 43 c3 6b a2 92 7c e9 ca 86 0f 8b e0 b3 d5 e6 c8 ea 1c a4 ae 84 5a d3 2d 18 d5 e6 40 51 34 2d 58 ab 81 6c 1c 47 7e 38 57 01 d7 2f b9 e7 dd 95 14 ce 44 1a 30 c3 c8 e8 30 34 c7 29 52 51 94 54 37 c7 9c 02 07 a8 08 28 a5 39 bd 13 a2 70 1b 0f a6 78 7a 3b 1d b9 26 76 e2 87 56 92 36 cf d0 41 c4 5a 87 2e f3 26 24 76 95 6d e2 57 08 29 51 c0 77 94 8f b0 ba 7b 6e 91 f5 d3 6d 41 43 69 f2 c9 99 d5 01 2b 36 0e 1c a9 89 f1 2b Data Ascii: hCP0j1P$+Ub)4n~.nDzqT}-oj768m(NWk{6W7v;UXkQkDh;WCk\|Z-@Q4-XlG~8W/D004)RQT7(9pxz;&vV6AZ.&$vmW)Qw{nmACi+6+
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 17 0f e5 12 72 69 2f 8e 0a f1 c0 a0 d9 9d f6 08 81 58 ee 20 71 e0 7c 54 c1 b2 9f aa f0 da bf 92 85 e3 a0 76 8d 30 bd 7c 5e 82 dc 46 ca b6 8d 94 c5 16 88 71 e5 86 08 5d 7b c0 58 c5 b6 62 0c b2 e4 56 a0 54 4a 52 dd 60 40 ef d6 bb bd 1d ef a8 49 f7 1a 55 71 71 71 1f a3 81 86 06 88 03 d1 80 04 71 f7 2c 5f 22 a1 a8 ae da f2 3c 2e 2e 3e 13 36 0b 07 d9 80 a2 69 f3 b6 f7 4a 55 c4 81 1b e2 57 1f 4f 9b 67 73 3b 33 28 c7 95 a0 c1 5b 68 11 f3 26 77 62 4f ea c5 11 27 c9 a9 e1 b9 ca 6c d1 36 a2 1c ff 1f 32 5b c0 e7 49 49 6a f1 bb f9 80 54 23 a5 44 72 11 37 f6 8d 30 35 61 83 46 d2 e0 9c 48 bf d7 32 3d 70 8b 2b 69 59 02 2e a3 b9 07 1d 65 72 38 fc 48 7d 4e f1 2c 49 61 5b 42 c8 39 df f8 d2 00 21 b7 65 aa 69 6b 91 61 0c c0 e1 15 4d cd a6 4a aa d2 5b 95 60 a4 f7 77 51 1a 52 Data Ascii: ri/X q\|Tv0\|^Fq]{XbVTJR`@IUqqqq,_"<..>6iJUWOgs;3([h&wbO'l62[IIjT#Dr705aFH2=p+iY.er8H}N,Ia[B9!eikaMJ[`wQR
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 11 94 ce da df b6 2f f9 61 25 58 a1 48 32 44 11 58 37 4a 10 b3 fb 62 8a f7 f1 f3 2f 54 c3 82 03 ed 31 df 15 40 d3 de f0 d5 3c c1 5b 17 a1 10 bf 52 24 28 6d 1a 81 23 7b 06 4a 43 83 1d 47 84 15 e8 44 bb 97 2d 66 9d b8 29 9b c9 52 3b a8 8b 88 10 7b 99 d1 02 16 b3 9a 88 97 18 3e b1 3e 17 6f 79 2b 23 5d 0b a4 01 76 ed 2c b7 64 ab f3 be 54 90 e6 b5 01 c2 e3 9f 11 b4 17 b0 19 f7 66 66 3d d4 6e d8 38 3e ee 5e 90 e4 00 26 ea 4e a1 06 06 b8 21 6e ee a0 13 aa 0e 98 f5 01 41 80 1c df 00 c4 21 53 fd f5 87 83 9d 2f 3c 13 2d 7e 47 13 20 10 1e e8 9d 02 1f 24 89 71 65 1a f9 f3 1c 3e 6c 63 7c a4 59 c5 9c 5b cd c8 47 a0 80 2a 9b 48 33 76 e0 a7 28 9c 08 ca 4b c4 d6 6d b3 a8 49 16 be ca 8d 94 24 48 bb ac 84 cf ea 61 3e bf be 96 1f 7a 83 00 b0 38 b6 24 bd 20 4d 8b 8d 71 12 06 Data Ascii: /a%XH2DX7Jb/T1@<[R$(m#{JCGD-f)R;{>>oy+#]v,dTff=n8>^&N!nA!S/<-~G $qe>lc\|Y[G*H3v(KmI$Ha>z8$ Mq
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: be c8 d4 b9 1b 33 82 86 2e 38 0a a2 43 42 be 16 ef c1 cb 62 4f 34 c0 c0 0a 09 25 96 d2 5e b3 65 90 00 8d aa 0b d6 b9 c1 a6 0e 75 1a 60 4b 25 a6 e6 40 e1 5b 12 67 af 36 3c f8 09 dd f9 62 56 13 4b 83 8b 5f b6 8e 18 bd 97 41 da a6 87 91 1f 8a 83 69 fd 62 45 9a 25 db 1e 30 50 17 67 64 30 2e 2f 6e 03 83 cd 2e da db 52 ba 8b 71 80 be 70 06 9f 4c 63 1a af 0f 37 95 25 21 43 27 b8 f9 8d c1 cf f4 13 51 0a c9 ca 21 de f7 d4 3f c6 f8 9d ea 22 d0 5d 38 a1 d7 85 7c dd 34 20 4b e2 16 8c 63 1b 38 1d 24 cf 52 92 39 81 25 58 06 36 2d 83 a7 3f e3 ee 23 44 22 61 42 bc cf a4 5c 05 2b 69 57 32 32 54 17 49 ae 99 9a 47 3a ac 35 54 c8 b6 5b 06 69 06 d4 49 05 7b e7 6f 2f 69 70 31 dc 2d 48 dc 8a 09 02 fc b6 be f5 e7 13 a2 f8 65 69 f1 e7 e5 18 e1 a0 24 c4 03 d8 d0 d6 71 68 3e 7d f4 Data Ascii: 3.8CBbO4%^eu`K%@[g6<bVK_AibE%0Pgd0./n.RqpLc7%!C'Q!?"]8\|4 Kc8$R9%X6-?#D"aB\+iW22TIG:5T[iI{o/ip1-Hei$qh>}
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 1a f3 45 e8 44 28 e8 3d d4 ce 81 43 4e 58 4a 70 3a 15 af f9 07 83 c6 53 61 11 52 2c 20 fa b0 99 b5 44 39 44 cf 95 a7 43 2b 6e b0 bc 6c ec a4 3a 46 9e 04 72 69 1f 2f a0 24 91 56 1f b6 59 9a 27 66 4a 5b f0 37 36 80 9e 22 9c e6 0c d4 6e 39 d6 fb 7b e3 a0 61 e9 81 04 59 96 92 63 49 49 ea 46 f2 6e 15 ce 52 01 08 7b 94 27 67 7c e4 37 c4 da 3e cf 15 00 0c 2a 8a 6c 1d a5 b7 72 ec c5 12 4c 3d 6c a3 1b 06 1f 94 6d 71 d8 96 a7 93 ed f8 5b d5 63 f4 c7 41 1e a6 db e2 a0 49 3e a9 47 be 4f 6d 70 9d bd da 72 f6 25 28 1b 33 3f 18 b8 b1 08 c1 18 38 c1 25 8a bd c0 9c 83 9f 33 06 63 3d 9c 7c 6c 9d 3b 03 78 20 21 c9 36 d3 d6 89 38 13 f7 44 79 c9 6b 61 69 65 03 59 57 d8 0b d8 03 27 5c cf e5 c6 15 be 29 1b 6c bd 79 dc 2a a8 05 d4 ca 41 67 a0 2d 5a 78 11 67 26 b6 c6 5c 95 a2 26 Data Ascii: ED(=CNXJp:SaR, D9DC+nl:Fri/$VY'fJ[76"n9{aYcIIFnR{'g\|7>lrL=lmq[cAI>GOmpr%(3?8%3c=\|l;x !68DykaieYW'\)lyAg-Zxg&\&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49935	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:38 UTC	1094	OUT	GET /aD_yV7NdU8txkDPV1NU557BjnvZf-D6Ip8Cn7xhdieHgMLGt1FTQXlBBgH1jTNhhnw1v=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:39 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1192 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 18:51:53 GMT Expires: Fri, 25 Oct 2024 18:51:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 14326 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:39 UTC	844	IN	Data Raw: 52 49 46 46 a0 04 00 00 57 45 42 50 56 50 38 4c 93 04 00 00 2f ff c0 3f 00 37 e7 20 92 24 45 aa ea 85 47 ff 62 de d9 31 3c 59 98 7f c8 91 24 29 92 22 b2 6a 19 f4 d7 64 f5 da d7 1e e6 fc ab 6d db 86 41 b6 ce bc 41 0a ef 08 7c e4 03 81 e3 c0 ff f8 96 40 90 42 01 49 9b 8f 0e 6f da 0d 16 ab bb c1 55 15 d0 ea 60 a5 ee ec e9 69 75 24 49 b3 3f 77 0b 2b 56 04 06 b4 c1 a6 2a e9 cf ea 57 73 51 2c 0d 9c 48 82 0a 85 11 8a 08 45 55 17 90 10 40 69 15 8a a1 90 84 4d 74 27 21 09 12 a0 8d aa 21 48 42 73 a6 08 40 fa a7 05 29 2a e0 48 a5 28 0a 0b 12 54 0a 8c 88 0a 21 c5 42 1b 14 23 50 40 43 42 6c 00 05 54 11 12 62 83 0d 24 48 40 85 54 0a 48 90 04 48 80 24 01 21 a0 14 11 d2 5b 50 8c e2 40 50 84 10 2a 84 4a 8a a1 21 08 ef 87 84 18 11 92 04 09 12 42 7a 33 14 1f d2 0f c8 1b 05 Data Ascii: RIFFWEBPVP8L/?7 $EGb1<Y$)"jdmAA\|@BIoU`iu$I?w+VWsQ,HEU@iMt'!!HBs@)H(T!B#P@CBlTb$H@THH$![P@P*J!Bz3
2024-10-24 22:50:39 UTC	348	IN	Data Raw: ce bb bd 1c 22 db 3f f4 ed e4 ec fb 77 95 00 ce 4e 3d 63 73 78 1c e9 0b ff ac de da e5 fd 37 d7 82 e3 18 9a da f2 40 9a 92 f0 c6 89 0d 8c b9 ee e8 f9 e0 d8 83 1c 63 d8 19 1c cb 8c 21 09 06 c7 0a 63 c0 d2 f0 f8 c6 6f 6c dc e9 e8 d7 c2 12 12 29 06 c8 77 c8 b6 e5 df 21 ba c5 90 22 9c 0f f4 21 ce 88 ac a0 f6 4c 52 7b f8 91 da 6b 3c 8d d4 1e 7e 62 d8 d9 30 06 9e 05 a3 f6 ea de 46 4a 2f c2 19 6a 0f af 93 16 14 30 6d 3a d0 04 9f 0a b7 08 bb a8 3d 2c 22 a5 d7 68 34 29 bd 14 8e 51 7b d8 41 4a 0f bf 92 d2 c3 5c 52 7a 65 c7 92 d2 ab 39 90 26 f9 5b 38 d5 eb 46 a3 7c 30 94 6a f4 3e 4b e9 95 1b 4c 52 79 18 47 4a 0f f3 49 e5 25 f1 02 a9 bc fa f8 8a 14 5e 84 09 27 49 e1 b5 c2 93 24 75 97 85 5e fb 48 e1 55 c2 9b 24 75 57 1b 0b af 90 ba ab 8d e9 fb 49 aa 2e 0b a5 d7 54 d7 Data Ascii: "?wN=csx7@c!col)w!"!LR{k<~b0FJ/j0m:=,"h4)Q{AJ\Rze9&[8F\|0j>KLRyGJI%^'I$u^HU$uWI.T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49936	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:38 UTC	1093	OUT	GET /TBRwjS_qfJCSj1m7zZB93FnpJM5fSpMA_wUlFDLxWAb45T9RmwBvQd5cWR5viJJOhkI=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:39 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9130 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:51:16 GMT Expires: Fri, 25 Oct 2024 20:51:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 7163 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:39 UTC	845	IN	Data Raw: 52 49 46 46 a2 23 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 5a 23 00 00 2f ff c0 3f 00 09 48 8e 24 49 8a 14 9e d5 10 15 29 fe ff e0 35 1b 98 39 47 f4 7f 02 f4 7f ec 3b 24 5a ea 9e 60 27 b9 2b 69 cd 90 c4 88 aa 2a 46 7c da 6d 27 81 13 ec 24 06 ce 09 a0 a9 e5 7d 4e 97 49 62 80 a1 b6 93 84 03 4d b5 39 1e d4 1a 41 6d 27 b1 8f a9 b5 ec fd 00 cd 80 4d 12 43 0d d5 a3 2b 30 b5 cc 4e e2 63 48 5a 86 9d 30 d4 ab 16 0f cc 94 f4 28 63 ab 00 92 78 a8 5f b8 0c 95 ee d6 ae c4 53 dc 91 e4 32 23 a9 1b 24 75 f7 c4 9f bd 70 1b db b6 aa 2c 24 fa 15 fc e8 cf c5 a5 ff 82 28 c3 5e 86 1e 2c 66 d4 36 92 e4 98 e7 de e7 42 88 13 db b6 9d 66 d3 91 57 b1 90 4f 42 ba ac f3 57 19 0c 32 b2 ff 13 80 ff d1 e6 27 22 00 3a ae 3a 5e b1 e4 10 84 a9 a5 Data Ascii: RIFF#WEBPVP8XVP8LZ#/?H$I)59G;$Z`'+i*F\|m'$}NIbM9Am'MC+0NcHZ0(cx_S2#$up,$(^,f6BfWOBW2'"::^
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: d8 ef 37 ff ff 96 74 52 11 f7 ba 82 64 64 35 1f 12 88 21 ec 75 03 93 24 2f 26 a4 5e 7b d8 1f e2 31 08 a7 46 8d 95 57 a7 8c 70 d3 f8 a1 85 51 4b a3 39 65 4b b7 eb 3b 21 8a 74 73 e1 28 d7 7a bd b6 ef e1 05 be 90 63 f2 42 e2 d2 1f af 71 c3 2f 1f 99 44 c4 21 d5 83 42 6e 3e 3b c8 3d 4c df 01 44 23 c2 c4 6b be 7b 2e 65 2e 5f dc 8c 79 e2 9d fe 8e 46 0b 6b 0d ed 96 04 04 a9 27 3c af fa 3f b2 59 48 d0 2e 38 b8 80 33 2e 03 01 a5 92 85 05 96 91 85 65 e1 be 93 45 73 71 94 37 8f 4c 7a 8e f5 87 09 16 d3 20 96 73 59 00 82 cc e9 32 16 53 ca 17 1b b0 4c 90 ee 01 a6 ef c2 32 c8 7d 97 91 11 fe 90 fa 6c ae 6a 1e 40 c2 62 c2 32 64 2d 56 8e 0a 16 54 e7 d4 26 57 78 8f 18 13 34 8a 52 c9 c2 20 7c b0 49 fa 2e 0b c8 1d 9d 4e c7 6f 24 61 1e 09 8b 45 26 96 7b 9e 13 16 56 e7 56 2f bb Data Ascii: 7tRdd5!u$/&^{1FWpQK9eK;!ts(zcBq/D!Bn>;=LD#k{.e._yFk'<?YH.83.eEsq7Lz sY2SL2}lj@b2d-VT&Wx4R \|I.No$aE&{VV/
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 49 2b 97 c2 73 e4 4d 18 a4 6d 30 3c 62 49 08 36 1d bb 91 67 ba f6 20 12 72 1f 07 e7 a9 50 41 ac 97 00 9c bd e9 ff 5e 68 8b 84 aa 22 2b 36 16 06 c3 41 86 81 65 21 cb 9a eb fb 99 0e 86 b1 c5 6c 1a 46 ce 30 4f 35 23 09 90 1d bf be 8d 3b fc 97 59 35 cf f5 f3 cb bb 4e db 60 c3 24 b7 1b 4e 00 1c 34 3d 2e c7 74 40 a6 4c cb 39 61 1a 1c 67 4f 85 80 00 58 5e b7 0f bc 36 55 05 a6 26 f6 23 df ab 06 2c 1b 63 2c c3 52 59 89 6b c6 8c c3 2c 33 85 35 89 34 26 67 36 8f 76 04 c8 fb 8b 8b 37 7a d7 da 0f a4 c4 e8 c0 78 a6 c1 36 99 2c 41 a5 7e 30 da 30 4b b9 a6 cd 30 b9 c7 72 0e e7 b9 2c 04 a9 03 ad 23 64 36 e9 eb 1f 6f 80 70 b0 ca dc 6c 0c 76 62 dd 32 b9 dd 0f 4d 2f dd cc 42 d8 71 0d 41 66 26 6b 63 cf 25 22 d9 bb 5a 9e 10 9d f7 37 eb 3e c3 3e 55 06 03 58 50 12 c5 98 e8 61 e6 Data Ascii: I+sMm0<bI6g rPA^h"+6Ae!lF0O5#;Y5N`$N4=.t@L9agOX^6U&#,c,RYk,354&g6v7zx6,A~00K0r,#d6oplvb2M/BqAf&kc%"Z7>>UXPa
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: a1 9f df e3 de c6 2c bb 51 e0 64 d4 a7 e4 74 47 10 39 b5 f0 0d b4 cd 1d 31 82 85 36 3b 73 3c d5 50 93 94 79 95 fb a2 cd 6d b2 36 8d f7 05 0c 90 be be bf 2a 5d 2a 79 35 e5 ca 7a d4 38 00 e0 93 55 0f 74 3a 2d 04 4c 33 23 b6 22 ce 1e cb 20 cc 79 5e c6 ac ab c3 36 f7 5c 9e dd 6f 24 a0 12 ac e4 f5 aa 51 05 9a e7 87 9b 7b a2 0d 00 30 5c d6 79 59 50 67 da 48 58 21 ed cc 63 ed 60 31 c7 db 59 da ec 1d 59 9b 2f 28 11 8e f1 a9 4c c2 5f fc 26 12 43 65 52 0e 9a 1e 5e 0f 64 12 e3 83 68 dd d8 32 3e a2 32 9b b7 77 ce 63 d9 8e 85 40 f4 e1 eb ba e4 01 be c5 4d 64 45 95 fa d3 af 6f a4 54 76 67 04 ab 87 7b 4f 62 00 e8 0f cf 7a f2 10 1f 70 1c 2f b8 6f 37 73 9e 4a 1d 39 07 86 49 18 ea d0 40 b4 36 59 19 8c 98 f4 16 f2 7a 19 dd c8 ed 6d a7 e4 66 c7 d6 3c db db 03 70 a2 79 90 30 Data Ascii: ,QdtG916;s<Pym6]y5z8Ut:-L3#" y^6\o$Q{0\yYPgHX!c`1YY/(L_&CeR^dh2>2wc@MdEoTvg{Obzp/o7sJ9I@6Yzmf<py0
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: dd f1 86 6d f8 c7 b8 d5 e8 96 36 86 4c 5c 78 aa f7 e4 2d 72 bf be 2f eb 35 97 0a 63 f3 e6 39 9e eb 30 c3 c2 9c 46 0b 20 24 ac 9d 45 a8 2b bb c6 6f c5 4e 7d 64 d8 18 3b 66 db be 93 d8 80 9d 43 5b ea fd d7 eb f5 ff 75 ce 81 91 d5 3b db 83 39 8b b9 17 52 c9 ad 33 20 cb 9d bc ed a4 4f 34 48 69 de 0d 86 22 dd d0 86 c1 c8 c4 f6 a2 36 dd c3 1b 22 69 5b 94 8b 30 8f 93 e5 d1 6e e6 9e 37 25 0e 4c 5a f2 9a f1 e1 85 37 47 c9 c7 71 2e 99 1c b7 3b 61 26 9c 03 03 70 d1 5c bd cc d9 40 86 06 07 dc 4f 77 89 4d de 3c 8f a5 14 ca 2e 3b d2 a7 ec 09 61 12 c3 17 84 e2 2b bd fd ba 35 c2 d8 60 a1 31 e6 d8 80 3b 5b f5 e3 a1 db 8e 6c 49 bd 91 b7 85 df 9d b5 a7 e3 78 b0 c3 9c 1d 82 a5 65 04 c4 01 37 9e b9 0e e9 55 7d dd ff 70 3f 0c 63 63 a0 6e 60 4c 62 c0 3e ab 70 6b b7 e6 28 34 27 Data Ascii: m6L\x-r/5c90F $E+oN}d;fC[u;9R3 O4Hi"6"i[0n7%LZ7Gq.;a&p\@OwM<.;a+5`1;[lIxe7U}p?ccn`Lb>pk(4'
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: a6 77 d5 a0 18 b9 ee 9c a7 82 b5 30 45 22 4c 1e 4f 13 e9 0a 14 50 de bf b7 55 a9 5f 09 41 e8 92 5d 32 24 0f bf 11 aa bc 78 87 68 9e a2 62 a1 5c c7 39 db 73 29 ef 2f 46 4e 5d 61 0c fc 88 c7 64 c9 73 21 8c 24 d1 3b a9 eb 66 a2 25 32 47 d6 a7 7d 56 e4 17 51 e2 f8 96 fb 1b bd b5 90 b3 1d 8f 75 30 5d 96 6b 6c 09 df ee 1b 3e f1 08 87 ae ea cb 45 89 a6 0c 4b 98 92 d0 4c 25 03 63 49 f6 ca 88 08 dd 5a 62 20 dc 7e 99 e5 3a 0f b6 e6 ba 26 e7 30 43 a6 58 18 d9 92 c7 da 58 f9 ca 5c 5d 1e 35 29 64 50 14 95 d7 25 04 39 2a 3b 3c 78 b1 d2 c3 8e 7b ca cf 1b fa ec 3a 9c 9d a7 72 5d 16 cb 5a 8e 96 88 34 b7 61 9e 39 56 0b 1e 7e 1c 24 c0 34 89 42 76 13 25 4b 00 c1 95 de 98 68 04 ee 3b b9 af 27 21 33 16 67 f6 54 26 43 9e 44 38 30 e2 6a eb 31 ea 34 79 f5 45 29 05 e1 0c 09 2d 49 Data Ascii: w0E"LOPU_A]2$xhb\9s)/FN]ads!$;f%2G}VQu0]kl>EKL%cIZb ~:&0CXX\]5)dP%9*;<x{:r]Z4a9V~$4Bv%Kh;'!3gT&CD80j14yE)-I
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 1a a4 20 80 85 8d 13 0c 66 cc 30 dd 57 91 ee dd 13 43 1c 00 6f f1 5c 07 b1 3c 26 9b 6b a1 3a 40 74 a8 7e 10 29 40 e3 de 68 25 a2 b5 20 cd 36 f0 76 9f fa cf fb 81 91 66 67 4f a5 61 c1 1a 33 f2 30 5f 9d ba 94 cf f8 93 64 18 52 58 13 ba 07 03 f6 20 68 0e a7 0b 65 91 17 c4 31 70 3c d8 35 21 8b 20 35 1d d7 ad 8b 8c c9 02 a2 60 ea e7 3f a4 dd a6 29 66 61 63 b1 11 ac f4 b5 bb be df 42 e0 3c 15 cb 82 d8 10 c2 58 47 75 01 6a 37 79 af 77 56 ad af af 2f 69 9d 4e 33 81 8d 00 f8 3d ca 48 ff 4c 0c 03 6f 61 1e 6b c6 c2 52 cc 35 6a 36 5f 99 3c 8a 4f b9 82 6c 89 aa 23 af a9 02 ec bb 71 7e d7 c3 a9 fe e8 af 08 90 18 38 ff 6f 4f a5 91 96 19 6c 8d cd 19 7d 2d 8c ef 49 34 f5 06 d9 41 bb d1 ec 92 e4 81 06 80 6d d1 19 09 11 8a 22 e0 7c fd c8 8f 7d f7 a9 fc 9f 26 44 ce 28 3b b6 Data Ascii: f0WCo\<&k:@t~)@h% 6vfgOa30_dRX he1p<5! 5`?)facB<XGuj7ywV/iN3=HLoakR5j6_<Ol#q~8oOl}-I4Am"\|}&D(;
2024-10-24 22:50:39 UTC	17	IN	Data Raw: 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49937	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:39 UTC	1093	OUT	GET /DC9EifITAPkp5J1kq8-dx1IPLqjdZwVoVYsgelm1AwE_IAwBCMuPZg7OTQD5OW_lEwqp=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:39 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1580 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:06:42 GMT Expires: Fri, 25 Oct 2024 21:06:42 GMT Cache-Control: public, max-age=86400, no-transform Age: 6237 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:39 UTC	845	IN	Data Raw: 52 49 46 46 24 06 00 00 57 45 42 50 56 50 38 4c 18 06 00 00 2f 3f c0 0f 00 09 45 6d 1b 49 4a b3 bf 0e 7f c2 7b 51 88 e8 ff 04 f0 2b 93 b6 95 ec 6b 9b 88 04 51 e1 e2 79 c1 a8 b6 6d 25 27 02 ce c1 5d fa 27 21 02 31 18 31 b2 0a 8a da b6 81 fc 2c 7f 64 03 71 c2 50 d4 46 0a 54 09 48 40 06 fe 25 f1 be fa 9f f0 77 76 6a e4 71 74 89 48 49 42 c9 4d 2f 40 44 e4 8a d5 ef 1a 44 f4 b5 58 e9 01 08 90 9a 9a 11 a0 c0 93 07 4a b6 ed 28 92 a4 27 73 0c aa 66 66 86 fd af 85 99 19 13 1d c2 74 4e b8 24 b7 8c 98 f5 48 12 6d 6d c7 eb 9c 37 ff 1f f3 cf 5f db b6 6d 8f 6c 77 66 db b6 31 ca ea d8 b6 6d db b6 db 24 57 5f 2e 3e 49 92 24 29 92 a4 56 3d 70 de ff bf 8a ef cc cc 58 1e 0e 24 49 6a 9b 26 38 21 79 41 d8 a5 37 7c e2 7e 02 fe e7 29 88 4b 43 43 76 f1 4e 70 61 10 10 71 f1 4e 1c Data Ascii: RIFF$WEBPVP8L/?EmIJ{Q+kQym%']'!11,dqPFTH@%wvjqtHIBM/@DDXJ('sfftN$Hmm7_mlwf1m$W_.>I$)V=pX$Ij&8!yA7\|~)KCCvNpaqN
2024-10-24 22:50:39 UTC	735	IN	Data Raw: 52 33 71 b1 a6 5f cc 36 23 1b d8 56 ca 21 5b 26 5c 00 32 20 de fe ec f7 e8 f6 b9 d8 8b cb a7 20 d7 a2 89 bc 08 8f ec c6 07 ac e1 47 e6 32 69 9e c7 96 05 fc b6 3b 7d 0a 03 c9 71 f9 ae f2 43 e0 1c 13 55 61 27 2f be 29 c7 03 8b c6 7a 1e 4e a5 af 05 b8 0e 5a 64 7a a6 97 80 00 19 4c 80 7b 42 bf 6c e1 fd b2 e1 98 9e ed e5 4d c4 0d ec d7 a6 7f 33 fb 2e a4 d4 95 e6 cc bf 2c 9d 2a db 3e 80 77 4c 0f c0 04 c8 c4 eb ef d1 77 e7 df bc 2f 38 94 c1 9e 3d e3 d0 f8 00 64 33 19 9a e8 b3 f0 c8 da e6 e4 cc 96 5f 56 a6 57 37 08 a8 76 6a c8 84 cb 1f db 07 9c bb 17 7d 5f 49 b2 48 ea cc 99 e0 74 21 da e8 93 f0 45 e5 e5 54 21 4a 00 65 ce f1 da 25 20 50 07 c0 90 c1 72 86 bb b3 b7 c0 fb 69 8e 9b c5 a5 e8 09 43 f8 ff 9d d6 7e 1c 12 33 e7 b1 66 32 8e 2a c5 6b 77 81 c8 b6 62 15 3b 66 Data Ascii: R3q_6#V![&\2 G2i;}qCUa'/)zNZdzL{BlM3.,>wLw/8=d3_VW7vj}_IHt!ET!Je% PriC~3f2kwb;f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49938	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:39 UTC	525	OUT	GET /FpCCoNLOt6LRIY_3NM5Rk_LDN-kFNz0yxdFjm-CYM4XavRQfoQlXxOtgC7abfexIDOE=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:39 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 14486 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:58:53 GMT Expires: Fri, 25 Oct 2024 21:58:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 3106 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:39 UTC	844	IN	Data Raw: 52 49 46 46 8e 38 00 00 57 45 42 50 56 50 38 4c 82 38 00 00 2f ff c0 3f 00 09 48 6e 23 39 92 a0 8c c8 ac 36 d9 ff 7f 70 b5 9b b5 d7 88 fe 4f 00 7f d2 03 fc 11 09 ec f7 0e 88 20 e3 35 75 f7 28 ba df 3a 5a aa 6a 5a 6f f5 04 e8 b5 bd 21 78 35 e8 3e b8 8e 80 b8 a1 06 38 ba 6f d0 80 7d 26 69 7a f1 2a ac 88 57 14 71 d2 f6 6a 04 3e 13 18 96 4d 7d e6 31 16 5b c2 3e eb b6 a4 fd 46 ed 8b dd 22 e2 a4 9b 5e a5 bd 75 86 63 b1 e3 46 88 98 74 45 64 a6 41 5c 2b f3 59 66 72 33 33 f3 16 63 64 e6 d8 2f d6 cc cc d6 2d 57 55 a5 35 95 b6 0d d0 03 57 d5 28 ee ea 01 76 55 dd d2 a3 7f ec 02 8e 24 49 8a 24 5f 90 0e 97 a4 83 b6 92 d6 ee ff af 63 6c 3e 54 dd 46 92 a4 48 79 f8 fc 7f 2c 6f bc ff 46 31 88 cc 10 6e 24 d9 56 95 c6 1d be e2 72 29 32 89 d9 ff 92 c8 1c 5e ff 27 00 ff 4f 7f Data Ascii: RIFF8WEBPVP8L8/?Hn#96pO 5u(:ZjZo!x5>8o}&iz*Wqj>M}1[>F"^ucFtEdA\+Yfr33cd/-WU5W(vU$I$_cl>TFHy,oF1n$Vr)2^'O
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 96 9d aa 39 b7 91 f7 de 7b ef bd f7 52 16 1a ca 41 dc a6 20 2c 31 31 25 e1 a0 f7 ec 78 ef bd db a6 0a cc 5a b3 f7 e9 31 1a 9f 9b 2a 86 1d 85 e0 ca 61 d3 07 be a2 95 c2 1b 8e a8 e8 47 e5 cd 84 bf bc 5e 3c a1 e8 94 89 40 39 28 00 d1 6a 38 05 9b 6e fa d3 8e 40 e6 d8 38 26 97 97 e0 a4 93 2e da f4 8d 40 50 c1 2c 7a e0 3a f4 a3 1f 3c 11 c8 55 02 8a a1 b1 4c 04 3f 6c aa 4d 0b 7e 54 09 74 04 8a 40 79 08 8a 4e da 4d 0f 2c da 31 28 06 61 05 20 2a a5 50 74 75 0a 9d d0 49 40 74 d1 86 f2 66 d2 4d 25 d7 b6 ad 5a d1 da e7 e2 ee d0 25 05 8f 81 dc c9 02 5a ee 52 f5 fe 3f 4b 72 6d 6d c7 f6 9c 73 bf df f7 c5 b6 6d 8d 9c 94 c0 f1 5f 43 2a cb 8c 0d 38 b3 b4 60 db 7c ef 2b 26 e0 27 0a 9f e7 ff 07 f7 ff 03 a2 2a 90 05 23 c1 01 95 00 1a 42 06 34 85 97 92 c0 ff 72 c1 4e d0 1d 36 Data Ascii: 9{RA ,11%xZ1aG^<@9(j8n@8&.@P,z:<UL?lM~Tt@yNM,1(a PtuI@tfM%Z%ZR?Krmmsm_C8`\|+&'#B4rN6
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: d8 dc 3d b2 2e 4c f3 e9 34 b0 1d b1 b1 5c 42 24 21 66 34 96 63 08 6a 05 15 49 f9 af a6 de d3 8d fc e5 1f 39 34 a5 c3 f8 38 80 74 c2 8b 36 4b d6 1d d6 b6 2c 73 a4 28 f5 00 a8 1e 9f 40 e3 2c c5 72 61 e6 2a c1 c5 65 d9 59 25 16 f4 9c b2 3e 6b 3a 64 bb 2e 33 bf 2f 0b 7d 00 3e 7d f9 4e 17 1e d4 6c f7 07 a7 55 b3 a2 b1 30 1f e6 61 e4 80 2d 52 97 06 ca 73 9a 9d a7 6f 94 00 63 7c bc a3 ae de bf f8 c6 64 25 f8 87 49 b9 0e cb 30 ca ce 63 09 31 f4 16 90 b9 f9 6f 6f bb 5c 08 a8 2c 51 ed eb a7 93 c0 04 87 33 6b 2f 4e 65 21 f8 f4 e5 c3 df 33 31 a3 5a a9 0c 52 d2 2a f4 7d 95 83 a5 7e a1 3c 15 89 d0 79 49 63 1c 05 dd 06 4e 7a eb f3 92 5c 6d f2 ee b0 67 b0 65 9c cb c5 2b 17 b1 59 84 04 36 2c e9 61 52 68 86 96 45 0a 92 98 a1 66 94 6c f7 3e da ca fd c3 00 3e 3d cb bd a5 d8 Data Ascii: =.L4\B$!f4cjI948t6K,s(@,raeY%>k:d.3/}>}NlU0a-Rsoc\|d%I0c1oo\,Q3k/Ne!31ZR}~<yIcNz\mge+Y6,aRhEfl>>=
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 09 7c fd 01 74 e1 7e 7c f0 7a 9c 0a b7 76 f8 88 fb 17 ad e9 97 a1 24 40 e1 d6 9d d8 d6 5f 5b 37 f5 bc 0b e9 e6 5b c0 02 d0 12 76 f3 ed 66 0e 82 7b 1c 94 91 87 e7 b1 83 fa d8 bd 71 1a 8a b2 83 a2 28 07 b3 7d 4b 55 df 1f 4f 9d 81 ef 7f 55 1b 78 4c e6 a3 dd e6 0d 7e 8c 63 71 e0 91 b9 79 3f 1e 43 28 83 a7 13 6c 53 2d b8 06 ef 1d 9f 17 e6 81 d7 fd 52 be 57 e8 2f 6f 0a 87 67 d8 b1 78 ec 80 9e 04 08 78 43 fd 8b 5c 85 a7 4f c5 c7 8b 40 5b a8 f6 21 78 49 49 9e ba 28 73 df 6d 9e f2 ae e7 e1 9d a3 7a 0e 20 e0 3d b3 e8 e8 aa 7f 4e c2 e1 b7 82 b9 e1 31 dd c7 43 d3 f2 54 57 b3 b1 c0 6d 86 c3 e3 f5 81 76 b0 02 cc ed 99 aa 62 40 b6 eb a9 df af 01 e3 e6 80 9f 33 0b b8 e5 9f 76 85 23 32 e1 54 7e 7c 4e c6 43 c0 db f6 62 f9 e5 f5 ec 49 78 7d 69 78 21 e6 86 ca c9 ff b4 3f 54 Data Ascii: \|t~\|zv$@_[7[vf{q(}KUOUxL~cqy?C(lS-RW/ogxxC\O@[!xII(smz =N1CTWmvb@3v#2T~\|NCbIx}ix!?T
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 29 4a 17 c5 af 81 e8 c9 e2 b9 3d 56 c5 4f a1 82 02 58 5a a5 20 ac 21 28 09 42 5e e1 86 1b de fe cf be 1f 75 6e 53 f5 6d b5 58 60 3f 8c 06 a7 92 36 0b e5 00 30 45 dd 25 7b 9e 5e 77 6e bd c1 09 7f 79 da cd fe b7 f8 10 c7 df 3c 57 a7 bc c9 d1 49 5b 5b 2c 2a 00 31 c5 b5 41 ee 7f 9d 63 5e b2 9b a9 81 ae bf f6 2d bf 41 b8 47 18 27 f3 ae 62 a0 2c 54 4b 23 41 01 98 7d d2 e2 d7 51 fc d2 44 3f ad e9 98 f7 e7 3c 05 20 4b 90 10 4b 93 52 ad 82 92 bc e4 5b ec 5f 4b 0a 3a 2f ee 27 27 69 7c 29 f6 01 5a 85 94 21 d1 64 99 24 2f a0 59 7e ed af d5 82 68 23 c8 51 38 09 3d 2b 73 bc 93 0c 58 74 6e b0 bd 8b 55 2e 05 4b 49 80 78 8d 96 f5 47 4a 11 65 87 cc bf 39 65 43 3e 4c d7 85 45 70 ab 68 80 00 03 65 11 d5 a4 8a aa 59 4b 85 15 dd 3e ad e9 04 c5 4f 05 7b e6 24 cb 1f 39 14 02 1c Data Ascii: )J=VOXZ !(B^unSmX`?60E%{^wny<WI[[,*1Ac^-AG'b,TK#A}QD?< KKR[_K:/''i\|)Z!d$/Y~h#Q8=+sXtnU.KIxGJe9eC>LEpheYK>O{$9
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: a9 48 cd dc bb fe 5e 8c 00 4c 22 33 2f fb 91 39 8f f3 b2 77 17 88 13 7e f2 b6 b6 e7 17 8d 38 bb 36 e7 4e b5 d7 a3 5a 15 dd ed 00 3a 60 93 8f a0 eb 17 60 d0 b7 07 ec 04 3d 58 dd 24 21 a5 58 8e 31 39 99 1e ff 5f ed 01 fd 83 1f 1e cf ce 78 ea a1 c7 27 8b ae c8 5d 34 d8 c0 1f f5 38 dc 3e 87 ca 14 62 20 83 ac 4d f4 ef d2 05 59 21 54 cb 20 ed 38 da 2f 94 1d f9 4f 17 1f fb ec eb 4f 88 bc 97 7e af f5 60 73 bc d8 bc 6f c0 fa 30 a3 e7 d4 b9 4d bf b7 93 e8 e4 fb be fd 63 f0 d0 92 39 4a b7 c8 d2 81 0a d1 6f ac 37 eb 53 10 d0 60 ec 6f 5f 1f 11 9d 97 82 e8 1e 02 ac bb 1c 6d b3 53 d3 b9 bf 8f e3 d8 dd bf 4b ae 45 24 2b 93 9f e0 0e e0 a3 cd c9 f5 44 73 7a ab f8 8a ad b5 f6 be c3 17 0d 43 60 4b 5e 4e 71 bb 82 1d a8 f7 00 3e e4 ed c9 ec 94 e3 af ff e7 c3 d6 76 9b 65 a2 03 Data Ascii: H^L"3/9w~86NZ:``=X$!X19_x']48>b MY!T 8/OO~`so0Mc9Jo7S`o_mSKE$+DszC`K^Nq>ve
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 91 82 04 52 24 a0 3c 58 23 49 38 44 ca 26 e7 a8 a7 de 24 83 77 8c 76 0b 0c ee 36 a4 a5 84 2d 39 39 d9 47 9e 11 0f 96 c6 71 ea c2 69 7d a1 bb 0d 7a 3a e7 01 79 b3 e5 46 63 61 87 42 f1 cc ff 44 00 7f 79 b5 74 a4 27 b4 cc 3d 33 05 03 f8 0f 40 e1 9b 01 66 90 80 73 59 27 cd 71 d8 c0 6b 4e 6b 88 95 42 b1 20 6a 62 b6 c4 14 29 88 14 25 2d 24 06 77 b7 f5 0c d8 00 de b2 7a dc 4d 67 bf 77 35 52 19 0e 6c c9 d2 22 34 1e a4 71 dd a3 a1 04 2a a6 44 46 7a 91 dc e3 09 87 ee b4 b2 93 54 88 a9 0d 30 a3 70 fc ed 72 e8 bd 45 a7 54 4c 8b 1f 5d aa 33 f6 1f 00 18 c7 dc 90 2e 00 12 7c f6 1e be ed 5c 33 65 0d 25 26 52 90 50 56 00 41 58 d8 dd 56 33 b9 66 ff de d9 d8 79 b3 c3 3e ab 8b c2 7b b2 8e 70 cd ce d3 5b 5d f7 67 d3 69 4e 9a 34 ae c7 41 81 44 4d 08 a0 70 52 89 26 1d fd b4 ab Data Ascii: R$<X#I8D&$wv6-99Gqi}z:yFcaBDyt'=3@fsY'qkNkB jb)%-$wzMgw5Rl"4q*DFzT0prETL]3.\|\3e%&RPVAXV3fy>{p[]giN4ADMpR&
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: e0 21 1c 08 0a aa 83 52 30 08 13 80 24 c0 e9 04 36 a9 d5 aa 7a 50 e7 9e de a1 24 01 b0 02 25 a0 5b 87 c2 bd b5 9e 4b 02 e8 a0 00 38 28 74 0a 0e 50 6e 00 68 82 92 82 09 65 21 4d a9 84 8a 80 35 b1 7f da e2 a5 c6 5f b9 39 4f ce c2 63 5c a0 44 ae 1c 10 02 df 08 07 31 00 23 27 47 4e 1e c0 61 03 f4 61 6f 0e 71 7e 50 e7 8d 73 e0 dd d7 6b 30 37 04 a4 30 37 f5 0a 26 04 98 a0 a4 60 42 69 a4 48 9a 28 28 46 2d 39 eb 46 b5 4b 3f a1 77 62 e3 7a 37 6a 7e 25 0f cc 04 06 04 42 e9 e0 02 df 08 0f c4 08 04 0e 81 03 f4 c0 cd e9 9b 77 6f a0 6b 8f 39 04 bc 77 03 c2 2d 41 c0 88 81 35 60 6e 43 1f 80 54 17 46 8d 04 13 09 54 40 54 60 42 69 4a 95 94 81 a5 9a 90 98 98 c5 8e cb 27 9e d6 3b 61 16 e8 d7 6a 94 32 b1 58 c5 04 42 84 10 e0 80 07 78 20 62 e0 a4 43 e4 28 e0 70 1e b8 79 1f 7a Data Ascii: !R0$6zP$%[K8(tPnhe!M5_9Oc\D1#'GNaaoq~Psk0707&`BiH((F-9FK?wbz7j~%Bwok9w-A5`nCTFT@T`BiJ';aj2XBx bC(pyz
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: eb ad 15 7d 00 5e 3e 74 cd 6e fd fe 0e 0c 7e 79 cd d0 78 9c 16 07 27 86 9a 43 8a 44 59 05 92 1a d2 0e f5 80 81 cd 56 29 e5 66 84 77 0f 8b 09 a6 79 08 77 a2 cf d1 f1 79 e2 e1 e6 e1 34 08 48 3c 2c 0d 68 43 c3 98 12 b3 8c eb 28 0d 3a 63 74 15 d8 bb a5 d6 82 a9 a6 0d 4d 42 25 25 9a aa 0c 90 0c b0 d4 24 95 d2 04 17 2c dd 59 67 d5 c9 55 de 0e 39 ca 6a a9 1e f3 6c f5 fa 91 cc a2 f1 9c 8a 1b 0e 88 82 c4 06 af d2 d6 a4 da 10 31 a0 0e 3d 2b cb 92 b0 3a 72 03 2c bd 12 b3 7c 82 7b 30 8f ce d8 03 8f ed a5 df 25 36 72 cf e6 31 d1 22 8d 64 c2 9a d2 74 23 ae 3b 62 04 9e 35 c9 9a 54 1f 37 4d 8f 91 6d 0b 14 6f aa 32 54 4b 55 49 a9 54 15 98 6a 40 13 f5 01 d3 26 b7 49 fa f3 35 e0 f5 1b 92 be 74 47 0f b0 58 6c b7 bb 1b 98 a5 a0 0c 13 34 d5 6a 35 87 9a a5 08 54 45 48 0c a5 43 Data Ascii: }^>tn~yx'CDYV)fwywy4H<,hC(:ctMB%%$,YgU9jl1=+:r,\|{0%6r1"dt#;b5T7Mmo2TKUITj@&I5tGXl4j5TEHC
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 0f 63 db 5c 68 3e e9 a7 ca 03 56 22 06 e1 e0 50 ba ea e5 ab f3 a0 ea 0c af ec fe 5b 2d f5 f1 a4 fb 1e ea 2e 75 ad 9f 1d f9 da 2b 7c 5c f2 93 be e7 ff ca f5 bf df f0 67 76 2d 21 13 cc 48 98 40 98 48 23 2c 19 d6 e4 f2 fb 91 ef b8 86 eb e0 30 0c 6a 18 b4 74 50 bb 0d fd bd 73 76 e5 8f 9e 90 3d 91 79 d5 da 36 b5 33 5d df 56 aa d5 32 6d 1f 0e 37 c3 94 a5 2c a0 ec fe 9b bf 9f 05 b9 fa fc 47 a6 b4 9a 5b 8d af 7d 3a 62 ec 3b b3 ed a1 81 91 58 0c e8 c4 9e 70 70 28 a8 cb 6d 67 35 a4 a9 b6 fa 78 61 ea fd aa 89 8a fa 83 a3 f2 1b ac a6 ff 3c fe ff e4 4c 69 3f 94 70 32 1c 96 10 48 28 43 a4 2c 12 89 e7 79 c7 1a fc da ff 1e 47 c0 30 a8 61 f0 1d 3b 9d 84 cc a9 f3 b2 e3 85 91 32 32 6c c4 1b 48 4d 73 ed 4b 22 94 f7 b7 65 da 16 7b b5 6c ff db ae 4c d8 7b 9e 2c 3a b1 20 43 7b Data Ascii: c\h>V"P[-.u+\|\gv-!H@H#,0jtPsv=y63]V2m7,G[}:b;Xpp(mg5xa<Li?p2H(C,yG0a;22lHMsK"e{lL{,: C{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49939	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:39 UTC	530	OUT	GET /XWuUR0YIVu6BgTCw6n1uqLKnUJefKSrWusPMWux4k_R9f2eJeKBdEGFITcCNRU8Grk0=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:39 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 54736 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:32 GMT Expires: Fri, 25 Oct 2024 19:12:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13087 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:39 UTC	843	IN	Data Raw: 52 49 46 46 c8 d5 00 00 57 45 42 50 56 50 38 20 bc d5 00 00 10 90 02 9d 01 2a 88 02 6c 01 3e 5d 28 90 46 23 a2 21 a1 29 74 8c 10 70 0b 89 65 6b f7 ef 97 0d c5 d4 8b 5a e6 8f 30 26 7b e5 69 dd 2b 10 01 0f 07 ec de 1a 7f 27 5c 7d 5c 48 0f 26 f8 65 f6 6c ae 77 bf da 9e 6b 1d 49 f3 4d f3 83 d3 af f6 3f 51 5f eb 9e 98 fd 3d 79 a6 f3 52 ff c5 fb 83 ef a7 fb 07 a8 4f f2 9f f6 1e b8 5e b3 df e0 3f f2 fb 15 fe de 7a 77 7e ec fc 45 7f 68 ff b3 fb 65 ed 53 a5 a7 25 3f 45 fe 73 fe 67 82 bf a2 7d cb ca a7 f6 6c 41 fb df f9 5e 63 fd e5 4f f7 f9 7d f8 fe db e2 1d 8d fd 8a 97 57 d0 47 05 bf c9 f3 57 f7 ef f8 3e c0 9f 9a fe bc 7f de f0 c3 fc 6f fc ff dd 2f 80 3f e9 bf e6 ff f9 7f a8 f7 93 ff 83 c8 af ee de a2 df b5 3e 9d df ff ff ed fc 1e fd e4 ff ff ff c3 e1 eb f7 13 ff Data Ascii: RIFFWEBPVP8 *l>](F#!)tpekZ0&{i+'\}\H&elwkIM?Q_=yRO^?zw~EheS%?Esg}lA^cO}WGW>o/?>
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 9d 47 bf f4 a4 48 cf 74 ae 91 88 64 a5 01 30 51 81 eb 6d 1f 08 b6 f9 84 56 b5 07 a3 f5 7b 89 62 12 20 4f b9 16 af 07 32 66 d2 55 0c 05 c6 de 02 bc 4f fc 28 b5 72 db e2 cf ea 7d e6 85 05 04 d7 3f ae 47 f1 a1 4c 60 f9 ee 31 f8 30 14 c1 02 08 3c d4 55 ed 02 74 c8 68 d2 c6 30 71 93 0f c7 13 7e 0b 80 85 6c 31 d1 7a 63 9f 88 2a 4c 37 8d 38 f0 22 5f 4a 04 25 98 11 4e b9 54 b1 43 74 c5 b8 b5 0a f9 93 dd 04 d4 c5 6c 3b 8d 02 ad ce 55 2d 1c ee 71 3c 58 76 83 13 f7 43 f9 54 dc 70 d4 c7 78 5c f0 88 40 95 a4 a7 78 1f e3 27 68 d6 94 5f e9 d6 4c f8 e6 ab eb 43 ed 2d 57 41 6d 22 3e 53 af 48 90 3b 25 2e b8 08 4c 4d b7 33 86 1f 82 d7 51 69 af 88 b0 84 d6 27 3f 36 59 e0 2b 71 54 b5 78 c5 38 52 24 91 57 1b b5 3e 97 6a fb 78 08 47 13 5a 6b 1a f9 10 6f 0e cb 06 f3 5e 7a 8a 3f Data Ascii: GHtd0QmV{b O2fUO(r}?GL`10<Uth0q~l1zc*L78"_J%NTCtl;U-q<XvCTpx\@x'h_LC-WAm">SH;%.LM3Qi'?6Y+qTx8R$W>jxGZko^z?
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 2c d5 50 98 b4 4c a0 7e e4 80 de 73 b3 66 23 09 22 87 21 d6 a0 de f2 9d c9 f7 cc 40 b9 f9 d4 cc 5a 31 a4 73 d0 83 dd 41 61 e5 bd 1d a2 03 bb 65 fc c9 f7 73 10 1c 7e 4c d8 cc ab af 09 95 59 d7 7f ca 22 ac a3 9d e9 28 7e 28 e9 c8 73 eb d2 8d ad dd 38 09 f9 db 01 aa a3 3b 3a 9d 1a a9 68 f9 c3 e2 4e 14 05 fa c4 e5 08 3d b8 4a c2 9f 62 42 29 e3 72 12 d8 6d 26 00 99 67 4d d2 13 57 5e 9b 52 c8 19 96 59 8b d7 9a b9 35 a2 b8 72 ec ec 13 1b da 3e 6f e1 34 6d 52 26 95 fe 3f 49 9d 3e 91 4e 2b 0e 38 3c 3d 96 7c 1d 5c f8 98 0a 9a 02 4d 8a 76 90 01 d1 84 6b 03 31 54 01 55 2e 33 b8 3c 25 82 14 e9 98 a7 0e 0a 72 69 e2 5a 20 20 70 69 86 7c 1e 23 59 f9 eb b4 2b 86 d3 04 b7 0c 74 a6 89 57 a7 4c b3 23 97 ab 5a 91 07 4a 7d b2 a1 95 6c ab 33 c0 32 2c 4e 3c 70 76 55 3b de b2 e0 Data Ascii: ,PL~sf#"!@Z1sAaes~LY"(~(s8;:hN=JbB)rm&gMW^RY5r>o4mR&?I>N+8<=\|\Mvk1TU.3<%riZ pi\|#Y+tWL#ZJ}l32,N<pvU;
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 8a e2 6c c7 1b bf 08 25 22 94 37 ab 39 d0 46 c0 50 7c 51 4f 98 92 24 50 95 97 ad 98 b6 26 3b e3 88 99 17 9c af 8e 0f 02 9a df e6 41 b7 7b fc 97 41 16 b8 cf d9 14 d2 f0 7f 5a ea 6c 42 b4 f6 6a 78 cb cf 3d ec 6c c9 18 43 22 23 88 02 8c 28 54 dd de 24 d4 87 21 84 8e 17 11 5a ed 51 4c 51 7c 10 4b c2 af ac 89 5c cd 4d a5 6d 43 09 11 49 25 90 ba bf 27 35 7d 5d 11 c9 f7 d3 48 fa 3f 8a 41 00 5d 1d f2 bf e4 cc 96 01 6a 43 ea 47 1d 4d b3 e5 09 25 0b e1 72 9e fd 58 70 97 7d 81 84 21 36 af 8b 86 dd 5a e9 95 5f d6 af 62 74 9c 63 00 43 b0 0f 94 a5 a8 1f 91 e0 db 71 f8 0c 4b ca d1 aa a2 5c 6e ba df 43 d5 37 e2 9a 95 7b 43 3f 80 2e fd 1a c1 97 ae ba 52 e0 30 73 35 16 e1 97 de 96 eb 92 ba 46 97 4b bd 99 78 16 05 2a e3 57 e2 9e 51 70 6c ff fc f6 58 46 0c 1a 45 6d d4 79 94 Data Ascii: l%"79FP\|QO$P&;A{AZlBjx=lC"#(T$!ZQLQ\|K\MmCI%'5}]H?A]jCGM%rXp}!6Z_btcCqK\nC7{C?.R0s5FKx*WQplXFEmy
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: f9 dc f1 f4 98 cb 60 0d 76 86 41 f5 0a 8a 6b 58 11 04 d0 42 81 0d 48 54 2d f5 37 2a c4 d1 b7 e1 de 78 f5 1c ce c5 2a ed b6 c1 cc a6 32 80 99 be 65 63 f9 bc a0 bf 47 13 ad 6d 9a 01 93 9c c5 8d f4 81 77 8b 6c cd a1 a8 83 3e 72 05 e0 3b 68 d5 15 13 75 09 38 39 be 98 6f 3d a3 4b ad c3 79 23 a6 ba ef ca 0f a5 0c 6e c3 49 f4 fc d3 c1 e6 ea ff 7a 94 5c c7 df b3 3b 1c 6e 4c 79 be ca f0 ae 6e 31 9f 97 d6 c1 2b cf 06 83 48 cf dc 47 c9 3e 37 0d 5d a2 01 77 8f c1 b2 9b 40 1f 9e cc a1 86 86 8b 81 19 26 a8 48 6c b8 ad 89 01 f9 d8 f3 e4 c4 c5 61 93 2b 8c 20 79 6c 50 d8 20 6a e2 25 b9 8d 03 c1 8e 68 e3 c1 28 1e 99 6c 57 cd a5 ae b5 67 6b a8 d9 cc 36 c0 6a e6 47 18 7b 95 da 14 dd 1e 38 4e f5 f8 da 05 de 9f a4 45 d2 4f 5c 8b 00 c1 7b b0 0d 62 da 85 ef b4 12 42 24 53 54 46 Data Ascii: `vAkXBHT-7x2ecGmwl>r;hu89o=Ky#nIz\;nLyn1+HG>7]w@&Hla+ ylP j%h(lWgk6jG{8NEO\{bB$STF
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 06 cf 28 56 f5 14 df 70 fa fd 10 cf 23 fa 62 93 4a f4 9b b4 ca b1 27 be df 7b d8 55 cf 94 a0 36 14 4e 65 a7 f3 2b 02 b7 64 e2 4c e3 e1 d7 3a 94 19 63 00 c1 1b 5e 10 9d 2a 69 69 14 ff d8 ee 85 09 28 7a 07 86 9c 7f bb ed b1 fb 7e 3c e3 3c 3a 48 be c6 f5 df 0c ad 36 0b f3 90 0a 14 11 c6 4e 53 9e 81 7a c3 1b 1d 3b b9 f7 d9 13 aa 28 54 fc 13 db 92 b0 8b a8 05 7b 9c bc 12 72 d7 e2 98 5f 5b 78 bc 25 ee aa c5 8c 16 47 9a 1c eb ad 5a 0b 59 fb d3 c6 13 9f fe 52 50 23 25 26 de 5f b6 de 1c f2 a9 83 e3 97 d5 2b ab 9d 04 49 aa fe 28 81 23 a8 85 8f f6 18 0c 30 27 b2 64 5d 75 68 15 23 0d 52 4f d1 08 ab c9 f6 9a 60 0e 54 d0 41 87 ea 8a 73 e0 5e 1f 27 8b 69 51 87 e4 9f e0 2a 7d 1c 4f 14 d7 b7 b1 a6 67 4d bb 44 1c 06 95 cb cf 42 06 c7 66 54 62 85 fb 11 7c e6 75 27 91 56 2e Data Ascii: (Vp#bJ'{U6Ne+dL:c^ii(z~<<:H6NSz;(T{r_[x%GZYRP#%&_+I(#0'd]uh#RO`TAs^'iQ}OgMDBfTb\|u'V.
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: a5 6f 87 df fb cb bf 54 0a 7a 89 53 e0 2a 1e 3e 87 6f 43 8f 48 f6 4a d3 85 29 17 90 58 89 ad fe 4f 5f 83 74 73 0d a7 b7 bf af 52 42 bc 16 c4 81 e7 c6 80 11 b7 c4 05 0e ac 24 16 b3 9f 6e b6 c2 b7 ff c8 21 c0 5c 81 4a b5 13 73 44 5c cd 31 4c 98 d4 4f 3d 32 36 d4 b4 f2 dd 21 be 96 6b 26 f7 df bc ab a4 c3 6c d2 d2 2c b0 9c d3 fe 4e 4e 86 26 20 30 b0 81 51 7e 1d 69 a4 7f ad a3 39 0e 81 25 cc bc 6f d9 78 d4 98 f0 17 45 25 0a 56 6d a2 32 f6 e4 64 6a 39 8f ce 02 f1 c6 9c 52 a2 b8 f0 da f3 22 e6 34 fc 2d 60 62 ad e8 d0 74 1d 7f 65 19 a8 ee eb b4 3f 5b 95 a1 b8 bf 62 2b 2b db b4 26 57 8d af fd f4 bf 34 8c fb fc 78 20 90 df 8b fa 7d f4 f9 f5 d9 d7 f8 2e 4b 8f 00 d4 de 07 5e 80 14 b3 e3 70 e1 97 20 67 d4 09 f5 39 47 02 07 2f 31 80 8f 64 d3 cb fa 1f 92 c1 9d 15 98 c5 Data Ascii: oTzS*>oCHJ)XO_tsRB$n!\JsD\1LO=26!k&l,NN& 0Q~i9%oxE%Vm2dj9R"4-`bte?[b++&W4x }.K^p g9G/1d
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: ad 65 13 f4 ed 21 16 7c 2a 55 c5 5c 96 c9 98 70 27 43 be 9f 94 4e 9c 1f ec 38 95 30 fa fe 7b 6a 34 fd ad 3a 0d b1 4c d3 55 39 e0 75 b8 d6 f0 c3 5d d2 9c 27 43 0b 81 f8 f2 1f 04 f0 7e ce fb 6a 94 bd dc e8 8a 2b 08 12 04 df dd 37 e0 fe 38 ff ed 6a 22 64 b6 8f 9e c4 00 01 0a 55 a4 00 8e 0a 86 e3 13 f7 ae 0a e1 ef 02 e6 fc bc 7c 0b 8d 94 f8 1f f7 d2 cf ed 11 3f 03 e2 14 e2 f2 6b 4b fc 97 c7 60 43 40 48 2b 8d e0 93 8d fc d1 a8 25 a4 af bb 14 fd 51 67 d6 4e 88 06 5f 38 b3 ad d6 fd c8 bb 2d 58 a2 26 64 7b 1c d9 3d 5e 22 6c 80 17 52 47 4b bf bd 9f a1 18 7c 10 51 d6 42 77 2a 75 23 69 48 fc 01 ae 99 28 fe 02 68 77 04 43 8a 85 06 66 6e d0 ae 05 b2 15 0d 42 af 47 6b fa 6b 22 96 bf 3c eb a7 cd 44 e6 1e aa be c2 6b ad 8c 27 e2 6f 36 c5 89 b1 cb 88 58 20 dc 64 8f 79 2a Data Ascii: e!\|U\p'CN80{j4:LU9u]'C~j+78j"dU\|?kK`C@H+%QgN_8-X&d{=^"lRGK\|QBwu#iH(hwCfnBGkk"<Dk'o6X dy*
2024-10-24 22:50:39 UTC	1378	IN	Data Raw: 32 24 cb 05 24 3a de 92 f0 1d 8b e7 e6 e8 6b 8c 4c 4f 2d 49 c5 35 07 78 4a f9 67 07 18 3d 7c 71 cb ed 1e 40 77 89 c3 6d ec 56 30 97 5f 93 fd d6 9b 1f 8b 5c 12 7d 45 1f 8a f3 93 e0 2e 35 67 62 b7 c7 6f 3f 3e 62 17 f1 bb e5 18 bd cd 42 2b ad 97 b8 08 cc 71 64 ae 45 69 d5 ed 62 e5 82 6a e8 c4 c7 84 df 0e dc 42 22 5b 96 27 77 62 93 0a 20 c0 31 76 aa e0 26 7e b3 25 e9 50 ca 61 cc 87 52 b3 bc d3 d3 49 7d 75 6c aa 21 02 76 6f e1 d1 08 ee c1 b3 4f fe cb e6 18 ac 90 a9 17 f1 f6 be 0e 5a b7 2d a5 fb b7 db 9d b2 20 d0 60 8e 21 9e 58 6f 08 e3 65 02 29 a8 7d b7 7d 0d 62 44 cd c3 3e db c7 d2 07 ef 64 a9 29 62 b9 45 81 fa 8a b2 a1 89 7f cf af 60 b7 d3 49 6f 52 d7 80 c4 3f 4b c2 41 15 91 d1 65 c4 f6 88 8c 05 6f d0 85 9a 5d d3 2e 4b 5c 65 a9 31 f0 64 4b d7 72 0d f0 97 e3 Data Ascii: 2$$:kLO-I5xJg=\|q@wmV0_\}E.5gbo?>bB+qdEibjB"['wb 1v&~%PaRI}ul!voOZ- `!Xoe)}}bD>d)bE`IoR?KAeo].K\e1dKr
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 76 7c c9 cd d8 bb 4f 94 0a 43 b2 67 87 66 79 cf 33 88 55 ec 54 87 3b a9 df d0 34 ff 2b 6a ed 25 db 19 62 e2 f8 1d b0 00 9e a0 f6 58 22 2c 59 36 90 05 67 00 35 c9 63 d5 38 71 80 e0 f1 ef 8b f8 9b db 2c f8 1d 33 b2 17 a6 bd e4 67 d7 9b 46 6d dc 49 90 c6 f0 e3 7e 15 9d 21 8c 26 80 a6 ad 84 ec ce a8 06 b9 f8 59 a1 bd f4 12 ad 0b f1 7a 21 9e 40 07 f5 d6 87 6b 31 ac 61 60 1d 4b 63 b4 16 02 07 d0 92 3a 98 4c 76 fa 07 5c 0e 2b ea 32 81 41 4b 9b f1 55 d7 c5 a5 ed a8 9d bf fd 55 de 92 c1 db c6 d9 b8 97 40 a9 99 25 0a 5d 37 11 27 cb d1 37 72 75 ee fe 13 54 c1 ea f9 fd 7a 2b 86 74 7a 82 bb db a0 0f 48 d0 76 e4 1e 7d 2a 2e 72 75 0a a8 19 0f e2 d7 ed c1 44 3c ea ba 8a cf 26 4b 1f 1b 6a 11 c3 ba 9e ec 33 89 f1 60 ac 33 82 f9 64 c0 4e 23 a0 4c 77 8c f1 7c fe cd 0a e3 fd Data Ascii: v\|OCgfy3UT;4+j%bX",Y6g5c8q,3gFmI~!&Yz!@k1a`Kc:Lv\+2AKUU@%]7'7ruTz+tzHv}*.ruD<&Kj3`3dN#Lw\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49940	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:39 UTC	1093	OUT	GET /4whGAVjZGrrlNxzheKAfBXrxggtyAb4euWLeQI8fDfVfdnFEZjE0DZTJ8DKoh64pqcIa=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:39 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 678 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:32 GMT Expires: Fri, 25 Oct 2024 19:12:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13087 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:39 UTC	678	IN	Data Raw: 52 49 46 46 9e 02 00 00 57 45 42 50 56 50 38 20 92 02 00 00 b0 0e 00 9d 01 2a 40 00 40 00 3e 49 20 8d 44 22 a2 21 96 0a ad 34 28 04 84 b1 00 59 7f ff e8 cd cc 72 40 79 80 db 46 eb 00 fd 66 f6 00 fd 80 eb 43 fd 94 fd 99 f6 9d a3 bd 8b 13 f1 ba 75 86 81 cf d8 c6 c3 6f ee fc cc 35 02 fe 3b fc df fe 2f 5d 5f 44 03 d6 a6 d1 1a 7c 54 12 d6 27 b3 0e 88 00 ec 67 4b b7 6e a2 e6 7a 28 a3 85 b9 c8 86 7f 73 e0 eb 6c 9c 1e 8b ca fa 83 6c f8 40 00 00 fe fd 32 ef 93 ee 34 19 b1 9a 45 d7 15 f4 b5 3a c9 dc aa 53 8a d4 6b 50 ce 59 3d 75 16 52 fa ad 66 2f 24 de 33 23 29 68 ae 7f f1 1e c2 9c 18 1e 3f bb ae e0 b3 45 2e 09 ae 03 97 bd ff eb c8 40 e1 9a ec d1 48 ba 98 cd 24 ee 0c 7b 78 6b 5c 73 47 f9 65 8d 7c 0c 87 ff 3f b5 3f f1 90 82 bf 02 8f 03 92 aa cd 16 77 a4 78 4c 40 1b Data Ascii: RIFFWEBPVP8 *@@>I D"!4(Yr@yFfCuo5;/]_D\|T'gKnz(sll@24E:SkPY=uRf/$3#)h?E.@H${xk\sGe\|??wxL@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49941	172.217.23.110	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:39 UTC	1716	OUT	POST /_/PlayStoreUi/data/batchexecute?rpcids=eIpeLd%2Cdi6f4%2Cw37aie&source-path=%2Fstore%2Fgames&f.sid=-4647688482496319979&bl=boq_playuiserver_20241022.06_p1&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=267810&rt=c HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 33888 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=EiE7CnrFdf219y650ChxBi-B1EZPiEqYxyCohcZ6CiScQaIoUWoFLh0-LEX6MxToc1zYVwRBVYxLWR_K9Y90gII6AlcZu3RJPzWixMj5c5RdTB6oWpRuWa3SqEILCTyGypdHvs971brM_1Ron5Ewn2vxrYq_bHZotzGoSlKNApWxB_6DoA; _gid=GA1.3.2110399767.1729810210; _gat_UA199959031=1; _gcl_au=1.1.1430326302.1729810210; _ga=GA1.1.104830921.1729810210; OTZ=7791770_72_76_104100_72_446760; _ga_6VGGZHMLM2=GS1.1.1729810213.1.1.1729810226.0.0.0
2024-10-24 22:50:39 UTC	16384	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 25 35 42 25 35 42 25 32 32 65 49 70 65 4c 64 25 32 32 25 32 43 25 32 32 25 35 42 32 25 32 43 25 35 43 25 32 32 47 41 4d 45 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 77 69 6e 64 6f 77 73 25 35 43 25 32 32 25 35 44 25 32 32 25 32 43 6e 75 6c 6c 25 32 43 25 32 32 31 25 32 32 25 35 44 25 32 43 25 35 42 25 32 32 64 69 36 66 34 25 32 32 25 32 43 25 32 32 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 38 25 32 43 25 35 42 32 30 25 32 43 35 30 25 35 44 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 39 36 25 32 43 31 30 38 25 32 43 37 32 25 32 43 31 30 30 25 32 43 32 37 25 32 43 31 38 33 25 32 43 32 32 32 25 32 43 38 25 32 43 35 37 25 32 43 31 36 39 25 32 43 31 31 30 25 32 43 31 31 25 32 43 31 38 34 25 Data Ascii: f.req=%5B%5B%5B%22eIpeLd%22%2C%22%5B2%2C%5C%22GAME%5C%22%2C%5C%22windows%5C%22%5D%22%2Cnull%2C%221%22%5D%2C%5B%22di6f4%22%2C%22%5B%5Bnull%2C%5B%5B8%2C%5B20%2C50%5D%5D%2Cnull%2Cnull%2C%5B96%2C108%2C72%2C100%2C27%2C183%2C222%2C8%2C57%2C169%2C110%2C11%2C184%
2024-10-24 22:50:39 UTC	16384	OUT	Data Raw: 42 25 35 42 31 30 25 32 43 31 33 39 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 35 30 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 36 39 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 36 35 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 35 31 25 35 44 Data Ascii: B%5B10%2C139%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C150%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C169%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C165%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C151%5D
2024-10-24 22:50:39 UTC	1120	OUT	Data Raw: 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 35 30 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 36 39 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 36 35 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 35 31 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 Data Ascii: D%5D%5D%2C%5B%5B2%2C150%5D%2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C169%5D%2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C165%5D%2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C151%5D%2C%5B%5B1%2C5%2C7%
2024-10-24 22:50:40 UTC	1242	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:50:40 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Cross-Origin-Opener-Policy: same-origin-allow-popups Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:50:40 UTC	136	IN	Data Raw: 34 36 66 0d 0a 29 5d 7d 27 0a 0a 31 31 32 35 0a 5b 5b 22 77 72 62 2e 66 72 22 2c 22 65 49 70 65 4c 64 22 2c 22 5b 5b 5b 5b 5b 6e 75 6c 6c 2c 5c 22 57 69 6e 64 6f 77 73 5c 22 2c 6e 75 6c 6c 2c 5c 22 64 65 73 6b 74 6f 70 5f 77 69 6e 64 6f 77 73 5c 22 2c 74 72 75 65 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 2f 73 74 6f 72 65 2f 67 61 6d 65 73 3f 64 65 76 69 63 65 5c 5c 75 30 30 33 64 77 69 6e 64 6f 77 73 5c Data Ascii: 46f)]}'1125[["wrb.fr","eIpeLd","[[[[[null,\"Windows\",null,\"desktop_windows\",true,[null,null,\"/store/games?device\\u003dwindows\
2024-10-24 22:50:40 UTC	1006	IN	Data Raw: 22 5d 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 71 67 49 70 77 67 45 6d 43 69 42 6e 59 57 31 6c 63 31 39 6f 62 32 31 6c 58 33 4e 31 59 6d 35 68 64 6c 39 6d 61 57 78 30 5a 58 4a 66 64 32 6c 75 5a 47 39 33 63 78 41 41 47 41 45 5c 5c 75 30 30 33 64 5c 22 5d 2c 5b 5b 5b 6e 75 6c 6c 2c 5c 22 50 68 6f 6e 65 5c 22 2c 6e 75 6c 6c 2c 5c 22 70 68 6f 6e 65 5f 61 6e 64 72 6f 69 64 5c 22 2c 66 61 6c 73 65 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 2f 73 74 6f 72 65 2f 67 61 6d 65 73 3f 64 65 76 69 63 65 5c 5c 75 30 30 33 64 70 68 6f 6e 65 5c 22 5d 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 71 67 49 6e 77 67 45 6b 43 68 35 6e 59 57 31 6c 63 31 39 6f 62 32 31 6c 58 33 4e 31 59 6d 35 68 64 6c 39 6d 61 57 78 30 5a 58 4a 66 63 47 68 76 62 Data Ascii: "]]],null,null,null,\"qgIpwgEmCiBnYW1lc19ob21lX3N1Ym5hdl9maWx0ZXJfd2luZG93cxAAGAE\\u003d\"],[[[null,\"Phone\",null,\"phone_android\",false,[null,null,\"/store/games?device\\u003dphone\"]]],null,null,null,\"qgInwgEkCh5nYW1lc19ob21lX3N1Ym5hdl9maWx0ZXJfcGhvb
2024-10-24 22:50:40 UTC	142	IN	Data Raw: 38 38 0d 0a 31 33 33 0a 5b 5b 22 77 72 62 2e 66 72 22 2c 22 77 33 37 61 69 65 22 2c 22 5b 5b 5b 5c 22 47 61 6d 65 73 5c 22 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 63 61 74 65 67 6f 72 79 2f 47 41 4d 45 5c 22 5d 5d 2c 5c 22 47 41 4d 45 5c 22 5d 5d 5d 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 33 22 5d 5d 0a 0d 0a Data Ascii: 88133[["wrb.fr","w37aie","[[[\"Games\",[null,null,null,null,[null,null,\"/store/apps/category/GAME\"]],\"GAME\"]]]",null,null,null,"3"]]
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 38 30 30 30 0d 0a 35 33 32 39 30 32 0a 5b 5b 22 77 72 62 2e 66 72 22 2c 22 64 69 36 66 34 22 2c 22 5b 5b 6e 75 6c 6c 2c 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5c 22 71 67 4a 66 45 6c 30 51 41 4f 41 48 41 62 6f 4a 4c 41 6f 71 43 69 52 74 59 31 39 69 59 58 52 30 62 47 56 7a 64 47 46 79 58 33 42 79 62 32 31 76 58 32 68 68 62 47 78 76 64 32 56 6c 62 6c 39 33 5a 57 4a 7a 61 33 6b 51 4c 52 67 44 77 67 6b 6d 43 69 51 33 4e 7a 5a 6c 4e 6a 64 6d 59 69 31 6d 4d 57 51 7a 4c 54 51 78 4d 6a 67 74 59 6d 5a 69 59 53 31 6d 4f 44 52 6d 4d 47 4e 6b 4e 32 56 6c 4e 6d 4d 5c 5c 75 30 30 33 64 5c 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c Data Ascii: 8000532902[["wrb.fr","di6f4","[[null,[[null,null,null,[\"qgJfEl0QAOAHAboJLAoqCiRtY19iYXR0bGVzdGFyX3Byb21vX2hhbGxvd2Vlbl93ZWJza3kQLRgDwgkmCiQ3NzZlNjdmYi1mMWQzLTQxMjgtYmZiYS1mODRmMGNkN2VlNmM\\u003d\"],null,null,null,null,null,null,null,null,null,null,nul
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 38 37 5a 57 47 30 68 30 6f 68 52 70 72 72 5f 42 2d 69 6b 66 75 36 36 45 67 69 4c 5f 5f 77 4e 57 52 4f 6b 39 79 57 35 78 6c 39 31 38 68 30 52 53 7a 66 41 6a 52 43 34 4f 6e 49 61 58 68 54 75 78 5f 6d 52 57 5c 22 5d 2c 6e 75 6c 6c 2c 5b 35 31 2c 31 37 32 2c 35 32 2c 32 35 35 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 32 5d 2c 5b 5b 6e 75 6c 6c 2c 32 2c 5b 31 34 34 30 2c 32 35 36 30 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 62 57 32 6d 78 6c 4c 4b 35 4c 36 35 7a 54 50 43 6b 4d 56 68 4f 62 6e 4a 62 33 77 6b 77 Data Ascii: ll,\"https://play-lh.googleusercontent.com/87ZWG0h0ohRprr_B-ikfu66EgiL__wNWROk9yW5xl918h0RSzfAjRC4OnIaXhTux_mRW\"],null,[51,172,52,255],null,null,null,2],[[null,2,[1440,2560],[null,null,\"https://play-lh.googleusercontent.com/bW2mxlLK5L65zTPCkMVhObnJb3wkw
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 47 67 58 66 46 6c 73 58 63 32 7a 68 6d 47 4e 42 42 6c 59 36 49 79 51 78 67 4c 52 68 53 71 41 38 4c 5f 63 4d 53 36 42 53 36 41 31 58 32 78 78 30 6e 51 76 69 76 4b 62 42 4a 43 44 41 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 31 34 34 30 2c 32 35 36 30 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 69 6d 70 62 62 30 70 31 35 54 62 4b 59 67 56 51 6c 70 63 61 34 52 44 4b 79 54 52 4e 37 6b 4c 45 38 32 56 66 66 64 53 57 39 47 6b 4e 32 66 55 6c 5a 39 6b 61 62 49 41 49 53 49 38 52 76 42 78 69 64 41 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 31 34 34 30 2c 32 35 36 30 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 Data Ascii: GgXfFlsXc2zhmGNBBlY6IyQxgLRhSqA8L_cMS6BS6A1X2xx0nQvivKbBJCDA\"]],[null,2,[1440,2560],[null,null,\"https://play-lh.googleusercontent.com/impbb0p15TbKYgVQlpca4RDKyTRN7kLE82VffdSW9GkN2fUlZ9kabIAISI8RvBxidA\"]],[null,2,[1440,2560],[null,null,\"https://play-lh
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 2d 31 39 56 68 57 50 58 4b 54 32 4c 6d 33 67 4f 4b 52 43 56 48 53 35 67 79 6b 38 32 53 42 38 52 6e 71 72 4b 66 4d 50 6d 59 39 34 50 41 30 50 54 7a 77 61 72 59 41 33 39 61 42 6c 42 71 78 36 30 48 45 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 31 34 34 30 2c 32 35 36 30 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 33 56 2d 48 33 6e 42 6d 54 48 45 71 61 34 78 49 72 56 6a 54 7a 76 6a 78 55 5f 51 43 67 70 51 4e 5f 65 70 4e 4b 4b 4f 5f 53 48 39 76 59 32 4e 32 4d 38 4c 4c 52 31 46 69 75 52 79 46 6b 50 72 67 6c 6f 4f 30 5c Data Ascii: ll,\"https://play-lh.googleusercontent.com/a-19VhWPXKT2Lm3gOKRCVHS5gyk82SB8RnqrKfMPmY94PA0PTzwarYA39aBlBqx60HE\"]],[null,2,[1440,2560],[null,null,\"https://play-lh.googleusercontent.com/3V-H3nBmTHEqa4xIrVjTzvjxU_QCgpQN_epNKKO_SH9vY2N2M8LLR1FiuRyFkPrgloO0\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49942	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:39 UTC	1092	OUT	GET /sb30umyAPj9A4ixl4jnPJO15ET-mo4TihKOI0xwFzRbxOfZo6fozeKmAjf8Lhl3mqHY=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:40 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 636 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:07:35 GMT Expires: Fri, 25 Oct 2024 19:07:35 GMT Cache-Control: public, max-age=86400, no-transform Age: 13385 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:40 UTC	636	IN	Data Raw: 52 49 46 46 74 02 00 00 57 45 42 50 56 50 38 4c 67 02 00 00 2f 3f c0 0f 00 17 e5 a0 6d 24 49 4a aa 66 77 ef 25 70 fc 09 1d 9c bf 69 38 6c db 46 92 24 27 33 bb 7b 7f 07 d7 7f 29 57 d4 cd 38 6e db 46 90 a8 cc f5 df ee bd 36 99 ff 00 21 10 b3 1e df 67 9f 19 39 5d 20 c2 df b5 8d d1 64 fc 34 03 62 40 86 13 c0 44 d2 49 8e a4 83 14 1d ab 0e 8c d2 3e 98 ca 04 59 f2 20 88 80 c8 39 3f 4e 7b c4 b1 8e d5 8c 6d 1e e4 74 0d 3d fa 64 7c 2e 0c 1e 44 16 19 a1 40 66 9d 76 14 83 a6 20 f9 b9 56 3f 66 b5 81 b1 38 1a 44 50 10 44 40 04 03 a6 f2 5a eb ff cf ac c3 e6 fe f9 41 14 43 60 4c 82 92 90 1a 88 20 cb 00 19 a2 08 02 1c 02 04 91 20 02 1c 36 6b a4 c0 20 45 83 01 49 62 50 04 44 41 04 08 1e 01 11 10 88 22 20 88 a2 08 10 36 8a 00 47 22 08 02 24 00 47 22 04 9e bf bf 37 18 a4 5d Data Ascii: RIFFtWEBPVP8Lg/?m$IJfw%pi8lF$'3{)W8nF6!g9] d4b@DI>Y 9?N{mt=d\|.D@fv V?f8DPD@ZAC`L 6k EIbPDA" 6G"$G"7]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49943	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:40 UTC	530	OUT	GET /gSKT7WzQz63Ha91RiOEPMl3Q5mBIi2V-H0D9LQijC9n0HDAlE7EQN3NuCyRk_2o8kpk=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:40 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 32208 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:50:37 GMT Expires: Fri, 25 Oct 2024 22:50:37 GMT Cache-Control: public, max-age=86400, no-transform Age: 3 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:40 UTC	847	IN	Data Raw: 52 49 46 46 c8 7d 00 00 57 45 42 50 56 50 38 20 bc 7d 00 00 90 13 02 9d 01 2a 88 02 6c 01 3e 49 20 8d 45 22 a2 21 12 d9 f5 80 28 04 84 b2 b6 bd 02 29 dd da 51 72 da 54 c0 bd b8 5b 4b fa b2 9a e3 8a 3e 61 dd 52 b6 89 55 79 8d b4 77 3d 6a d0 c1 ee 62 f9 6f ea f9 cf f6 27 b8 03 7c cc 1e 72 8f d1 ff 8f d8 07 f6 df 52 2f ed 5e 98 bd 44 79 b6 f3 67 ff c7 fb 5f ef c7 fb 8f a8 07 f5 1f f7 7e b1 1f f8 ff ff fb cd ff 6a ff 9d ff ff dc 83 f9 c7 f9 ff ff fe d4 de b1 5f dd ff f6 70 6c f0 99 f9 64 f9 df 5e fe 7c fe a9 fc 4f b1 17 ef df 4c f9 87 f6 0f f4 bc ce fe 83 f9 c3 39 df e6 78 bf fb 17 88 d7 bc 38 23 40 5f d9 2f fb fe 22 5f e9 7f 9a f5 d3 f5 5f f3 df f5 3d c0 ff a2 ff 67 ff af eb 2f fc 0f 22 ff bf ff bf ff af fe 33 e0 1b fa 37 f7 ff fd 3f e0 fd e3 3f db f2 a3 fb Data Ascii: RIFF}WEBPVP8 }*l>I E"!()QrT[K>aRUyw=jbo'\|rR/^Dyg_~j_pld^\|OL9x8#@_/"__=g/"37??
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: bf 8d f3 59 a4 7a c4 91 9a c3 9f 38 77 cd 84 43 db c0 dc eb fb 0c 7c ef ec 23 ee 0a 8a 1b ca c6 54 84 36 db 02 d3 1f bf 83 e8 4b f9 08 f1 1c 1e fe 71 f3 b1 51 73 fe 83 03 77 32 7b 89 81 df 0b 85 55 8b 6b dc 86 e5 cc 92 8a aa 41 3c ea 34 77 a5 1a fd 2e 4d ca ac 9c 1a e8 a1 8b 45 44 f5 5e c0 90 0c fd 23 60 c6 db 2f 57 ba cb e4 ff 7e 87 3e 3d 8d 8c f6 fa 34 dd 65 52 1a 81 0c 86 d4 8a 40 53 a5 9b bd 67 0c 57 8f 6c a0 90 62 59 dd d8 e5 47 88 bc 5b 4a e3 d3 cb ae da 3e c3 74 5f d1 9f 15 30 99 44 e9 06 3f 1e bb 65 e5 e4 70 36 44 67 5d ac 2b 3d 62 2c 20 80 90 80 ed d9 27 da 08 40 33 3b c9 e2 31 04 2f ad 50 d3 91 4b 24 5a 63 46 d2 fd 2a 2d be af 69 1f b1 a3 01 1a 41 b2 9f 55 78 2d 6f 98 62 7c 37 94 f4 0f 12 7f d8 fc 7d 7b b2 e8 d3 3e 64 36 1a 41 f0 86 28 d7 a5 03 Data Ascii: Yz8wC\|#T6KqQsw2{UkA<4w.MED^#`/W~>=4eR@SgWlbYG[J>t_0D?ep6Dg]+=b, '@3;1/PK$ZcF*-iAUx-ob\|7}{>d6A(
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 46 bd 40 ca 9d b2 f2 8e 1e 81 96 74 6a 36 71 a5 65 22 19 1b 9f 16 52 0a 1c 92 c3 e9 fa 8a e2 67 4f 65 af 35 cf a0 96 bc 0f 4c ec ec e2 48 bf 5f 9f 4b 2b 99 ec 5a 8d 9c 73 7a b5 23 ed 85 53 3d fd 14 90 a4 b8 ad eb 72 ab a6 39 25 9e fe 88 0b 8a 7f 2a 78 45 b2 ae dd 06 d2 ac d3 fe 8f 96 0e 09 e8 94 49 57 a0 2c e4 c5 84 c2 77 42 09 e6 8d a5 1e b4 37 01 66 9d fa fc c9 62 24 8a 2e ce c3 ea 7e 7d 15 42 5f 23 23 43 12 a4 2f 60 69 cc 81 40 5e b1 0d 68 b3 16 5f 6a af 27 78 8f 88 6d 6d df 71 2e 50 07 90 f3 e9 83 38 f6 bc db da a3 10 59 ce 38 66 08 28 20 eb 0e 91 c4 a4 e2 29 a3 1e 03 fc f1 5a 71 8a 56 f0 86 a3 cb f3 9c 2c 8d e7 8f 42 bc 38 7c c8 e3 02 ed c4 68 79 72 da 27 17 35 60 d5 78 1e f0 79 24 0f 8c 9f aa d9 c8 a8 19 20 b6 b3 1e 83 66 f0 7e 69 7a 13 42 ab 94 73 Data Ascii: F@tj6qe"RgOe5LH_K+Zsz#S=r9%*xEIW,wB7fb$.~}B_##C/`i@^h_j'xmmq.P8Y8f( )ZqV,B8\|hyr'5`xy$ f~izBs
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 65 29 30 ba 4e 39 bc d0 03 c6 55 17 50 bf 54 b5 65 43 ad e4 d8 c0 8c 05 7b 35 16 50 e0 25 ed 0b 57 e4 a2 89 cc 0b d2 84 48 30 90 f7 d1 25 4a 80 1d 5b 30 ba 52 4f 60 bc ab be 3d af 82 80 65 9d a3 1e 32 35 8b 0c 4f 5a 8d d4 5c a2 da ad 7d cc 87 bd 87 74 8d 17 ca dd 4b 30 39 4b 56 21 6a 2c 6f 58 21 55 df 09 24 1d e9 86 3d d9 fa c1 40 ea 5a 04 6e 33 d6 d8 cb ef 01 f6 da cb b5 75 02 68 1d 88 b1 f9 39 10 36 9e b5 9d 41 62 3f 43 e0 52 18 71 82 9c c2 0d 4b b0 9a 9b da 46 74 68 50 7b be 99 1e ec 7a be cd 03 b8 cb 16 fc 51 86 15 ee a7 bb 17 4a 83 53 01 93 bb b2 b6 1e af 7f 3c 88 8c 3d 79 b1 1f df 27 ab 78 9d 57 65 13 b3 5e 39 0b a0 c6 07 87 a9 84 d2 4d 16 70 ca 15 1c a0 42 8f d8 6a 74 54 0a 9a c2 56 28 9b c3 24 f3 9d 77 17 23 b6 72 be 9d e2 5d be aa 0d 6d 76 86 7e Data Ascii: e)0N9UPTeC{5P%WH0%J[0RO`=e25OZ\}tK09KV!j,oX!U$=@Zn3uh96Ab?CRqKFthP{zQJS<=y'xWe^9MpBjtTV($w#r]mv~
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 20 f5 a0 97 05 6b 98 47 ec 12 20 77 b3 f2 99 aa c2 8f 09 ca b3 2f 51 cd 0b 3b 26 71 7c b2 dd e9 8d bd 6d ae 5c 3b 68 20 80 4d 69 10 f6 f4 0e 72 85 c1 0d f0 11 66 a0 c9 a5 d9 b7 b4 ed ef f0 9c f2 14 45 61 51 3f 02 37 bc c3 7a 38 65 66 90 03 1d 2e f0 36 38 cd 8a c0 7c e3 35 6e a7 b9 45 a5 5f 6c fb 9d 7a 0a 9f bb 44 02 39 7a 6b a2 d2 26 85 17 f7 c6 30 43 34 d5 6d a9 38 4d 01 fc 2d f2 3f fa 1c 76 2e 2f 00 e2 7d 01 f0 8a 9d 4a 32 4a e0 e8 1e 34 4c 25 e4 be 0f ff 4c ad be d1 4f a8 0f 65 e6 19 49 69 cf 30 cf 9c a8 2d f3 04 13 ed 2b 69 bb 84 8c 9e a6 be 4c 2b 62 7b b4 66 87 e6 dd 95 b8 22 6a 05 84 a3 9b 8a 32 a0 e9 6a 21 7b c7 c7 68 f9 95 44 9f 58 ad 6a e8 cf ee dd b8 de a7 bf 96 70 b4 60 36 b7 84 60 f6 1b 9c a6 45 48 0b 17 54 96 e3 ca 7f be eb 9d ae 40 9a cd 02 Data Ascii: kG w/Q;&q\|m\;h MirfEaQ?7z8ef.68\|5nE_lzD9zk&0C4m8M-?v./}J2J4L%LOeIi0-+iL+b{f"j2j!{hDXjp`6`EHT@
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 75 91 80 52 58 e8 ee 3e bd 9c 02 95 97 d3 ac 28 1f 13 8d df 35 33 ad d0 2b 80 51 08 3c ca ee 8f b4 d0 df 06 8f 7f 65 3a 28 57 8b c6 16 ba fb 3f ef 52 33 52 8c 97 13 40 2d 4b 1c 71 79 c5 46 00 ae 52 26 3f 7d 36 4e 58 2f df 7f 8b 2e 08 ff ea 17 08 c7 fe f8 8f c0 70 f7 ac 61 50 12 61 73 a0 e6 a2 c9 c4 c1 43 59 63 eb 16 de 00 1d 9a 45 d0 46 c6 3b b8 6f a7 29 48 89 be fb 49 af 00 ee 67 50 1a 47 61 c8 6a e8 bd af 55 f6 e8 fe f7 fb 45 23 fc 92 9b dc ac 32 65 4d d3 a6 e3 55 3d f0 51 c1 59 21 79 41 d7 f2 dc 97 36 e4 d2 a8 4b e5 6d 2a 30 ac ed 68 6a d1 3d 7c 12 0e 3e 48 dc 4a ee 93 9e 13 1d 17 8d 5d bb 64 1b 4d f4 54 59 ac 3a 15 c4 6b 78 ef 33 c2 9e c2 04 86 98 51 a1 fb cb 4b 17 8d 5e 0b 71 b3 7e ff 63 6e 2e 6a 61 71 fb 87 fc 71 bd 99 22 01 ee eb 28 01 e9 11 62 94 Data Ascii: uRX>(53+Q<e:(W?R3R@-KqyFR&?}6NX/.paPasCYcEF;o)HIgPGajUE#2eMU=QY!yA6Km*0hj=\|>HJ]dMTY:kx3QK^q~cn.jaqq"(b
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: fa d5 68 5d 00 60 ff 54 36 17 14 7b e4 59 44 83 f3 cb 9d 1f 0c 44 be 23 9d fd a2 f4 d2 5a 9b 35 ca a8 a3 8a 96 e3 28 af a6 14 54 cc 71 3c 9c 96 fe d0 ca ee 42 8c fb 25 8e f2 11 4a cc 4e 9e c3 a5 92 a8 21 39 cf 3a 05 39 86 cb 65 5c 04 d1 60 27 46 c8 6c 5f fb b0 20 c2 a3 9c 0d 05 00 be f9 66 24 db 24 35 21 1c 7e 2a fb 96 32 5b 7c b1 ba 08 f5 7a 12 11 b8 d9 d8 f9 0f 1c e0 db b1 75 49 fb 94 be 69 a1 10 6b 0c c1 ec e4 9b ad 31 e0 2b 3e ef 55 f6 fb 47 42 26 ee 4d 5b ff f5 09 1e dd 03 c0 e6 32 0d 03 36 40 ac 0d 73 50 96 44 85 4c 69 e3 97 04 2b ff 30 92 1e 17 65 33 cf 85 a7 0c 2f bb 28 1b 36 8e 90 d2 60 18 93 da d2 09 0f 95 79 7a fb 1d a9 06 dc 22 ef 86 a3 7c 7c f8 2f e6 25 6d 56 a5 35 c7 b6 22 d1 bc 78 ca c8 e8 dd bf a7 a4 09 ba 97 25 c3 c0 2e 4f 07 8e 8c 64 5c Data Ascii: h]`T6{YDD#Z5(Tq<B%JN!9:9e\`'Fl_ f$$5!~*2[\|zuIik1+>UGB&M[26@sPDLi+0e3/(6`yz"\|\|/%mV5"x%.Od\
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 1a b3 39 d0 8c fb 6e c8 80 4d ac 2f 23 ad a0 77 c8 dc bd a1 aa fd 5f b0 a6 8c 14 99 9c f9 5b d9 81 d1 6d 75 32 0d 03 89 ef 94 d8 7a 39 f6 95 c1 1f e6 5a 54 98 13 db 8f 6d f0 65 75 81 80 53 a4 1d 6f f8 ce 65 03 69 34 81 cb 05 28 d4 c0 28 58 b7 fa b9 25 c4 10 a5 25 58 87 f9 31 07 44 d4 7c 8e 78 70 b9 50 ea 24 eb 24 3c 42 36 eb e4 c5 4a 89 1d fc 3e 3f e6 b3 64 61 08 11 16 1e 4e b5 42 fe 4d 0a df 5d 3a 3f 62 3d b9 1a 50 9a 8e 38 14 b7 f1 44 f1 4f cb 1b fe 32 7f e7 68 fc ae 35 2d c7 6d 9e 5b bf 5c 3a 02 b5 04 3d a5 eb f6 40 ec 5d 3b a0 70 24 ec e3 ec 4e 36 99 a3 b1 36 06 75 29 6d a8 6a bd 3e df c5 cb e8 2a ec c9 ae 7c b7 2d 20 0d ac 54 97 b8 07 9e ca 5b 16 48 08 f2 ba 16 40 5b 62 3f e2 a9 f9 a9 f6 ef 1d 54 b6 e2 da f1 8f 0a 6a da 49 7b df 21 c9 3d b2 2a af 70 Data Ascii: 9nM/#w_[mu2z9ZTmeuSoei4((X%%X1D\|xpP$$<B6J>?daNBM]:?b=P8DO2h5-m[\:=@];p$N66u)mj>\|- T[H@[b?TjI{!=p
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 56 e2 eb 77 30 7a 1f a6 49 31 69 43 b9 4c 00 e7 3c 11 fa 50 8e 18 e8 08 6f ad 1a 51 82 8f fe 5e 58 e7 42 90 5c 02 21 bf 97 3a b1 7d 81 69 de 82 8b 32 63 a1 39 5c 48 1f 4a ce 91 76 8e 09 eb dd fe 7d 09 23 d6 49 1a e0 80 74 7e df d9 42 fe 5a 8d 4b 29 dd 88 9e 53 ac ed 2b 97 51 f3 00 8a 9c ba 4a b2 77 8f fa 1a fe b1 43 b7 d2 2b a0 b3 a7 55 d9 e9 b8 90 b8 0b 18 da 8e 43 60 a0 3c 20 24 e4 04 84 b5 bc b5 71 d4 4a 7d 54 22 a7 04 ab 09 c8 7b e3 c8 b0 ee 4c d9 a3 ef 54 94 5c 07 22 c2 db ef 22 37 56 36 f0 d3 c0 51 4b d7 54 7b ec 1c 54 25 29 63 da 82 37 09 89 e3 06 d3 d5 17 e7 bc 8a 60 f5 eb ec 10 c4 2a 74 55 a2 2a 21 45 9c 6b cc 24 07 05 ef 22 c5 c8 98 2e a2 03 f6 b6 19 5b b0 84 a8 8d f1 1f df a9 db cf af 8b ae 16 c4 7f d6 32 cd 8f 8b 6c cd 53 e2 85 89 9e 42 82 09 Data Ascii: Vw0zI1iCL<PoQ^XB\!:}i2c9\HJv}#It~BZK)S+QJwC+UC`< $qJ}T"{LT\""7V6QKT{T%)c7`tU!Ek$".[2lSB
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 6f dd 1c 7c 06 2d 38 45 c4 90 ee 18 1b 9f e2 6a a6 62 46 b7 53 b4 86 3a bf e5 1b 8a 60 49 e3 1c 96 8f 81 c4 f6 0d 0c d5 bf bb ac 20 21 95 15 2f 03 36 0a 9c b9 16 0e 5f 33 3a 7e 13 ea 42 ef de e2 6e c2 65 76 1d 94 44 30 37 e3 d6 96 20 30 d3 f7 c2 db 5e 47 39 72 f8 4d 69 c9 e6 b0 d3 4e 8b 1d 2b f6 34 b6 99 fd 87 68 5c 8a 7e 55 77 d5 85 64 13 80 1d 5c af 95 39 3b 0a 3c 14 5d 5f 83 e2 24 c8 a1 84 26 8c fc bb 15 3b 1c 82 0c 00 cb 25 2a 24 6d 33 ce f8 96 75 02 0f d4 a6 02 c8 68 d0 4b 96 23 94 a8 d8 23 e2 4a 36 64 84 bb e0 43 bc fa 62 55 48 4b ef b0 b4 0d c1 f2 f3 e6 b9 08 48 96 45 31 e3 69 dd b8 54 79 19 cf 72 a6 09 89 01 ce 11 0a 4f 3d 51 69 14 68 24 dc bd 6e eb 26 d9 be 20 ca 93 09 1f b5 03 54 be 43 b8 1e 7f 02 6d 65 8d 14 76 68 be 5b 9e c9 a4 f0 77 67 85 b9 Data Ascii: o\|-8EjbFS:`I !/6_3:~BnevD07 0^G9rMiN+4h\~Uwd\9;<]_$&;%*$m3uhK##J6dCbUHKHE1iTyrO=Qih$n& TCmevh[wg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49944	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:40 UTC	1092	OUT	GET /G6jK9S77RN0laf9_6nhDo3AVxbRP9SgMmt8ZmQjKQ2hibn9xhOY-W5YFn_7stJD1CA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:40 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2606 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:57:58 GMT Expires: Fri, 25 Oct 2024 20:57:58 GMT Cache-Control: public, max-age=86400, no-transform Age: 6762 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:40 UTC	845	IN	Data Raw: 52 49 46 46 26 0a 00 00 57 45 42 50 56 50 38 4c 1a 0a 00 00 2f ff c0 3f 00 85 37 6c db 96 a9 cd f6 ef b8 dd dd dd dd dd 5d 22 f7 5d f7 16 88 40 dd dd 25 7a df 44 aa 11 da 38 52 97 d8 0d 4c c2 18 1e b4 32 f7 90 4c 4b 13 24 c6 b0 04 cd 24 99 c0 b2 7f 88 9c c7 79 5c e7 71 f2 31 11 fd 9f 00 3a e5 ff 53 72 bf f2 e9 70 4d 4b e7 00 0c 87 f7 26 1a a3 15 85 67 4f 6c 7e b2 30 d6 96 86 fd ce ba ca ab 27 22 b7 c6 12 10 3d da bc e1 b7 13 88 dc 50 27 82 d9 fe dc 5b 26 02 77 36 66 11 e4 fd 5b 7e e8 77 e7 d5 67 11 fc 81 0d 9f f2 b6 b2 7e b8 f2 8d c5 5e 16 85 53 b3 9b 7d 6b 52 12 ee 6d 78 ab 47 fd 39 09 37 b7 7a 53 3d dc 1d f2 a2 32 b8 7d 89 f7 e4 a7 e1 fa ee e9 7e 53 05 0d 43 1e 73 da 28 74 1c ca f3 95 d5 d0 73 b5 9f a4 a0 e9 4e 0f f9 dc 10 04 1f 4e 36 46 c2 eb ee 9c 39 Data Ascii: RIFF&WEBPVP8L/?7l]"]@%zD8RL2LK$$y\q1:SrpMK&gOl~0'"=P'[&w6f[~wg~^S}kRmxG97zS=2}~SCs(tsNN6F9
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 2f 20 87 df ca 30 d7 ce cd b0 39 de 5c 71 f7 ef e9 f8 5f b9 69 7d 6d bf 0d d8 aa 3e 89 83 35 0f 91 e3 a3 0c 64 f7 96 0c 5b b6 e2 d7 c4 b8 fa 35 be 66 4b 39 c7 19 df 56 46 0a 76 9a a5 2c 11 c5 79 ba 67 13 fb 26 2e 4c b2 43 40 a2 f2 37 a4 23 cc 63 d6 e8 aa 8c d9 c8 dd 64 b5 8d 29 69 e9 97 a4 e6 3f 18 0a ec 11 b5 9b 94 93 ed 2b 78 30 c9 8e a2 cf 32 90 c8 05 27 77 1d 09 1c 66 49 7a 42 9d 59 a7 0c a2 9d 27 ca 9c 46 22 87 39 e0 09 9d 66 71 29 b4 e0 04 24 75 8c 23 e2 07 30 5f 24 86 a8 eb 98 1c 31 d3 39 b2 5e f0 36 06 92 bc 12 58 48 72 ab 18 30 d3 07 66 07 8b be f9 22 49 ce 30 34 fa 40 d4 ac 53 96 f0 07 18 b2 3e 50 6b 16 77 18 f5 9b e1 2c 0f e8 34 5b ef b2 32 86 90 07 8c 99 5d e3 32 62 48 78 00 cc c9 e9 db cc a0 df 87 95 79 88 e1 87 ea 5d 6b 36 e0 36 62 58 a1 de Data Ascii: / 09\q_i}m>5d[5fK9VFv,yg&.LC@7#cd)i?+x02'wfIzBY'F"9fq)$u#0_$19^6XHr0f"I04@S>Pkw,4[2]2bHxy]k66bX
2024-10-24 22:50:40 UTC	383	IN	Data Raw: 4a 11 13 56 ba 6d 18 bc a4 f5 3d 4c 68 73 d9 10 78 1f 52 8b b6 31 a1 cb 59 39 63 e0 ed 22 c5 87 99 90 c9 75 d3 7f c1 4d 9a ff 86 0b 58 ed a2 18 b8 17 a8 46 b7 b2 a1 c7 39 5f e8 03 77 1d 29 5f cc 06 6c 76 cb 6a b0 0f 92 fa 6d 7c c8 dc e2 8e bf f6 81 fd 08 79 60 8a 0f e8 be c6 11 d5 b0 98 e7 03 b4 df 02 d0 7d b5 03 ca 61 f3 1a f2 c3 03 36 80 81 e2 80 c5 60 b5 90 7c f1 80 15 00 ad e7 04 66 ce ff 61 77 31 f9 e3 3e 4b 40 b6 fa 92 00 5c 52 9b 85 e5 42 f2 c9 94 ad 63 db 4a df 25 69 45 43 16 d6 e7 92 5f b6 0b 00 30 de 16 bd 52 c0 45 eb 1b 46 21 31 8f 7c 73 95 88 e3 bf 51 1f 59 7b f3 8f 18 be 79 c1 e3 91 9a e4 21 08 cd 9c 4e fe 99 2f e7 24 33 7b f6 ed 48 a5 52 3b f6 0e 64 20 7d 90 fc 34 2d 2e c0 4d e4 ab 55 5a 2c 21 7f bd 2a a3 c1 e8 6f c9 6b e3 ee 0b 93 ef ce 1c Data Ascii: JVm=LhsxR1Y9c"uMXF9_w)_lvjm\|y`}a6`\|faw1>K@\RBcJ%iEC_0REF!1\|sQY{y!N/$3{HR;d }4-.MUZ,!*ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49945	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:40 UTC	1094	OUT	GET /6CFQQ0b9r5fzF1v6f0gIirWsOGL7sGWkJifuUQxxhbCMcBx5aSG_cNXpjDKDn5c1jwjq=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:40 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4570 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 18:56:53 GMT Expires: Fri, 25 Oct 2024 18:56:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 14027 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:40 UTC	844	IN	Data Raw: 52 49 46 46 d2 11 00 00 57 45 42 50 56 50 38 4c c6 11 00 00 2f ff c0 3f 00 55 61 95 b6 6f f9 2d 39 6f 55 4e 80 99 99 a1 a3 98 99 99 33 cc cc cc cc b3 ab 79 98 99 b1 a9 f6 da 38 cc cc cc cc cc b0 d7 ff 7d 7f ef f7 7e df 72 d3 c7 30 e8 d7 09 84 99 39 91 53 d9 6e d4 2f 9c 28 e6 e4 10 98 f3 0f 2a 66 56 51 9c a8 21 1d a6 23 98 48 66 4e 56 70 05 0f 21 27 f0 a8 51 01 d5 36 cc 71 b1 0c 2a 8a 99 19 f4 56 21 85 5b 05 25 c7 ee 76 ad 82 76 d7 3a 8a 26 37 3c a3 5b a1 8a 1d 85 c7 10 ea 51 5d 5f d7 ff 04 1a 1c a9 5f d5 b8 a5 46 4d ed e5 da 45 c6 e5 17 ce 90 ea 13 98 5a 07 30 e8 c3 9c 13 e8 aa ed c2 4c ed 52 d1 cc 9c 7c 87 d0 a0 c2 72 aa c2 51 e4 5a 06 34 47 ad 70 b2 3f db d5 af 0a c8 a8 89 6c 01 00 cc 46 b2 6d db bb 75 1b ec d6 dd 33 d6 b6 6d db b6 6d 1b 8f 67 db be 7b Data Ascii: RIFFWEBPVP8L/?Uao-9oUN3y8}~r09Sn/(fVQ!#HfNVp!'Q6qV![%vv:&7<[Q]__FMEZ0LR\|rQZ4Gp?lFmu3mmg{
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 98 18 c6 b2 f3 3d c5 8e 29 9c c8 c2 80 1e 10 c1 af 5f ea f6 7c e1 8d 75 88 d4 b8 c6 5b 52 47 86 ce 54 98 61 86 57 5e 65 24 96 9b 9b 16 d1 58 2f f2 6c 65 d0 16 22 80 01 b5 48 02 cb 6a 22 63 6a 4d 21 ec 7f 61 80 40 ca 4b 38 58 ae 5b ce 3d 08 6c de 4f f7 a2 1b d4 7e f7 46 bc 65 2f 74 27 64 2d d7 f9 0a 16 c6 10 a0 f0 8e 65 8b de 92 52 bb 31 21 89 be d5 20 98 eb d0 d0 83 cf db 74 85 d2 8e d6 5d c0 8b 68 28 10 d4 3c 2b 30 5b 3a 19 65 63 e0 92 fd 86 e4 2b 8d b5 b1 d5 cf cd fb 62 40 29 88 3e b1 81 53 83 1e a9 34 ef 9e 16 ec 73 0d b2 f4 a2 b8 49 06 d4 e7 d9 97 5e e4 82 9a 47 8c 0f 4e a1 ba 60 15 f6 b8 09 e5 6a c3 6d ef 5a a4 be df d7 7a 14 5a c2 c0 b5 3f 2c 1b 10 68 ea f4 96 e8 4f 0d cd fd 34 99 c3 4b d5 a0 29 6a de 14 d8 83 01 a5 cd 85 5d cc 0c ec d9 5b 94 9f ad Data Ascii: =)_\|u[RGTaW^e$X/le"Hj"cjM!a@K8X[=lO~Fe/t'd-eR1! t]h(<+0[:ec+b@)>S4sI^GN`jmZzZ?,hO4K)j][
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: e1 45 44 76 64 ab 2b 9f 1c 3e dc e2 b9 07 bb bf 57 e7 1d 1e 60 83 7c 75 62 f0 b3 89 a8 8e a4 f0 2c 27 2f 51 49 7f ab bc 66 81 f5 c8 c5 9d fa d0 85 0c 4e 2e 7f 71 62 40 4b b4 a2 04 0b cf dc 07 ba 03 52 4d 68 73 8f c2 96 32 76 a2 56 1c af 4e 96 5e 94 40 f3 0e f3 eb ec c2 f3 37 e3 52 75 d8 6c c7 09 76 27 76 b7 6b 53 f2 e0 80 73 1d ea 9d fc 21 d1 b8 17 fc 60 17 1e 83 b6 af 4a a5 b6 1b 63 03 16 b5 66 75 bf 2d 17 78 30 ee 60 f7 b7 4e ea c8 40 d4 f4 eb e1 69 ae 79 d6 9d 80 cd 7f 5c e1 fc 98 60 83 3c 80 ae 6a f0 4f 27 9d 69 26 6a cf c3 53 46 cf ba 92 6c 83 a5 96 64 82 ab f5 a0 96 3b a9 a3 99 28 96 e1 81 6f b3 5a 3d 22 c1 dc 07 7a 03 24 23 09 53 75 d8 cc 60 f5 ca 04 65 11 24 96 f4 79 57 9b cf b4 9a c1 dd d6 dd 21 9c 90 ce 14 65 8e fe 36 75 14 fb f3 e6 f0 a0 fa 40 Data Ascii: EDvd+>W`\|ub,'/QIfN.qb@KRMhs2vVN^@7Rulv'vkSs!`Jcfu-x0`N@iy\`<jO'i&jSFld;(oZ="z$#Su`e$yW!e6u@
2024-10-24 22:50:40 UTC	970	IN	Data Raw: b0 a7 72 bb 69 a0 37 02 df aa 7f a5 f6 1f 03 59 4e 5e f6 e9 c1 70 08 f6 14 0b 6e ad 9a 8a 7b d1 25 14 9e 61 52 07 97 b7 34 fe 11 c6 c9 fd 59 41 96 4b c1 9e 46 19 23 1d 74 f5 a1 06 df 3e cc 01 0a 66 cc 71 24 9f ca 8f fb cd c1 de e2 1e 34 2d f3 26 bf e4 c0 76 5b f1 84 30 33 a3 7c 30 0f 5a 17 5d e3 d2 c4 de d6 4a 4d cd d3 8a 57 45 a9 f6 57 8b fd e3 9a 4c d2 41 b4 4b 73 7e 03 01 7b 2c dd 68 4b 0f 5d 58 a3 c3 27 cc b7 bb 73 30 87 f1 e1 b1 7b c1 0c 79 a4 e9 08 b6 e6 81 a5 15 27 01 fb 6c 00 e6 30 9a 35 45 27 43 e1 53 37 82 1d a0 a8 87 23 e4 3b ee de cd c3 1e df a8 fe 09 d8 eb 28 63 a4 89 76 0e 36 f1 48 be df 6e 06 e1 4a 23 a4 79 f5 77 f5 c8 fb d4 a0 ca c6 18 65 c0 a8 82 81 ec b9 7c be a6 eb e9 e0 4d 84 da 77 23 08 15 31 f3 ab 02 d2 3c 8f fe 7e f0 b4 f8 67 75 34 Data Ascii: ri7YN^pn{%aR4YAKF#t>fq$4-&v[03\|0Z]JMWEWLAKs~{,hK]X's0{y'l05E'CS7#;(cv6HnJ#ywe\|Mw#1<~gu4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49946	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:40 UTC	1093	OUT	GET /-gmI1L0dHJnjIFqmSJZDeo-bTUx_eQV-64_s-9fsZ8KsK-k-3fV5kvh5_uGqqiBWtEk=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:40 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6990 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:32 GMT Expires: Fri, 25 Oct 2024 19:12:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13088 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:40 UTC	844	IN	Data Raw: 52 49 46 46 46 1b 00 00 57 45 42 50 56 50 38 4c 39 1b 00 00 2f ff c0 3f 00 55 87 e3 b6 8d 24 49 ca 3f ec ba 67 66 f7 1d 11 13 c0 9f ad 5e 88 e9 5e a9 57 e8 92 dd 23 30 f6 04 73 c0 b2 05 a6 a4 2b a6 94 6b 34 13 6d b8 c4 84 33 9d d0 9e b8 80 a8 66 a6 8c 83 02 02 ca 56 c9 ae 00 37 ed 1d 24 55 d9 b6 e4 50 f9 b7 ad 66 ff af 8e 72 14 96 cc 4c 96 99 99 99 99 99 99 99 99 99 99 99 99 99 99 99 99 99 f9 9e df ef f7 3f e7 fc cf 71 49 01 71 51 71 ac e2 46 a5 0d 4e fc 55 a1 71 51 d7 87 e3 a2 52 40 54 da 98 1e ae 8f 63 15 c7 8a 4f 1a 60 89 a3 e2 e2 99 c1 5f 35 05 4c 25 b9 3e cf 6d 61 ae 4a 01 d3 40 d4 b8 a0 e2 22 a2 a6 80 f1 23 e3 e3 6e 03 f1 71 23 03 cb 9e f7 56 b0 d4 c0 6d 60 6a 58 54 e3 46 ad fb 2d ef ba 7d a6 83 05 3f 6e 7c 9e a8 ed 82 99 99 77 1b 48 03 8b 6a 47 4d Data Ascii: RIFFFWEBPVP8L9/?U$I?gf^^W#0s+k4m3fV7$UPfrL?qIqQqFNUqQR@TcO`_5L%>maJ@"#nq#Vm`jXTF-}?n\|wHjGM
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 9e 2e 48 c1 10 32 11 98 ad 93 2c be f2 30 38 d9 df 32 ab 42 fe ce e5 d0 94 82 ff cd 28 fd d5 f0 b2 9f 0d a9 ec 76 1f 43 ca 79 3a f8 30 45 fe 98 cc a1 a9 1c 9a d5 d6 29 b7 a9 7b aa 9d 38 38 63 fa 97 05 fc 5b f4 8e a4 22 da 3a e5 ca a1 09 df ad ae a9 73 1d 15 ed ea 2a f3 85 a6 ce 72 df 9a 6b 3b 54 7a a7 0f 87 66 72 68 46 ff 4b 91 3d 1f 37 f5 4a ad 54 4c ef c4 00 20 f7 74 dd 2c 3f 59 c2 c7 31 c7 14 90 72 c8 6a 9b bb fc 95 43 f3 26 eb 47 39 33 e4 0c 9a e4 88 6d 11 3b 01 5e c1 c3 61 e5 3e 19 78 48 01 3d 6b df fa 26 c3 cc 30 a4 0f 54 30 58 6e 47 6c 87 0c b0 04 72 68 72 ed 95 ed 04 bc d4 59 de 2e 84 b3 9b 65 dc e1 b4 da 53 c6 20 29 18 c4 16 48 fa 40 79 70 57 df 60 ee 1e 02 7e e6 a9 ec 76 6f 0e cd 9d 43 4f c2 4e 40 1c ac 1d 4c 9d 3f b3 40 fc 44 8c 43 63 6a ab 6a Data Ascii: .H2,082B(vCy:0E){88c[":s*rk;TzfrhFK=7JTL t,?Y1rjC&G93m;^a>xH=k&0T0XnGlrhrY.eS )H@ypW`~voCON@L?@DCcjj
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: a2 88 51 7e cc e4 00 68 00 60 46 e1 ff 81 0c 8d b8 23 4f 6f 39 f3 22 81 58 63 71 20 8c d2 cd d0 ef 56 8a 12 49 99 bd 98 3a 0b bd d1 66 9e 87 41 44 c7 4d ea 50 41 c4 a8 7d 7c 97 db 31 60 2c 6d 31 b9 d1 46 b6 26 14 88 97 5d 62 76 82 7d ed a4 28 b1 d4 74 c9 63 33 14 af 4d 17 84 41 44 b0 99 7d 44 9c fa b1 e6 c1 1a b3 b3 41 cc 31 07 1b 5c 61 b4 85 34 25 99 4a e6 59 6f 86 b0 d6 3b 62 b3 f1 2a 6f 66 82 e4 5d 23 5c 42 04 11 af 7c 94 23 c4 db 93 a9 09 c7 1f 0b 5c 21 5c 3f 7d 75 4e 0b 4a 36 a5 76 a2 eb 2c f4 f1 34 7d ed 21 ba 14 ab ea 46 39 14 66 f9 25 d5 11 83 03 e2 f2 4a 16 67 0c 6b c1 1e b3 b7 c3 f5 46 5e 4c 53 f2 a9 3d c7 db cb 94 60 ee 1e 93 f5 d3 36 9a 53 0e b2 ea 12 11 24 e2 96 3f f2 7e f1 e6 a4 4a 55 c7 90 5a d9 4a 51 20 6e 7e 11 d8 c6 35 15 45 54 32 6f 7f Data Ascii: Q~h`F#Oo9"Xcq VI:fADMPA}\|1`,m1F&]bv}(tc3MAD}DA1\a4%JYo;b*of]#\B\|#\!\?}uNJ6v,4}!F9f%JgkF^LS=`6S$?~JUZJQ n~5ET2o
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 8b 50 43 58 0a b5 91 f4 5f b7 c9 19 21 82 80 ac 6b 44 10 26 67 8c d3 d6 97 83 be 28 b2 86 0e a7 8c 8c 48 9a 0a d5 46 04 6c d5 e5 31 15 dc 9f 58 92 de 4a 6e 29 09 24 90 9a 15 70 41 4c d7 70 ad c8 47 f8 7f 66 61 a8 23 11 c0 15 22 09 66 31 b6 62 44 e0 15 47 8c ce 90 c2 cd 00 4b 53 48 9b fc 7a 97 c8 40 c2 47 32 ce 8f 17 13 31 ad ee 72 2a 0d e5 7d bf d4 11 42 b9 e5 1b 11 58 f2 e2 91 96 68 4d 60 e5 ba 14 65 ec 89 f1 1e b8 14 0c 5e 3d 3d 16 f4 3d 0d 88 09 ac 4e 26 a2 7d 2f b5 90 58 bb d4 0f 52 b7 97 20 7e 5c 88 7a 40 b1 b1 9b 7d 70 ed aa ea 1e 01 b9 3d 4e 03 da 42 a4 2f 44 b2 dd c4 08 f8 c5 cc 23 75 a6 be b3 ac 82 9d 91 e6 ed 1e 41 51 85 8b ca 70 01 9b aa 57 04 e4 9f ac 06 24 21 0c 16 9b d1 89 6f 84 6f 97 41 d6 6b 4c 88 ae 80 a4 d8 63 95 0a a3 db 3d d9 da 20 5e Data Ascii: PCX_!kD&g(HFl1XJn)$pALpGfa#"f1bDGKSHz@G21r*}BXhM`e^===N&}/XR ~\z@}p=NB/D#uAQpW$!ooAkLc= ^
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: a0 d5 40 16 62 66 ed 96 15 01 92 ef 04 ea 03 14 9e 03 3f 2d a5 db 19 66 f8 b9 c9 8f 20 d0 0a 1f c1 ff d9 68 8f eb 5c c4 5a e9 57 64 9b 20 1b c4 42 84 d7 ec b2 32 af 04 49 de 1b 50 13 f9 bf 57 b6 72 58 de 48 e2 0b 29 18 a2 ee 75 23 03 44 77 10 95 c1 9a 29 48 86 73 cd 30 9a 85 b0 15 9e 91 13 cb 20 a4 1d fb e1 df a1 04 47 52 a4 85 82 ac ae a4 07 ea bf b5 82 8f 87 3d 15 2b 39 d3 d0 a4 1f 60 e9 4b 88 6d 40 9e 0f e1 c8 bd 25 27 16 c2 48 f9 bb 63 3f a3 26 73 11 b1 29 f0 90 17 38 54 63 4c 4d 24 d0 73 f9 ab 96 c4 c1 ce 8f 74 9f a5 eb c7 c4 ba f6 0c e5 f8 67 20 a6 1d a7 83 48 18 ff 41 06 a7 4b f0 ea 95 fb 90 22 e4 e5 11 df 83 09 7b ca 03 8e a0 53 12 d8 db ae f9 34 39 05 0c d0 13 f8 ec 2c 3e f4 6d 26 9f cc 40 a4 0a 33 87 b6 0c 86 93 96 18 42 7c 99 a2 25 07 0e bc 3e Data Ascii: @bf?-f h\ZWd B2IPWrXH)u#Dw)Hs0 GR=+9`Km@%'Hc?&s)8TcLM$stg HAK"{S49,>m&@3B\|%>
2024-10-24 22:50:40 UTC	634	IN	Data Raw: f3 80 39 cd b9 7f cc 6c 38 bb 02 60 90 d9 2f 67 99 9c 64 33 ff 94 c2 09 99 21 8e dc 4f 42 4e b2 99 83 89 67 66 3c 68 fb b6 9c 58 6e be 6d 28 13 fe 10 64 c3 8a 96 31 db 36 a1 4b 82 97 51 e2 58 3f 3f 33 6d 33 7a 02 78 19 c5 90 dc 17 cc af bb 83 d9 94 e6 00 b2 d1 ee fd 9f b9 75 10 b3 31 1d 3f 00 3a 72 c3 45 73 9b 5d 1b cf 78 c9 99 8e 5c e7 46 35 8f 13 e7 3b 6a 9b 75 0b 0b 5b 85 dd b0 e6 b1 15 be 44 6f b3 3a 1c ac c1 96 4e a3 98 d6 cc 38 7a 52 e3 c8 73 7f 97 36 31 ae bf 26 de 1c 07 de 3b bf 2f 9a 47 1b d3 a4 e2 8f d4 a1 f1 cb c8 89 45 e6 d0 46 f6 75 e2 cd 51 7b 96 d9 68 b7 cc 43 6a a6 9f 23 f7 1d 7a 1b d5 b4 b2 db c4 b1 01 7e 73 93 30 e7 ac 8e e1 1f cc e1 37 f3 bf 60 b6 60 40 5a 4a 7d 2c d1 f3 65 e4 c4 5c 6c c2 b7 b3 fa e4 a1 b7 b9 7d 3b 43 52 79 95 46 95 5f Data Ascii: 9l8`/gd3!OBNgf<hXnm(d16KQX??3m3zxu1?:rEs]x\F5;ju[Do:N8zRs61&;/GEFuQ{hCj#z~s07``@ZJ},e\l};CRyF_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49949	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:40 UTC	1093	OUT	GET /HW8aJVN5rdXLOWYaJiW67XekFeJLQ_UtRctTnosyizlbDcjp195fw6Sq6Z95bw_ramQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:40 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 11642 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:50:40 GMT Expires: Fri, 25 Oct 2024 22:50:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:40 UTC	847	IN	Data Raw: 52 49 46 46 72 2d 00 00 57 45 42 50 56 50 38 4c 66 2d 00 00 2f ff c0 3f 10 f5 86 23 b7 6d 03 49 d1 ff 7f 9d a4 ad 67 81 3d 47 c4 04 00 55 45 b4 52 95 aa 9f a3 b8 f4 96 73 89 0a a0 fa 0c 70 0e 7c d9 84 12 37 86 be 70 72 24 38 f0 de ce 6b b7 f9 ce 1b ae 95 d8 4a 97 97 9b e0 1b 68 64 9b 91 3f dc 18 f6 08 e0 c3 ff 7f b9 d3 66 bf b9 7b dd 27 58 84 3d ee 36 77 77 77 77 df ea ee 32 df ea 6e e3 69 71 89 e0 0e c1 ea ee ee c5 25 f0 fd e3 dc 47 72 e4 77 fe bd 29 b5 b0 ec ce ba d0 9e 24 ed e8 f3 09 29 9c 86 8b c3 84 b0 de e9 b2 50 49 fb 0b ed 03 4d 43 7b b8 be 75 d6 1c 78 28 45 7a 3f a9 8e e2 01 db b6 e3 91 b4 6d db b6 e3 ba ae a0 aa 6d a3 d4 a8 9a 99 7b 6c db b6 6d db b6 ed 99 42 50 a9 1e db ed 94 ba 72 db b6 6d 7b b7 6d eb 4d a3 6d db fa 3c 80 ca b9 0c c2 ae 3a 73 Data Ascii: RIFFr-WEBPVP8Lf-/?#mIg=GUERsp\|7pr$8kJhd?f{'X=6wwww2niq%Grw)$)PIMC{ux(Ez?mm{lmBPrm{mMm<:s
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: f9 d2 90 a3 2e 8d 38 f2 f2 98 c7 8f ba 34 ea e8 4b 22 46 8f b6 3a b6 2c 5d 9b 6e 8d 1e 3d da ba f6 da 0e 6d 2b 96 75 37 4b 2d 61 89 50 e2 79 13 38 7c f4 60 d7 85 4c 69 ca 3e dd 02 0b 43 f1 01 d3 7c 52 50 f6 ae 94 b0 0f 1f 9c 13 2e 08 cd 9e 55 88 d9 b1 12 5d 26 07 2e a8 30 9c a1 2a eb b8 4d 6c 3b 52 53 e4 e6 22 76 79 20 14 ea 0c 96 16 82 b8 60 1e e5 e5 5a e5 e5 12 c4 4c b8 23 d4 78 ce 50 cf ab aa 16 b3 83 3e 59 20 51 47 bb b0 6b 5a 61 c3 39 e0 b0 8f f4 0d cb 9e 07 e4 c6 10 51 de 12 8a 38 80 78 2f 43 5e 5e b0 a0 9c 39 87 39 47 83 39 47 86 98 09 db 84 42 cf 28 05 4a 1b 61 1c 1c 71 e0 27 31 22 2b 00 5f 69 e2 ac 3e b0 b4 db 38 7a 54 79 00 47 7b 02 7b 2c 40 ca 9d 42 b7 bc 0e 1f cc 13 26 3d a1 58 c3 75 01 d7 d2 c2 d7 03 63 57 64 c4 1d 15 b6 33 7a d2 e2 e0 49 55 Data Ascii: .84K"F:,]n=m+u7K-aPy8\|`Li>C\|RP.U]&.0*Ml;RS"vy `ZL#xP>Y QGkZa9Q8x/C^^99G9GB(Jaq'1"+_i>8zTyG{{,@B&=XucWd3zIU
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: d1 f8 4a bb a5 4b 92 c6 70 55 9a b7 7a 6b 02 f0 95 6c 2e 44 03 f0 17 3e 8e 74 10 6b f7 97 3a 62 28 ae 3f e1 86 14 26 15 ab bb 12 75 47 1e 09 bb 0f 3c 3a 68 33 75 6d a4 3b 54 50 7e 2a 80 4f b2 05 fc 64 00 df 0c cd 2e c0 7b 72 02 ed 28 e0 6e 60 36 ff b4 22 fe 8d 86 84 4d 9d 69 51 95 b4 c4 4c f3 aa 98 d2 46 4c df 46 f0 ce 3b ef 0c 5e 9d 76 75 f0 4e d1 b8 d3 a5 6d 45 d6 08 77 2e ea e0 55 d8 17 27 6e 47 c4 de b4 48 04 7e 30 44 1c 01 48 95 6f 4b 75 5c 8b 98 63 55 50 e8 39 4a 1e c5 06 91 e1 b4 af 27 27 4e ce b8 ab 11 b6 15 5a 6c 0a c8 e4 14 02 9e 4c 1e 88 fd b2 04 f7 ab bc 48 ae f8 27 8d ba 8e 83 ff 31 f8 63 02 fe 18 7b 05 7e 1f fb 71 b2 f8 fc 4f 46 8c 18 31 62 f2 e4 c9 8f 8c 18 21 1a ec b3 68 45 d6 98 30 e6 92 2e 9c af 37 de f3 cc ce ca c2 91 c8 b0 68 4b a4 4d Data Ascii: JKpUzkl.D>tk:b(?&uG<:h3um;TP~*Od.{r(n`6"MiQLFLF;^vuNmEw.U'nGH~0DHoKu\cUP9J''NZlLH'1c{~qOF1b!hE0.7hKM
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: af 23 bf 11 f9 17 2d c8 2f 15 90 a7 2a e4 67 2c df 7c f3 cd eb 6e 5a 3b 63 a2 f6 19 13 27 3e eb bd bf c9 1e 61 d9 4e 29 50 8e 51 3b 21 55 ab 14 a8 43 2c 2d 04 11 17 20 e2 02 44 5c 80 88 0b 10 71 01 22 2e 88 72 08 51 2d 8c de 09 0f 1a a5 40 4d 14 c7 84 62 9b 6b 0e 44 fb 2b 4e 8e ba f2 a4 88 ab 0e 84 2d 5d ba f4 ca 93 a2 ee 8b c7 4d 5c 92 3f 42 cc e6 5f 1e df fe 17 6b 10 ab 18 37 6e dc db f0 59 1c 7c 56 06 9f e5 bc 0d 9f a5 c1 67 25 f0 59 9e 58 b9 24 56 ae 94 89 95 af 8d bb ee 6a b1 f2 0d fd ba b2 c0 b8 f4 b2 91 62 e5 82 58 f9 98 58 f9 56 60 6e 7a 59 60 dc 75 57 8f 9c 3b b7 6c e4 5d e9 65 23 c5 ca 48 cf 1f 99 3e bc 6c a4 f8 88 9e c5 42 fa 08 07 02 11 5d af b1 d7 b3 ec 6a af bc 17 53 7b 27 a6 ff 2d a5 94 79 55 62 59 16 7c 65 59 16 3d 5e 5e fe b8 ae ab f4 f4 Data Ascii: #-/*g,\|nZ;c'>aN)PQ;!UC,- D\q".rQ-@MbkD+N-]M\?B_k7nY\|Vg%YX$VjbXXV`nzY`uW;l]e#H>lB]jS{'-yUbY\|eY=^^
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 2c 96 4d 03 9f 0b b6 83 96 c6 21 e0 93 08 2b 2f 79 7c fb 5d b5 ba 11 55 7e 23 aa bc 56 ad 72 a7 5a 65 2b 50 56 50 10 28 ab 56 b9 55 ad d2 38 b7 ac 6a f5 4e 41 a0 6c 6a 41 a0 ac a4 20 70 ee c8 b2 aa d5 5b 55 ab 1f 54 ad 7e 54 10 28 2b 28 09 94 95 94 04 a2 ca 37 4a a6 06 ca 0a ce 0b 94 15 94 04 ca ce 10 1b 3e f7 91 ab 9f 23 70 e7 48 e0 8b 8f 5d 90 98 a6 49 1e 90 b3 d1 07 2d 9d 25 1c 75 f5 e1 95 67 a2 95 61 62 09 13 32 9f 3a 7d e5 c9 e3 0b 38 fa 84 62 b1 68 1a 22 03 00 de 9e 50 47 f6 17 9f 43 38 16 5f f8 27 2e c6 be 23 1a 5f 13 8d ef 89 c6 cf 44 e3 47 a2 f1 15 d1 f8 81 68 fc 24 73 6c 6a 30 75 6c a6 18 fb c9 94 b1 a9 7f c8 1c 2b c6 be 37 65 ca 9f c6 fe 29 35 28 c6 7e 25 c6 7e 23 c6 7e 34 36 35 18 1c 9b 1a 0c 8e 15 8d ef 04 83 62 c3 57 c4 d8 0f 82 41 31 f6 b5 Data Ascii: ,M!+/y\|]U~#VrZe+PVP(VU8jNAljA p[UT~T(+(7J>#pH]I-%ugab2:}8bh"PGC8_'.#_DGh$slj0ul+7e)5(~%~#~465bWA1
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: f8 e6 e2 3d 11 ec c5 b7 17 e0 44 31 31 95 29 1b 0c 88 49 2c 93 0b c4 83 37 6b 29 40 92 61 40 5f 9b 98 ca a4 ef cd 64 a3 0d 60 89 84 22 f4 00 6f 76 08 00 cd c0 80 1e 3d 31 95 49 ab 2e e4 22 19 6a 01 b0 4c 1a cf ce 17 ff 98 c0 de 7c 28 b0 a1 18 28 a5 14 dd 7a 24 15 e7 0a 00 44 21 96 cd 02 09 e2 d5 18 cf ce 45 74 16 76 a8 31 a2 23 5b 36 26 5d dc a1 2f 8d e4 61 15 00 80 7f fd e1 6c c9 7c 81 7d c1 0b 1d 05 f5 a0 a1 71 9c d8 79 4b 5a 3c 35 5f c0 86 7e 3c a3 5a 2f 6c 2a 6d 33 42 af f4 e8 b7 95 1c ac 08 00 7e 72 ee 59 48 b4 b0 50 b1 00 7b df 1f 08 00 fc 44 b4 36 10 a0 a7 30 d3 3f a0 4b 3a a6 49 de b3 6f 9a 74 ff 99 14 7c 1e 00 1c dc 7a 15 3a 69 fa 9e 68 05 3b 82 f7 b9 11 45 0f 16 15 21 4e 34 a6 03 1b 0a 33 33 fd 0f fa e4 8a 36 3b 30 35 4c da ed 80 36 8c e8 ff b0 Data Ascii: =D11)I,7k)@a@_d`"ov=1I."jL\|((z$D!Etv1#[6&]/al\|}qyKZ<5_~<Z/l*m3B~rYHP{D60?K:Iot\|z:ih;E!N4336;05L6
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 92 f7 c8 2b 31 8f c5 9a 0b 8c f1 52 5d 05 4b 64 81 e5 23 58 66 27 08 40 83 fd aa 0a 45 b6 1a 1f 3a 13 ed 60 79 f1 4e db 09 96 4e 03 5f 8f 60 a9 4d 04 e0 c0 f6 1e b9 a7 14 79 22 16 70 3b 7a 83 db 54 f7 d1 29 f2 ee 00 43 b1 53 04 cb ed 8e 00 f4 2d ec 85 95 22 3b 75 4f 44 b4 81 6d c4 3d c6 ed 0e 0b 7f e1 97 9a 06 44 86 28 16 58 c0 92 3b 1e e8 9f 3b 08 2b a5 92 d3 5e f1 92 69 01 b7 98 8f 6d 56 5f 74 10 60 0a de 11 f1 7f 2c bb 0d 01 38 66 ce 11 b9 a7 94 22 4f 3e f5 5a f5 d4 f9 2b 28 75 87 2d 61 e5 1d 60 3e 1f 5c 05 2c 96 15 40 5d 61 f9 6d 0c 40 db 6d 2b f2 40 29 55 d1 74 d7 91 98 04 e2 c0 0d 32 c0 6a d2 2e d0 38 40 fb 1b 1b 08 70 5f 91 48 d9 4a 86 b3 04 1f 01 c0 67 9e 86 3c 53 4a a9 2b 80 7f 02 37 00 7a 49 e1 61 5c 00 8e 83 76 c6 ba 11 00 16 cd 02 58 2c 09 ec Data Ascii: +1R]Kd#Xf'@E:`yNN_`My"p;zT)CS-";uODm=D(X;;+^imV_t`,8f"O>Z+(u-a`>\,@]am@m+@)Ut2j.8@p_HJg<SJ+7zIa\vX,
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: f5 be 6e 5a 13 e9 9d 9f 6d 6e 91 0f 57 85 10 f2 1a 80 8b ae 82 62 66 74 cc 81 52 03 93 33 60 21 60 df be 26 98 49 8d 3f 9a 0c 4a fb 20 04 ac 21 cf eb 00 b0 17 b8 66 3f 90 31 7d 63 92 47 de cb a8 79 e8 0c a8 07 3e ee 3a c8 e5 42 7d 60 7b 05 be 02 50 d0 bb ce 20 00 0d c1 35 b8 09 2b 45 f6 00 b0 8f 7f 1e 2e 72 73 0a 0c f1 c1 68 08 2d 2f e9 c7 15 7d 7b 46 7f 86 99 4f 01 60 27 70 d5 28 23 1a 1c e4 a9 8a 2e 9b 02 ac 07 be 4e c0 8b 66 2f 02 0a 7c 75 40 ee e9 f7 15 3d 74 44 ee e4 e5 e5 d1 c4 07 f4 f5 09 e7 02 af 03 97 7c 02 dd 8d 68 cb 3d a5 ee 78 f2 3f 2a e0 78 f0 79 37 c3 78 b3 e8 10 d6 07 11 e1 0f 77 b4 e2 22 cf 54 b6 79 d4 dd 63 00 2e 39 13 de 34 a1 af 8e f2 14 79 52 f7 40 80 6f 01 fb fc 6a c0 43 46 6d a1 ba 0f fa c0 00 57 74 65 27 4f d9 cd a3 bf b0 cc 94 c2 Data Ascii: nZmnWbftR3`!`&I?J !f?1}cGy>:B}`{P 5+E.rsh-/}{FO`'p(#.Nf/\|u@=tD\|h=x?*xy7xw"Tyc.94yR@ojCFmWte'O
2024-10-24 22:50:40 UTC	1149	IN	Data Raw: f0 91 c1 2f 9c 20 af 00 c4 19 86 65 a4 64 61 5d e3 60 61 99 cd ae 25 0d c5 11 c3 6a 65 94 bc 24 02 00 56 84 7d c1 09 06 5e 0e 0e d0 af 2a c7 c8 93 66 bb 54 c0 27 a5 a5 55 82 a4 a4 55 53 e6 0d 02 96 db dc ae 52 33 22 2e c2 01 c3 30 92 64 67 10 a0 19 07 c7 83 43 6f 07 20 d7 1e fd 05 72 c7 91 f0 09 33 46 00 0a 13 25 05 ac 5a 11 2d 8d 49 2c bf dd a1 b5 4c 74 28 5e 9a 48 52 c4 8f e5 99 02 db e5 60 7c 12 fc ca 4e 0b 00 12 c1 1e fd 17 e5 20 b9 33 fa 35 ef f7 80 b5 a1 c4 70 7d 1d b9 fd 44 61 39 3e 99 ca 1a ec 80 61 58 cd a5 53 c4 ce f2 56 81 dd d7 c0 ca b0 13 24 40 13 18 5a 03 80 7f 07 7b 1c b1 67 92 83 5d 8e 19 01 2f 35 ce b0 5c 76 51 bc 71 2c b0 3c 9f 00 71 52 3b b0 ec 19 86 d5 58 e6 8d dd 4c de 44 a5 e1 e8 11 60 8f ba 8f ec 91 bd 3d 36 9e 00 68 18 61 b8 d8 aa Data Ascii: / eda]`a%je$V}^*fT'UUSR3".0dgCo r3F%Z-I,Lt(^HR`\|N 35p}Da9>aXSV$@Z{g]/5\vQq,<qR;XLD`=6ha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49947	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:40 UTC	524	OUT	GET /0oO5sAneb9lJP6l8c6DH4aj6f85qNpplQVHmPmbbBxAukDnlO7DarDW0b-kEIHa8SQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:40 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3700 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:21:31 GMT Expires: Fri, 25 Oct 2024 20:21:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 8949 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:40 UTC	845	IN	Data Raw: 52 49 46 46 6c 0e 00 00 57 45 42 50 56 50 38 4c 5f 0e 00 00 2f ff c0 3f 00 2a 3b d2 b6 2d 97 dc ac c2 a1 57 e0 45 88 35 cc cc 8c 62 66 66 66 66 66 66 66 66 66 66 66 66 75 4f cf f9 e0 ff 22 ab 28 36 75 64 a6 63 9a dc ee ae d9 80 e0 08 52 39 c7 48 d5 76 aa b2 b0 53 43 ca cc f6 b8 77 20 77 4d 7b 05 24 d8 80 61 96 d0 e5 94 e9 2c 62 cc cc 5d 62 a5 ae 2e e5 66 66 8a 94 1b 53 47 38 27 15 64 9a 63 d8 80 ab 23 33 db 2b c0 8e cc 6c af 80 77 80 fd a7 2a 87 53 6d ca 05 59 97 22 33 33 33 46 cc 0c 9f 57 40 3d 27 35 c3 a9 5e 83 79 6a 14 39 9d cc 98 32 0b 7a 03 2a fd f6 16 ba e6 98 99 ba ca cc ec c9 cc 76 36 0b 30 bd a6 8c a1 73 d1 89 cc 7c dc 66 0a 27 33 d3 02 bc 03 88 01 00 10 4c 76 8a 6d 3b db b6 6d db b6 6d db b6 6d db b6 ed 14 b6 6d db fc ff 6d ed ec 34 69 fb 3f 01 Data Ascii: RIFFlWEBPVP8L_/?;-WE5bffffffffffffuO"(6udcR9HvSCw wM{$a,b]b.ffSG8'dc#3+lwSmY"333FW@='5^yj92z*v60s\|f'3Lvm;mmmmm4i?
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: eb 99 e0 e0 26 09 5b 14 55 1a 02 f3 b1 96 96 1c 0a 04 bd 87 e7 57 5d 5d 04 e6 f1 dc 51 d4 28 60 ba d8 da d2 e4 54 f7 f9 f7 41 f8 1b 19 ad 88 f2 b4 11 2c 31 7b 0b 01 36 ec eb ef 47 90 a7 5e a8 96 f3 18 46 80 36 77 66 7a 81 3a 77 ad ad 05 cc 58 6e ae bb 09 92 2a 2b 23 05 86 0c 2f 47 bd 10 65 82 41 a7 97 cb 12 77 4d 2c 40 a1 a5 51 59 69 00 53 96 99 ee 6a c1 b1 0c 25 46 60 4b f7 00 6c 48 42 93 64 38 c6 80 a6 a6 3b 9d c0 78 17 1f 6b c0 9c 79 b9 ea 84 c2 72 ad f3 b3 47 37 0f cf 07 0e 82 12 4a 12 35 36 26 30 68 75 75 69 2d 20 96 db 03 26 0d 23 49 4b e1 08 c4 87 e1 d8 64 15 09 04 43 95 bd b9 00 a3 e6 ee a8 a2 50 f8 24 a2 f3 eb c7 2a ff f7 45 81 40 6c 6c f3 c0 ac a5 26 b9 b7 30 cc a3 9b fb c7 2e e7 3f 9b 20 c8 d3 00 c3 56 58 e8 ce 42 60 e1 ce 32 ee 3e f0 10 00 79 Data Ascii: &[UW]]Q(`TA,1{6G^F6wfz:wXn+#/GeAwM,@QYiSj%F`KlHBd8;xkyrG7J56&0huui- &#IKdCP$E@ll&0.? VXB`2>y
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 5d 0b cd d9 7a fd fa d8 95 95 e1 1b 23 cd b9 ca ca c0 0e 56 91 0e 85 db a2 01 c3 1a 1b f3 08 28 8e 50 73 73 02 f6 35 35 87 9c 34 d7 ad e2 07 23 e9 64 a7 3f 6a 6f 5f 1f 07 c8 4c 57 54 b2 53 cd 06 f8 df ca 95 b4 73 37 39 d3 04 78 05 e6 52 2f b3 81 db 3f 5e c0 72 d3 19 23 21 c9 2c 63 14 ee 42 c0 9f 0d a4 29 f6 41 00 74 78 3a 99 a0 21 c9 28 75 bd fd 0d 98 be f8 9e b2 ca 00 86 17 03 81 ef 9f 9c b4 1d b5 be 35 24 40 bb 07 b3 6a 73 99 f8 24 a3 96 96 02 6c 37 b0 6a 49 16 d2 c0 8d 4f 34 90 b8 85 1d 91 e6 b9 2c 22 a0 93 8b 8d aa 2a ce 71 a7 d9 6e 33 b3 17 30 5e d6 3c bc e3 6e b9 fe e8 b8 2b 10 d9 c1 d1 26 20 cd 21 1e 19 e0 be 04 1f 44 e8 4c a6 0c c8 87 bc dc 34 2d 60 3d 6e 91 61 ea a4 32 99 e8 74 ec 9e de 3f 90 79 10 3b d2 cc d2 12 02 d0 e9 c5 16 11 62 3e 08 b8 bd Data Ascii: ]z#V(Pss554#d?jo_LWTSs79xR/?^r#!,cB)Atx:!(u5$@js$l7jIO4,"*qn30^<n+& !DL4-`=na2t?y;b>
2024-10-24 22:50:40 UTC	99	IN	Data Raw: c5 a9 f0 60 d5 51 8a 2f 6e 4d 71 9a f6 2a 03 1b 44 ce 98 fa 50 52 4c ba ad 51 52 19 79 a5 96 53 db 37 15 43 1b 99 e0 fa 27 d1 7a 73 26 15 ed a7 cf db 55 0f b7 b3 a5 7c 82 d3 5b 0a c4 c3 14 13 94 9f 17 41 05 a8 55 4b 9c 5d c5 d3 05 e0 22 01 a7 b9 64 37 aa 5a e2 fd fb bf 7f ff f7 ef ff fe 9e 06 00 Data Ascii: `Q/nMq*DPRLQRyS7C'zs&U\|[AUK]"d7Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49948	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:40 UTC	530	OUT	GET /TlxMMd6qkRy3sdtiCUzlVNjC8zLkbG-Qeqy_Wynv9CkXZ00VMvaJslQRdhncBgCJ0qg=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:40 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 203748 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:10:10 GMT Expires: Fri, 25 Oct 2024 21:10:10 GMT Cache-Control: public, max-age=86400, no-transform Age: 6030 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:40 UTC	843	IN	Data Raw: 52 49 46 46 dc 1b 03 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 87 02 00 6b 01 00 56 50 38 4c 93 1b 03 00 2f 87 c2 5a 00 8d 40 6c db 46 90 04 67 37 f1 ed f9 d5 7f c1 99 bd 6f 21 a2 ff 13 50 ba 6f c9 9f 19 b6 f9 28 c9 15 00 b9 bf f6 a5 4b 97 ae e7 d1 7d 97 7e 8e 94 e8 f7 92 ae 6b e6 fb ed 6e db fd 22 d9 7a 1f d9 6e db 96 47 ff 45 e2 07 8d cb 63 69 74 5d 25 a9 4e 89 2e 29 ba 7f d8 a5 aa fb ba 75 e4 55 a1 2a c5 59 1a ed ba 4b 7a ae 4b 7b 0c 11 49 ec e4 04 b3 25 69 b4 6d 8d ad 9d 94 2b b1 40 7b 66 6c 5b 47 03 d8 16 22 49 2f 23 5a 48 33 9e b1 17 b6 0d c6 40 52 9f aa 45 37 80 3d db e6 68 e8 48 ca ab 6d 8a 93 57 f7 41 92 46 3b 4a 2a 91 a4 ce 02 bc 00 b4 63 76 28 25 01 64 cf 1c b0 07 24 29 81 ea 97 cf 70 a0 ec 99 f1 c1 91 12 76 1f 92 64 2a 91 a0 0a 60 c6 Data Ascii: RIFFWEBPVP8XkVP8L/Z@lFg7o!Po(K}~kn"znGEcit]%N.)uUYKzK{I%im+@{fl[G"I/#ZH3@RE7=hHmWAF;Jcv(%d$)pvd*`
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 4e 7b 29 05 cc 02 80 d6 c9 07 f5 fb 75 fd 7b 5d 7f 52 4c 26 30 b8 6c f1 76 3d 5b b6 54 f6 a1 c7 bb c2 22 e4 58 48 9a 6b d8 57 ba 50 a9 ae eb 35 3b 73 75 fd 33 68 4b 38 e3 13 67 ea cf 5b 18 1f a6 ab 66 23 ce 37 ed d5 d9 74 f2 be 75 8f 3b 8f 7a 0d 9d 27 7e 3c 12 1f 42 48 ce af 9c 43 2a f5 a2 e9 49 85 80 b9 78 83 ab 34 5d 13 c6 a6 e5 7e 1c ac b6 5a 16 93 d9 94 7a d2 eb 17 6b 2f 81 ec 9c d7 4d ff dd 38 8e 2d b2 30 ac 0c 39 d2 8c b0 57 9a 52 a9 ab 25 34 3d 20 84 ee fc 01 74 e8 35 24 c2 93 9a 35 2b f5 a4 43 9e ed d5 09 21 c7 c2 e2 0f 5f b6 b2 68 e8 1c 27 39 93 b3 65 e7 8c 74 17 c8 8e 07 e9 b4 b7 be a9 d4 0b 5e 30 51 fa 4c de 88 fc f7 84 90 ee d2 a4 f2 7c 35 4b 3f 12 10 56 f7 0c 62 e5 38 91 6c 3e ec ff 71 7d 75 2b e4 95 65 6f da 6b af bd 52 77 6a 36 cf 66 b6 b2 Data Ascii: N{)u{]RL&0lv=[T"XHkWP5;su3hK8g[f#7tu;z'~<BHC*Ix4]~Zzk/M8-09WR%4= t5$5+C!_h'9et^0QL\|5K?Vb8l>q}u+eokRwj6f
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: ff 53 97 30 41 df b2 6d db 6e 5b db 56 ce a5 b6 0e 50 94 e7 e5 ff bf f2 66 5b 04 d0 5b 2b 11 be 25 49 b2 24 49 b2 2d 24 35 8f cc aa ee 5e d7 ff ff c2 7d bf cd 74 65 86 bb f2 43 f7 fe 07 4f 92 24 49 b6 6d 4b 12 92 d8 b9 f7 97 5e 8e c8 fd 8f dc 7d 4c bf fe f7 6c 65 df 02 24 49 92 24 49 12 00 12 8b aa 79 66 75 ff ff 77 76 cf 11 e1 26 4c 18 13 e0 cb b6 6d d7 6e 24 c1 ea 73 ed 73 01 90 26 5c 45 a4 a8 7f c1 f2 4b 3d 11 c2 85 99 11 b8 f7 ac f9 11 59 08 df 92 24 59 92 24 d9 16 92 58 54 af fb ed 93 d6 ff 7f cb 7d ad 7d e9 a9 0c 65 df 02 24 49 92 24 49 12 00 12 8b 9a 79 46 5f f3 41 fb ff ff 72 df db 15 ae c2 84 91 9e 6c db 96 ed 48 92 a4 b5 cf b9 f7 bd ff 01 10 31 11 0b 8b 88 a6 fd 2f 7a d1 1b e0 1d f0 a2 e5 b9 89 68 c2 19 81 00 fc ff df bb e7 ec 82 74 c2 93 24 db Data Ascii: S0Amn[VPf[[+%I$I-$5^}teCO$ImK^}Lle$I$Iyfuwv&Lmn$ss&\EK=Y$Y$XT}}e$I$IyF_ArlH1/zht$
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 00 8c d8 08 8c 24 36 00 19 23 ca 01 03 90 23 0a e2 38 ce 0e 20 30 1e 65 0c 46 18 19 8d a3 20 00 20 86 84 3b 2a 06 80 00 8d 24 5b b5 45 a8 60 eb 32 3c d9 c9 68 92 48 7f 2d b9 73 db 55 66 32 33 89 6e 5b 94 97 ce 09 d3 14 68 db 08 03 04 55 d6 b5 22 96 d5 7a 32 42 22 1a 02 05 59 8a c6 12 a2 6d 91 0a 69 18 82 32 63 80 92 65 10 14 b6 e2 ca 22 02 c0 84 93 00 64 bc ca 5a 66 ef 8b 8b 17 78 a1 68 c1 d5 a3 64 ba 9a 65 ca 99 a7 9c 2a 59 d8 dd 58 56 5a 3a 51 80 e1 e2 56 20 ad b2 a2 24 8b 40 01 39 31 3b 6b 84 22 41 4b 11 c0 8a 59 6d 05 09 42 12 18 53 2a 68 03 37 5f f8 02 5b 81 54 ac 8f de 5d bd 00 39 35 05 a3 cd 44 d6 9c a8 5c 8a 00 13 0c 18 88 2e 19 1a 38 06 e5 2e 9f cf 47 21 9c c1 35 ca 77 ff fd ef 3f ff f3 5f 7f 9e 3d ea 97 44 06 01 a0 42 01 0c 4c 26 46 4e 40 00 80 Data Ascii: $6##8 0eF ;$[E`2<hH-sUf23n[hU"z2B"Ymi2ce"dZfxhdeYXVZ:QV $@91;k"AKYmBS*h7_[T]95D\.8.G!5w?_=DBL&FN@
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 48 09 00 24 0d 06 06 00 46 fe 60 00 81 30 0c 83 62 00 60 48 03 88 81 1b 32 06 10 c0 48 23 21 45 00 33 02 8b 18 31 a3 18 31 6c 8a 99 6a 96 06 43 36 2b 00 9b b1 d9 9d 37 63 33 06 06 30 4d 63 18 00 c0 88 f0 24 4a 40 0c 54 33 03 00 12 04 60 51 01 00 94 41 84 02 58 80 15 56 00 46 44 40 32 12 85 00 16 85 d0 2c 10 64 94 02 82 49 48 6a 73 60 ca 5a 55 9e 03 94 90 a2 6a 59 c9 19 0e 6d 14 c2 0c 83 20 c6 10 24 ec 93 42 09 40 50 45 c3 00 60 50 50 30 39 80 d1 92 08 71 00 10 4c 68 9a 1a a6 38 32 20 11 b2 68 2a e9 25 10 77 88 26 24 21 10 41 60 47 20 21 0d d9 0c 9d aa 62 6d a5 65 0b 25 18 51 11 84 08 21 28 82 00 52 e3 98 b0 c6 a9 5e d9 1e 1d 4e de 82 c9 a1 59 af dd dd 33 a2 8f 7e 19 b3 c2 c6 c8 01 21 86 4e 2d d7 57 1c c2 81 a9 48 52 c3 82 96 19 a1 66 85 8b 84 13 2b b1 00 Data Ascii: H$F`0b`H2H#!E311ljC6+7c30Mc$J@T3`QAXVFD@2,dIHjs`ZUjYm $B@PE`PP09qLh82 h*%w&$!A`G !bme%Q!(R^NY3~!N-WHRf+
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 05 c8 32 c6 30 c0 ca 6c c3 40 c1 00 cc 88 51 46 98 21 cd 4c 35 88 62 00 33 86 81 00 90 66 31 62 a4 59 60 e0 39 30 70 c5 04 06 03 80 81 81 81 6b 04 01 8c 18 40 e0 ce 12 1b 00 18 c0 b2 98 31 03 36 63 60 08 10 00 10 03 b8 98 00 62 09 00 31 60 04 80 11 00 a0 24 14 c3 5b 20 6d b2 2c 2a 42 39 02 06 80 98 8a 49 50 19 81 00 62 05 82 4a 4d 36 13 80 08 85 54 2d 8f dd 54 96 43 08 40 14 89 28 32 38 42 54 02 09 c6 11 42 b8 4e 02 c2 52 10 4e a2 20 c1 a1 04 2b 05 4b b2 06 f0 ca ab 45 87 a4 06 54 84 30 11 00 24 28 28 a4 aa 40 ad 51 3b 3b 53 01 21 88 2a a4 22 60 0d 31 03 c9 09 e6 70 30 28 52 a3 ca 36 54 35 81 28 85 90 b9 3b 95 56 30 4c 2a 30 60 63 be 5c cf 35 77 1f ba 7d 47 0e 82 83 79 fd f1 0b 69 01 18 88 c1 88 b1 0e 15 98 18 ce a9 60 64 68 80 52 b4 42 49 4d 37 34 ac d1 Data Ascii: 20l@QF!L5b3f1bY`90pk@16c`b1`$[ m,B9IPbJM6T-TC@(28BTBNRN +KET0$((@Q;;S!"`1p0(R6T5(;V0L*0`c\5w}Gyi`dhRBIM74
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: c0 06 18 c0 18 43 61 20 c6 18 62 20 66 a0 18 8c 18 62 02 23 86 6d 8c 61 60 89 d9 30 67 00 03 c3 1a 88 c1 10 60 0c 30 10 18 21 10 03 19 2a 23 00 0c 04 00 31 a8 40 80 a6 18 54 08 20 01 cd 32 60 92 31 11 58 c8 98 88 00 19 50 0c 40 2b 03 05 0e 04 10 82 42 f8 00 82 02 66 e7 d1 21 05 ca 54 45 c3 30 b2 30 84 c0 aa 91 a5 62 9a 82 a4 30 34 e2 8a b9 62 5d 0b 26 61 0b 53 9b 29 4d 65 b5 2e db 13 17 e7 aa 5b 6b 73 69 43 c1 40 48 11 58 8a b0 eb c6 42 42 06 85 95 28 b2 e1 14 ad 20 88 16 70 71 9b 0a da a8 93 13 34 96 50 18 07 06 25 14 66 34 4c 50 a8 5a 20 9c 22 4d 32 e3 a4 52 8b 72 24 02 39 b4 3e 79 9f 72 20 8c ae c6 cd b5 9f fb f0 df be ff e9 b9 f3 6e ca 9a 1a 23 09 25 29 45 66 29 10 47 c4 0c 24 85 56 4a ad 74 48 17 8a 95 50 3b a0 5e 7d f7 8b 7e ed 93 01 04 06 20 a0 8a Data Ascii: Ca b fb#ma`0g`0!*#1@T 2`1XP@+Bf!TE00b04b]&aS)Me.[ksiC@HXBB( pq4P%f4LPZ "M2Rr$9>yr n#%)Ef)G$VJtHP;^}~
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: c8 98 01 46 00 36 61 30 82 1f 09 37 e1 12 7e 24 06 00 c4 00 b0 c0 d3 fc 99 81 e0 6d 04 10 00 36 00 04 86 27 03 0c 58 d4 32 cc 04 33 20 8d 20 30 80 46 e0 32 22 10 8c c4 0c 84 58 b5 ad 32 59 51 1b c4 28 00 6d 4d 26 22 0d cb 04 00 54 96 b5 62 0a 80 8a 21 02 5a 12 62 04 82 a1 38 28 00 38 24 45 43 50 18 04 42 e3 b0 38 4f 7d f3 95 b7 8d 52 2e a6 52 c3 aa 4d 4a 0d 36 97 0b 26 21 98 34 0f 8a 45 42 0f 83 c6 99 6e f0 ec 9a 70 56 dd a3 64 9d 0a a2 d2 90 01 20 e0 e0 61 3e 6c 99 3b 6c ea 42 88 05 c2 94 01 15 e6 d4 30 4c 55 88 28 14 a8 68 44 59 55 c6 11 34 04 02 03 06 a1 16 65 bb 0c 21 e4 d4 c6 84 01 0d 4d 2d 02 2a 2a 00 38 1e 7d ad 8f 3f ec 84 09 75 d8 0c 24 04 ce e5 99 fb 6f f3 d9 57 79 fc 94 78 3e 13 30 07 87 aa e6 14 d0 51 79 6b 97 c1 a1 d4 8c 28 94 82 a5 2a 18 6d Data Ascii: F6a07~$m6'X23 0F2"X2YQ(mM&"Tb!Zb8(8$ECPB8O}R.RMJ6&!4EBnpVd a>l;lB0LU(hDYU4e!M-*8}?u$oWyx>0Qyk(m
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 30 80 81 81 31 00 8c 31 30 06 c6 c0 6c 00 03 23 06 62 c4 e8 27 26 07 0c 97 01 d8 8c 01 36 13 01 c3 37 31 06 26 a4 11 98 32 10 83 b2 81 04 80 20 01 00 d5 08 88 51 cc 88 51 01 c5 2c cd d2 40 01 00 62 92 00 a4 19 88 a1 c2 0d 12 3c 09 0c 28 a3 1e ed 97 1e e7 2b 8f 94 93 8b 32 12 68 6c 23 07 3b 37 3f 94 8d 83 8d 17 3f 20 9a 1c 36 28 e6 ca c5 52 6c 9b 3d 3b e5 9c 3b 37 81 92 2d 2e a2 4d b6 64 34 9b 43 6e 16 60 18 2d 1b 36 a4 68 40 d0 26 09 d8 29 10 20 d8 20 b5 35 9a 93 8d 90 59 1b d3 34 94 cc c4 e0 68 66 30 a6 b9 44 9b f3 3f fc d1 cb 9f b6 3e 93 13 70 08 d4 ca 52 b1 5a 20 14 80 42 8a 50 d9 85 40 17 38 84 02 21 84 0c 21 01 10 00 02 8d 3a b6 75 4d 55 59 ae 90 86 9d 1b 6e 67 87 4f 78 50 08 8e 0e d9 79 ef 0b 84 26 40 07 e1 5c 1e 78 ff bb 3c fe d6 ed 79 7e c6 d4 c2 Data Ascii: 0110l#b'&671&2 QQ,@b<(+2hl#;7?? 6(Rl=;;7-.Md4Cn`-6h@&) 5Y4hf0D?>pRZ BP@8!!:uMUYngOxPy&@\x<y~
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: a1 da c9 a9 07 58 23 16 8b b0 19 cc 60 8a a6 a8 e2 66 c5 82 d9 b2 91 e2 1e 15 18 0b e4 68 8c 5b 57 a1 61 20 07 1b 30 9b f0 62 51 cc ec 2b 1b 21 e6 30 80 82 90 82 75 b6 5d a8 38 88 0f 3f e2 af 7e 51 c7 c9 3b 6e be db cd 53 eb 13 ef 7c 97 46 28 01 28 76 56 14 cb a4 15 82 b3 ac 55 e0 70 59 8c 08 e0 e2 10 80 68 4d 9e 17 f2 aa 65 8d 31 c3 55 3f fc 46 5f ef 4e 84 00 c0 eb 4a 7d b3 ef 4f f7 5f f0 ec 91 e5 3d 8b d6 98 ef 05 80 c6 05 87 91 d3 35 2b 07 40 7d d8 c2 f9 5a 9f 18 d2 94 34 c9 e2 b5 98 c3 8f 7e 6c f1 b5 1e 35 ac 04 3c eb 39 cf bc be ef 62 43 cb 9e 9c e9 50 82 77 62 64 93 4d cc f0 3d 62 03 30 62 c0 36 62 78 8f d8 80 01 80 11 0c c3 00 60 18 80 e1 0e 53 b6 01 c0 86 e1 bd c1 93 01 30 03 0c 00 31 7c 6e 23 94 6d 00 cd 33 15 80 61 c3 3d 03 80 29 38 c0 06 12 83 Data Ascii: X#`fh[Wa 0bQ+!0u]8?~Q;nS\|F((vVUpYhMe1U?F_NJ}O_=5+@}Z4~l5<9bCPwbdM=b0b6bx`S01\|n#m3a=)8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49950	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:40 UTC	530	OUT	GET /h-gMHawK62d70rmr4BgsG-397OTjhB_FQ6nkaLc7pgl4FglkgIWHljPbNT0qKmvac6U=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:40 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 205300 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:20:24 GMT Expires: Fri, 25 Oct 2024 21:20:24 GMT Cache-Control: public, max-age=86400, no-transform Age: 5416 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:40 UTC	843	IN	Data Raw: 52 49 46 46 ec 21 03 00 57 45 42 50 56 50 38 4c e0 21 03 00 2f 87 c2 5a 00 8d 40 8c 24 37 6c 33 f7 00 08 c0 4f f5 5f b0 e5 a4 85 88 fe 4f 00 ff 17 bf 75 94 b9 01 48 d2 2f 49 fa 9f 74 8e 90 ae 79 b9 d7 46 34 e8 cd a0 37 21 29 31 21 7f 5f 5f 77 63 c0 92 64 02 f4 03 30 9e af 6b db 12 60 40 92 00 42 29 08 81 b4 81 6d 2e 60 6b 84 0d b6 fc 25 1d f1 fe 06 06 b0 73 26 22 76 ed 39 e7 a4 24 7e 86 84 2d c9 c6 81 44 ec ee aa d4 dd 33 3f fc fa 85 f1 22 c4 ee ae aa 24 e5 cc 28 48 cb 6e eb c5 5c 6c 70 68 6b 43 55 f5 a5 19 11 2e bb 5b f2 bb 00 8c a5 c7 2e 8d 4c 95 94 50 f5 dc 47 7a 7e f0 87 52 55 64 75 77 49 ba 58 ae 47 df 7f b2 a5 76 3d b6 aa a2 ca b8 ac 79 1e a9 51 bc 12 00 d6 4c fa 5b 11 55 e2 6c 55 3f 55 b2 95 19 01 11 09 30 dd e7 60 20 aa 56 5c a9 f4 94 ba 71 62 f3 Data Ascii: RIFF!WEBPVP8L!/Z@$7l3O_OuH/ItyF47!)1!__wcd0k`@B)m.`k%s&"v9$~-D3?"$(Hn\lphkCU.[.LPGz~RUduwIXGv=yQL[UlU?U0` V\qb
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 82 50 43 07 42 7f 13 dc 58 78 00 08 22 3b 58 42 07 1d ec 27 1e 44 c6 c4 f6 d8 e4 74 5b 2b 7c d7 69 f4 56 7f 8c db d7 d9 30 e6 5e 92 73 e7 b4 27 1a a7 1d d1 be 51 bc aa b8 37 72 b0 7d 07 94 c7 6e 2d ce 2c ec da 94 b8 69 8e bd 6a 17 00 80 06 80 26 47 be 8d fc 91 98 12 ca d1 de ca c2 54 6b e7 3c fe 29 9c f1 50 70 6e 7c 5e 07 f2 d4 90 d6 92 5a a3 b5 6d 6b eb c9 6d 7b 0a ad d6 1b 27 d4 2e ec 2d 4b 3e 59 f2 fc 8c 8b 7a cf 70 c8 77 8b 0a ef c6 73 10 59 c0 02 9a 8e 6a 40 13 a9 23 44 c0 d1 01 b7 ad dd 74 40 91 f2 d4 e7 30 90 f9 dc f9 dc c6 a7 eb 26 35 a4 35 bf 5d 92 d6 f6 a8 dd df 6f db 53 d3 bd 8d 93 3b 30 ee f9 ed b0 e6 7c 9d 06 2b 59 70 9d f7 63 ae f3 42 9f 6a 1f 84 00 80 08 44 6c 89 ed 22 d6 4c 2d fd 0a 85 ac c4 47 7f 13 a0 57 19 a5 12 06 8a 01 9c 83 cf d7 a4 Data Ascii: PCBXx";XB'Dt[+\|iV0^s'Q7r}n-,ij&GTk<)Ppn\|^Zmkm{'.-K>YzpwsYj@#Dt@0&55]oS;0\|+YpcBjDl"L-GW
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 43 86 8d 60 a4 84 4d 6e 54 65 37 75 8f 42 da 6b 3b b6 77 d1 94 94 93 8c 54 d5 0c 43 49 da ad b6 81 72 91 30 80 2e dd 43 5d 61 0e 79 24 ea ec 46 36 88 ea 2e 3c 76 49 0a 99 72 85 a4 62 83 40 11 00 dc 7d 5d 86 01 18 40 31 04 8c 0a 19 e2 7b 77 5f c4 47 db 00 ba 4b c6 6f bb bb eb cb 73 37 de fb 5b ff ee ff e5 6b db b6 2a db b6 9d 52 fa 18 31 e7 5c 1b 0e 3c e6 67 89 e5 b1 25 93 19 7e 01 4d 74 f5 13 b2 64 c9 92 05 26 33 33 33 33 4b 17 ce d9 7b af 35 e7 8c 18 bd a6 14 bd f5 31 22 62 cd 7b 6c 4e b6 6d ab b6 64 db a9 6d ac 63 e6 70 e1 a3 20 c6 cc 09 51 0e 95 0f 85 95 09 0e 31 b3 74 c1 dd cc ce ea 7a 6c db 56 b5 6d 5b fa 58 d7 f3 fe ee 12 e1 16 b9 a6 94 80 42 91 ff 31 f5 f1 94 08 32 77 77 be ef fb df ef 79 9e 3d 43 16 6d 5b 55 5b 91 d6 28 a2 d9 1c ce 8b 03 9a e4 de Data Ascii: C`MnTe7uBk;wTCIr0.C]ay$F6.<vIrb@}]@1{w_GKos7[k*R1\<g%~Mtd&3333K{51"b{lNmdmcp Q1tzlVm[XB12wwy=Cm[U[(
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 20 66 66 d6 9e 61 ab df 78 3b 31 33 b3 b4 d2 4f e8 33 b4 93 d6 d2 f6 31 bf 3b f7 9c e9 ee ca cc 70 b7 50 e4 b6 91 32 3c 57 5e f8 81 3f 6c db 8e 3d 92 b6 ef 38 4e 5c d7 75 db b1 cb ae b6 31 66 63 6c 3f b6 6d db 36 c7 9e 79 da 66 55 bb cb 48 55 92 8a 2a b8 7d 5f 3c 71 2c cb db dd e9 ea 9a 65 de bf 7d f1 ff 6c 5a 92 fc 7f ef 88 58 6b 6d 1c 64 9e 54 65 96 ab cd c1 c7 b6 6d db f7 5f bb 7b be df ef 9d ee 6c db b6 c6 9e 69 77 35 ca 55 c9 93 79 f2 ec b3 b1 d6 8a f0 86 ff 93 21 4b fe ff bd 5e 11 91 59 e8 d3 7d 30 67 66 31 ab b7 3f f8 da b6 6d db b6 6d db b6 79 d3 be f5 b1 8d f5 ee cc ce ec cc 39 a7 59 55 99 19 11 ae 20 d9 4d 9b 17 e6 44 64 45 72 8a 7f 16 b6 6d 4f e5 36 5e d8 27 e9 e8 f0 30 78 cc 8e 39 54 87 93 d2 96 bb cc cc cc cc cc cc cc cc 58 5a 4c ca 90 06 da Data Ascii: ffax;13O31;pP2<W^?l=8N\u1fcl?m6yfUHU*}_<q,e}lZXkmdTem_{liw5Uy!K^Y}0gf1?mmy9YU MDdErmO6^'0x9TXZL
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: e0 b1 7a 08 35 53 a1 6a 13 86 ae 06 e5 19 b4 22 97 3c 37 d1 56 74 1b cc 94 cc f3 2c 39 1e 17 85 e5 95 9d f0 06 71 e3 3b af 74 e4 bf 94 01 c3 01 42 41 02 17 1f 2d c6 24 57 9a 5e 54 90 0b 98 7d 37 ab 61 95 1c 76 a0 e7 09 b1 35 d6 59 ab 6b 16 bb 4a da 64 b3 d9 34 bd 50 10 e1 53 0d 2e 6c 40 a2 15 11 6f 0a 7b 57 9c 09 45 f0 c0 b5 74 ae 23 d2 12 15 c0 35 55 0d b2 5c 72 43 a2 c7 ee d9 be ce 54 36 2c ca 0c 56 70 f2 74 29 17 26 5e fa 95 d8 bc 95 9a 5c 05 ee 8e 3c 28 a2 45 c1 46 58 9b b9 ee c3 45 5d ae 47 3f fb c8 ef 0f dd 2b fe ea e5 bb 55 9f 1b 73 4c 9f bf 3e fb fc bd 5e 4b a9 02 ad d5 a3 5f 23 7e 54 fd 39 74 9a 9c 52 4c b7 de 1c f5 d9 d2 5f 7a ff fd d3 7c 9b 6d ad 04 9b da 1f 72 0d 3f c9 dc 84 fe 17 a1 7f b9 c3 c6 22 e9 57 f1 84 15 38 81 49 71 cb 55 e0 37 a4 49 Data Ascii: z5Sj"<7Vt,9q;tBA-$W^T}7av5YkJd4PS.l@o{WEt#5U\rCT6,Vpt)&^\<(EFXE]G?+UsL>^K_#~T9tRL_z\|mr?"W8IqU7I
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: ad 21 b6 cd 9d 6f 7d 9d ed 9c 33 1e 5f 80 42 0b 69 79 70 72 d8 22 f4 10 36 16 4c 66 df b9 57 e7 5d af e3 c2 2c ff 18 ed 3c 1b 2f 7e b0 e1 a5 27 50 8d 21 73 54 5a 01 7a 45 98 93 82 d7 c9 f7 6d 37 17 be f7 35 2d 83 dc 8b 29 16 ed 8e 87 3e ec 33 3e 64 7f 4e 15 97 7a dc f4 80 bd d7 6b 32 0d 53 57 ea 65 7d af 01 ef 19 db a0 a8 14 c6 4a 6b 9c 44 97 82 e3 cb b8 92 72 4c b9 c0 c0 a2 f9 c4 68 6f f9 a9 1f fb b8 7f e5 3f fc e9 3f f5 0f bb f4 d9 cb e1 e2 c8 0d 07 a7 b1 07 62 51 23 86 aa 9a ab 42 10 1b fb 29 f6 35 3d 6c 7f f9 4b b6 5f fc 63 4f ff fc 87 e7 35 df 7a cc 2b b6 eb 1d aa 03 b4 f8 44 16 25 42 14 36 a2 4e fd f0 86 f5 87 03 30 04 06 7d 1c b1 cd ee 42 6b c4 c0 5c 18 18 a0 3b f5 4c d5 ca aa e5 b4 59 64 14 85 b9 f2 60 61 0c 89 7a 32 3d e1 32 5b 36 bb a8 ef f5 ea Data Ascii: !o}3_Biypr"6LfW],</~'P!sTZzEm75-)>3>dNzk2SWe}JkDrLho??bQ#B)5=lK_cO5z+D%B6N0}Bk\;LYd`az2=2[6
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: fb e5 2b f9 b8 f0 1d 07 bb 15 e4 35 61 cc fa 4d ae c9 45 53 5e 0d ab 9d 75 da 65 9d aa d1 a6 9d 36 5e 18 0a 7d b7 a5 d7 65 5d d2 dd c5 32 e7 bb 00 0e 21 e8 eb 0f db 06 73 eb 0f fe 86 ef 38 76 0c 50 a3 14 03 98 c1 5a 6c 32 48 90 5c 00 46 14 00 64 a1 42 2f 01 80 96 c1 00 88 3a 64 58 f0 f8 1f e9 1d 5f ff 96 ef de a2 4f 23 11 13 0c 69 a6 5e 65 84 39 56 f4 35 24 1a 1b 6f 32 d1 86 2a 8c b3 a8 81 51 fb ad a7 5d 27 21 48 3e f9 74 08 b9 a0 dc 0e a4 ad 9f be 9e a8 07 5a 34 47 67 67 f8 bb 77 d1 16 97 8d d9 5b 6f fd 23 f7 21 ff fd 7d cc 6f 7d 79 ea ef 5b ff db 20 18 c0 8e e0 c0 38 7e dd f4 fe 75 f0 bc ff fd 7f f6 5f 6a 6b 46 1f 2d 5b ef fb ea c3 ab 7f f4 e1 1f fe b4 b7 3b fe 3f bd ef 2c a0 0b 30 08 06 20 18 10 05 10 2d 1f 0d 3a 51 94 78 41 3b 2d ed 2c 8e db e9 6a e1 Data Ascii: +5aMES^ue6^}e]2!s8vPZl2H\FdB/:dX_O#i^e9V5$o2*Q]'!H>tZ4Gggw[o#!}o}y[ 8~u_jkF-[;?,0 -:QxA;-,j
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 09 77 11 f1 71 cc c3 db f8 33 3e 86 e7 d2 0c e2 7c c5 9f f0 f5 dd 9f 21 5d a5 20 00 76 ad 1d 8a 50 54 04 41 7b d6 b7 1c ce 2f 3a aa 60 73 ed 96 6f 5c 1f 3f 12 15 84 20 28 88 01 b0 31 42 0d 23 11 ba a5 be e8 90 3f c6 32 89 89 8d 13 b5 61 ef de d3 e2 67 1c 06 38 f7 9d 6f 05 f3 74 80 52 07 b7 56 07 41 2a 96 13 ea 15 56 00 80 72 d9 25 2c 16 00 c4 c3 f8 90 ae 2e eb 8d e4 6b 37 b3 43 11 46 4e 51 5e 73 2d 89 ac de 7f 36 70 4c 92 11 5e 62 cb 17 76 ec 32 71 d0 6c d4 81 dd ea 3e 5e 59 7e ff 19 d5 9a 8d ba b3 77 4f b9 af ea 03 66 a1 f5 c5 91 2b be c3 63 0c 3c c6 ef 93 f3 39 68 be 9e 5b 78 21 cf a4 16 6f e6 83 79 3f 5f c4 bf d3 a1 19 b5 f7 fe 21 f2 f7 98 ab 13 c0 1e 9e 77 31 ab 0d 08 4a 24 54 f0 d4 6c 6f b8 63 14 dd 78 77 59 0e 6d d7 df ed b9 cc 09 0a 50 a0 50 28 aa Data Ascii: wq3>\|!] vPTA{/:`so\? (1B#?2ag8otRVA*Vr%,.k7CFNQ^s-6pL^bv2ql>^Y~wOf+c<9h[x!oy?_!w1J$TlocxwYmPP(
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: 9f 77 6b f3 00 05 00 f6 99 7c f2 5e ef 36 54 ac 40 22 2c d0 51 98 30 a6 b7 e4 7a e7 e8 4e d3 97 a8 a4 ba da 5e 4f d4 e0 f9 36 fc 83 ff 5a 6f 3c b9 96 c9 3b 7f f1 f5 37 fe 9b 7f 92 54 51 7f fe ed 37 ce 06 50 3e f2 2b 5b 2f 35 f8 67 79 e2 1e b0 7f c1 3f fb ed ef fe 83 1f f9 4d 75 7d a1 2a ad 2d e8 78 de fd 5c b1 1f 3d 1f ce 8c 01 14 aa dc d4 db 1f ae 37 9f b0 77 7e 28 00 18 05 16 10 53 f6 3e 32 eb d9 73 7f a4 77 87 b9 1d a6 7f 96 c7 eb 67 da 9a 84 a0 a0 41 05 cd e5 1e f3 7b e5 46 08 f1 d7 d4 8f bf fb 0f ff 85 3f 5a 7e ec b7 67 fb ff 67 90 c2 74 90 f7 c8 27 e8 78 c8 dd dd fb 27 76 ee 7f 9a 58 8a e1 d3 24 87 70 88 12 d5 07 79 eb 64 5a 23 50 a4 e8 0c ee 7c e4 d7 1d f1 99 34 c9 7c 55 f8 53 3b 88 f9 40 2e ae 42 b1 a8 24 87 de 7e be e7 fe 53 88 5b 24 ef 76 df 7c Data Ascii: wk\|^6T@",Q0zN^O6Zo<;7TQ7P>+[/5gy?Mu}*-x\=7w~(S>2swgA{F?Z~ggt'x'vX$pydZ#P\|4\|US;@.B$~S[$v\|
2024-10-24 22:50:40 UTC	1378	IN	Data Raw: d7 fb 25 63 0b d8 fe bf fb c3 ff ca 7f ff c7 7f f9 f7 ff e8 bf f2 ed 2f fa 9f 21 50 bf a9 12 ed 6d 3e fc d8 e4 f7 7b 6a 1a 03 a2 42 a5 4b 03 00 52 52 ac 51 69 5b 8c aa 16 04 80 a8 ea 02 01 eb 31 fa 56 fd ce f3 dd d7 f4 74 0b 7f d7 a7 71 0b 03 44 71 04 69 55 62 94 62 11 e4 e9 f2 8f 55 3f a5 f8 01 b6 6b 69 f0 d6 3f 19 fd a7 c6 26 1e c1 b7 d6 3f 0a be de f8 0e f2 47 fe ca 9f 89 07 cf 77 02 4a 39 3f 91 f9 c9 7b fe 4e ae d5 5c f3 8d 0a 35 d8 82 94 0c ab 8c d8 a8 b6 c4 0f 6b 25 a9 43 0a 40 67 dd e5 c7 fd 43 00 00 99 2b 3f e1 1e df 8b 9d 84 aa b5 fb f4 3c 4c 86 cb f1 d5 7a 25 40 e8 67 7c e2 2c 8b f9 78 e1 16 84 d3 d1 d3 94 11 88 1e a3 86 3d 30 46 41 01 97 dc a0 62 e1 a1 56 17 cf 51 1d eb 2d 6d bf c5 a6 a3 64 b3 d9 75 aa 97 e9 87 c4 ce 93 5c 63 d8 61 95 2f 07 df Data Ascii: %c/!Pm>{jBKRRQi[1VtqDqiUbbU?ki?&?GwJ9?{N\5k%C@gC+?<Lz%@g\|,x=0FAbVQ-mdu\ca/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49951	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:40 UTC	1093	OUT	GET /QLQzL-MXtxKEDlbhrQCDw-REiDsA9glUH4m16syfar_KVLRXlzOhN7tmAceiPerv4Jg=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:41 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 526 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:34:31 GMT Expires: Fri, 25 Oct 2024 19:34:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 11770 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:41 UTC	526	IN	Data Raw: 52 49 46 46 06 02 00 00 57 45 42 50 56 50 38 4c fa 01 00 00 2f ff c0 3f 00 8f a0 36 92 d4 86 a7 15 6a a7 27 52 42 52 79 af 36 94 06 00 9a 20 91 bf 78 9e 03 68 e4 75 f7 29 68 23 49 59 4f a7 ee 55 bd 2d 66 e6 f9 0f 02 fc ff 83 10 77 2e 92 90 72 76 ce 71 ef 65 a1 b5 3e a8 c1 6e 8e 28 c3 0c 20 20 04 10 80 00 12 05 4a 92 d4 a4 72 b0 d8 65 41 e9 ff ff 6e 92 c1 49 f4 79 13 d1 ff 09 c8 dd ff 77 ff df fd ff bf ab 97 eb 47 ff c3 53 eb a3 bf fe e0 d4 62 57 8b 5d 2d 76 b5 d8 d5 62 57 8b 5d 2d 76 b5 d8 d5 62 57 6b f5 e1 c3 fd d1 a9 c5 ae 16 bb 5a ec 6a b1 ab c5 ae 16 bb 5a ec 6a b1 ab c5 ae 16 bb 5a ec 6a b1 ab c5 ee 62 c1 bb ea f7 8d a7 e3 f4 f2 f1 74 83 f3 e9 d5 33 99 43 af 1f 37 d0 1b c9 9c de 70 ba fb ef 7f bd 8e 37 1c d0 9e 8e d3 cb c7 d3 0d ce a7 57 cf 64 de e9 Data Ascii: RIFFWEBPVP8L/?6j'RBRy6 xhu)h#IYOU-fw.rvqe>n( JreAnIywGSbW]-vbW]-vbWkZjZjZjbt3C7p7Wd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49956	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:41 UTC	1093	OUT	GET /M03pLkIu8Rp_jxkdSXjkoeW0p-TlH493P9GaK9YkY_uVm5tnkjsarW1vcZ9XDsr_-G8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:41 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 46950 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:21:29 GMT Expires: Fri, 25 Oct 2024 20:21:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 8952 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:41 UTC	844	IN	Data Raw: 52 49 46 46 5e b7 00 00 57 45 42 50 56 50 38 4c 51 b7 00 00 2f ff c0 3f 10 09 87 8d e4 c6 0d c8 d3 89 e2 89 ea bf e0 cf 49 07 11 fd 9f 00 bd 8f 21 0d 92 4a ea dc 3f 1c 29 49 7f f9 f8 bf 31 f8 c9 3e 84 be 02 d6 c6 53 ff 02 0c c9 7f 07 80 52 fe 0c 80 24 31 f3 69 3c 00 3a fe 0a 40 1c 90 69 66 d6 2e 7d 70 1b 80 24 00 ca cc 2c 33 bf 8c a1 dd 33 24 02 d9 2e b8 e9 18 2d 26 09 f4 cc 9c 73 9a e9 1a 27 75 9b 13 09 64 a6 de fb 45 52 02 9b 7e d6 b7 84 24 c1 ac b7 6f be 4d 4a 02 c8 b8 c4 0b 00 77 4a 00 49 96 1f fa a5 8f 6d ba 84 2f 99 9b bb 3b c0 99 02 48 ae aa d4 71 3c 4c 90 61 06 10 66 d6 70 88 21 99 99 cd 2a e7 35 61 52 6b b9 a9 0b a8 e3 0d 99 65 ee ee 27 1c e6 aa 35 0e c0 a4 bf 44 a2 ce f4 46 a2 aa 1c 66 d3 1e b2 c8 aa 22 49 eb 55 65 d6 32 13 20 b7 91 75 37 af e1 Data Ascii: RIFF^WEBPVP8LQ/?I!J?)I1>SR$1i<:@if.}p$,33$.-&s'udER~$oMJwJIm/;Hq<Lafp!*5aRke'5DFf"IUe2 u7
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: f5 e3 42 5d 64 8c 1f 25 ef 3f e7 c3 ff 0f 20 15 80 20 c0 16 00 78 c4 a2 5c 03 1c 81 93 cf 2e df 38 fc 77 00 29 31 31 65 c2 c0 fa 91 a4 43 42 7d 80 4b 40 01 00 de 91 16 36 fa e9 9e 06 37 9d 13 1e 7c 14 20 e0 7d 02 a4 b9 45 1d 0c da 36 92 d4 9d 84 3f e9 99 7d ee 10 44 c4 04 ac 7d bd de d5 57 f5 51 7d b9 d6 aa 4b b8 aa 73 10 ce 6e 51 fd 80 f8 0d 6b c8 2b a2 9a 48 bd c5 9e 18 fa 41 26 54 a3 11 a2 b2 db 46 05 d5 a8 70 47 30 aa f4 7a 09 30 d4 7b 54 a9 5f 80 3c 40 95 aa 2a 54 f9 80 3c c9 90 6a 0e 39 83 64 22 76 a8 1b 9a 10 95 7e c0 b6 8d 98 9c 70 87 08 30 01 98 04 38 d0 e5 05 01 a1 01 41 72 90 21 68 d8 46 a1 c6 00 11 81 00 08 45 af 9e b5 08 08 24 21 a8 54 52 a9 71 b5 d0 13 62 a7 52 a9 be 3a 87 ce d4 76 4d 79 b5 b6 58 b3 fd 73 6d 4b ce da fb 8e f7 de 7b 3f 58 5e Data Ascii: B]d%? x\.8w)11eCB}K@67\| }E6?}D}WQ}KsnQk+HA&TFpG0z0{T_<@*T<j9d"v~p08Ar!hFE$!TRqbR:vMyXsmK{?X^
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: ad 1b 7c cb be de b0 4f 79 6a fa 25 38 2e 38 81 37 16 3f e5 6d 84 61 ec af fb d3 71 47 c7 af 04 d0 fa a0 53 3d 3e f4 9b 6c c4 e9 a8 f6 75 bb 1d e1 d8 97 f1 18 9f 12 1f 6f f2 8f 79 bb e5 23 80 71 3b 1d 3b 30 e2 36 df 03 1f 6f a2 8f f5 cd 78 04 bf 0e fd b5 8f 4b 1b 85 f1 b5 fb b1 9f 76 e3 5d 18 81 f6 95 af f1 cb 06 8d af 1d b7 3c c7 9d e5 23 4e 18 97 03 8e 7d 19 f8 1c 79 a1 8b b0 a0 95 73 28 6d b4 8d cd 68 ce 2a e7 73 52 15 67 5c 2a 49 d8 25 a5 20 42 bb 06 21 f6 f9 b4 c6 bc 51 26 33 8d 57 92 27 8c bd 9f 1a 7f c4 c7 52 78 33 0b 4f 30 34 69 0d f6 1e 6c e7 91 a1 5a 6f 49 17 b0 a0 5f 4c 20 84 87 8c 60 ed 4d 8b 69 00 5a 7d e1 28 11 84 65 3e e7 60 64 51 97 4f 91 7d 91 9f 4c 98 6e c1 33 70 91 36 68 8d 79 95 02 6f f2 a1 ca 76 06 37 3c 9e 3b 7c 64 45 db 93 1f e7 07 Data Ascii: \|Oyj%8.87?maqGS=>luoy#q;;06oxKv]<#N}ys(mhsRg\I% B!Q&3W'Rx3O04ilZoI_L `MiZ}(e>`dQO}Ln3p6hyov7<;\|dE
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 94 f4 f0 42 bb 5b b2 e7 52 f9 fd 25 a9 e6 ce 2f ae c1 67 0e 81 c0 0f 00 bb 64 1e 41 39 c3 bf f3 7e b4 e7 fa 03 f4 8b c8 0f 85 b1 0a ca 60 44 a3 9f 1d 83 49 b0 93 a0 bf 0d ed 73 0a b3 44 dc 6f 69 a7 8e 55 91 3d 9c 1e 71 90 06 9d 7b 5d 4a b3 46 bb 6c b4 6e 73 80 d4 b8 22 4b f7 f4 77 e2 3a 5c 40 4d 1a 04 a2 4f 7b 3b d1 1e 2f a9 66 bc 26 9a 46 3f 2c 00 96 c7 f5 d1 b2 3f 9d 56 2a 7b 2e 2e 68 d4 9a 16 53 66 d2 82 99 14 ec aa 54 90 07 09 52 fb c1 55 88 21 1b 33 c9 90 49 a3 23 18 dc 83 12 4e 2a 8c 26 6c 0c 11 1f a7 d9 3e b6 8d 05 4f 95 b3 83 34 78 90 f8 f8 c2 22 fb d5 17 f9 1c ac db 00 17 20 39 c5 8c 8a d4 7e 95 0b 10 06 29 d4 dd 23 6d 4b 6d 56 f6 97 6b 7a 10 cb ac 68 7a f3 ba 85 89 5d 7a 52 77 65 95 b6 19 83 8b a3 1e f6 d2 76 c9 08 8d d8 a8 fc 1e 50 0c 7c 37 be Data Ascii: B[R%/gdA9~`DIsDoiU=q{]JFlns"Kw:\@MO{;/f&F?,?V{..hSfTRU!3I#N&l>O4x" 9~)#mKmVkzhz]zRwevP\|7
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: a4 a4 30 8b 75 b5 c2 7a a7 52 80 64 04 35 6f 56 32 73 6f 7f a3 71 7b d1 ba af 51 0a 30 28 62 16 7e 51 d3 4e c7 34 66 65 9d 23 f9 87 97 4b 5e c4 52 6a 2a 4a 41 8d 2e b9 01 dd a5 88 eb e4 56 36 8b 32 b8 d4 63 a5 63 d6 10 31 75 49 ab c9 e2 52 9d d9 0b f8 6d 50 dd 15 f5 ee 25 4d 69 bf 34 a0 00 d7 45 63 45 b6 0a ae 62 9f 6e 8f d3 f5 58 3b 55 b3 6b 1b 3c 85 5f 6a 20 e5 0f 79 36 99 58 9e 0e d3 65 a6 14 23 d0 62 6c f9 32 50 ac 8b 4a e9 72 3a c8 1e d2 c9 c6 21 26 8b b7 c5 07 45 a0 0f 21 1d 02 80 e2 9d 7d b7 b8 89 59 00 72 2f c3 70 da fc c1 ce ef 4b 79 74 f2 7b 0d b3 14 ba 8d 32 c4 03 5e dd c5 73 2e b3 4c 0b 07 28 02 0a 01 1c 7e 5b 9e 13 c7 71 66 a1 16 48 3c bf 75 78 c4 7d 9e d6 f2 64 b1 ce 28 6c 57 82 6a 3d 32 9a e8 cd d1 a8 b1 9c b3 64 a2 63 1f 69 c5 ff bd ae e7 Data Ascii: 0uzRd5oV2soq{Q0(b~QN4fe#K^Rj*JA.V62cc1uIRmP%Mi4EcEbnX;Uk<_j y6Xe#bl2PJr:!&E!}Yr/pKyt{2^s.L(~[qfH<ux}d(lWj=2dci
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 47 3c 44 16 14 cb ae e4 d1 2a 19 e8 04 08 f6 39 cd 68 e8 3e db bc 7d 21 25 f6 e9 3e cf f6 9e 29 26 62 9c 06 81 c3 0c 60 bb d4 f9 61 a9 5d 49 a0 31 84 20 5c 0e 70 b8 64 46 86 21 91 dd b1 35 9d 33 c6 37 29 f5 99 57 46 96 7e d6 1a d1 2d 1b 20 09 52 02 4d de 5d 73 f8 92 16 66 93 14 e4 8d d2 2a 28 82 94 22 f6 f3 fe 5e 8f dc 0f 5d aa a9 39 24 ce 18 d6 dc 03 83 47 29 39 0b 95 e6 9a d5 15 02 5a 20 95 a8 a8 3f 57 14 48 76 b1 d2 83 80 f1 02 a4 bc 52 29 28 d5 b3 f6 62 c8 30 0e d7 45 8c ff fb 7d 41 86 a6 94 fa 4c 6e 0a 1d 14 02 ba 14 52 6a 7a 64 1c bb b4 59 84 ba 3c f8 9b dc 27 d0 18 28 8a d9 37 9a a7 dd c9 32 89 41 c0 0f e5 16 6d 77 a6 92 ba ce 68 00 c7 19 38 fa 7c 14 d4 25 0f e2 16 bb 35 d5 52 b6 ad 65 8e c2 a0 76 05 70 de 70 de 58 b0 5f 36 a7 70 27 91 80 22 e2 9c Data Ascii: G<D9h>}!%>)&b`a]I1 \pdF!537)WF~- RM]sf("^]9$G)9Z ?WHvR)(b0E}ALnRjzdY<'(72Amwh8\|%5RevppX_6p'"
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 2a 9e b2 e5 36 92 67 33 22 cc c9 e3 06 4b 03 1c cd c8 a9 a1 73 d2 a9 ee 68 ef 48 74 a1 11 89 cb ca e7 69 90 04 6d 60 c4 8c 73 bc 6a 88 6b 60 7a 29 33 9c 97 7a 5c 7f 93 ae d1 63 ae 3b 05 49 8e cc 62 e9 21 5a f7 59 18 c9 21 48 2e 9a c5 88 ef b9 19 cd 6f 0a 24 62 7f 5c d4 3d 42 12 fc f3 bd e1 e3 c4 7d b3 52 d9 62 10 bb 57 a3 74 c6 5a 35 cc 00 a0 ae b4 cd 77 22 0c ab 99 f5 75 f2 88 41 af 1a 3c 46 42 92 c9 2d c5 31 b7 41 4d bc 92 04 46 b4 78 67 94 3f 5c 3e 21 57 85 16 c0 9d 6a 81 d3 96 f6 96 e5 65 be f4 b5 17 2c 52 e8 50 24 16 fc 9e 9d 8f 29 56 40 da 03 8a 80 74 70 1e 0c 46 f4 38 a6 27 a1 ac 71 b0 66 9b 8e 3d 44 e5 86 16 e3 96 db 9d 29 6c f2 59 83 3e ed 07 0f 02 3d 66 0b 68 2f 67 96 41 c3 67 17 c6 05 c0 f9 a9 ff d6 4e 49 d8 33 15 11 72 9e 36 a7 5e 05 30 ac de Data Ascii: *6g3"KshHtim`sjk`z)3z\c;Ib!ZY!H.o$b\=B}RbWtZ5w"uA<FB-1AMFxg?\>!Wje,RP$)V@tpF8'qf=D)lY>=fh/gAgNI3r6^0
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 9c 24 4b 9f 7c 88 76 1d 64 f6 4d dd 2f 97 2c 5e fd 22 81 da e6 e8 93 1e 5e fc 94 20 ef 2d a2 0f 61 51 c3 35 2b f6 eb 3e cb 20 c6 9c 30 d0 3a a0 ab 06 dc a5 26 49 75 5e ce da 54 6b 0f ee 23 9d e0 40 00 42 a0 35 d5 06 a5 4a d5 52 70 f2 f1 84 47 71 13 a1 e6 aa 95 62 8b db dc da b4 5a be 24 ee 26 b0 32 bb 40 31 66 45 9c 6f 14 1f d6 5b 54 cf fd 32 a5 9e ae 73 bc 4c 7e 9d 23 2c f7 f2 21 20 5d b0 92 26 40 8a 03 06 51 b4 f7 a7 79 b7 c9 b6 af 90 a7 54 8e ca b4 c9 fd 4d 9e f6 8f 6f 0d aa 63 1e ad b2 f5 10 42 92 66 b4 88 8b dc 9a d6 4b 14 eb 4b f0 d3 26 6c ef cd 32 0f a7 52 5b 2f 93 84 c3 44 e9 08 9f 07 d5 7b f5 fa 41 cd f4 d6 13 20 30 60 68 7f 1a fc 02 16 e3 62 89 48 d0 01 13 db 18 cc de 38 6a d0 58 a7 e7 bc 5a 16 9c 87 ac 3f 2c 70 cc 57 5c 5d 99 fb 29 30 cc ca 58 Data Ascii: $K\|vdM/,^"^ -aQ5+> 0:&Iu^Tk#@B5JRpGqbZ$&2@1fEo[T2sL~#,! ]&@QyTMocBfKK&l2R[/D{A 0`hbH8jXZ?,pW\])0X
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 46 5f 29 de d9 3d d4 a8 91 d9 f8 6d b8 1a 99 da 2a cb cf af 02 2b 5e 45 9d ad 4b 40 bd ea 92 69 dd a3 52 d2 41 72 0a f1 ae 84 c4 de 24 66 a7 42 49 49 3a 7c d8 5f 56 19 73 12 9a 1d 2e 0f 88 12 82 de a5 ee 8b 12 4a 2f 95 49 b7 eb 8c 35 6d 37 81 01 b1 6d 0c 83 b1 d5 28 d6 c9 f4 b4 63 9c ec 0d 58 7c cf 46 22 ca 0e 37 84 f7 7e 5c 52 ae 6b 88 5a 5c 11 94 dc 83 f1 0e a9 38 eb d7 79 ef f6 d9 a7 c8 3f 4c a9 07 5b cf 35 ad a6 75 0c 41 81 d1 5d 3a 5e 4f 76 ae 96 ab 32 c3 06 5c 2c ed 30 a1 a3 8d ba ce 11 e7 fd 96 cd de 3e 6a a3 b5 18 27 57 ab f6 32 a1 29 e2 52 00 6c ab 2d 48 21 5c 52 97 56 8b 1b f9 98 9a df 65 f6 54 46 83 34 0f e1 6b ae a7 66 e6 e9 0d fb 34 65 76 64 8c 8b 7d d1 84 f6 f3 bb f4 9d f7 c3 01 09 3b e4 cc 96 66 96 31 a0 b6 76 d8 d3 71 ca 78 02 2c b4 ab 17 Data Ascii: F_)=m*+^EK@iRAr$fBII:\|_Vs.J/I5m7m(cX\|F"7~\RkZ\8y?L[5uA]:^Ov2\,0>j'W2)Rl-H!\RVeTF4kf4evd};f1vqx,
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: f3 ce d3 c3 8e 87 25 16 36 86 7b aa 57 4b 19 c6 d5 3c c8 b8 ce 5d 42 78 fc b1 cc ce b2 6e 80 de 0f 49 da 41 93 3c 62 0e 8f 6f cf d8 6f 99 1d ab 2f 49 d9 3a 87 a4 ee 3e 28 ec 25 2d 53 75 4c 85 16 7d c8 21 3c e6 53 bd df db 25 97 2d c7 50 02 df 8e 2b 16 77 5f 1a 84 ce e6 4a 6d f0 e1 82 57 3d 1e 05 3e 20 9a 71 b4 36 80 69 e6 34 4c 30 2c b4 e5 28 e6 3c 10 98 59 3d c6 c4 ee bd c6 6a 92 b9 92 8f 08 f5 29 be 8a bc e5 fb 79 a2 5d 2f a9 8a f8 1a a2 9e f7 83 4a da c7 7a d3 a4 e5 65 db 92 ea f2 10 0c 12 50 1e 7d ed 83 55 1f 5c 0a f4 f9 55 47 89 57 5d b6 c4 60 c0 d8 5a bb b5 cc f8 56 93 c8 86 2b 66 97 dd 65 06 2f 5b db 46 25 af cb 61 01 9e 93 bc 2f ec 1e c1 d3 af fb 20 90 5d 5b 56 5d ef 5f f2 a9 ac cd e0 d2 b6 ae c3 5f f1 2d 86 9f 35 fe 8f de b7 5f 73 7d b2 bf 61 ae Data Ascii: %6{WK<]BxnIA<boo/I:>(%-SuL}!<S%-P+w_JmW=> q6i4L0,(<Y=j)y]/JzeP}U\UGW]`ZV+fe/[F%a/ ][V]__-5_s}a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49955	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:41 UTC	1093	OUT	GET /A-Rnrh0J7iKmABskTonqFAANRLGTGUg_nuE4PEMYwJavL3nPt5uWsU2WO_DSgV_mOOM=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:41 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1342 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:23:17 GMT Expires: Fri, 25 Oct 2024 20:23:17 GMT Cache-Control: public, max-age=86400, no-transform Age: 8844 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:41 UTC	845	IN	Data Raw: 52 49 46 46 36 05 00 00 57 45 42 50 56 50 38 4c 2a 05 00 00 2f ff c0 3f 00 85 24 db b6 d5 36 d2 40 32 10 1a 43 dc 0e 27 1e 41 98 db c5 cc cc cc d5 62 66 66 e6 4a 52 15 46 bb 16 7b 2d 15 ea e9 be ff 75 5f 53 11 fd 97 c4 b6 91 24 49 8e 98 d9 2b 31 88 b9 6a 95 2e 4f d6 3f 30 bf 52 ff 95 fa af d4 7f a5 3a aa 3d d4 ad 8c 0f 7a 15 f3 1d 6a 4f 70 af d3 55 de 03 dd 0f e3 a9 35 d1 bf 7d a2 db 2f 9d 6b 5b 18 4f 6b 13 fe 8f 9f 75 7b 9d 63 2d 0b e3 e9 54 d2 d7 94 2a af 69 70 aa ba 30 9e 9e 24 ff 0d 2c d2 d5 17 97 ca 84 f1 34 c4 e0 8d df d4 ed 57 0e f5 25 9e 72 01 85 9a d6 ed 1d ce 94 0b e3 89 05 7e 28 af a9 f5 0a 38 ea 58 a8 5b 57 05 bf 80 83 46 1d d3 ed 3e 9f 80 83 48 0d e9 f6 41 7f 80 83 4a 15 44 9d 3e 7d 26 a2 4e 0c 8a 43 65 7d 01 0e 2e ca 8a fa 28 4c f5 5d 5c e3 Data Ascii: RIFF6WEBPVP8L/?$6@2C'AbffJRF{-u_S$I+1j.O?0R:=zjOpU5}/k[Oku{c-Tip0$,4W%r~(8X[WF>HAJD>}&NCe}.(L]\
2024-10-24 22:50:41 UTC	497	IN	Data Raw: 96 b9 da a6 db 2f 98 09 33 e2 d9 91 75 2c 8f 67 69 c1 62 99 46 01 07 64 c2 b4 c8 e7 55 d9 00 1c b0 c6 b0 af d1 75 36 01 07 66 c2 0c 99 13 43 09 55 6a 0e e4 51 7e 31 09 38 72 e3 90 09 d3 24 af b1 08 38 2a 2a b0 5d e6 41 19 ce ed 01 8e 5a d8 84 e9 93 d7 58 03 1c 2b ff 8e f4 54 46 4c 68 cd 77 63 80 63 4f dc 0b 52 06 0a 64 f4 99 02 1c 4f 62 7b cd 79 2c b3 b9 cf 10 e0 f8 00 78 cd af b0 cc 66 d6 0c e0 c8 41 89 94 1d d8 91 75 bc 81 03 bb 82 8e 41 a7 13 d7 cb 6b 8c 00 8e 3a 34 91 02 1e 59 67 03 70 c0 89 94 41 ec 4e 65 a3 05 c0 a1 30 df 31 ec c8 3a 03 80 43 25 91 d2 8e 1d 59 47 1f 38 94 12 29 60 2c 93 3c 70 a8 25 52 c0 23 eb a8 03 87 5e 22 e5 2a 96 c9 62 0e 1c 9a 89 94 79 50 2c 73 cc 0c e0 08 b0 ff 5f 4a a0 2b f8 19 da c0 e1 30 91 f2 54 3e b2 8e 34 70 68 27 52 9e Data Ascii: /3u,gibFdUu6fCUjQ~18r$8*]AZX+TFLhwccORdOb{y,xfAuAk:4YgpANe01:C%YG8)`,<p%R#^"byP,s_J+0T>4ph'R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49954	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:41 UTC	1093	OUT	GET /U202Yto9o6IT1ZA8bgigA5q4nIzvu0S9ztl2d0WQSj6Iw0hIw5W7SIAnH0U2-Kk3nao=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:41 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1008 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:18:10 GMT Expires: Fri, 25 Oct 2024 22:18:10 GMT Cache-Control: public, max-age=86400, no-transform Age: 1951 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:41 UTC	845	IN	Data Raw: 52 49 46 46 e8 03 00 00 57 45 42 50 56 50 38 4c db 03 00 00 2f ff c0 3f 00 77 06 a9 91 24 49 92 f7 21 cd 6b d0 0d 80 e1 0f 60 ef aa b4 f7 32 70 dc b6 91 24 c9 33 d8 df e6 9f d3 46 b3 af b9 c7 a5 f9 9f ff e4 49 92 24 c4 40 40 42 12 40 12 50 01 89 e1 5a 29 fc 9e 90 84 b4 32 60 e8 65 86 86 59 38 82 9b 04 10 62 48 36 54 88 01 08 95 09 15 60 48 00 21 09 00 49 c3 01 13 00 00 85 ca 01 23 03 89 00 48 03 38 e1 18 8e d0 87 df 42 c8 51 66 e8 e1 5e f9 b8 a9 18 40 a1 9b 55 08 48 6e f9 7d 01 85 ca 7e 10 d6 81 a2 90 04 24 23 87 f4 61 4e 48 b2 8b 8b fd 42 e6 81 90 e4 80 75 b1 16 c8 79 91 80 bf 8d 1d bc 9c 0f e4 e3 e6 71 a2 cc c3 cf cd 75 51 51 2a 89 8b b5 e0 cf 00 18 58 30 00 00 d8 00 0a 47 68 a1 50 38 42 61 9f 80 7f 7e c0 2f 6c f8 80 17 bc 7f cc f0 fc 02 69 db b6 9d 91 Data Ascii: RIFFWEBPVP8L/?w$I!k`2p$3FI$@@B@PZ)2`eY8bH6T`H!I#H8BQf^@UHn}~$#aNHBuyquQQ*X0GhP8Ba~/li
2024-10-24 22:50:41 UTC	163	IN	Data Raw: b9 e8 39 e3 d0 8b 75 00 af 5a 27 e0 89 67 d1 d3 97 a2 67 a5 a3 17 ea 89 5e 9c 80 c7 3f 44 4f d9 8a 9e 99 87 9e 33 1a bd 78 53 f0 aa 75 02 9e 78 16 3d 7d 09 7a f6 54 f4 c2 3d c1 e3 1c 02 1e 7f 1b 3d 65 1b 7a 66 09 7a fe 61 e8 25 9a 81 57 f1 9c 80 27 9d 40 4f 5f 8c 9e 3d 11 bd 70 4f f0 38 87 80 c7 df 45 4f dd 80 9e 99 e3 49 8a df 85 7f 3d c7 98 16 fe fd ef 87 7a 92 c6 1d d3 7e 79 7b 99 63 4a 5b dc 2e ed b7 77 22 5e bb 96 2d a3 8c e0 c9 5a 79 ca 7f 29 ff a5 fc 97 f2 5f ca 7f ff e8 00 00 Data Ascii: 9uZ'gg^?DO3xSux=}zT==ezfza%W'@O_=pO8EOI=z~y{cJ[.w"^-Zy)_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49953	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:41 UTC	526	OUT	GET /aD_yV7NdU8txkDPV1NU557BjnvZf-D6Ip8Cn7xhdieHgMLGt1FTQXlBBgH1jTNhhnw1v=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:41 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1192 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 18:51:53 GMT Expires: Fri, 25 Oct 2024 18:51:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 14328 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:41 UTC	844	IN	Data Raw: 52 49 46 46 a0 04 00 00 57 45 42 50 56 50 38 4c 93 04 00 00 2f ff c0 3f 00 37 e7 20 92 24 45 aa ea 85 47 ff 62 de d9 31 3c 59 98 7f c8 91 24 29 92 22 b2 6a 19 f4 d7 64 f5 da d7 1e e6 fc ab 6d db 86 41 b6 ce bc 41 0a ef 08 7c e4 03 81 e3 c0 ff f8 96 40 90 42 01 49 9b 8f 0e 6f da 0d 16 ab bb c1 55 15 d0 ea 60 a5 ee ec e9 69 75 24 49 b3 3f 77 0b 2b 56 04 06 b4 c1 a6 2a e9 cf ea 57 73 51 2c 0d 9c 48 82 0a 85 11 8a 08 45 55 17 90 10 40 69 15 8a a1 90 84 4d 74 27 21 09 12 a0 8d aa 21 48 42 73 a6 08 40 fa a7 05 29 2a e0 48 a5 28 0a 0b 12 54 0a 8c 88 0a 21 c5 42 1b 14 23 50 40 43 42 6c 00 05 54 11 12 62 83 0d 24 48 40 85 54 0a 48 90 04 48 80 24 01 21 a0 14 11 d2 5b 50 8c e2 40 50 84 10 2a 84 4a 8a a1 21 08 ef 87 84 18 11 92 04 09 12 42 7a 33 14 1f d2 0f c8 1b 05 Data Ascii: RIFFWEBPVP8L/?7 $EGb1<Y$)"jdmAA\|@BIoU`iu$I?w+VWsQ,HEU@iMt'!!HBs@)H(T!B#P@CBlTb$H@THH$![P@P*J!Bz3
2024-10-24 22:50:41 UTC	348	IN	Data Raw: ce bb bd 1c 22 db 3f f4 ed e4 ec fb 77 95 00 ce 4e 3d 63 73 78 1c e9 0b ff ac de da e5 fd 37 d7 82 e3 18 9a da f2 40 9a 92 f0 c6 89 0d 8c b9 ee e8 f9 e0 d8 83 1c 63 d8 19 1c cb 8c 21 09 06 c7 0a 63 c0 d2 f0 f8 c6 6f 6c dc e9 e8 d7 c2 12 12 29 06 c8 77 c8 b6 e5 df 21 ba c5 90 22 9c 0f f4 21 ce 88 ac a0 f6 4c 52 7b f8 91 da 6b 3c 8d d4 1e 7e 62 d8 d9 30 06 9e 05 a3 f6 ea de 46 4a 2f c2 19 6a 0f af 93 16 14 30 6d 3a d0 04 9f 0a b7 08 bb a8 3d 2c 22 a5 d7 68 34 29 bd 14 8e 51 7b d8 41 4a 0f bf 92 d2 c3 5c 52 7a 65 c7 92 d2 ab 39 90 26 f9 5b 38 d5 eb 46 a3 7c 30 94 6a f4 3e 4b e9 95 1b 4c 52 79 18 47 4a 0f f3 49 e5 25 f1 02 a9 bc fa f8 8a 14 5e 84 09 27 49 e1 b5 c2 93 24 75 97 85 5e fb 48 e1 55 c2 9b 24 75 57 1b 0b af 90 ba ab 8d e9 fb 49 aa 2e 0b a5 d7 54 d7 Data Ascii: "?wN=csx7@c!col)w!"!LR{k<~b0FJ/j0m:=,"h4)Q{AJ\Rze9&[8F\|0j>KLRyGJI%^'I$u^HU$uWI.T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49952	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:41 UTC	525	OUT	GET /TBRwjS_qfJCSj1m7zZB93FnpJM5fSpMA_wUlFDLxWAb45T9RmwBvQd5cWR5viJJOhkI=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:41 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9130 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:51:16 GMT Expires: Fri, 25 Oct 2024 20:51:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 7165 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:41 UTC	845	IN	Data Raw: 52 49 46 46 a2 23 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 5a 23 00 00 2f ff c0 3f 00 09 48 8e 24 49 8a 14 9e d5 10 15 29 fe ff e0 35 1b 98 39 47 f4 7f 02 f4 7f ec 3b 24 5a ea 9e 60 27 b9 2b 69 cd 90 c4 88 aa 2a 46 7c da 6d 27 81 13 ec 24 06 ce 09 a0 a9 e5 7d 4e 97 49 62 80 a1 b6 93 84 03 4d b5 39 1e d4 1a 41 6d 27 b1 8f a9 b5 ec fd 00 cd 80 4d 12 43 0d d5 a3 2b 30 b5 cc 4e e2 63 48 5a 86 9d 30 d4 ab 16 0f cc 94 f4 28 63 ab 00 92 78 a8 5f b8 0c 95 ee d6 ae c4 53 dc 91 e4 32 23 a9 1b 24 75 f7 c4 9f bd 70 1b db b6 aa 2c 24 fa 15 fc e8 cf c5 a5 ff 82 28 c3 5e 86 1e 2c 66 d4 36 92 e4 98 e7 de e7 42 88 13 db b6 9d 66 d3 91 57 b1 90 4f 42 ba ac f3 57 19 0c 32 b2 ff 13 80 ff d1 e6 27 22 00 3a ae 3a 5e b1 e4 10 84 a9 a5 Data Ascii: RIFF#WEBPVP8XVP8LZ#/?H$I)59G;$Z`'+i*F\|m'$}NIbM9Am'MC+0NcHZ0(cx_S2#$up,$(^,f6BfWOBW2'"::^
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: d8 ef 37 ff ff 96 74 52 11 f7 ba 82 64 64 35 1f 12 88 21 ec 75 03 93 24 2f 26 a4 5e 7b d8 1f e2 31 08 a7 46 8d 95 57 a7 8c 70 d3 f8 a1 85 51 4b a3 39 65 4b b7 eb 3b 21 8a 74 73 e1 28 d7 7a bd b6 ef e1 05 be 90 63 f2 42 e2 d2 1f af 71 c3 2f 1f 99 44 c4 21 d5 83 42 6e 3e 3b c8 3d 4c df 01 44 23 c2 c4 6b be 7b 2e 65 2e 5f dc 8c 79 e2 9d fe 8e 46 0b 6b 0d ed 96 04 04 a9 27 3c af fa 3f b2 59 48 d0 2e 38 b8 80 33 2e 03 01 a5 92 85 05 96 91 85 65 e1 be 93 45 73 71 94 37 8f 4c 7a 8e f5 87 09 16 d3 20 96 73 59 00 82 cc e9 32 16 53 ca 17 1b b0 4c 90 ee 01 a6 ef c2 32 c8 7d 97 91 11 fe 90 fa 6c ae 6a 1e 40 c2 62 c2 32 64 2d 56 8e 0a 16 54 e7 d4 26 57 78 8f 18 13 34 8a 52 c9 c2 20 7c b0 49 fa 2e 0b c8 1d 9d 4e c7 6f 24 61 1e 09 8b 45 26 96 7b 9e 13 16 56 e7 56 2f bb Data Ascii: 7tRdd5!u$/&^{1FWpQK9eK;!ts(zcBq/D!Bn>;=LD#k{.e._yFk'<?YH.83.eEsq7Lz sY2SL2}lj@b2d-VT&Wx4R \|I.No$aE&{VV/
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 49 2b 97 c2 73 e4 4d 18 a4 6d 30 3c 62 49 08 36 1d bb 91 67 ba f6 20 12 72 1f 07 e7 a9 50 41 ac 97 00 9c bd e9 ff 5e 68 8b 84 aa 22 2b 36 16 06 c3 41 86 81 65 21 cb 9a eb fb 99 0e 86 b1 c5 6c 1a 46 ce 30 4f 35 23 09 90 1d bf be 8d 3b fc 97 59 35 cf f5 f3 cb bb 4e db 60 c3 24 b7 1b 4e 00 1c 34 3d 2e c7 74 40 a6 4c cb 39 61 1a 1c 67 4f 85 80 00 58 5e b7 0f bc 36 55 05 a6 26 f6 23 df ab 06 2c 1b 63 2c c3 52 59 89 6b c6 8c c3 2c 33 85 35 89 34 26 67 36 8f 76 04 c8 fb 8b 8b 37 7a d7 da 0f a4 c4 e8 c0 78 a6 c1 36 99 2c 41 a5 7e 30 da 30 4b b9 a6 cd 30 b9 c7 72 0e e7 b9 2c 04 a9 03 ad 23 64 36 e9 eb 1f 6f 80 70 b0 ca dc 6c 0c 76 62 dd 32 b9 dd 0f 4d 2f dd cc 42 d8 71 0d 41 66 26 6b 63 cf 25 22 d9 bb 5a 9e 10 9d f7 37 eb 3e c3 3e 55 06 03 58 50 12 c5 98 e8 61 e6 Data Ascii: I+sMm0<bI6g rPA^h"+6Ae!lF0O5#;Y5N`$N4=.t@L9agOX^6U&#,c,RYk,354&g6v7zx6,A~00K0r,#d6oplvb2M/BqAf&kc%"Z7>>UXPa
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: a1 9f df e3 de c6 2c bb 51 e0 64 d4 a7 e4 74 47 10 39 b5 f0 0d b4 cd 1d 31 82 85 36 3b 73 3c d5 50 93 94 79 95 fb a2 cd 6d b2 36 8d f7 05 0c 90 be be bf 2a 5d 2a 79 35 e5 ca 7a d4 38 00 e0 93 55 0f 74 3a 2d 04 4c 33 23 b6 22 ce 1e cb 20 cc 79 5e c6 ac ab c3 36 f7 5c 9e dd 6f 24 a0 12 ac e4 f5 aa 51 05 9a e7 87 9b 7b a2 0d 00 30 5c d6 79 59 50 67 da 48 58 21 ed cc 63 ed 60 31 c7 db 59 da ec 1d 59 9b 2f 28 11 8e f1 a9 4c c2 5f fc 26 12 43 65 52 0e 9a 1e 5e 0f 64 12 e3 83 68 dd d8 32 3e a2 32 9b b7 77 ce 63 d9 8e 85 40 f4 e1 eb ba e4 01 be c5 4d 64 45 95 fa d3 af 6f a4 54 76 67 04 ab 87 7b 4f 62 00 e8 0f cf 7a f2 10 1f 70 1c 2f b8 6f 37 73 9e 4a 1d 39 07 86 49 18 ea d0 40 b4 36 59 19 8c 98 f4 16 f2 7a 19 dd c8 ed 6d a7 e4 66 c7 d6 3c db db 03 70 a2 79 90 30 Data Ascii: ,QdtG916;s<Pym6]y5z8Ut:-L3#" y^6\o$Q{0\yYPgHX!c`1YY/(L_&CeR^dh2>2wc@MdEoTvg{Obzp/o7sJ9I@6Yzmf<py0
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: dd f1 86 6d f8 c7 b8 d5 e8 96 36 86 4c 5c 78 aa f7 e4 2d 72 bf be 2f eb 35 97 0a 63 f3 e6 39 9e eb 30 c3 c2 9c 46 0b 20 24 ac 9d 45 a8 2b bb c6 6f c5 4e 7d 64 d8 18 3b 66 db be 93 d8 80 9d 43 5b ea fd d7 eb f5 ff 75 ce 81 91 d5 3b db 83 39 8b b9 17 52 c9 ad 33 20 cb 9d bc ed a4 4f 34 48 69 de 0d 86 22 dd d0 86 c1 c8 c4 f6 a2 36 dd c3 1b 22 69 5b 94 8b 30 8f 93 e5 d1 6e e6 9e 37 25 0e 4c 5a f2 9a f1 e1 85 37 47 c9 c7 71 2e 99 1c b7 3b 61 26 9c 03 03 70 d1 5c bd cc d9 40 86 06 07 dc 4f 77 89 4d de 3c 8f a5 14 ca 2e 3b d2 a7 ec 09 61 12 c3 17 84 e2 2b bd fd ba 35 c2 d8 60 a1 31 e6 d8 80 3b 5b f5 e3 a1 db 8e 6c 49 bd 91 b7 85 df 9d b5 a7 e3 78 b0 c3 9c 1d 82 a5 65 04 c4 01 37 9e b9 0e e9 55 7d dd ff 70 3f 0c 63 63 a0 6e 60 4c 62 c0 3e ab 70 6b b7 e6 28 34 27 Data Ascii: m6L\x-r/5c90F $E+oN}d;fC[u;9R3 O4Hi"6"i[0n7%LZ7Gq.;a&p\@OwM<.;a+5`1;[lIxe7U}p?ccn`Lb>pk(4'
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: a6 77 d5 a0 18 b9 ee 9c a7 82 b5 30 45 22 4c 1e 4f 13 e9 0a 14 50 de bf b7 55 a9 5f 09 41 e8 92 5d 32 24 0f bf 11 aa bc 78 87 68 9e a2 62 a1 5c c7 39 db 73 29 ef 2f 46 4e 5d 61 0c fc 88 c7 64 c9 73 21 8c 24 d1 3b a9 eb 66 a2 25 32 47 d6 a7 7d 56 e4 17 51 e2 f8 96 fb 1b bd b5 90 b3 1d 8f 75 30 5d 96 6b 6c 09 df ee 1b 3e f1 08 87 ae ea cb 45 89 a6 0c 4b 98 92 d0 4c 25 03 63 49 f6 ca 88 08 dd 5a 62 20 dc 7e 99 e5 3a 0f b6 e6 ba 26 e7 30 43 a6 58 18 d9 92 c7 da 58 f9 ca 5c 5d 1e 35 29 64 50 14 95 d7 25 04 39 2a 3b 3c 78 b1 d2 c3 8e 7b ca cf 1b fa ec 3a 9c 9d a7 72 5d 16 cb 5a 8e 96 88 34 b7 61 9e 39 56 0b 1e 7e 1c 24 c0 34 89 42 76 13 25 4b 00 c1 95 de 98 68 04 ee 3b b9 af 27 21 33 16 67 f6 54 26 43 9e 44 38 30 e2 6a eb 31 ea 34 79 f5 45 29 05 e1 0c 09 2d 49 Data Ascii: w0E"LOPU_A]2$xhb\9s)/FN]ads!$;f%2G}VQu0]kl>EKL%cIZb ~:&0CXX\]5)dP%9*;<x{:r]Z4a9V~$4Bv%Kh;'!3gT&CD80j14yE)-I
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 1a a4 20 80 85 8d 13 0c 66 cc 30 dd 57 91 ee dd 13 43 1c 00 6f f1 5c 07 b1 3c 26 9b 6b a1 3a 40 74 a8 7e 10 29 40 e3 de 68 25 a2 b5 20 cd 36 f0 76 9f fa cf fb 81 91 66 67 4f a5 61 c1 1a 33 f2 30 5f 9d ba 94 cf f8 93 64 18 52 58 13 ba 07 03 f6 20 68 0e a7 0b 65 91 17 c4 31 70 3c d8 35 21 8b 20 35 1d d7 ad 8b 8c c9 02 a2 60 ea e7 3f a4 dd a6 29 66 61 63 b1 11 ac f4 b5 bb be df 42 e0 3c 15 cb 82 d8 10 c2 58 47 75 01 6a 37 79 af 77 56 ad af af 2f 69 9d 4e 33 81 8d 00 f8 3d ca 48 ff 4c 0c 03 6f 61 1e 6b c6 c2 52 cc 35 6a 36 5f 99 3c 8a 4f b9 82 6c 89 aa 23 af a9 02 ec bb 71 7e d7 c3 a9 fe e8 af 08 90 18 38 ff 6f 4f a5 91 96 19 6c 8d cd 19 7d 2d 8c ef 49 34 f5 06 d9 41 bb d1 ec 92 e4 81 06 80 6d d1 19 09 11 8a 22 e0 7c fd c8 8f 7d f7 a9 fc 9f 26 44 ce 28 3b b6 Data Ascii: f0WCo\<&k:@t~)@h% 6vfgOa30_dRX he1p<5! 5`?)facB<XGuj7ywV/iN3=HLoakR5j6_<Ol#q~8oOl}-I4Am"\|}&D(;
2024-10-24 22:50:41 UTC	17	IN	Data Raw: 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49957	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:41 UTC	1093	OUT	GET /M0srkoCNqpU1LsVI55ik8Q11JP-CeQgZq5IzT0yXmM_cyc-AhxdcOGkvpgH8hsLfe-Q=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:41 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5904 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:12:32 GMT Expires: Fri, 25 Oct 2024 19:12:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13089 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:41 UTC	844	IN	Data Raw: 52 49 46 46 08 17 00 00 57 45 42 50 56 50 38 4c fc 16 00 00 2f ff c0 3f 00 35 07 e3 b6 8d 1c 51 fd 97 bd 97 f3 fd 22 62 02 9c be b5 da d4 92 d1 ea d6 6f 61 61 d1 93 55 b1 85 c1 84 6d 96 eb f8 88 b2 63 95 ed 9b 74 a2 bf b6 49 4b cf ff 2f 92 dc bc 10 bf 8d 30 f3 3a 6c 66 08 33 33 93 98 99 99 99 c9 61 87 99 99 19 4d 61 c3 24 a6 e9 7f d5 bf b7 ea df 7d 34 d6 c1 34 1b 66 32 ce 84 99 4c 75 30 86 39 e9 70 7a a5 9c 8c 25 19 27 1c 33 db bd 27 33 ae 34 52 4b 7b 32 43 a8 0e 13 a8 55 72 32 fe 25 33 ec 29 cc 49 87 99 a9 c3 19 4b be 46 6a 69 a5 91 7a 65 c6 df c1 d4 13 66 da 53 ff 94 13 93 a9 0f a6 59 c9 7c aa 70 96 14 66 ee 30 33 55 98 8e dc a1 8d c6 81 3d 18 48 db 36 94 6d 3f db 48 92 9c f4 ff a3 c1 26 06 6d 69 97 38 28 a2 21 f1 fe 4f 80 e5 fd ff 4f 4b 72 e6 5f c9 8a Data Ascii: RIFFWEBPVP8L/?5Q"boaaUmctIK/0:lf33aMa$}44f2Lu09pz%'3'34RK{2CUr2%3)IKFjizefSY\|pf03U=H6m?H&mi8(!OOKr_
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 4a 54 0b 20 dc 10 79 25 e2 d3 65 a8 ae 89 48 07 76 98 a0 ab 0c 2a 1b da f2 20 dc d0 6e 1f 12 04 9c 0d 84 33 5e a0 91 d8 f5 71 76 ea 4e d0 95 39 02 1b 39 13 00 9a e8 c0 89 4b c2 64 cf 88 3d 88 b1 2c 05 a5 f3 26 90 98 18 c0 d3 d9 b1 e6 40 82 c4 96 6e 44 a9 ee 28 dd 63 ce cd f6 04 1a 9d f5 9a 94 00 c8 19 3a ae 58 e0 7e 19 d6 4c cc 72 34 f3 72 23 fa 72 e3 b0 c1 98 2a 10 f7 54 e5 86 1a ee ea 55 42 64 cb 1c a0 91 2c 81 dc 00 b7 04 c0 6c f9 ac 4d 7e d8 3a 37 c1 94 e2 b0 02 af 0f f2 03 96 5f 8d 25 33 63 88 62 51 d8 75 4c 26 53 f8 55 db ed 13 29 1e 70 8b 37 32 e9 d6 12 a0 79 eb ad 66 b3 79 a7 88 96 6b d9 f8 a8 7b 98 88 de 02 a2 9b 33 11 7d c0 64 32 99 9a be af 59 90 91 f6 fa fb 6b e2 54 28 98 66 45 cf 92 ee 1a b2 09 ba ce f0 ec c7 0b 64 34 ce 16 24 41 20 52 de f0 Data Ascii: JT y%eHv* n3^qvN99Kd=,&@nD(c:X~Lr4r#r*TUBd,lM~:7_%3cbQuL&SU)p72yfyk{3}d2YkT(fEd4$A R
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 93 82 b2 45 4a 6a 73 af 36 7a 6a c4 55 91 99 67 d0 28 19 5a dd 07 09 47 ea 41 93 ef 9b d9 6c 36 ab 00 b6 ae 8d 92 30 3b 92 f7 fa 70 45 5f 2e e8 eb e7 8a 10 89 6b 3c 5e c7 bd 21 69 fd 25 82 5e ef 45 24 3c 76 7b 02 76 ca 84 9c 94 13 51 88 d7 f5 30 9b cd fe 54 b4 3e eb 62 c7 0c 98 bc 29 c1 aa 3c f0 38 79 23 5c 78 e1 22 e1 3e 42 05 78 64 da a8 48 78 b0 da c1 ae 67 9d 73 4e df 85 46 61 ef 0d 48 fe aa 0d 00 42 5e eb 25 48 6c 18 e8 0d 41 0d 7c c3 67 92 70 25 7d 3f 44 72 3b 14 09 71 97 7c 11 2c bc c0 d4 cc f9 d3 98 7f 3a a6 d9 f1 37 2b 2d 8f 86 3c 38 37 33 00 18 62 2f cb 03 b1 72 48 59 90 d5 af 9f 33 62 e4 bb 46 e8 6b 02 40 0c b3 03 73 85 e4 56 7d 57 00 b4 3a 3c 1e d6 4d 0a c1 7f 12 96 f8 e8 de c3 93 86 b5 1e 3b 30 e8 f5 69 79 26 08 44 03 ee d9 77 ed 7c 04 fb 3d Data Ascii: EJjs6zjUg(ZGAl60;pE_.k<^!i%^E$<v{vQ0T>b)<8y#\x">BxdHxgsNFaHB^%HlA\|gp%}?Dr;q\|,:7+-<873b/rHY3bFk@sV}W:<M;0iy&Dw\|=
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 8d 5d 21 23 c9 d1 2e 27 cc 25 ec 1a f5 50 fc ff 46 81 f1 d9 c8 2d 1f 47 7e a9 10 f5 5a 83 f5 bc ca 9f 88 e2 37 13 04 e6 a7 b5 2f 1b 97 52 05 9c ef 6a a7 45 09 b6 9f 06 ec d7 d4 64 99 58 20 c4 b5 81 b7 1a f2 5a 03 d6 5c 3e 54 94 60 0e 55 73 00 40 5f 05 32 91 28 80 27 af d8 a6 83 dc 20 71 20 94 e4 5a 71 81 43 e8 db 0e f2 70 0b 0b 1f eb 1f b7 47 49 ee 94 28 50 56 5c 15 53 11 36 35 46 c0 79 0f 81 2c 1c 46 25 69 ee db a0 34 ab c1 0d 54 4d 8f b1 62 36 46 cf 95 b1 03 46 1d 75 d4 7c 2b 40 63 84 e6 92 83 82 f0 fe 05 c4 70 57 ab e3 8a 12 5d 1b 3a 95 b2 59 2d 8d d7 08 92 d7 82 c9 08 50 ff 2b 07 ef e1 52 9a 7b 9f 66 60 1a a5 ba 2f 4a 03 68 06 ef 89 82 4b 30 03 4a 25 a7 f4 d0 71 b8 9d b8 ce e2 6d f8 5a 14 36 4a 56 e5 34 4a a3 0d 64 54 60 f5 c8 40 6e 84 8d 7f 7e ce af Data Ascii: ]!#.'%PF-G~Z7/RjEdX Z\>T`Us@_2(' q ZqCpGI(PV\S65Fy,F%i4TMb6FFu\|+@cpW]:Y-P+R{f`/JhK0J%qmZ6JV4JdT`@n~
2024-10-24 22:50:41 UTC	926	IN	Data Raw: cd 14 80 19 79 1a 59 26 df f9 f2 d9 0f 02 0a 1c 46 17 97 78 31 76 b4 14 92 1e b8 ea 17 40 f1 eb 69 60 d3 bf 49 04 50 6c 3c 01 c4 bb 7d ec 40 0f 97 1e 94 4b cf f4 aa 43 d7 6c c1 f0 c7 a5 97 e3 95 20 de fc 15 32 74 a3 b8 64 00 42 2f a2 95 b1 2c 02 40 0e 1e 97 56 11 4d a1 60 3d 91 25 8d 27 ca 01 f8 de 91 83 4a 15 b8 02 20 34 7a 97 24 2a b5 17 56 80 62 66 5e 96 60 22 97 03 d0 dd 33 c4 21 ae 9f 4c 0d 84 bb 86 4f 15 97 b7 d5 2c 0e 14 cd 2f 23 53 bf 19 a1 93 8f 94 2e 68 4f 90 d2 c5 01 f8 8d 17 5d b7 46 84 b4 74 f6 2c 3f 88 e6 e1 c4 07 cd 26 e8 ba 27 cb 8c 01 55 4f 83 6c 39 8b 9b 0a 3f e7 bb c7 b0 79 82 4e b8 00 fe fa 77 8f 61 f3 04 9d 70 0a 00 b1 c4 e0 f2 b9 e4 a8 ff a8 a7 9e 66 7a 6e be 2c 42 11 a0 ca 23 51 63 e6 3a f3 5d be 9e b7 35 d3 73 f3 85 a3 31 a0 cb a3 Data Ascii: yY&Fx1v@i`IPl<}@KCl 2tdB/,@VM`=%'J 4z$*Vbf^`"3!LO,/#S.hO]Ft,?&'UOl9?yNwapfzn,B#Qc:]5s1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49958	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:41 UTC	525	OUT	GET /DC9EifITAPkp5J1kq8-dx1IPLqjdZwVoVYsgelm1AwE_IAwBCMuPZg7OTQD5OW_lEwqp=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:41 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1580 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:06:42 GMT Expires: Fri, 25 Oct 2024 21:06:42 GMT Cache-Control: public, max-age=86400, no-transform Age: 6239 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:41 UTC	845	IN	Data Raw: 52 49 46 46 24 06 00 00 57 45 42 50 56 50 38 4c 18 06 00 00 2f 3f c0 0f 00 09 45 6d 1b 49 4a b3 bf 0e 7f c2 7b 51 88 e8 ff 04 f0 2b 93 b6 95 ec 6b 9b 88 04 51 e1 e2 79 c1 a8 b6 6d 25 27 02 ce c1 5d fa 27 21 02 31 18 31 b2 0a 8a da b6 81 fc 2c 7f 64 03 71 c2 50 d4 46 0a 54 09 48 40 06 fe 25 f1 be fa 9f f0 77 76 6a e4 71 74 89 48 49 42 c9 4d 2f 40 44 e4 8a d5 ef 1a 44 f4 b5 58 e9 01 08 90 9a 9a 11 a0 c0 93 07 4a b6 ed 28 92 a4 27 73 0c aa 66 66 86 fd af 85 99 19 13 1d c2 74 4e b8 24 b7 8c 98 f5 48 12 6d 6d c7 eb 9c 37 ff 1f f3 cf 5f db b6 6d 8f 6c 77 66 db b6 31 ca ea d8 b6 6d db b6 db 24 57 5f 2e 3e 49 92 24 29 92 a4 56 3d 70 de ff bf 8a ef cc cc 58 1e 0e 24 49 6a 9b 26 38 21 79 41 d8 a5 37 7c e2 7e 02 fe e7 29 88 4b 43 43 76 f1 4e 70 61 10 10 71 f1 4e 1c Data Ascii: RIFF$WEBPVP8L/?EmIJ{Q+kQym%']'!11,dqPFTH@%wvjqtHIBM/@DDXJ('sfftN$Hmm7_mlwf1m$W_.>I$)V=pX$Ij&8!yA7\|~)KCCvNpaqN
2024-10-24 22:50:41 UTC	735	IN	Data Raw: 52 33 71 b1 a6 5f cc 36 23 1b d8 56 ca 21 5b 26 5c 00 32 20 de fe ec f7 e8 f6 b9 d8 8b cb a7 20 d7 a2 89 bc 08 8f ec c6 07 ac e1 47 e6 32 69 9e c7 96 05 fc b6 3b 7d 0a 03 c9 71 f9 ae f2 43 e0 1c 13 55 61 27 2f be 29 c7 03 8b c6 7a 1e 4e a5 af 05 b8 0e 5a 64 7a a6 97 80 00 19 4c 80 7b 42 bf 6c e1 fd b2 e1 98 9e ed e5 4d c4 0d ec d7 a6 7f 33 fb 2e a4 d4 95 e6 cc bf 2c 9d 2a db 3e 80 77 4c 0f c0 04 c8 c4 eb ef d1 77 e7 df bc 2f 38 94 c1 9e 3d e3 d0 f8 00 64 33 19 9a e8 b3 f0 c8 da e6 e4 cc 96 5f 56 a6 57 37 08 a8 76 6a c8 84 cb 1f db 07 9c bb 17 7d 5f 49 b2 48 ea cc 99 e0 74 21 da e8 93 f0 45 e5 e5 54 21 4a 00 65 ce f1 da 25 20 50 07 c0 90 c1 72 86 bb b3 b7 c0 fb 69 8e 9b c5 a5 e8 09 43 f8 ff 9d d6 7e 1c 12 33 e7 b1 66 32 8e 2a c5 6b 77 81 c8 b6 62 15 3b 66 Data Ascii: R3q_6#V![&\2 G2i;}qCUa'/)zNZdzL{BlM3.,>wLw/8=d3_VW7vj}_IHt!ET!Je% PriC~3f2kwb;f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49959	142.250.185.86	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:41 UTC	525	OUT	GET /1Ns1T_qN0pEXMvZeZ5lQNAR8z4blP7ce2J2Nn5doXvt2T1g_W7VMORdWHaApkOooupI=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:41 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 53088 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:34:26 GMT Expires: Fri, 25 Oct 2024 21:34:26 GMT Cache-Control: public, max-age=86400, no-transform Age: 4575 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:41 UTC	844	IN	Data Raw: 52 49 46 46 58 cf 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 0f cf 00 00 2f ff c0 3f 10 4d 40 8c 24 37 6c e3 27 08 80 38 4e fa 2f 98 10 65 a7 82 88 fe 4f 80 4c 0a ce bd b7 a4 b5 96 d9 30 a2 16 92 64 46 55 1c 63 8c b5 96 9d c3 dd 9d f2 88 69 40 d1 01 4f e0 90 30 eb c8 ce 4e 49 da 95 06 ac 24 e2 e0 22 86 bb 59 85 c7 11 90 80 fb 85 6d 37 cb aa 28 20 82 eb 31 a6 cc b6 99 67 d1 16 90 57 d6 55 d0 3a b0 b8 0c 9d e6 9c 19 dd 75 38 44 14 97 af 5e 2f 7e 1d cd fa 4a 34 ff 78 7f 4b 92 c6 31 67 04 1e 17 cb 1d 90 a4 d1 30 a7 84 5f f4 2e 8d 31 dc 01 62 4e 49 71 b3 25 c9 f2 89 88 39 f5 b8 a5 fd f9 48 62 18 44 43 84 a4 cf f3 96 e4 ee b2 e2 31 22 23 74 e9 2d 40 40 70 99 27 a4 17 8f ce eb cc 84 e0 d7 fe a3 c5 6a dc 57 57 64 e7 0f bd Data Ascii: RIFFXWEBPVP8XVP8L/?M@$7l'8N/eOL0dFUci@O0NI$"Ym7( 1gWU:u8D^/~J4xK1g0_.1bNIq%9HbDC1"#t-@@p'jWWd
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 6a 4b 69 5a 96 bd d8 50 96 e2 5e fa dd bd 7b f7 ab f5 c3 aa 94 72 d9 dd fb be dd f7 ed f2 e9 d2 d0 26 35 89 cb 12 b5 2c 74 14 ad 85 b8 47 cb 73 b7 bf 5a ee 95 e3 56 e4 b8 f3 1a 9e 8b 78 ee fb 72 77 ef da 35 ff c5 50 86 5a 8c b5 39 67 b9 b7 bf 96 c7 72 ff bf dd 0c cf e5 b1 8e 2b 72 34 c2 8e 8e 4f 97 b3 3c 7b 7a da bd fd b5 7e 58 df 9c 5d f9 f1 e3 d1 f2 58 1e fb f4 c4 63 b9 97 7b db e3 de f7 fd aa 76 da a1 25 84 5a 4b 67 2b 3c f7 7d bf dc cb 73 9f fe 27 ee fd c8 37 ab 9c bf 4e dc cb ac 43 57 15 a3 4e da c3 18 46 d3 26 5f 76 2d f7 6c 38 4b bf f7 e6 77 2d 2d 33 cd ee 5e a5 74 5e bc 63 b4 24 5a c4 22 66 d9 30 0d 9a a6 bd 74 1f ea 4d 6d 1a f7 d7 37 f5 a6 93 d5 14 37 c4 2c 8d 90 46 83 44 45 79 ed ae 1b cd 04 69 a2 ed 3c 92 da 49 be f1 91 9d 31 2b 37 3a 42 82 dc Data Ascii: jKiZP^{r&5,tGsZVxrw5PZ9gr+r4O<{z~X]Xc{v%ZKg+<}s'7NCWNF&_v-l8Kw--3^t^c$Z"f0tMm77,FDEyi<I1+7:B
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 0f cb a5 f0 1e 99 3b fe 98 4e 2a c8 b5 6d 2d 6b 36 36 72 ba 60 d1 02 43 ea d0 06 bc 15 87 1a 18 92 64 9e 1a dc dd dd fd 8b 08 15 85 5e d1 cb 5f 05 52 ff 4a 05 19 69 28 52 99 48 21 97 48 14 a1 54 12 c2 44 00 13 82 81 69 50 09 16 68 04 0b 71 82 00 bd aa be 71 8b 2b e5 26 5a 55 e4 d7 ca 56 53 5e 9e 92 ed e2 de bc 27 ac 76 74 eb 37 25 53 be ac ca c5 dc ba 49 5f d7 a2 dc 53 33 ef 35 6c 55 ba b8 86 94 a5 d4 ec 6c 21 aa 30 43 20 03 29 42 bd 87 7e f9 3d 37 fa fe 10 9f 6e c8 2d ad e0 c6 e8 ac b0 21 59 2d 10 20 17 e8 f6 91 e0 eb 3f 31 f9 17 7e a0 fc ee 19 a8 41 a5 48 34 64 4a 04 e4 0d 3a 11 68 cc 4f 09 36 30 8b a0 00 22 23 b4 e3 57 d9 fd aa 90 9d fa 80 90 c9 84 6c 95 0d 3b 3b 4c ab 27 4a 13 b3 61 54 58 e9 21 f1 fb 07 d9 12 cc 37 79 44 f6 9f e5 97 4c 7e 58 3e a8 f5 Data Ascii: ;N*m-k66r`Cd^_RJi(RH!HTDiPhqq+&ZUVS^'vt7%SI_S35lUl!0C )B~=7n-!Y- ?1~AH4dJ:hO60"#Wl;;L'JaTX!7yDL~X>
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: f7 a2 cb 73 55 a0 54 ac 62 ed 0d 06 73 04 8b ec 8c 50 e7 2b d5 68 ab 3d b9 25 84 8c ba fd 05 fa f6 40 f0 43 36 b0 b5 a5 3c 6a 51 6c 60 3b 58 33 79 41 56 a1 83 0f 6b 52 81 1d ba d1 5b 0d c3 c2 e4 86 c7 72 d6 be ed 1e 16 f0 7d e3 0e a1 c8 d4 d9 14 6e 67 5c 5a 44 a3 71 dc 41 53 05 d6 e4 b7 b0 91 73 82 e0 e6 19 ac 87 98 45 76 c7 ad aa 48 8c b7 b5 b7 cb 0b 92 6e b3 66 84 78 5f 42 d0 e0 86 6d eb 2c 86 d6 a5 b6 31 dc ef 0e 5f 2a fb bb 1d b8 a2 70 56 13 ab c0 88 0e 31 12 ed cd 96 0b ed 3b 11 da f7 3d 1a 77 80 10 07 e5 25 1c d0 31 59 27 a4 7e de 73 45 b8 2a 42 00 ae 28 f7 0c 7f 0c 84 19 ce 75 f1 d9 7b a1 9e de 83 61 53 16 76 a2 14 6f 97 36 6e 59 88 64 95 84 3d 9b 58 d6 b2 44 c5 43 73 52 85 d9 8e 46 03 3d 60 3c 11 09 c9 01 6e bb b2 2d eb db e1 ab cd 03 46 da 71 8c Data Ascii: sUTbsP+h=%@C6<jQl`;X3yAVkR[r}ng\ZDqASsEvHnfx_Bm,1_pV1;=w%1Y'~sEB(u{aSvo6nYd=XDCsRF=`<n-Fq
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 26 c9 ec 8e 39 ee e4 54 14 d0 12 05 68 00 08 b3 c3 f0 bf d4 e3 f9 4e 9a 1f 5b 72 21 0c 87 81 01 3b 77 a0 4b 90 f5 78 b5 0c 6f 1d 15 f1 19 a9 34 fc 78 4e 8e f3 cf 18 a0 88 e2 58 b4 a0 e5 0c 8d a6 cb 7e 39 f6 74 57 bc e6 41 e2 8b 4a 30 e0 00 60 14 93 0e 02 00 11 3b cc 72 6f c5 fb 0b d3 61 9f a5 1d b3 22 3d 93 48 14 4e 90 d9 d7 bf f6 31 89 45 d7 c6 fe f8 35 dc c3 4f da 67 a2 31 26 3c 59 f9 46 e6 1c d6 01 fb b8 a1 d4 c7 5a fe ae 4c 2c 18 99 94 8e 92 e7 76 b8 e4 3b 75 29 47 5b 87 ad f0 f9 3c 4e 09 60 60 64 b5 c9 58 ba c9 ae eb 3a 4b 73 ef 28 52 41 cb 04 92 31 42 0f 99 32 12 43 7a 22 b7 28 a5 a5 77 30 92 d2 8e 3f 35 4e 80 1b b7 c5 62 d0 fd 85 eb 7c b9 40 2a 9f c6 b6 24 82 83 31 ad 26 03 bf 37 5a a0 81 b0 08 8b 6d a9 87 95 05 59 4c 8b 52 84 5f f2 45 a7 25 42 05 Data Ascii: &9ThN[r!;wKxo4xNX~9tWAJ0`;roa"=HN1E5Og1&<YFZL,v;u)G[<N``dX:Ks(RA1B2Cz"(w0?5Nb\|@*$1&7ZmYLR_E%B
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 68 cb 43 50 30 6a ab 31 b2 86 c2 50 c0 c9 ab 24 2b 94 0a b8 55 62 8e 0d 29 34 ad ec 6e 7e f8 db dd 2e 6e 44 9c 7a 71 f0 c5 81 03 0e 54 c5 93 7d 2d 6f e0 f9 6a 1b 37 19 db 36 cb b8 15 d8 e7 a6 38 6d 28 a1 4e e1 57 bc 13 6b 7b 0a 36 83 d0 0f 85 dc 98 ad a0 8d 57 e4 fc e8 fb f9 fa 37 a1 76 9b 3b 55 58 6b df e6 df 1f 51 b4 6b 81 44 68 3b 57 bd d5 cd 13 43 c3 6b a2 92 7c e9 ca 86 0f 8b e0 b3 d5 e6 c8 ea 1c a4 ae 84 5a d3 2d 18 d5 e6 40 51 34 2d 58 ab 81 6c 1c 47 7e 38 57 01 d7 2f b9 e7 dd 95 14 ce 44 1a 30 c3 c8 e8 30 34 c7 29 52 51 94 54 37 c7 9c 02 07 a8 08 28 a5 39 bd 13 a2 70 1b 0f a6 78 7a 3b 1d b9 26 76 e2 87 56 92 36 cf d0 41 c4 5a 87 2e f3 26 24 76 95 6d e2 57 08 29 51 c0 77 94 8f b0 ba 7b 6e 91 f5 d3 6d 41 43 69 f2 c9 99 d5 01 2b 36 0e 1c a9 89 f1 2b Data Ascii: hCP0j1P$+Ub)4n~.nDzqT}-oj768m(NWk{6W7v;UXkQkDh;WCk\|Z-@Q4-XlG~8W/D004)RQT7(9pxz;&vV6AZ.&$vmW)Qw{nmACi+6+
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 17 0f e5 12 72 69 2f 8e 0a f1 c0 a0 d9 9d f6 08 81 58 ee 20 71 e0 7c 54 c1 b2 9f aa f0 da bf 92 85 e3 a0 76 8d 30 bd 7c 5e 82 dc 46 ca b6 8d 94 c5 16 88 71 e5 86 08 5d 7b c0 58 c5 b6 62 0c b2 e4 56 a0 54 4a 52 dd 60 40 ef d6 bb bd 1d ef a8 49 f7 1a 55 71 71 71 1f a3 81 86 06 88 03 d1 80 04 71 f7 2c 5f 22 a1 a8 ae da f2 3c 2e 2e 3e 13 36 0b 07 d9 80 a2 69 f3 b6 f7 4a 55 c4 81 1b e2 57 1f 4f 9b 67 73 3b 33 28 c7 95 a0 c1 5b 68 11 f3 26 77 62 4f ea c5 11 27 c9 a9 e1 b9 ca 6c d1 36 a2 1c ff 1f 32 5b c0 e7 49 49 6a f1 bb f9 80 54 23 a5 44 72 11 37 f6 8d 30 35 61 83 46 d2 e0 9c 48 bf d7 32 3d 70 8b 2b 69 59 02 2e a3 b9 07 1d 65 72 38 fc 48 7d 4e f1 2c 49 61 5b 42 c8 39 df f8 d2 00 21 b7 65 aa 69 6b 91 61 0c c0 e1 15 4d cd a6 4a aa d2 5b 95 60 a4 f7 77 51 1a 52 Data Ascii: ri/X q\|Tv0\|^Fq]{XbVTJR`@IUqqqq,_"<..>6iJUWOgs;3([h&wbO'l62[IIjT#Dr705aFH2=p+iY.er8H}N,Ia[B9!eikaMJ[`wQR
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 11 94 ce da df b6 2f f9 61 25 58 a1 48 32 44 11 58 37 4a 10 b3 fb 62 8a f7 f1 f3 2f 54 c3 82 03 ed 31 df 15 40 d3 de f0 d5 3c c1 5b 17 a1 10 bf 52 24 28 6d 1a 81 23 7b 06 4a 43 83 1d 47 84 15 e8 44 bb 97 2d 66 9d b8 29 9b c9 52 3b a8 8b 88 10 7b 99 d1 02 16 b3 9a 88 97 18 3e b1 3e 17 6f 79 2b 23 5d 0b a4 01 76 ed 2c b7 64 ab f3 be 54 90 e6 b5 01 c2 e3 9f 11 b4 17 b0 19 f7 66 66 3d d4 6e d8 38 3e ee 5e 90 e4 00 26 ea 4e a1 06 06 b8 21 6e ee a0 13 aa 0e 98 f5 01 41 80 1c df 00 c4 21 53 fd f5 87 83 9d 2f 3c 13 2d 7e 47 13 20 10 1e e8 9d 02 1f 24 89 71 65 1a f9 f3 1c 3e 6c 63 7c a4 59 c5 9c 5b cd c8 47 a0 80 2a 9b 48 33 76 e0 a7 28 9c 08 ca 4b c4 d6 6d b3 a8 49 16 be ca 8d 94 24 48 bb ac 84 cf ea 61 3e bf be 96 1f 7a 83 00 b0 38 b6 24 bd 20 4d 8b 8d 71 12 06 Data Ascii: /a%XH2DX7Jb/T1@<[R$(m#{JCGD-f)R;{>>oy+#]v,dTff=n8>^&N!nA!S/<-~G $qe>lc\|Y[G*H3v(KmI$Ha>z8$ Mq
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: be c8 d4 b9 1b 33 82 86 2e 38 0a a2 43 42 be 16 ef c1 cb 62 4f 34 c0 c0 0a 09 25 96 d2 5e b3 65 90 00 8d aa 0b d6 b9 c1 a6 0e 75 1a 60 4b 25 a6 e6 40 e1 5b 12 67 af 36 3c f8 09 dd f9 62 56 13 4b 83 8b 5f b6 8e 18 bd 97 41 da a6 87 91 1f 8a 83 69 fd 62 45 9a 25 db 1e 30 50 17 67 64 30 2e 2f 6e 03 83 cd 2e da db 52 ba 8b 71 80 be 70 06 9f 4c 63 1a af 0f 37 95 25 21 43 27 b8 f9 8d c1 cf f4 13 51 0a c9 ca 21 de f7 d4 3f c6 f8 9d ea 22 d0 5d 38 a1 d7 85 7c dd 34 20 4b e2 16 8c 63 1b 38 1d 24 cf 52 92 39 81 25 58 06 36 2d 83 a7 3f e3 ee 23 44 22 61 42 bc cf a4 5c 05 2b 69 57 32 32 54 17 49 ae 99 9a 47 3a ac 35 54 c8 b6 5b 06 69 06 d4 49 05 7b e7 6f 2f 69 70 31 dc 2d 48 dc 8a 09 02 fc b6 be f5 e7 13 a2 f8 65 69 f1 e7 e5 18 e1 a0 24 c4 03 d8 d0 d6 71 68 3e 7d f4 Data Ascii: 3.8CBbO4%^eu`K%@[g6<bVK_AibE%0Pgd0./n.RqpLc7%!C'Q!?"]8\|4 Kc8$R9%X6-?#D"aB\+iW22TIG:5T[iI{o/ip1-Hei$qh>}
2024-10-24 22:50:42 UTC	1378	IN	Data Raw: 1a f3 45 e8 44 28 e8 3d d4 ce 81 43 4e 58 4a 70 3a 15 af f9 07 83 c6 53 61 11 52 2c 20 fa b0 99 b5 44 39 44 cf 95 a7 43 2b 6e b0 bc 6c ec a4 3a 46 9e 04 72 69 1f 2f a0 24 91 56 1f b6 59 9a 27 66 4a 5b f0 37 36 80 9e 22 9c e6 0c d4 6e 39 d6 fb 7b e3 a0 61 e9 81 04 59 96 92 63 49 49 ea 46 f2 6e 15 ce 52 01 08 7b 94 27 67 7c e4 37 c4 da 3e cf 15 00 0c 2a 8a 6c 1d a5 b7 72 ec c5 12 4c 3d 6c a3 1b 06 1f 94 6d 71 d8 96 a7 93 ed f8 5b d5 63 f4 c7 41 1e a6 db e2 a0 49 3e a9 47 be 4f 6d 70 9d bd da 72 f6 25 28 1b 33 3f 18 b8 b1 08 c1 18 38 c1 25 8a bd c0 9c 83 9f 33 06 63 3d 9c 7c 6c 9d 3b 03 78 20 21 c9 36 d3 d6 89 38 13 f7 44 79 c9 6b 61 69 65 03 59 57 d8 0b d8 03 27 5c cf e5 c6 15 be 29 1b 6c bd 79 dc 2a a8 05 d4 ca 41 67 a0 2d 5a 78 11 67 26 b6 c6 5c 95 a2 26 Data Ascii: ED(=CNXJp:SaR, D9DC+nl:Fri/$VY'fJ[76"n9{aYcIIFnR{'g\|7>lrL=lmq[cAI>GOmpr%(3?8%3c=\|l;x !68DykaieYW'\)lyAg-Zxg&\&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49960	172.217.18.118	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:50:41 UTC	1093	OUT	GET /jCln_XT8Ruzp7loH1S6yM-ZzzpLP1kZ3CCdXVEo0tP2w5HNtWQds6lo6aLxLIjiW_X8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:50:41 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4276 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:43:49 GMT Expires: Fri, 25 Oct 2024 21:43:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 4012 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:50:41 UTC	845	IN	Data Raw: 52 49 46 46 ac 10 00 00 57 45 42 50 56 50 38 4c 9f 10 00 00 2f ff c0 3f 00 26 cb ef ff 2f 73 dc fc a5 61 58 30 63 b9 0d 33 33 33 33 33 33 33 33 33 33 83 f3 fb fe 9e c7 de e7 f7 7b ca f0 94 b9 0d 27 3e 95 db 95 b3 8a a3 91 af 65 f0 b5 b4 21 77 8f c5 47 0a e7 1f a8 47 76 ac f5 31 c7 c2 6c 99 f7 b4 39 32 7a 23 d9 db d3 14 c2 30 45 6b ca ed 9e ca 3d 79 73 ec 1e cb ed 4c ca 5c 87 f3 28 e4 82 15 67 cb 4c 13 2b a7 f4 1a 69 25 3b 73 de 70 3c ca 29 67 9c e6 d6 53 b2 d2 b7 cc 0c 23 b9 11 33 e7 18 2b 92 05 49 b2 69 5b 7d 6d db b6 6d db b6 6d db 7e b6 f5 65 db bc b6 6d db b6 14 b6 6d a4 ec 3f 6d 73 f4 0c fd 87 04 49 72 db 66 96 54 a2 4d 52 81 08 87 03 70 ef 40 4d 64 5f d7 f2 9f 6b f9 cf 35 e6 10 a8 81 9f 32 3e d2 78 70 cb 8d 56 05 89 94 1f aa 11 aa 01 aa 16 aa 06 02 Data Ascii: RIFFWEBPVP8L/?&/saX0c3333333333{'>e!wGGv1l92z#0Ek=ysL\(gL+i%;sp<)gS#3+Ii[}mmm~emm?msIrfTMRp@Md_k52>xpV
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: a2 cb 03 45 c7 58 b6 76 88 bc 00 2b 2a c5 53 28 5c 64 35 f0 0d 47 41 48 47 e2 23 4b 93 09 01 18 b1 7b 57 10 55 60 8a f4 91 c1 83 53 69 a1 8a 0f 0d b5 5b 7a 53 31 d1 d1 9d ea e6 59 eb b7 7c f4 53 3a 08 6d be fa 73 d4 45 f7 57 42 d3 4a 66 89 c9 59 5c ce 0a 51 80 6d 13 41 ae fe 1d 07 97 c8 72 03 a3 0d 9c 7a 7d dc 42 9e 82 36 6c db 02 8f 74 22 6c 0f 05 09 55 1d 14 28 68 ad e6 67 6f df fb df c7 9b bc d3 1f 7e 14 21 a7 e1 ef 7b 87 ed a9 e6 89 b0 39 e8 c0 83 53 35 f2 3c 2c bf de f6 7a 59 1c c2 8d 49 0d 86 f9 34 bb 1f a7 dc 7c 2a 59 51 ce f5 e3 01 71 82 d9 db 68 78 08 16 94 32 12 ef a5 a4 76 f9 b8 0d dd bc a6 dc 78 18 4c bd e7 5d 87 a4 2a f7 4a cc 10 2c c6 fd b6 14 e2 f7 c9 ff 31 a9 4b e0 47 e3 9f c5 1d 8c 1d de 6a 18 a4 a1 1a 97 4a 9e 85 07 bf ba 7e dc 3b 7f d4 Data Ascii: EXv+S(\d5GAHG#K{WU`Si[zS1Y\|S:msEWBJfY\QmArz}B6lt"lU(hgo~!{9S5<,zYI4\|YQqhx2vxL]*J,1KGjJ~;
2024-10-24 22:50:41 UTC	1378	IN	Data Raw: 37 b9 04 e2 30 4b f5 b9 9e d2 8d 02 b4 74 bf 63 4d 3e b0 e6 3b 80 17 80 09 81 f4 12 7d 1a de 6a 61 42 fa fa 35 80 6f 9d 3a 1f 1f 98 0f fc 71 d1 0c 48 42 b8 34 b9 57 04 a4 0e 5b b7 93 d9 70 93 31 81 9c 90 42 66 b4 f6 1b 40 22 ee 25 4d aa 85 d6 85 cf 41 a1 e3 19 36 5e 60 7b 06 f8 60 e0 d3 75 15 69 fa 58 d5 a4 e3 08 98 27 9b cc e9 8c c8 0d 19 33 c8 7f 9e 07 81 52 e3 a5 c8 be 5b 41 7e 17 47 9a ba 5b cc 4c 7e 60 20 1b 01 e2 7e 07 d9 6a 5f 83 14 f5 9a 3a ac 3d 79 b8 b6 9d 49 fd 9a ef 15 c1 0f 22 ee 45 bd 10 32 e3 93 6d af 91 6a 2b e3 e1 66 ab 2d f9 b8 e1 5b 76 2c 4c 87 38 80 60 3a 13 bb f0 71 c9 36 ab f9 70 b2 25 52 ba 9b 96 a5 a4 43 1c 90 70 3a b3 ec 2c db 98 d1 be 87 f0 84 43 f6 35 30 a8 bc 77 f1 84 77 e5 b1 88 fa 1e 9e f0 1e 95 89 d1 a2 32 84 4c 90 7b 22 57 Data Ascii: 70KtcM>;}jaB5o:qHB4W[p1Bf@"%MA6^`{`uiX'3R[A~G[L~` ~j_:=yI"E2mj+f-[v,L8`:q6p%RCp:,C50ww2L{"W
2024-10-24 22:50:41 UTC	675	IN	Data Raw: fc 24 45 ff 8b 38 c1 3c c0 a5 34 93 94 95 e5 24 ee 02 e3 24 4b 0f 76 be cc 07 d1 1d 6f c3 2e b8 76 4d 7a 9e 63 3e 5c 27 b6 a2 6e 7c d5 f0 1d 5b 36 e2 6e 08 50 c7 97 09 04 f4 57 3a dc 99 45 64 ff 4d c7 27 e2 62 e5 96 d8 51 8b f5 16 23 78 79 df 26 f9 21 7f 56 db 47 26 e2 ae 08 6f bd 38 21 2d 66 64 22 d1 08 df 58 9c bf 45 0b bd 4d 96 43 94 75 ea 3f 02 26 e0 c8 92 2b 36 15 13 83 d7 2f 39 88 bb e3 36 03 55 4f c8 f5 c8 f7 7c 9e 45 54 f7 2e fb e1 79 d5 42 bf ed f0 76 bd 51 38 ee 92 cf 6b 4d c5 c4 3f 43 ac 85 66 dd 88 66 13 53 e3 53 dc 25 ce b1 c7 2e 60 fc e9 ab 89 76 4c 74 cd aa 57 eb b0 f2 64 db 34 3b 1f c5 c5 dd e2 5a 20 04 e3 6e 89 e3 53 dc 2d a6 02 00 01 83 d6 ce 05 44 f2 d8 8f 34 15 13 9b 81 28 79 82 15 77 8d 1f 3b 2d 66 64 6f 3f ba d4 e3 ae 61 c1 eb b0 fd Data Ascii: $E8<4$$Kvo.vMzc>\'n\|[6nPW:EdM'bQ#xy&!VG&o8!-fd"XEMCu?&+6/96UO\|ET.yBvQ8kM?CffSS%.`vLtWd4;Z nS-D4(yw;-fdo?a

Target ID:	0
Start time:	18:49:53
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:49:55
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1960,i,5111452318922476772,17145274851938049569,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:49:58
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.spectrl.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: chromecache_144.2.dr, chromecache_293.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},lk:function(){e=zb()},ud:function(){d()}}};var gc=ma(["data-gtm-yt-inspected-"]),pD=["www.youtube.com","www.youtube-nocookie.com"],qD,rD=!1; equals www.youtube.com (Youtube)
Source: chromecache_293.2.dr	String found in binary or memory: N.getElementsByTagName("iframe"),ia=M.length,ea=0;ea<ia;ea++)if(!v&&c(M[ea],I.Je)){fK("https://www.youtube.com/iframe_api");v=!0;break}})}}else F(u.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,v=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_285.2.dr, chromecache_295.2.dr	String found in binary or memory: Pf=w(["https://sandbox.google.com/tools/feedback/"]),Qf=w(["https://www.google.cn/tools/feedback/"]),Rf=w(["https://help.youtube.com/tools/feedback/"]),Sf=w(["https://asx-frontend-staging.corp.google.com/inapp/"]),Tf=w(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Uf=w(["https://localhost.corp.google.com/inapp/"]),Vf=w(["https://localhost.proxy.googlers.com/inapp/"]),Wf=U(yf),Xf=[U(zf),U(Af)],Yf=[U(Bf),U(Cf),U(Df),U(Ef),U(Ff),U(Gf),U(Hf),U(If),U(Jf),U(Kf)],Zf=[U(Lf),U(Mf)],$f= equals www.youtube.com (Youtube)
Source: chromecache_286.2.dr, chromecache_180.2.dr	String found in binary or memory: return b}nD.F="internal.enableAutoEventOnTimer";var gc=ma(["data-gtm-yt-inspected-"]),pD=["www.youtube.com","www.youtube-nocookie.com"],qD,rD=!1; equals www.youtube.com (Youtube)
Source: chromecache_335.2.dr	String found in binary or memory: var PPb=function(a){return _.Da(a===null?"null":a===void 0?"undefined":a)},QPb=function(a){const b=new _.io(a);return b.W==="www.youtube.com"&&b.H==="/watch"?(a=_.wo(b,"v"),`https://www.youtube.com/embed/${encodeURIComponent(a)}`):a},RPb=function(a,b){a.H.size===0&&a.O.addEventListener("message",d=>{if(/\.google\.com$/.test(d.origin)&&d.data){var e=a.H.get(d.data.type);e&&e.Bi().forEach(f=>{f.call(d)})}});var c=a.H.get("CLOSE_DIALOG");c?c.add(b):(c=new _.XL,c.add(b),a.H.set("CLOSE_DIALOG",c))},SPb= equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.spectrl.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: play-lh.googleusercontent.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.spectrl.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Windows Analysis Report
http://www.spectrl.com/